what-server 0.8.4 → 0.10.0

package/dist/islands.min.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../src/islands.js"],
-  "sourcesContent": ["// What Framework - Islands Architecture\n// Each interactive piece of the page is an \"island\" \u2014 a self-contained\n// component that hydrates independently. The rest is static HTML.\n//\n// Features:\n//   - Multiple hydration modes (load, idle, visible, action, media, static)\n//   - Shared state across islands\n//   - Priority-based hydration queue\n//   - Progressive enhancement\n//\n// Modes:\n//   'static'  - No JS shipped. Pure HTML. (nav, footer, etc.)\n//   'idle'    - Hydrate when browser is idle (requestIdleCallback)\n//   'visible' - Hydrate when scrolled into view (IntersectionObserver)\n//   'load'    - Hydrate immediately on page load\n//   'media'   - Hydrate when media query matches (e.g., mobile-only)\n//   'action'  - Hydrate on first user interaction (click, focus, hover)\n\nimport { mount, hydrate, signal, batch } from 'what-core';\n\nconst islandRegistry = new Map();\nconst hydratedIslands = new Set();\nconst hydrationQueue = [];\nlet isProcessingQueue = false;\n\n// --- Shared Island State ---\n// Global reactive store that persists across islands and page navigations\n\nconst sharedStores = new Map();\n\nexport function createIslandStore(name, initialState) {\n  if (sharedStores.has(name)) {\n    return sharedStores.get(name);\n  }\n\n  const store = {};\n  const signals = {};\n\n  // Create signals for each key in initial state\n  for (const [key, value] of Object.entries(initialState)) {\n    signals[key] = signal(value);\n    Object.defineProperty(store, key, {\n      get: () => signals[key](),\n      set: (val) => signals[key].set(val),\n      enumerable: true,\n    });\n  }\n\n  // Methods to interact with store\n  store._signals = signals;\n  store._subscribe = (key, fn) => {\n    if (signals[key]) {\n      return signals[key].subscribe(fn);\n    }\n  };\n  store._batch = (fn) => batch(fn);\n  store._getSnapshot = () => {\n    const snapshot = {};\n    for (const [key, sig] of Object.entries(signals)) {\n      snapshot[key] = sig.peek();\n    }\n    return snapshot;\n  };\n  store._hydrate = (data) => {\n    batch(() => {\n      for (const [key, value] of Object.entries(data)) {\n        if (signals[key]) {\n          signals[key].set(value);\n        }\n      }\n    });\n  };\n\n  sharedStores.set(name, store);\n  return store;\n}\n\n// Get or create a shared store\nexport function useIslandStore(name, fallbackInitial = {}) {\n  if (sharedStores.has(name)) {\n    return sharedStores.get(name);\n  }\n  return createIslandStore(name, fallbackInitial);\n}\n\n// Serialize all shared stores for SSR\nexport function serializeIslandStores() {\n  const data = {};\n  for (const [name, store] of sharedStores) {\n    data[name] = store._getSnapshot();\n  }\n  return JSON.stringify(data);\n}\n\n// Hydrate shared stores from SSR data\nexport function hydrateIslandStores(serialized) {\n  try {\n    const data = typeof serialized === 'string' ? JSON.parse(serialized) : serialized;\n    for (const [name, storeData] of Object.entries(data)) {\n      const store = useIslandStore(name, storeData);\n      store._hydrate(storeData);\n    }\n  } catch (e) {\n    console.warn('[what] Failed to hydrate island stores:', e);\n  }\n}\n\n// --- Register an island component ---\n\nexport function island(name, loader, opts = {}) {\n  islandRegistry.set(name, {\n    loader,  // () => import('./MyComponent.js')\n    mode: opts.mode || 'idle',\n    media: opts.media || null,\n    priority: opts.priority || 0, // Higher = hydrate first\n    stores: opts.stores || [],    // Shared stores this island uses\n  });\n}\n\n// --- Island wrapper for SSR ---\n// Renders the static HTML with a marker the client can find.\n\nexport function Island({ name, props = {}, children, mode, priority, stores }) {\n  const entry = islandRegistry.get(name);\n  const resolvedMode = mode || entry?.mode || 'idle';\n  const resolvedPriority = priority ?? entry?.priority ?? 0;\n  const resolvedStores = stores || entry?.stores || [];\n\n  // Server: render as a div with data attributes for hydration\n  return {\n    tag: 'div',\n    props: {\n      'data-island': name,\n      'data-island-mode': resolvedMode,\n      'data-island-props': JSON.stringify(props),\n      'data-island-priority': resolvedPriority,\n      'data-island-stores': JSON.stringify(resolvedStores),\n    },\n    children: children || [],\n    key: null,\n    _vnode: true,\n  };\n}\n\n// --- Priority Hydration Queue ---\n\nfunction enqueueHydration(task) {\n  // Insert in priority order (higher priority first)\n  let inserted = false;\n  for (let i = 0; i < hydrationQueue.length; i++) {\n    if (task.priority > hydrationQueue[i].priority) {\n      hydrationQueue.splice(i, 0, task);\n      inserted = true;\n      break;\n    }\n  }\n  if (!inserted) {\n    hydrationQueue.push(task);\n  }\n\n  processQueue();\n}\n\nfunction processQueue() {\n  if (isProcessingQueue || hydrationQueue.length === 0) return;\n  isProcessingQueue = true;\n\n  // Process one task at a time to avoid blocking\n  const task = hydrationQueue.shift();\n\n  Promise.resolve(task.hydrate())\n    .catch(e => console.error('[what] Island hydration failed:', task.name, e))\n    .finally(() => {\n      isProcessingQueue = false;\n      // Continue processing after a microtask\n      queueMicrotask(processQueue);\n    });\n}\n\n// Boost priority for an island (e.g., on user interaction)\nexport function boostIslandPriority(name, newPriority = 100) {\n  for (const task of hydrationQueue) {\n    if (task.name === name) {\n      task.priority = newPriority;\n      // Re-sort queue\n      hydrationQueue.sort((a, b) => b.priority - a.priority);\n      break;\n    }\n  }\n}\n\n// --- Client-side hydration ---\n\nexport function hydrateIslands() {\n  // First, hydrate any shared stores from the page\n  const storeScript = document.querySelector('script[data-island-stores]');\n  if (storeScript) {\n    hydrateIslandStores(storeScript.textContent);\n  }\n\n  const islands = document.querySelectorAll('[data-island]');\n\n  for (const el of islands) {\n    const name = el.dataset.island;\n    const mode = el.dataset.islandMode || 'idle';\n    const props = JSON.parse(el.dataset.islandProps || '{}');\n    const priority = parseInt(el.dataset.islandPriority || '0', 10);\n    const stores = JSON.parse(el.dataset.islandStores || '[]');\n    const entry = islandRegistry.get(name);\n\n    if (!entry) {\n      console.warn(`[what] Island \"${name}\" not registered`);\n      continue;\n    }\n\n    // Skip if already hydrated\n    if (hydratedIslands.has(el)) continue;\n\n    scheduleHydration(el, entry, props, mode, priority, name, stores);\n  }\n}\n\nfunction scheduleHydration(el, entry, props, mode, priority, name, stores) {\n  const hydrate = async () => {\n    if (hydratedIslands.has(el)) return;\n    hydratedIslands.add(el);\n\n    const mod = await entry.loader();\n    const Component = mod.default || mod;\n\n    // Inject shared stores into props\n    const storeProps = {};\n    for (const storeName of stores) {\n      storeProps[storeName] = useIslandStore(storeName);\n    }\n\n    // Use hydrate() to reuse server-rendered DOM instead of destroying/recreating\n    const vnode = Component({ ...props, ...storeProps });\n    if (el.childNodes.length > 0) {\n      hydrate(vnode, el);\n    } else {\n      mount(vnode, el);\n    }\n\n    // Clean up data attributes\n    el.removeAttribute('data-island');\n    el.removeAttribute('data-island-mode');\n    el.removeAttribute('data-island-props');\n    el.removeAttribute('data-island-priority');\n    el.removeAttribute('data-island-stores');\n\n    // Dispatch event for analytics/debugging\n    el.dispatchEvent(new CustomEvent('island:hydrated', {\n      bubbles: true,\n      detail: { name, mode },\n    }));\n  };\n\n  switch (mode) {\n    case 'load':\n      // Immediate hydration via queue (respects priority)\n      enqueueHydration({ name, priority: priority + 1000, hydrate });\n      break;\n\n    case 'idle':\n      if ('requestIdleCallback' in window) {\n        requestIdleCallback(() => {\n          enqueueHydration({ name, priority, hydrate });\n        });\n      } else {\n        setTimeout(() => {\n          enqueueHydration({ name, priority, hydrate });\n        }, 200);\n      }\n      break;\n\n    case 'visible': {\n      const observer = new IntersectionObserver((entries, obs) => {\n        for (const entry of entries) {\n          if (entry.isIntersecting) {\n            obs.disconnect();\n            enqueueHydration({ name, priority, hydrate });\n            break;\n          }\n        }\n      }, { rootMargin: '200px' });\n      observer.observe(el);\n      break;\n    }\n\n    case 'media': {\n      const mq = window.matchMedia(entry.media || '(max-width: 768px)');\n      if (mq.matches) {\n        enqueueHydration({ name, priority, hydrate });\n      } else {\n        mq.addEventListener('change', (e) => {\n          if (e.matches) {\n            enqueueHydration({ name, priority, hydrate });\n          }\n        }, { once: true });\n      }\n      break;\n    }\n\n    case 'action': {\n      const events = ['click', 'focus', 'mouseover', 'touchstart'];\n      const handler = () => {\n        events.forEach(e => el.removeEventListener(e, handler));\n        // Boost priority since user interacted\n        enqueueHydration({ name, priority: priority + 500, hydrate });\n      };\n      events.forEach(e => el.addEventListener(e, handler, { once: true, passive: true }));\n      break;\n    }\n\n    case 'static':\n      // Never hydrate\n      break;\n\n    default:\n      enqueueHydration({ name, priority, hydrate });\n  }\n}\n\n// --- Auto-discover islands from data attributes ---\n// Call this once on the client to set up all islands.\n\nexport function autoIslands(registry) {\n  for (const [name, config] of Object.entries(registry)) {\n    island(name, config.loader || config, {\n      mode: config.mode || 'idle',\n      media: config.media,\n      priority: config.priority || 0,\n      stores: config.stores || [],\n    });\n  }\n\n  if (typeof document !== 'undefined') {\n    if (document.readyState === 'loading') {\n      document.addEventListener('DOMContentLoaded', hydrateIslands);\n    } else {\n      hydrateIslands();\n    }\n  }\n}\n\n// --- Progressive Enhancement Helpers ---\n\n// Mark an element as progressively enhanced\nexport function enhance(selector, handler) {\n  if (typeof document === 'undefined') return;\n\n  const elements = document.querySelectorAll(selector);\n  for (const el of elements) {\n    if (el.dataset.enhanced) continue;\n    el.dataset.enhanced = 'true';\n    handler(el);\n  }\n}\n\n// Form enhancement: submit via fetch instead of page reload\nexport function enhanceForms(selector = 'form[data-enhance]') {\n  enhance(selector, (form) => {\n    form.addEventListener('submit', async (e) => {\n      e.preventDefault();\n\n      const formData = new FormData(form);\n      const method = form.method.toUpperCase() || 'POST';\n      const action = form.action || location.href;\n\n      try {\n        // Read CSRF token from meta tag\n        const csrfMeta = document.querySelector('meta[name=\"csrf-token\"]') ||\n                         document.querySelector('meta[name=\"what-csrf-token\"]');\n        const csrfToken = csrfMeta ? csrfMeta.getAttribute('content') : null;\n\n        // If no CSRF token and form hasn't opted out, block submission\n        const noCsrf = form.getAttribute('data-no-csrf') === 'true';\n        if (!csrfToken && !noCsrf) {\n          console.warn(\n            '[what] Form submission blocked: no CSRF token found. ' +\n            'Add a <meta name=\"csrf-token\"> tag or set data-no-csrf=\"true\" on the form to opt out.'\n          );\n          form.dispatchEvent(new CustomEvent('form:error', {\n            bubbles: true,\n            detail: { error: new Error('Missing CSRF token') },\n          }));\n          return;\n        }\n\n        const headers = {\n          'X-Requested-With': 'XMLHttpRequest',\n        };\n        if (csrfToken) {\n          headers['X-CSRF-Token'] = csrfToken;\n        }\n\n        const response = await fetch(action, {\n          method,\n          body: method === 'GET' ? undefined : formData,\n          headers,\n        });\n\n        form.dispatchEvent(new CustomEvent('form:response', {\n          bubbles: true,\n          detail: { response, ok: response.ok },\n        }));\n      } catch (error) {\n        form.dispatchEvent(new CustomEvent('form:error', {\n          bubbles: true,\n          detail: { error },\n        }));\n      }\n    });\n  });\n}\n\n// --- Debugging ---\n\nexport function getIslandStatus() {\n  const status = {\n    registered: [...islandRegistry.keys()],\n    hydrated: hydratedIslands.size,\n    pending: hydrationQueue.length,\n    queue: hydrationQueue.map(t => ({ name: t.name, priority: t.priority })),\n    stores: [...sharedStores.keys()],\n  };\n  return status;\n}\n"],
-  "mappings": "AAkBA,OAAS,SAAAA,EAAgB,UAAAC,EAAQ,SAAAC,MAAa,YAE9C,IAAMC,EAAiB,IAAI,IACrBC,EAAkB,IAAI,IACtBC,EAAiB,CAAC,EACpBC,EAAoB,GAKlBC,EAAe,IAAI,IAElB,SAASC,EAAkBC,EAAMC,EAAc,CACpD,GAAIH,EAAa,IAAIE,CAAI,EACvB,OAAOF,EAAa,IAAIE,CAAI,EAG9B,IAAME,EAAQ,CAAC,EACTC,EAAU,CAAC,EAGjB,OAAW,CAACC,EAAKC,CAAK,IAAK,OAAO,QAAQJ,CAAY,EACpDE,EAAQC,CAAG,EAAIZ,EAAOa,CAAK,EAC3B,OAAO,eAAeH,EAAOE,EAAK,CAChC,IAAK,IAAMD,EAAQC,CAAG,EAAE,EACxB,IAAME,GAAQH,EAAQC,CAAG,EAAE,IAAIE,CAAG,EAClC,WAAY,EACd,CAAC,EAIH,OAAAJ,EAAM,SAAWC,EACjBD,EAAM,WAAa,CAACE,EAAKG,IAAO,CAC9B,GAAIJ,EAAQC,CAAG,EACb,OAAOD,EAAQC,CAAG,EAAE,UAAUG,CAAE,CAEpC,EACAL,EAAM,OAAUK,GAAOd,EAAMc,CAAE,EAC/BL,EAAM,aAAe,IAAM,CACzB,IAAMM,EAAW,CAAC,EAClB,OAAW,CAACJ,EAAKK,CAAG,IAAK,OAAO,QAAQN,CAAO,EAC7CK,EAASJ,CAAG,EAAIK,EAAI,KAAK,EAE3B,OAAOD,CACT,EACAN,EAAM,SAAYQ,GAAS,CACzBjB,EAAM,IAAM,CACV,OAAW,CAACW,EAAKC,CAAK,IAAK,OAAO,QAAQK,CAAI,EACxCP,EAAQC,CAAG,GACbD,EAAQC,CAAG,EAAE,IAAIC,CAAK,CAG5B,CAAC,CACH,EAEAP,EAAa,IAAIE,EAAME,CAAK,EACrBA,CACT,CAGO,SAASS,EAAeX,EAAMY,EAAkB,CAAC,EAAG,CACzD,OAAId,EAAa,IAAIE,CAAI,EAChBF,EAAa,IAAIE,CAAI,EAEvBD,EAAkBC,EAAMY,CAAe,CAChD,CAGO,SAASC,GAAwB,CACtC,IAAMH,EAAO,CAAC,EACd,OAAW,CAACV,EAAME,CAAK,IAAKJ,EAC1BY,EAAKV,CAAI,EAAIE,EAAM,aAAa,EAElC,OAAO,KAAK,UAAUQ,CAAI,CAC5B,CAGO,SAASI,EAAoBC,EAAY,CAC9C,GAAI,CACF,IAAML,EAAO,OAAOK,GAAe,SAAW,KAAK,MAAMA,CAAU,EAAIA,EACvE,OAAW,CAACf,EAAMgB,CAAS,IAAK,OAAO,QAAQN,CAAI,EACnCC,EAAeX,EAAMgB,CAAS,EACtC,SAASA,CAAS,CAE5B,OAASC,EAAG,CACV,QAAQ,KAAK,0CAA2CA,CAAC,CAC3D,CACF,CAIO,SAASC,EAAOlB,EAAMmB,EAAQC,EAAO,CAAC,EAAG,CAC9C1B,EAAe,IAAIM,EAAM,CACvB,OAAAmB,EACA,KAAMC,EAAK,MAAQ,OACnB,MAAOA,EAAK,OAAS,KACrB,SAAUA,EAAK,UAAY,EAC3B,OAAQA,EAAK,QAAU,CAAC,CAC1B,CAAC,CACH,CAKO,SAASC,EAAO,CAAE,KAAArB,EAAM,MAAAsB,EAAQ,CAAC,EAAG,SAAAC,EAAU,KAAAC,EAAM,SAAAC,EAAU,OAAAC,CAAO,EAAG,CAC7E,IAAMC,EAAQjC,EAAe,IAAIM,CAAI,EAC/B4B,EAAeJ,GAAQG,GAAO,MAAQ,OACtCE,EAAmBJ,GAAYE,GAAO,UAAY,EAClDG,EAAiBJ,GAAUC,GAAO,QAAU,CAAC,EAGnD,MAAO,CACL,IAAK,MACL,MAAO,CACL,cAAe3B,EACf,mBAAoB4B,EACpB,oBAAqB,KAAK,UAAUN,CAAK,EACzC,uBAAwBO,EACxB,qBAAsB,KAAK,UAAUC,CAAc,CACrD,EACA,SAAUP,GAAY,CAAC,EACvB,IAAK,KACL,OAAQ,EACV,CACF,CAIA,SAASQ,EAAiBC,EAAM,CAE9B,IAAIC,EAAW,GACf,QAASC,EAAI,EAAGA,EAAItC,EAAe,OAAQsC,IACzC,GAAIF,EAAK,SAAWpC,EAAesC,CAAC,EAAE,SAAU,CAC9CtC,EAAe,OAAOsC,EAAG,EAAGF,CAAI,EAChCC,EAAW,GACX,KACF,CAEGA,GACHrC,EAAe,KAAKoC,CAAI,EAG1BG,EAAa,CACf,CAEA,SAASA,GAAe,CACtB,GAAItC,GAAqBD,EAAe,SAAW,EAAG,OACtDC,EAAoB,GAGpB,IAAMmC,EAAOpC,EAAe,MAAM,EAElC,QAAQ,QAAQoC,EAAK,QAAQ,CAAC,EAC3B,MAAMf,GAAK,QAAQ,MAAM,kCAAmCe,EAAK,KAAMf,CAAC,CAAC,EACzE,QAAQ,IAAM,CACbpB,EAAoB,GAEpB,eAAesC,CAAY,CAC7B,CAAC,CACL,CAGO,SAASC,EAAoBpC,EAAMqC,EAAc,IAAK,CAC3D,QAAWL,KAAQpC,EACjB,GAAIoC,EAAK,OAAShC,EAAM,CACtBgC,EAAK,SAAWK,EAEhBzC,EAAe,KAAK,CAAC0C,EAAGC,IAAMA,EAAE,SAAWD,EAAE,QAAQ,EACrD,KACF,CAEJ,CAIO,SAASE,GAAiB,CAE/B,IAAMC,EAAc,SAAS,cAAc,4BAA4B,EACnEA,GACF3B,EAAoB2B,EAAY,WAAW,EAG7C,IAAMC,EAAU,SAAS,iBAAiB,eAAe,EAEzD,QAAWC,KAAMD,EAAS,CACxB,IAAM1C,EAAO2C,EAAG,QAAQ,OAClBnB,EAAOmB,EAAG,QAAQ,YAAc,OAChCrB,EAAQ,KAAK,MAAMqB,EAAG,QAAQ,aAAe,IAAI,EACjDlB,EAAW,SAASkB,EAAG,QAAQ,gBAAkB,IAAK,EAAE,EACxDjB,EAAS,KAAK,MAAMiB,EAAG,QAAQ,cAAgB,IAAI,EACnDhB,EAAQjC,EAAe,IAAIM,CAAI,EAErC,GAAI,CAAC2B,EAAO,CACV,QAAQ,KAAK,kBAAkB3B,CAAI,kBAAkB,EACrD,QACF,CAGIL,EAAgB,IAAIgD,CAAE,GAE1BC,EAAkBD,EAAIhB,EAAOL,EAAOE,EAAMC,EAAUzB,EAAM0B,CAAM,CAClE,CACF,CAEA,SAASkB,EAAkBD,EAAIhB,EAAOL,EAAOE,EAAMC,EAAUzB,EAAM0B,EAAQ,CACzE,IAAMmB,EAAU,SAAY,CAC1B,GAAIlD,EAAgB,IAAIgD,CAAE,EAAG,OAC7BhD,EAAgB,IAAIgD,CAAE,EAEtB,IAAMG,EAAM,MAAMnB,EAAM,OAAO,EACzBoB,EAAYD,EAAI,SAAWA,EAG3BE,EAAa,CAAC,EACpB,QAAWC,KAAavB,EACtBsB,EAAWC,CAAS,EAAItC,EAAesC,CAAS,EAIlD,IAAMC,EAAQH,EAAU,CAAE,GAAGzB,EAAO,GAAG0B,CAAW,CAAC,EAC/CL,EAAG,WAAW,OAAS,EACzBE,EAAQK,EAAOP,CAAE,EAEjBpD,EAAM2D,EAAOP,CAAE,EAIjBA,EAAG,gBAAgB,aAAa,EAChCA,EAAG,gBAAgB,kBAAkB,EACrCA,EAAG,gBAAgB,mBAAmB,EACtCA,EAAG,gBAAgB,sBAAsB,EACzCA,EAAG,gBAAgB,oBAAoB,EAGvCA,EAAG,cAAc,IAAI,YAAY,kBAAmB,CAClD,QAAS,GACT,OAAQ,CAAE,KAAA3C,EAAM,KAAAwB,CAAK,CACvB,CAAC,CAAC,CACJ,EAEA,OAAQA,EAAM,CACZ,IAAK,OAEHO,EAAiB,CAAE,KAAA/B,EAAM,SAAUyB,EAAW,IAAM,QAAAoB,CAAQ,CAAC,EAC7D,MAEF,IAAK,OACC,wBAAyB,OAC3B,oBAAoB,IAAM,CACxBd,EAAiB,CAAE,KAAA/B,EAAM,SAAAyB,EAAU,QAAAoB,CAAQ,CAAC,CAC9C,CAAC,EAED,WAAW,IAAM,CACfd,EAAiB,CAAE,KAAA/B,EAAM,SAAAyB,EAAU,QAAAoB,CAAQ,CAAC,CAC9C,EAAG,GAAG,EAER,MAEF,IAAK,UAAW,CACG,IAAI,qBAAqB,CAACM,EAASC,IAAQ,CAC1D,QAAWzB,KAASwB,EAClB,GAAIxB,EAAM,eAAgB,CACxByB,EAAI,WAAW,EACfrB,EAAiB,CAAE,KAAA/B,EAAM,SAAAyB,EAAU,QAAAoB,CAAQ,CAAC,EAC5C,KACF,CAEJ,EAAG,CAAE,WAAY,OAAQ,CAAC,EACjB,QAAQF,CAAE,EACnB,KACF,CAEA,IAAK,QAAS,CACZ,IAAMU,EAAK,OAAO,WAAW1B,EAAM,OAAS,oBAAoB,EAC5D0B,EAAG,QACLtB,EAAiB,CAAE,KAAA/B,EAAM,SAAAyB,EAAU,QAAAoB,CAAQ,CAAC,EAE5CQ,EAAG,iBAAiB,SAAWpC,GAAM,CAC/BA,EAAE,SACJc,EAAiB,CAAE,KAAA/B,EAAM,SAAAyB,EAAU,QAAAoB,CAAQ,CAAC,CAEhD,EAAG,CAAE,KAAM,EAAK,CAAC,EAEnB,KACF,CAEA,IAAK,SAAU,CACb,IAAMS,EAAS,CAAC,QAAS,QAAS,YAAa,YAAY,EACrDC,EAAU,IAAM,CACpBD,EAAO,QAAQrC,GAAK0B,EAAG,oBAAoB1B,EAAGsC,CAAO,CAAC,EAEtDxB,EAAiB,CAAE,KAAA/B,EAAM,SAAUyB,EAAW,IAAK,QAAAoB,CAAQ,CAAC,CAC9D,EACAS,EAAO,QAAQrC,GAAK0B,EAAG,iBAAiB1B,EAAGsC,EAAS,CAAE,KAAM,GAAM,QAAS,EAAK,CAAC,CAAC,EAClF,KACF,CAEA,IAAK,SAEH,MAEF,QACExB,EAAiB,CAAE,KAAA/B,EAAM,SAAAyB,EAAU,QAAAoB,CAAQ,CAAC,CAChD,CACF,CAKO,SAASW,EAAYC,EAAU,CACpC,OAAW,CAACzD,EAAM0D,CAAM,IAAK,OAAO,QAAQD,CAAQ,EAClDvC,EAAOlB,EAAM0D,EAAO,QAAUA,EAAQ,CACpC,KAAMA,EAAO,MAAQ,OACrB,MAAOA,EAAO,MACd,SAAUA,EAAO,UAAY,EAC7B,OAAQA,EAAO,QAAU,CAAC,CAC5B,CAAC,EAGC,OAAO,SAAa,MAClB,SAAS,aAAe,UAC1B,SAAS,iBAAiB,mBAAoBlB,CAAc,EAE5DA,EAAe,EAGrB,CAKO,SAASmB,EAAQC,EAAUL,EAAS,CACzC,GAAI,OAAO,SAAa,IAAa,OAErC,IAAMM,EAAW,SAAS,iBAAiBD,CAAQ,EACnD,QAAWjB,KAAMkB,EACXlB,EAAG,QAAQ,WACfA,EAAG,QAAQ,SAAW,OACtBY,EAAQZ,CAAE,EAEd,CAGO,SAASmB,EAAaF,EAAW,qBAAsB,CAC5DD,EAAQC,EAAWG,GAAS,CAC1BA,EAAK,iBAAiB,SAAU,MAAO9C,GAAM,CAC3CA,EAAE,eAAe,EAEjB,IAAM+C,EAAW,IAAI,SAASD,CAAI,EAC5BE,EAASF,EAAK,OAAO,YAAY,GAAK,OACtCG,EAASH,EAAK,QAAU,SAAS,KAEvC,GAAI,CAEF,IAAMI,EAAW,SAAS,cAAc,yBAAyB,GAChD,SAAS,cAAc,8BAA8B,EAChEC,EAAYD,EAAWA,EAAS,aAAa,SAAS,EAAI,KAG1DE,EAASN,EAAK,aAAa,cAAc,IAAM,OACrD,GAAI,CAACK,GAAa,CAACC,EAAQ,CACzB,QAAQ,KACN,4IAEF,EACAN,EAAK,cAAc,IAAI,YAAY,aAAc,CAC/C,QAAS,GACT,OAAQ,CAAE,MAAO,IAAI,MAAM,oBAAoB,CAAE,CACnD,CAAC,CAAC,EACF,MACF,CAEA,IAAMO,EAAU,CACd,mBAAoB,gBACtB,EACIF,IACFE,EAAQ,cAAc,EAAIF,GAG5B,IAAMG,EAAW,MAAM,MAAML,EAAQ,CACnC,OAAAD,EACA,KAAMA,IAAW,MAAQ,OAAYD,EACrC,QAAAM,CACF,CAAC,EAEDP,EAAK,cAAc,IAAI,YAAY,gBAAiB,CAClD,QAAS,GACT,OAAQ,CAAE,SAAAQ,EAAU,GAAIA,EAAS,EAAG,CACtC,CAAC,CAAC,CACJ,OAASC,EAAO,CACdT,EAAK,cAAc,IAAI,YAAY,aAAc,CAC/C,QAAS,GACT,OAAQ,CAAE,MAAAS,CAAM,CAClB,CAAC,CAAC,CACJ,CACF,CAAC,CACH,CAAC,CACH,CAIO,SAASC,GAAkB,CAQhC,MAPe,CACb,WAAY,CAAC,GAAG/E,EAAe,KAAK,CAAC,EACrC,SAAUC,EAAgB,KAC1B,QAASC,EAAe,OACxB,MAAOA,EAAe,IAAI8E,IAAM,CAAE,KAAMA,EAAE,KAAM,SAAUA,EAAE,QAAS,EAAE,EACvE,OAAQ,CAAC,GAAG5E,EAAa,KAAK,CAAC,CACjC,CAEF",
-  "names": ["mount", "signal", "batch", "islandRegistry", "hydratedIslands", "hydrationQueue", "isProcessingQueue", "sharedStores", "createIslandStore", "name", "initialState", "store", "signals", "key", "value", "val", "fn", "snapshot", "sig", "data", "useIslandStore", "fallbackInitial", "serializeIslandStores", "hydrateIslandStores", "serialized", "storeData", "e", "island", "loader", "opts", "Island", "props", "children", "mode", "priority", "stores", "entry", "resolvedMode", "resolvedPriority", "resolvedStores", "enqueueHydration", "task", "inserted", "i", "processQueue", "boostIslandPriority", "newPriority", "a", "b", "hydrateIslands", "storeScript", "islands", "el", "scheduleHydration", "hydrate", "mod", "Component", "storeProps", "storeName", "vnode", "entries", "obs", "mq", "events", "handler", "autoIslands", "registry", "config", "enhance", "selector", "elements", "enhanceForms", "form", "formData", "method", "action", "csrfMeta", "csrfToken", "noCsrf", "headers", "response", "error", "getIslandStatus", "t"]
+  "sources": ["../src/islands.js", "../src/serialize.js"],
+  "sourcesContent": ["// What Framework - Islands Architecture\n// Each interactive piece of the page is an \"island\" \u2014 a self-contained\n// component that hydrates independently. The rest is static HTML.\n//\n// Features:\n//   - Multiple hydration modes (load, idle, visible, action, media, static)\n//   - Shared state across islands\n//   - Priority-based hydration queue\n//   - Progressive enhancement\n//\n// Modes:\n//   'static'  - No JS shipped. Pure HTML. (nav, footer, etc.)