@demiurgejs/core 0.2.0-beta.1 → 0.2.0-beta.3

package/dist/index.js

@@ -1,184 +1,186 @@
-import { jsx as H } from "react/jsx-runtime";
-import { createContext as _, useState as I, useRef as T, useEffect as C, useMemo as V, createElement as f, useContext as W, Component as G } from "react";
-import { g as K, H as Y, h as Z, i as Q } from "./chunks/request-metadata-DwEO1EAS.js";
-import { j as Qt, k as Xt, l as Jt, d as er, m as tr, r as rr, n as nr } from "./chunks/request-metadata-DwEO1EAS.js";
-import { p as z, k as X, l as J, t as ee, n as te, R as re, o as x, q as ne, j as O, u as ae, w as L, x as ie, N as D, y as oe, z as se, A as ce, B as ue, H as le, C as fe, D as de, E as me } from "./chunks/testing-DBjVCN5v.js";
-import { F as ir, G as or, I as sr, J as cr, K as ur, L as lr, M as fr, O as dr, P as mr, a as hr, Q as gr, S as pr, d as wr, b as yr, T as vr, U as br, V as Er, W as Sr, X as Rr, Y as Ar, Z as $r, _ as xr, $ as kr, a0 as Ir, h as Tr, a1 as Cr, a2 as zr, a3 as Dr, a4 as Nr, a5 as Or, a6 as Lr, a7 as Mr, m as Pr, a8 as Ur, a9 as Fr, aa as jr, ab as Br, ac as qr, ad as Hr, ae as _r, af as Vr, ag as Wr, ah as Gr, ai as Kr, s as Yr, aj as Zr, ak as Qr, al as Xr, am as Jr, an as en, ao as tn, ap as rn, aq as nn, e as an, f as on, v as sn } from "./chunks/testing-DBjVCN5v.js";
+import { jsx as V } from "react/jsx-runtime";
+import { createContext as re, useState as F, useRef as z, useEffect as P, useMemo as ne, createElement as w, useContext as oe, Component as ae } from "react";
+import { g as ie, H as se, h as U, i as ce, j as I } from "./chunks/request-metadata-DaIYq4Ea.js";
+import { F as xr, k as Cr, l as Ir, m as Nr, n as Lr, d as Pr, o as Dr, q as Or, t as Mr, u as Fr, v as zr, p as Ur, a as Br, w as _r, x as jr } from "./chunks/request-metadata-DaIYq4Ea.js";
+import { z as B, x as ue, A as le, B as fe, C as de, D as he, R as me, E as D, F as pe, y as W, G as ge, i as q, H as we, N as _, I as ye, J as ve, K as be, L as Se, O as Ee, P as Re, Q as Te, S as ke } from "./chunks/testing-CRflAw4X.js";
+import { T as Vr, U as Wr, V as qr, W as Gr, X as Kr, Y as Jr, Z as Yr, _ as Zr, $ as Xr, a0 as Qr, a1 as en, u as tn, a2 as rn, d as nn, c as on, q as an, f as sn, e as cn, a3 as un, a4 as ln, a5 as fn, a6 as dn, a7 as hn, a8 as mn, a9 as pn, aa as gn, ab as wn, ac as yn, h as vn, ad as bn, ae as Sn, af as En, ag as Rn, ah as Tn, ai as kn, aj as An, ak as $n, m as xn, al as Cn, am as In, an as Nn, ao as Ln, ap as Pn, aq as Dn, s as On, ar as Mn, w as Fn, as as zn, at as Un, au as Bn, av as _n, aw as jn, ax as Hn, v as Vn, g as Wn, a as qn } from "./chunks/testing-CRflAw4X.js";
+import { k as Ae } from "./chunks/images-Edar3eU1.js";
+import { d as Kn, l as Jn, m as Yn, n as Zn, f as Xn, o as Qn, q as eo, a as to, s as ro, t as no, b as oo, h as ao, j as io, r as so } from "./chunks/images-Edar3eU1.js";
 import "react-dom/server";
-const he = "24h", ge = 1e4;
-function vt(e = {}) {
-  const t = e.now ?? Date.now, r = e.defaultTtl ?? he, n = e.maximumEntries ?? ge;
+const $e = "24h", xe = 1e4;
+function Yt(e = {}) {
+  const t = e.now ?? Date.now, r = e.defaultTtl ?? $e, n = e.maximumEntries ?? xe;
   if (!Number.isSafeInteger(n) || n <= 0)
     throw new Error(
       "Demiurge idempotency maximumEntries must be a positive integer."
     );
-  const a = z(r);
-  if (!Number.isFinite(a))
+  const o = B(r);
+  if (!Number.isFinite(o))
     throw new Error("Demiurge idempotency defaultTtl must be finite.");
-  const i = /* @__PURE__ */ new Map();
+  const a = /* @__PURE__ */ new Map();
   return {
-    async run(s) {
-      const o = X(s.key), u = t();
-      pe(i, u);
-      const d = i.get(o);
-      if (d && (d.pending || d.expiresAt > u))
+    async run(i) {
+      const s = ue(i.key), l = t();
+      Ce(a, l);
+      const d = a.get(s);
+      if (d && (d.pending || d.expiresAt > l))
         return {
-          key: o,
+          key: s,
           replayed: !0,
           value: await d.value
         };
-      if (i.size >= n && we(i), i.size >= n)
+      if (a.size >= n && Ie(a), a.size >= n)
         throw new Error(
           "Demiurge idempotency store is at capacity with in-flight mutations."
         );
-      const p = Promise.resolve().then(s.fn), c = {
+      const p = Promise.resolve().then(i.fn), c = {
         expiresAt: Number.POSITIVE_INFINITY,
         pending: !0,
         value: p
       };
-      i.set(o, c);
+      a.set(s, c);
       try {
-        const l = await p;
-        return c.pending = !1, c.expiresAt = t() + z(s.ttl ?? r), {
-          key: o,
+        const f = await p;
+        return c.pending = !1, c.expiresAt = t() + B(i.ttl ?? r), {
+          key: s,
           replayed: !1,
-          value: l
+          value: f
         };
-      } catch (l) {
-        throw i.get(o) === c && i.delete(o), l;
+      } catch (f) {
+        throw a.get(s) === c && a.delete(s), f;
       }
     }
   };
 }
-function pe(e, t) {
+function Ce(e, t) {
   for (const [r, n] of e)
     !n.pending && n.expiresAt <= t && e.delete(r);
 }
-function we(e) {
+function Ie(e) {
   for (const [t, r] of e)
     if (!r.pending) {
       e.delete(t);
       return;
     }
 }
-function bt(e, t) {
+function Zt(e, t) {
   return e.run(t);
 }
-function Et(e) {
+function Xt(e) {
   return {
     entries: e
   };
 }
-function St(e) {
+function Qt(e) {
   return [
     '<?xml version="1.0" encoding="UTF-8"?>',
     `<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"${e.entries.some((r) => r.alternates?.length) ? ' xmlns:xhtml="http://www.w3.org/1999/xhtml"' : ""}>`,
-    ...e.entries.map(ve),
+    ...e.entries.map(Le),
     "</urlset>",
     ""
   ].join(`
 `);
 }
-function Rt(e) {
+function er(e) {
   return e;
 }
-function At(e) {
+function tr(e) {
   return e;
 }
-function $t(e) {
+function rr(e) {
   const t = [];
   for (const r of e.rules ?? []) {
-    for (const n of b(r.userAgent))
+    for (const n of A(r.userAgent))
       t.push(`User-agent: ${n}`);
-    for (const n of b(r.allow))
+    for (const n of A(r.allow))
       t.push(`Allow: ${n}`);
-    for (const n of b(r.disallow))
+    for (const n of A(r.disallow))
       t.push(`Disallow: ${n}`);
     t.push("");
   }
   e.host && t.push(`Host: ${e.host}`);
-  for (const r of b(e.sitemap))
+  for (const r of A(e.sitemap))
     t.push(`Sitemap: ${r}`);
   return `${t.join(`
 `).replace(/\n+$/, "")}
 `;
 }
-function ye(e) {
-  const t = e.width ?? 1200, r = e.height ?? 630, n = e.background ?? "#101820", a = e.foreground ?? "#ffffff", i = A(e.title, 120), s = e.subtitle ? A(e.subtitle, 160) : void 0, o = e.brand ? A(e.brand, 80) : void 0;
-  return Se(t, r), [
-    `<svg xmlns="http://www.w3.org/2000/svg" width="${t}" height="${r}" viewBox="0 0 ${t} ${r}" role="img" aria-label="${g(i)}">`,
-    `  <rect width="100%" height="100%" fill="${g(n)}" />`,
-    o ? `  <text x="72" y="96" fill="${g(a)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="32" font-weight="700">${w(o)}</text>` : null,
-    `  <text x="72" y="${s ? 300 : 340}" fill="${g(a)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="76" font-weight="800">${w(i)}</text>`,
-    s ? `  <text x="72" y="392" fill="${g(a)}" fill-opacity="0.78" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="38" font-weight="500">${w(s)}</text>` : null,
+function Ne(e) {
+  const t = e.width ?? 1200, r = e.height ?? 630, n = e.background ?? "#101820", o = e.foreground ?? "#ffffff", a = N(e.title, 120), i = e.subtitle ? N(e.subtitle, 160) : void 0, s = e.brand ? N(e.brand, 80) : void 0;
+  return Oe(t, r), [
