netjes 0.0.2 → 0.0.4

package/dist/testing-vitest.d.ts

@@ -0,0 +1,8 @@
+import type { DefaultOptions } from '@tanstack/react-query';
+declare module 'vitest' {
+    interface ProvidedContext {
+        /** The app's `netjes({ query: { defaultOptions } })`, which netjes() provides to its tests. */
+        'netjes:query': DefaultOptions;
+    }
+}
+//# sourceMappingURL=testing-vitest.d.ts.map

package/dist/testing-vitest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing-vitest.d.ts","sourceRoot":"","sources":["../src/testing-vitest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,OAAO,QAAQ,QAAQ,CAAC;IACtB,UAAU,eAAe;QACvB,+FAA+F;QAC/F,cAAc,EAAE,cAAc,CAAC;KAChC;CACF"}

package/dist/testing-vitest.js

@@ -0,0 +1,26 @@
+import { inject, vi } from 'vitest';
+// The app's query defaults, for createTestApp. They wait under a global symbol rather than in a module: the app's
+// imports of netjes/testing need not share module instances with this file, which Vitest loads by its path.
+const appQueryDefaults = inject('netjes:query');
+if (typeof appQueryDefaults === 'object' && appQueryDefaults !== null) {
+    globalThis[Symbol.for('netjes.testing.queryDefaults')] = appQueryDefaults;
+}
+// Testing Library advances fake timers only through Jest's global: without one, waitFor, findBy and every user-event
+// call wait on a faked setTimeout that nothing advances, so they never return. While Vitest's timers are fake, `jest`
+// is a bridge to them; otherwise it is undefined, so code that looks for Jest finds none. A jest global that was
+// already there is left alone, and one a test assigns replaces the bridge.
+if (!('jest' in globalThis)) {
+    const bridge = {
+        advanceTimersByTime(ms) {
+            vi.advanceTimersByTime(ms);
+        },
+    };
+    Object.defineProperty(globalThis, 'jest', {
+        configurable: true,
+        get: () => (vi.isFakeTimers() ? bridge : undefined),
+        set(value) {
+            Object.defineProperty(globalThis, 'jest', { configurable: true, enumerable: true, writable: true, value });
+        },
+    });
+}
+//# sourceMappingURL=testing-vitest.js.map

package/dist/testing-vitest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing-vitest.js","sourceRoot":"","sources":["../src/testing-vitest.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AASpC,kHAAkH;AAClH,4GAA4G;AAC5G,MAAM,gBAAgB,GAAY,MAAM,CAAC,cAAc,CAAC,CAAC;AACzD,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;IACrE,UAAsC,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,GAAG,gBAAgB,CAAC;AACzG,CAAC;AAED,qHAAqH;AACrH,sHAAsH;AACtH,iHAAiH;AACjH,2EAA2E;AAC3E,IAAI,CAAC,CAAC,MAAM,IAAI,UAAU,CAAC,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG;QACb,mBAAmB,CAAC,EAAU;YAC5B,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;IACF,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE;QACxC,YAAY,EAAE,IAAI;QAClB,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,GAAG,CAAC,KAAc;YAChB,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7G,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/testing.d.ts

@@ -3,6 +3,7 @@ import { type ReactNode } from 'react';
 import { type ActionState } from './actions.tsx';
 import type { AntiforgeryToken, Params } from './payload.ts';
 import { type NavigationState } from './router.tsx';
+export { type RenderDocumentOptions, inlineScriptHashes, renderDocument } from './render-document.tsx';
 /** What the fake app of `createTestApp` reports to the components under test. */
 export type TestAppOptions = {
     /** The current URL. Default `/`. */
@@ -18,12 +19,21 @@ export type TestAppOptions = {
     params?: Params;
     /** What the server would send as `SharedProps`. */
     shared?: unknown;
+    /**
+     * Each mounted page package's URL for the page, by npm name, as the server sends it: `{ '@acme/help-center': '/help' }`,
+     * without the base path, or `null` for a prefix whose value the page has none for. The links, forms and router hooks
+     * of the package's generated file go below it.
+     */
+    mounts?: Record<string, string | null>;
     /** Seeded into the QueryClient the way `PageResult.WithQuery` seeds it, as of now. */
     queries?: ReadonlyArray<{
         key: readonly unknown[];
         data: unknown;
     }>;
-    /** Like `netjes({ query: { defaultOptions } })`; the harness also turns retries off. */
+    /**
+     * Like `netjes({ query: { defaultOptions } })`, merged over the harness's own: failed queries and mutations are tried
+     * as often as in the app, with no wait between the tries, and no query's data is garbage-collected.
+     */
     defaultOptions?: DefaultOptions;
     /** What `useNavigation()` returns. Default idle. */
     navigation?: NavigationState;
@@ -45,6 +55,12 @@ export type TestActionAnswer = ActionState<unknown> & {
     invalidate?: ReadonlyArray<readonly unknown[]>;
     /** After a failure: the submitted fields the state's `values` keep, as the server names them (the action's declared, non-private fields). Default: all. */
     fields?: readonly string[];
+    /**
+     * After a failure other than a 422: the message the server would send, which the `ServerActionError` then carries, as
+     * the server does for a 4xx (`Forbidden`) and for a 5xx with error details on. Without one, the call fails as a 5xx
+     * does with error details off: the error's message is Netjes's own and `withheld` is true.
+     */
+    message?: string;
 };
 /** One thing the component under test did: a navigation, a router call, a form post or a server action call. */
 export type TestNavigation = {

