@aopslabs/aops-server 0.2.10 → 0.2.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (70) hide show
  1. package/THIRD_PARTY_NOTICES +77 -152
  2. package/THIRD_PARTY_NOTICES.inventory.json +202 -53
  3. package/build/client/_app/immutable/chunks/qRIvhaXj.js +1 -0
  4. package/build/client/_app/immutable/entry/{app.wWpgS-lj.js → app.tVDNflbN.js} +2 -2
  5. package/build/client/_app/immutable/entry/start.DLye8RM1.js +1 -0
  6. package/build/client/_app/immutable/nodes/{1.ClIe_uwH.js → 1.DlD7dcNg.js} +1 -1
  7. package/build/client/_app/version.json +1 -1
  8. package/build/handler.js +10 -3
  9. package/build/index.js +10 -3
  10. package/build/server/chunks/{agent-gateway-runtime-D6-UoKQA.js → chunks/agent-gateway-runtime.js-De6jvAjX.js} +11 -18
  11. package/build/server/chunks/{discovery-BaEpDyWT.js → chunks/discovery.js-CZjXJ_ZV.js} +3 -3
  12. package/build/server/chunks/chunks/exports.js-BoBrqMaZ.js +215 -0
  13. package/build/server/chunks/chunks/internal.js-BAGgMnGJ.js +126 -0
  14. package/build/server/chunks/chunks/json-request-body.js-ewKk-XAX.js +18 -0
  15. package/build/server/chunks/{registry-3GWqIriK.js → chunks/registry.js-DdOAgkkf.js} +6 -6
  16. package/build/server/chunks/{request-context-9wzBoKrz.js → chunks/request-context.js-Y9Hk40z6.js} +3 -3
  17. package/build/server/chunks/chunks/root.js-Di8SnzYO.js +4187 -0
  18. package/build/server/chunks/chunks/server.js-Bf8x1V_n.js +15 -0
  19. package/build/server/chunks/chunks/uneval.js-BnYgIxRU.js +521 -0
  20. package/build/server/chunks/chunks/utils.js-DjaWGEhn.js +1623 -0
  21. package/build/server/chunks/chunks/utils2.js-BQzn9ikS.js +37 -0
  22. package/build/server/chunks/{_server.ts-WWdSLatP.js → entries/endpoints/api/_domain_/_...path_/_server.ts.js-C5pGdb58.js} +9 -7
  23. package/build/server/chunks/{_server.ts-5PfufGhQ.js → entries/endpoints/api/_server.ts.js-sSJl5nE9.js} +3 -1
  24. package/build/server/chunks/{_server.ts-CCrjMhLK.js → entries/endpoints/api/agent/discovery.json/_server.ts.js-DBhJ_-B2.js} +10 -8
  25. package/build/server/chunks/{_server.ts-BXCdUW6X.js → entries/endpoints/api/agent/openapi.json/_server.ts.js-DfvqJ5cj.js} +9 -7
  26. package/build/server/chunks/{_server.ts-ClvARLzg.js → entries/endpoints/api/agent/tools/_server.ts.js-DZKcGR3W.js} +10 -8
  27. package/build/server/chunks/{_server.ts-Dy3zDemo.js → entries/endpoints/api/agent/tools/_toolId_/_server.ts.js-B5urFDtl.js} +10 -8
  28. package/build/server/chunks/{_server.ts-C6tCqRgY.js → entries/endpoints/api/agent/tools/_toolId_/invoke/_server.ts.js-BAvkC5Rt.js} +21 -19
  29. package/build/server/chunks/{_server.ts-BJ4evpqP.js → entries/endpoints/api/aops/docman/flows/_server.ts.js-C0Y7KGXm.js} +13 -14
  30. package/build/server/chunks/{_server.ts-CGIpzS6K.js → entries/endpoints/api/aops/projectman/flows/_server.ts.js-JYO0h_yB.js} +13 -14
  31. package/build/server/chunks/{_server.ts-CNd_VT19.js → entries/endpoints/api/aops/settings/database/status/_server.ts.js-Owz6c-s3.js} +5 -3
  32. package/build/server/chunks/{_server.ts-7-tcIJf2.js → entries/endpoints/api/auth/me/_server.ts.js-CSjwLMYe.js} +4 -2
  33. package/build/server/chunks/{_server.ts-DCkBCaJM.js → entries/endpoints/api/health/_server.ts.js-CqZW_cm6.js} +6 -4
  34. package/build/server/chunks/entries/endpoints/api/hello/_server.ts.js-CF4gShRZ.js +11 -0
  35. package/build/server/chunks/{_server.ts-C7O3p1BG.js → entries/endpoints/api/host-admin/plugins/_server.ts.js-BjoRl46U.js} +8 -6
  36. package/build/server/chunks/entries/endpoints/api/host-admin/runtime-config/_server.ts.js-BbVXEK2o.js +12 -0
  37. package/build/server/chunks/{_server.ts-CuifGJTF.js → entries/endpoints/api/host-admin/runtime-config/test/_server.ts.js-4KY0tKLf.js} +5 -3
  38. package/build/server/chunks/{_server.ts-BzHZDsLU.js → entries/endpoints/api-info.json/_server.ts.js-BjF2mgkA.js} +10 -8
  39. package/build/server/chunks/{_server.ts-AJ0imKUc.js → entries/endpoints/openapi.json/_server.ts.js-DGXyC49p.js} +9 -7
  40. package/build/server/chunks/{error.svelte-B5_Vjwmk.js → entries/fallbacks/error.svelte.js-D7yKTuER.js} +5 -1
  41. package/build/server/chunks/{hooks.server-B8q2QwIQ.js → entries/hooks.server.js-0eTKxvgl.js} +4 -2
  42. package/build/server/chunks/{handler-BsClyvu7.js → handler-WdL1KixW.js} +3 -2
  43. package/build/server/chunks/index.js-DOzENJRR.js +4103 -0
  44. package/build/server/chunks/{manifest.js-zg9yAX8Y.js → manifest.js-Dzrd5JLV.js} +24 -24
  45. package/build/server/chunks/{1-CCFGO3E8.js → nodes/1.js-JEOiX_Dx.js} +2 -2
  46. package/host.config.json +2 -2
  47. package/npm-shrinkwrap.json +80 -94
  48. package/package.json +16 -18
  49. package/runtime/agentspace-host-adapter.mjs +19 -5
  50. package/runtime/agentspace-tooling.mjs +23 -23
  51. package/runtime/docman-host-adapter.mjs +33 -3
  52. package/runtime/docman-policy.mjs +1 -0
  53. package/runtime/projectman-host-adapter.mjs +26 -0
  54. package/runtime-closure.package.json +30 -32
  55. package/build/client/_app/immutable/chunks/DOP91BI2.js +0 -1
  56. package/build/client/_app/immutable/entry/start.B6IoXHM8.js +0 -1
  57. package/build/server/chunks/_server.ts-CHX_s-fT.js +0 -9
  58. package/build/server/chunks/_server.ts-DGOwt3F3.js +0 -10
  59. package/build/server/chunks/index.js--6zD1xCG.js +0 -10803
  60. /package/build/server/chunks/{aops-runtime-config-CHpDUCdE.js → chunks/aops-runtime-config.js-CHpDUCdE.js} +0 -0
  61. /package/build/server/chunks/{auth-provider-C07OUlnz.js → chunks/auth-provider.js-C07OUlnz.js} +0 -0
  62. /package/build/server/chunks/{commercial-admission-loader-ZGZHRPLe.js → chunks/commercial-admission-loader.js-ZGZHRPLe.js} +0 -0
  63. /package/build/server/chunks/{plugin-error-normalize-DNeRsopQ.js → chunks/plugin-error-normalize.js-DNeRsopQ.js} +0 -0
  64. /package/build/server/chunks/{project-alias-BdnRxWft.js → chunks/project-alias.js-BdnRxWft.js} +0 -0
  65. /package/build/server/chunks/{request-base-url-zKJpVUv5.js → chunks/request-base-url.js-zKJpVUv5.js} +0 -0
  66. /package/build/server/chunks/{xf-result-BRDjvftr.js → chunks/xf-result.js-BRDjvftr.js} +0 -0
  67. /package/build/server/chunks/{_server.ts-Bly8fCZa.js → entries/endpoints/_server.ts.js-Bly8fCZa.js} +0 -0
  68. /package/build/server/chunks/{_server.ts-DbdAfdYo.js → entries/endpoints/api/chatv3/v1/rooms/_roomId_/stream/_server.ts.js-DbdAfdYo.js} +0 -0
  69. /package/build/server/chunks/{_server.ts-Cv-yaXZI.js → entries/endpoints/api-info/_server.ts.js-Cv-yaXZI.js} +0 -0
  70. /package/build/server/chunks/{0-RfB6m2nq.js → nodes/0.js-RfB6m2nq.js} +0 -0
@@ -0,0 +1,4103 @@
1
+ import { n as noop, f as format_server_error, j as json, i as is_form_content_type, t as text, T as TRAILING_SLASH_PARAM, I as INVALIDATED_PARAM, h as has_prerendered_path, a as handle_fatal_error, R as Redirect, r as redirect_response, g as get_set_cookies, b as negotiate, w as with_request_store, p as parseString, m as merge_tracing, S as SvelteKitError, c as method_not_allowed, s as static_error_page, d as handle_error_and_jsonify, e as get_status, k as get_global_name, l as create_replacer, o as serialize_uses, q as clarify_devalue_error, u as once, H as HttpError, E as ENDPOINT_METHODS, P as PAGE_METHODS, v as normalize_error, x as get_node_type, y as isRedirect, z as escape_html, A as create_remote_key, B as error, C as parse_remote_arg, D as deserialize_binary_form, F as stringify, G as stringify$1, J as ActionFailure, K as split_remote_key, L as SVELTE_KIT_ASSETS } from './chunks/utils.js-DjaWGEhn.js';
2
+ import { D as DEV } from './chunks/root.js-Di8SnzYO.js';
3
+ import { b as base, a as app_dir, r as relative, o as override, c as assets, d as reset } from './chunks/server.js-Bf8x1V_n.js';
4
+ import { u as uneval } from './chunks/uneval.js-BnYgIxRU.js';
5
+ import { d as decode_pathname, n as normalize_path, a as disable_search, b as decode_params, v as validate_layout_server_exports, c as validate_layout_exports, e as validate_page_server_exports, f as validate_page_exports, r as resolve, m as make_trackable, w as writable, g as readable } from './chunks/exports.js-BoBrqMaZ.js';
6
+ import { g as get_relative_path, t as text_encoder, a as base64_encode } from './chunks/utils2.js-BQzn9ikS.js';
7
+ import { o as options, s as set_private_env, a as set_public_env, g as get_hooks, p as public_env, r as read_implementation, b as set_read_implementation } from './chunks/internal.js-BAGgMnGJ.js';
8
+
9
+ const s = JSON.stringify;
10
+ function exec(match, params, matchers) {
11
+ const result = {};
12
+ const values = match.slice(1);
13
+ const values_needing_match = values.filter((value) => value !== void 0);
14
+ let buffered = 0;
15
+ for (let i = 0; i < params.length; i += 1) {
16
+ const param = params[i];
17
+ let value = values[i - buffered];
18
+ if (param.chained && param.rest && buffered) {
19
+ value = values.slice(i - buffered, i + 1).filter((s2) => s2).join("/");
20
+ buffered = 0;
21
+ }
22
+ if (value === void 0) {
23
+ if (param.rest) {
24
+ value = "";
25
+ } else {
26
+ continue;
27
+ }
28
+ }
29
+ if (!param.matcher || matchers[param.matcher](value)) {
30
+ result[param.name] = value;
31
+ const next_param = params[i + 1];
32
+ const next_value = values[i + 1];
33
+ if (next_param && !next_param.rest && next_param.optional && next_value && param.chained) {
34
+ buffered = 0;
35
+ }
36
+ if (!next_param && !next_value && Object.keys(result).length === values_needing_match.length) {
37
+ buffered = 0;
38
+ }
39
+ continue;
40
+ }
41
+ if (param.optional && param.chained) {
42
+ buffered++;
43
+ continue;
44
+ }
45
+ return;
46
+ }
47
+ if (buffered) return;
48
+ return result;
49
+ }
50
+ function find_route(path, routes, matchers) {
51
+ for (const route of routes) {
52
+ const match = route.pattern.exec(path);
53
+ if (!match) continue;
54
+ const matched = exec(match, route.params, matchers);
55
+ if (matched) {
56
+ return {
57
+ route,
58
+ params: decode_params(matched)
59
+ };
60
+ }
61
+ }
62
+ return null;
63
+ }
64
+ const DATA_SUFFIX = "/__data.json";
65
+ const HTML_DATA_SUFFIX = ".html__data.json";
66
+ function has_data_suffix(pathname) {
67
+ return pathname.endsWith(DATA_SUFFIX) || pathname.endsWith(HTML_DATA_SUFFIX);
68
+ }
69
+ function add_data_suffix(pathname) {
70
+ if (pathname.endsWith(".html")) return pathname.replace(/\.html$/, HTML_DATA_SUFFIX);
71
+ return pathname.replace(/\/$/, "") + DATA_SUFFIX;
72
+ }
73
+ function strip_data_suffix(pathname) {
74
+ if (pathname.endsWith(HTML_DATA_SUFFIX)) {
75
+ return pathname.slice(0, -HTML_DATA_SUFFIX.length) + ".html";
76
+ }
77
+ return pathname.slice(0, -DATA_SUFFIX.length);
78
+ }
79
+ const ROUTE_SUFFIX = "/__route.js";
80
+ function has_resolution_suffix(pathname) {
81
+ return pathname.endsWith(ROUTE_SUFFIX);
82
+ }
83
+ function add_resolution_suffix(pathname) {
84
+ return pathname.replace(/\/$/, "") + ROUTE_SUFFIX;
85
+ }
86
+ function strip_resolution_suffix(pathname) {
87
+ return pathname.slice(0, -ROUTE_SUFFIX.length);
88
+ }
89
+ function hash(...values) {
90
+ let hash2 = 5381;
91
+ for (const value of values) {
92
+ if (typeof value === "string") {
93
+ let i = value.length;
94
+ while (i) hash2 = hash2 * 33 ^ value.charCodeAt(--i);
95
+ } else if (ArrayBuffer.isView(value)) {
96
+ const buffer = new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
97
+ let i = buffer.length;
98
+ while (i) hash2 = hash2 * 33 ^ buffer[--i];
99
+ } else {
100
+ throw new TypeError("value must be a string or TypedArray");
101
+ }
102
+ }
103
+ return (hash2 >>> 0).toString(36);
104
+ }
105
+ function compact(arr) {
106
+ return arr.filter(
107
+ /** @returns {val is NonNullable<T>} */
108
+ (val) => val != null
109
+ );
110
+ }
111
+ const noop_span = {
112
+ spanContext() {
113
+ return noop_span_context;
114
+ },
115
+ setAttribute() {
116
+ return this;
117
+ },
118
+ setAttributes() {
119
+ return this;
120
+ },
121
+ addEvent() {
122
+ return this;
123
+ },
124
+ setStatus() {
125
+ return this;
126
+ },
127
+ updateName() {
128
+ return this;
129
+ },
130
+ end() {
131
+ return this;
132
+ },
133
+ isRecording() {
134
+ return false;
135
+ },
136
+ recordException() {
137
+ return this;
138
+ },
139
+ addLink() {
140
+ return this;
141
+ },
142
+ addLinks() {
143
+ return this;
144
+ }
145
+ };
146
+ const noop_span_context = {
147
+ traceId: "",
148
+ spanId: "",
149
+ traceFlags: 0
150
+ };
151
+ function with_resolvers() {
152
+ let resolve2;
153
+ let reject;
154
+ const promise = new Promise((res, rej) => {
155
+ resolve2 = res;
156
+ reject = rej;
157
+ });
158
+ return { promise, resolve: resolve2, reject };
159
+ }
160
+ const NULL_BODY_STATUS = [101, 103, 204, 205, 304];
161
+ const IN_WEBCONTAINER = !!globalThis.process?.versions?.webcontainer;
162
+ async function render_endpoint(event, event_state, mod, state) {
163
+ const method = (
164
+ /** @type {import('types').HttpMethod} */
165
+ event.request.method
166
+ );
167
+ let handler = mod[method] || mod.fallback;
168
+ if (method === "HEAD" && !mod.HEAD && mod.GET) {
169
+ handler = mod.GET;
170
+ }
171
+ if (!handler) {
172
+ return method_not_allowed(mod, method);
173
+ }
174
+ const prerender = mod.prerender ?? state.prerender_default;
175
+ if (prerender && (mod.POST || mod.PATCH || mod.PUT || mod.DELETE)) {
176
+ throw new Error("Cannot prerender endpoints that have mutative methods");
177
+ }
178
+ if (state.prerendering && !state.prerendering.inside_reroute && !prerender) {
179
+ if (state.depth > 0) {
180
+ throw new Error(`${event.route.id} is not prerenderable`);
181
+ } else {
182
+ return new Response(void 0, { status: 204 });
183
+ }
184
+ }
185
+ try {
186
+ const response = await with_request_store(
187
+ { event, state: event_state },
188
+ () => handler(
189
+ /** @type {import('@sveltejs/kit').RequestEvent<Record<string, any>>} */
190
+ event
191
+ )
192
+ );
193
+ if (!(response instanceof Response)) {
194
+ throw new Error(
195
+ `Invalid response from route ${event.url.pathname}: handler should return a Response object`
196
+ );
197
+ }
198
+ if (state.prerendering && (!state.prerendering.inside_reroute || prerender)) {
199
+ const cloned = new Response(response.clone().body, {
200
+ status: response.status,
201
+ statusText: response.statusText,
202
+ headers: new Headers(response.headers)
203
+ });
204
+ cloned.headers.set("x-sveltekit-prerender", String(prerender));
205
+ if (state.prerendering.inside_reroute && prerender) {
206
+ cloned.headers.set(
207
+ "x-sveltekit-routeid",
208
+ encodeURI(
209
+ /** @type {string} */
210
+ event.route.id
211
+ )
212
+ );
213
+ state.prerendering.dependencies.set(event.url.pathname, { response: cloned, body: null });
214
+ } else {
215
+ return cloned;
216
+ }
217
+ }
218
+ return response;
219
+ } catch (e) {
220
+ if (e instanceof Redirect) {
221
+ return new Response(void 0, {
222
+ status: e.status,
223
+ headers: { location: e.location }
224
+ });
225
+ }
226
+ throw e;
227
+ }
228
+ }
229
+ function is_endpoint_request(event) {
230
+ const { method, headers: headers2 } = event.request;
231
+ if (ENDPOINT_METHODS.includes(method) && !PAGE_METHODS.includes(method)) {
232
+ return true;
233
+ }
234
+ if (method === "POST" && headers2.get("x-sveltekit-action") === "true") return false;
235
+ const accept = event.request.headers.get("accept") ?? "*/*";
236
+ return negotiate(accept, ["*", "text/html"]) !== "text/html";
237
+ }
238
+ async function record_span({ name, attributes, fn }) {
239
+ {
240
+ return fn(noop_span);
241
+ }
242
+ }
243
+ function is_action_json_request(event) {
244
+ const accept = negotiate(event.request.headers.get("accept") ?? "*/*", [
245
+ "application/json",
246
+ "text/html"
247
+ ]);
248
+ return accept === "application/json" && event.request.method === "POST";
249
+ }
250
+ async function handle_action_json_request(event, event_state, options2, server) {
251
+ const actions = server?.actions;
252
+ if (!actions) {
253
+ const no_actions_error = new SvelteKitError(
254
+ 405,
255
+ "Method Not Allowed",
256
+ `POST method not allowed. No form actions exist for ${"this page"}`
257
+ );
258
+ return action_json(
259
+ {
260
+ type: "error",
261
+ error: await handle_error_and_jsonify(event, event_state, options2, no_actions_error)
262
+ },
263
+ {
264
+ status: no_actions_error.status,
265
+ headers: {
266
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405
267
+ // "The server must generate an Allow header field in a 405 status code response"
268
+ allow: "GET"
269
+ }
270
+ }
271
+ );
272
+ }
273
+ check_named_default_separate(actions);
274
+ try {
275
+ const data = await call_action(event, event_state, actions);
276
+ if (DEV) ;
277
+ if (data instanceof ActionFailure) {
278
+ return action_json({
279
+ type: "failure",
280
+ status: data.status,
281
+ // @ts-expect-error we assign a string to what is supposed to be an object. That's ok
282
+ // because we don't use the object outside, and this way we have better code navigation
283
+ // through knowing where the related interface is used.
