@askrjs/askr 0.0.39 → 0.0.40

package/dist/router/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","names":[],"sources":["../../src/router/policy.ts"],"sourcesContent":["import type {\n  AccessDecision,\n  AccessDenyStatus,\n  AccessRedirectStatus,\n  RouteAuthOptions,\n  RouteContext,\n  RoutePolicy,\n} from '../common/router';\n\nconst ROUTE_AUTH_OPTIONS = Symbol.for('__ASKR_ROUTE_AUTH_OPTIONS__');\n\ntype InternalRouteContext = RouteContext & {\n  [ROUTE_AUTH_OPTIONS]?: RouteAuthOptions;\n};\n\ntype RoutePathResolver =\n  | string\n  | ((context: RouteContext) => string | Promise<string>);\n\nfunction isPromise<T>(value: T | Promise<T>): value is Promise<T> {\n  return value instanceof Promise;\n}\n\nexport function allow(): AccessDecision {\n  return { kind: 'allow' };\n}\n\nexport function redirect(\n  to: string,\n  init: {\n    status?: AccessRedirectStatus;\n    replace?: boolean;\n  } = {}\n): AccessDecision {\n  return {\n    kind: 'redirect',\n    to,\n    ...(init.status ? { status: init.status } : {}),\n    ...(init.replace !== undefined ? { replace: init.replace } : {}),\n  };\n}\n\nexport function deny(status: AccessDenyStatus): AccessDecision {\n  return { kind: 'deny', status };\n}\n\nexport function unauthorized(): AccessDecision {\n  return deny(401);\n}\n\nexport function forbidden(): AccessDecision {\n  return deny(403);\n}\n\nexport function notFound(): AccessDecision {\n  return deny(404);\n}\n\nexport function normalizeAccessDecision(\n  result: AccessDecision\n): AccessDecision {\n  return result;\n}\n\nexport function withRouteAuthOptions(\n  context: RouteContext,\n  auth: RouteAuthOptions | undefined\n): RouteContext {\n  const internal = context as InternalRouteContext;\n\n  if (!auth) {\n    delete internal[ROUTE_AUTH_OPTIONS];\n    return context;\n  }\n\n  internal[ROUTE_AUTH_OPTIONS] = auth;\n  return context;\n}\n\nfunction getRouteAuthOptions(\n  context: RouteContext\n): RouteAuthOptions | undefined {\n  return (context as InternalRouteContext)[ROUTE_AUTH_OPTIONS];\n}\n\nfunction assertRouteAuthOptions(context: RouteContext): RouteAuthOptions {\n  const auth = getRouteAuthOptions(context);\n  if (!auth?.resolve) {\n    throw new Error(\n      'Built-in auth policies require router auth configuration. ' +\n        'Provide `auth` to registerRoutes(...), createSPA(...), hydrateSPA(...), or SSR route resolution.'\n    );\n  }\n\n  return auth;\n}\n\nfunction resolvePathSetting(\n  value: RoutePathResolver | undefined,\n  fallback: string,\n  context: RouteContext\n): string | Promise<string> {\n  if (!value) {\n    return fallback;\n  }\n\n  if (typeof value === 'function') {\n    return value(context);\n  }\n\n  return value;\n}\n\nfunction appendNextTarget(path: string, href: string): string {\n  const resolved = new URL(path, 'http://localhost');\n  resolved.searchParams.set('next', href);\n  return `${resolved.pathname}${resolved.search}${resolved.hash}`;\n}\n\nfunction collectStringValues(value: unknown): string[] {\n  if (typeof value === 'string') {\n    return [value];\n  }\n\n  if (Array.isArray(value)) {\n    return value.filter((entry): entry is string => typeof entry === 'string');\n  }\n\n  if (value instanceof Set) {\n    return Array.from(value).filter(\n      (entry): entry is string => typeof entry === 'string'\n    );\n  }\n\n  return [];\n}\n\nfunction defaultHasRole(user: unknown, role: string): boolean {\n  if (!user || typeof user !== 'object') {\n    return false;\n  }\n\n  return collectStringValues((user as { roles?: unknown }).roles).includes(\n    role\n  );\n}\n\nfunction defaultHasPermission(user: unknown, permission: string): boolean {\n  if (!user || typeof user !== 'object') {\n    return false;\n  }\n\n  return collectStringValues(\n    (user as { permissions?: unknown }).permissions\n  ).includes(permission);\n}\n\nfunction resolveUnauthenticatedRedirect(\n  context: RouteContext\n): AccessDecision | Promise<AccessDecision> {\n  const auth = assertRouteAuthOptions(context);\n  const loginPath = resolvePathSetting(auth.loginPath, '/login', context);\n  if (isPromise(loginPath)) {\n    return loginPath.then((nextPath) =>\n      redirect(appendNextTarget(nextPath, context.href), {\n        replace: context.mode === 'spa',\n      })\n    );\n  }\n\n  return redirect(appendNextTarget(loginPath, context.href), {\n    replace: context.mode === 'spa',\n  });\n}\n\nfunction resolveAuthenticatedRedirect(\n  context: RouteContext\n): AccessDecision | Promise<AccessDecision> {\n  const auth = assertRouteAuthOptions(context);\n  const target = resolvePathSetting(auth.guestRedirectTo, '/', context);\n  if (isPromise(target)) {\n    return target.then((nextTarget) =>\n      redirect(nextTarget, {\n        replace: true,\n      })\n    );\n  }\n\n  return redirect(target, {\n    replace: true,\n  });\n}\n\nexport function requireAuth(): RoutePolicy {\n  return (context) => {\n    if (context.session) {\n      return allow();\n    }\n\n    return resolveUnauthenticatedRedirect(context);\n  };\n}\n\nexport function requireGuest(): RoutePolicy {\n  return (context) => {\n    if (!context.session) {\n      return allow();\n    }\n\n    return resolveAuthenticatedRedirect(context);\n  };\n}\n\nexport function requireRole(role: string): RoutePolicy {\n  return (context) => {\n    if (!context.user) {\n      return resolveUnauthenticatedRedirect(context);\n    }\n\n    const auth = assertRouteAuthOptions(context);\n    const hasRole = auth.hasRole\n      ? auth.hasRole(context.user, role, context)\n      : defaultHasRole(context.user, role);\n\n    if (isPromise(hasRole)) {\n      return hasRole.then((next) => (next ? allow() : forbidden()));\n    }\n\n    return hasRole ? allow() : forbidden();\n  };\n}\n\nexport function requirePermission(permission: string): RoutePolicy {\n  return (context) => {\n    if (!context.user) {\n      return resolveUnauthenticatedRedirect(context);\n    }\n\n    const auth = assertRouteAuthOptions(context);\n    const hasPermission = auth.hasPermission\n      ? auth.hasPermission(context.user, permission, context)\n      : defaultHasPermission(context.user, permission);\n\n    if (isPromise(hasPermission)) {\n      return hasPermission.then((next) => (next ? allow() : forbidden()));\n    }\n\n    return hasPermission ? allow() : forbidden();\n  };\n}\n\nexport async function evaluateRoutePolicy(\n  policy: RoutePolicy,\n  context: RouteContext\n): Promise<AccessDecision> {\n  const result = await policy(context);\n  return result;\n}\n"],"mappings":";AASA,MAAM,qBAAqB,OAAO,IAAI,8BAA8B;AAUpE,SAAS,UAAa,OAA4C;CAChE,OAAO,iBAAiB;;AAG1B,SAAgB,QAAwB;CACtC,OAAO,EAAE,MAAM,SAAS;;AAG1B,SAAgB,SACd,IACA,OAGI,EAAE,EACU;CAChB,OAAO;EACL,MAAM;EACN;EACA,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;EAC9C,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;EAChE;;AAGH,SAAgB,KAAK,QAA0C;CAC7D,OAAO;EAAE,MAAM;EAAQ;EAAQ;;AAGjC,SAAgB,eAA+B;CAC7C,OAAO,KAAK,IAAI;;AAGlB,SAAgB,YAA4B;CAC1C,OAAO,KAAK,IAAI;;AAGlB,SAAgB,WAA2B;CACzC,OAAO,KAAK,IAAI;;AASlB,SAAgB,qBACd,SACA,MACc;CACd,MAAM,WAAW;CAEjB,IAAI,CAAC,MAAM;EACT,OAAO,SAAS;EAChB,OAAO;;CAGT,SAAS,sBAAsB;CAC/B,OAAO;;AAGT,SAAS,oBACP,SAC8B;CAC9B,OAAQ,QAAiC;;AAG3C,SAAS,uBAAuB,SAAyC;CACvE,MAAM,OAAO,oBAAoB,QAAQ;CACzC,IAAI,CAAC,MAAM,SACT,MAAM,IAAI,MACR,6JAED;CAGH,OAAO;;AAGT,SAAS,mBACP,OACA,UACA,SAC0B;CAC1B,IAAI,CAAC,OACH,OAAO;CAGT,IAAI,OAAO,UAAU,YACnB,OAAO,MAAM,QAAQ;CAGvB,OAAO;;AAGT,SAAS,iBAAiB,MAAc,MAAsB;CAC5D,MAAM,WAAW,IAAI,IAAI,MAAM,mBAAmB;CAClD,SAAS,aAAa,IAAI,QAAQ,KAAK;CACvC,OAAO,GAAG,SAAS,WAAW,SAAS,SAAS,SAAS;;AAG3D,SAAS,oBAAoB,OAA0B;CACrD,IAAI,OAAO,UAAU,UACnB,OAAO,CAAC,MAAM;CAGhB,IAAI,MAAM,QAAQ,MAAM,EACtB,OAAO,MAAM,QAAQ,UAA2B,OAAO,UAAU,SAAS;CAG5E,IAAI,iBAAiB,KACnB,OAAO,MAAM,KAAK,MAAM,CAAC,QACtB,UAA2B,OAAO,UAAU,SAC9C;CAGH,OAAO,EAAE;;AAGX,SAAS,eAAe,MAAe,MAAuB;CAC5D,IAAI,CAAC,QAAQ,OAAO,SAAS,UAC3B,OAAO;CAGT,OAAO,oBAAqB,KAA6B,MAAM,CAAC,SAC9D,KACD;;AAGH,SAAS,qBAAqB,MAAe,YAA6B;CACxE,IAAI,CAAC,QAAQ,OAAO,SAAS,UAC3B,OAAO;CAGT,OAAO,oBACJ,KAAmC,YACrC,CAAC,SAAS,WAAW;;AAGxB,SAAS,+BACP,SAC0C;CAE1C,MAAM,YAAY,mBADL,uBAAuB,QACC,CAAK,WAAW,UAAU,QAAQ;CACvE,IAAI,UAAU,UAAU,EACtB,OAAO,UAAU,MAAM,aACrB,SAAS,iBAAiB,UAAU,QAAQ,KAAK,EAAE,EACjD,SAAS,QAAQ,SAAS,OAC3B,CAAC,CACH;CAGH,OAAO,SAAS,iBAAiB,WAAW,QAAQ,KAAK,EAAE,EACzD,SAAS,QAAQ,SAAS,OAC3B,CAAC;;AAGJ,SAAS,6BACP,SAC0C;CAE1C,MAAM,SAAS,mBADF,uBAAuB,QACF,CAAK,iBAAiB,KAAK,QAAQ;CACrE,IAAI,UAAU,OAAO,EACnB,OAAO,OAAO,MAAM,eAClB,SAAS,YAAY,EACnB,SAAS,MACV,CAAC,CACH;CAGH,OAAO,SAAS,QAAQ,EACtB,SAAS,MACV,CAAC;;AAGJ,SAAgB,cAA2B;CACzC,QAAQ,YAAY;EAClB,IAAI,QAAQ,SACV,OAAO,OAAO;EAGhB,OAAO,+BAA+B,QAAQ;;;AAIlD,SAAgB,eAA4B;CAC1C,QAAQ,YAAY;EAClB,IAAI,CAAC,QAAQ,SACX,OAAO,OAAO;EAGhB,OAAO,6BAA6B,QAAQ;;;AAIhD,SAAgB,YAAY,MAA2B;CACrD,QAAQ,YAAY;EAClB,IAAI,CAAC,QAAQ,MACX,OAAO,+BAA+B,QAAQ;EAGhD,MAAM,OAAO,uBAAuB,QAAQ;EAC5C,MAAM,UAAU,KAAK,UACjB,KAAK,QAAQ,QAAQ,MAAM,MAAM,QAAQ,GACzC,eAAe,QAAQ,MAAM,KAAK;EAEtC,IAAI,UAAU,QAAQ,EACpB,OAAO,QAAQ,MAAM,SAAU,OAAO,OAAO,GAAG,WAAW,CAAE;EAG/D,OAAO,UAAU,OAAO,GAAG,WAAW;;;AAI1C,SAAgB,kBAAkB,YAAiC;CACjE,QAAQ,YAAY;EAClB,IAAI,CAAC,QAAQ,MACX,OAAO,+BAA+B,QAAQ;EAGhD,MAAM,OAAO,uBAAuB,QAAQ;EAC5C,MAAM,gBAAgB,KAAK,gBACvB,KAAK,cAAc,QAAQ,MAAM,YAAY,QAAQ,GACrD,qBAAqB,QAAQ,MAAM,WAAW;EAElD,IAAI,UAAU,cAAc,EAC1B,OAAO,cAAc,MAAM,SAAU,OAAO,OAAO,GAAG,WAAW,CAAE;EAGrE,OAAO,gBAAgB,OAAO,GAAG,WAAW"}
+{"version":3,"file":"policy.js","names":[],"sources":["../../src/router/policy.ts"],"sourcesContent":["import type {\n  AccessDecision,\n  AccessAllowDecision,\n  AccessDenyDecision,\n  AccessDenyStatus,\n  AccessRedirectDecision,\n  AccessRedirectStatus,\n  RouteAuthOptions,\n  RouteContext,\n  RoutePolicy,\n} from '../common/router';\nimport { isPromiseLike } from '../common/promise';\n\nconst ROUTE_AUTH_OPTIONS = Symbol.for('__ASKR_ROUTE_AUTH_OPTIONS__');\n\ntype InternalRouteContext = RouteContext & {\n  [ROUTE_AUTH_OPTIONS]?: RouteAuthOptions;\n};\n\ntype RoutePathResolver =\n  | string\n  | ((context: RouteContext) => string | PromiseLike<string>);\n\nexport function allow(): AccessAllowDecision {\n  return { kind: 'allow' };\n}\n\nexport function redirect(\n  to: string,\n  init: {\n    status?: AccessRedirectStatus;\n    replace?: boolean;\n  } = {}\n): AccessRedirectDecision {\n  return {\n    kind: 'redirect',\n    to,\n    ...(init.status ? { status: init.status } : {}),\n    ...(init.replace !== undefined ? { replace: init.replace } : {}),\n  };\n}\n\nexport function deny(status: AccessDenyStatus): AccessDenyDecision {\n  return { kind: 'deny', status };\n}\n\nexport function unauthorized(): AccessDenyDecision {\n  return deny(401);\n}\n\nexport function forbidden(): AccessDenyDecision {\n  return deny(403);\n}\n\nexport function notFound(): AccessDenyDecision {\n  return deny(404);\n}\n\nexport function normalizeAccessDecision(\n  result: AccessDecision\n): AccessDecision {\n  return result;\n}\n\nexport function withRouteAuthOptions(\n  context: RouteContext,\n  auth: RouteAuthOptions | undefined\n): RouteContext {\n  const internal = context as InternalRouteContext;\n\n  if (!auth) {\n    delete internal[ROUTE_AUTH_OPTIONS];\n    return context;\n  }\n\n  internal[ROUTE_AUTH_OPTIONS] = auth;\n  return context;\n}\n\nfunction getRouteAuthOptions(\n  context: RouteContext\n): RouteAuthOptions | undefined {\n  return (context as InternalRouteContext)[ROUTE_AUTH_OPTIONS];\n}\n\nfunction assertRouteAuthOptions(context: RouteContext): RouteAuthOptions {\n  const auth = getRouteAuthOptions(context);\n  if (!auth?.resolve) {\n    throw new Error(\n      'Built-in auth policies require router auth configuration. ' +\n        'Provide `auth` to registerRoutes(...), createSPA(...), hydrateSPA(...), or SSR route resolution.'\n    );\n  }\n\n  return auth;\n}\n\nfunction resolvePathSetting(\n  value: RoutePathResolver | undefined,\n  fallback: string,\n  context: RouteContext\n): string | PromiseLike<string> {\n  if (!value) {\n    return fallback;\n  }\n\n  if (typeof value === 'function') {\n    return value(context);\n  }\n\n  return value;\n}\n\nfunction appendNextTarget(path: string, href: string): string {\n  const resolved = new URL(path, 'http://localhost');\n  resolved.searchParams.set('next', href);\n  return `${resolved.pathname}${resolved.search}${resolved.hash}`;\n}\n\nfunction collectStringValues(value: unknown): string[] {\n  if (typeof value === 'string') {\n    return [value];\n  }\n\n  if (Array.isArray(value)) {\n    return value.filter((entry): entry is string => typeof entry === 'string');\n  }\n\n  if (value instanceof Set) {\n    return Array.from(value).filter(\n      (entry): entry is string => typeof entry === 'string'\n    );\n  }\n\n  return [];\n}\n\nfunction defaultHasRole(user: unknown, role: string): boolean {\n  if (!user || typeof user !