@warlock.js/web 5.1.0 → 5.2.0

package/esm/server/render-page.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"render-page.mjs","names":[],"sources":["../../../../../../../web/src/server/render-page.ts"],"sourcesContent":["import { createElement, type ComponentType, type ReactNode } from \"react\";\nimport DefaultApp from \"../components/default-app\";\nimport {\n  DocumentContext,\n  escapePayload,\n  PAYLOAD_SCRIPT_ID,\n  type DocumentContextValue,\n} from \"../components/document-context\";\nimport type { SharedContext } from \"../index\";\nimport { buildHydrationPayload } from \"./build-hydration-payload\";\nimport type { BufferedCookie } from \"./buffered-response\";\nimport {\n  buildErrorRecord,\n  designateBoundary,\n  executePageRequest,\n  type ExecutePageRequestOptions,\n  type PageDataBundle,\n  type PageErrorRecord,\n  type PageLevelName,\n  type PageRouteEntry,\n  type PageRouteMatch,\n  type PageTripleModule,\n  type PipelineRequest,\n  type PipelineResponse,\n} from \"./execute-page-request\";\n\nexport { escapePayload, PAYLOAD_SCRIPT_ID };\n\n/**\n * Pipeline stages 9–10: RENDER the page tree from the\n * data bundle stages 1–8 produced, then return finalized { html, status,\n * headers, cookies }. Stage 10 happens at the CALL SITE in two halves —\n * 10a the caller applies status + headers (the single live-response write,\n * after render, before anything flushes), 10b it flushes\n * the document. Nothing in this module writes the live response. It never\n * re-runs any earlier stage — `renderPage` calls `executePageRequest` and\n * everything here consumes its bundle as-is.\n *\n * `renderPage` is deliberately double-duty (dx-differentiators.md §3): it is\n * the production orchestrator AND the test helper. Because a loader IS a\n * controller, `renderPage(\"products.details\", { params: { id: \"42\" } })`\n * returns `{ html, status, headers, data }` in one call — asserting a page's\n * data and its response headers is a unit test, no browser, no server boot.\n */\n\n// ---------------------------------------------------------------------------\n// The routes seam (same pattern as connectPageContext: boot wiring, once)\n// ---------------------------------------------------------------------------\n\nexport type PageRoutesRegistry = {\n  routes: readonly PageRouteEntry[];\n  /** Same contract as ExecutePageRequestOptions[\"createHttp\"]. */\n  createHttp: ExecutePageRequestOptions[\"createHttp\"];\n};\n\nlet pageRoutesRegistry: PageRoutesRegistry | undefined;\n\n/**\n * Boot-time wiring so `renderPage(name, options)` can resolve a route NAME\n * without each call site carrying the manifest. Returns the previous registry\n * so tests can restore it. A per-call `routes`/`createHttp` override wins.\n */\nexport function connectPageRoutes(\n  registry: PageRoutesRegistry | undefined,\n): PageRoutesRegistry | undefined {\n  const previous = pageRoutesRegistry;\n  pageRoutesRegistry = registry;\n  return previous;\n}\n\n// ---------------------------------------------------------------------------\n// renderPage surface\n// ---------------------------------------------------------------------------\n\nexport type RenderPageOptions = {\n  params?: Record<string, string>;\n  query?: Record<string, string>;\n  /**\n   * Impersonation for tests: assigned to `request.user` right after the\n   * request pair is constructed — `user` is a plain public property on core's\n   * Request (core/src/http/request.ts:92) and this is exactly the write auth\n   * middleware would have performed.\n   */\n  as?: unknown;\n  /** Per-call overrides of the connected registry (tests, mostly). */\n  routes?: readonly PageRouteEntry[];\n  createHttp?: ExecutePageRequestOptions[\"createHttp\"];\n};\n\n/**\n * `renderPageRequest` takes the URL itself, so `params`/`query` (the\n * name-based sugar buildUrl consumes) have no meaning here — everything else\n * is the same seam.\n */\nexport type RenderPageRequestOptions = Omit<RenderPageOptions, \"params\" | \"query\">;\n\nexport type RenderedPage = {\n  /** The full document (\"\" when the pipeline short-circuited before render). */\n  html: string;\n  status: number;\n  /** Committed response headers, lowercased key → value. */\n  headers: Record<string, string>;\n  /**\n   * Committed cookies in commit order, attribute-faithful: each entry carries\n   * the loader's raw value (pre-serialization) AND its options\n   * (`httpOnly`/`secure`/`sameSite`/`path`/`expires`/…). Never flattened to a\n   * name→value map — a map cannot express the attributes, and a Set-Cookie\n   * built without them is a security defect, not a convenience.\n   */\n  cookies: BufferedCookie[];\n  /**\n   * The PAGE loader's data — `data.product.name` reads as the dx story\n   * writes it. `unknown`: the pipeline never checks a loader's return shape.\n   */\n  data: unknown;\n  /**\n   * The full stages-1–8 bundle, for assertions beyond the page's own data.\n   * Undefined ONLY on `renderPageRequest`'s no-match path: no route matched,\n   * so no pipeline ran and there is no bundle — the 404 answer stands alone.\n   * `renderPage` always carries one (its no-match throws instead).\n   */\n  bundle: PageDataBundle | undefined;\n};\n\nfunction requireRegistry(\n  options: Pick<RenderPageOptions, \"routes\" | \"createHttp\">,\n): PageRoutesRegistry {\n  const routes = options.routes ?? pageRoutesRegistry?.routes;\n  const createHttp = options.createHttp ?? pageRoutesRegistry?.createHttp;\n\n  if (!routes || !createHttp) {\n    throw new Error(\n      \"renderPage()/renderPageRequest() has no route registry connected \" +\n        \"(web/src/server/render-page.ts). Both resolve against the page \" +\n        \"manifest, which the server bootstrap owns. Fix: \" +\n        \"call connectPageRoutes({ routes, createHttp }) at boot (tests: in \" +\n        \"beforeAll), or pass { routes, createHttp } to this call.\",\n    );\n  }\n\n  return { routes, createHttp };\n}\n\nfunction buildUrl(\n  entry: PageRouteEntry,\n  params: Record<string, string>,\n  query: Record<string, string>,\n): string {\n  const path = entry.path\n    .split(\"/\")\n    .map(segment => {\n      if (!segment.startsWith(\":\")) return segment;\n\n      const name = segment.slice(1);\n      const value = params[name];\n\n      if (value === undefined) {\n        throw new Error(\n          `renderPage(\"${entry.name}\"): route path \"${entry.path}\" needs ` +\n            `param \"${name}\" and the call did not provide it ` +\n            \"(web/src/server/render-page.ts). Fix: pass it in \" +\n            `\\`params: { ${name}: … }\\`.`,\n        );\n      }\n\n      return encodeURIComponent(value);\n    })\n    .join(\"/\");\n\n  const queryString = new URLSearchParams(query).toString();\n\n  return queryString ? `${path}?${queryString}` : path;\n}\n\n// ---------------------------------------------------------------------------\n// Stage 9 — RENDER\n// ---------------------------------------------------------------------------\n\n/**\n * The framework-owned terminal boundary (P1 §4: designation falls back to\n * `app` even when no level exports one — \"the framework owns a root\n * boundary\"). Deliberately generic: the error itself is server knowledge and\n * never serialized into the document.\n */\nfunction FrameworkRootBoundary(): ReactNode {\n  return createElement(\"main\", { role: \"alert\" }, \"Something went wrong.\");\n}\n\ntype LevelProps = {\n  data: unknown;\n  shared: Readonly<SharedContext> | undefined;\n  children?: ReactNode;\n};\n\nconst DATA_KEYS: Record<PageLevelName, \"appData\" | \"layoutData\" | \"pageData\"> = {\n  app: \"appData\",\n  layout: \"layoutData\",\n  page: \"pageData\",\n};\n\n/**\n * Compose the tree root→leaf: `<App><Layout><Page/></Layout></App>`, each\n * level receiving ITS OWN loader data and the same sealed `shared` — the\n * exact props the M1 contract declares (web/src/props.ts) and never\n * request/response (the component also renders on a machine where neither\n * exists, props.ts:19-22).\n *\n * A level with no default export contributes no DOM and passes children\n * through — that is `layout.tsx` omitting its default export to be a guard\n * with no DOM.\n */\nfunction buildPageElement(\n  triple: Record<PageLevelName, PageTripleModule>,\n  bundle: PageDataBundle,\n): ReactNode {\n  return wrapRootward(triple, bundle, \"page\", buildLeaf(triple.page, bundle, \"page\"));\n}\n\n/**\n * The error path renders the DESIGNATED boundary in place of the level it\n * covers, still wrapped by every level rootward of it — a page-level throw\n * keeps its App and Layout chrome, whose data survived the settle rules\n * (P1 §4: fulfilled sibling data stays in the bundle).\n *\n * `record` is explicit rather than read from `bundle.error` — a render-time\n * throw (`finishRender`'s stage 9 escalation loop) designates a NEW boundary on the fly that the stage 1-8 bundle never saw.\n */\nfunction buildBoundaryElement(\n  triple: Record<PageLevelName, PageTripleModule>,\n  bundle: PageDataBundle,\n  record: PageErrorRecord,\n): ReactNode {\n  const { boundary, error } = record;\n  const Boundary = triple[boundary.boundaryLevel].ErrorBoundary as\n    | ((props: { error: unknown }) => ReactNode)\n    | undefined;\n\n  const element = Boundary\n    ? createElement(Boundary, { error })\n    : createElement(FrameworkRootBoundary, {});\n\n  const wrapped = wrapRootward(triple, bundle, boundary.boundaryLevel, element);\n\n  // \"App\" has no level rootward of it, so `wrapRootward` returns `wrapped`\n  // unwrapped when the boundary covers the app level itself — but the\n  // pipeline always emits a complete document, so the\n  // framework default supplies the shell here even though the app's own\n  // (broken) root is what's being bypassed.\n  return boundary.boundaryLevel === \"app\"\n    ? createElement(DefaultApp, { children: wrapped })\n    : wrapped;\n}\n\nfunction buildLeaf(\n  module: PageTripleModule,\n  bundle: PageDataBundle,\n  level: PageLevelName,\n): ReactNode {\n  const Component = module.default as ((props: LevelProps) => ReactNode) | undefined;\n\n  if (!Component) return null;\n\n  return createElement(Component as ComponentType<LevelProps>, {\n    data: bundle[DATA_KEYS[level]],\n    shared: bundle.shared,\n  });\n}\n\nfunction wrapRootward(\n  triple: Record<PageLevelName, PageTripleModule>,\n  bundle: PageDataBundle,\n  from: PageLevelName,\n  leaf: ReactNode,\n): ReactNode {\n  const wrappers: PageLevelName[] = from === \"page\" ? [\"layout\", \"app\"] : from === \"layout\" ? [\"app\"] : [];\n\n  let element = leaf;\n\n  for (const level of wrappers) {\n    const Component = triple[level].default as ((props: LevelProps) => ReactNode) | undefined;\n\n    if (!Component) {\n      // \"App\" is the root: no App export means no custom document, but the\n      // pipeline always emits a complete one — the\n      // framework default App supplies it. Layout has no such fallback: an\n      // omitted layout default export stays a no-DOM passthrough,\n      // unchanged from before.\n      if (level === \"app\") {\n        element = createElement(DefaultApp, { children: element });\n      }\n\n      continue;\n    }\n\n    element = createElement(Component as ComponentType<LevelProps>, {\n      data: bundle[DATA_KEYS[level]],\n      shared: bundle.shared,\n      children: element,\n    });\n  }\n\n  return element;\n}\n\n// ---------------------------------------------------------------------------\n// Document assembly — stage 10 (10a apply + 10b flush) lives at the call site\n// ---------------------------------------------------------------------------\n\n/**\n * The root (App or the framework default) now ALWAYS renders a complete\n * `<html>…</html>` document itself — `<Head/>`/\n * `<Scripts/>` read the metadata/payload from `DocumentContext` (provided\n * around the element in `finishRender`, below) and emit real elements.\n * There is nothing left for this stage to assemble by string surgery; it\n * only prepends the doctype `renderToString` never includes.\n */\nfunction emitDocument(body: string): string {\n  return \"<!DOCTYPE html>\" + body;\n}\n\n// ---------------------------------------------------------------------------\n// The shared tail (stages 9–10) — both orchestrators end here\n// ---------------------------------------------------------------------------\n\n/**\n * The real request/response pair `capturingCreateHttp` captured for this\n * call. `finishRender` itself no longer takes this (D1: the short-circuit\n * status now lives on `bundle.shortCircuit`/`bundle.commit`) — it is used at\n * the two orchestrator call sites for the `as` impersonation write\n * (`state.captured.request.user = as`, below) and to read the document\n * slots (`documentSlotsFrom`, below).