everything-dev 1.53.1 → 2.0.0-rc.0

package/dist/ui/router.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"router.mjs","names":[],"sources":["../../src/ui/router.ts"],"sourcesContent":["import type { AnyRouter } from \"@tanstack/react-router\";\nimport type { HeadData, HeadLink, HeadMeta, HeadScript } from \"./types\";\n\nexport function getMetaKey(meta: HeadMeta): string {\n  if (!meta) return \"null\";\n  if (\"title\" in meta) return \"title\";\n  if (\"charSet\" in meta) return \"charSet\";\n  if (\"name\" in meta) return `name:${(meta as { name: string }).name}`;\n  if (\"property\" in meta) {\n    return `property:${(meta as { property: string }).property}`;\n  }\n  if (\"httpEquiv\" in meta) {\n    return `httpEquiv:${(meta as { httpEquiv: string }).httpEquiv}`;\n  }\n  return JSON.stringify(meta);\n}\n\nexport function getLinkKey(link: HeadLink): string {\n  const rel = (link as { rel?: string }).rel ?? \"\";\n  const href = (link as { href?: string }).href ?? \"\";\n  return `${rel}:${href}`;\n}\n\nexport function getScriptKey(script: HeadScript): string {\n  if (!script) return \"null\";\n  if (\"src\" in script && script.src) return `src:${script.src}`;\n  if (\"children\" in script && script.children) {\n    return `children:${typeof script.children === \"string\" ? script.children : JSON.stringify(script.children)}`;\n  }\n  return JSON.stringify(script);\n}\n\nexport async function collectHeadData(router: AnyRouter): Promise<HeadData> {\n  await router.load();\n\n  const metaMap = new Map<string, HeadMeta>();\n  const linkMap = new Map<string, HeadLink>();\n  const scriptMap = new Map<string, HeadScript>();\n\n  for (const match of router.state.matches) {\n    const route =\n      (\n        router as AnyRouter & {\n          routesById?: Record<string, { options?: { head?: (...args: unknown[]) => unknown } }>;\n        }\n      ).routesById?.[(match as { routeId: string }).routeId] ??\n      (match as { route?: { options?: { head?: (...args: unknown[]) => unknown } } }).route;\n    const headFn = route?.options?.head;\n    if (!headFn) continue;\n\n    try {\n      const headResult = (await headFn({\n        loaderData: match.loaderData,\n        matches: router.state.matches,\n        match,\n        params: match.params,\n      })) as {\n        meta?: HeadMeta[];\n        links?: HeadLink[];\n        scripts?: HeadScript[];\n      };\n\n      if (headResult?.meta) {\n        for (const meta of headResult.meta) {\n          metaMap.set(getMetaKey(meta), meta);\n        }\n      }\n      if (headResult?.links) {\n        for (const link of headResult.links) {\n          linkMap.set(getLinkKey(link), link);\n        }\n      }\n      if (headResult?.scripts) {\n        for (const script of headResult.scripts) {\n          scriptMap.set(getScriptKey(script), script);\n        }\n      }\n    } catch (error) {\n      console.warn(`[collectHeadData] head() failed for ${match.routeId}:`, error);\n    }\n  }\n\n  return {\n    meta: [...metaMap.values()],\n    links: [...linkMap.values()],\n    scripts: [...scriptMap.values()],\n  };\n}\n\nfunction escapeHtml(s: string): string {\n  return s\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n\nfunction serializeMeta(meta: HeadMeta): string {\n  if (!meta) return \"\";\n  if (\"charSet\" in meta) return `<meta charset=\"${escapeHtml(String(meta.charSet))}\">`;\n  if (\"title\" in meta) return `<title>${escapeHtml(String(meta.title))}</title>`;\n  const attrs = Object.entries(meta as Record<string, unknown>)\n    .filter(([, v]) => v != null)\n    .map(([k, v]) => `${k}=\"${escapeHtml(String(v))}\"`)\n    .join(\" \");\n  return `<meta ${attrs}>`;\n}\n\nfunction serializeLink(link: HeadLink): string {\n  if (!link) return \"\";\n  const attrs = Object.entries(link as Record<string, unknown>)\n    .filter(([, v]) => v != null)\n    .map(([k, v]) => `${k}=\"${escapeHtml(String(v))}\"`)\n    .join(\" \");\n  return `<link ${attrs}>`;\n}\n\nfunction serializeScript(script: HeadScript, cspNonce?: string): string {\n  if (!script) return \"\";\n  if (\"src\" in script && script.src) {\n    const attrs: string[] = [`src=\"${escapeHtml(script.src)}\"`];\n    if (script.integrity) attrs.push(`integrity=\"${escapeHtml(script.integrity)}\"`);\n    if (script.crossOrigin) attrs.push(`crossorigin=\"${escapeHtml(script.crossOrigin)}\"`);\n    if (script.type) attrs.push(`type=\"${escapeHtml(script.type)}\"`);\n    if (cspNonce) attrs.push(`nonce=\"${cspNonce}\"`);\n    return `<script ${attrs.join(\" \")}></script>`;\n  }\n  if (\"children\" in script) {\n    const attrs: string[] = [];\n    if (script.type) attrs.push(`type=\"${escapeHtml(script.type)}\"`);\n    if (cspNonce) attrs.push(`nonce=\"${cspNonce}\"`);\n    const content =\n      typeof script.children === \"string\" ? script.children : JSON.stringify(script.children);\n    return `<script${attrs.length ? ` ${attrs.join(\" \")}` : \"\"}>${content}</script>`;\n  }\n  return \"\";\n}\n\nexport function serializeHeadData(\n  headData: HeadData,\n  cspNonce?: string,\n): { metaHtml: string; linkHtml: string; scriptHtml: string } {\n  return {\n    metaHtml: headData.meta\n      .filter(Boolean)\n      .map((m) => serializeMeta(m))\n      .join(\"\\n\"),\n    linkHtml: headData.links\n      .filter(Boolean)\n      .map((l) => serializeLink(l))\n      .join(\"\\n\"),\n    scriptHtml: headData.scripts\n      .filter(Boolean)\n      .map((s) => serializeScript(s, cspNonce))\n      .join(\"\\n\"),\n  };\n}\n"],"mappings":";AAGA,SAAgB,WAAW,MAAwB;CACjD,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,WAAW,MAAM,OAAO;CAC5B,IAAI,aAAa,MAAM,OAAO;CAC9B,IAAI,UAAU,MAAM,OAAO,QAAS,KAA0B;CAC9D,IAAI,cAAc,MAChB,OAAO,YAAa,KAA8B;CAEpD,IAAI,eAAe,MACjB,OAAO,aAAc,KAA+B;CAEtD,OAAO,KAAK,UAAU,IAAI;AAC5B;AAEA,SAAgB,WAAW,MAAwB;CAGjD,OAAO,GAFM,KAA0B,OAAO,GAEhC,GADA,KAA2B,QAAQ;AAEnD;AAEA,SAAgB,aAAa,QAA4B;CACvD,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,SAAS,UAAU,OAAO,KAAK,OAAO,OAAO,OAAO;CACxD,IAAI,cAAc,UAAU,OAAO,UACjC,OAAO,YAAY,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,KAAK,UAAU,OAAO,QAAQ;CAE3G,OAAO,KAAK,UAAU,MAAM;AAC9B;AAEA,eAAsB,gBAAgB,QAAsC;CAC1E,MAAM,OAAO,KAAK;CAElB,MAAM,0BAAU,IAAI,IAAsB;CAC1C,MAAM,0BAAU,IAAI,IAAsB;CAC1C,MAAM,4BAAY,IAAI,IAAwB;CAE9C,KAAK,MAAM,SAAS,OAAO,MAAM,SAAS;EAQxC,MAAM,UALF,OAGA,aAAc,MAA8B,YAC7C,MAA+E,MAC9D,EAAE,SAAS;EAC/B,IAAI,CAAC,QAAQ;EAEb,IAAI;GACF,MAAM,aAAc,MAAM,OAAO;IAC/B,YAAY,MAAM;IAClB,SAAS,OAAO,MAAM;IACtB;IACA,QAAQ,MAAM;GAChB,CAAC;GAMD,IAAI,YAAY,MACd,KAAK,MAAM,QAAQ,WAAW,MAC5B,QAAQ,IAAI,WAAW,IAAI,GAAG,IAAI;GAGtC,IAAI,YAAY,OACd,KAAK,MAAM,QAAQ,WAAW,OAC5B,QAAQ,IAAI,WAAW,IAAI,GAAG,IAAI;GAGtC,IAAI,YAAY,SACd,KAAK,MAAM,UAAU,WAAW,SAC9B,UAAU,IAAI,aAAa,MAAM,GAAG,MAAM;EAGhD,SAAS,OAAO;GACd,QAAQ,KAAK,uCAAuC,MAAM,QAAQ,IAAI,KAAK;EAC7E;CACF;CAEA,OAAO;EACL,MAAM,CAAC,GAAG,QAAQ,OAAO,CAAC;EAC1B,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC;EAC3B,SAAS,CAAC,GAAG,UAAU,OAAO,CAAC;CACjC;AACF;AAEA,SAAS,WAAW,GAAmB;CACrC,OAAO,EACJ,QAAQ,MAAM,OAAO,CAAC,CACtB,QAAQ,MAAM,QAAQ,CAAC,CACvB,QAAQ,MAAM,MAAM,CAAC,CACrB,QAAQ,MAAM,MAAM;AACzB;AAEA,SAAS,cAAc,MAAwB;CAC7C,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,aAAa,MAAM,OAAO,kBAAkB,WAAW,OAAO,KAAK,OAAO,CAAC,EAAE;CACjF,IAAI,WAAW,MAAM,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,CAAC,EAAE;CAKrE,OAAO,SAJO,OAAO,QAAQ,IAA+B,CAAC,CAC1D,QAAQ,GAAG,OAAO,KAAK,IAAI,CAAC,CAC5B,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,IAAI,WAAW,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAClD,KAAK,GACY,EAAE;AACxB;AAEA,SAAS,cAAc,MAAwB;CAC7C,IAAI,CAAC,MAAM,OAAO;CAKlB,OAAO,SAJO,OAAO,QAAQ,IAA+B,CAAC,CAC1D,QAAQ,GAAG,OAAO,KAAK,IAAI,CAAC,CAC5B,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,IAAI,WAAW,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAClD,KAAK,GACY,EAAE;AACxB;AAEA,SAAS,gBAAgB,QAAoB,UAA2B;CACtE,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,SAAS,UAAU,OAAO,KAAK;EACjC,MAAM,QAAkB,CAAC,QAAQ,WAAW,OAAO,GAAG,EAAE,EAAE;EAC1D,IAAI,OAAO,WAAW,MAAM,KAAK,cAAc,WAAW,OAAO,SAAS,EAAE,EAAE;EAC9E,IAAI,OAAO,aAAa,MAAM,KAAK,gBAAgB,WAAW,OAAO,WAAW,EAAE,EAAE;EACpF,IAAI,OAAO,MAAM,MAAM,KAAK,SAAS,WAAW,OAAO,IAAI,EAAE,EAAE;EAC/D,IAAI,UAAU,MAAM,KAAK,UAAU,SAAS,EAAE;EAC9C,OAAO,WAAW,MAAM,KAAK,GAAG,EAAE;CACpC;CACA,IAAI,cAAc,QAAQ;EACxB,MAAM,QAAkB,CAAC;EACzB,IAAI,OAAO,MAAM,MAAM,KAAK,SAAS,WAAW,OAAO,IAAI,EAAE,EAAE;EAC/D,IAAI,UAAU,MAAM,KAAK,UAAU,SAAS,EAAE;EAC9C,MAAM,UACJ,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,KAAK,UAAU,OAAO,QAAQ;EACxF,OAAO,UAAU,MAAM,SAAS,IAAI,MAAM,KAAK,GAAG,MAAM,GAAG,GAAG,QAAQ;CACxE;CACA,OAAO;AACT;AAEA,SAAgB,kBACd,UACA,UAC4D;CAC5D,OAAO;EACL,UAAU,SAAS,KAChB,OAAO,OAAO,CAAC,CACf,KAAK,MAAM,cAAc,CAAC,CAAC,CAAC,CAC5B,KAAK,IAAI;EACZ,UAAU,SAAS,MAChB,OAAO,OAAO,CAAC,CACf,KAAK,MAAM,cAAc,CAAC,CAAC,CAAC,CAC5B,KAAK,IAAI;EACZ,YAAY,SAAS,QAClB,OAAO,OAAO,CAAC,CACf,KAAK,MAAM,gBAAgB,GAAG,QAAQ,CAAC,CAAC,CACxC,KAAK,IAAI;CACd;AACF"}
