@demiurgejs/core 0.2.0-beta.1 → 0.2.0-beta.3

package/dist/vite/index.js

@@ -1,78 +1,79 @@
-import { existsSync as J } from "node:fs";
-import { mkdir as xt, writeFile as Rt, readdir as dt, readFile as pt } from "node:fs/promises";
-import { dirname as B, resolve as h, relative as x, sep as $, join as $t } from "node:path";
-import St from "magic-string";
-import { transformWithEsbuild as Et, parseAst as U } from "vite";
-import { e as Nt, f as Dt } from "../chunks/request-metadata-DwEO1EAS.js";
-import { e as Pt, d as Ot, f as Mt, s as _, g as W, r as It, i as Ct, h as _t, j as jt } from "../chunks/testing-DBjVCN5v.js";
+import { existsSync as re } from "node:fs";
+import { mkdir as Ve, writeFile as We, readdir as De, readFile as Pe } from "node:fs/promises";
+import { dirname as ne, resolve as b, relative as N, sep as O, join as He } from "node:path";
+import Ue from "magic-string";
+import { transformWithEsbuild as Je, parseAst as oe } from "vite";
+import { e as qe, f as ze } from "../chunks/request-metadata-DaIYq4Ea.js";
+import { v as Ge, f as Be, g as Ke, s as U, l as se, i as Ye, j as Q, t as Qe, k as Xe, n as Oe, M as Ze, o as et, p as z, q as ae, u as tt, w as rt, x as nt, r as ot, h as it, y as st } from "../chunks/testing-CRflAw4X.js";
 import "react";
 import "react-dom/server";
 import "react/jsx-runtime";
-import { t as q, U as Y, w as z, b as K, c as Ft } from "../chunks/streaming-Ci6vf3BB.js";
-const R = "@demiurgejs/core";
-async function Tt(t) {
-  const e = await At(t.routesDir), n = e.map((i) => Lt(t, i)).filter((i) => !!i), o = e.map((i) => Vt(t.routesDir, i, n)).filter((i) => !!i).sort((i, s) => i.pattern.localeCompare(s.pattern)), r = kt(o, n);
-  return await xt(B(t.outputFile), { recursive: !0 }), await Rt(t.outputFile, r), {
+import { c as at, t as ce, U as ue, w as le, b as k, d as ct, e as ut } from "../chunks/streaming-D0fGAuiO.js";
+import { p as lt } from "../chunks/images-Edar3eU1.js";
+const P = "@demiurgejs/core";
+async function dt(e) {
+  const t = await ft(e.routesDir), r = t.map((i) => mt(e, i)).filter((i) => !!i), o = t.map((i) => pt(e.routesDir, i, r)).filter((i) => !!i).sort((i, s) => i.pattern.localeCompare(s.pattern)), n = ht(o, r);
+  return await Ve(ne(e.outputFile), { recursive: !0 }), await We(e.outputFile, n), {
     routes: o,
-    source: r
+    source: n
   };
 }
-async function At(t) {
-  return (await dt(t, {
+async function ft(e) {
+  return (await De(e, {
     recursive: !0,
     withFileTypes: !0
-  })).filter((n) => n.isFile() && /\.tsx?$/.test(n.name)).map((n) => h(n.parentPath, n.name));
+  })).filter((r) => r.isFile() && /\.tsx?$/.test(r.name)).map((r) => b(r.parentPath, r.name));
 }
-function Vt(t, e, n) {
-  const r = x(t, e).split($).join("/").replace(/\.tsx?$/, "").split("/");
-  if (r.at(-1)?.startsWith("@"))
+function pt(e, t, r) {
+  const n = N(e, t).split(O).join("/").replace(/\.tsx?$/, "").split("/");
+  if (n.at(-1)?.startsWith("@"))
     return null;
-  const s = r.flatMap((c) => Q(c) ? [] : c === "index" ? [] : c.startsWith("[...") && c.endsWith("]") ? [c] : c.startsWith("[") && c.endsWith("]") ? [c] : [c]), a = r.flatMap((c) => Q(c) ? [] : c.startsWith("[...") && c.endsWith("]") ? [c.slice(4, -1)] : c.startsWith("[") && c.endsWith("]") ? [c.slice(1, -1)] : []);
+  const s = n.flatMap((c) => de(c) ? [] : c === "index" ? [] : c.startsWith("[...") && c.endsWith("]") ? [c] : c.startsWith("[") && c.endsWith("]") ? [c] : [c]), a = n.flatMap((c) => de(c) ? [] : c.startsWith("[...") && c.endsWith("]") ? [c.slice(4, -1)] : c.startsWith("[") && c.endsWith("]") ? [c.slice(1, -1)] : []);
   return {
-    contextMiddleware: n.filter((c) => Wt(c.fileSegments, r)).map((c) => n.indexOf(c)),
-    fileSegments: r,
+    contextMiddleware: r.filter((c) => yt(c.fileSegments, n)).map((c) => r.indexOf(c)),
+    fileSegments: n,
     pathVars: a,
     pattern: `/${s.join("/")}`.replace(/\/$/, "") || "/"
   };
 }
-function Lt(t, e) {
-  const o = x(t.routesDir, e).split($).join("/").replace(/\.tsx?$/, "").split("/");
+function mt(e, t) {
+  const o = N(e.routesDir, t).split(O).join("/").replace(/\.tsx?$/, "").split("/");
   if (o.at(-1) !== "@middleware")
     return null;
-  let r = x(B(t.outputFile), e).split($).join("/").replace(/\.tsx?$/, "");
-  return r.startsWith(".") || (r = `./${r}`), { file: e, fileSegments: o.slice(0, -1), importPath: r };
+  let n = N(ne(e.outputFile), t).split(O).join("/").replace(/\.tsx?$/, "");
+  return n.startsWith(".") || (n = `./${n}`), { file: t, fileSegments: o.slice(0, -1), importPath: n };
 }
-function Wt(t, e) {
-  return t.every(
-    (n, o) => e[o] === n
+function yt(e, t) {
+  return e.every(
+    (r, o) => t[o] === r
   );
 }
-function Q(t) {
-  return t.startsWith("(") && t.endsWith(")");
+function de(e) {
+  return e.startsWith("(") && e.endsWith(")");
 }
-function kt(t, e) {
+function ht(e, t) {
   return `// Generated by Demiurge. Do not edit by hand.