\n */\ntype CapturedHttp = {\n  request: PipelineRequest;\n  response: PipelineResponse;\n};\n\n/**\n * Wrap the caller's createHttp to capture the real pair (for the document\n * slots, `documentSlotsFrom` below), the matched entry (the only place a\n * URL-based caller learns which triple to render), and to apply `as` —\n * `user` is a plain public property on core's Request\n * (core/src/http/request.ts:92), exactly the write auth middleware performs.\n */\nfunction capturingCreateHttp(\n  registry: PageRoutesRegistry,\n  as: unknown,\n): {\n  state: { captured?: CapturedHttp; match?: PageRouteMatch };\n  createHttp: ExecutePageRequestOptions[\"createHttp\"];\n} {\n  const state: { captured?: CapturedHttp; match?: PageRouteMatch } = {};\n\n  return {\n    state,\n    createHttp(match) {\n      state.match = match;\n      state.captured = registry.createHttp(match);\n\n      if (as !== undefined) state.captured.request.user = as;\n\n      return state.captured;\n    },\n  };\n}\n\n/**\n * The two request-derived document slots (`nonce`/`lang` on\n * `DocumentContextValue`), extracted at the orchestrator call sites\n * because `finishRender` no longer carries `captured` (D1). `dir` is not\n * here: core's Request has no dir-like field (checked\n * core/src/http/request.ts — only `nonce` at :177 and `locale` at :343\n * exist) — an app supplies `dir` via its own convention.\n */\ntype DocumentSlots = {\n  nonce?: string;\n  lang?: string;\n};\n\n/**\n * Structural read of the two core `Request` fields the slots need. Neither\n * `nonce` nor `locale` is declared on `PipelineRequest`/`WebRequest` (the\n * loader-facing facade only declares `validated`/`input`/`user`,\n * context.ts:30-68) — a narrow typed intersection at the one call site that\n * needs it, the same pattern `execute-page-request.ts` uses for its own\n * `(response as PipelineResponse & { statusCode?: number })` read\n * (execute-page-request.ts:517).\n */\nfunction documentSlotsFrom(captured: CapturedHttp | undefined): DocumentSlots {\n  const request = captured?.request as (PipelineRequest & { nonce?: string; locale?: string }) | undefined;\n\n  return { nonce: request?.nonce, lang: request?.locale };\n}\n\nasync function finishRender(\n  triple: PageRouteEntry[\"triple\"],\n  bundle: PageDataBundle,\n  documentSlots: DocumentSlots,\n): Promise<RenderedPage> {\n  const headers: Record<string, string> = {};\n\n  for (const header of bundle.commit?.headers ?? []) {\n    headers[header.key.toLowerCase()] = header.value;\n  }\n\n  // The commit already deduplicated per name and ordered root→leaf\n  // (execute-page-request.ts settle/commit) — pass it through untransformed so\n  // every attribute survives to the caller's Set-Cookie.\n  const cookies: BufferedCookie[] = bundle.commit?.cookies ?? [];\n\n  // Short-circuit paths emit no document: the status IS the answer\n  // (redirect/notFound/guard/422 — P1 §4), nothing renders to describe.\n  if (bundle.shortCircuit) {\n    const status =\n      bundle.shortCircuit.stage === \"validation\"\n        ? bundle.shortCircuit.status\n        : bundle.shortCircuit.stage === \"loaders\"\n          ? bundle.shortCircuit.statusCode\n          // D1: the middleware variant now carries its own statusCode,\n          // captured at stage 3 where the pipeline legitimately touches the\n          // live response (execute-page-request.ts:514-518) — no live read here.\n          : (bundle.shortCircuit.statusCode ?? 200);\n\n    return { html: \"\", status, headers, cookies, data: bundle.pageData, bundle };\n  }\n\n  // The framework's closed-by-default answer (README rule 8): every document\n  // is `Cache-Control: private` unless a loader's committed headers already\n  // answered for the key. Map-only — `finishRender` never writes the live\n  // response; the caller applies the returned headers.\n  if (headers[\"cache-control\"] === undefined) {\n    headers[\"cache-control\"] = \"private\";\n  }\n\n  // ── stage 9 · RENDER ─────────────────────────────────────────────────────\n  // Lazy import: react-dom is a peer used only on this path, so merely\n  // loading the server barrel never requires it.\n  const { renderToString } = await import(\"react-dom/server\");\n\n  // JSON.stringify omits object properties whose value is undefined. Loader\n  // `<Head/>`/`<Scripts/>` read this context — metadata and the payload are\n  // both already final by this point (stages 1-8 are done), so there is\n  // nothing left for the root to await.\n  //\n  // The payload comes from `buildHydrationPayload` rather than being assembled\n  // here, so that this document and the `_loader` route hand the browser the\n  // SAME object. See that module for why the two must not drift.\n  const documentValue: DocumentContextValue = {\n    metadata: bundle.metadata,\n    payload: buildHydrationPayload(bundle),\n    nonce: documentSlots.nonce,\n    lang: documentSlots.lang,\n  };\n\n  const renderWithContext = (element: ReactNode): string =>\n    renderToString(createElement(DocumentContext.Provider, { value: documentValue, children: element }));\n\n  // A boundary that throws while rendering escalates to\n  // the next enclosing boundary rootward; if none survives, the framework's\n  // last-resort terminal renders. `currentError` starts as whatever stage\n  // 1-8 already designated (`bundle.error`, undefined for a normal page\n  // render) and is replaced by each escalation — `bundle.error` itself is\n  // never mutated, staying a truthful stage 1-8 record.\n  let currentError = bundle.error;\n  let renderTimeThrow = false;\n  let body: string;\n\n  for (;;) {\n    try {\n      const element = currentError\n        ? buildBoundaryElement(triple, bundle, currentError)\n        : buildPageElement(triple, bundle);\n\n      body = renderWithContext(element);\n      break;\n    } catch (thrown) {\n      renderTimeThrow = true;\n\n      if (currentError?.boundary.boundaryLevel === \"app\") {\n        // The floor: the app-level boundary's own render just threw, so\n        // there is nothing rootward of `app` to escalate to (§2's \"none\n        // survives\"). Render the framework's trivial boundary directly —\n        // bypassing the app's ErrorBoundary/App component, since that is\n        // what just failed — wrapped in DefaultApp so the response is still\n        // a complete `<html>` document (default-app.tsx:22-46) rather than\n        // a bare `<main>` fragment.\n        body = renderWithContext(createElement(DefaultApp, { children: createElement(FrameworkRootBoundary, {}) }));\n        break;\n      }\n\n      // Escalate from the level rootward of whatever just threw — searching\n      // from the SAME level would re-select the boundary that just failed.\n      // A throw not yet attributable to a level (a normal page render, no\n      // prior designation) starts the search at `page`.\n      const throwingLevel: PageLevelName =\n        currentError?.boundary.boundaryLevel === \"layout\" ? \"app\" : currentError ? \"layout\" : \"page\";\n\n      currentError = buildErrorRecord(thrown, designateBoundary(throwingLevel, triple));\n    }\n  }\n\n  // Status is chosen after render — the last thing that can change the\n  // outcome — and RETURNED, never applied: `finishRender` writes the live\n  // response zero times (and now zero live response READS either — D1 deleted the last one). The caller applies\n  // status + headers at one site and flushes immediately after (stage\n  // 10a/10b). A render-time throw follows the same status rule as a\n  // pre-render one: a NESTED boundary catch\n  // (page/layout) keeps the committed status; the app boundary or the\n  // framework terminal forces 500. Without a render-time throw, the\n  // pre-render designation already carries this rule — P1's commit forces\n  // 500 only when it designated `app` (execute-page-request.ts:625-637).\n  const status = renderTimeThrow\n    ? currentError!.boundary.boundaryLevel === \"app\"\n      ? 500\n      : (bundle.commit?.statusCode ?? 200)\n    : bundle.error\n      ? (bundle.commit?.statusCode ?? 500)\n      : (bundle.commit?.statusCode ?? 200);\n\n  const html = emitDocument(body);\n\n  return { html, status, headers, cookies, data: bundle.pageData, bundle };\n}\n\n// ---------------------------------------------------------------------------\n// The orchestrators\n// ---------------------------------------------------------------------------\n\nexport async function renderPage(\n  routeName: string,\n  options: RenderPageOptions = {},\n): Promise<RenderedPage> {\n  const registry = requireRegistry(options);\n  const entry = registry.routes.find(candidate => candidate.name === routeName);\n\n  if (!entry) {\n    const known = registry.routes.map(candidate => `\"${candidate.name}\"`).join(\", \");\n\n    throw new Error(\n      `renderPage(\"${routeName}\"): no route with that name ` +\n        `(web/src/server/render-page.ts). Known route names: ${known}. ` +\n        \"Fix: use a name from the manifest, or connect the manifest that \" +\n        \"declares this one.\",\n    );\n  }\n\n  const url = buildUrl(entry, options.params ?? {}, options.query ?? {});\n  const { state, createHttp } = capturingCreateHttp(registry, options.as);\n\n  const rendered = await executePageRequest({\n    url,\n    routes: registry.routes,\n    createHttp,\n    finish: bundle => finishRender(entry.triple, bundle, documentSlotsFrom(state.captured)),\n  });\n\n  if (!rendered) {\n    throw new Error(\n      `renderPage(\"${routeName}\"): the built URL \"${url}\" did not match ` +\n        \"stage 1 (web/src/server/render-page.ts). The name resolved but the \" +\n        \"matcher disagreed — that is a manifest bug, not a caller bug.\",\n    );\n  }\n\n  return rendered;\n}\n\n/**\n * The URL-based sibling of `renderPage` — the production render surface: a\n * real HTTP server has a URL, not a route name. The url goes STRAIGHT to\n * executePageRequest's stage-1 matcher (no buildUrl), then the same shared\n * tail renders and emits.\n *\n * No-match here is NOT the manifest bug renderPage throws on: an arbitrary\n * URL matching no route is a legitimate 404, and a server must ANSWER it —\n * `{ html: \"\", status: 404 }` with an undefined `bundle` (see RenderedPage).\n */\nexport async function renderPageRequest(\n  url: string,\n  options: RenderPageRequestOptions = {},\n): Promise<RenderedPage> {\n  const registry = requireRegistry(options);\n  const { state, createHttp } = capturingCreateHttp(registry, options.as);\n\n  const rendered = await executePageRequest({\n    url,\n    routes: registry.routes,\n    createHttp,\n    finish: bundle => finishRender(state.match!.entry.triple, bundle, documentSlotsFrom(state.captured)),\n  });\n\n  if (!rendered) {\n    return { html: \"\", status: 404, headers: {}, cookies: [], data: undefined, bundle: undefined };\n  }\n\n  // executePageRequest only produces a bundle after createHttp ran for the\n  // match, so the captured entry is present whenever the bundle is.\n  return rendered;\n}\n"],"mappings":";;;;;;;;AAuDA,IAAI;;;;;;AAOJ,SAAgB,kBACd,UACgC;CAChC,MAAM,WAAW;CACjB,qBAAqB;CACrB,OAAO;AACT;AAwDA,SAAS,gBACP,SACoB;CACpB,MAAM,SAAS,QAAQ,UAAU,oBAAoB;CACrD,MAAM,aAAa,QAAQ,cAAc,oBAAoB;CAE7D,IAAI,CAAC,UAAU,CAAC,YACd,MAAM,IAAI,MACR,4SAKF;CAGF,OAAO;EAAE;EAAQ;CAAW;AAC9B;AAEA,SAAS,SACP,OACA,QACA,OACQ;CACR,MAAM,OAAO,MAAM,KAChB,MAAM,GAAG,CAAC,CACV,KAAI,YAAW;EACd,IAAI,CAAC,QAAQ,WAAW,GAAG,GAAG,OAAO;EAErC,MAAM,OAAO,QAAQ,MAAM,CAAC;EAC5B,MAAM,QAAQ,OAAO;EAErB,IAAI,UAAU,QACZ,MAAM,IAAI,MACR,eAAe,MAAM,KAAK,kBAAkB,MAAM,KAAK,iBAC3C,KAAK,iGAEA,KAAK,SACxB;EAGF,OAAO,mBAAmB,KAAK;CACjC,CAAC,CAAC,CACD,KAAK,GAAG;CAEX,MAAM,cAAc,IAAI,gBAAgB,KAAK,CAAC,CAAC,SAAS;CAExD,OAAO,cAAc,GAAG,KAAK,GAAG,gBAAgB;AAClD;;;;;;;AAYA,SAAS,wBAAmC;CAC1C,OAAO,cAAc,QAAQ,EAAE,MAAM,QAAQ,GAAG,uBAAuB;AACzE;AAQA,MAAM,YAA0E;CAC9E,KAAK;CACL,QAAQ;CACR,MAAM;AACR;;;;;;;;;;;;AAaA,SAAS,iBACP,QACA,QACW;CACX,OAAO,aAAa,QAAQ,QAAQ,QAAQ,UAAU,OAAO,MAAM,QAAQ,MAAM,CAAC;AACpF;;;;;;;;;;AAWA,SAAS,qBACP,QACA,QACA,QACW;CACX,MAAM,EAAE,UAAU,UAAU;CAC5B,MAAM,WAAW,OAAO,SAAS,cAAc,CAAC;CAIhD,MAAM,UAAU,WACZ,cAAc,UAAU,EAAE,MAAM,CAAC,IACjC,cAAc,uBAAuB,CAAC,CAAC;CAE3C,MAAM,UAAU,aAAa,QAAQ,QAAQ,SAAS,eAAe,OAAO;CAO5E,OAAO,SAAS,kBAAkB,QAC9B,cAAc,YAAY,EAAE,UAAU,QAAQ,CAAC,IAC/C;AACN;AAEA,SAAS,UACP,QACA,QACA,OACW;CACX,MAAM,YAAY,OAAO;CAEzB,IAAI,CAAC,WAAW,OAAO;CAEvB,OAAO,cAAc,WAAwC;EAC3D,MAAM,OAAO,UAAU;EACvB,QAAQ,OAAO;CACjB,CAAC;AACH;AAEA,SAAS,aACP,QACA,QACA,MACA,MACW;CACX,MAAM,WAA4B,SAAS,SAAS,CAAC,UAAU,KAAK,IAAI,SAAS,WAAW,CAAC,KAAK,IAAI,CAAC;CAEvG,IAAI,UAAU;CAEd,KAAK,MAAM,SAAS,UAAU;EAC5B,MAAM,YAAY,OAAO,MAAM,CAAC;EAEhC,IAAI,CAAC,WAAW;GAMd,IAAI,UAAU,OACZ,UAAU,cAAc,YAAY,EAAE,UAAU,QAAQ,CAAC;GAG3D;EACF;EAEA,UAAU,cAAc,WAAwC;GAC9D,MAAM,OAAO,UAAU;GACvB,QAAQ,OAAO;GACf,UAAU;EACZ,CAAC;CACH;CAEA,OAAO;AACT;;;;;;;;;AAcA,SAAS,aAAa,MAAsB;CAC1C,OAAO,oBAAoB;AAC7B;;;;;;;;AA0BA,SAAS,oBACP,UACA,IAIA;CACA,MAAM,QAA6D,CAAC;CAEpE,OAAO;EACL;EACA,WAAW,OAAO;GAChB,MAAM,QAAQ;GACd,MAAM,WAAW,SAAS,WAAW,KAAK;GAE1C,IAAI,OAAO,QAAW,MAAM,SAAS,QAAQ,OAAO