package/dist/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,cAAc,EAAE,WAAW,EAAgC,MAAM,uBAAuB,CAAC;AACvG,OAAO,EAAE,KAAK,SAAS,EAAsC,MAAM,OAAO,CAAC;AAC3E,OAAO,EAAqB,KAAK,WAAW,EAAmB,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,gBAAgB,EAAe,MAAM,EAAE,MAAM,cAAc,CAAC;AAG1E,OAAO,EAAuB,KAAK,eAAe,EAAmC,MAAM,cAAc,CAAC;AAE1G,iFAAiF;AACjF,MAAM,MAAM,cAAc,GAAG;IAC3B,oCAAoC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sFAAsF;IACtF,OAAO,CAAC,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,SAAS,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACpE,wFAAwF;IACxF,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,oDAAoD;IACpD,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,qFAAqF;IACrF,WAAW,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IACvC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;CAC5F,CAAC;AAEF,8GAA8G;AAC9G,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG;IACpD,OAAO,CAAC,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,SAAS,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACpE,UAAU,CAAC,EAAE,aAAa,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC/C,2JAA2J;IAC3J,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,gHAAgH;AAChH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,GAAG,QAAQ,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAErD,mHAAmH;AACnH,MAAM,MAAM,OAAO,GAAG;IACpB,2CAA2C;IAC3C,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,SAAS,CAAA;KAAE,KAAK,SAAS,CAAC;IACvD,6DAA6D;IAC7D,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC;AAmBF,wKAAwK;AACxK,wBAAgB,aAAa,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CA6FnE"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAE,WAAW,EAAgC,MAAM,uBAAuB,CAAC;AACvG,OAAO,EAAE,KAAK,SAAS,EAAsC,MAAM,OAAO,CAAC;AAC3E,OAAO,EAAqB,KAAK,WAAW,EAAmB,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,gBAAgB,EAAe,MAAM,EAAE,MAAM,cAAc,CAAC;AAG1E,OAAO,EAAuB,KAAK,eAAe,EAAmC,MAAM,cAAc,CAAC;AAE1G,OAAO,EAAE,KAAK,qBAAqB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvG,iFAAiF;AACjF,MAAM,MAAM,cAAc,GAAG;IAC3B,oCAAoC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACvC,sFAAsF;IACtF,OAAO,CAAC,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,SAAS,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACpE;;;OAGG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,oDAAoD;IACpD,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,qFAAqF;IACrF,WAAW,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IACvC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;CAC5F,CAAC;AAEF,8GAA8G;AAC9G,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG;IACpD,OAAO,CAAC,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,SAAS,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACpE,UAAU,CAAC,EAAE,aAAa,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC/C,2JAA2J;IAC3J,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,gHAAgH;AAChH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,GAAG,QAAQ,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAErD,mHAAmH;AACnH,MAAM,MAAM,OAAO,GAAG;IACpB,2CAA2C;IAC3C,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,SAAS,CAAA;KAAE,KAAK,SAAS,CAAC;IACvD,6DAA6D;IAC7D,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC;AAiCF,wKAAwK;AACxK,wBAAgB,aAAa,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CA8FnE"}

package/dist/testing.js

@@ -1,12 +1,14 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // Test harness for components and pages that use Netjes: `render(<Page />, { wrapper: createTestApp().Wrapper })`.
 // The router is a fake: it records what the component asked for and moves to the new URL, but loads nothing.
+// renderDocument renders a page's whole document instead, as the server would send it.
 import { QueryClient, QueryClientProvider, hydrate } from '@tanstack/react-query';
 import { useLayoutEffect, useMemo, useState } from 'react';
 import { setActionClient } from './actions.js';
 import { PublicConfigProvider } from './public-config.js';
 import { dehydratedStateOf, mergeOptions } from './query.js';
 import { RouterContexts } from './router.js';
+export { inlineScriptHashes, renderDocument } from './render-document.js';
 /**
  * Registers the stand-in in the commit, and only then: a render React throws away (`renderToString`, children that
  * threw) leaves calls made outside any Wrapper failing at once. React runs the effects of earlier siblings first, and
@@ -18,15 +20,26 @@ function RegisterActionClient({ client }) {
     return null;
 }
 const TEST_TOKEN = { formFieldName: '__RequestVerificationToken', headerName: 'RequestVerificationToken', requestToken: 'test-token' };
+/**
+ * The harness's own query defaults, over the app's: a failed query or mutation is tried as often as in the app, but
+ * without the wait between the tries (TanStack Query's 1, 2 and 4 seconds would outlast a test), and data stays in the
+ * client for the whole test.
+ */
+const HARNESS_DEFAULTS = { queries: { retryDelay: 0, gcTime: Number.POSITIVE_INFINITY }, mutations: { retryDelay: 0 } };
+/** The app's `netjes({ query })` defaults, where Netjes's Vitest setup file keeps them (src/testing-vitest.ts). */
+const APP_QUERY_DEFAULTS = Symbol.for('netjes.testing.queryDefaults');
+function appQueryDefaults() {
+    return globalThis[APP_QUERY_DEFAULTS];
+}
 function dataOf(body) {
     return body.contentType === null ? body.body : new URLSearchParams(body.body);
 }
 /** Creates a fake app around the components under test: pass its `Wrapper` to Testing Library's `render`. The router loads nothing; it records what was asked of it. */
 export function createTestApp(options = {}) {
     const navigations = [];
-    const defaults = mergeOptions(options.defaultOptions);
-    const queryClient = options.queryClient ??
-        new QueryClient({ defaultOptions: { ...defaults, queries: { retry: false, gcTime: Number.POSITIVE_INFINITY, ...defaults.queries } } });
+    // The Netjes defaults, then the app's, then the harness's, then the test's.
+    const defaultOptions = mergeOptions(appQueryDefaults(), HARNESS_DEFAULTS, options.defaultOptions);
+    const queryClient = options.queryClient ?? new QueryClient({ defaultOptions });
     const now = Date.now();
     const seeded = dehydratedStateOf(options.queries?.map((query) => ({ ...query, updatedAt: now })));
     if (seeded)
@@ -52,6 +65,7 @@ export function createTestApp(options = {}) {
                     status: answer.status,
                     errors: answer.errors,
                     ...(answer.fields ? { fields: [...answer.fields] } : {}),
+                    ...(answer.message !== undefined ? { message: answer.message } : {}),
                     revalidate: false,
                 };
         },
@@ -98,6 +112,7 @@ export function createTestApp(options = {}) {
             ...(antiforgery ? { antiforgery } : {}),
             ...(options.draftMode ? { draftMode: true } : {}),
             ...(options.locale ? { locale: options.locale } : {}),
+            ...(options.mounts ? { mounts: options.mounts } : {}),
         }), [url]);
         return (_jsx(QueryClientProvider, { client: queryClient, children: _jsx(PublicConfigProvider, { value: options.publicConfig ?? {}, children: _jsxs(RouterContexts, { router: router, payload: payload, url: url, navigation: options.navigation ?? { state: 'idle' }, children: [_jsx(RegisterActionClient, { client: actionClient }), children] }) }) }));
     }