-import "${R}";
-import type { MiddlewareContextOf, PathValue } from "${R}";
-${e.map(Ht).join(`
+import "${P}";
+import type { MiddlewareContextOf, PathValue } from "${P}";
+${t.map(gt).join(`
 `)}
 
-${e.map((n, o) => Jt(o)).join(`
+${t.map((r, o) => wt(o)).join(`
 `)}
 
-declare module "${R}" {
+declare module "${P}" {
   interface RoutePathVars {
-${t.map(Bt).join(`
+${e.map(Rt).join(`
 `)}
   }
 
   interface RouteConcretePaths {
-${t.map(Ut).join(`
+${e.map(vt).join(`
 `)}
   }
 
   interface RouteRequestContexts {
-${t.map(Gt).join(`
+${e.map(bt).join(`
 `)}
   }
 }
@@ -80,32 +81,32 @@ ${t.map(Gt).join(`
 export {};
 `;
 }
-function Ht(t, e) {
-  return `type __DemiurgeMiddleware${e} = typeof import(${JSON.stringify(t.importPath)}) extends { middleware?: infer T } ? T : never;`;
+function gt(e, t) {
+  return `type __DemiurgeMiddleware${t} = typeof import(${JSON.stringify(e.importPath)}) extends { middleware?: infer T } ? T : never;`;
 }
-function Jt(t) {
-  return `type __DemiurgeMiddlewareContext${t} = MiddlewareContextOf<__DemiurgeMiddleware${t}>;`;
+function wt(e) {
+  return `type __DemiurgeMiddlewareContext${e} = MiddlewareContextOf<__DemiurgeMiddleware${e}>;`;
 }
-function Bt(t) {
-  if (t.pathVars.length === 0)
-    return `    ${JSON.stringify(t.pattern)}: {};`;
-  const e = t.pathVars.map((n) => `${n}: PathValue`).join("; ");
-  return `    ${JSON.stringify(t.pattern)}: { ${e} };`;
+function Rt(e) {
+  if (e.pathVars.length === 0)
+    return `    ${JSON.stringify(e.pattern)}: {};`;
+  const t = e.pathVars.map((r) => `${r}: PathValue`).join("; ");
+  return `    ${JSON.stringify(e.pattern)}: { ${t} };`;
 }
-function Ut(t) {
-  return `    ${JSON.stringify(t.pattern)}: ${qt(t.pattern)};`;
+function vt(e) {
+  return `    ${JSON.stringify(e.pattern)}: ${$t(e.pattern)};`;
 }
-function Gt(t) {
-  const e = t.contextMiddleware.map((o) => `__DemiurgeMiddlewareContext${o}`), n = e.length > 0 ? e.join(" & ") : "Record<never, never>";
-  return `    ${JSON.stringify(t.pattern)}: ${n};`;
+function bt(e) {
+  const t = e.contextMiddleware.map((o) => `__DemiurgeMiddlewareContext${o}`), r = t.length > 0 ? t.join(" & ") : "Record<never, never>";
+  return `    ${JSON.stringify(e.pattern)}: ${r};`;
 }
-function qt(t) {
-  return t.includes("[") ? `\`${t.split(/(\[\.\.\.[^\]]+\]|\[[^\]]+\])/g).filter(Boolean).map((n) => n.startsWith("[") ? "${PathValue}" : Yt(n)).join("")}\`` : JSON.stringify(t);
+function $t(e) {
+  return e.includes("[") ? `\`${e.split(/(\[\.\.\.[^\]]+\]|\[[^\]]+\])/g).filter(Boolean).map((r) => r.startsWith("[") ? "${PathValue}" : St(r)).join("")}\`` : JSON.stringify(e);
 }
-function Yt(t) {
-  return t.replace(/[`$\\]/g, "\\$&");
+function St(e) {
+  return e.replace(/[`$\\]/g, "\\$&");
 }
-const zt = [
+const xt = [
   "GET",
   "POST",
   "PUT",
@@ -113,7 +114,7 @@ const zt = [
   "DELETE",
   "OPTIONS",
   "HEAD"
-], Kt = /* @__PURE__ */ new Set([
+], Et = /* @__PURE__ */ new Set([
   "action",
   "html",
   "json",
@@ -125,324 +126,671 @@ const zt = [
   "stream",
   "text"
 ]);
-async function Qt(t) {
-  const e = await pt(t, "utf8");
-  return await Xt(e, t);
+async function Nt(e) {
+  const t = await Pe(e, "utf8");
+  return await Dt(t, e);
 }
-async function Xt(t, e) {
-  const n = e.endsWith(".tsx") ? "tsx" : "ts", o = await Et(t, e, {
+async function Dt(e, t) {
+  const r = t.endsWith(".tsx") ? "tsx" : "ts", o = await Je(e, t, {
     format: "esm",
-    loader: n,
+    loader: r,
     target: "esnext"
-  }), r = Zt(o.code);
-  return oe(r, e);
+  }), n = Pt(o.code);
+  return Ct(n, t);
 }
-function Zt(t) {
-  const e = U(t), n = se(e), o = ae(e), r = te(e), i = ee(e), s = {}, a = /* @__PURE__ */ new Set();
+function Pt(e) {
+  const t = oe(e), r = jt(t), o = _t(t), n = Ot(t), i = Mt(t), s = {}, a = /* @__PURE__ */ new Set();
   let c;
-  for (const [u, l] of i) {
-    const f = r.get(l);
+  for (const [u, d] of i) {
+    const h = n.get(d);
     if (u === "policy") {
-      f && (c = mt(f, n, o));
+      h && (c = Me(h, r, o));
       continue;
     }
-    if (!ce(u) || (a.add(u), !f)) continue;
-    const g = re(f, n, o);
-    g && (s[u] = g);
+    if (!Ft(u) || (a.add(u), !h)) continue;
+    const D = Tt(h, r, o);
+    D && (s[u] = D);
   }
   return { capabilities: s, declaredMethods: a, policy: c };
 }
-function te(t) {
-  const e = /* @__PURE__ */ new Map();
-  for (const n of d(t.body)) {
-    const o = n.type === "ExportNamedDeclaration" ? y(n.declaration) : n;
+function Ot(e) {
+  const t = /* @__PURE__ */ new Map();
+  for (const r of y(e.body)) {
+    const o = r.type === "ExportNamedDeclaration" ? R(r.declaration) : r;
     if (o?.type === "VariableDeclaration")
-      for (const r of d(o.declarations)) {
-        const i = E(r.id), s = y(r.init);
-        i && s && e.set(i, s);
+      for (const n of y(o.declarations)) {
+        const i = T(n.id), s = R(n.init);
+        i && s && t.set(i, s);
       }
   }
-  return e;
+  return t;
 }
-function ee(t) {
-  const e = /* @__PURE__ */ new Map();
-  for (const n of d(t.body)) {
-    if (n.type !== "ExportNamedDeclaration") continue;
-    const o = y(n.declaration);
+function Mt(e) {
+  const t = /* @__PURE__ */ new Map();
+  for (const r of y(e.body)) {
+    if (r.type !== "ExportNamedDeclaration") continue;
+    const o = R(r.declaration);
     if (o?.type === "VariableDeclaration")
-      for (const r of d(o.declarations)) {
-        const i = E(r.id);
-        i && e.set(i, i);
+      for (const n of y(o.declarations)) {
+        const i = T(n.id);
+        i && t.set(i, i);
       }
-    for (const r of d(n.specifiers)) {
-      const i = S(r.exported), s = S(r.local);
-      i && s && e.set(i, s);
+    for (const n of y(r.specifiers)) {
+      const i = M(n.exported), s = M(n.local);
+      i && s && t.set(i, s);
     }
   }
-  return e;
+  return t;
 }
-function re(t, e, n) {
-  if (t.type !== "CallExpression") return;
-  const o = E(t.callee), r = o ? e.get(o) : void 0;
-  if (!r || !Kt.has(r)) return;
-  const i = d(t.arguments), s = r === "action" ? i[0] : i[1];
+function Tt(e, t, r) {
+  if (e.type !== "CallExpression") return;
+  const o = T(e.callee), n = o ? t.get(o) : void 0;
+  if (!n || !Et.has(n)) return;
+  const i = y(e.arguments), s = n === "action" ? i[0] : i[1];
   if (!s) return {};
-  const a = X(s, "cors", n), c = X(
+  const a = fe(s, "cors", r), c = fe(
     s,
     "security",
-    n
+    r
   );
   return {
-    cors: D(a) ? a : void 0,
-    security: D(c) ? c : void 0
+    cors: I(a) ? a : void 0,
+    security: I(c) ? c : void 0
   };
 }
-function X(t, e, n) {
-  if (t.type === "Identifier") {
-    const r = n.get(String(t.name));
-    return D(r) ? r[e] : p;
+function fe(e, t, r) {
+  if (e.type === "Identifier") {
+    const n = r.get(String(e.name));
+    return I(n) ? n[t] : g;
   }
-  if (t.type !== "ObjectExpression") return p;
+  if (e.type !== "ObjectExpression") return g;
   let o;
-  for (const r of d(t.properties)) {
-    if (r.type !== "Property" || r.computed) return p;
-    S(r.key) === e && (o = v(y(r.value), n));
+  for (const n of y(e.properties)) {
+    if (n.type !== "Property" || n.computed) return g;
+    M(n.key) === t && (o = x(R(n.value), r));
   }
   return o;
 }
-function mt(t, e, n) {
-  if (t.type === "CallExpression") {
-    const r = E(t.callee);
-    if (r && e.get(r) === "defineRoutePolicy") {
-      const i = d(t.arguments)[0];
-      return i ? mt(i, e, n) : void 0;
+function Me(e, t, r) {
