@absolutejs/absolute 0.20.0-beta.169 → 0.20.0-beta.170

package/dist/vue/server.js

@@ -72,13 +72,44 @@ var __esm = (fn, res, err) => () => {
 };
 var __require = import.meta.require;
 
+// src/utils/escapeScriptContent.ts
+var ESCAPE_LOOKUP, ESCAPE_REGEX, escapeScriptContent = (content) => content.replace(ESCAPE_REGEX, (char) => {
+  const escaped = ESCAPE_LOOKUP[char];
+  return escaped !== undefined ? escaped : char;
+});
+var init_escapeScriptContent = __esm(() => {
+  ESCAPE_LOOKUP = {
+    "\u2028": "\\u2028",
+    "\u2029": "\\u2029",
+    "<": "\\u003C"
+  };
+  ESCAPE_REGEX = /[<\u2028\u2029]/g;
+});
+
+// src/utils/cspNonceRef.ts
+var GETTER_KEY, nonceAttr = (nonce = readCspNonce()) => nonce ? ` nonce="${nonce}"` : "", nonceSvelteHeadStyles = (head, nonce = readCspNonce()) => nonce ? head.replace(/<style(?=\s+id="svelte-[^"]*")(?![^>]*\snonce=)/g, `<style nonce="${nonce}"`) : head, readCspNonce = () => {
+  const getter = Reflect.get(globalThis, GETTER_KEY);
+  if (typeof getter !== "function")
+    return;
+  const nonce = getter();
+  return typeof nonce === "string" ? nonce : undefined;
+}, registerCspNonceGetter = (getter) => {
+  Reflect.set(globalThis, GETTER_KEY, getter);
+};
+var init_cspNonceRef = __esm(() => {
+  GETTER_KEY = Symbol.for("absolutejs.cspNonceGetter");
+});
+
+// src/utils/runtimeMode.ts
+var ENV_VAR = "NODE_ENV", getNodeEnv = () => process.env[ENV_VAR], isDevelopmentRuntime = () => process.env[ENV_VAR] === "development", isProductionRuntime = () => process.env[ENV_VAR] === "production";
+
 // src/utils/inlinePageCss.ts
 var siblingCssCache, clearSiblingCssCache = () => {
   siblingCssCache.clear();
 }, injectInlineCss = (headTag, css) => {
   if (!css)
     return headTag;
-  const styleBlock = `<style data-absolute-page-css>${css}</style>`;
+  const styleBlock = `<style data-absolute-page-css${nonceAttr()}>${css}</style>`;
   return headTag.replace("</head>", `${styleBlock}</head>`);
 }, readSiblingCss = async (siblingJsPath) => {
   if (!siblingJsPath)
@@ -100,6 +131,7 @@ var siblingCssCache, clearSiblingCssCache = () => {
   }
 };
 var init_inlinePageCss = __esm(() => {
+  init_cspNonceRef();
   siblingCssCache = new Map;
 });
 
@@ -196,6 +228,45 @@ var normalizeSlug = (str) => str.trim().replace(/\s+/g, "-").replace(/[^A-Za-z0-
   return normalizeSlug(str).split(/[-_]/).filter(Boolean).map((segment) => segment.charAt(0).toUpperCase() + segment.slice(1).toLowerCase()).join("");
 };
 