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.tsx"],"names":[],"mappings":";AAAA,mHAAmH;AACnH,6GAA6G;AAC7G,OAAO,EAAuB,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACvG,OAAO,EAAkB,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC3E,OAAO,EAAuC,eAAe,EAAE,MAAM,cAAe,CAAC;AAErF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,YAAa,CAAC;AAC9D,OAAO,EAA6C,cAAc,EAAmB,MAAM,aAAc,CAAC;AAyD1G;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,EAAE,MAAM,EAA4B;IAChE,eAAe,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,GAAqB,EAAE,aAAa,EAAE,4BAA4B,EAAE,UAAU,EAAE,0BAA0B,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AAEzJ,SAAS,MAAM,CAAC,IAAgB;IAC9B,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,wKAAwK;AACxK,MAAM,UAAU,aAAa,CAAC,OAAO,GAAmB,EAAE;IACxD,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACtD,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,IAAI,WAAW,CAAC,EAAE,cAAc,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACzI,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,MAAM;QAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvE,oFAAoF;IACpF,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC;IACpG,yGAAyG;IACzG,MAAM,YAAY,GAAiB;QACjC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK;YAC5B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClD,MAAM,MAAM,GAAqB,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC7G,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE;gBAAE,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1F,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE;gBAAE,KAAK,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChH,OAAO,MAAM,CAAC,EAAE;gBACd,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE;gBACrF,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,UAAU,EAAE,KAAK;iBAClB,CAAC;QACR,CAAC;KACF,CAAC;IAEF,SAAS,OAAO,CAAC,EAAE,QAAQ,EAA2B;QACpD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAiB,GAAG,EAAE;YAC1C,MAAM,EAAE,GAAG,CAAC,IAAwB,EAAE,IAAY,EAAE,EAAE;gBACpD,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACjD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,CAAC;gBACb,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;gBAChC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;gBACtC,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;gBAClB,OAAO,EAAE,GAAG,EAAE;oBACZ,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;oBACtC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBACD,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9C,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBACpD,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;oBACvB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC9E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBACD,gBAAgB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAE,CAAC;gBAChC,gBAAgB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAE,CAAC;aACjC,CAAC;QACJ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,EAAE,CAAC,CAAC;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;YAC5B,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YAC9B,MAAM,EAAE,GAAG;YACX,GAAG,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;YAC9B,OAAO,EAAE,MAAM;YACf,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,EACF,CAAC,GAAG,CAAC,CACN,CAAC;QAEF,OAAO,CACL,KAAC,mBAAmB,IAAC,MAAM,EAAE,WAAW,YACtC,KAAC,oBAAoB,IAAC,KAAK,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE,YACrD,MAAC,cAAc,IAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAC7G,KAAC,oBAAoB,IAAC,MAAM,EAAE,YAAY,GAAI,EAC7C,QAAQ,IACM,GACI,GACH,CACvB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.tsx"],"names":[],"mappings":";AAAA,mHAAmH;AACnH,6GAA6G;AAC7G,uFAAuF;AACvF,OAAO,EAAuB,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACvG,OAAO,EAAkB,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC3E,OAAO,EAAuC,eAAe,EAAE,MAAM,cAAe,CAAC;AAErF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,YAAa,CAAC;AAC9D,OAAO,EAA6C,cAAc,EAAmB,MAAM,aAAc,CAAC;AAE1G,OAAO,EAA8B,kBAAkB,EAAE,cAAc,EAAE,MAAM,sBAAuB,CAAC;AAwEvG;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,EAAE,MAAM,EAA4B;IAChE,eAAe,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,GAAqB,EAAE,aAAa,EAAE,4BAA4B,EAAE,UAAU,EAAE,0BAA0B,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AAEzJ;;;;GAIG;AACH,MAAM,gBAAgB,GAAmB,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;AAExI,mHAAmH;AACnH,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;AAEtE,SAAS,gBAAgB;IACvB,OAAQ,UAAyD,CAAC,kBAAkB,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB;IAC9B,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,wKAAwK;AACxK,MAAM,UAAU,aAAa,CAAC,OAAO,GAAmB,EAAE;IACxD,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,4EAA4E;IAC5E,MAAM,cAAc,GAAG,YAAY,CAAC,gBAAgB,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAClG,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,MAAM;QAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvE,oFAAoF;IACpF,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC;IACpG,yGAAyG;IACzG,MAAM,YAAY,GAAiB;QACjC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK;YAC5B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClD,MAAM,MAAM,GAAqB,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC7G,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE;gBAAE,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1F,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE;gBAAE,KAAK,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChH,OAAO,MAAM,CAAC,EAAE;gBACd,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE;gBACrF,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,UAAU,EAAE,KAAK;iBAClB,CAAC;QACR,CAAC;KACF,CAAC;IAEF,SAAS,OAAO,CAAC,EAAE,QAAQ,EAA2B;QACpD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAiB,GAAG,EAAE;YAC1C,MAAM,EAAE,GAAG,CAAC,IAAwB,EAAE,IAAY,EAAE,EAAE;gBACpD,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACjD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,CAAC;gBACb,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;gBAChC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;gBACtC,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;gBAClB,OAAO,EAAE,GAAG,EAAE;oBACZ,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;oBACtC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBACD,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9C,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBACpD,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;oBACvB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC9E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBACD,gBAAgB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAE,CAAC;gBAChC,gBAAgB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAE,CAAC;aACjC,CAAC;QACJ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,EAAE,CAAC,CAAC;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;YAC5B,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YAC9B,MAAM,EAAE,GAAG;YACX,GAAG,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;YAC9B,OAAO,EAAE,MAAM;YACf,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,EACF,CAAC,GAAG,CAAC,CACN,CAAC;QAEF,OAAO,CACL,KAAC,mBAAmB,IAAC,MAAM,EAAE,WAAW,YACtC,KAAC,oBAAoB,IAAC,KAAK,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE,YACrD,MAAC,cAAc,IAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAC7G,KAAC,oBAAoB,IAAC,MAAM,EAAE,YAAY,GAAI,EAC7C,QAAQ,IACM,GACI,GACH,CACvB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAC/C,CAAC"}

package/dist/zod-jitless.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=zod-jitless.d.ts.map

package/dist/zod-jitless.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-jitless.d.ts","sourceRoot":"","sources":["../src/zod-jitless.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,CAAC"}

package/dist/zod-jitless.js

@@ -0,0 +1,4 @@
+(globalThis.__zod_globalConfig ??= {}).jitless = true;
+// A module, not a script, so that the type above stays its own.
+export {};
+//# sourceMappingURL=zod-jitless.js.map

package/dist/zod-jitless.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-jitless.js","sourceRoot":"","sources":["../src/zod-jitless.ts"],"names":[],"mappings":"AAWA,CAAE,UAAoC,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;AAEjF,gEAAgE;AAChE,OAAO,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "netjes",
-  "version": "0.0.2",
+  "version": "0.0.4",
   "description": "Build React apps and sites on ASP.NET Core: the Next.js App Router conventions, C# loaders and server actions, streaming SSR and types from C# to the browser",
   "keywords": [
     "react",