+  if (e.type === "CallExpression") {
+    const n = T(e.callee);
+    if (n && t.get(n) === "defineRoutePolicy") {
+      const i = y(e.arguments)[0];
+      return i ? Me(i, t, r) : void 0;
     }
   }
-  if (t.type !== "ObjectExpression") {
-    const r = v(t, n);
-    return D(r) ? r : void 0;
+  if (e.type !== "ObjectExpression") {
+    const n = x(e, r);
+    return I(n) ? n : void 0;
   }
   const o = {};
-  for (const r of d(t.properties)) {
-    if (r.type !== "Property" || r.computed) return;
-    const i = S(r.key), s = y(r.value);
+  for (const n of y(e.properties)) {
+    if (n.type !== "Property" || n.computed) return;
+    const i = M(n.key), s = R(n.value);
     if (!i || !s) return;
     if (i === "document") {
-      const c = ne(s, e, n);
+      const c = At(s, t, r);
       if (!c) return;
       o.document = c;
       continue;
     }
-    const a = v(s, n);
-    if (a === p) return;
+    const a = x(s, r);
+    if (a === g) return;
     o[i] = a;
   }
   return o;
 }
-function ne(t, e, n) {
-  if (t.type !== "CallExpression") {
-    const a = v(t, n);
-    return D(a) ? a : void 0;
+function At(e, t, r) {
+  if (e.type !== "CallExpression") {
+    const a = x(e, r);
+    return I(a) ? a : void 0;
   }
-  const o = y(t.callee);
+  const o = R(e.callee);
   if (o?.type !== "MemberExpression") return;
-  const r = E(o.object), i = S(o.property);
-  if (!r || e.get(r) !== "security" || !i)
+  const n = T(o.object), i = M(o.property);
+  if (!n || t.get(n) !== "security" || !i)
     return;
-  const s = v(d(t.arguments)[0], n);
-  if (!(s !== p && s !== void 0 && !D(s))) {
-    if (i === "api") return _.api(s);
+  const s = x(y(e.arguments)[0], r);
+  if (!(s !== g && s !== void 0 && !I(s))) {
+    if (i === "api")
+      return U.api(s);
     if (i === "crossOriginIsolated")
-      return _.crossOriginIsolated(s);
-    if (i === "static") return _.static(s);
-    if (i === "strict") return _.strict(s);
+      return U.crossOriginIsolated(s);
+    if (i === "static")
+      return U.static(s);
+    if (i === "strict")
+      return U.strict(s);
   }
 }
-function oe(t, e) {
-  const n = [], o = new Set(t.declaredMethods);
+function Ct(e, t) {
+  const r = [], o = new Set(e.declaredMethods);
   o.has("GET") && o.add("HEAD"), o.add("OPTIONS");
-  for (const [r, i] of Object.entries(
-    t.capabilities
+  for (const [n, i] of Object.entries(
+    e.capabilities
   )) {
     if (i.cors) {
       try {
-        Pt(i.cors);
+        Ge(i.cors);
       } catch (s) {
-        n.push(F(
+        r.push(q(
           "cors-invalid",
-          e,
-          k(s, "The CORS policy is invalid."),
-          r
+          t,
+          ee(s, "The CORS policy is invalid."),
+          n
         ));
       }
       for (const s of i.cors.methods ?? [])
-        o.has(s) || n.push(F(
+        o.has(s) || r.push(q(
           "cors-method-unavailable",
-          e,
+          t,
           `CORS method ${s} is not available from this route.`,
-          r
+          n
         ));
     }
-    Z(i.security, e, r, n);
+    pe(i.security, t, n, r);
   }
-  if (Z(t.policy?.security, e, void 0, n), t.policy?.document)
+  if (pe(e.policy?.security, t, void 0, r), e.policy?.document)
     try {
-      Ot(ie(t.policy.document), {
+      Be(It(e.policy.document), {
         nonce: "build-verification-nonce"
       });
-    } catch (r) {
-      n.push(F(
+    } catch (n) {
+      r.push(q(
         "security-header-render-failed",
-        e,
-        k(r, "The security headers are invalid.")
+        t,
+        ee(n, "The security headers are invalid.")
       ));
     }
-  return n;
+  return r;
 }
-function ie(t) {
-  const e = t.headers?.reportingEndpoints, n = !!(e && Object.keys(e).length), o = t.csp === !1 ? void 0 : t.csp?.reportTo;
-  return n || !o ? t : {
-    ...t,
-    csp: { ...t.csp, reportTo: void 0 },
-    headers: e ? { ...t.headers, reportingEndpoints: void 0 } : t.headers
+function It(e) {
+  const t = e.headers?.reportingEndpoints, r = !!(t && Object.keys(t).length), o = e.csp === !1 ? void 0 : e.csp?.reportTo;
+  return r || !o ? e : {
+    ...e,
+    csp: { ...e.csp, reportTo: void 0 },
+    headers: t ? { ...e.headers, reportingEndpoints: void 0 } : e.headers
   };
 }
-function Z(t, e, n, o) {
-  if (t?.rateLimit)
+function pe(e, t, r, o) {
+  if (e?.rateLimit)
     try {
-      Mt(t.rateLimit);
-    } catch (r) {
-      o.push(F(
+      Ke(e.rateLimit);
+    } catch (n) {
+      o.push(q(
         "rate-limit-invalid",
-        e,
-        k(r, "The rate limit policy is invalid."),
-        n
+        t,
+        ee(n, "The rate limit policy is invalid."),
+        r
       ));
     }
 }
-function F(t, e, n, o) {
-  return { code: t, exportName: o, file: e, message: n, severity: "error" };
+function q(e, t, r, o) {
+  return { code: e, exportName: o, file: t, message: r, severity: "error" };
 }
-function se(t) {
-  const e = /* @__PURE__ */ new Map();
-  for (const n of d(t.body))
-    if (!(n.type !== "ImportDeclaration" || y(n.source)?.value !== "@demiurgejs/core"))
-      for (const o of d(n.specifiers)) {
+function jt(e) {
+  const t = /* @__PURE__ */ new Map();
+  for (const r of y(e.body))
+    if (!(r.type !== "ImportDeclaration" || R(r.source)?.value !== "@demiurgejs/core"))
+      for (const o of y(r.specifiers)) {
         if (o.type !== "ImportSpecifier") continue;
-        const r = E(o.local), i = S(o.imported);
-        r && i && e.set(r, i);
+        const n = T(o.local), i = M(o.imported);
+        n && i && t.set(n, i);
       }
-  return e;
+  return t;
 }
-function ae(t) {
-  const e = /* @__PURE__ */ new Map();
-  for (const n of d(t.body)) {
-    const o = n.type === "ExportNamedDeclaration" ? y(n.declaration) : n;
+function _t(e) {
+  const t = /* @__PURE__ */ new Map();
+  for (const r of y(e.body)) {
+    const o = r.type === "ExportNamedDeclaration" ? R(r.declaration) : r;
     if (o?.type === "VariableDeclaration")
-      for (const r of d(o.declarations)) {
-        const i = E(r.id), s = y(r.init);
+      for (const n of y(o.declarations)) {
+        const i = T(n.id), s = R(n.init);
         if (!i || !s) continue;
-        const a = v(s, e);
-        a !== p && e.set(i, a);
+        const a = x(s, t);
+        a !== g && t.set(i, a);
       }
   }
-  return e;
-}
-const p = Symbol("unresolved");
-function v(t, e) {
-  if (t) {
-    if (t.type === "Literal") return t.value;
-    if (t.type === "Identifier")
-      return t.name === "undefined" ? void 0 : e.has(String(t.name)) ? e.get(String(t.name)) : p;
-    if (t.type === "TemplateLiteral")
-      return d(t.expressions).length ? p : d(t.quasis).map((n) => y(n.value)?.cooked ?? "").join("");
-    if (t.type === "UnaryExpression") {
-      const n = v(y(t.argument), e);
-      return typeof n != "number" ? p : t.operator === "-" ? -n : t.operator === "+" ? n : p;
+  return t;
+}
+const g = Symbol("unresolved");
+function x(e, t) {
+  if (e) {
+    if (e.type === "Literal") return e.value;
+    if (e.type === "Identifier")
+      return e.name === "undefined" ? void 0 : t.has(String(e.name)) ? t.get(String(e.name)) : g;
+    if (e.type === "TemplateLiteral")
+      return y(e.expressions).length ? g : y(e.quasis).map((r) => R(r.value)?.cooked ?? "").join("");
+    if (e.type === "UnaryExpression") {
+      const r = x(R(e.argument), t);
+      return typeof r != "number" ? g : e.operator === "-" ? -r : e.operator === "+" ? r : g;
     }
-    if (t.type === "ArrayExpression") {
