document

type Chrome struct {
	// Brand is the name shown when the tenant has none: the document title's
	// suffix and the sidebar's label.
	Brand string
	// Assets is the prefix the shell serves ui.Assets under, e.g. "/admin/assets".
	Assets string
	// Stylesheet is the sheet the shell composed, once, with ui.Compose.
	Stylesheet ui.Sheet
	// Scripts are the controllers a page loads, in order, as file names under
	// Assets + "/js/". A shell lists the kernel's it wants and its own.
	Scripts []string
	// SignIn is where an anonymous visitor to a guarded page is sent, and the
	// route offered for recovery without leaving an unsaved form. Empty means
	// the shell has no sign-in link. Controllers never invent a route.
	//
	// It is a path on this site and nothing else. This package renders what it
	// is given; ui/page checks the value against httpx.LocalPath, the one rule
	// for where a browser may be sent, and clears anything that fails it.
	SignIn string
	// Theme pins data-theme on <html>: a shop is the brand's colour and has no
	// toggle. Empty follows the operating system and the person's own toggle,
	// applied before first paint by an inline snippet the adapter adds.
	Theme string
	// Attrs are further <html> attributes: a client's grain and scrollbar,
	// which the shell's own rules give a meaning to. A lang attribute sets the
	// shell's default document language; View.Language takes precedence.
	Attrs map[string]string
}

type Request struct {
	// Path is the request's own path; a sidebar marks it current.
	Path string
	// Tenant is the display name of the tenant the host resolved to, empty
	// when none did. Brand falls back to the chrome's.
	Tenant string
	// Principal identifies the signed-in caller to the page's own controllers,
	// as the data-principal attribute a form is pinned to. Empty means
	// anonymous, and an anonymous document names nobody.
	Principal string
	// Locale is present when the shell composes Messages: this request's
	// selected content language and formatter.
	Locale *locale.Locale
	// Inline are the nonce-bearing inline scripts this response may run, built
	// by the adapter with InlineScript. A renderer cannot make one: it has no
	// nonce.
	Inline []g.Node
}

type View struct {
	Title  string
	Status int
	Bare   bool
	// Sensitive prevents caching and sends no referrer on this document's
	// outgoing requests, including assets loaded before scripts run. Use it
	// for pages carrying password links or other private URL credentials.
	// It does not redact the incoming URL from application or proxy logs.
	Sensitive bool
	// Language is the BCP 47 tag of the rendered copy, such as "pt-PT".
	// Empty uses Chrome.Attrs["lang"], or English when no default is set.
	// The application selects and translates the content; this field only
	// declares its language to the browser and assistive technology.
	Language string
	// Theme pins data-theme on this document over the chrome's, for a page
	// whose theme is the tenant's choice rather than the shell's. A pinned
	// document carries no theme script: the choice is not the visitor's.
	Theme string
	Head  []g.Node
	Body  []g.Node
}