+{"version":3,"file":"router.mjs","names":[],"sources":["../../src/ui/router.ts"],"sourcesContent":["import type { AnyRouter } from \"@tanstack/react-router\";\nimport type { HeadData, HeadLink, HeadMeta, HeadScript } from \"./types\";\n\nexport function getMetaKey(meta: HeadMeta): string {\n  if (!meta) return \"null\";\n  if (\"title\" in meta) return \"title\";\n  if (\"charSet\" in meta) return \"charSet\";\n  if (\"name\" in meta) return `name:${(meta as { name: string }).name}`;\n  if (\"property\" in meta) {\n    return `property:${(meta as { property: string }).property}`;\n  }\n  if (\"httpEquiv\" in meta) {\n    return `httpEquiv:${(meta as { httpEquiv: string }).httpEquiv}`;\n  }\n  return JSON.stringify(meta);\n}\n\nexport function getLinkKey(link: HeadLink): string {\n  const rel = (link as { rel?: string }).rel ?? \"\";\n  const href = (link as { href?: string }).href ?? \"\";\n  return `${rel}:${href}`;\n}\n\nexport function getScriptKey(script: HeadScript): string {\n  if (!script) return \"null\";\n  if (\"src\" in script && script.src) return `src:${script.src}`;\n  if (\"children\" in script && script.children) {\n    return `children:${typeof script.children === \"string\" ? script.children : JSON.stringify(script.children)}`;\n  }\n  return JSON.stringify(script);\n}\n\nexport async function collectHeadData(router: AnyRouter): Promise<HeadData> {\n  await router.load();\n\n  const metaMap = new Map<string, HeadMeta>();\n  const linkMap = new Map<string, HeadLink>();\n  const scriptMap = new Map<string, HeadScript>();\n\n  for (const match of router.state.matches) {\n    const matchData = match as {\n      meta?: HeadMeta[];\n      links?: HeadLink[];\n      headScripts?: HeadScript[];\n    };\n\n    if (matchData.meta) {\n      for (const meta of matchData.meta) {\n        metaMap.set(getMetaKey(meta), meta);\n      }\n    }\n    if (matchData.links) {\n      for (const link of matchData.links) {\n        linkMap.set(getLinkKey(link), link);\n      }\n    }\n    if (matchData.headScripts) {\n      for (const script of matchData.headScripts) {\n        scriptMap.set(getScriptKey(script), script);\n      }\n    }\n  }\n\n  return {\n    meta: [...metaMap.values()],\n    links: [...linkMap.values()],\n    scripts: [...scriptMap.values()],\n  };\n}\n\nfunction escapeHtml(s: string): string {\n  return s\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n\nfunction serializeMeta(meta: HeadMeta): string {\n  if (!meta) return \"\";\n  if (\"charSet\" in meta) return `<meta charset=\"${escapeHtml(String(meta.charSet))}\">`;\n  if (\"title\" in meta) return `<title>${escapeHtml(String(meta.title))}</title>`;\n  const attrs = Object.entries(meta as Record<string, unknown>)\n    .filter(([, v]) => v != null)\n    .map(([k, v]) => `${k}=\"${escapeHtml(String(v))}\"`)\n    .join(\" \");\n  return `<meta ${attrs}>`;\n}\n\nfunction serializeLink(link: HeadLink): string {\n  if (!link) return \"\";\n  const attrs = Object.entries(link as Record<string, unknown>)\n    .filter(([, v]) => v != null)\n    .map(([k, v]) => `${k}=\"${escapeHtml(String(v))}\"`)\n    .join(\" \");\n  return `<link ${attrs}>`;\n}\n\nfunction serializeScript(script: HeadScript, cspNonce?: string): string {\n  if (!script) return \"\";\n  if (\"src\" in script && script.src) {\n    const attrs: string[] = [`src=\"${escapeHtml(script.src)}\"`];\n    if (script.integrity) attrs.push(`integrity=\"${escapeHtml(script.integrity)}\"`);\n    if (script.crossOrigin) attrs.push(`crossorigin=\"${escapeHtml(script.crossOrigin)}\"`);\n    if (script.type) attrs.push(`type=\"${escapeHtml(script.type)}\"`);\n    if (cspNonce) attrs.push(`nonce=\"${cspNonce}\"`);\n    return `<script ${attrs.join(\" \")}></script>`;\n  }\n  if (\"children\" in script) {\n    const attrs: string[] = [];\n    if (script.type) attrs.push(`type=\"${escapeHtml(script.type)}\"`);\n    if (cspNonce) attrs.push(`nonce=\"${cspNonce}\"`);\n    const content =\n      typeof script.children === \"string\" ? script.children : JSON.stringify(script.children);\n    return `<script${attrs.length ? ` ${attrs.join(\" \")}` : \"\"}>${content}</script>`;\n  }\n  return \"\";\n}\n\nexport function serializeHeadData(\n  headData: HeadData,\n  cspNonce?: string,\n): { metaHtml: string; linkHtml: string; scriptHtml: string } {\n  return {\n    metaHtml: headData.meta\n      .filter(Boolean)\n      .map((m) => serializeMeta(m))\n      .join(\"\\n\"),\n    linkHtml: headData.links\n      .filter(Boolean)\n      .map((l) => serializeLink(l))\n      .join(\"\\n\"),\n    scriptHtml: headData.scripts\n      .filter(Boolean)\n      .map((s) => serializeScript(s, cspNonce))\n      .join(\"\\n\"),\n  };\n}\n"],"mappings":";AAGA,SAAgB,WAAW,MAAwB;CACjD,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,WAAW,MAAM,OAAO;CAC5B,IAAI,aAAa,MAAM,OAAO;CAC9B,IAAI,UAAU,MAAM,OAAO,QAAS,KAA0B;CAC9D,IAAI,cAAc,MAChB,OAAO,YAAa,KAA8B;CAEpD,IAAI,eAAe,MACjB,OAAO,aAAc,KAA+B;CAEtD,OAAO,KAAK,UAAU,IAAI;AAC5B;AAEA,SAAgB,WAAW,MAAwB;CAGjD,OAAO,GAFM,KAA0B,OAAO,GAEhC,GADA,KAA2B,QAAQ;AAEnD;AAEA,SAAgB,aAAa,QAA4B;CACvD,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,SAAS,UAAU,OAAO,KAAK,OAAO,OAAO,OAAO;CACxD,IAAI,cAAc,UAAU,OAAO,UACjC,OAAO,YAAY,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,KAAK,UAAU,OAAO,QAAQ;CAE3G,OAAO,KAAK,UAAU,MAAM;AAC9B;AAEA,eAAsB,gBAAgB,QAAsC;CAC1E,MAAM,OAAO,KAAK;CAElB,MAAM,0BAAU,IAAI,IAAsB;CAC1C,MAAM,0BAAU,IAAI,IAAsB;CAC1C,MAAM,4BAAY,IAAI,IAAwB;CAE9C,KAAK,MAAM,SAAS,OAAO,MAAM,SAAS;EACxC,MAAM,YAAY;EAMlB,IAAI,UAAU,MACZ,KAAK,MAAM,QAAQ,UAAU,MAC3B,QAAQ,IAAI,WAAW,IAAI,GAAG,IAAI;EAGtC,IAAI,UAAU,OACZ,KAAK,MAAM,QAAQ,UAAU,OAC3B,QAAQ,IAAI,WAAW,IAAI,GAAG,IAAI;EAGtC,IAAI,UAAU,aACZ,KAAK,MAAM,UAAU,UAAU,aAC7B,UAAU,IAAI,aAAa,MAAM,GAAG,MAAM;CAGhD;CAEA,OAAO;EACL,MAAM,CAAC,GAAG,QAAQ,OAAO,CAAC;EAC1B,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC;EAC3B,SAAS,CAAC,GAAG,UAAU,OAAO,CAAC;CACjC;AACF;AAEA,SAAS,WAAW,GAAmB;CACrC,OAAO,EACJ,QAAQ,MAAM,OAAO,CAAC,CACtB,QAAQ,MAAM,QAAQ,CAAC,CACvB,QAAQ,MAAM,MAAM,CAAC,CACrB,QAAQ,MAAM,MAAM;AACzB;AAEA,SAAS,cAAc,MAAwB;CAC7C,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,aAAa,MAAM,OAAO,kBAAkB,WAAW,OAAO,KAAK,OAAO,CAAC,EAAE;CACjF,IAAI,WAAW,MAAM,OAAO,UAAU,WAAW,OAAO,KAAK,KAAK,CAAC,EAAE;CAKrE,OAAO,SAJO,OAAO,QAAQ,IAA+B,CAAC,CAC1D,QAAQ,GAAG,OAAO,KAAK,IAAI,CAAC,CAC5B,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,IAAI,WAAW,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAClD,KAAK,GACY,EAAE;AACxB;AAEA,SAAS,cAAc,MAAwB;CAC7C,IAAI,CAAC,MAAM,OAAO;CAKlB,OAAO,SAJO,OAAO,QAAQ,IAA+B,CAAC,CAC1D,QAAQ,GAAG,OAAO,KAAK,IAAI,CAAC,CAC5B,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,IAAI,WAAW,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAClD,KAAK,GACY,EAAE;AACxB;AAEA,SAAS,gBAAgB,QAAoB,UAA2B;CACtE,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,SAAS,UAAU,OAAO,KAAK;EACjC,MAAM,QAAkB,CAAC,QAAQ,WAAW,OAAO,GAAG,EAAE,EAAE;EAC1D,IAAI,OAAO,WAAW,MAAM,KAAK,cAAc,WAAW,OAAO,SAAS,EAAE,EAAE;EAC9E,IAAI,OAAO,aAAa,MAAM,KAAK,gBAAgB,WAAW,OAAO,WAAW,EAAE,EAAE;EACpF,IAAI,OAAO,MAAM,MAAM,KAAK,SAAS,WAAW,OAAO,IAAI,EAAE,EAAE;EAC/D,IAAI,UAAU,MAAM,KAAK,UAAU,SAAS,EAAE;EAC9C,OAAO,WAAW,MAAM,KAAK,GAAG,EAAE;CACpC;CACA,IAAI,cAAc,QAAQ;EACxB,MAAM,QAAkB,CAAC;EACzB,IAAI,OAAO,MAAM,MAAM,KAAK,SAAS,WAAW,OAAO,IAAI,EAAE,EAAE;EAC/D,IAAI,UAAU,MAAM,KAAK,UAAU,SAAS,EAAE;EAC9C,MAAM,UACJ,OAAO,OAAO,aAAa,WAAW,OAAO,WAAW,KAAK,UAAU,OAAO,QAAQ;EACxF,OAAO,UAAU,MAAM,SAAS,IAAI,MAAM,KAAK,GAAG,MAAM,GAAG,GAAG,QAAQ;CACxE;CACA,OAAO;AACT;AAEA,SAAgB,kBACd,UACA,UAC4D;CAC5D,OAAO;EACL,UAAU,SAAS,KAChB,OAAO,OAAO,CAAC,CACf,KAAK,MAAM,cAAc,CAAC,CAAC,CAAC,CAC5B,KAAK,IAAI;EACZ,UAAU,SAAS,MAChB,OAAO,OAAO,CAAC,CACf,KAAK,MAAM,cAAc,CAAC,CAAC,CAAC,CAC5B,KAAK,IAAI;EACZ,YAAY,SAAS,QAClB,OAAO,OAAO,CAAC,CACf,KAAK,MAAM,gBAAgB,GAAG,QAAQ,CAAC,CAAC,CACxC,KAAK,IAAI;CACd;AACF"}

