@demiurgejs/core 0.2.0-beta.1 → 0.2.0-beta.2

package/dist/chunks/{testing-DBjVCN5v.js → testing-B_iMFYz_.js}

@@ -1,13 +1,13 @@
-import { n as Dt, o as Je, w as Ke, e as Ye, p as $t, q as Nt, k as Ot, r as Lt } from "./request-metadata-DwEO1EAS.js";
-import { createElement as ue } from "react";
-import { renderToString as Ze } from "react-dom/server";
+import { w as $t, v as kt, x as _e, y as Ve, e as Je, z as Dt, A as Nt, l as Ot, a as Lt } from "./request-metadata-D5NrT8ks.js";
+import { createElement as fe } from "react";
+import { renderToString as Ke } from "react-dom/server";
 import { jsxs as I, jsx as M } from "react/jsx-runtime";
-const ke = ["build", "private", "public"], It = {
+const Ae = ["build", "private", "public"], It = {
   app: "demiurge-memory",
   environment: "local",
   schemaVersion: 1
 }, Mt = 1e4, Ut = 3e4;
-function ti(e) {
+function ni(e) {
   return (...t) => ({
     fn: () => e.fn(...t),
     key: e.key(...t),
@@ -17,44 +17,44 @@ function ti(e) {
     ttl: e.ttl
   });
 }
-function ri(e) {
+function si(e) {
   return { id: e };
 }
-function ni(e) {
+function ii(e) {
   return e;
 }
-function Qe(e) {
-  const t = e.now ?? Date.now, r = Wt(e.refreshLeaseTtl), n = Xe(e.namespace), s = /* @__PURE__ */ new Map(), i = /* @__PURE__ */ new Map();
+function Ye(e) {
+  const t = e.now ?? Date.now, r = Wt(e.refreshLeaseTtl), n = Ze(e.namespace), s = /* @__PURE__ */ new Map(), i = /* @__PURE__ */ new Map();
   return {
     async get(o) {
       const a = o.scope ?? "request";
       if (a === "none")
         return await o.fn();
-      const c = Ae(o.key);
+      const c = $e(o.key);
       if (a === "request")
         return await Ft(s, c, o, t);
-      const u = De(n, a, c), f = (o.tags ?? []).map(
-        (g) => $e(n, a, fe(g))
+      const u = ke(n, a, c), f = (o.tags ?? []).map(
+        (g) => De(n, a, le(g))
       ), l = await e.store.get(u);
       if (l && (l.expiresAt === null || l.expiresAt > t()))
         return l.value;
       if (l && qt(l, t())) {
-        const g = zt(e.store), k = globalThis.crypto.randomUUID();
+        const g = zt(e.store), A = globalThis.crypto.randomUUID();
         if (await g.acquireRefreshLease(
           u,
-          k,
+          A,
           t() + r
         )) {
-          const ee = Bt({
+          const te = Bt({
             key: u,
             now: t,
             onBackgroundError: e.onBackgroundError,
             refreshStore: g,
             request: o,
             tags: f,
-            token: k
+            token: A
           });
-          e.waitUntil?.(ee);
+          e.waitUntil?.(te);
         }
         return l.value;
       }
@@ -63,44 +63,44 @@ function Qe(e) {
       if (m)
         return await m.promise;
       const d = { invalidated: !1 }, P = Promise.resolve().then(o.fn).then(async (g) => (d.invalidated || await e.store.set(u, {
-        expiresAt: et(t(), o.ttl),
-        staleUntil: tt(
+        expiresAt: Qe(t(), o.ttl),
+        staleUntil: Xe(
           t(),
           o.ttl,
           o.staleWhileRevalidate
         ),
         tags: f,
         value: g
-      }), g)), A = {
+      }), g)), $ = {
         promise: P,
         state: d,
         tags: f
       };
-      i.set(u, A);
+      i.set(u, $);
       try {
         return await P;
       } finally {
-        i.get(u) === A && i.delete(u);
+        i.get(u) === $ && i.delete(u);
       }
     },
     async invalidateKey(o) {
-      const a = Ae(o), c = s.delete(a);
+      const a = $e(o), c = s.delete(a);
       let u = !1;
       const f = await Promise.all(
-        ke.map((l) => {
-          const m = De(n, l, a), d = i.get(m);
+        Ae.map((l) => {
+          const m = ke(n, l, a), d = i.get(m);
           return d && (d.state.invalidated = !0, u = !0), e.store.delete(m);
         })
       );
       return c || u || f.some(Boolean);
     },
     async invalidateTags(o) {
-      const a = o.map(fe), c = Gt(
+      const a = o.map(le), c = Gt(
         s,
         new Set(a)
       ), u = new Set(
-        ke.flatMap(
-          (m) => a.map((d) => $e(n, m, d))
+        Ae.flatMap(
+          (m) => a.map((d) => De(n, m, d))
         )
       );
       let f = 0;
@@ -113,7 +113,7 @@ function Qe(e) {
 }
 function ge(e = {}) {
   const t = e.now ?? Date.now;
-  return Qe({
+  return Ye({
     namespace: It,
     now: t,
     onBackgroundError: e.onBackgroundError,
@@ -131,8 +131,8 @@ function Ht(e = {}) {
     throw new Error(
       "Demiurge memory cache maximumEntries must be a positive integer."
     );
-  te(t, r, s()), jt(t, n);
-  let i = re(t);
+  re(t, r, s()), jt(t, n);
+  let i = ne(t);
   return {
     acquireRefreshLease(o, a, c) {
       const u = s(), f = r.get(o);
@@ -142,7 +142,7 @@ function Ht(e = {}) {
       return r.delete(o), t.delete(o);
     },
     get(o) {
-      return s() >= i && (te(t, r, s()), i = re(t)), t.get(o);
+      return s() >= i && (re(t, r, s()), i = ne(t)), t.get(o);
     },
     invalidateTags(o) {
       const a = new Set(o);
@@ -166,7 +166,7 @@ function Ht(e = {}) {
     },
     set(o, a) {
       const c = s();
-      c >= i && (te(t, r, c), i = re(t)), r.delete(o), Ce(
+      c >= i && (re(t, r, c), i = ne(t)), r.delete(o), Ce(
         t,
         r,
         n,
@@ -176,7 +176,7 @@ function Ht(e = {}) {
     }
   };
 }
-function te(e, t, r) {
+function re(e, t, r) {
   for (const [n, s] of e)
     s.staleUntil !== null && s.staleUntil <= r && (e.delete(n), t.delete(n));
 }
@@ -198,14 +198,14 @@ function jt(e, t) {
     e.delete(r);
   }
 }
-function re(e) {
+function ne(e) {
   let t = Number.POSITIVE_INFINITY;
   for (const r of e.values())
     r.staleUntil !== null && (t = Math.min(t, r.staleUntil));
   return t;
 }
-function Xe(e) {
-  const t = ne("app", e.app), r = ne(
+function Ze(e) {
+  const t = se("app", e.app), r = se(
     "environment",
     e.environment
   );
@@ -213,13 +213,13 @@ function Xe(e) {
     throw new Error(
       "Demiurge cache namespace schemaVersion must be a non-negative integer or string."
     );
-  const n = ne(
+  const n = se(
     "schemaVersion",
     String(e.schemaVersion)
   );
   return `${t}:${r}:${n}`;
 }
-function si(e) {
+function oi(e) {
   return {
     async key(t) {
       return {
@@ -264,10 +264,10 @@ function U(e) {
   const r = Number(t[1]), n = t[2];
   return n === "h" ? r * 36e5 : n === "m" ? r * 6e4 : n === "s" ? r * 1e3 : r;
 }
-function Ae(e) {
-  return le(e, /* @__PURE__ */ new Set());
+function $e(e) {
+  return de(e, /* @__PURE__ */ new Set());
 }
-function fe(e) {
+function le(e) {
   return e.id;
 }
 async function Ft(e, t, r, n) {
@@ -276,7 +276,7 @@ async function Ft(e, t, r, n) {
     return await s.value;
   const i = Promise.resolve().then(r.fn), o = {
     expiresAt: n() + U(r.ttl),
-    tags: (r.tags ?? []).map(fe),
+    tags: (r.tags ?? []).map(le),
     value: i
   };
   e.set(t, o);
@@ -286,17 +286,17 @@ async function Ft(e, t, r, n) {
     throw e.get(t) === o && e.delete(t), a;
   }
 }
-function De(e, t, r) {
+function ke(e, t, r) {
   return `${e}:${t}:key:${r}`;
 }
-function $e(e, t, r) {
+function De(e, t, r) {
   return `${e}:${t}:tag:${r}`;
 }
-function et(e, t) {
+function Qe(e, t) {
   const r = U(t);
   return Number.isFinite(r) ? e + r : null;
 }
-function tt(e, t, r) {
+function Xe(e, t, r) {
   const n = U(t);
   if (!Number.isFinite(n)) {
     if (r !== void 0)
@@ -329,8 +329,8 @@ async function Bt(e) {
   try {
     const t = await e.request.fn(), r = e.now();
     await e.refreshStore.publishRefresh(e.key, e.token, {
-      expiresAt: et(r, e.request.ttl),
-      staleUntil: tt(
+      expiresAt: Qe(r, e.request.ttl),
+      staleUntil: Xe(
         r,
         e.request.ttl,
         e.request.staleWhileRevalidate
@@ -344,7 +344,7 @@ async function Bt(e) {
     await e.refreshStore.releaseRefreshLease(e.key, e.token);
   }
 }
-function ne(e, t) {
+function se(e, t) {
   const r = [...t].some((n) => {
     const s = n.charCodeAt(0);
     return s <= 31 || s === 127;
@@ -361,7 +361,7 @@ function Gt(e, t) {
     s.tags.some((i) => t.has(i)) && (e.delete(n), r += 1);
   return r;
 }
-function le(e, t) {
+function de(e, t) {
   if (e === null || typeof e == "boolean" || typeof e == "string")
     return JSON.stringify(e);
   if (typeof e == "number") {
@@ -389,7 +389,7 @@ function le(e, t) {
       throw t.delete(e), new Error(
         "Demiurge cache key arrays must be dense and cannot contain accessors or custom properties."
       );
-    const c = `[${e.map((u) => le(u, t)).join(",")}]`;
+    const c = `[${e.map((u) => de(u, t)).join(",")}]`;
     return t.delete(e), c;
   }
   const r = Object.getPrototypeOf(e);
@@ -406,86 +406,26 @@ function le(e, t) {
       "Demiurge cache key objects require enumerable string data properties."