;GAEpD,OAAO,MAAM;EACf;CACF;AACF;;;;;;;;;;AAwBA,SAAS,kBAAkB,UAAmD;CAC5E,MAAM,UAAU,UAAU;CAE1B,OAAO;EAAE,OAAO,SAAS;EAAO,MAAM,SAAS;CAAO;AACxD;AAEA,eAAe,aACb,QACA,QACA,eACuB;CACvB,MAAM,UAAkC,CAAC;CAEzC,KAAK,MAAM,UAAU,OAAO,QAAQ,WAAW,CAAC,GAC9C,QAAQ,OAAO,IAAI,YAAY,KAAK,OAAO;CAM7C,MAAM,UAA4B,OAAO,QAAQ,WAAW,CAAC;CAI7D,IAAI,OAAO,cAWT,OAAO;EAAE,MAAM;EAAI,QATjB,OAAO,aAAa,UAAU,eAC1B,OAAO,aAAa,SACpB,OAAO,aAAa,UAAU,YAC5B,OAAO,aAAa,aAInB,OAAO,aAAa,cAAc;EAEhB;EAAS;EAAS,MAAM,OAAO;EAAU;CAAO;CAO7E,IAAI,QAAQ,qBAAqB,QAC/B,QAAQ,mBAAmB;CAM7B,MAAM,EAAE,mBAAmB,MAAM,OAAO;CAUxC,MAAM,gBAAsC;EAC1C,UAAU,OAAO;EACjB,SAAS,sBAAsB,MAAM;EACrC,OAAO,cAAc;EACrB,MAAM,cAAc;CACtB;CAEA,MAAM,qBAAqB,YACzB,eAAe,cAAc,gBAAgB,UAAU;EAAE,OAAO;EAAe,UAAU;CAAQ,CAAC,CAAC;CAQrG,IAAI,eAAe,OAAO;CAC1B,IAAI,kBAAkB;CACtB,IAAI;CAEJ,SACE,IAAI;EAKF,OAAO,kBAJS,eACZ,qBAAqB,QAAQ,QAAQ,YAAY,IACjD,iBAAiB,QAAQ,MAAM,CAEH;EAChC;CACF,SAAS,QAAQ;EACf,kBAAkB;EAElB,IAAI,cAAc,SAAS,kBAAkB,OAAO;GAQlD,OAAO,kBAAkB,cAAc,YAAY,EAAE,UAAU,cAAc,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC;GAC1G;EACF;EASA,eAAe,iBAAiB,QAAQ,kBAFtC,cAAc,SAAS,kBAAkB,WAAW,QAAQ,eAAe,WAAW,QAEf,MAAM,CAAC;CAClF;CAaF,MAAM,SAAS,kBACX,aAAc,SAAS,kBAAkB,QACvC,MACC,OAAO,QAAQ,cAAc,MAChC,OAAO,QACJ,OAAO,QAAQ,cAAc,MAC7B,OAAO,QAAQ,cAAc;CAIpC,OAAO;EAAE,MAFI,aAAa,IAEd;EAAG;EAAQ;EAAS;EAAS,MAAM,OAAO;EAAU;CAAO;AACzE;AAMA,eAAsB,WACpB,WACA,UAA6B,CAAC,GACP;CACvB,MAAM,WAAW,gBAAgB,OAAO;CACxC,MAAM,QAAQ,SAAS,OAAO,MAAK,cAAa,UAAU,SAAS,SAAS;CAE5E,IAAI,CAAC,OAAO;EACV,MAAM,QAAQ,SAAS,OAAO,KAAI,cAAa,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI;EAE/E,MAAM,IAAI,MACR,eAAe,UAAU,kFACgC,MAAM,qFAGjE;CACF;CAEA,MAAM,MAAM,SAAS,OAAO,QAAQ,UAAU,CAAC,GAAG,QAAQ,SAAS,CAAC,CAAC;CACrE,MAAM,EAAE,OAAO,eAAe,oBAAoB,UAAU,QAAQ,EAAE;CAEtE,MAAM,WAAW,MAAM,mBAAmB;EACxC;EACA,QAAQ,SAAS;EACjB;EACA,SAAQ,WAAU,aAAa,MAAM,QAAQ,QAAQ,kBAAkB,MAAM,QAAQ,CAAC;CACxF,CAAC;CAED,IAAI,CAAC,UACH,MAAM,IAAI,MACR,eAAe,UAAU,qBAAqB,IAAI,iJAGpD;CAGF,OAAO;AACT;;;;;;;;;;;AAYA,eAAsB,kBACpB,KACA,UAAoC,CAAC,GACd;CACvB,MAAM,WAAW,gBAAgB,OAAO;CACxC,MAAM,EAAE,OAAO,eAAe,oBAAoB,UAAU,QAAQ,EAAE;CAEtE,MAAM,WAAW,MAAM,mBAAmB;EACxC;EACA,QAAQ,SAAS;EACjB;EACA,SAAQ,WAAU,aAAa,MAAM,MAAO,MAAM,QAAQ,QAAQ,kBAAkB,MAAM,QAAQ,CAAC;CACrG,CAAC;CAED,IAAI,CAAC,UACH,OAAO;EAAE,MAAM;EAAI,QAAQ;EAAK,SAAS,CAAC;EAAG,SAAS,CAAC;EAAG,MAAM;EAAW,QAAQ;CAAU;CAK/F,OAAO;AACT"}
+{"version":3,"file":"render-page.mjs","names":[],"sources":["C:/Work/Warlock.js/web/src/server/render-page.ts"],"sourcesContent":["import { createElement, type ComponentType, type ReactNode } from \"react\";\nimport { Response, type Request } from \"@warlock.js/core\";\nimport DefaultApp from \"../components/default-app\";\nimport {\n  DocumentContext,\n  escapePayload,\n  PAYLOAD_SCRIPT_ID,\n  type DocumentContextValue,\n} from \"../components/document-context\";\nimport type { SharedContext } from \"../index\";\nimport { buildHydrationPayload } from \"./build-hydration-payload\";\nimport {\n  hydrationErrorPageProps,\n  resolveErrorPageMetadata,\n  type ErrorPageModule,\n  type ErrorPageModuleLoader,\n} from \"./error-page\";\nimport { ERROR_PAGE_METADATA } from \"./resolve-page-metadata\";\nimport {\n  registerModules,\n  type RegisterableModuleNamespace,\n} from \"../runtime/register-modules\";\nimport { markNonHydrating } from \"./page-render-bundle\";\nimport type { ServerErrorPageProps } from \"../props\";\nimport {\n  buildErrorRecord,\n  designateBoundary,\n  executePageRequest,\n  type BufferedCookie,\n  type ExecutePageRequestOptions,\n  type PageDataBundle,\n  type PageErrorRecord,\n  type PageLevelName,\n  type PageResponseCommit,\n  type PageRouteEntry,\n  type PageRouteMatch,\n  type PageTripleModule,\n} from \"./execute-page-request\";\n\nexport { escapePayload, PAYLOAD_SCRIPT_ID };\nexport type { BufferedCookie };\n\n/** Widens `PageDataBundle` with the stage 7 commit record — see `execute-page-request.ts`. */\ntype Bundle = PageDataBundle & { commit?: PageResponseCommit };\n\n/** Reads the stage 7 commit into the lowercased header map `RenderedPage` carries. */\nfunction committedHeaders(bundle: PageDataBundle): Record<string, string> {\n  const headers: Record<string, string> = {};\n\n  for (const header of (bundle as Bundle).commit?.headers ?? []) {\n    headers[header.key.toLowerCase()] = header.value;\n  }\n\n  return headers;\n}\n\n/** Reads the stage 7 commit into the cookie list `RenderedPage` carries. */\nfunction committedCookies(bundle: PageDataBundle): BufferedCookie[] {\n  return (bundle as Bundle).commit?.cookies ?? [];\n}\n\n/**\n * Pipeline stages 9–10: RENDER the page tree from the\n * data bundle stages 1–8 produced, then return finalized { html, status,\n * headers }. Stage 10 happens at the CALL SITE in two halves —\n * 10a the caller applies status + headers (the single live-response write,\n * after render, before anything flushes), 10b it flushes\n * the document. Nothing in this module writes the live response. It never\n * re-runs any earlier stage — `renderPage` calls `executePageRequest` and\n * everything here consumes its bundle as-is.\n *\n * `renderPage` is deliberately double-duty (dx-differentiators.md §3): it is\n * the production orchestrator AND the test helper. Because a loader IS a\n * controller, `renderPage(\"products.details\", { params: { id: \"42\" } })`\n * returns `{ html, status, headers, data }` in one call — asserting a page's\n * data and its response headers is a unit test, no browser, no server boot.\n */\n\n// ---------------------------------------------------------------------------\n// The routes seam (same pattern as connectPageContext: boot wiring, once)\n// ---------------------------------------------------------------------------\n\nexport type PageRoutesRegistry = {\n  routes: readonly PageRouteEntry[];\n  /** Same contract as ExecutePageRequestOptions[\"createHttp\"]. */\n  createHttp: ExecutePageRequestOptions[\"createHttp\"];\n};\n\nlet pageRoutesRegistry: PageRoutesRegistry | undefined;\n\n/**\n * Boot-time wiring so `renderPage(name, options)` can resolve a route NAME\n * without each call site carrying the manifest. Returns the previous registry\n * so tests can restore it. A per-call `routes`/`createHttp` override wins.\n */\nexport function connectPageRoutes(\n  registry: PageRoutesRegistry | undefined,\n): PageRoutesRegistry | undefined {\n  const previous = pageRoutesRegistry;\n  pageRoutesRegistry = registry;\n  return previous;\n}\n\n// ---------------------------------------------------------------------------\n// renderPage surface\n// ---------------------------------------------------------------------------\n\nexport type RenderPageOptions = {\n  params?: Record<string, string>;\n  query?: Record<string, string>;\n  /**\n   * Impersonation for tests: assigned to `request.user` right after the\n   * request pair is constructed — `user` is a plain public property on core's\n   * Request (core/src/http/request.ts:92) and this is exactly the write auth\n   * middleware would have performed.\n   */\n  as?: unknown;\n  /** Per-call overrides of the connected registry (tests, mostly). */\n  routes?: readonly PageRouteEntry[];\n  createHttp?: ExecutePageRequestOptions[\"createHttp\"];\n  /** Loaded only after the ordinary boundary chain has been exhausted. */\n  loadErrorPage?: ErrorPageModuleLoader;\n};\n\n/**\n * `renderPageRequest` takes the URL itself, so `params`/`query` (the\n * name-based sugar buildUrl consumes) have no meaning here — everything else\n * is the same seam.\n */\nexport type RenderPageRequestOptions = Omit<\n  RenderPageOptions,\n  \"params\" | \"query\"\n>;\n\nexport type RenderedPage = {\n  /** The full document (\"\" when the pipeline short-circuited before render). */\n  html: string;\n  status: number;\n  /** Committed response headers, lowercased key → value. */\n  headers: Record<string, string>;\n  /** Committed response cookies, in commit order — stage 7's `bundle.commit.cookies`. */\n  cookies: BufferedCookie[];\n  /**\n   * The PAGE loader's data — `data.product.name` reads as the dx story\n   * writes it. `unknown`: the pipeline never checks a loader's return shape.\n   */\n  data: unknown;\n  /**\n   * The full stages-1–8 bundle, for assertions beyond the page's own data.\n   * Undefined ONLY on `renderPageRequest`'s no-match path: no route matched,\n   * so no pipeline ran and there is no bundle — the 404 answer stands alone.\n   * `renderPage` always carries one (its no-match throws instead).\n   */\n  bundle: PageDataBundle | undefined;\n};\n\nexport type RenderPageFailureOptions = {\n  name: string;\n  path: string;\n  request: Request;\n  response: Response;\n  thrown: unknown;\n  loadErrorPage?: ErrorPageModuleLoader;\n};\n\nfunction requireRegistry(\n  options: Pick<RenderPageOptions, \"routes\" | \"createHttp\">,\n): PageRoutesRegistry {\n  const routes = options.routes ?? pageRoutesRegistry?.routes;\n  const createHttp = options.createHttp ?? pageRoutesRegistry?.createHttp;\n\n  if (!routes || !createHttp) {\n    throw new Error(\n      \"renderPage()/renderPageRequest() has no route registry connected \" +\n        \"(web/src/server/render-page.ts). Both resolve against the page \" +\n        \"manifest, which the server bootstrap owns. Fix: \" +\n        \"call connectPageRoutes({ routes, createHttp }) at boot (tests: in \" +\n        \"beforeAll), or pass { routes, createHttp } to this call.\",\n    );\n  }\n\n  return { routes, createHttp };\n}\n\nfunction buildUrl(\n  entry: PageRouteEntry,\n  params: Record<string, string>,\n  query: Record<string, string>,\n): string {\n  const path = entry.path\n    .split(\"/\")\n    .map((segment) => {\n      if (!segment.startsWith(\":\")) return segment;\n\n      const name = segment.slice(1);\n      const value = params[name];\n\n      if (value === undefined) {\n        throw new Error(\n          `renderPage(\"${entry.name}\"): route path \"${entry.path}\" needs ` +\n            `param \"${name}\" and the call did not provide it ` +\n            \"(web/src/server/render-page.ts). Fix: pass it in \" +\n            `\\`params: { ${name}: … }\\`.`,\n        );\n      }\n\n      return encodeURIComponent(value);\n    })\n    .join(\"/\");\n\n  const queryString = new URLSearchParams(query).toString();\n\n  return queryString ? `${path}?${queryString}` : path;\n}\n\n// ---------------------------------------------------------------------------\n// Stage 9 — RENDER\n// ---------------------------------------------------------------------------\n\n/**\n * The framework-owned terminal boundary (P1 §4: designation falls back to\n * `app` even when no level exports one — \"the framework owns a root\n * boundary\"). Deliberately generic: the error itself is server knowledge and\n * never serialized into the document.\n */\nfunction FrameworkRootBoundary(): ReactNode {\n  return createElement(\"main\", { role: \"alert\" }, \"Something went wrong.\");\n}\n\nfunction errorPageElement(\n  module: ErrorPageModule,\n  props: ServerErrorPageProps,\n): ReactNode {\n  const ErrorPage = module.default as\n    ((input: ServerErrorPageProps) => ReactNode) | undefined;\n  if (!ErrorPage) {\n    throw new Error(\n      \"The application error.page.tsx module has no default export.\",\n    );\n  }\n  return createElement(ErrorPage, props);\n}\n\ntype LevelProps = {\n  data: unknown;\n  shared: Readonly<SharedContext> | undefined;\n  children?: ReactNode;\n};\n\n/** The ordinary page leaf alone receives the route match's params. */\ntype PageLevelProps = {\n  data: unknown;\n  shared: Readonly<SharedContext> | undefined;\n  params: Readonly<Record<string, string>>;\n};\n\nconst DATA_KEYS: Record<PageLevelName, \"appData\" | \"layoutData\" | \"pageData\"> =\n  {\n    app: \"appData\",\n    layout: \"layoutData\",\n    page: \"pageData\",\n  };\n\n/**\n * Compose the tree root→leaf: `<App><Layout><Page/></Layout></App>`, each\n * level receiving ITS OWN loader data and the same sealed `shared` — the\n * exact props the M1 contract declares (web/src/props.ts) and never\n * request/response (the component also renders on a machine where neither\n * exists, props.ts:19-22).\n *\n * A level with no default export contributes no DOM and passes children\n * through — that is `layout.tsx` omitting its default export to be a guard\n * with no DOM.\n */\nfunction buildPageElement(\n  triple: Record<PageLevelName, PageTripleModule>,\n  bundle: PageDataBundle,\n): ReactNode {\n  return wrapRootward(triple, bundle, \"page\", buildLeaf(triple.page, bundle));\n}\n\n/**\n * The error path renders the DESIGNATED boundary in place of the level it\n * covers, still wrapped by every level rootward of it — a page-level throw\n * keeps its App and Layout chrome, whose data survived the settle rules\n * (P1 §4: fulfilled sibling data stays in the bundle).\n *\n * `record` is explicit rather than read from `bundle.error` — a render-time\n * throw (`finishRender`'s stage 9 escalation loop) designates a NEW boundary on the fly that the stage 1-8 bundle never saw.