@analogjs/platform 3.0.0-alpha.68 → 3.0.0-alpha.69

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@analogjs/platform",
-  "version": "3.0.0-alpha.68",
+  "version": "3.0.0-alpha.69",
   "description": "The fullstack meta-framework for Angular",
   "type": "module",
   "author": "Brandon Roberts <robertsbt@gmail.com>",
@@ -45,11 +45,11 @@
     "es-toolkit": "^1.45.1",
     "tinyglobby": "^0.2.15",
     "nitro": "3.0.260603-beta",
-    "@analogjs/vite-plugin-angular": "3.0.0-alpha.68",
-    "@analogjs/vite-plugin-nitro": "3.0.0-alpha.68",
+    "@analogjs/vite-plugin-angular": "3.0.0-alpha.69",
     "@babel/core": "^7.28.6",
     "ofetch": "2.0.0-alpha.3",
     "oxc-parser": "^0.124.0",
+    "magic-string": "^0.30.21",
     "rolldown": "^1.0.0-rc.13",
     "obug": "^2.1.1",
     "vitefu": "^1.1.2",

package/src/lib/clear-client-page-endpoint.js

@@ -1,6 +1,7 @@
+import { serverFnFileId } from "./server-fn-id.js";
+import { injectServerFnIds } from "./inject-server-fn-ids.js";
 import { scrubServerFnModule } from "./server-fn-client-transform.js";
 import { normalizePath } from "vite";
-import { injectServerFnIds, serverFnFileId } from "@analogjs/vite-plugin-nitro";
 //#region packages/platform/src/lib/clear-client-page-endpoint.ts
 function clearClientPageEndpointsPlugin() {
 	let projectRoot = process.cwd();

package/src/lib/clear-client-page-endpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"clear-client-page-endpoint.js","names":[],"sources":["../../../src/lib/clear-client-page-endpoint.ts"],"sourcesContent":["import { Plugin, normalizePath } from 'vite';\nimport { injectServerFnIds, serverFnFileId } from '@analogjs/vite-plugin-nitro';\n\nimport { scrubServerFnModule } from './server-fn-client-transform.js';\n\nexport function clearClientPageEndpointsPlugin(): Plugin {\n  let projectRoot = process.cwd();\n  let isBuild = true;\n\n  return {\n    name: 'analogjs-platform-clear-client-page-endpoint',\n    config() {\n      return {\n        build: {\n          rollupOptions: {\n            onwarn(warning) {\n              if (\n                warning.message.includes('empty chunk') &&\n                warning.message.endsWith('.server')\n              ) {\n                return;\n              }\n            },\n          },\n        },\n      };\n    },\n    configResolved(config) {\n      projectRoot = config.root;\n      isBuild = config.command === 'build';\n    },\n    transform(code, id, options) {\n      if (!id.endsWith('.server.ts')) {\n        return;\n      }\n\n      // Server-function ids are derived from the project-root-relative path so\n      // the client proxy and the server registration always resolve to the same\n      // opaque, collision-free route.\n      const fileId = serverFnFileId(id, projectRoot);\n\n      if (options?.ssr) {\n        // SSR build keeps the real handlers but stamps the derived id into each\n        // serverFn config so it registers under the route the client calls.\n        const injected = injectServerFnIds(code, fileId);\n        return injected ? { code: injected.code, map: null } : undefined;\n      }\n\n      // Client build: a `.server.ts` defining server functions is rewritten to\n      // client-safe proxies (the `{ id, url, method }` refs the browser\n      // dispatches through); handlers and server imports are dropped so they\n      // tree-shake away.\n      const scrubbed = scrubServerFnModule(code, fileId);\n      if (scrubbed) {\n        // An empty mapping, not `null`: a null map lets the original module —\n        // handlers and all — survive in `sourcesContent` further down the\n        // pipeline, which would ship the server code to the browser after the\n        // scrub went to the trouble of removing it.\n        return { code: scrubbed.code, map: { mappings: '' } };\n      }\n\n      // Page load/action endpoints carry no client-consumable exports. Only the\n      // client build empties them; the dev server never pulls them into the\n      // browser graph, and emptying them there would break the SSR request.\n      if (isBuild && id.includes(normalizePath('src/app/pages'))) {\n        return {\n          code: 'export default undefined;',\n          map: null,\n        };\n      }\n\n      return;\n    },\n  };\n}\n"],"mappings":";;;;AAKA,SAAgB,iCAAyC;CACvD,IAAI,cAAc,QAAQ,KAAK;CAC/B,IAAI,UAAU;AAEd,QAAO;EACL,MAAM;EACN,SAAS;AACP,UAAO,EACL,OAAO,EACL,eAAe,EACb,OAAO,SAAS;AACd,QACE,QAAQ,QAAQ,SAAS,cAAc,IACvC,QAAQ,QAAQ,SAAS,UAAU,CAEnC;MAGL,EACF,EACF;;EAEH,eAAe,QAAQ;AACrB,iBAAc,OAAO;AACrB,aAAU,OAAO,YAAY;;EAE/B,UAAU,MAAM,IAAI,SAAS;AAC3B,OAAI,CAAC,GAAG,SAAS,aAAa,CAC5B;GAMF,MAAM,SAAS,eAAe,IAAI,YAAY;AAE9C,OAAI,SAAS,KAAK;IAGhB,MAAM,WAAW,kBAAkB,MAAM,OAAO;AAChD,WAAO,WAAW;KAAE,MAAM,SAAS;KAAM,KAAK;KAAM,GAAG,KAAA;;GAOzD,MAAM,WAAW,oBAAoB,MAAM,OAAO;AAClD,OAAI,SAKF,QAAO;IAAE,MAAM,SAAS;IAAM,KAAK,EAAE,UAAU,IAAI;IAAE;AAMvD,OAAI,WAAW,GAAG,SAAS,cAAc,gBAAgB,CAAC,CACxD,QAAO;IACL,MAAM;IACN,KAAK;IACN;;EAKN"}
+{"version":3,"file":"clear-client-page-endpoint.js","names":[],"sources":["../../../src/lib/clear-client-page-endpoint.ts"],"sourcesContent":["import { Plugin, normalizePath } from 'vite';\nimport { injectServerFnIds } from './inject-server-fn-ids.js';\nimport { serverFnFileId } from './server-fn-id.js';\n\nimport { scrubServerFnModule } from './server-fn-client-transform.js';\n\nexport function clearClientPageEndpointsPlugin(): Plugin {\n  let projectRoot = process.cwd();\n  let isBuild = true;\n\n  return {\n    name: 'analogjs-platform-clear-client-page-endpoint',\n    config() {\n      return {\n        build: {\n          rollupOptions: {\n            onwarn(warning) {\n              if (\n                warning.message.includes('empty chunk') &&\n                warning.message.endsWith('.server')\n              ) {\n                return;\n              }\n            },\n          },\n        },\n      };\n    },\n    configResolved(config) {\n      projectRoot = config.root;\n      isBuild = config.command === 'build';\n    },\n    transform(code, id, options) {\n      if (!id.endsWith('.server.ts')) {\n        return;\n      }\n\n      // Server-function ids are derived from the project-root-relative path so\n      // the client proxy and the server registration always resolve to the same\n      // opaque, collision-free route.\n      const fileId = serverFnFileId(id, projectRoot);\n\n      if (options?.ssr) {\n        // SSR build keeps the real handlers but stamps the derived id into each\n        // serverFn config so it registers under the route the client calls.\n        const injected = injectServerFnIds(code, fileId);\n        return injected ? { code: injected.code, map: null } : undefined;\n      }\n\n      // Client build: a `.server.ts` defining server functions is rewritten to\n      // client-safe proxies (the `{ id, url, method }` refs the browser\n      // dispatches through); handlers and server imports are dropped so they\n      // tree-shake away.\n      const scrubbed = scrubServerFnModule(code, fileId);\n      if (scrubbed) {\n        // An empty mapping, not `null`: a null map lets the original module —\n        // handlers and all — survive in `sourcesContent` further down the\n        // pipeline, which would ship the server code to the browser after the\n        // scrub went to the trouble of removing it.\n        return { code: scrubbed.code, map: { mappings: '' } };\n      }\n\n      // Page load/action endpoints carry no client-consumable exports. Only the\n      // client build empties them; the dev server never pulls them into the\n      // browser graph, and emptying them there would break the SSR request.\n      if (isBuild && id.includes(normalizePath('src/app/pages'))) {\n        return {\n          code: 'export default undefined;',\n          map: null,\n        };\n      }\n\n      return;\n    },\n  };\n}\n"],"mappings":";;;;;AAMA,SAAgB,iCAAyC;CACvD,IAAI,cAAc,QAAQ,KAAK;CAC/B,IAAI,UAAU;AAEd,QAAO;EACL,MAAM;EACN,SAAS;AACP,UAAO,EACL,OAAO,EACL,eAAe,EACb,OAAO,SAAS;AACd,QACE,QAAQ,QAAQ,SAAS,cAAc,IACvC,QAAQ,QAAQ,SAAS,UAAU,CAEnC;MAGL,EACF,EACF;;EAEH,eAAe,QAAQ;AACrB,iBAAc,OAAO;AACrB,aAAU,OAAO,YAAY;;EAE/B,UAAU,MAAM,IAAI,SAAS;AAC3B,OAAI,CAAC,GAAG,SAAS,aAAa,CAC5B;GAMF,MAAM,SAAS,eAAe,IAAI,YAAY;AAE9C,OAAI,SAAS,KAAK;IAGhB,MAAM,WAAW,kBAAkB,MAAM,OAAO;AAChD,WAAO,WAAW;KAAE,MAAM,SAAS;KAAM,KAAK;KAAM,GAAG,KAAA;;GAOzD,MAAM,WAAW,oBAAoB,MAAM,OAAO;AAClD,OAAI,SAKF,QAAO;IAAE,MAAM,SAAS;IAAM,KAAK,EAAE,UAAU,IAAI;IAAE;AAMvD,OAAI,WAAW,GAAG,SAAS,cAAc,gBAAgB,CAAC,CACxD,QAAO;IACL,MAAM;IACN,KAAK;IACN;;EAKN"}