     );
   const s = e, i = `{${Object.keys(s).sort().map(
-    (o) => `${JSON.stringify(o)}:${le(s[o], t)}`
+    (o) => `${JSON.stringify(o)}:${de(s[o], t)}`
   ).join(",")}}`;
   return t.delete(e), i;
 }
-function ii(e) {
+function ai(e) {
   return e;
 }
-function oi(e, t = {}) {
-  return {
-    ...t,
-    href: e,
-    kind: "link",
-    rel: "preconnect"
-  };
-}
-function ai(e, t) {
-  return {
-    ...t,
-    href: e,
-    kind: "link",
-    rel: "preload"
-  };
-}
 function ci(e) {
-  return {
-    href: e,
-    kind: "link",
-    rel: "modulepreload"
-  };
-}
-async function _t(e, t) {
-  const r = [];
-  for (const n of e) {
-    if (!n)
-      continue;
-    const s = typeof n == "function" ? await n(t) : n;
-    r.push(...s);
-  }
-  return Vt(r).sort(Jt);
-}
-function Vt(e) {
-  const t = /* @__PURE__ */ new Map();
-  for (const r of e)
-    t.set(Ne(r), {
-      ...t.get(Ne(r)),
-      ...r
-    });
-  return [...t.values()];
-}
-function Ne(e) {
-  return [
-    e.rel,
-    e.href,
-    e.as ?? "",
-    e.type ?? "",
-    e.crossOrigin ?? ""
-  ].join("\0");
-}
-function Jt(e, t) {
-  return Oe(e.rel) - Oe(t.rel) || e.href.localeCompare(t.href);
-}
-function Oe(e) {
-  return e === "preconnect" ? 0 : e === "preload" ? 1 : e === "modulepreload" ? 2 : 3;
-}
-function ui(e) {
-  return e;
-}
-function fi(e) {
   return {
     ...e,
     kind: "meta"
   };
 }
-function li(e) {
+function ui(e) {
   return {
     ...e,
     kind: "link"
   };
 }
-function di(e) {
+function fi(e) {
   return {
     kind: "structured-data",
     value: e
@@ -497,8 +437,8 @@ function v(...e) {
     structuredData: []
   };
   for (const i of e)
-    i && Kt(t, i);
-  const r = Zt(t), n = t.description, s = Qt(t.openGraph, r, n);
+    i && _t(t, i);
+  const r = Jt(t), n = t.description, s = Kt(t.openGraph, r, n);
   return {
     canonical: t.canonical,
     charset: "utf-8",
@@ -511,8 +451,8 @@ function v(...e) {
     viewport: "width=device-width, initial-scale=1"
   };
 }
-function Kt(e, t) {
-  Yt(e, t.title), t.description !== void 0 && (e.description = t.description), t.canonical !== void 0 && (e.canonical = t.canonical), t.robots && (e.robots = {
+function _t(e, t) {
+  Vt(e, t.title), t.description !== void 0 && (e.description = t.description), t.canonical !== void 0 && (e.canonical = t.canonical), t.robots && (e.robots = {
     ...e.robots ?? {},
     ...t.robots
   }), t.openGraph && (e.openGraph = {
@@ -520,7 +460,7 @@ function Kt(e, t) {
     ...t.openGraph
   }), t.custom && e.custom.push(...t.custom), t.structuredData && e.structuredData.push(...t.structuredData);
 }
-function Yt(e, t) {
+function Vt(e, t) {
   if (t !== void 0) {
     if (typeof t == "string") {
       e.title = t;
@@ -529,10 +469,10 @@ function Yt(e, t) {
     t.default !== void 0 && (e.titleDefault = t.default), t.format && (e.titleFormat = t.format);
   }
 }
-function Zt(e) {
+function Jt(e) {
   return e.title === void 0 ? e.titleDefault : e.titleFormat ? e.titleFormat(e.title) : e.title;
 }
-function Qt(e, t, r) {
+function Kt(e, t, r) {
   if (!(!e && !t && !r))
     return {
       ...t ? { title: t } : {},
@@ -540,7 +480,7 @@ function Qt(e, t, r) {
       ...e ?? {}
     };
 }
-function rt(e) {
+function et(e) {
   const t = {
     fallbacks: {
       error: [],
@@ -612,11 +552,11 @@ function rt(e) {
       file: r,
       fileSegments: s,
       segments: R(s),
-      score: pr(s),
+      score: dr(s),
       load: n
     });
   }
-  return Xt(t.routes), t.routes.sort(rr), t.layouts.sort(
+  return Yt(t.routes), t.routes.sort(Xt), t.layouts.sort(
     (r, n) => r.fileSegments.length - n.fileSegments.length || r.file.localeCompare(n.file)
   ), t.policies.sort(
     (r, n) => r.fileSegments.length - n.fileSegments.length || r.file.localeCompare(n.file)
@@ -630,7 +570,7 @@ function rt(e) {
     (r, n) => r.fileSegments.length - n.fileSegments.length || r.file.localeCompare(n.file)
   ), t;
 }
-function Xt(e) {
+function Yt(e) {
   const t = /* @__PURE__ */ new Map();
   for (const r of e) {
     const n = r.segments.findIndex(
@@ -640,37 +580,37 @@ function Xt(e) {
       throw new Error(
         `Catchall route segment in "${r.file}" must be the final URL segment.`
       );
-    const s = r.segments.map(er).join("/"), i = t.get(s);
+    const s = r.segments.map(Zt).join("/"), i = t.get(s);
     if (i)
       throw new Error(
-        `Ambiguous routes "${i.file}" and "${r.file}" have the same runtime shape and both match "${tr(r.segments)}".`
+        `Ambiguous routes "${i.file}" and "${r.file}" have the same runtime shape and both match "${Qt(r.segments)}".`
       );
     t.set(s, r);
   }
 }
-function er(e) {
+function Zt(e) {
   return e.startsWith("*") ? "*" : e.startsWith(":") ? ":" : `=${e}`;
 }
-function tr(e) {
+function Qt(e) {
   return e.length === 0 ? "/" : `/${e.map((t) => t.startsWith(":") || t.startsWith("*") ? "example" : t).join("/")}`;
 }
-function rr(e, t) {
+function Xt(e, t) {
   const r = Math.max(e.segments.length, t.segments.length);
   for (let n = 0; n < r; n += 1) {
-    const s = Le(t.segments[n]) - Le(e.segments[n]);
+    const s = Ne(t.segments[n]) - Ne(e.segments[n]);
     if (s !== 0)
       return s;
   }
   return e.file.localeCompare(t.file);
 }
-function Le(e) {
+function Ne(e) {
   return e === void 0 ? 4 : e.startsWith("*") ? 1 : e.startsWith(":") ? 2 : 3;
 }
-async function nt(e, t, r = new Request(`http://demiurge.local${t}`), n, s = ge(), i = {}) {
-  const o = i.documentContributions ?? !0, a = j(e.routes, t);
+async function tt(e, t, r = new Request(`http://demiurge.local${t}`), n, s = ge(), i = {}) {
+  const o = i.documentContributions ?? !0, a = F(e.routes, t);
   if (!a)
     return {
-      ...await de(e, t, {
+      ...await me(e, t, {
         documentContributions: o
       }),
       status: "not-found"
@@ -680,7 +620,7 @@ async function nt(e, t, r = new Request(`http://demiurge.local${t}`), n, s = ge(
   ), u = await a.route.load();
   if (!u.GET || u.GET.kind !== "page")
     return {
-      ...await de(e, t, {
+      ...await me(e, t, {
         fallback: ye(
           e.fallbacks.notFound,
           a.route
@@ -703,8 +643,8 @@ async function nt(e, t, r = new Request(`http://demiurge.local${t}`), n, s = ge(
     status: "ready",
     match: {
       data: u.GET.data && !n?.hasData ? await u.GET.data(m) : n?.data,
-      error: await st(e, a.route),
-      links: o ? await _t(
+      error: await rt(e, a.route),
+      links: o ? await kt(
         [
           ...f.map((d) => d.links),
           u.links
@@ -722,7 +662,7 @@ async function nt(e, t, r = new Request(`http://demiurge.local${t}`), n, s = ge(
       path: a.path,
       pathname: t,
       render: u.GET.render,
-      scripts: o ? await Dt(
+      scripts: o ? await $t(
         [
           ...f.map((d) => d.scripts),
           u.scripts
@@ -732,7 +672,7 @@ async function nt(e, t, r = new Request(`http://demiurge.local${t}`), n, s = ge(
     }
   };
 }
-async function mi(e, t = {}) {
+async function li(e, t = {}) {
   const r = ge(), n = [];
   for (const s of e.routes) {
     const i = await s.load();
@@ -742,8 +682,8 @@ async function mi(e, t = {}) {
       throw new Error(
         `Page route "${s.file}" uses render mode "${i.GET.render.mode}" and cannot be emitted as static output. Set render: { mode: "static" } or deploy a runtime adapter.`
       );
-    const o = ur(s.segments);
-    if (lr(s.segments).length === 0) {
+    const o = or(s.segments);
+    if (cr(s.segments).length === 0) {
       n.push({
         file: s.file,
         path: {},
@@ -758,28 +698,28 @@ async function mi(e, t = {}) {
       );
     const c = await i.paths({ cache: r });
     for (const u of c) {
-      const f = dr(s, o, u);
+      const f = ur(s, o, u);
       n.push({
         file: s.file,
         path: f,
         pattern: o,
-        pathname: hr(s.segments, f)
+        pathname: lr(s.segments, f)
       });
     }
   }
   return n;
 }
-async function hi(e, t) {
-  const r = j(e.routes, t);
+async function di(e, t) {
+  const r = F(e.routes, t);
   if (r)
-    return await ar(
+    return await sr(
       ye(e.fallbacks.loading, r.route)
     );
 }
-async function nr(e, t) {
+async function er(e, t) {
   let r;
   try {
-    r = j(e.routes, t);
+    r = F(e.routes, t);
   } catch (n) {
     if (!(n instanceof Ee)) throw n;
     return await Se(
@@ -788,20 +728,20 @@ async function nr(e, t) {
       )
     );
   }
-  return r ? await st(e, r.route) : await sr(e, t);
+  return r ? await rt(e, r.route) : await tr(e, t);
 }
-async function st(e, t) {
+async function rt(e, t) {
   return await Se(
     ye(e.fallbacks.error, t)
   );
 }
-async function sr(e, t) {
+async function tr(e, t) {
   return await Se(
-    it(e.fallbacks.error, t)
+    nt(e.fallbacks.error, t)
   );
 }
-async function de(e, t, r = {}) {
-  const s = await (r.fallback ?? it(e.fallbacks.notFound, t))?.load(), i = s?.default, o = r.documentContributions ?? !0;
+async function me(e, t, r = {}) {
+  const s = await (r.fallback ?? nt(e.fallbacks.notFound, t))?.load(), i = s?.default, o = r.documentContributions ?? !0;
   if (s?.layout === !1)
     return {
       layouts: [],
@@ -809,7 +749,7 @@ async function de(e, t, r = {}) {
       notFound: i,
       pathname: t
     };
-  const a = r.layouts ?? ir(e, t);
+  const a = r.layouts ?? rr(e, t);
   try {
     const c = await Promise.all(
       a.map((u) => u.load())
@@ -834,16 +774,16 @@ async function de(e, t, r = {}) {
     };
   }
 }
-function ir(e, t) {
-  const r = Q(t);
+function rr(e, t) {
+  const r = X(t);
   return e.layouts.filter(
-    (n) => !n.fileSegments.some(Z) && we(n.segments, r)
+    (n) => !n.fileSegments.some(Q) && we(n.segments, r)
   );
 }
-function or(e, t) {
-  const r = Q(t);
+function nr(e, t) {
+  const r = X(t);
   return e.policies.filter(
-    (n) => !n.fileSegments.some(Z) && we(n.segments, r)
+    (n) => !n.fileSegments.some(Q) && we(n.segments, r)
   );
 }
 function ye(e, t) {
@@ -853,34 +793,34 @@ function ye(e, t) {
       return n;
   }
 }
-function it(e, t) {
-  const r = Q(t);
+function nt(e, t) {
+  const r = X(t);
   for (let n = e.length - 1; n >= 0; n -= 1) {
     const s = e[n];
-    if (!s.fileSegments.some(Z) && we(s.segments, r))
+    if (!s.fileSegments.some(Q) && we(s.segments, r))
       return s;
   }
 }
 function we(e, t) {
   return e.every((r, n) => r.startsWith("*") ? t.length > n : r.startsWith(":") ? !!t[n] : t[n] === r);
 }
-async function ar(e) {
+async function sr(e) {
   return e ? (await e.load()).default : void 0;
 }
 async function Se(e) {
   return e ? (await e.load()).default : void 0;
 }
-function j(e, t) {
-  const r = Q(t);
+function F(e, t) {
+  const r = X(t);
   for (const n of e) {
-    const s = cr(n.segments, r);
+    const s = ir(n.segments, r);
     if (s)
       return { route: n, path: s };
   }
   return null;
 }
-const pi = nt, gi = j;
-function cr(e, t) {
+const mi = tt, hi = F;
+function ir(e, t) {
   const r = {};
   for (let n = 0; n < e.length; n += 1) {
     const s = e[n], i = t[n];
@@ -897,7 +837,7 @@ function cr(e, t) {
   }
   return e.length === t.length ? r : null;
 }
-function yi(e, t) {
+function pi(e, t) {
   return e.every(
     (r, n) => t[n] === r
   );
@@ -908,21 +848,21 @@ function T(e, t) {
   );
 }
 function R(e) {
-  return e.flatMap((t) => Z(t) ? [] : t === "index" ? [] : t.startsWith("[...") && t.endsWith("]") ? [`*${t.slice(4, -1)}`] : t.startsWith("[") && t.endsWith("]") ? [`:${t.slice(1, -1)}`] : [t]);
+  return e.flatMap((t) => Q(t) ? [] : t === "index" ? [] : t.startsWith("[...") && t.endsWith("]") ? [`*${t.slice(4, -1)}`] : t.startsWith("[") && t.endsWith("]") ? [`:${t.slice(1, -1)}`] : [t]);
 }
-function Z(e) {
+function Q(e) {
   return e.startsWith("(") && e.endsWith(")");
 }
-function ur(e) {
-  return e.length === 0 ? "/" : `/${e.map(fr).join("/")}`;
+function or(e) {
+  return e.length === 0 ? "/" : `/${e.map(ar).join("/")}`;
 }
-function fr(e) {
+function ar(e) {
   return e.startsWith("*") ? `[...${e.slice(1)}]` : e.startsWith(":") ? `[${e.slice(1)}]` : e;
 }
-function lr(e) {
+function cr(e) {
   return e.flatMap((t) => t.startsWith(":") || t.startsWith("*") ? [t.slice(1)] : []);
 }
-function dr(e, t, r) {
+function ur(e, t, r) {
   const n = {};
   for (const s of e.segments) {
     if (!s.startsWith(":") && !s.startsWith("*"))
@@ -932,7 +872,7 @@ function dr(e, t, r) {
       throw new Error(
         `Static paths for "${e.file}" must include "${i}" for "${t}".`
       );
-    if (!mr(o))
+    if (!fr(o))
       throw new Error(
         `Static path "${i}" for "${e.file}" must be a string, number, or boolean.`
       );
@@ -940,16 +880,16 @@ function dr(e, t, r) {
   }
   return n;
 }
-function mr(e) {
+function fr(e) {
   return typeof e == "string" || typeof e == "number" || typeof e == "boolean";
 }
-function hr(e, t) {
+function lr(e, t) {
   return `/${e.map((n) => n.startsWith("*") ? t[n.slice(1)].split("/").filter(Boolean).map(encodeURIComponent).join("/") : n.startsWith(":") ? encodeURIComponent(t[n.slice(1)]) : encodeURIComponent(n)).filter(Boolean).join("/")}`;
 }
-function pr(e) {
+function dr(e) {
   return R(e).reduce((t, r) => r.startsWith("*") ? t : r.startsWith(":") ? t + 1 : t + 2, 0);
 }
-function Q(e) {
+function X(e) {
   return e.replace(/^\/|\/$/g, "").split("/").filter(Boolean).map((t) => {
     try {
       return decodeURIComponent(t);
@@ -967,35 +907,35 @@ class Ee extends URIError {
     ), this.name = "MalformedPathnameError", this.pathname = t;
   }
 }
-const C = "x-demiurge-navigation", gr = "data", yr = "data", se = "error", Ie = "not-found";
-function ot(e) {
-  return e.headers.get(C) === gr;
+const C = "x-demiurge-navigation", mr = "data", hr = "data", ie = "error", Oe = "not-found";
+function st(e) {
+  return e.headers.get(C) === mr;
 }
-function wr(e) {
+function pr(e) {
   return Response.json(
     { data: e, hasData: !0 },
     {
       headers: {
         "cache-control": "no-store",
-        [C]: yr,
+        [C]: hr,
         vary: C
       }
     }
   );
 }
-function q(e, t) {
+function z(e, t) {
   return e.headers.set("cache-control", "no-store"), e.headers.set(C, t), e.headers.append("vary", C), e;
 }
-function Sr(e) {
+function gr(e) {
   if (typeof e == "string")
     return e;
-  const t = Er(br(
+  const t = yr(Er(
     e.to,
     "path" in e ? e.path : void 0