package/dist/ui/runtime.cjs

@@ -1,5 +1,4 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-
 //#region src/ui/runtime.ts
 function getRuntimeConfig() {
 	if (typeof window === "undefined") throw new Error("Runtime config is only available in the browser");
@@ -10,6 +9,10 @@ function getCspNonce() {
 	if (typeof window === "undefined") return;
 	return window.__CSP_NONCE__;
 }
+function getAppName(config) {
+	const runtimeConfig = config ?? (typeof window === "undefined" ? void 0 : window.__RUNTIME_CONFIG__);
+	return runtimeConfig?.runtime?.title ?? runtimeConfig?.account ?? "";
+}
 function buildRuntimeHref(pathname, runtimeConfig) {
 	const basePath = runtimeConfig?.runtime?.runtimeBasePath ?? "/";
 	if (basePath === "/") return pathname;
@@ -27,6 +30,7 @@ function buildPublishedGatewayHref(accountId, gatewayId) {
 exports.buildPublishedAccountHref = buildPublishedAccountHref;
 exports.buildPublishedGatewayHref = buildPublishedGatewayHref;
 exports.buildRuntimeHref = buildRuntimeHref;
+exports.getAppName = getAppName;
 exports.getCspNonce = getCspNonce;
 exports.getRuntimeConfig = getRuntimeConfig;
 //# sourceMappingURL=runtime.cjs.map