+    `<svg xmlns="http://www.w3.org/2000/svg" width="${t}" height="${r}" viewBox="0 0 ${t} ${r}" role="img" aria-label="${E(a)}">`,
+    `  <rect width="100%" height="100%" fill="${E(n)}" />`,
+    s ? `  <text x="72" y="96" fill="${E(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="32" font-weight="700">${R(s)}</text>` : null,
+    `  <text x="72" y="${i ? 300 : 340}" fill="${E(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="76" font-weight="800">${R(a)}</text>`,
+    i ? `  <text x="72" y="392" fill="${E(o)}" fill-opacity="0.78" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="38" font-weight="500">${R(i)}</text>` : null,
     "</svg>"
-  ].filter((u) => !!u).join(`
+  ].filter((l) => !!l).join(`
 `);
 }
-function xt(e) {
-  return new Response(ye(e), {
+function nr(e) {
+  return new Response(Ne(e), {
     headers: {
       "cache-control": "public, max-age=31536000, immutable",
       "content-type": "image/svg+xml; charset=utf-8"
     }
   });
 }
-function ve(e) {
+function Le(e) {
   return [
     "  <url>",
-    `    <loc>${w(e.url)}</loc>`,
-    e.lastModified ? `    <lastmod>${w(be(e.lastModified))}</lastmod>` : null,
+    `    <loc>${R(e.url)}</loc>`,
+    e.lastModified ? `    <lastmod>${R(Pe(e.lastModified))}</lastmod>` : null,
     e.changeFrequency ? `    <changefreq>${e.changeFrequency}</changefreq>` : null,
-    e.priority !== void 0 ? `    <priority>${Ee(e.priority)}</priority>` : null,
+    e.priority !== void 0 ? `    <priority>${De(e.priority)}</priority>` : null,
     ...(e.alternates ?? []).map(
-      (t) => `    <xhtml:link rel="alternate" hreflang="${g(t.hrefLang)}" href="${g(t.href)}" />`
+      (t) => `    <xhtml:link rel="alternate" hreflang="${E(t.hrefLang)}" href="${E(t.href)}" />`
     ),
     "  </url>"
   ].filter((t) => !!t).join(`
 `);
 }
-function be(e) {
+function Pe(e) {
   return e instanceof Date ? e.toISOString() : e;
 }
-function Ee(e) {
+function De(e) {
   if (e < 0 || e > 1)
     throw new Error("Sitemap entry priority must be between 0 and 1.");
   return String(e);
 }
-function b(e) {
+function A(e) {
   return e === void 0 ? [] : Array.isArray(e) ? e : [e];
 }
-function w(e) {
+function R(e) {
   return e.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 }
-function g(e) {
-  return w(e).replaceAll('"', "&quot;").replaceAll("'", "&apos;");
+function E(e) {
+  return R(e).replaceAll('"', "&quot;").replaceAll("'", "&apos;");
 }
-function A(e, t) {
+function N(e, t) {
   return e.length > t ? `${e.slice(0, t - 3)}...` : e;
 }
-function Se(e, t) {
+function Oe(e, t) {
   if (!Number.isSafeInteger(e) || e <= 0)
     throw new Error("OG image width must be a positive integer.");
   if (!Number.isSafeInteger(t) || t <= 0)
     throw new Error("OG image height must be a positive integer.");
 }
-function kt(e) {
-  return J(
+function or(e) {
+  return le(
     async (t) => {
       const r = e.input ? await e.input(t) : void 0, n = {
         ...t,
         input: r
-      }, a = async () => await Re(
+      }, o = async () => await Me(
         await e.handler(n),
         t
       );
       if (!e.idempotency)
-        return await a();
-      const i = typeof e.idempotency.key == "function" ? e.idempotency.key(n) : e.idempotency.key;
+        return await o();
+      const a = typeof e.idempotency.key == "function" ? e.idempotency.key(n) : e.idempotency.key;
       return (await e.idempotency.store.run({
-        fn: a,
-        key: i,
+        fn: o,
+        key: a,
         ttl: e.idempotency.ttl
       })).value;
     },
@@ -189,7 +191,7 @@ function kt(e) {
     }
   );
 }
-const It = {
+const ar = {
   async formData({ request: e }) {
     return await e.formData();
   },
@@ -200,10 +202,10 @@ const It = {
     return await e.text();
   }
 };
-async function Re(e, t) {
-  return e instanceof Response ? e : await ee(e, t);
+async function Me(e, t) {
+  return e instanceof Response ? e : await fe(e, t);
 }
-function Tt(e) {
+function ir(e) {
   return typeof e == "function" ? {
     kind: "page",
     render: { mode: "ssr" },
@@ -216,10 +218,10 @@ function Tt(e) {
     view: e.view
   };
 }
-function Ct(e) {
+function sr(e) {
   return e;
 }
-const zt = {
+const cr = {
   hmac(e) {
     return {
       kind: "response",
@@ -227,7 +229,7 @@ const zt = {
         const r = new Uint8Array(await t.request.arrayBuffer()), n = t.request.headers.get(
           e.header ?? "x-webhook-signature"
         );
-        return n ? await Ae(r, n, e) ? await e.handler({
+        return n ? await Fe(r, n, e) ? await e.handler({
           ...t,
           rawBody: r,
           text: () => new TextDecoder().decode(r)
@@ -243,15 +245,15 @@ const zt = {
     };
   }
 };
-async function Ae(e, t, r) {
-  const n = r.algorithm ?? "SHA-256", a = r.encoding ?? "hex", i = $e(
+async function Fe(e, t, r) {
+  const n = r.algorithm ?? "SHA-256", o = r.encoding ?? "hex", a = ze(
     t,
     n,
     r.prefix
-  ), s = xe(i, a);
-  if (!s)
+  ), i = Ue(a, o);
+  if (!i)
     return !1;
-  const o = await globalThis.crypto.subtle.importKey(
+  const s = await globalThis.crypto.subtle.importKey(
     "raw",
     new TextEncoder().encode(r.secret),
     {
@@ -263,16 +265,16 @@ async function Ae(e, t, r) {
   );
   return await globalThis.crypto.subtle.verify(
     "HMAC",
-    o,
     s,
+    i,
     Uint8Array.from(e).buffer
   );
 }
-function $e(e, t, r) {
-  const n = e.trim(), a = r === void 0 ? `${t.toLowerCase().replace("-", "")}=` : r;
-  return a !== !1 && n.startsWith(a) ? n.slice(a.length).trim() : n;
+function ze(e, t, r) {
+  const n = e.trim(), o = r === void 0 ? `${t.toLowerCase().replace("-", "")}=` : r;
+  return o !== !1 && n.startsWith(o) ? n.slice(o.length).trim() : n;
 }
-function xe(e, t) {
+function Ue(e, t) {
   if (t === "hex")
     return /^(?:[0-9a-f]{2})+$/i.test(e) ? Uint8Array.from(
       e.match(/.{2}/g) ?? [],
@@ -289,47 +291,110 @@ function xe(e, t) {
     return null;
   }
 }
-class ke extends Error {
+const Be = /^[!#$%&'*+\-.^_`|~A-Za-z0-9]+$/, _e = {
+  host: "__Host-",
+  none: "",
+  secure: "__Secure-"
+}, j = 4096;
+function O(e, t = "host") {
+  return `${_e[t]}${e}`;
+}
+function je(e) {
+  const t = e.scope ?? "host", r = O(e.name, t), n = [], o = (a, i) => {
+    n.push({ code: a, message: i, name: r });
+  };
+  if (Be.test(e.name) || o(
+    "cookie-name-invalid",
+    `Cookie name ${JSON.stringify(e.name)} contains a character that a cookie name cannot hold. Use letters, digits, or the token characters that RFC 6265 allows.`
+  ), (e.name.startsWith("__Host-") || e.name.startsWith("__Secure-")) && o(
+    "cookie-name-carries-prefix",
+    `Cookie name ${JSON.stringify(e.name)} already carries a prefix. Remove the prefix from name and declare scope ${JSON.stringify(t === "none" ? "host" : t)} instead.`
+  ), t !== "none" && e.secure === !1 && o(
+    "cookie-scope-requires-secure",
+    `Cookie ${r} uses scope ${JSON.stringify(t)}, so it requires Secure. Remove secure: false, or declare scope "none" for a cookie that a browser must accept over plain HTTP.`
+  ), t === "host" && e.domain !== void 0 && o(
+    "cookie-domain-not-allowed",
+    `Cookie ${r} uses scope "host", so it cannot carry a Domain attribute. Remove domain, or declare scope "secure" to share the cookie with subdomains.`
+  ), t === "host" && e.path !== void 0 && e.path !== "/" && o(
+    "cookie-path-not-allowed",
+    `Cookie ${r} uses scope "host", so it requires Path=/. Remove path, or declare scope "secure" for a cookie that a path must limit.`
+  ), e.sameSite === "None" && e.secure === !1 && o(
+    "cookie-same-site-none-requires-secure",
