@celsoft/coordinator 0.0.0 → 0.1.0

package/build/hooks.server-34IMHRKC.js

@@ -0,0 +1,43 @@
+import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
+import {
+  json,
+  redirect
+} from "./chunk-SU26PJVX.js";
+import "./chunk-LFP3UPCM.js";
+
+// build/server/entries/hooks.server.js
+var HEADER = "x-coordinator-server";
+var KEY = Symbol.for("coordinator.servers");
+function registry() {
+  const g = globalThis;
+  return g[KEY] ??= /* @__PURE__ */ new Map();
+}
+function servedBy(id) {
+  return id ? registry().get(id) ?? null : null;
+}
+var DOC_FILES = /^\/docs\/[^/]+\/[^/]+\/[^/]+\/[^/]+\/f\//;
+var handle = async ({ event, resolve }) => {
+  const served = servedBy(event.request.headers.get(HEADER));
+  if (!served) return new Response("not found", { status: 404 });
+  event.locals.served = served;
+  const path = event.url.pathname.replace(/\/+$/, "") || "/";
+  if (path === "/pair" || path === "/docs/doc.js" || DOC_FILES.test(path) || path.startsWith("/_app/") || path.startsWith("/@") || path.startsWith("/node_modules/") || path.startsWith("/src/") || path.startsWith("/.svelte-kit/")) {
+    event.locals.token = null;
+    return resolve(event);
+  }
+  const token = event.cookies.get(served.cookie) ?? null;
+  const paired = served.auth.valid(token);
+  if (event.request.method === "GET") {
+    if (!paired) {
+      if (path === "/state.json") return json({ error: "not paired" }, { status: 401 });
+      redirect(303, "../".repeat(Math.max(0, path.split("/").length - 2)) + "pair");
+    }
+  } else if (!paired || event.request.headers.get("x-csrf") !== served.auth.csrf(token)) return json({ error: "not paired" }, { status: 403 });
+  event.locals.token = token;
+  const response = await resolve(event);
+  response.headers.set("Cache-Control", "no-store");
+  return response;
+};
+export {
+  handle
+};