+// src/core/staticHtmlNonce.ts
+var nonceStaticHtml = async (html, nonce = readCspNonce()) => {
+  if (!nonce)
+    return html;
+  const stamp = {
+    element: (element) => {
+      if (!element.hasAttribute("nonce"))
+        element.setAttribute("nonce", nonce);
+    }
+  };
+  return new HTMLRewriter().on("script", stamp).on("style", stamp).transform(new Response(html)).text();
+}, isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value), parseHtmxConfig = (content) => {
+  try {
+    const parsed = JSON.parse(content ?? "{}");
+    return isRecord(parsed) ? parsed : {};
+  } catch {
+    return {};
+  }
+}, withHtmxStyleNonce = async (html, nonce = readCspNonce()) => {
+  if (!nonce)
+    return html;
+  let found = false;
+  const merged = await new HTMLRewriter().on('meta[name="htmx-config"]', {
+    element: (element) => {
+      found = true;
+      const config = parseHtmxConfig(element.getAttribute("content"));
+      element.setAttribute("content", JSON.stringify({ ...config, inlineStyleNonce: nonce }));
+    }
+  }).transform(new Response(html)).text();
+  if (found)
+    return merged;
+  const meta = `<meta name="htmx-config" content='${JSON.stringify({ inlineStyleNonce: nonce })}'>`;
+  const headClose = merged.search(/<\/head>/i);
+  return headClose >= 0 ? `${merged.slice(0, headClose)}${meta}${merged.slice(headClose)}` : `${meta}${merged}`;
+};
+var init_staticHtmlNonce = __esm(() => {
+  init_cspNonceRef();
+});
+
 // src/utils/resolveConvention.ts
 import { basename } from "path";
 var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boolean(value) && typeof value === "object", getMap = () => {
@@ -232,7 +303,7 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
   return conventions.defaults?.error;
 }, resolveNotFoundConventionPath = (framework) => getMap()[framework]?.defaults?.notFound, setConventions = (map) => {
   Reflect.set(globalThis, CONVENTIONS_KEY, map);
-}, isDev = () => true, buildErrorProps = (error) => {
+}, isDev = () => isDevelopmentRuntime(), buildErrorProps = (error) => {
   if (error instanceof Error) {
     return {
       message: error.message,
@@ -249,7 +320,9 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
   if (typeof ErrorComponent !== "function")
     return null;
   const element = createElement(ErrorComponent, errorProps);
-  const stream = await renderToReadableStream(element);
+  const stream = await renderToReadableStream(element, {
+    nonce: readCspNonce()
+  });
   return new Response(stream, {
     headers: { "Content-Type": "text/html" },
     status: 500
@@ -260,10 +333,12 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
   const ErrorComponent = mod.default;
   if (!ErrorComponent)
     return null;
+  const nonce = readCspNonce();
   const { head, body } = render(ErrorComponent, {
-    props: errorProps
+    props: errorProps,
+    ...nonce ? { csp: { nonce } } : {}
   });
-  const html = `<!DOCTYPE html><html><head>${head}</head><body>${body}</body></html>`;
+  const html = `<!DOCTYPE html><html><head>${nonceSvelteHeadStyles(head)}</head><body>${body}</body></html>`;
   return new Response(html, {
     headers: { "Content-Type": "text/html" },
     status: 500
@@ -271,7 +346,7 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
 }, unescapeVueStyles = (ssrBody) => {
   let styles = "";
   const body = ssrBody.replace(/<style>([\s\S]*?)<\/style>/g, (_, css) => {
-    styles += `<style>${css.replace(/&quot;/g, '"').replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">")}</style>`;
+    styles += `<style${nonceAttr()}>${css.replace(/&quot;/g, '"').replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">")}</style>`;
     return "";
   });
   return { body, styles };
@@ -303,7 +378,7 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
     status: 500
   });
 }, escapeHtml = (value) => value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;"), replaceErrorTokens = (template, errorProps) => template.replace(/\{\{\s*name\s*\}\}/g, escapeHtml(errorProps.name)).replace(/\{\{\s*message\s*\}\}/g, escapeHtml(errorProps.message)).replace(/\{\{\s*stack\s*\}\}/g, errorProps.stack ? escapeHtml(errorProps.stack) : ""), renderHtmlError = async (conventionPath, errorProps) => {
-  const template = await Bun.file(conventionPath).text();
+  const template = await nonceStaticHtml(await Bun.file(conventionPath).text());
   const html = replaceErrorTokens(template, errorProps);
   return new Response(html, {
     headers: { "Content-Type": "text/html" },
@@ -358,7 +433,9 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
   if (typeof NotFoundComponent !== "function")
     return null;
   const element = createElement(NotFoundComponent);
-  const stream = await renderToReadableStream(element);
+  const stream = await renderToReadableStream(element, {
+    nonce: readCspNonce()
+  });
   return new Response(stream, {
     headers: { "Content-Type": "text/html" },
     status: 404
@@ -369,8 +446,9 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
   const NotFoundComponent = mod.default;
   if (!NotFoundComponent)
     return null;
-  const { head, body } = render(NotFoundComponent);
-  const html = `<!DOCTYPE html><html><head>${head}</head><body>${body}</body></html>`;
+  const nonce = readCspNonce();
+  const { head, body } = render(NotFoundComponent, nonce ? { csp: { nonce } } : {});
+  const html = `<!DOCTYPE html><html><head>${nonceSvelteHeadStyles(head)}</head><body>${body}</body></html>`;
   return new Response(html, {
     headers: { "Content-Type": "text/html" },
     status: 404
@@ -403,7 +481,7 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
     status: 404
   });
 }, renderHtmlNotFound = async (conventionPath) => {
-  const html = await Bun.file(conventionPath).text();
+  const html = await nonceStaticHtml(await Bun.file(conventionPath).text());
   return new Response(html, {
     headers: { "Content-Type": "text/html" },
     status: 404
@@ -421,7 +499,7 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
     logConventionRenderError(framework, "not-found", renderError);
   }
   return null;
-}, NOT_FOUND_PRIORITY, renderFirstNotFound = async () => {
+}, NOT_FOUND_PRIORITY, renderFirstNotFound = async (options = {}) => {
   const renderNext = async (frameworks) => {
     const [framework, ...remaining] = frameworks;
     if (!framework) {
@@ -436,13 +514,16 @@ var CONVENTIONS_KEY = "__absoluteConventions", isConventionsMap = (value) => Boo
     }
     return renderNext(remaining);
   };
-  return renderNext(NOT_FOUND_PRIORITY);
+  return renderNext(options.preferHtmx ? ["htmx", ...NOT_FOUND_PRIORITY.filter((key) => key !== "htmx")] : NOT_FOUND_PRIORITY);
 };
 var init_resolveConvention = __esm(() => {
+  init_cspNonceRef();
+  init_staticHtmlNonce();
   ERROR_RENDERERS = {
     angular: renderAngularError,
     ember: renderEmberError,
     html: renderHtmlError,
+    htmx: renderHtmlError,
     react: renderReactError,
     svelte: renderSvelteError,
     vue: renderVueError
@@ -451,6 +532,7 @@ var init_resolveConvention = __esm(() => {
     angular: renderAngularNotFound,
     ember: renderEmberNotFound,
     html: renderHtmlNotFound,
+    htmx: renderHtmlNotFound,
     react: renderReactNotFound,
     svelte: renderSvelteNotFound,
     vue: renderVueNotFound
@@ -460,7 +542,8 @@ var init_resolveConvention = __esm(() => {
     "svelte",
     "vue",
     "angular",
-    "html"
+    "html",
+    "htmx"
   ];
 });
 