-  )), r = e.search === void 0 ? t.search : Rr(e.search), n = e.hash === void 0 ? t.hash : e.hash ? e.hash.startsWith("#") ? e.hash : `#${e.hash}` : "";
+  )), r = e.search === void 0 ? t.search : wr(e.search), n = e.hash === void 0 ? t.hash : e.hash ? e.hash.startsWith("#") ? e.hash : `#${e.hash}` : "";
   return `${t.pathname}${r}${n}`;
 }
-function Er(e) {
+function yr(e) {
   const t = e.indexOf("#"), r = t === -1 ? e : e.slice(0, t), n = r.indexOf("?");
   return {
     hash: t === -1 ? "" : e.slice(t),
@@ -1003,15 +943,15 @@ function Er(e) {
     search: n === -1 ? "" : r.slice(n)
   };
 }
-function Rr(e) {
+function wr(e) {
   if (!e)
     return "";
   if (typeof e == "string")
     return e.startsWith("?") ? e : `?${e}`;
-  const r = (e instanceof URLSearchParams ? e : vr(e)).toString();
+  const r = (e instanceof URLSearchParams ? e : Sr(e)).toString();
   return r ? `?${r}` : "";
 }
-function vr(e) {
+function Sr(e) {
   const t = new URLSearchParams();
   for (const [r, n] of Object.entries(e)) {
     const s = Array.isArray(n) ? n : [n];
@@ -1020,7 +960,7 @@ function vr(e) {
   }
   return t;
 }
-function br(e, t) {
+function Er(e, t) {
   return t ? e.replace(
     /\[(\.\.\.)?([a-zA-Z_$][a-zA-Z0-9_$]*)\]/g,
     (r, n, s) => {
@@ -1031,7 +971,7 @@ function br(e, t) {
     }
   ) : e;
 }
-function wi(e, t) {
+function gi(e, t) {
   return {
     cors: t?.cors,
     kind: "json",
@@ -1041,7 +981,7 @@ function wi(e, t) {
     init: b(t)
   };
 }
-function Si(e, t) {
+function yi(e, t) {
   return {
     cors: t?.cors,
     init: b(t),
@@ -1051,7 +991,7 @@ function Si(e, t) {
     timing: S(t?.timing)
   };
 }
-function Ei(e, t) {
+function wi(e, t) {
   return {
     cors: t?.cors,
     kind: "text",
@@ -1061,7 +1001,7 @@ function Ei(e, t) {
     init: b(t)
   };
 }
-function Ri(e, t) {
+function Si(e, t) {
   return {
     cors: t?.cors,
     kind: "html",
@@ -1071,18 +1011,18 @@ function Ri(e, t) {
     init: b(t)
   };
 }
-function vi(e, t) {
+function Ei(e, t) {
   const r = typeof t == "number" ? void 0 : t;
   return {
     cors: r?.cors,
     kind: "redirect",
     security: r?.security,
     timing: S(r?.timing),
-    to: Or(e) ? Sr(e) : e,
+    to: kr(e) ? gr(e) : e,
     init: typeof t == "number" ? { status: t } : b(t)
   };
 }
-function bi(e, t) {
+function Ri(e, t) {
   return {
     cors: t?.cors,
     kind: "not-found",
@@ -1092,7 +1032,7 @@ function bi(e, t) {
     init: b(t)
   };
 }
-function Ti(e, t) {
+function vi(e, t) {
   return {
     cors: t?.cors,
     kind: "response",
@@ -1101,7 +1041,7 @@ function Ti(e, t) {
     timing: S(t?.timing)
   };
 }
-function xi(e, t) {
+function bi(e, t) {
   return {
     body: e,
     cors: t?.cors,
@@ -1111,7 +1051,7 @@ function xi(e, t) {
     timing: S(t?.timing)
   };
 }
-function Pi(e, t) {
+function Ti(e, t) {
   return {
     cors: t?.cors,
     events: e,
@@ -1121,15 +1061,15 @@ function Pi(e, t) {
     timing: S(t?.timing)
   };
 }
-function ki(...e) {
+function xi(...e) {
   return e;
 }
-async function Tr(e, t) {
+async function Rr(e, t) {
   switch (e.kind) {
     case "json":
       return new Response(JSON.stringify(await y(e.value, t)), {
         ...e.init,
-        headers: ie(
+        headers: oe(
           e.init?.headers,
           "content-type",
           "application/json; charset=utf-8"
@@ -1137,10 +1077,10 @@ async function Tr(e, t) {
       });
     case "jsonl":
       return new Response(
-        Pr(await y(e.lines, t)),
+        br(await y(e.lines, t)),
         {
           ...e.init,
-          headers: B(e.init?.headers, {
+          headers: G(e.init?.headers, {
             "cache-control": "no-cache",
             "content-type": "application/x-ndjson; charset=utf-8",
             "x-accel-buffering": "no"
@@ -1150,7 +1090,7 @@ async function Tr(e, t) {
     case "text":
       return new Response(await y(e.value, t), {
         ...e.init,
-        headers: ie(
+        headers: oe(
           e.init?.headers,
           "content-type",
           "text/plain; charset=utf-8"
@@ -1159,7 +1099,7 @@ async function Tr(e, t) {
     case "html":
       return new Response(await y(e.value, t), {
         ...e.init,
-        headers: ie(
+        headers: oe(
           e.init?.headers,
           "content-type",
           "text/html; charset=utf-8"
@@ -1185,10 +1125,10 @@ async function Tr(e, t) {
       return await y(e.response, t);
     case "stream":
       return new Response(
-        kr(await y(e.body, t)),
+        Tr(await y(e.body, t)),
         {
           ...e.init,
-          headers: B(e.init?.headers, {
+          headers: G(e.init?.headers, {
             "content-type": "application/octet-stream",
             "x-accel-buffering": "no"
           })
@@ -1196,10 +1136,10 @@ async function Tr(e, t) {
       );
     case "sse":
       return new Response(
-        xr(await y(e.events, t)),
+        vr(await y(e.events, t)),
         {
           ...e.init,
-          headers: B(e.init?.headers, {
+          headers: G(e.init?.headers, {
             "cache-control": "no-cache",
             "content-type": "text/event-stream; charset=utf-8",
             "x-accel-buffering": "no"
@@ -1213,16 +1153,16 @@ async function y(e, t) {
     t
   );
 }
-function ie(e, t, r) {
-  return B(e, { [t]: r });
+function oe(e, t, r) {
+  return G(e, { [t]: r });
 }
-function B(e, t) {
+function G(e, t) {
   const r = new Headers(e);
   for (const [n, s] of Object.entries(t))
     r.has(n) || r.set(n, s);
   return r;
 }
-function xr(e) {
+function vr(e) {
   const t = new TextEncoder(), r = Re(e);
   return new ReadableStream({
     async pull(n) {
@@ -1231,14 +1171,14 @@ function xr(e) {
         n.close();
         return;
       }
-      n.enqueue(t.encode(Dr(s.value)));
+      n.enqueue(t.encode(Ar(s.value)));
     },
     async cancel() {
       await r.return?.();
     }
   });
 }
-function Pr(e) {
+function br(e) {
   const t = new TextEncoder(), r = Re(e);
   return new ReadableStream({
     async pull(n) {
@@ -1255,7 +1195,7 @@ function Pr(e) {
     }
   });
 }
-function kr(e) {
+function Tr(e) {
   const t = new TextEncoder(), r = Re(e);
   return new ReadableStream({
     async pull(n) {
@@ -1264,14 +1204,14 @@ function kr(e) {
         n.close();
         return;
       }
-      n.enqueue(Cr(s.value, t));
+      n.enqueue(xr(s.value, t));
     },
     async cancel() {
       await r.return?.();
     }
   });
 }
-function Cr(e, t) {
+function xr(e, t) {
   return typeof e == "string" ? t.encode(e) : e;
 }
 function Re(e) {
@@ -1286,9 +1226,9 @@ function Re(e) {
       }
     };
   }
-  return Symbol.asyncIterator in e ? e[Symbol.asyncIterator]() : Ar(e[Symbol.iterator]());
+  return Symbol.asyncIterator in e ? e[Symbol.asyncIterator]() : Pr(e[Symbol.iterator]());
 }
-function Ar(e) {
+function Pr(e) {
   return {
     async next() {
       return e.next();
@@ -1298,21 +1238,21 @@ function Ar(e) {
     }
   };
 }
-function Dr(e) {
+function Ar(e) {
   if (typeof e == "string")
-    return $r(e);
+    return Cr(e);
   const t = [];
   if (e.comment !== void 0 && t.push(...N("", e.comment)), e.id !== void 0 && t.push(...N("id", e.id)), e.event !== void 0 && t.push(...N("event", e.event)), e.retry !== void 0) {
     if (!Number.isInteger(e.retry) || e.retry < 0)
       throw new Error("SSE retry must be a non-negative integer.");
     t.push(`retry: ${e.retry}`);
   }
-  return e.data !== void 0 && t.push(...N("data", Nr(e.data))), `${t.join(`
+  return e.data !== void 0 && t.push(...N("data", $r(e.data))), `${t.join(`
 `)}
 
 `;
 }
-function $r(e) {
+function Cr(e) {
   return `${N("data", e).join(`
 `)}
 
@@ -1323,10 +1263,10 @@ function N(e, t) {
     (r) => e ? `${e}: ${r}` : `: ${r}`
   );
 }
-function Nr(e) {
+function $r(e) {
   return typeof e == "string" ? e : JSON.stringify(e);
 }
-function Or(e) {
+function kr(e) {
   return typeof e == "object" && e !== null && !(e instanceof URL) && "to" in e;
 }
 function b(e) {
@@ -1340,10 +1280,10 @@ function b(e) {
   } = e;
   return s;
 }
-function Lr(e, t) {
+function Dr(e, t) {
   if (!t?.length)
     return e;
-  const r = new Headers(e.headers), n = Ir(t), s = r.get("server-timing");
+  const r = new Headers(e.headers), n = Nr(t), s = r.get("server-timing");
   return r.set(
     "server-timing",
     s ? `${s}, ${n}` : n
@@ -1353,15 +1293,15 @@ function Lr(e, t) {
     statusText: e.statusText
   });
 }
-function Ir(e) {
-  return e.map(Mr).join(", ");
+function Nr(e) {
+  return e.map(Or).join(", ");
 }
 function S(e) {
   if (e)
     return Array.isArray(e) ? e : [e];
 }
-function Mr(e) {
-  if (!Ur(e.name))
+function Or(e) {
+  if (!Lr(e.name))
     throw new Error(
       `Server-Timing metric name "${e.name}" is not a valid token.`
     );
@@ -1369,20 +1309,20 @@ function Mr(e) {
   if (e.duration !== void 0) {
     if (!Number.isFinite(e.duration) || e.duration < 0)
       throw new Error("Server-Timing metric duration must be a non-negative finite number.");
-    t.push(`dur=${Hr(e.duration)}`);
+    t.push(`dur=${Ir(e.duration)}`);
   }
-  return e.description !== void 0 && t.push(`desc="${jr(e.description)}"`), t.join(";");
+  return e.description !== void 0 && t.push(`desc="${Mr(e.description)}"`), t.join(";");
 }
-function Ur(e) {
+function Lr(e) {
   return /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(e);
 }
-function Hr(e) {
+function Ir(e) {
   return Number.isInteger(e), String(e);
 }
-function jr(e) {
+function Mr(e) {
   return e.replaceAll("\\", "\\\\").replaceAll('"', '\\"');
 }
-const Fr = [
+const Ur = [
   400,
   401,
   402,
@@ -1423,7 +1363,7 @@ const Fr = [
   508,
   510,
   511
-], Wr = {
+], Hr = {
   400: "Bad Request",
   401: "Unauthorized",
   402: "Payment Required",
@@ -1464,8 +1404,8 @@ const Fr = [
   508: "Loop Detected",
   510: "Not Extended",
   511: "Network Authentication Required"
-}, qr = new Set(Fr);
-class at extends Error {
+}, jr = new Set(Ur);
+class it extends Error {
   detail;
   extensions;
   headers;
@@ -1473,29 +1413,29 @@ class at extends Error {
   title;
   type;
   constructor(t, r = {}, n = {}) {
-    zr(t);
+    Fr(t);
     const s = typeof r == "string" ? { detail: r } : r, {
       detail: i,
-      title: o = Wr[t],
+      title: o = Hr[t],
       type: a = "about:blank",
       ...c
     } = s;
     super(i ?? o, { cause: n.cause }), this.name = "HttpError", this.detail = i, this.extensions = Object.freeze({ ...c }), this.headers = new Headers(n.headers), this.status = t, this.title = o, this.type = a;
   }
 }
-function Ci(e, t, r) {
-  return new at(e, t, r);
+function Pi(e, t, r) {
+  return new it(e, t, r);
 }
 function ve(e) {
-  return e instanceof at;
+  return e instanceof it;
 }
-function zr(e) {
-  if (!qr.has(e))
+function Fr(e) {
+  if (!jr.has(e))
     throw new RangeError(
       `HTTP error status must be a standard 4xx or 5xx status; received ${JSON.stringify(e)}.`
     );
 }
-function Me({ pathname: e }) {
+function Le({ pathname: e }) {
   return /* @__PURE__ */ I("main", { children: [
     /* @__PURE__ */ M("h1", { children: "404" }),
     /* @__PURE__ */ I("p", { children: [
@@ -1505,14 +1445,14 @@ function Me({ pathname: e }) {
     ] })
   ] });
 }
-function Ue({ status: e }) {
+function Ie({ status: e }) {
   return /* @__PURE__ */ I("main", { children: [
     /* @__PURE__ */ M("h1", { children: e }),
     /* @__PURE__ */ M("p", { children: "Something went wrong." })
   ] });
 }
-function Br({ error: e, pathname: t, status: r }) {
-  const { message: n, name: s, stack: i } = ct(e);
+function Wr({ error: e, pathname: t, status: r }) {
+  const { message: n, name: s, stack: i } = ot(e);
   return /* @__PURE__ */ I("main", { children: [
     /* @__PURE__ */ I("h1", { children: [
       r,
@@ -1525,7 +1465,7 @@ function Br({ error: e, pathname: t, status: r }) {
     i ? /* @__PURE__ */ M("pre", { children: i }) : null
   ] });
 }
-function ct(e) {
+function ot(e) {
   return e instanceof Error ? {
     message: e.message,
     name: e.name,
@@ -1536,27 +1476,27 @@ function ct(e) {
     stack: void 0
   };
 }
-const Gr = ["text/html", "application/xhtml+xml"];
-function ut(e) {
-  return _r(e.headers.get("accept"));
+const qr = ["text/html", "application/xhtml+xml"];
+function at(e) {
+  return zr(e.headers.get("accept"));
 }
-function _r(e) {
-  return e ? Vr(e).some(
-    (t) => t.quality > 0 && Gr.includes(t.type)
+function zr(e) {
+  return e ? Br(e).some(
+    (t) => t.quality > 0 && qr.includes(t.type)
   ) : !1;
 }
-function Vr(e) {
+function Br(e) {
   return e.split(",").flatMap((t) => {
     const [r, ...n] = t.split(";"), s = r.trim().toLowerCase();
     return s ? [
       {
-        quality: Jr(n),
+        quality: Gr(n),
         type: s
       }
     ] : [];
   });
 }
-function Jr(e) {
+function Gr(e) {
   for (const t of e) {
     const [r, n] = t.split("=");
     if (r?.trim().toLowerCase() !== "q")
@@ -1566,8 +1506,8 @@ function Jr(e) {
   }
   return 1;
 }
-const Kr = "application/problem+json";
-function Yr({
+const _r = "application/problem+json";
+function Vr({
   detail: e,
   instance: t,
   status: r,
@@ -1584,26 +1524,26 @@ function Yr({
     ...i
   };
 }
-function V(e, t) {
+function J(e, t) {
   const r = new Headers(t?.headers);
-  return r.set("content-type", `${Kr}; charset=utf-8`), new Response(JSON.stringify(Yr(e)), {
+  return r.set("content-type", `${_r}; charset=utf-8`), new Response(JSON.stringify(Vr(e)), {
     ...t,
     headers: r,
     status: e.status
   });
 }
-const Zr = "Internal Server Error";
-function ft(e) {
+const Jr = "Internal Server Error";
+function ct(e) {
   return e === !0 && process.env.NODE_ENV !== "production";
 }
-async function G(e, t, r, n, s = {}) {
+async function _(e, t, r, n, s = {}) {
   s.onError?.(r, n);
   const i = new URL(t.url);
-  return n === "page" || n === "middleware" && ut(t) ? await Xr(e, i, r, s) : Qr(i, r, s);
+  return n === "page" || n === "middleware" && at(t) ? await Yr(e, i, r, s) : Kr(i, r, s);
 }
-function Qr(e, t, r = {}) {
+function Kr(e, t, r = {}) {
   if (ve(t))
-    return V(
+    return J(
       {
         ...t.extensions,
         detail: t.detail,
@@ -1614,20 +1554,20 @@ function Qr(e, t, r = {}) {
       },
       { headers: t.headers }
     );
-  const { message: n } = ct(t);
-  return V({
+  const { message: n } = ot(t);
+  return J({
     // `detail` carries the thrown message, so it is dev only for the same
     // reason the stack is.
