vinext 0.0.53 → 0.0.55

package/dist/server/app-ssr-stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-ssr-stream.js","names":[],"sources":["../../src/server/app-ssr-stream.ts"],"sourcesContent":["import { createInlineScriptTag, safeJsonStringify } from \"./html.js\";\nimport {\n  bytesToBase64,\n  concatUint8Arrays,\n  RSC_EMBEDDED_BINARY_CHUNK,\n  type RscEmbeddedChunk,\n} from \"./app-rsc-embedded-chunks.js\";\nimport { NAVIGATION_RUNTIME_SYMBOL_DESCRIPTION } from \"../client/navigation-runtime.js\";\n\ntype RscEmbedTransform = {\n  flush(): string;\n  finalize(): Promise<string>;\n  /** Resolves when all raw bytes from the embed stream have been read. */\n  getRawBuffer(): Promise<ArrayBuffer>;\n};\n\ntype HtmlInsertion = string | (() => string);\n\nconst NAVIGATION_RUNTIME_REFERENCE = `self[Symbol.for(${safeJsonStringify(\n  NAVIGATION_RUNTIME_SYMBOL_DESCRIPTION,\n)})]`;\n\nexport function navigationRuntimeRscBootstrapExpression(): string {\n  return `((${NAVIGATION_RUNTIME_REFERENCE}??={bootstrap:{routeManifest:null},functions:{}}).bootstrap.rsc??={rsc:[]})`;\n}\n\nexport function createNavigationRuntimeRscMetadataScript(\n  params: Record<string, string | string[]>,\n  nav: { pathname: string; searchParams: [string, string][] },\n): string {\n  return (\n    \"Object.assign(\" +\n    navigationRuntimeRscBootstrapExpression() +\n    \",{params:\" +\n    safeJsonStringify(params) +\n    \",nav:\" +\n    safeJsonStringify(nav) +\n    \"})\"\n  );\n}\n\nfunction createNavigationRuntimeRscChunkScript(chunk: RscEmbeddedChunk): string {\n  return navigationRuntimeRscBootstrapExpression() + \".rsc.push(\" + safeJsonStringify(chunk) + \")\";\n}\n\nfunction createNavigationRuntimeRscDoneScript(): string {\n  return navigationRuntimeRscBootstrapExpression() + \".done=true\";\n}\n\n/**\n * Fix invalid preload \"as\" values in RSC Flight hint lines before they reach\n * the client. React Flight emits HL hints with as=\"stylesheet\" for CSS, but\n * the HTML spec requires as=\"style\" for <link rel=\"preload\">.\n */\nexport function fixFlightHints(text: string): string {\n  return text.replace(/(\\d*:HL\\[.*?),\"stylesheet\"(\\]|,)/g, '$1,\"style\"$2');\n}\n\n/**\n * Create a helper that progressively embeds RSC chunks as inline <script> tags.\n * The browser entry turns the embedded chunks back into Uint8Array data.\n */\nexport function createRscEmbedTransform(\n  embedStream: ReadableStream<Uint8Array>,\n  scriptNonce?: string,\n): RscEmbedTransform {\n  const reader = embedStream.getReader();\n  let pendingChunks: RscEmbeddedChunk[] = [];\n  const rawChunks: Uint8Array[] = [];\n  let reading = false;\n\n  async function pumpReader(): Promise<void> {\n    if (reading) return;\n    reading = true;\n    try {\n      while (true) {\n        const result = await reader.read();\n        if (result.done) break;\n        // Accumulate raw bytes BEFORE fixFlightHints so the cache stores\n        // unmodified RSC data. The embed script path below applies fixes.\n        rawChunks.push(result.value);\n        try {\n          const decoder = new TextDecoder(\"utf-8\", { fatal: true });\n          const text = decoder.decode(result.value);\n          // The RSC entry already fixes HL hints at the source. Keep this second\n          // pass as defense in depth for any embed stream that bypasses that\n          // wrapper; the rewrite is idempotent, so double-application is safe.\n          pendingChunks.push(fixFlightHints(text));\n        } catch {\n          pendingChunks.push([RSC_EMBEDDED_BINARY_CHUNK, bytesToBase64(result.value)]);\n        }\n      }\n    } catch (error) {\n      if (process.env.NODE_ENV !== \"production\") {\n        console.warn(\"[vinext] RSC embed stream read error:\", error);\n      }\n      throw error;\n    } finally {\n      reading = false;\n    }\n  }\n\n  const pumpPromise = pumpReader();\n\n  return {\n    flush(): string {\n      if (pendingChunks.length === 0) return \"\";\n\n      const chunks = pendingChunks;\n      pendingChunks = [];\n\n      let scripts = \"\";\n      for (const chunk of chunks) {\n        scripts += createInlineScriptTag(createNavigationRuntimeRscChunkScript(chunk), scriptNonce);\n      }\n      return scripts;\n    },\n\n    async finalize(): Promise<string> {\n      await pumpPromise;\n      let scripts = this.flush();\n      scripts += createInlineScriptTag(createNavigationRuntimeRscDoneScript(), scriptNonce);\n      return scripts;\n    },\n\n    async getRawBuffer(): Promise<ArrayBuffer> {\n      await pumpPromise;\n      const buffer = concatUint8Arrays(rawChunks);\n      rawChunks.length = 0;\n      return buffer.buffer;\n    },\n  };\n}\n\n/**\n * Fix invalid preload \"as\" values in server-rendered HTML.\n * React Fizz emits <link rel=\"preload\" as=\"stylesheet\"> for CSS, but the\n * HTML spec requires as=\"style\" for <link rel=\"preload\">.\n */\nexport function fixPreloadAs(html: string): string {\n  return html.replace(/<link(?=[^>]*\\srel=\"preload\")[^>]*>/g, (tag) =>\n    tag.replace(' as=\"stylesheet\"', ' as=\"style\"'),\n  );\n}\n\n/**\n * Match the `<head ...>` opening tag in a chunk. Matches both bare `<head>`\n * and `<head class=\"foo\">` shapes. Used to splice HTML immediately after the\n * opening tag so injected content runs before any React-emitted resource\n * hints (stylesheets, modulepreloads) that React Float hoists into `<head>`.\n */\nconst HEAD_OPEN_RE = /<head\\b[^>]*>/;\n\n/**\n * Create the tick-buffered HTML transform that injects RSC scripts between\n * React Fizz flush cycles without corrupting split HTML chunks.\n *\n * Two insertion points are supported in tandem:\n *\n *  - `injectHTML` is emitted immediately before `</head>`. This is where the\n *    bulk of vinext's head additions live (RSC navigation runtime metadata,\n *    bootstrap modulepreload, server-inserted HTML, font preloads, etc.).\n *  - `injectAfterHeadOpenHTML` is emitted immediately after the `<head ...>`\n *    opening tag so the content runs before any React-emitted resource\n *    hints. This is where inline `<Script strategy=\"beforeInteractive\">`\n *    captures land so the no-flash dark-mode pattern works.\n *\n * Fallback behaviour differs by insertion point:\n *\n *  - `injectHTML` is emitted at end-of-stream by the `flush` handler when no\n *    chunk ever contained `</head>` — callers still see the payload on\n *    highly fragmented streams (just at the end of the body rather than in\n *    the head).\n *  - `injectAfterHeadOpenHTML` is silently dropped when `<head ...>` is not\n *    found in a discoverable chunk. Emitting it at end-of-stream would put\n *    it after the document body, defeating the point — the splice has to\n *    happen before resource hints to be useful, so the safer behaviour is\n *    to no-op and let the user-rendered Script (in its source-order\n *    position) ship as-is.\n */\nexport function createTickBufferedTransform(\n  rscEmbed: RscEmbedTransform,\n  injectHTML: HtmlInsertion = \"\",\n  injectAfterHeadOpenHTML: HtmlInsertion = \"\",\n): TransformStream<Uint8Array, Uint8Array> {\n  const decoder = new TextDecoder();\n  const encoder = new TextEncoder();\n  const insertsPerFlush = typeof injectHTML === \"function\";\n  let injected = false;\n  let preHeadInjected = false;\n  let buffered: string[] = [];\n  let timeoutId: ReturnType<typeof setTimeout> | null = null;\n  const readInsertion = (): string =>\n    typeof injectHTML === \"function\" ? injectHTML() : injectHTML;\n  const readPreHeadInsertion = (): string =>\n    typeof injectAfterHeadOpenHTML === \"function\"\n      ? injectAfterHeadOpenHTML()\n      : injectAfterHeadOpenHTML;\n  const emitInsertion = (controller: TransformStreamDefaultController<Uint8Array>): void => {\n    const insertion = readInsertion();\n    if (insertion) {\n      controller.enqueue(encoder.encode(insertion));\n    }\n  };\n\n  /**\n   * Splice the pre-head insertion (typically captured beforeInteractive inline\n   * scripts) immediately after the `<head ...>` opening tag. Returns the\n   * rewritten chunk and a flag indicating whether the splice happened, so the\n   * caller can mark `preHeadInjected` and stop scanning further chunks.\n   *\n   * NOTE: This is called only when `<head ...>` lies fully inside `chunk` —\n   * we deliberately avoid stitching across chunk boundaries because doing so\n   * would force the transform to hold output until it had seen `<head ...>`,\n   * which both delays TTFB and complicates the existing `</head>` injection\n   * path. In practice React Fizz emits the opening shell as a single chunk.\n   */\n  const spliceAfterHeadOpen = (chunk: string): { chunk: string; spliced: boolean } => {\n    if (preHeadInjected) return { chunk, spliced: false };\n    const insertion = readPreHeadInsertion();\n    if (!insertion) return { chunk, spliced: false };\n    const match = HEAD_OPEN_RE.exec(chunk);\n    if (!match) return { chunk, spliced: false };\n    const insertAt = match.index + match[0].length;\n    return {\n      chunk: chunk.slice(0, insertAt) + insertion + chunk.slice(insertAt),\n      spliced: true,\n    };\n  };\n\n  const flushBuffered = (controller: TransformStreamDefaultController<Uint8Array>): void => {\n    if (buffered.length === 0) return;\n\n    if (injected && insertsPerFlush) {\n      // Emit newly collected server-inserted HTML before the next Fizz HTML\n      // batch so CSS-in-JS styles precede the elements they style.\n      emitInsertion(controller);\n    }\n\n    for (const chunk of buffered) {\n      let working = chunk;\n      if (!preHeadInjected) {\n        const result = spliceAfterHeadOpen(working);\n        if (result.spliced) {\n          working = result.chunk;\n          preHeadInjected = true;\n        }\n      }\n      if (!injected) {\n        const headEnd = working.indexOf(\"</head>\");\n        if (headEnd !== -1) {\n          const before = working.slice(0, headEnd);\n          const after = working.slice(headEnd);\n          controller.enqueue(encoder.encode(before + readInsertion() + after));\n          injected = true;\n          continue;\n        }\n      }\n      controller.enqueue(encoder.encode(working));\n    }\n    buffered = [];\n  };\n\n  return new TransformStream<Uint8Array, Uint8Array>({\n    transform(chunk, controller) {\n      buffered.push(fixPreloadAs(decoder.decode(chunk, { stream: true })));\n\n      if (timeoutId !== null) return;\n\n      timeoutId = setTimeout(() => {\n        try {\n          flushBuffered(controller);\n\n          const rscScripts = rscEmbed.flush();\n          if (rscScripts) {\n            controller.enqueue(encoder.encode(rscScripts));\n          }\n        } catch {\n          // Stream was cancelled between when the timeout was registered and\n          // when it fired (e.g. client disconnected, health-check cancelled\n          // the response body). Ignore — the stream is already closed.\n        }\n\n        timeoutId = null;\n      }, 0);\n    },\n\n    async flush(controller) {\n      if (timeoutId !== null) {\n        clearTimeout(timeoutId);\n        timeoutId = null;\n      }\n\n      flushBuffered(controller);\n\n      if (!injected) {\n        emitInsertion(controller);\n        injected = true;\n      } else if (insertsPerFlush) {\n        emitInsertion(controller);\n      }\n\n      const finalScripts = await rscEmbed.finalize();\n      if (finalScripts) {\n        controller.enqueue(encoder.encode(finalScripts));\n      }\n    },\n  });\n}\n"],"mappings":";;;;AAkBA,MAAM,+BAA+B,mBAAmB,kBACtD,sCACD,CAAC;AAEF,SAAgB,0CAAkD;CAChE,OAAO,KAAK,6BAA6B;;AAG3C,SAAgB,yCACd,QACA,KACQ;CACR,OACE,mBACA,yCAAyC,GACzC,cACA,kBAAkB,OAAO,GACzB,UACA,kBAAkB,IAAI,GACtB;;AAIJ,SAAS,sCAAsC,OAAiC;CAC9E,OAAO,yCAAyC,GAAG,eAAe,kBAAkB,MAAM,GAAG;;AAG/F,SAAS,uCAA+C;CACtD,OAAO,yCAAyC,GAAG;;;;;;;AAQrD,SAAgB,eAAe,MAAsB;CACnD,OAAO,KAAK,QAAQ,qCAAqC,iBAAe;;;;;;AAO1E,SAAgB,wBACd,aACA,aACmB;CACnB,MAAM,SAAS,YAAY,WAAW;CACtC,IAAI,gBAAoC,EAAE;CAC1C,MAAM,YAA0B,EAAE;CAClC,IAAI,UAAU;CAEd,eAAe,aAA4B;EACzC,IAAI,SAAS;EACb,UAAU;EACV,IAAI;GACF,OAAO,MAAM;IACX,MAAM,SAAS,MAAM,OAAO,MAAM;IAClC,IAAI,OAAO,MAAM;IAGjB,UAAU,KAAK,OAAO,MAAM;IAC5B,IAAI;KAEF,MAAM,OAAO,IADO,YAAY,SAAS,EAAE,OAAO,MAAM,CACpC,CAAC,OAAO,OAAO,MAAM;KAIzC,cAAc,KAAK,eAAe,KAAK,CAAC;YAClC;KACN,cAAc,KAAK,CAAA,GAA4B,cAAc,OAAO,MAAM,CAAC,CAAC;;;WAGzE,OAAO;GACd,IAAI,QAAQ,IAAI,aAAa,cAC3B,QAAQ,KAAK,yCAAyC,MAAM;GAE9D,MAAM;YACE;GACR,UAAU;;;CAId,MAAM,cAAc,YAAY;CAEhC,OAAO;EACL,QAAgB;GACd,IAAI,cAAc,WAAW,GAAG,OAAO;GAEvC,MAAM,SAAS;GACf,gBAAgB,EAAE;GAElB,IAAI,UAAU;GACd,KAAK,MAAM,SAAS,QAClB,WAAW,sBAAsB,sCAAsC,MAAM,EAAE,YAAY;GAE7F,OAAO;;EAGT,MAAM,WAA4B;GAChC,MAAM;GACN,IAAI,UAAU,KAAK,OAAO;GAC1B,WAAW,sBAAsB,sCAAsC,EAAE,YAAY;GACrF,OAAO;;EAGT,MAAM,eAAqC;GACzC,MAAM;GACN,MAAM,SAAS,kBAAkB,UAAU;GAC3C,UAAU,SAAS;GACnB,OAAO,OAAO;;EAEjB;;;;;;;AAQH,SAAgB,aAAa,MAAsB;CACjD,OAAO,KAAK,QAAQ,yCAAyC,QAC3D,IAAI,QAAQ,sBAAoB,gBAAc,CAC/C;;;;;;;;AASH,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BrB,SAAgB,4BACd,UACA,aAA4B,IAC5B,0BAAyC,IACA;CACzC,MAAM,UAAU,IAAI,aAAa;CACjC,MAAM,UAAU,IAAI,aAAa;CACjC,MAAM,kBAAkB,OAAO,eAAe;CAC9C,IAAI,WAAW;CACf,IAAI,kBAAkB;CACtB,IAAI,WAAqB,EAAE;CAC3B,IAAI,YAAkD;CACtD,MAAM,sBACJ,OAAO,eAAe,aAAa,YAAY,GAAG;CACpD,MAAM,6BACJ,OAAO,4BAA4B,aAC/B,yBAAyB,GACzB;CACN,MAAM,iBAAiB,eAAmE;EACxF,MAAM,YAAY,eAAe;EACjC,IAAI,WACF,WAAW,QAAQ,QAAQ,OAAO,UAAU,CAAC;;;;;;;;;;;;;;CAgBjD,MAAM,uBAAuB,UAAuD;EAClF,IAAI,iBAAiB,OAAO;GAAE;GAAO,SAAS;GAAO;EACrD,MAAM,YAAY,sBAAsB;EACxC,IAAI,CAAC,WAAW,OAAO;GAAE;GAAO,SAAS;GAAO;EAChD,MAAM,QAAQ,aAAa,KAAK,MAAM;EACtC,IAAI,CAAC,OAAO,OAAO;GAAE;GAAO,SAAS;GAAO;EAC5C,MAAM,WAAW,MAAM,QAAQ,MAAM,GAAG;EACxC,OAAO;GACL,OAAO,MAAM,MAAM,GAAG,SAAS,GAAG,YAAY,MAAM,MAAM,SAAS;GACnE,SAAS;GACV;;CAGH,MAAM,iBAAiB,eAAmE;EACxF,IAAI,SAAS,WAAW,GAAG;EAE3B,IAAI,YAAY,iBAGd,cAAc,WAAW;EAG3B,KAAK,MAAM,SAAS,UAAU;GAC5B,IAAI,UAAU;GACd,IAAI,CAAC,iBAAiB;IACpB,MAAM,SAAS,oBAAoB,QAAQ;IAC3C,IAAI,OAAO,SAAS;KAClB,UAAU,OAAO;KACjB,kBAAkB;;;GAGtB,IAAI,CAAC,UAAU;IACb,MAAM,UAAU,QAAQ,QAAQ,UAAU;IAC1C,IAAI,YAAY,IAAI;KAClB,MAAM,SAAS,QAAQ,MAAM,GAAG,QAAQ;KACxC,MAAM,QAAQ,QAAQ,MAAM,QAAQ;KACpC,WAAW,QAAQ,QAAQ,OAAO,SAAS,eAAe,GAAG,MAAM,CAAC;KACpE,WAAW;KACX;;;GAGJ,WAAW,QAAQ,QAAQ,OAAO,QAAQ,CAAC;;EAE7C,WAAW,EAAE;;CAGf,OAAO,IAAI,gBAAwC;EACjD,UAAU,OAAO,YAAY;GAC3B,SAAS,KAAK,aAAa,QAAQ,OAAO,OAAO,EAAE,QAAQ,MAAM,CAAC,CAAC,CAAC;GAEpE,IAAI,cAAc,MAAM;GAExB,YAAY,iBAAiB;IAC3B,IAAI;KACF,cAAc,WAAW;KAEzB,MAAM,aAAa,SAAS,OAAO;KACnC,IAAI,YACF,WAAW,QAAQ,QAAQ,OAAO,WAAW,CAAC;YAE1C;IAMR,YAAY;MACX,EAAE;;EAGP,MAAM,MAAM,YAAY;GACtB,IAAI,cAAc,MAAM;IACtB,aAAa,UAAU;IACvB,YAAY;;GAGd,cAAc,WAAW;GAEzB,IAAI,CAAC,UAAU;IACb,cAAc,WAAW;IACzB,WAAW;UACN,IAAI,iBACT,cAAc,WAAW;GAG3B,MAAM,eAAe,MAAM,SAAS,UAAU;GAC9C,IAAI,cACF,WAAW,QAAQ,QAAQ,OAAO,aAAa,CAAC;;EAGrD,CAAC"}
+{"version":3,"file":"app-ssr-stream.js","names":[],"sources":["../../src/server/app-ssr-stream.ts"],"sourcesContent":["import {\n  createInlineScriptTag,\n  escapeHtmlAttr,\n  htmlTokenListContains,\n  safeJsonStringify,\n} from \"./html.js\";\nimport {\n  bytesToBase64,\n  concatUint8Arrays,\n  RSC_EMBEDDED_BINARY_CHUNK,\n  type RscEmbeddedChunk,\n} from \"./app-rsc-embedded-chunks.js\";\nimport { NAVIGATION_RUNTIME_SYMBOL_DESCRIPTION } from \"../client/navigation-runtime.js\";\n\ntype RscEmbedTransform = {\n  flush(): string;\n  finalize(): Promise<string>;\n  /** Resolves when all raw bytes from the embed stream have been read. */\n  getRawBuffer(): Promise<ArrayBuffer>;\n};\n\ntype HtmlInsertion = string | (() => string);\ntype InlineCssManifest = Record<string, string>;\ntype InlineCssRewriteResult = {\n  html: string;\n  consumedPrependCss: boolean;\n};\n\nconst NAVIGATION_RUNTIME_REFERENCE = `self[Symbol.for(${safeJsonStringify(\n  NAVIGATION_RUNTIME_SYMBOL_DESCRIPTION,\n)})]`;\n\nexport function navigationRuntimeRscBootstrapExpression(): string {\n  return `((${NAVIGATION_RUNTIME_REFERENCE}??={bootstrap:{routeManifest:null},functions:{}}).bootstrap.rsc??={rsc:[]})`;\n}\n\nexport function createNavigationRuntimeRscMetadataScript(\n  params: Record<string, string | string[]>,\n  nav: { pathname: string; searchParams: [string, string][] },\n): string {\n  return (\n    \"Object.assign(\" +\n    navigationRuntimeRscBootstrapExpression() +\n    \",{params:\" +\n    safeJsonStringify(params) +\n    \",nav:\" +\n    safeJsonStringify(nav) +\n    \"})\"\n  );\n}\n\nfunction createNavigationRuntimeRscChunkScript(chunk: RscEmbeddedChunk): string {\n  return navigationRuntimeRscBootstrapExpression() + \".rsc.push(\" + safeJsonStringify(chunk) + \")\";\n}\n\nfunction createNavigationRuntimeRscDoneScript(): string {\n  return navigationRuntimeRscBootstrapExpression() + \".done=true\";\n}\n\n/**\n * Fix invalid preload \"as\" values in RSC Flight hint lines before they reach\n * the client. React Flight emits HL hints with as=\"stylesheet\" for CSS, but\n * the HTML spec requires as=\"style\" for <link rel=\"preload\">.\n */\nexport function fixFlightHints(text: string): string {\n  return text.replace(/(\\d*:HL\\[.*?),\"stylesheet\"(\\]|,)/g, '$1,\"style\"$2');\n}\n\n/**\n * Create a helper that progressively embeds RSC chunks as inline <script> tags.\n * The browser entry turns the embedded chunks back into Uint8Array data.\n */\nexport function createRscEmbedTransform(\n  embedStream: ReadableStream<Uint8Array>,\n  scriptNonce?: string,\n): RscEmbedTransform {\n  const reader = embedStream.getReader();\n  let pendingChunks: RscEmbeddedChunk[] = [];\n  const rawChunks: Uint8Array[] = [];\n  let reading = false;\n\n  async function pumpReader(): Promise<void> {\n    if (reading) return;\n    reading = true;\n    try {\n      while (true) {\n        const result = await reader.read();\n        if (result.done) break;\n        // Accumulate raw bytes BEFORE fixFlightHints so the cache stores\n        // unmodified RSC data. The embed script path below applies fixes.\n        rawChunks.push(result.value);\n        try {\n          const decoder = new TextDecoder(\"utf-8\", { fatal: true });\n          const text = decoder.decode(result.value);\n          // The RSC entry already fixes HL hints at the source. Keep this second\n          // pass as defense in depth for any embed stream that bypasses that\n          // wrapper; the rewrite is idempotent, so double-application is safe.\n          pendingChunks.push(fixFlightHints(text));\n        } catch {\n          pendingChunks.push([RSC_EMBEDDED_BINARY_CHUNK, bytesToBase64(result.value)]);\n        }\n      }\n    } catch (error) {\n      if (process.env.NODE_ENV !== \"production\") {\n        console.warn(\"[vinext] RSC embed stream read error:\", error);\n      }\n      throw error;\n    } finally {\n      reading = false;\n    }\n  }\n\n  const pumpPromise = pumpReader();\n\n  return {\n    flush(): string {\n      if (pendingChunks.length === 0) return \"\";\n\n      const chunks = pendingChunks;\n      pendingChunks = [];\n\n      let scripts = \"\";\n      for (const chunk of chunks) {\n        scripts += createInlineScriptTag(createNavigationRuntimeRscChunkScript(chunk), scriptNonce);\n      }\n      return scripts;\n    },\n\n    async finalize(): Promise<string> {\n      await pumpPromise;\n      let scripts = this.flush();\n      scripts += createInlineScriptTag(createNavigationRuntimeRscDoneScript(), scriptNonce);\n      return scripts;\n    },\n\n    async getRawBuffer(): Promise<ArrayBuffer> {\n      await pumpPromise;\n      const buffer = concatUint8Arrays(rawChunks);\n      rawChunks.length = 0;\n      return buffer.buffer;\n    },\n  };\n}\n\n/**\n * Fix invalid preload \"as\" values in server-rendered HTML.\n * React Fizz emits <link rel=\"preload\" as=\"stylesheet\"> for CSS, but the\n * HTML spec requires as=\"style\" for <link rel=\"preload\">.\n */\nexport function fixPreloadAs(html: string): string {\n  return html.replace(/<link(?=[^>]*\\srel=\"preload\")[^>]*>/g, (tag) =>\n    tag.replace(' as=\"stylesheet\"', ' as=\"style\"'),\n  );\n}\n\n// These `g`-flag regexes carry mutable `lastIndex` state. Every consumer below\n// resets `lastIndex` before use, which is safe only because they run to\n// completion synchronously within a single call. They must not be shared across\n// concurrent/interleaved call paths.\nconst LINK_TAG_RE = /<link\\b[^>]*>/gi;\nconst HTML_REWRITE_EXCLUDED_REGION_RE =\n  /<!--[\\s\\S]*?-->|<(script|style|textarea|title)\\b[^>]*>[\\s\\S]*?<\\/\\1\\s*>/gi;\nconst HTML_REWRITE_EXCLUDED_REGION_START_RE = /<!--|<(script|style|textarea|title)\\b[^>]*>/gi;\n\nfunction getHtmlAttribute(tag: string, name: string): string | null {\n  const attrRe = /\\s([^\\s\"'=<>`]+)(?:\\s*=\\s*(?:\"([^\"]*)\"|'([^']*)'|([^\\s\"'=<>`]+)))?/g;\n  let match: RegExpExecArray | null;\n\n  while ((match = attrRe.exec(tag)) !== null) {\n    if (match[1]?.toLowerCase() !== name.toLowerCase()) continue;\n    return match[2] ?? match[3] ?? match[4] ?? \"\";\n  }\n\n  return null;\n}\n\nfunction htmlAttributeHasToken(tag: string, name: string, token: string): boolean {\n  return htmlTokenListContains(getHtmlAttribute(tag, name), token);\n}\n\nfunction getInlineCss(manifest: InlineCssManifest, href: string): string | null {\n  if (Object.prototype.hasOwnProperty.call(manifest, href)) {\n    return manifest[href] ?? \"\";\n  }\n\n  try {\n    const pathname = new URL(href).pathname;\n    if (Object.prototype.hasOwnProperty.call(manifest, pathname)) {\n      return manifest[pathname] ?? \"\";\n    }\n  } catch {\n    // Relative asset URLs are looked up by their emitted href.