package/src/lib/inject-server-fn-ids.d.ts

@@ -0,0 +1,17 @@
+export interface InjectServerFnIdsResult {
+	code: string;
+	ids: {
+		name: string;
+		id: string;
+	}[];
+}
+/**
+* Server/SSR-build transform: injects the derived `id` into each
+* `export const NAME = serverFn(config, handler)` so the function registers
+* under the same opaque id the client proxy dispatches to. Unlike the client
+* scrub this keeps the handler and every other statement intact — it only edits
+* the config object — so the server module still runs the real implementation.
+*
+* Returns `null` when the module defines no server function.
+*/
+export declare function injectServerFnIds(code: string, fileId: string): InjectServerFnIdsResult | null;

package/src/lib/inject-server-fn-ids.js

@@ -0,0 +1,94 @@
+import { deriveServerFnId } from "./server-fn-id.js";
+import { parseSync } from "oxc-parser";
+import MagicString from "magic-string";
+//#region packages/platform/src/lib/inject-server-fn-ids.ts
+var SERVER_FN_SOURCE = "@analogjs/router/server";
+/**
+* Server/SSR-build transform: injects the derived `id` into each
+* `export const NAME = serverFn(config, handler)` so the function registers
+* under the same opaque id the client proxy dispatches to. Unlike the client
+* scrub this keeps the handler and every other statement intact — it only edits
+* the config object — so the server module still runs the real implementation.
+*
+* Returns `null` when the module defines no server function.
+*/
+function injectServerFnIds(code, fileId) {
+	if (!code.includes("serverFn")) return null;
+	const { program } = parseSync(fileId, code);
+	const body = program.body;
+	const serverFnLocalNames = collectServerFnLocalNames(body);
+	const magic = new MagicString(code);
+	const ids = [];
+	for (const node of body) {
+		if (node.type !== "ExportNamedDeclaration" || node.declaration?.type !== "VariableDeclaration") continue;
+		for (const declarator of node.declaration.declarations) {
+			if (declarator.id?.type !== "Identifier" || declarator.init?.type !== "CallExpression" || declarator.init.callee?.type !== "Identifier" || !serverFnLocalNames.has(declarator.init.callee.name)) continue;
+			const name = declarator.id.name;
+			const id = deriveServerFnId(fileId, name);
+			ids.push({
+				name,
+				id
+			});
+			const args = declarator.init.arguments ?? [];
+			const arg0 = args[0];
+			const idProp = `id: ${JSON.stringify(id)}`;
+			if (arg0?.type === "ObjectExpression") {
+				assertMethodInputCompatible(arg0, name, fileId);
+				injectId(magic, arg0, id);
+			} else if (isFunctionNode(arg0)) magic.appendLeft(arg0.start, `{ ${idProp} }, `);
+			else if (arg0 && args.length >= 2) {
+				magic.appendLeft(arg0.start, `{ ${idProp}, input: `);
+				magic.appendRight(arg0.end, ` }`);
+			} else throw new Error(`[analog] serverFn "${name}" in ${fileId} must be called as serverFn(handler), serverFn(schema, handler), or serverFn(config, handler).`);
+		}
+	}
+	if (ids.length === 0) return null;
+	return {
+		code: magic.toString(),
+		ids
+	};
+}
+/**
+* Insert (or replace) `id: "<derived>"` in the config object. Authors do not
+* supply an id; a stray one is overwritten so the route is always the derived,
+* non-enumerable digest — never an author-controlled value.
+*/
+function injectId(magic, configArg, id) {
+	const existing = (configArg.properties ?? []).find((prop) => prop.type === "Property" && (prop.key?.type === "Identifier" ? prop.key.name : prop.key?.value) === "id");
+	if (existing) {
+		magic.overwrite(existing.value.start, existing.value.end, JSON.stringify(id));
+		return;
+	}
+	magic.appendRight(configArg.start + 1, ` id: ${JSON.stringify(id)},`);
+}
+/**
+* Reject `method: 'GET'` alongside an `input` schema at build time: GET carries
+* no body, so a GET function can never receive validated input.
+*/
+function assertMethodInputCompatible(configArg, name, fileId) {
+	let method;
+	let hasInput = false;
+	for (const prop of configArg.properties ?? []) {
+		if (prop.type !== "Property") continue;
+		const key = prop.key?.type === "Identifier" ? prop.key.name : prop.key?.value;
+		if (key === "method" && prop.value?.type === "Literal") method = prop.value.value;
+		else if (key === "input") hasInput = true;
+	}
+	if (method === "GET" && hasInput) throw new Error(`[analog] serverFn "${name}" in ${fileId} declares method: 'GET' with an input schema; GET carries no body. Use POST (the default when input is present) or drop the input.`);
+}
+function isFunctionNode(node) {
+	return node?.type === "ArrowFunctionExpression" || node?.type === "FunctionExpression";
+}
+function collectServerFnLocalNames(body) {
+	const names = /* @__PURE__ */ new Set();
+	for (const node of body) {
+		if (node.type !== "ImportDeclaration" || node.source?.value !== SERVER_FN_SOURCE) continue;
+		for (const spec of node.specifiers ?? []) if (spec.type === "ImportSpecifier" && spec.imported?.name === "serverFn") names.add(spec.local.name);
+	}
+	if (names.size === 0) names.add("serverFn");
+	return names;
+}
+//#endregion
+export { injectServerFnIds };
+
+//# sourceMappingURL=inject-server-fn-ids.js.map