-      const n = [];
-      for (const o of d(t.elements)) {
-        const r = v(o, e);
-        if (r === p) return p;
-        n.push(r);
+    if (e.type === "ArrayExpression") {
+      const r = [];
+      for (const o of y(e.elements)) {
+        const n = x(o, t);
+        if (n === g) return g;
+        r.push(n);
       }
-      return n;
+      return r;
     }
-    if (t.type === "ObjectExpression") {
-      const n = {};
-      for (const o of d(t.properties)) {
-        if (o.type !== "Property" || o.computed) return p;
-        const r = S(o.key), i = v(y(o.value), e);
-        if (!r || i === p) return p;
-        n[r] = i;
+    if (e.type === "ObjectExpression") {
+      const r = {};
+      for (const o of y(e.properties)) {
+        if (o.type !== "Property" || o.computed) return g;
+        const n = M(o.key), i = x(R(o.value), t);
+        if (!n || i === g) return g;
+        r[n] = i;
       }
-      return n;
+      return r;
     }
-    return p;
+    return g;
   }
 }
-function ce(t) {
-  return zt.includes(t);
+function Ft(e) {
+  return xt.includes(e);
+}
+function ee(e, t) {
+  return e instanceof Error ? e.message : t;
+}
+function I(e) {
+  return !!e && typeof e == "object" && !Array.isArray(e);
 }
-function k(t, e) {
-  return t instanceof Error ? t.message : e;
+function R(e) {
+  return e && typeof e == "object" && "type" in e ? e : void 0;
 }
-function D(t) {
-  return !!t && typeof t == "object" && !Array.isArray(t);
+function y(e) {
+  return Array.isArray(e) ? e.map(R).filter((t) => !!t) : [];
 }
-function y(t) {
-  return t && typeof t == "object" && "type" in t ? t : void 0;
+function T(e) {
+  const t = R(e);
+  return t?.type === "Identifier" ? String(t.name) : void 0;
+}
+function M(e) {
+  const t = R(e);
+  return t?.type === "Identifier" || t?.type === "Literal" ? String(t.name ?? t.value) : void 0;
+}
+const Te = "/_demiurge/audit", Ae = [
+  "GET",
+  "POST",
+  "PUT",
+  "PATCH",
+  "DELETE",
+  "OPTIONS",
+  "HEAD"
+];
+function kt(e) {
+  return new URL(e.url).pathname === Te;
+}
+async function Lt(e, t) {
+  const r = new URL(t.url), o = await Vt(
+    e,
+    r.searchParams.get("path") || "/",
+    t
+  ), n = r.searchParams.get("format") === "json";
+  return new Response(
+    n ? JSON.stringify(o, null, 2) : Jt(o),
+    {
+      headers: {
+        "cache-control": "no-store",
+        // The panel is a side channel. It declares its own policy, so the
+        // policy of the application stays unchanged. The panel runs no script.
+        "content-security-policy": "default-src 'none'; base-uri 'none'; form-action 'self'; style-src 'unsafe-inline'",
+        "content-type": n ? "application/json; charset=utf-8" : "text/html; charset=utf-8",
+        "x-robots-tag": "noindex"
+      }
+    }
+  );
+}
+async function Vt(e, t, r) {
+  const o = new URL(r.url).origin, n = new URL(t, o), i = n.pathname, s = new Request(n, { headers: r.headers }), a = Wt(e, i);
+  if (!a) {
+    const p = await se(
+      e,
+      { fileSegments: [] },
+      {},
+      void 0
+    );
+    return me({
+      cacheReads: [],
+      kind: "unmatched",
+      method: "GET",
+      pathname: i,
+      policy: p,
+      request: s,
+      scripts: []
+    });
+  }
+  const c = await a.route.load(), u = Ht(c), d = c[u], h = await se(
+    e,
+    a.route,
+    c,
+    d
+  ), D = [], m = d?.kind === "page" ? await Ye(
+    e,
+    i,
+    s,
+    void 0,
+    Ut(D)
+  ) : void 0, f = m?.status === "ready" ? m.match : void 0;
+  return me({
+    cacheReads: D,
+    cors: d && d.kind !== "page" ? d.cors : void 0,
+    kind: d?.kind === "page" ? "page" : "resource",
+    metadata: f?.metadata,
+    method: u,
+    pathname: i,
+    policy: h,
+    request: s,
+    route: {
+      file: a.route.file,
+      groups: a.route.fileSegments.filter(Xe),
+      layouts: e.layouts.filter((p) => Q(p.fileSegments, a.route.fileSegments)).map((p) => p.file),
+      methods: Ae.filter((p) => c[p]),
+      middlewares: e.middlewares.filter((p) => Q(p.fileSegments, a.route.fileSegments)).map((p) => p.file),
+      params: a.path,
+      pattern: Qe(a.route.segments),
+      policies: e.policies.filter((p) => Q(p.fileSegments, a.route.fileSegments)).map((p) => p.file),
+      render: f?.render.mode
+    },
+    scripts: f?.scripts ?? []
+  });
 }
-function d(t) {
-  return Array.isArray(t) ? t.map(y).filter((e) => !!e) : [];
+function me(e) {
+  const t = e.kind === "page", r = t && et(e.policy.document) ? z() : void 0, o = e.scripts.map((s) => ({
+    ...s,
+    nonce: s.nonce ?? r
+  })), n = {
+    headers: { nonce: r, request: e.request },
+    policy: e.policy.document ?? {},
+    scriptDependencies: !0
+  };
+  return {
+    audit: ae({
+      document: t ? { ...n, scripts: o } : void 0,
+      route: {
+        cors: e.cors,
+        method: e.method,
+        security: e.policy.security
+      }
+    }),
+    // A nonce makes a document unique for each response. The request handler
+    // therefore replaces the cache directives of the application.
+    cacheControl: r ? "private, no-store" : void 0,
+    cacheReads: e.cacheReads,
+    kind: e.kind,
+    metadata: e.metadata,
+    method: e.method,
+    nonce: r,
+    pathname: e.pathname,
+    policy: e.policy,
+    route: e.route,
+    scripts: o.map((s) => ({
+      // One audit for each script gives the status of that script alone. The
+      // panel reads the same code path that the complete audit reads.
+      findings: ae({
+        document: { ...n, scripts: [s] }
+      }).findings,
+      integrity: s.integrity,
+      nonce: s.nonce,
+      purpose: s.purpose,
+      src: s.src,
+      strategy: s.strategy
+    }))
+  };
 }
-function E(t) {
-  const e = y(t);
-  return e?.type === "Identifier" ? String(e.name) : void 0;
+function Wt(e, t) {
+  try {
+    return Oe(e.routes, t);
+  } catch (r) {
+    if (r instanceof Ze)
+      return null;
+    throw r;
+  }
 }
-function S(t) {
-  const e = y(t);
-  return e?.type === "Identifier" || e?.type === "Literal" ? String(e.name ?? e.value) : void 0;
+function Ht(e) {
+  return Ae.find((t) => e[t]) ?? "GET";
 }
-const V = "virtual:demiurge/client-entry", H = `/@id/${V}`, L = `\0${V}`, yt = "virtual:demiurge/server-entry", tt = `\0${yt}`, et = ".demiurge/route-manifest.d.ts";
-function rr(t = {}) {
-  let e = process.cwd(), n = !1;
-  const o = `demiurge-${W()}`;
+function Ut(e) {
+  const t = tt();
+  return {
+    get: async (r) => (e.push({
+      key: nt(r.key),
+      scope: r.scope ?? "request",
+      staleWhileRevalidate: ye(r.staleWhileRevalidate),
+      tags: (r.tags ?? []).map(rt),
+      ttl: ye(r.ttl)
+    }), await t.get(r)),
+    invalidateKey: t.invalidateKey,
+    invalidateTags: t.invalidateTags
+  };
+}
+function ye(e) {
+  return e === void 0 ? void 0 : String(e);
+}
+function Jt(e) {
+  return `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Demiurge route audit</title>
+    <style>${qt}</style>
+  </head>
+  <body>
+    <h1>Demiurge route audit</h1>
+    <form method="get" action="${Te}">
+      <label for="path">Path</label>
+      <input id="path" name="path" value="${l(e.pathname)}" />
+      <button type="submit">Audit</button>
+    </form>
+${zt(e)}
+${Gt(e.audit.findings)}
+${Bt(e.audit.headers)}
+${Kt(e)}
+${Yt(e.metadata)}
+${Qt(e.scripts)}
+${Xt(e)}
+    <p class="footer">
+      The development server serves this panel. A production build and a static
+      export do not contain it.