+    `Cookie ${r} declares SameSite=None, so it requires Secure. Remove secure: false, or declare a SameSite policy of "Lax" or "Strict".`
+  ), e.maxAge !== void 0 && (!Number.isInteger(e.maxAge) || e.maxAge < 0) && o(
+    "cookie-max-age-invalid",
+    `Cookie ${r} declares maxAge ${JSON.stringify(e.maxAge)}. Use a whole number of seconds that is zero or greater.`
+  ), n.length === 0) {
+    const a = new TextEncoder().encode(G(e, t, r)).length;
+    a > j && o(
+      "cookie-too-large",
+      `Cookie ${r} serializes to ${a} bytes, and a browser drops a cookie above ${j} bytes. Store the payload on the server and keep an identifier in the cookie.`
+    );
+  }
+  return n;
+}
+function ur(e, t = "host") {
+  if (typeof document > "u")
+    return;
+  const r = typeof e == "string" ? { name: e, scope: t } : e;
+  return de(document.cookie).get(
+    O(r.name, r.scope ?? "host")
+  );
+}
+function lr(e) {
+  const t = je(e);
+  if (t.length > 0)
+    throw new Error(
+      `Demiurge rejected a cookie declaration. ${t.map((n) => n.message).join(" ")}`
+    );
+  const r = e.scope ?? "host";
+  return G(e, r, O(e.name, r));
+}
+function G(e, t, r) {
+  const n = [`${r}=${encodeURIComponent(e.value)}`], o = t === "host" ? "/" : e.path ?? "/";
+  return n.push(`Path=${o}`), t !== "host" && e.domain !== void 0 && n.push(`Domain=${e.domain}`), e.expires && n.push(`Expires=${e.expires.toUTCString()}`), e.maxAge !== void 0 && n.push(`Max-Age=${e.maxAge}`), n.push(`SameSite=${e.sameSite ?? "Lax"}`), (e.httpOnly ?? !0) && n.push("HttpOnly"), (t !== "none" || (e.secure ?? !0)) && n.push("Secure"), n.join("; ");
+}
+class He extends Error {
   issues;
   constructor(t) {
-    super(Oe(t)), this.name = "EnvValidationError", this.issues = t;
+    super(Ye(t)), this.name = "EnvValidationError", this.issues = t;
   }
 }
-function Dt(e) {
+function fr(e) {
   return e;
 }
-function Nt(e, t) {
+function dr(e, t) {
   const r = [], n = {};
-  for (const a of Object.keys(e)) {
-    const i = e[a], s = t[String(a)];
-    if (s === void 0 || s === "") {
-      if (i.optional) {
-        n[a] = void 0;
+  for (const o of Object.keys(e)) {
+    const a = e[o], i = t[String(o)];
+    if (i === void 0 || i === "") {
+      if (a.optional) {
+        n[o] = void 0;
         continue;
       }
       r.push({
         code: "missing",
-        key: String(a),
-        message: `Environment variable ${String(a)} is required.`
+        key: String(o),
+        message: `Environment variable ${String(o)} is required.`
       });
       continue;
     }
     try {
-      n[a] = i.parse(String(a), s);
-    } catch (o) {
+      n[o] = a.parse(String(o), i);
+    } catch (s) {
       r.push({
         code: "invalid",
-        key: String(a),
-        message: o instanceof Error ? o.message : `Environment variable ${String(a)} is invalid.`
+        key: String(o),
+        message: s instanceof Error ? s.message : `Environment variable ${String(o)} is invalid.`
       });
     }
   }
   if (r.length)
-    throw new ke(r);
+    throw new He(r);
   return n;
 }
-function Ie(e = {}) {
-  return y(e, !1, (t, r) => {
+function Ve(e = {}) {
+  return T(e, !1, (t, r) => {
     if (r === "true" || r === "1")
       return !0;
     if (r === "false" || r === "0")
@@ -337,8 +402,8 @@ function Ie(e = {}) {
     throw new Error(`Environment variable ${t} must be true, false, 1, or 0.`);
   });
 }
-function Te(e, t = {}) {
-  return y(t, !1, (r, n) => {
+function We(e, t = {}) {
+  return T(t, !1, (r, n) => {
     if (e.includes(n))
       return n;
     throw new Error(
@@ -346,8 +411,8 @@ function Te(e, t = {}) {
     );
   });
 }
-function Ce(e = {}) {
-  return y(e, !1, (t, r) => {
+function qe(e = {}) {
+  return T(e, !1, (t, r) => {
     if (!/^-?\d+$/.test(r))
       throw new Error(`Environment variable ${t} must be an integer.`);
     const n = Number(r);
@@ -364,22 +429,22 @@ function Ce(e = {}) {
     return n;
   });
 }
-function ze(e = {}) {
-  return y(
+function Ge(e = {}) {
+  return T(
     e,
     !0,
-    (t, r) => M(t, r, e)
+    (t, r) => K(t, r, e)
   );
 }
-function De(e = {}) {
-  return y(
+function Ke(e = {}) {
+  return T(
     e,
     !1,
-    (t, r) => M(t, r, e)
+    (t, r) => K(t, r, e)
   );
 }
-function Ne(e = {}) {
-  return y(e, !1, (t, r) => {
+function Je(e = {}) {
+  return T(e, !1, (t, r) => {
     let n;
     try {
       n = new URL(r);
@@ -393,32 +458,32 @@ function Ne(e = {}) {
     return n;
   });
 }
-const Ot = {
-  boolean: Ie,
-  enum: Te,
-  integer: Ce,
-  secret: ze,
-  string: De,
-  url: Ne
+const hr = {
+  boolean: Ve,
+  enum: We,
+  integer: qe,
+  secret: Ge,
+  string: Ke,
+  url: Je
 };
-function y(e, t, r) {
+function T(e, t, r) {
   return {
     optional: e.optional ?? !1,
     parse: r,
     sensitive: t
   };
 }
-function M(e, t, r) {
+function K(e, t, r) {
   if (r.minLength !== void 0 && t.length < r.minLength)
     throw new Error(
       `Environment variable ${e} must be at least ${r.minLength} characters.`
     );
   return t;
 }
-function Oe(e) {
+function Ye(e) {
   return e.length === 1 ? e[0].message : `Environment validation failed with ${e.length} issues.`;
 }
-function Lt(e = {}) {
+function mr(e = {}) {
   return async function(r) {
     if (r.method.toUpperCase() !== "POST")
       return new Response(null, {
@@ -427,25 +492,25 @@ function Lt(e = {}) {
         },
         status: 405
       });
-    const n = Me(r);
+    const n = Xe(r);
     if (n)
       return n;
-    const a = Pe(e, r);
-    if (a)
-      return a;
-    e.maxBodySize !== void 0 && (r = te({ maxBodySize: e.maxBodySize }, r));
-    let i;
+    const o = Qe(e, r);
+    if (o)
+      return o;
+    e.maxBodySize !== void 0 && (r = he({ maxBodySize: e.maxBodySize }, r));
+    let a;
     try {
-      i = await r.json();
-    } catch (o) {
-      return o instanceof re ? new Response("Security report body too large.", { status: 413 }) : new Response("Invalid security report JSON.", {
+      a = await r.json();
+    } catch (s) {
+      return s instanceof me ? new Response("Security report body too large.", { status: 413 }) : new Response("Invalid security report JSON.", {
         status: 400
       });
     }
-    const s = Ue(i);
-    for (let o = 0; o < s.length; o += 1)
-      await e.onReport?.(s[o], {
-        index: o,
+    const i = et(a);
+    for (let s = 0; s < i.length; s += 1)
+      await e.onReport?.(i[s], {
+        index: s,
         request: r
       });
     return new Response(null, {
@@ -453,20 +518,20 @@ function Lt(e = {}) {
     });
   };
 }
-const Le = /* @__PURE__ */ new Set([
+const Ze = /* @__PURE__ */ new Set([
   "application/csp-report",
   "application/reports+json"
 ]);
-function Me(e) {
+function Xe(e) {
   const t = e.headers.get("content-type");
   if (!t)
     return null;
   const r = t.split(";", 1)[0]?.trim().toLowerCase();
-  return r && Le.has(r) ? null : new Response("Unsupported security report Content-Type.", {
+  return r && Ze.has(r) ? null : new Response("Unsupported security report Content-Type.", {
     status: 415
   });
 }
-function Pe(e, t) {
+function Qe(e, t) {
   if (e.maxBodySize === void 0)
     return null;
   const r = t.headers.get("content-length");
@@ -477,32 +542,32 @@ function Pe(e, t) {
       status: 400
     });
   const n = Number(r);
-  return Number.isSafeInteger(n) ? n > x(e.maxBodySize) ? new Response("Security report body too large.", {
+  return Number.isSafeInteger(n) ? n > D(e.maxBodySize) ? new Response("Security report body too large.", {
     status: 413
   }) : null : new Response("Invalid Content-Length.", {
     status: 400
   });
 }
-function Ue(e) {