\n  }\n\n  return null;\n}\n\n// Module-level regex; consumers reset `lastIndex` before each scan. Same\n// shared-state constraint as the other `g`-flag regexes above.\nconst TRAILING_LINK_OPEN_RE = /<link/gi;\n\nfunction splitTrailingIncompleteLinkTag(html: string): { complete: string; trailing: string } {\n  // Scan forward to find the last `<link` opening without allocating a\n  // lowercased copy of `html` — this runs on every flush of the streaming\n  // hot path, and `html` can be tens of KB.\n  TRAILING_LINK_OPEN_RE.lastIndex = 0;\n  let lastIndex = -1;\n  let match: RegExpExecArray | null;\n  while ((match = TRAILING_LINK_OPEN_RE.exec(html)) !== null) {\n    lastIndex = match.index;\n  }\n  if (lastIndex === -1) return { complete: html, trailing: \"\" };\n  const close = html.indexOf(\">\", lastIndex);\n  if (close !== -1) return { complete: html, trailing: \"\" };\n  return {\n    complete: html.slice(0, lastIndex),\n    trailing: html.slice(lastIndex),\n  };\n}\n\nfunction findTrailingOpenHtmlRewriteExcludedRegionStart(html: string): number | null {\n  let match: RegExpExecArray | null;\n\n  HTML_REWRITE_EXCLUDED_REGION_START_RE.lastIndex = 0;\n  while ((match = HTML_REWRITE_EXCLUDED_REGION_START_RE.exec(html)) !== null) {\n    const start = match.index;\n    if (match[0] === \"<!--\") {\n      const close = html.indexOf(\"-->\", HTML_REWRITE_EXCLUDED_REGION_START_RE.lastIndex);\n      if (close === -1) return start;\n      HTML_REWRITE_EXCLUDED_REGION_START_RE.lastIndex = close + 3;\n      continue;\n    }\n\n    const tagName = match[1]?.toLowerCase();\n    if (!tagName) continue;\n\n    const closeTagRe = new RegExp(`</${tagName}\\\\s*>`, \"i\");\n    const close = closeTagRe.exec(html.slice(HTML_REWRITE_EXCLUDED_REGION_START_RE.lastIndex));\n    if (!close) return start;\n    HTML_REWRITE_EXCLUDED_REGION_START_RE.lastIndex += close.index + close[0].length;\n  }\n\n  return null;\n}\n\nfunction splitTrailingInlineCssRewriteBoundary(html: string): {\n  complete: string;\n  trailing: string;\n} {\n  const linkSplit = splitTrailingIncompleteLinkTag(html);\n  const incompleteLinkStart = linkSplit.trailing ? linkSplit.complete.length : null;\n  const openRegionStart = findTrailingOpenHtmlRewriteExcludedRegionStart(html);\n  const trailingStart =\n    incompleteLinkStart === null\n      ? openRegionStart\n      : openRegionStart === null\n        ? incompleteLinkStart\n        : Math.min(incompleteLinkStart, openRegionStart);\n\n  if (trailingStart === null) return { complete: html, trailing: \"\" };\n\n  return {\n    complete: html.slice(0, trailingStart),\n    trailing: html.slice(trailingStart),\n  };\n}\n\nfunction escapeStyleText(css: string): string {\n  return css.replace(/<\\/style/gi, \"<\\\\/style\");\n}\n\nconst CSS_PREPEND_UNSAFE_PREAMBLE_RE =\n  /^\\uFEFF?(?:\\s|\\/\\*[\\s\\S]*?\\*\\/)*@(charset|import|layer|namespace)\\b/i;\n\nfunction canPrependCss(css: string): boolean {\n  return !CSS_PREPEND_UNSAFE_PREAMBLE_RE.test(css);\n}\n\nfunction replaceLinkTags(html: string, replaceLinkTag: (tag: string) => string): string {\n  LINK_TAG_RE.lastIndex = 0;\n  return html.replace(LINK_TAG_RE, replaceLinkTag);\n}\n\nfunction replaceLinkTagsOutsideRawText(\n  html: string,\n  replaceLinkTag: (tag: string) => string,\n): string {\n  let rewritten = \"\";\n  let cursor = 0;\n  let match: RegExpExecArray | null;\n\n  HTML_REWRITE_EXCLUDED_REGION_RE.lastIndex = 0;\n  while ((match = HTML_REWRITE_EXCLUDED_REGION_RE.exec(html)) !== null) {\n    rewritten += replaceLinkTags(html.slice(cursor, match.index), replaceLinkTag);\n    rewritten += match[0];\n    cursor = match.index + match[0].length;\n  }\n\n  const tail = html.slice(cursor);\n  const openRegionStart = findTrailingOpenHtmlRewriteExcludedRegionStart(tail);\n  if (openRegionStart === null) {\n    return rewritten + replaceLinkTags(tail, replaceLinkTag);\n  }\n\n  return (\n    rewritten +\n    replaceLinkTags(tail.slice(0, openRegionStart), replaceLinkTag) +\n    tail.slice(openRegionStart)\n  );\n}\n\nfunction rewriteInlineCssStylesheetLinks(\n  html: string,\n  inlineCssManifest: InlineCssManifest | undefined,\n  prependCss: string,\n  ssrScriptNonce: string | undefined,\n): InlineCssRewriteResult {\n  if (!inlineCssManifest || Object.keys(inlineCssManifest).length === 0) {\n    return { html, consumedPrependCss: false };\n  }\n  let consumedPrependCss = false;\n\n  const rewritten = replaceLinkTagsOutsideRawText(html, (tag) => {\n    if (!htmlAttributeHasToken(tag, \"rel\", \"stylesheet\")) return tag;\n\n    const href = getHtmlAttribute(tag, \"href\");\n    const precedence =\n      getHtmlAttribute(tag, \"data-precedence\") ?? getHtmlAttribute(tag, \"precedence\");\n    if (!href || !precedence) return tag;\n\n    const css = getInlineCss(inlineCssManifest, href);\n    if (css === null) return tag;\n\n    // Prefer the link's own nonce if Fizz emitted one; otherwise fall back to\n    // the SSR-time script/style nonce so sites with CSP `style-src 'nonce-…'`\n    // policies don't block the inlined `<style>` block. The `<link>` tag this\n    // replaces wasn't subject to inline-style CSP, but the new `<style>` is.\n    const linkNonce = getHtmlAttribute(tag, \"nonce\");\n    const effectiveNonce = linkNonce ?? ssrScriptNonce;\n    const nonceAttr = effectiveNonce ? ` nonce=\"${escapeHtmlAttr(effectiveNonce)}\"` : \"\";\n    const shouldPrependCss = !consumedPrependCss && prependCss.length > 0 && canPrependCss(css);\n    const cssPrefix = shouldPrependCss ? `${prependCss}\\n` : \"\";\n    consumedPrependCss ||= cssPrefix.length > 0;\n\n    return (\n      `<style data-vinext-inline-css${nonceAttr}` +\n      ` data-precedence=\"${escapeHtmlAttr(precedence)}\"` +\n      ` data-href=\"${escapeHtmlAttr(href)}\">` +\n      `${escapeStyleText(cssPrefix + css)}</style>`\n    );\n  });\n\n  return { html: rewritten, consumedPrependCss };\n}\n\n/**\n * Match the `<head ...>` opening tag in a chunk. Matches both bare `<head>`\n * and `<head class=\"foo\">` shapes. Used to splice HTML immediately after the\n * opening tag so injected content runs before any React-emitted resource\n * hints (stylesheets, modulepreloads) that React Float hoists into `<head>`.\n */\nconst HEAD_OPEN_RE = /<head\\b[^>]*>/;\n\n/**\n * Create the tick-buffered HTML transform that injects RSC scripts between\n * React Fizz flush cycles without corrupting split HTML chunks.\n *\n * Two insertion points are supported in tandem:\n *\n *  - `injectHTML` is emitted immediately before `</head>`. This is where the\n *    bulk of vinext's head additions live (RSC navigation runtime metadata,\n *    bootstrap modulepreload, server-inserted HTML, font preloads, etc.).\n *  - `injectAfterHeadOpenHTML` is emitted immediately after the `<head ...>`\n *    opening tag so the content runs before any React-emitted resource\n *    hints. This is where inline `<Script strategy=\"beforeInteractive\">`\n *    captures land so the no-flash dark-mode pattern works.\n *\n * Fallback behaviour differs by insertion point:\n *\n *  - `injectHTML` is emitted at end-of-stream by the `flush` handler when no\n *    chunk ever contained `</head>` — callers still see the payload on\n *    highly fragmented streams (just at the end of the body rather than in\n *    the head).\n *  - `injectAfterHeadOpenHTML` is silently dropped when `<head ...>` is not\n *    found in a discoverable chunk. Emitting it at end-of-stream would put\n *    it after the document body, defeating the point — the splice has to\n *    happen before resource hints to be useful, so the safer behaviour is\n *    to no-op and let the user-rendered Script (in its source-order\n *    position) ship as-is.\n */\nexport function createTickBufferedTransform(\n  rscEmbed: RscEmbedTransform,\n  injectHTML: HtmlInsertion = \"\",\n  injectAfterHeadOpenHTML: HtmlInsertion = \"\",\n  inlineCssManifest?: InlineCssManifest,\n  inlineCssPrependCss = \"\",\n  inlineCssPrependFallbackHTML = \"\",\n  inlineCssScriptNonce?: string,\n): TransformStream<Uint8Array, Uint8Array> {\n  const decoder = new TextDecoder();\n  const encoder = new TextEncoder();\n  const insertsPerFlush = typeof injectHTML === \"function\";\n  let injected = false;\n  let preHeadInjected = false;\n  let buffered: string[] = [];\n  let pendingHtml = \"\";\n  let timeoutId: ReturnType<typeof setTimeout> | null = null;\n  // Computed once at transform creation: every flush is a hot path, so we\n  // avoid re-running Object.keys() on the manifest per chunk. Gates both the\n  // split-link boundary buffering and the inline-css link rewrite below.\n  const hasInlineCssManifest =\n    inlineCssManifest !== undefined && Object.keys(inlineCssManifest).length > 0;\n  const readInsertion = (): string =>\n    typeof injectHTML === \"function\" ? injectHTML() : injectHTML;\n  const readPreHeadInsertion = (): string =>\n    typeof injectAfterHeadOpenHTML === \"function\"\n      ? injectAfterHeadOpenHTML()\n      : injectAfterHeadOpenHTML;\n  const readInlineCssPrependFallback = (): string => {\n    if (!inlineCssPrependCss || !inlineCssPrependFallbackHTML) return \"\";\n    inlineCssPrependCss = \"\";\n    return inlineCssPrependFallbackHTML;\n  };\n  const emitInsertion = (controller: TransformStreamDefaultController<Uint8Array>): void => {\n    const insertion = readInlineCssPrependFallback() + readInsertion();\n    if (insertion) {\n      controller.enqueue(encoder.encode(insertion));\n    }\n  };\n\n  /**\n   * Splice the pre-head insertion (typically captured beforeInteractive inline\n   * scripts) immediately after the `<head ...>` opening tag. Returns the\n   * rewritten chunk and a flag indicating whether the splice happened, so the\n   * caller can mark `preHeadInjected` and stop scanning further chunks.\n   *\n   * NOTE: This is called only when `<head ...>` lies fully inside the current\n   * tick-buffered batch. We deliberately avoid retaining arbitrary output until\n   * a future chunk completes `<head ...>`, which would delay TTFB and complicate\n   * the existing `</head>` injection path. In practice React Fizz emits the\n   * opening shell as a single batch.\n   */\n  const spliceAfterHeadOpen = (chunk: string): { chunk: string; spliced: boolean } => {\n    if (preHeadInjected) return { chunk, spliced: false };\n    const insertion = readPreHeadInsertion();\n    if (!insertion) return { chunk, spliced: false };\n    const match = HEAD_OPEN_RE.exec(chunk);\n    if (!match) return { chunk, spliced: false };\n    const insertAt = match.index + match[0].length;\n    return {\n      chunk: chunk.slice(0, insertAt) + insertion + chunk.slice(insertAt),\n      spliced: true,\n    };\n  };\n\n  const flushBuffered = (\n    controller: TransformStreamDefaultController<Uint8Array>,\n    final = false,\n  ): void => {\n    if (buffered.length === 0 && !pendingHtml) return;\n    const rawHtml = pendingHtml + buffered.join(\"\");\n    buffered = [];\n    pendingHtml = \"\";\n\n    const split =\n      final || !hasInlineCssManifest\n        ? { complete: rawHtml, trailing: \"\" }\n        : splitTrailingInlineCssRewriteBoundary(rawHtml);\n    if (split.trailing) {\n      pendingHtml = split.trailing;\n    }\n    if (!split.complete) return;\n\n    if (injected && insertsPerFlush) {\n      // Emit newly collected server-inserted HTML before the next Fizz HTML\n      // batch so CSS-in-JS styles precede the elements they style.\n      emitInsertion(controller);\n    }\n\n    const preparedHtml = fixPreloadAs(split.complete);\n    const inlineCssResult = hasInlineCssManifest\n      ? rewriteInlineCssStylesheetLinks(\n          preparedHtml,\n          inlineCssManifest,\n          inlineCssPrependCss,\n          inlineCssScriptNonce,\n        )\n      : { html: preparedHtml, consumedPrependCss: false };\n    if (inlineCssResult.consumedPrependCss) {\n      inlineCssPrependCss = \"\";\n    }\n\n    let working = inlineCssResult.html;\n    if (!preHeadInjected) {\n      const result = spliceAfterHeadOpen(working);\n      if (result.spliced) {\n        working = result.chunk;\n        preHeadInjected = true;\n      }\n    }\n    if (!injected) {\n      const headEnd = working.indexOf(\"</head>\");\n      if (headEnd !== -1) {\n        const before = working.slice(0, headEnd);\n        const after = working.slice(headEnd);\n        controller.enqueue(\n          encoder.encode(before + readInlineCssPrependFallback() + readInsertion() + after),\n        );\n        injected = true;\n        return;\n      }\n    }\n    controller.enqueue(encoder.encode(working));\n  };\n\n  return new TransformStream<Uint8Array, Uint8Array>({\n    transform(chunk, controller) {\n      buffered.push(decoder.decode(chunk, { stream: true }));\n\n      if (timeoutId !== null) return;\n\n      timeoutId = setTimeout(() => {\n        try {\n          flushBuffered(controller);\n\n          const rscScripts = rscEmbed.flush();\n          if (rscScripts) {\n            controller.enqueue(encoder.encode(rscScripts));\n          }\n        } catch {\n          // Stream was cancelled between when the timeout was registered and\n          // when it fired (e.g. client disconnected, health-check cancelled\n          // the response body). Ignore — the stream is already closed.\n        }\n\n        timeoutId = null;\n      }, 0);\n    },\n\n    async flush(controller) {\n      if (timeoutId !== null) {\n        clearTimeout(timeoutId);\n        timeoutId = null;\n      }\n      const remainder = decoder.decode();\n      if (remainder) {\n        buffered.push(remainder);\n      }\n\n      flushBuffered(controller, true);\n\n      if (!injected) {\n        emitInsertion(controller);\n        injected = true;\n      } else if (insertsPerFlush) {\n        emitInsertion(controller);\n      }\n\n      const finalScripts = await rscEmbed.finalize();\n      if (finalScripts) {\n        controller.enqueue(encoder.encode(finalScripts));\n      }\n    },\n  });\n}\n"],"mappings":";;;;AA4BA,MAAM,+BAA+B,mBAAmB,kBACtD,sCACD,CAAC;AAEF,SAAgB,0CAAkD;CAChE,OAAO,KAAK,6BAA6B;;AAG3C,SAAgB,yCACd,QACA,KACQ;CACR,OACE,mBACA,yCAAyC,GACzC,cACA,kBAAkB,OAAO,GACzB,UACA,kBAAkB,IAAI,GACtB;;AAIJ,SAAS,sCAAsC,OAAiC;CAC9E,OAAO,yCAAyC,GAAG,eAAe,kBAAkB,MAAM,GAAG;;AAG/F,SAAS,uCAA+C;CACtD,OAAO,yCAAyC,GAAG;;;;;;;AAQrD,SAAgB,eAAe,MAAsB;CACnD,OAAO,KAAK,QAAQ,qCAAqC,iBAAe;;;;;;AAO1E,SAAgB,wBACd,aACA,aACmB;CACnB,MAAM,SAAS,YAAY,WAAW;CACtC,IAAI,gBAAoC,EAAE;CAC1C,MAAM,YAA0B,EAAE;CAClC,IAAI,UAAU;CAEd,eAAe,aAA4B;EACzC,IAAI,SAAS;EACb,UAAU;EACV,IAAI;GACF,OAAO,MAAM;IACX,MAAM,SAAS,MAAM,OAAO,MAAM;IAClC,IAAI,OAAO,MAAM;IAGjB,UAAU,KAAK,OAAO,MAAM;IAC5B,IAAI;KAEF,MAAM,OAAO,IADO,YAAY,SAAS,EAAE,OAAO,MAAM,CACpC,CAAC,OAAO,OAAO,MAAM;KAIzC,cAAc,KAAK,eAAe,KAAK,CAAC;YAClC;KACN,cAAc,KAAK,CAAA,GAA4B,cAAc,OAAO,MAAM,CAAC,CAAC;;;WAGzE,OAAO;GACd,IAAI,QAAQ,IAAI,aAAa,cAC3B,QAAQ,KAAK,yCAAyC,MAAM;GAE9D,MAAM;YACE;GACR,UAAU;;;CAId,MAAM,cAAc,YAAY;CAEhC,OAAO;EACL,QAAgB;GACd,IAAI,cAAc,WAAW,GAAG,OAAO;GAEvC,MAAM,SAAS;GACf,gBAAgB,EAAE;GAElB,IAAI,UAAU;GACd,KAAK,MAAM,SAAS,QAClB,WAAW,sBAAsB,sCAAsC,MAAM,EAAE,YAAY;GAE7F,OAAO;;EAGT,MAAM,WAA4B;GAChC,MAAM;GACN,IAAI,UAAU,KAAK,OAAO;GAC1B,WAAW,sBAAsB,sCAAsC,EAAE,YAAY;GACrF,OAAO;;EAGT,MAAM,eAAqC;GACzC,MAAM;GACN,MAAM,SAAS,kBAAkB,UAAU;GAC3C,UAAU,SAAS;GACnB,OAAO,OAAO;;EAEjB;;;;;;;AAQH,SAAgB,aAAa,MAAsB;CACjD,OAAO,KAAK,QAAQ,yCAAyC,QAC3D,IAAI,QAAQ,sBAAoB,gBAAc,CAC/C;;AAOH,MAAM,cAAc;AACpB,MAAM,kCACJ;AACF,MAAM,wCAAwC;AAE9C,SAAS,iBAAiB,KAAa,MAA6B;CAClE,MAAM,SAAS;CACf,IAAI;CAEJ,QAAQ,QAAQ,OAAO,KAAK,IAAI,MAAM,MAAM;EAC1C,IAAI,MAAM,IAAI,aAAa,KAAK,KAAK,aAAa,EAAE;EACpD,OAAO,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM;;CAG7C,OAAO;;AAGT,SAAS,sBAAsB,KAAa,MAAc,OAAwB;CAChF,OAAO,sBAAsB,iBAAiB,KAAK,KAAK,EAAE,MAAM;;AAGlE,SAAS,aAAa,UAA6B,MAA6B;CAC9E,IAAI,OAAO,UAAU,eAAe,KAAK,UAAU,KAAK,EACtD,OAAO,SAAS,SAAS;CAG3B,IAAI;EACF,MAAM,WAAW,IAAI,IAAI,KAAK,CAAC;EAC/B,IAAI,OAAO,UAAU,eAAe,KAAK,UAAU,SAAS,EAC1D,OAAO,SAAS,aAAa;SAEzB;CAIR,OAAO;;AAKT,MAAM,wBAAwB;AAE9B,SAAS,+BAA+B,MAAsD;CAI5F,sBAAsB,YAAY;CAClC,IAAI,YAAY;CAChB,IAAI;CACJ,QAAQ,QAAQ,sBAAsB,KAAK,KAAK,MAAM,MACpD,YAAY,MAAM;CAEpB,IAAI,cAAc,IAAI,OAAO;EAAE,UAAU;EAAM,UAAU;EAAI;CAE7D,IADc,KAAK,QAAQ,KAAK,UACvB,KAAK,IAAI,OAAO;EAAE,UAAU;EAAM,UAAU;EAAI;CACzD,OAAO;EACL,UAAU,KAAK,MAAM,GAAG,UAAU;EAClC,UAAU,KAAK,MAAM,UAAU;EAChC;;AAGH,SAAS,+CAA+C,MAA6B;CACnF,IAAI;CAEJ,sCAAsC,YAAY;CAClD,QAAQ,QAAQ,sCAAsC,KAAK,KAAK,MAAM,MAAM;EAC1E,MAAM,QAAQ,MAAM;EACpB,IAAI,MAAM,OAAO,QAAQ;GACvB,MAAM,QAAQ,KAAK,QAAQ,OAAO,sCAAsC,UAAU;GAClF,IAAI,UAAU,IAAI,OAAO;GACzB,sCAAsC,YAAY,QAAQ;GAC1D;;EAGF,MAAM,UAAU,MAAM,IAAI,aAAa;EACvC,IAAI,CAAC,SAAS;EAGd,MAAM,QAAQ,IADS,OAAO,KAAK,QAAQ,QAAQ,IAC3B,CAAC,KAAK,KAAK,MAAM,sCAAsC,UAAU,CAAC;EAC1F,IAAI,CAAC,OAAO,OAAO;EACnB,sCAAsC,aAAa,MAAM,QAAQ,MAAM,GAAG;;CAG5E,OAAO;;AAGT,SAAS,sCAAsC,MAG7C;CACA,MAAM,YAAY,+BAA+B,KAAK;CACtD,MAAM,sBAAsB,UAAU,WAAW,UAAU,SAAS,SAAS;CAC7E,MAAM,kBAAkB,+CAA+C,KAAK;CAC5E,MAAM,gBACJ,wBAAwB,OACpB,kBACA,oBAAoB,OAClB,sBACA,KAAK,IAAI,qBAAqB,gBAAgB;CAEtD,IAAI,kBAAkB,MAAM,OAAO;EAAE,UAAU;EAAM,UAAU;EAAI;CAEnE,OAAO;EACL,UAAU,KAAK,MAAM,GAAG,cAAc;EACtC,UAAU,KAAK,MAAM,cAAc;EACpC;;AAGH,SAAS,gBAAgB,KAAqB;CAC5C,OAAO,IAAI,QAAQ,cAAc,YAAY;;AAG/C,MAAM,iCACJ;AAEF,SAAS,cAAc,KAAsB;CAC3C,OAAO,CAAC,+BAA+B,KAAK,IAAI;;AAGlD,SAAS,gBAAgB,MAAc,gBAAiD;CACtF,YAAY,YAAY;CACxB,OAAO,KAAK,QAAQ,aAAa,eAAe;;AAGlD,SAAS,8BACP,MACA,gBACQ;CACR,IAAI,YAAY;CAChB,IAAI,SAAS;CACb,IAAI;CAEJ,gCAAgC,YAAY;CAC5C,QAAQ,QAAQ,gCAAgC,KAAK,KAAK,MAAM,MAAM;EACpE,aAAa,gBAAgB,KAAK,MAAM,QAAQ,MAAM,MAAM,EAAE,eAAe;EAC7E,aAAa,MAAM;EACnB,SAAS,MAAM,QAAQ,MAAM,GAAG;;CAGlC,MAAM,OAAO,KAAK,MAAM,OAAO;CAC/B,MAAM,kBAAkB,+CAA+C,KAAK;CAC5E,IAAI,oBAAoB,MACtB,OAAO,YAAY,gBAAgB,MAAM,eAAe;CAG1D,OACE,YACA,gBAAgB,KAAK,MAAM,GAAG,gBAAgB,EAAE,eAAe,GAC/D,KAAK,MAAM,gBAAgB;;AAI/B,SAAS,gCACP,MACA,mBACA,YACA,gBACwB;CACxB,IAAI,CAAC,qBAAqB,OAAO,KAAK,kBAAkB,CAAC,WAAW,GAClE,OAAO;EAAE;EAAM,oBAAoB;EAAO;CAE5C,IAAI,qBAAqB;CAgCzB,OAAO;EAAE,MA9BS,8BAA8B,OAAO,QAAQ;GAC7D,IAAI,CAAC,sBAAsB,KAAK,OAAO,aAAa,EAAE,OAAO;GAE7D,MAAM,OAAO,iBAAiB,KAAK,OAAO;GAC1C,MAAM,aACJ,iBAAiB,KAAK,kBAAkB,IAAI,iBAAiB,KAAK,aAAa;GACjF,IAAI,CAAC,QAAQ,CAAC,YAAY,OAAO;GAEjC,MAAM,MAAM,aAAa,mBAAmB,KAAK;GACjD,IAAI,QAAQ,MAAM,OAAO;GAOzB,MAAM,iBADY,iBAAiB,KAAK,QACR,IAAI;GACpC,MAAM,YAAY,iBAAiB,WAAW,eAAe,eAAe,CAAC,KAAK;GAElF,MAAM,YADmB,CAAC,sBAAsB,WAAW,SAAS,KAAK,cAAc,IAAI,GACtD,GAAG,WAAW,MAAM;GACzD,uBAAuB,UAAU,SAAS;GAE1C,OACE,gCAAgC,UAAA,oBACX,eAAe,WAAW,CAAC,eACjC,eAAe,KAAK,CAAC,IACjC,gBAAgB,YAAY,IAAI,CAAC;IAIhB;EAAE;EAAoB;;;;;;;;AAShD,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BrB,SAAgB,4BACd,UACA,aAA4B,IAC5B,0BAAyC,IACzC,mBACA,sBAAsB,IACtB,+BAA+B,IAC/B,sBACyC;CACzC,MAAM,UAAU,IAAI,aAAa;CACjC,MAAM,UAAU,IAAI,aAAa;CACjC,MAAM,kBAAkB,OAAO,eAAe;CAC9C,IAAI,WAAW;CACf,IAAI,kBAAkB;CACtB,IAAI,WAAqB,EAAE;CAC3B,IAAI,cAAc;CAClB,IAAI,YAAkD;CAItD,MAAM,uBACJ,sBAAsB,KAAA,KAAa,OAAO,KAAK,kBAAkB,CAAC,SAAS;CAC7E,MAAM,sBACJ,OAAO,eAAe,aAAa,YAAY,GAAG;CACpD,MAAM,6BACJ,OAAO,4BAA4B,aAC/B,yBAAyB,GACzB;CACN,MAAM,qCAA6C;EACjD,IAAI,CAAC,uBAAuB,CAAC,8BAA8B,OAAO;EAClE,sBAAsB;EACtB,OAAO;;CAET,MAAM,iBAAiB,eAAmE;EACxF,MAAM,YAAY,8BAA8B,GAAG,eAAe;EAClE,IAAI,WACF,WAAW,QAAQ,QAAQ,OAAO,UAAU,CAAC;;;;;;;;;;;;;;CAgBjD,MAAM,uBAAuB,UAAuD;EAClF,IAAI,iBAAiB,OAAO;GAAE;GAAO,SAAS;GAAO;EACrD,MAAM,YAAY,sBAAsB;EACxC,IAAI,CAAC,WAAW,OAAO;GAAE;GAAO,SAAS;GAAO;EAChD,MAAM,QAAQ,aAAa,KAAK,MAAM;EACtC,IAAI,CAAC,OAAO,OAAO;GAAE;GAAO,SAAS;GAAO;EAC5C,MAAM,WAAW,MAAM,QAAQ,MAAM,GAAG;EACxC,OAAO;GACL,OAAO,MAAM,MAAM,GAAG,SAAS,GAAG,YAAY,MAAM,MAAM,SAAS;GACnE,SAAS;GACV;;CAGH,MAAM,iBACJ,YACA,QAAQ,UACC;EACT,IAAI,SAAS,WAAW,KAAK,CAAC,aAAa;EAC3C,MAAM,UAAU,cAAc,SAAS,KAAK,GAAG;EAC/C,WAAW,EAAE;EACb,cAAc;EAEd,MAAM,QACJ,SAAS,CAAC,uBACN;GAAE,UAAU;GAAS,UAAU;GAAI,GACnC,sCAAsC,QAAQ;EACpD,IAAI,MAAM,UACR,cAAc,MAAM;EAEtB,IAAI,CAAC,MAAM,UAAU;EAErB,IAAI,YAAY,iBAGd,cAAc,WAAW;EAG3B,MAAM,eAAe,aAAa,MAAM,SAAS;EACjD,MAAM,kBAAkB,uBACpB,gCACE,cACA,mBACA,qBACA,qBACD,GACD;GAAE,MAAM;GAAc,oBAAoB;GAAO;EACrD,IAAI,gBAAgB,oBAClB,sBAAsB;EAGxB,IAAI,UAAU,gBAAgB;EAC9B,IAAI,CAAC,iBAAiB;GACpB,MAAM,SAAS,oBAAoB,QAAQ;GAC3C,IAAI,OAAO,SAAS;IAClB,UAAU,OAAO;IACjB,kBAAkB;;;EAGtB,IAAI,CAAC,UAAU;GACb,MAAM,UAAU,QAAQ,QAAQ,UAAU;GAC1C,IAAI,YAAY,IAAI;IAClB,MAAM,SAAS,QAAQ,MAAM,GAAG,QAAQ;IACxC,MAAM,QAAQ,QAAQ,MAAM,QAAQ;IACpC,WAAW,QACT,QAAQ,OAAO,SAAS,8BAA8B,GAAG,eAAe,GAAG,MAAM,CAClF;IACD,WAAW;IACX;;;EAGJ,WAAW,QAAQ,QAAQ,OAAO,QAAQ,CAAC;;CAG7C,OAAO,IAAI,gBAAwC;EACjD,UAAU,OAAO,YAAY;GAC3B,SAAS,KAAK,QAAQ,OAAO,OAAO,EAAE,QAAQ,MAAM,CAAC,CAAC;GAEtD,IAAI,cAAc,MAAM;GAExB,YAAY,iBAAiB;IAC3B,IAAI;KACF,cAAc,WAAW;KAEzB,MAAM,aAAa,SAAS,OAAO;KACnC,IAAI,YACF,WAAW,QAAQ,QAAQ,OAAO,WAAW,CAAC;YAE1C;IAMR,YAAY;MACX,EAAE;;EAGP,MAAM,MAAM,YAAY;GACtB,IAAI,cAAc,MAAM;IACtB,aAAa,UAAU;IACvB,YAAY;;GAEd,MAAM,YAAY,QAAQ,QAAQ;GAClC,IAAI,WACF,SAAS,KAAK,UAAU;GAG1B,cAAc,YAAY,KAAK;GAE/B,IAAI,CAAC,UAAU;IACb,cAAc,WAAW;IACzB,WAAW;UACN,IAAI,iBACT,cAAc,WAAW;GAG3B,MAAM,eAAe,MAAM,SAAS,UAAU;GAC9C,IAAI,cACF,WAAW,QAAQ,QAAQ,OAAO,aAAa,CAAC;;EAGrD,CAAC"}