package/src/lib/inject-server-fn-ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject-server-fn-ids.js","names":[],"sources":["../../../src/lib/inject-server-fn-ids.ts"],"sourcesContent":["import MagicString from 'magic-string';\nimport { parseSync } from 'oxc-parser';\n\nimport { deriveServerFnId } from './server-fn-id.js';\n\nconst SERVER_FN_SOURCE = '@analogjs/router/server';\n\nexport interface InjectServerFnIdsResult {\n  code: string;\n  ids: { name: string; id: string }[];\n}\n\n/**\n * Server/SSR-build transform: injects the derived `id` into each\n * `export const NAME = serverFn(config, handler)` so the function registers\n * under the same opaque id the client proxy dispatches to. Unlike the client\n * scrub this keeps the handler and every other statement intact — it only edits\n * the config object — so the server module still runs the real implementation.\n *\n * Returns `null` when the module defines no server function.\n */\nexport function injectServerFnIds(\n  code: string,\n  fileId: string,\n): InjectServerFnIdsResult | null {\n  if (!code.includes('serverFn')) {\n    return null;\n  }\n\n  const { program } = parseSync(fileId, code);\n  const body = (program as { body: any[] }).body;\n  const serverFnLocalNames = collectServerFnLocalNames(body);\n\n  const magic = new MagicString(code);\n  const ids: { name: string; id: string }[] = [];\n\n  for (const node of body) {\n    if (\n      node.type !== 'ExportNamedDeclaration' ||\n      node.declaration?.type !== 'VariableDeclaration'\n    ) {\n      continue;\n    }\n    for (const declarator of node.declaration.declarations) {\n      if (\n        declarator.id?.type !== 'Identifier' ||\n        declarator.init?.type !== 'CallExpression' ||\n        declarator.init.callee?.type !== 'Identifier' ||\n        !serverFnLocalNames.has(declarator.init.callee.name)\n      ) {\n        continue;\n      }\n\n      const name = declarator.id.name;\n      const id = deriveServerFnId(fileId, name);\n      ids.push({ name, id });\n\n      const args = declarator.init.arguments ?? [];\n      const arg0 = args[0];\n      const idProp = `id: ${JSON.stringify(id)}`;\n\n      if (arg0?.type === 'ObjectExpression') {\n        // serverFn({ … }, handler) — inject the id into the config object.\n        assertMethodInputCompatible(arg0, name, fileId);\n        injectId(magic, arg0, id);\n      } else if (isFunctionNode(arg0)) {\n        // serverFn(handler) — synthesize a config: `{ id }, handler`.\n        magic.appendLeft(arg0.start, `{ ${idProp} }, `);\n      } else if (arg0 && args.length >= 2) {\n        // serverFn(schema, handler) — wrap the schema into `{ id, input: <schema> }`.\n        magic.appendLeft(arg0.start, `{ ${idProp}, input: `);\n        magic.appendRight(arg0.end, ` }`);\n      } else {\n        throw new Error(\n          `[analog] serverFn \"${name}\" in ${fileId} must be called as serverFn(handler), serverFn(schema, handler), or serverFn(config, handler).`,\n        );\n      }\n    }\n  }\n\n  if (ids.length === 0) {\n    return null;\n  }\n\n  return { code: magic.toString(), ids };\n}\n\n/**\n * Insert (or replace) `id: \"<derived>\"` in the config object. Authors do not\n * supply an id; a stray one is overwritten so the route is always the derived,\n * non-enumerable digest — never an author-controlled value.\n */\nfunction injectId(magic: MagicString, configArg: any, id: string): void {\n  const existing = (configArg.properties ?? []).find(\n    (prop: any) =>\n      prop.type === 'Property' &&\n      (prop.key?.type === 'Identifier' ? prop.key.name : prop.key?.value) ===\n        'id',\n  );\n\n  if (existing) {\n    magic.overwrite(\n      existing.value.start,\n      existing.value.end,\n      JSON.stringify(id),\n    );\n    return;\n  }\n\n  // Insert as the first property, right after the opening brace.\n  magic.appendRight(configArg.start + 1, ` id: ${JSON.stringify(id)},`);\n}\n\n/**\n * Reject `method: 'GET'` alongside an `input` schema at build time: GET carries\n * no body, so a GET function can never receive validated input.\n */\nfunction assertMethodInputCompatible(\n  configArg: any,\n  name: string,\n  fileId: string,\n): void {\n  let method: string | undefined;\n  let hasInput = false;\n  for (const prop of configArg.properties ?? []) {\n    if (prop.type !== 'Property') continue;\n    const key =\n      prop.key?.type === 'Identifier' ? prop.key.name : prop.key?.value;\n    if (key === 'method' && prop.value?.type === 'Literal') {\n      method = prop.value.value;\n    } else if (key === 'input') {\n      hasInput = true;\n    }\n  }\n  if (method === 'GET' && hasInput) {\n    throw new Error(\n      `[analog] serverFn \"${name}\" in ${fileId} declares method: 'GET' with an input schema; GET carries no body. Use POST (the default when input is present) or drop the input.`,\n    );\n  }\n}\n\nfunction isFunctionNode(node: any): boolean {\n  return (\n    node?.type === 'ArrowFunctionExpression' ||\n    node?.type === 'FunctionExpression'\n  );\n}\n\nfunction collectServerFnLocalNames(body: any[]): Set<string> {\n  const names = new Set<string>();\n  for (const node of body) {\n    if (\n      node.type !== 'ImportDeclaration' ||\n      node.source?.value !== SERVER_FN_SOURCE\n    ) {\n      continue;\n    }\n    for (const spec of node.specifiers ?? []) {\n      if (\n        spec.type === 'ImportSpecifier' &&\n        spec.imported?.name === 'serverFn'\n      ) {\n        names.add(spec.local.name);\n      }\n    }\n  }\n  if (names.size === 0) {\n    names.add('serverFn');\n  }\n  return names;\n}\n"],"mappings":";;;;AAKA,IAAM,mBAAmB;;;;;;;;;;AAgBzB,SAAgB,kBACd,MACA,QACgC;AAChC,KAAI,CAAC,KAAK,SAAS,WAAW,CAC5B,QAAO;CAGT,MAAM,EAAE,YAAY,UAAU,QAAQ,KAAK;CAC3C,MAAM,OAAQ,QAA4B;CAC1C,MAAM,qBAAqB,0BAA0B,KAAK;CAE1D,MAAM,QAAQ,IAAI,YAAY,KAAK;CACnC,MAAM,MAAsC,EAAE;AAE9C,MAAK,MAAM,QAAQ,MAAM;AACvB,MACE,KAAK,SAAS,4BACd,KAAK,aAAa,SAAS,sBAE3B;AAEF,OAAK,MAAM,cAAc,KAAK,YAAY,cAAc;AACtD,OACE,WAAW,IAAI,SAAS,gBACxB,WAAW,MAAM,SAAS,oBAC1B,WAAW,KAAK,QAAQ,SAAS,gBACjC,CAAC,mBAAmB,IAAI,WAAW,KAAK,OAAO,KAAK,CAEpD;GAGF,MAAM,OAAO,WAAW,GAAG;GAC3B,MAAM,KAAK,iBAAiB,QAAQ,KAAK;AACzC,OAAI,KAAK;IAAE;IAAM;IAAI,CAAC;GAEtB,MAAM,OAAO,WAAW,KAAK,aAAa,EAAE;GAC5C,MAAM,OAAO,KAAK;GAClB,MAAM,SAAS,OAAO,KAAK,UAAU,GAAG;AAExC,OAAI,MAAM,SAAS,oBAAoB;AAErC,gCAA4B,MAAM,MAAM,OAAO;AAC/C,aAAS,OAAO,MAAM,GAAG;cAChB,eAAe,KAAK,CAE7B,OAAM,WAAW,KAAK,OAAO,KAAK,OAAO,MAAM;YACtC,QAAQ,KAAK,UAAU,GAAG;AAEnC,UAAM,WAAW,KAAK,OAAO,KAAK,OAAO,WAAW;AACpD,UAAM,YAAY,KAAK,KAAK,KAAK;SAEjC,OAAM,IAAI,MACR,sBAAsB,KAAK,OAAO,OAAO,gGAC1C;;;AAKP,KAAI,IAAI,WAAW,EACjB,QAAO;AAGT,QAAO;EAAE,MAAM,MAAM,UAAU;EAAE;EAAK;;;;;;;AAQxC,SAAS,SAAS,OAAoB,WAAgB,IAAkB;CACtE,MAAM,YAAY,UAAU,cAAc,EAAE,EAAE,MAC3C,SACC,KAAK,SAAS,eACb,KAAK,KAAK,SAAS,eAAe,KAAK,IAAI,OAAO,KAAK,KAAK,WAC3D,KACL;AAED,KAAI,UAAU;AACZ,QAAM,UACJ,SAAS,MAAM,OACf,SAAS,MAAM,KACf,KAAK,UAAU,GAAG,CACnB;AACD;;AAIF,OAAM,YAAY,UAAU,QAAQ,GAAG,QAAQ,KAAK,UAAU,GAAG,CAAC,GAAG;;;;;;AAOvE,SAAS,4BACP,WACA,MACA,QACM;CACN,IAAI;CACJ,IAAI,WAAW;AACf,MAAK,MAAM,QAAQ,UAAU,cAAc,EAAE,EAAE;AAC7C,MAAI,KAAK,SAAS,WAAY;EAC9B,MAAM,MACJ,KAAK,KAAK,SAAS,eAAe,KAAK,IAAI,OAAO,KAAK,KAAK;AAC9D,MAAI,QAAQ,YAAY,KAAK,OAAO,SAAS,UAC3C,UAAS,KAAK,MAAM;WACX,QAAQ,QACjB,YAAW;;AAGf,KAAI,WAAW,SAAS,SACtB,OAAM,IAAI,MACR,sBAAsB,KAAK,OAAO,OAAO,oIAC1C;;AAIL,SAAS,eAAe,MAAoB;AAC1C,QACE,MAAM,SAAS,6BACf,MAAM,SAAS;;AAInB,SAAS,0BAA0B,MAA0B;CAC3D,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,QAAQ,MAAM;AACvB,MACE,KAAK,SAAS,uBACd,KAAK,QAAQ,UAAU,iBAEvB;AAEF,OAAK,MAAM,QAAQ,KAAK,cAAc,EAAE,CACtC,KACE,KAAK,SAAS,qBACd,KAAK,UAAU,SAAS,WAExB,OAAM,IAAI,KAAK,MAAM,KAAK;;AAIhC,KAAI,MAAM,SAAS,EACjB,OAAM,IAAI,WAAW;AAEvB,QAAO"}

package/src/lib/nx-plugin/src/generators/app/versions/nx_18_X/versions.d.ts

@@ -1,9 +1,9 @@
 export declare const V18_X_NX_DEVKIT = "^20.0.0";
 export declare const V18_X_NX_ANGULAR = "^20.0.0";
-export declare const V18_X_ANALOG_JS_CONTENT = "^3.0.0-alpha.68";
-export declare const V18_X_ANALOG_JS_ROUTER = "^3.0.0-alpha.68";
-export declare const V18_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = "^3.0.0-alpha.68";
-export declare const V18_X_ANALOG_JS_VITEST_ANGULAR = "^3.0.0-alpha.68";
+export declare const V18_X_ANALOG_JS_CONTENT = "^3.0.0-alpha.69";
+export declare const V18_X_ANALOG_JS_ROUTER = "^3.0.0-alpha.69";
+export declare const V18_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = "^3.0.0-alpha.69";
+export declare const V18_X_ANALOG_JS_VITEST_ANGULAR = "^3.0.0-alpha.69";
 export declare const V18_X_FRONT_MATTER = "^4.0.2";
 export declare const V18_X_MARKED = "^18.0.0";
 export declare const V18_X_MARKED_GFM_HEADING_ID = "^4.1.1";
@@ -15,7 +15,7 @@ export declare const V18_X_TAILWINDCSS = "^4.2.2";
 export declare const V18_X_TAILWINDCSS_POSTCSS = "^4.2.2";
 export declare const V18_X_TAILWINDCSS_VITE = "^4.2.2";
 export declare const V18_X_POSTCSS = "^8.5.6";
-export declare const V18_X_ANALOG_JS_PLATFORM = "^3.0.0-alpha.68";
+export declare const V18_X_ANALOG_JS_PLATFORM = "^3.0.0-alpha.69";
 export declare const V18_X_ANGULAR_DEVKIT_BUILD_ANGULAR = "^19.0.0";
 export declare const V18_X_NX_VITE = "^21.0.0";
 export declare const V18_X_NX_LINTER = "^21.0.0";