\n */\nfunction buildBoundaryElement(\n  triple: Record<PageLevelName, PageTripleModule>,\n  bundle: PageDataBundle,\n  record: PageErrorRecord,\n): ReactNode {\n  const { boundary, error } = record;\n  const Boundary = triple[boundary.boundaryLevel].ErrorBoundary as\n    ((props: { error: unknown }) => ReactNode) | undefined;\n\n  const element = Boundary\n    ? createElement(Boundary, { error })\n    : createElement(FrameworkRootBoundary, {});\n\n  const wrapped = wrapRootward(triple, bundle, boundary.boundaryLevel, element);\n\n  // \"App\" has no level rootward of it, so `wrapRootward` returns `wrapped`\n  // unwrapped when the boundary covers the app level itself — but the\n  // pipeline always emits a complete document, so the\n  // framework default supplies the shell here even though the app's own\n  // (broken) root is what's being bypassed.\n  return boundary.boundaryLevel === \"app\"\n    ? createElement(DefaultApp, { children: wrapped })\n    : wrapped;\n}\n\nfunction buildLeaf(\n  module: PageTripleModule,\n  bundle: PageDataBundle,\n): ReactNode {\n  const Component = module.default as\n    ((props: PageLevelProps) => ReactNode) | undefined;\n\n  if (!Component) return null;\n\n  return createElement(Component as ComponentType<PageLevelProps>, {\n    data: bundle.pageData,\n    shared: bundle.shared,\n    params: bundle.route.params,\n  });\n}\n\nfunction wrapRootward(\n  triple: Record<PageLevelName, PageTripleModule>,\n  bundle: PageDataBundle,\n  from: PageLevelName,\n  leaf: ReactNode,\n): ReactNode {\n  const wrappers: PageLevelName[] =\n    from === \"page\" ? [\"layout\", \"app\"] : from === \"layout\" ? [\"app\"] : [];\n\n  let element = leaf;\n\n  for (const level of wrappers) {\n    const Component = triple[level].default as\n      ((props: LevelProps) => ReactNode) | undefined;\n\n    if (!Component) {\n      // \"App\" is the root: no App export means no custom document, but the\n      // pipeline always emits a complete one — the\n      // framework default App supplies it. Layout has no such fallback: an\n      // omitted layout default export stays a no-DOM passthrough,\n      // unchanged from before.\n      if (level === \"app\") {\n        element = createElement(DefaultApp, { children: element });\n      }\n\n      continue;\n    }\n\n    element = createElement(Component as ComponentType<LevelProps>, {\n      data: bundle[DATA_KEYS[level]],\n      shared: bundle.shared,\n      children: element,\n    });\n  }\n\n  return element;\n}\n\n// ---------------------------------------------------------------------------\n// Document assembly — stage 10 (10a apply + 10b flush) lives at the call site\n// ---------------------------------------------------------------------------\n\n/**\n * The root (App or the framework default) now ALWAYS renders a complete\n * `<html>…</html>` document itself — `<Head/>`/\n * `<Scripts/>` read the metadata/payload from `DocumentContext` (provided\n * around the element in `finishRender`, below) and emit real elements.\n * There is nothing left for this stage to assemble by string surgery; it\n * only prepends the doctype `renderToString` never includes.\n */\nfunction emitDocument(body: string): string {\n  return \"<!DOCTYPE html>\" + body;\n}\n\n// ---------------------------------------------------------------------------\n// The shared tail (stages 9–10) — both orchestrators end here\n// ---------------------------------------------------------------------------\n\n/**\n * The real request/response pair `capturingCreateHttp` captured for this\n * call. It is used at\n * the two orchestrator call sites for the `as` impersonation write\n * (`state.captured.request.user = as`, below) and to read the document\n * slots (`documentSlotsFrom`, below).\n */\ntype CapturedHttp = {\n  request: Request;\n  response: Response;\n};\n\n/**\n * Wrap the caller's createHttp to capture the real pair (for the document\n * slots, `documentSlotsFrom` below), the matched entry (the only place a\n * URL-based caller learns which triple to render), and to apply `as` —\n * `user` is a plain public property on core's Request\n * (core/src/http/request.ts:92), exactly the write auth middleware performs.\n */\nfunction capturingCreateHttp(\n  registry: PageRoutesRegistry,\n  as: unknown,\n): {\n  state: { captured?: CapturedHttp; match?: PageRouteMatch };\n  createHttp: ExecutePageRequestOptions[\"createHttp\"];\n} {\n  const state: { captured?: CapturedHttp; match?: PageRouteMatch } = {};\n\n  return {\n    state,\n    createHttp(match) {\n      state.match = match;\n      state.captured = registry.createHttp(match);\n\n      // `!= null` (not just `!== undefined`): `Request.user` is `RequestUser\n      // | undefined` (core/src/http/request.ts:93) — it has no `null` member,\n      // so an explicit `as: null` is treated the same as \"no impersonation\"\n      // rather than written through.\n      if (as != null) state.captured.request.user = as;\n\n      return state.captured;\n    },\n  };\n}\n\n/**\n * The two request-derived document slots (`nonce`/`lang` on\n * `DocumentContextValue`), extracted at the orchestrator call sites\n * because `finishRender` no longer carries `captured` (D1). `dir` is not\n * here: core's Request has no dir-like field (checked\n * core/src/http/request.ts — only `nonce` at :177 and `locale` at :343\n * exist) — an app supplies `dir` via its own convention.\n */\ntype DocumentSlots = {\n  nonce?: string;\n  lang?: string;\n};\n\n/** Reads document slots directly from core's Request. */\nfunction documentSlotsFrom(captured: CapturedHttp | undefined): DocumentSlots {\n  const request = captured?.request;\n\n  return { nonce: request?.nonce, lang: request?.locale };\n}\n\nasync function finishRender(\n  triple: PageRouteEntry[\"triple\"],\n  bundle: PageDataBundle,\n  documentSlots: DocumentSlots,\n  response: Response,\n  loadErrorPage: ErrorPageModuleLoader | undefined,\n): Promise<RenderedPage> {\n  // Read from the stage 7 commit, never live off `response` — this function\n  // writes (and now reads) the live response zero times. A bundle with no\n  // commit (no loader ran at all) simply has no headers/cookies to report.\n  const headers = committedHeaders(bundle);\n  const cookies = committedCookies(bundle);\n\n  // Middleware and validation short-circuits emit no document. Loader-returned\n  // Response instances never reach this function.\n  if (bundle.shortCircuit) {\n    const status =\n      bundle.shortCircuit.stage === \"validation\"\n        ? bundle.shortCircuit.status\n        : (bundle.shortCircuit.statusCode ?? 200);\n    return {\n      html: \"\",\n      status,\n      headers,\n      cookies,\n      data: bundle.pageData,\n      bundle,\n    };\n  }\n\n  // The framework's closed-by-default answer (README rule 8): every document\n  // is `Cache-Control: private` unless a loader's committed headers already\n  // answered for the key. Map-only — the caller applies the returned headers.\n  if (headers[\"cache-control\"] === undefined) {\n    headers[\"cache-control\"] = \"private\";\n  }\n\n  // ── stage 9 · RENDER ─────────────────────────────────────────────────────\n  // Lazy import: react-dom is a peer used only on this path, so merely\n  // loading the server barrel never requires it.\n  const { renderToString } = await import(\"react-dom/server\");\n\n  // JSON.stringify omits object properties whose value is undefined. Loader\n  // `<Head/>`/`<Scripts/>` read this context — metadata and the payload are\n  // both already final by this point (stages 1-8 are done), so there is\n  // nothing left for the root to await.\n  //\n  // The payload comes from `buildHydrationPayload` rather than being assembled\n  // here, so that this document and the `_loader` route hand the browser the\n  // SAME object. See that module for why the two must not drift.\n  let documentValue: DocumentContextValue = {\n    metadata: bundle.metadata,\n    payload: buildHydrationPayload(bundle),\n    nonce: documentSlots.nonce,\n    lang: documentSlots.lang,\n  };\n\n  const renderWithContext = (element: ReactNode): string =>\n    renderToString(\n      createElement(DocumentContext.Provider, {\n        value: documentValue,\n        children: element,\n      }),\n    );\n\n  // A boundary that throws while rendering escalates to\n  // the next enclosing boundary rootward; if none survives, the framework's\n  // last-resort terminal renders. `currentError` starts as whatever stage\n  // 1-8 already designated (`bundle.error`, undefined for a normal page\n  // render) and is replaced by each escalation — `bundle.error` itself is\n  // never mutated, staying a truthful stage 1-8 record.\n  let currentError = bundle.error;\n  let renderTimeThrow = false;\n  let body: string;\n\n  const renderFrameworkRoot = (): string =>\n    renderWithContext(\n      createElement(DefaultApp, {\n        children: createElement(FrameworkRootBoundary, {}),\n      }),\n    );\n  const renderFrameworkAfterErrorPageFailure = (): string => {\n    bundle.errorPage = undefined;\n    bundle.metadata = ERROR_PAGE_METADATA;\n    documentValue = {\n      ...documentValue,\n      metadata: bundle.metadata,\n      payload: buildHydrationPayload(bundle),\n    };\n    return renderFrameworkRoot();\n  };\n\n  const renderErrorPage = async (\n    thrown: unknown,\n    serializableError: unknown = thrown,\n  ): Promise<string | undefined> => {\n    if (!loadErrorPage) return undefined;\n\n    const props: ServerErrorPageProps = { error: thrown, status: 500 };\n    const module = await loadErrorPage();\n    registerModules([module as RegisterableModuleNamespace]);\n    const errorPage = hydrationErrorPageProps(props, serializableError);\n    bundle.errorPage = errorPage;\n    bundle.metadata = resolveErrorPageMetadata(module, props);\n    documentValue = {\n      ...documentValue,\n      metadata: bundle.metadata,\n      payload: buildHydrationPayload(bundle),\n    };\n    return renderWithContext(\n      wrapRootward(triple, bundle, \"page\", errorPageElement(module, props)),\n    );\n  };\n\n  for (;;) {\n    try {\n      // The application error page is the framework terminal, never a rival\n      // to an authored boundary. It is reached only after no app boundary\n      // exists (or after that boundary has itself thrown below).\n      if (\n        currentError?.boundary.boundaryLevel === \"app\" &&\n        !triple.app.ErrorBoundary\n      ) {\n        try {\n          body =\n            (await renderErrorPage(\n              currentError.originalError ?? currentError.error,\n              currentError.error,\n            )) ?? renderFrameworkRoot();\n        } catch {\n          body = renderFrameworkAfterErrorPageFailure();\n        }\n        renderTimeThrow = true;\n        break;\n      }\n\n      const element = currentError\n        ? buildBoundaryElement(triple, bundle, currentError)\n        : buildPageElement(triple, bundle);\n\n      body = renderWithContext(element);\n      break;\n    } catch (thrown) {\n      renderTimeThrow = true;\n\n      if (currentError?.boundary.boundaryLevel === \"app\") {\n        // The floor: the app-level boundary's own render just threw, so\n        // there is nothing rootward of `app` to escalate to (§2's \"none\n        // survives\"). Render the framework's trivial boundary directly —\n        // bypassing the app's ErrorBoundary/App component, since that is\n        // what just failed — wrapped in DefaultApp so the response is still\n        // a complete `<html>` document (default-app.tsx:22-46) rather than\n        // a bare `<main>` fragment.\n        try {\n          body = (await renderErrorPage(thrown)) ?? renderFrameworkRoot();\n        } catch {\n          body = renderFrameworkAfterErrorPageFailure();\n        }\n        break;\n      }\n\n      // Escalate from the level rootward of whatever just threw — searching\n      // from the SAME level would re-select the boundary that just failed.\n      // A throw not yet attributable to a level (a normal page render, no\n      // prior designation) starts the search at `page`.\n      const throwingLevel: PageLevelName =\n        currentError?.boundary.boundaryLevel === \"layout\"\n          ? \"app\"\n          : currentError\n            ? \"layout\"\n            : \"page\";\n\n      currentError = buildErrorRecord(\n        thrown,\n        designateBoundary(throwingLevel, triple),\n      );\n    }\n  }\n\n  // Status is chosen after render — the last thing that can change the\n  // outcome — and RETURNED, never applied: `finishRender` writes the live\n  // response zero times. The caller applies status + headers at one site and\n  // flushes immediately after (stage 10a/10b). \"The framework owns the status\n  // whenever a boundary renders\" (design/request-lifecycle.md stage 7): ANY\n  // boundary — nested or app-level, discovered pre-render or escalated during\n  // render — forces 500. The boundary's LEVEL only decides which component\n  // renders, never the status; the committed status from stage 7\n  // (`bundle.commit.statusCode`) stands only for a page with no error at all\n  // — read off the commit, never off the live `response`, same as `headers`\n  // above. No committed status (no loader called `setStatusCode`) is the\n  // ordinary 200.