284
+ data: stringify_action_response(
285
+ data.data,
286
+ /** @type {string} */
287
+ event.route.id,
288
+ options2.hooks.transport
289
+ )
290
+ });
291
+ } else {
292
+ return action_json({
293
+ type: "success",
294
+ status: data ? 200 : 204,
295
+ // @ts-expect-error see comment above
296
+ data: stringify_action_response(
297
+ data,
298
+ /** @type {string} */
299
+ event.route.id,
300
+ options2.hooks.transport
301
+ )
302
+ });
303
+ }
304
+ } catch (e) {
305
+ const err = normalize_error(e);
306
+ if (err instanceof Redirect) {
307
+ return action_json_redirect(err);
308
+ }
309
+ return action_json(
310
+ {
311
+ type: "error",
312
+ error: await handle_error_and_jsonify(
313
+ event,
314
+ event_state,
315
+ options2,
316
+ check_incorrect_fail_use(err)
317
+ )
318
+ },
319
+ {
320
+ status: get_status(err)
321
+ }
322
+ );
323
+ }
324
+ }
325
+ function check_incorrect_fail_use(error2) {
326
+ return error2 instanceof ActionFailure ? new Error('Cannot "throw fail()". Use "return fail()"') : error2;
327
+ }
328
+ function action_json_redirect(redirect) {
329
+ return action_json({
330
+ type: "redirect",
331
+ status: redirect.status,
332
+ location: redirect.location
333
+ });
334
+ }
335
+ function action_json(data, init2) {
336
+ return json(data, init2);
337
+ }
338
+ function is_action_request(event) {
339
+ return event.request.method === "POST";
340
+ }
341
+ async function handle_action_request(event, event_state, server) {
342
+ const actions = server?.actions;
343
+ if (!actions) {
344
+ event.setHeaders({
345
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405
346
+ // "The server must generate an Allow header field in a 405 status code response"
347
+ allow: "GET"
348
+ });
349
+ return {
350
+ type: "error",
351
+ error: new SvelteKitError(
352
+ 405,
353
+ "Method Not Allowed",
354
+ `POST method not allowed. No form actions exist for ${"this page"}`
355
+ )
356
+ };
357
+ }
358
+ check_named_default_separate(actions);
359
+ try {
360
+ const data = await call_action(event, event_state, actions);
361
+ if (DEV) ;
362
+ if (data instanceof ActionFailure) {
363
+ return {
364
+ type: "failure",
365
+ status: data.status,
366
+ data: data.data
367
+ };
368
+ } else {
369
+ return {
370
+ type: "success",
371
+ status: 200,
372
+ // @ts-expect-error this will be removed upon serialization, so `undefined` is the same as omission
373
+ data
374
+ };
375
+ }
376
+ } catch (e) {
377
+ const err = normalize_error(e);
378
+ if (err instanceof Redirect) {
379
+ return {
380
+ type: "redirect",
381
+ status: err.status,
382
+ location: err.location
383
+ };
384
+ }
385
+ return {
386
+ type: "error",
387
+ error: check_incorrect_fail_use(err)
388
+ };
389
+ }
390
+ }
391
+ function check_named_default_separate(actions) {
392
+ if (actions.default && Object.keys(actions).length > 1) {
393
+ throw new Error(
394
+ "When using named actions, the default action cannot be used. See the docs for more info: https://svelte.dev/docs/kit/form-actions#named-actions"
395
+ );
396
+ }
397
+ }
398
+ async function call_action(event, event_state, actions) {
399
+ const url = new URL(event.request.url);
400
+ let name = "default";
401
+ for (const param of url.searchParams) {
402
+ if (param[0].startsWith("/")) {
403
+ name = param[0].slice(1);
404
+ if (name === "default") {
405
+ throw new Error('Cannot use reserved action name "default"');
406
+ }
407
+ break;
408
+ }
409
+ }
410
+ const action = actions[name];
411
+ if (!action) {
412
+ throw new SvelteKitError(404, "Not Found", `No action with name '${name}' found`);
413
+ }
414
+ if (!is_form_content_type(event.request)) {
415
+ throw new SvelteKitError(
416
+ 415,
417
+ "Unsupported Media Type",
418
+ `Form actions expect form-encoded data — received ${event.request.headers.get(
419
+ "content-type"
420
+ )}`
421
+ );
422
+ }
423
+ return record_span({
424
+ name: "sveltekit.form_action",
425
+ attributes: {
426
+ "http.route": event.route.id || "unknown"
427
+ },
428
+ fn: async (current2) => {
429
+ const traced_event = merge_tracing(event, current2);
430
+ const result = await with_request_store(
431
+ { event: traced_event, state: event_state },
432
+ () => action(traced_event)
433
+ );
434
+ if (result instanceof ActionFailure) {
435
+ current2.setAttributes({
436
+ "sveltekit.form_action.result.type": "failure",
437
+ "sveltekit.form_action.result.status": result.status
438
+ });
439
+ }
440
+ return result;
441
+ }
442
+ });
443
+ }
444
+ function uneval_action_response(data, route_id, transport) {
445
+ const replacer = create_replacer(transport);
446
+ return try_serialize(data, (value) => uneval(value, replacer), route_id);
447
+ }
448
+ function stringify_action_response(data, route_id, transport) {
449
+ const encoders = Object.fromEntries(
450
+ Object.entries(transport).map(([key2, value]) => [key2, value.encode])
451
+ );
452
+ return try_serialize(data, (value) => stringify$1(value, encoders), route_id);
453
+ }
454
+ function try_serialize(data, fn, route_id) {
455
+ try {
456
+ return fn(data);
457
+ } catch (e) {
458
+ const error2 = (
459
+ /** @type {any} */
460
+ e
461
+ );
462
+ if (data instanceof Response) {
463
+ throw new Error(
464
+ `Data returned from action inside ${route_id} is not serializable. Form actions need to return plain objects or fail(). E.g. return { success: true } or return fail(400, { message: "invalid" });`,
465
+ { cause: e }
466
+ );
467
+ }
468
+ if ("path" in error2) {
469
+ let message = `Data returned from action inside ${route_id} is not serializable: ${error2.message}`;
470
+ if (error2.path !== "") message += ` (data.${error2.path})`;
471
+ throw new Error(message, { cause: e });
472
+ }
473
+ throw error2;
474
+ }
475
+ }
476
+ function create_async_iterator() {
477
+ let resolved = -1;
478
+ let returned = -1;
479
+ const deferred = [];
480
+ return {
481
+ iterate: (transform = (x) => x) => {
482
+ return {
483
+ [Symbol.asyncIterator]() {
484
+ return {
485
+ next: async () => {
486
+ const next = deferred[++returned];
487
+ if (!next) return { value: null, done: true };
488
+ const value = await next.promise;
489
+ return { value: transform(value), done: false };
490
+ }
491
+ };
492
+ }
493
+ };
494
+ },
495
+ add: (promise) => {
496
+ const next = with_resolvers();
497
+ void next.promise.catch(noop);
498
+ deferred.push(next);
499
+ void promise.then(
500
+ (value) => {
501
+ deferred[++resolved].resolve(value);
502
+ },
503
+ (error2) => {
504
+ deferred[++resolved].reject(error2);
505
+ }
506
+ );
507
+ }
508
+ };
509
+ }
510
+ function server_data_serializer(event, event_state, options2) {
511
+ let promise_id = 1;
512
+ let max_nodes = -1;
513
+ const iterator = create_async_iterator();
514
+ const global = get_global_name(options2);
515
+ function get_replacer(index) {
516
+ return function replacer(thing) {
517
+ if (typeof thing?.then === "function") {
518
+ const id = promise_id++;
519
+ const promise = thing.then(
520
+ /** @param {any} data */
521
+ (data) => ({ data })
522
+ ).catch(
523
+ /** @param {any} error */
524
+ async (error2) => ({
525
+ error: await handle_error_and_jsonify(event, event_state, options2, error2)
526
+ })
527
+ ).then(
528
+ /**
529
+ * @param {{data: any; error: any}} result
530
+ */
531
+ async ({ data, error: error2 }) => {
532
+ let str;
533
+ try {
534
+ str = uneval(error2 ? [, error2] : [data], replacer);
535
+ } catch {
536
+ error2 = await handle_error_and_jsonify(
537
+ event,
538
+ event_state,
539
+ options2,
540
+ new Error(`Failed to serialize promise while rendering ${event.route.id}`)
541
+ );
542
+ str = uneval([, error2], replacer);
543
+ }
544
+ return {
545
+ index,
546
+ str: `${global}.resolve(${id}, ${str.includes("app.decode") ? `(app) => ${str}` : `() => ${str}`})`
547
+ };
548
+ }
549
+ );
550
+ iterator.add(promise);
551
+ return `${global}.defer(${id})`;
552
+ } else {
553
+ for (const key2 in options2.hooks.transport) {
554
+ const encoded = options2.hooks.transport[key2].encode(thing);
555
+ if (encoded) {
556
+ return `app.decode('${key2}', ${uneval(encoded, replacer)})`;
557
+ }
558
+ }
559
+ }
560
+ };
561
+ }
562
+ const strings = (
563
+ /** @type {string[]} */
564
+ []
565
+ );
566
+ return {
567
+ set_max_nodes(i) {
568
+ max_nodes = i;
569
+ },
570
+ add_node(i, node) {
571
+ try {
572
+ if (!node) {
573
+ strings[i] = "null";
574
+ return;
575
+ }
576
+ const payload2 = { type: "data", data: node.data, uses: serialize_uses(node) };
577
+ if (node.slash) payload2.slash = node.slash;
578
+ strings[i] = uneval(payload2, get_replacer(i));
579
+ } catch (e) {
580
+ e.path = e.path.slice(1);
581
+ throw new Error(clarify_devalue_error(
582
+ event,
583
+ /** @type {any} */
584
+ e
585
+ ), { cause: e });
586
+ }
587
+ },
588
+ get_data(csp) {
589
+ const open = `<script${csp.script_needs_nonce ? ` nonce="${csp.nonce}"` : ""}>`;
590
+ const close = `<\/script>
591
+ `;
592
+ return {
593
+ data: `[${compact(max_nodes > -1 ? strings.slice(0, max_nodes) : strings).join(",")}]`,
594
+ chunks: promise_id > 1 ? iterator.iterate(({ index, str }) => {
595
+ if (max_nodes > -1 && index >= max_nodes) {
596
+ return "";
597
+ }
598
+ return open + str + close;
599
+ }) : null
600
+ };
601
+ }
602
+ };
603
+ }
604
+ function server_data_serializer_json(event, event_state, options2) {
605
+ let promise_id = 1;
606
+ const iterator = create_async_iterator();
607
+ const reducers = {
608
+ ...Object.fromEntries(
609
+ Object.entries(options2.hooks.transport).map(([key2, value]) => [key2, value.encode])
610
+ ),
611
+ /** @param {any} thing */
612
+ Promise: (thing) => {
613
+ if (typeof thing?.then !== "function") {
614
+ return;
615
+ }
616
+ const id = promise_id++;
617
+ let key2 = "data";
618
+ const promise = thing.catch(
619
+ /** @param {any} e */
620
+ async (e) => {
621
+ key2 = "error";
622
+ return handle_error_and_jsonify(
623
+ event,
624
+ event_state,
625
+ options2,
626
+ /** @type {any} */
627
+ e
628
+ );
629
+ }
630
+ ).then(
631
+ /** @param {any} value */
632
+ async (value) => {
633
+ let str;
634
+ try {
635
+ str = stringify$1(value, reducers);
636
+ } catch {
637
+ const error2 = await handle_error_and_jsonify(
638
+ event,
639
+ event_state,
640
+ options2,
641
+ new Error(`Failed to serialize promise while rendering ${event.route.id}`)
642
+ );
643
+ key2 = "error";
644
+ str = stringify$1(error2, reducers);
645
+ }
646
+ return `{"type":"chunk","id":${id},"${key2}":${str}}
647
+ `;
648
+ }
649
+ );
650
+ iterator.add(promise);
651
+ return id;
652
+ }
653
+ };
654
+ const strings = (
655
+ /** @type {string[]} */
656
+ []
657
+ );
658
+ return {
659
+ add_node(i, node) {
660
+ try {
661
+ if (!node) {
662
+ strings[i] = "null";
663
+ return;
664
+ }
665
+ if (node.type === "error" || node.type === "skip") {
666
+ strings[i] = JSON.stringify(node);
667
+ return;
668
+ }
669
+ strings[i] = `{"type":"data","data":${stringify$1(node.data, reducers)},"uses":${JSON.stringify(
670
+ serialize_uses(node)
671
+ )}${node.slash ? `,"slash":${JSON.stringify(node.slash)}` : ""}}`;
672
+ } catch (e) {
673
+ e.path = "data" + e.path;
674
+ throw new Error(clarify_devalue_error(
675
+ event,
676
+ /** @type {any} */
677
+ e
678
+ ), { cause: e });
679
+ }
680
+ },
681
+ get_data() {
682
+ return {
683
+ data: `{"type":"data","nodes":[${strings.join(",")}]}
684
+ `,
685
+ chunks: promise_id > 1 ? iterator.iterate() : null
686
+ };
687
+ }
688
+ };
689
+ }
690
+ async function load_server_data({ event, event_state, state, node, parent }) {
691
+ if (!node?.server) return null;
692
+ let is_tracking = true;
693
+ const uses = {
694
+ dependencies: /* @__PURE__ */ new Set(),
695
+ params: /* @__PURE__ */ new Set(),
696
+ parent: false,
697
+ route: false,
698
+ url: false,
699
+ search_params: /* @__PURE__ */ new Set()
700
+ };
701
+ const load = node.server.load;
702
+ const slash = node.server.trailingSlash;
703
+ if (!load) {
704
+ return { type: "data", data: null, uses, slash };
705
+ }
706
+ const url = make_trackable(
707
+ event.url,
708
+ () => {
709
+ if (is_tracking) {
710
+ uses.url = true;
711
+ }
712
+ },
713
+ (param) => {
714
+ if (is_tracking) {
715
+ uses.search_params.add(param);
716
+ }
717
+ }
718
+ );
719
+ if (state.prerendering) {
720
+ disable_search(url);
721
+ }
722
+ const result = await record_span({
723
+ name: "sveltekit.load",
724
+ attributes: {
725
+ "sveltekit.load.node_id": node.server_id || "unknown",
726
+ "sveltekit.load.node_type": get_node_type(node.server_id),
727
+ "http.route": event.route.id || "unknown"
728
+ },
729
+ fn: async (current2) => {
730
+ const traced_event = merge_tracing(event, current2);
731
+ const result2 = await with_request_store(
732
+ { event: traced_event, state: event_state },
733
+ () => load.call(null, {
734
+ ...traced_event,
735
+ fetch: (info, init2) => {
736
+ new URL(info instanceof Request ? info.url : info, event.url);
737
+ return event.fetch(info, init2);
738
+ },
739
+ /** @param {string[]} deps */
740
+ depends: (...deps) => {
741
+ for (const dep of deps) {
742
+ const { href } = new URL(dep, event.url);
743
+ uses.dependencies.add(href);
744
+ }
745
+ },
746
+ params: new Proxy(event.params, {
747
+ get: (target, key2) => {
748
+ if (is_tracking) {
749
+ uses.params.add(key2);
750
+ }
751
+ return target[
752
+ /** @type {string} */
753
+ key2
754
+ ];
755
+ }
756
+ }),
757
+ parent: async () => {
758
+ if (is_tracking) {
759
+ uses.parent = true;
760
+ }
761
+ return parent();
762
+ },
763
+ route: new Proxy(event.route, {
764
+ get: (target, key2) => {
765
+ if (is_tracking) {
766
+ uses.route = true;
767
+ }
768
+ return target[
769
+ /** @type {'id'} */
770
+ key2
771
+ ];
772
+ }
773
+ }),
774
+ url,
775
+ untrack(fn) {
776
+ is_tracking = false;
777
+ try {
778
+ return fn();
779
+ } finally {
780
+ is_tracking = true;
781
+ }
782
+ }
783
+ })
784
+ );
785
+ return result2;
786
+ }
787
+ });
788
+ return {
789
+ type: "data",
790
+ data: result ?? null,
791
+ uses,
792
+ slash
793
+ };
794
+ }
795
+ async function load_data({
796
+ event,
797
+ event_state,
798
+ fetched,
799
+ node,
800
+ parent,
801
+ server_data_promise,
802
+ state,
803
+ resolve_opts,
804
+ csr
805
+ }) {
806
+ const server_data_node = await server_data_promise;
807
+ const load = node?.universal?.load;
808
+ if (!load) {
809
+ return server_data_node?.data ?? null;
810
+ }
811
+ const result = await record_span({
812
+ name: "sveltekit.load",
813
+ attributes: {
814
+ "sveltekit.load.node_id": node.universal_id || "unknown",
815
+ "sveltekit.load.node_type": get_node_type(node.universal_id),
816
+ "http.route": event.route.id || "unknown"
817
+ },
818
+ fn: async (current2) => {
819
+ const traced_event = merge_tracing(event, current2);
820
+ const child_state = { ...event_state, is_in_universal_load: true };
821
+ return await with_request_store(
822
+ { event: traced_event, state: child_state },
823
+ () => load.call(null, {
824
+ url: event.url,
825
+ params: event.params,
826
+ data: server_data_node?.data ?? null,
827
+ route: event.route,
828
+ fetch: create_universal_fetch(event, state, fetched, csr, resolve_opts),
829
+ setHeaders: event.setHeaders,
830
+ depends: noop,
831
+ parent,
832
+ untrack: (fn) => fn(),
833
+ tracing: traced_event.tracing
834
+ })
835
+ );
836
+ }
837
+ });
838
+ return result ?? null;
839
+ }
840
+ function create_universal_fetch(event, state, fetched, csr, resolve_opts) {
841
+ const universal_fetch = async (input, init2) => {
842
+ const cloned_body = input instanceof Request && input.body ? input.clone().body : null;
843
+ const cloned_headers = input instanceof Request && [...input.headers].length ? new Headers(input.headers) : init2?.headers;
844
+ let response = await event.fetch(input, init2);
845
+ const url = new URL(input instanceof Request ? input.url : input, event.url);
846
+ const same_origin = url.origin === event.url.origin;
847
+ let dependency;
848
+ if (same_origin) {
849
+ if (state.prerendering) {
850
+ dependency = { response, body: null };
851
+ state.prerendering.dependencies.set(url.pathname, dependency);
852
+ }
853
+ } else if (url.protocol === "https:" || url.protocol === "http:") {
854
+ const mode = input instanceof Request ? input.mode : init2?.mode ?? "cors";
855
+ if (mode === "no-cors") {
856
+ response = new Response("", {
857
+ status: response.status,
858
+ statusText: response.statusText,
859
+ headers: response.headers
860
+ });
861
+ } else {
862
+ const acao = response.headers.get("access-control-allow-origin");
863
+ if (!acao || acao !== event.url.origin && acao !== "*") {
864
+ throw new Error(
865
+ `CORS error: ${acao ? "Incorrect" : "No"} 'Access-Control-Allow-Origin' header is present on the requested resource`
866
+ );
867
+ }
868
+ }
869
+ }
870
+ let teed_body;
871
+ const proxy = new Proxy(response, {
872
+ get(response2, key2, receiver) {
873
+ async function push_fetched(body, is_b64) {
874
+ const status_number = Number(response2.status);
875
+ if (isNaN(status_number)) {
876
+ throw new Error(
877
+ `response.status is not a number. value: "${response2.status}" type: ${typeof response2.status}`
878
+ );
879
+ }
880
+ fetched.push({
881
+ url: same_origin ? url.href.slice(event.url.origin.length) : url.href,
882
+ method: event.request.method,
883
+ request_body: (
884
+ /** @type {string | ArrayBufferView | undefined} */
885
+ input instanceof Request && cloned_body ? await stream_to_string(cloned_body) : init2?.body
886
+ ),
887