package/dist/ui/runtime.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.cjs","names":[],"sources":["../../src/ui/runtime.ts"],"sourcesContent":["import type { ClientRuntimeConfig } from \"../types\";\n\nexport type { ClientRuntimeInfo } from \"../types\";\n\ndeclare global {\n  interface Window {\n    __RUNTIME_CONFIG__?: ClientRuntimeConfig;\n    __CSP_NONCE__?: string;\n  }\n}\n\nexport function getRuntimeConfig(): ClientRuntimeConfig {\n  if (typeof window === \"undefined\") {\n    throw new Error(\"Runtime config is only available in the browser\");\n  }\n\n  if (!window.__RUNTIME_CONFIG__) {\n    throw new Error(\"Missing runtime config\");\n  }\n\n  return window.__RUNTIME_CONFIG__;\n}\n\nexport function getCspNonce() {\n  if (typeof window === \"undefined\") {\n    return undefined;\n  }\n\n  return window.__CSP_NONCE__;\n}\n\nexport function buildRuntimeHref(pathname: string, runtimeConfig?: Partial<ClientRuntimeConfig>) {\n  const basePath = runtimeConfig?.runtime?.runtimeBasePath ?? \"/\";\n  if (basePath === \"/\") {\n    return pathname;\n  }\n\n  if (!pathname.startsWith(\"/\")) {\n    return `${basePath}/${pathname}`;\n  }\n\n  return pathname === \"/\" ? basePath : `${basePath}${pathname}`;\n}\n\nexport function buildPublishedAccountHref(accountId: string) {\n  return `/apps/${encodeURIComponent(accountId)}`;\n}\n\nexport function buildPublishedGatewayHref(accountId: string, gatewayId: string) {\n  return `${buildPublishedAccountHref(accountId)}/${encodeURIComponent(gatewayId)}`;\n}\n"],"mappings":";;;AAWA,SAAgB,mBAAwC;CACtD,IAAI,OAAO,WAAW,aACpB,MAAM,IAAI,MAAM,iDAAiD;CAGnE,IAAI,CAAC,OAAO,oBACV,MAAM,IAAI,MAAM,wBAAwB;CAG1C,OAAO,OAAO;AAChB;AAEA,SAAgB,cAAc;CAC5B,IAAI,OAAO,WAAW,aACpB;CAGF,OAAO,OAAO;AAChB;AAEA,SAAgB,iBAAiB,UAAkB,eAA8C;CAC/F,MAAM,WAAW,eAAe,SAAS,mBAAmB;CAC5D,IAAI,aAAa,KACf,OAAO;CAGT,IAAI,CAAC,SAAS,WAAW,GAAG,GAC1B,OAAO,GAAG,SAAS,GAAG;CAGxB,OAAO,aAAa,MAAM,WAAW,GAAG,WAAW;AACrD;AAEA,SAAgB,0BAA0B,WAAmB;CAC3D,OAAO,SAAS,mBAAmB,SAAS;AAC9C;AAEA,SAAgB,0BAA0B,WAAmB,WAAmB;CAC9E,OAAO,GAAG,0BAA0B,SAAS,EAAE,GAAG,mBAAmB,SAAS;AAChF"}
+{"version":3,"file":"runtime.cjs","names":[],"sources":["../../src/ui/runtime.ts"],"sourcesContent":["import type { ClientRuntimeConfig } from \"../types\";\n\nexport type { ClientRuntimeInfo } from \"../types\";\n\ndeclare global {\n  interface Window {\n    __RUNTIME_CONFIG__?: ClientRuntimeConfig;\n    __CSP_NONCE__?: string;\n  }\n}\n\nexport function getRuntimeConfig(): ClientRuntimeConfig {\n  if (typeof window === \"undefined\") {\n    throw new Error(\"Runtime config is only available in the browser\");\n  }\n\n  if (!window.__RUNTIME_CONFIG__) {\n    throw new Error(\"Missing runtime config\");\n  }\n\n  return window.__RUNTIME_CONFIG__;\n}\n\nexport function getCspNonce() {\n  if (typeof window === \"undefined\") {\n    return undefined;\n  }\n\n  return window.__CSP_NONCE__;\n}\n\nexport function getAppName(config?: Partial<ClientRuntimeConfig>): string {\n  const runtimeConfig =\n    config ?? (typeof window === \"undefined\" ? undefined : window.__RUNTIME_CONFIG__);\n  return runtimeConfig?.runtime?.title ?? runtimeConfig?.account ?? \"\";\n}\n\nexport function buildRuntimeHref(pathname: string, runtimeConfig?: Partial<ClientRuntimeConfig>) {\n  const basePath = runtimeConfig?.runtime?.runtimeBasePath ?? \"/\";\n  if (basePath === \"/\") {\n    return pathname;\n  }\n\n  if (!pathname.startsWith(\"/\")) {\n    return `${basePath}/${pathname}`;\n  }\n\n  return pathname === \"/\" ? basePath : `${basePath}${pathname}`;\n}\n\nexport function buildPublishedAccountHref(accountId: string) {\n  return `/apps/${encodeURIComponent(accountId)}`;\n}\n\nexport function buildPublishedGatewayHref(accountId: string, gatewayId: string) {\n  return `${buildPublishedAccountHref(accountId)}/${encodeURIComponent(gatewayId)}`;\n}\n"],"mappings":";;AAWA,SAAgB,mBAAwC;CACtD,IAAI,OAAO,WAAW,aACpB,MAAM,IAAI,MAAM,iDAAiD;CAGnE,IAAI,CAAC,OAAO,oBACV,MAAM,IAAI,MAAM,wBAAwB;CAG1C,OAAO,OAAO;AAChB;AAEA,SAAgB,cAAc;CAC5B,IAAI,OAAO,WAAW,aACpB;CAGF,OAAO,OAAO;AAChB;AAEA,SAAgB,WAAW,QAA+C;CACxE,MAAM,gBACJ,WAAW,OAAO,WAAW,cAAc,SAAY,OAAO;CAChE,OAAO,eAAe,SAAS,SAAS,eAAe,WAAW;AACpE;AAEA,SAAgB,iBAAiB,UAAkB,eAA8C;CAC/F,MAAM,WAAW,eAAe,SAAS,mBAAmB;CAC5D,IAAI,aAAa,KACf,OAAO;CAGT,IAAI,CAAC,SAAS,WAAW,GAAG,GAC1B,OAAO,GAAG,SAAS,GAAG;CAGxB,OAAO,aAAa,MAAM,WAAW,GAAG,WAAW;AACrD;AAEA,SAAgB,0BAA0B,WAAmB;CAC3D,OAAO,SAAS,mBAAmB,SAAS;AAC9C;AAEA,SAAgB,0BAA0B,WAAmB,WAAmB;CAC9E,OAAO,GAAG,0BAA0B,SAAS,EAAE,GAAG,mBAAmB,SAAS;AAChF"}

package/dist/ui/runtime.d.cts

@@ -8,9 +8,10 @@ declare global {
 }
 declare function getRuntimeConfig(): ClientRuntimeConfig;
 declare function getCspNonce(): string | undefined;
+declare function getAppName(config?: Partial<ClientRuntimeConfig>): string;
 declare function buildRuntimeHref(pathname: string, runtimeConfig?: Partial<ClientRuntimeConfig>): string;
 declare function buildPublishedAccountHref(accountId: string): string;
 declare function buildPublishedGatewayHref(accountId: string, gatewayId: string): string;
 //#endregion
-export { type ClientRuntimeInfo, buildPublishedAccountHref, buildPublishedGatewayHref, buildRuntimeHref, getCspNonce, getRuntimeConfig };
+export { type ClientRuntimeInfo, buildPublishedAccountHref, buildPublishedGatewayHref, buildRuntimeHref, getAppName, getCspNonce, getRuntimeConfig };
 //# sourceMappingURL=runtime.d.cts.map

package/dist/ui/runtime.d.mts

@@ -8,9 +8,10 @@ declare global {
 }
 declare function getRuntimeConfig(): ClientRuntimeConfig;
 declare function getCspNonce(): string | undefined;
+declare function getAppName(config?: Partial<ClientRuntimeConfig>): string;
 declare function buildRuntimeHref(pathname: string, runtimeConfig?: Partial<ClientRuntimeConfig>): string;
 declare function buildPublishedAccountHref(accountId: string): string;
 declare function buildPublishedGatewayHref(accountId: string, gatewayId: string): string;
 //#endregion
-export { type ClientRuntimeInfo, buildPublishedAccountHref, buildPublishedGatewayHref, buildRuntimeHref, getCspNonce, getRuntimeConfig };
+export { type ClientRuntimeInfo, buildPublishedAccountHref, buildPublishedGatewayHref, buildRuntimeHref, getAppName, getCspNonce, getRuntimeConfig };
 //# sourceMappingURL=runtime.d.mts.map

package/dist/ui/runtime.mjs

@@ -8,6 +8,10 @@ function getCspNonce() {
 	if (typeof window === "undefined") return;
 	return window.__CSP_NONCE__;
 }
+function getAppName(config) {
+	const runtimeConfig = config ?? (typeof window === "undefined" ? void 0 : window.__RUNTIME_CONFIG__);
+	return runtimeConfig?.runtime?.title ?? runtimeConfig?.account ?? "";
+}
 function buildRuntimeHref(pathname, runtimeConfig) {
 	const basePath = runtimeConfig?.runtime?.runtimeBasePath ?? "/";
 	if (basePath === "/") return pathname;
@@ -22,5 +26,5 @@ function buildPublishedGatewayHref(accountId, gatewayId) {
 }
 
 //#endregion
-export { buildPublishedAccountHref, buildPublishedGatewayHref, buildRuntimeHref, getCspNonce, getRuntimeConfig };
+export { buildPublishedAccountHref, buildPublishedGatewayHref, buildRuntimeHref, getAppName, getCspNonce, getRuntimeConfig };
 //# sourceMappingURL=runtime.mjs.map