-  return Array.isArray(e) ? e : Fe(e) && "csp-report" in e ? [e["csp-report"]] : [e];
+function et(e) {
+  return Array.isArray(e) ? e : tt(e) && "csp-report" in e ? [e["csp-report"]] : [e];
 }
-function Fe(e) {
+function tt(e) {
   return typeof e == "object" && e !== null;
 }
-function Mt(e, t) {
+function pr(e, t) {
   const r = {}, n = [];
-  let a = 0;
-  for (const [i, s] of Object.entries(t.files)) {
-    const o = e.getAll(i).filter(qe);
-    r[i] = o, s.required && o.length === 0 && n.push({
+  let o = 0;
+  for (const [a, i] of Object.entries(t.files)) {
+    const s = e.getAll(a).filter(ot);
+    r[a] = s, i.required && s.length === 0 && n.push({
       code: "file-missing",
-      field: i,
-      message: `Upload field ${i} requires at least one file.`
+      field: a,
+      message: `Upload field ${a} requires at least one file.`
     });
-    for (const u of o)
-      a += u.size, je(i, u, s, n);
+    for (const l of s)
+      o += l.size, rt(a, l, i, n);
   }
-  return t.maxTotalSize !== void 0 && a > x(t.maxTotalSize) && n.push({
+  return t.maxTotalSize !== void 0 && o > D(t.maxTotalSize) && n.push({
     code: "total-upload-too-large",
     field: "*",
     message: `Uploaded files exceed the maximum total size of ${t.maxTotalSize}.`
@@ -510,27 +575,27 @@ function Mt(e, t) {
     files: r,
     issues: n,
     ok: n.length === 0,
-    totalSize: a
+    totalSize: o
   };
 }
-function je(e, t, r, n) {
-  r.maxSize !== void 0 && t.size > x(r.maxSize) && n.push({
+function rt(e, t, r, n) {
+  r.maxSize !== void 0 && t.size > D(r.maxSize) && n.push({
     code: "file-too-large",
     field: e,
     message: `Upload field ${e} contains ${t.name || "a file"} larger than ${r.maxSize}.`
-  }), r.types?.length && !Be(t.type, r.types) && n.push({
+  }), r.types?.length && !nt(t.type, r.types) && n.push({
     code: "file-type-not-allowed",
     field: e,
     message: `Upload field ${e} contains ${t.name || "a file"} with disallowed type ${t.type || "unknown"}.`
   });
 }
-function Be(e, t) {
+function nt(e, t) {
   return t.some((r) => r.endsWith("/*") ? e.startsWith(r.slice(0, -1)) : e === r);
 }
-function qe(e) {
+function ot(e) {
   return e instanceof File;
 }
-function He(e, t) {
+function at(e, t) {
   const r = t.headers.get("origin");
   if (!r)
     return {
@@ -539,7 +604,7 @@ function He(e, t) {
       origin: r,
       reason: e.allowMissingOrigin ? void 0 : "missing-origin"
     };
-  const n = P(r);
+  const n = J(r);
   if (!n)
     return {
       allowed: !1,
@@ -547,28 +612,28 @@ function He(e, t) {
       origin: r,
       reason: "invalid-origin"
     };
-  const a = _e(e, n, t);
+  const o = it(e, n, t);
   return {
-    allowed: a,
+    allowed: o,
     expected: e.origins,
     origin: n,
-    reason: a ? void 0 : "origin-not-allowed"
+    reason: o ? void 0 : "origin-not-allowed"
   };
 }
-function Pt(e, t) {
-  return !e || He(e, t).allowed ? null : new Response("WebSocket origin not allowed.", {
+function gr(e, t) {
+  return !e || at(e, t).allowed ? null : new Response("WebSocket origin not allowed.", {
     status: 403
   });
 }
-function _e(e, t, r) {
+function it(e, t, r) {
   return e.origins === "same-origin" ? t === new URL(r.url).origin : e.origins.some(
-    (n) => Ve(n, t)
+    (n) => st(n, t)
   );
 }
-function Ve(e, t) {
-  return e === "null" ? t === "null" : P(e) === t;
+function st(e, t) {
+  return e === "null" ? t === "null" : J(e) === t;
 }
-function P(e) {
+function J(e) {
   if (e === "null")
     return e;
   try {
@@ -586,122 +651,122 @@ function P(e) {
     return null;
   }
 }
-function We(e) {
-  const t = O(e.routes), r = e.loadNavigationData ?? F;
+function ct(e) {
+  const t = W(e.routes), r = e.loadNavigationData ?? Z;
   return function() {
-    const [a, i] = I(() => E()), [s, o] = I(
+    const [o, a] = F(() => $()), [i, s] = F(
       () => e.initialMatch ?? { status: "loading" }
-    ), u = T(!!e.initialMatch), d = T(0);
-    C(() => {
+    ), l = z(!!e.initialMatch), d = z(0);
+    P(() => {
       function c() {
-        i(E());
+        a($());
       }
       return window.addEventListener("popstate", c), () => window.removeEventListener("popstate", c);
-    }, []), C(() => {
-      let c = !1, l = !1;
-      const m = ++d.current, R = new AbortController(), v = () => !c && m === d.current;
-      if (u.current && Ke(e.initialMatch) === a.pathname)
-        return u.current = !1, () => {
+    }, []), P(() => {
+      let c = !1, f = !1;
+      const h = ++d.current, v = new AbortController(), S = () => !c && h === d.current;
+      if (l.current && lt(e.initialMatch) === o.pathname)
+        return l.current = !1, () => {
           c = !0;
         };
-      o({ status: "loading" }), ae(t, a.pathname).then((h) => {
-        v() && !l && h && o({ loading: h, status: "loading" });
+      s({ status: "loading" }), ge(t, o.pathname).then((m) => {
+        S() && !f && m && s({ loading: m, status: "loading" });
       }).catch(() => {
       });
-      const k = new Request(a.href, { signal: R.signal });
-      return Promise.resolve(r(k)).then(
-        (h) => L(
+      const b = new Request(o.href, { signal: v.signal });
+      return Promise.resolve(r(b)).then(
+        (m) => q(
           t,
-          a.pathname,
-          k,
-          h,
+          o.pathname,
+          b,
+          m,
           void 0,
           { documentContributions: !1 }
         )
-      ).then((h) => {
-        l = !0, v() && o(h);
-      }).catch(async (h) => {
-        if (l = !0, !v() || R.signal.aborted)
+      ).then((m) => {
+        f = !0, S() && s(m);
+      }).catch(async (m) => {
+        if (f = !0, !S() || v.signal.aborted)
           return;
-        const q = await ie(
+        const k = await we(
           t,
-          a.pathname
+          o.pathname
         );
-        v() && o({
-          Error: q,
-          error: h,
-          pathname: a.pathname,
+        S() && s({
+          Error: k,
+          error: m,
+          pathname: o.pathname,
           status: "error"
         });
       }), () => {
-        c = !0, R.abort();
+        c = !0, v.abort();
       };
-    }, [a.pathname, a.search]);
-    const p = V(
+    }, [o.pathname, o.search]);
+    const p = ne(
       () => ({
         navigation: e.navigation ?? "server",
         push(c) {
-          const l = E();
+          const f = $();
           window.history.pushState(null, "", c);
-          const m = E();
-          i(m), l.pathname === m.pathname && l.search === m.search && l.hash !== m.hash && Je(m.hash);
+          const h = $();
+          a(h), f.pathname === h.pathname && f.search === h.search && f.hash !== h.hash && pt(h.hash);
         }
       }),
       []
     );
-    return f(j.Provider, {
+    return w(X.Provider, {
       value: p,
-      children: f(Ze, {
-        key: `${a.pathname}${a.search}`,
+      children: w(dt, {
+        key: `${o.pathname}${o.search}`,
         Loading: e.loading,
         NotFound: e.notFound,
-        match: s
+        match: i
       })
     });
   };
 }
-function Ge(e, t) {
-  const r = t.getAttribute(Z);
+function ut(e, t) {
+  const r = t.getAttribute(ce);
   return e.status === "not-found" ? r === "not-found" : e.status === "ready" && r === null;
 }
-function Ke(e) {
+function lt(e) {
   if (e)
     return e.status === "ready" ? e.match.pathname : e.status === "loading" ? void 0 : e.pathname;
 }
-async function Ut(e) {
+async function wr(e) {
   const t = e.root ?? document.getElementById("root");
   if (!t)
     throw new Error(
       "Demiurge expected a #root element in the framework document."