package/dist/server/artifact-compatibility.d.ts

@@ -11,6 +11,7 @@ type ArtifactCompatibilityEnvelope = Readonly<{
   rootBoundaryId: string | null;
   renderEpoch: string | null;
 }>;
+declare const ARTIFACT_COMPATIBILITY_PROOF_FIELDS: readonly (keyof ArtifactCompatibilityEnvelope)[];
 type ArtifactCompatibilityEnvelopeInput = Readonly<{
   graphVersion?: string | null;
   deploymentVersion?: string | null;
@@ -50,5 +51,5 @@ declare function createArtifactCompatibilityGraphVersion(input: ArtifactCompatib
 declare function parseArtifactCompatibilityEnvelope(value: unknown): ArtifactCompatibilityEnvelope | null;
 declare function evaluateArtifactCompatibility(current: ArtifactCompatibilityEnvelope, candidate: ArtifactCompatibilityEnvelope, options?: ArtifactCompatibilityEvaluationOptions): ArtifactCompatibilityDecision;
 //#endregion
-export { APP_ELEMENTS_SCHEMA_VERSION, ARTIFACT_COMPATIBILITY_SCHEMA_VERSION, ArtifactCompatibilityEnvelope, ArtifactCompatibilityEvaluationOptions, ArtifactCompatibilityMap, ArtifactCompatibilitySet, RSC_PAYLOAD_SCHEMA_VERSION, createArtifactCompatibilityEnvelope, createArtifactCompatibilityGraphVersion, evaluateArtifactCompatibility, parseArtifactCompatibilityEnvelope };
+export { APP_ELEMENTS_SCHEMA_VERSION, ARTIFACT_COMPATIBILITY_PROOF_FIELDS, ARTIFACT_COMPATIBILITY_SCHEMA_VERSION, ArtifactCompatibilityEnvelope, ArtifactCompatibilityEvaluationOptions, ArtifactCompatibilityMap, ArtifactCompatibilitySet, RSC_PAYLOAD_SCHEMA_VERSION, createArtifactCompatibilityEnvelope, createArtifactCompatibilityGraphVersion, evaluateArtifactCompatibility, parseArtifactCompatibilityEnvelope };
 //# sourceMappingURL=artifact-compatibility.d.ts.map

package/dist/server/artifact-compatibility.js

@@ -3,6 +3,15 @@ import { fnv1a64 } from "../utils/hash.js";
 const ARTIFACT_COMPATIBILITY_SCHEMA_VERSION = 1;
 const APP_ELEMENTS_SCHEMA_VERSION = 1;
 const RSC_PAYLOAD_SCHEMA_VERSION = 1;
+const ARTIFACT_COMPATIBILITY_PROOF_FIELDS = [
+	"schemaVersion",
+	"graphVersion",
+	"deploymentVersion",
+	"appElementsSchemaVersion",
+	"rscPayloadSchemaVersion",
+	"rootBoundaryId",
+	"renderEpoch"
+];
 function createArtifactCompatibilityEnvelope(input = {}) {
 	return {
 		schemaVersion: 1,
@@ -81,6 +90,6 @@ function evaluateArtifactCompatibility(current, candidate, options = {}) {
 	return { kind: "compatible" };
 }
 //#endregion
-export { APP_ELEMENTS_SCHEMA_VERSION, ARTIFACT_COMPATIBILITY_SCHEMA_VERSION, RSC_PAYLOAD_SCHEMA_VERSION, createArtifactCompatibilityEnvelope, createArtifactCompatibilityGraphVersion, evaluateArtifactCompatibility, parseArtifactCompatibilityEnvelope };
+export { APP_ELEMENTS_SCHEMA_VERSION, ARTIFACT_COMPATIBILITY_PROOF_FIELDS, ARTIFACT_COMPATIBILITY_SCHEMA_VERSION, RSC_PAYLOAD_SCHEMA_VERSION, createArtifactCompatibilityEnvelope, createArtifactCompatibilityGraphVersion, evaluateArtifactCompatibility, parseArtifactCompatibilityEnvelope };
 