+ request_headers: cloned_headers,
888
+ response_body: body,
889
+ response: response2,
890
+ is_b64
891
+ });
892
+ }
893
+ if (key2 === "body") {
894
+ if (response2.body === null) {
895
+ return null;
896
+ }
897
+ if (teed_body) {
898
+ return teed_body;
899
+ }
900
+ const [a, b] = response2.body.tee();
901
+ void (async () => {
902
+ let result = new Uint8Array();
903
+ for await (const chunk of a) {
904
+ const combined = new Uint8Array(result.length + chunk.length);
905
+ combined.set(result, 0);
906
+ combined.set(chunk, result.length);
907
+ result = combined;
908
+ }
909
+ if (dependency) {
910
+ dependency.body = new Uint8Array(result);
911
+ }
912
+ void push_fetched(base64_encode(result), true);
913
+ })().catch(noop);
914
+ return teed_body = b;
915
+ }
916
+ if (key2 === "arrayBuffer") {
917
+ return async () => {
918
+ const buffer = await response2.arrayBuffer();
919
+ const bytes = new Uint8Array(buffer);
920
+ if (dependency) {
921
+ dependency.body = bytes;
922
+ }
923
+ if (buffer instanceof ArrayBuffer) {
924
+ await push_fetched(base64_encode(bytes), true);
925
+ }
926
+ return buffer;
927
+ };
928
+ }
929
+ async function text2() {
930
+ const body = await response2.text();
931
+ if (body === "" && NULL_BODY_STATUS.includes(response2.status)) {
932
+ await push_fetched(void 0, false);
933
+ return void 0;
934
+ }
935
+ if (!body || typeof body === "string") {
936
+ await push_fetched(body, false);
937
+ }
938
+ if (dependency) {
939
+ dependency.body = body;
940
+ }
941
+ return body;
942
+ }
943
+ if (key2 === "text") {
944
+ return text2;
945
+ }
946
+ if (key2 === "json") {
947
+ return async () => {
948
+ const body = await text2();
949
+ return body ? JSON.parse(body) : void 0;
950
+ };
951
+ }
952
+ const value = Reflect.get(response2, key2, response2);
953
+ if (value instanceof Function) {
954
+ return Object.defineProperties(
955
+ /**
956
+ * @this {any}
957
+ */
958
+ function() {
959
+ return Reflect.apply(value, this === receiver ? response2 : this, arguments);
960
+ },
961
+ {
962
+ name: { value: value.name },
963
+ length: { value: value.length }
964
+ }
965
+ );
966
+ }
967
+ return value;
968
+ }
969
+ });
970
+ if (csr) {
971
+ const get = response.headers.get;
972
+ response.headers.get = (key2) => {
973
+ const lower = key2.toLowerCase();
974
+ const value = get.call(response.headers, lower);
975
+ if (value && !lower.startsWith("x-sveltekit-")) {
976
+ const included = resolve_opts.filterSerializedResponseHeaders(lower, value);
977
+ if (!included) {
978
+ throw new Error(
979
+ `Failed to get response header "${lower}" — it must be included by the \`filterSerializedResponseHeaders\` option: https://svelte.dev/docs/kit/hooks#handle (at ${event.route.id})`
980
+ );
981
+ }
982
+ }
983
+ return value;
984
+ };
985
+ }
986
+ return proxy;
987
+ };
988
+ return (input, init2) => {
989
+ const response = universal_fetch(input, init2);
990
+ response.catch(noop);
991
+ return response;
992
+ };
993
+ }
994
+ async function stream_to_string(stream) {
995
+ let result = "";
996
+ const reader = stream.getReader();
997
+ const decoder = new TextDecoder();
998
+ while (true) {
999
+ const { done, value } = await reader.read();
1000
+ if (done) {
1001
+ result += decoder.decode();
1002
+ break;
1003
+ }
1004
+ result += decoder.decode(value, { stream: true });
1005
+ }
1006
+ return result;
1007
+ }
1008
+ const replacements = {
1009
+ "<": "\\u003C",
1010
+ "\u2028": "\\u2028",
1011
+ "\u2029": "\\u2029"
1012
+ };
1013
+ const pattern = new RegExp(`[${Object.keys(replacements).join("")}]`, "g");
1014
+ function serialize_data(fetched, filter, prerendering = false) {
1015
+ const headers2 = {};
1016
+ let cache_control = null;
1017
+ let age = null;
1018
+ let varyAny = false;
1019
+ for (const [key2, value] of fetched.response.headers) {
1020
+ if (filter(key2, value)) {
1021
+ headers2[key2] = value;
1022
+ }
1023
+ if (key2 === "cache-control") cache_control = value;
1024
+ else if (key2 === "age") age = value;
1025
+ else if (key2 === "vary" && value.trim() === "*") varyAny = true;
1026
+ }
1027
+ const payload2 = {
1028
+ status: fetched.response.status,
1029
+ statusText: fetched.response.statusText,
1030
+ headers: headers2,
1031
+ body: fetched.response_body
1032
+ };
1033
+ const safe_payload = JSON.stringify(payload2).replace(pattern, (match) => replacements[match]);
1034
+ const attrs = [
1035
+ 'type="application/json"',
1036
+ "data-sveltekit-fetched",
1037
+ `data-url="${escape_html(fetched.url, true)}"`
1038
+ ];
1039
+ if (fetched.is_b64) {
1040
+ attrs.push("data-b64");
1041
+ }
1042
+ if (fetched.request_headers || fetched.request_body) {
1043
+ const values = [];
1044
+ if (fetched.request_headers) {
1045
+ values.push([...new Headers(fetched.request_headers)].join(","));
1046
+ }
1047
+ if (fetched.request_body) {
1048
+ values.push(fetched.request_body);
1049
+ }
1050
+ attrs.push(`data-hash="${hash(...values)}"`);
1051
+ }
1052
+ if (!prerendering && fetched.method === "GET" && cache_control && !varyAny) {
1053
+ const match = /s-maxage=(\d+)/g.exec(cache_control) ?? /max-age=(\d+)/g.exec(cache_control);
1054
+ if (match) {
1055
+ const ttl = +match[1] - +(age ?? "0");
1056
+ attrs.push(`data-ttl="${ttl}"`);
1057
+ }
1058
+ }
1059
+ return `<script ${attrs.join(" ")}>${safe_payload}<\/script>`;
1060
+ }
1061
+ function sha256(data) {
1062
+ if (!key[0]) precompute();
1063
+ const out = init.slice(0);
1064
+ const array2 = encode(data);
1065
+ for (let i = 0; i < array2.length; i += 16) {
1066
+ const w = array2.subarray(i, i + 16);
1067
+ let tmp;
1068
+ let a;
1069
+ let b;
1070
+ let out0 = out[0];
1071
+ let out1 = out[1];
1072
+ let out2 = out[2];
1073
+ let out3 = out[3];
1074
+ let out4 = out[4];
1075
+ let out5 = out[5];
1076
+ let out6 = out[6];
1077
+ let out7 = out[7];
1078
+ for (let i2 = 0; i2 < 64; i2++) {
1079
+ if (i2 < 16) {
1080
+ tmp = w[i2];
1081
+ } else {
1082
+ a = w[i2 + 1 & 15];
1083
+ b = w[i2 + 14 & 15];
1084
+ tmp = w[i2 & 15] = (a >>> 7 ^ a >>> 18 ^ a >>> 3 ^ a << 25 ^ a << 14) + (b >>> 17 ^ b >>> 19 ^ b >>> 10 ^ b << 15 ^ b << 13) + w[i2 & 15] + w[i2 + 9 & 15] | 0;
1085
+ }
1086
+ tmp = tmp + out7 + (out4 >>> 6 ^ out4 >>> 11 ^ out4 >>> 25 ^ out4 << 26 ^ out4 << 21 ^ out4 << 7) + (out6 ^ out4 & (out5 ^ out6)) + key[i2];
1087
+ out7 = out6;
1088
+ out6 = out5;
1089
+ out5 = out4;
1090
+ out4 = out3 + tmp | 0;
1091
+ out3 = out2;
1092
+ out2 = out1;
1093
+ out1 = out0;
1094
+ out0 = tmp + (out1 & out2 ^ out3 & (out1 ^ out2)) + (out1 >>> 2 ^ out1 >>> 13 ^ out1 >>> 22 ^ out1 << 30 ^ out1 << 19 ^ out1 << 10) | 0;
1095
+ }
1096
+ out[0] = out[0] + out0 | 0;
1097
+ out[1] = out[1] + out1 | 0;
1098
+ out[2] = out[2] + out2 | 0;
1099
+ out[3] = out[3] + out3 | 0;
1100
+ out[4] = out[4] + out4 | 0;
1101
+ out[5] = out[5] + out5 | 0;
1102
+ out[6] = out[6] + out6 | 0;
1103
+ out[7] = out[7] + out7 | 0;
1104
+ }
1105
+ const bytes = new Uint8Array(out.buffer);
1106
+ reverse_endianness(bytes);
1107
+ return btoa(String.fromCharCode(...bytes));
1108
+ }
1109
+ const init = new Uint32Array(8);
1110
+ const key = new Uint32Array(64);
1111
+ function precompute() {
1112
+ function frac(x) {
1113
+ return (x - Math.floor(x)) * 4294967296;
1114
+ }
1115
+ let prime = 2;
1116
+ for (let i = 0; i < 64; prime++) {
1117
+ let is_prime = true;
1118
+ for (let factor = 2; factor * factor <= prime; factor++) {
1119
+ if (prime % factor === 0) {
1120
+ is_prime = false;
1121
+ break;
1122
+ }
1123
+ }
1124
+ if (is_prime) {
1125
+ if (i < 8) {
1126
+ init[i] = frac(prime ** (1 / 2));
1127
+ }
1128
+ key[i] = frac(prime ** (1 / 3));
1129
+ i++;
1130
+ }
1131
+ }
1132
+ }
1133
+ function reverse_endianness(bytes) {
1134
+ for (let i = 0; i < bytes.length; i += 4) {
1135
+ const a = bytes[i + 0];
1136
+ const b = bytes[i + 1];
1137
+ const c = bytes[i + 2];
1138
+ const d = bytes[i + 3];
1139
+ bytes[i + 0] = d;
1140
+ bytes[i + 1] = c;
1141
+ bytes[i + 2] = b;
1142
+ bytes[i + 3] = a;
1143
+ }
1144
+ }
1145
+ function encode(str) {
1146
+ const encoded = text_encoder.encode(str);
1147
+ const length = encoded.length * 8;
1148
+ const size = 512 * Math.ceil((length + 65) / 512);
1149
+ const bytes = new Uint8Array(size / 8);
1150
+ bytes.set(encoded);
1151
+ bytes[encoded.length] = 128;
1152
+ reverse_endianness(bytes);
1153
+ const words = new Uint32Array(bytes.buffer);
1154
+ words[words.length - 2] = Math.floor(length / 4294967296);
1155
+ words[words.length - 1] = length;
1156
+ return words;
1157
+ }
1158
+ const array = new Uint8Array(16);
1159
+ function generate_nonce() {
1160
+ crypto.getRandomValues(array);
1161
+ return btoa(String.fromCharCode(...array));
1162
+ }
1163
+ const quoted = /* @__PURE__ */ new Set([
1164
+ "self",
1165
+ "unsafe-eval",
1166
+ "unsafe-hashes",
1167
+ "unsafe-inline",
1168
+ "none",
1169
+ "strict-dynamic",
1170
+ "report-sample",
1171
+ "wasm-unsafe-eval",
1172
+ "script"
1173
+ ]);
1174
+ const crypto_pattern = /^(nonce|sha\d\d\d)-/;
1175
+ class BaseProvider {
1176
+ /** @type {boolean} */
1177
+ #use_hashes;
1178
+ /** @type {boolean} */
1179
+ #script_needs_csp;
1180
+ /** @type {boolean} */
1181
+ #script_src_needs_csp;
1182
+ /** @type {boolean} */
1183
+ #script_src_elem_needs_csp;
1184
+ /** @type {boolean} */
1185
+ #style_needs_csp;
1186
+ /** @type {boolean} */
1187
+ #style_src_needs_csp;
1188
+ /** @type {boolean} */
1189
+ #style_src_attr_needs_csp;
1190
+ /** @type {boolean} */
1191
+ #style_src_elem_needs_csp;
1192
+ /** @type {import('types').CspDirectives} */
1193
+ #directives;
1194
+ /** @type {Set<import('types').Csp.Source>} */
1195
+ #script_src;
1196
+ /** @type {Set<import('types').Csp.Source>} */
1197
+ #script_src_elem;
1198
+ /** @type {Set<import('types').Csp.Source>} */
1199
+ #style_src;
1200
+ /** @type {Set<import('types').Csp.Source>} */
1201
+ #style_src_attr;
1202
+ /** @type {Set<import('types').Csp.Source>} */
1203
+ #style_src_elem;
1204
+ /** @type {boolean} */
1205
+ script_needs_nonce;
1206
+ /** @type {boolean} */
1207
+ style_needs_nonce;
1208
+ /** @type {boolean} */
1209
+ script_needs_hash;
1210
+ /** @type {string} */
1211
+ #nonce;
1212
+ /**
1213
+ * @param {boolean} use_hashes
1214
+ * @param {import('types').CspDirectives} directives
1215
+ * @param {string} nonce
1216
+ */
1217
+ constructor(use_hashes, directives, nonce) {
1218
+ this.#use_hashes = use_hashes;
1219
+ this.#directives = directives;
1220
+ const d = this.#directives;
1221
+ this.#script_src = /* @__PURE__ */ new Set();
1222
+ this.#script_src_elem = /* @__PURE__ */ new Set();
1223
+ this.#style_src = /* @__PURE__ */ new Set();
1224
+ this.#style_src_attr = /* @__PURE__ */ new Set();
1225
+ this.#style_src_elem = /* @__PURE__ */ new Set();
1226
+ const effective_script_src = d["script-src"] || d["default-src"];
1227
+ const script_src_elem = d["script-src-elem"];
1228
+ const effective_style_src = d["style-src"] || d["default-src"];
1229
+ const style_src_attr = d["style-src-attr"];
1230
+ const style_src_elem = d["style-src-elem"];
1231
+ const style_needs_csp = (directive) => !!directive && !directive.some((value) => value === "unsafe-inline");
1232
+ const script_needs_csp = (directive) => !!directive && (!directive.some((value) => value === "unsafe-inline") || directive.some((value) => value === "strict-dynamic"));
1233
+ this.#script_src_needs_csp = script_needs_csp(effective_script_src);
1234
+ this.#script_src_elem_needs_csp = script_needs_csp(script_src_elem);
1235
+ this.#style_src_needs_csp = style_needs_csp(effective_style_src);
1236
+ this.#style_src_attr_needs_csp = style_needs_csp(style_src_attr);
1237
+ this.#style_src_elem_needs_csp = style_needs_csp(style_src_elem);
1238
+ this.#script_needs_csp = this.#script_src_needs_csp || this.#script_src_elem_needs_csp;
1239
+ this.#style_needs_csp = this.#style_src_needs_csp || this.#style_src_attr_needs_csp || this.#style_src_elem_needs_csp;
1240
+ this.script_needs_nonce = this.#script_needs_csp && !this.#use_hashes;
1241
+ this.style_needs_nonce = this.#style_needs_csp && !this.#use_hashes;
1242
+ this.script_needs_hash = this.#script_needs_csp && this.#use_hashes;
1243
+ this.#nonce = nonce;
1244
+ }
1245
+ /** @param {string} content */
1246
+ add_script(content) {
1247
+ if (!this.#script_needs_csp) return;
1248
+ const source = this.#use_hashes ? `sha256-${sha256(content)}` : `nonce-${this.#nonce}`;
1249
+ if (this.#script_src_needs_csp) {
1250
+ this.#script_src.add(source);
1251
+ }
1252
+ if (this.#script_src_elem_needs_csp) {
1253
+ this.#script_src_elem.add(source);
1254
+ }
1255
+ }
1256
+ /** @param {`sha256-${string}`[]} hashes */
1257
+ add_script_hashes(hashes) {
1258
+ for (const hash2 of hashes) {
1259
+ if (this.#script_src_needs_csp) {
1260
+ this.#script_src.add(hash2);
1261
+ }
1262
+ if (this.#script_src_elem_needs_csp) {
1263
+ this.#script_src_elem.add(hash2);
1264
+ }
1265
+ }
1266
+ }
1267
+ /** @param {string} content */
1268
+ add_style(content) {
1269
+ if (!this.#style_needs_csp) return;
1270
+ const source = this.#use_hashes ? `sha256-${sha256(content)}` : `nonce-${this.#nonce}`;
1271
+ if (this.#style_src_needs_csp) {
1272
+ this.#style_src.add(source);
1273
+ }
1274
+ if (this.#style_src_attr_needs_csp) {
1275
+ this.#style_src_attr.add(source);
1276
+ }
1277
+ if (this.#style_src_elem_needs_csp) {
1278
+ const sha256_empty_comment_hash = "sha256-9OlNO0DNEeaVzHL4RZwCLsBHA8WBQ8toBp/4F5XV2nc=";
1279
+ const d = this.#directives;
1280
+ if (d["style-src-elem"] && !d["style-src-elem"].includes(sha256_empty_comment_hash) && !this.#style_src_elem.has(sha256_empty_comment_hash)) {
1281
+ this.#style_src_elem.add(sha256_empty_comment_hash);
1282
+ }
1283
+ if (source !== sha256_empty_comment_hash) {
1284
+ this.#style_src_elem.add(source);
1285
+ }
1286
+ }
1287
+ }
1288
+ /**
1289
+ * @param {boolean} [is_meta]
1290
+ */
1291
+ get_header(is_meta = false) {
1292
+ const header = [];
1293
+ const directives = { ...this.#directives };
1294
+ if (this.#style_src.size > 0) {
1295
+ directives["style-src"] = [
1296
+ ...directives["style-src"] || directives["default-src"] || [],
1297
+ ...this.#style_src
1298
+ ];
1299
+ }
1300
+ if (this.#style_src_attr.size > 0) {
1301
+ directives["style-src-attr"] = [
1302
+ ...directives["style-src-attr"] || [],
1303
+ ...this.#style_src_attr
1304
+ ];
1305
+ }
1306
+ if (this.#style_src_elem.size > 0) {
1307
+ directives["style-src-elem"] = [
1308
+ ...directives["style-src-elem"] || [],
1309
+ ...this.#style_src_elem
1310
+ ];
1311
+ }
1312
+ if (this.#script_src.size > 0) {
1313
+ directives["script-src"] = [
1314
+ ...directives["script-src"] || directives["default-src"] || [],
1315
+ ...this.#script_src
1316
+ ];
1317
+ }
1318
+ if (this.#script_src_elem.size > 0) {
1319
+ directives["script-src-elem"] = [
1320
+ ...directives["script-src-elem"] || [],
1321
+ ...this.#script_src_elem
1322
+ ];
1323
+ }
1324
+ for (const key2 in directives) {
1325
+ if (is_meta && (key2 === "frame-ancestors" || key2 === "report-uri" || key2 === "sandbox")) {
1326
+ continue;
1327
+ }
1328
+ const value = (
1329
+ /** @type {string[] | true} */
1330
+ directives[key2]
1331
+ );
1332
+ if (!value) continue;
1333
+ const directive = [key2];
1334
+ if (Array.isArray(value)) {
1335
+ value.forEach((value2) => {
1336
+ if (quoted.has(value2) || crypto_pattern.test(value2)) {
1337
+ directive.push(`'${value2}'`);
1338
+ } else {
1339
+ directive.push(value2);
1340
+ }
1341
+ });
1342
+ }
1343
+ header.push(directive.join(" "));
1344
+ }
1345
+ return header.join("; ");
1346
+ }
1347
+ }
1348
+ class CspProvider extends BaseProvider {
1349
+ get_meta() {
1350
+ const content = this.get_header(true);
1351
+ if (!content) {
1352
+ return;
1353
+ }
1354
+ return `<meta http-equiv="content-security-policy" content="${escape_html(content, true)}">`;
1355
+ }
1356
+ }
1357
+ class CspReportOnlyProvider extends BaseProvider {
1358
+ /**
1359
+ * @param {boolean} use_hashes
1360
+ * @param {import('types').CspDirectives} directives
1361
+ * @param {string} nonce
1362
+ */
1363
+ constructor(use_hashes, directives, nonce) {
1364
+ super(use_hashes, directives, nonce);
1365
+ if (Object.values(directives).filter((v) => !!v).length > 0) {
1366
+ const has_report_to = directives["report-to"]?.length ?? 0 > 0;
1367
+ const has_report_uri = directives["report-uri"]?.length ?? 0 > 0;
1368
+ if (!has_report_to && !has_report_uri) {
1369
+ throw Error(
1370
+ "`content-security-policy-report-only` must be specified with either the `report-to` or `report-uri` directives, or both"
1371
+ );
1372
+ }
1373
+ }
1374
+ }
1375
+ }
1376
+ class Csp {
1377
+ /** @readonly */
1378
+ nonce = generate_nonce();
1379
+ /** @type {CspProvider} */
1380
+ csp_provider;
1381
+ /** @type {CspReportOnlyProvider} */
1382
+ report_only_provider;
1383
+ /**
1384
+ * @param {import('./types.js').CspConfig} config
1385
+ * @param {import('./types.js').CspOpts} opts
1386
+ */
1387
+ constructor({ mode, directives, reportOnly }, { prerender }) {
1388
+ const use_hashes = mode === "hash" || mode === "auto" && prerender;
1389
+ this.csp_provider = new CspProvider(use_hashes, directives, this.nonce);
1390
+ this.report_only_provider = new CspReportOnlyProvider(use_hashes, reportOnly, this.nonce);
1391
+ }
1392
+ get script_needs_hash() {
1393
+ return this.csp_provider.script_needs_hash || this.report_only_provider.script_needs_hash;
1394
+ }
1395
+ get script_needs_nonce() {
1396