== 'object') {\n    return false;\n  }\n\n  return collectStringValues((user as { roles?: unknown }).roles).includes(\n    role\n  );\n}\n\nfunction defaultHasPermission(user: unknown, permission: string): boolean {\n  if (!user || typeof user !== 'object') {\n    return false;\n  }\n\n  return collectStringValues(\n    (user as { permissions?: unknown }).permissions\n  ).includes(permission);\n}\n\nfunction resolveUnauthenticatedRedirect(\n  context: RouteContext\n): AccessDecision | Promise<AccessDecision> {\n  const auth = assertRouteAuthOptions(context);\n  const loginPath = resolvePathSetting(auth.loginPath, '/login', context);\n  if (isPromiseLike<string>(loginPath)) {\n    return Promise.resolve(loginPath).then((nextPath) =>\n      redirect(appendNextTarget(nextPath, context.href), {\n        replace: context.mode === 'spa',\n      })\n    );\n  }\n\n  return redirect(appendNextTarget(loginPath, context.href), {\n    replace: context.mode === 'spa',\n  });\n}\n\nfunction resolveAuthenticatedRedirect(\n  context: RouteContext\n): AccessDecision | Promise<AccessDecision> {\n  const auth = assertRouteAuthOptions(context);\n  const target = resolvePathSetting(auth.guestRedirectTo, '/', context);\n  if (isPromiseLike<string>(target)) {\n    return Promise.resolve(target).then((nextTarget) =>\n      redirect(nextTarget, {\n        replace: true,\n      })\n    );\n  }\n\n  return redirect(target, {\n    replace: true,\n  });\n}\n\nexport function requireAuth(): RoutePolicy {\n  return (context) => {\n    if (context.session) {\n      return allow();\n    }\n\n    return resolveUnauthenticatedRedirect(context);\n  };\n}\n\nexport function requireGuest(): RoutePolicy {\n  return (context) => {\n    if (!context.session) {\n      return allow();\n    }\n\n    return resolveAuthenticatedRedirect(context);\n  };\n}\n\nexport function requireRole(role: string): RoutePolicy {\n  return (context) => {\n    if (!context.user) {\n      return resolveUnauthenticatedRedirect(context);\n    }\n\n    const auth = assertRouteAuthOptions(context);\n    const hasRole = auth.hasRole\n      ? auth.hasRole(context.user, role, context)\n      : defaultHasRole(context.user, role);\n\n    if (isPromiseLike<boolean>(hasRole)) {\n      return Promise.resolve(hasRole).then((next) =>\n        next ? allow() : forbidden()\n      );\n    }\n\n    return hasRole ? allow() : forbidden();\n  };\n}\n\nexport function requirePermission(permission: string): RoutePolicy {\n  return (context) => {\n    if (!context.user) {\n      return resolveUnauthenticatedRedirect(context);\n    }\n\n    const auth = assertRouteAuthOptions(context);\n    const hasPermission = auth.hasPermission\n      ? auth.hasPermission(context.user, permission, context)\n      : defaultHasPermission(context.user, permission);\n\n    if (isPromiseLike<boolean>(hasPermission)) {\n      return Promise.resolve(hasPermission).then((next) =>\n        next ? allow() : forbidden()\n      );\n    }\n\n    return hasPermission ? allow() : forbidden();\n  };\n}\n\nexport async function evaluateRoutePolicy(\n  policy: RoutePolicy,\n  context: RouteContext\n): Promise<AccessDecision> {\n  const result = await policy(context);\n  return result;\n}\n"],"mappings":";;AAaA,MAAM,qBAAqB,OAAO,IAAI,6BAA6B;AAUnE,SAAgB,QAA6B;CAC3C,OAAO,EAAE,MAAM,QAAQ;AACzB;AAEA,SAAgB,SACd,IACA,OAGI,CAAC,GACmB;CACxB,OAAO;EACL,MAAM;EACN;EACA,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;EAC7C,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;CAChE;AACF;AAEA,SAAgB,KAAK,QAA8C;CACjE,OAAO;EAAE,MAAM;EAAQ;CAAO;AAChC;AAEA,SAAgB,eAAmC;CACjD,OAAO,KAAK,GAAG;AACjB;AAEA,SAAgB,YAAgC;CAC9C,OAAO,KAAK,GAAG;AACjB;AAEA,SAAgB,WAA+B;CAC7C,OAAO,KAAK,GAAG;AACjB;AAQA,SAAgB,qBACd,SACA,MACc;CACd,MAAM,WAAW;CAEjB,IAAI,CAAC,MAAM;EACT,OAAO,SAAS;EAChB,OAAO;CACT;CAEA,SAAS,sBAAsB;CAC/B,OAAO;AACT;AAEA,SAAS,oBACP,SAC8B;CAC9B,OAAQ,QAAiC;AAC3C;AAEA,SAAS,uBAAuB,SAAyC;CACvE,MAAM,OAAO,oBAAoB,OAAO;CACxC,IAAI,CAAC,MAAM,SACT,MAAM,IAAI,MACR,4JAEF;CAGF,OAAO;AACT;AAEA,SAAS,mBACP,OACA,UACA,SAC8B;CAC9B,IAAI,CAAC,OACH,OAAO;CAGT,IAAI,OAAO,UAAU,YACnB,OAAO,MAAM,OAAO;CAGtB,OAAO;AACT;AAEA,SAAS,iBAAiB,MAAc,MAAsB;CAC5D,MAAM,WAAW,IAAI,IAAI,MAAM,kBAAkB;CACjD,SAAS,aAAa,IAAI,QAAQ,IAAI;CACtC,OAAO,GAAG,SAAS,WAAW,SAAS,SAAS,SAAS;AAC3D;AAEA,SAAS,oBAAoB,OAA0B;CACrD,IAAI,OAAO,UAAU,UACnB,OAAO,CAAC,KAAK;CAGf,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,QAAQ,UAA2B,OAAO,UAAU,QAAQ;CAG3E,IAAI,iBAAiB,KACnB,OAAO,MAAM,KAAK,KAAK,EAAE,QACtB,UAA2B,OAAO,UAAU,QAC/C;CAGF,OAAO,CAAC;AACV;AAEA,SAAS,eAAe,MAAe,MAAuB;CAC5D,IAAI,CAAC,QAAQ,OAAO,SAAS,UAC3B,OAAO;CAGT,OAAO,oBAAqB,KAA6B,KAAK,EAAE,SAC9D,IACF;AACF;AAEA,SAAS,qBAAqB,MAAe,YAA6B;CACxE,IAAI,CAAC,QAAQ,OAAO,SAAS,UAC3B,OAAO;CAGT,OAAO,oBACJ,KAAmC,WACtC,EAAE,SAAS,UAAU;AACvB;AAEA,SAAS,+BACP,SAC0C;CAE1C,MAAM,YAAY,mBADL,uBAAuB,OACC,EAAK,WAAW,UAAU,OAAO;CACtE,IAAI,cAAsB,SAAS,GACjC,OAAO,QAAQ,QAAQ,SAAS,EAAE,MAAM,aACtC,SAAS,iBAAiB,UAAU,QAAQ,IAAI,GAAG,EACjD,SAAS,QAAQ,SAAS,MAC5B,CAAC,CACH;CAGF,OAAO,SAAS,iBAAiB,WAAW,QAAQ,IAAI,GAAG,EACzD,SAAS,QAAQ,SAAS,MAC5B,CAAC;AACH;AAEA,SAAS,6BACP,SAC0C;CAE1C,MAAM,SAAS,mBADF,uBAAuB,OACF,EAAK,iBAAiB,KAAK,OAAO;CACpE,IAAI,cAAsB,MAAM,GAC9B,OAAO,QAAQ,QAAQ,MAAM,EAAE,MAAM,eACnC,SAAS,YAAY,EACnB,SAAS,KACX,CAAC,CACH;CAGF,OAAO,SAAS,QAAQ,EACtB,SAAS,KACX,CAAC;AACH;AAEA,SAAgB,cAA2B;CACzC,QAAQ,YAAY;EAClB,IAAI,QAAQ,SACV,OAAO,MAAM;EAGf,OAAO,+BAA+B,OAAO;CAC/C;AACF;AAEA,SAAgB,eAA4B;CAC1C,QAAQ,YAAY;EAClB,IAAI,CAAC,QAAQ,SACX,OAAO,MAAM;EAGf,OAAO,6BAA6B,OAAO;CAC7C;AACF;AAEA,SAAgB,YAAY,MAA2B;CACrD,QAAQ,YAAY;EAClB,IAAI,CAAC,QAAQ,MACX,OAAO,+BAA+B,OAAO;EAG/C,MAAM,OAAO,uBAAuB,OAAO;EAC3C,MAAM,UAAU,KAAK,UACjB,KAAK,QAAQ,QAAQ,MAAM,MAAM,OAAO,IACxC,eAAe,QAAQ,MAAM,IAAI;EAErC,IAAI,cAAuB,OAAO,GAChC,OAAO,QAAQ,QAAQ,OAAO,EAAE,MAAM,SACpC,OAAO,MAAM,IAAI,UAAU,CAC7B;EAGF,OAAO,UAAU,MAAM,IAAI,UAAU;CACvC;AACF;AAEA,SAAgB,kBAAkB,YAAiC;CACjE,QAAQ,YAAY;EAClB,IAAI,CAAC,QAAQ,MACX,OAAO,+BAA+B,OAAO;EAG/C,MAAM,OAAO,uBAAuB,OAAO;EAC3C,MAAM,gBAAgB,KAAK,gBACvB,KAAK,cAAc,QAAQ,MAAM,YAAY,OAAO,IACpD,qBAAqB,QAAQ,MAAM,UAAU;EAEjD,IAAI,cAAuB,aAAa,GACtC,OAAO,QAAQ,QAAQ,aAAa,EAAE,MAAM,SAC1C,OAAO,MAAM,IAAI,UAAU,CAC7B;EAGF,OAAO,gBAAgB,MAAM,IAAI,UAAU;CAC7C;AACF"}