package/sidecar/server.mjs

@@ -4,8 +4,10 @@
 //   production:  renders with the prebuilt dist/server/server-entry.js.
 // Protocol: POST /render with the HTML-safe page payload JSON as body -> 200 text/html, streamed from the moment the
 // shell is ready (or once everything is, with X-Netjes-Wait-All: 1), or 500 {"error":{message,stack}} in plain text
-// (no terminal colours) if the shell fails. Every request must carry the X-Netjes-Token the parent passed in
-// NETJES_TOKEN. Renders are aborted when the caller disconnects, when the shell is not ready after
+// (no terminal colours) if the shell fails. GET /health -> 200 at once, without a body read. In production the parent
+// pings a process that has answered no render for a while; any answer will do, and a process that sends nothing back
+// within the render timeout (at least 5 s) is killed and restarted. Every request must carry the X-Netjes-Token the
+// parent passed in NETJES_TOKEN. Renders are aborted when the caller disconnects, when the shell is not ready after
 // NETJES_RENDER_TIMEOUT_MS, or when the whole stream takes longer than NETJES_STREAM_TIMEOUT_MS. Exits when stdin
 // closes.
 // Startup: prints NETJES_READY {"port","viteOrigin"} on stdout once it listens. When the Vite dev server does not start,
@@ -14,6 +16,7 @@
 // that is not installed (message in plain text; code is the error's when it has one, such as ERR_MODULE_NOT_FOUND, or
 // MODULE_NOT_FOUND from a CommonJS config).
 import http from 'node:http';
+import path from 'node:path';
 import { pipeline } from 'node:stream/promises';
 import { pathToFileURL } from 'node:url';
 
@@ -39,6 +42,10 @@ const TERMINAL_ESCAPES = /(?:\u001b\[|\u009b)[0-?]*[ -/]*[@-~]|\u001b[\]PX^_][^\
 const plainText = (text) => text.replace(TERMINAL_ESCAPES, '');
 
 /** @typedef {{ signal: AbortSignal, waitForAll?: boolean, deferred?: (id: string) => PromiseLike<unknown> }} RenderOptions */
+/**
+ * The netjes plugin's development API (vite/plugin.mjs).
+ * @typedef {{ rescanPages(): void, pageUrl(id: string): string | null, unlistedPackage(id: string): string | null }} NetjesDevApi
+ */
 /** @type {(data: string, options: RenderOptions) => Promise<string>} */
 let render;
 /** @type {((data: string, options: RenderOptions) => Promise<import('node:stream').Readable>) | undefined} */
@@ -92,8 +99,21 @@ if (mode === 'development') {
     }
     await viteFailed(error);
   }
-  /** The netjes plugin's development API (vite/plugin.mjs). */
-  const netjes = /** @type {{ rescanPages(): void } | undefined} */ (dev.config.plugins.find((plugin) => plugin.name === 'netjes')?.api);
+  const netjes = /** @type {NetjesDevApi | undefined} */ (dev.config.plugins.find((plugin) => plugin.name === 'netjes')?.api);
+  /** @param {unknown} error @returns {error is Error & { file: string }} */
+  const isMissingModule = (error) => error instanceof Error && error.name === 'MissingModuleError' && 'file' in error && typeof error.file === 'string';
+  /**
+   * Says what to do when the missing file is of an installed page package that the Vite config does not list.
+   * @param {Error & { file: string }} error
+   */
+  const withPackageHint = (error) => {
+    const name = netjes?.unlistedPackage(error.file);
+    if (!name) return error;
+    const message = `${error.message}: add '${name}' to netjes({ packages }) in ${path.basename(dev.config.configFile ?? 'vite.config.ts')}`;
+    error.stack = error.stack?.replace(error.message, message);
+    error.message = message;
+    return error;
+  };
   /**
    * Runs a render with the server entry. .NET routes a page file as soon as its own watcher sees it, but the page
    * module map changes only when Vite's watcher reports a page file, which for this one can be much later (a file it
@@ -106,17 +126,21 @@ if (mode === 'development') {
     try {
       return await run(await dev.ssrLoadModule('netjes/server-entry'));
     } catch (error) {
-      if (!netjes || !(error instanceof Error) || error.name !== 'MissingModuleError') throw error;
+      if (!netjes || !isMissingModule(error)) throw error;
       netjes.rescanPages();
-      return run(await dev.ssrLoadModule('netjes/server-entry'));
+      try {
+        return await run(await dev.ssrLoadModule('netjes/server-entry'));
+      } catch (again) {
+        throw isMissingModule(again) ? withPackageHint(again) : again;
+      }
     }
   };
   render = async (data, options) => {
-    const styled = await withDevStyles(dev, data);
+    const styled = await withDevStyles(dev, data, netjes);
     return withServerEntry((entry) => entry.render(styled, options));
   };
   renderToStream = async (data, options) => {
-    const styled = await withDevStyles(dev, data);
+    const styled = await withDevStyles(dev, data, netjes);
     return withServerEntry((entry) => entry.renderToStream(styled, options));
   };
 } else {
@@ -127,11 +151,17 @@ if (mode === 'development') {
 
 /**
  * Inlines the CSS imported by the page and its segment files, so the server-rendered page is styled before the client
- * script runs. Vite's client adopts these <style data-vite-dev-id> tags and keeps them updated through HMR.
+ * script runs. Vite's client adopts these <style data-vite-dev-id> tags and keeps them updated through HMR: each CSS
+ * module sets its tag's text to its own as it loads, before hydration. The files are found in the SSR environment,
+ * which rendered the page, and their text comes from the client environment's build, which that module carries
+ * (clientCss): React then hydrates the text the server rendered. A page package's files are loaded by the URLs of
+ * their real paths, which the plugin knows; a file of a package the plugin does not list is left to the render, which
+ * says what to do.
  * @param {import('vite').ViteDevServer} server
  * @param {string} data
+ * @param {NetjesDevApi | undefined} netjes
  */
-async function withDevStyles(server, data) {
+async function withDevStyles(server, data, netjes) {
   const payload = JSON.parse(data);
   /** @type {Array<Record<string, unknown>>} */
   const segments = payload.segments ?? [];
@@ -149,22 +179,83 @@ async function withDevStyles(server, data) {
     if (!node?.id || seen.has(node.id)) return;
     seen.add(node.id);
     if (node.file && CSS_FILE.test(node.file) && !node.id.includes('?')) {
-      const css = await server.ssrLoadModule(`${node.url}?inline`);
-      styles.set(node.file, String(css.default));
+      styles.set(node.file, await clientCss(server, node));
       return;
     }
     for (const imported of node.importedModules) await collect(imported);
   }
 
   for (const file of files) {
-    await server.ssrLoadModule(`/${file}`);
-    await collect(await environment.moduleGraph.getModuleByUrl(`/${file}`));
+    const url = netjes ? netjes.pageUrl(file) : `/${file}`;
+    if (url === null) continue;
+    await server.ssrLoadModule(url);
+    await collect(await environment.moduleGraph.getModuleByUrl(url));
   }
   if (styles.size === 0) return data;
   payload.document.devStyles = [...styles].map(([id, css]) => ({ id, css }));
   return JSON.stringify(payload).replace(/[<>&\u2028\u2029]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, '0')}`);
 }
 