+    </p>
+  </body>
+</html>
+`;
+}
+const qt = `
+  :root { color-scheme: light dark; }
+  body {
+    font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+    line-height: 1.5;
+    margin: 0 auto;
+    max-width: 60rem;
+    padding: 2rem 1rem;
+  }
+  h1 { font-size: 1.25rem; }
+  h2 { font-size: 1rem; margin-bottom: 0.25rem; }
+  form { display: flex; gap: 0.5rem; margin-bottom: 1.5rem; }
+  input { flex: 1; padding: 0.25rem 0.5rem; }
+  section { border-top: 1px solid currentColor; padding: 0.75rem 0; }
+  table { border-collapse: collapse; width: 100%; }
+  td, th { padding: 0.25rem 0.5rem 0.25rem 0; text-align: left; vertical-align: top; }
+  th { white-space: nowrap; width: 12rem; }
+  ul { margin: 0; padding-left: 1.25rem; }
+  .empty { opacity: 0.7; }
+  .error { font-weight: 700; }
+  .footer { opacity: 0.7; }
+`;
+function zt(e) {
+  if (!e.route)
+    return $(
+      "Route",
+      `<p class="empty">No route matches ${l(e.pathname)}.</p>`
+    );
+  const t = e.route;
+  return $(
+    "Route",
+    C([
+      ["Pathname", l(e.pathname)],
+      ["Pattern", l(t.pattern)],
+      ["File", l(t.file)],
+      ["Kind", l(e.kind)],
+      ["Method", l(e.method)],
+      ["Methods", l(t.methods.join(", "))],
+      ["Render mode", t.render ? l(t.render) : S()],
+      ["Path values", Zt(t.params)],
+      ["Route groups", A(t.groups)],
+      ["Layouts", A(t.layouts)],
+      ["Policies", A(t.policies)],
+      ["Middleware", A(t.middlewares)]
+    ])
+  );
+}
+function Gt(e) {
+  return e.length === 0 ? $("Findings", '<p class="empty">No findings.</p>') : $(
+    "Findings",
+    `<ul>${e.map(Ce).join("")}</ul>`
+  );
+}
+function Ce(e) {
+  return `<li${e.severity === "error" ? ' class="error"' : ""}>${l(e.severity)}: ${l(e.message)} <code>${l(e.code)}</code></li>`;
+}
+function Bt(e) {
+  const t = Object.keys(e).sort();
+  return t.length === 0 ? $(
+    "Response headers",
+    '<p class="empty">The response carries no document header.</p>'
+  ) : $(
+    "Response headers",
+    C(t.map((r) => [r, l(e[r])]))
+  );
+}
+function Kt(e) {
+  const t = {
+    cors: e.audit.route?.cors,
+    document: e.policy.document,
+    security: e.policy.security
+  };
+  return $(
+    "Effective policy",
+    `<pre>${l(JSON.stringify(t, null, 2))}</pre>`
+  );
+}
+function Yt(e) {
+  return e ? $(
+    "Metadata",
+    `<pre>${l(JSON.stringify(e, null, 2))}</pre>`
+  ) : $("Metadata", '<p class="empty">No document metadata.</p>');
+}
+function Qt(e) {
+  return e.length === 0 ? $("Scripts", '<p class="empty">No contributed scripts.</p>') : $(
+    "Scripts",
+    e.map(
+      (t) => C([
+        ["Source", l(t.src)],
+        ["Strategy", l(t.strategy)],
+        ["Purpose", t.purpose ? l(t.purpose) : S()],
+        ["Integrity", t.integrity ? l(t.integrity) : S()],
+        ["Nonce", t.nonce ? "applied" : S()],
+        [
+          "Policy status",
+          t.findings.length === 0 ? "allowed" : `<ul>${t.findings.map(Ce).join("")}</ul>`
+        ]
+      ])
+    ).join("")
+  );
+}
+function Xt(e) {
+  const t = [
+    [
+      "Response cache-control",
+      e.cacheControl ? l(e.cacheControl) : S()
+    ],
+    ["Nonce", e.nonce ? "required" : S()]
+  ];
+  return e.cacheReads.length === 0 ? $(
+    "Cache behavior",
+    `${C(t)}<p class="empty">The request read no cache entry.</p>`
+  ) : $(
+    "Cache behavior",
+    `${C(t)}${e.cacheReads.map(
+      (r) => C([
+        ["Key", l(r.key)],
+        ["Scope", l(r.scope)],
+        ["Time to live", r.ttl ? l(r.ttl) : S()],
+        [
+          "Stale while revalidate",
+          r.staleWhileRevalidate ? l(r.staleWhileRevalidate) : S()
+        ],
+        ["Tags", A(r.tags)]
+      ])
+    ).join("")}`
+  );
+}
+function $(e, t) {
+  return `    <section>
+      <h2>${l(e)}</h2>
+      ${t}
+    </section>`;
+}
+function C(e) {
+  return `<table><tbody>${e.map(
+    ([t, r]) => `<tr><th scope="row">${l(t)}</th><td>${r}</td></tr>`
+  ).join("")}</tbody></table>`;
+}
+function A(e) {
+  return e.length === 0 ? S() : `<ul>${e.map((t) => `<li>${l(t)}</li>`).join("")}</ul>`;
+}
+function Zt(e) {
+  return A(
+    Object.entries(e).map(([t, r]) => `${t} = ${String(r)}`)
+  );
+}
+function S() {
+  return '<span class="empty">none</span>';
+}
+function l(e) {
+  return e.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
+}
+const K = "virtual:demiurge/client-entry", te = `/@id/${K}`, X = `\0${K}`, Ie = "virtual:demiurge/server-entry", he = `\0${Ie}`, ge = ".demiurge/route-manifest.d.ts";
+function Yr(e = {}) {
+  let t = process.cwd(), r = !1;
+  const o = `demiurge-${z()}`;
   return {
     api: {
       demiurge: !0,
-      staticDeployment: t.static?.deployment,
-      staticFileHeaders: t.static?.headers
+      fonts: e.fonts,
+      images: e.images,
+      staticDeployment: e.static?.deployment,
+      staticFileHeaders: e.static?.headers
     },
     enforce: "post",
     name: "demiurge",
-    config(r, i) {
-      return ge(r, i, o);
+    config(n, i) {
+      return cr(n, i, o);
     },
-    configResolved(r) {
-      e = r.root, n = r.command === "build";
+    configResolved(n) {
+      t = n.root, r = n.command === "build";
     },
-    resolveId(r) {
-      return r === V ? L : r === yt ? tt : null;
+    resolveId(n) {
+      return n === K ? X : n === Ie ? he : null;
     },
-    load(r) {
-      return r === L ? we(e, t) : r === tt ? ve(e, t) : null;
+    load(n) {
+      return n === X ? ur(t, e) : n === he ? lr(t, e) : null;
     },
     transform: {
       order: "post",
-      handler(r, i, s) {
-        if (!de(e, t, i))
+      handler(n, i, s) {
+        if (!nr(t, e, i))
           return null;
         if (s?.ssr)
-          return n ? null : ue(r, i);
-        const a = le(r);
-        return a === r ? null : { code: a, map: null };
+          return r ? null : er(n, i);
+        const a = tr(n);
+        return a === n ? null : { code: a, map: null };
       }
     },
-    generateBundle(r, i) {
+    generateBundle(n, i) {
       const s = Object.values(i).find(
-        (u) => u.type === "chunk" && u.isEntry && u.facadeModuleId === L
+        (u) => u.type === "chunk" && u.isEntry && u.facadeModuleId === X
       );
       if (!s)
         return;
@@ -451,11 +799,11 @@ function rr(t = {}) {
       ).map((u) => `/${u.fileName}`), c = `/${s.fileName}`;
       this.emitFile({
         fileName: "index.html",
-        source: Ae({
+        source: Mr({
           entrySrc: c,
-          lang: t.document?.lang,
+          lang: e.document?.lang,
           styles: a,
-          title: t.document?.title
+          title: e.document?.title
         }),
         type: "asset"
       }), this.emitFile({
@@ -465,19 +813,19 @@ function rr(t = {}) {
       });
     },
     async buildStart() {
-      if (n) {
-        await Ie(e, t);
-        const r = await ft(e, t);
-        if (r.length)
-          throw new Error(Je(r));