\n  const status = currentError\n    ? 500\n    : ((bundle as Bundle).commit?.statusCode ?? 200);\n\n  const html = emitDocument(body);\n\n  return { html, status, headers, cookies, data: bundle.pageData, bundle };\n}\n\n/**\n * Render failures that happen before the page pipeline has a triple (notably a\n * module-load or registration throw). This deliberately owns one terminal\n * attempt: an error-page failure falls straight to FrameworkRootBoundary.\n *\n * There is no triple yet, so there is no trustworthy server composition for\n * the browser to hydrate against — every response this function produces is\n * marked `markNonHydrating` (page-render-bundle.ts), on both the bundle and\n * the document payload, whether or not it managed to render the app's own\n * `error.page.tsx`. A normal app error page reached through `finishRender`\n * renders inside a real triple and stays hydratable; this path never does.\n */\nexport async function renderPageFailure(\n  options: RenderPageFailureOptions,\n): Promise<RenderedPage> {\n  const { request, response, name, path, thrown, loadErrorPage } = options;\n  const bundle: PageDataBundle = markNonHydrating({\n    route: { name, path, params: {}, query: {} },\n  });\n  // No pipeline ran (there is no triple), so there is no commit to read —\n  // never a live `response.getHeaders()` read either; see `finishRender`.\n  const headers: Record<string, string> = { \"cache-control\": \"private\" };\n\n  const { renderToString } = await import(\"react-dom/server\");\n  const slots = documentSlotsFrom({ request, response });\n  const frameworkPayload = markNonHydrating(buildHydrationPayload(bundle));\n  let value: DocumentContextValue = {\n    metadata: undefined,\n    payload: frameworkPayload,\n    nonce: slots.nonce,\n    lang: slots.lang,\n  };\n  const renderWithContext = (element: ReactNode): string =>\n    renderToString(\n      createElement(DocumentContext.Provider, { value, children: element }),\n    );\n  let body: string;\n\n  try {\n    if (!loadErrorPage)\n      throw new Error(\"No application error page is configured.\");\n    const props: ServerErrorPageProps = { error: thrown, status: 500 };\n    const module = await loadErrorPage();\n    registerModules([module as RegisterableModuleNamespace]);\n    const errorPage = hydrationErrorPageProps(props);\n    bundle.errorPage = errorPage;\n    value = {\n      ...value,\n      metadata: resolveErrorPageMetadata(module, props),\n      payload: markNonHydrating({ ...frameworkPayload, errorPage }),\n    };\n    body = renderWithContext(\n      createElement(DefaultApp, { children: errorPageElement(module, props) }),\n    );\n  } catch {\n    bundle.errorPage = undefined;\n    bundle.metadata = ERROR_PAGE_METADATA;\n    value = {\n      ...value,\n      metadata: bundle.metadata,\n      payload: markNonHydrating(buildHydrationPayload(bundle)),\n    };\n    body = renderWithContext(\n      createElement(DefaultApp, {\n        children: createElement(FrameworkRootBoundary, {}),\n      }),\n    );\n  }\n\n  return {\n    html: emitDocument(body),\n    status: 500,\n    headers,\n    cookies: [],\n    data: undefined,\n    bundle,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// The orchestrators\n// ---------------------------------------------------------------------------\n\nexport async function renderPage(\n  routeName: string,\n  options: RenderPageOptions = {},\n): Promise<RenderedPage | Response> {\n  const registry = requireRegistry(options);\n  const entry = registry.routes.find(\n    (candidate) => candidate.name === routeName,\n  );\n\n  if (!entry) {\n    const known = registry.routes\n      .map((candidate) => `\"${candidate.name}\"`)\n      .join(\", \");\n\n    throw new Error(\n      `renderPage(\"${routeName}\"): no route with that name ` +\n        `(web/src/server/render-page.ts). Known route names: ${known}. ` +\n        \"Fix: use a name from the manifest, or connect the manifest that \" +\n        \"declares this one.\",\n    );\n  }\n\n  const url = buildUrl(entry, options.params ?? {}, options.query ?? {});\n  const { state, createHttp } = capturingCreateHttp(registry, options.as);\n\n  const rendered = await executePageRequest({\n    url,\n    routes: registry.routes,\n    createHttp,\n    finish: (bundle) =>\n      finishRender(\n        entry.triple,\n        bundle,\n        documentSlotsFrom(state.captured),\n        state.captured!.response,\n        options.loadErrorPage,\n      ),\n  });\n\n  if (!rendered) {\n    throw new Error(\n      `renderPage(\"${routeName}\"): the built URL \"${url}\" did not match ` +\n        \"stage 1 (web/src/server/render-page.ts). The name resolved but the \" +\n        \"matcher disagreed — that is a manifest bug, not a caller bug.\",\n    );\n  }\n\n  return rendered;\n}\n\n/**\n * The URL-based sibling of `renderPage` — the production render surface: a\n * real HTTP server has a URL, not a route name. The url goes STRAIGHT to\n * executePageRequest's stage-1 matcher (no buildUrl), then the same shared\n * tail renders and emits.\n *\n * No-match here is NOT the manifest bug renderPage throws on: an arbitrary\n * URL matching no route is a legitimate 404, and a server must ANSWER it —\n * `{ html: \"\", status: 404 }` with an undefined `bundle` (see RenderedPage).\n */\nexport async function renderPageRequest(\n  url: string,\n  options: RenderPageRequestOptions = {},\n): Promise<RenderedPage | Response> {\n  const registry = requireRegistry(options);\n  const { state, createHttp } = capturingCreateHttp(registry, options.as);\n\n  const rendered = await executePageRequest({\n    url,\n    routes: registry.routes,\n    createHttp,\n    finish: (bundle) =>\n      finishRender(\n        state.match!.entry.triple,\n        bundle,\n        documentSlotsFrom(state.captured),\n        state.captured!.response,\n        options.loadErrorPage,\n      ),\n  });\n\n  if (!rendered) {\n    return {\n      html: \"\",\n      status: 404,\n      headers: {},\n      cookies: [],\n      data: undefined,\n      bundle: undefined,\n    };\n  }\n\n  // executePageRequest only produces a bundle after createHttp ran for the\n  // match, so the captured entry is present whenever the bundle is.\n  return rendered;\n}\n"],"mappings":";;;;;;;;;;;;;;AA8CA,SAAS,iBAAiB,QAAgD;CACxE,MAAM,UAAkC,CAAC;CAEzC,KAAK,MAAM,UAAW,OAAkB,QAAQ,WAAW,CAAC,GAC1D,QAAQ,OAAO,IAAI,YAAY,KAAK,OAAO;CAG7C,OAAO;AACT;;AAGA,SAAS,iBAAiB,QAA0C;CAClE,OAAQ,OAAkB,QAAQ,WAAW,CAAC;AAChD;AA6BA,IAAI;;;;;;AAOJ,SAAgB,kBACd,UACgC;CAChC,MAAM,WAAW;CACjB,qBAAqB;CACrB,OAAO;AACT;AAgEA,SAAS,gBACP,SACoB;CACpB,MAAM,SAAS,QAAQ,UAAU,oBAAoB;CACrD,MAAM,aAAa,QAAQ,cAAc,oBAAoB;CAE7D,IAAI,CAAC,UAAU,CAAC,YACd,MAAM,IAAI,MACR,4SAKF;CAGF,OAAO;EAAE;EAAQ;CAAW;AAC9B;AAEA,SAAS,SACP,OACA,QACA,OACQ;CACR,MAAM,OAAO,MAAM,KAChB,MAAM,GAAG,EACT,KAAK,YAAY;EAChB,IAAI,CAAC,QAAQ,WAAW,GAAG,GAAG,OAAO;EAErC,MAAM,OAAO,QAAQ,MAAM,CAAC;EAC5B,MAAM,QAAQ,OAAO;EAErB,IAAI,UAAU,QACZ,MAAM,IAAI,MACR,eAAe,MAAM,KAAK,kBAAkB,MAAM,KAAK,iBAC3C,KAAK,iGAEA,KAAK,SACxB;EAGF,OAAO,mBAAmB,KAAK;CACjC,CAAC,EACA,KAAK,GAAG;CAEX,MAAM,cAAc,IAAI,gBAAgB,KAAK,EAAE,SAAS;CAExD,OAAO,cAAc,GAAG,KAAK,GAAG,gBAAgB;AAClD;;;;;;;AAYA,SAAS,wBAAmC;CAC1C,OAAO,cAAc,QAAQ,EAAE,MAAM,QAAQ,GAAG,uBAAuB;AACzE;AAEA,SAAS,iBACP,QACA,OACW;CACX,MAAM,YAAY,OAAO;CAEzB,IAAI,CAAC,WACH,MAAM,IAAI,MACR,8DACF;CAEF,OAAO,cAAc,WAAW,KAAK;AACvC;AAeA,MAAM,YACJ;CACE,KAAK;CACL,QAAQ;CACR,MAAM;AACR;;;;;;;;;;;;AAaF,SAAS,iBACP,QACA,QACW;CACX,OAAO,aAAa,QAAQ,QAAQ,QAAQ,UAAU,OAAO,MAAM,MAAM,CAAC;AAC5E;;;;;;;;;;AAWA,SAAS,qBACP,QACA,QACA,QACW;CACX,MAAM,EAAE,UAAU,UAAU;CAC5B,MAAM,WAAW,OAAO,SAAS,eAAe;CAGhD,MAAM,UAAU,WACZ,cAAc,UAAU,EAAE,MAAM,CAAC,IACjC,cAAc,uBAAuB,CAAC,CAAC;CAE3C,MAAM,UAAU,aAAa,QAAQ,QAAQ,SAAS,eAAe,OAAO;CAO5E,OAAO,SAAS,kBAAkB,QAC9B,cAAc,YAAY,EAAE,UAAU,QAAQ,CAAC,IAC/C;AACN;AAEA,SAAS,UACP,QACA,QACW;CACX,MAAM,YAAY,OAAO;CAGzB,IAAI,CAAC,WAAW,OAAO;CAEvB,OAAO,cAAc,WAA4C;EAC/D,MAAM,OAAO;EACb,QAAQ,OAAO;EACf,QAAQ,OAAO,MAAM;CACvB,CAAC;AACH;AAEA,SAAS,aACP,QACA,QACA,MACA,MACW;CACX,MAAM,WACJ,SAAS,SAAS,CAAC,UAAU,KAAK,IAAI,SAAS,WAAW,CAAC,KAAK,IAAI,CAAC;CAEvE,IAAI,UAAU;CAEd,KAAK,MAAM,SAAS,UAAU;EAC5B,MAAM,YAAY,OAAO,OAAO;EAGhC,IAAI,CAAC,WAAW;GAMd,IAAI,UAAU,OACZ,UAAU,cAAc,YAAY,EAAE,UAAU,QAAQ,CAAC;GAG3D;EACF;EAEA,UAAU,cAAc,WAAwC;GAC9D,MAAM,OAAO,UAAU;GACvB,QAAQ,OAAO;GACf,UAAU;EACZ,CAAC;CACH;CAEA,OAAO;AACT;;;;;;;;;AAcA,SAAS,aAAa,MAAsB;CAC1C,OAAO,oBAAoB;AAC7B;;;;;;;;AAyBA,SAAS,oBACP,UACA,IAIA;CACA,MAAM,QAA6D,CAAC;CAEpE,OAAO;EACL;EACA,WAAW,OAAO;GAChB,MAAM,QAAQ;GACd,MAAM,WAAW,SAAS,WAAW,KAAK;GAM1C,IAAI,MAAM,MAAM,MAAM,SAAS,QAAQ,OAAO;GAE9C,OAAO,MAAM;EACf;CACF;AACF;;AAgBA,SAAS,kBAAkB,UAAmD;CAC5E,MAAM,UAAU,UAAU;CAE1B,OAAO;EAAE,OAAO,SAAS;EAAO,MAAM,SAAS;CAAO;AACxD;AAEA,eAAe,aACb,QACA,QACA,eACA,UACA,eACuB;CAIvB,MAAM,UAAU,iBAAiB,MAAM;CACvC,MAAM,UAAU,iBAAiB,MAAM;CAIvC,IAAI,OAAO,cAKT,OAAO;EACL,MAAM;EACN,QALA,OAAO,aAAa,UAAU,eAC1B,OAAO,aAAa,SACnB,OAAO,aAAa,cAAc;EAIvC;EACA;EACA,MAAM,OAAO;EACb;CACF;CAMF,IAAI,QAAQ,qBAAqB,QAC/B,QAAQ,mBAAmB;CAM7B,MAAM,EAAE,mBAAmB,MAAM,OAAO;CAUxC,IAAI,gBAAsC;EACxC,UAAU,OAAO;EACjB,SAAS,sBAAsB,MAAM;EACrC,OAAO,cAAc;EACrB,MAAM,cAAc;CACtB;CAEA,MAAM,qBAAqB,YACzB,eACE,cAAc,gBAAgB,UAAU;EACtC,OAAO;EACP,UAAU;CACZ,CAAC,CACH;CAQF,IAAI,eAAe,OAAO;CAE1B,IAAI;CAEJ,MAAM,4BACJ,kBACE,cAAc,YAAY,EACxB,UAAU,cAAc,uBAAuB,CAAC,CAAC,EACnD,CAAC,CACH;CACF,MAAM,6CAAqD;EACzD,OAAO,YAAY;EACnB,OAAO,WAAW;EAClB,gBAAgB;GACd,GAAG;GACH,UAAU,OAAO;GACjB,SAAS,sBAAsB,MAAM;EACvC;EACA,OAAO,oBAAoB;CAC7B;CAEA,MAAM,kBAAkB,OACtB,QACA,oBAA6B,WACG;EAChC,IAAI,CAAC,eAAe,OAAO;EAE3B,MAAM,QAA8B;GAAE,OAAO;GAAQ,QAAQ;EAAI;EACjE,MAAM,SAAS,MAAM,cAAc;EACnC,gBAAgB,CAAC,MAAqC,CAAC;EAEvD,OAAO,YADW,wBAAwB,OAAO,iBACtB;EAC3B,OAAO,WAAW,yBAAyB,QAAQ,KAAK;EACxD,gBAAgB;GACd,GAAG;GACH,UAAU,OAAO;GACjB,SAAS,sBAAsB,MAAM;EACvC;EACA,OAAO,kBACL,aAAa,QAAQ,QAAQ,QAAQ,iBAAiB,QAAQ,KAAK,CAAC,CACtE;CACF;CAEA,SACE,IAAI;EAIF,IACE,cAAc,SAAS,kBAAkB,SACzC,CAAC,OAAO,IAAI,eACZ;GACA,IAAI;IACF,OACG,MAAM,gBACL,aAAa,iBAAiB,aAAa,OAC3C,aAAa,KACf,KAAM,oBAAoB;GAC9B,QAAQ;IACN,OAAO,qCAAqC;GAC9C;GAEA;EACF;EAMA,OAAO,kBAJS,eACZ,qBAAqB,QAAQ,QAAQ,YAAY,IACjD,iBAAiB,QAAQ,MAAM,CAEH;EAChC;CACF,SAAS,QAAQ;EAGf,IAAI,cAAc,SAAS,kBAAkB,OAAO;GAQlD,IAAI;IACF,OAAQ,MAAM,gBAAgB,MAAM,KAAM,oBAAoB;GAChE,QAAQ;IACN,OAAO,qCAAqC;GAC9C;GACA;EACF;EAaA,eAAe,iBACb,QACA,kBARA,cAAc,SAAS,kBAAkB,WACrC,QACA,eACE,WACA,QAI2B,MAAM,CACzC;CACF;CAeF,MAAM,SAAS,eACX,MACE,OAAkB,QAAQ,cAAc;CAI9C,OAAO;EAAE,MAFI,aAAa,IAEd;EAAG;EAAQ;EAAS;EAAS,MAAM,OAAO;EAAU;CAAO;AACzE;;;;;;;;;;;;;AAcA,eAAsB,kBACpB,SACuB;CACvB,MAAM,EAAE,SAAS,UAAU,MAAM,MAAM,QAAQ,kBAAkB;CACjE,MAAM,SAAyB,iBAAiB,EAC9C,OAAO;EAAE;EAAM;EAAM,QAAQ,CAAC;EAAG,OAAO,CAAC;CAAE,EAC7C,CAAC;CAGD,MAAM,UAAkC,EAAE,iBAAiB,UAAU;CAErE,MAAM,EAAE,mBAAmB,MAAM,OAAO;CACxC,MAAM,QAAQ,kBAAkB;EAAE;EAAS;CAAS,CAAC;CACrD,MAAM,mBAAmB,iBAAiB,sBAAsB,MAAM,CAAC;CACvE,IAAI,QAA8B;EAChC,UAAU;EACV,SAAS;EACT,OAAO,MAAM;EACb,MAAM,MAAM;CACd;CACA,MAAM,qBAAqB,YACzB,eACE,cAAc,gBAAgB,UAAU;EAAE;EAAO,UAAU;CAAQ,CAAC,CACtE;CACF,IAAI;CAEJ,IAAI;EACF,IAAI,CAAC,eACH,MAAM,IAAI,MAAM,0CAA0C;EAC5D,MAAM,QAA8B;GAAE,OAAO;GAAQ,QAAQ;EAAI;EACjE,MAAM,SAAS,MAAM,cAAc;EACnC,gBAAgB,CAAC,MAAqC,CAAC;EACvD,MAAM,YAAY,wBAAwB,KAAK;EAC/C,OAAO,YAAY;EACnB,QAAQ;GACN,GAAG;GACH,UAAU,yBAAyB,QAAQ,KAAK;GAChD,SAAS,iBAAiB;IAAE,GAAG;IAAkB;GAAU,CAAC;EAC9D;EACA,OAAO,kBACL,cAAc,YAAY,EAAE,UAAU,iBAAiB,QAAQ,KAAK,EAAE,CAAC,CACzE;CACF,QAAQ;EACN,OAAO,YAAY;EACnB,OAAO,WAAW;EAClB,QAAQ;GACN,GAAG;GACH,UAAU,OAAO;GACjB,SAAS,iBAAiB,sBAAsB,MAAM,CAAC;EACzD;EACA,OAAO,kBACL,cAAc,YAAY,EACxB,UAAU,cAAc,uBAAuB,CAAC,CAAC,EACnD,CAAC,CACH;CACF;CAEA,OAAO;EACL,MAAM,aAAa,IAAI;EACvB,QAAQ;EACR;EACA,SAAS,CAAC;EACV,MAAM;EACN;CACF;AACF;AAMA,eAAsB,WACpB,WACA,UAA6B,CAAC,GACI;CAClC,MAAM,WAAW,gBAAgB,OAAO;CACxC,MAAM,QAAQ,SAAS,OAAO,MAC3B,cAAc,UAAU,SAAS,SACpC;CAEA,IAAI,CAAC,OAAO;EACV,MAAM,QAAQ,SAAS,OACpB,KAAK,cAAc,IAAI,UAAU,KAAK,EAAE,EACxC,KAAK,IAAI;EAEZ,MAAM,IAAI,MACR,eAAe,UAAU,kFACgC,MAAM,qFAGjE;CACF;CAEA,MAAM,MAAM,SAAS,OAAO,QAAQ,UAAU,CAAC,GAAG,QAAQ,SAAS,CAAC,CAAC;CACrE,MAAM,EAAE,OAAO,eAAe,oBAAoB,UAAU,QAAQ,EAAE;CAEtE,MAAM,WAAW,MAAM,mBAAmB;EACxC;EACA,QAAQ,SAAS;EACjB;EACA,SAAS,WACP,aACE,MAAM,QACN,QACA,kBAAkB,MAAM,QAAQ,GAChC,MAAM,SAAU,UAChB,QAAQ,aACV;CACJ,CAAC;CAED,IAAI,CAAC,UACH,MAAM,IAAI,MACR,eAAe,UAAU,qBAAqB,IAAI,iJAGpD;CAGF,OAAO;AACT;;;;;;;;;;;AAYA,eAAsB,kBACpB,KACA,UAAoC,CAAC,GACH;CAClC,MAAM,WAAW,gBAAgB,OAAO;CACxC,MAAM,EAAE,OAAO,eAAe,oBAAoB,UAAU,QAAQ,EAAE;CAEtE,MAAM,WAAW,MAAM,mBAAmB;EACxC;EACA,QAAQ,SAAS;EACjB;EACA,SAAS,WACP,aACE,MAAM,MAAO,MAAM,QACnB,QACA,kBAAkB,MAAM,QAAQ,GAChC,MAAM,SAAU,UAChB,QAAQ,aACV;CACJ,CAAC;CAED,IAAI,CAAC,UACH,OAAO;EACL,MAAM;EACN,QAAQ;EACR,SAAS,CAAC;EACV,SAAS,CAAC;EACV,MAAM;EACN,QAAQ;CACV;CAKF,OAAO;AACT"}