+/** How a CSS module in the client environment declares the text it sets: this, then the text as a JSON string. */
+const CLIENT_CSS_LINE = 'const __vite__css = ';
+/** Whether a module without that line, or without a JSON string on it, has been reported: once per process. */
+let clientCssMissing = false;
+
+/**
+ * A CSS file's text as Vite's client sets it in the page: the string that the file's module in the client environment
+ * declares and passes to updateStyle. The browser imports that module and gets it from the same cache, until an edit
+ * invalidates it; a module that does not accept its own updates, and that no browser has loaded yet, is built again
+ * for the browser (below). The SSR environment's `?inline` build is a second build of the file, which a plugin with
+ * state of its own in each environment, as Tailwind CSS has, can make differently. A module without that line, or with
+ * something other than a JSON string after it, from a Vite or a plugin that writes it otherwise, gets the `?inline`
+ * build all the same, and a warning.
+ * @param {import('vite').ViteDevServer} server
+ * @param {import('vite').EnvironmentModuleNode} node
+ */
+async function clientCss(server, node) {
+  const client = server.environments.client;
+  const built = await client.transformRequest(node.url);
+  const module = await client.moduleGraph.getModuleByUrl(node.url);
+  if (module && module.importers.size === 0 && module.isSelfAccepting === false) {
+    // Nothing in the client environment imports the module, so no browser has loaded a page with it, and the module
+    // does not accept its own updates, as a CSS Modules file's does not. Vite would take an edit to the file for one
+    // that no page can apply, and reload every open page, where without this read the module would not be there and
+    // the edit would reach no browser. So that it still reaches none, the module counts as not yet analyzed, where Vite
+    // stops an update, and its build is dropped: Vite builds it again for the browser that loads the page, and learns
+    // from that build how the module takes updates.
+    client.moduleGraph.invalidateModule(module);
+    module.isSelfAccepting = undefined;
+  }
+  // By lines, not with a regular expression: JSON.stringify leaves U+2028 and U+2029 in a string, and `.` stops at both.
+  const line = built?.code.split('\n').find((text) => text.startsWith(CLIENT_CSS_LINE));
+  const css = line === undefined ? undefined : jsonString(line.slice(CLIENT_CSS_LINE.length));
+  if (css !== undefined) return css;
+  if (!clientCssMissing) {
+    clientCssMissing = true;
+    const unread = line === undefined ? 'has no line that starts with' : 'has no JSON string after';
+    console.warn(
+      `netjes: Vite's client module for ${node.url} ${unread} "${CLIENT_CSS_LINE}", so development pages inline the ` +
+        "SSR build of their CSS: it can differ from the browser's build, which Vite's client puts in its place once " +
+        "the page's scripts run. Logged once, for the first such file.",
+    );
+  }
+  const inline = await server.ssrLoadModule(`${node.url}?inline`);
+  return String(inline.default);
+}
+
+/**
+ * @param {string} json
+ * @returns {string | undefined} The string `json` holds, or undefined when it holds no string.
+ */
+function jsonString(json) {
+  try {
+    const value = JSON.parse(json);
+    return typeof value === 'string' ? value : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
 /**
  * Page.Defer values per render, as .NET posts them to /resolve. Values may arrive before the render asks for them;
  * entries nobody claims are dropped after the stream timeout.
@@ -240,7 +331,10 @@ const server = http.createServer(async (req, res) => {
       const { renderId, id, value, error } = JSON.parse(await readBody(req));
       if (typeof renderId !== 'string' || typeof id !== 'string') throw new Error('renderId and id are required');
       const pending = pendingValue(renderId, id);
-      if (typeof error === 'string') pending.reject(new Error(error));
+      // An empty error is a failure whose message .NET withheld (error details are off): the render gets a stand-in
+      // marked as one, as the browser does (src/errors.ts), and hands the browser an empty error again.
+      if (error === '') pending.reject(Object.assign(new Error('Something went wrong'), { withheld: true }));
+      else if (typeof error === 'string') pending.reject(new Error(error));
       else pending.resolve(value);
       res.writeHead(204).end();
     } catch (error) {

package/skills/netjes/SKILL.md

@@ -12,14 +12,19 @@ Netjes renders React pages from ASP.NET Core. C# receives every request and owns
 - `app/**/page.tsx`: a page. `app/blog/[slug]/page.tsx` serves `/blog/{slug}`. Layouts, boundaries and folder rules: [references/routing.md](references/routing.md).
 - `Features/<Feature>/*.cs`: the C# side of a feature, mapped by an extension method that `Program.cs` calls before `app.MapPages()`. Loaders and actions: [references/data-and-actions.md](references/data-and-actions.md).
 - `generated/netjes.ts`: zod schemas and typed references generated from the C# types and the page files. Read it to see what a page receives; never edit it.
+- Page packages: pages, layouts and loaders from an npm and NuGet package pair, mounted at a prefix by the package's extension in `Program.cs` (`app.MapHelpCenter("/help")`, before `app.MapPages()`) and listed in `netjes({ packages })` in `vite.config.ts`. Their files stay in `node_modules` and merge into `app/` folder by folder; never copy them into `app/`. Mounting, replacing a page and the root layout: [references/routing.md](references/routing.md#page-packages).
 - `components/`: React components and their tests. Testing: [references/testing.md](references/testing.md).
+- `tests/<App>.Tests/`: the C# tests (xUnit v3 and `WebApplicationFactory`), where the app has them, as an app made with `netjes new` does.
+- `e2e/`: the Playwright specs, which `npm run test:e2e` runs.
+- The root folders `tests/` and `e2e/` are outside the app's build (`DefaultItemExcludes` in a new app's project file), so the app's own C# does not go there.
+- `scripts/`: code that runs only in Node. In the TypeScript configs `netjes new` writes, `tsconfig.app.json` checks the app's code without Node's types, so a component that reads `process` or imports `node:*` fails `npm run typecheck`; `tsconfig.node.json` checks `scripts/`, `e2e/`, `vite.config.ts` and `playwright.config.ts` with them. Do not add `node` to the `types` of `tsconfig.app.json`.
 