 //# sourceMappingURL=artifact-compatibility.js.map

package/dist/server/artifact-compatibility.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-compatibility.js","names":[],"sources":["../../src/server/artifact-compatibility.ts"],"sourcesContent":["import { fnv1a64 } from \"../utils/hash.js\";\n\nexport const ARTIFACT_COMPATIBILITY_SCHEMA_VERSION = 1;\n\n// These versions describe separate protocol layers. For example, a future\n// rolling deploy can bump the flat AppElements row shape while keeping the\n// envelope object and serialized RSC transport version stable.\nexport const APP_ELEMENTS_SCHEMA_VERSION = 1;\nexport const RSC_PAYLOAD_SCHEMA_VERSION = 1;\n\nexport type ArtifactCompatibilityEnvelope = Readonly<{\n  schemaVersion: typeof ARTIFACT_COMPATIBILITY_SCHEMA_VERSION;\n  graphVersion: string | null;\n  deploymentVersion: string | null;\n  appElementsSchemaVersion: typeof APP_ELEMENTS_SCHEMA_VERSION;\n  rscPayloadSchemaVersion: typeof RSC_PAYLOAD_SCHEMA_VERSION;\n  rootBoundaryId: string | null;\n  renderEpoch: string | null;\n}>;\n\ntype ArtifactCompatibilityEnvelopeInput = Readonly<{\n  graphVersion?: string | null;\n  deploymentVersion?: string | null;\n  rootBoundaryId?: string | null;\n  renderEpoch?: string | null;\n}>;\n\nexport type ArtifactCompatibilitySet = readonly [string, string, ...string[]];\n\nexport type ArtifactCompatibilityMap = Readonly<{\n  graphVersions?: readonly ArtifactCompatibilitySet[];\n  deploymentVersions?: readonly ArtifactCompatibilitySet[];\n  rootBoundaryIds?: readonly ArtifactCompatibilitySet[];\n  renderEpochs?: readonly ArtifactCompatibilitySet[];\n}>;\n\nexport type ArtifactCompatibilityEvaluationOptions = Readonly<{\n  compatibilityMap?: ArtifactCompatibilityMap;\n}>;\n\ntype ArtifactCompatibilityFallback = \"renderFresh\";\n\ntype ArtifactCompatibilityUnknownReason =\n  | \"graphVersionUnknown\"\n  | \"deploymentVersionUnknown\"\n  | \"rootBoundaryIdUnknown\"\n  | \"renderEpochUnknown\";\n\ntype ArtifactCompatibilityIncompatibleReason =\n  | \"appElementsSchemaVersionMismatch\"\n  | \"deploymentVersionNotDeclaredCompatible\"\n  | \"deploymentVersionMismatch\"\n  | \"graphVersionNotDeclaredCompatible\"\n  | \"graphVersionMismatch\"\n  | \"renderEpochNotDeclaredCompatible\"\n  | \"renderEpochMismatch\"\n  | \"rootBoundaryIdNotDeclaredCompatible\"\n  | \"rootBoundaryIdMismatch\"\n  | \"rscPayloadSchemaVersionMismatch\"\n  | \"schemaVersionMismatch\";\n\ntype ArtifactCompatibilityDecision = Readonly<\n  | { kind: \"compatible\" }\n  | {\n      kind: \"unknown\";\n      fallback: ArtifactCompatibilityFallback;\n      reason: ArtifactCompatibilityUnknownReason;\n    }\n  | {\n      kind: \"incompatible\";\n      fallback: ArtifactCompatibilityFallback;\n      reason: ArtifactCompatibilityIncompatibleReason;\n    }\n>;\n\ntype ArtifactCompatibilityGraphVersionInput = Readonly<{\n  routePattern: string;\n  rootBoundaryId: string | null;\n}>;\n\nexport function createArtifactCompatibilityEnvelope(\n  input: ArtifactCompatibilityEnvelopeInput = {},\n): ArtifactCompatibilityEnvelope {\n  return {\n    schemaVersion: ARTIFACT_COMPATIBILITY_SCHEMA_VERSION,\n    graphVersion: input.graphVersion ?? null,\n    deploymentVersion: input.deploymentVersion ?? null,\n    appElementsSchemaVersion: APP_ELEMENTS_SCHEMA_VERSION,\n    rscPayloadSchemaVersion: RSC_PAYLOAD_SCHEMA_VERSION,\n    rootBoundaryId: input.rootBoundaryId ?? null,\n    renderEpoch: input.renderEpoch ?? null,\n  };\n}\n\nexport function createArtifactCompatibilityGraphVersion(\n  input: ArtifactCompatibilityGraphVersionInput,\n): string {\n  const fingerprint = fnv1a64(JSON.stringify([input.routePattern, input.rootBoundaryId]));\n  return `app-route-graph:${fingerprint}`;\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isStringOrNull(value: unknown): value is string | null {\n  return typeof value === \"string\" || value === null;\n}\n\nfunction hasCurrentSchemaVersions(record: Readonly<Record<string, unknown>>): boolean {\n  return (\n    record.schemaVersion === ARTIFACT_COMPATIBILITY_SCHEMA_VERSION &&\n    record.appElementsSchemaVersion === APP_ELEMENTS_SCHEMA_VERSION &&\n    record.rscPayloadSchemaVersion === RSC_PAYLOAD_SCHEMA_VERSION\n  );\n}\n\nexport function parseArtifactCompatibilityEnvelope(\n  value: unknown,\n): ArtifactCompatibilityEnvelope | null {\n  if (!isRecord(value)) return null;\n  // The Wave01 skeleton intentionally collapses version mismatch and malformed\n  // metadata into \"not current\". Cache/skip callers must split those cases\n  // before treating unknown compatibility as anything other than a miss/reject.\n  if (!hasCurrentSchemaVersions(value)) return null;\n  if (!isStringOrNull(value.graphVersion)) return null;\n  if (!isStringOrNull(value.deploymentVersion)) return null;\n  if (!isStringOrNull(value.rootBoundaryId)) return null;\n  if (!isStringOrNull(value.renderEpoch)) return null;\n\n  // This parser intentionally returns a normalized current-version proof. A\n  // future-compatible reader should introduce a separate parsed type instead of\n  // widening this Wave01 envelope after the current-version checks above.\n  return {\n    schemaVersion: ARTIFACT_COMPATIBILITY_SCHEMA_VERSION,\n    graphVersion: value.graphVersion,\n    deploymentVersion: value.deploymentVersion,\n    appElementsSchemaVersion: APP_ELEMENTS_SCHEMA_VERSION,\n    rscPayloadSchemaVersion: RSC_PAYLOAD_SCHEMA_VERSION,\n    rootBoundaryId: value.rootBoundaryId,\n    renderEpoch: value.renderEpoch,\n  };\n}\n\nfunction incompatible(\n  reason: ArtifactCompatibilityIncompatibleReason,\n): ArtifactCompatibilityDecision {\n  return { kind: \"incompatible\", fallback: \"renderFresh\", reason };\n}\n\nfunction unknown(reason: ArtifactCompatibilityUnknownReason): ArtifactCompatibilityDecision {\n  return { kind: \"unknown\", fallback: \"renderFresh\", reason };\n}\n\nfunction compareKnownField(\n  currentValue: string | null,\n  candidateValue: string | null,\n  unknownReason: ArtifactCompatibilityUnknownReason,\n  mismatchReason: ArtifactCompatibilityIncompatibleReason,\n  notDeclaredCompatibleReason: ArtifactCompatibilityIncompatibleReason,\n  compatibilitySets: readonly ArtifactCompatibilitySet[] | undefined,\n): ArtifactCompatibilityDecision | null {\n  if (currentValue === null || candidateValue === null) {\n    return unknown(unknownReason);\n  }\n  if (currentValue === candidateValue) {\n    return null;\n  }\n  if (compatibilitySets === undefined) {\n    return incompatible(mismatchReason);\n  }\n  return isDeclaredCompatible(currentValue, candidateValue, compatibilitySets)\n    ? null\n    : incompatible(notDeclaredCompatibleReason);\n}\n\nfunction isDeclaredCompatible(\n  currentValue: string,\n  candidateValue: string,\n  compatibilitySets: readonly ArtifactCompatibilitySet[],\n): boolean {\n  // Compatibility is intentionally scoped to one declared set. Overlapping\n  // pair sets like [a,b] and [b,c] must not silently make a compatible with c.\n  return compatibilitySets.some(\n    (compatibilitySet) =>\n      compatibilitySet.includes(currentValue) && compatibilitySet.includes(candidateValue),\n  );\n}\n\nexport function evaluateArtifactCompatibility(\n  current: ArtifactCompatibilityEnvelope,\n  candidate: ArtifactCompatibilityEnvelope,\n  options: ArtifactCompatibilityEvaluationOptions = {},\n): ArtifactCompatibilityDecision {\n  // This remains a proof evaluator: mismatched fields are compatible only when\n  // the current build's compatibility map explicitly declares that relationship.\n  if (current.schemaVersion !== candidate.schemaVersion) {\n    return incompatible(\"schemaVersionMismatch\");\n  }\n  if (current.appElementsSchemaVersion !== candidate.appElementsSchemaVersion) {\n    return incompatible(\"appElementsSchemaVersionMismatch\");\n  }\n  if (current.rscPayloadSchemaVersion !== candidate.rscPayloadSchemaVersion) {\n    return incompatible(\"rscPayloadSchemaVersionMismatch\");\n  }\n\n  const graphDecision = compareKnownField(\n    current.graphVersion,\n    candidate.graphVersion,\n    \"graphVersionUnknown\",\n    \"graphVersionMismatch\",\n    \"graphVersionNotDeclaredCompatible\",\n    options.compatibilityMap?.graphVersions,\n  );\n  if (graphDecision) return graphDecision;\n\n  const deploymentDecision = compareKnownField(\n    current.deploymentVersion,\n    candidate.deploymentVersion,\n    \"deploymentVersionUnknown\",\n    \"deploymentVersionMismatch\",\n    \"deploymentVersionNotDeclaredCompatible\",\n    options.compatibilityMap?.deploymentVersions,\n  );\n  if (deploymentDecision) return deploymentDecision;\n\n  const rootBoundaryDecision = compareKnownField(\n    current.rootBoundaryId,\n    candidate.rootBoundaryId,\n    \"rootBoundaryIdUnknown\",\n    \"rootBoundaryIdMismatch\",\n    \"rootBoundaryIdNotDeclaredCompatible\",\n    options.compatibilityMap?.rootBoundaryIds,\n  );\n  if (rootBoundaryDecision) return rootBoundaryDecision;\n\n  const renderEpochDecision = compareKnownField(\n    current.renderEpoch,\n    candidate.renderEpoch,\n    \"renderEpochUnknown\",\n    \"renderEpochMismatch\",\n    \"renderEpochNotDeclaredCompatible\",\n    options.compatibilityMap?.renderEpochs,\n  );\n  if (renderEpochDecision) return renderEpochDecision;\n\n  return { kind: \"compatible\" };\n}\n"],"mappings":";;AAEA,MAAa,wCAAwC;AAKrD,MAAa,8BAA8B;AAC3C,MAAa,6BAA6B;AAwE1C,SAAgB,oCACd,QAA4C,EAAE,EACf;CAC/B,OAAO;EACL,eAAA;EACA,cAAc,MAAM,gBAAgB;EACpC,mBAAmB,MAAM,qBAAqB;EAC9C,0BAAA;EACA,yBAAA;EACA,gBAAgB,MAAM,kBAAkB;EACxC,aAAa,MAAM,eAAe;EACnC;;AAGH,SAAgB,wCACd,OACQ;CAER,OAAO,mBADa,QAAQ,KAAK,UAAU,CAAC,MAAM,cAAc,MAAM,eAAe,CAAC,CACjD;;AAGvC,SAAS,SAAS,OAA4D;CAC5E,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG7E,SAAS,eAAe,OAAwC;CAC9D,OAAO,OAAO,UAAU,YAAY,UAAU;;AAGhD,SAAS,yBAAyB,QAAoD;CACpF,OACE,OAAO,kBAAA,KACP,OAAO,6BAAA,KACP,OAAO,4BAAA;;AAIX,SAAgB,mCACd,OACsC;CACtC,IAAI,CAAC,SAAS,MAAM,EAAE,OAAO;CAI7B,IAAI,CAAC,yBAAyB,MAAM,EAAE,OAAO;CAC7C,IAAI,CAAC,eAAe,MAAM,aAAa,EAAE,OAAO;CAChD,IAAI,CAAC,eAAe,MAAM,kBAAkB,EAAE,OAAO;CACrD,IAAI,CAAC,eAAe,MAAM,eAAe,EAAE,OAAO;CAClD,IAAI,CAAC,eAAe,MAAM,YAAY,EAAE,OAAO;CAK/C,OAAO;EACL,eAAA;EACA,cAAc,MAAM;EACpB,mBAAmB,MAAM;EACzB,0BAAA;EACA,yBAAA;EACA,gBAAgB,MAAM;EACtB,aAAa,MAAM;EACpB;;AAGH,SAAS,aACP,QAC+B;CAC/B,OAAO;EAAE,MAAM;EAAgB,UAAU;EAAe;EAAQ;;AAGlE,SAAS,QAAQ,QAA2E;CAC1F,OAAO;EAAE,MAAM;EAAW,UAAU;EAAe;EAAQ;;AAG7D,SAAS,kBACP,cACA,gBACA,eACA,gBACA,6BACA,mBACsC;CACtC,IAAI,iBAAiB,QAAQ,mBAAmB,MAC9C,OAAO,QAAQ,cAAc;CAE/B,IAAI,iBAAiB,gBACnB,OAAO;CAET,IAAI,sBAAsB,KAAA,GACxB,OAAO,aAAa,eAAe;CAErC,OAAO,qBAAqB,cAAc,gBAAgB,kBAAkB,GACxE,OACA,aAAa,4BAA4B;;AAG/C,SAAS,qBACP,cACA,gBACA,mBACS;CAGT,OAAO,kBAAkB,MACtB,qBACC,iBAAiB,SAAS,aAAa,IAAI,iBAAiB,SAAS,eAAe,CACvF;;AAGH,SAAgB,8BACd,SACA,WACA,UAAkD,EAAE,EACrB;CAG/B,IAAI,QAAQ,kBAAkB,UAAU,eACtC,OAAO,aAAa,wBAAwB;CAE9C,IAAI,QAAQ,6BAA6B,UAAU,0BACjD,OAAO,aAAa,mCAAmC;CAEzD,IAAI,QAAQ,4BAA4B,UAAU,yBAChD,OAAO,aAAa,kCAAkC;CAGxD,MAAM,gBAAgB,kBACpB,QAAQ,cACR,UAAU,cACV,uBACA,wBACA,qCACA,QAAQ,kBAAkB,cAC3B;CACD,IAAI,eAAe,OAAO;CAE1B,MAAM,qBAAqB,kBACzB,QAAQ,mBACR,UAAU,mBACV,4BACA,6BACA,0CACA,QAAQ,kBAAkB,mBAC3B;CACD,IAAI,oBAAoB,OAAO;CAE/B,MAAM,uBAAuB,kBAC3B,QAAQ,gBACR,UAAU,gBACV,yBACA,0BACA,uCACA,QAAQ,kBAAkB,gBAC3B;CACD,IAAI,sBAAsB,OAAO;CAEjC,MAAM,sBAAsB,kBAC1B,QAAQ,aACR,UAAU,aACV,sBACA,uBACA,oCACA,QAAQ,kBAAkB,aAC3B;CACD,IAAI,qBAAqB,OAAO;CAEhC,OAAO,EAAE,MAAM,cAAc"}
+{"version":3,"file":"artifact-compatibility.js","names":[],"sources":["../../src/server/artifact-compatibility.ts"],"sourcesContent":["import { fnv1a64 } from \"../utils/hash.js\";\n\nexport const ARTIFACT_COMPATIBILITY_SCHEMA_VERSION = 1;\n\n// These versions describe separate protocol layers. For example, a future\n// rolling deploy can bump the flat AppElements row shape while keeping the\n// envelope object and serialized RSC transport version stable.\nexport const APP_ELEMENTS_SCHEMA_VERSION = 1;\nexport const RSC_PAYLOAD_SCHEMA_VERSION = 1;\n\nexport type ArtifactCompatibilityEnvelope = Readonly<{\n  schemaVersion: typeof ARTIFACT_COMPATIBILITY_SCHEMA_VERSION;\n  graphVersion: string | null;\n  deploymentVersion: string | null;\n  appElementsSchemaVersion: typeof APP_ELEMENTS_SCHEMA_VERSION;\n  rscPayloadSchemaVersion: typeof RSC_PAYLOAD_SCHEMA_VERSION;\n  rootBoundaryId: string | null;\n  renderEpoch: string | null;\n}>;\n\n// Canonical ordered list of every field in ArtifactCompatibilityEnvelope.\n// Order is load-bearing — hash-producing consumers iterate this array to\n// guarantee deterministic ordering across runtimes.\nexport const ARTIFACT_COMPATIBILITY_PROOF_FIELDS: readonly (keyof ArtifactCompatibilityEnvelope)[] =\n  [\n    \"schemaVersion\",\n    \"graphVersion\",\n    \"deploymentVersion\",\n    \"appElementsSchemaVersion\",\n    \"rscPayloadSchemaVersion\",\n    \"rootBoundaryId\",\n    \"renderEpoch\",\n  ];\n\ntype ArtifactCompatibilityEnvelopeInput = Readonly<{\n  graphVersion?: string | null;\n  deploymentVersion?: string | null;\n  rootBoundaryId?: string | null;\n  renderEpoch?: string | null;\n}>;\n\nexport type ArtifactCompatibilitySet = readonly [string, string, ...string[]];\n\nexport type ArtifactCompatibilityMap = Readonly<{\n  graphVersions?: readonly ArtifactCompatibilitySet[];\n  deploymentVersions?: readonly ArtifactCompatibilitySet[];\n  rootBoundaryIds?: readonly ArtifactCompatibilitySet[];\n  renderEpochs?: readonly ArtifactCompatibilitySet[];\n}>;\n\nexport type ArtifactCompatibilityEvaluationOptions = Readonly<{\n  compatibilityMap?: ArtifactCompatibilityMap;\n}>;\n\ntype ArtifactCompatibilityFallback = \"renderFresh\";\n\ntype ArtifactCompatibilityUnknownReason =\n  | \"graphVersionUnknown\"\n  | \"deploymentVersionUnknown\"\n  | \"rootBoundaryIdUnknown\"\n  | \"renderEpochUnknown\";\n\ntype ArtifactCompatibilityIncompatibleReason =\n  | \"appElementsSchemaVersionMismatch\"\n  | \"deploymentVersionNotDeclaredCompatible\"\n  | \"deploymentVersionMismatch\"\n  | \"graphVersionNotDeclaredCompatible\"\n  | \"graphVersionMismatch\"\n  | \"renderEpochNotDeclaredCompatible\"\n  | \"renderEpochMismatch\"\n  | \"rootBoundaryIdNotDeclaredCompatible\"\n  | \"rootBoundaryIdMismatch\"\n  | \"rscPayloadSchemaVersionMismatch\"\n  | \"schemaVersionMismatch\";\n\ntype ArtifactCompatibilityDecision = Readonly<\n  | { kind: \"compatible\" }\n  | {\n      kind: \"unknown\";\n      fallback: ArtifactCompatibilityFallback;\n      reason: ArtifactCompatibilityUnknownReason;\n    }\n  | {\n      kind: \"incompatible\";\n      fallback: ArtifactCompatibilityFallback;\n      reason: ArtifactCompatibilityIncompatibleReason;\n    }\n>;\n\ntype ArtifactCompatibilityGraphVersionInput = Readonly<{\n  routePattern: string;\n  rootBoundaryId: string | null;\n}>;\n\nexport function createArtifactCompatibilityEnvelope(\n  input: ArtifactCompatibilityEnvelopeInput = {},\n): ArtifactCompatibilityEnvelope {\n  return {\n    schemaVersion: ARTIFACT_COMPATIBILITY_SCHEMA_VERSION,\n    graphVersion: input.graphVersion ?? null,\n    deploymentVersion: input.deploymentVersion ?? null,\n    appElementsSchemaVersion: APP_ELEMENTS_SCHEMA_VERSION,\n    rscPayloadSchemaVersion: RSC_PAYLOAD_SCHEMA_VERSION,\n    rootBoundaryId: input.rootBoundaryId ?? null,\n    renderEpoch: input.renderEpoch ?? null,\n  };\n}\n\nexport function createArtifactCompatibilityGraphVersion(\n  input: ArtifactCompatibilityGraphVersionInput,\n): string {\n  const fingerprint = fnv1a64(JSON.stringify([input.routePattern, input.rootBoundaryId]));\n  return `app-route-graph:${fingerprint}`;\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isStringOrNull(value: unknown): value is string | null {\n  return typeof value === \"string\" || value === null;\n}\n\nfunction hasCurrentSchemaVersions(record: Readonly<Record<string, unknown>>): boolean {\n  return (\n    record.schemaVersion === ARTIFACT_COMPATIBILITY_SCHEMA_VERSION &&\n    record.appElementsSchemaVersion === APP_ELEMENTS_SCHEMA_VERSION &&\n    record.rscPayloadSchemaVersion === RSC_PAYLOAD_SCHEMA_VERSION\n  );\n}\n\nexport function parseArtifactCompatibilityEnvelope(\n  value: unknown,\n): ArtifactCompatibilityEnvelope | null {\n  if (!isRecord(value)) return null;\n  // The Wave01 skeleton intentionally collapses version mismatch and malformed\n  // metadata into \"not current\". Cache/skip callers must split those cases\n  // before treating unknown compatibility as anything other than a miss/reject.\n  if (!hasCurrentSchemaVersions(value)) return null;\n  if (!isStringOrNull(value.graphVersion)) return null;\n  if (!isStringOrNull(value.deploymentVersion)) return null;\n  if (!isStringOrNull(value.rootBoundaryId)) return null;\n  if (!isStringOrNull(value.renderEpoch)) return null;\n\n  // This parser intentionally returns a normalized current-version proof. A\n  // future-compatible reader should introduce a separate parsed type instead of\n  // widening this Wave01 envelope after the current-version checks above.\n  return {\n    schemaVersion: ARTIFACT_COMPATIBILITY_SCHEMA_VERSION,\n    graphVersion: value.graphVersion,\n    deploymentVersion: value.deploymentVersion,\n    appElementsSchemaVersion: APP_ELEMENTS_SCHEMA_VERSION,\n    rscPayloadSchemaVersion: RSC_PAYLOAD_SCHEMA_VERSION,\n    rootBoundaryId: value.rootBoundaryId,\n    renderEpoch: value.renderEpoch,\n  };\n}\n\nfunction incompatible(\n  reason: ArtifactCompatibilityIncompatibleReason,\n): ArtifactCompatibilityDecision {\n  return { kind: \"incompatible\", fallback: \"renderFresh\", reason };\n}\n\nfunction unknown(reason: ArtifactCompatibilityUnknownReason): ArtifactCompatibilityDecision {\n  return { kind: \"unknown\", fallback: \"renderFresh\", reason };\n}\n\nfunction compareKnownField(\n  currentValue: string | null,\n  candidateValue: string | null,\n  unknownReason: ArtifactCompatibilityUnknownReason,\n  mismatchReason: ArtifactCompatibilityIncompatibleReason,\n  notDeclaredCompatibleReason: ArtifactCompatibilityIncompatibleReason,\n  compatibilitySets: readonly ArtifactCompatibilitySet[] | undefined,\n): ArtifactCompatibilityDecision | null {\n  if (currentValue === null || candidateValue === null) {\n    return unknown(unknownReason);\n  }\n  if (currentValue === candidateValue) {\n    return null;\n  }\n  if (compatibilitySets === undefined) {\n    return incompatible(mismatchReason);\n  }\n  return isDeclaredCompatible(currentValue, candidateValue, compatibilitySets)\n    ? null\n    : incompatible(notDeclaredCompatibleReason);\n}\n\nfunction isDeclaredCompatible(\n  currentValue: string,\n  candidateValue: string,\n  compatibilitySets: readonly ArtifactCompatibilitySet[],\n): boolean {\n  // Compatibility is intentionally scoped to one declared set. Overlapping\n  // pair sets like [a,b] and [b,c] must not silently make a compatible with c.\n  return compatibilitySets.some(\n    (compatibilitySet) =>\n      compatibilitySet.includes(currentValue) && compatibilitySet.includes(candidateValue),\n  );\n}\n\nexport function evaluateArtifactCompatibility(\n  current: ArtifactCompatibilityEnvelope,\n  candidate: ArtifactCompatibilityEnvelope,\n  options: ArtifactCompatibilityEvaluationOptions = {},\n): ArtifactCompatibilityDecision {\n  // This remains a proof evaluator: mismatched fields are compatible only when\n  // the current build's compatibility map explicitly declares that relationship.\n  if (current.schemaVersion !== candidate.schemaVersion) {\n    return incompatible(\"schemaVersionMismatch\");\n  }\n  if (current.appElementsSchemaVersion !== candidate.appElementsSchemaVersion) {\n    return incompatible(\"appElementsSchemaVersionMismatch\");\n  }\n  if (current.rscPayloadSchemaVersion !== candidate.rscPayloadSchemaVersion) {\n    return incompatible(\"rscPayloadSchemaVersionMismatch\");\n  }\n\n  const graphDecision = compareKnownField(\n    current.graphVersion,\n    candidate.graphVersion,\n    \"graphVersionUnknown\",\n    \"graphVersionMismatch\",\n    \"graphVersionNotDeclaredCompatible\",\n    options.compatibilityMap?.graphVersions,\n  );\n  if (graphDecision) return graphDecision;\n\n  const deploymentDecision = compareKnownField(\n    current.deploymentVersion,\n    candidate.deploymentVersion,\n    \"deploymentVersionUnknown\",\n    \"deploymentVersionMismatch\",\n    \"deploymentVersionNotDeclaredCompatible\",\n    options.compatibilityMap?.deploymentVersions,\n  );\n  if (deploymentDecision) return deploymentDecision;\n\n  const rootBoundaryDecision = compareKnownField(\n    current.rootBoundaryId,\n    candidate.rootBoundaryId,\n    \"rootBoundaryIdUnknown\",\n    \"rootBoundaryIdMismatch\",\n    \"rootBoundaryIdNotDeclaredCompatible\",\n    options.compatibilityMap?.rootBoundaryIds,\n  );\n  if (rootBoundaryDecision) return rootBoundaryDecision;\n\n  const renderEpochDecision = compareKnownField(\n    current.renderEpoch,\n    candidate.renderEpoch,\n    \"renderEpochUnknown\",\n    \"renderEpochMismatch\",\n    \"renderEpochNotDeclaredCompatible\",\n    options.compatibilityMap?.renderEpochs,\n  );\n  if (renderEpochDecision) return renderEpochDecision;\n\n  return { kind: \"compatible\" };\n}\n"],"mappings":";;AAEA,MAAa,wCAAwC;AAKrD,MAAa,8BAA8B;AAC3C,MAAa,6BAA6B;AAe1C,MAAa,sCACX;CACE;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AA8DH,SAAgB,oCACd,QAA4C,EAAE,EACf;CAC/B,OAAO;EACL,eAAA;EACA,cAAc,MAAM,gBAAgB;EACpC,mBAAmB,MAAM,qBAAqB;EAC9C,0BAAA;EACA,yBAAA;EACA,gBAAgB,MAAM,kBAAkB;EACxC,aAAa,MAAM,eAAe;EACnC;;AAGH,SAAgB,wCACd,OACQ;CAER,OAAO,mBADa,QAAQ,KAAK,UAAU,CAAC,MAAM,cAAc,MAAM,eAAe,CAAC,CACjD;;AAGvC,SAAS,SAAS,OAA4D;CAC5E,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG7E,SAAS,eAAe,OAAwC;CAC9D,OAAO,OAAO,UAAU,YAAY,UAAU;;AAGhD,SAAS,yBAAyB,QAAoD;CACpF,OACE,OAAO,kBAAA,KACP,OAAO,6BAAA,KACP,OAAO,4BAAA;;AAIX,SAAgB,mCACd,OACsC;CACtC,IAAI,CAAC,SAAS,MAAM,EAAE,OAAO;CAI7B,IAAI,CAAC,yBAAyB,MAAM,EAAE,OAAO;CAC7C,IAAI,CAAC,eAAe,MAAM,aAAa,EAAE,OAAO;CAChD,IAAI,CAAC,eAAe,MAAM,kBAAkB,EAAE,OAAO;CACrD,IAAI,CAAC,eAAe,MAAM,eAAe,EAAE,OAAO;CAClD,IAAI,CAAC,eAAe,MAAM,YAAY,EAAE,OAAO;CAK/C,OAAO;EACL,eAAA;EACA,cAAc,MAAM;EACpB,mBAAmB,MAAM;EACzB,0BAAA;EACA,yBAAA;EACA,gBAAgB,MAAM;EACtB,aAAa,MAAM;EACpB;;AAGH,SAAS,aACP,QAC+B;CAC/B,OAAO;EAAE,MAAM;EAAgB,UAAU;EAAe;EAAQ;;AAGlE,SAAS,QAAQ,QAA2E;CAC1F,OAAO;EAAE,MAAM;EAAW,UAAU;EAAe;EAAQ;;AAG7D,SAAS,kBACP,cACA,gBACA,eACA,gBACA,6BACA,mBACsC;CACtC,IAAI,iBAAiB,QAAQ,mBAAmB,MAC9C,OAAO,QAAQ,cAAc;CAE/B,IAAI,iBAAiB,gBACnB,OAAO;CAET,IAAI,sBAAsB,KAAA,GACxB,OAAO,aAAa,eAAe;CAErC,OAAO,qBAAqB,cAAc,gBAAgB,kBAAkB,GACxE,OACA,aAAa,4BAA4B;;AAG/C,SAAS,qBACP,cACA,gBACA,mBACS;CAGT,OAAO,kBAAkB,MACtB,qBACC,iBAAiB,SAAS,aAAa,IAAI,iBAAiB,SAAS,eAAe,CACvF;;AAGH,SAAgB,8BACd,SACA,WACA,UAAkD,EAAE,EACrB;CAG/B,IAAI,QAAQ,kBAAkB,UAAU,eACtC,OAAO,aAAa,wBAAwB;CAE9C,IAAI,QAAQ,6BAA6B,UAAU,0BACjD,OAAO,aAAa,mCAAmC;CAEzD,IAAI,QAAQ,4BAA4B,UAAU,yBAChD,OAAO,aAAa,kCAAkC;CAGxD,MAAM,gBAAgB,kBACpB,QAAQ,cACR,UAAU,cACV,uBACA,wBACA,qCACA,QAAQ,kBAAkB,cAC3B;CACD,IAAI,eAAe,OAAO;CAE1B,MAAM,qBAAqB,kBACzB,QAAQ,mBACR,UAAU,mBACV,4BACA,6BACA,0CACA,QAAQ,kBAAkB,mBAC3B;CACD,IAAI,oBAAoB,OAAO;CAE/B,MAAM,uBAAuB,kBAC3B,QAAQ,gBACR,UAAU,gBACV,yBACA,0BACA,uCACA,QAAQ,kBAAkB,gBAC3B;CACD,IAAI,sBAAsB,OAAO;CAEjC,MAAM,sBAAsB,kBAC1B,QAAQ,aACR,UAAU,aACV,sBACA,uBACA,oCACA,QAAQ,kBAAkB,aAC3B;CACD,IAAI,qBAAqB,OAAO;CAEhC,OAAO,EAAE,MAAM,cAAc"}