-    ...ft(r.dev) ? { detail: n } : {},
+    ...ct(r.dev) ? { detail: n } : {},
     instance: `${e.pathname}${e.search}`,
     status: 500,
     title: "Internal Server Error"
   });
 }
-async function Xr(e, t, r, n) {
-  const s = lt(r);
+async function Yr(e, t, r, n) {
+  const s = ut(r);
   try {
-    const i = await tn(
+    const i = await Qr(
       e,
       t.pathname,
       r,
@@ -1638,26 +1578,26 @@ async function Xr(e, t, r, n) {
       status: s
     });
   } catch (i) {
-    return n.onError?.(i, "page"), en();
+    return n.onError?.(i, "page"), Zr();
   }
 }
-function en() {
-  return new Response(Zr, {
+function Zr() {
+  return new Response(Jr, {
     headers: { "content-type": "text/plain; charset=utf-8" },
     status: 500
   });
 }
-async function tn(e, t, r, n) {
-  const s = await rn(e, t, n), i = Je({
+async function Qr(e, t, r, n) {
+  const s = await Xr(e, t, n), i = _e({
     dev: n.dev,
     nonce: n.nonce
-  }), o = Ze(
-    Ke(
+  }), o = Ke(
+    Ve(
       i,
-      ue(s, { error: r, pathname: t, status: lt(r) })
+      fe(s, { error: r, pathname: t, status: ut(r) })
     )
   );
-  return Ye({
+  return Je({
     body: { data: void 0, html: o, navigation: n.navigation },
     entrySrc: n.clientEntry,
     lang: n.lang,
@@ -1667,19 +1607,19 @@ async function tn(e, t, r, n) {
     title: n.title
   });
 }
-function lt(e) {
+function ut(e) {
   return ve(e) ? e.status : 500;
 }
-async function rn(e, t, r) {
-  if (ft(r.dev))
-    return Br;
+async function Xr(e, t, r) {
+  if (ct(r.dev))
+    return Wr;
   try {
-    return await nr(e, t) ?? Ue;
+    return await er(e, t) ?? Ie;
   } catch {
-    return Ue;
+    return Ie;
   }
 }
-const J = "{nonce}", He = `'nonce-${J}'`, dt = {
+const K = "{nonce}", Me = `'nonce-${K}'`, ft = {
   baseUri: ["'self'"],
   connectSrc: ["'self'"],
   defaultSrc: ["'self'"],
@@ -1688,14 +1628,14 @@ const J = "{nonce}", He = `'nonce-${J}'`, dt = {
   frameAncestors: ["'none'"],
   imgSrc: ["'self'", "data:", "blob:"],
   objectSrc: ["'none'"],
-  scriptSrc: [He, "'strict-dynamic'"],
-  styleSrc: ["'self'", He],
+  scriptSrc: [Me, "'strict-dynamic'"],
+  styleSrc: ["'self'", Me],
   upgradeInsecureRequests: !0
-}, nn = {
-  ...dt,
+}, en = {
+  ...ft,
   scriptSrc: ["'self'"],
   styleSrc: ["'self'"]
-}, je = {
+}, Ue = {
   contentTypeOptions: "nosniff",
   crossOriginOpenerPolicy: "same-origin",
   crossOriginResourcePolicy: "same-origin",
@@ -1706,27 +1646,27 @@ const J = "{nonce}", He = `'nonce-${J}'`, dt = {
     maxAge: 31536e3,
     preload: !1
   }
-}, sn = {
+}, tn = {
   contentTypeOptions: "nosniff",
   crossOriginResourcePolicy: "same-origin",
   referrerPolicy: "strict-origin-when-cross-origin"
-}, $ = {
+}, D = {
   api(e = {}) {
     return O(
       {
-        headers: sn
+        headers: tn
       },
       e
     );
   },
   preset(e, t = {}) {
-    return e === "api" ? $.api(t) : e === "cross-origin-isolated" ? $.crossOriginIsolated(t) : e === "static" ? $.static(t) : $.strict(t);
+    return e === "api" ? D.api(t) : e === "cross-origin-isolated" ? D.crossOriginIsolated(t) : e === "static" ? D.static(t) : D.strict(t);
   },
   static(e = {}) {
     return O(
       {
-        csp: nn,
-        headers: je
+        csp: en,
+        headers: Ue
       },
       e
     );
@@ -1734,15 +1674,15 @@ const J = "{nonce}", He = `'nonce-${J}'`, dt = {
   strict(e = {}) {
     return O(
       {
-        csp: dt,
-        headers: je
+        csp: ft,
+        headers: Ue
       },
       e
     );
   },
   crossOriginIsolated(e = {}) {
     return O(
-      $.strict({
+      D.strict({
         headers: {
           crossOriginEmbedderPolicy: "require-corp",
           crossOriginOpenerPolicy: "same-origin"
@@ -1755,138 +1695,154 @@ const J = "{nonce}", He = `'nonce-${J}'`, dt = {
 function Ai(e) {
   return e;
 }
-function Di(e) {
+function Ci(e) {
   return e;
 }
-function on(...e) {
+function rn(...e) {
   return e.reduce((t, r) => r ? O(t, r) : t, {});
 }
-function K(...e) {
+function Y(...e) {
   const t = e.reduce((r, n) => n ? {
-    document: on(r.document, n.document),
-    security: an(r.security, n.security)
+    document: rn(r.document, n.document),
+    security: nn(r.security, n.security)
   } : r, {});
   return {
     ...t,
-    document: un(t.document, t.security?.needs?.script)
+    document: on(t.document, t.security?.needs)
   };
 }
-function an(...e) {
+function nn(...e) {
   return e.reduce((t, r) => r ? {
     csrf: r.csrf ?? t.csrf,
-    needs: cn(t.needs, r.needs),
+    needs: sn(t.needs, r.needs),
     rateLimit: r.rateLimit ?? t.rateLimit,
-    request: ht(t.request, r.request)
+    request: mt(t.request, r.request)
   } : t, {});
 }
-function cn(e, t) {
-  const r = [.../* @__PURE__ */ new Set([
-    ...e?.script ?? [],
-    ...t?.script ?? []
-  ])];
-  return r.length > 0 ? { script: r } : void 0;
+const lt = [
+  { directive: "connectSrc", need: "connect" },
+  { directive: "imgSrc", need: "img" },
+  { directive: "scriptSrc", need: "script" }
+];
+function sn(e, t) {
+  const r = {};
+  for (const { need: n } of lt) {
+    const s = [.../* @__PURE__ */ new Set([
+      ...e?.[n] ?? [],
+      ...t?.[n] ?? []
+    ])];
+    s.length > 0 && (r[n] = s);
+  }
+  return Object.keys(r).length > 0 ? r : void 0;
 }
-function un(e, t) {
-  if (!e?.csp || !t || t.length === 0)
+function on(e, t) {
+  if (!e?.csp || !t)
     return e;
-  if (e.csp.scriptSrc === !1)
+  let r = e.csp;
+  for (const { directive: n, need: s } of lt)
+    r = an(r, n, s, t[s]);
+  return r === e.csp ? e : { ...e, csp: r };
+}
+function an(e, t, r, n) {
+  if (!n || n.length === 0)
+    return e;
+  if (e[t] === !1)
     throw new Error(
-      `A route policy declares security.needs.script and sets csp.scriptSrc to false. Set an explicit csp.scriptSrc that includes ${t.join(", ")}.`
+      `A route policy declares security.needs.${r} and sets csp.${t} to false. Set an explicit csp.${t} that includes ${n.join(", ")}.`
     );
-  if (e.csp.scriptSrc === void 0 && e.csp.defaultSrc === void 0)
+  if (e[t] === void 0 && e.defaultSrc === void 0)
     return e;
-  const r = e.csp.scriptSrc ?? e.csp.defaultSrc, n = x(r) ?? [];
-  return Array.isArray(n) ? {
+  const s = x(
+    e[t] ?? e.defaultSrc
+  ) ?? [];
+  return Array.isArray(s) ? {
     ...e,
-    csp: {
-      ...e.csp,
-      scriptSrc: [.../* @__PURE__ */ new Set([...n, ...t])]
-    }
+    [t]: [.../* @__PURE__ */ new Set([...s, ...n])]
   } : e;
 }
 async function $i(e, t = "sha256") {
   const r = await globalThis.crypto.subtle.digest(
-    bn(t),
+    Rn(t),
     new TextEncoder().encode(e)
   );
-  return `'${t}-${Tn(new Uint8Array(r))}'`;
+  return `'${t}-${vn(new Uint8Array(r))}'`;
 }
-function F(e, t = {}) {
-  e.csp && En(e.csp), Sn(e);
-  const r = new Headers(), n = e.csp !== !1 && e.csp ? gn(e.csp, t) : void 0, s = hn(e.trustedTypes), i = e.trustedTypes ? e.trustedTypes.mode === "report-only" : !1;
+function W(e, t = {}) {
+  e.csp && wn(e.csp), yn(e);
+  const r = new Headers(), n = e.csp !== !1 && e.csp ? hn(e.csp, t) : void 0, s = dn(e.trustedTypes), i = e.trustedTypes ? e.trustedTypes.mode === "report-only" : !1;
   return w(
     r,
     "content-security-policy",
-    Y(n, i ? void 0 : s)
+    Z(n, i ? void 0 : s)
   ), w(
     r,
     "content-security-policy-report-only",
-    i ? Y(s, gt(e.csp)) : void 0
-  ), mn(r, e.headers, t), r;
+    i ? Z(s, pt(e.csp)) : void 0
+  ), ln(r, e.headers, t), r;
 }
-function X(e) {
-  return !e || !e.csp ? !1 : W(e.csp).some(([, t]) => {
+function ee(e) {
+  return !e || !e.csp ? !1 : q(e.csp).some(([, t]) => {
     const r = x(t);
-    return Array.isArray(r) && r.some((n) => n.includes(J));
+    return Array.isArray(r) && r.some((n) => n.includes(K));
   });
 }
-function mt() {
+function dt() {
   const e = new Uint8Array(16);
   return globalThis.crypto.getRandomValues(e), btoa(String.fromCharCode(...e));
 }
 function O(e, t) {
   return {
-    csp: ln(e.csp, t.csp),
-    headers: fn(e.headers, t.headers),
+    csp: un(e.csp, t.csp),
+    headers: cn(e.headers, t.headers),
     trustedTypes: t.trustedTypes ?? e.trustedTypes
   };
 }
-function fn(e, t) {
-  const r = ht(e, t);
+function cn(e, t) {
+  const r = mt(e, t);
   return !r || t?.reportingEndpoints === !1 || e?.reportingEndpoints && t?.reportingEndpoints && (r.reportingEndpoints = {
     ...e.reportingEndpoints,
     ...t.reportingEndpoints
   }), r;
 }
-function ht(e, t) {
+function mt(e, t) {
   return t ? {
     ...e ?? {},
     ...t
   } : e;
 }
-function ln(e, t) {
+function un(e, t) {
   if (t === !1)
     return !1;
   if (!t)
     return e;
   if (!e)
-    return oe(t);
-  const r = oe(e), n = oe(t), s = {
+    return ae(t);
+  const r = ae(e), n = ae(t), s = {
     ...r,
     ...n
   };
-  for (const [i, o] of W(t)) {
+  for (const [i, o] of q(t)) {
     const a = x(
       r[i]
     );
-    !be(o) && Array.isArray(a) && Array.isArray(o) && pt(
+    !be(o) && Array.isArray(a) && Array.isArray(o) && ht(
       s,
       i,
-      dn([...a, ...o])
+      fn([...a, ...o])
     );
   }
   return s;
 }
-function oe(e) {
+function ae(e) {
   const t = { ...e };
-  for (const [r, n] of W(e))
-    be(n) && pt(t, r, n.replace);
+  for (const [r, n] of q(e))
+    be(n) && ht(t, r, n.replace);
   return t;
 }
-function dn(e) {
+function fn(e) {
   return [...new Set(e)];
 }
-function pt(e, t, r) {
+function ht(e, t, r) {
   if (!(t === "reportTo" || t === "upgradeInsecureRequests")) {
     if (t === "reportUri") {
       e.reportUri = r;
@@ -1895,87 +1851,87 @@ function pt(e, t, r) {
     e[t] = r;
   }
 }
-function mn(e, t, r) {
+function ln(e, t, r) {
   t && (w(e, "referrer-policy", t.referrerPolicy), w(e, "x-content-type-options", t.contentTypeOptions), w(e, "cross-origin-opener-policy", t.crossOriginOpenerPolicy), w(e, "cross-origin-embedder-policy", t.crossOriginEmbedderPolicy), w(e, "cross-origin-resource-policy", t.crossOriginResourcePolicy), w(e, "permissions-policy", t.permissionsPolicy), w(
     e,
     "reporting-endpoints",
-    yn(t.reportingEndpoints)
+    pn(t.reportingEndpoints)
   ), t.strictTransportSecurity && (!r.request || new URL(r.request.url).protocol === "https:") && e.set(
     "strict-transport-security",
-    pn(t.strictTransportSecurity)
+    mn(t.strictTransportSecurity)
   ));
 }
-function hn(e) {
+function dn(e) {
   if (!e)
     return;
   const t = [];
-  return e.requireFor?.includes("script") && t.push("require-trusted-types-for 'script'"), e.policies.length > 0 && t.push(`trusted-types ${e.policies.join(" ")}`), Y(...t);
+  return e.requireFor?.includes("script") && t.push("require-trusted-types-for 'script'"), e.policies.length > 0 && t.push(`trusted-types ${e.policies.join(" ")}`), Z(...t);
 }