@@ -749,15 +832,15 @@ var ISLAND_BOOTSTRAP_MANIFEST_KEY = "AbsoluteIslandBootstrap", LEGACY_ISLAND_BOO
 var ISLAND_MARKER = 'data-island="true"', MANIFEST_MARKER = "__ABSOLUTE_MANIFEST__", ISLAND_STATE_MARKER = "__ABS_ISLAND_STATE__", CLOSING_HEAD_TAG = "</head>", warnedMissingBootstrap = false, warnIfBootstrapMissing = (manifest) => {
   if (warnedMissingBootstrap || getIslandBootstrapPath(manifest))
     return;
-  if (false)
-    ;
+  if (isProductionRuntime())
+    return;
   warnedMissingBootstrap = true;
   logWarn("A page contains islands, but the build manifest has no islands bootstrap, so they will render without hydrating. Set `islands.registry` in absolute.config.ts (a default bootstrap is generated from it) or point `islands.bootstrap` at a file that calls startIslands().");
 }, buildIslandsHeadMarkup = (manifest) => {
-  const manifestScript = `<script>window.__ABSOLUTE_MANIFEST__ = ${JSON.stringify(manifest)}</script>`;
-  const islandStateScript = `<script>window.__ABS_ISLAND_STATE__ = ${JSON.stringify(globalThis.__ABS_ISLAND_STATE__ ?? {})}</script>`;
+  const manifestScript = `<script${nonceAttr()}>window.__ABSOLUTE_MANIFEST__ = ${escapeScriptContent(JSON.stringify(manifest))}</script>`;
+  const islandStateScript = `<script${nonceAttr()}>window.__ABS_ISLAND_STATE__ = ${escapeScriptContent(JSON.stringify(globalThis.__ABS_ISLAND_STATE__ ?? {}))}</script>`;
   const bootstrapPath = getIslandBootstrapPath(manifest);
-  const bootstrapScript = bootstrapPath ? `<script type="module" src="${bootstrapPath}"></script>` : "";
+  const bootstrapScript = bootstrapPath ? `<script${nonceAttr()} type="module" src="${bootstrapPath}"></script>` : "";
   return `${manifestScript}${islandStateScript}${bootstrapScript}`;
 }, injectHeadMarkup = (html, markup) => {
   const closingHeadIndex = html.indexOf("</head>");
@@ -958,6 +1041,8 @@ var ISLAND_MARKER = 'data-island="true"', MANIFEST_MARKER = "__ABSOLUTE_MANIFEST
   globalThis.__absoluteManifest = manifest;
 };
 var init_islandPageContext = __esm(() => {
+  init_escapeScriptContent();
+  init_cspNonceRef();
   init_logger();
 });
 
@@ -1087,7 +1172,7 @@ var errorPageHtml = ({
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>SSR Error - AbsoluteJS</title>
-<style>
+<style${nonceAttr()}>
 *{margin:0;padding:0;box-sizing:border-box}
 body{min-height:100vh;background:linear-gradient(135deg,rgba(15,23,42,0.98) 0%,rgba(30,41,59,0.98) 100%);color:#e2e8f0;font-family:"JetBrains Mono","Fira Code",ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;font-size:14px;line-height:1.6;display:flex;align-items:flex-start;justify-content:center;padding:32px}
 .card{max-width:720px;width:100%;background:rgba(30,41,59,0.6);border:1px solid rgba(71,85,105,0.5);border-radius:16px;box-shadow:0 25px 50px -12px rgba(0,0,0,0.5),0 0 0 1px rgba(255,255,255,0.05);overflow:hidden}
@@ -1119,20 +1204,23 @@ body{min-height:100vh;background:linear-gradient(135deg,rgba(15,23,42,0.98) 0%,r
 ${script}
 </body>
 </html>`;
-}, RELOAD_ON_REBUILD = `<script>(()=>{const url=(location.protocol==='https:'?'wss://':'ws://')+location.host+'/hmr';let seen=false;const connect=()=>{const socket=new WebSocket(url);socket.onopen=()=>{if(seen)location.reload();seen=true;};socket.onmessage=(event)=>{try{const message=JSON.parse(event.data);const type=message&&typeof message.type==='string'?message.type:'';if(type==='rebuild-complete'||type==='server-entry-reloaded'||type.endsWith('-update'))location.reload();}catch{}};socket.onclose=()=>setTimeout(connect,500);};connect();})();</script>`, buildErrorPage = (framework, pageName, error) => errorPageHtml({
+}, reloadOnRebuild = () => `<script${nonceAttr()}>(()=>{const url=(location.protocol==='https:'?'wss://':'ws://')+location.host+'/hmr';let seen=false;const connect=()=>{const socket=new WebSocket(url);socket.onopen=()=>{if(seen)location.reload();seen=true;};socket.onmessage=(event)=>{try{const message=JSON.parse(event.data);const type=message&&typeof message.type==='string'?message.type:'';if(type==='rebuild-complete'||type==='server-entry-reloaded'||type.endsWith('-update'))location.reload();}catch{}};socket.onclose=()=>setTimeout(connect,500);};connect();})();</script>`, buildErrorPage = (framework, pageName, error) => errorPageHtml({
   framework,
   hint: "Fix the file and save. This page reloads by itself when the build succeeds.",
   kind: "Build Error",
   message: `${pageName || "This page"} could not be built.
 
 ${error ?? "The dev-server terminal has the build output."}`,
-  script: RELOAD_ON_REBUILD
+  script: reloadOnRebuild()
 }), ssrErrorPage = (framework, error) => errorPageHtml({
   framework,
   hint: "A component threw during server-side rendering. Check the terminal for the full stack trace.",
   kind: "Server Render Error",
   message: error instanceof Error ? error.message : String(error)
 });
+var init_ssrErrorPage = __esm(() => {
+  init_cspNonceRef();
+});
 