+      if (r) {
+        await xr(t, e);
+        const n = await Ne(t, e);
+        if (n.length)
+          throw new Error(_r(n));
       }
-      t.typedRoutes && await M(e, t);
+      e.typedRoutes && await L(t, e);
     },
-    configureServer(r) {
+    configureServer(n) {
       const i = async () => {
-        const l = await ft(r.config.root, t);
-        for (const f of l)
-          r.config.logger.warn(bt(f));
+        const m = await Ne(n.config.root, e);
+        for (const f of m)
+          n.config.logger.warn(Le(f));
       };
       let s, a = Promise.resolve();
       const c = () => {
@@ -486,125 +834,151 @@ function rr(t = {}) {
       }, u = () => {
         s && clearTimeout(s), s = setTimeout(() => {
           s = void 0, c();
-        }, ke), s.unref?.();
+        }, Ir), s.unref?.();
       };
-      if (r.httpServer?.once("close", () => {
+      if (n.httpServer?.once("close", () => {
         s && (clearTimeout(s), s = void 0);
-      }), c(), t.typedRoutes) {
-        const l = h(
-          r.config.root,
-          t.routesDir ?? "src/routes"
+      }), c(), e.typedRoutes) {
+        const m = b(
+          n.config.root,
+          e.routesDir ?? "src/routes"
         );
-        M(r.config.root, t), r.watcher.add(l), r.watcher.on("add", (f) => {
-          j(l, f) && (M(r.config.root, t), u());
-        }), r.watcher.on("change", (f) => {
-          j(l, f) && (M(r.config.root, t), u());
-        }), r.watcher.on("unlink", (f) => {
-          j(l, f) && (M(r.config.root, t), u());
+        L(n.config.root, e), n.watcher.add(m), n.watcher.on("add", (f) => {
+          J(m, f) && (L(n.config.root, e), u());
+        }), n.watcher.on("change", (f) => {
+          J(m, f) && (L(n.config.root, e), u());
+        }), n.watcher.on("unlink", (f) => {
+          J(m, f) && (L(n.config.root, e), u());
         });
       } else {
-        const l = h(
-          r.config.root,
-          t.routesDir ?? "src/routes"
+        const m = b(
+          n.config.root,
+          e.routesDir ?? "src/routes"
         );
-        r.watcher.add(l);
+        n.watcher.add(m);
         for (const f of ["add", "change", "unlink"])
-          r.watcher.on(f, (g) => {
-            j(l, g) && u();
+          n.watcher.on(f, (p) => {
+            J(m, p) && u();
           });
       }
-      return r.middlewares.use(async (l, f, g) => {
+      const d = yr(e), h = hr(n, e), D = at({
+        fonts: e.fonts,
+        root: n.config.root
+      });
+      return n.middlewares.use(async (m, f, p) => {
         try {
-          let w;
+          let v;
           try {
-            w = q(l, {
+            v = ce(m, {
               // Vite performs its own configured host allowlist check before
               // Demiurge's middleware runs. Production Node listeners require
               // an explicit application allowlist instead.
-              allowedHosts: [l.headers.host ?? "localhost"]
+              allowedHosts: [m.headers.host ?? "localhost"]
             });
-          } catch (O) {
-            if (O instanceof Y) {
-              z(f);
+          } catch (H) {
+            if (H instanceof ue) {
+              le(f);
               return;
             }
-            throw O;
+            throw H;
           }
-          const I = h(
-            r.config.root,
-            t.routesDir ?? "src/routes"
-          ), C = await ct(r, l, I), P = nt(
-            r,
+          if (d && kt(v)) {
+            const H = await Z(
+              n,
+              m,
+              b(n.config.root, e.routesDir ?? "src/routes")
+            );
+            await k(
+              f,
+              await Lt(H, v)
+            );
+            return;
+          }
+          const j = await D(v);
+          if (j) {
+            await k(f, j);
+            return;
+          }
+          const _ = await h(v);
+          if (_) {
+            await k(f, _);
+            return;
+          }
+          const V = b(
+            n.config.root,
+            e.routesDir ?? "src/routes"
+          ), W = await Z(n, m, V), F = Re(
+            n,
             o
-          ), N = await Le(
-            C,
-            w,
-            Se(t, P.transform)
+          ), Y = await Ar(
+            W,
+            v,
+            gr(e, F.transform)
           );
-          if (N === "next") {
-            g();
+          if (Y === "next") {
+            p();
             return;
           }
-          it(N, P.nonce), await K(f, N);
-        } catch (w) {
-          g(w);
+          be(Y, F.nonce), await k(f, Y);
+        } catch (v) {
+          p(v);
         }
       }), () => {
-        r.middlewares.use(async (l, f, g) => {
+        n.middlewares.use(async (m, f, p) => {
           try {
-            let w;
+            let v;
             try {
-              w = q(l, {
-                allowedHosts: [l.headers.host ?? "localhost"]
+              v = ce(m, {
+                allowedHosts: [m.headers.host ?? "localhost"]
               });
-            } catch (O) {
-              if (O instanceof Y) {
-                z(f);
+            } catch (F) {
+              if (F instanceof ue) {
+                le(f);
                 return;
               }
-              throw O;
+              throw F;
             }
-            const I = h(
-              r.config.root,
-              t.routesDir ?? "src/routes"
-            ), C = await ct(r, l, I);
-            Me(C, I);
-            const P = nt(
-              r,
+            const j = b(
+              n.config.root,
+              e.routesDir ?? "src/routes"
+            ), _ = await Z(n, m, j);
+            Sr(_, j);
+            const V = Re(
+              n,
               o
-            ), N = await It(
-              C,
-              w,
-              Oe(t, P.transform)
+            ), W = await ot(
+              _,
+              v,
+              $r(e, V.transform)
             );
-            it(
-              N,
-              P.nonce
-            ), await K(f, N);
-          } catch (w) {
-            g(w);
+            be(
+              W,
+              V.nonce
+            ), await k(f, W);
+          } catch (v) {
+            p(v);
           }
         });
       };
     }
   };
 }
-function ue(t, e) {
-  if (!t.includes("import.meta"))
+function er(e, t) {
+  if (!e.includes("import.meta"))
     return null;
-  const n = U(t), o = b(n.body).find(
-    (u) => u.type === "ImportDeclaration" && b(u.specifiers).some(
-      (l) => m(l.local)?.type === "Identifier" && m(l.local)?.name === "meta"
+  const r = oe(e), o = E(r.body).find(
+    (u) => u.type === "ImportDeclaration" && E(u.specifiers).some(
+      (d) => w(d.local)?.type === "Identifier" && w(d.local)?.name === "meta"
     )
-  ), r = o && b(o.specifiers).find(
-    (u) => m(u.local)?.type === "Identifier" && m(u.local)?.name === "meta"
-  ), i = r && m(r.local);