package/dist/server/client-reuse-manifest.d.ts

@@ -19,6 +19,7 @@ declare const DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS: {
   maxPayloadHashLength: number;
   maxVariantCacheKeyLength: number;
 };
+declare const CLIENT_REUSE_MANIFEST_SKIP_VERIFICATION_ENTRY_BUDGET = 8;
 type ClientReuseManifestEntryKind = "layout" | "page" | "route" | "slot" | "template";
 type ClientReuseManifestEntryPrivacy = "private" | "public";
 type ClientReuseManifestReplayWindow = Readonly<{
@@ -59,8 +60,7 @@ type CreateClientReuseManifestInput = Readonly<{
   replayWindow?: ClientReuseManifestReplayWindow;
   visibleCommitVersion: number;
 }>;
-type ClientReuseManifestRejectionCode = "SKIP_CACHE_ARTIFACT_COMPATIBILITY_INCOMPATIBLE" | "SKIP_CACHE_ARTIFACT_COMPATIBILITY_UNKNOWN" | "SKIP_CACHE_ARTIFACT_PROOF_MISMATCH" | "SKIP_CACHE_ENTRY_ID_MISMATCH" | "SKIP_CACHE_INVALIDATED" | "SKIP_CACHE_INVALIDATION_UNKNOWN" | "SKIP_CACHE_PAYLOAD_HASH_MISMATCH" | "SKIP_CACHE_PAYLOAD_HASH_MISSING" | "SKIP_CACHE_PROOF_MISSING" | "SKIP_CACHE_PROOF_REJECTED" | "SKIP_CACHE_REUSE_CLASS_UNSUPPORTED" | "SKIP_CACHE_VARIANT_MISMATCH" | "SKIP_ARTIFACT_COMPATIBILITY_INVALID" | "SKIP_ENTRY_COUNT_EXCEEDED" | "SKIP_ENTRY_HASH_INVALID" | "SKIP_ENTRY_ID_INVALID" | "SKIP_ENTRY_ID_TOO_LONG" | "SKIP_ENTRY_MALFORMED" | "SKIP_ENTRY_ORDER_NON_CANONICAL" | "SKIP_HASH_ALGORITHM_UNSUPPORTED" | "SKIP_MANIFEST_MALFORMED" | "SKIP_MANIFEST_SCHEMA_UNSUPPORTED" | "SKIP_MANIFEST_TOO_LARGE" | "SKIP_PRIVATE_ENTRY" | "SKIP_REPLAY_WINDOW_INVALID" | "SKIP_UNKNOWN_ENTRY" | "SKIP_VARIANT_CACHE_KEY_INVALID" | "SKIP_VARIANT_CACHE_KEY_TOO_LONG" | "SKIP_VISIBLE_COMMIT_VERSION_INVALID" | "SKIP_VISIBLE_COMMIT_VERSION_MISMATCH";
-type ClientReuseManifestDispositionCode = "SKIP_MODEL_DISABLED";
+type ClientReuseManifestRejectionCode = "SKIP_CACHE_ARTIFACT_COMPATIBILITY_INCOMPATIBLE" | "SKIP_CACHE_ARTIFACT_COMPATIBILITY_UNKNOWN" | "SKIP_CACHE_ARTIFACT_PROOF_MISMATCH" | "SKIP_CACHE_ENTRY_ID_MISMATCH" | "SKIP_CACHE_INVALIDATED" | "SKIP_CACHE_INVALIDATION_UNKNOWN" | "SKIP_CACHE_PAYLOAD_HASH_MISMATCH" | "SKIP_CACHE_PAYLOAD_HASH_MISSING" | "SKIP_CACHE_PROOF_MISSING" | "SKIP_CACHE_PROOF_REJECTED" | "SKIP_CACHE_REUSE_CLASS_UNSUPPORTED" | "SKIP_CACHE_VARIANT_MISMATCH" | "SKIP_LAYOUT_CACHE_LIFE_OBSERVED" | "SKIP_LAYOUT_CACHE_TAGS_OBSERVED" | "SKIP_LAYOUT_CACHEABLE_FETCHES_OBSERVED" | "SKIP_LAYOUT_DYNAMIC_FETCHES_OBSERVED" | "SKIP_LAYOUT_PARAMS_OBSERVED" | "SKIP_LAYOUT_PARAMS_OBSERVATION_INCOMPLETE" | "SKIP_LAYOUT_PARAMS_PRESENT" | "SKIP_LAYOUT_REVALIDATE_PRESENT" | "SKIP_LAYOUT_REQUEST_API_OBSERVED" | "SKIP_LAYOUT_UNSTABLE_CACHE_OBSERVED" | "SKIP_ARTIFACT_COMPATIBILITY_INVALID" | "SKIP_ENTRY_COUNT_EXCEEDED" | "SKIP_VERIFICATION_BUDGET_EXCEEDED" | "SKIP_ENTRY_HASH_INVALID" | "SKIP_ENTRY_ID_INVALID" | "SKIP_ENTRY_ID_TOO_LONG" | "SKIP_ENTRY_MALFORMED" | "SKIP_ENTRY_ORDER_NON_CANONICAL" | "SKIP_HASH_ALGORITHM_UNSUPPORTED" | "SKIP_MANIFEST_MALFORMED" | "SKIP_MANIFEST_SCHEMA_UNSUPPORTED" | "SKIP_MANIFEST_TOO_LARGE" | "SKIP_PRIVATE_ENTRY" | "SKIP_REPLAY_WINDOW_INVALID" | "SKIP_UNKNOWN_ENTRY" | "SKIP_VARIANT_CACHE_KEY_INVALID" | "SKIP_VARIANT_CACHE_KEY_TOO_LONG" | "SKIP_VISIBLE_COMMIT_VERSION_INVALID" | "SKIP_VISIBLE_COMMIT_VERSION_MISMATCH";
 type ClientReuseManifestTraceFieldValue = string | number | boolean | null | readonly string[];
 type ClientReuseManifestTraceFields = Readonly<Record<string, ClientReuseManifestTraceFieldValue>>;
 type ClientReuseManifestRejection = Readonly<{
@@ -71,9 +71,14 @@ type ClientReuseManifestEntryRejection = ClientReuseManifestRejection & Readonly
   entryId: string | null;
 }>;
 type ClientReuseManifestSkipDisposition = Readonly<{
-  code: ClientReuseManifestDispositionCode;
+  code: "SKIP_MODEL_DISABLED";
   enabled: false;
   mode: "renderAndSend";
+}> | Readonly<{
+  code: "SKIP_STATIC_LAYOUT_VERIFIED";
+  enabled: true;
+  mode: "skipStaticLayout";
+  skippedEntryIds: readonly string[];
 }>;
 type ClientReuseManifestParseResult = Readonly<{
   kind: "absent";
@@ -95,5 +100,5 @@ declare function createClientReuseManifest(input: CreateClientReuseManifestInput
 declare function serializeClientReuseManifest(input: CreateClientReuseManifestInput): string;
 declare function parseClientReuseManifestHeader(rawHeader: string | null | undefined, options?: ParseClientReuseManifestOptions): ClientReuseManifestParseResult;
 //#endregion
-export { CLIENT_REUSE_MANIFEST_HASH_ALGORITHM, CLIENT_REUSE_MANIFEST_SCHEMA_VERSION, ClientReuseManifest, ClientReuseManifestDispositionCode, ClientReuseManifestEntry, ClientReuseManifestEntryKind, ClientReuseManifestEntryRejection, ClientReuseManifestHashAlgorithm, ClientReuseManifestParseResult, ClientReuseManifestRejection, ClientReuseManifestRejectionCode, ClientReuseManifestReplayWindow, ClientReuseManifestSchemaVersion, ClientReuseManifestSkipDisposition, ClientReuseManifestTraceFieldValue, ClientReuseManifestTraceFields, DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS, createClientReuseManifest, createClientReusePayloadHash, parseClientReuseManifestHeader, serializeClientReuseManifest };
+export { CLIENT_REUSE_MANIFEST_HASH_ALGORITHM, CLIENT_REUSE_MANIFEST_SCHEMA_VERSION, CLIENT_REUSE_MANIFEST_SKIP_VERIFICATION_ENTRY_BUDGET, ClientReuseManifest, ClientReuseManifestEntry, ClientReuseManifestEntryKind, ClientReuseManifestEntryRejection, ClientReuseManifestHashAlgorithm, ClientReuseManifestParseResult, ClientReuseManifestRejection, ClientReuseManifestRejectionCode, ClientReuseManifestReplayWindow, ClientReuseManifestSchemaVersion, ClientReuseManifestSkipDisposition, ClientReuseManifestTraceFieldValue, ClientReuseManifestTraceFields, DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS, createClientReuseManifest, createClientReusePayloadHash, parseClientReuseManifestHeader, serializeClientReuseManifest };
 //# sourceMappingURL=client-reuse-manifest.d.ts.map

package/dist/server/client-reuse-manifest.js

@@ -12,6 +12,7 @@ const DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS = {
 	maxPayloadHashLength: 16,
 	maxVariantCacheKeyLength: 256
 };
+const CLIENT_REUSE_MANIFEST_SKIP_VERIFICATION_ENTRY_BUDGET = 8;
 const HASH_DIGEST_PATTERN = /^[0-9a-z]+$/;
 const textEncoder = new TextEncoder();
 function createRejection(code, fields = {}) {
@@ -207,6 +208,6 @@ function parseClientReuseManifestHeader(rawHeader, options = {}) {
 	};
 }
 //#endregion
-export { CLIENT_REUSE_MANIFEST_HASH_ALGORITHM, CLIENT_REUSE_MANIFEST_SCHEMA_VERSION, DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS, createClientReuseManifest, createClientReusePayloadHash, parseClientReuseManifestHeader, serializeClientReuseManifest };
+export { CLIENT_REUSE_MANIFEST_HASH_ALGORITHM, CLIENT_REUSE_MANIFEST_SCHEMA_VERSION, CLIENT_REUSE_MANIFEST_SKIP_VERIFICATION_ENTRY_BUDGET, DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS, createClientReuseManifest, createClientReusePayloadHash, parseClientReuseManifestHeader, serializeClientReuseManifest };
 