 // src/core/requestContext.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
@@ -1206,6 +1294,7 @@ var REQUEST_STORAGE_KEY, PAGE_WARMER_KEY, isAbsoluteRequestStorage = (value) =>
   return headClose ? head.slice(0, headClose.index) + links + head.slice(headClose.index) : head + links;
 };
 var init_requestContext = __esm(() => {
+  init_ssrErrorPage();
   REQUEST_STORAGE_KEY = Symbol.for("absolutejs.requestAsyncLocalStorage");
   PAGE_WARMER_KEY = Symbol.for("absolutejs.devPageWarmer");
   absoluteRequestContext = new Elysia2({
@@ -1333,13 +1422,13 @@ var ABSOLUTE_MOBILE_PAGE_MEDIA_TYPE = "application/vnd.absolute.page+json", ABSO
 }, headerVaryValues, envelopeResponse = (response, status) => new Response(JSON.stringify({
   protocol: ABSOLUTE_MOBILE_PAGE_PROTOCOL_VERSION,
   response
-}), { headers: responseHeaders(), status }), isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value), normalizeJsonValue = (value) => {
+}), { headers: responseHeaders(), status }), isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), normalizeJsonValue = (value) => {
   const serialized = JSON.stringify(value);
   if (serialized === undefined) {
     throw new TypeError("Mobile page props must be JSON-serializable.");
   }
   const parsed = JSON.parse(serialized);
-  if (!isRecord(parsed)) {
+  if (!isRecord2(parsed)) {
     throw new TypeError("Mobile page props must serialize to an object.");
   }
   return parsed;
@@ -1369,7 +1458,9 @@ var ABSOLUTE_MOBILE_PAGE_MEDIA_TYPE = "application/vnd.absolute.page+json", ABSO
     return createAbsoluteMobilePageErrorResponse(page.pageId);
   }
 }, finalizeAbsoluteNativeRouteDevelopmentPage = (input) => {
-  if (false) {}
+  if (!isDevelopmentRuntime()) {
+    return createAbsoluteMobileInvalidRequestResponse("The native-route development representation is disabled outside development.");
+  }
   if (input.request?.method !== "GET") {
     return createAbsoluteMobileInvalidRequestResponse("Native-route data requests must use GET.");
   }
@@ -1711,22 +1802,15 @@ var streamSwapRuntime = () => {
   return value.slice(start + 1, end);
 }, getStreamSwapRuntimeScript = () => `(function(){${stripFunctionWrapper(streamSwapRuntime.toString())}})();`;
 
-// src/utils/escapeScriptContent.ts
-var ESCAPE_LOOKUP, ESCAPE_REGEX, escapeScriptContent = (content) => content.replace(ESCAPE_REGEX, (char) => {
-  const escaped = ESCAPE_LOOKUP[char];
-  return escaped !== undefined ? escaped : char;
-});
-var init_escapeScriptContent = __esm(() => {
-  ESCAPE_LOOKUP = {
-    "\u2028": "\\u2028",
-    "\u2029": "\\u2029",
-    "<": "\\u003C"
-  };
-  ESCAPE_REGEX = /[<\u2028\u2029]/g;
-});
-
 // src/utils/streamingSlots.ts
-var SLOT_ID_PREFIX = "abs-slot-", CLOSING_BODY_TAG = "</body>", CLOSING_HEAD_TAG2 = "</head>", CLOSING_BODY_TAG_LENGTH, CLOSING_HEAD_TAG_LENGTH, CLOSING_PAGE_TAG_REGEX, STREAMING_RUNTIME_GLOBAL = "__ABS_SLOT_ENQUEUE__", STREAMING_PENDING_GLOBAL = "__ABS_SLOT_PENDING__", STREAM_TAIL_LOOKBEHIND = 128, STREAMING_SLOT_TIMEOUT_MS = 5000, STREAMING_SLOT_MAX_PER_RESPONSE = 128, STREAMING_SLOT_MAX_HTML_BYTES = 64000, createSlotPatchStatement = (id, payload) => `(window.${STREAMING_RUNTIME_GLOBAL}||function(i,p){window.${STREAMING_PENDING_GLOBAL}=window.${STREAMING_PENDING_GLOBAL}||{};window.${STREAMING_PENDING_GLOBAL}[i]=p;})(${JSON.stringify(id)},${JSON.stringify(payload)});`, createNonceAttr = (nonce) => nonce ? ` nonce="${nonce}"` : "", createStreamingSlotId = () => `${SLOT_ID_PREFIX}${Math.random().toString(BASE_36_RADIX).slice(2, RANDOM_ID_END_INDEX)}`, getStreamingSlotsRuntimeScript = () => getStreamSwapRuntimeScript(), injectHtmlIntoBody = (html, injection) => {
+var SLOT_ID_PREFIX = "abs-slot-", CLOSING_BODY_TAG = "</body>", CLOSING_HEAD_TAG2 = "</head>", CLOSING_BODY_TAG_LENGTH, CLOSING_HEAD_TAG_LENGTH, CLOSING_PAGE_TAG_REGEX, STREAMING_RUNTIME_GLOBAL = "__ABS_SLOT_ENQUEUE__", STREAMING_PENDING_GLOBAL = "__ABS_SLOT_PENDING__", STREAM_TAIL_LOOKBEHIND = 128, STREAMING_SLOT_TIMEOUT_MS = 5000, findSafeFlushIndex = (text, cut) => {
+  const head = text.slice(0, cut);
+  const openScript = head.lastIndexOf("<script");
+  const scriptCut = openScript > head.lastIndexOf("</script>") ? openScript : cut;
+  const beforeScript = text.slice(0, scriptCut);
+  const openTag = beforeScript.lastIndexOf("<");
+  return openTag > beforeScript.lastIndexOf(">") ? openTag : scriptCut;
+}, STREAMING_SLOT_MAX_PER_RESPONSE = 128, STREAMING_SLOT_MAX_HTML_BYTES = 64000, createSlotPatchStatement = (id, payload) => `(window.${STREAMING_RUNTIME_GLOBAL}||function(i,p){window.${STREAMING_PENDING_GLOBAL}=window.${STREAMING_PENDING_GLOBAL}||{};window.${STREAMING_PENDING_GLOBAL}[i]=p;})(${JSON.stringify(id)},${JSON.stringify(payload)});`, createNonceAttr = (nonce) => nonceAttr(nonce), createStreamingSlotId = () => `${SLOT_ID_PREFIX}${Math.random().toString(BASE_36_RADIX).slice(2, RANDOM_ID_END_INDEX)}`, getStreamingSlotsRuntimeScript = () => getStreamSwapRuntimeScript(), injectHtmlIntoBody = (html, injection) => {
   const closingBodyIndex = html.indexOf(CLOSING_BODY_TAG);
   if (closingBodyIndex >= 0) {
     return `${html.slice(0, closingBodyIndex)}${injection}${html.slice(closingBodyIndex)}`;
@@ -1744,7 +1828,7 @@ var SLOT_ID_PREFIX = "abs-slot-", CLOSING_BODY_TAG = "</body>", CLOSING_HEAD_TAG
     getStreamingSlotsRuntimeScript()
   ].filter(Boolean).join(";");
   return `<script${createNonceAttr(nonce)}>${escapeScriptContent(runtimeBody)}</script>`;
-}, toUint8 = (value, encoder) => encoder.encode(value), isRecord2 = (value) => Boolean(value) && typeof value === "object", isSafeHtmlLike = (value) => isRecord2(value) && typeof value.changingThisBreaksApplicationSecurity === "string", normalizeSafeHtml = (value) => {
+}, toUint8 = (value, encoder) => encoder.encode(value), isRecord3 = (value) => Boolean(value) && typeof value === "object", isSafeHtmlLike = (value) => isRecord3(value) && typeof value.changingThisBreaksApplicationSecurity === "string", normalizeSafeHtml = (value) => {
   if (isSafeHtmlLike(value)) {
     return value.changingThisBreaksApplicationSecurity;
   }
@@ -1805,7 +1889,8 @@ var SLOT_ID_PREFIX = "abs-slot-", CLOSING_BODY_TAG = "</body>", CLOSING_HEAD_TAG
 }, createTimeoutError = (slot, timeoutMs) => {
   const error = Object.assign(new Error(`Streaming slot "${slot.id}" timed out after ${timeoutMs}ms`), { __absTimeout: true });
   return error;
-}, isSlotPatchPayloadObject = (value) => isRecord2(value) && ("html" in value), isTimeoutError = (error) => isRecord2(error) && error.__absTimeout === true, toStreamingSlot = (slot, policy) => ({
+}, isSlotPatchPayloadObject = (value) => isRecord3(value) && ("html" in value), isTimeoutError = (error) => isRecord3(error) && error.__absTimeout === true, toStreamingSlot = (slot, policy) => ({
+  dynamic: slot.dynamic,
   errorHtml: slot.errorHtml === undefined ? policy.errorHtml : slot.errorHtml,
   fallbackHtml: normalizeSlotText(slot.fallbackHtml, policy.fallbackHtml),
   id: slot.id ?? createStreamingSlotId(),
@@ -2030,9 +2115,10 @@ var SLOT_ID_PREFIX = "abs-slot-", CLOSING_BODY_TAG = "</body>", CLOSING_HEAD_TAG
     if (tail.length <= STREAM_TAIL_LOOKBEHIND) {
       return tail;
     }
-    const content = tail.slice(0, tail.length - STREAM_TAIL_LOOKBEHIND);
-    controller.enqueue(encoder.encode(content));
-    return tail.slice(-STREAM_TAIL_LOOKBEHIND);
+    const cut = findSafeFlushIndex(tail, tail.length - STREAM_TAIL_LOOKBEHIND);
+    if (cut > 0)
+      controller.enqueue(encoder.encode(tail.slice(0, cut)));
+    return tail.slice(cut);
   };
   const finalizeCompletedBaseWinner = (controller, decodedTail, baseRead) => {
     const footerStart = decodedTail.search(CLOSING_PAGE_TAG_REGEX);
@@ -2265,6 +2351,7 @@ var SLOT_ID_PREFIX = "abs-slot-", CLOSING_BODY_TAG = "</body>", CLOSING_HEAD_TAG
   });
 };
 var init_streamingSlots = __esm(() => {
+  init_cspNonceRef();
   init_constants();
   init_escapeScriptContent();
   CLOSING_BODY_TAG_LENGTH = CLOSING_BODY_TAG.length;
@@ -2279,6 +2366,42 @@ var init_streamingSlots = __esm(() => {
   };
 });
 