     );
-  const r = O(e.routes), n = e.loadNavigationData ?? F, a = e.initialData ?? K(document), i = await L(
+  const r = W(e.routes), n = e.loadNavigationData ?? Z, o = e.initialData ?? ie(document), a = await q(
     r,
     window.location.pathname,
     new Request(window.location.href),
-    a ?? await n(new Request(window.location.href)),
+    o ?? await n(new Request(window.location.href)),
     void 0,
     { documentContributions: !1 }
-  ), s = Ge(i, t), o = We(
-    s ? {
+  ), i = ut(a, t), s = ct(
+    i ? {
       ...e,
-      initialMatch: i,
+      initialMatch: a,
       loadNavigationData: n,
-      navigation: a?.navigation ?? e.navigation
+      navigation: o?.navigation ?? e.navigation
     } : {
       ...e,
       loadNavigationData: n,
-      navigation: a?.navigation ?? e.navigation
+      navigation: o?.navigation ?? e.navigation
     }
-  ), { createRoot: u, hydrateRoot: d } = Ye(
+  ), { createRoot: l, hydrateRoot: d } = ft(
     await import("react-dom/client")
   );
-  if (s && t.hasAttribute(Y)) {
-    d(t, f(o));
+  if (i && t.hasAttribute(se)) {
+    d(t, w(s)), U();
     return;
   }
-  t.replaceChildren(), u(t).render(f(o));
+  t.replaceChildren(), l(t).render(w(s)), U();
 }
-function Ye(e) {
+function ft(e) {
   const t = typeof e.createRoot == "function" && typeof e.hydrateRoot == "function" ? e : e.default;
   if (!t || typeof t.createRoot != "function" || typeof t.hydrateRoot != "function")
     throw new Error(
@@ -709,57 +774,57 @@ function Ye(e) {
     );
   return t;
 }
-function Ft(e) {
-  const t = tt(), r = ne(e);
-  return /* @__PURE__ */ H(
+function yr(e) {
+  const t = wt(), r = pe(e);
+  return /* @__PURE__ */ V(
     "a",
     {
       className: e.className,
       href: r,
       onClick: (n) => {
-        t.navigation === "server" && et(n) && (n.preventDefault(), t.push(r));
+        t.navigation === "server" && gt(n) && (n.preventDefault(), t.push(r));
       },
       children: e.children
     }
   );
 }
-function Ze({
+function dt({
   Loading: e,
   NotFound: t,
   match: r
 }) {
   if (r.status === "loading") {
     const c = r.loading ?? e;
-    return c ? f(c) : null;
+    return c ? w(c) : null;
   }
   if (r.status === "not-found") {
-    const c = r.notFound ?? t ?? de;
+    const c = r.notFound ?? t ?? Te;
     return r.layouts.reduceRight(
-      (l, m) => f(m, {
-        children: l,
+      (f, h) => w(h, {
+        children: f,
         path: {},
         pathname: r.pathname
       }),
-      f(c, { pathname: r.pathname })
+      w(c, { pathname: r.pathname })
     );
   }
   if (r.status === "error")
-    return r.Error ? f(r.Error, {
+    return r.Error ? w(r.Error, {
       error: r.error,
       pathname: r.pathname,
-      status: U(r.error)
+      status: Y(r.error)
     }) : null;
-  const { data: n, error: a, page: i, layouts: s, path: o, pathname: u } = r.match, d = f(i, { data: n, path: o, pathname: u }), p = s.reduceRight(
-    (c, l) => f(l, { path: o, pathname: u, children: c }),
+  const { data: n, error: o, page: a, layouts: i, path: s, pathname: l } = r.match, d = w(a, { data: n, path: s, pathname: l }), p = i.reduceRight(
+    (c, f) => w(f, { path: s, pathname: l, children: c }),
     d
   );
-  return f(Qe, {
-    Error: a,
+  return w(ht, {
+    Error: o,
     children: p,
-    pathname: u
+    pathname: l
   });
 }
-class Qe extends G {
+class ht extends ae {
   static getDerivedStateFromError(t) {
     return { error: t };
   }
@@ -768,17 +833,17 @@ class Qe extends G {
     this.state.error !== void 0 && t.pathname !== this.props.pathname && this.setState({ error: void 0 });
   }
   render() {
-    return this.state.error !== void 0 ? this.props.Error ? f(this.props.Error, {
+    return this.state.error !== void 0 ? this.props.Error ? w(this.props.Error, {
       error: this.state.error,
       pathname: this.props.pathname,
-      status: U(this.state.error)
+      status: Y(this.state.error)
     }) : null : this.props.children;
   }
 }
-function U(e) {
-  return me(e) ? e.status : 500;
+function Y(e) {
+  return ke(e) ? e.status : 500;
 }
-function E() {
+function $() {
   return {
     hash: window.location.hash,
     href: window.location.href,
@@ -786,42 +851,42 @@ function E() {
     search: window.location.search
   };
 }
-async function F(e) {
+async function Z(e) {
   const t = new Headers(e.headers);
-  t.set("accept", "application/json"), t.set(D, oe);
+  t.set("accept", "application/json"), t.set(_, ye);
   const r = await fetch(new Request(e, {
     credentials: "same-origin",
     headers: t
-  })), n = r.headers.get(D);
-  if (n === se) {
-    const a = await r.json();
-    if (a.hasData !== !0)
+  })), n = r.headers.get(_);
+  if (n === ve) {
+    const o = await r.json();
+    if (o.hasData !== !0)
       throw new Error("Demiurge received malformed navigation route data.");
-    return { data: a.data, hasData: !0 };
+    return { data: o.data, hasData: !0 };
   }
-  if (n === ce)
+  if (n === be)
     return { hasData: !0 };
-  if (n === ue || !r.ok) {
-    const a = await Xe(r), i = le.includes(
+  if (n === Se || !r.ok) {
+    const o = await mt(r), a = Ee.includes(
       r.status
     ) ? r.status : 500;
-    throw fe(i, {
-      detail: typeof a?.detail == "string" ? a.detail : void 0,
-      title: typeof a?.title == "string" ? a.title : void 0
+    throw Re(a, {
+      detail: typeof o?.detail == "string" ? o.detail : void 0,
+      title: typeof o?.title == "string" ? o.title : void 0
     });
   }
   throw new Error(
     "Demiurge expected a navigation data response from the application server."
   );
 }
-async function Xe(e) {
+async function mt(e) {
   try {
     return await e.json();
   } catch {
     return;
   }
 }
-function Je(e) {
+function pt(e) {
   queueMicrotask(() => {
     if (!e) {
       window.scrollTo?.(0, 0);
@@ -836,205 +901,162 @@ function Je(e) {
     document.getElementById(t)?.scrollIntoView?.();
   });
 }
-function et(e) {
+function gt(e) {
   return e.button === 0 && !e.metaKey && !e.altKey && !e.ctrlKey && !e.shiftKey;
 }
-const j = _({
+const X = re({
   navigation: "document",
   push(e) {
     window.location.href = e;
   }
 });
-function tt() {
-  return W(j);
-}
-const rt = "/_demiurge/image";
-function jt(e) {
-  return e;
-}
-function Bt(e, t = {}) {
-  return B(e, t) !== null;
+function wt() {
+  return oe(X);
 }
-function qt(e, t = {}) {
-  const r = B(e.src, t);
-  if (!r)
-    throw new Error(`Image source "${e.src}" is not allowed by the image policy.`);
-  $("width", e.width), $("height", e.height), st(e.quality);
-  const n = e.format ?? "auto", i = ct(e.width, e.widths).map((o) => {
-    const u = Math.round(e.height / e.width * o);
-    return {
-      format: n,
-      height: u,
-      src: ut({
-        format: n,
-        optimizerPath: t.optimizerPath ?? rt,
-        quality: e.quality,
-        src: e.src,
-        width: o
-      }),
-      width: o
-    };
-  }), s = i[0];
-  return {
-    alt: e.alt,
-    decoding: "async",
-    fetchPriority: e.priority ? "high" : void 0,
-    height: e.height,
-    loading: e.priority ? "eager" : "lazy",
-    sizes: e.sizes,
-    source: r,
-    src: s.src,
-    srcSet: i.map((o) => `${o.src} ${o.width}w`).join(", "),
-    variants: i,
-    width: e.width
-  };
-}
-function B(e, t) {
-  if (e.startsWith("/") && !e.startsWith("//"))
-    return t.local === !1 ? null : { kind: "local", src: e };
-  let r;
-  try {
-    r = new URL(e);
-  } catch {
-    return null;
-  }
-  return r.protocol !== "https:" && r.protocol !== "http:" ? null : nt(r, t.remote ?? []) ? { kind: "remote", src: r.toString() } : null;
-}
-function nt(e, t) {
-  return t.some(
-    (r) => typeof r == "string" ? at(e, r) : it(e, r)
+function vr({ className: e, id: t, policy: r, ...n }) {
+  const o = Ae(n, r);
+  return /* @__PURE__ */ V(
+    "img",
+    {
+      alt: o.alt,
+      className: e,
+      decoding: o.decoding,
+      fetchPriority: o.fetchPriority,
+      height: o.height,
+      id: t,
+      loading: o.loading,
+      sizes: o.sizes,
+      src: o.src,
+      srcSet: o.srcSet,
+      width: o.width
+    }
   );
 }
-function at(e, t) {
-  try {
-    return e.origin === new URL(t).origin;
-  } catch {
-    return !1;
-  }
-}
-function it(e, t) {
-  return t.protocol && e.protocol !== t.protocol || e.hostname !== t.hostname || t.port !== void 0 && e.port !== t.port ? !1 : t.pathname ? ot(e.pathname, t.pathname) : !0;
-}
-function ot(e, t) {
-  return t.endsWith("*") ? e.startsWith(t.slice(0, -1)) : e === t;
-}
-function $(e, t) {
-  if (!Number.isInteger(t) || t <= 0)
-    throw new Error(`Image ${e} must be a positive integer.`);
-}
-function st(e) {
-  if (e !== void 0 && (!Number.isInteger(e) || e < 1 || e > 100))
-    throw new Error("Image quality must be an integer between 1 and 100.");
-}
-function ct(e, t) {
-  const r = t ?? [e, e * 2], n = [...new Set(r)];
-  for (const a of n)
-    $("width", a);
-  return n.sort((a, i) => a - i);
-}
-function ut({
-  format: e,
-  optimizerPath: t,
-  quality: r,
-  src: n,
-  width: a
-}) {
-  const i = new URLSearchParams({
-    src: n,
-    w: String(a)
-  });
-  return r !== void 0 && i.set("q", String(r)), e !== "auto" && i.set("f", e), `${t}?${i.toString()}`;
-}
-const Ht = {
-  google(e) {
+const yt = "https://js.sentry-cdn.com", br = {
+  /**
+   * Plausible loads one script and posts events to its own API. The snippet
+   * carries configuration in `data-domain`, so no inline code is involved.