 //# sourceMappingURL=client-reuse-manifest.js.map

package/dist/server/client-reuse-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-reuse-manifest.js","names":[],"sources":["../../src/server/client-reuse-manifest.ts"],"sourcesContent":["import {\n  parseArtifactCompatibilityEnvelope,\n  type ArtifactCompatibilityEnvelope,\n} from \"./artifact-compatibility.js\";\nimport { AppElementsWire } from \"./app-elements-wire.js\";\nimport { fnv1a64 } from \"../utils/hash.js\";\nimport { isUnknownRecord } from \"../utils/record.js\";\n\nexport const CLIENT_REUSE_MANIFEST_SCHEMA_VERSION = 1;\nexport type ClientReuseManifestSchemaVersion = 1;\n\nexport const CLIENT_REUSE_MANIFEST_HASH_ALGORITHM = \"fnv1a64\";\nexport type ClientReuseManifestHashAlgorithm = typeof CLIENT_REUSE_MANIFEST_HASH_ALGORITHM;\n\ntype ClientReuseManifestLimits = Readonly<{\n  maxEntryCount: number;\n  maxEntryIdLength: number;\n  maxManifestBytes: number;\n  maxPayloadHashLength: number;\n  maxVariantCacheKeyLength: number;\n}>;\n\nexport const DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS = {\n  maxEntryCount: 64,\n  maxEntryIdLength: 512,\n  maxManifestBytes: 4096,\n  maxPayloadHashLength: 16,\n  maxVariantCacheKeyLength: 256,\n} satisfies ClientReuseManifestLimits;\n\nexport type ClientReuseManifestEntryKind = \"layout\" | \"page\" | \"route\" | \"slot\" | \"template\";\ntype ClientReuseManifestEntryPrivacy = \"private\" | \"public\";\n\nexport type ClientReuseManifestReplayWindow = Readonly<{\n  validFromVisibleCommitVersion: number;\n  validUntilVisibleCommitVersion: number;\n}>;\n\nexport type ClientReuseManifestEntry = Readonly<{\n  artifactCompatibility: ArtifactCompatibilityEnvelope;\n  id: string;\n  kind: ClientReuseManifestEntryKind;\n  payloadHash: string;\n  privacy: \"public\";\n  variantCacheKey: string;\n}>;\n\ntype ClientReuseManifestWireEntry = Readonly<{\n  artifactCompatibility: ArtifactCompatibilityEnvelope;\n  id: string;\n  payloadHash: string;\n  privacy: ClientReuseManifestEntryPrivacy;\n  variantCacheKey: string;\n}>;\n\nexport type ClientReuseManifest = Readonly<{\n  entries: readonly ClientReuseManifestEntry[];\n  hashAlgorithm: ClientReuseManifestHashAlgorithm;\n  replayWindow: ClientReuseManifestReplayWindow;\n  schemaVersion: ClientReuseManifestSchemaVersion;\n  visibleCommitVersion: number;\n}>;\n\n// Internal: createClientReuseManifest returns wire shape while parsing decides\n// which client-declared entries can participate in future reuse.\ntype ClientReuseManifestWire = Readonly<{\n  entries: readonly ClientReuseManifestWireEntry[];\n  hashAlgorithm: ClientReuseManifestHashAlgorithm;\n  replayWindow: ClientReuseManifestReplayWindow;\n  schemaVersion: ClientReuseManifestSchemaVersion;\n  visibleCommitVersion: number;\n}>;\n\ntype CreateClientReuseManifestInput = Readonly<{\n  entries: readonly ClientReuseManifestWireEntry[];\n  replayWindow?: ClientReuseManifestReplayWindow;\n  visibleCommitVersion: number;\n}>;\n\nexport type ClientReuseManifestRejectionCode =\n  | \"SKIP_CACHE_ARTIFACT_COMPATIBILITY_INCOMPATIBLE\"\n  | \"SKIP_CACHE_ARTIFACT_COMPATIBILITY_UNKNOWN\"\n  | \"SKIP_CACHE_ARTIFACT_PROOF_MISMATCH\"\n  | \"SKIP_CACHE_ENTRY_ID_MISMATCH\"\n  | \"SKIP_CACHE_INVALIDATED\"\n  | \"SKIP_CACHE_INVALIDATION_UNKNOWN\"\n  | \"SKIP_CACHE_PAYLOAD_HASH_MISMATCH\"\n  | \"SKIP_CACHE_PAYLOAD_HASH_MISSING\"\n  | \"SKIP_CACHE_PROOF_MISSING\"\n  | \"SKIP_CACHE_PROOF_REJECTED\"\n  | \"SKIP_CACHE_REUSE_CLASS_UNSUPPORTED\"\n  | \"SKIP_CACHE_VARIANT_MISMATCH\"\n  | \"SKIP_ARTIFACT_COMPATIBILITY_INVALID\"\n  | \"SKIP_ENTRY_COUNT_EXCEEDED\"\n  | \"SKIP_ENTRY_HASH_INVALID\"\n  | \"SKIP_ENTRY_ID_INVALID\"\n  | \"SKIP_ENTRY_ID_TOO_LONG\"\n  | \"SKIP_ENTRY_MALFORMED\"\n  | \"SKIP_ENTRY_ORDER_NON_CANONICAL\"\n  | \"SKIP_HASH_ALGORITHM_UNSUPPORTED\"\n  | \"SKIP_MANIFEST_MALFORMED\"\n  | \"SKIP_MANIFEST_SCHEMA_UNSUPPORTED\"\n  | \"SKIP_MANIFEST_TOO_LARGE\"\n  | \"SKIP_PRIVATE_ENTRY\"\n  | \"SKIP_REPLAY_WINDOW_INVALID\"\n  | \"SKIP_UNKNOWN_ENTRY\"\n  | \"SKIP_VARIANT_CACHE_KEY_INVALID\"\n  | \"SKIP_VARIANT_CACHE_KEY_TOO_LONG\"\n  | \"SKIP_VISIBLE_COMMIT_VERSION_INVALID\"\n  | \"SKIP_VISIBLE_COMMIT_VERSION_MISMATCH\";\n\nexport type ClientReuseManifestDispositionCode = \"SKIP_MODEL_DISABLED\";\n\nexport type ClientReuseManifestTraceFieldValue =\n  | string\n  | number\n  | boolean\n  | null\n  | readonly string[];\n\nexport type ClientReuseManifestTraceFields = Readonly<\n  Record<string, ClientReuseManifestTraceFieldValue>\n>;\n\nexport type ClientReuseManifestRejection = Readonly<{\n  code: ClientReuseManifestRejectionCode;\n  fields: ClientReuseManifestTraceFields;\n}>;\n\nexport type ClientReuseManifestEntryRejection = ClientReuseManifestRejection &\n  Readonly<{\n    entryId: string | null;\n  }>;\n\nexport type ClientReuseManifestSkipDisposition = Readonly<{\n  code: ClientReuseManifestDispositionCode;\n  enabled: false;\n  mode: \"renderAndSend\";\n}>;\n\nexport type ClientReuseManifestParseResult =\n  | Readonly<{ kind: \"absent\" }>\n  | Readonly<{ kind: \"rejected\"; rejection: ClientReuseManifestRejection }>\n  | Readonly<{\n      entryRejections: readonly ClientReuseManifestEntryRejection[];\n      kind: \"parsed\";\n      manifest: ClientReuseManifest;\n      skipDisposition: ClientReuseManifestSkipDisposition;\n    }>;\n\ntype ParseClientReuseManifestOptions = Readonly<{\n  currentVisibleCommitVersion?: number;\n  limits?: ClientReuseManifestLimits;\n}>;\n\nconst HASH_DIGEST_PATTERN = /^[0-9a-z]+$/;\nconst textEncoder = new TextEncoder();\n\ntype ParseReplayWindowResult =\n  | Readonly<{ kind: \"parsed\"; replayWindow: ClientReuseManifestReplayWindow }>\n  | Readonly<{ kind: \"rejected\"; rejection: ClientReuseManifestRejection }>;\n\nfunction createRejection(\n  code: ClientReuseManifestRejectionCode,\n  fields: ClientReuseManifestTraceFields = {},\n): ClientReuseManifestRejection {\n  return { code, fields };\n}\n\nfunction rejectManifest(\n  code: ClientReuseManifestRejectionCode,\n  fields: ClientReuseManifestTraceFields = {},\n): ClientReuseManifestParseResult {\n  return { kind: \"rejected\", rejection: createRejection(code, fields) };\n}\n\nfunction rejectEntry(\n  code: ClientReuseManifestRejectionCode,\n  entryId: string | null,\n  fields: ClientReuseManifestTraceFields = {},\n): ClientReuseManifestEntryRejection {\n  return { code, entryId, fields };\n}\n\nfunction compareManifestEntries(\n  left: Pick<ClientReuseManifestWireEntry, \"id\">,\n  right: Pick<ClientReuseManifestWireEntry, \"id\">,\n): number {\n  if (left.id < right.id) return -1;\n  if (left.id > right.id) return 1;\n  return 0;\n}\n\nfunction createCanonicalWireEntries(\n  entries: readonly ClientReuseManifestWireEntry[],\n): ClientReuseManifestWireEntry[] {\n  const entriesById = new Map<string, ClientReuseManifestWireEntry>();\n  for (const entry of entries) {\n    if (!entriesById.has(entry.id)) {\n      entriesById.set(entry.id, entry);\n    }\n  }\n\n  return Array.from(entriesById.values()).sort(compareManifestEntries);\n}\n\n// The manifest byte budget is enforced once at the untrusted header boundary.\nfunction countUtf8Bytes(input: string): number {\n  return textEncoder.encode(input).length;\n}\n\nfunction isVisibleCommitVersion(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\nfunction parseReplayWindow(value: unknown, visibleCommitVersion: number): ParseReplayWindowResult {\n  if (!isUnknownRecord(value)) {\n    return {\n      kind: \"rejected\",\n      rejection: createRejection(\"SKIP_REPLAY_WINDOW_INVALID\", { field: \"replayWindow\" }),\n    };\n  }\n\n  const validFromVisibleCommitVersion = value.validFromVisibleCommitVersion;\n  const validUntilVisibleCommitVersion = value.validUntilVisibleCommitVersion;\n  if (\n    !isVisibleCommitVersion(validFromVisibleCommitVersion) ||\n    !isVisibleCommitVersion(validUntilVisibleCommitVersion) ||\n    validFromVisibleCommitVersion > validUntilVisibleCommitVersion ||\n    visibleCommitVersion < validFromVisibleCommitVersion ||\n    visibleCommitVersion > validUntilVisibleCommitVersion\n  ) {\n    return {\n      kind: \"rejected\",\n      rejection: createRejection(\"SKIP_REPLAY_WINDOW_INVALID\", {\n        validFromVisibleCommitVersion: isVisibleCommitVersion(validFromVisibleCommitVersion)\n          ? validFromVisibleCommitVersion\n          : null,\n        validUntilVisibleCommitVersion: isVisibleCommitVersion(validUntilVisibleCommitVersion)\n          ? validUntilVisibleCommitVersion\n          : null,\n        visibleCommitVersion,\n      }),\n    };\n  }\n\n  return {\n    kind: \"parsed\",\n    replayWindow: {\n      validFromVisibleCommitVersion,\n      validUntilVisibleCommitVersion,\n    },\n  };\n}\n\nfunction currentCommitVersionMatchesReplayWindow(\n  currentVisibleCommitVersion: number | undefined,\n  replayWindow: ClientReuseManifestReplayWindow,\n): boolean {\n  if (currentVisibleCommitVersion === undefined) return true;\n  return (\n    currentVisibleCommitVersion >= replayWindow.validFromVisibleCommitVersion &&\n    currentVisibleCommitVersion <= replayWindow.validUntilVisibleCommitVersion\n  );\n}\n\nfunction parseEntryKind(id: string): ClientReuseManifestEntryKind | null {\n  const parsed = AppElementsWire.parseElementKey(id);\n  if (parsed === null) return null;\n  return parsed.kind;\n}\n\nfunction isValidPayloadHash(value: unknown, limits: ClientReuseManifestLimits): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.length > 0 &&\n    value.length <= limits.maxPayloadHashLength &&\n    HASH_DIGEST_PATTERN.test(value)\n  );\n}\n\nfunction parseManifestEntry(\n  value: unknown,\n  limits: ClientReuseManifestLimits,\n  index: number,\n): ClientReuseManifestEntry | ClientReuseManifestEntryRejection {\n  if (!isUnknownRecord(value)) {\n    return rejectEntry(\"SKIP_ENTRY_MALFORMED\", null, { index });\n  }\n\n  const id = value.id;\n  if (typeof id !== \"string\" || id.length === 0) {\n    return rejectEntry(\"SKIP_ENTRY_ID_INVALID\", null, { index });\n  }\n  if (id.length > limits.maxEntryIdLength) {\n    return rejectEntry(\"SKIP_ENTRY_ID_TOO_LONG\", id, {\n      idHash: createClientReusePayloadHash(id),\n      maxEntryIdLength: limits.maxEntryIdLength,\n    });\n  }\n\n  const kind = parseEntryKind(id);\n  if (kind === null) {\n    return rejectEntry(\"SKIP_UNKNOWN_ENTRY\", id, { idHash: createClientReusePayloadHash(id) });\n  }\n\n  const privacy = value.privacy;\n  if (privacy === \"private\") {\n    return rejectEntry(\"SKIP_PRIVATE_ENTRY\", id, { privacy });\n  }\n  if (privacy !== \"public\") {\n    return rejectEntry(\"SKIP_ENTRY_MALFORMED\", id, { field: \"privacy\" });\n  }\n\n  const payloadHash = value.payloadHash;\n  if (!isValidPayloadHash(payloadHash, limits)) {\n    return rejectEntry(\"SKIP_ENTRY_HASH_INVALID\", id, {\n      maxPayloadHashLength: limits.maxPayloadHashLength,\n    });\n  }\n\n  const variantCacheKey = value.variantCacheKey;\n  if (typeof variantCacheKey !== \"string\" || variantCacheKey.length === 0) {\n    return rejectEntry(\"SKIP_VARIANT_CACHE_KEY_INVALID\", id, { field: \"variantCacheKey\" });\n  }\n  if (variantCacheKey.length > limits.maxVariantCacheKeyLength) {\n    return rejectEntry(\"SKIP_VARIANT_CACHE_KEY_TOO_LONG\", id, {\n      maxVariantCacheKeyLength: limits.maxVariantCacheKeyLength,\n      variantCacheKeyHash: createClientReusePayloadHash(variantCacheKey),\n    });\n  }\n\n  const artifactCompatibility = parseArtifactCompatibilityEnvelope(value.artifactCompatibility);\n  if (artifactCompatibility === null) {\n    return rejectEntry(\"SKIP_ARTIFACT_COMPATIBILITY_INVALID\", id, {\n      field: \"artifactCompatibility\",\n    });\n  }\n\n  return {\n    artifactCompatibility,\n    id,\n    kind,\n    payloadHash,\n    privacy,\n    variantCacheKey,\n  };\n}\n\nexport function createClientReusePayloadHash(input: string): string {\n  return fnv1a64(input);\n}\n\nexport function createClientReuseManifest(\n  input: CreateClientReuseManifestInput,\n): ClientReuseManifestWire {\n  const replayWindow =\n    input.replayWindow ??\n    ({\n      validFromVisibleCommitVersion: input.visibleCommitVersion,\n      validUntilVisibleCommitVersion: input.visibleCommitVersion,\n    } satisfies ClientReuseManifestReplayWindow);\n\n  return {\n    entries: createCanonicalWireEntries(input.entries),\n    hashAlgorithm: CLIENT_REUSE_MANIFEST_HASH_ALGORITHM,\n    replayWindow,\n    schemaVersion: CLIENT_REUSE_MANIFEST_SCHEMA_VERSION,\n    visibleCommitVersion: input.visibleCommitVersion,\n  };\n}\n\nexport function serializeClientReuseManifest(input: CreateClientReuseManifestInput): string {\n  return JSON.stringify(createClientReuseManifest(input));\n}\n\nexport function parseClientReuseManifestHeader(\n  rawHeader: string | null | undefined,\n  options: ParseClientReuseManifestOptions = {},\n): ClientReuseManifestParseResult {\n  const header = rawHeader?.trim();\n  if (!header) return { kind: \"absent\" };\n\n  const limits = options.limits ?? DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS;\n  const manifestBytes = countUtf8Bytes(header);\n  if (manifestBytes > limits.maxManifestBytes) {\n    return rejectManifest(\"SKIP_MANIFEST_TOO_LARGE\", {\n      manifestBytes,\n      maxManifestBytes: limits.maxManifestBytes,\n    });\n  }\n\n  let decoded: unknown;\n  try {\n    decoded = JSON.parse(header);\n  } catch {\n    return rejectManifest(\"SKIP_MANIFEST_MALFORMED\");\n  }\n\n  if (!isUnknownRecord(decoded)) {\n    return rejectManifest(\"SKIP_MANIFEST_MALFORMED\", { field: \"manifest\" });\n  }\n\n  if (decoded.schemaVersion !== CLIENT_REUSE_MANIFEST_SCHEMA_VERSION) {\n    return rejectManifest(\"SKIP_MANIFEST_SCHEMA_UNSUPPORTED\", {\n      schemaVersion:\n        typeof decoded.schemaVersion === \"number\" || typeof decoded.schemaVersion === \"string\"\n          ? decoded.schemaVersion\n          : null,\n    });\n  }\n\n  if (decoded.hashAlgorithm !== CLIENT_REUSE_MANIFEST_HASH_ALGORITHM) {\n    return rejectManifest(\"SKIP_HASH_ALGORITHM_UNSUPPORTED\", {\n      hashAlgorithm: typeof decoded.hashAlgorithm === \"string\" ? decoded.hashAlgorithm : null,\n    });\n  }\n\n  const visibleCommitVersion = decoded.visibleCommitVersion;\n  if (!isVisibleCommitVersion(visibleCommitVersion)) {\n    return rejectManifest(\"SKIP_VISIBLE_COMMIT_VERSION_INVALID\", {\n      visibleCommitVersion: null,\n    });\n  }\n\n  const replayWindowResult = parseReplayWindow(decoded.replayWindow, visibleCommitVersion);\n  if (replayWindowResult.kind === \"rejected\") {\n    return { kind: \"rejected\", rejection: replayWindowResult.rejection };\n  }\n  const { replayWindow } = replayWindowResult;\n  if (!currentCommitVersionMatchesReplayWindow(options.currentVisibleCommitVersion, replayWindow)) {\n    return rejectManifest(\"SKIP_VISIBLE_COMMIT_VERSION_MISMATCH\", {\n      currentVisibleCommitVersion: options.currentVisibleCommitVersion ?? null,\n      validFromVisibleCommitVersion: replayWindow.validFromVisibleCommitVersion,\n      validUntilVisibleCommitVersion: replayWindow.validUntilVisibleCommitVersion,\n      visibleCommitVersion,\n    });\n  }\n\n  const entriesValue = decoded.entries;\n  if (!Array.isArray(entriesValue)) {\n    return rejectManifest(\"SKIP_MANIFEST_MALFORMED\", { field: \"entries\" });\n  }\n  if (entriesValue.length > limits.maxEntryCount) {\n    return rejectManifest(\"SKIP_ENTRY_COUNT_EXCEEDED\", {\n      entryCount: entriesValue.length,\n      maxEntryCount: limits.maxEntryCount,\n    });\n  }\n\n  const entries: ClientReuseManifestEntry[] = [];\n  const entryRejections: ClientReuseManifestEntryRejection[] = [];\n  let previousEntryId: string | null = null;\n\n  for (let index = 0; index < entriesValue.length; index++) {\n    const value = entriesValue[index];\n    if (isUnknownRecord(value) && typeof value.id === \"string\") {\n      // Canonical ordering is enforced over entries with string IDs. Malformed\n      // entries cannot advance previousEntryId, so interleaving them cannot hide\n      // an ordering violation between valid checkpoints. <= rejects both\n      // out-of-order and duplicate IDs.\n      if (previousEntryId !== null && value.id <= previousEntryId) {\n        return rejectManifest(\"SKIP_ENTRY_ORDER_NON_CANONICAL\", {\n          entryIdHash: createClientReusePayloadHash(value.id),\n          previousEntryIdHash: createClientReusePayloadHash(previousEntryId),\n        });\n      }\n      previousEntryId = value.id;\n    }\n\n    const parsedEntry = parseManifestEntry(value, limits, index);\n    if (\"code\" in parsedEntry) {\n      entryRejections.push(parsedEntry);\n    } else {\n      entries.push(parsedEntry);\n    }\n  }\n\n  return {\n    entryRejections,\n    kind: \"parsed\",\n    manifest: {\n      entries,\n      hashAlgorithm: CLIENT_REUSE_MANIFEST_HASH_ALGORITHM,\n      replayWindow,\n      schemaVersion: CLIENT_REUSE_MANIFEST_SCHEMA_VERSION,\n      visibleCommitVersion,\n    },\n    skipDisposition: {\n      code: \"SKIP_MODEL_DISABLED\",\n      enabled: false,\n      mode: \"renderAndSend\",\n    },\n  };\n}\n"],"mappings":";;;;;AAQA,MAAa,uCAAuC;AAGpD,MAAa,uCAAuC;AAWpD,MAAa,uCAAuC;CAClD,eAAe;CACf,kBAAkB;CAClB,kBAAkB;CAClB,sBAAsB;CACtB,0BAA0B;CAC3B;AA+HD,MAAM,sBAAsB;AAC5B,MAAM,cAAc,IAAI,aAAa;AAMrC,SAAS,gBACP,MACA,SAAyC,EAAE,EACb;CAC9B,OAAO;EAAE;EAAM;EAAQ;;AAGzB,SAAS,eACP,MACA,SAAyC,EAAE,EACX;CAChC,OAAO;EAAE,MAAM;EAAY,WAAW,gBAAgB,MAAM,OAAO;EAAE;;AAGvE,SAAS,YACP,MACA,SACA,SAAyC,EAAE,EACR;CACnC,OAAO;EAAE;EAAM;EAAS;EAAQ;;AAGlC,SAAS,uBACP,MACA,OACQ;CACR,IAAI,KAAK,KAAK,MAAM,IAAI,OAAO;CAC/B,IAAI,KAAK,KAAK,MAAM,IAAI,OAAO;CAC/B,OAAO;;AAGT,SAAS,2BACP,SACgC;CAChC,MAAM,8BAAc,IAAI,KAA2C;CACnE,KAAK,MAAM,SAAS,SAClB,IAAI,CAAC,YAAY,IAAI,MAAM,GAAG,EAC5B,YAAY,IAAI,MAAM,IAAI,MAAM;CAIpC,OAAO,MAAM,KAAK,YAAY,QAAQ,CAAC,CAAC,KAAK,uBAAuB;;AAItE,SAAS,eAAe,OAAuB;CAC7C,OAAO,YAAY,OAAO,MAAM,CAAC;;AAGnC,SAAS,uBAAuB,OAAiC;CAC/D,OAAO,OAAO,UAAU,YAAY,OAAO,cAAc,MAAM,IAAI,SAAS;;AAG9E,SAAS,kBAAkB,OAAgB,sBAAuD;CAChG,IAAI,CAAC,gBAAgB,MAAM,EACzB,OAAO;EACL,MAAM;EACN,WAAW,gBAAgB,8BAA8B,EAAE,OAAO,gBAAgB,CAAC;EACpF;CAGH,MAAM,gCAAgC,MAAM;CAC5C,MAAM,iCAAiC,MAAM;CAC7C,IACE,CAAC,uBAAuB,8BAA8B,IACtD,CAAC,uBAAuB,+BAA+B,IACvD,gCAAgC,kCAChC,uBAAuB,iCACvB,uBAAuB,gCAEvB,OAAO;EACL,MAAM;EACN,WAAW,gBAAgB,8BAA8B;GACvD,+BAA+B,uBAAuB,8BAA8B,GAChF,gCACA;GACJ,gCAAgC,uBAAuB,+BAA+B,GAClF,iCACA;GACJ;GACD,CAAC;EACH;CAGH,OAAO;EACL,MAAM;EACN,cAAc;GACZ;GACA;GACD;EACF;;AAGH,SAAS,wCACP,6BACA,cACS;CACT,IAAI,gCAAgC,KAAA,GAAW,OAAO;CACtD,OACE,+BAA+B,aAAa,iCAC5C,+BAA+B,aAAa;;AAIhD,SAAS,eAAe,IAAiD;CACvE,MAAM,SAAS,gBAAgB,gBAAgB,GAAG;CAClD,IAAI,WAAW,MAAM,OAAO;CAC5B,OAAO,OAAO;;AAGhB,SAAS,mBAAmB,OAAgB,QAAoD;CAC9F,OACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,OAAO,wBACvB,oBAAoB,KAAK,MAAM;;AAInC,SAAS,mBACP,OACA,QACA,OAC8D;CAC9D,IAAI,CAAC,gBAAgB,MAAM,EACzB,OAAO,YAAY,wBAAwB,MAAM,EAAE,OAAO,CAAC;CAG7D,MAAM,KAAK,MAAM;CACjB,IAAI,OAAO,OAAO,YAAY,GAAG,WAAW,GAC1C,OAAO,YAAY,yBAAyB,MAAM,EAAE,OAAO,CAAC;CAE9D,IAAI,GAAG,SAAS,OAAO,kBACrB,OAAO,YAAY,0BAA0B,IAAI;EAC/C,QAAQ,6BAA6B,GAAG;EACxC,kBAAkB,OAAO;EAC1B,CAAC;CAGJ,MAAM,OAAO,eAAe,GAAG;CAC/B,IAAI,SAAS,MACX,OAAO,YAAY,sBAAsB,IAAI,EAAE,QAAQ,6BAA6B,GAAG,EAAE,CAAC;CAG5F,MAAM,UAAU,MAAM;CACtB,IAAI,YAAY,WACd,OAAO,YAAY,sBAAsB,IAAI,EAAE,SAAS,CAAC;CAE3D,IAAI,YAAY,UACd,OAAO,YAAY,wBAAwB,IAAI,EAAE,OAAO,WAAW,CAAC;CAGtE,MAAM,cAAc,MAAM;CAC1B,IAAI,CAAC,mBAAmB,aAAa,OAAO,EAC1C,OAAO,YAAY,2BAA2B,IAAI,EAChD,sBAAsB,OAAO,sBAC9B,CAAC;CAGJ,MAAM,kBAAkB,MAAM;CAC9B,IAAI,OAAO,oBAAoB,YAAY,gBAAgB,WAAW,GACpE,OAAO,YAAY,kCAAkC,IAAI,EAAE,OAAO,mBAAmB,CAAC;CAExF,IAAI,gBAAgB,SAAS,OAAO,0BAClC,OAAO,YAAY,mCAAmC,IAAI;EACxD,0BAA0B,OAAO;EACjC,qBAAqB,6BAA6B,gBAAgB;EACnE,CAAC;CAGJ,MAAM,wBAAwB,mCAAmC,MAAM,sBAAsB;CAC7F,IAAI,0BAA0B,MAC5B,OAAO,YAAY,uCAAuC,IAAI,EAC5D,OAAO,yBACR,CAAC;CAGJ,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACD;;AAGH,SAAgB,6BAA6B,OAAuB;CAClE,OAAO,QAAQ,MAAM;;AAGvB,SAAgB,0BACd,OACyB;CACzB,MAAM,eACJ,MAAM,gBACL;EACC,+BAA+B,MAAM;EACrC,gCAAgC,MAAM;EACvC;CAEH,OAAO;EACL,SAAS,2BAA2B,MAAM,QAAQ;EAClD,eAAe;EACf;EACA,eAAA;EACA,sBAAsB,MAAM;EAC7B;;AAGH,SAAgB,6BAA6B,OAA+C;CAC1F,OAAO,KAAK,UAAU,0BAA0B,MAAM,CAAC;;AAGzD,SAAgB,+BACd,WACA,UAA2C,EAAE,EACb;CAChC,MAAM,SAAS,WAAW,MAAM;CAChC,IAAI,CAAC,QAAQ,OAAO,EAAE,MAAM,UAAU;CAEtC,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,gBAAgB,eAAe,OAAO;CAC5C,IAAI,gBAAgB,OAAO,kBACzB,OAAO,eAAe,2BAA2B;EAC/C;EACA,kBAAkB,OAAO;EAC1B,CAAC;CAGJ,IAAI;CACJ,IAAI;EACF,UAAU,KAAK,MAAM,OAAO;SACtB;EACN,OAAO,eAAe,0BAA0B;;CAGlD,IAAI,CAAC,gBAAgB,QAAQ,EAC3B,OAAO,eAAe,2BAA2B,EAAE,OAAO,YAAY,CAAC;CAGzE,IAAI,QAAQ,kBAAA,GACV,OAAO,eAAe,oCAAoC,EACxD,eACE,OAAO,QAAQ,kBAAkB,YAAY,OAAO,QAAQ,kBAAkB,WAC1E,QAAQ,gBACR,MACP,CAAC;CAGJ,IAAI,QAAQ,kBAAA,WACV,OAAO,eAAe,mCAAmC,EACvD,eAAe,OAAO,QAAQ,kBAAkB,WAAW,QAAQ,gBAAgB,MACpF,CAAC;CAGJ,MAAM,uBAAuB,QAAQ;CACrC,IAAI,CAAC,uBAAuB,qBAAqB,EAC/C,OAAO,eAAe,uCAAuC,EAC3D,sBAAsB,MACvB,CAAC;CAGJ,MAAM,qBAAqB,kBAAkB,QAAQ,cAAc,qBAAqB;CACxF,IAAI,mBAAmB,SAAS,YAC9B,OAAO;EAAE,MAAM;EAAY,WAAW,mBAAmB;EAAW;CAEtE,MAAM,EAAE,iBAAiB;CACzB,IAAI,CAAC,wCAAwC,QAAQ,6BAA6B,aAAa,EAC7F,OAAO,eAAe,wCAAwC;EAC5D,6BAA6B,QAAQ,+BAA+B;EACpE,+BAA+B,aAAa;EAC5C,gCAAgC,aAAa;EAC7C;EACD,CAAC;CAGJ,MAAM,eAAe,QAAQ;CAC7B,IAAI,CAAC,MAAM,QAAQ,aAAa,EAC9B,OAAO,eAAe,2BAA2B,EAAE,OAAO,WAAW,CAAC;CAExE,IAAI,aAAa,SAAS,OAAO,eAC/B,OAAO,eAAe,6BAA6B;EACjD,YAAY,aAAa;EACzB,eAAe,OAAO;EACvB,CAAC;CAGJ,MAAM,UAAsC,EAAE;CAC9C,MAAM,kBAAuD,EAAE;CAC/D,IAAI,kBAAiC;CAErC,KAAK,IAAI,QAAQ,GAAG,QAAQ,aAAa,QAAQ,SAAS;EACxD,MAAM,QAAQ,aAAa;EAC3B,IAAI,gBAAgB,MAAM,IAAI,OAAO,MAAM,OAAO,UAAU;GAK1D,IAAI,oBAAoB,QAAQ,MAAM,MAAM,iBAC1C,OAAO,eAAe,kCAAkC;IACtD,aAAa,6BAA6B,MAAM,GAAG;IACnD,qBAAqB,6BAA6B,gBAAgB;IACnE,CAAC;GAEJ,kBAAkB,MAAM;;EAG1B,MAAM,cAAc,mBAAmB,OAAO,QAAQ,MAAM;EAC5D,IAAI,UAAU,aACZ,gBAAgB,KAAK,YAAY;OAEjC,QAAQ,KAAK,YAAY;;CAI7B,OAAO;EACL;EACA,MAAM;EACN,UAAU;GACR;GACA,eAAe;GACf;GACA,eAAA;GACA;GACD;EACD,iBAAiB;GACf,MAAM;GACN,SAAS;GACT,MAAM;GACP;EACF"}