package/esm/server/resolve-page-metadata.mjs

@@ -1,4 +1,4 @@
-//#region ../web/src/server/resolve-page-metadata.ts
+//#region web/src/server/resolve-page-metadata.ts
 /**
 * What `<head>` gets when the page did not render.
 *
@@ -29,5 +29,5 @@ function resolvePageMetadata(input) {
 }
 
 //#endregion
-export { resolvePageMetadata };
+export { ERROR_PAGE_METADATA, resolvePageMetadata };
 //# sourceMappingURL=resolve-page-metadata.mjs.map

package/esm/server/resolve-page-metadata.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-page-metadata.mjs","names":[],"sources":["../../../../../../../web/src/server/resolve-page-metadata.ts"],"sourcesContent":["/**\r\n * Stage 8 of the page pipeline — METADATA.\r\n *\r\n * Its own file because the behaviour that matters here is about ERRORS, and\r\n * reaching an error path through the full ten-stage pipeline means standing up\r\n * a real Request/Response pair to observe a `try`/`catch`. See\r\n * `resolve-page-metadata.spec.ts`.\r\n *\r\n * ## Why a page's `metadata` never runs after a failed loader\r\n *\r\n * It used to. `design/request-lifecycle.md` said \"exactly one of data/error\r\n * set\", and stage 8 duly called `metadata({ data: undefined, error })` when a\r\n * loader rejected — while `PageMetadata` declared `data` as always present.\r\n * **The type lied**, so the natural way to write a metadata function was also\r\n * the broken way:\r\n *\r\n * ```ts\r\n * export const metadata: PageMetadata<typeof loader> = ({ data }) => ({\r\n *   title: \"Home\",\r\n *   description: `${data.products.length} products in stock`,\r\n * });\r\n * ```\r\n *\r\n * All three function-form metadata exports in the reference app were written\r\n * exactly like that, and all three turned a loader's real error — a\r\n * `MissingDataSourceError`, say — into `TypeError: Cannot read properties of\r\n * undefined`, reported against a different file in a different subsystem. The\r\n * cost was never the crash; it was that every future debugging session on a\r\n * failed loader would start by investigating the wrong thing.\r\n *\r\n * The alternative was to widen `data` to `| undefined` and make every author\r\n * handle a path almost none of them care about — and without a discriminant,\r\n * TypeScript cannot narrow `data` from `if (error)` anyway, so authors would\r\n * have reached for `data!` and re-created the lie with extra syntax.\r\n *\r\n * So: a page describes a page it actually has. When there is no data there is\r\n * no page-authored description, and the framework supplies\r\n * {@link ERROR_PAGE_METADATA} instead.\r\n *\r\n * ## Partial failure\r\n *\r\n * Stage 7 runs app, layout and page loaders under `allSettled`, so the page's\r\n * own loader can resolve while an ANCESTOR's rejects. `failed` is still true\r\n * then, and the page's metadata still does not run — deliberately. Any recorded\r\n * error means a boundary renders instead of the page, and metadata describes\r\n * what is on screen. Describing a page the visitor never received is the same\r\n * defect in a quieter form.\r\n *\r\n * If per-page error metadata is ever wanted, it is a separate `errorMetadata`\r\n * export — a distinct signature for a distinct situation, not an arm of this\r\n * one. Nothing has asked for it.\r\n */\r\n\r\nimport type { SharedContext } from \"../index\";\r\nimport type { MetadataOutput, PageMetadata } from \"../metadata\";\r\nimport type { PipelineLoader } from \"./execute-page-request\";\r\n\r\n/**\r\n * What `<head>` gets when the page did not render.\r\n *\r\n * `robots` is the load-bearing member, not `title`. An error render is a\r\n * transient server state that happens to be reachable at a real URL; letting a\r\n * crawler index it puts \"Something went wrong\" in a search result for a page\r\n * that works. `title` is a fallback a boundary is free to improve on.\r\n */\r\nexport const ERROR_PAGE_METADATA: MetadataOutput = Object.freeze({\r\n  title: \"Something went wrong\",\r\n  robots: \"noindex\",\r\n});\r\n\r\nexport type ResolvePageMetadataInput = {\r\n  /** The page module's `metadata` export — absent, object, or function. */\r\n  metadata: PageMetadata<PipelineLoader> | undefined;\r\n  /** `bundle.pageData`. Read only when `failed` is false. */\r\n  data: unknown;\r\n  /** The value an earlier stage already recorded. Diagnostics only. */\r\n  error: unknown;\r\n  /** Whether an earlier stage recorded an error at all. */\r\n  failed: boolean;\r\n  shared: Readonly<SharedContext>;\r\n};\r\n\r\nexport type ResolvedPageMetadata = {\r\n  metadata: MetadataOutput | undefined;\r\n  /**\r\n   * Set only when the page's own metadata function threw on the SUCCESS path.\r\n   * Returned rather than rethrown so the caller can record it the same way a\r\n   * loader throw is recorded — the boundary renders and the framework keeps\r\n   * ownership of the status, instead of an exception escaping stage 8.\r\n   *\r\n   * Never set on the error path: nothing runs there that could throw, and an\r\n   * error arriving at stage 8 has already won.\r\n   */\r\n  thrown?: unknown;\r\n};\r\n\r\n/** The function arm of `PageMetadata`, for the one call this module makes. */\r\ntype PageMetadataFunction = Extract<PageMetadata<PipelineLoader>, (...args: never) => unknown>;\r\n\r\nexport function resolvePageMetadata(input: ResolvePageMetadataInput): ResolvedPageMetadata {\r\n  if (input.failed) {\r\n    return { metadata: ERROR_PAGE_METADATA };\r\n  }\r\n\r\n  const { metadata } = input;\r\n\r\n  if (typeof metadata !== \"function\") {\r\n    return { metadata };\r\n  }\r\n\r\n  try {\r\n    return {\r\n      metadata: (metadata as PageMetadataFunction)({\r\n        data: input.data as Parameters<PageMetadataFunction>[0][\"data\"],\r\n        shared: input.shared,\r\n      }),\r\n    };\r\n  } catch (thrown) {\r\n    return { metadata: undefined, thrown };\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;AAiEA,MAAa,sBAAsC,OAAO,OAAO;CAC/D,OAAO;CACP,QAAQ;AACV,CAAC;AA+BD,SAAgB,oBAAoB,OAAuD;CACzF,IAAI,MAAM,QACR,OAAO,EAAE,UAAU,oBAAoB;CAGzC,MAAM,EAAE,aAAa;CAErB,IAAI,OAAO,aAAa,YACtB,OAAO,EAAE,SAAS;CAGpB,IAAI;EACF,OAAO,EACL,UAAW,SAAkC;GAC3C,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC,EACH;CACF,SAAS,QAAQ;EACf,OAAO;GAAE,UAAU;GAAW;EAAO;CACvC;AACF"}
+{"version":3,"file":"resolve-page-metadata.mjs","names":[],"sources":["C:/Work/Warlock.js/web/src/server/resolve-page-metadata.ts"],"sourcesContent":["/**\r\n * Stage 8 of the page pipeline — METADATA.\r\n *\r\n * Its own file because the behaviour that matters here is about ERRORS, and\r\n * reaching an error path through the full ten-stage pipeline means standing up\r\n * a real Request/Response pair to observe a `try`/`catch`. See\r\n * `resolve-page-metadata.spec.ts`.\r\n *\r\n * ## Why a page's `metadata` never runs after a failed loader\r\n *\r\n * It used to. `design/request-lifecycle.md` said \"exactly one of data/error\r\n * set\", and stage 8 duly called `metadata({ data: undefined, error })` when a\r\n * loader rejected — while `PageMetadata` declared `data` as always present.\r\n * **The type lied**, so the natural way to write a metadata function was also\r\n * the broken way:\r\n *\r\n * ```ts\r\n * export const metadata: PageMetadata<typeof loader> = ({ data }) => ({\r\n *   title: \"Home\",\r\n *   description: `${data.products.length} products in stock`,\r\n * });\r\n * ```\r\n *\r\n * All three function-form metadata exports in the reference app were written\r\n * exactly like that, and all three turned a loader's real error — a\r\n * `MissingDataSourceError`, say — into `TypeError: Cannot read properties of\r\n * undefined`, reported against a different file in a different subsystem. The\r\n * cost was never the crash; it was that every future debugging session on a\r\n * failed loader would start by investigating the wrong thing.\r\n *\r\n * The alternative was to widen `data` to `| undefined` and make every author\r\n * handle a path almost none of them care about — and without a discriminant,\r\n * TypeScript cannot narrow `data` from `if (error)` anyway, so authors would\r\n * have reached for `data!` and re-created the lie with extra syntax.\r\n *\r\n * So: a page describes a page it actually has. When there is no data there is\r\n * no page-authored description, and the framework supplies\r\n * {@link ERROR_PAGE_METADATA} instead.\r\n *\r\n * ## Partial failure\r\n *\r\n * Stage 7 runs app, layout and page loaders root-to-leaf, so an ancestor\n * rejection prevents the page loader from starting. `failed` is still the\n * relevant guard here: any recorded error means a boundary renders instead of\n * the page, and metadata describes what is on screen. Describing a page the\n * visitor never received is the same defect in a quieter form.\n *\r\n * If per-page error metadata is ever wanted, it is a separate `errorMetadata`\r\n * export — a distinct signature for a distinct situation, not an arm of this\r\n * one. Nothing has asked for it.\r\n */\r\n\r\nimport type { SharedContext } from \"../index\";\r\nimport type { MetadataOutput, PageMetadata } from \"../metadata\";\r\nimport type { PipelineLoader } from \"./execute-page-request\";\r\n\r\n/**\r\n * What `<head>` gets when the page did not render.\r\n *\r\n * `robots` is the load-bearing member, not `title`. An error render is a\r\n * transient server state that happens to be reachable at a real URL; letting a\r\n * crawler index it puts \"Something went wrong\" in a search result for a page\r\n * that works. `title` is a fallback a boundary is free to improve on.\r\n */\r\nexport const ERROR_PAGE_METADATA: MetadataOutput = Object.freeze({\n  title: \"Something went wrong\",\r\n  robots: \"noindex\",\r\n});\r\n\r\nexport type ResolvePageMetadataInput = {\r\n  /** The page module's `metadata` export — absent, object, or function. */\r\n  metadata: PageMetadata<PipelineLoader> | undefined;\r\n  /** `bundle.pageData`. Read only when `failed` is false. */\r\n  data: unknown;\r\n  /** The value an earlier stage already recorded. Diagnostics only. */\r\n  error: unknown;\r\n  /** Whether an earlier stage recorded an error at all. */\r\n  failed: boolean;\r\n  shared: Readonly<SharedContext>;\r\n};\r\n\r\nexport type ResolvedPageMetadata = {\r\n  metadata: MetadataOutput | undefined;\r\n  /**\r\n   * Set only when the page's own metadata function threw on the SUCCESS path.\r\n   * Returned rather than rethrown so the caller can record it the same way a\r\n   * loader throw is recorded — the boundary renders and the framework keeps\r\n   * ownership of the status, instead of an exception escaping stage 8.\r\n   *\r\n   * Never set on the error path: nothing runs there that could throw, and an\r\n   * error arriving at stage 8 has already won.\r\n   */\r\n  thrown?: unknown;\r\n};\r\n\r\n/** The function arm of `PageMetadata`, for the one call this module makes. */\r\ntype PageMetadataFunction = Extract<PageMetadata<PipelineLoader>, (...args: never) => unknown>;\r\n\r\nexport function resolvePageMetadata(input: ResolvePageMetadataInput): ResolvedPageMetadata {\r\n  if (input.failed) {\r\n    return { metadata: ERROR_PAGE_METADATA };\r\n  }\r\n\r\n  const { metadata } = input;\r\n\r\n  if (typeof metadata !== \"function\") {\r\n    return { metadata };\r\n  }\r\n\r\n  try {\r\n    return {\r\n      metadata: (metadata as PageMetadataFunction)({\r\n        data: input.data as Parameters<PageMetadataFunction>[0][\"data\"],\r\n        shared: input.shared,\r\n      }),\r\n    };\r\n  } catch (thrown) {\r\n    return { metadata: undefined, thrown };\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;AAgEA,MAAa,sBAAsC,OAAO,OAAO;CAC/D,OAAO;CACP,QAAQ;AACV,CAAC;AA+BD,SAAgB,oBAAoB,OAAuD;CACzF,IAAI,MAAM,QACR,OAAO,EAAE,UAAU,oBAAoB;CAGzC,MAAM,EAAE,aAAa;CAErB,IAAI,OAAO,aAAa,YACtB,OAAO,EAAE,SAAS;CAGpB,IAAI;EACF,OAAO,EACL,UAAW,SAAkC;GAC3C,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC,EACH;CACF,SAAS,QAAQ;EACf,OAAO;GAAE,UAAU;GAAW;EAAO;CACvC;AACF"}

package/esm/server/resolve-validation-data.mjs

@@ -1,4 +1,4 @@
-//#region ../web/src/server/resolve-validation-data.ts
+//#region web/src/server/resolve-validation-data.ts
 /** The four names a page may list in `validation.validating`. */
 const SOURCES = {
 	body: (request) => request.body,

package/esm/server/resolve-validation-data.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-validation-data.mjs","names":[],"sources":["../../../../../../../web/src/server/resolve-validation-data.ts"],"sourcesContent":["/**\n * Stage 4's input — what the page's `validation.schema` is handed.\n *\n * ## One request, one parse, one grammar\n *\n * This used to draw its four sources from **two** places. `body` and `headers`\n * came from the request; `query` and `params` came from a match object that\n * `execute-page-request.ts` built by re-parsing the URL itself with\n * `Object.fromEntries(new URLSearchParams(...))`.\n *\n * Core's parser is bracket-aware and preserves repeated keys. That one is\n * neither:\n *\n * ```\n * ?tags=a&tags=b&filter[status]=active\n *   core  → { tags: [\"a\",\"b\"], filter: { status: \"active\" } }\n *   match → { tags: \"b\", \"filter[status]\": \"active\" }\n * ```\n *\n * **So a page's validation rules were checking different data than its loader\n * received.** A rule on `filter.status` could never fire — validation saw a key\n * literally named `filter[status]` — and where a key was sent twice, only the\n * last value was ever examined. A field the author believed was validated was\n * not, and nothing about that was visible from reading the validation rules.\n *\n * Every source is now the request. Core has already parsed the URL by the time\n * this runs; parsing it a second time can only ever produce a second answer.\n *\n * Mirrors core's `validateAll.ts:8-31`, with the page default: **params +\n * query, not body** — a page load is a GET.\n */\n\nexport type ValidationRequest = {\n  body?: Record<string, unknown>;\n  headers?: Record<string, unknown>;\n  query?: Record<string, unknown>;\n  params?: Record<string, unknown>;\n};\n\n/** The four names a page may list in `validation.validating`. */\nconst SOURCES = {\n  body: (request: ValidationRequest) => request.body,\n  query: (request: ValidationRequest) => request.query,\n  params: (request: ValidationRequest) => request.params,\n  headers: (request: ValidationRequest) => request.headers,\n} as const;\n\nexport function resolveValidationData(\n  validating: readonly string[] | undefined,\n  request: ValidationRequest,\n): Record<string, unknown> {\n  // The page default. `params` last so a route parameter wins a query key of\n  // the same name — the URL path is the more authoritative of the two.\n  if (!validating || validating.length === 0) {\n    return { ...request.query, ...request.params };\n  }\n\n  let data: Record<string, unknown> = {};\n\n  for (const source of validating) {\n    const read = SOURCES[source as keyof typeof SOURCES];\n\n    // An unknown source name contributes nothing rather than throwing: the\n    // list is app-authored, and stage 4 is not the place to litigate it.\n    if (read) data = { ...data, ...(read(request) ?? {}) };\n  }\n\n  return data;\n}\n"],"mappings":";;AAwCA,MAAM,UAAU;CACd,OAAO,YAA+B,QAAQ;CAC9C,QAAQ,YAA+B,QAAQ;CAC/C,SAAS,YAA+B,QAAQ;CAChD,UAAU,YAA+B,QAAQ;AACnD;AAEA,SAAgB,sBACd,YACA,SACyB;CAGzB,IAAI,CAAC,cAAc,WAAW,WAAW,GACvC,OAAO;EAAE,GAAG,QAAQ;EAAO,GAAG,QAAQ;CAAO;CAG/C,IAAI,OAAgC,CAAC;CAErC,KAAK,MAAM,UAAU,YAAY;EAC/B,MAAM,OAAO,QAAQ;EAIrB,IAAI,MAAM,OAAO;GAAE,GAAG;GAAM,GAAI,KAAK,OAAO,KAAK,CAAC;EAAG;CACvD;CAEA,OAAO;AACT"}
+{"version":3,"file":"resolve-validation-data.mjs","names":[],"sources":["C:/Work/Warlock.js/web/src/server/resolve-validation-data.ts"],"sourcesContent":["/**\n * Stage 4's input — what the page's `validation.schema` is handed.\n *\n * ## One request, one parse, one grammar\n *\n * This used to draw its four sources from **two** places. `body` and `headers`\n * came from the request; `query` and `params` came from a match object that\n * `execute-page-request.ts` built by re-parsing the URL itself with\n * `Object.fromEntries(new URLSearchParams(...))`.\n *\n * Core's parser is bracket-aware and preserves repeated keys. That one is\n * neither:\n *\n * ```\n * ?tags=a&tags=b&filter[status]=active\n *   core  → { tags: [\"a\",\"b\"], filter: { status: \"active\" } }\n *   match → { tags: \"b\", \"filter[status]\": \"active\" }\n * ```\n *\n * **So a page's validation rules were checking different data than its loader\n * received.** A rule on `filter.status` could never fire — validation saw a key\n * literally named `filter[status]` — and where a key was sent twice, only the\n * last value was ever examined. A field the author believed was validated was\n * not, and nothing about that was visible from reading the validation rules.\n *\n * Every source is now the request. Core has already parsed the URL by the time\n * this runs; parsing it a second time can only ever produce a second answer.\n *\n * Mirrors core's `validateAll.ts:8-31`, with the page default: **params +\n * query, not body** — a page load is a GET.\n */\n\nexport type ValidationRequest = {\n  body?: Record<string, unknown>;\n  headers?: Record<string, unknown>;\n  query?: Record<string, unknown>;\n  params?: Record<string, unknown>;\n};\n\n/** The four names a page may list in `validation.validating`. */\nconst SOURCES = {\n  body: (request: ValidationRequest) => request.body,\n  query: (request: ValidationRequest) => request.query,\n  params: (request: ValidationRequest) => request.params,\n  headers: (request: ValidationRequest) => request.headers,\n} as const;\n\nexport function resolveValidationData(\n  validating: readonly string[] | undefined,\n  request: ValidationRequest,\n): Record<string, unknown> {\n  // The page default. `params` last so a route parameter wins a query key of\n  // the same name — the URL path is the more authoritative of the two.\n  if (!validating || validating.length === 0) {\n    return { ...request.query, ...request.params };\n  }\n\n  let data: Record<string, unknown> = {};\n\n  for (const source of validating) {\n    const read = SOURCES[source as keyof typeof SOURCES];\n\n    // An unknown source name contributes nothing rather than throwing: the\n    // list is app-authored, and stage 4 is not the place to litigate it.\n    if (read) data = { ...data, ...(read(request) ?? {}) };\n  }\n\n  return data;\n}\n"],"mappings":";;AAwCA,MAAM,UAAU;CACd,OAAO,YAA+B,QAAQ;CAC9C,QAAQ,YAA+B,QAAQ;CAC/C,SAAS,YAA+B,QAAQ;CAChD,UAAU,YAA+B,QAAQ;AACnD;AAEA,SAAgB,sBACd,YACA,SACyB;CAGzB,IAAI,CAAC,cAAc,WAAW,WAAW,GACvC,OAAO;EAAE,GAAG,QAAQ;EAAO,GAAG,QAAQ;CAAO;CAG/C,IAAI,OAAgC,CAAC;CAErC,KAAK,MAAM,UAAU,YAAY;EAC/B,MAAM,OAAO,QAAQ;EAIrB,IAAI,MAAM,OAAO;GAAE,GAAG;GAAM,GAAI,KAAK,OAAO,KAAK,CAAC;EAAG;CACvD;CAEA,OAAO;AACT"}

package/esm/server/settle-page-response.d.mts

@@ -1 +1,58 @@
-export { };
+import { PageLevelName } from "./execute-page-request.types.mjs";
+import { Response } from "@warlock.js/core";
+
+//#region web/src/server/settle-page-response.d.ts
+/** A single committed response header, in application order. */
+type BufferedHeader = {
+  key: string;
+  value: string;
+};
+/** A single committed response cookie — the shape `applyBufferedCookie` replays. */
+type BufferedCookie = {
+  name: string;
+  value: unknown;
+  options?: Record<string, unknown>;
+};
+/** The two loader short-circuit kinds a buffered response can signal. */
+type LoaderShortCircuitKind = "redirect" | "notFound";
+declare const LOADER_SHORT_CIRCUIT: unique symbol;
+/**
+ * What `response.redirect()` / `response.permanentRedirect()` / `response.notFound()`
+ * return from inside a loader — a branded value the stage 7 settle scan
+ * recognises by symbol, never by shape (so an app returning an
+ * accidentally-similar plain object can't be mistaken for one).
+ */
+type LoaderShortCircuitSignal = {
+  readonly [LOADER_SHORT_CIRCUIT]: true;
+  kind: LoaderShortCircuitKind;
+  statusCode: number;
+  url?: string;
+  body?: unknown;
+};
+/**
+ * The response surface a LOADER sees — never the live core `Response`.
+ * `header()`/`cookie()` queue into the level's own buffer; nothing here
+ * touches the real reply. `redirect()`/`permanentRedirect()`/`notFound()`
+ * queue the buffer's own status (+ `Location`, for the two redirects) AND
+ * return the branded signal stage 7 detects — the loader is expected to
+ * `return response.redirect(...)`.
+ */
+type BufferedResponse = {
+  header(key: string, value: unknown): BufferedResponse;
+  headers(bag: Record<string, unknown>): BufferedResponse;
+  cookie(name: string, value: unknown, options?: Record<string, unknown>): BufferedResponse;
+  setStatusCode(statusCode: number): BufferedResponse;
+  redirect(url: string, statusCode?: number): LoaderShortCircuitSignal;
+  permanentRedirect(url: string): LoaderShortCircuitSignal;
+  notFound(body?: unknown): LoaderShortCircuitSignal;
+};
+/** Stage 7's folded, applied result — what `bundle.commit` carries. */
+type PageResponseCommit = {
+  committedLevels: PageLevelName[];
+  headers: BufferedHeader[];
+  cookies: BufferedCookie[];
+  statusCode?: number;
+};
+//#endregion
+export { BufferedCookie, BufferedHeader, BufferedResponse, LoaderShortCircuitKind, PageResponseCommit };
+//# sourceMappingURL=settle-page-response.d.mts.map

package/esm/server/settle-page-response.mjs

@@ -1,47 +1,11 @@
 import { randomUUID } from "node:crypto";
 