package/dist/router/route-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-context.js","names":[],"sources":["../../src/router/route-context.ts"],"sourcesContent":["import { withRouteAuthOptions } from './policy';\n\nimport type {\n  RouteAuthOptions,\n  RouteContext,\n  RouteQuery,\n} from '../common/router';\n\nexport function parseLocation(url: string): {\n  pathname: string;\n  search: string;\n  hash: string;\n} {\n  try {\n    const parsedUrl = new URL(url, 'http://localhost');\n    return {\n      pathname: parsedUrl.pathname,\n      search: parsedUrl.search,\n      hash: parsedUrl.hash,\n    };\n  } catch {\n    return { pathname: '/', search: '', hash: '' };\n  }\n}\n\nexport function deepFreeze<T>(obj: T): T {\n  if (obj && typeof obj === 'object' && !Object.isFrozen(obj)) {\n    Object.freeze(obj as Record<string, unknown>);\n    for (const key of Object.keys(obj as Record<string, unknown>)) {\n      const value = (obj as Record<string, unknown>)[key];\n      if (value && typeof value === 'object') {\n        deepFreeze(value);\n      }\n    }\n  }\n\n  return obj;\n}\n\nexport function makeQuery(search: string): RouteQuery {\n  const searchParams = new URLSearchParams(search || '');\n  const mapping = new Map<string, string[]>();\n\n  for (const [key, value] of searchParams.entries()) {\n    const existing = mapping.get(key);\n    if (existing) {\n      existing.push(value);\n    } else {\n      mapping.set(key, [value]);\n    }\n  }\n\n  const query: RouteQuery = {\n    get(key: string) {\n      const values = mapping.get(key);\n      return values ? values[0] : null;\n    },\n    getAll(key: string) {\n      const values = mapping.get(key);\n      return values ? [...values] : [];\n    },\n    has(key: string) {\n      return mapping.has(key);\n    },\n    toJSON() {\n      const output: Record<string, string | string[]> = {};\n      for (const [key, values] of mapping.entries()) {\n        output[key] = values.length > 1 ? [...values] : values[0];\n      }\n      return output;\n    },\n  };\n\n  return deepFreeze(query);\n}\n\nexport function buildRouteContextBase(\n  target: string,\n  params: Record<string, string>,\n  options: {\n    mode: RouteContext['mode'];\n    signal: AbortSignal;\n  }\n): Omit<RouteContext, 'session' | 'user'> {\n  const parsed = parseLocation(target);\n  const href = `${parsed.pathname}${parsed.search}${parsed.hash}`;\n\n  return {\n    mode: options.mode,\n    params,\n    pathname: parsed.pathname,\n    search: parsed.search,\n    hash: parsed.hash,\n    href,\n    signal: options.signal,\n  };\n}\n\nexport function buildRouteContext(\n  target: string,\n  params: Record<string, string>,\n  options: {\n    mode: RouteContext['mode'];\n    signal: AbortSignal;\n    auth?: RouteAuthOptions;\n    session?: unknown;\n    user?: unknown;\n  }\n): RouteContext {\n  const context: RouteContext = {\n    ...buildRouteContextBase(target, params, options),\n    session: options.session ?? null,\n    user: options.user ?? null,\n  };\n\n  return withRouteAuthOptions(context, options.auth);\n}\n"],"mappings":";;AAQA,SAAgB,cAAc,KAI5B;CACA,IAAI;EACF,MAAM,YAAY,IAAI,IAAI,KAAK,mBAAmB;EAClD,OAAO;GACL,UAAU,UAAU;GACpB,QAAQ,UAAU;GAClB,MAAM,UAAU;GACjB;SACK;EACN,OAAO;GAAE,UAAU;GAAK,QAAQ;GAAI,MAAM;GAAI;;;AAIlD,SAAgB,WAAc,KAAW;CACvC,IAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,OAAO,SAAS,IAAI,EAAE;EAC3D,OAAO,OAAO,IAA+B;EAC7C,KAAK,MAAM,OAAO,OAAO,KAAK,IAA+B,EAAE;GAC7D,MAAM,QAAS,IAAgC;GAC/C,IAAI,SAAS,OAAO,UAAU,UAC5B,WAAW,MAAM;;;CAKvB,OAAO;;AAGT,SAAgB,UAAU,QAA4B;CACpD,MAAM,eAAe,IAAI,gBAAgB,UAAU,GAAG;CACtD,MAAM,0BAAU,IAAI,KAAuB;CAE3C,KAAK,MAAM,CAAC,KAAK,UAAU,aAAa,SAAS,EAAE;EACjD,MAAM,WAAW,QAAQ,IAAI,IAAI;EACjC,IAAI,UACF,SAAS,KAAK,MAAM;OAEpB,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;;CAyB7B,OAAO,WAAW;EApBhB,IAAI,KAAa;GACf,MAAM,SAAS,QAAQ,IAAI,IAAI;GAC/B,OAAO,SAAS,OAAO,KAAK;;EAE9B,OAAO,KAAa;GAClB,MAAM,SAAS,QAAQ,IAAI,IAAI;GAC/B,OAAO,SAAS,CAAC,GAAG,OAAO,GAAG,EAAE;;EAElC,IAAI,KAAa;GACf,OAAO,QAAQ,IAAI,IAAI;;EAEzB,SAAS;GACP,MAAM,SAA4C,EAAE;GACpD,KAAK,MAAM,CAAC,KAAK,WAAW,QAAQ,SAAS,EAC3C,OAAO,OAAO,OAAO,SAAS,IAAI,CAAC,GAAG,OAAO,GAAG,OAAO;GAEzD,OAAO;;EAIO,CAAM;;AAG1B,SAAgB,sBACd,QACA,QACA,SAIwC;CACxC,MAAM,SAAS,cAAc,OAAO;CACpC,MAAM,OAAO,GAAG,OAAO,WAAW,OAAO,SAAS,OAAO;CAEzD,OAAO;EACL,MAAM,QAAQ;EACd;EACA,UAAU,OAAO;EACjB,QAAQ,OAAO;EACf,MAAM,OAAO;EACb;EACA,QAAQ,QAAQ;EACjB;;AAGH,SAAgB,kBACd,QACA,QACA,SAOc;CAOd,OAAO,qBAAqB;EAL1B,GAAG,sBAAsB,QAAQ,QAAQ,QAAQ;EACjD,SAAS,QAAQ,WAAW;EAC5B,MAAM,QAAQ,QAAQ;EAGI,EAAS,QAAQ,KAAK"}
+{"version":3,"file":"route-context.js","names":[],"sources":["../../src/router/route-context.ts"],"sourcesContent":["import { withRouteAuthOptions } from './policy';\n\nimport type {\n  RouteAuthOptions,\n  RouteContext,\n  RouteQuery,\n} from '../common/router';\n\nexport function parseLocation(url: string): {\n  pathname: string;\n  search: string;\n  hash: string;\n} {\n  try {\n    const parsedUrl = new URL(url, 'http://localhost');\n    return {\n      pathname: parsedUrl.pathname,\n      search: parsedUrl.search,\n      hash: parsedUrl.hash,\n    };\n  } catch {\n    return { pathname: '/', search: '', hash: '' };\n  }\n}\n\nexport function deepFreeze<T>(obj: T): T {\n  if (obj && typeof obj === 'object' && !Object.isFrozen(obj)) {\n    Object.freeze(obj as Record<string, unknown>);\n    for (const key of Object.keys(obj as Record<string, unknown>)) {\n      const value = (obj as Record<string, unknown>)[key];\n      if (value && typeof value === 'object') {\n        deepFreeze(value);\n      }\n    }\n  }\n\n  return obj;\n}\n\nexport function makeQuery(search: string): RouteQuery {\n  const searchParams = new URLSearchParams(search || '');\n  const mapping = new Map<string, string[]>();\n\n  for (const [key, value] of searchParams.entries()) {\n    const existing = mapping.get(key);\n    if (existing) {\n      existing.push(value);\n    } else {\n      mapping.set(key, [value]);\n    }\n  }\n\n  const query: RouteQuery = {\n    get(key: string) {\n      const values = mapping.get(key);\n      return values ? values[0] : null;\n    },\n    getAll(key: string) {\n      const values = mapping.get(key);\n      return values ? [...values] : [];\n    },\n    has(key: string) {\n      return mapping.has(key);\n    },\n    toJSON() {\n      const output: Record<string, string | string[]> = {};\n      for (const [key, values] of mapping.entries()) {\n        output[key] = values.length > 1 ? [...values] : values[0];\n      }\n      return output;\n    },\n  };\n\n  return deepFreeze(query);\n}\n\nexport function buildRouteContextBase(\n  target: string,\n  params: Record<string, string>,\n  options: {\n    mode: RouteContext['mode'];\n    signal: AbortSignal;\n  }\n): Omit<RouteContext, 'session' | 'user'> {\n  const parsed = parseLocation(target);\n  const href = `${parsed.pathname}${parsed.search}${parsed.hash}`;\n\n  return {\n    mode: options.mode,\n    params,\n    pathname: parsed.pathname,\n    search: parsed.search,\n    hash: parsed.hash,\n    href,\n    signal: options.signal,\n  };\n}\n\nexport function buildRouteContext(\n  target: string,\n  params: Record<string, string>,\n  options: {\n    mode: RouteContext['mode'];\n    signal: AbortSignal;\n    auth?: RouteAuthOptions;\n    session?: unknown;\n    user?: unknown;\n  }\n): RouteContext {\n  const context: RouteContext = {\n    ...buildRouteContextBase(target, params, options),\n    session: options.session ?? null,\n    user: options.user ?? null,\n  };\n\n  return withRouteAuthOptions(context, options.auth);\n}\n"],"mappings":";;AAQA,SAAgB,cAAc,KAI5B;CACA,IAAI;EACF,MAAM,YAAY,IAAI,IAAI,KAAK,kBAAkB;EACjD,OAAO;GACL,UAAU,UAAU;GACpB,QAAQ,UAAU;GAClB,MAAM,UAAU;EAClB;CACF,QAAQ;EACN,OAAO;GAAE,UAAU;GAAK,QAAQ;GAAI,MAAM;EAAG;CAC/C;AACF;AAEA,SAAgB,WAAc,KAAW;CACvC,IAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,OAAO,SAAS,GAAG,GAAG;EAC3D,OAAO,OAAO,GAA8B;EAC5C,KAAK,MAAM,OAAO,OAAO,KAAK,GAA8B,GAAG;GAC7D,MAAM,QAAS,IAAgC;GAC/C,IAAI,SAAS,OAAO,UAAU,UAC5B,WAAW,KAAK;EAEpB;CACF;CAEA,OAAO;AACT;AAEA,SAAgB,UAAU,QAA4B;CACpD,MAAM,eAAe,IAAI,gBAAgB,UAAU,EAAE;CACrD,MAAM,0BAAU,IAAI,IAAsB;CAE1C,KAAK,MAAM,CAAC,KAAK,UAAU,aAAa,QAAQ,GAAG;EACjD,MAAM,WAAW,QAAQ,IAAI,GAAG;EAChC,IAAI,UACF,SAAS,KAAK,KAAK;OAEnB,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC;CAE5B;CAuBA,OAAO,WAAW;EApBhB,IAAI,KAAa;GACf,MAAM,SAAS,QAAQ,IAAI,GAAG;GAC9B,OAAO,SAAS,OAAO,KAAK;EAC9B;EACA,OAAO,KAAa;GAClB,MAAM,SAAS,QAAQ,IAAI,GAAG;GAC9B,OAAO,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC;EACjC;EACA,IAAI,KAAa;GACf,OAAO,QAAQ,IAAI,GAAG;EACxB;EACA,SAAS;GACP,MAAM,SAA4C,CAAC;GACnD,KAAK,MAAM,CAAC,KAAK,WAAW,QAAQ,QAAQ,GAC1C,OAAO,OAAO,OAAO,SAAS,IAAI,CAAC,GAAG,MAAM,IAAI,OAAO;GAEzD,OAAO;EACT;CAGgB,CAAK;AACzB;AAEA,SAAgB,sBACd,QACA,QACA,SAIwC;CACxC,MAAM,SAAS,cAAc,MAAM;CACnC,MAAM,OAAO,GAAG,OAAO,WAAW,OAAO,SAAS,OAAO;CAEzD,OAAO;EACL,MAAM,QAAQ;EACd;EACA,UAAU,OAAO;EACjB,QAAQ,OAAO;EACf,MAAM,OAAO;EACb;EACA,QAAQ,QAAQ;CAClB;AACF;AAEA,SAAgB,kBACd,QACA,QACA,SAOc;CAOd,OAAO,qBAAqB;EAL1B,GAAG,sBAAsB,QAAQ,QAAQ,OAAO;EAChD,SAAS,QAAQ,WAAW;EAC5B,MAAM,QAAQ,QAAQ;CAGI,GAAS,QAAQ,IAAI;AACnD"}

package/dist/router/route.d.ts

@@ -1,6 +1,14 @@
-import { AccessDecision, AccessDenyDecision, AccessRedirectDecision, GroupHelperOptions, LayoutScopeRecord, PageHelperOptions, PageScopeRecord, ParsedSegment, RegisterRoutesOptions, ResolvedRoute, Route, RouteAuthOptions, RouteComponent, RouteContext, RouteDefinition, RouteHandler, RouteManifest, RouteMatch, RouteOptions, RoutePolicy, RouteQuery, RouteRecord, RouteRenderResult, RouteRequestOptions, RouteRequestResult, RouteSnapshot } from "../common/router.js";
+import { JSXElement } from "../common/jsx.js";
+import { RenderableChild } from "../common/vnode.js";
+import { AccessDecision, AccessDenyDecision, AccessRedirectDecision, GroupHelperOptions, LayoutScopeRecord, PageHelperOptions, PageScopeRecord, ParsedSegment, RegisterRoutesOptions, ResolvedRoute, Route, RouteAuthOptions, RouteComponent, RouteContext, RouteDefinition, RouteHandler, RouteManifest, RouteMatch, RouteOptions, RouteParams, RoutePathParams, RoutePolicy, RouteQuery, RouteRecord, RouteRenderResult, RouteRequestOptions, RouteRequestResult, RouteSnapshot } from "../common/router.js";
 
 //#region src/router/route.d.ts
+type AnyRouteComponent = (...args: any[]) => RenderableChild;
+type RouteComponentParam<TComponent extends AnyRouteComponent> = Parameters<TComponent> extends [] ? unknown : Parameters<TComponent>[0];
+type CompatibleAbsoluteRouteComponent<Path extends string, TComponent extends AnyRouteComponent> = Parameters<TComponent> extends [] ? TComponent : RoutePathParams<Path> extends RouteComponentParam<TComponent> ? TComponent : never;
+type CompatibleRelativeRouteComponent<Path extends string, TComponent extends AnyRouteComponent> = Parameters<TComponent> extends [] ? TComponent : RouteComponentParam<TComponent> extends Record<keyof RoutePathParams<Path>, string> ? TComponent : never;
+type CompatibleRouteComponent<Path extends string, TComponent extends AnyRouteComponent> = Path extends `/${string}` ? CompatibleAbsoluteRouteComponent<Path, TComponent> : CompatibleRelativeRouteComponent<Path, TComponent>;
+type RouteOptionsForComponent<Path extends string, TComponent extends AnyRouteComponent> = Parameters<TComponent> extends [] ? RouteOptions<RoutePathParams<Path>> : RouteComponentParam<TComponent> extends RouteParams ? RouteOptions<RouteComponentParam<TComponent>> : RouteOptions<RoutePathParams<Path>>;
 declare function setServerLocation(url: string | null): void;
 declare function _setActiveRouteAuthOptions(auth: RouteAuthOptions | undefined): void;
 /**
@@ -10,7 +18,7 @@ declare function _setActiveRouteAuthOptions(auth: RouteAuthOptions | undefined):
 declare function lockRouteRegistration(): void;
 declare function _lockRouteRegistrationForTests(): void;
 declare function _unlockRouteRegistrationForTests(): void;
-declare function Outlet(): unknown;
+declare function Outlet(): JSXElement;
 /**
  * Snapshot the current in-flight lazy() imports.
  * Boot uses this before clearing route state so manifest-based startup can
@@ -38,21 +46,23 @@ declare function _snapshotLazy(): Promise<unknown>[];
  * export default function DashboardPage() { … }
  * ```
  */
-declare function lazy(factory: () => Promise<{
-  default: RouteComponent;
-} | RouteComponent>): RouteComponent;
+declare function lazy<TComponent extends AnyRouteComponent>(factory: () => Promise<{
+  default: TComponent;
+} | TComponent>): TComponent;
 /**
  * Wait for all pending `lazy()` imports to settle.
  * Called automatically by `createSPA` / `hydrateSPA` before mounting.