+ return this.csp_provider.script_needs_nonce || this.report_only_provider.script_needs_nonce;
1397
+ }
1398
+ get style_needs_nonce() {
1399
+ return this.csp_provider.style_needs_nonce || this.report_only_provider.style_needs_nonce;
1400
+ }
1401
+ /** @param {string} content */
1402
+ add_script(content) {
1403
+ this.csp_provider.add_script(content);
1404
+ this.report_only_provider.add_script(content);
1405
+ }
1406
+ /** @param {`sha256-${string}`[]} hashes */
1407
+ add_script_hashes(hashes) {
1408
+ this.csp_provider.add_script_hashes(hashes);
1409
+ this.report_only_provider.add_script_hashes(hashes);
1410
+ }
1411
+ /** @param {string} content */
1412
+ add_style(content) {
1413
+ this.csp_provider.add_style(content);
1414
+ this.report_only_provider.add_style(content);
1415
+ }
1416
+ }
1417
+ function generate_route_object(route, url, client) {
1418
+ const { errors, layouts, leaf } = route;
1419
+ const nodes = [...errors, ...layouts.map((l) => l?.[1]), leaf[1]].filter((n) => typeof n === "number").map((n) => `'${n}': () => ${create_client_import(client.nodes?.[n], url)}`).join(",\n ");
1420
+ return [
1421
+ `{
1422
+ id: ${s(route.id)}`,
1423
+ `errors: ${s(route.errors)}`,
1424
+ `layouts: ${s(route.layouts)}`,
1425
+ `leaf: ${s(route.leaf)}`,
1426
+ `nodes: {
1427
+ ${nodes}
1428
+ }
1429
+ }`
1430
+ ].join(",\n ");
1431
+ }
1432
+ function create_client_import(import_path, url) {
1433
+ if (!import_path) return "Promise.resolve({})";
1434
+ if (import_path[0] === "/") {
1435
+ return `import('${import_path}')`;
1436
+ }
1437
+ if (assets !== "") {
1438
+ return `import('${assets}/${import_path}')`;
1439
+ }
1440
+ let path = get_relative_path(url.pathname, `${base}/${import_path}`);
1441
+ if (path[0] !== ".") path = `./${path}`;
1442
+ return `import('${path}')`;
1443
+ }
1444
+ async function resolve_route(resolved_path, url, manifest) {
1445
+ if (!manifest._.client?.routes) {
1446
+ return text("Server-side route resolution disabled", { status: 400 });
1447
+ }
1448
+ const matchers = await manifest._.matchers();
1449
+ const result = find_route(resolved_path, manifest._.client.routes, matchers);
1450
+ return create_server_routing_response(
1451
+ result?.route ?? null,
1452
+ result?.params ?? {},
1453
+ url,
1454
+ manifest._.client
1455
+ ).response;
1456
+ }
1457
+ function create_server_routing_response(route, params, url, client) {
1458
+ const headers2 = new Headers({
1459
+ "content-type": "application/javascript; charset=utf-8"
1460
+ });
1461
+ if (route) {
1462
+ const csr_route = generate_route_object(route, url, client);
1463
+ const body = `${create_css_import(route, url, client)}
1464
+ export const route = ${csr_route}; export const params = ${JSON.stringify(params)};`;
1465
+ return { response: text(body, { headers: headers2 }), body };
1466
+ } else {
1467
+ return { response: text("", { headers: headers2 }), body: "" };
1468
+ }
1469
+ }
1470
+ function create_css_import(route, url, client) {
1471
+ const { errors, layouts, leaf } = route;
1472
+ let css = "";
1473
+ for (const node of [...errors, ...layouts.map((l) => l?.[1]), leaf[1]]) {
1474
+ if (typeof node !== "number") continue;
1475
+ const node_css = client.css?.[node];
1476
+ for (const css_path of node_css ?? []) {
1477
+ css += `'${assets || base}/${css_path}',`;
1478
+ }
1479
+ }
1480
+ if (!css) return "";
1481
+ return `${create_client_import(client.start, url)}.then(x => x.load_css([${css}]));`;
1482
+ }
1483
+ async function handle_remote_call(event, state, options2, manifest, id) {
1484
+ return record_span({
1485
+ name: "sveltekit.remote.call",
1486
+ attributes: {},
1487
+ fn: (current2) => {
1488
+ const traced_event = merge_tracing(event, current2);
1489
+ return with_request_store(
1490
+ { event: traced_event, state },
1491
+ () => handle_remote_call_internal(traced_event, state, options2, manifest, id)
1492
+ );
1493
+ }
1494
+ });
1495
+ }
1496
+ async function handle_remote_call_internal(event, state, options2, manifest, id) {
1497
+ const [hash2, name, additional_args] = id.split("/");
1498
+ const remotes = manifest._.remotes;
1499
+ if (!remotes[hash2]) error(404);
1500
+ const module = await remotes[hash2]();
1501
+ const fn = module.default[name];
1502
+ if (!fn) error(404);
1503
+ const internals = fn.__;
1504
+ const transport = options2.hooks.transport;
1505
+ event.tracing.current.setAttributes({
1506
+ "sveltekit.remote.call.type": internals.type,
1507
+ "sveltekit.remote.call.name": internals.name
1508
+ });
1509
+ const headers2 = state.prerendering ? void 0 : { "cache-control": "private, no-store" };
1510
+ try {
1511
+ const data = {};
1512
+ switch (internals.type) {
1513
+ case "query_live": {
1514
+ let send = function(controller, payload3) {
1515
+ controller.enqueue(encoder.encode("data: " + JSON.stringify(payload3) + "\n\n"));
1516
+ };
1517
+ if (event.request.method !== "GET") {
1518
+ throw new SvelteKitError(
1519
+ 405,
1520
+ "Method Not Allowed",
1521
+ `\`query.live\` functions must be invoked via GET request, not ${event.request.method}`
1522
+ );
1523
+ }
1524
+ const payload2 = (
1525
+ /** @type {string} */
1526
+ new URL(event.request.url).searchParams.get("payload")
1527
+ );
1528
+ const generator = internals.run(event, state, parse_remote_arg(payload2, transport));
1529
+ const encoder = new TextEncoder();
1530
+ let closed = false;
1531
+ let result = void 0;
1532
+ async function cancel() {
1533
+ if (closed) return;
1534
+ closed = true;
1535
+ await generator.return(void 0);
1536
+ }
1537
+ event.request.signal.addEventListener("abort", cancel, { once: true });
1538
+ return new Response(
1539
+ new ReadableStream({
1540
+ async pull(controller) {
1541
+ if (event.request.signal.aborted) {
1542
+ await cancel();
1543
+ controller.close();
1544
+ return;
1545
+ }
1546
+ try {
1547
+ while (true) {
1548
+ const { value, done } = await generator.next();
1549
+ if (done) {
1550
+ await cancel();
1551
+ controller.close();
1552
+ return;
1553
+ }
1554
+ if (result !== (result = stringify(value, transport))) {
1555
+ send(controller, {
1556
+ type: "result",
1557
+ result
1558
+ });
1559
+ return;
1560
+ }
1561
+ }
1562
+ } catch (error2) {
1563
+ if (!event.request.signal.aborted) {
1564
+ if (error2 instanceof Redirect) {
1565
+ send(controller, {
1566
+ type: "redirect",
1567
+ location: error2.location
1568
+ });
1569
+ } else {
1570
+ const status = error2 instanceof HttpError || error2 instanceof SvelteKitError ? error2.status : 500;
1571
+ send(controller, {
1572
+ type: "error",
1573
+ error: await handle_error_and_jsonify(event, state, options2, error2),
1574
+ status
1575
+ });
1576
+ }
1577
+ }
1578
+ await cancel();
1579
+ controller.close();
1580
+ }
1581
+ },
1582
+ cancel
1583
+ }),
1584
+ {
1585
+ headers: {
1586
+ "cache-control": "private, no-store",
1587
+ "content-type": "text/event-stream"
1588
+ }
1589
+ }
1590
+ );
1591
+ }
1592
+ case "query_batch": {
1593
+ if (event.request.method !== "POST") {
1594
+ throw new SvelteKitError(
1595
+ 405,
1596
+ "Method Not Allowed",
1597
+ `\`query.batch\` functions must be invoked via POST request, not ${event.request.method}`
1598
+ );
1599
+ }
1600
+ const { payloads } = await event.request.json();
1601
+ const args = await Promise.all(
1602
+ payloads.map((payload2) => parse_remote_arg(payload2, transport))
1603
+ );
1604
+ data._ = await with_request_store({ event, state }, () => internals.run(args, options2));
1605
+ break;
1606
+ }
1607
+ case "form": {
1608
+ if (event.request.method !== "POST") {
1609
+ throw new SvelteKitError(
1610
+ 405,
1611
+ "Method Not Allowed",
1612
+ `\`form\` functions must be invoked via POST request, not ${event.request.method}`
1613
+ );
1614
+ }
1615
+ if (!is_form_content_type(event.request)) {
1616
+ throw new SvelteKitError(
1617
+ 415,
1618
+ "Unsupported Media Type",
1619
+ `\`form\` functions expect form-encoded data — received ${event.request.headers.get(
1620
+ "content-type"
1621
+ )}`
1622
+ );
1623
+ }
1624
+ const { data: input, meta, form_data } = await deserialize_binary_form(event.request);
1625
+ state.remote.requested = create_requested_map(meta.remote_refreshes);
1626
+ if (additional_args && !("id" in input)) {
1627
+ input.id = JSON.parse(decodeURIComponent(additional_args));
1628
+ }
1629
+ const fn2 = internals.fn;
1630
+ data._ = await with_request_store(
1631
+ { event, state: { ...state, is_in_remote_form_or_command: true } },
1632
+ () => fn2(input, meta, form_data)
1633
+ );
1634
+ if (data._.issues) {
1635
+ return json(
1636
+ /** @type {RemoteFunctionResponse} */
1637
+ {
1638
+ type: "result",
1639
+ data: stringify(data, transport)
1640
+ },
1641
+ { headers: headers2 }
1642
+ );
1643
+ }
1644
+ break;
1645
+ }
1646
+ case "command": {
1647
+ const { payload: payload2, refreshes } = await event.request.json();
1648
+ state.remote.requested = create_requested_map(refreshes);
1649
+ const arg = parse_remote_arg(payload2, transport);
1650
+ data._ = await with_request_store(
1651
+ { event, state: { ...state, is_in_remote_form_or_command: true } },
1652
+ () => fn(arg)
1653
+ );
1654
+ break;
1655
+ }
1656
+ case "prerender": {
1657
+ data._ = await with_request_store(
1658
+ { event, state },
1659
+ () => fn(parse_remote_arg(additional_args, transport))
1660
+ );
1661
+ break;
1662
+ }
1663
+ case "query": {
1664
+ const payload2 = (
1665
+ /** @type {string} */
1666
+ // new URL(...) necessary because we're hiding the URL from the user in the event object
1667
+ new URL(event.request.url).searchParams.get("payload")
1668
+ );
1669
+ data._ = await with_request_store(
1670
+ { event, state },
1671
+ () => fn(parse_remote_arg(payload2, transport))
1672
+ );
1673
+ break;
1674
+ }
1675
+ }
1676
+ await collect_remote_data(data, event, state, options2);
1677
+ return json(
1678
+ /** @type {RemoteFunctionResponse} */
1679
+ {
1680
+ type: "result",
1681
+ data: stringify(data, transport)
1682
+ },
1683
+ { headers: headers2 }
1684
+ );
1685
+ } catch (error2) {
1686
+ if (error2 instanceof Redirect) {
1687
+ const data = await collect_remote_data({ redirect: error2.location }, event, state, options2);
1688
+ return json(
1689
+ /** @type {RemoteFunctionResponse} */
1690
+ {
1691
+ type: "result",
1692
+ data: stringify(data, transport)
1693
+ },
1694
+ { headers: headers2 }
1695
+ );
1696
+ }
1697
+ const status = error2 instanceof HttpError || error2 instanceof SvelteKitError ? error2.status : 500;
1698
+ return json(
1699
+ /** @type {RemoteFunctionResponse} */
1700
+ {
1701
+ type: "error",
1702
+ error: await handle_error_and_jsonify(event, state, options2, error2),
1703
+ status
1704
+ },
1705
+ {
1706
+ // By setting a non-200 during prerendering we fail the prerender process (unless handleHttpError handles it).
1707
+ // Errors at runtime will be passed to the client and are handled there
1708
+ status: state.prerendering ? status : void 0,
1709
+ headers: {
1710
+ "cache-control": "private, no-store"
1711
+ }
1712
+ }
1713
+ );
1714
+ }
1715
+ }
1716
+ async function collect_remote_data(data, event, state, options2) {
1717
+ async function convert_error(error2) {
1718
+ const status = error2 instanceof HttpError || error2 instanceof SvelteKitError ? error2.status : 500;
1719
+ return [status, await handle_error_and_jsonify(event, state, options2, error2)];
1720
+ }
1721
+ const promises = [];
1722
+ if (state.remote.explicit) {
1723
+ for (const [remote_key, { internals, promise }] of state.remote.explicit) {
1724
+ data.r = true;
1725
+ const type = (
1726
+ /** @type {'p' | 'q' | 'l'} */
1727
+ internals.type === "query_live" ? "l" : internals.type[0]
1728
+ );
1729
+ await promise.then(
1730
+ (v) => {
1731
+ ((data[type] ??= {})[remote_key] ??= {}).v = v;
1732
+ },
1733
+ async (e) => {
1734
+ if (e instanceof Redirect) {
1735
+ return;
1736
+ }
1737
+ ((data[type] ??= {})[remote_key] ??= {}).e = await convert_error(e);
1738
+ }
1739
+ );
1740
+ }
1741
+ }
1742
+ await Promise.all(promises);
1743
+ if (state.remote.implicit) {
1744
+ for (const [internals, record] of state.remote.implicit) {
1745
+ if (!internals.id) continue;
1746
+ for (const key2 in record) {
1747
+ const remote_key = internals.type === "form" ? key2 : create_remote_key(internals.id, key2);
1748
+ const type = (
1749
+ /** @type {'p' | 'q' | 'l' | 'f'} */
1750
+ internals.type === "query_live" ? "l" : internals.type[0]
1751
+ );
1752
+ const promise = state.remote.data?.get(internals)?.[key2] ?? record[key2]();
1753
+ let resolved = true;
1754
+ await Promise.race([
1755
+ Promise.resolve(promise).then(
1756
+ (v) => {
1757
+ if (resolved) {
1758
+ ((data[type] ??= {})[remote_key] ??= {}).v = v;
1759
+ }
1760
+ },
1761
+ (e) => {
1762
+ if (e instanceof Redirect) {
1763
+ return;
1764
+ }
1765
+ if (resolved) {
1766
+ promises.push(
1767
+ convert_error(e).then((e2) => {
1768
+ ((data[type] ??= {})[remote_key] ??= {}).e = e2;
1769
+ })
1770
+ );
1771
+ }
1772
+ }
1773
+ ),
1774
+ Promise.resolve().then(() => resolved = false)
1775
+ ]);
1776
+ }
1777
+ }
1778
+ }
1779
+ await Promise.all(promises);
1780
+ return data;
1781
+ }
1782
+ function create_requested_map(refreshes) {
1783
+ const requested = /* @__PURE__ */ new Map();
1784
+ for (const key2 of refreshes ?? []) {
1785
+ const parts = split_remote_key(key2);
1786
+ const existing = requested.get(parts.id);
1787
+ if (existing) {
1788
+ existing.push(parts.payload);
1789
+ } else {
1790
+ requested.set(parts.id, [parts.payload]);
1791
+ }
1792
+ }
1793
+ return requested;
1794
+ }
1795
+ async function handle_remote_form_post(event, state, manifest, id) {
1796
+ return record_span({
1797
+ name: "sveltekit.remote.form.post",
1798
+ attributes: {},
1799
+ fn: (current2) => {
1800
+ const traced_event = merge_tracing(event, current2);
1801
+ return with_request_store(
1802
+ { event: traced_event, state },
1803
+ () => handle_remote_form_post_internal(traced_event, state, manifest, id)
1804
+ );
1805
+ }
1806
+ });
1807
+ }
1808
+ async function handle_remote_form_post_internal(event, state, manifest, id) {
1809
+ const [hash2, name, ...rest] = id.split("/");
1810
+ const action_id = rest.join("/");
1811
+ const remotes = manifest._.remotes;
1812
+ const module = await remotes[hash2]?.();
1813
+ let form = (
1814
+ /** @type {RemoteForm<any, any>} */
1815
+ module?.default[name]
1816
+ );
1817
+ if (!form) {
1818
+ event.setHeaders({
1819
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405
1820
+ // "The server must generate an Allow header field in a 405 status code response"
1821
+ allow: "GET"
1822
+ });
1823
+ return {
1824
+ type: "error",
1825
+ error: new SvelteKitError(
1826
+ 405,
1827
+ "Method Not Allowed",
1828
+ `POST method not allowed. No form actions exist for ${"this page"}`
1829
+ )
1830
+ };
1831
+ }
1832
+ if (action_id) {
1833
+ form = with_request_store({ event, state }, () => form.for(JSON.parse(action_id)));
1834
+ }
1835
+ try {
1836
+ const fn = (
1837
+ /** @type {RemoteFormInternals} */
1838
+ /** @type {any} */
1839
+ form.__.fn
1840
+ );
1841
+ const { data, meta, form_data } = await deserialize_binary_form(event.request);
1842
+ if (action_id && !("id" in data)) {
1843
+ data.id = JSON.parse(decodeURIComponent(action_id));
1844
+ }
1845
+ await with_request_store(
1846
+ { event, state: { ...state, is_in_remote_form_or_command: true } },
1847
+ () => fn(data, meta, form_data)
1848
+ );
1849
+ return {
1850
+ type: "success",
1851
+ status: 200
1852
+ };
1853
+ } catch (e) {
1854
+ const err = normalize_error(e);
1855
+ if (err instanceof Redirect) {
1856
+ return {
1857
+ type: "redirect",
1858
+ status: err.status,
1859
+ location: err.location
1860
+ };
1861
+ }
1862
+ return {
1863
+ type: "error",
1864
+ error: check_incorrect_fail_use(err)
1865
+ };
1866
+ }
1867
+ }
1868
+ function get_remote_id(url) {
1869
+ return url.pathname.startsWith(`${base}/${app_dir}/remote/`) && url.pathname.replace(`${base}/${app_dir}/remote/`, "");
1870
+ }
1871
+ function get_remote_action(url) {
1872
+ return url.searchParams.get("/remote");
1873
+ }
1874
+ const updated = {
1875
+ ...readable(false),
1876
+ check: () => false
1877
+ };
1878
+ async function render_response({
1879
+ branch,
1880
+ fetched,
1881
+ options: options2,
1882
+ manifest,
1883
+ state,
1884
+ page_config,
1885
+ status,
1886
+ error: error2 = null,
1887
+ event,
1888
+ event_state,
1889
+ resolve_opts,
1890
+ action_result,
1891
+ data_serializer,
1892
+ error_components
1893
+ }) {
1894
+ if (state.prerendering) {
1895
+ if (options2.csp.mode === "nonce") {
1896
+ throw new Error('Cannot use prerendering if config.kit.csp.mode === "nonce"');
1897
+ }
1898
+ if (options2.app_template_contains_nonce) {
1899
+ throw new Error("Cannot use prerendering if page template contains %sveltekit.nonce%");
1900
+ }
1901
+ }
1902
+ const { client } = manifest._;
1903
+ const modulepreloads = new Set(client?.imports);
1904
+ const stylesheets = new Set(client?.stylesheets);
1905
+ const fonts = new Set(client?.fonts);
1906
+ const link_headers = /* @__PURE__ */ new Set();
1907
+ const inline_styles = /* @__PURE__ */ new Map();
1908
+ let rendered;
1909
+ const form_value = action_result?.type === "success" || action_result?.type === "failure" ? action_result.data ?? null : null;
1910
+ let base$1 = base;
1911
+ let assets$1 = assets;
1912
+ let base_expression = s(base);
1913
+ const csp = new Csp(options2.csp, {
1914
+ prerender: !!state.prerendering
1915
+ });
1916
+ {
1917
+ if (!state.prerendering?.fallback) {