+// src/core/partialPrerender.ts
+import { AsyncLocalStorage as AsyncLocalStorage3 } from "async_hooks";
+import { existsSync, readFileSync } from "fs";
+import { rm } from "fs/promises";
+var PARTIAL_HOLES_HEADER = "X-Absolute-Partial-Holes", PARTIAL_SHELL_HEADER = "X-Absolute-Partial-Shell", SINK_STORAGE_KEY, isSinkStorage = (value) => value instanceof AsyncLocalStorage3, getSinkStorage = () => {
+  const existing = Reflect.get(globalThis, SINK_STORAGE_KEY);
+  if (isSinkStorage(existing))
+    return existing;
+  const created = new AsyncLocalStorage3;
+  Reflect.set(globalThis, SINK_STORAGE_KEY, created);
+  return created;
+}, activePartialHolesSink = () => getSinkStorage().getStore(), collectPartialHoles = async (render) => {
+  const sink = { slots: undefined };
+  const response = await getSinkStorage().run(sink, render);
+  return { response, slots: sink.slots };
+}, decodePartialHoles = (value) => value ? value.split(",").filter(Boolean).map((id) => decodeURIComponent(id)) : [], encodePartialHoles = (ids) => ids.map((id) => encodeURIComponent(id)).join(","), isDynamicStreamingSlot = (slot) => slot.dynamic === true, isPartialShellCapture = (request) => request?.headers.get(PARTIAL_SHELL_HEADER) === "1", holesPath = (htmlPath) => htmlPath.replace(/\.html$/, ".holes"), readPartialHoles = (htmlPath) => {
+  const path = holesPath(htmlPath);
+  if (!existsSync(path))
+    return [];
+  return decodePartialHoles(readFileSync(path, "utf-8").trim().split(`
+`).join(","));
+}, writePartialHoles = async (htmlPath, response) => {
+  const ids = decodePartialHoles(response.headers.get(PARTIAL_HOLES_HEADER));
+  if (ids.length > 0) {
+    await Bun.write(holesPath(htmlPath), `${encodePartialHoles(ids).split(",").join(`
+`)}
+`);
+  } else {
+    await rm(holesPath(htmlPath), { force: true });
+  }
+  return ids;
+};
+var init_partialPrerender = __esm(() => {
+  SINK_STORAGE_KEY = Symbol.for("absolutejs.partialPrerenderHolesSink");
+});
+
 // src/core/routeAssets.ts
 var LINK_TAG_RE, REL_STYLESHEET_RE, HREF_RE, TITLE_RE, ENTITIES, ENTITY_RE, decodeEntities = (value) => value.replace(ENTITY_RE, (match) => ENTITIES[match] ?? match), readHeadStylesheets = (head) => {
   if (!head)
@@ -2328,7 +2451,7 @@ var init_browserTranslationAttributes = __esm(() => {
 });
 