+{"version":3,"file":"client-reuse-manifest.js","names":[],"sources":["../../src/server/client-reuse-manifest.ts"],"sourcesContent":["import {\n  parseArtifactCompatibilityEnvelope,\n  type ArtifactCompatibilityEnvelope,\n} from \"./artifact-compatibility.js\";\nimport { AppElementsWire } from \"./app-elements-wire.js\";\nimport { fnv1a64 } from \"../utils/hash.js\";\nimport { isUnknownRecord } from \"../utils/record.js\";\n\nexport const CLIENT_REUSE_MANIFEST_SCHEMA_VERSION = 1;\nexport type ClientReuseManifestSchemaVersion = 1;\n\nexport const CLIENT_REUSE_MANIFEST_HASH_ALGORITHM = \"fnv1a64\";\nexport type ClientReuseManifestHashAlgorithm = typeof CLIENT_REUSE_MANIFEST_HASH_ALGORITHM;\n\ntype ClientReuseManifestLimits = Readonly<{\n  maxEntryCount: number;\n  maxEntryIdLength: number;\n  maxManifestBytes: number;\n  maxPayloadHashLength: number;\n  maxVariantCacheKeyLength: number;\n}>;\n\nexport const DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS = {\n  maxEntryCount: 64,\n  maxEntryIdLength: 512,\n  maxManifestBytes: 4096,\n  maxPayloadHashLength: 16,\n  maxVariantCacheKeyLength: 256,\n} satisfies ClientReuseManifestLimits;\n\n// Producer cap for normal browser manifests. The parser accepts a larger\n// hostile-input envelope, but browser-produced manifests should stay within\n// the server skip planner's verification budget.\nexport const CLIENT_REUSE_MANIFEST_SKIP_VERIFICATION_ENTRY_BUDGET = 8;\n\nexport type ClientReuseManifestEntryKind = \"layout\" | \"page\" | \"route\" | \"slot\" | \"template\";\ntype ClientReuseManifestEntryPrivacy = \"private\" | \"public\";\n\nexport type ClientReuseManifestReplayWindow = Readonly<{\n  validFromVisibleCommitVersion: number;\n  validUntilVisibleCommitVersion: number;\n}>;\n\nexport type ClientReuseManifestEntry = Readonly<{\n  artifactCompatibility: ArtifactCompatibilityEnvelope;\n  id: string;\n  kind: ClientReuseManifestEntryKind;\n  payloadHash: string;\n  privacy: \"public\";\n  variantCacheKey: string;\n}>;\n\ntype ClientReuseManifestWireEntry = Readonly<{\n  artifactCompatibility: ArtifactCompatibilityEnvelope;\n  id: string;\n  payloadHash: string;\n  privacy: ClientReuseManifestEntryPrivacy;\n  variantCacheKey: string;\n}>;\n\nexport type ClientReuseManifest = Readonly<{\n  entries: readonly ClientReuseManifestEntry[];\n  hashAlgorithm: ClientReuseManifestHashAlgorithm;\n  replayWindow: ClientReuseManifestReplayWindow;\n  schemaVersion: ClientReuseManifestSchemaVersion;\n  visibleCommitVersion: number;\n}>;\n\n// Internal: createClientReuseManifest returns wire shape while parsing decides\n// which client-declared entries can participate in future reuse.\ntype ClientReuseManifestWire = Readonly<{\n  entries: readonly ClientReuseManifestWireEntry[];\n  hashAlgorithm: ClientReuseManifestHashAlgorithm;\n  replayWindow: ClientReuseManifestReplayWindow;\n  schemaVersion: ClientReuseManifestSchemaVersion;\n  visibleCommitVersion: number;\n}>;\n\ntype CreateClientReuseManifestInput = Readonly<{\n  entries: readonly ClientReuseManifestWireEntry[];\n  replayWindow?: ClientReuseManifestReplayWindow;\n  visibleCommitVersion: number;\n}>;\n\nexport type ClientReuseManifestRejectionCode =\n  | \"SKIP_CACHE_ARTIFACT_COMPATIBILITY_INCOMPATIBLE\"\n  | \"SKIP_CACHE_ARTIFACT_COMPATIBILITY_UNKNOWN\"\n  | \"SKIP_CACHE_ARTIFACT_PROOF_MISMATCH\"\n  | \"SKIP_CACHE_ENTRY_ID_MISMATCH\"\n  | \"SKIP_CACHE_INVALIDATED\"\n  | \"SKIP_CACHE_INVALIDATION_UNKNOWN\"\n  | \"SKIP_CACHE_PAYLOAD_HASH_MISMATCH\"\n  | \"SKIP_CACHE_PAYLOAD_HASH_MISSING\"\n  | \"SKIP_CACHE_PROOF_MISSING\"\n  | \"SKIP_CACHE_PROOF_REJECTED\"\n  | \"SKIP_CACHE_REUSE_CLASS_UNSUPPORTED\"\n  | \"SKIP_CACHE_VARIANT_MISMATCH\"\n  // Forward declarations — emitted by the render-observation tracker in a\n  // later slice.  The planner never produces them, but the rejection code\n  // union must carry them so the tracker's entry rejection is assignable to\n  // ClientReuseManifestRejectionCode without a cast.\n  | \"SKIP_LAYOUT_CACHE_LIFE_OBSERVED\"\n  | \"SKIP_LAYOUT_CACHE_TAGS_OBSERVED\"\n  | \"SKIP_LAYOUT_CACHEABLE_FETCHES_OBSERVED\"\n  | \"SKIP_LAYOUT_DYNAMIC_FETCHES_OBSERVED\"\n  | \"SKIP_LAYOUT_PARAMS_OBSERVED\"\n  | \"SKIP_LAYOUT_PARAMS_OBSERVATION_INCOMPLETE\"\n  | \"SKIP_LAYOUT_PARAMS_PRESENT\"\n  | \"SKIP_LAYOUT_REVALIDATE_PRESENT\"\n  | \"SKIP_LAYOUT_REQUEST_API_OBSERVED\"\n  | \"SKIP_LAYOUT_UNSTABLE_CACHE_OBSERVED\"\n  | \"SKIP_ARTIFACT_COMPATIBILITY_INVALID\"\n  | \"SKIP_ENTRY_COUNT_EXCEEDED\"\n  | \"SKIP_VERIFICATION_BUDGET_EXCEEDED\"\n  | \"SKIP_ENTRY_HASH_INVALID\"\n  | \"SKIP_ENTRY_ID_INVALID\"\n  | \"SKIP_ENTRY_ID_TOO_LONG\"\n  | \"SKIP_ENTRY_MALFORMED\"\n  | \"SKIP_ENTRY_ORDER_NON_CANONICAL\"\n  | \"SKIP_HASH_ALGORITHM_UNSUPPORTED\"\n  | \"SKIP_MANIFEST_MALFORMED\"\n  | \"SKIP_MANIFEST_SCHEMA_UNSUPPORTED\"\n  | \"SKIP_MANIFEST_TOO_LARGE\"\n  | \"SKIP_PRIVATE_ENTRY\"\n  | \"SKIP_REPLAY_WINDOW_INVALID\"\n  | \"SKIP_UNKNOWN_ENTRY\"\n  | \"SKIP_VARIANT_CACHE_KEY_INVALID\"\n  | \"SKIP_VARIANT_CACHE_KEY_TOO_LONG\"\n  | \"SKIP_VISIBLE_COMMIT_VERSION_INVALID\"\n  | \"SKIP_VISIBLE_COMMIT_VERSION_MISMATCH\";\n\nexport type ClientReuseManifestTraceFieldValue =\n  | string\n  | number\n  | boolean\n  | null\n  | readonly string[];\n\nexport type ClientReuseManifestTraceFields = Readonly<\n  Record<string, ClientReuseManifestTraceFieldValue>\n>;\n\nexport type ClientReuseManifestRejection = Readonly<{\n  code: ClientReuseManifestRejectionCode;\n  fields: ClientReuseManifestTraceFields;\n}>;\n\nexport type ClientReuseManifestEntryRejection = ClientReuseManifestRejection &\n  Readonly<{\n    entryId: string | null;\n  }>;\n\nexport type ClientReuseManifestSkipDisposition =\n  | Readonly<{\n      code: \"SKIP_MODEL_DISABLED\";\n      enabled: false;\n      mode: \"renderAndSend\";\n    }>\n  | Readonly<{\n      code: \"SKIP_STATIC_LAYOUT_VERIFIED\";\n      enabled: true;\n      mode: \"skipStaticLayout\";\n      skippedEntryIds: readonly string[];\n    }>;\n\nexport type ClientReuseManifestParseResult =\n  | Readonly<{ kind: \"absent\" }>\n  | Readonly<{ kind: \"rejected\"; rejection: ClientReuseManifestRejection }>\n  | Readonly<{\n      entryRejections: readonly ClientReuseManifestEntryRejection[];\n      kind: \"parsed\";\n      manifest: ClientReuseManifest;\n      skipDisposition: ClientReuseManifestSkipDisposition;\n    }>;\n\ntype ParseClientReuseManifestOptions = Readonly<{\n  currentVisibleCommitVersion?: number;\n  limits?: ClientReuseManifestLimits;\n}>;\n\nconst HASH_DIGEST_PATTERN = /^[0-9a-z]+$/;\nconst textEncoder = new TextEncoder();\n\ntype ParseReplayWindowResult =\n  | Readonly<{ kind: \"parsed\"; replayWindow: ClientReuseManifestReplayWindow }>\n  | Readonly<{ kind: \"rejected\"; rejection: ClientReuseManifestRejection }>;\n\nfunction createRejection(\n  code: ClientReuseManifestRejectionCode,\n  fields: ClientReuseManifestTraceFields = {},\n): ClientReuseManifestRejection {\n  return { code, fields };\n}\n\nfunction rejectManifest(\n  code: ClientReuseManifestRejectionCode,\n  fields: ClientReuseManifestTraceFields = {},\n): ClientReuseManifestParseResult {\n  return { kind: \"rejected\", rejection: createRejection(code, fields) };\n}\n\nfunction rejectEntry(\n  code: ClientReuseManifestRejectionCode,\n  entryId: string | null,\n  fields: ClientReuseManifestTraceFields = {},\n): ClientReuseManifestEntryRejection {\n  return { code, entryId, fields };\n}\n\nfunction compareManifestEntries(\n  left: Pick<ClientReuseManifestWireEntry, \"id\">,\n  right: Pick<ClientReuseManifestWireEntry, \"id\">,\n): number {\n  if (left.id < right.id) return -1;\n  if (left.id > right.id) return 1;\n  return 0;\n}\n\nfunction createCanonicalWireEntries(\n  entries: readonly ClientReuseManifestWireEntry[],\n): ClientReuseManifestWireEntry[] {\n  const entriesById = new Map<string, ClientReuseManifestWireEntry>();\n  for (const entry of entries) {\n    if (!entriesById.has(entry.id)) {\n      entriesById.set(entry.id, entry);\n    }\n  }\n\n  return Array.from(entriesById.values()).sort(compareManifestEntries);\n}\n\n// Manifest byte budgets are enforced over UTF-8 encoded header values.\nfunction countUtf8Bytes(input: string): number {\n  return textEncoder.encode(input).length;\n}\n\nfunction isVisibleCommitVersion(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\nfunction parseReplayWindow(value: unknown, visibleCommitVersion: number): ParseReplayWindowResult {\n  if (!isUnknownRecord(value)) {\n    return {\n      kind: \"rejected\",\n      rejection: createRejection(\"SKIP_REPLAY_WINDOW_INVALID\", { field: \"replayWindow\" }),\n    };\n  }\n\n  const validFromVisibleCommitVersion = value.validFromVisibleCommitVersion;\n  const validUntilVisibleCommitVersion = value.validUntilVisibleCommitVersion;\n  if (\n    !isVisibleCommitVersion(validFromVisibleCommitVersion) ||\n    !isVisibleCommitVersion(validUntilVisibleCommitVersion) ||\n    validFromVisibleCommitVersion > validUntilVisibleCommitVersion ||\n    visibleCommitVersion < validFromVisibleCommitVersion ||\n    visibleCommitVersion > validUntilVisibleCommitVersion\n  ) {\n    return {\n      kind: \"rejected\",\n      rejection: createRejection(\"SKIP_REPLAY_WINDOW_INVALID\", {\n        validFromVisibleCommitVersion: isVisibleCommitVersion(validFromVisibleCommitVersion)\n          ? validFromVisibleCommitVersion\n          : null,\n        validUntilVisibleCommitVersion: isVisibleCommitVersion(validUntilVisibleCommitVersion)\n          ? validUntilVisibleCommitVersion\n          : null,\n        visibleCommitVersion,\n      }),\n    };\n  }\n\n  return {\n    kind: \"parsed\",\n    replayWindow: {\n      validFromVisibleCommitVersion,\n      validUntilVisibleCommitVersion,\n    },\n  };\n}\n\nfunction currentCommitVersionMatchesReplayWindow(\n  currentVisibleCommitVersion: number | undefined,\n  replayWindow: ClientReuseManifestReplayWindow,\n): boolean {\n  if (currentVisibleCommitVersion === undefined) return true;\n  return (\n    currentVisibleCommitVersion >= replayWindow.validFromVisibleCommitVersion &&\n    currentVisibleCommitVersion <= replayWindow.validUntilVisibleCommitVersion\n  );\n}\n\nfunction parseEntryKind(id: string): ClientReuseManifestEntryKind | null {\n  const parsed = AppElementsWire.parseElementKey(id);\n  if (parsed === null) return null;\n  return parsed.kind;\n}\n\nfunction isValidPayloadHash(value: unknown, limits: ClientReuseManifestLimits): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.length > 0 &&\n    value.length <= limits.maxPayloadHashLength &&\n    HASH_DIGEST_PATTERN.test(value)\n  );\n}\n\nfunction parseManifestEntry(\n  value: unknown,\n  limits: ClientReuseManifestLimits,\n  index: number,\n): ClientReuseManifestEntry | ClientReuseManifestEntryRejection {\n  if (!isUnknownRecord(value)) {\n    return rejectEntry(\"SKIP_ENTRY_MALFORMED\", null, { index });\n  }\n\n  const id = value.id;\n  if (typeof id !== \"string\" || id.length === 0) {\n    return rejectEntry(\"SKIP_ENTRY_ID_INVALID\", null, { index });\n  }\n  if (id.length > limits.maxEntryIdLength) {\n    return rejectEntry(\"SKIP_ENTRY_ID_TOO_LONG\", id, {\n      idHash: createClientReusePayloadHash(id),\n      maxEntryIdLength: limits.maxEntryIdLength,\n    });\n  }\n\n  const kind = parseEntryKind(id);\n  if (kind === null) {\n    return rejectEntry(\"SKIP_UNKNOWN_ENTRY\", id, { idHash: createClientReusePayloadHash(id) });\n  }\n\n  const privacy = value.privacy;\n  if (privacy === \"private\") {\n    return rejectEntry(\"SKIP_PRIVATE_ENTRY\", id, { privacy });\n  }\n  if (privacy !== \"public\") {\n    return rejectEntry(\"SKIP_ENTRY_MALFORMED\", id, { field: \"privacy\" });\n  }\n\n  const payloadHash = value.payloadHash;\n  if (!isValidPayloadHash(payloadHash, limits)) {\n    return rejectEntry(\"SKIP_ENTRY_HASH_INVALID\", id, {\n      maxPayloadHashLength: limits.maxPayloadHashLength,\n    });\n  }\n\n  const variantCacheKey = value.variantCacheKey;\n  if (typeof variantCacheKey !== \"string\" || variantCacheKey.length === 0) {\n    return rejectEntry(\"SKIP_VARIANT_CACHE_KEY_INVALID\", id, { field: \"variantCacheKey\" });\n  }\n  if (variantCacheKey.length > limits.maxVariantCacheKeyLength) {\n    return rejectEntry(\"SKIP_VARIANT_CACHE_KEY_TOO_LONG\", id, {\n      maxVariantCacheKeyLength: limits.maxVariantCacheKeyLength,\n      variantCacheKeyHash: createClientReusePayloadHash(variantCacheKey),\n    });\n  }\n\n  const artifactCompatibility = parseArtifactCompatibilityEnvelope(value.artifactCompatibility);\n  if (artifactCompatibility === null) {\n    return rejectEntry(\"SKIP_ARTIFACT_COMPATIBILITY_INVALID\", id, {\n      field: \"artifactCompatibility\",\n    });\n  }\n\n  return {\n    artifactCompatibility,\n    id,\n    kind,\n    payloadHash,\n    privacy,\n    variantCacheKey,\n  };\n}\n\nexport function createClientReusePayloadHash(input: string): string {\n  return fnv1a64(input);\n}\n\nexport function createClientReuseManifest(\n  input: CreateClientReuseManifestInput,\n): ClientReuseManifestWire {\n  const replayWindow =\n    input.replayWindow ??\n    ({\n      validFromVisibleCommitVersion: input.visibleCommitVersion,\n      validUntilVisibleCommitVersion: input.visibleCommitVersion,\n    } satisfies ClientReuseManifestReplayWindow);\n\n  return {\n    entries: createCanonicalWireEntries(input.entries),\n    hashAlgorithm: CLIENT_REUSE_MANIFEST_HASH_ALGORITHM,\n    replayWindow,\n    schemaVersion: CLIENT_REUSE_MANIFEST_SCHEMA_VERSION,\n    visibleCommitVersion: input.visibleCommitVersion,\n  };\n}\n\nexport function serializeClientReuseManifest(input: CreateClientReuseManifestInput): string {\n  return JSON.stringify(createClientReuseManifest(input));\n}\n\nexport function parseClientReuseManifestHeader(\n  rawHeader: string | null | undefined,\n  options: ParseClientReuseManifestOptions = {},\n): ClientReuseManifestParseResult {\n  const header = rawHeader?.trim();\n  if (!header) return { kind: \"absent\" };\n\n  const limits = options.limits ?? DEFAULT_CLIENT_REUSE_MANIFEST_LIMITS;\n  const manifestBytes = countUtf8Bytes(header);\n  if (manifestBytes > limits.maxManifestBytes) {\n    return rejectManifest(\"SKIP_MANIFEST_TOO_LARGE\", {\n      manifestBytes,\n      maxManifestBytes: limits.maxManifestBytes,\n    });\n  }\n\n  let decoded: unknown;\n  try {\n    decoded = JSON.parse(header);\n  } catch {\n    return rejectManifest(\"SKIP_MANIFEST_MALFORMED\");\n  }\n\n  if (!isUnknownRecord(decoded)) {\n    return rejectManifest(\"SKIP_MANIFEST_MALFORMED\", { field: \"manifest\" });\n  }\n\n  if (decoded.schemaVersion !== CLIENT_REUSE_MANIFEST_SCHEMA_VERSION) {\n    return rejectManifest(\"SKIP_MANIFEST_SCHEMA_UNSUPPORTED\", {\n      schemaVersion:\n        typeof decoded.schemaVersion === \"number\" || typeof decoded.schemaVersion === \"string\"\n          ? decoded.schemaVersion\n          : null,\n    });\n  }\n\n  if (decoded.hashAlgorithm !== CLIENT_REUSE_MANIFEST_HASH_ALGORITHM) {\n    return rejectManifest(\"SKIP_HASH_ALGORITHM_UNSUPPORTED\", {\n      hashAlgorithm: typeof decoded.hashAlgorithm === \"string\" ? decoded.hashAlgorithm : null,\n    });\n  }\n\n  const visibleCommitVersion = decoded.visibleCommitVersion;\n  if (!isVisibleCommitVersion(visibleCommitVersion)) {\n    return rejectManifest(\"SKIP_VISIBLE_COMMIT_VERSION_INVALID\", {\n      visibleCommitVersion: null,\n    });\n  }\n\n  const replayWindowResult = parseReplayWindow(decoded.replayWindow, visibleCommitVersion);\n  if (replayWindowResult.kind === \"rejected\") {\n    return { kind: \"rejected\", rejection: replayWindowResult.rejection };\n  }\n  const { replayWindow } = replayWindowResult;\n  if (!currentCommitVersionMatchesReplayWindow(options.currentVisibleCommitVersion, replayWindow)) {\n    return rejectManifest(\"SKIP_VISIBLE_COMMIT_VERSION_MISMATCH\", {\n      currentVisibleCommitVersion: options.currentVisibleCommitVersion ?? null,\n      validFromVisibleCommitVersion: replayWindow.validFromVisibleCommitVersion,\n      validUntilVisibleCommitVersion: replayWindow.validUntilVisibleCommitVersion,\n      visibleCommitVersion,\n    });\n  }\n\n  const entriesValue = decoded.entries;\n  if (!Array.isArray(entriesValue)) {\n    return rejectManifest(\"SKIP_MANIFEST_MALFORMED\", { field: \"entries\" });\n  }\n  if (entriesValue.length > limits.maxEntryCount) {\n    return rejectManifest(\"SKIP_ENTRY_COUNT_EXCEEDED\", {\n      entryCount: entriesValue.length,\n      maxEntryCount: limits.maxEntryCount,\n    });\n  }\n\n  const entries: ClientReuseManifestEntry[] = [];\n  const entryRejections: ClientReuseManifestEntryRejection[] = [];\n  let previousEntryId: string | null = null;\n\n  for (let index = 0; index < entriesValue.length; index++) {\n    const value = entriesValue[index];\n    if (isUnknownRecord(value) && typeof value.id === \"string\") {\n      // Canonical ordering is enforced over entries with string IDs. Malformed\n      // entries cannot advance previousEntryId, so interleaving them cannot hide\n      // an ordering violation between valid checkpoints. <= rejects both\n      // out-of-order and duplicate IDs.\n      if (previousEntryId !== null && value.id <= previousEntryId) {\n        return rejectManifest(\"SKIP_ENTRY_ORDER_NON_CANONICAL\", {\n          entryIdHash: createClientReusePayloadHash(value.id),\n          previousEntryIdHash: createClientReusePayloadHash(previousEntryId),\n        });\n      }\n      previousEntryId = value.id;\n    }\n\n    const parsedEntry = parseManifestEntry(value, limits, index);\n    if (\"code\" in parsedEntry) {\n      entryRejections.push(parsedEntry);\n    } else {\n      entries.push(parsedEntry);\n    }\n  }\n\n  return {\n    entryRejections,\n    kind: \"parsed\",\n    manifest: {\n      entries,\n      hashAlgorithm: CLIENT_REUSE_MANIFEST_HASH_ALGORITHM,\n      replayWindow,\n      schemaVersion: CLIENT_REUSE_MANIFEST_SCHEMA_VERSION,\n      visibleCommitVersion,\n    },\n    skipDisposition: {\n      code: \"SKIP_MODEL_DISABLED\",\n      enabled: false,\n      mode: \"renderAndSend\",\n    },\n  };\n}\n"],"mappings":";;;;;AAQA,MAAa,uCAAuC;AAGpD,MAAa,uCAAuC;AAWpD,MAAa,uCAAuC;CAClD,eAAe;CACf,kBAAkB;CAClB,kBAAkB;CAClB,sBAAsB;CACtB,0BAA0B;CAC3B;AAKD,MAAa,uDAAuD;AAmJpE,MAAM,sBAAsB;AAC5B,MAAM,cAAc,IAAI,aAAa;AAMrC,SAAS,gBACP,MACA,SAAyC,EAAE,EACb;CAC9B,OAAO;EAAE;EAAM;EAAQ;;AAGzB,SAAS,eACP,MACA,SAAyC,EAAE,EACX;CAChC,OAAO;EAAE,MAAM;EAAY,WAAW,gBAAgB,MAAM,OAAO;EAAE;;AAGvE,SAAS,YACP,MACA,SACA,SAAyC,EAAE,EACR;CACnC,OAAO;EAAE;EAAM;EAAS;EAAQ;;AAGlC,SAAS,uBACP,MACA,OACQ;CACR,IAAI,KAAK,KAAK,MAAM,IAAI,OAAO;CAC/B,IAAI,KAAK,KAAK,MAAM,IAAI,OAAO;CAC/B,OAAO;;AAGT,SAAS,2BACP,SACgC;CAChC,MAAM,8BAAc,IAAI,KAA2C;CACnE,KAAK,MAAM,SAAS,SAClB,IAAI,CAAC,YAAY,IAAI,MAAM,GAAG,EAC5B,YAAY,IAAI,MAAM,IAAI,MAAM;CAIpC,OAAO,MAAM,KAAK,YAAY,QAAQ,CAAC,CAAC,KAAK,uBAAuB;;AAItE,SAAS,eAAe,OAAuB;CAC7C,OAAO,YAAY,OAAO,MAAM,CAAC;;AAGnC,SAAS,uBAAuB,OAAiC;CAC/D,OAAO,OAAO,UAAU,YAAY,OAAO,cAAc,MAAM,IAAI,SAAS;;AAG9E,SAAS,kBAAkB,OAAgB,sBAAuD;CAChG,IAAI,CAAC,gBAAgB,MAAM,EACzB,OAAO;EACL,MAAM;EACN,WAAW,gBAAgB,8BAA8B,EAAE,OAAO,gBAAgB,CAAC;EACpF;CAGH,MAAM,gCAAgC,MAAM;CAC5C,MAAM,iCAAiC,MAAM;CAC7C,IACE,CAAC,uBAAuB,8BAA8B,IACtD,CAAC,uBAAuB,+BAA+B,IACvD,gCAAgC,kCAChC,uBAAuB,iCACvB,uBAAuB,gCAEvB,OAAO;EACL,MAAM;EACN,WAAW,gBAAgB,8BAA8B;GACvD,+BAA+B,uBAAuB,8BAA8B,GAChF,gCACA;GACJ,gCAAgC,uBAAuB,+BAA+B,GAClF,iCACA;GACJ;GACD,CAAC;EACH;CAGH,OAAO;EACL,MAAM;EACN,cAAc;GACZ;GACA;GACD;EACF;;AAGH,SAAS,wCACP,6BACA,cACS;CACT,IAAI,gCAAgC,KAAA,GAAW,OAAO;CACtD,OACE,+BAA+B,aAAa,iCAC5C,+BAA+B,aAAa;;AAIhD,SAAS,eAAe,IAAiD;CACvE,MAAM,SAAS,gBAAgB,gBAAgB,GAAG;CAClD,IAAI,WAAW,MAAM,OAAO;CAC5B,OAAO,OAAO;;AAGhB,SAAS,mBAAmB,OAAgB,QAAoD;CAC9F,OACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,OAAO,wBACvB,oBAAoB,KAAK,MAAM;;AAInC,SAAS,mBACP,OACA,QACA,OAC8D;CAC9D,IAAI,CAAC,gBAAgB,MAAM,EACzB,OAAO,YAAY,wBAAwB,MAAM,EAAE,OAAO,CAAC;CAG7D,MAAM,KAAK,MAAM;CACjB,IAAI,OAAO,OAAO,YAAY,GAAG,WAAW,GAC1C,OAAO,YAAY,yBAAyB,MAAM,EAAE,OAAO,CAAC;CAE9D,IAAI,GAAG,SAAS,OAAO,kBACrB,OAAO,YAAY,0BAA0B,IAAI;EAC/C,QAAQ,6BAA6B,GAAG;EACxC,kBAAkB,OAAO;EAC1B,CAAC;CAGJ,MAAM,OAAO,eAAe,GAAG;CAC/B,IAAI,SAAS,MACX,OAAO,YAAY,sBAAsB,IAAI,EAAE,QAAQ,6BAA6B,GAAG,EAAE,CAAC;CAG5F,MAAM,UAAU,MAAM;CACtB,IAAI,YAAY,WACd,OAAO,YAAY,sBAAsB,IAAI,EAAE,SAAS,CAAC;CAE3D,IAAI,YAAY,UACd,OAAO,YAAY,wBAAwB,IAAI,EAAE,OAAO,WAAW,CAAC;CAGtE,MAAM,cAAc,MAAM;CAC1B,IAAI,CAAC,mBAAmB,aAAa,OAAO,EAC1C,OAAO,YAAY,2BAA2B,IAAI,EAChD,sBAAsB,OAAO,sBAC9B,CAAC;CAGJ,MAAM,kBAAkB,MAAM;CAC9B,IAAI,OAAO,oBAAoB,YAAY,gBAAgB,WAAW,GACpE,OAAO,YAAY,kCAAkC,IAAI,EAAE,OAAO,mBAAmB,CAAC;CAExF,IAAI,gBAAgB,SAAS,OAAO,0BAClC,OAAO,YAAY,mCAAmC,IAAI;EACxD,0BAA0B,OAAO;EACjC,qBAAqB,6BAA6B,gBAAgB;EACnE,CAAC;CAGJ,MAAM,wBAAwB,mCAAmC,MAAM,sBAAsB;CAC7F,IAAI,0BAA0B,MAC5B,OAAO,YAAY,uCAAuC,IAAI,EAC5D,OAAO,yBACR,CAAC;CAGJ,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACD;;AAGH,SAAgB,6BAA6B,OAAuB;CAClE,OAAO,QAAQ,MAAM;;AAGvB,SAAgB,0BACd,OACyB;CACzB,MAAM,eACJ,MAAM,gBACL;EACC,+BAA+B,MAAM;EACrC,gCAAgC,MAAM;EACvC;CAEH,OAAO;EACL,SAAS,2BAA2B,MAAM,QAAQ;EAClD,eAAe;EACf;EACA,eAAA;EACA,sBAAsB,MAAM;EAC7B;;AAGH,SAAgB,6BAA6B,OAA+C;CAC1F,OAAO,KAAK,UAAU,0BAA0B,MAAM,CAAC;;AAGzD,SAAgB,+BACd,WACA,UAA2C,EAAE,EACb;CAChC,MAAM,SAAS,WAAW,MAAM;CAChC,IAAI,CAAC,QAAQ,OAAO,EAAE,MAAM,UAAU;CAEtC,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,gBAAgB,eAAe,OAAO;CAC5C,IAAI,gBAAgB,OAAO,kBACzB,OAAO,eAAe,2BAA2B;EAC/C;EACA,kBAAkB,OAAO;EAC1B,CAAC;CAGJ,IAAI;CACJ,IAAI;EACF,UAAU,KAAK,MAAM,OAAO;SACtB;EACN,OAAO,eAAe,0BAA0B;;CAGlD,IAAI,CAAC,gBAAgB,QAAQ,EAC3B,OAAO,eAAe,2BAA2B,EAAE,OAAO,YAAY,CAAC;CAGzE,IAAI,QAAQ,kBAAA,GACV,OAAO,eAAe,oCAAoC,EACxD,eACE,OAAO,QAAQ,kBAAkB,YAAY,OAAO,QAAQ,kBAAkB,WAC1E,QAAQ,gBACR,MACP,CAAC;CAGJ,IAAI,QAAQ,kBAAA,WACV,OAAO,eAAe,mCAAmC,EACvD,eAAe,OAAO,QAAQ,kBAAkB,WAAW,QAAQ,gBAAgB,MACpF,CAAC;CAGJ,MAAM,uBAAuB,QAAQ;CACrC,IAAI,CAAC,uBAAuB,qBAAqB,EAC/C,OAAO,eAAe,uCAAuC,EAC3D,sBAAsB,MACvB,CAAC;CAGJ,MAAM,qBAAqB,kBAAkB,QAAQ,cAAc,qBAAqB;CACxF,IAAI,mBAAmB,SAAS,YAC9B,OAAO;EAAE,MAAM;EAAY,WAAW,mBAAmB;EAAW;CAEtE,MAAM,EAAE,iBAAiB;CACzB,IAAI,CAAC,wCAAwC,QAAQ,6BAA6B,aAAa,EAC7F,OAAO,eAAe,wCAAwC;EAC5D,6BAA6B,QAAQ,+BAA+B;EACpE,+BAA+B,aAAa;EAC5C,gCAAgC,aAAa;EAC7C;EACD,CAAC;CAGJ,MAAM,eAAe,QAAQ;CAC7B,IAAI,CAAC,MAAM,QAAQ,aAAa,EAC9B,OAAO,eAAe,2BAA2B,EAAE,OAAO,WAAW,CAAC;CAExE,IAAI,aAAa,SAAS,OAAO,eAC/B,OAAO,eAAe,6BAA6B;EACjD,YAAY,aAAa;EACzB,eAAe,OAAO;EACvB,CAAC;CAGJ,MAAM,UAAsC,EAAE;CAC9C,MAAM,kBAAuD,EAAE;CAC/D,IAAI,kBAAiC;CAErC,KAAK,IAAI,QAAQ,GAAG,QAAQ,aAAa,QAAQ,SAAS;EACxD,MAAM,QAAQ,aAAa;EAC3B,IAAI,gBAAgB,MAAM,IAAI,OAAO,MAAM,OAAO,UAAU;GAK1D,IAAI,oBAAoB,QAAQ,MAAM,MAAM,iBAC1C,OAAO,eAAe,kCAAkC;IACtD,aAAa,6BAA6B,MAAM,GAAG;IACnD,qBAAqB,6BAA6B,gBAAgB;IACnE,CAAC;GAEJ,kBAAkB,MAAM;;EAG1B,MAAM,cAAc,mBAAmB,OAAO,QAAQ,MAAM;EAC5D,IAAI,UAAU,aACZ,gBAAgB,KAAK,YAAY;OAEjC,QAAQ,KAAK,YAAY;;CAI7B,OAAO;EACL;EACA,MAAM;EACN,UAAU;GACR;GACA,eAAe;GACf;GACA,eAAA;GACA;GACD;EACD,iBAAiB;GACf,MAAM;GACN,SAAS;GACT,MAAM;GACP;EACF"}