+   * `endpoint` accepts a same-origin path prefix for a proxied deployment.
+   */
+  plausible(e) {
+    const t = vt(e.domain), r = H(e.endpoint ?? "https://plausible.io");
     return {
-      display: e.display ?? "swap",
-      family: e.family,
-      kind: "font",
-      source: "google",
-      src: e.src,
-      style: e.style ?? "normal",
-      weight: e.weight ?? 400
+      consent: e.consent ?? !1,
+      domain: t,
+      kind: "analytics",
+      needs: {
+        connect: [r.source],
+        script: [r.source]
+      },
+      provider: "plausible",
+      scripts: [
+        I({
+          dataApi: `${r.base}/api/event`,
+          dataDomain: t,
+          defer: !0,
+          needs: { connect: [r.source] },
+          purpose: "analytics",
+          src: `${r.base}/js/script.js`,
+          strategy: e.strategy ?? "afterInteractive"
+        })
+      ]
     };
   },
-  local(e) {
-    if (!e.src.trim())
-      throw new Error("Local font source must not be empty.");
+  /**
+   * The Sentry loader script carries the DSN in its own filename, so a page
+   * needs no inline configuration call. Events go to the DSN host, which is
+   * why the integration also declares a `connect-src` need.
+   */
+  sentry(e) {
+    const t = Et(e.dsn), r = St(
+      e.loaderHost ?? yt,
+      "Sentry loader host"
+    );
     return {
-      display: e.display ?? "swap",
-      family: e.name,
-      kind: "font",
-      source: "local",
-      src: e.src,
-      style: e.style ?? "normal",
-      weight: e.weight ?? 400
+      consent: e.consent ?? !1,
+      ingestOrigin: t.origin,
+      kind: "analytics",
+      needs: {
+        connect: [t.origin],
+        script: [r]
+      },
+      projectId: t.projectId,
+      provider: "sentry",
+      scripts: [
+        I({
+          crossOrigin: "anonymous",
+          needs: { connect: [t.origin] },
+          purpose: "error-monitoring",
+          src: `${r}/${t.publicKey}.min.js`,
+          // Errors thrown before the app is interactive are the ones an
+          // application can least afford to lose.
+          strategy: e.strategy ?? "beforeInteractive"
+        })
+      ]
     };
-  }
-};
-function _t(e) {
-  return [...e];
-}
-function Vt(e) {
-  return e.filter((t) => t.src).map((t) => ({
-    as: "font",
-    crossOrigin: "anonymous",
-    href: t.src,
-    kind: "link",
-    rel: "preload",
-    type: lt(t.src)
-  }));
-}
-function Wt(e) {
-  return e.filter((t) => t.source === "local" && t.src).map((t) => {
-    const r = t.src;
-    return [
-      "@font-face {",
-      `  font-family: "${N(t.family)}";`,
-      `  src: url("${N(r)}") format("${ft(r)}");`,
-      `  font-style: ${t.style};`,
-      `  font-weight: ${t.weight};`,
-      `  font-display: ${t.display};`,
-      "}"
-    ].join(`
-`);
-  }).join(`
-`);
-}
-function lt(e) {
-  return e.split("?")[0].split("#")[0].split(".").pop()?.toLowerCase() === "woff" ? "font/woff" : "font/woff2";
-}
-function ft(e) {
-  return e.split("?")[0].split("#")[0].split(".").pop()?.toLowerCase() === "woff" ? "woff" : "woff2";
-}
-function N(e) {
-  return e.replace(/[\\"]/g, "\\$&");
-}
-const Gt = {
-  plausible(e) {
-    const t = dt(e.domain), r = mt(e.endpoint ?? "https://plausible.io");
+  },
+  /**
+   * OpenTelemetry publishes no hosted browser loader. Browser instrumentation
+   * is application code bundled from npm packages, so this helper describes
+   * the part a policy has to know about: the OTLP endpoint the exporter posts
+   * to, and an optional same-origin entry script that starts the SDK.
+   */
+  openTelemetry(e) {
+    const t = H(e.endpoint), r = e.script;
+    if (r !== void 0 && !r.startsWith("/"))
+      throw new Error(
+        "OpenTelemetry browser instrumentation must be a same-origin script path."
+      );
     return {
-      connectSrc: r.origin,
       consent: e.consent ?? !1,
-      domain: t,
+      endpoint: t.base || "/",
       kind: "analytics",
-      provider: "plausible",
-      script: Q({
-        dataApi: `${r.origin}/api/event`,
-        dataDomain: t,
-        purpose: "analytics",
-        src: `${r.origin}/js/script.js`,
-        strategy: e.strategy ?? "afterInteractive"
-      })
+      needs: r ? { connect: [t.source], script: ["'self'"] } : { connect: [t.source] },
+      provider: "opentelemetry",
+      scripts: r ? [
+        I({
+          needs: { connect: [t.source] },
+          purpose: "observability",
+          src: r,
+          strategy: e.strategy ?? "module"
+        })
+      ] : []
     };
+  },
+  /** Merges the CSP needs of every integration into one route policy. */
+  policy(...e) {
+    const t = {};
+    for (const r of e)
+      for (const n of ["connect", "img", "script"]) {
+        const o = r.needs[n];
+        !o || o.length === 0 || (t[n] = [.../* @__PURE__ */ new Set([...t[n] ?? [], ...o])]);
+      }
+    return { security: { needs: t } };
+  },
+  /** Collects the script contributions of every integration. */
+  scripts(...e) {
+    return e.flatMap((t) => [...t.scripts]);
   }
 };
-function dt(e) {
+function vt(e) {
   const t = e.trim();
   if (!t || t.includes("/") || t.includes(" "))
     throw new Error("Analytics domain must be a hostname without a path.");
   return t;
 }
-function mt(e) {
+function H(e) {
+  if (e.startsWith("/")) {
+    if (e.startsWith("//"))
+      throw new Error("Analytics endpoint must not be a scheme-relative URL.");
+    return {
+      base: e === "/" ? "" : e.replace(/\/+$/, ""),
+      source: "'self'"
+    };
+  }
+  const t = bt(e);
+  return { base: t.origin, source: t.origin };
+}
+function bt(e) {
   let t;
   try {
     t = new URL(e);
@@ -1045,132 +1067,449 @@ function mt(e) {
     throw new Error("Analytics endpoint must use HTTPS.");
   return t;
 }
-function Kt(e = {}) {
+function St(e, t) {
+  let r;
+  try {
+    r = new URL(e);
+  } catch {
+    throw new Error(`${t} must be an absolute URL.`);
+  }
+  if (r.protocol !== "https:")
+    throw new Error(`${t} must use HTTPS.`);
+  return r.origin;
+}
+function Et(e) {
+  let t;
+  try {
+    t = new URL(e);
+  } catch {
+    throw new Error("Sentry DSN must be an absolute URL.");
+  }
+  if (t.protocol !== "https:")
+    throw new Error("Sentry DSN must use HTTPS.");
+  const r = t.pathname.replace(/^\//, "");
+  if (!t.username || t.password)
+    throw new Error(
+      "Sentry DSN must carry a public key and no secret key."