package/dist/ui/runtime.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.mjs","names":[],"sources":["../../src/ui/runtime.ts"],"sourcesContent":["import type { ClientRuntimeConfig } from \"../types\";\n\nexport type { ClientRuntimeInfo } from \"../types\";\n\ndeclare global {\n  interface Window {\n    __RUNTIME_CONFIG__?: ClientRuntimeConfig;\n    __CSP_NONCE__?: string;\n  }\n}\n\nexport function getRuntimeConfig(): ClientRuntimeConfig {\n  if (typeof window === \"undefined\") {\n    throw new Error(\"Runtime config is only available in the browser\");\n  }\n\n  if (!window.__RUNTIME_CONFIG__) {\n    throw new Error(\"Missing runtime config\");\n  }\n\n  return window.__RUNTIME_CONFIG__;\n}\n\nexport function getCspNonce() {\n  if (typeof window === \"undefined\") {\n    return undefined;\n  }\n\n  return window.__CSP_NONCE__;\n}\n\nexport function buildRuntimeHref(pathname: string, runtimeConfig?: Partial<ClientRuntimeConfig>) {\n  const basePath = runtimeConfig?.runtime?.runtimeBasePath ?? \"/\";\n  if (basePath === \"/\") {\n    return pathname;\n  }\n\n  if (!pathname.startsWith(\"/\")) {\n    return `${basePath}/${pathname}`;\n  }\n\n  return pathname === \"/\" ? basePath : `${basePath}${pathname}`;\n}\n\nexport function buildPublishedAccountHref(accountId: string) {\n  return `/apps/${encodeURIComponent(accountId)}`;\n}\n\nexport function buildPublishedGatewayHref(accountId: string, gatewayId: string) {\n  return `${buildPublishedAccountHref(accountId)}/${encodeURIComponent(gatewayId)}`;\n}\n"],"mappings":";AAWA,SAAgB,mBAAwC;CACtD,IAAI,OAAO,WAAW,aACpB,MAAM,IAAI,MAAM,iDAAiD;CAGnE,IAAI,CAAC,OAAO,oBACV,MAAM,IAAI,MAAM,wBAAwB;CAG1C,OAAO,OAAO;AAChB;AAEA,SAAgB,cAAc;CAC5B,IAAI,OAAO,WAAW,aACpB;CAGF,OAAO,OAAO;AAChB;AAEA,SAAgB,iBAAiB,UAAkB,eAA8C;CAC/F,MAAM,WAAW,eAAe,SAAS,mBAAmB;CAC5D,IAAI,aAAa,KACf,OAAO;CAGT,IAAI,CAAC,SAAS,WAAW,GAAG,GAC1B,OAAO,GAAG,SAAS,GAAG;CAGxB,OAAO,aAAa,MAAM,WAAW,GAAG,WAAW;AACrD;AAEA,SAAgB,0BAA0B,WAAmB;CAC3D,OAAO,SAAS,mBAAmB,SAAS;AAC9C;AAEA,SAAgB,0BAA0B,WAAmB,WAAmB;CAC9E,OAAO,GAAG,0BAA0B,SAAS,EAAE,GAAG,mBAAmB,SAAS;AAChF"}
+{"version":3,"file":"runtime.mjs","names":[],"sources":["../../src/ui/runtime.ts"],"sourcesContent":["import type { ClientRuntimeConfig } from \"../types\";\n\nexport type { ClientRuntimeInfo } from \"../types\";\n\ndeclare global {\n  interface Window {\n    __RUNTIME_CONFIG__?: ClientRuntimeConfig;\n    __CSP_NONCE__?: string;\n  }\n}\n\nexport function getRuntimeConfig(): ClientRuntimeConfig {\n  if (typeof window === \"undefined\") {\n    throw new Error(\"Runtime config is only available in the browser\");\n  }\n\n  if (!window.__RUNTIME_CONFIG__) {\n    throw new Error(\"Missing runtime config\");\n  }\n\n  return window.__RUNTIME_CONFIG__;\n}\n\nexport function getCspNonce() {\n  if (typeof window === \"undefined\") {\n    return undefined;\n  }\n\n  return window.__CSP_NONCE__;\n}\n\nexport function getAppName(config?: Partial<ClientRuntimeConfig>): string {\n  const runtimeConfig =\n    config ?? (typeof window === \"undefined\" ? undefined : window.__RUNTIME_CONFIG__);\n  return runtimeConfig?.runtime?.title ?? runtimeConfig?.account ?? \"\";\n}\n\nexport function buildRuntimeHref(pathname: string, runtimeConfig?: Partial<ClientRuntimeConfig>) {\n  const basePath = runtimeConfig?.runtime?.runtimeBasePath ?? \"/\";\n  if (basePath === \"/\") {\n    return pathname;\n  }\n\n  if (!pathname.startsWith(\"/\")) {\n    return `${basePath}/${pathname}`;\n  }\n\n  return pathname === \"/\" ? basePath : `${basePath}${pathname}`;\n}\n\nexport function buildPublishedAccountHref(accountId: string) {\n  return `/apps/${encodeURIComponent(accountId)}`;\n}\n\nexport function buildPublishedGatewayHref(accountId: string, gatewayId: string) {\n  return `${buildPublishedAccountHref(accountId)}/${encodeURIComponent(gatewayId)}`;\n}\n"],"mappings":";AAWA,SAAgB,mBAAwC;CACtD,IAAI,OAAO,WAAW,aACpB,MAAM,IAAI,MAAM,iDAAiD;CAGnE,IAAI,CAAC,OAAO,oBACV,MAAM,IAAI,MAAM,wBAAwB;CAG1C,OAAO,OAAO;AAChB;AAEA,SAAgB,cAAc;CAC5B,IAAI,OAAO,WAAW,aACpB;CAGF,OAAO,OAAO;AAChB;AAEA,SAAgB,WAAW,QAA+C;CACxE,MAAM,gBACJ,WAAW,OAAO,WAAW,cAAc,SAAY,OAAO;CAChE,OAAO,eAAe,SAAS,SAAS,eAAe,WAAW;AACpE;AAEA,SAAgB,iBAAiB,UAAkB,eAA8C;CAC/F,MAAM,WAAW,eAAe,SAAS,mBAAmB;CAC5D,IAAI,aAAa,KACf,OAAO;CAGT,IAAI,CAAC,SAAS,WAAW,GAAG,GAC1B,OAAO,GAAG,SAAS,GAAG;CAGxB,OAAO,aAAa,MAAM,WAAW,GAAG,WAAW;AACrD;AAEA,SAAgB,0BAA0B,WAAmB;CAC3D,OAAO,SAAS,mBAAmB,SAAS;AAC9C;AAEA,SAAgB,0BAA0B,WAAmB,WAAmB;CAC9E,OAAO,GAAG,0BAA0B,SAAS,EAAE,GAAG,mBAAmB,SAAS;AAChF"}

package/dist/ui/slot.cjs

@@ -0,0 +1,34 @@
+let every_plugin_ui_manifest = require("every-plugin/ui/manifest");
+
+//#region src/ui/slot.ts
+const trimBase = (value) => (value ?? "").replace(/\/$/, "");
+const withBuster = (url, buster) => buster ? `${url}?v=${encodeURIComponent(buster)}` : url;
+function requireEntry(entryUrl, env, slot, surface, devFixed) {
+	if (entryUrl) return entryUrl;
+	if (env === "development") return devFixed;
+	throw new Error(`slot "${slot}" has no derived ${surface} entry — pins resolve it from the version manifest (the fixed dev name is development-only)`);
+}
+function ssrEntryUrl(slot, env) {
+	if (slot.ssrEntryUrl) return slot.ssrEntryUrl;
+	if (env === "development") return slot.ssrUrl ? withBuster(`${trimBase(slot.ssrUrl)}/${every_plugin_ui_manifest.UI_REMOTE_SERVER_ENTRY_FILENAME}`, slot.ssrIntegrity ?? slot.containerVersion) : void 0;
+	if (!slot.ssrUrl) return void 0;
+	throw new Error(`slot "${slot.name}" has no derived ssr entry — pins resolve it from the version manifest (the fixed dev name is development-only)`);
+}
+function entryUrls(slot, env) {
+	const base = trimBase(slot.publicUrl ?? slot.url);
+	return {
+		get web() {
+			return requireEntry(slot.entryUrl, env, slot.name, "web", withBuster(`${base}/${every_plugin_ui_manifest.UI_REMOTE_ENTRY_FILENAME}`, slot.integrity));
+		},
+		get ssr() {
+			return ssrEntryUrl(slot, env);
+		},
+		get browserManifest() {
+			return slot.localPath ? void 0 : slot.browserManifestUrl;
+		}
+	};
+}
+
+//#endregion
+exports.entryUrls = entryUrls;
+//# sourceMappingURL=slot.cjs.map

package/dist/ui/slot.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"slot.cjs","names":["UI_REMOTE_SERVER_ENTRY_FILENAME","UI_REMOTE_ENTRY_FILENAME"],"sources":["../../src/ui/slot.ts"],"sourcesContent":["import {\n  UI_REMOTE_ENTRY_FILENAME,\n  UI_REMOTE_SERVER_ENTRY_FILENAME,\n} from \"every-plugin/ui/manifest\";\nimport type { BosEnv } from \"../merge\";\n\n/**\n * The host's entry-URL SlotResolver: one pure derivation from a stamped\n * config slot to the URLs each surface loads. `EntrySlot` is structural —\n * the version-manifest derivation (atomic-deploys 04) stamps exactly these\n * fields onto `RuntimeConfig` slots, so they satisfy it as-is. Each surface\n * of `entryUrls` resolves (and throws) lazily — a caller reading only `web`\n * never trips the ssr surface's resolution, and vice versa.\n */\nexport interface EntrySlot {\n  /** slot identity, verbatim in resolution errors */\n  name: string;\n  url?: string;\n  /** browser-facing base (ADR 0011) — the base rule is publicUrl ?? url, inside this module */\n  publicUrl?: string;\n  /** pin-derived hashed browser entry (absent in development) */\n  entryUrl?: string;\n  ssrUrl?: string;\n  /** pin-derived hashed SSR entry */\n  ssrEntryUrl?: string;\n  integrity?: string;\n  ssrIntegrity?: string;\n  /** dev-only freshness token (localUiRemoteEntry's container mtime) */\n  containerVersion?: string;\n  /** pin-derived hashed browser manifest — absent for local slots, which no\n   * pin derivation ever stamps (atomic-deploys 08) and the resolver drops\n   * even if one were stamped */\n  browserManifestUrl?: string;\n  localPath?: string;\n}\n\nexport interface EntryUrls {\n  /** browser script src / registration entry — bustered fixed name in dev, hashed in prod */\n  readonly web: string;\n  /** server container entry; undefined when the slot has no SSR coordinates */\n  readonly ssr?: string;\n  /** pin-derived hashed mf-manifest; undefined ⟺ local slot (atomic-deploys 08, STRUCTURAL) */\n  readonly browserManifest?: string;\n}\n\nconst trimBase = (value: string | undefined): string => (value ?? \"\").replace(/\\/$/, \"\");\n\nconst withBuster = (url: string, buster: string | undefined): string =>\n  buster ? `${url}?v=${encodeURIComponent(buster)}` : url;\n\nfunction requireEntry(\n  entryUrl: string | undefined,\n  env: BosEnv,\n  slot: string,\n  surface: string,\n  devFixed: string,\n): string {\n  if (entryUrl) return entryUrl;\n  if (env === \"development\") return devFixed;\n  throw new Error(\n    `slot \"${slot}\" has no derived ${surface} entry — pins resolve it from the version manifest ` +\n      `(the fixed dev name is development-only)`,\n  );\n}\n\nfunction ssrEntryUrl(slot: EntrySlot, env: BosEnv): string | undefined {\n  if (slot.ssrEntryUrl) return slot.ssrEntryUrl;\n  if (env === \"development\") {\n    return slot.ssrUrl\n      ? withBuster(\n          `${trimBase(slot.ssrUrl)}/${UI_REMOTE_SERVER_ENTRY_FILENAME}`,\n          slot.ssrIntegrity ?? slot.containerVersion,\n        )\n      : undefined;\n  }\n  if (!slot.ssrUrl) return undefined;\n  throw new Error(\n    `slot \"${slot.name}\" has no derived ssr entry — pins resolve it from the version manifest ` +\n      `(the fixed dev name is development-only)`,\n  );\n}\n\nexport function entryUrls(slot: EntrySlot, env: BosEnv): EntryUrls {\n  const base = trimBase(slot.publicUrl ?? slot.url);\n  return {\n    get web() {\n      return requireEntry(\n        slot.entryUrl,\n        env,\n        slot.name,\n        \"web\",\n        withBuster(`${base}/${UI_REMOTE_ENTRY_FILENAME}`, slot.integrity),\n      );\n    },\n    get ssr() {\n      return ssrEntryUrl(slot, env);\n    },\n    get browserManifest() {\n      return slot.localPath ? undefined : slot.browserManifestUrl;\n    },\n  };\n}\n"],"mappings":";;;AA6CA,MAAM,YAAY,WAAuC,SAAS,GAAE,CAAE,QAAQ,OAAO,EAAE;AAEvF,MAAM,cAAc,KAAa,WAC/B,SAAS,GAAG,IAAI,KAAK,mBAAmB,MAAM,MAAM;AAEtD,SAAS,aACP,UACA,KACA,MACA,SACA,UACQ;CACR,IAAI,UAAU,OAAO;CACrB,IAAI,QAAQ,eAAe,OAAO;CAClC,MAAM,IAAI,MACR,SAAS,KAAK,mBAAmB,QAAQ,4FAE3C;AACF;AAEA,SAAS,YAAY,MAAiB,KAAiC;CACrE,IAAI,KAAK,aAAa,OAAO,KAAK;CAClC,IAAI,QAAQ,eACV,OAAO,KAAK,SACR,WACE,GAAG,SAAS,KAAK,MAAM,EAAE,GAAGA,4DAC5B,KAAK,gBAAgB,KAAK,gBAC5B,IACA;CAEN,IAAI,CAAC,KAAK,QAAQ,OAAO;CACzB,MAAM,IAAI,MACR,SAAS,KAAK,KAAK,gHAErB;AACF;AAEA,SAAgB,UAAU,MAAiB,KAAwB;CACjE,MAAM,OAAO,SAAS,KAAK,aAAa,KAAK,GAAG;CAChD,OAAO;EACL,IAAI,MAAM;GACR,OAAO,aACL,KAAK,UACL,KACA,KAAK,MACL,OACA,WAAW,GAAG,KAAK,GAAGC,qDAA4B,KAAK,SAAS,CAClE;EACF;EACA,IAAI,MAAM;GACR,OAAO,YAAY,MAAM,GAAG;EAC9B;EACA,IAAI,kBAAkB;GACpB,OAAO,KAAK,YAAY,SAAY,KAAK;EAC3C;CACF;AACF"}