-  if (!o || !r || !i)
+  ), n = o && E(o.specifiers).find(
+    (u) => w(u.local)?.type === "Identifier" && w(u.local)?.name === "meta"
+  ), i = n && w(n.local);
+  if (!o || !n || !i)
     return null;
   let s = "__demiurge_imported_meta__";
-  for (; new RegExp(`\\b${s}\\b`).test(t); )
+  for (; new RegExp(`\\b${s}\\b`).test(e); )
     s += "_";
-  const a = new St(t), c = m(r.imported);
+  const a = new Ue(e), c = w(n.imported);
   return a.overwrite(
     i.start,
     i.end,
@@ -615,142 +989,142 @@ const meta = ${s};`), {
     map: a.generateMap({
       hires: "boundary",
       includeContent: !0,
-      source: e
+      source: t
     })
   };
 }
-function le(t) {
-  const e = U(t), n = [], o = fe(e), r = [];
-  T(e, (a) => {
-    if (a.type === "ImportDeclaration" && me(a)) {
-      r.push(a);
+function tr(e) {
+  const t = oe(e), r = [], o = rr(t), n = [];
+  G(t, (a) => {
+    if (a.type === "ImportDeclaration" && ir(a)) {
+      n.push(a);
       return;
     }
-    if (a.type !== "CallExpression" || !pe(a.callee))
+    if (a.type !== "CallExpression" || !or(a.callee))
       return;
-    const c = b(a.arguments)[0];
+    const c = E(a.arguments)[0];
     if (c?.type === "ObjectExpression")
-      for (const u of b(c.properties))
-        u.type === "Property" && A(u.key) === "data" && n.push({ end: u.end, start: u.start });
+      for (const u of E(c.properties))
+        u.type === "Property" && B(u.key) === "data" && r.push({ end: u.end, start: u.start });
   });
-  const i = [...n, ...o];
+  const i = [...r, ...o];
   if (i.length === 0)
-    return t;
+    return e;
   const s = [...i];
-  for (const a of r) {
-    const c = b(a.specifiers).map((f) => m(f.local)).filter((f) => f?.type === "Identifier").map((f) => String(f.name)), u = ye(t, [
+  for (const a of n) {
+    const c = E(a.specifiers).map((h) => w(h.local)).filter((h) => h?.type === "Identifier").map((h) => String(h.name)), u = sr(e, [
       ...i,
       { end: a.end, start: a.start }
-    ]), l = c.find(
-      (f) => new RegExp(`\\b${ht(f)}\\b`).test(u)
+    ]), d = c.find(
+      (h) => new RegExp(`\\b${je(h)}\\b`).test(u)
     );
-    if (l)
+    if (d)
       throw new Error(
-        `Server-only import ${JSON.stringify(l)} is used by client route code. Move that use into page data, a document contribution, or a client-safe module.`
+        `Server-only import ${JSON.stringify(d)} is used by client route code. Move that use into page data, a document contribution, or a client-safe module.`
       );
     s.push({ end: a.end, start: a.start });
   }
-  return he(
-    t,
+  return ar(
+    e,
     s,
-    (a) => n.includes(a) ? "data: undefined" : o.includes(a) ? "undefined" : ""
+    (a) => r.includes(a) ? "data: undefined" : o.includes(a) ? "undefined" : ""
   );
 }
-const rt = /* @__PURE__ */ new Set(["links", "metadata", "scripts"]);
-function fe(t) {
-  const e = /* @__PURE__ */ new Set();
-  for (const o of b(t.body)) {
+const we = /* @__PURE__ */ new Set(["links", "metadata", "scripts"]);
+function rr(e) {
+  const t = /* @__PURE__ */ new Set();
+  for (const o of E(e.body)) {
     if (o.type !== "ExportNamedDeclaration") continue;
-    const r = m(o.declaration);
-    if (r?.type === "VariableDeclaration")
-      for (const i of b(r.declarations)) {
-        const s = m(i.id);
-        s?.type === "Identifier" && rt.has(String(s.name)) && e.add(String(s.name));
+    const n = w(o.declaration);
+    if (n?.type === "VariableDeclaration")
+      for (const i of E(n.declarations)) {
+        const s = w(i.id);
+        s?.type === "Identifier" && we.has(String(s.name)) && t.add(String(s.name));
       }
-    for (const i of b(o.specifiers)) {
-      const s = A(i.exported), a = A(i.local);
-      s && a && rt.has(s) && e.add(a);
+    for (const i of E(o.specifiers)) {
+      const s = B(i.exported), a = B(i.local);
+      s && a && we.has(s) && t.add(a);
     }
   }
-  const n = [];
-  return T(t, (o) => {
+  const r = [];
+  return G(e, (o) => {
     if (o.type !== "VariableDeclarator") return;
-    const r = m(o.id), i = m(o.init);
-    r?.type === "Identifier" && e.has(String(r.name)) && i && n.push({ end: i.end, start: i.start });
-  }), n;
-}
-function de(t, e, n) {
-  const o = n.split("?", 1)[0] ?? n, r = h(t, e.routesDir ?? "src/routes"), i = x(r, o);
-  return i !== "" && i !== ".." && !i.startsWith(`..${$}`);
-}
-function T(t, e) {
-  if (!t || typeof t != "object") return;
-  if (Array.isArray(t)) {
-    for (const o of t) T(o, e);
+    const n = w(o.id), i = w(o.init);
+    n?.type === "Identifier" && t.has(String(n.name)) && i && r.push({ end: i.end, start: i.start });
+  }), r;
+}
+function nr(e, t, r) {
+  const o = r.split("?", 1)[0] ?? r, n = b(e, t.routesDir ?? "src/routes"), i = N(n, o);
+  return i !== "" && i !== ".." && !i.startsWith(`..${O}`);
+}
+function G(e, t) {
+  if (!e || typeof e != "object") return;
+  if (Array.isArray(e)) {
+    for (const o of e) G(o, t);
     return;
   }
-  const n = t;
-  if (typeof n.type == "string") {
-    e(n);
-    for (const [o, r] of Object.entries(n))
-      (/* @__PURE__ */ new Set(["end", "loc", "start", "type"])).has(o) || T(r, e);
+  const r = e;
+  if (typeof r.type == "string") {
+    t(r);
+    for (const [o, n] of Object.entries(r))
+      (/* @__PURE__ */ new Set(["end", "loc", "start", "type"])).has(o) || G(n, t);
   }
 }
-function m(t) {
-  return t && typeof t == "object" && "type" in t ? t : void 0;
+function w(e) {
+  return e && typeof e == "object" && "type" in e ? e : void 0;
 }
-function b(t) {
-  return Array.isArray(t) ? t.map(m).filter((e) => !!e) : [];
+function E(e) {
+  return Array.isArray(e) ? e.map(w).filter((t) => !!t) : [];
 }
-function pe(t) {
-  const e = m(t);
-  return e?.type === "Identifier" ? e.name === "page" : e?.type === "MemberExpression" && A(e.property) === "page";
+function or(e) {
+  const t = w(e);
+  return t?.type === "Identifier" ? t.name === "page" : t?.type === "MemberExpression" && B(t.property) === "page";
 }
-function A(t) {
-  const e = m(t);
-  return e?.type === "Identifier" || e?.type === "Literal" ? String(e.name ?? e.value) : void 0;
+function B(e) {
+  const t = w(e);
+  return t?.type === "Identifier" || t?.type === "Literal" ? String(t.name ?? t.value) : void 0;
 }
-function me(t) {
-  const e = m(t.source)?.value;
-  return typeof e == "string" && /(?:^|[/.-])server(?:[/.-]|$)/.test(e);
+function ir(e) {
+  const t = w(e.source)?.value;
+  return typeof t == "string" && /(?:^|[/.-])server(?:[/.-]|$)/.test(t);
 }
-function ye(t, e) {
-  const n = [...t];
-  for (const { end: o, start: r } of e)
-    n.fill(" ", r, o);
-  return n.join("");
+function sr(e, t) {
+  const r = [...e];
+  for (const { end: o, start: n } of t)
+    r.fill(" ", n, o);
+  return r.join("");
 }
-function he(t, e, n) {
-  return [...e].sort((o, r) => r.start - o.start).reduce(