-function Y(...e) {
+function Z(...e) {
   const t = e.filter((r) => r);
   return t.length > 0 ? t.join("; ") : void 0;
 }
 function w(e, t, r) {
   r && e.set(t, r);
 }
-function pn(e) {
+function mn(e) {
   const t = [`max-age=${e.maxAge}`];
   return e.includeSubDomains && t.push("includeSubDomains"), e.preload && t.push("preload"), t.join("; ");
 }
-function gn(e, t) {
+function hn(e, t) {
   const r = [];
-  for (const [s, i] of W(e)) {
+  for (const [s, i] of q(e)) {
     if (s === "reportTo" || s === "reportUri")
       continue;
     const o = x(i);
     if (o === !1 || o === void 0)
       continue;
-    const a = yt(s);
+    const a = gt(s);
     if (o === !0) {
       r.push(a);
       continue;
     }
     r.push(
-      `${a} ${vn(o, t).join(" ")}`
+      `${a} ${En(o, t).join(" ")}`
     );
   }
-  const n = gt(e);
+  const n = pt(e);
   return n && r.push(n), r.join("; ");
 }
-function gt(e) {
+function pt(e) {
   if (!e)
     return;
   const t = [], r = x(e.reportUri);
-  return Array.isArray(r) && r.length && t.push(`report-uri ${r.join(" ")}`), e.reportTo && t.push(`report-to ${e.reportTo}`), Y(...t);
+  return Array.isArray(r) && r.length && t.push(`report-uri ${r.join(" ")}`), e.reportTo && t.push(`report-to ${e.reportTo}`), Z(...t);
 }
-function yn(e) {
+function pn(e) {
   if (e)
-    return Object.entries(e).sort(([t], [r]) => t.localeCompare(r)).map(([t, r]) => `${t}="${wn(r)}"`).join(", ");
+    return Object.entries(e).sort(([t], [r]) => t.localeCompare(r)).map(([t, r]) => `${t}="${gn(r)}"`).join(", ");
 }
-function wn(e) {
+function gn(e) {
   return e.replaceAll("\\", "\\\\").replaceAll('"', '\\"');
 }
-function Sn(e) {
+function yn(e) {
   const t = e.headers?.reportingEndpoints;
   if (t) {
     const s = Object.entries(t);
     if (s.length === 0)
       throw new Error("Demiurge Reporting-Endpoints requires at least one endpoint.");
     for (const [i, o] of s)
-      Fe(i), We(o, `Reporting-Endpoints member ${JSON.stringify(i)}`);
+      He(i), je(o, `Reporting-Endpoints member ${JSON.stringify(i)}`);
   }
   const r = e.csp || void 0;
-  if (r?.reportTo && (Fe(r.reportTo), !t || !(r.reportTo in t)))
+  if (r?.reportTo && (He(r.reportTo), !t || !(r.reportTo in t)))
     throw new Error(
       `Demiurge CSP report-to group ${JSON.stringify(r.reportTo)} is not defined in headers.reportingEndpoints.`
     );
   const n = x(r?.reportUri);
   for (const s of Array.isArray(n) ? n : [])
-    We(s, "CSP report-uri target");
+    je(s, "CSP report-uri target");
 }
-function En(e) {
-  for (const [t, r] of W(e)) {
-    const n = yt(t);
+function wn(e) {
+  for (const [t, r] of q(e)) {
+    const n = gt(t);
     if (r === void 0)
       continue;
     if (t === "reportTo") {
@@ -2005,14 +1961,14 @@ function be(e) {
 function x(e) {
   return be(e) ? e.replace : e;
 }
-function Fe(e) {
+function He(e) {
   if (!/^(?:[a-z]|\*)[a-z0-9_.*-]*$/.test(e))
     throw new Error(
       `Invalid reporting endpoint name ${JSON.stringify(e)}. Use a lowercase Structured Field key.`
     );
 }
-function We(e, t) {
-  if (!Rn(e) || /[\s,;"\\]/.test(e) || !e.startsWith("/") && !e.startsWith("https://"))
+function je(e, t) {
+  if (!Sn(e) || /[\s,;"\\]/.test(e) || !e.startsWith("/") && !e.startsWith("https://"))
     throw new Error(`${t} must be a same-origin path or an HTTPS URL.`);
   if (e.startsWith("//"))
     throw new Error(`${t} must not be a scheme-relative URL.`);
@@ -2025,39 +1981,39 @@ function We(e, t) {
   if (r.username || r.password || r.hash)
     throw new Error(`${t} must not contain credentials or a fragment.`);
 }
-function Rn(e) {
+function Sn(e) {
   return /^[\x20-\x7e]+$/.test(e);
 }
-function W(e) {
+function q(e) {
   return Object.entries(e);
 }
-function vn(e, t) {
+function En(e, t) {
   return e.map((r) => {
-    if (!r.includes(J))
+    if (!r.includes(K))
       return r;
     if (!t.nonce)
       throw new Error("Demiurge security policy requires a CSP nonce.");
-    return r.replaceAll(J, t.nonce);
+    return r.replaceAll(K, t.nonce);
   });
 }
-function yt(e) {
+function gt(e) {
   return e.replace(/[A-Z]/g, (t) => `-${t.toLowerCase()}`);
 }
-function bn(e) {
+function Rn(e) {
   return e === "sha384" ? "SHA-384" : e === "sha512" ? "SHA-512" : "SHA-256";
 }
-function Tn(e) {
+function vn(e) {
   let t = "";
   for (const r of e)
     t += String.fromCharCode(r);
   return typeof btoa == "function" ? btoa(t) : Buffer.from(t, "binary").toString("base64");
 }
-function wt(e, t, r = {}) {
+function yt(e, t, r = {}) {
   Te(e);
   const n = t.request.headers.get("origin"), s = new Headers();
-  if (e.origins !== "*" && St(s, "Origin"), !n)
+  if (e.origins !== "*" && wt(s, "Origin"), !n)
     return s;
-  const i = kn(e, n);
+  const i = xn(e, n);
   if (!i)
     return s;
   if (s.set("access-control-allow-origin", i), e.credentials && s.set("access-control-allow-credentials", "true"), e.exposeHeaders?.length && s.set("access-control-expose-headers", e.exposeHeaders.join(", ")), r.preflight) {
@@ -2069,26 +2025,26 @@ function wt(e, t, r = {}) {
   }
   return s;
 }
-function _(e, t, r) {
+function V(e, t, r) {
   if (!t)
     return e;
   const n = new Headers(e.headers);
-  return Cn(n, wt(t, { request: r })), new Response(e.body, {
+  return Pn(n, yt(t, { request: r })), new Response(e.body, {
     headers: n,
     status: e.status,
     statusText: e.statusText
   });
 }
-function xn(e, t) {
+function bn(e, t) {
   const r = t.headers.get("access-control-request-method"), n = An(r);
   if (!n)
     return null;
-  const s = Et(e, n);
+  const s = St(e, n);
   if (!s?.cors)
     return null;
-  const i = s.cors.methods ?? Dn(e);
+  const i = s.cors.methods ?? Cn(e);
   return i.includes(n) ? new Response(null, {
-    headers: wt(
+    headers: yt(
       s.cors,
       { request: t },
       {
@@ -2110,41 +2066,41 @@ function Te(e) {
     );
   if (e.origins !== "*")
     for (const t of e.origins)
-      Pn(t);
+      Tn(t);
   if (e.maxAge !== void 0 && (!Number.isSafeInteger(e.maxAge) || e.maxAge < 0))
     throw new Error(
       "Demiurge CORS maxAge must be a non-negative integer number of seconds."
     );
 }
-function Pn(e) {
+function Tn(e) {
   let t;
   try {
     t = new URL(e);
   } catch {
-    throw qe(e);
+    throw Fe(e);
   }
   if (t.protocol !== "http:" && t.protocol !== "https:" || t.origin !== e)
-    throw qe(e);
+    throw Fe(e);
 }
-function qe(e) {
+function Fe(e) {
   return new Error(
     `Demiurge CORS origin ${JSON.stringify(e)} must be a canonical HTTP(S) origin without credentials, a path, query, or fragment.`
   );
 }
-function kn(e, t) {
+function xn(e, t) {
   return e.origins === "*" ? "*" : e.origins.includes(t) ? t : null;
 }
-function Cn(e, t) {
+function Pn(e, t) {
   t.forEach((r, n) => {
     if (n === "vary" && e.has("vary")) {
       for (const s of r.split(","))
-        St(e, s.trim());
+        wt(e, s.trim());
       return;
     }
     e.set(n, r);
   });
 }
-function St(e, t) {
+function wt(e, t) {
   if (!t)
     return;
   const r = e.get("vary")?.split(",").map((n) => n.trim()).filter(Boolean) ?? [];
@@ -2156,13 +2112,13 @@ function An(e) {
   const t = e.toUpperCase();
   return $n(t) ? t : null;
 }
-function Et(e, t) {
-  return t === "HEAD" ? e.HEAD ?? ze(e.GET) : ze(e[t]);
+function St(e, t) {
+  return t === "HEAD" ? e.HEAD ?? We(e.GET) : We(e[t]);
 }
-function ze(e) {
+function We(e) {
   return e?.kind === "page" ? void 0 : e;
 }
-function Dn(e) {
+function Cn(e) {
   return [
     "GET",
     "POST",
@@ -2171,25 +2127,25 @@ function Dn(e) {
     "DELETE",
     "OPTIONS",
     "HEAD"
-  ].filter((t) => Et(e, t));
+  ].filter((t) => St(e, t));
 }
 function $n(e) {
   return e === "GET" || e === "POST" || e === "PUT" || e === "PATCH" || e === "DELETE" || e === "OPTIONS" || e === "HEAD";
 }
-const Nn = /* @__PURE__ */ new Set(["DELETE", "PATCH", "POST", "PUT"]);
-function On(e = {}) {
-  const t = [], r = e.document, n = r ? Mn(r.policy, r.headers, t) : {};
-  r && Ln(r.policy, t);
-  const s = e.route ? Gn(e.route, t) : void 0;
-  return r?.scripts && (Un(
+const kn = /* @__PURE__ */ new Set(["DELETE", "PATCH", "POST", "PUT"]);
+function Dn(e = {}) {
+  const t = [], r = e.document, n = r ? Ln(r.policy, r.headers, t) : {};
+  r && Nn(r.policy, t);
+  const s = e.route ? zn(e.route, t) : void 0;
+  return r?.scripts && (In(
     r.policy.csp,
     r.scripts,
     r.headers,
     t
   ), r.scriptDependencies && t.push(
-    ...In(
+    ...On(
       r.scripts,
-      Hn(r.scriptDependencies)
+      Mn(r.scriptDependencies)
     )
   )), {
     findings: t,
@@ -2197,20 +2153,20 @@ function On(e = {}) {
     route: s
   };
 }
-function Ln(e, t) {
+function Nn(e, t) {
   if (!e.trustedTypes || e.trustedTypes.mode !== "report-only")
     return;
-  const r = e.csp || void 0, n = !!me(r?.reportUri)?.length, s = e.headers?.reportingEndpoints, i = !!(r?.reportTo && s && s[r.reportTo]);
+  const r = e.csp || void 0, n = !!he(r?.reportUri)?.length, s = e.headers?.reportingEndpoints, i = !!(r?.reportTo && s && s[r.reportTo]);
   !n && !i && t.push({
     code: "report-only-target-missing",
     message: "Trusted Types report-only mode has no deliverable target. Configure CSP reportTo with a matching Reporting-Endpoints member, reportUri for compatibility, or both.",
     severity: "warning"
   });
 }
-function In(e, t = {}) {
+function On(e, t = {}) {
   const r = t.requirePurpose ?? !0, n = [];
   for (const s of e) {
-    const i = Jn(s);
+    const i = _n(s);
     i && (r && !s.purpose && n.push({
       code: "script-purpose-missing",
       message: `Third-party script ${s.src} should declare a purpose for audits and consent flows.`,
@@ -2223,7 +2179,7 @@ function In(e, t = {}) {
       code: "script-third-party-before-interactive",
       message: `Third-party script ${s.src} runs before the app is interactive and should be justified by policy.`,
       severity: "warning"
-    }), Kn(i) && n.push({
+    }), Vn(i) && n.push({
       code: "script-gtm-wide-trust-boundary",
       message: "Google Tag Manager can load additional scripts at runtime and should be treated as a wide trust boundary.",
       severity: "warning"
@@ -2231,9 +2187,9 @@ function In(e, t = {}) {
   }
   return n;
 }
-function Mn(e, t, r) {
+function Ln(e, t, r) {
   try {
-    return Object.fromEntries(F(e, t));
+    return Object.fromEntries(W(e, t));
   } catch (n) {
     return r.push({
       code: "security-header-render-failed",
@@ -2242,12 +2198,12 @@ function Mn(e, t, r) {
     }), {};
   }
 }
-function Un(e, t, r, n) {
+function In(e, t, r, n) {
   if (!e)
     return;
-  const s = jn(e);
+  const s = Un(e);
   for (const i of t) {
-    if (Fn(s) && !i.nonce) {
+    if (Hn(s) && !i.nonce) {