1918
+ const pathname = event.isDataRequest ? add_data_suffix(event.url.pathname) : event.url.pathname;
1919
+ const segments = pathname.slice(base.length).split("/").slice(2);
1920
+ base$1 = segments.map(() => "..").join("/") || ".";
1921
+ base_expression = `new URL(${s(base$1)}, location).pathname.slice(0, -1)`;
1922
+ if (!assets || assets[0] === "/" && assets !== SVELTE_KIT_ASSETS) {
1923
+ assets$1 = base$1;
1924
+ }
1925
+ } else if (options2.hash_routing) {
1926
+ base_expression = "new URL('.', location).pathname.slice(0, -1)";
1927
+ }
1928
+ }
1929
+ if (page_config.ssr) {
1930
+ const props = {
1931
+ stores: {
1932
+ page: writable(null),
1933
+ navigating: writable(null),
1934
+ updated
1935
+ },
1936
+ constructors: await Promise.all(
1937
+ branch.map(({ node }) => {
1938
+ if (!node.component) {
1939
+ throw new Error(`Missing +page.svelte component for route ${event.route.id}`);
1940
+ }
1941
+ return node.component();
1942
+ })
1943
+ ),
1944
+ form: form_value
1945
+ };
1946
+ if (error_components) {
1947
+ if (error2) {
1948
+ props.error = error2;
1949
+ }
1950
+ props.errors = error_components;
1951
+ }
1952
+ let data2 = {};
1953
+ for (let i = 0; i < branch.length; i += 1) {
1954
+ data2 = { ...data2, ...branch[i].data };
1955
+ props[`data_${i}`] = data2;
1956
+ }
1957
+ props.page = {
1958
+ error: error2,
1959
+ params: (
1960
+ /** @type {Record<string, any>} */
1961
+ event.params
1962
+ ),
1963
+ route: event.route,
1964
+ status,
1965
+ url: event.url,
1966
+ data: data2,
1967
+ form: form_value,
1968
+ state: {}
1969
+ };
1970
+ const render_opts = {
1971
+ context: /* @__PURE__ */ new Map([
1972
+ [
1973
+ "__request__",
1974
+ {
1975
+ page: props.page
1976
+ }
1977
+ ]
1978
+ ]),
1979
+ csp: csp.script_needs_nonce ? { nonce: csp.nonce } : { hash: csp.script_needs_hash },
1980
+ transformError: error_components ? (
1981
+ /** @param {unknown} e */
1982
+ (async (e) => {
1983
+ if (isRedirect(e)) {
1984
+ throw e;
1985
+ }
1986
+ const transformed2 = await handle_error_and_jsonify(event, event_state, options2, e);
1987
+ props.page.error = props.error = error2 = transformed2;
1988
+ props.page.status = status = get_status(e);
1989
+ return transformed2;
1990
+ })
1991
+ ) : void 0
1992
+ };
1993
+ try {
1994
+ if (DEV) ;
1995
+ const state2 = { ...event_state, is_in_render: true };
1996
+ rendered = await with_request_store({ event, state: state2 }, async () => {
1997
+ if (relative) override({ base: base$1, assets: assets$1 });
1998
+ const maybe_promise = options2.root.render(props, render_opts);
1999
+ const rendered2 = options2.async && "then" in maybe_promise ? (
2000
+ /** @type {ReturnType<typeof options.root.render> & Promise<any>} */
2001
+ maybe_promise.then((r) => r)
2002
+ ) : maybe_promise;
2003
+ if (options2.async) {
2004
+ reset();
2005
+ }
2006
+ const { head: head2, html: html2, css, hashes } = (
2007
+ /** @type {ReturnType<typeof options.root.render>} */
2008
+ options2.async ? await rendered2 : rendered2
2009
+ );
2010
+ if (hashes) {
2011
+ csp.add_script_hashes(hashes.script);
2012
+ }
2013
+ return { head: head2, html: html2, css, hashes };
2014
+ });
2015
+ } finally {
2016
+ reset();
2017
+ }
2018
+ } else {
2019
+ rendered = { head: "", html: "", css: { code: "", map: null }, hashes: { script: [] } };
2020
+ }
2021
+ for (const { node } of branch) {
2022
+ for (const url of node.imports) modulepreloads.add(url);
2023
+ for (const url of node.stylesheets) stylesheets.add(url);
2024
+ for (const url of node.fonts) fonts.add(url);
2025
+ if (node.inline_styles && !client?.inline) {
2026
+ Object.entries(await node.inline_styles()).forEach(([filename, css]) => {
2027
+ if (typeof css === "string") {
2028
+ inline_styles.set(filename, css);
2029
+ return;
2030
+ }
2031
+ inline_styles.set(filename, css(`${assets$1}/${app_dir}/immutable/assets`, assets$1));
2032
+ });
2033
+ }
2034
+ }
2035
+ const head = new Head(rendered.head, !!state.prerendering);
2036
+ let body = rendered.html;
2037
+ const prefixed = (path) => {
2038
+ if (path.startsWith("/")) {
2039
+ return base + path;
2040
+ }
2041
+ return `${assets$1}/${path}`;
2042
+ };
2043
+ const style = client?.inline ? client.inline?.style : Array.from(inline_styles.values()).join("\n");
2044
+ if (style) {
2045
+ const attributes = [];
2046
+ if (csp.style_needs_nonce) attributes.push(`nonce="${csp.nonce}"`);
2047
+ csp.add_style(style);
2048
+ head.add_style(style, attributes);
2049
+ }
2050
+ for (const dep of stylesheets) {
2051
+ const path = prefixed(dep);
2052
+ const attributes = ['rel="stylesheet"'];
2053
+ if (inline_styles.has(dep)) {
2054
+ attributes.push("disabled", 'media="(max-width: 0)"');
2055
+ } else {
2056
+ if (resolve_opts.preload({ type: "css", path })) {
2057
+ link_headers.add(`<${encodeURI(path)}>; rel="preload"; as="style"; nopush`);
2058
+ }
2059
+ }
2060
+ head.add_stylesheet(path, attributes);
2061
+ }
2062
+ for (const dep of fonts) {
2063
+ const path = prefixed(dep);
2064
+ if (resolve_opts.preload({ type: "font", path })) {
2065
+ const ext = dep.slice(dep.lastIndexOf(".") + 1);
2066
+ head.add_link_tag(path, ['rel="preload"', 'as="font"', `type="font/${ext}"`, "crossorigin"]);
2067
+ link_headers.add(
2068
+ `<${encodeURI(path)}>; rel="preload"; as="font"; type="font/${ext}"; crossorigin; nopush`
2069
+ );
2070
+ }
2071
+ }
2072
+ const global = get_global_name(options2);
2073
+ const { data, chunks } = data_serializer.get_data(csp);
2074
+ if (page_config.ssr && page_config.csr) {
2075
+ body += `
2076
+ ${fetched.map(
2077
+ (item) => serialize_data(item, resolve_opts.filterSerializedResponseHeaders, !!state.prerendering)
2078
+ ).join("\n ")}`;
2079
+ }
2080
+ if (page_config.csr && client) {
2081
+ const route = client.routes?.find((r) => r.id === event.route.id) ?? null;
2082
+ const load_env_eagerly = client.uses_env_dynamic_public && !!state.prerendering;
2083
+ if (load_env_eagerly) {
2084
+ modulepreloads.add(`${app_dir}/env.js`);
2085
+ }
2086
+ if (!client.inline) {
2087
+ const included_modulepreloads = Array.from(modulepreloads, (dep) => prefixed(dep)).filter(
2088
+ (path) => resolve_opts.preload({ type: "js", path })
2089
+ );
2090
+ for (const path of included_modulepreloads) {
2091
+ link_headers.add(`<${encodeURI(path)}>; rel="modulepreload"; nopush`);
2092
+ if (options2.preload_strategy !== "modulepreload") {
2093
+ head.add_script_preload(path);
2094
+ } else {
2095
+ head.add_link_tag(path, ['rel="modulepreload"']);
2096
+ }
2097
+ }
2098
+ }
2099
+ if (client.routes && state.prerendering && !state.prerendering.fallback) {
2100
+ const pathname = add_resolution_suffix(event.url.pathname);
2101
+ state.prerendering.dependencies.set(
2102
+ pathname,
2103
+ create_server_routing_response(route, event.params, new URL(pathname, event.url), client)
2104
+ );
2105
+ }
2106
+ const blocks = [];
2107
+ const properties = [`base: ${base_expression}`];
2108
+ if (assets) {
2109
+ properties.push(`assets: ${s(assets)}`);
2110
+ }
2111
+ if (client.uses_env_dynamic_public) {
2112
+ properties.push(`env: ${load_env_eagerly ? "null" : s(public_env)}`);
2113
+ }
2114
+ if (chunks) {
2115
+ blocks.push("const deferred = new Map();");
2116
+ properties.push(`defer: (id) => new Promise((fulfil, reject) => {
2117
+ deferred.set(id, { fulfil, reject });
2118
+ })`);
2119
+ let app_declaration = "";
2120
+ if (Object.keys(options2.hooks.transport).length > 0) {
2121
+ if (client.inline) {
2122
+ app_declaration = `const app = ${global}.app.app;`;
2123
+ } else if (client.app) {
2124
+ app_declaration = `const app = await import(${s(prefixed(client.app))});`;
2125
+ } else {
2126
+ app_declaration = `const { app } = await import(${s(prefixed(client.start))});`;
2127
+ }
2128
+ }
2129
+ const prelude = app_declaration ? `${app_declaration}
2130
+ const [data, error] = fn(app);` : `const [data, error] = fn();`;
2131
+ properties.push(`resolve: async (id, fn) => {
2132
+ ${prelude}
2133
+
2134
+ const try_to_resolve = () => {
2135
+ if (!deferred.has(id)) {
2136
+ setTimeout(try_to_resolve, 0);
2137
+ return;
2138
+ }
2139
+ const { fulfil, reject } = deferred.get(id);
2140
+ deferred.delete(id);
2141
+ if (error) reject(error);
2142
+ else fulfil(data);
2143
+ }
2144
+ try_to_resolve();
2145
+ }`);
2146
+ }
2147
+ blocks.push(`${global} = {
2148
+ ${properties.join(",\n ")}
2149
+ };`);
2150
+ const args = ["element"];
2151
+ blocks.push("const element = document.currentScript.parentElement;");
2152
+ if (page_config.ssr) {
2153
+ const serialized = { form: "null", error: "null" };
2154
+ if (form_value) {
2155
+ serialized.form = uneval_action_response(
2156
+ form_value,
2157
+ /** @type {string} */
2158
+ event.route.id,
2159
+ options2.hooks.transport
2160
+ );
2161
+ }
2162
+ if (error2) {
2163
+ serialized.error = uneval(error2);
2164
+ }
2165
+ const hydrate = [
2166
+ `node_ids: [${branch.map(({ node }) => node.index).join(", ")}]`,
2167
+ `data: ${data}`,
2168
+ `form: ${serialized.form}`,
2169
+ `error: ${serialized.error}`
2170
+ ];
2171
+ if (status !== 200) {
2172
+ hydrate.push(`status: ${status}`);
2173
+ }
2174
+ if (client.routes) {
2175
+ if (route) {
2176
+ const stringified = generate_route_object(route, event.url, client).replaceAll(
2177
+ "\n",
2178
+ "\n "
2179
+ );
2180
+ hydrate.push(`params: ${uneval(event.params)}`, `server_route: ${stringified}`);
2181
+ }
2182
+ } else if (options2.embedded) {
2183
+ hydrate.push(`params: ${uneval(event.params)}`, `route: ${s(event.route)}`);
2184
+ }
2185
+ const indent = " ".repeat(load_env_eagerly ? 7 : 6);
2186
+ args.push(`{
2187
+ ${indent} ${hydrate.join(`,
2188
+ ${indent} `)}
2189
+ ${indent}}`);
2190
+ }
2191
+ const remote_data = await collect_remote_data({}, event, event_state, options2);
2192
+ const serialized_data = Object.keys(remote_data).length > 0 ? `${global}.data = ${uneval(remote_data, create_replacer(options2.hooks.transport))};
2193
+
2194
+ ` : "";
2195
+ const boot = client.inline ? `${client.inline.script}
2196
+
2197
+ ${serialized_data}${global}.app.start(${args.join(", ")});` : client.app ? `Promise.all([
2198
+ import(${s(prefixed(client.start))}),
2199
+ import(${s(prefixed(client.app))})
2200
+ ]).then(([kit, app]) => {
2201
+ ${serialized_data}kit.start(app, ${args.join(", ")});
2202
+ });` : `import(${s(prefixed(client.start))}).then((app) => {
2203
+ ${serialized_data}app.start(${args.join(", ")})
2204
+ });`;
2205
+ if (load_env_eagerly) {
2206
+ blocks.push(`import(${s(`${base$1}/${app_dir}/env.js`)}).then(({ env }) => {
2207
+ ${global}.env = env;
2208
+
2209
+ ${boot.replace(/\n/g, "\n ")}
2210
+ });`);
2211
+ } else {
2212
+ blocks.push(boot);
2213
+ }
2214
+ if (options2.service_worker) {
2215
+ let opts = "";
2216
+ if (options2.service_worker_options != null) {
2217
+ const service_worker_options = { ...options2.service_worker_options };
2218
+ opts = `, ${s(service_worker_options)}`;
2219
+ }
2220
+ blocks.push(`if ('serviceWorker' in navigator) {
2221
+ const script_url = '${prefixed("service-worker.js")}';
2222
+ const policy = globalThis?.window?.trustedTypes?.createPolicy(
2223
+ 'sveltekit-trusted-url',
2224
+ { createScriptURL(url) { return url; } }
2225
+ );
2226
+ const sanitised = policy?.createScriptURL(script_url) ?? script_url;
2227
+ addEventListener('load', function () {
2228
+ navigator.serviceWorker.register(sanitised${opts});
2229
+ });
2230
+ }`);
2231
+ }
2232
+ const init_app = `
2233
+ {
2234
+ ${blocks.join("\n\n ")}
2235
+ }
2236
+ `;
2237
+ csp.add_script(init_app);
2238
+ body += `
2239
+ <script${csp.script_needs_nonce ? ` nonce="${csp.nonce}"` : ""}>${init_app}<\/script>
2240
+ `;
2241
+ }
2242
+ const headers2 = new Headers({
2243
+ "x-sveltekit-page": "true",
2244
+ "content-type": "text/html"
2245
+ });
2246
+ if (state.prerendering) {
2247
+ const csp_headers = csp.csp_provider.get_meta();
2248
+ if (csp_headers) {
2249
+ head.add_http_equiv(csp_headers);
2250
+ }
2251
+ if (state.prerendering.cache) {
2252
+ head.add_http_equiv(
2253
+ `<meta http-equiv="cache-control" content="${state.prerendering.cache}">`
2254
+ );
2255
+ }
2256
+ } else {
2257
+ const csp_header = csp.csp_provider.get_header();
2258
+ if (csp_header) {
2259
+ headers2.set("content-security-policy", csp_header);
2260
+ }
2261
+ const report_only_header = csp.report_only_provider.get_header();
2262
+ if (report_only_header) {
2263
+ headers2.set("content-security-policy-report-only", report_only_header);
2264
+ }
2265
+ if (link_headers.size) {
2266
+ headers2.set("link", Array.from(link_headers).join(", "));
2267
+ }
2268
+ }
2269
+ const html = options2.templates.app({
2270
+ head: head.build(),
2271
+ body,
2272
+ assets: assets$1,
2273
+ nonce: (
2274
+ /** @type {string} */
2275
+ csp.nonce
2276
+ ),
2277
+ env: public_env
2278
+ });
2279
+ const transformed = await resolve_opts.transformPageChunk({
2280
+ html,
2281
+ done: true
2282
+ }) || "";
2283
+ if (!chunks) {
2284
+ headers2.set("etag", `"${hash(transformed)}"`);
2285
+ }
2286
+ return !chunks ? text(transformed, {
2287
+ status,
2288
+ headers: headers2
2289
+ }) : new Response(
2290
+ new ReadableStream({
2291
+ async start(controller) {
2292
+ controller.enqueue(text_encoder.encode(transformed + "\n"));
2293
+ for await (const chunk of chunks) {
2294
+ if (chunk.length) controller.enqueue(text_encoder.encode(chunk));
2295
+ }
2296
+ controller.close();
2297
+ },
2298
+ type: "bytes"
2299
+ }),
2300
+ {
2301
+ headers: headers2
2302
+ }
2303
+ );
2304
+ }
2305
+ class Head {
2306
+ #rendered;
2307
+ #prerendering;
2308
+ /** @type {string[]} */
2309
+ #http_equiv = [];
2310
+ /** @type {string[]} */
2311
+ #link_tags = [];
2312
+ /** @type {string[]} */
2313
+ #script_preloads = [];
2314
+ /** @type {string[]} */
2315
+ #style_tags = [];
2316
+ /** @type {string[]} */
2317
+ #stylesheet_links = [];
2318
+ /**
2319
+ * @param {string} rendered
2320
+ * @param {boolean} prerendering
2321
+ */
2322
+ constructor(rendered, prerendering) {
2323
+ this.#rendered = rendered;
2324
+ this.#prerendering = prerendering;
2325
+ }
2326
+ build() {
2327
+ return [
2328
+ ...this.#http_equiv,
2329
+ ...this.#link_tags,
2330
+ ...this.#script_preloads,
2331
+ this.#rendered,
2332
+ ...this.#style_tags,
2333
+ ...this.#stylesheet_links
2334
+ ].join("\n ");
2335
+ }
2336
+ /**
2337
+ * @param {string} style
2338
+ * @param {string[]} attributes
2339
+ */
2340
+ add_style(style, attributes) {
2341
+ this.#style_tags.push(
2342
+ `<style${attributes.length ? " " + attributes.join(" ") : ""}>${style}</style>`
2343
+ );
2344
+ }
2345
+ /**
2346
+ * @param {string} href
2347
+ * @param {string[]} attributes
2348
+ */
2349
+ add_stylesheet(href, attributes) {
2350
+ this.#stylesheet_links.push(`<link href="${href}" ${attributes.join(" ")}>`);
2351
+ }
2352
+ /** @param {string} href */
2353
+ add_script_preload(href) {
2354
+ this.#script_preloads.push(
2355
+ `<link rel="preload" as="script" crossorigin="anonymous" href="${href}">`
2356
+ );
2357
+ }
2358
+ /**
2359
+ * @param {string} href
2360
+ * @param {string[]} attributes
2361
+ */
2362
+ add_link_tag(href, attributes) {
2363
+ if (!this.#prerendering) return;
2364
+ this.#link_tags.push(`<link href="${href}" ${attributes.join(" ")}>`);
2365
+ }
2366
+ /** @param {string} tag */
2367
+ add_http_equiv(tag) {
2368
+ if (!this.#prerendering) return;
2369
+ this.#http_equiv.push(tag);
2370
+ }
2371
+ }
2372
+ class PageNodes {
2373
+ /** All layout nodes and the page node, if any */
2374
+ data;
2375
+ /**
2376
+ * @param {Array<import('types').SSRNode | undefined>} nodes
2377
+ */
2378
+ constructor(nodes) {
2379
+ this.data = nodes;
2380
+ }
2381
+ layouts() {
2382
+ return this.data.slice(0, -1);
2383
+ }
2384
+ page() {
2385
+ return this.data.at(-1);
2386
+ }
2387
+ validate() {
2388
+ for (const layout of this.layouts()) {
2389
+ if (layout) {
2390
+ validate_layout_server_exports(
2391
+ layout.server,
2392
+ /** @type {string} */
2393
+ layout.server_id
2394
+ );
2395
+ validate_layout_exports(
2396
+ layout.universal,
2397
+ /** @type {string} */
2398
+ layout.universal_id
2399
+ );
2400
+ }
2401
+ }
2402
+ const page = this.page();
2403
+ if (page) {
2404
+ validate_page_server_exports(
2405
+ page.server,
2406
+ /** @type {string} */
2407
+ page.server_id
2408
+ );
2409
+ validate_page_exports(
2410
+ page.universal,
2411
+ /** @type {string} */
2412
+ page.universal_id
2413
+ );
2414
+ }
2415
+ }
2416
+ /**
2417
+ * @template {'prerender' | 'ssr' | 'csr' | 'trailingSlash'} Option
2418
+ * @param {Option} option
2419
+ * @returns {Value | undefined}
2420
+ */
2421
+ #get_option(option) {
2422
+ return this.data.reduce(
2423
+ (value, node) => {
2424
+ return node?.universal?.[option] ?? node?.server?.[option] ?? value;
2425
+ },
2426
+ /** @type {Value | undefined} */
2427
+ void 0
2428
+ );
2429
+ }
2430
+ csr() {
2431
+ return this.#get_option("csr") ?? true;
2432
+ }
2433
+ ssr() {
2434
+ return this.#get_option("ssr") ?? true;
2435
+ }
2436
+ prerender() {
2437
+ return this.#get_option("prerender") ?? false;
2438
+ }
2439
+ trailing_slash() {
2440
+ return this.#get_option("trailingSlash") ?? "never";
2441
+ }
2442
+ get_config() {
2443
+ let current2 = {};
2444
+ for (const node of this.data) {
2445
+ if (!node?.universal?.config && !node?.server?.config) continue;
2446
+ current2 = {
2447
+ ...current2,
2448
+ // TODO: should we override the server config value with the universal value similar to other page options?