 // src/core/browserTranslation.ts
-var BASELINE_MARKER = "__ABSOLUTE_SSR_TEXT_BASELINES__", BROWSER_TRANSLATION_BASELINE_SCRIPT, browserTranslationBaselineTag = () => `<script>${BROWSER_TRANSLATION_BASELINE_SCRIPT}</script>`, injectBrowserTranslationBaseline = (html) => {
+var BASELINE_MARKER = "__ABSOLUTE_SSR_TEXT_BASELINES__", BROWSER_TRANSLATION_BASELINE_SCRIPT, browserTranslationBaselineTag = () => `<script${nonceAttr()}>${BROWSER_TRANSLATION_BASELINE_SCRIPT}</script>`, injectBrowserTranslationBaseline = (html) => {
   if (html.includes(BASELINE_MARKER))
     return html;
   const script = browserTranslationBaselineTag();
@@ -2338,19 +2461,20 @@ var BASELINE_MARKER = "__ABSOLUTE_SSR_TEXT_BASELINES__", BROWSER_TRANSLATION_BAS
   return `${html.slice(0, closingBodyIndex)}${script}${html.slice(closingBodyIndex)}`;
 };
 var init_browserTranslation = __esm(() => {
+  init_cspNonceRef();
   init_browserTranslationAttributes();
   BROWSER_TRANSLATION_BASELINE_SCRIPT = "window.__ABSOLUTE_SSR_TEXT_BASELINES__=new WeakMap();" + "window.__ABSOLUTE_SSR_ATTRIBUTE_BASELINES__=new WeakMap();" + "{const r=document.body,b=window.__ABSOLUTE_SSR_TEXT_BASELINES__," + "a=window.__ABSOLUTE_SSR_ATTRIBUTE_BASELINES__;" + 'if(r)for(const e of [r,...r.querySelectorAll("*")]){' + "const t=new Map();for(const [i,n]of[...e.childNodes].entries())" + 'if(n.nodeType===3)t.set(i,n.nodeValue??"");if(t.size)b.set(e,t);' + `const v=new Map();for(const k of ${JSON.stringify(TRANSLATABLE_ATTRIBUTES)}){` + "const s=e.getAttribute(k);if(s!==null)v.set(k,s);}if(v.size)a.set(e,v);}}";
 });
 
 // src/cli/scripts/telemetry.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
 var configDir, configPath, getTelemetryConfig = () => {
   try {
-    if (!existsSync(configPath))
+    if (!existsSync2(configPath))
       return null;
-    const raw = readFileSync(configPath, "utf-8");
+    const raw = readFileSync2(configPath, "utf-8");
     const config = JSON.parse(raw);
     return config;
   } catch {
@@ -2363,14 +2487,14 @@ var init_telemetry = __esm(() => {
 });
 
 // src/cli/telemetryEvent.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
 import { arch, platform } from "os";
 import { dirname as dirname3, join as join2, parse } from "path";
 var checkCandidate = (candidate) => {
-  if (!existsSync2(candidate)) {
+  if (!existsSync3(candidate)) {
     return null;
   }
-  const pkg = JSON.parse(readFileSync2(candidate, "utf-8"));
+  const pkg = JSON.parse(readFileSync3(candidate, "utf-8"));
   if (pkg.name === "@absolutejs/absolute") {
     const ver = pkg.version;
     return ver;
@@ -2424,17 +2548,17 @@ var init_telemetryEvent = __esm(() => {
 });
 
 // src/dev/buildHMRClient.ts
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { resolve as resolve2 } from "path";
 var {build: bunBuild } = globalThis.Bun;
 var resolveHmrClientPath = () => {
   const projectRoot = process.cwd();
   const fromSource = resolve2(import.meta.dir, "client/hmrClient.ts");
-  if (existsSync3(fromSource) && fromSource.startsWith(projectRoot)) {
+  if (existsSync4(fromSource) && fromSource.startsWith(projectRoot)) {
     return fromSource;
   }
   const fromNodeModules = resolve2(projectRoot, "node_modules/@absolutejs/absolute/dist/dev/client/hmrClient.ts");
-  if (existsSync3(fromNodeModules))
+  if (existsSync4(fromNodeModules))
     return fromNodeModules;
   return resolve2(import.meta.dir, "dev/client/hmrClient.ts");
 }, hmrClientPath, buildHMRClient = async () => {
@@ -2464,6 +2588,8 @@ var init_buildHMRClient = __esm(() => {
 });
 
 // src/vue/pageHandler.ts
+init_escapeScriptContent();
+init_cspNonceRef();
 init_inlinePageCss();
 init_spaRouteCss();
 init_spaRouteManifest();
@@ -2476,6 +2602,8 @@ init_pageResponseCache();
 // src/core/responseEnhancers.ts
 init_streamingSlots();
 init_pageResponseCache();
+init_partialPrerender();
+init_requestContext();
 