       n.push({
         code: "csp-script-missing-nonce",
         message: `Document script ${i.src} needs a nonce for the effective script-src policy.`,
@@ -2255,33 +2211,33 @@ function Un(e, t, r, n) {
       });
       continue;
     }
-    i.nonce && r?.nonce && i.nonce === r.nonce || Wn(s, i.src) || n.push({
+    i.nonce && r?.nonce && i.nonce === r.nonce || jn(s, i.src) || n.push({
       code: "csp-script-src-blocked",
       message: `Document script ${i.src} is not allowed by the effective script-src policy.`,
       severity: "error"
     });
   }
 }
-function Hn(e) {
+function Mn(e) {
   return typeof e == "boolean" ? {} : e;
 }
-function jn(e) {
-  return me(e.scriptSrc) ?? me(e.defaultSrc) ?? [];
+function Un(e) {
+  return he(e.scriptSrc) ?? he(e.defaultSrc) ?? [];
 }
-function me(e) {
+function he(e) {
   if (e)
     return "replace" in e ? e.replace : e;
 }
-function Fn(e) {
+function Hn(e) {
   return e.some((t) => t.includes("'nonce-{nonce}'"));
 }
-function Wn(e, t) {
-  return Bn(e) ? !1 : e.includes("*") ? !0 : e.includes("'none'") || e.some((r) => r.startsWith("'nonce-")) ? !1 : e.includes("'self'") && qn(t) || t.startsWith("https:") && e.includes("https:") || t.startsWith("http:") && e.includes("http:") ? !0 : e.some((r) => zn(r, t));
+function jn(e, t) {
+  return qn(e) ? !1 : e.includes("*") ? !0 : e.includes("'none'") || e.some((r) => r.startsWith("'nonce-")) ? !1 : e.includes("'self'") && Fn(t) || t.startsWith("https:") && e.includes("https:") || t.startsWith("http:") && e.includes("http:") ? !0 : e.some((r) => Wn(r, t));
 }
-function qn(e) {
+function Fn(e) {
   return e.startsWith("/") && !e.startsWith("//");
 }
-function zn(e, t) {
+function Wn(e, t) {
   if (e.startsWith("'"))
     return !1;
   try {
@@ -2291,19 +2247,19 @@ function zn(e, t) {
     return !1;
   }
 }
-function Bn(e) {
+function qn(e) {
   return e.includes("'strict-dynamic'") && e.some(
     (t) => t.startsWith("'nonce-") || /^'sha(?:256|384|512)-/.test(t)
   );
 }
-function Gn(e, t) {
-  return _n(e.cors, t), Vn(e.method, e.security, t), {
+function zn(e, t) {
+  return Bn(e.cors, t), Gn(e.method, e.security, t), {
     cors: e.cors,
     method: e.method,
     security: e.security
   };
 }
-function _n(e, t) {
+function Bn(e, t) {
   if (e)
     try {
       Te(e);
@@ -2315,8 +2271,8 @@ function _n(e, t) {
       });
     }
 }
-function Vn(e, t, r) {
-  Nn.has(e) && (t?.csrf === !1 && r.push({
+function Gn(e, t, r) {
+  kn.has(e) && (t?.csrf === !1 && r.push({
     code: "csrf-disabled",
     message: "CSRF protection is explicitly disabled for this unsafe route.",
     severity: "info"
@@ -2330,7 +2286,7 @@ function Vn(e, t, r) {
     severity: "warning"
   }));
 }
-function Jn(e) {
+function _n(e) {
   try {
     const t = new URL(e.src);
     if (t.protocol === "http:" || t.protocol === "https:")
@@ -2340,17 +2296,17 @@ function Jn(e) {
   }
   return null;
 }
-function Kn(e) {
+function Vn(e) {
   return e.hostname === "www.googletagmanager.com" && (e.pathname === "/gtm.js" || e.pathname === "/ns.html");
 }
-const Yn = /* @__PURE__ */ new Set(["DELETE", "PATCH", "POST", "PUT"]), Zn = /^[!#$%&'*+\-.^_`|~A-Za-z0-9]+$/;
-function Qn() {
+const Jn = /* @__PURE__ */ new Set(["DELETE", "PATCH", "POST", "PUT"]), Kn = /^[!#$%&'*+\-.^_`|~A-Za-z0-9]+$/;
+function Yn() {
   const e = new Uint8Array(32);
   return globalThis.crypto.getRandomValues(e), btoa(String.fromCharCode(...e)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 }
-function Xn(e, t = {}) {
+function Zn(e, t = {}) {
   const r = t.cookie ?? "csrf-token";
-  if (!Zn.test(r))
+  if (!Kn.test(r))
     throw new Error("Demiurge CSRF cookie name is invalid.");
   if (!e)
     throw new Error("Demiurge CSRF token must not be empty.");
@@ -2361,25 +2317,25 @@ function Xn(e, t = {}) {
   ];
   return (t.secure ?? !0) && n.push("Secure"), n.join("; ");
 }
-function Ni(e = {}) {
-  const t = Qn();
+function ki(e = {}) {
+  const t = Yn();
   return {
-    cookie: Xn(t, e),
+    cookie: Zn(t, e),
     token: t
   };
 }
-function es(e, t) {
-  if (!Yn.has(t.method.toUpperCase()) || e === !1)
+function Qn(e, t) {
+  if (!Jn.has(t.method.toUpperCase()) || e === !1)
     return null;
   const r = t.headers.get("cookie");
   if (e === void 0 && !r?.trim())
     return null;
-  const n = rs(e ?? !0), i = ts(r).get(n.cookie), o = t.headers.get(n.header);
-  return !i || !o || !ss(i, o) ? new Response("Invalid CSRF token.", {
+  const n = es(e ?? !0), i = Xn(r).get(n.cookie), o = t.headers.get(n.header);
+  return !i || !o || !rs(i, o) ? new Response("Invalid CSRF token.", {
     status: 403
   }) : null;
 }
-function ts(e) {
+function Xn(e) {
   const t = /* @__PURE__ */ new Map();
   if (!e)
     return t;
@@ -2388,11 +2344,11 @@ function ts(e) {
     if (n === -1)
       continue;
     const s = r.slice(0, n).trim(), i = r.slice(n + 1).trim();
-    s && t.set(s, ns(i));
+    s && t.set(s, ts(i));
   }
   return t;
 }
-function rs(e) {
+function es(e) {
   return e === !0 ? {
     cookie: "csrf-token",
     header: "x-csrf-token"
@@ -2401,27 +2357,27 @@ function rs(e) {
     header: e.header ?? "x-csrf-token"
   };
 }
-function ns(e) {
+function ts(e) {
   try {
     return decodeURIComponent(e);
   } catch {
     return e;
   }
 }
-function ss(e, t) {
+function rs(e, t) {
   let r = e.length ^ t.length;
   const n = Math.max(e.length, t.length);
   for (let s = 0; s < n; s += 1)
     r |= e.charCodeAt(s) ^ t.charCodeAt(s);
   return r === 0;
 }
-const is = {
+const ns = {
   h: 3600 * 1e3,
   m: 60 * 1e3,
   s: 1e3
-}, os = 1e4;
-function Rt(e = {}) {
-  const t = e.maximumEntries ?? os;
+}, ss = 1e4;
+function Et(e = {}) {
+  const t = e.maximumEntries ?? ss;
   if (!Number.isSafeInteger(t) || t <= 0)
     throw new Error(
       "Demiurge rate limit maximumEntries must be a positive integer."
@@ -2430,38 +2386,38 @@ function Rt(e = {}) {
   let n = Number.POSITIVE_INFINITY;
   return {
     increment(s, i, o) {
-      o >= n && (as(r, o), n = cs(r));
+      o >= n && (is(r, o), n = os(r));
       const a = r.get(s);
       if (!a || a.resetAt <= o) {
         const c = {
           count: 1,
           resetAt: o + i
         };
-        return !a && r.size >= t && us(r), r.set(s, c), n = Math.min(n, c.resetAt), c;
+        return !a && r.size >= t && as(r), r.set(s, c), n = Math.min(n, c.resetAt), c;
       }
       return a.count += 1, a;
     }
   };
 }
-function as(e, t) {
+function is(e, t) {
   for (const [r, n] of e)
     n.resetAt <= t && e.delete(r);
 }
-function cs(e) {
+function os(e) {
   let t = Number.POSITIVE_INFINITY;
   for (const r of e.values())
     t = Math.min(t, r.resetAt);
   return t;
 }
-function us(e) {
+function as(e) {
   const t = e.keys().next().value;
   t !== void 0 && e.delete(t);
 }
-function fs(e, t, r, n = Date.now()) {
+function cs(e, t, r, n = Date.now()) {
   if (!e)
     return null;
   xe(e);
-  const s = vt(e.window), i = ls(e, t), o = r.increment(i, s, n), a = Math.max(0, e.limit - o.count), c = new Headers({
+  const s = Rt(e.window), i = us(e, t), o = r.increment(i, s, n), a = Math.max(0, e.limit - o.count), c = new Headers({
     "retry-after": String(Math.ceil(Math.max(0, o.resetAt - n) / 1e3)),
     "x-ratelimit-limit": String(e.limit),
     "x-ratelimit-remaining": String(a),
@@ -2472,7 +2428,7 @@ function fs(e, t, r, n = Date.now()) {
     status: 429
   }) : null;
 }
-function vt(e) {
+function Rt(e) {
   if (typeof e == "number") {
     if (!Number.isSafeInteger(e) || e <= 0)
       throw new Error("Demiurge rate limit window must be a positive integer.");
@@ -2481,7 +2437,7 @@ function vt(e) {
   const t = /^(\d+)(s|m|h)$/i.exec(e.trim());
   if (!t)
     throw new Error("Demiurge rate limit window must use an s/m/h suffix.");
-  const r = Number(t[1]), n = t[2].toLowerCase(), s = r * is[n];
+  const r = Number(t[1]), n = t[2].toLowerCase(), s = r * ns[n];
   if (!Number.isSafeInteger(s))
     throw new Error("Demiurge rate limit window is too large.");
   return s;
@@ -2489,28 +2445,28 @@ function vt(e) {
 function xe(e) {
   if (!Number.isSafeInteger(e.limit) || e.limit <= 0)
     throw new Error("Demiurge rate limit limit must be a positive integer.");
-  vt(e.window);
+  Rt(e.window);
 }
-function ls(e, t) {
-  return `${ds(e.key)}:${ms(e.key, t)}`;
+function us(e, t) {
+  return `${fs(e.key)}:${ls(e.key, t)}`;
 }
-function ds(e) {
+function fs(e) {
   return typeof e == "string" ? e : `header:${e.header.toLowerCase()}`;
 }
-function ms(e, t) {
-  return e === "ip" ? hs(t) : t.headers.get(e.header) ?? "missing";
+function ls(e, t) {
+  return e === "ip" ? ds(t) : t.headers.get(e.header) ?? "missing";
 }
-function hs(e) {
-  return $t(e)?.clientIp ?? "unknown";
+function ds(e) {
+  return Dt(e)?.clientIp ?? "unknown";
 }
-const ps = {
+const ms = {
   b: 1,
   gb: 1024 ** 3,
   kb: 1024,
   mb: 1024 ** 2
 };
-function gs(e, t, r) {
-  const n = ws(e, r);
+function hs(e, t, r) {
+  const n = gs(e, r);
   if (n)
     return n;
   if (e?.maxBodySize === void 0)
@@ -2518,12 +2474,12 @@ function gs(e, t, r) {
   const s = t.headers.get("content-length");
   if (!s)
     return null;
-  const i = Ss(s);
+  const i = ys(s);
   if (i === null)
     return new Response("Invalid Content-Length.", {
       status: 400
     });
-  const o = bt(e.maxBodySize);
+  const o = vt(e.maxBodySize);
   return i > o ? new Response("Request body too large.", {
     status: 413
   }) : null;
@@ -2533,10 +2489,10 @@ class L extends Error {
     super("Demiurge request body exceeded maxBodySize while being read."), this.name = "RequestBodyTooLargeError";
   }
 }
-function ys(e, t) {
+function ps(e, t) {
   if (e?.maxBodySize === void 0 || t.body === null)
     return t;
-  const r = bt(e.maxBodySize), n = t.body.getReader();
+  const r = vt(e.maxBodySize), n = t.body.getReader();
   let s = 0;
   const i = new ReadableStream({
     async pull(a) {
@@ -2568,18 +2524,18 @@ function ys(e, t) {
   });
   return Nt(t, o), o;
 }
-function z() {
+function B() {
   return new Response("Request body too large.", { status: 413 });
 }
-function ws(e, t) {
-  return !e?.allowedMethods || Es(e.allowedMethods, t) ? null : new Response(null, {
+function gs(e, t) {
+  return !e?.allowedMethods || ws(e.allowedMethods, t) ? null : new Response(null, {
     headers: {
-      allow: Rs(e.allowedMethods)
+      allow: Ss(e.allowedMethods)
     },
     status: 405
   });
 }
-function bt(e) {
+function vt(e) {
   if (typeof e == "number") {
     if (!Number.isSafeInteger(e) || e < 0)
       throw new Error("Demiurge request maxBodySize must be a non-negative integer.");
@@ -2590,25 +2546,25 @@ function bt(e) {
     throw new Error(
       "Demiurge request maxBodySize must use bytes or a b/kb/mb/gb suffix."