\n//   'idle'    - Hydrate when browser is idle (requestIdleCallback)\n//   'visible' - Hydrate when scrolled into view (IntersectionObserver)\n//   'load'    - Hydrate immediately on page load\n//   'media'   - Hydrate when media query matches (e.g., mobile-only)\n//   'action'  - Hydrate on first user interaction (click, focus, hover)\n\nimport { mount, hydrate, signal, batch } from 'what-core';\nimport { serializeState } from './serialize.js';\n\nconst islandRegistry = new Map();\nconst hydratedIslands = new Set();\nconst hydrationQueue = [];\nlet isProcessingQueue = false;\n\n// --- Shared Island State ---\n// Global reactive store that persists across islands and page navigations\n\nconst sharedStores = new Map();\n\nexport function createIslandStore(name, initialState) {\n  if (sharedStores.has(name)) {\n    return sharedStores.get(name);\n  }\n\n  const store = {};\n  const signals = {};\n\n  // Create signals for each key in initial state\n  for (const [key, value] of Object.entries(initialState)) {\n    signals[key] = signal(value);\n    Object.defineProperty(store, key, {\n      get: () => signals[key](),\n      set: (val) => signals[key].set(val),\n      enumerable: true,\n    });\n  }\n\n  // Methods to interact with store\n  store._signals = signals;\n  store._subscribe = (key, fn) => {\n    if (signals[key]) {\n      return signals[key].subscribe(fn);\n    }\n  };\n  store._batch = (fn) => batch(fn);\n  store._getSnapshot = () => {\n    const snapshot = {};\n    for (const [key, sig] of Object.entries(signals)) {\n      snapshot[key] = sig.peek();\n    }\n    return snapshot;\n  };\n  store._hydrate = (data) => {\n    batch(() => {\n      for (const [key, value] of Object.entries(data)) {\n        if (signals[key]) {\n          signals[key].set(value);\n        }\n      }\n    });\n  };\n\n  sharedStores.set(name, store);\n  return store;\n}\n\n// Get or create a shared store\nexport function useIslandStore(name, fallbackInitial = {}) {\n  if (sharedStores.has(name)) {\n    return sharedStores.get(name);\n  }\n  return createIslandStore(name, fallbackInitial);\n}\n\n// Serialize all shared stores for SSR.\n// Uses serializeState (not bare JSON.stringify) so user-controlled store values\n// containing \"</script>\" cannot break out of the <script> tag this is embedded\n// in. (AUDIT-2026-06-06 H3)\nexport function serializeIslandStores() {\n  return serializeState(getIslandStoresSnapshot());\n}\n\n// Raw (unserialized) snapshot of all shared island stores, so renderDocument can\n// merge it into the single consolidated #__what_data payload (one serialize pass).\nexport function getIslandStoresSnapshot() {\n  const data = {};\n  for (const [name, store] of sharedStores) {\n    data[name] = store._getSnapshot();\n  }\n  return data;\n}\n\n// Hydrate shared stores from SSR data\nexport function hydrateIslandStores(serialized) {\n  try {\n    const data = typeof serialized === 'string' ? JSON.parse(serialized) : serialized;\n    for (const [name, storeData] of Object.entries(data)) {\n      const store = useIslandStore(name, storeData);\n      store._hydrate(storeData);\n    }\n  } catch (e) {\n    console.warn('[what] Failed to hydrate island stores:', e);\n  }\n}\n\n// --- Register an island component ---\n\nexport function island(name, loader, opts = {}) {\n  islandRegistry.set(name, {\n    loader,  // () => import('./MyComponent.js')\n    mode: opts.mode || 'idle',\n    media: opts.media || null,\n    priority: opts.priority || 0, // Higher = hydrate first\n    stores: opts.stores || [],    // Shared stores this island uses\n  });\n}\n\n// --- Island wrapper for SSR ---\n// Renders the static HTML with a marker the client can find.\n\nexport function Island({ name, props = {}, children, mode, priority, stores }) {\n  const entry = islandRegistry.get(name);\n  const resolvedMode = mode || entry?.mode || 'idle';\n  const resolvedPriority = priority ?? entry?.priority ?? 0;\n  const resolvedStores = stores || entry?.stores || [];\n\n  // Server: render as a div with data attributes for hydration\n  return {\n    tag: 'div',\n    props: {\n      'data-island': name,\n      'data-island-mode': resolvedMode,\n      'data-island-props': JSON.stringify(props),\n      'data-island-priority': resolvedPriority,\n      'data-island-stores': JSON.stringify(resolvedStores),\n    },\n    children: children || [],\n    key: null,\n    _vnode: true,\n  };\n}\n\n// --- Priority Hydration Queue ---\n\nfunction enqueueHydration(task) {\n  // Insert in priority order (higher priority first)\n  let inserted = false;\n  for (let i = 0; i < hydrationQueue.length; i++) {\n    if (task.priority > hydrationQueue[i].priority) {\n      hydrationQueue.splice(i, 0, task);\n      inserted = true;\n      break;\n    }\n  }\n  if (!inserted) {\n    hydrationQueue.push(task);\n  }\n\n  processQueue();\n}\n\nfunction processQueue() {\n  if (isProcessingQueue || hydrationQueue.length === 0) return;\n  isProcessingQueue = true;\n\n  // Process one task at a time to avoid blocking\n  const task = hydrationQueue.shift();\n\n  Promise.resolve(task.hydrate())\n    .catch(e => console.error('[what] Island hydration failed:', task.name, e))\n    .finally(() => {\n      isProcessingQueue = false;\n      // Continue processing after a microtask\n      queueMicrotask(processQueue);\n    });\n}\n\n// Boost priority for an island (e.g., on user interaction)\nexport function boostIslandPriority(name, newPriority = 100) {\n  for (const task of hydrationQueue) {\n    if (task.name === name) {\n      task.priority = newPriority;\n      // Re-sort queue\n      hydrationQueue.sort((a, b) => b.priority - a.priority);\n      break;\n    }\n  }\n}\n\n// --- Client-side hydration ---\n\nexport function hydrateIslands() {\n  // First, hydrate any shared stores from the page\n  const storeScript = document.querySelector('script[data-island-stores]');\n  if (storeScript) {\n    hydrateIslandStores(storeScript.textContent);\n  }\n\n  const islands = document.querySelectorAll('[data-island]');\n\n  for (const el of islands) {\n    const name = el.dataset.island;\n    const mode = el.dataset.islandMode || 'idle';\n    const props = JSON.parse(el.dataset.islandProps || '{}');\n    const priority = parseInt(el.dataset.islandPriority || '0', 10);\n    const stores = JSON.parse(el.dataset.islandStores || '[]');\n    const entry = islandRegistry.get(name);\n\n    if (!entry) {\n      console.warn(`[what] Island \"${name}\" not registered`);\n      continue;\n    }\n\n    // Skip if already hydrated\n    if (hydratedIslands.has(el)) continue;\n\n    scheduleHydration(el, entry, props, mode, priority, name, stores);\n  }\n}\n\nfunction scheduleHydration(el, entry, props, mode, priority, name, stores) {\n  const hydrate = async () => {\n    if (hydratedIslands.has(el)) return;\n    hydratedIslands.add(el);\n\n    const mod = await entry.loader();\n    const Component = mod.default || mod;\n\n    // Inject shared stores into props\n    const storeProps = {};\n    for (const storeName of stores) {\n      storeProps[storeName] = useIslandStore(storeName);\n    }\n\n    // Use hydrate() to reuse server-rendered DOM instead of destroying/recreating\n    const vnode = Component({ ...props, ...storeProps });\n    if (el.childNodes.length > 0) {\n      hydrate(vnode, el);\n    } else {\n      mount(vnode, el);\n    }\n\n    // Clean up data attributes\n    el.removeAttribute('data-island');\n    el.removeAttribute('data-island-mode');\n    el.removeAttribute('data-island-props');\n    el.removeAttribute('data-island-priority');\n    el.removeAttribute('data-island-stores');\n\n    // Dispatch event for analytics/debugging\n    el.dispatchEvent(new CustomEvent('island:hydrated', {\n      bubbles: true,\n      detail: { name, mode },\n    }));\n  };\n\n  switch (mode) {\n    case 'load':\n      // Immediate hydration via queue (respects priority)\n      enqueueHydration({ name, priority: priority + 1000, hydrate });\n      break;\n\n    case 'idle':\n      if ('requestIdleCallback' in window) {\n        requestIdleCallback(() => {\n          enqueueHydration({ name, priority, hydrate });\n        });\n      } else {\n        setTimeout(() => {\n          enqueueHydration({ name, priority, hydrate });\n        }, 200);\n      }\n      break;\n\n    case 'visible': {\n      const observer = new