2449
+ ...node?.universal?.config,
2450
+ ...node?.server?.config
2451
+ };
2452
+ }
2453
+ return Object.keys(current2).length ? current2 : void 0;
2454
+ }
2455
+ should_prerender_data() {
2456
+ return this.data.some(
2457
+ // prerender in case of trailingSlash because the client retrieves that value from the server
2458
+ (node) => node?.server?.load || node?.server?.trailingSlash !== void 0
2459
+ );
2460
+ }
2461
+ }
2462
+ async function respond_with_error({
2463
+ event,
2464
+ event_state,
2465
+ options: options2,
2466
+ manifest,
2467
+ state,
2468
+ status,
2469
+ error: error2,
2470
+ resolve_opts
2471
+ }) {
2472
+ if (event.request.headers.get("x-sveltekit-error")) {
2473
+ return static_error_page(
2474
+ options2,
2475
+ status,
2476
+ /** @type {Error} */
2477
+ error2.message
2478
+ );
2479
+ }
2480
+ const fetched = [];
2481
+ try {
2482
+ const branch = [];
2483
+ const default_layout = await manifest._.nodes[0]();
2484
+ const nodes = new PageNodes([default_layout]);
2485
+ const ssr = nodes.ssr();
2486
+ const csr = nodes.csr();
2487
+ const data_serializer = server_data_serializer(event, event_state, options2);
2488
+ if (ssr) {
2489
+ state.error = true;
2490
+ const server_data_promise = load_server_data({
2491
+ event,
2492
+ event_state,
2493
+ state,
2494
+ node: default_layout,
2495
+ // eslint-disable-next-line @typescript-eslint/require-await
2496
+ parent: async () => ({})
2497
+ });
2498
+ const server_data = await server_data_promise;
2499
+ data_serializer.add_node(0, server_data);
2500
+ const data = await load_data({
2501
+ event,
2502
+ event_state,
2503
+ fetched,
2504
+ node: default_layout,
2505
+ // eslint-disable-next-line @typescript-eslint/require-await
2506
+ parent: async () => ({}),
2507
+ resolve_opts,
2508
+ server_data_promise,
2509
+ state,
2510
+ csr
2511
+ });
2512
+ branch.push(
2513
+ {
2514
+ node: default_layout,
2515
+ server_data,
2516
+ data
2517
+ },
2518
+ {
2519
+ node: await manifest._.nodes[1](),
2520
+ // 1 is always the root error
2521
+ data: null,
2522
+ server_data: null
2523
+ }
2524
+ );
2525
+ }
2526
+ return await render_response({
2527
+ options: options2,
2528
+ manifest,
2529
+ state,
2530
+ page_config: {
2531
+ ssr,
2532
+ csr
2533
+ },
2534
+ status,
2535
+ error: await handle_error_and_jsonify(event, event_state, options2, error2),
2536
+ branch,
2537
+ error_components: [],
2538
+ fetched,
2539
+ event,
2540
+ event_state,
2541
+ resolve_opts,
2542
+ data_serializer
2543
+ });
2544
+ } catch (e) {
2545
+ if (e instanceof Redirect) {
2546
+ return redirect_response(e.status, e.location);
2547
+ }
2548
+ return static_error_page(
2549
+ options2,
2550
+ get_status(e),
2551
+ (await handle_error_and_jsonify(event, event_state, options2, e)).message
2552
+ );
2553
+ }
2554
+ }
2555
+ const MAX_DEPTH = 10;
2556
+ async function render_page(event, event_state, page, options2, manifest, state, nodes, resolve_opts) {
2557
+ if (state.depth > MAX_DEPTH) {
2558
+ return text(`Not found: ${event.url.pathname}`, {
2559
+ status: 404
2560
+ // TODO in some cases this should be 500. not sure how to differentiate
2561
+ });
2562
+ }
2563
+ if (is_action_json_request(event)) {
2564
+ const node = await manifest._.nodes[page.leaf]();
2565
+ return handle_action_json_request(event, event_state, options2, node?.server);
2566
+ }
2567
+ try {
2568
+ const leaf_node = (
2569
+ /** @type {SSRNode} */
2570
+ nodes.page()
2571
+ );
2572
+ let status = 200;
2573
+ let action_result = void 0;
2574
+ if (is_action_request(event)) {
2575
+ const remote_id = get_remote_action(event.url);
2576
+ if (remote_id) {
2577
+ action_result = await handle_remote_form_post(event, event_state, manifest, remote_id);
2578
+ } else {
2579
+ action_result = await handle_action_request(event, event_state, leaf_node.server);
2580
+ }
2581
+ if (action_result?.type === "redirect") {
2582
+ return redirect_response(action_result.status, action_result.location);
2583
+ }
2584
+ if (action_result?.type === "error") {
2585
+ status = get_status(action_result.error);
2586
+ }
2587
+ if (action_result?.type === "failure") {
2588
+ status = action_result.status;
2589
+ }
2590
+ }
2591
+ const should_prerender = nodes.prerender();
2592
+ if (should_prerender) {
2593
+ const mod = leaf_node.server;
2594
+ if (mod?.actions) {
2595
+ throw new Error("Cannot prerender pages with actions");
2596
+ }
2597
+ } else if (state.prerendering) {
2598
+ return new Response(void 0, {
2599
+ status: 204
2600
+ });
2601
+ }
2602
+ state.prerender_default = should_prerender;
2603
+ const should_prerender_data = nodes.should_prerender_data();
2604
+ const data_pathname = add_data_suffix(event.url.pathname);
2605
+ const fetched = [];
2606
+ const ssr = nodes.ssr();
2607
+ const csr = nodes.csr();
2608
+ if (ssr === false && !(state.prerendering && should_prerender_data)) {
2609
+ if (DEV && action_result && !event.request.headers.has("x-sveltekit-action")) ;
2610
+ return await render_response({
2611
+ // provide nodes without running load functions so that the styles and
2612
+ // fonts are linked in the head before CSR takes over
2613
+ branch: compact(nodes.data).map((node) => {
2614
+ return {
2615
+ node,
2616
+ data: null,
2617
+ server_data: null
2618
+ };
2619
+ }),
2620
+ fetched,
2621
+ page_config: {
2622
+ ssr: false,
2623
+ csr
2624
+ },
2625
+ status,
2626
+ error: null,
2627
+ event,
2628
+ event_state,
2629
+ options: options2,
2630
+ manifest,
2631
+ state,
2632
+ resolve_opts,
2633
+ data_serializer: server_data_serializer(event, event_state, options2)
2634
+ });
2635
+ }
2636
+ const branch = [];
2637
+ let load_error = null;
2638
+ const data_serializer = server_data_serializer(event, event_state, options2);
2639
+ const data_serializer_json = state.prerendering && should_prerender_data ? server_data_serializer_json(event, event_state, options2) : null;
2640
+ const server_promises = nodes.data.map((node, i) => {
2641
+ if (load_error) {
2642
+ throw load_error;
2643
+ }
2644
+ return Promise.resolve().then(async () => {
2645
+ try {
2646
+ if (node === leaf_node && action_result?.type === "error") {
2647
+ throw action_result.error;
2648
+ }
2649
+ const server_data = await load_server_data({
2650
+ event,
2651
+ event_state,
2652
+ state,
2653
+ node,
2654
+ parent: async () => {
2655
+ const data = {};
2656
+ for (let j = 0; j < i; j += 1) {
2657
+ const parent = await server_promises[j];
2658
+ if (parent) Object.assign(data, parent.data);
2659
+ }
2660
+ return data;
2661
+ }
2662
+ });
2663
+ if (node) {
2664
+ data_serializer.add_node(i, server_data);
2665
+ }
2666
+ data_serializer_json?.add_node(i, server_data);
2667
+ return server_data;
2668
+ } catch (e) {
2669
+ load_error = /** @type {Error} */
2670
+ e;
2671
+ throw load_error;
2672
+ }
2673
+ });
2674
+ });
2675
+ const load_promises = nodes.data.map((node, i) => {
2676
+ if (load_error) throw load_error;
2677
+ return Promise.resolve().then(async () => {
2678
+ try {
2679
+ return await load_data({
2680
+ event,
2681
+ event_state,
2682
+ fetched,
2683
+ node,
2684
+ parent: async () => {
2685
+ const data = {};
2686
+ for (let j = 0; j < i; j += 1) {
2687
+ Object.assign(data, await load_promises[j]);
2688
+ }
2689
+ return data;
2690
+ },
2691
+ resolve_opts,
2692
+ server_data_promise: server_promises[i],
2693
+ state,
2694
+ csr
2695
+ });
2696
+ } catch (e) {
2697
+ load_error = /** @type {Error} */
2698
+ e;
2699
+ throw load_error;
2700
+ }
2701
+ });
2702
+ });
2703
+ for (const p of server_promises) p.catch(noop);
2704
+ for (const p of load_promises) p.catch(noop);
2705
+ for (let i = 0; i < nodes.data.length; i += 1) {
2706
+ const node = nodes.data[i];
2707
+ if (node) {
2708
+ try {
2709
+ const server_data = await server_promises[i];
2710
+ const data = await load_promises[i];
2711
+ branch.push({ node, server_data, data });
2712
+ } catch (e) {
2713
+ const err = normalize_error(e);
2714
+ if (err instanceof Redirect) {
2715
+ if (state.prerendering && should_prerender_data) {
2716
+ const body = JSON.stringify({
2717
+ type: "redirect",
2718
+ location: err.location
2719
+ });
2720
+ state.prerendering.dependencies.set(data_pathname, {
2721
+ response: text(body),
2722
+ body
2723
+ });
2724
+ }
2725
+ return redirect_response(err.status, err.location);
2726
+ }
2727
+ const status2 = get_status(err);
2728
+ const error2 = await handle_error_and_jsonify(event, event_state, options2, err);
2729
+ while (i--) {
2730
+ if (page.errors[i]) {
2731
+ const index = (
2732
+ /** @type {number} */
2733
+ page.errors[i]
2734
+ );
2735
+ const node2 = await manifest._.nodes[index]();
2736
+ let j = i;
2737
+ while (!branch[j]) j -= 1;
2738
+ data_serializer.set_max_nodes(j + 1);
2739
+ const layouts = compact(branch.slice(0, j + 1));
2740
+ const nodes2 = new PageNodes(layouts.map((layout) => layout.node));
2741
+ const error_branch = layouts.concat({
2742
+ node: node2,
2743
+ data: null,
2744
+ server_data: null
2745
+ });
2746
+ return await render_response({
2747
+ event,
2748
+ event_state,
2749
+ options: options2,
2750
+ manifest,
2751
+ state,
2752
+ resolve_opts,
2753
+ page_config: {
2754
+ ssr: nodes2.ssr(),
2755
+ csr: nodes2.csr()
2756
+ },
2757
+ status: status2,
2758
+ error: error2,
2759
+ error_components: await load_error_components(
2760
+ options2,
2761
+ ssr,
2762
+ error_branch,
2763
+ page,
2764
+ manifest
2765
+ ),
2766
+ branch: error_branch,
2767
+ fetched,
2768
+ data_serializer
2769
+ });
2770
+ }
2771
+ }
2772
+ return static_error_page(options2, status2, error2.message);
2773
+ }
2774
+ } else {
2775
+ branch.push(null);
2776
+ }
2777
+ }
2778
+ if (state.prerendering && data_serializer_json) {
2779
+ let { data, chunks } = data_serializer_json.get_data();
2780
+ if (chunks) {
2781
+ for await (const chunk of chunks) {
2782
+ data += chunk;
2783
+ }
2784
+ }
2785
+ state.prerendering.dependencies.set(data_pathname, {
2786
+ response: text(data),
2787
+ body: data
2788
+ });
2789
+ }
2790
+ return await render_response({
2791
+ event,
2792
+ event_state,
2793
+ options: options2,
2794
+ manifest,
2795
+ state,
2796
+ resolve_opts,
2797
+ page_config: {
2798
+ csr,
2799
+ ssr
2800
+ },
2801
+ status,
2802
+ error: null,
2803
+ branch: compact(branch),
2804
+ action_result,
2805
+ fetched,
2806
+ data_serializer: !ssr ? server_data_serializer(event, event_state, options2) : data_serializer,
2807
+ error_components: await load_error_components(options2, ssr, branch, page, manifest)
2808
+ });
2809
+ } catch (e) {
2810
+ if (e instanceof Redirect) {
2811
+ return redirect_response(e.status, e.location);
2812
+ }
2813
+ return await respond_with_error({
2814
+ event,
2815
+ event_state,
2816
+ options: options2,
2817
+ manifest,
2818
+ state,
2819
+ status: e instanceof HttpError ? e.status : 500,
2820
+ error: e,
2821
+ resolve_opts
2822
+ });
2823
+ }
2824
+ }
2825
+ async function load_error_components(options2, ssr, branch, page, manifest) {
2826
+ let error_components;
2827
+ if (options2.server_error_boundaries && ssr) {
2828
+ let last_idx = -1;
2829
+ error_components = await Promise.all(
2830
+ // eslint-disable-next-line @typescript-eslint/await-thenable
2831
+ branch.map((b, i) => {
2832
+ if (i === 0) return void 0;
2833
+ if (!b) return null;
2834
+ i--;
2835
+ while (i > last_idx + 1 && page.errors[i] === void 0) i -= 1;
2836
+ last_idx = i;
2837
+ const idx = page.errors[i];
2838
+ if (idx == null) return void 0;
2839
+ return manifest._.nodes[idx]?.().then((e) => e.component?.()).catch(() => void 0);
2840
+ }).filter((e) => e !== null)
2841
+ );
2842
+ }
2843
+ return error_components;
2844
+ }
2845
+ async function render_data(event, event_state, route, options2, manifest, state, invalidated_data_nodes, trailing_slash) {
2846
+ if (!route.page) {
2847
+ return new Response(void 0, {
2848
+ status: 404
2849
+ });
2850
+ }
2851
+ try {
2852
+ const node_ids = [...route.page.layouts, route.page.leaf];
2853
+ const invalidated = invalidated_data_nodes ?? node_ids.map(() => true);
2854
+ let aborted = false;
2855
+ const url = new URL(event.url);
2856
+ url.pathname = normalize_path(url.pathname, trailing_slash);
2857
+ const new_event = { ...event, url };
2858
+ const functions = node_ids.map((n, i) => {
2859
+ return once(async () => {
2860
+ try {
2861
+ if (aborted) {
2862
+ return (
2863
+ /** @type {import('types').ServerDataSkippedNode} */
2864
+ {
2865
+ type: "skip"
2866
+ }
2867
+ );
2868
+ }
2869
+ const node = n == void 0 ? n : await manifest._.nodes[n]();
2870
+ return load_server_data({
2871
+ event: new_event,
2872
+ event_state,
2873
+ state,
2874
+ node,
2875
+ parent: async () => {
2876
+ const data2 = {};
2877
+ for (let j = 0; j < i; j += 1) {
2878
+ const parent = (
2879
+ /** @type {import('types').ServerDataNode | null} */
2880
+ await functions[j]()
2881
+ );
2882
+ if (parent) {
2883
+ Object.assign(data2, parent.data);
2884
+ }
2885
+ }
2886
+ return data2;
2887
+ }
2888
+ });
2889
+ } catch (e) {
2890
+ aborted = true;
2891
+ throw e;
2892
+ }
2893
+ });
2894
+ });
2895
+ const promises = functions.map(async (fn, i) => {
2896
+ if (!invalidated[i]) {
2897
+ return (
2898
+ /** @type {import('types').ServerDataSkippedNode} */
2899
+ {
2900
+ type: "skip"
2901
+ }
2902
+ );
2903
+ }
2904
+ return fn();
2905
+ });
2906
+ let length = promises.length;
2907
+ const nodes = await Promise.all(
2908
+ promises.map(
2909
+ (p, i) => p.catch(async (error2) => {
2910
+ if (error2 instanceof Redirect) {
2911
+ throw error2;
2912
+ }
2913
+ length = Math.min(length, i + 1);
2914
+ return (
2915
+ /** @type {import('types').ServerErrorNode} */
2916
+ {
2917
+ type: "error",
2918
+ error: await handle_error_and_jsonify(event, event_state, options2, error2),
2919
+ status: error2 instanceof HttpError || error2 instanceof SvelteKitError ? error2.status : void 0
2920
+ }
2921
+ );
2922
+ })
2923
+ )
2924
+ );
2925
+ const data_serializer = server_data_serializer_json(event, event_state, options2);
2926
+ for (let i = 0; i < nodes.length; i++) data_serializer.add_node(i, nodes[i]);
2927
+ const { data, chunks } = data_serializer.get_data();
2928
+ if (!chunks) {
2929
+ return json_response(data);
2930
+ }
2931
+ return new Response(
2932
+ new ReadableStream({
2933
+ async start(controller) {
2934
+ controller.enqueue(text_encoder.encode(data));
2935
+ for await (const chunk of chunks) {
2936
+ controller.enqueue(text_encoder.encode(chunk));
2937
+ }
2938
+ controller.close();
2939
+ },
2940
+ type: "bytes"
2941
+ }),
2942
+ {
2943
+ headers: {
2944
+ // we use a proprietary content type to prevent buffering.
2945
+ // the `text` prefix makes it inspectable
2946
+ "content-type": "text/sveltekit-data",
2947
+ "cache-control": "private, no-store"
2948
+ }
2949
+ }
2950
+ );
2951
+ } catch (e) {
2952
+ const error2 = normalize_error(e);
2953
+ if (error2 instanceof Redirect) {
2954
+ return redirect_json_response(error2);
2955
+ } else {
2956
+ return json_response(await handle_error_and_jsonify(event, event_state, options2, error2), 500);
2957
+ }
2958
+ }
2959
+ }
2960
+ function json_response(json2, status = 200) {
2961
+ return text(typeof json2 === "string" ? json2 : JSON.stringify(json2), {
2962
+ status,
2963
+ headers: {
2964
+ "content-type": "application/json",
2965
+ "cache-control": "private, no-store"
2966
+ }
2967
+ });
2968
+ }
2969
+ function redirect_json_response(redirect) {
2970
+ return json_response(
2971
+ /** @type {import('types').ServerRedirectNode} */
2972
+ {
2973
+ type: "redirect",
2974
+ location: redirect.location
2975
+ }
2976
+ );
2977
+ }
2978
+ var cookie = {};
2979
+ var hasRequiredCookie;
2980
+ function requireCookie() {
2981
+ if (hasRequiredCookie) return cookie;
2982
+ hasRequiredCookie = 1;
2983
+ cookie.parse = parse;
2984
+ cookie.serialize = serialize;
2985
+ var __toString = Object.prototype.toString;
2986
+ var fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/;
2987
+ function parse(str, options2) {
2988
+ if (typeof str !== "string") {
2989
+ throw new TypeError("argument str must be a string");
2990
+ }
2991
+ var obj = {};
2992
+ var opt = options2 || {};
2993
+ var dec = opt.decode || decode;
2994
+ var index = 0;
2995
+ while (index < str.length) {
2996
+ var eqIdx = str.indexOf("=", index);
2997
+ if (eqIdx === -1) {
2998
+ break;
2999
+ }
3000
+ var endIdx = str.indexOf(";", index);
3001
+ if (endIdx === -1) {
3002
+ endIdx = str.length;
3003
+ } else if (endIdx < eqIdx) {
3004
+ index = str.lastIndexOf(";", eqIdx - 1) + 1;
3005
+ continue;
3006
+ }
3007
+ var key2 = str.slice(index, eqIdx).trim();
3008
+ if (void 0 === obj[key2]) {
3009
+ var val = str.slice(eqIdx + 1, endIdx).trim();
3010
+ if (val.charCodeAt(0) === 34) {
3011
+ val = val.slice(1, -1);
3012
+ }
3013
+ obj[key2] = tryDecode(val, dec);
3014
+ }
3015
+ index = endIdx + 1;
3016
+ }
3017
+ return obj;
3018
+ }
3019
+ function serialize(name, val, options2) {
3020
+ var opt = options2 || {};
3021
+ var enc = opt.encode || encode2;
3022
+ if (typeof enc !== "function") {
3023
+ throw new TypeError("option encode is invalid");
3024
+ }
3025
+ if (!fieldContentRegExp.test(name)) {
3026
+ throw new TypeError("argument name is invalid");
3027
+ }
3028
+ var value = enc(val);
3029
+ if (value && !fieldContentRegExp.test(value)) {
3030
+ throw new TypeError("argument val is invalid");
3031
+ }
3032
+ var str = name + "=" + value;
3033
+ if (null != opt.maxAge) {
3034
+ var maxAge = opt.maxAge - 0;
3035
+ if (isNaN(maxAge) || !isFinite(maxAge)) {
3036
+ throw new TypeError("option maxAge is invalid");
3037
+ }
3038
+ str += "; Max-Age=" + Math.floor(maxAge);
3039
+ }
3040
+ if (opt.domain) {
3041
+ if (!fieldContentRegExp.test(opt.domain)) {
3042
+ throw new TypeError("option domain is invalid");
3043
+ }
3044
+ str += "; Domain=" + opt.domain;
3045
+ }
3046
+ if (opt.path) {
3047
+ if (!fieldContentRegExp.test(opt.path)) {
3048
+ throw new TypeError("option path is invalid");
3049
+ }
3050
+ str += "; Path=" + opt.path;
3051
+ }
3052
+ if (opt.expires) {
3053
+ var expires = opt.expires;
3054
+ if (!isDate(expires) || isNaN(expires.valueOf())) {
3055
+ throw new TypeError("option expires is invalid");
3056
+ }
3057
+ str += "; Expires=" + expires.toUTCString();
3058
+ }
3059
+ if (opt.httpOnly) {
3060
+ str += "; HttpOnly";
3061
+ }
3062
+ if (opt.secure) {
3063
+ str += "; Secure";
3064
+ }
3065
+ if (opt.partitioned) {
3066
+ str += "; Partitioned";
3067
+ }
3068
+ if (opt.priority) {
3069
+ var priority = typeof opt.priority === "string" ? opt.priority.toLowerCase() : opt.priority;
3070
+ switch (priority) {
3071
+ case "low":
3072
+ str += "; Priority=Low";
3073
+ break;
3074
+ case "medium":
3075
+ str += "; Priority=Medium";
3076
+ break;
3077
+ case "high":
3078
+ str += "; Priority=High";
3079
+ break;
3080
+ default:
3081
+ throw new TypeError("option priority is invalid");
3082
+ }
3083
+ }
3084
+ if (opt.sameSite) {
3085
+ var sameSite = typeof opt.sameSite === "string" ? opt.sameSite.toLowerCase() : opt.sameSite;
3086
+ switch (sameSite) {
3087
+ case true:
3088
+ str += "; SameSite=Strict";
3089
+ break;
3090
+ case "lax":
3091
+ str += "; SameSite=Lax";
3092
+ break;
3093
+ case "strict":
3094
+ str += "; SameSite=Strict";
3095
+ break;
3096
+ case "none":
3097
+ str += "; SameSite=None";
3098
+ break;
3099
+ default:
3100
+ throw new TypeError("option sameSite is invalid");
3101
+ }
3102
+ }
3103
+ return str;
3104
+ }
3105
+ function decode(str) {
3106
+ return str.indexOf("%") !== -1 ? decodeURIComponent(str) : str;
3107
+ }
3108
+ function encode2(val) {
3109
+ return encodeURIComponent(val);
3110
+ }
3111
+ function isDate(val) {
3112
+ return __toString.call(val) === "[object Date]" || val instanceof Date;
3113
+ }
3114
+ function tryDecode(str, decode2) {
3115
+ try {
3116
+ return decode2(str);
3117
+ } catch (e) {
3118
+ return str;
3119
+ }
3120
+ }
3121
+ return cookie;
3122
+ }
3123
+ var cookieExports = requireCookie();
3124
+ const INVALID_COOKIE_CHARACTER_REGEX = /[\x00-\x1F\x7F()<>@,;:"/[\]?={} \t]/;
3125
+ function validate_options(options2) {
3126
+ if (options2?.path === void 0) {
3127
+ throw new Error("You must specify a `path` when setting, deleting or serializing cookies");
3128
+ }
3129
+ }
3130
+ function generate_cookie_key(domain, path, name) {
3131
+ return `${domain || ""}${path}?${encodeURIComponent(name)}`;
3132
+ }
3133
+ function get_cookies(request, url) {
3134
+ const header = request.headers.get("cookie") ?? "";
3135
+ const initial_cookies = cookieExports.parse(header, { decode: (value) => value });
3136
+ let normalized_url;
3137
+ const new_cookies = /* @__PURE__ */ new Map();
3138
+ const defaults = {
3139
+ httpOnly: true,
3140
+ sameSite: "lax",
3141
+ secure: url.hostname === "localhost" && url.protocol === "http:" ? false : true
3142
+ };
3143
+ const cookies = {
3144
+ // The JSDoc param annotations appearing below for get, set and delete
3145
+ // are necessary to expose the `cookie` library types to
3146
+ // typescript users. `@type {import('@sveltejs/kit').Cookies}` above is not
3147
+ // sufficient to do so.