-//#region ../web/src/server/settle-page-response.ts
-/** Root → leaf. The pipeline's one ordering, used by every stage that walks levels. */
+//#region web/src/server/settle-page-response.ts
 const LEVEL_ORDER = [
 	"app",
 	"layout",
 	"page"
 ];
-/**
-* Settle the surviving buffers root→leaf, per cookie name / header key: a
-* leafward level re-writing the same key wins it, everything else merges.
-*
-* **Headers and status are mirrored onto the live response here; COOKIES ARE
-* NOT**, and that asymmetry is the fix for a real defect rather than an
-* oversight. `header()` and `setStatusCode()` are keyed SETs, so mirroring here
-* and re-applying at the emit is idempotent. `cookie()` APPENDS — Fastify emits
-* one `Set-Cookie` per call — so doing both put the same cookie on the wire
-* twice, on every page response including the happy path.
-*
-* The emit is the authoritative application site (`createPageRouteHandler`
-* replays `rendered.cookies` through `applyBufferedCookie`), so the cookie loop
-* is the one that goes.
-*/
-function commitBuffers(realResponse, ordered, forcedStatusCode) {
-	const headers = /* @__PURE__ */ new Map();
-	const cookies = /* @__PURE__ */ new Map();
-	let statusCode;
-	for (const { buffer } of ordered) {
-		for (const header of buffer.headers) headers.set(header.key.toLowerCase(), header);
-		for (const cookie of buffer.cookies) cookies.set(cookie.name, cookie);
-		if (buffer.statusCode !== void 0) statusCode = buffer.statusCode;
-	}
-	if (forcedStatusCode !== void 0) statusCode = forcedStatusCode;
-	for (const header of headers.values()) realResponse.header(header.key, header.value);
-	if (statusCode !== void 0) realResponse.setStatusCode(statusCode);
-	return {
-		headers: [...headers.values()],
-		cookies: [...cookies.values()],
-		statusCode,
-		committedLevels: ordered.map(({ level }) => level)
-	};
-}
-/** Nearest `ErrorBoundary` at or rootward of the throw; `app` is terminal. */
 function designateBoundary(throwingLevel, triple) {
 	const throwingIndex = LEVEL_ORDER.indexOf(throwingLevel);
 	for (let index = throwingIndex; index >= 0; index--) {
@@ -56,14 +20,6 @@ function designateBoundary(throwingLevel, triple) {
 		boundaryLevel: "app"
 	};
 }
-/**
-* The one place a throw enters the bundle.
-*
-* **Production never lets the raw error reach a client** — the boundary gets a
-* surrogate carrying only `digest`, which is all the reference app's
-* ErrorBoundary renders. Dev keeps the real thrown value so the stack survives,
-* and it is never mutated to attach `digest`: that lives on the RECORD only.
-*/
 function buildErrorRecord(thrown, boundary, requestPath) {
 	const digest = randomUUID();
 	console.error("[warlock] page error", digest, ...requestPath ? [requestPath] : [], thrown);
@@ -71,6 +27,7 @@ function buildErrorRecord(thrown, boundary, requestPath) {
 		const surrogate = /* @__PURE__ */ new Error("An unexpected error occurred.");
 		surrogate.digest = digest;
 		return {
+			originalError: thrown,
 			error: surrogate,
 			boundary,
 			digest,
@@ -78,13 +35,121 @@ function buildErrorRecord(thrown, boundary, requestPath) {
 		};
 	}
 	return {
+		originalError: void 0,
 		error: thrown,
 		boundary,
 		digest,
 		scrubbed: false
 	};
 }
+const LOADER_SHORT_CIRCUIT = Symbol("warlock.page.loaderShortCircuit");
+function isLoaderShortCircuit(value) {
+	return Boolean(value) && typeof value === "object" && LOADER_SHORT_CIRCUIT in value;
+}
+function createLevelBuffer() {
+	return {
+		headers: [],
+		cookies: []
+	};
+}
+function createBufferedResponse(buffer) {
+	const bufferedResponse = {
+		header(key, value) {
+			buffer.headers.push({
+				key,
+				value: String(value)
+			});
+			return bufferedResponse;
+		},
+		headers(bag) {
+			for (const [key, value] of Object.entries(bag)) bufferedResponse.header(key, value);
+			return bufferedResponse;
+		},
+		cookie(name, value, options) {
+			buffer.cookies.push({
+				name,
+				value,
+				options
+			});
+			return bufferedResponse;
+		},
+		setStatusCode(statusCode) {
+			buffer.statusCode = statusCode;
+			return bufferedResponse;
+		},
+		redirect(url, statusCode = 302) {
+			buffer.statusCode = statusCode;
+			buffer.headers.push({
+				key: "Location",
+				value: url
+			});
+			return {
+				[LOADER_SHORT_CIRCUIT]: true,
+				kind: "redirect",
+				statusCode,
+				url,
+				body: void 0
+			};
+		},
+		permanentRedirect(url) {
+			return bufferedResponse.redirect(url, 301);
+		},
+		notFound(body) {
+			buffer.statusCode = 404;
+			return {
+				[LOADER_SHORT_CIRCUIT]: true,
+				kind: "notFound",
+				statusCode: 404,
+				url: void 0,
+				body
+			};
+		}
+	};
+	return bufferedResponse;
+}
+/**
+* Fold every surviving buffer root→leaf into ONE map per key (header key
+* case-insensitively, cookie by name) — leafward wins, insertion position
+* stays where the key FIRST appeared. Applies the folded headers and status
+* to the REAL response (`header()`/`setStatusCode()` are idempotent keyed
+* sets, so this is safe even though `commitBuffers` can run before render
+* changes its mind about the status later). Cookies are NOT applied to the
+* real response here — `cookie()` APPENDS, so mirroring it here and again at
+* the wire emit would duplicate every `Set-Cookie`. The single application
+* site is the emit (`create-page-route-handler.ts`, via `applyBufferedCookie`
+* over `bundle.commit.cookies`).
+*/
+function commitBuffers(response, buffers, committedLevels) {
+	const headerOrder = [];
+	const headerMap = /* @__PURE__ */ new Map();
+	const cookieOrder = [];
+	const cookieMap = /* @__PURE__ */ new Map();
+	let statusCode;
+	for (const level of committedLevels) {
+		const buffer = buffers[level];
+		for (const header of buffer.headers) {
+			const key = header.key.toLowerCase();
+			if (!headerMap.has(key)) headerOrder.push(key);
+			headerMap.set(key, header);
+		}
+		for (const cookie of buffer.cookies) {
+			if (!cookieMap.has(cookie.name)) cookieOrder.push(cookie.name);
+			cookieMap.set(cookie.name, cookie);
+		}
+		if (buffer.statusCode !== void 0) statusCode = buffer.statusCode;
+	}
+	const headers = headerOrder.map((key) => headerMap.get(key));
+	const cookies = cookieOrder.map((name) => cookieMap.get(name));
+	for (const header of headers) response.header(header.key, header.value);
+	if (statusCode !== void 0) response.setStatusCode(statusCode);
+	return {
+		committedLevels,
+		headers,
+		cookies,
+		statusCode
+	};
+}
 
 //#endregion
-export { LEVEL_ORDER, buildErrorRecord, commitBuffers, designateBoundary };
+export { LEVEL_ORDER, buildErrorRecord, commitBuffers, createBufferedResponse, createLevelBuffer, designateBoundary, isLoaderShortCircuit };
 //# sourceMappingURL=settle-page-response.mjs.map