package/src/lib/nx-plugin/src/generators/app/versions/nx_18_X/versions.js.map

@@ -1 +1 @@
-{"version":3,"file":"versions.js","names":[],"sources":["../../../../../../../../../../nx-plugin/src/generators/app/versions/nx_18_X/versions.ts"],"sourcesContent":["// V18_X\n// dependencies\nexport const V18_X_NX_DEVKIT = '^20.0.0';\nexport const V18_X_NX_ANGULAR = '^20.0.0';\nexport const V18_X_ANALOG_JS_CONTENT = '^3.0.0-alpha.68';\nexport const V18_X_ANALOG_JS_ROUTER = '^3.0.0-alpha.68';\nexport const V18_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = '^3.0.0-alpha.68';\nexport const V18_X_ANALOG_JS_VITEST_ANGULAR = '^3.0.0-alpha.68';\nexport const V18_X_FRONT_MATTER = '^4.0.2';\nexport const V18_X_MARKED = '^18.0.0';\nexport const V18_X_MARKED_GFM_HEADING_ID = '^4.1.1';\nexport const V18_X_MARKED_HIGHLIGHT = '^2.2.1';\nexport const V18_X_MARKED_MANGLE = '^1.1.10';\nexport const V18_X_MERMAID = '^10.2.4';\nexport const V18_X_PRISMJS = '^1.29.0';\nexport const V18_X_TAILWINDCSS = '^4.2.2';\nexport const V18_X_TAILWINDCSS_POSTCSS = '^4.2.2';\nexport const V18_X_TAILWINDCSS_VITE = '^4.2.2';\nexport const V18_X_POSTCSS = '^8.5.6';\n\n// devDependencies\nexport const V18_X_ANALOG_JS_PLATFORM = '^3.0.0-alpha.68';\nexport const V18_X_ANGULAR_DEVKIT_BUILD_ANGULAR = '^19.0.0';\nexport const V18_X_NX_VITE = '^21.0.0';\nexport const V18_X_NX_LINTER = '^21.0.0';\nexport const V18_X_JSDOM = '^22.1.0';\nexport const V18_X_VITE = '^8.0.0';\nexport const V18_X_VITE_TSCONFIG_PATHS = '^4.2.0';\nexport const V18_X_VITEST = '^4.0.0';\nexport const V18_X_ZOD = '^3.21.4';\n"],"mappings":";AAeA,IAAa,oBAAoB;AACjC,IAAa,4BAA4B;AACzC,IAAa,yBAAyB;AACtC,IAAa,gBAAgB"}
+{"version":3,"file":"versions.js","names":[],"sources":["../../../../../../../../../../nx-plugin/src/generators/app/versions/nx_18_X/versions.ts"],"sourcesContent":["// V18_X\n// dependencies\nexport const V18_X_NX_DEVKIT = '^20.0.0';\nexport const V18_X_NX_ANGULAR = '^20.0.0';\nexport const V18_X_ANALOG_JS_CONTENT = '^3.0.0-alpha.69';\nexport const V18_X_ANALOG_JS_ROUTER = '^3.0.0-alpha.69';\nexport const V18_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = '^3.0.0-alpha.69';\nexport const V18_X_ANALOG_JS_VITEST_ANGULAR = '^3.0.0-alpha.69';\nexport const V18_X_FRONT_MATTER = '^4.0.2';\nexport const V18_X_MARKED = '^18.0.0';\nexport const V18_X_MARKED_GFM_HEADING_ID = '^4.1.1';\nexport const V18_X_MARKED_HIGHLIGHT = '^2.2.1';\nexport const V18_X_MARKED_MANGLE = '^1.1.10';\nexport const V18_X_MERMAID = '^10.2.4';\nexport const V18_X_PRISMJS = '^1.29.0';\nexport const V18_X_TAILWINDCSS = '^4.2.2';\nexport const V18_X_TAILWINDCSS_POSTCSS = '^4.2.2';\nexport const V18_X_TAILWINDCSS_VITE = '^4.2.2';\nexport const V18_X_POSTCSS = '^8.5.6';\n\n// devDependencies\nexport const V18_X_ANALOG_JS_PLATFORM = '^3.0.0-alpha.69';\nexport const V18_X_ANGULAR_DEVKIT_BUILD_ANGULAR = '^19.0.0';\nexport const V18_X_NX_VITE = '^21.0.0';\nexport const V18_X_NX_LINTER = '^21.0.0';\nexport const V18_X_JSDOM = '^22.1.0';\nexport const V18_X_VITE = '^8.0.0';\nexport const V18_X_VITE_TSCONFIG_PATHS = '^4.2.0';\nexport const V18_X_VITEST = '^4.0.0';\nexport const V18_X_ZOD = '^3.21.4';\n"],"mappings":";AAeA,IAAa,oBAAoB;AACjC,IAAa,4BAA4B;AACzC,IAAa,yBAAyB;AACtC,IAAa,gBAAgB"}

package/src/lib/nx-plugin/src/utils/versions/ng_19_X/versions.d.ts

@@ -1,13 +1,13 @@
-export declare const V19_X_ANALOG_JS_ROUTER = "^3.0.0-alpha.68";
-export declare const V19_X_ANALOG_JS_CONTENT = "^3.0.0-alpha.68";
+export declare const V19_X_ANALOG_JS_ROUTER = "^3.0.0-alpha.69";
+export declare const V19_X_ANALOG_JS_CONTENT = "^3.0.0-alpha.69";
 export declare const V19_X_MARKED = "^18.0.0";
 export declare const V19_X_MARKED_GFM_HEADING_ID = "^4.1.1";
 export declare const V19_X_MARKED_HIGHLIGHT = "^2.2.1";
 export declare const V19_X_MARKED_MANGLE = "^1.1.10";
 export declare const V19_X_PRISMJS = "^1.29.0";
-export declare const V19_X_ANALOG_JS_PLATFORM = "^3.0.0-alpha.68";
-export declare const V19_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = "^3.0.0-alpha.68";
-export declare const V19_X_ANALOG_JS_VITEST_ANGULAR = "^3.0.0-alpha.68";
+export declare const V19_X_ANALOG_JS_PLATFORM = "^3.0.0-alpha.69";
+export declare const V19_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = "^3.0.0-alpha.69";
+export declare const V19_X_ANALOG_JS_VITEST_ANGULAR = "^3.0.0-alpha.69";
 export declare const V19_X_NX_ANGULAR = "^22.0.0";
 export declare const V19_X_NX_VITE = "^22.0.0";
 export declare const V19_X_JSDOM = "^22.0.0";

package/src/lib/nx-plugin/src/utils/versions/ng_19_X/versions.js

@@ -1,14 +1,14 @@
 //#region packages/nx-plugin/src/utils/versions/ng_19_X/versions.ts
-var V19_X_ANALOG_JS_ROUTER = "^3.0.0-alpha.68";
-var V19_X_ANALOG_JS_CONTENT = "^3.0.0-alpha.68";
+var V19_X_ANALOG_JS_ROUTER = "^3.0.0-alpha.69";
+var V19_X_ANALOG_JS_CONTENT = "^3.0.0-alpha.69";
 var V19_X_MARKED = "^18.0.0";
 var V19_X_MARKED_GFM_HEADING_ID = "^4.1.1";
 var V19_X_MARKED_HIGHLIGHT = "^2.2.1";
 var V19_X_MARKED_MANGLE = "^1.1.10";
 var V19_X_PRISMJS = "^1.29.0";
-var V19_X_ANALOG_JS_PLATFORM = "^3.0.0-alpha.68";
-var V19_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = "^3.0.0-alpha.68";
-var V19_X_ANALOG_JS_VITEST_ANGULAR = "^3.0.0-alpha.68";
+var V19_X_ANALOG_JS_PLATFORM = "^3.0.0-alpha.69";
+var V19_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = "^3.0.0-alpha.69";
+var V19_X_ANALOG_JS_VITEST_ANGULAR = "^3.0.0-alpha.69";
 var V19_X_NX_VITE = "^22.0.0";
 var V19_X_JSDOM = "^22.0.0";
 var V19_X_VITE_TSCONFIG_PATHS = "^4.2.0";