 // src/core/streamingSlotRegistrar.ts
 var STREAMING_SLOT_REGISTRAR_KEY = Symbol.for("absolutejs.streamingSlotRegistrar");
@@ -2518,7 +2646,7 @@ var setStreamingSlotWarningController = (controller) => {
   Reflect.set(globalThis, STREAMING_SLOT_WARNING_STORAGE_KEY, controller);
 };
 var warnMissingStreamingSlotCollector = (primitiveName) => {
-  if (isStreamingSlotCollectionActive()) {
+  if (isProductionRuntime() || isStreamingSlotCollectionActive()) {
     return;
   }
   getWarningController()?.maybeWarn(primitiveName);
@@ -2626,18 +2754,51 @@ var mergeStreamingSlots = (registered, explicit) => {
     merged.set(slot.id, slot);
   return [...merged.values()];
 };
+var captureStaticShell = async (responseLike, slots, options) => {
+  const holes = slots.filter(isDynamicStreamingSlot);
+  const staticSlots = slots.filter((slot) => !isDynamicStreamingSlot(slot));
+  const response = await withStreamingSlots(responseLike, {
+    ...options,
+    streamingSlots: staticSlots
+  });
+  if (holes.length === 0 || !response.body)
+    return response;
+  const headers = cloneHeaders(response);
+  headers.set(PARTIAL_HOLES_HEADER, encodePartialHoles(holes.map((slot) => slot.id)));
+  const body = staticSlots.length > 0 ? response.body : injectStreamingRuntimeIntoStream(response.body, options.nonce, options.runtimePlacement, options.runtimePreludeScript);
+  return new Response(body, {
+    headers,
+    status: response.status,
+    statusText: response.statusText
+  });
+};
+var handOverHoles = async (responseLike, slots, sink) => {
+  sink.slots = slots.filter(isDynamicStreamingSlot);
+  const response = await toResponse(responseLike);
+  await response.body?.cancel().catch(() => {
+    return;
+  });
+  return new Response(null, { status: 204 });
+};
 var withRegisteredStreamingSlots = async (renderResponse, options = {}) => {
   const { result, slots } = await runWithStreamingSlotRegistry(renderResponse);
   const explicit = options.streamingSlots ?? [];
+  const streamingSlots = mergeStreamingSlots(slots, explicit);
+  const holesSink = activePartialHolesSink();
+  if (holesSink)
+    return handOverHoles(result, streamingSlots, holesSink);
+  if (isPartialShellCapture(getCurrentAbsoluteRequest())) {
+    return captureStaticShell(result, streamingSlots, options);
+  }
   return withStreamingSlots(result, {
     ...options,
-    streamingSlots: mergeStreamingSlots(slots, explicit)
+    streamingSlots
   });
 };
 
 // src/core/streamingSlotWarningScope.ts
 init_logger();
-import { AsyncLocalStorage as AsyncLocalStorage3 } from "async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage4 } from "async_hooks";
 var STREAMING_SLOT_WARNING_STORAGE_KEY2 = Symbol.for("absolutejs.streamingSlotWarningAsyncLocalStorage");
 var isObjectRecord4 = (value) => Boolean(value) && typeof value === "object";
 var isAsyncLocalStorage3 = (value) => isObjectRecord4(value) && ("getStore" in value) && typeof value.getStore === "function" && ("run" in value) && typeof value.run === "function";
@@ -2653,7 +2814,7 @@ var ensureWarningStorage = () => {
   if (existing) {
     return existing;
   }
-  const storage = new AsyncLocalStorage3;
+  const storage = new AsyncLocalStorage4;
   Reflect.set(globalThis, STREAMING_SLOT_WARNING_STORAGE_KEY2, storage);
   return storage;
 };
@@ -2684,7 +2845,9 @@ setStreamingSlotWarningController({
   }
 });
 var captureStreamingSlotWarningCallsite = () => {
-  if (false) {}
+  if (isProductionRuntime()) {
+    return;
+  }
   const { stack } = new Error;
   if (!stack) {
     return;
@@ -2694,6 +2857,7 @@ var captureStreamingSlotWarningCallsite = () => {
 var runWithStreamingSlotWarningScope = (task, metadata) => ensureWarningStorage().run({ handlerCallsite: metadata?.handlerCallsite, hasWarned: false }, task);
 
 // src/vue/pageHandler.ts
+init_ssrErrorPage();
 init_resolveConvention();
 init_routeAssets();
 
@@ -2737,23 +2901,87 @@ var ABSOLUTE_TELEPORT_TARGET = `#${ABSOLUTE_TELEPORT_TARGET_ID}`;
 