package/dist/ui/slot.d.cts

@@ -0,0 +1,43 @@
+import { BosEnv } from "../merge.cjs";
+//#region src/ui/slot.d.ts
+/**
+ * The host's entry-URL SlotResolver: one pure derivation from a stamped
+ * config slot to the URLs each surface loads. `EntrySlot` is structural —
+ * the version-manifest derivation (atomic-deploys 04) stamps exactly these
+ * fields onto `RuntimeConfig` slots, so they satisfy it as-is. Each surface
+ * of `entryUrls` resolves (and throws) lazily — a caller reading only `web`
+ * never trips the ssr surface's resolution, and vice versa.
+ */
+interface EntrySlot {
+  /** slot identity, verbatim in resolution errors */
+  name: string;
+  url?: string;
+  /** browser-facing base (ADR 0011) — the base rule is publicUrl ?? url, inside this module */
+  publicUrl?: string;
+  /** pin-derived hashed browser entry (absent in development) */
+  entryUrl?: string;
+  ssrUrl?: string;
+  /** pin-derived hashed SSR entry */
+  ssrEntryUrl?: string;
+  integrity?: string;
+  ssrIntegrity?: string;
+  /** dev-only freshness token (localUiRemoteEntry's container mtime) */
+  containerVersion?: string;
+  /** pin-derived hashed browser manifest — absent for local slots, which no
+   * pin derivation ever stamps (atomic-deploys 08) and the resolver drops
+   * even if one were stamped */
+  browserManifestUrl?: string;
+  localPath?: string;
+}
+interface EntryUrls {
+  /** browser script src / registration entry — bustered fixed name in dev, hashed in prod */
+  readonly web: string;
+  /** server container entry; undefined when the slot has no SSR coordinates */
+  readonly ssr?: string;
+  /** pin-derived hashed mf-manifest; undefined ⟺ local slot (atomic-deploys 08, STRUCTURAL) */
+  readonly browserManifest?: string;
+}
+declare function entryUrls(slot: EntrySlot, env: BosEnv): EntryUrls;
+//#endregion
+export { EntrySlot, EntryUrls, entryUrls };
+//# sourceMappingURL=slot.d.cts.map

package/dist/ui/slot.d.mts

@@ -0,0 +1,43 @@
+import { BosEnv } from "../merge.mjs";
+//#region src/ui/slot.d.ts
+/**
+ * The host's entry-URL SlotResolver: one pure derivation from a stamped
+ * config slot to the URLs each surface loads. `EntrySlot` is structural —
+ * the version-manifest derivation (atomic-deploys 04) stamps exactly these
+ * fields onto `RuntimeConfig` slots, so they satisfy it as-is. Each surface
+ * of `entryUrls` resolves (and throws) lazily — a caller reading only `web`
+ * never trips the ssr surface's resolution, and vice versa.
+ */
+interface EntrySlot {
+  /** slot identity, verbatim in resolution errors */
+  name: string;
+  url?: string;
+  /** browser-facing base (ADR 0011) — the base rule is publicUrl ?? url, inside this module */
+  publicUrl?: string;
+  /** pin-derived hashed browser entry (absent in development) */
+  entryUrl?: string;
+  ssrUrl?: string;
+  /** pin-derived hashed SSR entry */
+  ssrEntryUrl?: string;
+  integrity?: string;
+  ssrIntegrity?: string;
+  /** dev-only freshness token (localUiRemoteEntry's container mtime) */
+  containerVersion?: string;
+  /** pin-derived hashed browser manifest — absent for local slots, which no
+   * pin derivation ever stamps (atomic-deploys 08) and the resolver drops
+   * even if one were stamped */
+  browserManifestUrl?: string;
+  localPath?: string;
+}
+interface EntryUrls {
+  /** browser script src / registration entry — bustered fixed name in dev, hashed in prod */
+  readonly web: string;
+  /** server container entry; undefined when the slot has no SSR coordinates */
+  readonly ssr?: string;
+  /** pin-derived hashed mf-manifest; undefined ⟺ local slot (atomic-deploys 08, STRUCTURAL) */
+  readonly browserManifest?: string;
+}
+declare function entryUrls(slot: EntrySlot, env: BosEnv): EntryUrls;
+//#endregion
+export { EntrySlot, EntryUrls, entryUrls };
+//# sourceMappingURL=slot.d.mts.map

package/dist/ui/slot.mjs

@@ -0,0 +1,34 @@
+import { UI_REMOTE_ENTRY_FILENAME, UI_REMOTE_SERVER_ENTRY_FILENAME } from "every-plugin/ui/manifest";
+
+//#region src/ui/slot.ts
+const trimBase = (value) => (value ?? "").replace(/\/$/, "");
+const withBuster = (url, buster) => buster ? `${url}?v=${encodeURIComponent(buster)}` : url;
+function requireEntry(entryUrl, env, slot, surface, devFixed) {
+	if (entryUrl) return entryUrl;
+	if (env === "development") return devFixed;
+	throw new Error(`slot "${slot}" has no derived ${surface} entry — pins resolve it from the version manifest (the fixed dev name is development-only)`);
+}
+function ssrEntryUrl(slot, env) {
+	if (slot.ssrEntryUrl) return slot.ssrEntryUrl;
+	if (env === "development") return slot.ssrUrl ? withBuster(`${trimBase(slot.ssrUrl)}/${UI_REMOTE_SERVER_ENTRY_FILENAME}`, slot.ssrIntegrity ?? slot.containerVersion) : void 0;
+	if (!slot.ssrUrl) return void 0;
+	throw new Error(`slot "${slot.name}" has no derived ssr entry — pins resolve it from the version manifest (the fixed dev name is development-only)`);
+}
+function entryUrls(slot, env) {
+	const base = trimBase(slot.publicUrl ?? slot.url);
+	return {
+		get web() {
+			return requireEntry(slot.entryUrl, env, slot.name, "web", withBuster(`${base}/${UI_REMOTE_ENTRY_FILENAME}`, slot.integrity));
+		},
+		get ssr() {
+			return ssrEntryUrl(slot, env);
+		},
+		get browserManifest() {
+			return slot.localPath ? void 0 : slot.browserManifestUrl;
+		}
+	};
+}
+
+//#endregion
+export { entryUrls };
+//# sourceMappingURL=slot.mjs.map