IntersectionObserver((entries, obs) => {\n        for (const entry of entries) {\n          if (entry.isIntersecting) {\n            obs.disconnect();\n            enqueueHydration({ name, priority, hydrate });\n            break;\n          }\n        }\n      }, { rootMargin: '200px' });\n      observer.observe(el);\n      break;\n    }\n\n    case 'media': {\n      const mq = window.matchMedia(entry.media || '(max-width: 768px)');\n      if (mq.matches) {\n        enqueueHydration({ name, priority, hydrate });\n      } else {\n        mq.addEventListener('change', (e) => {\n          if (e.matches) {\n            enqueueHydration({ name, priority, hydrate });\n          }\n        }, { once: true });\n      }\n      break;\n    }\n\n    case 'action': {\n      const events = ['click', 'focus', 'mouseover', 'touchstart'];\n      const handler = () => {\n        events.forEach(e => el.removeEventListener(e, handler));\n        // Boost priority since user interacted\n        enqueueHydration({ name, priority: priority + 500, hydrate });\n      };\n      events.forEach(e => el.addEventListener(e, handler, { once: true, passive: true }));\n      break;\n    }\n\n    case 'static':\n      // Never hydrate\n      break;\n\n    default:\n      enqueueHydration({ name, priority, hydrate });\n  }\n}\n\n// --- Auto-discover islands from data attributes ---\n// Call this once on the client to set up all islands.\n\nexport function autoIslands(registry) {\n  for (const [name, config] of Object.entries(registry)) {\n    island(name, config.loader || config, {\n      mode: config.mode || 'idle',\n      media: config.media,\n      priority: config.priority || 0,\n      stores: config.stores || [],\n    });\n  }\n\n  if (typeof document !== 'undefined') {\n    if (document.readyState === 'loading') {\n      document.addEventListener('DOMContentLoaded', hydrateIslands);\n    } else {\n      hydrateIslands();\n    }\n  }\n}\n\n// --- Progressive Enhancement Helpers ---\n\n// Mark an element as progressively enhanced\nexport function enhance(selector, handler) {\n  if (typeof document === 'undefined') return;\n\n  const elements = document.querySelectorAll(selector);\n  for (const el of elements) {\n    if (el.dataset.enhanced) continue;\n    el.dataset.enhanced = 'true';\n    handler(el);\n  }\n}\n\n// Form enhancement: submit via fetch instead of page reload\nexport function enhanceForms(selector = 'form[data-enhance]') {\n  enhance(selector, (form) => {\n    form.addEventListener('submit', async (e) => {\n      e.preventDefault();\n\n      const formData = new FormData(form);\n      const method = form.method.toUpperCase() || 'POST';\n      const action = form.action || location.href;\n\n      try {\n        // Read CSRF token from meta tag\n        const csrfMeta = document.querySelector('meta[name=\"csrf-token\"]') ||\n                         document.querySelector('meta[name=\"what-csrf-token\"]');\n        const csrfToken = csrfMeta ? csrfMeta.getAttribute('content') : null;\n\n        // If no CSRF token and form hasn't opted out, block submission\n        const noCsrf = form.getAttribute('data-no-csrf') === 'true';\n        if (!csrfToken && !noCsrf) {\n          console.warn(\n            '[what] Form submission blocked: no CSRF token found. ' +\n            'Add a <meta name=\"csrf-token\"> tag or set data-no-csrf=\"true\" on the form to opt out.'\n          );\n          form.dispatchEvent(new CustomEvent('form:error', {\n            bubbles: true,\n            detail: { error: new Error('Missing CSRF token') },\n          }));\n          return;\n        }\n\n        const headers = {\n          'X-Requested-With': 'XMLHttpRequest',\n        };\n        if (csrfToken) {\n          headers['X-CSRF-Token'] = csrfToken;\n        }\n\n        const response = await fetch(action, {\n          method,\n          body: method === 'GET' ? undefined : formData,\n          headers,\n        });\n\n        form.dispatchEvent(new CustomEvent('form:response', {\n          bubbles: true,\n          detail: { response, ok: response.ok },\n        }));\n      } catch (error) {\n        form.dispatchEvent(new CustomEvent('form:error', {\n          bubbles: true,\n          detail: { error },\n        }));\n      }\n    });\n  });\n}\n\n// --- Debugging ---\n\nexport function getIslandStatus() {\n  const status = {\n    registered: [...islandRegistry.keys()],\n    hydrated: hydratedIslands.size,\n    pending: hydrationQueue.length,\n    queue: hydrationQueue.map(t => ({ name: t.name, priority: t.priority })),\n    stores: [...sharedStores.keys()],\n  };\n  return status;\n}\n", "// Safe serialization of state for inlining into an HTML <script> tag.\n//\n// Stateless on purpose: this module holds no shared state, so it is safe for\n// the bundler to inline into multiple server entry points without creating\n// divergent instances (unlike islands.js's sharedStores).\n//\n// JSON.stringify alone is NOT safe to drop inside <script>...</script>: a value\n// containing \"</script>\" (or \"<!--\", \"<script\") breaks out of the element and\n// injects markup -- stored XSS when any value is user-controlled\n// (AUDIT-2026-06-06 H3). Escaping \"<\", \">\", \"&\" as \\uXXXX keeps the output\n// valid JSON (so JSON.parse on hydrate still works) while making it inert in\n// HTML. U+2028/U+2029 are also escaped: they are valid in JSON strings but are\n// illegal in JS string literals and can break inline script parsing.\n\n// Built via new RegExp from escape sequences so this source file contains no\n// invisible separator characters. Matches: < > & U+2028 U+2029.\nconst SCRIPT_UNSAFE = new RegExp('[<>&\\\\u2028\\\\u2029]', 'g');\n\nconst ESCAPES = {\n  0x3c: '\\\\u003c', // <\n  0x3e: '\\\\u003e', // >\n  0x26: '\\\\u0026', // &\n  0x2028: '\\\\u2028',\n  0x2029: '\\\\u2029',\n};\n\n/**\n * Serialize a value to a JSON string that is safe to embed verbatim inside an\n * HTML <script> element. Always use this instead of bare JSON.stringify when\n * inlining hydration/state payloads into server-rendered HTML.\n */\nexport function serializeState(value) {\n  return JSON.stringify(value).replace(SCRIPT_UNSAFE, (c) => ESCAPES[c.charCodeAt(0)]);\n}\n"],
+  "mappings": "AAkBA,OAAS,SAAAA,EAAgB,UAAAC,EAAQ,SAAAC,MAAa,YCF9C,IAAMC,EAAgB,IAAI,OAAO,sBAAuB,GAAG,EAErDC,EAAU,CACd,GAAM,UACN,GAAM,UACN,GAAM,UACN,KAAQ,UACR,KAAQ,SACV,EAOO,SAASC,EAAeC,EAAO,CACpC,OAAO,KAAK,UAAUA,CAAK,EAAE,QAAQH,EAAgBI,GAAMH,EAAQG,EAAE,WAAW,CAAC,CAAC,CAAC,CACrF,CDZA,IAAMC,EAAiB,IAAI,IACrBC,EAAkB,IAAI,IACtBC,EAAiB,CAAC,EACpBC,EAAoB,GAKlBC,EAAe,IAAI,IAElB,SAASC,EAAkBC,EAAMC,EAAc,CACpD,GAAIH,EAAa,IAAIE,CAAI,EACvB,OAAOF,EAAa,IAAIE,CAAI,EAG9B,IAAME,EAAQ,CAAC,EACTC,EAAU,CAAC,EAGjB,OAAW,CAACC,EAAKC,CAAK,IAAK,OAAO,QAAQJ,CAAY,EACpDE,EAAQC,CAAG,EAAIE,EAAOD,CAAK,EAC3B,OAAO,eAAeH,EAAOE,EAAK,CAChC,IAAK,IAAMD,EAAQC,CAAG,EAAE,EACxB,IAAMG,GAAQJ,EAAQC,CAAG,EAAE,IAAIG,CAAG,EAClC,WAAY,EACd,CAAC,EAIH,OAAAL,EAAM,SAAWC,EACjBD,EAAM,WAAa,CAACE,EAAKI,IAAO,CAC9B,GAAIL,EAAQC,CAAG,EACb,OAAOD,EAAQC,CAAG,EAAE,UAAUI,CAAE,CAEpC,EACAN,EAAM,OAAUM,GAAOC,EAAMD,CAAE,EAC/BN,EAAM,aAAe,IAAM,CACzB,IAAMQ,EAAW,CAAC,EAClB,OAAW,CAACN,EAAKO,CAAG,IAAK,OAAO,QAAQR,CAAO,EAC7CO,EAASN,CAAG,EAAIO,EAAI,KAAK,EAE3B,OAAOD,CACT,EACAR,EAAM,SAAYU,GAAS,CACzBH,EAAM,IAAM,CACV,OAAW,CAACL,EAAKC,CAAK,IAAK,OAAO,QAAQO,CAAI,EACxCT,EAAQC,CAAG,GACbD,EAAQC,CAAG,EAAE,IAAIC,CAAK,CAG5B,CAAC,CACH,EAEAP,EAAa,IAAIE,EAAME,CAAK,EACrBA,CACT,CAGO,SAASW,EAAeb,EAAMc,EAAkB,CAAC,EAAG