package/dist/server/client-trace-metadata.d.ts

@@ -0,0 +1,31 @@
+//#region src/server/client-trace-metadata.d.ts
+type ClientTraceDataEntry = {
+  key: string;
+  value: string;
+};
+/**
+ * Filter an entry list against the configured `clientTraceMetadata` allow-list.
+ * Returns `undefined` when the allow-list is unset so callers can skip
+ * rendering altogether.
+ */
+declare function filterClientTraceMetadata(entries: readonly ClientTraceDataEntry[], allowList: readonly string[] | undefined): ClientTraceDataEntry[] | undefined;
+/**
+ * Render the filtered entries as a sequence of self-closing `<meta>` tags.
+ * Names and values are HTML-attribute escaped. Returns an empty string when
+ * `entries` is empty or undefined so callers can append unconditionally.
+ */
+declare function renderClientTraceMetadataTags(entries: readonly ClientTraceDataEntry[] | undefined): string;
+/**
+ * Convenience helper: read OTel propagation data, filter against the
+ * configured allow-list, and render the resulting `<meta>` tags. Returns an
+ * empty string when the allow-list is unset, OTel is not installed, or no
+ * matching keys were emitted by the propagator.
+ *
+ * Safe to call unconditionally on every SSR render — when nothing is
+ * configured/active this is a few `try/catch`-bounded operations and returns
+ * `""`.
+ */
+declare function getClientTraceMetadataHTML(allowList: readonly string[] | undefined): string;
+//#endregion
+export { ClientTraceDataEntry, filterClientTraceMetadata, getClientTraceMetadataHTML, renderClientTraceMetadataTags };
+//# sourceMappingURL=client-trace-metadata.d.ts.map

package/dist/server/client-trace-metadata.js

@@ -0,0 +1,83 @@
+import { escapeHtmlAttr } from "./html.js";
+//#region src/server/client-trace-metadata.ts
+/**
+* Client trace metadata renderer.
+*
+* When `experimental.clientTraceMetadata` is configured in `next.config`,
+* vinext emits `<meta name="..." content="...">` tags in the SSR HTML head
+* for each configured key. The values are sourced from the active
+* OpenTelemetry context via the registered propagator.
+*
+* This mirrors Next.js' implementation:
+*  - packages/next/src/server/lib/trace/utils.ts (getTracedMetadata)
+*  - packages/next/src/server/app-render/make-get-server-inserted-html.tsx (traceMetaTags)
+*
+* OpenTelemetry is an optional peer — we resolve `@opentelemetry/api` at
+* runtime and silently no-op when it is not installed. This matches user
+* expectations: apps that don't configure OTel get no meta tags, and apps
+* that do get the filtered subset they asked for in `clientTraceMetadata`.
+*/
+const carrierSetter = { set(carrier, key, value) {
+	if (typeof key !== "string" || typeof value !== "string") return;
+	carrier.push({
+		key,
+		value
+	});
+} };
+function getOpenTelemetryTraceData() {
+	let api;
+	try {
+		const req = globalThis.require;
+		if (typeof req === "function") api = req("@opentelemetry/api");
+	} catch {
+		return [];
+	}
+	if (!api) return [];
+	try {
+		const activeContext = api.context.active();
+		const entries = [];
+		api.propagation.inject(activeContext, entries, carrierSetter);
+		return entries;
+	} catch {
+		return [];
+	}
+}
+/**
+* Filter an entry list against the configured `clientTraceMetadata` allow-list.
+* Returns `undefined` when the allow-list is unset so callers can skip
+* rendering altogether.
+*/
+function filterClientTraceMetadata(entries, allowList) {
+	if (!allowList || allowList.length === 0) return void 0;
+	const allowSet = new Set(allowList);
+	return entries.filter(({ key }) => allowSet.has(key));
+}
+/**
+* Render the filtered entries as a sequence of self-closing `<meta>` tags.
+* Names and values are HTML-attribute escaped. Returns an empty string when
+* `entries` is empty or undefined so callers can append unconditionally.
+*/
+function renderClientTraceMetadataTags(entries) {
+	if (!entries || entries.length === 0) return "";
+	let html = "";
+	for (const { key, value } of entries) html += `<meta name="${escapeHtmlAttr(key)}" content="${escapeHtmlAttr(value)}"/>`;
+	return html;
+}
+/**
+* Convenience helper: read OTel propagation data, filter against the
+* configured allow-list, and render the resulting `<meta>` tags. Returns an
+* empty string when the allow-list is unset, OTel is not installed, or no
+* matching keys were emitted by the propagator.
+*
+* Safe to call unconditionally on every SSR render — when nothing is
+* configured/active this is a few `try/catch`-bounded operations and returns
+* `""`.
+*/
+function getClientTraceMetadataHTML(allowList) {
+	if (!allowList || allowList.length === 0) return "";
+	return renderClientTraceMetadataTags(filterClientTraceMetadata(getOpenTelemetryTraceData(), allowList));
+}
+//#endregion
+export { filterClientTraceMetadata, getClientTraceMetadataHTML, renderClientTraceMetadataTags };
+
+//# sourceMappingURL=client-trace-metadata.js.map

package/dist/server/client-trace-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-trace-metadata.js","names":[],"sources":["../../src/server/client-trace-metadata.ts"],"sourcesContent":["/**\n * Client trace metadata renderer.\n *\n * When `experimental.clientTraceMetadata` is configured in `next.config`,\n * vinext emits `<meta name=\"...\" content=\"...\">` tags in the SSR HTML head\n * for each configured key. The values are sourced from the active\n * OpenTelemetry context via the registered propagator.\n *\n * This mirrors Next.js' implementation:\n *  - packages/next/src/server/lib/trace/utils.ts (getTracedMetadata)\n *  - packages/next/src/server/app-render/make-get-server-inserted-html.tsx (traceMetaTags)\n *\n * OpenTelemetry is an optional peer — we resolve `@opentelemetry/api` at\n * runtime and silently no-op when it is not installed. This matches user\n * expectations: apps that don't configure OTel get no meta tags, and apps\n * that do get the filtered subset they asked for in `clientTraceMetadata`.\n */\nimport { escapeHtmlAttr } from \"./html.js\";\n\nexport type ClientTraceDataEntry = {\n  key: string;\n  value: string;\n};\n\ntype TextMapSetter = {\n  set(carrier: ClientTraceDataEntry[], key: string, value: string): void;\n};\n\nconst carrierSetter: TextMapSetter = {\n  set(carrier, key, value) {\n    if (typeof key !== \"string\" || typeof value !== \"string\") return;\n    carrier.push({ key, value });\n  },\n};\n\n/**\n * Pull entries off the active OpenTelemetry context via the registered\n * propagator. Returns an empty array when `@opentelemetry/api` is not\n * installed or when no propagator has been registered.\n *\n * The implementation mirrors Next.js's `NextTracerImpl.getTracePropagationData`:\n * we call `propagation.inject(activeContext, entries, setter)` and let the\n * setter push entries into our carrier array.\n */\ntype OpenTelemetryApi = {\n  context: { active(): unknown };\n  propagation: {\n    inject(context: unknown, carrier: ClientTraceDataEntry[], setter: TextMapSetter): void;\n  };\n};\n\nfunction getOpenTelemetryTraceData(): ClientTraceDataEntry[] {\n  let api: OpenTelemetryApi | undefined;\n  try {\n    // Use require() at runtime so `@opentelemetry/api` is an optional peer.\n    // Bundlers (Vite/esbuild) leave the `require` reference alone, so apps\n    // that don't install the package never hit this branch.\n    const req = (globalThis as { require?: (id: string) => unknown }).require;\n    if (typeof req === \"function\") {\n      api = req(\"@opentelemetry/api\") as OpenTelemetryApi;\n    }\n  } catch {\n    return [];\n  }\n\n  if (!api) return [];\n\n  try {\n    const activeContext = api.context.active();\n    const entries: ClientTraceDataEntry[] = [];\n    api.propagation.inject(activeContext, entries, carrierSetter);\n    return entries;\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Filter an entry list against the configured `clientTraceMetadata` allow-list.\n * Returns `undefined` when the allow-list is unset so callers can skip\n * rendering altogether.\n */\nexport function filterClientTraceMetadata(\n  entries: readonly ClientTraceDataEntry[],\n  allowList: readonly string[] | undefined,\n): ClientTraceDataEntry[] | undefined {\n  if (!allowList || allowList.length === 0) return undefined;\n  const allowSet = new Set(allowList);\n  return entries.filter(({ key }) => allowSet.has(key));\n}\n\n/**\n * Render the filtered entries as a sequence of self-closing `<meta>` tags.\n * Names and values are HTML-attribute escaped. Returns an empty string when\n * `entries` is empty or undefined so callers can append unconditionally.\n */\nexport function renderClientTraceMetadataTags(\n  entries: readonly ClientTraceDataEntry[] | undefined,\n): string {\n  if (!entries || entries.length === 0) return \"\";\n  let html = \"\";\n  for (const { key, value } of entries) {\n    html += `<meta name=\"${escapeHtmlAttr(key)}\" content=\"${escapeHtmlAttr(value)}\"/>`;\n  }\n  return html;\n}\n\n/**\n * Convenience helper: read OTel propagation data, filter against the\n * configured allow-list, and render the resulting `<meta>` tags. Returns an\n * empty string when the allow-list is unset, OTel is not installed, or no\n * matching keys were emitted by the propagator.\n *\n * Safe to call unconditionally on every SSR render — when nothing is\n * configured/active this is a few `try/catch`-bounded operations and returns\n * `\"\"`.\n */\nexport function getClientTraceMetadataHTML(allowList: readonly string[] | undefined): string {\n  if (!allowList || allowList.length === 0) return \"\";\n  const entries = getOpenTelemetryTraceData();\n  const filtered = filterClientTraceMetadata(entries, allowList);\n  return renderClientTraceMetadataTags(filtered);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA4BA,MAAM,gBAA+B,EACnC,IAAI,SAAS,KAAK,OAAO;CACvB,IAAI,OAAO,QAAQ,YAAY,OAAO,UAAU,UAAU;CAC1D,QAAQ,KAAK;EAAE;EAAK;EAAO,CAAC;GAE/B;AAkBD,SAAS,4BAAoD;CAC3D,IAAI;CACJ,IAAI;EAIF,MAAM,MAAO,WAAqD;EAClE,IAAI,OAAO,QAAQ,YACjB,MAAM,IAAI,qBAAqB;SAE3B;EACN,OAAO,EAAE;;CAGX,IAAI,CAAC,KAAK,OAAO,EAAE;CAEnB,IAAI;EACF,MAAM,gBAAgB,IAAI,QAAQ,QAAQ;EAC1C,MAAM,UAAkC,EAAE;EAC1C,IAAI,YAAY,OAAO,eAAe,SAAS,cAAc;EAC7D,OAAO;SACD;EACN,OAAO,EAAE;;;;;;;;AASb,SAAgB,0BACd,SACA,WACoC;CACpC,IAAI,CAAC,aAAa,UAAU,WAAW,GAAG,OAAO,KAAA;CACjD,MAAM,WAAW,IAAI,IAAI,UAAU;CACnC,OAAO,QAAQ,QAAQ,EAAE,UAAU,SAAS,IAAI,IAAI,CAAC;;;;;;;AAQvD,SAAgB,8BACd,SACQ;CACR,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO;CAC7C,IAAI,OAAO;CACX,KAAK,MAAM,EAAE,KAAK,WAAW,SAC3B,QAAQ,eAAe,eAAe,IAAI,CAAC,aAAa,eAAe,MAAM,CAAC;CAEhF,OAAO;;;;;;;;;;;;AAaT,SAAgB,2BAA2B,WAAkD;CAC3F,IAAI,CAAC,aAAa,UAAU,WAAW,GAAG,OAAO;CAGjD,OAAO,8BADU,0BADD,2BACkC,EAAE,UACP,CAAC"}

package/dist/server/cookie-utils.d.ts

@@ -0,0 +1,13 @@
+//#region src/server/cookie-utils.d.ts
+/**
+ * Parse the cookie name out of a serialised Set-Cookie line.
+ *
+ * Bounded by the first `;` so the attribute portion (e.g. `Path=/`) is never
+ * mistaken for part of the name when the value happens to contain another
+ * `=`. Returns null when the line is not parseable (defensive — callers keep
+ * unparseable entries verbatim so they don't drop user-supplied cookies).
+ */
+declare function getSetCookieName(cookie: string): string | null;
+//#endregion
+export { getSetCookieName };
+//# sourceMappingURL=cookie-utils.d.ts.map

package/dist/server/cookie-utils.js

@@ -0,0 +1,20 @@
+//#region src/server/cookie-utils.ts
+/**
+* Parse the cookie name out of a serialised Set-Cookie line.
+*
+* Bounded by the first `;` so the attribute portion (e.g. `Path=/`) is never
+* mistaken for part of the name when the value happens to contain another
+* `=`. Returns null when the line is not parseable (defensive — callers keep
+* unparseable entries verbatim so they don't drop user-supplied cookies).
+*/
+function getSetCookieName(cookie) {
+	const equalsIndex = cookie.indexOf("=");
+	if (equalsIndex <= 0) return null;
+	const semicolonIndex = cookie.indexOf(";");
+	const end = semicolonIndex === -1 ? equalsIndex : Math.min(equalsIndex, semicolonIndex);
+	return cookie.slice(0, end);
+}
+//#endregion
+export { getSetCookieName };
+
+//# sourceMappingURL=cookie-utils.js.map

package/dist/server/cookie-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-utils.js","names":[],"sources":["../../src/server/cookie-utils.ts"],"sourcesContent":["/**\n * Parse the cookie name out of a serialised Set-Cookie line.\n *\n * Bounded by the first `;` so the attribute portion (e.g. `Path=/`) is never\n * mistaken for part of the name when the value happens to contain another\n * `=`. Returns null when the line is not parseable (defensive — callers keep\n * unparseable entries verbatim so they don't drop user-supplied cookies).\n */\nexport function getSetCookieName(cookie: string): string | null {\n  const equalsIndex = cookie.indexOf(\"=\");\n  if (equalsIndex <= 0) {\n    return null;\n  }\n  const semicolonIndex = cookie.indexOf(\";\");\n  const end = semicolonIndex === -1 ? equalsIndex : Math.min(equalsIndex, semicolonIndex);\n  return cookie.slice(0, end);\n}\n"],"mappings":";;;;;;;;;AAQA,SAAgB,iBAAiB,QAA+B;CAC9D,MAAM,cAAc,OAAO,QAAQ,IAAI;CACvC,IAAI,eAAe,GACjB,OAAO;CAET,MAAM,iBAAiB,OAAO,QAAQ,IAAI;CAC1C,MAAM,MAAM,mBAAmB,KAAK,cAAc,KAAK,IAAI,aAAa,eAAe;CACvF,OAAO,OAAO,MAAM,GAAG,IAAI"}

package/dist/server/dev-server.d.ts

@@ -36,7 +36,14 @@ declare function parseCookieLocale(req: IncomingMessage, i18nConfig: NextI18nCon
  * 4. Render the component to HTML
  * 5. Wrap in _document shell and send response
  */
-declare function createSSRHandler(server: ViteDevServer, runner: ModuleImporter, routes: Route[], pagesDir: string, i18nConfig?: NextI18nConfig | null, fileMatcher?: ValidFileMatcher, basePath?: string, trailingSlash?: boolean, hasMiddleware?: boolean): (req: IncomingMessage, res: ServerResponse, url: string, /** Status code override — propagated from middleware rewrite status. */
+declare function createSSRHandler(server: ViteDevServer, runner: ModuleImporter, routes: Route[], pagesDir: string, i18nConfig?: NextI18nConfig | null, fileMatcher?: ValidFileMatcher, basePath?: string, trailingSlash?: boolean, hasMiddleware?: boolean,
+/**
+ * Allow-list of OpenTelemetry propagation keys to emit as `<meta>` tags
+ * in the SSR head. Sourced from `experimental.clientTraceMetadata` in
+ * `next.config`. When undefined or empty, no meta tags are emitted.
+ */
+
+clientTraceMetadata?: readonly string[]): (req: IncomingMessage, res: ServerResponse, url: string, /** Status code override — propagated from middleware rewrite status. */
 
 statusCode?: number,
 /**