 // src/vue/pageHandler.ts
 init_browserTranslation();
-var isRecord3 = (value) => typeof value === "object" && value !== null;
-var isGenericVueComponent = (value) => typeof value === "function" || isRecord3(value);
+
+// src/vue/serverDataPayload.ts
+init_cspNonceRef();
+init_escapeScriptContent();
+var SERVER_DATA_CONTEXT_KEY = "__absoluteServerData";
+var SERVER_DATA_GLOBAL = "__ABSOLUTE_SERVER_DATA__";
+var GENERIC_ERROR_MESSAGE = "Loading server data failed.";
+var toPublicError = (cause) => {
+  const detail = cause instanceof Error ? cause.message : String(cause);
+  const publicError = new Error(isProductionRuntime() ? GENERIC_ERROR_MESSAGE : detail);
+  publicError.name = cause instanceof Error ? cause.name : "Error";
+  return publicError;
+};
+var claimServerDataKey = (collector, key) => {
+  if (!collector.claimed.has(key)) {
+    collector.claimed.add(key);
+    return true;
+  }
+  const message = `useServerData: the key "${key}" is used more than once while rendering this page. Each useServerData() call in one request needs its own key \u2014 include the component's identity (for example an id or route param) in the key.`;
+  if (isProductionRuntime()) {
+    console.warn(`${message} The repeated call will load in the browser.`);
+  } else {
+    collector.failure ??= new Error(message);
+  }
+  return false;
+};
+var createServerDataCollector = () => {
+  const collector = {
+    claimed: new Set,
+    failure: null,
+    json: new Map
+  };
+  return collector;
+};
+var isServerDataCollector = (value) => typeof value === "object" && value !== null && ("claimed" in value) && value.claimed instanceof Set && ("failure" in value) && (value.failure === null || value.failure instanceof Error) && ("json" in value) && value.json instanceof Map;
+var serializeServerDataScript = (collector) => {
+  if (!collector || collector.json.size === 0)
+    return "";
+  const members = [...collector.json].map(([key, json]) => `${JSON.stringify(key)}:${json}`);
+  return `<script${nonceAttr()}>window.${SERVER_DATA_GLOBAL}=${escapeScriptContent(`{${members.join(",")}}`)}</script>`;
+};
+var storeServerDataError = (collector, key, cause) => {
+  console.error(`[SSR] useServerData("${key}") failed:`, cause);
+  const publicError = toPublicError(cause);
+  const { message, name } = publicError;
+  collector.json.set(key, JSON.stringify({ error: { message, name } }));
+  return publicError;
+};
+var storeServerDataValue = (collector, key, value) => {
+  try {
+    collector.json.set(key, `{"data":${JSON.stringify(value) ?? "null"}}`);
+    return null;
+  } catch (cause) {
+    const reason = cause instanceof Error ? cause.message : String(cause);
+    const failure = new Error(`useServerData: the value for "${key}" cannot be serialized to JSON (${reason}).`);
+    return storeServerDataError(collector, key, failure);
+  }
+};
+var throwServerDataFailure = (collector) => {
+  if (collector.failure)
+    throw collector.failure;
+};
+
+// src/vue/pageHandler.ts
+var isRecord4 = (value) => typeof value === "object" && value !== null;
+var isGenericVueComponent = (value) => typeof value === "function" || isRecord4(value);
 var readHasIslands = (value) => {
-  if (!isRecord3(value))
+  if (!isRecord4(value))
     return false;
   const hasIslands = value["__ABSOLUTE_PAGE_HAS_ISLANDS__"];
   return typeof hasIslands === "boolean" ? hasIslands : false;
 };
 var isVueSetupApp = (value) => typeof value === "function";
 var readSetupAppHook = (value) => {
-  if (!isRecord3(value))
+  if (!isRecord4(value))
     return null;
   const { setupApp } = value;
   return isVueSetupApp(setupApp) ? setupApp : null;
 };
-var readHasSpaRoutes = (value) => isRecord3(value) && Array.isArray(value["routes"]);
-var readDefaultExport = (value) => isRecord3(value) ? value.default : undefined;
+var readHasSpaRoutes = (value) => isRecord4(value) && Array.isArray(value["routes"]);
+var readDefaultExport = (value) => isRecord4(value) ? value.default : undefined;
 var resolveRequestRenderUrl = (request) => {
   if (!request)
     return "/";
@@ -2769,17 +2997,16 @@ var primeVueStream = async (stream) => {
   const firstChunk = await reader.read();
   return { firstChunk, reader };
 };
-var cachedSsrOnlyHmrShim = null;
-var buildSsrOnlyHmrShim = async () => {
+var cachedSsrOnlyHmrBundle = null;
+var loadSsrOnlyHmrBundle = async () => {
   await Promise.resolve().then(() => init_buildHMRClient());
-  const bundle = await buildHMRClient();
-  return `<script>window.__HMR_FRAMEWORK__="vue";</script><script data-hmr-client>${bundle}</script>`;
+  return buildHMRClient();
 };
-var getSsrOnlyHmrShim = () => {
-  if (cachedSsrOnlyHmrShim)
-    return cachedSsrOnlyHmrShim;
-  cachedSsrOnlyHmrShim = buildSsrOnlyHmrShim();
-  return cachedSsrOnlyHmrShim;
+var getSsrOnlyHmrShim = async () => {
+  cachedSsrOnlyHmrBundle ??= loadSsrOnlyHmrBundle();
+  const bundle = await cachedSsrOnlyHmrBundle;
+  const nonce = nonceAttr();
+  return `<script${nonce}>window.__HMR_FRAMEWORK__="vue";</script><script${nonce} data-hmr-client>${bundle}</script>`;
 };
 var handleVuePageRequest = async (input) => {
   const passedPageComponent = input.Page;
@@ -2901,13 +3128,17 @@ var handleVuePageRequest = async (input) => {
           status: 404
         });
       }
-      const ssrContext = {};
+      const serverData = createServerDataCollector();
+      const ssrContext = {
+        [SERVER_DATA_CONTEXT_KEY]: serverData
+      };
       const head = `<!DOCTYPE html><html>${resolvedHeadTag}<body><div id="root">`;
-      const ssrOnlyHmrShim = clientMode === "none" ? await getSsrOnlyHmrShim() : "";
+      const ssrOnlyHmrShim = clientMode === "none" && isDevelopmentRuntime() ? await getSsrOnlyHmrShim() : "";
       const buildTail = () => {
+        throwServerDataFailure(serverData);
         const teleports = ssrContext.teleports?.[ABSOLUTE_TELEPORT_TARGET] ?? "";
         const teleportHost = `<div id="${ABSOLUTE_TELEPORT_TARGET_ID}">${teleports}</div>`;
-        return clientMode === "none" ? `</div>${teleportHost}${ssrOnlyHmrShim}</body></html>` : `</div>${teleportHost}<script>${BROWSER_TRANSLATION_BASELINE_SCRIPT}window.__INITIAL_PROPS__=${JSON.stringify(maybeProps ?? {})}</script><script type="module" src="${resolvedIndexPath}"></script></body></html>`;
+        return clientMode === "none" ? `</div>${teleportHost}${ssrOnlyHmrShim}</body></html>` : `</div>${teleportHost}<script${nonceAttr()}>${BROWSER_TRANSLATION_BASELINE_SCRIPT}window.__INITIAL_PROPS__=${escapeScriptContent(JSON.stringify(maybeProps ?? {}))}</script>${serializeServerDataScript(serverData)}<script${nonceAttr()} type="module" src="${resolvedIndexPath}"></script></body></html>`;
       };
       if (resolvedPage.hasSpaRoutes && clientMode === "auto") {
         return new Response(`${head}${buildTail()}`, {
@@ -2990,5 +3221,5 @@ export {
   handleVuePageRequest
 };
 
-//# debugId=49A4A37141A1E21564756E2164756E21
+//# debugId=EE8A9B61855702DE64756E2164756E21
 //# sourceMappingURL=server.js.map