+    );
+  if (!/^[A-Za-z0-9_-]+$/.test(r))
+    throw new Error("Sentry DSN must end with a project identifier.");
+  return {
+    origin: t.origin,
+    projectId: r,
+    publicKey: t.username
+  };
+}
+function Sr(e = {}) {
   return {
     async request(t) {
-      await S({ kind: "request", signal: t }, e);
+      await x({ kind: "request", signal: t }, e);
     },
     async serverStart(t = {}) {
-      await S({ kind: "server-start", signal: t }, e);
+      await x({ kind: "server-start", signal: t }, e);
     },
     async trace(t) {
-      await S({ kind: "trace", signal: t }, e);
+      await x({ kind: "trace", signal: t }, e);
     },
     async reportWebVitals(t) {
-      await S({ kind: "web-vital", signal: t }, e);
+      await x({ kind: "web-vital", signal: t }, e);
     }
   };
 }
-async function S(e, t) {
+async function x(e, t) {
   await t.onEvent?.(e), e.kind === "request" ? await t.request?.(e.signal) : e.kind === "server-start" ? await t.serverStart?.(e.signal) : e.kind === "trace" ? await t.trace?.(e.signal) : await t.webVitals?.(e.signal);
 }
+const Rt = [
+  "CLS",
+  "FCP",
+  "FID",
+  "INP",
+  "LCP",
+  "TTFB"
+], L = [
+  "CLS",
+  "FCP",
+  "INP",
+  "LCP",
+  "TTFB"
+], Tt = new Set(Rt), kt = /* @__PURE__ */ new Set([
+  "back-forward",
+  "back-forward-cache",
+  "navigate",
+  "prerender",
+  "reload",
+  "restore"
+]), At = /* @__PURE__ */ new Set([
+  "good",
+  "needs-improvement",
+  "poor"
+]);
+function $t(e) {
+  return typeof e == "string" && Tt.has(e);
+}
+function xt(e) {
+  return typeof e == "string" && kt.has(e);
+}
+function Ct(e) {
+  return typeof e == "string" && At.has(e);
+}
+const It = {
+  CLS: { good: 0.1, poor: 0.25 },
+  FCP: { good: 1800, poor: 3e3 },
+  FID: { good: 100, poor: 300 },
+  INP: { good: 200, poor: 500 },
+  LCP: { good: 2500, poor: 4e3 },
+  TTFB: { good: 800, poor: 1800 }
+};
+function Nt(e, t) {
+  const r = It[e];
+  return t <= r.good ? "good" : t > r.poor ? "poor" : "needs-improvement";
+}
+const Q = 32;
+function Er(e) {
+  const t = Dt(e.endpoint), r = Ot(e.metrics), n = Mt(e.sampleRate);
+  return {
+    endpoint: t.url,
+    kind: "web-vitals",
+    metrics: r,
+    needs: { connect: [t.source] },
+    sampleRate: n
+  };
+}
+function Rr(...e) {
+  const t = /* @__PURE__ */ new Set();
+  for (const r of e)
+    for (const n of r.needs.connect ?? [])
+      t.add(n);
+  return t.size === 0 ? { security: { needs: {} } } : { security: { needs: { connect: [...t] } } };
+}
+async function Tr(e, t = {}) {
+  const r = t.maxMetrics ?? Q;
+  let n;
+  try {
+    n = await e.json();
+  } catch {
+    return { ok: !1, reason: "unreadable-body" };
+  }
+  return Lt(n, r);
+}
+function Lt(e, t = Q) {
+  if (!ee(e) || !Array.isArray(e.metrics))
+    return { ok: !1, reason: "invalid-payload" };
+  if (e.metrics.length > t)
+    return { ok: !1, reason: "too-many-metrics" };
+  const r = [];
+  for (const n of e.metrics) {
+    const o = Pt(n);
+    if (!o)
+      return { ok: !1, reason: "invalid-payload" };
+    r.push(o);
+  }
+  return { metrics: r, ok: !0 };
+}
+function Pt(e) {
+  if (!ee(e))
+    return;
+  const { id: t, name: r, navigationType: n, rating: o, url: a, value: i } = e;
+  if (!(typeof t != "string" || t.length === 0 || t.length > 128) && !(!$t(r) || !xt(n)) && Ct(o) && !(typeof a != "string" || a.length === 0 || a.length > 2048) && !(typeof i != "number" || !Number.isFinite(i) || i < 0))
+    return { id: t, name: r, navigationType: n, rating: o, url: a, value: i };
+}
+function ee(e) {
+  return typeof e == "object" && e !== null;
+}
+function Dt(e) {
+  if (e.startsWith("/")) {
+    if (e.startsWith("//"))
+      throw new Error(
+        "The web vitals endpoint must not be a scheme-relative URL."
+      );
+    return { source: "'self'", url: e };
+  }
+  let t;
+  try {
+    t = new URL(e);
+  } catch {
+    throw new Error(
+      "The web vitals endpoint must be a same-origin path or an absolute URL."
+    );
+  }
+  if (t.protocol !== "https:")
+    throw new Error("The web vitals endpoint must use HTTPS.");
+  return { source: t.origin, url: t.href };
+}
+function Ot(e) {
+  if (!e)
+    return L;
+  const t = [];
+  for (const r of e) {
+    if (!L.includes(r))
+      throw new Error(
+        `The browser collector does not measure ${JSON.stringify(r)}. Demiurge collects ${L.join(", ")}.`
+      );
+    t.includes(r) || t.push(r);
+  }
+  if (t.length === 0)
+    throw new Error("A web vitals integration must collect one metric or more.");
+  return t;
+}
+function Mt(e) {
+  if (e === void 0)
+    return 1;
+  if (!Number.isFinite(e) || e < 0 || e > 1)
+    throw new Error("The web vitals sample rate must be between 0 and 1.");
+  return e;
+}
+const Ft = 1e3, zt = 5e3, Ut = 40;
+function Bt(e, t = {}) {
+  if (typeof window > "u" || typeof PerformanceObserver > "u")
+    return () => {
+    };
+  const r = t.random ?? Math.random;
+  if (e.sampleRate < 1 && r() >= e.sampleRate)
+    return () => {
+    };
+  const n = t.transport ?? _t, o = new Set(e.metrics), a = [], i = [], s = /* @__PURE__ */ new Set();
+  let l = jt(), d = 0, p = 0, c = 0, f = 0, h, v, S = !1;
+  const b = (u, g) => {
+    if (S || s.has(u))
+      return;
+    s.add(u);
+    const y = {
+      id: `${u}-${Date.now()}-${Math.floor(r() * 1e9)}`,
+      name: u,
+      navigationType: l,
+      rating: Nt(u, g),
+      url: window.location.href,
+      value: Math.round(g * 1e3) / 1e3
+    };
+    i.push(y), t.onReport?.(y);
+  }, m = () => {
+    if (S || (h !== void 0 && b("LCP", h), v !== void 0 && b("INP", v), o.has("CLS") && b("CLS", d), i.length === 0))
+      return;
+    const u = i.splice(0, i.length);
+    n(e.endpoint, { metrics: u });
+  }, k = () => {
+    document.visibilityState === "hidden" && m();
+  }, M = (u) => {
+    u.persisted && (l = "back-forward-cache", s.clear(), d = 0, p = 0, c = 0, f = 0, h = void 0, v = void 0, o.has("FCP") && b("FCP", performance.now() - u.timeStamp));
+  };
+  if (o.has("TTFB")) {
+    const u = te();
+    u && u.responseStart > 0 && b("TTFB", u.responseStart);
+  }
+  return o.has("FCP") && C(a, { buffered: !0, type: "paint" }, (u) => {
+    for (const g of u)
+      g.name === "first-contentful-paint" && b("FCP", g.startTime);
+  }), o.has("LCP") && C(
+    a,
+    { buffered: !0, type: "largest-contentful-paint" },
+    (u) => {
+      const g = u.at(-1);
+      g && (h = g.startTime);
+    }
+  ), o.has("CLS") && C(a, { buffered: !0, type: "layout-shift" }, (u) => {
+    for (const g of u) {
+      const y = g;
+      if (y.hadRecentInput)
+        continue;
+      p > 0 && y.startTime - f < Ft && y.startTime - c < zt ? p += y.value : (p = y.value, c = y.startTime), f = y.startTime, d = Math.max(d, p);
+    }
+  }), o.has("INP") && C(
+    a,
+    {
+      buffered: !0,
+      durationThreshold: Ut,
+      type: "event"
+    },
+    (u) => {
+      for (const g of u)
+        v = Math.max(v ?? 0, g.duration);
+    }
+  ), document.addEventListener("visibilitychange", k), window.addEventListener("pagehide", m), window.addEventListener("pageshow", M), () => {
+    m(), S = !0;
+    for (const u of a)
+      u.disconnect();
+    document.removeEventListener("visibilitychange", k), window.removeEventListener("pagehide", m), window.removeEventListener("pageshow", M);
+  };
+}