     );
-  const r = Number(t[1]), n = t[2].toLowerCase(), s = r * ps[n];
+  const r = Number(t[1]), n = t[2].toLowerCase(), s = r * ms[n];
   if (!Number.isSafeInteger(s))
     throw new Error("Demiurge request maxBodySize is too large.");
   return s;
 }
-function Ss(e) {
+function ys(e) {
   if (!/^\d+$/.test(e))
     return null;
   const t = Number(e);
   return Number.isSafeInteger(t) ? t : null;
 }
-function Es(e, t) {
+function ws(e, t) {
   return e.includes(t) || t === "HEAD" && e.includes("GET");
 }
-function Rs(e) {
+function Ss(e) {
   const t = [...e];
   return t.includes("GET") && !t.includes("HEAD") && t.push("HEAD"), t.join(", ");
 }
-const vs = [
+const Es = [
   "GET",
   "POST",
   "PUT",
@@ -2617,15 +2573,15 @@ const vs = [
   "OPTIONS",
   "HEAD"
 ];
-function bs(e, t = {}) {
+function Rs(e, t = {}) {
   for (const [n, s] of Object.entries(e)) {
-    Ts(n, s);
-    for (const i of vs) {
+    vs(n, s);
+    for (const i of Es) {
       const o = s[i];
-      !o || o.kind === "page" || xs(n, i, o, s);
+      !o || o.kind === "page" || bs(n, i, o, s);
     }
   }
-  const r = rt(
+  const r = et(
     Object.fromEntries(
       Object.entries(e).map(([n, s]) => [
         n,
@@ -2635,33 +2591,33 @@ function bs(e, t = {}) {
   );
   return As(r, e, t.adapter), r;
 }
-function Ts(e, t) {
+function vs(e, t) {
   const r = t.policy?.security?.rateLimit;
-  r && H(e, "policy", "rate limit", () => {
+  r && j(e, "policy", "rate limit", () => {
     xe(r);
   });
 }
-function xs(e, t, r, n) {
-  r.cors && H(e, t, "CORS", () => {
-    Te(r.cors), Ps(e, t, r.cors.methods, n);
-  }), r.security?.rateLimit && H(e, t, "rate limit", () => {
+function bs(e, t, r, n) {
+  r.cors && j(e, t, "CORS", () => {
+    Te(r.cors), Ts(e, t, r.cors.methods, n);
+  }), r.security?.rateLimit && j(e, t, "rate limit", () => {
     xe(r.security.rateLimit);
   });
 }
-function Ps(e, t, r, n) {
+function Ts(e, t, r, n) {
   if (r) {
     for (const s of r)
-      if (s !== "OPTIONS" && !ks(n, s))
+      if (s !== "OPTIONS" && !xs(n, s))
         throw new Error(
           `Route ${JSON.stringify(e)} export ${t} allows CORS method ${s}, but the route does not export that response capability.`
         );
   }
 }
-function ks(e, t) {
+function xs(e, t) {
   const r = t === "HEAD" ? e.HEAD ?? e.GET : e[t];
-  return Cs(r) ? r : void 0;
+  return Ps(r) ? r : void 0;
 }
-function Cs(e) {
+function Ps(e) {
   return !!(e && e.kind !== "page");
 }
 function As(e, t, r) {
@@ -2669,17 +2625,17 @@ function As(e, t, r) {
     const i = t[s.file], o = i?.GET;
     if (!o || o.kind !== "page")
       continue;
-    const a = K(
+    const a = Y(
       ...e.policies.filter(
         (c) => T(c.fileSegments, s.fileSegments)
       ).map((c) => t[c.file]?.policy),
       i.policy
     );
-    Be(s.file, "GET", a, r), $s(
+    qe(s.file, "GET", a, r), Os(
       s.file,
       o.render.mode,
       a.document
-    ), Ds(
+    ), Cs(
       s.file,
       "GET",
       a,
@@ -2697,13 +2653,13 @@ function As(e, t, r) {
     ...e.fallbacks.notFound
   ];
   for (const s of n) {
-    const i = K(
+    const i = Y(
       ...e.policies.filter(
         (o) => T(o.fileSegments, s.fileSegments)
       ).map((o) => t[o.file]?.policy),
       t[s.file]?.policy
     );
-    Be(
+    qe(
       s.file,
       "policy",
       i,
@@ -2711,47 +2667,103 @@ function As(e, t, r) {
     );
   }
 }
-function Ds(e, t, r, n) {
+function Cs(e, t, r, n) {
   const s = n.flatMap(
     (l) => Array.isArray(l) ? l : []
   );
   if (s.length === 0 || !r.document)
     return;
-  const i = "startup-verification-nonce", a = On({
+  const i = "startup-verification-nonce", a = Dn({
     document: {
       headers: { nonce: i },
       policy: r.document,
       scripts: s.map((l) => ({
         ...l,
-        nonce: X(r.document) ? i : l.nonce
+        nonce: ee(r.document) ? i : l.nonce
       }))
     }
   }).findings.find(
     (l) => l.code === "csp-script-src-blocked"
   );
-  if (!a)
+  if (!a) {
+    ks(
+      e,
+      t,
+      r.document.csp,
+      s
+    );
     return;
+  }
   const c = s.find(
     (l) => a.message.includes(l.src)
-  ), f = (F(r.document, { nonce: i }).get("content-security-policy") ?? "").split("; ").find(
+  ), f = (W(r.document, { nonce: i }).get("content-security-policy") ?? "").split("; ").find(
     (l) => l.startsWith("script-src ")
   ) ?? "default-src (script-src fallback)";
   throw new Error(
     `Route ${JSON.stringify(e)} export ${t} declares script ${JSON.stringify(c?.src)} that violates the effective ${f} policy.`
   );
 }
-function Be(e, t, r, n) {
-  H(e, t, "effective document", () => {
-    F(r.document ?? {}, {
+const $s = [
+  { directive: "connectSrc", name: "connect-src", need: "connect" },
+  { directive: "imgSrc", name: "img-src", need: "img" }
+];
+function ks(e, t, r, n) {
+  if (r)
+    for (const s of n)
+      for (const { directive: i, name: o, need: a } of $s) {
+        const c = s.needs?.[a] ?? [];
+        if (c.length === 0)
+          continue;
+        const u = H(r[i]) ?? H(r.defaultSrc);
+        if (u !== void 0) {
+          for (const f of c)
+            if (!(Array.isArray(u) && Ds(u, f)))
+              throw new Error(
+                `Route ${JSON.stringify(e)} export ${t} declares script ${JSON.stringify(s.src)} that needs ${o} ${f}, which the effective policy does not allow. Add ${f} to security.needs.${a} or to csp.${i} for this route.`
+              );
+        }
+      }
+}
+function Ds(e, t) {
+  return e.includes("'none'") ? !1 : e.includes("*") || e.includes(t) ? !0 : t.startsWith("'") ? !1 : e.some((r) => Ns(r, t));
+}
+function Ns(e, t) {
+  if (e.startsWith("'"))
+    return !1;
+  let r;
+  try {
+    r = new URL(t);
+  } catch {
+    return !1;
+  }
+  if (e === `${r.protocol}`)
+    return !0;
+  let n;
+  try {
+    n = new URL(e);
+  } catch {
+    return !1;
+  }
+  if (n.protocol !== r.protocol || n.port !== r.port)
+    return !1;
+  if (n.hostname.startsWith("*.")) {
+    const s = n.hostname.slice(1);
+    return r.hostname.endsWith(s) && r.hostname !== n.hostname.slice(2);
+  }
+  return n.hostname === r.hostname;
+}
+function qe(e, t, r, n) {
+  j(e, t, "effective document", () => {
+    W(r.document ?? {}, {
       nonce: "startup-verification-nonce"
     });
-  }), !(!n || !X(r.document)) && H(e, t, "effective CSP", () => {
+  }), !(!n || !ee(r.document)) && j(e, t, "effective CSP", () => {
     Ot(n, ["nonceInjection"]);
   });
 }
-function $s(e, t, r) {
+function Os(e, t, r) {
   if (t === "static") {
-    const s = Ns(r?.csp);
+    const s = Ls(r?.csp);
     if (s)
       throw new Error(
         `Route ${JSON.stringify(e)} uses render mode "static" with an effective ${s} directive that depends on a CSP nonce. Use security.static() for static output or remove the nonce source from the document policy.`
@@ -2760,49 +2772,49 @@ function $s(e, t, r) {
   }
   if (t !== "streaming")
     return;
-  const n = Os(r?.csp);
-  if (!(!n || Ls(n.sources)))
+  const n = Is(r?.csp);
+  if (!(!n || Ms(n.sources)))
     throw new Error(
       `Route ${JSON.stringify(e)} uses render mode "streaming" with an effective ${n.name} directive that does not allow React runtime inline payload scripts. Add a nonce placeholder or allow 'unsafe-inline' without nonce or hash sources.`
     );
 }
-function Ns(e) {
+function Ls(e) {
   if (e)
     for (const [t, r] of Object.entries(e)) {
-      const n = he(r);
-      if (Array.isArray(n) && n.some((s) => Is(s)))
-        return Us(t);
+      const n = H(r);
+      if (Array.isArray(n) && n.some((s) => Us(s)))
+        return js(t);
     }
 }
-function Os(e) {
+function Is(e) {
   if (!e)
     return;
-  const t = he(e.scriptSrc);
+  const t = H(e.scriptSrc);
   if (Array.isArray(t))
     return { name: "script-src", sources: t };
-  const r = he(e.defaultSrc);
+  const r = H(e.defaultSrc);
   if (Array.isArray(r))
     return { name: "default-src", sources: r };
 }
-function Ls(e) {
-  return e.some((t) => Tt(t)) ? !0 : e.includes("'unsafe-inline'") && !e.some((t) => Ms(t));
+function Ms(e) {
+  return e.some((t) => bt(t)) ? !0 : e.includes("'unsafe-inline'") && !e.some((t) => Hs(t));
 }
-function Is(e) {
-  return Tt(e) || /^'nonce-[^']*'$/i.test(e);
+function Us(e) {
+  return bt(e) || /^'nonce-[^']*'$/i.test(e);
 }
-function Tt(e) {
+function bt(e) {
   return e.includes("{nonce}");
 }
-function Ms(e) {
+function Hs(e) {
   return /^'(?:nonce-|sha256-|sha384-|sha512-)/i.test(e);
 }
-function he(e) {
+function H(e) {
   return e && typeof e == "object" && !Array.isArray(e) && "replace" in e ? e.replace : e;
 }
-function Us(e) {
+function js(e) {
   return e.replace(/[A-Z]/g, (t) => `-${t.toLowerCase()}`);
 }
-function H(e, t, r, n) {
+function j(e, t, r, n) {
   try {
     n();
   } catch (s) {
@@ -2815,8 +2827,8 @@ function H(e, t, r, n) {
     );
   }
 }
-function Hs(e) {
-  return V({
+function Fs(e) {
+  return J({
     instance: `${e.pathname}${e.search}`,
     status: 404,
     title: "Not Found"
@@ -2824,11 +2836,11 @@ function Hs(e) {
 }
 async function pe(e, t, r = {}) {
   const n = new URL(t.url);
-  if (!ut(t))
-    return Hs(n);
-  const s = await de(e, n.pathname, {
+  if (!at(t))
+    return Fs(n);
+  const s = await me(e, n.pathname, {
     onLayoutError: (u) => r.onError?.(u, "page")
-  }), i = await js(e, n.pathname), o = r.nonce ?? (X(i) ? mt() : void 0), a = Fs(s, { ...r, nonce: o }), c = F(i ?? {}, {
+  }), i = await Ws(e, n.pathname), o = r.nonce ?? (ee(i) ? dt() : void 0), a = qs(s, { ...r, nonce: o }), c = W(i ?? {}, {
     nonce: o,
     request: t
   });
@@ -2840,43 +2852,43 @@ async function pe(e, t, r = {}) {
     }
   );
 }
-async function js(e, t) {
+async function Ws(e, t) {
   const r = await Promise.all(
-    or(e, t).map((n) => n.load())
+    nr(e, t).map((n) => n.load())
   );
-  return K(...r.map((n) => n.policy)).document;
+  return Y(...r.map((n) => n.policy)).document;
 }
-function Fs(e, t = {}) {
-  const r = e.notFound ?? Me;
+function qs(e, t = {}) {
+  const r = e.notFound ?? Le;
   try {
-    return ae(e, r, e.layouts, t);
+    return ce(e, r, e.layouts, t);
   } catch (n) {
     t.onError?.(n, "page");
   }
   try {
-    return ae(e, r, [], t);
+    return ce(e, r, [], t);
   } catch (n) {
     t.onError?.(n, "page");
   }
-  return ae(e, Me, [], t);
+  return ce(e, Le, [], t);
 }
-function ae(e, t, r, n) {
+function ce(e, t, r, n) {
   const s = r.reduceRight(
-    (o, a) => ue(a, {
+    (o, a) => fe(a, {
       children: o,
       path: {},
       pathname: e.pathname
     }),
-    ue(t, { pathname: e.pathname })
-  ), i = Je({
+    fe(t, { pathname: e.pathname })
+  ), i = _e({
     dev: n.dev,
     nonce: n.nonce
   });
-  return Ye({
+  return Je({
     body: {
       data: void 0,
       fallback: "not-found",
-      html: Ze(Ke(i, s)),
+      html: Ke(Ve(i, s)),
       navigation: n.navigation
     },
     entrySrc: n.clientEntry,
@@ -2888,7 +2900,7 @@ function ae(e, t, r, n) {
     title: n.title
   });
 }
-const xt = [
+const Tt = [
   "GET",
   "POST",
   "PUT",
@@ -2896,12 +2908,12 @@ const xt = [
   "DELETE",
   "OPTIONS",
   "HEAD"
-], Pt = Rt();
-function Oi(e) {
-  e.routeModules && bs(e.routeModules, { adapter: e.adapter });
-  const t = rt(e.routes), r = e.rateLimitStore ?? Rt();
-  return e.cacheStore && Xe(e.cacheStore.namespace), async function(s) {