 ## The loop for any change
 
-1. Write the failing test first: a Vitest component test, or a C# test for loader and action logic.
-2. Change the C# record, loader or action, then run `npx netjes generate` so `generated/netjes.ts` matches (a running `npm run dev` rewrites it when it restarts).
-3. Use the generated names in React: `pages['/pattern']`, `layouts['app/folder']`, `serverActions['name']`, `api['GET /api/...']`, `route('/pattern', params)`.
-4. Check: `npm test`, `npm run typecheck`, `dotnet build` (warnings are errors), `npx netjes generate --check`, and `npm run routes` for route warnings.
+1. Write the failing test first: a Vitest component test, or a C# test for loader and action logic (in `tests/<App>.Tests`, where a new app has its test project).
+2. Change the C# record, loader or action, then run `npx netjes generate` so `generated/netjes.ts` matches (a running `npm run dev` rewrites it when it restarts). Run it after updating a page package too: the app's file routes the package's pages.
+3. Use the generated names in React: `pages['/pattern']`, `layouts['app/folder']`, `serverActions['name']`, `api['GET /api/...']`, `route('/pattern', params)`, `endpointUrl('GET /api/...', params)`.
+4. Check: `npm test`, `npm run typecheck`, `dotnet build` (warnings are errors), `npx netjes generate --check`, and `npm run routes` for route warnings. Where the app has them, which an app made with `netjes new` does: `dotnet test tests/<App>.Tests` for the C# tests, and `npm run test:e2e` for a change to a page or a form.
 
 ## A page with data, end to end
 
@@ -65,11 +70,12 @@ export default definePage(pages['/blog/[slug]'], function Post({ title, body })
 
 - Decisions live in C#: data access, validation, authorization (`.RequireAuthorization()`, `Page.Forbidden()`), redirects, caching. React renders what it is sent.
 - Loaders and actions return Netjes results (`Page.Props(...)`, `Page.NotFound()`, `ServerAction.Ok(...)`), so their types reach `generated/netjes.ts`. Use records for everything that crosses to the browser.
-- zod at every boundary: `definePage`/`defineLayout` with the generated schemas, `useSearchParams(schema)` and `useParams(schema)` (schemas at module level), `api[...].response.parse(...)` for fetched JSON, `usePublicConfig(schema)`. No `any`, no casts of server data.
+- zod at every boundary: `definePage`/`defineLayout` with the generated schemas, `useSearchParams(schema)` and `useParams(schema)` (schemas at module level), `api[...].response.parse(...)` for fetched JSON (from `useHref(endpointUrl(...))`, never a hand-built URL), `usePublicConfig(schema)`, `Href.parse(...)` or `isHref(...)` for URLs from a CMS. A link C# sends to one of the app's pages is a `Href` in the record (`new Href("/about")`), generated as the `Href` schema, so it reaches `<Link href>` checked; a link to an endpoint or a file stays a `string`. No `any`, no casts of server data.
 - Server state goes through TanStack Query, seeded from the loader with `.WithQuery(key, data)`; no `useEffect` fetching.
 - Internal links use `<Link>` and `route()`; forms use `<Form>` with `useAction`, and must work without JavaScript.
+- Give each page a title of its own (`metadata`, or `PageMetadata` from C#), and keep the "Skip to content" link the first thing in the root layout, `app/layout.tsx`, that takes the focus, also when the root layout is kept bare and the site's chrome is in a group layout such as `app/(site)/layout.tsx`: after a client navigation the router announces the page by its title and starts the focus over at the top ([references/routing.md](references/routing.md)).
 - Never edit `generated/netjes.ts`; regenerate it and commit it with the change.
-- Anything in `Netjes:PublicConfig` or shared props is sent to the browser.
+- Anything in `Netjes:PublicConfig` or shared props is sent to the browser. So is the route of each endpoint with an `endpointUrl` key, one mapped only in Development included, once any component calls `endpointUrl`: keep secrets out of routes, and authorize on the endpoint.
 - Caching, streaming and static export have sharp edges: read [references/caching-and-streaming.md](references/caching-and-streaming.md) before using `.CachePage`, `Page.Defer` or `netjes export`.
 - Shipping: [references/deployment.md](references/deployment.md).
 
@@ -79,6 +85,8 @@ export default definePage(pages['/blog/[slug]'], function Post({ title, body })
 |---|---|
 | `npm run dev` | `dotnet watch` with Vite HMR on http://localhost:5080 |
 | `npm test`, `npm run typecheck` | Vitest; strict TypeScript |
+| `dotnet test tests/<App>.Tests` | The C# tests, in an app that has that project; no Node and no client build |
+| `npm run test:e2e` | Playwright, in an app that has that script; `npx playwright install chromium` once first |
 | `npx netjes generate [--check]` | Rewrite `generated/netjes.ts`; `--check` fails when it is stale |
 | `npm run routes` (`netjes routes [--json]`) | The route table and route warnings, as ASP.NET Core sees them |
 | `npx netjes build` | Types, then the client and server bundles |
@@ -88,6 +96,6 @@ export default definePage(pages['/blog/[slug]'], function Post({ title, body })
 
 ## More
 
-The guides go further than these references: [routing](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/routing.md), [data loading](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/data-loading.md), [actions and forms](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/actions-and-forms.md), [metadata](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/metadata.md), [images](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/images.md), [rendering and streaming](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/rendering-and-streaming.md), [caching](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/caching.md), [security](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/security.md), [testing](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/testing.md) and [deployment](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/deployment.md), with the [React API](https://github.com/DennisVerhoeven/netjes/blob/main/docs/reference/react-api.md), the [C# API](https://github.com/DennisVerhoeven/netjes/blob/main/docs/reference/csharp-api.md) and the [options](https://github.com/DennisVerhoeven/netjes/blob/main/docs/reference/options.md) as reference.
+The guides go further than these references: [routing](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/routing.md), [data loading](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/data-loading.md), [actions and forms](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/actions-and-forms.md), [page packages](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/page-packages.md), [rendering and streaming](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/rendering-and-streaming.md), [caching](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/caching.md), [images](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/images.md), [metadata](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/metadata.md), [security](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/security.md), [testing](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/testing.md) and [deployment](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/deployment.md), with the [React API](https://github.com/DennisVerhoeven/netjes/blob/main/docs/reference/react-api.md), the [C# API](https://github.com/DennisVerhoeven/netjes/blob/main/docs/reference/csharp-api.md) and the [options](https://github.com/DennisVerhoeven/netjes/blob/main/docs/reference/options.md) as reference.
 
 The same docs as plain text: https://raw.githubusercontent.com/DennisVerhoeven/netjes/main/llms.txt (an index) and https://raw.githubusercontent.com/DennisVerhoeven/netjes/main/llms-full.txt (everything in one file). They follow the main branch; the installed version's sources and types are in `node_modules/netjes/`.

package/skills/netjes/references/caching-and-streaming.md

@@ -17,15 +17,43 @@ app.MapPageLoader("/blog/[slug]", (string slug, PostStore posts) => ...)
 