package/src/lib/nx-plugin/src/utils/versions/ng_19_X/versions.js.map

@@ -1 +1 @@
-{"version":3,"file":"versions.js","names":[],"sources":["../../../../../../../../../nx-plugin/src/utils/versions/ng_19_X/versions.ts"],"sourcesContent":["// V19_X\nexport const V19_X_ANALOG_JS_ROUTER = '^3.0.0-alpha.68';\nexport const V19_X_ANALOG_JS_CONTENT = '^3.0.0-alpha.68';\nexport const V19_X_MARKED = '^18.0.0';\nexport const V19_X_MARKED_GFM_HEADING_ID = '^4.1.1';\nexport const V19_X_MARKED_HIGHLIGHT = '^2.2.1';\nexport const V19_X_MARKED_MANGLE = '^1.1.10';\nexport const V19_X_PRISMJS = '^1.29.0';\n\n// devDependencies\nexport const V19_X_ANALOG_JS_PLATFORM = '^3.0.0-alpha.68';\nexport const V19_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = '^3.0.0-alpha.68';\nexport const V19_X_ANALOG_JS_VITEST_ANGULAR = '^3.0.0-alpha.68';\nexport const V19_X_NX_ANGULAR = '^22.0.0';\nexport const V19_X_NX_VITE = '^22.0.0';\nexport const V19_X_JSDOM = '^22.0.0';\nexport const V19_X_VITE_TSCONFIG_PATHS = '^4.2.0';\nexport const V19_X_VITEST = '^3.0.0';\nexport const V19_X_VITE = '^6.0.0';\nexport const NX_X_LATEST_VITE = '^8.0.0';\nexport const NX_X_LATEST_VITEST = '^4.0.0';\nexport const NX_X_LATEST_NX = '^23.0.0';\n"],"mappings":";AACA,IAAa,yBAAyB;AACtC,IAAa,0BAA0B;AACvC,IAAa,eAAe;AAC5B,IAAa,8BAA8B;AAC3C,IAAa,yBAAyB;AACtC,IAAa,sBAAsB;AACnC,IAAa,gBAAgB;AAG7B,IAAa,2BAA2B;AACxC,IAAa,sCAAsC;AACnD,IAAa,iCAAiC;AAE9C,IAAa,gBAAgB;AAC7B,IAAa,cAAc;AAC3B,IAAa,4BAA4B;AACzC,IAAa,eAAe;AAC5B,IAAa,aAAa;AAC1B,IAAa,mBAAmB;AAChC,IAAa,qBAAqB;AAClC,IAAa,iBAAiB"}
+{"version":3,"file":"versions.js","names":[],"sources":["../../../../../../../../../nx-plugin/src/utils/versions/ng_19_X/versions.ts"],"sourcesContent":["// V19_X\nexport const V19_X_ANALOG_JS_ROUTER = '^3.0.0-alpha.69';\nexport const V19_X_ANALOG_JS_CONTENT = '^3.0.0-alpha.69';\nexport const V19_X_MARKED = '^18.0.0';\nexport const V19_X_MARKED_GFM_HEADING_ID = '^4.1.1';\nexport const V19_X_MARKED_HIGHLIGHT = '^2.2.1';\nexport const V19_X_MARKED_MANGLE = '^1.1.10';\nexport const V19_X_PRISMJS = '^1.29.0';\n\n// devDependencies\nexport const V19_X_ANALOG_JS_PLATFORM = '^3.0.0-alpha.69';\nexport const V19_X_ANALOG_JS_VITE_PLUGIN_ANGULAR = '^3.0.0-alpha.69';\nexport const V19_X_ANALOG_JS_VITEST_ANGULAR = '^3.0.0-alpha.69';\nexport const V19_X_NX_ANGULAR = '^22.0.0';\nexport const V19_X_NX_VITE = '^22.0.0';\nexport const V19_X_JSDOM = '^22.0.0';\nexport const V19_X_VITE_TSCONFIG_PATHS = '^4.2.0';\nexport const V19_X_VITEST = '^3.0.0';\nexport const V19_X_VITE = '^6.0.0';\nexport const NX_X_LATEST_VITE = '^8.0.0';\nexport const NX_X_LATEST_VITEST = '^4.0.0';\nexport const NX_X_LATEST_NX = '^23.0.0';\n"],"mappings":";AACA,IAAa,yBAAyB;AACtC,IAAa,0BAA0B;AACvC,IAAa,eAAe;AAC5B,IAAa,8BAA8B;AAC3C,IAAa,yBAAyB;AACtC,IAAa,sBAAsB;AACnC,IAAa,gBAAgB;AAG7B,IAAa,2BAA2B;AACxC,IAAa,sCAAsC;AACnD,IAAa,iCAAiC;AAE9C,IAAa,gBAAgB;AAC7B,IAAa,cAAc;AAC3B,IAAa,4BAA4B;AACzC,IAAa,eAAe;AAC5B,IAAa,aAAa;AAC1B,IAAa,mBAAmB;AAChC,IAAa,qBAAqB;AAClC,IAAa,iBAAiB"}

package/src/lib/server-fn-client-transform.js

@@ -1,5 +1,5 @@
+import { deriveServerFnId } from "./server-fn-id.js";
 import { parseSync } from "oxc-parser";
-import { deriveServerFnId } from "@analogjs/vite-plugin-nitro/server-fn-id";
 //#region packages/platform/src/lib/server-fn-client-transform.ts
 var SERVER_FN_SOURCE = "@analogjs/router/server";
 function scrubServerFnModule(code, fileId = "file.ts") {