3148
+ /**
3149
+ * @param {string} name
3150
+ * @param {import('cookie').CookieParseOptions} [opts]
3151
+ */
3152
+ get(name, opts) {
3153
+ const best_match = Array.from(new_cookies.values()).filter((c) => {
3154
+ return c.name === name && domain_matches(url.hostname, c.options.domain) && path_matches(url.pathname, c.options.path);
3155
+ }).sort((a, b) => b.options.path.length - a.options.path.length)[0];
3156
+ if (best_match) {
3157
+ return best_match.options.maxAge === 0 ? void 0 : best_match.value;
3158
+ }
3159
+ const req_cookies = cookieExports.parse(header, { decode: opts?.decode });
3160
+ const cookie2 = req_cookies[name];
3161
+ return cookie2;
3162
+ },
3163
+ /**
3164
+ * @param {import('cookie').CookieParseOptions} [opts]
3165
+ */
3166
+ getAll(opts) {
3167
+ const cookies2 = cookieExports.parse(header, { decode: opts?.decode });
3168
+ const lookup = /* @__PURE__ */ new Map();
3169
+ for (const c of new_cookies.values()) {
3170
+ if (domain_matches(url.hostname, c.options.domain) && path_matches(url.pathname, c.options.path)) {
3171
+ const existing = lookup.get(c.name);
3172
+ if (!existing || c.options.path.length > existing.options.path.length) {
3173
+ lookup.set(c.name, c);
3174
+ }
3175
+ }
3176
+ }
3177
+ for (const c of lookup.values()) {
3178
+ cookies2[c.name] = c.value;
3179
+ }
3180
+ return Object.entries(cookies2).map(([name, value]) => ({ name, value }));
3181
+ },
3182
+ /**
3183
+ * @param {string} name
3184
+ * @param {string} value
3185
+ * @param {import('./page/types.js').Cookie['options']} options
3186
+ */
3187
+ set(name, value, options2) {
3188
+ const illegal_characters = name.match(INVALID_COOKIE_CHARACTER_REGEX);
3189
+ if (illegal_characters) {
3190
+ console.warn(
3191
+ `The cookie name "${name}" will be invalid in SvelteKit 3.0 as it contains ${illegal_characters.join(
3192
+ " and "
3193
+ )}. See RFC 2616 for more details https://datatracker.ietf.org/doc/html/rfc2616#section-2.2`
3194
+ );
3195
+ }
3196
+ validate_options(options2);
3197
+ set_internal(name, value, { ...defaults, ...options2 });
3198
+ },
3199
+ /**
3200
+ * @param {string} name
3201
+ * @param {import('./page/types.js').Cookie['options']} options
3202
+ */
3203
+ delete(name, options2) {
3204
+ validate_options(options2);
3205
+ cookies.set(name, "", { ...options2, maxAge: 0 });
3206
+ },
3207
+ /**
3208
+ * @param {string} name
3209
+ * @param {string} value
3210
+ * @param {import('./page/types.js').Cookie['options']} options
3211
+ */
3212
+ serialize(name, value, options2) {
3213
+ validate_options(options2);
3214
+ let path = options2.path;
3215
+ if (!options2.domain || options2.domain === url.hostname) {
3216
+ if (!normalized_url) {
3217
+ throw new Error("Cannot serialize cookies until after the route is determined");
3218
+ }
3219
+ path = resolve(normalized_url, path);
3220
+ }
3221
+ return cookieExports.serialize(name, value, { ...defaults, ...options2, path });
3222
+ }
3223
+ };
3224
+ function get_cookie_header(destination, header2) {
3225
+ const combined_cookies = {
3226
+ // cookies sent by the user agent have lowest precedence
3227
+ ...initial_cookies
3228
+ };
3229
+ for (const cookie2 of new_cookies.values()) {
3230
+ if (!domain_matches(destination.hostname, cookie2.options.domain)) continue;
3231
+ if (!path_matches(destination.pathname, cookie2.options.path)) continue;
3232
+ const encoder = cookie2.options.encode || encodeURIComponent;
3233
+ combined_cookies[cookie2.name] = encoder(cookie2.value);
3234
+ }
3235
+ if (header2) {
3236
+ const parsed = cookieExports.parse(header2, { decode: (value) => value });
3237
+ for (const name in parsed) {
3238
+ combined_cookies[name] = parsed[name];
3239
+ }
3240
+ }
3241
+ return Object.entries(combined_cookies).map(([name, value]) => `${name}=${value}`).join("; ");
3242
+ }
3243
+ const internal_queue = [];
3244
+ function set_internal(name, value, options2) {
3245
+ if (!normalized_url) {
3246
+ internal_queue.push(() => set_internal(name, value, options2));
3247
+ return;
3248
+ }
3249
+ let path = options2.path;
3250
+ if (!options2.domain || options2.domain === url.hostname) {
3251
+ path = resolve(normalized_url, path);
3252
+ }
3253
+ const cookie_key = generate_cookie_key(options2.domain, path, name);
3254
+ const cookie2 = { name, value, options: { ...options2, path } };
3255
+ new_cookies.set(cookie_key, cookie2);
3256
+ }
3257
+ function set_trailing_slash(trailing_slash) {
3258
+ normalized_url = normalize_path(url.pathname, trailing_slash);
3259
+ internal_queue.forEach((fn) => fn());
3260
+ }
3261
+ return { cookies, new_cookies, get_cookie_header, set_internal, set_trailing_slash };
3262
+ }
3263
+ function domain_matches(hostname, constraint) {
3264
+ if (!constraint) return true;
3265
+ const normalized = constraint[0] === "." ? constraint.slice(1) : constraint;
3266
+ if (hostname === normalized) return true;
3267
+ return hostname.endsWith("." + normalized);
3268
+ }
3269
+ function path_matches(path, constraint) {
3270
+ if (!constraint) return true;
3271
+ const normalized = constraint.endsWith("/") ? constraint.slice(0, -1) : constraint;
3272
+ if (path === normalized) return true;
3273
+ return path.startsWith(normalized + "/");
3274
+ }
3275
+ function add_cookies_to_headers(headers2, cookies) {
3276
+ for (const new_cookie of cookies) {
3277
+ const { name, value, options: options2 } = new_cookie;
3278
+ headers2.append("set-cookie", cookieExports.serialize(name, value, options2));
3279
+ if (options2.path.endsWith(".html")) {
3280
+ const path = add_data_suffix(options2.path);
3281
+ headers2.append("set-cookie", cookieExports.serialize(name, value, { ...options2, path }));
3282
+ }
3283
+ }
3284
+ }
3285
+ function create_fetch({ event, options: options2, manifest, state, get_cookie_header, set_internal }) {
3286
+ const server_fetch = async (info, init2) => {
3287
+ const original_request = normalize_fetch_input(info, init2, event.url);
3288
+ let mode = (info instanceof Request ? info.mode : init2?.mode) ?? "cors";
3289
+ let credentials = (info instanceof Request ? info.credentials : init2?.credentials) ?? "same-origin";
3290
+ return options2.hooks.handleFetch({
3291
+ event,
3292
+ request: original_request,
3293
+ fetch: async (info2, init3) => {
3294
+ const request = normalize_fetch_input(info2, init3, event.url);
3295
+ const url = new URL(request.url);
3296
+ if (!request.headers.has("origin")) {
3297
+ request.headers.set("origin", event.url.origin);
3298
+ }
3299
+ if (info2 !== original_request) {
3300
+ mode = (info2 instanceof Request ? info2.mode : init3?.mode) ?? "cors";
3301
+ credentials = (info2 instanceof Request ? info2.credentials : init3?.credentials) ?? "same-origin";
3302
+ }
3303
+ if ((request.method === "GET" || request.method === "HEAD") && (mode === "no-cors" && url.origin !== event.url.origin || url.origin === event.url.origin)) {
3304
+ request.headers.delete("origin");
3305
+ }
3306
+ const decoded = decodeURIComponent(url.pathname);
3307
+ if (url.origin !== event.url.origin || base && decoded !== base && !decoded.startsWith(`${base}/`)) {
3308
+ if (`.${url.hostname}`.endsWith(`.${event.url.hostname}`) && credentials !== "omit") {
3309
+ const cookie2 = get_cookie_header(url, request.headers.get("cookie"));
3310
+ if (cookie2) request.headers.set("cookie", cookie2);
3311
+ }
3312
+ return fetch(request);
3313
+ }
3314
+ const prefix = assets || base;
3315
+ const filename = (decoded.startsWith(prefix) ? decoded.slice(prefix.length) : decoded).slice(1);
3316
+ const filename_html = `${filename}/index.html`;
3317
+ const is_asset = manifest.assets.has(filename) || filename in manifest._.server_assets;
3318
+ const is_asset_html = manifest.assets.has(filename_html) || filename_html in manifest._.server_assets;
3319
+ if (is_asset || is_asset_html) {
3320
+ const file = is_asset ? filename : filename_html;
3321
+ if (state.read) {
3322
+ const type = is_asset ? manifest.mimeTypes[filename.slice(filename.lastIndexOf("."))] : "text/html";
3323
+ return new Response(state.read(file), {
3324
+ headers: type ? { "content-type": type } : {}
3325
+ });
3326
+ } else if (read_implementation && file in manifest._.server_assets) {
3327
+ const length = manifest._.server_assets[file];
3328
+ const type = manifest.mimeTypes[file.slice(file.lastIndexOf("."))];
3329
+ return new Response(read_implementation(file), {
3330
+ headers: {
3331
+ "Content-Length": "" + length,
3332
+ "Content-Type": type
3333
+ }
3334
+ });
3335
+ }
3336
+ return await fetch(request);
3337
+ }
3338
+ if (has_prerendered_path(manifest, base + decoded)) {
3339
+ return await fetch(request);
3340
+ }
3341
+ if (credentials !== "omit") {
3342
+ const cookie2 = get_cookie_header(url, request.headers.get("cookie"));
3343
+ if (cookie2) {
3344
+ request.headers.set("cookie", cookie2);
3345
+ }
3346
+ const authorization = event.request.headers.get("authorization");
3347
+ if (authorization && !request.headers.has("authorization")) {
3348
+ request.headers.set("authorization", authorization);
3349
+ }
3350
+ }
3351
+ if (!request.headers.has("accept")) {
3352
+ request.headers.set("accept", "*/*");
3353
+ }
3354
+ if (!request.headers.has("accept-language")) {
3355
+ request.headers.set(
3356
+ "accept-language",
3357
+ /** @type {string} */
3358
+ event.request.headers.get("accept-language")
3359
+ );
3360
+ }
3361
+ const response = await internal_fetch(request, options2, manifest, state);
3362
+ for (const str of get_set_cookies(response.headers)) {
3363
+ const { name, value, ...options3 } = parseString(str, {
3364
+ decodeValues: false
3365
+ });
3366
+ const path = options3.path ?? (url.pathname.split("/").slice(0, -1).join("/") || "/");
3367
+ set_internal(name, value, {
3368
+ path,
3369
+ encode: (value2) => value2,
3370
+ .../** @type {import('cookie').CookieSerializeOptions} */
3371
+ options3
3372
+ });
3373
+ }
3374
+ return response;
3375
+ }
3376
+ });
3377
+ };
3378
+ return (input, init2) => {
3379
+ const response = server_fetch(input, init2);
3380
+ response.catch(noop);
3381
+ return response;
3382
+ };
3383
+ }
3384
+ function normalize_fetch_input(info, init2, url) {
3385
+ if (info instanceof Request) {
3386
+ return info;
3387
+ }
3388
+ return new Request(typeof info === "string" ? new URL(info, url) : info, init2);
3389
+ }
3390
+ async function internal_fetch(request, options2, manifest, state) {
3391
+ if (request.signal) {
3392
+ if (request.signal.aborted) {
3393
+ throw new DOMException("The operation was aborted.", "AbortError");
3394
+ }
3395
+ let remove_abort_listener = noop;
3396
+ const abort_promise = new Promise((_, reject) => {
3397
+ const on_abort = () => {
3398
+ reject(new DOMException("The operation was aborted.", "AbortError"));
3399
+ };
3400
+ request.signal.addEventListener("abort", on_abort, { once: true });
3401
+ remove_abort_listener = () => request.signal.removeEventListener("abort", on_abort);
3402
+ });
3403
+ const result = await Promise.race([
3404
+ respond(request, options2, manifest, {
3405
+ ...state,
3406
+ depth: state.depth + 1
3407
+ }),
3408
+ abort_promise
3409
+ ]);
3410
+ remove_abort_listener();
3411
+ return result;
3412
+ } else {
3413
+ return await respond(request, options2, manifest, {
3414
+ ...state,
3415
+ depth: state.depth + 1
3416
+ });
3417
+ }
3418
+ }
3419
+ let payload;
3420
+ let etag;
3421
+ let headers;
3422
+ function get_public_env(request) {
3423
+ const script = request.url.endsWith(".script.js");
3424
+ const env = public_env;
3425
+ payload ??= uneval(env);
3426
+ etag ??= `W/${Date.now()}`;
3427
+ headers ??= new Headers({
3428
+ "content-type": "application/javascript; charset=utf-8",
3429
+ etag
3430
+ });
3431
+ if (request.headers.get("if-none-match") === etag) {
3432
+ return new Response(void 0, { status: 304, headers });
3433
+ }
3434
+ if (script) {
3435
+ return new Response(`globalThis.__sveltekit_sw={env:${payload}}`, { headers });
3436
+ }
3437
+ return new Response(`export const env=${payload}`, { headers });
3438
+ }
3439
+ const default_transform = ({ html }) => html;
3440
+ const default_filter = () => false;
3441
+ const default_preload = ({ type }) => type === "js" || type === "css";
3442
+ const page_methods = /* @__PURE__ */ new Set(["GET", "HEAD", "POST"]);
3443
+ const allowed_page_methods = /* @__PURE__ */ new Set(["GET", "HEAD", "OPTIONS"]);
3444
+ const respond = propagate_context(internal_respond);
3445
+ async function internal_respond(request, options2, manifest, state) {
3446
+ const url = new URL(request.url);
3447
+ const is_route_resolution_request = has_resolution_suffix(url.pathname);
3448
+ const is_data_request = has_data_suffix(url.pathname);
3449
+ const remote_id = get_remote_id(url);
3450
+ {
3451
+ const request_origin = request.headers.get("origin");
3452
+ if (remote_id) {
3453
+ if (request.method !== "GET" && request_origin !== url.origin) {
3454
+ const message = "Cross-site remote requests are forbidden";
3455
+ return json({ message }, { status: 403 });
3456
+ }
3457
+ } else if (options2.csrf_check_origin) {
3458
+ const forbidden = is_form_content_type(request) && (request.method === "POST" || request.method === "PUT" || request.method === "PATCH" || request.method === "DELETE") && request_origin !== url.origin && (!request_origin || !options2.csrf_trusted_origins.includes(request_origin));
3459
+ if (forbidden) {
3460
+ const message = `Cross-site ${request.method} form submissions are forbidden`;
3461
+ const opts = { status: 403 };
3462
+ if (request.headers.get("accept") === "application/json") {
3463
+ return json({ message }, opts);
3464
+ }
3465
+ return text(message, opts);
3466
+ }
3467
+ }
3468
+ }
3469
+ if (options2.hash_routing && url.pathname !== base + "/" && url.pathname !== "/[fallback]") {
3470
+ return text("Not found", { status: 404 });
3471
+ }
3472
+ let invalidated_data_nodes;
3473
+ if (is_route_resolution_request) {
3474
+ url.pathname = strip_resolution_suffix(url.pathname);
3475
+ } else if (is_data_request) {
3476
+ url.pathname = strip_data_suffix(url.pathname) + (url.searchParams.get(TRAILING_SLASH_PARAM) === "1" ? "/" : "") || "/";
3477
+ url.searchParams.delete(TRAILING_SLASH_PARAM);
3478
+ invalidated_data_nodes = url.searchParams.get(INVALIDATED_PARAM)?.split("").map((node) => node === "1");
3479
+ url.searchParams.delete(INVALIDATED_PARAM);
3480
+ } else if (remote_id) {
3481
+ url.pathname = request.headers.get("x-sveltekit-pathname") ?? base;
3482
+ url.search = request.headers.get("x-sveltekit-search") ?? "";
3483
+ }
3484
+ const headers2 = {};
3485
+ const { cookies, new_cookies, get_cookie_header, set_internal, set_trailing_slash } = get_cookies(
3486
+ request,
3487
+ url
3488
+ );
3489
+ const event_state = {
3490
+ prerendering: state.prerendering,
3491
+ transport: options2.hooks.transport,
3492
+ handleValidationError: options2.hooks.handleValidationError,
3493
+ tracing: {
3494
+ record_span
3495
+ },
3496
+ remote: {
3497
+ data: null,
3498
+ explicit: null,
3499
+ implicit: null,
3500
+ forms: null,
3501
+ requested: null,
3502
+ batches: null,
3503
+ live_iterators: null
3504
+ },
3505
+ is_in_remote_function: false,
3506
+ is_in_remote_form_or_command: false,
3507
+ is_in_remote_query: false,
3508
+ is_in_render: false,
3509
+ is_in_universal_load: false
3510
+ };
3511
+ const event = {
3512
+ cookies,
3513
+ // @ts-expect-error `fetch` needs to be created after the `event` itself
3514
+ fetch: null,
3515
+ getClientAddress: state.getClientAddress || (() => {
3516
+ throw new Error(
3517
+ `${"@sveltejs/adapter-node"} does not specify getClientAddress. Please raise an issue`
3518
+ );
3519
+ }),
3520
+ locals: {},
3521
+ params: {},
3522
+ platform: state.platform,
3523
+ request,
3524
+ route: { id: null },
3525
+ setHeaders: (new_headers) => {
3526
+ for (const key2 in new_headers) {
3527
+ const lower = key2.toLowerCase();
3528
+ const value = new_headers[key2];
3529
+ if (lower === "set-cookie") {
3530
+ throw new Error(
3531
+ "Use `event.cookies.set(name, value, options)` instead of `event.setHeaders` to set cookies"
3532
+ );
3533
+ } else if (lower in headers2) {
3534
+ if (lower === "server-timing") {
3535
+ headers2[lower] += ", " + value;
3536
+ } else {
3537
+ throw new Error(`"${key2}" header is already set`);
3538
+ }
3539
+ } else {
3540
+ headers2[lower] = value;
3541
+ if (state.prerendering && lower === "cache-control") {
3542
+ state.prerendering.cache = /** @type {string} */
3543
+ value;
3544
+ }
3545
+ }
3546
+ }
3547
+ },
3548
+ url,
3549
+ isDataRequest: is_data_request,
3550
+ isSubRequest: state.depth > 0,
3551
+ isRemoteRequest: !!remote_id
3552
+ };
3553
+ event.fetch = create_fetch({
3554
+ event,
3555
+ options: options2,
3556
+ manifest,
3557
+ state,
3558
+ get_cookie_header,
3559
+ set_internal
3560
+ });
3561
+ if (state.emulator?.platform) {
3562
+ event.platform = await state.emulator.platform({
3563
+ config: {},
3564
+ prerender: !!state.prerendering?.fallback
3565
+ });
3566
+ }
3567
+ let resolved_path = url.pathname;
3568
+ if (!remote_id) {
3569
+ const prerendering_reroute_state = state.prerendering?.inside_reroute;
3570
+ try {
3571
+ if (state.prerendering) state.prerendering.inside_reroute = true;
3572
+ resolved_path = await options2.hooks.reroute({ url: new URL(url), fetch: event.fetch }) ?? url.pathname;
3573
+ } catch {
3574