 - A stored page is served to every visitor, shared props included. Cache only pages that are the same for everyone: their loaders and shared props must not depend on cookies or other per-visitor state (Netjes warns once per page when a cached render reads `Request.Cookies`). Signed-in users and requests with an `Authorization` header bypass the cache.
 - Evict from an action with `ServerAction.Ok().Revalidate("posts")` or `.RevalidatePath("/blog/hello")`, and from anywhere else (a webhook, a background job) with `IPageCache.RevalidateTagAsync(tag)` / `RevalidatePathAsync(path)`.
+- Each query string as sent is an entry of its own, so `?utm_source=...` and a made-up `?&&` each store another copy of the page, and `SetVaryByQuery` cannot narrow that. `.CacheQueryKeys("page")` names the keys a page reads, and `.CacheQueryKeys()` says it reads none: a request with another key, an empty segment (`?page=2&`) or a segment without a name renders each time and is never stored; the page rendered for it goes out `no-store, private` unless the page sets its own `Cache-Control`, and keeps its URL as sent. Do not leave out a key that a loader or `useSearchParams()` reads: those requests still work but are not cached, and nothing warns. Weigh it on a page with many visits through tagged links, which then renders for each of them. It does nothing on an endpoint that is neither a page nor under `CachePage`, so it can stay on a group that mixes pages and APIs.
 - Cached pages carry no antiforgery token: forms on them fetch one first, so they need JavaScript.
-- A Content-Security-Policy is off unless the app sets one. A document with a CSP nonce is never stored, so cached pages under a policy need a hash-based one (`ContentSecurityPolicy` without `{nonce}`), and under such a policy a page must not stream.
+- A Content-Security-Policy is off unless the app sets one. A document with a CSP nonce is never stored, so cached pages under a policy need a hash-based one (`ContentSecurityPolicy` without `{nonce}`), and under such a policy a page must not stream. Build it from `NetjesContentSecurityPolicy.ScriptHashes`, the hashes of Netjes's inline scripts, never from a pasted hash, which a Netjes upgrade can make stale: `$"script-src 'self' {NetjesContentSecurityPolicy.ScriptHashes}; object-src 'none'; base-uri 'self'"`. Keep `'self'` for the built app's module scripts, and leave out `'strict-dynamic'`, which needs a nonce. In the Development environment the module scripts come from the Vite dev server, so add its origin there, and only there, from a variable:
+
+  ```csharp
+  builder.Services.AddNetjes(options =>
+  {
+      var devServer = builder.Environment.IsDevelopment() ? $" http://localhost:{options.ViteDevPort}" : "";
+      options.ContentSecurityPolicy =
+          $"script-src 'self'{devServer} {NetjesContentSecurityPolicy.ScriptHashes}; object-src 'none'; base-uri 'self'";
+  });
+  ```
+
+  When browsers reach the dev server at another address, the one set in `NETJES_VITE_ORIGIN`, list that origin instead. In Development a policy also needs these, or set it outside Development only:
+
+  - With `connect-src`, or `default-src` without `connect-src`: Vite's HMR socket, `ws://` (`wss://` for an https origin) and the dev server's host and port, such as `ws://localhost:{options.ViteDevPort}`, which neither `'self'` nor a nonce covers.
+  - With `style-src-elem` or `style-src`, or `default-src` without them: the document's nonce or `'unsafe-inline'`, for the CSS that Development inlines.
+  - With `img-src` or `font-src`, or `default-src` without them: the dev server's origin, for the images and fonts Vite serves.
+
+  Neither the nonce-based nor the hash-based policy needs `'unsafe-eval'`: zod parses without compiled code in the browser, from zod 4.4.0 on. Under a hash-based policy, give forms server actions through `useAction` and `<Form action={formAction}>`: any other function action, and any function on `<SubmitButton formAction>`, makes React add an inline script whose hash follows the React version and is not in `ScriptHashes`. In JavaScript, such as a static host's headers for exported pages, the same value is `CSP_SCRIPT_HASHES` from `netjes`. A nonce-based policy that the app writes itself takes its nonce from `HttpContext.GetCspNonce()`, the one Netjes puts on the document. Netjes logs a warning, once per policy, when the policy on a document refuses Netjes's bootstrap or module scripts or, in Development, the dev server. It does not check the inline code of a `<Script>`, so list that hash yourself ([routing.md](routing.md)).
 - Keys include the host and the full URL, case included. In production pin `AllowedHosts` and set the output cache's `SizeLimit`.
 - Pages the output cache does not store go out `Cache-Control: no-store, private`, for visitors and signed-in users alike, unless the page sets its own header.
+- In the Development environment pages are never output-cached: each request renders the page, nothing is stored, and an output-cached page goes out `no-store, private` unless it sets its own `Cache-Control`, so `UseOutputCache()` can stay in every environment, with no Development guard. Cache slow or billed upstream data in the service that loads it (`IMemoryCache`, `HybridCache`). Try caching on the built app (`npx netjes build && npx netjes start`); a `WebApplicationFactory` test of it runs in the `Testing` environment with `Netjes:Mode=Development`.
 - Draft pages and draft redirects (a loader's `Page.Redirect` in draft mode), the client-rendered fallback, the page for a failed form post, action answers and antiforgery tokens always go out `no-store`, and without the headers a CDN reads ahead of `Cache-Control` (`CDN-Cache-Control`, any other `*-Cache-Control`, `Surrogate-Control`, `Edge-Control`, `X-Accel-Expires`), whatever the page set.
 
+## Endpoints that are not pages
+
+JSON APIs, text files and webhooks are not pages, unless `CachePage` is put on them or on their group. The page rules do not apply to their cache entries.
+
+- Netjes adds no `Cache-Control` to their answers, including the 400 that minimal API binding answers, and none under `CachePage` either (the page rules decide entries, not headers): the handler's own goes out as set, and the output cache sends the headers set before the body is written again with every stored answer, with `Age`, and adds none. Netjes's own endpoints: `/_netjes/image` (`public, max-age=` the image `CacheDuration` with an image or a 304, none with an error), `MapSitemap` (`public, max-age=` its `cacheFor`), action answers and `/_netjes/antiforgery` (`no-store`); `MapRobotsTxt` and `MapLocaleRedirect` send none.
+- ASP.NET Core's keys apply. The path in any case shares one entry, route values included (`/codes/Ab` and `/codes/aB`): `AddOutputCache(o => o.UseCaseSensitivePaths = true)` gives each spelling its own entry, app-wide, and `.CacheOutput(p => p.With(c => c.HttpContext.Request.Path.Value == "/llms.txt"))` stores that one spelling only. Every query key varies the entry: `SetVaryByQuery([])` keeps one entry whatever the query (there is no call without arguments), `SetVaryByQuery("page")` varies on the keys it lists. Both are safe only when the answer does not depend on the keys they leave out and its body does not repeat the URL.
+- Only the answer to a `GET` or `HEAD` without an `Authorization` header or a signed-in user is stored, when it is a 200 that sets no cookie. `RevalidatePath` never evicts these entries: give the policy a tag (`.CacheOutput(p => p.Tag("docs"))`) and use `.Revalidate("docs")` or `IPageCache.RevalidateTagAsync("docs")`.
+- They stay output-cached in the Development environment, where only pages are not. Draft mode bypasses them, the image endpoint apart.
+
 ## TanStack Query
 