package/src/lib/server-fn-client-transform.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-fn-client-transform.js","names":[],"sources":["../../../src/lib/server-fn-client-transform.ts"],"sourcesContent":["import { parseSync } from 'oxc-parser';\n// Light subpath (no vite/nitro barrel): the built scrub is loaded outside a\n// build too, so it must not pull the plugin graph in.\nimport { deriveServerFnId } from '@analogjs/vite-plugin-nitro/server-fn-id';\n\n/**\n * Client-build scrub + proxy generation for server functions.\n *\n * On the client build a `*.server.ts` module must not carry server handler\n * bodies (which `inject()` server services, read the request, hit the database).\n * But the client still imports the named `serverFn` exports to dispatch them.\n * This transform regenerates the module so each `export const NAME = serverFn(\n * config, handler)` becomes a call to the client-safe `createServerFnRef`\n * factory — keeping the `{ id, url, method }` metadata `injectServerFn` needs,\n * dropping the handler and every server-only import. Because the regenerated\n * module references nothing else, the server code tree-shakes away entirely.\n *\n * Returns the new module source, or `null` when the module defines no server\n * function (the caller falls back to the page-endpoint scrub for those).\n */\nexport interface ServerFnProxy {\n  name: string;\n  id: string;\n  method: 'GET' | 'POST';\n}\n\nexport interface ScrubResult {\n  code: string;\n  proxies: ServerFnProxy[];\n  hadDefaultExport: boolean;\n}\n\nconst SERVER_FN_SOURCE = '@analogjs/router/server';\n\nexport function scrubServerFnModule(\n  code: string,\n  fileId = 'file.ts',\n): ScrubResult | null {\n  // Cheap bail-out before parsing: no `serverFn` token, nothing to do.\n  if (!code.includes('serverFn')) {\n    return null;\n  }\n\n  const { program } = parseSync(fileId, code);\n  const body = (program as { body: any[] }).body;\n\n  const serverFnLocalNames = collectServerFnLocalNames(body);\n  const hadDefaultExport = body.some(\n    (node) => node.type === 'ExportDefaultDeclaration',\n  );\n\n  const proxies: ServerFnProxy[] = [];\n  for (const node of body) {\n    if (\n      node.type !== 'ExportNamedDeclaration' ||\n      node.declaration?.type !== 'VariableDeclaration'\n    ) {\n      continue;\n    }\n    for (const declarator of node.declaration.declarations) {\n      if (\n        declarator.id?.type !== 'Identifier' ||\n        declarator.init?.type !== 'CallExpression' ||\n        declarator.init.callee?.type !== 'Identifier' ||\n        !serverFnLocalNames.has(declarator.init.callee.name)\n      ) {\n        continue;\n      }\n      proxies.push(\n        toProxy(declarator.id.name, declarator.init.arguments ?? [], fileId),\n      );\n    }\n  }\n\n  // Every `serverFn(...)` call in the module must have become a proxy. If one\n  // did not, the module uses a shape this transform cannot rewrite (e.g.\n  // `const fn = serverFn(...); export { fn };`) and returning `null` would leave\n  // it untouched — shipping the handler and its server imports to the browser.\n  // Fail the build instead: a scrub that silently opts out is a code leak.\n  const callCount = countServerFnCalls(program, serverFnLocalNames);\n  if (callCount > proxies.length) {\n    throw new Error(\n      `[analog] ${fileId}: found ${callCount} serverFn call(s) but could only rewrite ${proxies.length} for the client build. ` +\n        `Server functions must be declared as a directly exported const — \\`export const name = serverFn(…)\\` — so the handler can be stripped from the browser bundle.`,\n    );\n  }\n\n  if (proxies.length === 0) {\n    return null;\n  }\n\n  const lines = [\n    `import { createServerFnRef } from '@analogjs/router';`,\n    '',\n    ...proxies.map(\n      (p) =>\n        `export const ${p.name} = createServerFnRef({ id: ${JSON.stringify(\n          p.id,\n        )}, method: ${JSON.stringify(p.method)} });`,\n    ),\n  ];\n  // A file that is also a page endpoint keeps the load-shim the router expects.\n  if (hadDefaultExport) {\n    lines.push('', 'export default undefined;');\n  }\n\n  return { code: lines.join('\\n') + '\\n', proxies, hadDefaultExport };\n}\n\n/** Local identifier(s) `serverFn` is imported under from `@analogjs/router/server`. */\nfunction collectServerFnLocalNames(body: any[]): Set<string> {\n  const names = new Set<string>();\n  for (const node of body) {\n    if (\n      node.type !== 'ImportDeclaration' ||\n      node.source?.value !== SERVER_FN_SOURCE\n    ) {\n      continue;\n    }\n    for (const spec of node.specifiers ?? []) {\n      if (\n        spec.type === 'ImportSpecifier' &&\n        spec.imported?.name === 'serverFn'\n      ) {\n        names.add(spec.local.name);\n      }\n    }\n  }\n  // Fallback: if the module never imported it (unusual), still match the\n  // conventional name so a mis-resolved import doesn't leak server code.\n  if (names.size === 0) {\n    names.add('serverFn');\n  }\n  return names;\n}\n\nfunction toProxy(name: string, args: any[], fileId: string): ServerFnProxy {\n  const method = methodForCall(name, args, fileId);\n  // The id is derived, never read from source — same algorithm the server\n  // registration uses, so client proxy and server route always match.\n  return { name, id: deriveServerFnId(fileId, name), method };\n}\n\n/**\n * Resolve the HTTP method from the call shape, matching the runtime overloads:\n * `serverFn(handler)` ⇒ GET, `serverFn(schema, handler)` ⇒ POST,\n * `serverFn(config, handler)` ⇒ config-driven.\n */\nfunction methodForCall(\n  name: string,\n  args: any[],\n  fileId: string,\n): 'GET' | 'POST' {\n  const arg0 = args[0];\n\n  // serverFn(handler) — input-less GET.\n  if (isFunctionNode(arg0)) return 'GET';\n\n  // serverFn(config, handler) — read method/input off the object.\n  if (arg0?.type === 'ObjectExpression') {\n    let method: 'GET' | 'POST' | undefined;\n    let hasInput = false;\n    for (const prop of arg0.properties ?? []) {\n      if (prop.type !== 'Property') continue;\n      const key =\n        prop.key?.type === 'Identifier' ? prop.key.name : prop.key?.value;\n      if (key === 'method' && isStringLiteral(prop.value)) {\n        method = prop.value.value as 'GET' | 'POST';\n      } else if (key === 'input') {\n        hasInput = true;\n      }\n    }\n    if (method === 'GET' && hasInput) {\n      throw new Error(\n        `[analog] serverFn \"${name}\" in ${fileId} declares method: 'GET' with an input schema; GET carries no body. Use POST or drop the input.`,\n      );\n    }\n    return method ?? (hasInput ? 'POST' : 'GET');\n  }\n\n  // serverFn(schema, handler) — a schema ⇒ POST + input.\n  if (arg0 && args.length >= 2) return 'POST';\n\n  throw new Error(\n    `[analog] serverFn \"${name}\" in ${fileId} must be called as serverFn(handler), serverFn(schema, handler), or serverFn(config, handler).`,\n  );\n}\n\nfunction isFunctionNode(node: any): boolean {\n  return (\n    node?.type === 'ArrowFunctionExpression' ||\n    node?.type === 'FunctionExpression'\n  );\n}\n\nfunction isStringLiteral(\n  node: any,\n): node is { type: 'Literal'; value: string } {\n  return node?.type === 'Literal' && typeof node.value === 'string';\n}\n\n/** Every `serverFn(...)` call anywhere in the module, not just exported ones. */\nfunction countServerFnCalls(node: unknown, names: Set<string>): number {\n  if (!node || typeof node !== 'object') {\n    return 0;\n  }\n  if (Array.isArray(node)) {\n    return node.reduce(\n      (total, child) => total + countServerFnCalls(child, names),\n      0,\n    );\n  }\n\n  const record = node as Record<string, unknown> & { type?: string };\n  let count = 0;\n  if (record.type === 'CallExpression') {\n    const callee = record['callee'] as { type?: string; name?: string };\n    if (\n      callee?.type === 'Identifier' &&\n      callee.name &&\n      names.has(callee.name)\n    ) {\n      count += 1;\n    }\n  }\n  for (const key of Object.keys(record)) {\n    count += countServerFnCalls(record[key], names);\n  }\n  return count;\n}\n"],"mappings":";;;AAgCA,IAAM,mBAAmB;AAEzB,SAAgB,oBACd,MACA,SAAS,WACW;AAEpB,KAAI,CAAC,KAAK,SAAS,WAAW,CAC5B,QAAO;CAGT,MAAM,EAAE,YAAY,UAAU,QAAQ,KAAK;CAC3C,MAAM,OAAQ,QAA4B;CAE1C,MAAM,qBAAqB,0BAA0B,KAAK;CAC1D,MAAM,mBAAmB,KAAK,MAC3B,SAAS,KAAK,SAAS,2BACzB;CAED,MAAM,UAA2B,EAAE;AACnC,MAAK,MAAM,QAAQ,MAAM;AACvB,MACE,KAAK,SAAS,4BACd,KAAK,aAAa,SAAS,sBAE3B;AAEF,OAAK,MAAM,cAAc,KAAK,YAAY,cAAc;AACtD,OACE,WAAW,IAAI,SAAS,gBACxB,WAAW,MAAM,SAAS,oBAC1B,WAAW,KAAK,QAAQ,SAAS,gBACjC,CAAC,mBAAmB,IAAI,WAAW,KAAK,OAAO,KAAK,CAEpD;AAEF,WAAQ,KACN,QAAQ,WAAW,GAAG,MAAM,WAAW,KAAK,aAAa,EAAE,EAAE,OAAO,CACrE;;;CASL,MAAM,YAAY,mBAAmB,SAAS,mBAAmB;AACjE,KAAI,YAAY,QAAQ,OACtB,OAAM,IAAI,MACR,YAAY,OAAO,UAAU,UAAU,2CAA2C,QAAQ,OAAO,uLAElG;AAGH,KAAI,QAAQ,WAAW,EACrB,QAAO;CAGT,MAAM,QAAQ;EACZ;EACA;EACA,GAAG,QAAQ,KACR,MACC,gBAAgB,EAAE,KAAK,6BAA6B,KAAK,UACvD,EAAE,GACH,CAAC,YAAY,KAAK,UAAU,EAAE,OAAO,CAAC,MAC1C;EACF;AAED,KAAI,iBACF,OAAM,KAAK,IAAI,4BAA4B;AAG7C,QAAO;EAAE,MAAM,MAAM,KAAK,KAAK,GAAG;EAAM;EAAS;EAAkB;;;AAIrE,SAAS,0BAA0B,MAA0B;CAC3D,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,QAAQ,MAAM;AACvB,MACE,KAAK,SAAS,uBACd,KAAK,QAAQ,UAAU,iBAEvB;AAEF,OAAK,MAAM,QAAQ,KAAK,cAAc,EAAE,CACtC,KACE,KAAK,SAAS,qBACd,KAAK,UAAU,SAAS,WAExB,OAAM,IAAI,KAAK,MAAM,KAAK;;AAMhC,KAAI,MAAM,SAAS,EACjB,OAAM,IAAI,WAAW;AAEvB,QAAO;;AAGT,SAAS,QAAQ,MAAc,MAAa,QAA+B;CACzE,MAAM,SAAS,cAAc,MAAM,MAAM,OAAO;AAGhD,QAAO;EAAE;EAAM,IAAI,iBAAiB,QAAQ,KAAK;EAAE;EAAQ;;;;;;;AAQ7D,SAAS,cACP,MACA,MACA,QACgB;CAChB,MAAM,OAAO,KAAK;AAGlB,KAAI,eAAe,KAAK,CAAE,QAAO;AAGjC,KAAI,MAAM,SAAS,oBAAoB;EACrC,IAAI;EACJ,IAAI,WAAW;AACf,OAAK,MAAM,QAAQ,KAAK,cAAc,EAAE,EAAE;AACxC,OAAI,KAAK,SAAS,WAAY;GAC9B,MAAM,MACJ,KAAK,KAAK,SAAS,eAAe,KAAK,IAAI,OAAO,KAAK,KAAK;AAC9D,OAAI,QAAQ,YAAY,gBAAgB,KAAK,MAAM,CACjD,UAAS,KAAK,MAAM;YACX,QAAQ,QACjB,YAAW;;AAGf,MAAI,WAAW,SAAS,SACtB,OAAM,IAAI,MACR,sBAAsB,KAAK,OAAO,OAAO,gGAC1C;AAEH,SAAO,WAAW,WAAW,SAAS;;AAIxC,KAAI,QAAQ,KAAK,UAAU,EAAG,QAAO;AAErC,OAAM,IAAI,MACR,sBAAsB,KAAK,OAAO,OAAO,gGAC1C;;AAGH,SAAS,eAAe,MAAoB;AAC1C,QACE,MAAM,SAAS,6BACf,MAAM,SAAS;;AAInB,SAAS,gBACP,MAC4C;AAC5C,QAAO,MAAM,SAAS,aAAa,OAAO,KAAK,UAAU;;;AAI3D,SAAS,mBAAmB,MAAe,OAA4B;AACrE,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;AAET,KAAI,MAAM,QAAQ,KAAK,CACrB,QAAO,KAAK,QACT,OAAO,UAAU,QAAQ,mBAAmB,OAAO,MAAM,EAC1D,EACD;CAGH,MAAM,SAAS;CACf,IAAI,QAAQ;AACZ,KAAI,OAAO,SAAS,kBAAkB;EACpC,MAAM,SAAS,OAAO;AACtB,MACE,QAAQ,SAAS,gBACjB,OAAO,QACP,MAAM,IAAI,OAAO,KAAK,CAEtB,UAAS;;AAGb,MAAK,MAAM,OAAO,OAAO,KAAK,OAAO,CACnC,UAAS,mBAAmB,OAAO,MAAM,MAAM;AAEjD,QAAO"}