,CACzD,OAAIhB,EAAa,IAAIE,CAAI,EAChBF,EAAa,IAAIE,CAAI,EAEvBD,EAAkBC,EAAMc,CAAe,CAChD,CAMO,SAASC,GAAwB,CACtC,OAAOC,EAAeC,EAAwB,CAAC,CACjD,CAIO,SAASA,GAA0B,CACxC,IAAML,EAAO,CAAC,EACd,OAAW,CAACZ,EAAME,CAAK,IAAKJ,EAC1Bc,EAAKZ,CAAI,EAAIE,EAAM,aAAa,EAElC,OAAOU,CACT,CAGO,SAASM,EAAoBC,EAAY,CAC9C,GAAI,CACF,IAAMP,EAAO,OAAOO,GAAe,SAAW,KAAK,MAAMA,CAAU,EAAIA,EACvE,OAAW,CAACnB,EAAMoB,CAAS,IAAK,OAAO,QAAQR,CAAI,EACnCC,EAAeb,EAAMoB,CAAS,EACtC,SAASA,CAAS,CAE5B,OAASC,EAAG,CACV,QAAQ,KAAK,0CAA2CA,CAAC,CAC3D,CACF,CAIO,SAASC,EAAOtB,EAAMuB,EAAQC,EAAO,CAAC,EAAG,CAC9C9B,EAAe,IAAIM,EAAM,CACvB,OAAAuB,EACA,KAAMC,EAAK,MAAQ,OACnB,MAAOA,EAAK,OAAS,KACrB,SAAUA,EAAK,UAAY,EAC3B,OAAQA,EAAK,QAAU,CAAC,CAC1B,CAAC,CACH,CAKO,SAASC,EAAO,CAAE,KAAAzB,EAAM,MAAA0B,EAAQ,CAAC,EAAG,SAAAC,EAAU,KAAAC,EAAM,SAAAC,EAAU,OAAAC,CAAO,EAAG,CAC7E,IAAMC,EAAQrC,EAAe,IAAIM,CAAI,EAC/BgC,EAAeJ,GAAQG,GAAO,MAAQ,OACtCE,EAAmBJ,GAAYE,GAAO,UAAY,EAClDG,EAAiBJ,GAAUC,GAAO,QAAU,CAAC,EAGnD,MAAO,CACL,IAAK,MACL,MAAO,CACL,cAAe/B,EACf,mBAAoBgC,EACpB,oBAAqB,KAAK,UAAUN,CAAK,EACzC,uBAAwBO,EACxB,qBAAsB,KAAK,UAAUC,CAAc,CACrD,EACA,SAAUP,GAAY,CAAC,EACvB,IAAK,KACL,OAAQ,EACV,CACF,CAIA,SAASQ,EAAiBC,EAAM,CAE9B,IAAIC,EAAW,GACf,QAASC,EAAI,EAAGA,EAAI1C,EAAe,OAAQ0C,IACzC,GAAIF,EAAK,SAAWxC,EAAe0C,CAAC,EAAE,SAAU,CAC9C1C,EAAe,OAAO0C,EAAG,EAAGF,CAAI,EAChCC,EAAW,GACX,KACF,CAEGA,GACHzC,EAAe,KAAKwC,CAAI,EAG1BG,EAAa,CACf,CAEA,SAASA,GAAe,CACtB,GAAI1C,GAAqBD,EAAe,SAAW,EAAG,OACtDC,EAAoB,GAGpB,IAAMuC,EAAOxC,EAAe,MAAM,EAElC,QAAQ,QAAQwC,EAAK,QAAQ,CAAC,EAC3B,MAAMf,GAAK,QAAQ,MAAM,kCAAmCe,EAAK,KAAMf,CAAC,CAAC,EACzE,QAAQ,IAAM,CACbxB,EAAoB,GAEpB,eAAe0C,CAAY,CAC7B,CAAC,CACL,CAGO,SAASC,EAAoBxC,EAAMyC,EAAc,IAAK,CAC3D,QAAWL,KAAQxC,EACjB,GAAIwC,EAAK,OAASpC,EAAM,CACtBoC,EAAK,SAAWK,EAEhB7C,EAAe,KAAK,CAAC8C,EAAGC,IAAMA,EAAE,SAAWD,EAAE,QAAQ,EACrD,KACF,CAEJ,CAIO,SAASE,GAAiB,CAE/B,IAAMC,EAAc,SAAS,cAAc,4BAA4B,EACnEA,GACF3B,EAAoB2B,EAAY,WAAW,EAG7C,IAAMC,EAAU,SAAS,iBAAiB,eAAe,EAEzD,QAAWC,KAAMD,EAAS,CACxB,IAAM9C,EAAO+C,EAAG,QAAQ,OAClBnB,EAAOmB,EAAG,QAAQ,YAAc,OAChCrB,EAAQ,KAAK,MAAMqB,EAAG,QAAQ,aAAe,IAAI,EACjDlB,EAAW,SAASkB,EAAG,QAAQ,gBAAkB,IAAK,EAAE,EACxDjB,EAAS,KAAK,MAAMiB,EAAG,QAAQ,cAAgB,IAAI,EACnDhB,EAAQrC,EAAe,IAAIM,CAAI,EAErC,GAAI,CAAC+B,EAAO,CACV,QAAQ,KAAK,kBAAkB/B,CAAI,kBAAkB,EACrD,QACF,CAGIL,EAAgB,IAAIoD,CAAE,GAE1BC,EAAkBD,EAAIhB,EAAOL,EAAOE,EAAMC,EAAU7B,EAAM8B,CAAM,CAClE,CACF,CAEA,SAASkB,EAAkBD,EAAIhB,EAAOL,EAAOE,EAAMC,EAAU7B,EAAM8B,EAAQ,CACzE,IAAMmB,EAAU,SAAY,CAC1B,GAAItD,EAAgB,IAAIoD,CAAE,EAAG,OAC7BpD,EAAgB,IAAIoD,CAAE,EAEtB,IAAMG,EAAM,MAAMnB,EAAM,OAAO,EACzBoB,EAAYD,EAAI,SAAWA,EAG3BE,EAAa,CAAC,EACpB,QAAWC,KAAavB,EACtBsB,EAAWC,CAAS,EAAIxC,EAAewC,CAAS,EAIlD,IAAMC,EAAQH,EAAU,CAAE,GAAGzB,EAAO,GAAG0B,CAAW,CAAC,EAC/CL,EAAG,WAAW,OAAS,EACzBE,EAAQK,EAAOP,CAAE,EAEjBQ,EAAMD,EAAOP,CAAE,EAIjBA,EAAG,gBAAgB,aAAa,EAChCA,EAAG,gBAAgB,kBAAkB,EACrCA,EAAG,gBAAgB,mBAAmB,EACtCA,EAAG,gBAAgB,sBAAsB,EACzCA,EAAG,gBAAgB,oBAAoB,EAGvCA,EAAG,cAAc,IAAI,YAAY,kBAAmB,CAClD,QAAS,GACT,OAAQ,CAAE,KAAA/C,EAAM,KAAA4B,CAAK,CACvB,CAAC,CAAC,CACJ,EAEA,OAAQA,EAAM,CACZ,IAAK,OAEHO,EAAiB,CAAE,KAAAnC,EAAM,SAAU6B,EAAW,IAAM,QAAAoB,CAAQ,CAAC,EAC7D,MAEF,IAAK,OACC,wBAAyB,OAC3B,oBAAoB,IAAM,CACxBd,EAAiB,CAAE,KAAAnC,EAAM,SAAA6B,EAAU,QAAAoB,CAAQ,CAAC,CAC9C,CAAC,EAED,WAAW,IAAM,CACfd,EAAiB,CAAE,KAAAnC,EAAM,SAAA6B,EAAU,QAAAoB,CAAQ,CAAC,CAC9C,EAAG,GAAG,EAER,MAEF,IAAK,UAAW,CACG,IAAI,qBAAqB,CAACO,EAASC,IAAQ,CAC1D,QAAW1B,KAASyB,EAClB,GAAIzB,EAAM,eAAgB,CACxB0B,EAAI,WAAW,EACftB,EAAiB,CAAE,KAAAnC,EAAM,SAAA6B,EAAU,QAAAoB,CAAQ,CAAC,EAC5C,KACF,CAEJ,EAAG,CAAE,WAAY,OAAQ,CAAC,EACjB,QAAQF,CAAE,EACnB,KACF,CAEA,IAAK,QAAS,CACZ,IAAMW,EAAK,OAAO,WAAW3B,EAAM,OAAS,oBAAoB,EAC5D2B,EAAG,QACLvB,EAAiB,CAAE,KAAAnC,EAAM,SAAA6B,EAAU,QAAAoB,CAAQ,CAAC,EAE5CS,EAAG,iBAAiB,SAAWrC,GAAM,CAC/BA,EAAE,SACJc,EAAiB,CAAE,KAAAnC,EAAM,SAAA6B,EAAU,QAAAoB,CAAQ,CAAC,CAEhD,EAAG,CAAE,KAAM,EAAK,CAAC,EAEnB,KACF,CAEA,IAAK,SAAU,CACb,IAAMU,EAAS,CAAC,QAAS,QAAS,YAAa,YAAY,EACrDC,EAAU,IAAM,CACpBD,EAAO,QAAQtC,GAAK0B,EAAG,oBAAoB1B,EAAGuC,CAAO,CAAC,EAEtDzB,EAAiB,CAAE,KAAAnC,EAAM,SAAU6B,EAAW,IAAK,QAAAoB,CAAQ,CAAC,CAC9D,EACAU,EAAO,QAAQtC,GAAK0B,EAAG,iBAAiB1B,EAAGuC,EAAS,CAAE,KAAM,GAAM,QAAS,EAAK,CAAC,CAAC,EAClF,KACF,CAEA,IAAK,SAEH,MAEF,QACEzB,EAAiB,CAAE,KAAAnC,EAAM,SAAA6B,EAAU,QAAAoB,CAAQ,CAAC,CAChD,CACF,CAKO,SAASY,EAAYC,EAAU,CACpC,OAAW,CAAC9D,EAAM+D,CAAM,IAAK,OAAO,QAAQD,CAAQ,EAClDxC,EAAOtB,EAAM+D,EAAO,QAAUA,EAAQ,CACpC,KAAMA,EAAO,MAAQ,OACrB,MAAOA,EAAO,MACd,SAAUA,EAAO,UAAY,EAC7B,OAAQA,EAAO,QAAU,CAAC,CAC5B,CAAC,EAGC,OAAO,SAAa,MAClB,SAAS,aAAe,UAC1B,SAAS,iBAAiB,mBAAoBnB,CAAc,EAE5DA,EAAe,EAGrB,CAKO,SAASoB,EAAQC,EAAUL,EAAS,CACzC,GAAI,OAAO,SAAa,IAAa,OAErC,IAAMM,EAAW,SAAS,iBAAiBD,CAAQ,EACnD,QAAWlB,KAAMmB,EACXnB,EAAG,QAAQ,WACfA,EAAG,QAAQ,SAAW,OACtBa,EAAQb,CAAE,EAEd,CAGO,SAASoB,EAAaF,EAAW,qBAAsB,CAC5DD,EAAQC,EAAWG,GAAS,CAC1BA,EAAK,iBAAiB,SAAU,MAAO/C,GAAM,CAC3CA,EAAE,eAAe,EAEjB,IAAMgD,EAAW,IAAI,SAASD,CAAI,EAC5BE,EAASF,EAAK,OAAO,YAAY,GAAK,OACtCG,EAASH,EAAK,QAAU,SAAS,KAEvC,GAAI,CAEF,IAAMI,EAAW,SAAS,cAAc,yBAAyB,GAChD,SAAS,cAAc,8BAA8B,EAChEC,EAAYD,EAAWA,EAAS,aAAa,SAAS,EAAI,KAG1DE,EAASN,EAAK,aAAa,cAAc,IAAM,OACrD,GAAI,CAACK,GAAa,CAACC,EAAQ,CACzB,QAAQ,KACN,4IAEF,EACAN,EAAK,cAAc,IAAI,YAAY,aAAc,CAC/C,QAAS,GACT,OAAQ,CAAE,MAAO,IAAI,MAAM,oBAAoB,CAAE,CACnD,CAAC,CAAC,EACF,MACF,CAEA,IAAMO,EAAU,CACd,mBAAoB,gBACtB,EACIF,IACFE,EAAQ,cAAc,EAAIF,GAG5B,IAAMG,EAAW,MAAM,MAAML,EAAQ,CACnC,OAAAD,EACA,KAAMA,IAAW,MAAQ,OAAYD,EACrC,QAAAM,CACF,CAAC,EAEDP,EAAK,cAAc,IAAI,YAAY,gBAAiB,CAClD,QAAS,GACT,OAAQ,CAAE,SAAAQ,EAAU,GAAIA,EAAS,EAAG,CACtC,CAAC,CAAC,CACJ,OAASC,EAAO,CACdT,EAAK,cAAc,IAAI,YAAY,aAAc,CAC/C,QAAS,GACT,OAAQ,CAAE,MAAAS,CAAM,CAClB,CAAC,CAAC,CACJ,CACF,CAAC,CACH,CAAC,CACH,CAIO,SAASC,GAAkB,CAQhC,MAPe,CACb,WAAY,CAAC,GAAGpF,EAAe,KAAK,CAAC,EACrC,SAAUC,EAAgB,KAC1B,QAASC,EAAe,OACxB,MAAOA,EAAe,IAAImF,IAAM,CAAE,KAAMA,EAAE,KAAM,SAAUA,EAAE,QAAS,EAAE,EACvE,OAAQ,CAAC,GAAGjF,EAAa,KAAK,CAAC,CACjC,CAEF",
+  "names": ["mount", "signal", "batch", "SCRIPT_UNSAFE", "ESCAPES", "serializeState", "value", "c", "islandRegistry", "hydratedIslands", "hydrationQueue", "isProcessingQueue", "sharedStores", "createIslandStore", "name", "initialState", "store", "signals", "key", "value", "signal", "val", "fn", "batch", "snapshot", "sig", "data", "useIslandStore", "fallbackInitial", "serializeIslandStores", "serializeState", "getIslandStoresSnapshot", "hydrateIslandStores", "serialized", "storeData", "e", "island", "loader", "opts", "Island", "props", "children", "mode", "priority", "stores", "entry", "resolvedMode", "resolvedPriority", "resolvedStores", "enqueueHydration", "task", "inserted", "i", "processQueue", "boostIslandPriority", "newPriority", "a", "b", "hydrateIslands", "storeScript", "islands", "el", "scheduleHydration", "hydrate", "mod", "Component", "storeProps", "storeName", "vnode", "mount", "entries", "obs", "mq", "events", "handler", "autoIslands", "registry", "config", "enhance", "selector", "elements", "enhanceForms", "form", "formData", "method", "action", "csrfMeta", "csrfToken", "noCsrf", "headers", "response", "error", "getIslandStatus", "t"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "what-server",
-  "version": "0.8.4",
+  "version": "0.10.0",
   "description": "What Framework - SSR, islands architecture, static generation",
   "type": "module",
   "main": "src/index.js",
@@ -36,7 +36,13 @@
   "author": "ZVN DEV (https://zvndev.com)",
   "license": "MIT",
   "peerDependencies": {
-    "what-core": "^0.8.4"
+    "what-core": "^0.10.0",
+    "what-router": "^0.10.0"
+  },
+  "peerDependenciesMeta": {
+    "what-router": {
+      "optional": true
+    }
   },
   "repository": {
     "type": "git",