  */
 declare function _drainLazy(additionalPending?: Iterable<Promise<unknown>>): Promise<void>;
 declare function group(options: GroupHelperOptions, fn: RouteDefinition): void;
-declare function page(path: string, Component: RouteComponent, fn: RouteDefinition): void;
-declare function page(path: string, Component: RouteComponent, options: PageHelperOptions, fn: RouteDefinition): void;
+declare function page<const TPath extends string>(path: TPath, Component: RouteComponent<RoutePathParams<TPath>>, fn: RouteDefinition): void;
+declare function page<const TPath extends string, TComponent extends AnyRouteComponent>(path: TPath, Component: CompatibleRouteComponent<TPath, TComponent>, fn: RouteDefinition): void;
+declare function page<const TPath extends string>(path: TPath, Component: RouteComponent<RoutePathParams<TPath>>, options: PageHelperOptions, fn: RouteDefinition): void;
+declare function page<const TPath extends string, TComponent extends AnyRouteComponent>(path: TPath, Component: CompatibleRouteComponent<TPath, TComponent>, options: PageHelperOptions, fn: RouteDefinition): void;
 declare function index(Component: RouteComponent, options?: RouteOptions): void;
 declare function fallback(Component: RouteComponent): void;
 declare function registerRoutes(definition: RouteDefinition, options?: RegisterRoutesOptions): void;
-declare function currentRoute(): RouteSnapshot;
+declare function currentRoute<TParams extends RouteParams = RouteParams>(): RouteSnapshot<TParams>;
 declare function syncCurrentRouteSnapshot(pathname: string, search: string, hash: string): void;
 /**
  * Register a route.
@@ -66,7 +76,8 @@ declare function syncCurrentRouteSnapshot(pathname: string, search: string, hash
  * });
  * ```
  */
-declare function route(path: string, Component: RouteComponent, options?: RouteOptions): void;
+declare function route<const TPath extends string>(path: TPath, Component: RouteComponent<RoutePathParams<TPath>>, options?: RouteOptions<RoutePathParams<TPath>>): void;
+declare function route<const TPath extends string, TComponent extends AnyRouteComponent>(path: TPath, Component: CompatibleRouteComponent<TPath, TComponent>, options?: RouteOptionsForComponent<TPath, TComponent>): void;
 /**
  * Return the normalized route manifest built from registered route definitions.
  *

package/dist/router/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","names":[],"sources":["../../src/router/route.ts"],"mappings":";;;iBAgOgB,iBAAA,CAAkB,GAAA;AAAA,iBA8MlB,0BAAA,CACd,IAAA,EAAM,gBAAA;AAuFR;;;;AAAA,iBAJgB,qBAAA,CAAA;AAAA,iBAIA,8BAAA,CAAA;AAAA,iBAIA,gCAAA,CAAA;AAAA,iBAmIA,MAAA,CAAA;;;AAAhB;;;iBASgB,aAAA,CAAA,GAAiB,OAAA;;AAAjC;;;;;AAyBA;;;;;;;;;;;;;;;iBAAgB,IAAA,CACd,OAAA,QAAe,OAAA;EAAU,OAAA,EAAS,cAAA;AAAA,IAAmB,cAAA,IACpD,cAAA;;;;;iBAmCa,UAAA,CACd,iBAAA,GAAmB,QAAA,CAAS,OAAA,aAC3B,OAAA;AAAA,iBASa,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,EAAA,EAAI,eAAA;AAAA,iBAKvC,IAAA,CACd,IAAA,UACA,SAAA,EAAW,cAAA,EACX,EAAA,EAAI,eAAA;AAAA,iBAEU,IAAA,CACd,IAAA,UACA,SAAA,EAAW,cAAA,EACX,OAAA,EAAS,iBAAA,EACT,EAAA,EAAI,eAAA;AAAA,iBA2BU,KAAA,CAAM,SAAA,EAAW,cAAA,EAAgB,OAAA,GAAU,YAAA;AAAA,iBAI3C,QAAA,CAAS,SAAA,EAAW,cAAA;AAAA,iBAkUpB,cAAA,CACd,UAAA,EAAY,eAAA,EACZ,OAAA,GAAS,qBAAA;AAAA,iBAoEK,YAAA,CAAA,GAAgB,aAAA;AAAA,iBAiBhB,wBAAA,CACd,QAAA,UACA,MAAA,UACA,IAAA;AAzcF;;;;;;;;;;AAKA;;AALA,iBA0dgB,KAAA,CACd,IAAA,UACA,SAAA,EAAW,cAAA,EACX,OAAA,GAAU,YAAA;;;;;;;;;AAndZ;;;iBAohBgB,WAAA,CAAA,GAAe,aAAA;;;;;iBAWf,cAAA,CAAe,QAAA,EAAU,aAAA;;;;;iBA0BzB,SAAA,CAAA,GAAa,KAAA;;iBAKb,kBAAA,CAAmB,SAAA,WAAoB,KAAA;;iBAKvC,eAAA,CAAgB,SAAA;;iBA6BhB,WAAA,CAAA;;;;iBAiBA,mBAAA,CAAA;;;;AA9kBhB;;;;;iBAynBgB,YAAA,CAAa,QAAA,WAAmB,aAAA;AAAA,iBAuHhC,mBAAA,CACd,MAAA,UACA,OAAA,GAAS,mBAAA,GACR,kBAAA,GAAqB,OAAA,CAAQ,kBAAA;;;;;;;;;AA3WhC;;;;;AAiBA;iBA8ZgB,sBAAA,CACd,QAAA,UACA,SAAA,WAAoB,KAAA,KACnB,aAAA"}
+{"version":3,"file":"route.d.ts","names":[],"sources":["../../src/router/route.ts"],"mappings":";;;;;KA2GK,iBAAA,OAAwB,IAAA,YAAgB,eAAe;AAAA,KAEvD,mBAAA,oBAAuC,iBAAA,IAC1C,UAAA,CAAW,UAAA,yBAAmC,UAAA,CAAW,UAAA;AAAA,KAEtD,gCAAA,yCAEgB,iBAAA,IAEnB,UAAA,CAAW,UAAA,eACP,UAAA,GACA,eAAA,CAAgB,IAAA,UAAc,mBAAA,CAAoB,UAAA,IAChD,UAAA;AAAA,KAGH,gCAAA,yCAEgB,iBAAA,IAEnB,UAAA,CAAW,UAAA,eACP,UAAA,GACA,mBAAA,CAAoB,UAAA,UAAoB,MAAA,OAC9B,eAAA,CAAgB,IAAA,aAGxB,UAAA;AAAA,KAGH,wBAAA,yCAEgB,iBAAA,IACjB,IAAA,wBACA,gCAAA,CAAiC,IAAA,EAAM,UAAA,IACvC,gCAAA,CAAiC,IAAA,EAAM,UAAA;AAAA,KAEtC,wBAAA,yCAEgB,iBAAA,IAEnB,UAAA,CAAW,UAAA,eACP,YAAA,CAAa,eAAA,CAAgB,IAAA,KAC7B,mBAAA,CAAoB,UAAA,UAAoB,WAAA,GACtC,YAAA,CAAa,mBAAA,CAAoB,UAAA,KACjC,YAAA,CAAa,eAAA,CAAgB,IAAA;AAAA,iBAsIrB,iBAAA,CAAkB,GAAkB;AAAA,iBAuMpC,0BAAA,CACd,IAAkC,EAA5B,gBAAgB;;AAtX6C;AAAA;;iBAodrD,qBAAA,CAAA;AAAA,iBAIA,8BAAA,CAAA;AAAA,iBAIA,gCAAA,CAAA;AAAA,iBA0KA,MAAA,CAAA,GAAU,UAAU;;;;;;iBAcpB,aAAA,CAAA,GAAiB,OAAO;;;;;;;;;;;;;;;AA3oBtB;AAAA;;;;;;iBAoqBF,IAAA,oBAAwB,iBAAA,CAAA,CACtC,OAAA,QAAe,OAAA;EAAU,OAAA,EAAS,UAAA;AAAA,IAAe,UAAA,IAChD,UAAA;;;;;iBAmCa,UAAA,CACd,iBAAA,GAAmB,QAAA,CAAS,OAAA,aAC3B,OAAA;AAAA,iBASa,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,EAAA,EAAI,eAAe;AAAA,iBAKtD,IAAA,4BAAA,CACd,IAAA,EAAM,KAAA,EACN,SAAA,EAAW,cAAA,CAAe,eAAA,CAAgB,KAAA,IAC1C,EAAA,EAAI,eAAA;AAAA,iBAEU,IAAA,gDAEK,iBAAA,CAAA,CAEnB,IAAA,EAAM,KAAA,EACN,SAAA,EAAW,wBAAA,CAAyB,KAAA,EAAO,UAAA,GAC3C,EAAA,EAAI,eAAA;AAAA,iBAEU,IAAA,4BAAA,CACd,IAAA,EAAM,KAAA,EACN,SAAA,EAAW,cAAA,CAAe,eAAA,CAAgB,KAAA,IAC1C,OAAA,EAAS,iBAAA,EACT,EAAA,EAAI,eAAA;AAAA,iBAEU,IAAA,gDAEK,iBAAA,CAAA,CAEnB,IAAA,EAAM,KAAA,EACN,SAAA,EAAW,wBAAA,CAAyB,KAAA,EAAO,UAAA,GAC3C,OAAA,EAAS,iBAAA,EACT,EAAA,EAAI,eAAA;AAAA,iBA2BU,KAAA,CAAM,SAAA,EAAW,cAAA,EAAgB,OAAA,GAAU,YAAY;AAAA,iBAavD,QAAA,CAAS,SAAyB,EAAd,cAAc;AAAA,iBAgXlC,cAAA,CACd,UAAA,EAAY,eAAA,EACZ,OAAA,GAAS,qBAA0B;AAAA,iBAsErB,YAAA,iBACE,WAAA,GAAc,WAAA,CAAA,CAAA,GAC3B,aAAA,CAAc,OAAA;AAAA,iBAiBH,wBAAA,CACd,QAAA,UACA,MAAA,UACA,IAAA;;;;;AA5tCgB;AAAA;;;;;;;iBA6uCF,KAAA,4BAAA,CACd,IAAA,EAAM,KAAA,EACN,SAAA,EAAW,cAAA,CAAe,eAAA,CAAgB,KAAA,IAC1C,OAAA,GAAU,YAAA,CAAa,eAAA,CAAgB,KAAA;AAAA,iBAEzB,KAAA,gDAEK,iBAAA,CAAA,CAEnB,IAAA,EAAM,KAAA,EACN,SAAA,EAAW,wBAAA,CAAyB,KAAA,EAAO,UAAA,GAC3C,OAAA,GAAU,wBAAA,CAAyB,KAAA,EAAO,UAAA;;;;;;;;;;;;iBAiE5B,WAAA,CAAA,GAAe,aAAa;;;;AAjzCS;iBA4zCrC,cAAA,CAAe,QAAuB,EAAb,aAAa;;;;;iBA0BtC,SAAA,CAAA,GAAa,KAAK;;iBAKlB,kBAAA,CAAmB,SAAA,WAAoB,KAAK;;iBAK5C,eAAA,CAAgB,SAAiB;;iBA6BjC,WAAA,CAAA;;;;iBAiBA,mBAAA,CAAA;;;;;;;;;iBA2CA,YAAA,CAAa,QAAA,WAAmB,aAAa;AAAA,iBAwJ7C,mBAAA,CACd,MAAA,UACA,OAAA,GAAS,mBAAA,GACR,kBAAA,GAAqB,OAAA,CAAQ,kBAAA;;;;;;;;;;;;;AA1kDS;AAsIzC;iBAwgDgB,sBAAA,CACd,QAAA,UACA,SAAA,WAAoB,KAAA,KACnB,aAAa"}