+{"version":3,"file":"server-fn-client-transform.js","names":[],"sources":["../../../src/lib/server-fn-client-transform.ts"],"sourcesContent":["import { parseSync } from 'oxc-parser';\n// Light subpath (no vite/nitro barrel): the built scrub is loaded outside a\n// build too, so it must not pull the plugin graph in.\nimport { deriveServerFnId } from './server-fn-id.js';\n\n/**\n * Client-build scrub + proxy generation for server functions.\n *\n * On the client build a `*.server.ts` module must not carry server handler\n * bodies (which `inject()` server services, read the request, hit the database).\n * But the client still imports the named `serverFn` exports to dispatch them.\n * This transform regenerates the module so each `export const NAME = serverFn(\n * config, handler)` becomes a call to the client-safe `createServerFnRef`\n * factory — keeping the `{ id, url, method }` metadata `injectServerFn` needs,\n * dropping the handler and every server-only import. Because the regenerated\n * module references nothing else, the server code tree-shakes away entirely.\n *\n * Returns the new module source, or `null` when the module defines no server\n * function (the caller falls back to the page-endpoint scrub for those).\n */\nexport interface ServerFnProxy {\n  name: string;\n  id: string;\n  method: 'GET' | 'POST';\n}\n\nexport interface ScrubResult {\n  code: string;\n  proxies: ServerFnProxy[];\n  hadDefaultExport: boolean;\n}\n\nconst SERVER_FN_SOURCE = '@analogjs/router/server';\n\nexport function scrubServerFnModule(\n  code: string,\n  fileId = 'file.ts',\n): ScrubResult | null {\n  // Cheap bail-out before parsing: no `serverFn` token, nothing to do.\n  if (!code.includes('serverFn')) {\n    return null;\n  }\n\n  const { program } = parseSync(fileId, code);\n  const body = (program as { body: any[] }).body;\n\n  const serverFnLocalNames = collectServerFnLocalNames(body);\n  const hadDefaultExport = body.some(\n    (node) => node.type === 'ExportDefaultDeclaration',\n  );\n\n  const proxies: ServerFnProxy[] = [];\n  for (const node of body) {\n    if (\n      node.type !== 'ExportNamedDeclaration' ||\n      node.declaration?.type !== 'VariableDeclaration'\n    ) {\n      continue;\n    }\n    for (const declarator of node.declaration.declarations) {\n      if (\n        declarator.id?.type !== 'Identifier' ||\n        declarator.init?.type !== 'CallExpression' ||\n        declarator.init.callee?.type !== 'Identifier' ||\n        !serverFnLocalNames.has(declarator.init.callee.name)\n      ) {\n        continue;\n      }\n      proxies.push(\n        toProxy(declarator.id.name, declarator.init.arguments ?? [], fileId),\n      );\n    }\n  }\n\n  // Every `serverFn(...)` call in the module must have become a proxy. If one\n  // did not, the module uses a shape this transform cannot rewrite (e.g.\n  // `const fn = serverFn(...); export { fn };`) and returning `null` would leave\n  // it untouched — shipping the handler and its server imports to the browser.\n  // Fail the build instead: a scrub that silently opts out is a code leak.\n  const callCount = countServerFnCalls(program, serverFnLocalNames);\n  if (callCount > proxies.length) {\n    throw new Error(\n      `[analog] ${fileId}: found ${callCount} serverFn call(s) but could only rewrite ${proxies.length} for the client build. ` +\n        `Server functions must be declared as a directly exported const — \\`export const name = serverFn(…)\\` — so the handler can be stripped from the browser bundle.`,\n    );\n  }\n\n  if (proxies.length === 0) {\n    return null;\n  }\n\n  const lines = [\n    `import { createServerFnRef } from '@analogjs/router';`,\n    '',\n    ...proxies.map(\n      (p) =>\n        `export const ${p.name} = createServerFnRef({ id: ${JSON.stringify(\n          p.id,\n        )}, method: ${JSON.stringify(p.method)} });`,\n    ),\n  ];\n  // A file that is also a page endpoint keeps the load-shim the router expects.\n  if (hadDefaultExport) {\n    lines.push('', 'export default undefined;');\n  }\n\n  return { code: lines.join('\\n') + '\\n', proxies, hadDefaultExport };\n}\n\n/** Local identifier(s) `serverFn` is imported under from `@analogjs/router/server`. */\nfunction collectServerFnLocalNames(body: any[]): Set<string> {\n  const names = new Set<string>();\n  for (const node of body) {\n    if (\n      node.type !== 'ImportDeclaration' ||\n      node.source?.value !== SERVER_FN_SOURCE\n    ) {\n      continue;\n    }\n    for (const spec of node.specifiers ?? []) {\n      if (\n        spec.type === 'ImportSpecifier' &&\n        spec.imported?.name === 'serverFn'\n      ) {\n        names.add(spec.local.name);\n      }\n    }\n  }\n  // Fallback: if the module never imported it (unusual), still match the\n  // conventional name so a mis-resolved import doesn't leak server code.\n  if (names.size === 0) {\n    names.add('serverFn');\n  }\n  return names;\n}\n\nfunction toProxy(name: string, args: any[], fileId: string): ServerFnProxy {\n  const method = methodForCall(name, args, fileId);\n  // The id is derived, never read from source — same algorithm the server\n  // registration uses, so client proxy and server route always match.\n  return { name, id: deriveServerFnId(fileId, name), method };\n}\n\n/**\n * Resolve the HTTP method from the call shape, matching the runtime overloads:\n * `serverFn(handler)` ⇒ GET, `serverFn(schema, handler)` ⇒ POST,\n * `serverFn(config, handler)` ⇒ config-driven.\n */\nfunction methodForCall(\n  name: string,\n  args: any[],\n  fileId: string,\n): 'GET' | 'POST' {\n  const arg0 = args[0];\n\n  // serverFn(handler) — input-less GET.\n  if (isFunctionNode(arg0)) return 'GET';\n\n  // serverFn(config, handler) — read method/input off the object.\n  if (arg0?.type === 'ObjectExpression') {\n    let method: 'GET' | 'POST' | undefined;\n    let hasInput = false;\n    for (const prop of arg0.properties ?? []) {\n      if (prop.type !== 'Property') continue;\n      const key =\n        prop.key?.type === 'Identifier' ? prop.key.name : prop.key?.value;\n      if (key === 'method' && isStringLiteral(prop.value)) {\n        method = prop.value.value as 'GET' | 'POST';\n      } else if (key === 'input') {\n        hasInput = true;\n      }\n    }\n    if (method === 'GET' && hasInput) {\n      throw new Error(\n        `[analog] serverFn \"${name}\" in ${fileId} declares method: 'GET' with an input schema; GET carries no body. Use POST or drop the input.`,\n      );\n    }\n    return method ?? (hasInput ? 'POST' : 'GET');\n  }\n\n  // serverFn(schema, handler) — a schema ⇒ POST + input.\n  if (arg0 && args.length >= 2) return 'POST';\n\n  throw new Error(\n    `[analog] serverFn \"${name}\" in ${fileId} must be called as serverFn(handler), serverFn(schema, handler), or serverFn(config, handler).`,\n  );\n}\n\nfunction isFunctionNode(node: any): boolean {\n  return (\n    node?.type === 'ArrowFunctionExpression' ||\n    node?.type === 'FunctionExpression'\n  );\n}\n\nfunction isStringLiteral(\n  node: any,\n): node is { type: 'Literal'; value: string } {\n  return node?.type === 'Literal' && typeof node.value === 'string';\n}\n\n/** Every `serverFn(...)` call anywhere in the module, not just exported ones. */\nfunction countServerFnCalls(node: unknown, names: Set<string>): number {\n  if (!node || typeof node !== 'object') {\n    return 0;\n  }\n  if (Array.isArray(node)) {\n    return node.reduce(\n      (total, child) => total + countServerFnCalls(child, names),\n      0,\n    );\n  }\n\n  const record = node as Record<string, unknown> & { type?: string };\n  let count = 0;\n  if (record.type === 'CallExpression') {\n    const callee = record['callee'] as { type?: string; name?: string };\n    if (\n      callee?.type === 'Identifier' &&\n      callee.name &&\n      names.has(callee.name)\n    ) {\n      count += 1;\n    }\n  }\n  for (const key of Object.keys(record)) {\n    count += countServerFnCalls(record[key], names);\n  }\n  return count;\n}\n"],"mappings":";;;AAgCA,IAAM,mBAAmB;AAEzB,SAAgB,oBACd,MACA,SAAS,WACW;AAEpB,KAAI,CAAC,KAAK,SAAS,WAAW,CAC5B,QAAO;CAGT,MAAM,EAAE,YAAY,UAAU,QAAQ,KAAK;CAC3C,MAAM,OAAQ,QAA4B;CAE1C,MAAM,qBAAqB,0BAA0B,KAAK;CAC1D,MAAM,mBAAmB,KAAK,MAC3B,SAAS,KAAK,SAAS,2BACzB;CAED,MAAM,UAA2B,EAAE;AACnC,MAAK,MAAM,QAAQ,MAAM;AACvB,MACE,KAAK,SAAS,4BACd,KAAK,aAAa,SAAS,sBAE3B;AAEF,OAAK,MAAM,cAAc,KAAK,YAAY,cAAc;AACtD,OACE,WAAW,IAAI,SAAS,gBACxB,WAAW,MAAM,SAAS,oBAC1B,WAAW,KAAK,QAAQ,SAAS,gBACjC,CAAC,mBAAmB,IAAI,WAAW,KAAK,OAAO,KAAK,CAEpD;AAEF,WAAQ,KACN,QAAQ,WAAW,GAAG,MAAM,WAAW,KAAK,aAAa,EAAE,EAAE,OAAO,CACrE;;;CASL,MAAM,YAAY,mBAAmB,SAAS,mBAAmB;AACjE,KAAI,YAAY,QAAQ,OACtB,OAAM,IAAI,MACR,YAAY,OAAO,UAAU,UAAU,2CAA2C,QAAQ,OAAO,uLAElG;AAGH,KAAI,QAAQ,WAAW,EACrB,QAAO;CAGT,MAAM,QAAQ;EACZ;EACA;EACA,GAAG,QAAQ,KACR,MACC,gBAAgB,EAAE,KAAK,6BAA6B,KAAK,UACvD,EAAE,GACH,CAAC,YAAY,KAAK,UAAU,EAAE,OAAO,CAAC,MAC1C;EACF;AAED,KAAI,iBACF,OAAM,KAAK,IAAI,4BAA4B;AAG7C,QAAO;EAAE,MAAM,MAAM,KAAK,KAAK,GAAG;EAAM;EAAS;EAAkB;;;AAIrE,SAAS,0BAA0B,MAA0B;CAC3D,MAAM,wBAAQ,IAAI,KAAa;AAC/B,MAAK,MAAM,QAAQ,MAAM;AACvB,MACE,KAAK,SAAS,uBACd,KAAK,QAAQ,UAAU,iBAEvB;AAEF,OAAK,MAAM,QAAQ,KAAK,cAAc,EAAE,CACtC,KACE,KAAK,SAAS,qBACd,KAAK,UAAU,SAAS,WAExB,OAAM,IAAI,KAAK,MAAM,KAAK;;AAMhC,KAAI,MAAM,SAAS,EACjB,OAAM,IAAI,WAAW;AAEvB,QAAO;;AAGT,SAAS,QAAQ,MAAc,MAAa,QAA+B;CACzE,MAAM,SAAS,cAAc,MAAM,MAAM,OAAO;AAGhD,QAAO;EAAE;EAAM,IAAI,iBAAiB,QAAQ,KAAK;EAAE;EAAQ;;;;;;;AAQ7D,SAAS,cACP,MACA,MACA,QACgB;CAChB,MAAM,OAAO,KAAK;AAGlB,KAAI,eAAe,KAAK,CAAE,QAAO;AAGjC,KAAI,MAAM,SAAS,oBAAoB;EACrC,IAAI;EACJ,IAAI,WAAW;AACf,OAAK,MAAM,QAAQ,KAAK,cAAc,EAAE,EAAE;AACxC,OAAI,KAAK,SAAS,WAAY;GAC9B,MAAM,MACJ,KAAK,KAAK,SAAS,eAAe,KAAK,IAAI,OAAO,KAAK,KAAK;AAC9D,OAAI,QAAQ,YAAY,gBAAgB,KAAK,MAAM,CACjD,UAAS,KAAK,MAAM;YACX,QAAQ,QACjB,YAAW;;AAGf,MAAI,WAAW,SAAS,SACtB,OAAM,IAAI,MACR,sBAAsB,KAAK,OAAO,OAAO,gGAC1C;AAEH,SAAO,WAAW,WAAW,SAAS;;AAIxC,KAAI,QAAQ,KAAK,UAAU,EAAG,QAAO;AAErC,OAAM,IAAI,MACR,sBAAsB,KAAK,OAAO,OAAO,gGAC1C;;AAGH,SAAS,eAAe,MAAoB;AAC1C,QACE,MAAM,SAAS,6BACf,MAAM,SAAS;;AAInB,SAAS,gBACP,MAC4C;AAC5C,QAAO,MAAM,SAAS,aAAa,OAAO,KAAK,UAAU;;;AAI3D,SAAS,mBAAmB,MAAe,OAA4B;AACrE,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;AAET,KAAI,MAAM,QAAQ,KAAK,CACrB,QAAO,KAAK,QACT,OAAO,UAAU,QAAQ,mBAAmB,OAAO,MAAM,EAC1D,EACD;CAGH,MAAM,SAAS;CACf,IAAI,QAAQ;AACZ,KAAI,OAAO,SAAS,kBAAkB;EACpC,MAAM,SAAS,OAAO;AACtB,MACE,QAAQ,SAAS,gBACjB,OAAO,QACP,MAAM,IAAI,OAAO,KAAK,CAEtB,UAAS;;AAGb,MAAK,MAAM,OAAO,OAAO,KAAK,OAAO,CACnC,UAAS,mBAAmB,OAAO,MAAM,MAAM;AAEjD,QAAO"}