package/src/action-handler.js

@@ -0,0 +1,149 @@
+// What Framework - Served Server Actions
+//
+// actions.js defines actions and `handleActionRequest`, but nothing wires the
+// `/__what_action` HTTP route the client posts to. This module provides that
+// missing piece: a framework-agnostic core handler plus thin Node-middleware
+// and Web-Fetch adapters. CSRF + dispatch + error masking are reused from
+// actions.js (handleActionRequest) — no security logic is duplicated here.
+
+import { handleActionRequest } from './actions.js';
+
+const DEFAULT_BASE_PATH = '/__what_action';
+const MAX_BODY_BYTES = 1024 * 1024; // 1 MB
+
+function lowerHeaders(headers) {
+  if (!headers) return {};
+  // Headers (fetch) -> object
+  if (typeof headers.forEach === 'function' && typeof headers.get === 'function') {
+    const out = {};
+    headers.forEach((v, k) => { out[k.toLowerCase()] = v; });
+    return out;
+  }
+  const out = {};
+  for (const k in headers) out[k.toLowerCase()] = headers[k];
+  return out;
+}
+
+function jsonResponse(status, bodyObj) {
+  return {
+    status,
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify(bodyObj),
+  };
+}
+
+/**
+ * Framework-agnostic action dispatcher.
+ *
+ * options:
+ *   - getCsrfToken(reqLike) -> sessionToken (sync or async). Omit + skipCsrf for none.
+ *   - skipCsrf: bool — opt out of CSRF (e.g. token-authed APIs).
+ *   - basePath: string — defaults to '/__what_action' (used by the adapters).
+ *
+ * Returns: async (reqLike) -> { status, headers, body:string }
+ *   reqLike: { method, headers, body }  where body is the parsed JSON ({ args }).
+ */
+export function createActionHandler(options = {}) {
+  const { getCsrfToken, skipCsrf = false } = options;
+
+  return async function handle(reqLike) {
+    const method = (reqLike.method || 'POST').toUpperCase();
+    if (method !== 'POST') {
+      return jsonResponse(405, { message: 'Method Not Allowed' });
+    }
+
+    const headers = lowerHeaders(reqLike.headers);
+    const actionId = headers['x-what-action'];
+    if (!actionId) {
+      return jsonResponse(400, { message: 'Missing X-What-Action header' });
+    }
+
+    const body = reqLike.body || {};
+    const args = body.args;
+
+    const sessionCsrfToken = skipCsrf
+      ? undefined
+      : (getCsrfToken ? await getCsrfToken(reqLike) : undefined);
+
+    const result = await handleActionRequest(
+      { headers },
+      actionId,
+      args,
+      { csrfToken: sessionCsrfToken, skipCsrf }
+    );
+
+    return jsonResponse(result.status, result.body);
+  };
+}
+
+// --- Node connect/express middleware ---
+// Mount before your routes: app.use(nodeActionMiddleware({ getCsrfToken }))
+
+export function nodeActionMiddleware(options = {}) {
+  const basePath = options.basePath || DEFAULT_BASE_PATH;
+  const handle = createActionHandler(options);
+
+  return async function middleware(req, res, next) {
+    const url = (req.url || '').split('?')[0];
+    if (url !== basePath || (req.method || '').toUpperCase() !== 'POST') {
+      return next ? next() : undefined;
+    }
+
+    let body;
+    try {
+      body = await readJsonBody(req);
+    } catch (err) {
+      res.writeHead(err.code === 'BODY_TOO_LARGE' ? 413 : 400, { 'content-type': 'application/json' });
+      res.end(JSON.stringify({ message: err.code === 'BODY_TOO_LARGE' ? 'Payload too large' : 'Invalid JSON body' }));
+      return;
+    }
+
+    const out = await handle({ method: req.method, headers: req.headers, body });
+    res.writeHead(out.status, out.headers);
+    res.end(out.body);
+  };
+}
+
+function readJsonBody(req) {
+  return new Promise((resolve, reject) => {
+    let size = 0;
+    const chunks = [];
+    req.on('data', (chunk) => {
+      size += chunk.length;
+      if (size > MAX_BODY_BYTES) {
+        const e = new Error('Body too large');
+        e.code = 'BODY_TOO_LARGE';
+        reject(e);
+        req.destroy?.();
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on('end', () => {
+      if (chunks.length === 0) return resolve({});
+      try {
+        resolve(JSON.parse(Buffer.concat(chunks).toString('utf8')));
+      } catch (e) {
+        reject(e);
+      }
+    });
+    req.on('error', reject);
+  });
+}
+
+// --- Web Fetch handler (edge / Deno / Bun / Cloudflare) ---
+// const handler = fetchActionHandler({ getCsrfToken }); addEventListener('fetch', e => e.respondWith(handler(e.request)))
+
+export function fetchActionHandler(options = {}) {
+  const handle = createActionHandler(options);
+  return async function (request) {
+    let body = {};
+    try {
+      body = await request.json();
+    } catch {
+      body = {};
+    }
+    const out = await handle({ method: request.method, headers: request.headers, body });
+    return new Response(out.body, { status: out.status, headers: out.headers });
+  };
+}

package/src/actions.js

@@ -14,6 +14,7 @@
 //   const result = await saveUser({ name: 'John' });
 
 import { signal, batch } from 'what-core';
+import { revalidatePath as serverRevalidatePath, revalidateTag as serverRevalidateTag } from './revalidation-registry.js';
 
 // Registry of server actions
 const actionRegistry = new Map();
@@ -402,7 +403,18 @@ export function handleActionRequest(req, actionId, args, options = {}) {
   }
 
   return action.fn(...args)
-    .then(result => ({ status: 200, body: result }))
+    .then(async result => {
+      // Server-side cache revalidation: if the action declared revalidate paths
+      // or tags, purge them through the bound cache engine (no-op if unbound).
+      const opts = action.options || {};
+      if (Array.isArray(opts.revalidate)) {
+        for (const p of opts.revalidate) await serverRevalidatePath(p);
+      }
+      if (Array.isArray(opts.revalidateTags)) {
+        for (const t of opts.revalidateTags) await serverRevalidateTag(t);
+      }
+      return { status: 200, body: result };
+    })
     .catch(error => {
       // Log the full error server-side, return generic message to client
       console.error(`[what] Action "${actionId}" error:`, error);

package/src/adapter/cloudflare.js

@@ -0,0 +1,18 @@
+// Cloudflare Workers adapter — exposes a `fetch(request, env, ctx)` worker
+// entry over the same Web-Fetch core handler. ISR runs via the origin cache
+// engine; pass a what-cache redis/KV-backed store for cross-isolate caching and
+// use ctx.waitUntil for background regeneration.
+
+import { createRequestHandler } from './core.js';
+
+export function createCloudflareHandler(options = {}) {
+  const handle = createRequestHandler(options);
+  return {
+    async fetch(request, env, ctx) {
+      // Expose env/ctx to render via the request for adapters that need them.
+      if (env) request.__env = env;
+      if (ctx) request.__ctx = ctx;
+      return handle(request);
+    },
+  };
+}