package/dist/router/route.js

@@ -1,7 +1,10 @@
+import { ELEMENT_TYPE, Fragment } from "../common/jsx.js";
 import { defineContext, readContext } from "../runtime/context.js";
 import { markReactivePropsDirtySource, markReadableDerivedSubscribersDirty, notifyReadableReaders, recordReadableRead } from "../runtime/readable.js";
+import { isPromiseLike } from "../common/promise.js";
 import { getCurrentComponentInstance } from "../runtime/component.js";
-import { computeRank, matchSegments, parseSegments } from "./match.js";
+import { ROUTE_ROOT_COMPONENT } from "../common/router-internal.js";
+import { computeRank, matchSegments, parseSegments, splitPathSegments } from "./match.js";
 import { requireAuth, requireGuest, requirePermission, requireRole } from "./policy.js";
 import { buildRouteContext, buildRouteContextBase, deepFreeze, makeQuery, parseLocation } from "./route-context.js";
 import { getExecutionModel } from "../runtime/execution-model.js";
@@ -84,9 +87,6 @@ let serverLocation = null;
 function setServerLocation(url) {
 	serverLocation = url;
 }
-function isPromise(value) {
-	return value instanceof Promise;
-}
 function buildRouteSnapshot(pathname, search, hash) {
 	const query = makeQuery(search);
 	const matches = computeMatchesFromRoutes(pathname, getActiveRoutes());
@@ -109,12 +109,11 @@ function matchFallbackPrefix(pathname, fallbackPrefix) {
 	const normalizedPath = pathname.endsWith("/") && pathname !== "/" ? pathname.slice(0, -1) : pathname;
 	const normalizedPrefix = fallbackPrefix.endsWith("/") && fallbackPrefix !== "/" ? fallbackPrefix.slice(0, -1) : fallbackPrefix;
 	if (normalizedPrefix === "/") {
-		const urlParts = normalizedPath === "/" ? [] : normalizedPath.split("/").filter(Boolean);
+		const urlParts = splitPathSegments(normalizedPath);
 		return { "*": urlParts.length === 0 ? "/" : urlParts.length === 1 ? urlParts[0] : "/" + urlParts.join("/") };
 	}
 	if (normalizedPath !== normalizedPrefix && !normalizedPath.startsWith(`${normalizedPrefix}/`)) return null;
-	const remainder = normalizedPath === normalizedPrefix ? "/" : normalizedPath.slice(normalizedPrefix.length + 1);
-	const remainderParts = remainder === "/" ? [] : remainder.split("/").filter(Boolean);
+	const remainderParts = splitPathSegments(normalizedPath === normalizedPrefix ? "/" : normalizedPath.slice(normalizedPrefix.length));
 	return { "*": remainderParts.length === 0 ? "/" : remainderParts.length === 1 ? remainderParts[0] : "/" + remainderParts.join("/") };
 }
 function computeMatchesFromRoutes(pathname, routesList) {
@@ -129,7 +128,7 @@ function computeMatchesFromRoutes(pathname, routesList) {
 }
 function findBestResolvedRouteFromRoutes(pathname, routeList) {
 	const normalized = pathname.endsWith("/") && pathname !== "/" ? pathname.slice(0, -1) : pathname;
-	const urlParts = normalized === "/" ? [] : normalized.split("/").filter(Boolean);
+	const urlParts = splitPathSegments(normalized);
 	const sorted = cachedSortedList(routeList);
 	let bestRoute = null;
 	let bestParams = {};
@@ -201,6 +200,13 @@ function getCurrentPageChain() {
 function hasActivePageScope() {
 	return registrationScopeStack.some((scope) => !!scope.page);
 }
+function getCurrentPageScope() {
+	for (let index = registrationScopeStack.length - 1; index >= 0; index -= 1) {
+		const scope = registrationScopeStack[index];
+		if (scope.kind === "page") return scope;
+	}
+	return null;
+}
 function getCurrentScopeKind() {
 	return registrationScopeStack[registrationScopeStack.length - 1]?.kind ?? null;
 }
@@ -221,10 +227,24 @@ function lockRouteRegistration() {
 }
 function validateRoutePath(path) {
 	if (!path.startsWith("/")) throw new Error(`Route path must begin with "/". Got: "${path}"`);
+	if (/\/{2,}/.test(path)) throw new Error("Route path cannot contain consecutive slashes.");
 	if (/:([^/{}]+)/.test(path)) {
 		const suggested = path.replace(/:([^/{}]+)/g, "{$1}");
 		throw new Error(`Route parameter syntax uses {name} interpolation, not :name. Use "${suggested}" instead of "${path}".`);
 	}
+	const segments = path.split("/").filter(Boolean);
+	const seenParamNames = /* @__PURE__ */ new Set();
+	for (const segment of segments) {
+		if (segment === "*") continue;
+		const hasOpenBrace = segment.includes("{");
+		const hasCloseBrace = segment.includes("}");
+		if (!hasOpenBrace && !hasCloseBrace) continue;
+		if (!(segment.startsWith("{") && segment.endsWith("}"))) throw new Error("Route parameter segments must use complete {name} interpolation.");
+		const paramName = segment.slice(1, -1).trim();
+		if (!paramName) throw new Error("Route parameter name cannot be empty.");
+		if (seenParamNames.has(paramName)) throw new Error(`Route path cannot reuse duplicate parameter name "${paramName}".`);
+		seenParamNames.add(paramName);
+	}
 }
 function normalizeAbsoluteRoutePath(path) {
 	if (!path || path === "/") return "/";
@@ -283,7 +303,12 @@ function addRouteToStores(routeObj) {
 const pendingLazy = /* @__PURE__ */ new Set();
 const outletContext = defineContext(null);
 function Outlet() {
-	return readContext(outletContext);
+	return {
+		$$typeof: ELEMENT_TYPE,
+		type: Fragment,
+		props: { children: readContext(outletContext) },
+		key: null
+	};
 }
 /**
 * Snapshot the current in-flight lazy() imports.