package/src/lib/server-fn-id.d.ts

@@ -0,0 +1,25 @@
+/**
+* Server-function ids are derived, never author-chosen, for security:
+*
+* - **Collision-free.** `hash(fileId + exportName)` is unique per file+export, so
+*   two functions can never share a route and hijack each other's dispatch — a
+*   real risk with hand-picked ids where two authors independently pick `getUser`.
+* - **Non-enumerable.** The public route is an opaque digest, not a guessable
+*   verb like `/_analog/fn/deleteAccount`, shrinking the discoverable surface.
+* - **Not author-controlled.** Authors cannot expose a meaningful or duplicate
+*   route by accident; the id is a pure function of location.
+*
+* Both build transforms (server registration + client proxy) MUST derive the
+* same id, so this is the single source of truth for the algorithm and the
+* `fileId` must be the **project-root-relative** POSIX path — identical across
+* the client, SSR, and Nitro builds regardless of absolute checkout location.
+*/
+/** Project-root-relative POSIX module path used as the stable hash input. */
+export declare function serverFnFileId(absPath: string, projectRoot: string): string;
+/**
+* Derives the opaque, collision-free id for a server function from its
+* project-root-relative file id and export name. 16 hex chars (64 bits) is far
+* beyond birthday-collision range for any realistic function count while keeping
+* the route short.
+*/
+export declare function deriveServerFnId(fileId: string, exportName: string): string;

package/src/lib/server-fn-id.js

@@ -0,0 +1,37 @@
+import { relative } from "node:path";
+import { createHash } from "node:crypto";
+//#region packages/platform/src/lib/server-fn-id.ts
+var toPosix = (p) => p.replace(/\\/g, "/");
+/**
+* Server-function ids are derived, never author-chosen, for security:
+*
+* - **Collision-free.** `hash(fileId + exportName)` is unique per file+export, so
+*   two functions can never share a route and hijack each other's dispatch — a
+*   real risk with hand-picked ids where two authors independently pick `getUser`.
+* - **Non-enumerable.** The public route is an opaque digest, not a guessable
+*   verb like `/_analog/fn/deleteAccount`, shrinking the discoverable surface.
+* - **Not author-controlled.** Authors cannot expose a meaningful or duplicate
+*   route by accident; the id is a pure function of location.
+*
+* Both build transforms (server registration + client proxy) MUST derive the
+* same id, so this is the single source of truth for the algorithm and the
+* `fileId` must be the **project-root-relative** POSIX path — identical across
+* the client, SSR, and Nitro builds regardless of absolute checkout location.
+*/
+/** Project-root-relative POSIX module path used as the stable hash input. */
+function serverFnFileId(absPath, projectRoot) {
+	return toPosix(relative(projectRoot, absPath));
+}
+/**
+* Derives the opaque, collision-free id for a server function from its
+* project-root-relative file id and export name. 16 hex chars (64 bits) is far
+* beyond birthday-collision range for any realistic function count while keeping
+* the route short.
+*/
+function deriveServerFnId(fileId, exportName) {
+	return createHash("sha256").update(`${fileId}#${exportName}`).digest("hex").slice(0, 16);
+}
+//#endregion
+export { deriveServerFnId, serverFnFileId };
+
+//# sourceMappingURL=server-fn-id.js.map

package/src/lib/server-fn-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-fn-id.js","names":[],"sources":["../../../src/lib/server-fn-id.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { relative } from 'node:path';\n\n// Intentionally dependency-light (node built-ins only): this module is loaded by\n// the client scrub, so it must not drag in vite/nitro. POSIX-normalize inline.\nconst toPosix = (p: string): string => p.replace(/\\\\/g, '/');\n\n/**\n * Server-function ids are derived, never author-chosen, for security:\n *\n * - **Collision-free.** `hash(fileId + exportName)` is unique per file+export, so\n *   two functions can never share a route and hijack each other's dispatch — a\n *   real risk with hand-picked ids where two authors independently pick `getUser`.\n * - **Non-enumerable.** The public route is an opaque digest, not a guessable\n *   verb like `/_analog/fn/deleteAccount`, shrinking the discoverable surface.\n * - **Not author-controlled.** Authors cannot expose a meaningful or duplicate\n *   route by accident; the id is a pure function of location.\n *\n * Both build transforms (server registration + client proxy) MUST derive the\n * same id, so this is the single source of truth for the algorithm and the\n * `fileId` must be the **project-root-relative** POSIX path — identical across\n * the client, SSR, and Nitro builds regardless of absolute checkout location.\n */\n\n/** Project-root-relative POSIX module path used as the stable hash input. */\nexport function serverFnFileId(absPath: string, projectRoot: string): string {\n  return toPosix(relative(projectRoot, absPath));\n}\n\n/**\n * Derives the opaque, collision-free id for a server function from its\n * project-root-relative file id and export name. 16 hex chars (64 bits) is far\n * beyond birthday-collision range for any realistic function count while keeping\n * the route short.\n */\nexport function deriveServerFnId(fileId: string, exportName: string): string {\n  return createHash('sha256')\n    .update(`${fileId}#${exportName}`)\n    .digest('hex')\n    .slice(0, 16);\n}\n"],"mappings":";;;AAKA,IAAM,WAAW,MAAsB,EAAE,QAAQ,OAAO,IAAI;;;;;;;;;;;;;;;;;;AAoB5D,SAAgB,eAAe,SAAiB,aAA6B;AAC3E,QAAO,QAAQ,SAAS,aAAa,QAAQ,CAAC;;;;;;;;AAShD,SAAgB,iBAAiB,QAAgB,YAA4B;AAC3E,QAAO,WAAW,SAAS,CACxB,OAAO,GAAG,OAAO,GAAG,aAAa,CACjC,OAAO,MAAM,CACb,MAAM,GAAG,GAAG"}