package/dist/ui/slot.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"slot.mjs","names":[],"sources":["../../src/ui/slot.ts"],"sourcesContent":["import {\n  UI_REMOTE_ENTRY_FILENAME,\n  UI_REMOTE_SERVER_ENTRY_FILENAME,\n} from \"every-plugin/ui/manifest\";\nimport type { BosEnv } from \"../merge\";\n\n/**\n * The host's entry-URL SlotResolver: one pure derivation from a stamped\n * config slot to the URLs each surface loads. `EntrySlot` is structural —\n * the version-manifest derivation (atomic-deploys 04) stamps exactly these\n * fields onto `RuntimeConfig` slots, so they satisfy it as-is. Each surface\n * of `entryUrls` resolves (and throws) lazily — a caller reading only `web`\n * never trips the ssr surface's resolution, and vice versa.\n */\nexport interface EntrySlot {\n  /** slot identity, verbatim in resolution errors */\n  name: string;\n  url?: string;\n  /** browser-facing base (ADR 0011) — the base rule is publicUrl ?? url, inside this module */\n  publicUrl?: string;\n  /** pin-derived hashed browser entry (absent in development) */\n  entryUrl?: string;\n  ssrUrl?: string;\n  /** pin-derived hashed SSR entry */\n  ssrEntryUrl?: string;\n  integrity?: string;\n  ssrIntegrity?: string;\n  /** dev-only freshness token (localUiRemoteEntry's container mtime) */\n  containerVersion?: string;\n  /** pin-derived hashed browser manifest — absent for local slots, which no\n   * pin derivation ever stamps (atomic-deploys 08) and the resolver drops\n   * even if one were stamped */\n  browserManifestUrl?: string;\n  localPath?: string;\n}\n\nexport interface EntryUrls {\n  /** browser script src / registration entry — bustered fixed name in dev, hashed in prod */\n  readonly web: string;\n  /** server container entry; undefined when the slot has no SSR coordinates */\n  readonly ssr?: string;\n  /** pin-derived hashed mf-manifest; undefined ⟺ local slot (atomic-deploys 08, STRUCTURAL) */\n  readonly browserManifest?: string;\n}\n\nconst trimBase = (value: string | undefined): string => (value ?? \"\").replace(/\\/$/, \"\");\n\nconst withBuster = (url: string, buster: string | undefined): string =>\n  buster ? `${url}?v=${encodeURIComponent(buster)}` : url;\n\nfunction requireEntry(\n  entryUrl: string | undefined,\n  env: BosEnv,\n  slot: string,\n  surface: string,\n  devFixed: string,\n): string {\n  if (entryUrl) return entryUrl;\n  if (env === \"development\") return devFixed;\n  throw new Error(\n    `slot \"${slot}\" has no derived ${surface} entry — pins resolve it from the version manifest ` +\n      `(the fixed dev name is development-only)`,\n  );\n}\n\nfunction ssrEntryUrl(slot: EntrySlot, env: BosEnv): string | undefined {\n  if (slot.ssrEntryUrl) return slot.ssrEntryUrl;\n  if (env === \"development\") {\n    return slot.ssrUrl\n      ? withBuster(\n          `${trimBase(slot.ssrUrl)}/${UI_REMOTE_SERVER_ENTRY_FILENAME}`,\n          slot.ssrIntegrity ?? slot.containerVersion,\n        )\n      : undefined;\n  }\n  if (!slot.ssrUrl) return undefined;\n  throw new Error(\n    `slot \"${slot.name}\" has no derived ssr entry — pins resolve it from the version manifest ` +\n      `(the fixed dev name is development-only)`,\n  );\n}\n\nexport function entryUrls(slot: EntrySlot, env: BosEnv): EntryUrls {\n  const base = trimBase(slot.publicUrl ?? slot.url);\n  return {\n    get web() {\n      return requireEntry(\n        slot.entryUrl,\n        env,\n        slot.name,\n        \"web\",\n        withBuster(`${base}/${UI_REMOTE_ENTRY_FILENAME}`, slot.integrity),\n      );\n    },\n    get ssr() {\n      return ssrEntryUrl(slot, env);\n    },\n    get browserManifest() {\n      return slot.localPath ? undefined : slot.browserManifestUrl;\n    },\n  };\n}\n"],"mappings":";;;AA6CA,MAAM,YAAY,WAAuC,SAAS,GAAE,CAAE,QAAQ,OAAO,EAAE;AAEvF,MAAM,cAAc,KAAa,WAC/B,SAAS,GAAG,IAAI,KAAK,mBAAmB,MAAM,MAAM;AAEtD,SAAS,aACP,UACA,KACA,MACA,SACA,UACQ;CACR,IAAI,UAAU,OAAO;CACrB,IAAI,QAAQ,eAAe,OAAO;CAClC,MAAM,IAAI,MACR,SAAS,KAAK,mBAAmB,QAAQ,4FAE3C;AACF;AAEA,SAAS,YAAY,MAAiB,KAAiC;CACrE,IAAI,KAAK,aAAa,OAAO,KAAK;CAClC,IAAI,QAAQ,eACV,OAAO,KAAK,SACR,WACE,GAAG,SAAS,KAAK,MAAM,EAAE,GAAG,mCAC5B,KAAK,gBAAgB,KAAK,gBAC5B,IACA;CAEN,IAAI,CAAC,KAAK,QAAQ,OAAO;CACzB,MAAM,IAAI,MACR,SAAS,KAAK,KAAK,gHAErB;AACF;AAEA,SAAgB,UAAU,MAAiB,KAAwB;CACjE,MAAM,OAAO,SAAS,KAAK,aAAa,KAAK,GAAG;CAChD,OAAO;EACL,IAAI,MAAM;GACR,OAAO,aACL,KAAK,UACL,KACA,KAAK,MACL,OACA,WAAW,GAAG,KAAK,GAAG,4BAA4B,KAAK,SAAS,CAClE;EACF;EACA,IAAI,MAAM;GACR,OAAO,YAAY,MAAM,GAAG;EAC9B;EACA,IAAI,kBAAkB;GACpB,OAAO,KAAK,YAAY,SAAY,KAAK;EAC3C;CACF;AACF"}