@@ -325,11 +350,11 @@ function lazy(factory) {
 		pendingLazy.delete(promise);
 	});
 	pendingLazy.add(promise);
-	return (params) => {
+	return ((params) => {
 		if (loadError) throw loadError;
 		if (!resolved) throw new Error("lazy() component used before it was resolved. Await createSPA() / hydrateSPA() to ensure all chunks load first.");
 		return resolved(params);
-	};
+	});
 }
 /**
 * Wait for all pending `lazy()` imports to settle.
@@ -351,6 +376,9 @@ function page(path, Component, optionsOrFn, maybeFn) {
 	pushPageScope(path, Component, options, fn);
 }
 function index(Component, options) {
+	const pageScope = getCurrentPageScope();
+	if (pageScope?.hasIndex) throw new Error("page() cannot declare multiple index routes.");
+	if (pageScope) pageScope.hasIndex = true;
 	registerRouteAtResolvedPath(resolveIndexPath(), Component, options);
 }
 function fallback(Component) {
@@ -401,6 +429,7 @@ function pushPageScope(path, Component, options, fn) {
 		kind: "page",
 		pathPrefix: resolvePageScopePath(path),
 		page: Component,
+		hasIndex: false,
 		policies,
 		state: nextAccessScopeState(options, getCurrentAccessScopeState())
 	}, fn);
@@ -451,15 +480,36 @@ function normalizeRouteOptions(options) {
 		...options.namespace ? { namespace: options.namespace } : {}
 	};
 }
-function applyPageChain(pageChain, params, content) {
+function applyPageChain(pageChain, params, content, deferComponents = false) {
 	let nextContent = content;
 	for (let i = pageChain.length - 1; i >= 0; i--) nextContent = outletContext.Scope({
 		value: nextContent,
-		children: pageChain[i].component(params)
+		children: deferComponents ? createRouteComponentVNode(pageChain[i].component, params) : pageChain[i].component(params)
 	});
 	return nextContent;
 }
+function createRouteComponentVNode(component, params, routeRoot = false) {
+	return {
+		$$typeof: ELEMENT_TYPE,
+		type: component,
+		props: params,
+		key: null,
+		...routeRoot ? { [ROUTE_ROOT_COMPONENT]: true } : {}
+	};
+}
+function createRouteHandler(component, pageChain, layoutChain, deferComponents = false) {
+	return (params) => {
+		let content = deferComponents ? createRouteComponentVNode(component, params, true) : component(params);
+		content = applyPageChain(pageChain, params, content, deferComponents);
+		for (let i = layoutChain.length - 1; i >= 0; i--) content = layoutChain[i].component({ children: content });
+		return content;
+	};
+}
+function getRenderHandler(record) {
+	return record.renderHandler ?? createRouteHandler(record.component, record.pageChain, record.layoutChain, true);
+}
 function registerRouteAtResolvedPath(path, Component, options, metadata) {
+	validateRoutePath(path);
 	validateAccessMetadata(options ?? {}, {
 		authConfigured: getCurrentRegistrationSession().authConfigured,
 		state: getCurrentAccessScopeState()
@@ -472,12 +522,8 @@ function registerRouteAtResolvedPath(path, Component, options, metadata) {
 	const comp = Component;
 	const normalizedOptions = normalizeRouteOptions(options);
 	const policies = [...getCurrentInheritedPolicies(), ...normalizedOptions?.policies ?? []];
-	const handler = (params) => {
-		let content = comp(params);
-		content = applyPageChain(pageChain, params, content);
-		for (let i = chain.length - 1; i >= 0; i--) content = chain[i].component({ children: content });
-		return content;
-	};
+	const handler = createRouteHandler(comp, pageChain, chain);
+	const renderHandler = createRouteHandler(comp, pageChain, chain, true);
 	insertRecordSorted({
 		path,
 		component: comp,
@@ -491,6 +537,7 @@ function registerRouteAtResolvedPath(path, Component, options, metadata) {
 		} : policies.length > 0 ? { policies } : {},
 		isFallback,
 		handler,
+		renderHandler,
 		...metadata?.fallbackPrefix ? { fallbackPrefix: metadata.fallbackPrefix } : {}
 	});
 	addRouteToStores({
@@ -646,7 +693,7 @@ function findBestScopedFallbackRecord(pathname, routeRecords) {
 */
 function resolveRoute(pathname) {
 	const normalized = pathname.endsWith("/") && pathname !== "/" ? pathname.slice(0, -1) : pathname;
-	const urlParts = normalized === "/" ? [] : normalized.split("/").filter(Boolean);
+	const urlParts = splitPathSegments(normalized);
 	for (const record of records) {
 		if (record.fallbackPrefix) continue;
 		const params = matchSegments(urlParts, record.segments);
@@ -664,7 +711,7 @@ function resolveRoute(pathname) {
 function getMatchingRecord(target, routeRecords) {
 	const location = parseLocation(target);
 	const normalized = location.pathname.endsWith("/") && location.pathname !== "/" ? location.pathname.slice(0, -1) : location.pathname;
-	const urlParts = normalized === "/" ? [] : normalized.split("/").filter(Boolean);
+	const urlParts = splitPathSegments(normalized);
 	for (const record of routeRecords) {
 		if (record.fallbackPrefix) continue;
 		const params = matchSegments(urlParts, record.segments);
@@ -684,32 +731,51 @@ function getDefaultRouteMode() {
 	if (typeof window !== "undefined") return "spa";
 	return "ssr";
 }
-function buildRenderResult(record, params) {
+function createRenderDataAwareHandler(handler, data) {
+	return (params, context) => {
+		const renderContext = getRenderContext();
+		if (renderContext) renderContext.renderData = data ?? null;
+		return handler(params, context);
+	};
+}
+function buildRenderResult(record, params, mode) {
+	const renderHandler = getRenderHandler(record);
+	const loader = mode === "ssr" ? record.options?.loader : void 0;
+	if (loader) {
+		const loaded = loader({ params });
+		const finalize = (data) => ({
+			kind: "render",
+			handler: createRenderDataAwareHandler(renderHandler, data),
+			params
+		});
+		if (isPromiseLike(loaded)) return Promise.resolve(loaded).then((data) => finalize(data));
+		return finalize(loaded);
+	}
 	return {
 		kind: "render",
-		handler: record.handler,
+		handler: renderHandler,
 		params
 	};
 }
 function continueRoutePolicies(policies, context, record, params, startIndex = 0) {
 	for (let index = startIndex; index < policies.length; index += 1) {
 		const policyResult = policies[index](context);
-		if (isPromise(policyResult)) return policyResult.then((next) => {
+		if (isPromiseLike(policyResult)) return Promise.resolve(policyResult).then((next) => {
 			if (next.kind !== "allow") return next;
 			return continueRoutePolicies(policies, context, record, params, index + 1);
 		});
 		if (policyResult.kind !== "allow") return policyResult;
 	}
-	return buildRenderResult(record, params);
+	return buildRenderResult(record, params, context.mode);
 }
 function resolveRouteRequest(target, options = {}) {
 	const match = getMatchingRecord(target, options.manifest?.records ?? records);
 	if (!match) return null;
 	const { record, params } = match;
 	const policies = getRoutePolicies(record.options);
-	if (policies.length === 0) return buildRenderResult(record, params);
-	const signal = options.signal ?? getRenderContext()?.signal ?? new AbortController().signal;
 	const mode = options.mode ?? getDefaultRouteMode();
+	if (policies.length === 0) return buildRenderResult(record, params, mode);
+	const signal = options.signal ?? getRenderContext()?.signal ?? new AbortController().signal;
 	const auth = getActiveRouteAuthOptions(options.auth ?? options.manifest?.auth);
 	const baseContext = buildRouteContextBase(target, params, {
 		mode,
@@ -727,7 +793,7 @@ function resolveRouteRequest(target, options = {}) {
 		user: null
 	});
 	const authState = auth.resolve(baseContext);
-	if (isPromise(authState)) return authState.then((next) => finalize(next));
+	if (isPromiseLike(authState)) return Promise.resolve(authState).then((next) => finalize(next));
 	return finalize(authState);
 }
 /**
@@ -753,6 +819,6 @@ function resolveRouteFromRoutes(pathname, routeList) {
 	} : null;
 }
 //#endregion
-export { Outlet, _applyManifest, _drainLazy, _setActiveRouteAuthOptions, _snapshotLazy, clearRoutes, currentRoute, fallback, getManifest, getRoutes, group, index, lazy, lockRouteRegistration, page, registerRoutes, resolveRoute, resolveRouteFromRoutes, resolveRouteRequest, route, setServerLocation, syncCurrentRouteSnapshot };
+export { Outlet, _applyManifest, _drainLazy, _setActiveRouteAuthOptions, _snapshotLazy, clearRoutes, currentRoute, fallback, getManifest, getRoutes, group, index, lazy, lockRouteRegistration, page, registerRoutes, resolveRouteFromRoutes, resolveRouteRequest, route, setServerLocation, syncCurrentRouteSnapshot };
 
 //# sourceMappingURL=route.js.map