package/esm/server/settle-page-response.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settle-page-response.mjs","names":[],"sources":["../../../../../../../web/src/server/settle-page-response.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type { BufferedCookie, BufferedHeader, ResponseBuffer } from \"./buffered-response\";\nimport type {\n  PageBoundaryDesignation,\n  PageErrorRecord,\n  PageLevelName,\n  PageResponseCommit,\n  PageRouteEntry,\n  PipelineResponse,\n} from \"./execute-page-request.types\";\n\n/** Root → leaf. The pipeline's one ordering, used by every stage that walks levels. */\nexport const LEVEL_ORDER: readonly PageLevelName[] = [\"app\", \"layout\", \"page\"];\n\n/**\n * Settle the surviving buffers root→leaf, per cookie name / header key: a\n * leafward level re-writing the same key wins it, everything else merges.\n *\n * **Headers and status are mirrored onto the live response here; COOKIES ARE\n * NOT**, and that asymmetry is the fix for a real defect rather than an\n * oversight. `header()` and `setStatusCode()` are keyed SETs, so mirroring here\n * and re-applying at the emit is idempotent. `cookie()` APPENDS — Fastify emits\n * one `Set-Cookie` per call — so doing both put the same cookie on the wire\n * twice, on every page response including the happy path.\n *\n * The emit is the authoritative application site (`createPageRouteHandler`\n * replays `rendered.cookies` through `applyBufferedCookie`), so the cookie loop\n * is the one that goes.\n */\nexport function commitBuffers(\n  realResponse: PipelineResponse,\n  ordered: readonly { level: PageLevelName; buffer: ResponseBuffer }[],\n  forcedStatusCode?: number,\n): PageResponseCommit {\n  const headers = new Map<string, BufferedHeader>();\n  const cookies = new Map<string, BufferedCookie>();\n  let statusCode: number | undefined;\n\n  for (const { buffer } of ordered) {\n    for (const header of buffer.headers) headers.set(header.key.toLowerCase(), header);\n    for (const cookie of buffer.cookies) cookies.set(cookie.name, cookie);\n    if (buffer.statusCode !== undefined) statusCode = buffer.statusCode;\n  }\n\n  if (forcedStatusCode !== undefined) statusCode = forcedStatusCode;\n\n  for (const header of headers.values()) realResponse.header(header.key, header.value);\n  if (statusCode !== undefined) realResponse.setStatusCode(statusCode);\n\n  // No `realResponse.cookie(...)` loop — see above. Settled cookies leave\n  // through the return value only, and the emit applies them exactly once.\n\n  return {\n    headers: [...headers.values()],\n    cookies: [...cookies.values()],\n    statusCode,\n    committedLevels: ordered.map(({ level }) => level),\n  };\n}\n\n/** Nearest `ErrorBoundary` at or rootward of the throw; `app` is terminal. */\nexport function designateBoundary(\n  throwingLevel: PageLevelName,\n  triple: PageRouteEntry[\"triple\"],\n): PageBoundaryDesignation {\n  const throwingIndex = LEVEL_ORDER.indexOf(throwingLevel);\n\n  for (let index = throwingIndex; index >= 0; index--) {\n    const level = LEVEL_ORDER[index];\n\n    if (triple[level].ErrorBoundary) {\n      return { throwingLevel, boundaryLevel: level };\n    }\n  }\n\n  // The framework owns a root boundary.\n  return { throwingLevel, boundaryLevel: \"app\" };\n}\n\n/**\n * The one place a throw enters the bundle.\n *\n * **Production never lets the raw error reach a client** — the boundary gets a\n * surrogate carrying only `digest`, which is all the reference app's\n * ErrorBoundary renders. Dev keeps the real thrown value so the stack survives,\n * and it is never mutated to attach `digest`: that lives on the RECORD only.\n */\nexport function buildErrorRecord(\n  thrown: unknown,\n  boundary: PageBoundaryDesignation,\n  requestPath?: string,\n): PageErrorRecord {\n  const digest = randomUUID();\n\n  // The boundary tells the user this was logged, so log it. A digest that\n  // appears in no log is worse than no digest.\n  console.error(\"[warlock] page error\", digest, ...(requestPath ? [requestPath] : []), thrown);\n\n  if (process.env.NODE_ENV === \"production\") {\n    const surrogate = new Error(\"An unexpected error occurred.\");\n\n    (surrogate as Error & { digest: string }).digest = digest;\n\n    return { error: surrogate, boundary, digest, scrubbed: true };\n  }\n\n  return { error: thrown, boundary, digest, scrubbed: false };\n}\n"],"mappings":";;;;AAYA,MAAa,cAAwC;CAAC;CAAO;CAAU;AAAM;;;;;;;;;;;;;;;;AAiB7E,SAAgB,cACd,cACA,SACA,kBACoB;CACpB,MAAM,0BAAU,IAAI,IAA4B;CAChD,MAAM,0BAAU,IAAI,IAA4B;CAChD,IAAI;CAEJ,KAAK,MAAM,EAAE,YAAY,SAAS;EAChC,KAAK,MAAM,UAAU,OAAO,SAAS,QAAQ,IAAI,OAAO,IAAI,YAAY,GAAG,MAAM;EACjF,KAAK,MAAM,UAAU,OAAO,SAAS,QAAQ,IAAI,OAAO,MAAM,MAAM;EACpE,IAAI,OAAO,eAAe,QAAW,aAAa,OAAO;CAC3D;CAEA,IAAI,qBAAqB,QAAW,aAAa;CAEjD,KAAK,MAAM,UAAU,QAAQ,OAAO,GAAG,aAAa,OAAO,OAAO,KAAK,OAAO,KAAK;CACnF,IAAI,eAAe,QAAW,aAAa,cAAc,UAAU;CAKnE,OAAO;EACL,SAAS,CAAC,GAAG,QAAQ,OAAO,CAAC;EAC7B,SAAS,CAAC,GAAG,QAAQ,OAAO,CAAC;EAC7B;EACA,iBAAiB,QAAQ,KAAK,EAAE,YAAY,KAAK;CACnD;AACF;;AAGA,SAAgB,kBACd,eACA,QACyB;CACzB,MAAM,gBAAgB,YAAY,QAAQ,aAAa;CAEvD,KAAK,IAAI,QAAQ,eAAe,SAAS,GAAG,SAAS;EACnD,MAAM,QAAQ,YAAY;EAE1B,IAAI,OAAO,MAAM,CAAC,eAChB,OAAO;GAAE;GAAe,eAAe;EAAM;CAEjD;CAGA,OAAO;EAAE;EAAe,eAAe;CAAM;AAC/C;;;;;;;;;AAUA,SAAgB,iBACd,QACA,UACA,aACiB;CACjB,MAAM,SAAS,WAAW;CAI1B,QAAQ,MAAM,wBAAwB,QAAQ,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,GAAI,MAAM;CAE3F,IAAI,QAAQ,IAAI,aAAa,cAAc;EACzC,MAAM,4BAAY,IAAI,MAAM,+BAA+B;EAE3D,AAAC,UAAyC,SAAS;EAEnD,OAAO;GAAE,OAAO;GAAW;GAAU;GAAQ,UAAU;EAAK;CAC9D;CAEA,OAAO;EAAE,OAAO;EAAQ;EAAU;EAAQ,UAAU;CAAM;AAC5D"}
+{"version":3,"file":"settle-page-response.mjs","names":[],"sources":["C:/Work/Warlock.js/web/src/server/settle-page-response.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type { Response } from \"@warlock.js/core\";\nimport type {\n  PageBoundaryDesignation,\n  PageErrorRecord,\n  PageLevelName,\n  PageRouteEntry,\n} from \"./execute-page-request.types\";\n\nexport const LEVEL_ORDER: readonly PageLevelName[] = [\"app\", \"layout\", \"page\"];\n\nexport function designateBoundary(\n  throwingLevel: PageLevelName,\n  triple: PageRouteEntry[\"triple\"],\n): PageBoundaryDesignation {\n  const throwingIndex = LEVEL_ORDER.indexOf(throwingLevel);\n\n  for (let index = throwingIndex; index >= 0; index--) {\n    const level = LEVEL_ORDER[index];\n\n    if (triple[level].ErrorBoundary) {\n      return { throwingLevel, boundaryLevel: level };\n    }\n  }\n\n  return { throwingLevel, boundaryLevel: \"app\" };\n}\n\nexport function buildErrorRecord(\n  thrown: unknown,\n  boundary: PageBoundaryDesignation,\n  requestPath?: string,\n): PageErrorRecord {\n  const digest = randomUUID();\n\n  console.error(\"[warlock] page error\", digest, ...(requestPath ? [requestPath] : []), thrown);\n\n  if (process.env.NODE_ENV === \"production\") {\n    const surrogate = new Error(\"An unexpected error occurred.\");\n\n    (surrogate as Error & { digest: string }).digest = digest;\n\n    return { originalError: thrown, error: surrogate, boundary, digest, scrubbed: true };\n  }\n\n  // `error` already IS the real thrown value here — `originalError` only ever\n  // needs to diverge from it on the scrubbed (production) path above. Leaving\n  // it `undefined` rather than a redundant second reference to the same object\n  // keeps the record's `toEqual` shape honest (undefined properties compare as\n  // absent) and readers still get the real error via\n  // `record.originalError ?? record.error`.\n  return { originalError: undefined, error: thrown, boundary, digest, scrubbed: false };\n}\n\n// ---------------------------------------------------------------------------\n// Stage 6/7 — buffered per-level responses, and the root→leaf commit\n// ---------------------------------------------------------------------------\n\n/** A single committed response header, in application order. */\nexport type BufferedHeader = { key: string; value: string };\n\n/** A single committed response cookie — the shape `applyBufferedCookie` replays. */\nexport type BufferedCookie = {\n  name: string;\n  value: unknown;\n  options?: Record<string, unknown>;\n};\n\n/** The two loader short-circuit kinds a buffered response can signal. */\nexport type LoaderShortCircuitKind = \"redirect\" | \"notFound\";\n\nconst LOADER_SHORT_CIRCUIT = Symbol(\"warlock.page.loaderShortCircuit\");\n\n/**\n * What `response.redirect()` / `response.permanentRedirect()` / `response.notFound()`\n * return from inside a loader — a branded value the stage 7 settle scan\n * recognises by symbol, never by shape (so an app returning an\n * accidentally-similar plain object can't be mistaken for one).\n */\nexport type LoaderShortCircuitSignal = {\n  readonly [LOADER_SHORT_CIRCUIT]: true;\n  kind: LoaderShortCircuitKind;\n  statusCode: number;\n  url?: string;\n  body?: unknown;\n};\n\nexport function isLoaderShortCircuit(value: unknown): value is LoaderShortCircuitSignal {\n  return Boolean(value) && typeof value === \"object\" && LOADER_SHORT_CIRCUIT in (value as object);\n}\n\n/** One level's scratch buffer — what `response.header()`/`.cookie()` write into. */\nexport type LevelBuffer = {\n  headers: BufferedHeader[];\n  cookies: BufferedCookie[];\n  statusCode?: number;\n};\n\nexport function createLevelBuffer(): LevelBuffer {\n  return { headers: [], cookies: [] };\n}\n\n/**\n * The response surface a LOADER sees — never the live core `Response`.\n * `header()`/`cookie()` queue into the level's own buffer; nothing here\n * touches the real reply. `redirect()`/`permanentRedirect()`/`notFound()`\n * queue the buffer's own status (+ `Location`, for the two redirects) AND\n * return the branded signal stage 7 detects — the loader is expected to\n * `return response.redirect(...)`.\n */\nexport type BufferedResponse = {\n  header(key: string, value: unknown): BufferedResponse;\n  headers(bag: Record<string, unknown>): BufferedResponse;\n  cookie(name: string, value: unknown, options?: Record<string, unknown>): BufferedResponse;\n  setStatusCode(statusCode: number): BufferedResponse;\n  redirect(url: string, statusCode?: number): LoaderShortCircuitSignal;\n  permanentRedirect(url: string): LoaderShortCircuitSignal;\n  notFound(body?: unknown): LoaderShortCircuitSignal;\n};\n\nexport function createBufferedResponse(buffer: LevelBuffer): BufferedResponse {\n  const bufferedResponse: BufferedResponse = {\n    header(key, value) {\n      buffer.headers.push({ key, value: String(value) });\n      return bufferedResponse;\n    },\n    headers(bag) {\n      for (const [key, value] of Object.entries(bag)) bufferedResponse.header(key, value);\n      return bufferedResponse;\n    },\n    cookie(name, value, options) {\n      buffer.cookies.push({ name, value, options });\n      return bufferedResponse;\n    },\n    setStatusCode(statusCode) {\n      buffer.statusCode = statusCode;\n      return bufferedResponse;\n    },\n    redirect(url, statusCode = 302) {\n      buffer.statusCode = statusCode;\n      buffer.headers.push({ key: \"Location\", value: url });\n      return { [LOADER_SHORT_CIRCUIT]: true, kind: \"redirect\", statusCode, url, body: undefined };\n    },\n    permanentRedirect(url) {\n      return bufferedResponse.redirect(url, 301);\n    },\n    notFound(body) {\n      buffer.statusCode = 404;\n      return { [LOADER_SHORT_CIRCUIT]: true, kind: \"notFound\", statusCode: 404, url: undefined, body };\n    },\n  };\n\n  return bufferedResponse;\n}\n\n/** Stage 7's folded, applied result — what `bundle.commit` carries. */\nexport type PageResponseCommit = {\n  committedLevels: PageLevelName[];\n  headers: BufferedHeader[];\n  cookies: BufferedCookie[];\n  statusCode?: number;\n};\n\n/**\n * Fold every surviving buffer root→leaf into ONE map per key (header key\n * case-insensitively, cookie by name) — leafward wins, insertion position\n * stays where the key FIRST appeared. Applies the folded headers and status\n * to the REAL response (`header()`/`setStatusCode()` are idempotent keyed\n * sets, so this is safe even though `commitBuffers` can run before render\n * changes its mind about the status later). Cookies are NOT applied to the\n * real response here — `cookie()` APPENDS, so mirroring it here and again at\n * the wire emit would duplicate every `Set-Cookie`. The single application\n * site is the emit (`create-page-route-handler.ts`, via `applyBufferedCookie`\n * over `bundle.commit.cookies`).\n */\nexport function commitBuffers(\n  response: Response,\n  buffers: Record<PageLevelName, LevelBuffer>,\n  committedLevels: PageLevelName[],\n): PageResponseCommit {\n  const headerOrder: string[] = [];\n  const headerMap = new Map<string, BufferedHeader>();\n  const cookieOrder: string[] = [];\n  const cookieMap = new Map<string, BufferedCookie>();\n  let statusCode: number | undefined;\n\n  for (const level of committedLevels) {\n    const buffer = buffers[level];\n\n    for (const header of buffer.headers) {\n      const key = header.key.toLowerCase();\n      if (!headerMap.has(key)) headerOrder.push(key);\n      headerMap.set(key, header);\n    }\n\n    for (const cookie of buffer.cookies) {\n      if (!cookieMap.has(cookie.name)) cookieOrder.push(cookie.name);\n      cookieMap.set(cookie.name, cookie);\n    }\n\n    if (buffer.statusCode !== undefined) statusCode = buffer.statusCode;\n  }\n\n  const headers = headerOrder.map(key => headerMap.get(key)!);\n  const cookies = cookieOrder.map(name => cookieMap.get(name)!);\n\n  for (const header of headers) response.header(header.key, header.value);\n  if (statusCode !== undefined) response.setStatusCode(statusCode);\n\n  return { committedLevels, headers, cookies, statusCode };\n}\n"],"mappings":";;;AASA,MAAa,cAAwC;CAAC;CAAO;CAAU;AAAM;AAE7E,SAAgB,kBACd,eACA,QACyB;CACzB,MAAM,gBAAgB,YAAY,QAAQ,aAAa;CAEvD,KAAK,IAAI,QAAQ,eAAe,SAAS,GAAG,SAAS;EACnD,MAAM,QAAQ,YAAY;EAE1B,IAAI,OAAO,OAAO,eAChB,OAAO;GAAE;GAAe,eAAe;EAAM;CAEjD;CAEA,OAAO;EAAE;EAAe,eAAe;CAAM;AAC/C;AAEA,SAAgB,iBACd,QACA,UACA,aACiB;CACjB,MAAM,SAAS,WAAW;CAE1B,QAAQ,MAAM,wBAAwB,QAAQ,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,GAAI,MAAM;CAE3F,IAAI,QAAQ,IAAI,aAAa,cAAc;EACzC,MAAM,4BAAY,IAAI,MAAM,+BAA+B;EAE3D,AAAC,UAAyC,SAAS;EAEnD,OAAO;GAAE,eAAe;GAAQ,OAAO;GAAW;GAAU;GAAQ,UAAU;EAAK;CACrF;CAQA,OAAO;EAAE,eAAe;EAAW,OAAO;EAAQ;EAAU;EAAQ,UAAU;CAAM;AACtF;AAmBA,MAAM,uBAAuB,OAAO,iCAAiC;AAgBrE,SAAgB,qBAAqB,OAAmD;CACtF,OAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,wBAAyB;AACjF;AASA,SAAgB,oBAAiC;CAC/C,OAAO;EAAE,SAAS,CAAC;EAAG,SAAS,CAAC;CAAE;AACpC;AAoBA,SAAgB,uBAAuB,QAAuC;CAC5E,MAAM,mBAAqC;EACzC,OAAO,KAAK,OAAO;GACjB,OAAO,QAAQ,KAAK;IAAE;IAAK,OAAO,OAAO,KAAK;GAAE,CAAC;GACjD,OAAO;EACT;EACA,QAAQ,KAAK;GACX,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAAG,iBAAiB,OAAO,KAAK,KAAK;GAClF,OAAO;EACT;EACA,OAAO,MAAM,OAAO,SAAS;GAC3B,OAAO,QAAQ,KAAK;IAAE;IAAM;IAAO;GAAQ,CAAC;GAC5C,OAAO;EACT;EACA,cAAc,YAAY;GACxB,OAAO,aAAa;GACpB,OAAO;EACT;EACA,SAAS,KAAK,aAAa,KAAK;GAC9B,OAAO,aAAa;GACpB,OAAO,QAAQ,KAAK;IAAE,KAAK;IAAY,OAAO;GAAI,CAAC;GACnD,OAAO;KAAG,uBAAuB;IAAM,MAAM;IAAY;IAAY;IAAK,MAAM;GAAU;EAC5F;EACA,kBAAkB,KAAK;GACrB,OAAO,iBAAiB,SAAS,KAAK,GAAG;EAC3C;EACA,SAAS,MAAM;GACb,OAAO,aAAa;GACpB,OAAO;KAAG,uBAAuB;IAAM,MAAM;IAAY,YAAY;IAAK,KAAK;IAAW;GAAK;EACjG;CACF;CAEA,OAAO;AACT;;;;;;;;;;;;;AAsBA,SAAgB,cACd,UACA,SACA,iBACoB;CACpB,MAAM,cAAwB,CAAC;CAC/B,MAAM,4BAAY,IAAI,IAA4B;CAClD,MAAM,cAAwB,CAAC;CAC/B,MAAM,4BAAY,IAAI,IAA4B;CAClD,IAAI;CAEJ,KAAK,MAAM,SAAS,iBAAiB;EACnC,MAAM,SAAS,QAAQ;EAEvB,KAAK,MAAM,UAAU,OAAO,SAAS;GACnC,MAAM,MAAM,OAAO,IAAI,YAAY;GACnC,IAAI,CAAC,UAAU,IAAI,GAAG,GAAG,YAAY,KAAK,GAAG;GAC7C,UAAU,IAAI,KAAK,MAAM;EAC3B;EAEA,KAAK,MAAM,UAAU,OAAO,SAAS;GACnC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,GAAG,YAAY,KAAK,OAAO,IAAI;GAC7D,UAAU,IAAI,OAAO,MAAM,MAAM;EACnC;EAEA,IAAI,OAAO,eAAe,QAAW,aAAa,OAAO;CAC3D;CAEA,MAAM,UAAU,YAAY,KAAI,QAAO,UAAU,IAAI,GAAG,CAAE;CAC1D,MAAM,UAAU,YAAY,KAAI,SAAQ,UAAU,IAAI,IAAI,CAAE;CAE5D,KAAK,MAAM,UAAU,SAAS,SAAS,OAAO,OAAO,KAAK,OAAO,KAAK;CACtE,IAAI,eAAe,QAAW,SAAS,cAAc,UAAU;CAE/D,OAAO;EAAE;EAAiB;EAAS;EAAS;CAAW;AACzD"}

package/esm/server/stylesheet-urls.d.mts

@@ -1,24 +1,4 @@
-//#region ../web/src/server/stylesheet-urls.d.ts
-/**
- * The stylesheets the ROOT document imports, as dev URLs.
- *
- * Dev has no manifest, so the source is the root file itself: whatever
- * `root.tsx` imports with a stylesheet extension is what the document needs.
- * That is deliberately narrow — it answers "what CSS does this application
- * set up globally", which is where `app.css` lives and where Tailwind is
- * wired, and it does NOT try to reproduce Vite's per-route CSS graph.
- *
- * The narrowness is the honest part: production splits CSS per chunk, dev
- * links the root's stylesheets on every page. A page whose own module imports
- * its own stylesheet still gets it in dev — Vite's client graph injects it as
- * before — it simply is not render-blocking the way the root's is. That is a
- * smaller gap than the flash this removes, and it is stated rather than
- * hidden.
- *
- * Specifiers are resolved against the root file and expressed relative to the
- * app root, because that is the shape Vite's dev server serves from.
- */
-declare function devStylesheetUrls(appRoot: string, appFile: string): string[];
+//#region web/src/server/stylesheet-urls.d.ts
 /**
  * A stylesheet Vite serves in DEV must be requested with `?direct`.
  *
@@ -30,23 +10,54 @@ declare function devStylesheetUrls(appRoot: string, appFile: string): string[];
  */
 declare const VITE_DIRECT_CSS_QUERY = "?direct";
 /**
- * Every stylesheet the client build emitted, as URLs the asset route serves.
+ * ONE source file's own directly imported stylesheets, as dev URLs.
+ *
+ * Dev has no manifest, so the source is the file itself: whatever it imports
+ * with a stylesheet extension is what it needs. This is deliberately narrow —
+ * it answers "what CSS does THIS file set up", not "what CSS does the whole
+ * module graph this file eventually reaches end up pulling in" — because the
+ * latter would require reproducing Vite's module graph, which is precisely
+ * what dev has no manifest to shortcut.
+ *
+ * The narrowness is the honest part: production splits CSS per chunk and can
+ * follow imported chunks (`productionStylesheetUrls` below); dev can only read
+ * the ONE file handed to it. A page whose own module imports its own
+ * stylesheet still gets it in dev — Vite's client graph injects it as before —
+ * it simply is not render-blocking the way a chain member's own import is.
+ *
+ * Called once per chain member — root, then every matched layout outer to
+ * inner, then the page — by the installers below, which is what turns "one
+ * file's own imports" into a handler's whole CSS chain.
+ *
+ * Specifiers are resolved against `sourceFile` and expressed relative to
+ * `appRoot`, because that is the shape Vite's dev server serves from.
+ */
+declare function devStylesheetUrls(appRoot: string, sourceFile: string): string[];
+/**
+ * ONE handler's whole production CSS chain.
  *
- * Vite records CSS against the CHUNK that imported it — an app whose
- * `root.tsx` imports `app.css` produces a `root.tsx` entry carrying
- * `css: ["assets/root-<hash>.css"]`, not a hydration entry carrying it. So
- * this collects across every entry rather than looking under one name, which
- * would silently find nothing the moment a stylesheet moved file.
+ * `sourceFiles` is `[root, ...outer-to-inner matched layouts, page]`, each an
+ * app-root-relative POSIX source id — the SAME id
+ * `install-page-routes-from-manifest.ts` already carries as `sourceFile` on
+ * every manifest entry, because that identity is what lets this function match
+ * EXPLICITLY rather than guess: every id is looked up on its own
+ * (`findManifestKey`), its own chunk's CSS is collected
+ * (`collectManifestCss`), and an id with no matching entry contributes
+ * nothing — it is never treated as license to fall back to scanning the whole
+ * manifest, which is what let an unrelated page's CSS leak onto this handler
+ * before.
  *
- * Duplicates are collapsed and order is preserved: two chunks importing the
- * same stylesheet must not emit two `<link>` tags.
+ * Duplicates are collapsed and order is preserved across the WHOLE chain, in
+ * the order `sourceFiles` was given — root's own CSS first, then each
+ * layout's outer to inner, then the page's — so cascade order matches the
+ * chain's own outer-to-inner rendering order.
  *
  * A missing or malformed manifest returns NOTHING rather than throwing. The
  * hydration resolver already fails loudly on exactly those conditions, from
  * exactly the same file, and it runs first — a second, worse error for the
  * same cause helps nobody.
  */
-declare function productionStylesheetUrls(clientDir: string): string[];
+declare function productionStylesheetUrls(clientDir: string, sourceFiles: readonly string[]): string[];
 //#endregion
 export { VITE_DIRECT_CSS_QUERY, devStylesheetUrls, productionStylesheetUrls };
 //# sourceMappingURL=stylesheet-urls.d.mts.map