-    return await Ws(t, s, {
+], xt = Et();
+function Di(e) {
+  e.routeModules && Rs(e.routeModules, { adapter: e.adapter });
+  const t = et(e.routes), r = e.rateLimitStore ?? Et();
+  return e.cacheStore && Ze(e.cacheStore.namespace), async function(s) {
+    return await zs(t, s, {
       cacheStore: e.cacheStore,
       onError: e.onError,
       rateLimitStore: r,
@@ -2910,22 +2922,22 @@ function Oi(e) {
     });
   };
 }
-async function Ws(e, t, r = {
-  rateLimitStore: Pt
+async function zs(e, t, r = {
+  rateLimitStore: xt
 }) {
-  const n = new URL(t.url), s = Bs(n, r), i = ot(t);
+  const n = new URL(t.url), s = _s(n, r), i = st(t);
   let o;
   try {
-    o = j(e.routes, n.pathname);
+    o = F(e.routes, n.pathname);
   } catch (a) {
     if (!(a instanceof Ee))
       throw a;
-    const c = V({
+    const c = J({
       instance: `${n.pathname}${n.search}`,
       status: 400,
       title: "Bad Request"
     });
-    return i ? q(c, se) : c;
+    return i ? z(c, ie) : c;
   }
   if (!o)
     try {
@@ -2934,7 +2946,7 @@ async function Ws(e, t, r = {
         t,
         s
       );
-      return i ? q(a, Ie) : a;
+      return i ? z(a, Oe) : a;
     } catch (a) {
       return s.onError(a, "page"), new Response("Not Found", {
         headers: { "content-type": "text/plain; charset=utf-8" },
@@ -2942,7 +2954,7 @@ async function Ws(e, t, r = {
       });
     }
   try {
-    const a = await qs(
+    const a = await Bs(
       e,
       t,
       n,
@@ -2950,65 +2962,65 @@ async function Ws(e, t, r = {
       r,
       s
     );
-    return i && !a.headers.has(C) ? q(
+    return i && !a.headers.has(C) ? z(
       a,
-      a.status === 404 ? Ie : se
+      a.status === 404 ? Oe : ie
     ) : a;
   } catch (a) {
-    const c = await G(
+    const c = await _(
       e,
       t,
       a,
       "middleware",
       s
     );
-    return i ? q(c, se) : c;
+    return i ? z(c, ie) : c;
   }
 }
-async function qs(e, t, r, n, s, i) {
+async function Bs(e, t, r, n, s, i) {
   const o = await n.route.load();
   if (t.method.toUpperCase() === "OPTIONS") {
-    const h = xn(o, t);
+    const h = bn(o, t);
     if (h)
       return h;
   }
-  const a = Js(t.method);
+  const a = Ys(t.method);
   if (!a)
-    return Ve(o);
-  const c = Ks(o, a);
+    return Ge(o);
+  const c = Zs(o, a);
   if (!c)
-    return Ve(o);
-  const u = await _s(
+    return Ge(o);
+  const u = await Js(
     e,
     n.route,
     o,
     c
-  ), f = u.security, l = es(f?.csrf, t);
+  ), f = u.security, l = Qn(f?.csrf, t);
   if (l)
-    return _(l, ce(c), t);
-  const m = fs(
+    return V(l, ue(c), t);
+  const m = cs(
     f?.rateLimit,
     t,
-    s.rateLimitStore ?? Pt
+    s.rateLimitStore ?? xt
   );
   if (m)
-    return _(
+    return V(
       m,
-      ce(c),
+      ue(c),
       t
     );
-  const d = gs(
+  const d = hs(
     f?.request,
     t,
     a
   );
   if (d)
-    return _(
+    return V(
       d,
-      ce(c),
+      ue(c),
       t
     );
-  t = ys(f?.request, t);
+  t = ps(f?.request, t);
   const P = {};
   if (c.kind === "page") {
     const h = {
@@ -3018,29 +3030,29 @@ async function qs(e, t, r, n, s, i) {
       context: P,
       search: r.searchParams,
       url: r
-    }, ee = await Ge(
+    }, te = await ze(
       e,
       n.route
-    ), D = X(u.document) ? mt() : void 0, kt = zs(s.cacheStore);
+    ), k = ee(u.document) ? dt() : void 0, Pt = Gs(s.cacheStore);
     let E;
     try {
-      E = await _e(ee, h, async () => {
+      E = await Be(te, h, async () => {
         try {
-          const p = await nt(
+          const p = await tt(
             e,
             r.pathname,
             t,
             void 0,
-            kt,
+            Pt,
             { requestContext: P }
           );
           if (p.status !== "ready")
             return await pe(e, t, {
               ...i,
-              nonce: D
+              nonce: k
             });
-          if (ot(t))
-            return wr(p.match.data);
+          if (st(t))
+            return pr(p.match.data);
           if (p.match.render.mode === "streaming" && !s.renderPage)
             throw new Error(
               "Streaming page routes require an adapter renderer. Pass renderNodePageResponse from @demiurgejs/core/node as createRequestHandler({ renderPage })."
@@ -3048,9 +3060,9 @@ async function qs(e, t, r, n, s, i) {
           return await (s.renderPage ?? Lt)(p.match, {
             ...s.ssr,
             dev: s.dev,
-            nonce: D,
-            onStreamError: (At) => {
-              s.onError?.(At, {
+            nonce: k,
+            onStreamError: (Ct) => {
+              s.onError?.(Ct, {
                 pathname: r.pathname,
                 site: "page"
               });
@@ -3058,49 +3070,49 @@ async function qs(e, t, r, n, s, i) {
             signal: t.signal
           });
         } catch (p) {
-          return p instanceof L ? z() : await G(e, t, p, "page", {
+          return p instanceof L ? B() : await _(e, t, p, "page", {
             ...i,
-            nonce: D
+            nonce: k
           });
         }
       });
     } catch (p) {
       if (!(p instanceof L))
         throw p;
-      E = z();
+      E = B();
     }
-    const Ct = F(u.document ?? {}, {
-      nonce: D,
+    const At = W(u.document ?? {}, {
+      nonce: k,
       request: t
     });
-    for (const [p, Pe] of Ct)
+    for (const [p, Pe] of At)
       E.headers.set(p, Pe);
-    return D && E.headers.set("cache-control", "private, no-store"), a === "HEAD" ? (await E.body?.cancel(), new Response(null, {
+    return k && E.headers.set("cache-control", "private, no-store"), a === "HEAD" ? (await E.body?.cancel(), new Response(null, {
       headers: E.headers,
       status: E.status
     })) : E;
   }
-  const A = {
+  const $ = {
     path: n.path,
     pathname: r.pathname,
     request: t,
     context: P,
     search: r.searchParams,
     url: r
-  }, g = await Ge(
+  }, g = await ze(
     e,
     n.route
   );
-  let k;
+  let A;
   try {
-    k = await _e(g, A, async () => {
+    A = await Be(g, $, async () => {
       try {
-        return c.kind === "not-found" && c.body === void 0 ? Gs(
+        return c.kind === "not-found" && c.body === void 0 ? Vs(
           await pe(e, t, i),
           c.init
-        ) : await Tr(c, A);
+        ) : await Rr(c, $);
       } catch (h) {
-        return h instanceof L ? z() : await G(
+        return h instanceof L ? B() : await _(
           e,
           t,
           h,
@@ -3112,12 +3124,12 @@ async function qs(e, t, r, n, s, i) {
   } catch (h) {
     if (!(h instanceof L))
       throw h;
-    k = z();
+    A = B();
   }
   try {
-    return Vs(k, c, t, a);
+    return Ks(A, c, t, a);
   } catch (h) {
-    return await G(
+    return await _(
       e,
       t,
       h,
@@ -3126,10 +3138,10 @@ async function qs(e, t, r, n, s, i) {
     );
   }
 }
-function zs(e) {
-  return e ? Qe(e) : ge();
+function Gs(e) {
+  return e ? Ye(e) : ge();
 }
-function Bs(e, t) {
+function _s(e, t) {
   return {
     ...t.ssr,
     dev: t.dev,
@@ -3139,7 +3151,7 @@ function Bs(e, t) {
     transformDocument: t.transformDocument
   };
 }
-function Gs(e, t) {
+function Vs(e, t) {
   if (!t)
     return e;
   const r = new Headers(e.headers), n = new Headers(t.headers);
@@ -3153,13 +3165,13 @@ function Gs(e, t) {
     statusText: t.statusText ?? e.statusText
   });
 }
-async function _s(e, t, r, n) {
+async function Js(e, t, r, n) {
   const s = await Promise.all(
     e.policies.filter(
       (i) => T(i.fileSegments, t.fileSegments)
     ).map((i) => i.load())
   );
-  return K(
+  return Y(
     ...s.map((i) => i.policy),
     r.policy,
     {
@@ -3167,7 +3179,7 @@ async function _s(e, t, r, n) {
     }
   );
 }
-async function Ge(e, t) {
+async function ze(e, t) {
   return (await Promise.all(
     e.middlewares.filter(
       (n) => T(n.fileSegments, t.fileSegments)
@@ -3176,7 +3188,7 @@ async function Ge(e, t) {
     (n) => n.middleware ? [n.middleware] : []
   );
 }
-async function _e(e, t, r) {
+async function Be(e, t, r) {
   let n = -1;
   async function s(i) {
     if (i <= n)
@@ -3187,9 +3199,9 @@ async function _e(e, t, r) {
   }
   return await s(0);
 }
-function Vs(e, t, r, n) {
-  const s = Lr(
-    _(e, t.cors, r),
+function Ks(e, t, r, n) {
+  const s = Dr(
+    V(e, t.cors, r),
     t.timing
   );
   return n === "HEAD" ? new Response(null, {
@@ -3198,117 +3210,112 @@ function Vs(e, t, r, n) {
     statusText: s.statusText
   }) : s;
 }
-function ce(e) {
+function ue(e) {
   return e.kind === "page" ? void 0 : e.cors;
 }
-function Js(e) {
+function Ys(e) {
   const t = e.toUpperCase();
-  return xt.includes(t) ? t : null;
+  return Tt.includes(t) ? t : null;
 }
-function Ks(e, t) {
+function Zs(e, t) {
   return t === "HEAD" ? e.HEAD ?? e.GET : e[t];
 }
-function Ve(e) {
+function Ge(e) {
   return new Response(null, {
     headers: {
-      allow: Ys(e).join(", ")
+      allow: Qs(e).join(", ")
     },
     status: 405
   });
 }
-function Ys(e) {
-  const t = xt.filter((r) => e[r]);
+function Qs(e) {
+  const t = Tt.filter((r) => e[r]);
   return e.GET && !t.includes("HEAD") && t.push("HEAD"), t;
 }
 export {
-  fs as $,
-  Ie as A,
-  se as B,
-  Ci as C,
-  Me as D,
-  ve as E,
-  at as F,
-  In as G,
-  Fr as H,
-  Qe as I,
-  wt as J,
-  Xn as K,
-  Qn as L,
-  si as M,
+  hs as $,
+  hr as A,
+  Oe as B,
+  ie as C,
+  Pi as D,
+  Le as E,
+  ve as F,
+  it as G,
+  Ur as H,
+  On as I,
+  Ye as J,
+  yt as K,
+  Zn as L,
+  Yn as M,
   C as N,
-  ge as O,
-  Ht as P,
-  Oi as Q,
+  oi as O,
+  ge as P,
+  Ht as Q,
   L as R,
-  On as S,
-  He as T,
-  ii as U,
-  ui as V,
-  Di as W,
-  Ai as X,
-  ni as Y,
-  ws as Z,
-  es as _,
-  Rt as a,
-  gs as a0,
-  Ri as a1,
-  Ni as a2,
-  wi as a3,
-  Si as a4,
-  li as a5,
-  K as a6,
-  an as a7,
-  fi as a8,
-  ci as a9,
-  bi as aa,
-  ts as ab,
-  vt as ac,
-  oi as ad,
-  ai as ae,
-  ti as af,
-  vi as ag,
-  _t as ah,
-  v as ai,
-  Xe as aj,
-  fe as ak,
-  ki as al,
-  Pi as am,
-  xi as an,
-  di as ao,
-  ri as ap,
-  Ei as aq,
-  gi as ar,
-  T as as,
-  yi as at,
-  pi as au,
-  cr as av,
-  pr as aw,
-  Q as ax,
-  R as ay,
-  $i as b,
-  mi as c,
-  F as d,
-  Te as e,
-  xe as f,
-  mt as g,
-  Ws as h,
-  j as i,
-  rt as j,
-  Ae as k,
-  Ti as l,
-  on as m,
-  ys as n,
-  bt as o,
+  Dn as S,
+  Me as T,
+  ai as U,
+  Ci as V,
+  Ai as W,
+  ii as X,
+  gs as Y,
+  Qn as Z,
+  cs as _,
+  Rs as a,
+  Si as a0,
+  ki as a1,
+  gi as a2,
+  yi as a3,
+  ui as a4,
+  Y as a5,
+  nn as a6,
+  ci as a7,
+  Ri as a8,
+  Xn as a9,
+  Rt as aa,
+  ni as ab,
+  Ei as ac,
+  v as ad,
+  Ze as ae,
+  le as af,
+  xi as ag,
+  Ti as ah,
+  bi as ai,
+  fi as aj,
+  si as ak,
+  wi as al,
+  hi as am,
+  T as an,
+  pi as ao,
+  mi as ap,
+  ir as aq,
+  dr as ar,
+  X as as,
+  R as at,
+  li as b,
+  Di as c,
+  Et as d,
+  $i as e,
+  W as f,
+  xe as g,
+  zs as h,
+  dt as i,
+  F as j,
+  et as k,
+  $e as l,
+  rn as m,
+  vi as n,
+  ps as o,
   U as p,
-  Sr as q,
+  vt as q,
   pe as r,
-  $ as s,
-  Tr as t,
-  hi as u,
-  bs as v,
-  nt as w,
-  nr as x,
-  gr as y,
-  yr as z
+  D as s,
+  Rr as t,
+  gr as u,
+  Te as v,
+  di as w,
+  tt as x,
+  er as y,
+  mr as z
 };
-//# sourceMappingURL=testing-DBjVCN5v.js.map
+//# sourceMappingURL=testing-B_iMFYz_.js.map