+function kr({ integration: e, onReport: t, transport: r }) {
+  return P(
+    () => Bt(e, { onReport: t, transport: r }),
+    [e, t, r]
+  ), null;
+}
+function _t(e, t) {
+  const r = JSON.stringify(t);
+  if (typeof navigator < "u" && typeof navigator.sendBeacon == "function") {
+    const n = new Blob([r], { type: "application/json" });
+    if (navigator.sendBeacon(e, n))
+      return;
+  }
+  fetch(e, {
+    body: r,
+    headers: { "content-type": "application/json" },
+    keepalive: !0,
+    method: "POST"
+  }).catch(() => {
+  });
+}
+function C(e, t, r) {
+  try {
+    const n = new PerformanceObserver((o) => r(o.getEntries()));
+    n.observe(t), e.push(n);
+  } catch {
+    return;
+  }
+}
+function te() {
+  if (!(typeof performance > "u"))
+    return performance.getEntriesByType("navigation")[0];
+}
+function jt() {
+  const e = te();
+  return e?.type === "back_forward" ? "back-forward" : e?.type === "reload" || e?.type === "prerender" ? e.type : "navigate";
+}
 export {
-  ke as EnvValidationError,
-  le as HTTP_ERROR_STATUSES,
-  ir as HttpError,
-  Ft as Link,
-  Qt as Script,
-  kt as action,
-  It as actionInput,
-  Gt as analytics,
-  Xt as assertAdapterCapabilities,
-  or as auditScriptDependencies,
-  Jt as checkAdapterCapabilities,
-  He as checkWebSocketOrigin,
-  sr as createCache,
-  cr as createCorsHeaders,
-  ur as createCsrfCookie,
-  lr as createCsrfToken,
-  We as createFileRouter,
-  fr as createInvalidation,
-  dr as createMemoryCache,
-  mr as createMemoryCacheStore,
-  vt as createMemoryIdempotencyStore,
-  hr as createMemoryRateLimitStore,
-  gr as createRequestHandler,
-  pr as createSecurityAudit,
-  wr as createSecurityHeaders,
-  Lt as createSecurityReportHandler,
-  yr as cspHash,
-  vr as cspNonce,
-  er as defineAdapter,
-  Dt as defineEnvSchema,
-  _t as defineFonts,
-  jt as defineImages,
-  Kt as defineInstrumentation,
-  br as defineLinks,
-  Er as defineMetadata,
-  Ct as defineMiddleware,
-  At as defineOgImage,
-  Rt as defineRobots,
-  Sr as defineRoutePolicy,
-  tr as defineScripts,
-  Rr as defineSecurityPolicy,
-  Et as defineSitemap,
-  Ar as defineTags,
-  $r as enforceAllowedMethods,
-  xr as enforceCsrfProtection,
-  kr as enforceRateLimit,
-  Ir as enforceRequestSecurity,
-  Pt as enforceWebSocketOrigin,
-  Ot as env,
-  Ht as font,
-  Vt as fontPreloadLinks,
-  Tr as handleRequestWithManifest,
-  ne as href,
-  Cr as html,
-  fe as httpError,
-  Ut as hydrateFileRouter,
-  Bt as isAllowedImageSource,
-  me as isHttpError,
-  zr as issueCsrfToken,
-  Dr as json,
-  Nr as jsonl,
-  Or as link,
-  Lr as mergeRoutePolicies,
-  Mr as mergeRouteSecurityPolicies,
-  Pr as mergeSecurityPolicies,
-  Ur as meta,
+  L as COLLECTED_WEB_VITAL_NAMES,
+  Vr as CacheNotFoundError,
+  He as EnvValidationError,
+  xr as FRAMEWORK_TRUSTED_TYPES_POLICY,
+  Ee as HTTP_ERROR_STATUSES,
+  Wr as HttpError,
+  vr as Image,
+  yr as Link,
+  Cr as Script,
+  Rt as WEB_VITAL_NAMES,
+  It as WEB_VITAL_THRESHOLDS,
+  kr as WebVitals,
+  or as action,
+  ar as actionInput,
+  br as analytics,
+  qr as applyFetchMetadataVary,
+  Ir as assertAdapterCapabilities,
+  Gr as auditScriptDependencies,
+  Kr as cacheNotFound,
+  Nr as checkAdapterCapabilities,
+  Jr as checkFetchMetadata,
+  at as checkWebSocketOrigin,
+  Bt as collectWebVitals,
+  Yr as createCache,
+  Zr as createCorsHeaders,
+  Xr as createCsrfCookie,
+  Qr as createCsrfToken,
+  ct as createFileRouter,
+  Lr as createFrameworkScriptUrl,
+  en as createInvalidation,
+  tn as createMemoryCache,
+  rn as createMemoryCacheStore,
+  Yt as createMemoryIdempotencyStore,
+  nn as createMemoryRateLimitStore,
+  on as createRequestHandler,
+  lr as createSecureCookie,
+  an as createSecurityAudit,
+  sn as createSecurityHeaders,
+  mr as createSecurityReportHandler,
+  cn as cspHash,
+  un as cspNonce,
+  Kn as defaultFontPath,
+  Pr as defineAdapter,
+  fr as defineEnvSchema,
+  Jn as defineFonts,
+  Yn as defineImages,
+  Sr as defineInstrumentation,
+  Dr as defineLinks,
+  ln as defineMetadata,
+  sr as defineMiddleware,
+  tr as defineOgImage,
+  er as defineRobots,
+  fn as defineRoutePolicy,
+  Or as defineScripts,
+  dn as defineSecurityPolicy,
+  Xt as defineSitemap,
+  hn as defineTags,
+  Er as defineWebVitals,
+  mn as enforceAllowedMethods,
+  pn as enforceCsrfProtection,
+  gn as enforceFetchMetadataPolicy,
+  wn as enforceRateLimit,
+  yn as enforceRequestSecurity,
+  gr as enforceWebSocketOrigin,
+  hr as env,
+  Zn as font,
+  Xn as fontAssetFileName,
+  Qn as fontAssetUrl,
+  eo as fontLinks,
+  to as fontMediaType,
+  ro as fontPreloadLinks,
+  no as fontSources,
+  oo as fontStylesheetUrl,
+  Mr as getScriptWorker,
+  vn as handleRequestWithManifest,
+  pe as href,
+  bn as html,
+  Re as httpError,
+  wr as hydrateFileRouter,
+  ao as isAllowedImageSource,
+  Sn as isCacheNotFoundError,
+  ke as isHttpError,
+  En as issueCsrfToken,
+  Rn as json,
+  Tn as jsonl,
+  kn as link,
+  An as mergeRoutePolicies,
+  $n as mergeRouteSecurityPolicies,
+  xn as mergeSecurityPolicies,
+  Cn as meta,
   Fr as modulePreload,
-  jr as notFound,
-  Tt as page,
-  x as parseBodySize,
-  z as parseCacheDuration,
-  Br as parseCookieHeader,
-  qr as parseRateLimitWindow,
-  qt as planImageTransform,
-  Hr as preconnect,
-  _r as preload,
-  Vr as query,
-  Wr as redirect,
-  Wt as renderFontFaceCss,
-  xt as renderOgImageResponse,
-  ye as renderOgImageSvg,
-  rr as renderPageResponse,
-  $t as renderRobots,
-  St as renderSitemap,
-  Gr as resolveLinks,
-  Kr as resolveMetadata,
-  nr as resolveScripts,
-  J as response,
-  bt as runIdempotentMutation,
-  Q as script,
-  Yr as security,
-  X as serializeCacheKey,
-  Zr as serializeCacheNamespace,
-  Qr as serializeCacheTag,
-  Xr as serverTiming,
-  Jr as sse,
-  en as stream,
-  tn as structuredData,
-  rn as tag,
-  nn as text,
-  ee as toResponse,
-  an as validateCorsPolicy,
-  Nt as validateEnv,
-  on as validateRateLimitPolicy,
-  sn as validateRouteModules,
-  Mt as validateUploads,
-  zt as webhook
+  In as notFound,
+  ir as page,
+  D as parseBodySize,
+  B as parseCacheDuration,
+  de as parseCookieHeader,
+  io as parseImageOptimizerRequest,
+  Nn as parseRateLimitWindow,
+  Lt as parseWebVitalsBeacon,
+  Ae as planImageTransform,
+  zr as preconnect,
+  Ur as preload,
+  Ln as query,
+  ur as readSecureCookie,
+  Tr as readWebVitalsBeacon,
+  Pn as redirect,
+  so as renderFontFaceCss,
+  nr as renderOgImageResponse,
+  Ne as renderOgImageSvg,
+  Br as renderPageResponse,
+  rr as renderRobots,
+  Qt as renderSitemap,
+  _r as resolveLinks,
+  Dn as resolveMetadata,
+  jr as resolveScripts,
+  le as response,
+  Zt as runIdempotentMutation,
+  I as script,
+  O as secureCookieName,
+  On as security,
+  _t as sendWebVitalsBeacon,
+  ue as serializeCacheKey,
+  Mn as serializeCacheNamespace,
+  Fn as serializeCacheTag,
+  zn as serverTiming,
+  Un as sse,
+  U as startDeferredScripts,
+  Bn as stream,
+  _n as structuredData,
+  jn as tag,
+  Hn as text,
+  fe as toResponse,
+  Vn as validateCorsPolicy,
+  dr as validateEnv,
+  Wn as validateRateLimitPolicy,
+  qn as validateRouteModules,
+  je as validateSecureCookie,
+  pr as validateUploads,
+  Nt as webVitalRating,
+  Rr as webVitalsPolicy,
+  cr as webhook
 };
 //# sourceMappingURL=index.js.map