-Netjes creates one `QueryClient` per server render and per page load. `.WithQuery(key, data)` on a loader result seeds it, so `useQuery` with that key has data on the first render and fetches nothing until the data is stale (default `staleTime` one minute). Data the browser fetched more recently is kept. After an action, `.Invalidate(key)` refetches and `.WithQuery(key, data)` sets the new value. Configure the client with `netjes({ query: { defaultOptions } })` in `vite.config.ts`.
+Netjes creates one `QueryClient` per server render and per page load. `.WithQuery(key, data)` on a loader result seeds it, so `useQuery` with that key has data on the first render and fetches nothing until the data is stale (default `staleTime` one minute). Data the browser fetched more recently is kept. After an action, `.Invalidate(key)` refetches and `.WithQuery(key, data)` sets the new value. A fresh query is not fetched again on a mount or a window focus, whatever `Cache-Control` its endpoint sent; the `fetch` of a refetch can be answered by the browser's HTTP cache, and `staleTime: 0` leaves a query to HTTP caching. Configure the client with `netjes({ query: { defaultOptions } })` in `vite.config.ts`.
 
 ## Streaming slow data
 
@@ -52,14 +80,19 @@ function ActivityFeed({ activity }: { activity: PromiseLike<ActivityItem[]> }) {
 - A deferred task runs alongside the rest of the request: give it its own `DbContext`, never the request's, and pass `http.RequestAborted`. Either create one from `IDbContextFactory<T>`, as above, or use the overload that runs the work in its own DI scope, started once the page's payload is written: `Page.Defer(services => services.GetRequiredService<AppDb>().ActivityAsync(id, http.RequestAborted))`.
 - Without JavaScript, a fallback that is still pending stays. Crawlers (`CrawlerUserAgents`), apps with `StreamDocuments = false` and `netjes export` get the complete document.
 - A boundary that is ready when the shell goes out is written in place, so it shows without JavaScript too.
+- A value that fails rejects, so `use()` throws to the nearest `error.tsx`: with error details off its message is a stand-in marked `withheld`, and a cancelled task fails with "The value was cancelled".
 
 ## Static export
 
-`npx netjes export [dir]` builds, runs the app once in Production and writes every page as static HTML (default `out/`). Dynamic pages need `.StaticParams(...)` (`.StaticParams<PostStore>(s => s.All.Select(p => new { slug = p.Slug }))`, arrays for catch-all parameters); pages that need a server take `.ExcludeFromExport()`. The export fails before writing anything for a dynamic page without static params, a page with a page action, or a page that requires authorization. Exported pages navigate with full page loads and carry no antiforgery token.
+`npx netjes export [dir]` builds, runs the app once in Production and writes every page as static HTML (default `out/`). `dir` must be inside the app: `netjes export` refuses any other folder before it builds. Dynamic pages need `.StaticParams(...)` (`.StaticParams<PostStore>(s => s.All.Select(p => new { slug = p.Slug }))`, arrays for catch-all parameters); pages that need a server take `.ExcludeFromExport()`. The export fails before writing anything for a dynamic page without static params, a page with a page action, or a page that requires authorization. Exported pages navigate with full page loads and carry no antiforgery token.
+
+It also writes `sitemap.xml` and `robots.txt` when the app maps `MapSitemap` and `MapRobotsTxt`, the sitemap listing only exported pages (none marked `.ExcludeFromExport()`), and any other `GET` endpoint marked `.IncludeInExport()` as a file at its URL: `app.MapGet("/llms.txt", ...).IncludeInExport()` writes `out/llms.txt`, the body only. The export requests it with no query string, and any status but 200, a redirect included, fails the export; one that reads the query string is warned about in `Netjes.Export.QueryString`, and one that requires a value there fails the export. Such an endpoint needs a URL with a file extension and no route parameters, and must allow anonymous requests; a file in `public/` with its path (a `public/robots.txt` next to `MapRobotsTxt`) fails the export. `.ExcludeFromExport()` on the Map call leaves a file out, and wins over `.IncludeInExport()`; when you leave `MapSitemap` out, leave `MapRobotsTxt` out too, since `robots.txt` always names the sitemap. Both files use the `siteUrl` of the environment the export runs in, Production unless `ASPNETCORE_ENVIRONMENT` is set, so set the static host's URL for the export (`SiteUrl=https://www.example.com npx netjes export` when the app reads `app.Configuration["SiteUrl"]`); a loopback one, such as a `http://localhost:5080` fallback, is written and warned about.
+
+The export requests every URL without a query string, and a static host serves each file for every query string. A page whose loader, or a layout loader above it, reads the query string is still exported, as the page without one, and the export logs a warning in `Netjes.Export.QueryString`. To export a page for each value, make it a route parameter with `.StaticParams(...)` (`/blog/tags/[tag]`, not `/blog?tag=`); to keep the page on a server, exclude it. A loader parameter with no default value and a type that is not nullable (`int page`, `string q`) requires the value: without one the page answers 400 and the export fails, so give it a default value or a nullable type (`int page = 1`, `string? q`) to export the page without one. On an exported page `useSearchParams()` sees no query string either, whatever the address bar shows: read `window.location.search` in an effect there, and parse it with the same schema.
 
 ## Sitemap and robots
 
-`app.MapSitemap(siteUrl)` serves `/sitemap.xml` from the route table (dynamic pages through `.StaticParams`, pages that need authorization or call `.ExcludeFromSitemap()` left out) and `app.MapRobotsTxt(siteUrl, disallow)` serves `/robots.txt`.
+`app.MapSitemap(siteUrl)` serves `/sitemap.xml` from the route table (dynamic pages through `.StaticParams`, pages that need authorization or call `.ExcludeFromSitemap()` left out) and `app.MapRobotsTxt(siteUrl, disallow)` serves `/robots.txt`. `netjes export` writes both ([Static export](#static-export)).
 
 Leave `/_netjes/` out of `disallow`: `<Image>` serves every image through `/_netjes/image`, so a crawler that may not fetch it cannot index your images. The other endpoints there take posts or hand out an antiforgery token, which a crawler has no use for. Under a base path, `disallow` paths are written as given, so include the base path in them. See [Metadata](https://github.com/DennisVerhoeven/netjes/blob/main/docs/guides/metadata.md).