package/dist/ui/tenant.cjs

@@ -0,0 +1,300 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_ui_runtime = require('./runtime.cjs');
+const require_ui_manifest_index = require('./manifest/index.cjs');
+let zod = require("zod");
+
+//#region src/ui/tenant.ts
+/**
+* Tenant helpers shared by every ui workspace.
+*
+* Two halves of the tenant surface live here:
+* - origin construction (`buildTenantUrl`, `tenantLabel`, `gatewayForAccount`)
+* - the pure helpers for the org node-config editor: a validated draft of the
+*   fields a tenant may customize in its published bos.config.json, prefilled
+*   from the currently published config, diffed against it, and an in-browser
+*   sha384 preflight so a wrong UI bundle cannot brick the tenant site.
+*/
+const LOCALHOST_SUFFIX = ".localhost";
+function isLocalHostname(hostname) {
+	const normalized = hostname.toLowerCase();
+	return normalized === "localhost" || normalized === "127.0.0.1" || normalized === "[::1]" || normalized.endsWith(LOCALHOST_SUFFIX);
+}
+/** Strips a `<label>.<gatewayId>` hostname (or a bare label) down to its label. */
+function tenantLabel(hostnameOrLabel, gatewayId) {
+	const normalized = hostnameOrLabel.trim().toLowerCase().replace(/\/+$/, "");
+	if (!normalized) return "";
+	const gateway = gatewayId?.trim().toLowerCase();
+	if (gateway && normalized.endsWith(`.${gateway}`)) return normalized.slice(0, -(gateway.length + 1));
+	if (normalized.endsWith(LOCALHOST_SUFFIX)) return normalized.slice(0, -10);
+	return normalized.split(".")[0] ?? "";
+}
+/**
+* Builds the absolute origin for a tenant, dev-aware.
+*
+* `buildTenantUrl("chicago", "citynode.app")`
+*   -> `https://chicago.citynode.app` in production
+*   -> `http://chicago.localhost:3000` when served from localhost
+*/
+function buildTenantUrl(hostnameOrLabel, gatewayId, options = {}) {
+	const label = tenantLabel(hostnameOrLabel, gatewayId);
+	if (!label) return null;
+	const path = options.path ?? "";
+	const currentHostname = options.currentHostname ?? (typeof window === "undefined" ? void 0 : window.location.hostname);
+	if (currentHostname && isLocalHostname(currentHostname)) {
+		const currentPort = options.currentPort ?? (typeof window === "undefined" ? "" : window.location.port);
+		const port = currentPort ? `:${currentPort}` : "";
+		return `http://${label}${LOCALHOST_SUFFIX}${port}${path}`;
+	}
+	const gateway = gatewayId.trim().toLowerCase();
+	if (!gateway) return null;
+	return `https://${label}.${gateway}${path}`;
+}
+/**
+* The gateway a slug should publish under for the given owner account,
+* derived from the runtime config instead of hardcoded per-network domains.
+*
+* When the account lives on the same network as the runtime, the current
+* runtime's gateway id is the answer. When the networks differ, the runtime
+* config carries no gateway for that other network, so null is returned and
+* the caller surfaces it rather than guessing a domain.
+*/
+function gatewayForAccount(accountId, config = require_ui_runtime.getRuntimeConfig()) {
+	const gatewayId = config.runtime?.gatewayId;
+	if (!gatewayId) return null;
+	return accountId.trim().toLowerCase().endsWith(".testnet") === (config.networkId === "testnet") ? gatewayId : null;
+}
+const INTEGRITY_PATTERN = /^sha384-[A-Za-z0-9+/=]+$/;
+const defaultTenantConfigDraftMessages = {
+	url: "must be a valid URL",
+	integrity: "must look like sha384-… (base64)",
+	manifest: "must look like versions/<version-id>.json",
+	title: "title is required",
+	description: "description is required",
+	uiPair: "a UI bundle needs both its URL and its integrity (direct hash or manifest pin)",
+	integrityMode: "choose one integrity mode — a direct entry hash or a version-manifest pin, not both",
+	pinPair: "a version-manifest pin needs both the manifest filename and its integrity",
+	ssrPair: "an SSR bundle needs both its URL and its integrity hash"
+};
+function createTenantConfigDraftSchema(messages = {}) {
+	const copy = {
+		...defaultTenantConfigDraftMessages,
+		...messages
+	};
+	const optionalUrl = zod.z.string().trim().url(copy.url).or(zod.z.literal("")).transform((value) => value.trim());
+	const optionalIntegrity = zod.z.string().trim().regex(INTEGRITY_PATTERN, copy.integrity).or(zod.z.literal(""));
+	const optionalManifestName = zod.z.string().trim().regex(/^versions\/[0-9a-f]{16}\.json$/, copy.manifest).or(zod.z.literal(""));
+	return zod.z.object({
+		title: zod.z.string().trim().min(1, copy.title),
+		description: zod.z.string().trim().min(1, copy.description),
+		repository: optionalUrl,
+		uiProduction: optionalUrl,
+		uiIntegrity: optionalIntegrity,
+		uiManifest: optionalManifestName,
+		uiPinIntegrity: optionalIntegrity,
+		ssrUrl: optionalUrl,
+		ssrIntegrity: optionalIntegrity
+	}).refine((draft) => !!draft.uiProduction === !!(draft.uiIntegrity || draft.uiManifest), {
+		message: copy.uiPair,
+		path: ["uiIntegrity"]
+	}).refine((draft) => !draft.uiIntegrity || !draft.uiManifest, {
+		message: copy.integrityMode,
+		path: ["uiManifest"]
+	}).refine((draft) => !!draft.uiManifest === !!draft.uiPinIntegrity, {
+		message: copy.pinPair,
+		path: ["uiPinIntegrity"]
+	}).refine((draft) => !!draft.ssrUrl === !!draft.ssrIntegrity, {
+		message: copy.ssrPair,
+		path: ["ssrIntegrity"]
+	});
+}
+const tenantConfigDraftSchema = createTenantConfigDraftSchema();
+const emptyTenantConfigDraft = {
+	title: "",
+	description: "",
+	repository: "",
+	uiProduction: "",
+	uiIntegrity: "",
+	uiManifest: "",
+	uiPinIntegrity: "",
+	ssrUrl: "",
+	ssrIntegrity: ""
+};
+function readUi(resolvedConfig) {
+	return (resolvedConfig?.app)?.ui ?? {};
+}
+const asString = (value) => typeof value === "string" ? value : "";
+function buildDraftFromResolvedConfig(resolvedConfig, fallback) {
+	const ui = readUi(resolvedConfig);
+	const title = asString(resolvedConfig?.title) || fallback.title;
+	return {
+		title,
+		description: asString(resolvedConfig?.description) || title,
+		repository: asString(resolvedConfig?.repository),
+		uiProduction: asString(ui.production),
+		uiIntegrity: asString(ui.integrity),
+		uiManifest: asString(ui.pin?.manifest),
+		uiPinIntegrity: asString(ui.pin?.integrity),
+		ssrUrl: asString(ui.ssr),
+		ssrIntegrity: asString(ui.ssrIntegrity)
+	};
+}
+function diffDraft(draft, resolvedConfig) {
+	const ui = readUi(resolvedConfig);
+	return [
+		[
+			"title",
+			asString(resolvedConfig?.title),
+			draft.title
+		],
+		[
+			"description",
+			asString(resolvedConfig?.description),
+			draft.description
+		],
+		[
+			"repository",
+			asString(resolvedConfig?.repository),
+			draft.repository
+		],
+		[
+			"ui bundle",
+			asString(ui.production),
+			draft.uiProduction
+		],
+		[
+			"ui integrity",
+			asString(ui.integrity),
+			draft.uiIntegrity
+		],
+		[
+			"ui manifest pin",
+			asString(ui.pin?.manifest),
+			draft.uiManifest
+		],
+		[
+			"ui pin integrity",
+			asString(ui.pin?.integrity),
+			draft.uiPinIntegrity
+		],
+		[
+			"ssr bundle",
+			asString(ui.ssr),
+			draft.ssrUrl
+		],
+		[
+			"ssr integrity",
+			asString(ui.ssrIntegrity),
+			draft.ssrIntegrity
+		]
+	].filter(([, from, to]) => from !== to).map(([field, from, to]) => ({
+		field,
+		from: from || "—",
+		to: to || "—"
+	}));
+}
+/** The `app` block for the published config, or undefined when no UI override is set. */
+function draftUiOverride(draft) {
+	if (!draft.uiProduction) return void 0;
+	if (draft.uiManifest && draft.uiPinIntegrity) return { ui: {
+		production: normalizeBundleBaseUrl(draft.uiProduction),
+		pin: {
+			manifest: draft.uiManifest,
+			integrity: draft.uiPinIntegrity
+		},
+		...draft.ssrUrl && draft.ssrIntegrity ? {
+			ssr: normalizeBundleBaseUrl(draft.ssrUrl),
+			ssrIntegrity: draft.ssrIntegrity
+		} : {}
+	} };
+	if (!draft.uiIntegrity) return void 0;
+	return { ui: {
+		production: normalizeBundleBaseUrl(draft.uiProduction),
+		integrity: draft.uiIntegrity,
+		...draft.ssrUrl && draft.ssrIntegrity ? {
+			ssr: normalizeBundleBaseUrl(draft.ssrUrl),
+			ssrIntegrity: draft.ssrIntegrity
+		} : {}
+	} };
+}
+function toBase64(bytes) {
+	let binary = "";
+	const chunkSize = 32768;
+	for (let offset = 0; offset < bytes.length; offset += chunkSize) binary += String.fromCharCode(...bytes.subarray(offset, offset + chunkSize));
+	return btoa(binary);
+}
+async function computeSubresourceIntegrity(url) {
+	const response = await fetch(url, { cache: "no-store" });
+	if (!response.ok) throw new Error(`fetching the bundle returned ${response.status}`);
+	const buffer = await response.arrayBuffer();
+	const digest = await crypto.subtle.digest("SHA-384", buffer);
+	return `sha384-${toBase64(new Uint8Array(digest))}`;
+}
+function resolveClientEntryUrl(url) {
+	if (/\/remoteEntry(\.[a-f0-9]{8,})?\.js$/.test(url)) return url;
+	if (url.endsWith("/mf-manifest.json")) return `${url.replace(/\/mf-manifest\.json$/, "")}/${require_ui_manifest_index.manifest_exports.UI_REMOTE_ENTRY_FILENAME}`;
+	return `${url.replace(/\/$/, "")}/${require_ui_manifest_index.manifest_exports.UI_REMOTE_ENTRY_FILENAME}`;
+}
+function resolveServerEntryUrl(url) {
+	return `${url.replace(/\/$/, "")}/${require_ui_manifest_index.manifest_exports.UI_REMOTE_SERVER_ENTRY_FILENAME}`;
+}
+function normalizeBundleBaseUrl(url) {
+	return url.trim().replace(/\/remoteEntry(\.server)?(\.[a-f0-9]{8,})?\.js$/, "").replace(/\/mf-manifest\.json$/, "");
+}
+async function computeUiEntryIntegrity(baseUrl) {
+	return computeSubresourceIntegrity(resolveClientEntryUrl(baseUrl.trim()));
+}
+async function computeSsrEntryIntegrity(baseUrl) {
+	return computeSubresourceIntegrity(resolveServerEntryUrl(baseUrl.trim()));
+}
+async function verifyEntryIntegrity(entryUrl, expected) {
+	try {
+		const computed = await computeSubresourceIntegrity(entryUrl);
+		return computed === expected ? { status: "match" } : {
+			status: "mismatch",
+			computed
+		};
+	} catch (error) {
+		return {
+			status: "unverified",
+			reason: error instanceof Error ? error.message : String(error)
+		};
+	}
+}
+async function verifyUiIntegrity(baseUrl, expected) {
+	return verifyEntryIntegrity(resolveClientEntryUrl(baseUrl.trim()), expected);
+}
+/**
+* Pin preflight: fetch the pinned version-manifest document and SRI-compare it
+* against the pin — the manifest's own `entryIntegrity` covers the entry bytes
+* at serve time.
+*/
+async function verifyUiPin(baseUrl, pin) {
+	return verifyEntryIntegrity(`${baseUrl.trim().replace(/\/$/, "")}/${pin.manifest.replace(/^\//, "")}`, pin.integrity);
+}
+async function verifySsrIntegrity(baseUrl, expected) {
+	return verifyEntryIntegrity(resolveServerEntryUrl(baseUrl.trim()), expected);
+}
+
+//#endregion
+exports.INTEGRITY_PATTERN = INTEGRITY_PATTERN;
+exports.buildDraftFromResolvedConfig = buildDraftFromResolvedConfig;
+exports.buildTenantUrl = buildTenantUrl;
+exports.computeSsrEntryIntegrity = computeSsrEntryIntegrity;
+exports.computeSubresourceIntegrity = computeSubresourceIntegrity;
+exports.computeUiEntryIntegrity = computeUiEntryIntegrity;
+exports.createTenantConfigDraftSchema = createTenantConfigDraftSchema;
+exports.defaultTenantConfigDraftMessages = defaultTenantConfigDraftMessages;
+exports.diffDraft = diffDraft;
+exports.draftUiOverride = draftUiOverride;
+exports.emptyTenantConfigDraft = emptyTenantConfigDraft;
+exports.gatewayForAccount = gatewayForAccount;
+exports.isLocalHostname = isLocalHostname;
+exports.normalizeBundleBaseUrl = normalizeBundleBaseUrl;
+exports.resolveClientEntryUrl = resolveClientEntryUrl;
+exports.resolveServerEntryUrl = resolveServerEntryUrl;
+exports.tenantConfigDraftSchema = tenantConfigDraftSchema;
+exports.tenantLabel = tenantLabel;
+exports.verifySsrIntegrity = verifySsrIntegrity;
+exports.verifyUiIntegrity = verifyUiIntegrity;
+exports.verifyUiPin = verifyUiPin;
+//# sourceMappingURL=tenant.cjs.map