+ return text("Internal Server Error", {
3575
+ status: 500
3576
+ });
3577
+ } finally {
3578
+ if (state.prerendering) state.prerendering.inside_reroute = prerendering_reroute_state;
3579
+ }
3580
+ }
3581
+ let resolve_opts = {
3582
+ transformPageChunk: default_transform,
3583
+ filterSerializedResponseHeaders: default_filter,
3584
+ preload: default_preload
3585
+ };
3586
+ let trailing_slash = "never";
3587
+ let page_nodes;
3588
+ try {
3589
+ resolved_path = decode_pathname(resolved_path);
3590
+ } catch {
3591
+ resolved_path = null;
3592
+ return await handle();
3593
+ }
3594
+ if (
3595
+ // the resolved path has been decoded so it should be compared to the decoded url pathname
3596
+ resolved_path !== decode_pathname(url.pathname) && !state.prerendering?.fallback && has_prerendered_path(manifest, resolved_path)
3597
+ ) {
3598
+ const url2 = new URL(request.url);
3599
+ url2.pathname = is_data_request ? add_data_suffix(resolved_path) : is_route_resolution_request ? add_resolution_suffix(resolved_path) : resolved_path;
3600
+ try {
3601
+ const response = await fetch(url2, request);
3602
+ const headers22 = new Headers(response.headers);
3603
+ if (headers22.has("content-encoding")) {
3604
+ headers22.delete("content-encoding");
3605
+ headers22.delete("content-length");
3606
+ }
3607
+ return new Response(response.body, {
3608
+ headers: headers22,
3609
+ status: response.status,
3610
+ statusText: response.statusText
3611
+ });
3612
+ } catch (error2) {
3613
+ return await handle_fatal_error(event, event_state, options2, error2);
3614
+ }
3615
+ }
3616
+ let route = null;
3617
+ if (base && !state.prerendering?.fallback) {
3618
+ if (!resolved_path.startsWith(base)) {
3619
+ return text("Not found", { status: 404 });
3620
+ }
3621
+ resolved_path = resolved_path.slice(base.length) || "/";
3622
+ }
3623
+ if (is_route_resolution_request) {
3624
+ return resolve_route(resolved_path, new URL(request.url), manifest);
3625
+ }
3626
+ if (resolved_path === `/${app_dir}/env.js` || resolved_path === `/${app_dir}/env.script.js`) {
3627
+ return get_public_env(request);
3628
+ }
3629
+ if (!remote_id && resolved_path.startsWith(`/${app_dir}`)) {
3630
+ const headers22 = new Headers();
3631
+ headers22.set("cache-control", "public, max-age=0, must-revalidate");
3632
+ return text("Not found", { status: 404, headers: headers22 });
3633
+ }
3634
+ if (!state.prerendering?.fallback) {
3635
+ const matchers = await manifest._.matchers();
3636
+ const result = find_route(resolved_path, manifest._.routes, matchers);
3637
+ if (result) {
3638
+ route = result.route;
3639
+ event.route = { id: route.id };
3640
+ event.params = result.params;
3641
+ }
3642
+ }
3643
+ try {
3644
+ page_nodes = route?.page ? new PageNodes(await load_page_nodes(route.page, manifest)) : void 0;
3645
+ if (route && !remote_id) {
3646
+ if (url.pathname === base || url.pathname === base + "/") {
3647
+ trailing_slash = "always";
3648
+ } else if (page_nodes) {
3649
+ if (DEV) ;
3650
+ trailing_slash = page_nodes.trailing_slash();
3651
+ } else if (route.endpoint) {
3652
+ const node = await route.endpoint();
3653
+ trailing_slash = node.trailingSlash ?? "never";
3654
+ if (DEV) ;
3655
+ }
3656
+ if (!is_data_request) {
3657
+ const normalized = normalize_path(url.pathname, trailing_slash);
3658
+ if (normalized !== url.pathname && !state.prerendering?.fallback) {
3659
+ return new Response(void 0, {
3660
+ status: 308,
3661
+ headers: {
3662
+ "x-sveltekit-normalize": "1",
3663
+ location: (
3664
+ // ensure paths starting with '//' are not treated as protocol-relative
3665
+ (normalized.startsWith("//") ? url.origin + normalized : normalized) + (url.search === "?" ? "" : url.search)
3666
+ )
3667
+ }
3668
+ });
3669
+ }
3670
+ }
3671
+ if (state.before_handle || state.emulator?.platform) {
3672
+ let config = {};
3673
+ let prerender = false;
3674
+ if (route.endpoint) {
3675
+ const node = await route.endpoint();
3676
+ config = node.config ?? config;
3677
+ prerender = node.prerender ?? prerender;
3678
+ } else if (page_nodes) {
3679
+ config = page_nodes.get_config() ?? config;
3680
+ prerender = page_nodes.prerender();
3681
+ }
3682
+ if (state.emulator?.platform) {
3683
+ event.platform = await state.emulator.platform({ config, prerender });
3684
+ }
3685
+ if (state.before_handle) {
3686
+ return await state.before_handle(event, config, prerender, handle);
3687
+ }
3688
+ }
3689
+ }
3690
+ return await handle();
3691
+ } catch (e) {
3692
+ if (e instanceof Redirect) {
3693
+ try {
3694
+ const response = is_data_request || remote_id ? redirect_json_response(e) : route?.page && is_action_json_request(event) ? action_json_redirect(e) : redirect_response(e.status, e.location);
3695
+ add_cookies_to_headers(response.headers, new_cookies.values());
3696
+ return response;
3697
+ } catch (err) {
3698
+ return await handle_fatal_error(event, event_state, options2, err);
3699
+ }
3700
+ }
3701
+ return await handle_fatal_error(event, event_state, options2, e);
3702
+ }
3703
+ async function handle() {
3704
+ set_trailing_slash(trailing_slash);
3705
+ if (state.prerendering && !state.prerendering.fallback && !state.prerendering.inside_reroute) {
3706
+ disable_search(url);
3707
+ }
3708
+ const response = await record_span({
3709
+ name: "sveltekit.handle.root",
3710
+ attributes: {
3711
+ "http.route": event.route.id || "unknown",
3712
+ "http.method": event.request.method,
3713
+ "http.url": event.url.href,
3714
+ "sveltekit.is_sub_request": event.isSubRequest
3715
+ },
3716
+ fn: async (root_span) => {
3717
+ const traced_event = {
3718
+ ...event,
3719
+ tracing: {
3720
+ enabled: false,
3721
+ root: root_span,
3722
+ current: root_span
3723
+ }
3724
+ };
3725
+ return await with_request_store(
3726
+ { event: traced_event, state: event_state },
3727
+ () => options2.hooks.handle({
3728
+ event: traced_event,
3729
+ resolve: (event2, opts) => {
3730
+ return record_span({
3731
+ name: "sveltekit.resolve",
3732
+ attributes: {
3733
+ "http.route": event2.route.id || "unknown"
3734
+ },
3735
+ fn: (resolve_span) => {
3736
+ return with_request_store(
3737
+ null,
3738
+ () => resolve2(merge_tracing(event2, resolve_span), page_nodes, opts).then(
3739
+ (response2) => {
3740
+ for (const key2 in headers2) {
3741
+ const value = headers2[key2];
3742
+ response2.headers.set(
3743
+ key2,
3744
+ /** @type {string} */
3745
+ value
3746
+ );
3747
+ }
3748
+ add_cookies_to_headers(response2.headers, new_cookies.values());
3749
+ if (state.prerendering && event2.route.id !== null) {
3750
+ response2.headers.set("x-sveltekit-routeid", encodeURI(event2.route.id));
3751
+ }
3752
+ resolve_span.setAttributes({
3753
+ "http.response.status_code": response2.status,
3754
+ "http.response.body.size": response2.headers.get("content-length") || "unknown"
3755
+ });
3756
+ return response2;
3757
+ }
3758
+ )
3759
+ );
3760
+ }
3761
+ });
3762
+ }
3763
+ })
3764
+ );
3765
+ }
3766
+ });
3767
+ if (response.status === 200 && response.headers.has("etag")) {
3768
+ let if_none_match_value = request.headers.get("if-none-match");
3769
+ if (if_none_match_value?.startsWith('W/"')) {
3770
+ if_none_match_value = if_none_match_value.substring(2);
3771
+ }
3772
+ const etag2 = (
3773
+ /** @type {string} */
3774
+ response.headers.get("etag")
3775
+ );
3776
+ if (if_none_match_value === etag2) {
3777
+ const headers22 = new Headers({ etag: etag2 });
3778
+ for (const key2 of ["cache-control", "content-location", "date", "expires", "vary"]) {
3779
+ const value = response.headers.get(key2);
3780
+ if (value) headers22.set(key2, value);
3781
+ }
3782
+ for (const cookie2 of get_set_cookies(response.headers)) {
3783
+ headers22.append("set-cookie", cookie2);
3784
+ }
3785
+ return new Response(void 0, {
3786
+ status: 304,
3787
+ headers: headers22
3788
+ });
3789
+ }
3790
+ }
3791
+ if (is_data_request && response.status >= 300 && response.status <= 308) {
3792
+ const location = response.headers.get("location");
3793
+ if (location) {
3794
+ return redirect_json_response(new Redirect(
3795
+ /** @type {any} */
3796
+ response.status,
3797
+ location
3798
+ ));
3799
+ }
3800
+ }
3801
+ return response;
3802
+ }
3803
+ async function resolve2(event2, page_nodes2, opts) {
3804
+ try {
3805
+ if (opts) {
3806
+ resolve_opts = {
3807
+ transformPageChunk: opts.transformPageChunk || default_transform,
3808
+ filterSerializedResponseHeaders: opts.filterSerializedResponseHeaders || default_filter,
3809
+ preload: opts.preload || default_preload
3810
+ };
3811
+ }
3812
+ if (resolved_path === null) {
3813
+ return await respond_with_error({
3814
+ event: event2,
3815
+ event_state,
3816
+ options: options2,
3817
+ manifest,
3818
+ state,
3819
+ status: 400,
3820
+ error: new SvelteKitError(
3821
+ 400,
3822
+ "Malformed URI",
3823
+ `Failed to decode URI: ${event2.url.pathname}`
3824
+ ),
3825
+ resolve_opts
3826
+ });
3827
+ }
3828
+ if (options2.hash_routing || state.prerendering?.fallback) {
3829
+ return await render_response({
3830
+ event: event2,
3831
+ event_state,
3832
+ options: options2,
3833
+ manifest,
3834
+ state,
3835
+ page_config: { ssr: false, csr: true },
3836
+ status: 200,
3837
+ error: null,
3838
+ branch: [
3839
+ // include the root layout because it applies to every page
3840
+ {
3841
+ node: (
3842
+ /** @type {SSRNode} */
3843
+ await manifest._.nodes[0]()
3844
+ ),
3845
+ data: null,
3846
+ server_data: null
3847
+ }
3848
+ ],
3849
+ fetched: [],
3850
+ resolve_opts,
3851
+ data_serializer: server_data_serializer(event2, event_state, options2)
3852
+ });
3853
+ }
3854
+ if (remote_id) {
3855
+ return await handle_remote_call(event2, event_state, options2, manifest, remote_id);
3856
+ }
3857
+ if (route) {
3858
+ const method = (
3859
+ /** @type {import('types').HttpMethod} */
3860
+ event2.request.method
3861
+ );
3862
+ let response2;
3863
+ if (is_data_request) {
3864
+ response2 = await render_data(
3865
+ event2,
3866
+ event_state,
3867
+ route,
3868
+ options2,
3869
+ manifest,
3870
+ state,
3871
+ invalidated_data_nodes,
3872
+ trailing_slash
3873
+ );
3874
+ } else if (route.endpoint && (!route.page || !state.prerendering && is_endpoint_request(event2))) {
3875
+ response2 = await render_endpoint(event2, event_state, await route.endpoint(), state);
3876
+ } else if (route.page) {
3877
+ if (!page_nodes2) {
3878
+ throw new Error("page_nodes not found. This should never happen");
3879
+ } else if (page_methods.has(method)) {
3880
+ response2 = await render_page(
3881
+ event2,
3882
+ event_state,
3883
+ route.page,
3884
+ options2,
3885
+ manifest,
3886
+ state,
3887
+ page_nodes2,
3888
+ resolve_opts
3889
+ );
3890
+ } else {
3891
+ const allowed_methods = new Set(allowed_page_methods);
3892
+ const node = await manifest._.nodes[route.page.leaf]();
3893
+ if (node?.server?.actions) {
3894
+ allowed_methods.add("POST");
3895
+ }
3896
+ if (method === "OPTIONS") {
3897
+ response2 = new Response(null, {
3898
+ status: 204,
3899
+ headers: {
3900
+ allow: Array.from(allowed_methods.values()).join(", ")
3901
+ }
3902
+ });
3903
+ } else {
3904
+ const mod = [...allowed_methods].reduce(
3905
+ (acc, curr) => {
3906
+ acc[curr] = true;
3907
+ return acc;
3908
+ },
3909
+ /** @type {Record<string, any>} */
3910
+ {}
3911
+ );
3912
+ response2 = method_not_allowed(mod, method);
3913
+ }
3914
+ }
3915
+ } else {
3916
+ throw new Error("Route is neither page nor endpoint. This should never happen");
3917
+ }
3918
+ if (request.method === "GET" && route.page && route.endpoint) {
3919
+ const vary = response2.headers.get("vary")?.split(",")?.map((v) => v.trim().toLowerCase());
3920
+ if (!(vary?.includes("accept") || vary?.includes("*"))) {
3921
+ response2 = new Response(response2.body, {
3922
+ status: response2.status,
3923
+ statusText: response2.statusText,
3924
+ headers: new Headers(response2.headers)
3925
+ });
3926
+ response2.headers.append("Vary", "Accept");
3927
+ }
3928
+ }
3929
+ return response2;
3930
+ }
3931
+ if (state.error && event2.isSubRequest) {
3932
+ const headers22 = new Headers(request.headers);
3933
+ headers22.set("x-sveltekit-error", "true");
3934
+ return await fetch(request, { headers: headers22 });
3935
+ }
3936
+ if (state.error) {
3937
+ return text("Internal Server Error", {
3938
+ status: 500
3939
+ });
3940
+ }
3941
+ if (state.depth === 0) {
3942
+ return await respond_with_error({
3943
+ event: event2,
3944
+ event_state,
3945
+ options: options2,
3946
+ manifest,
3947
+ state,
3948
+ status: 404,
3949
+ error: new SvelteKitError(404, "Not Found", `Not found: ${event2.url.pathname}`),
3950
+ resolve_opts
3951
+ });
3952
+ }
3953
+ if (state.prerendering) {
3954
+ return text("not found", { status: 404 });
3955
+ }
3956
+ const response = await fetch(request);
3957
+ return new Response(response.body, response);
3958
+ } catch (e) {
3959
+ return await handle_fatal_error(event2, event_state, options2, e);
3960
+ } finally {
3961
+ event2.cookies.set = () => {
3962
+ throw new Error("Cannot use `cookies.set(...)` after the response has been generated");
3963
+ };
3964
+ event2.setHeaders = () => {
3965
+ throw new Error("Cannot use `setHeaders(...)` after the response has been generated");
3966
+ };
3967
+ }
3968
+ }
3969
+ }
3970
+ function load_page_nodes(page, manifest) {
3971
+ return Promise.all([
3972
+ // we use == here rather than === because [undefined] serializes as "[null]"
3973
+ ...page.layouts.map((n) => n == void 0 ? n : manifest._.nodes[n]()),
3974
+ manifest._.nodes[page.leaf]()
3975
+ ]);
3976
+ }
3977
+ function propagate_context(fn) {
3978
+ return async (req, ...rest) => {
3979
+ {
3980
+ return fn(req, ...rest);
3981
+ }
3982
+ };
3983
+ }
3984
+ function filter_env(env, allowed, disallowed) {
3985
+ return Object.fromEntries(
3986
+ Object.entries(env).filter(
3987
+ ([k]) => k.startsWith(allowed) && (disallowed === "" || !k.startsWith(disallowed))
3988
+ )
3989
+ );
3990
+ }
3991
+ function set_app(value) {
3992
+ }
3993
+ let init_promise;
3994
+ let current = null;
3995
+ class Server {
3996
+ /** @type {import('types').SSROptions} */
3997
+ #options;
3998
+ /** @type {import('@sveltejs/kit').SSRManifest} */
3999
+ #manifest;
4000
+ /** @param {import('@sveltejs/kit').SSRManifest} manifest */
4001
+ constructor(manifest) {
4002
+ this.#options = options;
4003
+ this.#manifest = manifest;
4004
+ if (IN_WEBCONTAINER) {
4005
+ const respond2 = this.respond.bind(this);
4006
+ this.respond = async (...args) => {
4007
+ const { promise, resolve: resolve2 } = (
4008
+ /** @type {PromiseWithResolvers<void>} */
4009
+ with_resolvers()
4010
+ );
4011
+ const previous = current;
4012
+ current = promise;
4013
+ await previous;
4014
+ return respond2(...args).finally(resolve2);
4015
+ };
4016
+ }
4017
+ }
4018
+ /**
4019
+ * @param {import('@sveltejs/kit').ServerInitOptions} opts
4020
+ */
4021
+ async init({ env, read }) {
4022
+ const { env_public_prefix, env_private_prefix } = this.#options;
4023
+ set_private_env(filter_env(env, env_private_prefix, env_public_prefix));
4024
+ set_public_env(filter_env(env, env_public_prefix, env_private_prefix));
4025
+ if (read) {
4026
+ const wrapped_read = (file) => {
4027
+ const result = read(file);
4028
+ if (result instanceof ReadableStream) {
4029
+ return result;
4030
+ } else {
4031
+ return new ReadableStream({
4032
+ async start(controller) {
4033
+ try {
4034
+ const stream = await Promise.resolve(result);
4035
+ if (!stream) {
4036
+ controller.close();
4037
+ return;
4038
+ }
4039
+ const reader = stream.getReader();
4040
+ while (true) {
4041
+ const { done, value } = await reader.read();
4042
+ if (done) break;
4043
+ controller.enqueue(value);
4044
+ }
4045
+ controller.close();
4046
+ } catch (error2) {
4047
+ controller.error(error2);
4048
+ }
4049
+ }
4050
+ });
4051
+ }
4052
+ };
4053
+ set_read_implementation(wrapped_read);
4054
+ }
4055
+ await (init_promise ??= (async () => {
4056
+ try {
4057
+ const module = await get_hooks();
4058
+ this.#options.hooks = {
4059
+ handle: module.handle || (({ event, resolve: resolve2 }) => resolve2(event)),
4060
+ handleError: module.handleError || (({ status, error: error2, event }) => {
4061
+ const error_message = format_server_error(
4062
+ status,
4063
+ /** @type {Error} */
4064
+ error2,
4065
+ event
4066
+ );
4067
+ console.error(error_message);
4068
+ }),
4069
+ handleFetch: module.handleFetch || (({ request, fetch: fetch2 }) => fetch2(request)),
4070
+ handleValidationError: module.handleValidationError || (({ issues }) => {
4071
+ console.error("Remote function schema validation failed:", issues);
4072
+ return { message: "Bad Request" };
4073
+ }),
4074
+ reroute: module.reroute || noop,
4075
+ transport: module.transport || {}
4076
+ };
4077
+ set_app({
4078
+ decoders: module.transport ? Object.fromEntries(Object.entries(module.transport).map(([k, v]) => [k, v.decode])) : {}
4079
+ });
4080
+ if (module.init) {
4081
+ await module.init();
4082
+ }
4083
+ } catch (e) {
4084
+ {
4085
+ throw e;
4086
+ }
4087
+ }
4088
+ })());
4089
+ }
4090
+ /**
4091
+ * @param {Request} request
4092
+ * @param {import('types').RequestOptions} options
4093
+ */
4094
+ async respond(request, options2) {
4095
+ return respond(request, this.#options, this.#manifest, {
4096
+ ...options2,
4097
+ error: false,
4098
+ depth: 0
4099
+ });
4100
+ }
4101
+ }
4102
+
4103
+ export { Server as S };