package/src/adapter/core.js

@@ -0,0 +1,112 @@
+// Framework-agnostic deploy adapter core. A Web-Fetch handler
+// (request) -> Response that powers Node, Vercel and Cloudflare alike:
+//   match route -> intercept actions + revalidate webhook -> ISR cache
+//   (HIT/STALE/MISS) -> render -> respond with Cache-Control headers.
+//
+// The cache engine is OPTIONAL and injected (from what-cache) so what-server
+// stays standalone. Render is owned here (renderDocument) but overridable.
+
+import { matchRoute, parseQuery } from 'what-router/match';
+import { renderDocument } from '../index.js';
+import { createActionHandler } from '../action-handler.js';
+import { setRevalidationHandler } from '../revalidation-registry.js';
+
+const ACTION_PATH = '/__what_action';
+const REVALIDATE_PATH = '/__what_revalidate';
+
+function headersToObject(headers) {
+  const out = {};
+  if (headers && typeof headers.forEach === 'function') headers.forEach((v, k) => { out[k.toLowerCase()] = v; });
+  return out;
+}
+
+async function readJsonBody(request) {
+  try { return await request.json(); } catch { return {}; }
+}
+
+function defaultRenderRoute(documentOptions) {
+  return async function renderRoute(routeMatch) {
+    const { route, params, query, request } = routeMatch;
+    const pageModule = { default: route.component, loader: route.loader };
+    const html = await renderDocument(pageModule, { params, query, request }, documentOptions);
+    return {
+      html,
+      status: 200,
+      tags: (routeMatch.config && routeMatch.config.tags) || [],
+      path: routeMatch.path,
+    };
+  };
+}
+
+export function createRequestHandler(options = {}) {
+  const {
+    routes = [],
+    cache,
+    render,
+    actionHandler = createActionHandler({ skipCsrf: true }),
+    revalidateWebhook,
+    document: documentOptions = {},
+    notFound,
+    basePath = '',
+  } = options;
+
+  const renderRoute = render || defaultRenderRoute(documentOptions);
+
+  // Bind the cache engine so server actions' revalidatePath/revalidateTag (and
+  // any app code calling them from what-framework/server) purge this engine.
+  if (cache && (cache.revalidatePath || cache.revalidateTag)) {
+    setRevalidationHandler({
+      revalidatePath: cache.revalidatePath,
+      revalidateTag: cache.revalidateTag,
+    });
+  }
+
+  return async function handle(request) {
+    const url = new URL(request.url, 'http://localhost');
+    let pathname = url.pathname;
+    if (basePath && pathname.startsWith(basePath)) pathname = pathname.slice(basePath.length) || '/';
+
+    // Server actions
+    if (request.method === 'POST' && pathname === ACTION_PATH) {
+      const body = await readJsonBody(request);
+      const out = await actionHandler({ method: 'POST', headers: headersToObject(request.headers), body });
+      return new Response(out.body, { status: out.status, headers: out.headers });
+    }
+
+    // On-demand revalidation webhook
+    if (request.method === 'POST' && pathname === REVALIDATE_PATH && revalidateWebhook) {
+      const body = await readJsonBody(request);
+      const out = await revalidateWebhook({ headers: headersToObject(request.headers), body });
+      return new Response(JSON.stringify(out.body), {
+        status: out.status,
+        headers: { 'content-type': 'application/json' },
+      });
+    }
+
+    // Route match
+    const matched = matchRoute(pathname, routes);
+    if (!matched) {
+      const html = notFound ? notFound() : '<!DOCTYPE html><html><body><h1>404 — Not Found</h1></body></html>';
+      return new Response(html, { status: 404, headers: { 'content-type': 'text/html; charset=utf-8' } });
+    }
+
+    const { route, params } = matched;
+    const config = route.page || { mode: route.mode || 'client' };
+    const routeMatch = { path: pathname, query: parseQuery(url.search), config, route, params, request };
+
+    // ISR cache path (static/hybrid with a cache engine). Server-mode bypasses.
+    if (cache && config.mode !== 'server') {
+      const result = await cache.handle(routeMatch, () => renderRoute(routeMatch));
+      return new Response(result.html, {
+        status: result.status || 200,
+        headers: { 'content-type': 'text/html; charset=utf-8', ...(result.headers || {}) },
+      });
+    }
+
+    // Direct render (server mode, or no cache configured)
+    const out = await renderRoute(routeMatch);
+    const headers = { 'content-type': 'text/html; charset=utf-8' };
+    if (config.mode === 'server') headers['Cache-Control'] = 'private, no-store';
+    return new Response(out.html, { status: out.status || 200, headers });
+  };
+}

package/src/adapter/node.js

@@ -0,0 +1,77 @@
+// Node deploy adapter — wraps the framework-agnostic Web-Fetch handler from
+// core.js in a Node http.Server / connect-style middleware. Dependency-free
+// (Node 18+ ships global Request/Response/Headers).
+
+import http from 'node:http';
+import { createRequestHandler } from './core.js';
+
+async function nodeToWebRequest(req) {
+  const host = req.headers.host || 'localhost';
+  const url = `http://${host}${req.url}`;
+  const headers = new Headers();
+  for (const [k, v] of Object.entries(req.headers)) {
+    if (v != null) headers.set(k, Array.isArray(v) ? v.join(', ') : String(v));
+  }
+  let body;
+  if (req.method !== 'GET' && req.method !== 'HEAD') {
+    const chunks = [];
+    for await (const chunk of req) chunks.push(chunk);
+    if (chunks.length) body = Buffer.concat(chunks);
+  }
+  return new Request(url, { method: req.method, headers, body });
+}
+
+async function sendWebResponse(res, webRes) {
+  res.statusCode = webRes.status;
+  webRes.headers.forEach((value, key) => res.setHeader(key, value));
+  const text = await webRes.text();
+  res.end(text);
+}
+
+/** Convert a Web-Fetch handler into a Node (req, res) listener. */
+export function toNodeListener(handler) {
+  return async function listener(req, res) {
+    try {
+      const webReq = await nodeToWebRequest(req);
+      const webRes = await handler(webReq);
+      await sendWebResponse(res, webRes);
+    } catch (err) {
+      if (!res.headersSent) res.writeHead(500, { 'content-type': 'text/html; charset=utf-8' });
+      res.end('<!DOCTYPE html><html><body><h1>500 — Server Error</h1></body></html>');
+      // eslint-disable-next-line no-console
+      console.error('[what-server] request error:', err);
+    }
+  };
+}
+
+/** connect/express middleware: handles app routes, calls next() on a 404. */
+export function whatMiddleware(options = {}) {
+  const handler = createRequestHandler(options);
+  return async function middleware(req, res, next) {
+    const webReq = await nodeToWebRequest(req);
+    const webRes = await handler(webReq);
+    if (webRes.status === 404 && typeof next === 'function') return next();
+    await sendWebResponse(res, webRes);
+  };
+}
+
+/**
+ * Create a ready-to-listen Node server. Starts the poll scheduler (if provided)
+ * and stops it on SIGTERM/SIGINT.
+ *   const server = createServer({ routes, cache, scheduler });
+ *   server.listen(3000);
+ */
+export function createServer(options = {}) {
+  const handler = createRequestHandler(options);
+  const server = http.createServer(toNodeListener(handler));
+
+  const { scheduler } = options;
+  if (scheduler) {
+    scheduler.start();
+    const stop = () => { try { scheduler.stop(); } catch {} server.close(); };
+    process.once('SIGTERM', stop);
+    process.once('SIGINT', stop);
+  }
+
+  return server;
+}

package/src/adapter/static.js

@@ -0,0 +1,62 @@
+// Static export adapter — build-time render of static/hybrid routes to a
+// deployable directory of .html files (+ a data.json per page for client-side
+// navigation, mirroring Next's _next/data).
+
+import { mkdir, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { matchRoute } from 'what-router/match';
+import { renderDocument, serializeState } from '../index.js';
+
+function isDynamic(path) {
+  return path.includes(':') || path.includes('*') || path.includes('[');
+}
+
+// Build a concrete URL from a route pattern + params (:p, [p], [...p], *p).
+function buildConcretePath(pattern, params) {
+  return pattern
+    .replace(/\[\.\.\.(\w+)\]/g, (_, n) => params[n] ?? '')
+    .replace(/\[(\w+)\]/g, (_, n) => params[n] ?? '')
+    .replace(/[:*](\w+)/g, (_, n) => params[n] ?? '');
+}
+
+export async function exportStatic({ routes = [], outDir, render, documentOptions = {} } = {}) {
+  const written = [];
+
+  for (const route of routes) {
+    const mode = (route.page && route.page.mode) || route.mode;
+    if (mode !== 'static' && mode !== 'hybrid') continue;
+
+    const pageModule = { default: route.component, loader: route.loader };
+
+    let concrete = [route.path];
+    if (isDynamic(route.path)) {
+      if (typeof route.getStaticPaths !== 'function') continue; // can't enumerate
+      const result = await route.getStaticPaths();
+      concrete = (result.paths || []).map((p) => buildConcretePath(route.path, p.params || {}));
+    }
+
+    for (const urlPath of concrete) {
+      const matched = matchRoute(urlPath, [route]);
+      const params = matched ? matched.params : {};
+      const reqCtx = { params, query: {} };
+
+      const html = render
+        ? await render(pageModule, reqCtx)
+        : await renderDocument(pageModule, reqCtx, documentOptions);
+
+      const dirPath = join(outDir, urlPath === '/' ? '' : urlPath);
+      await mkdir(dirPath, { recursive: true });
+      await writeFile(join(dirPath, 'index.html'), html);
+
+      // data.json for client-side navigation (loader data without a round-trip)
+      if (typeof route.loader === 'function') {
+        const data = await route.loader(reqCtx);
+        await writeFile(join(dirPath, '__what_data.json'), serializeState({ loaderData: data }));
+      }
+
+      written.push(urlPath);
+    }
+  }
+
+  return { pages: written };
+}

package/src/adapter/vercel.js

@@ -0,0 +1,29 @@
+// Vercel adapter. The runtime render function is the same Web-Fetch core
+// handler (deployable as a Vercel Function). ISR maps to Vercel's native
+// s-maxage/stale-while-revalidate headers emitted by the cache engine, so it
+// works on Vercel with no extra config. buildVercelOutput writes a minimal
+// Build Output API config pointing at the function.
+
+import { createRequestHandler } from './core.js';
+
+export function createVercelHandler(options = {}) {
+  // Vercel Functions accept a Web-Fetch (Request) -> Response handler.
+  return createRequestHandler(options);
+}
+
+/**
+ * Write a minimal .vercel/output/config.json that routes all requests to a
+ * single render function. The function file itself is emitted by the build step
+ * (it imports createVercelHandler with the app's routes).
+ */
+export async function buildVercelOutput({ outDir = '.vercel/output', functionName = 'render' } = {}) {
+  const { mkdir, writeFile } = await import('node:fs/promises');
+  const { join } = await import('node:path');
+  await mkdir(outDir, { recursive: true });
+  const config = {
+    version: 3,
+    routes: [{ src: '/.*', dest: `/${functionName}` }],
+  };
+  await writeFile(join(outDir, 'config.json'), JSON.stringify(config, null, 2));
+  return { config, outDir };
+}