-    (o, r) => `${o.slice(0, r.start)}${n(r)}${o.slice(r.end)}`,
-    t
+function ar(e, t, r) {
+  return [...t].sort((o, n) => n.start - o.start).reduce(
+    (o, n) => `${o.slice(0, n.start)}${r(n)}${o.slice(n.end)}`,
+    e
   );
 }
-function ht(t) {
-  return t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function je(e) {
+  return e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function ge(t, e, n) {
+function cr(e, t, r) {
   return {
     appType: "custom",
     build: {
-      assetsInlineLimit: t.build?.assetsInlineLimit ?? 0,
-      ...e.isSsrBuild && t.build?.target === void 0 && t.ssr?.target !== "webworker" ? { target: "node22.13" } : {},
+      assetsInlineLimit: e.build?.assetsInlineLimit ?? 0,
+      ...t.isSsrBuild && e.build?.target === void 0 && e.ssr?.target !== "webworker" ? { target: "node22.13" } : {},
       rollupOptions: {
-        input: t.build?.rollupOptions?.input ?? V
+        input: e.build?.rollupOptions?.input ?? K
       }
     },
-    ...e.command === "serve" ? {
-      html: { cspNonce: n },
-      ssr: { external: [R] }
+    ...t.command === "serve" ? {
+      html: { cspNonce: r },
+      ssr: { external: [P] }
     } : {}
   };
 }
-function we(t, e = {}) {
-  const n = e.routesDir ?? "src/routes", o = $e(t, e);
-  return `import { hydrateFileRouter } from "${R}";
+function ur(e, t = {}) {
+  const r = t.routesDir ?? "src/routes", o = mr(e, t);
+  return `import { hydrateFileRouter } from "${P}";
 ${o}
 
-${gt(n, {
+${_e(r, {
     exportRoutes: !1,
     includeServerOnly: !1
   })}
@@ -758,11 +1132,11 @@ ${gt(n, {
 void hydrateFileRouter({ routes });
 `;
 }
-function ve(t, e = {}) {
-  const n = e.routesDir ?? "src/routes";
-  return `import { createRequestHandler } from "${R}";
+function lr(e, t = {}) {
+  const r = t.routesDir ?? "src/routes";
+  return `import { createRequestHandler } from "${P}";
 
-${gt(n, {
+${_e(r, {
     exportRoutes: !0,
     includeServerOnly: !0,
     eagerModules: !0
@@ -777,21 +1151,21 @@ export function createHandler(options = {}) {
     routeModules,
     ssr: {
       clientEntry,
-      lang: lang ?? ${JSON.stringify(e.document?.lang)},
+      lang: lang ?? ${JSON.stringify(t.document?.lang)},
       styles,
-      title: title ?? ${JSON.stringify(e.document?.title)},
+      title: title ?? ${JSON.stringify(t.document?.title)},
     },
   });
 }
 `;
 }
-function gt(t, {
-  exportRoutes: e,
-  eagerModules: n = !1,
+function _e(e, {
+  exportRoutes: t,
+  eagerModules: r = !1,
   includeServerOnly: o
 }) {
-  const r = xe(t, o), i = Re(t);
-  return n ? `const eagerRouteModules = import.meta.glob(${JSON.stringify(r)}, { eager: true });
+  const n = fr(e, o), i = pr(e);
+  return r ? `const eagerRouteModules = import.meta.glob(${JSON.stringify(n)}, { eager: true });
 const routePrefix = ${JSON.stringify(i)};
 export const routeModules = Object.fromEntries(
   Object.entries(eagerRouteModules).map(([file, module]) => [
@@ -799,260 +1173,271 @@ export const routeModules = Object.fromEntries(
     module,
   ]),
 );
-${e ? "export " : ""}const routes = Object.fromEntries(
+${t ? "export " : ""}const routes = Object.fromEntries(
   Object.entries(routeModules).map(([file, module]) => [
     file,
     async () => module,
   ]),
-);` : `const routeModules = import.meta.glob(${JSON.stringify(r)});
+);` : `const routeModules = import.meta.glob(${JSON.stringify(n)});
 const routePrefix = ${JSON.stringify(i)};
-${e ? "export " : ""}const routes = Object.fromEntries(
+${t ? "export " : ""}const routes = Object.fromEntries(
   Object.entries(routeModules).map(([file, load]) => [
     \`./routes/\${file.slice(routePrefix.length)}\`,
     load,
   ]),
 );`;
 }
-const be = ["@middleware.ts", "@policy.ts"];
-function xe(t, e) {
-  const n = `/${t.replace(/^\/|\/$/g, "")}`, o = [`${n}/**/*.{ts,tsx}`];
-  return e || o.push(
-    ...be.flatMap((r) => [
-      `!${n}/${r}`,
-      `!${n}/**/${r}`
+const dr = ["@middleware.ts", "@policy.ts"];
+function fr(e, t) {
+  const r = `/${e.replace(/^\/|\/$/g, "")}`, o = [`${r}/**/*.{ts,tsx}`];
+  return t || o.push(
+    ...dr.flatMap((n) => [
+      `!${r}/${n}`,
+      `!${r}/**/${n}`
     ])
   ), o;
 }
-function Re(t) {
-  return `/${t.replace(/^\/|\/$/g, "")}/`;
+function pr(e) {
+  return `/${e.replace(/^\/|\/$/g, "")}/`;
 }
-function $e(t, e) {
-  if (e.styles === !1)
+function mr(e, t) {
+  if (t.styles === !1)
     return "";
-  const n = e.styles ?? "src/styles.css", o = h(t, n);
-  return J(o) ? `import ${JSON.stringify(`/${n.replace(/^\/+/, "")}`)};` : "";
+  const r = t.styles ?? "src/styles.css", o = b(e, r);
+  return re(o) ? `import ${JSON.stringify(`/${r.replace(/^\/+/, "")}`)};` : "";
+}
+function yr(e) {
+  return e.devtools !== !1 && process.env.NODE_ENV !== "production";
+}
+function hr(e, t) {
+  const r = e.config.publicDir, o = t.images?.optimizerPath ?? "/_demiurge/image";
+  return r ? ct({
+    policy: t.images,
+    resolveVariant: (n) => lt(n, o),
+    root: r
+  }) : async () => null;
 }
-function Se(t, e) {
+function gr(e, t) {
   return {
     dev: !0,
-    ssr: vt(t),
-    transformDocument: e,
-    renderPage: async (n, o) => {
-      if (n.render.mode === "streaming")
-        return await Ft(n, {
+    ssr: ke(e),
+    transformDocument: t,
+    renderPage: async (r, o) => {
+      if (r.render.mode === "streaming")
+        return await ut(r, {
           ...o,
-          clientEntry: H,
-          transformDocument: e
+          clientEntry: te,
+          transformDocument: t
         });
-      const r = await e(
-        Dt(n, {
+      const n = await t(
+        ze(r, {
           ...o,
-          clientEntry: H
+          clientEntry: te
         })
       );
-      return new Response(r, {
+      return new Response(n, {
         headers: { "content-type": "text/html; charset=utf-8" }
       });
     }
   };
 }
-function nt(t, e) {
-  const n = W(), o = W();
+function Re(e, t) {
+  const r = z(), o = z();
   return {
-    nonce: n,
-    transform: async (r) => {
-      const i = Ee(r, o), s = await t.transformIndexHtml("/", i);
-      return ot(
-        ot(s, o),
-        e,
-        n
+    nonce: r,
+    transform: async (n) => {
+      const i = wr(n, o), s = await e.transformIndexHtml("/", i);
+      return ve(
+        ve(s, o),
+        t,
+        r
       );
     }
   };
 }
-function Ee(t, e) {
-  const n = t.toLowerCase();
-  let o = 0, r = "";
-  for (; o < t.length; ) {
-    const i = t.indexOf("<", o);
+function wr(e, t) {
+  const r = e.toLowerCase();
+  let o = 0, n = "";
+  for (; o < e.length; ) {
+    const i = e.indexOf("<", o);
     if (i === -1)
-      return r + t.slice(o);
-    if (r += t.slice(o, i), n.startsWith("<!--", i)) {
-      const u = n.indexOf("-->", i + 4), l = u === -1 ? t.length : u + 3;
-      r += t.slice(i, l), o = l;
+      return n + e.slice(o);
+    if (n += e.slice(o, i), r.startsWith("<!--", i)) {
+      const u = r.indexOf("-->", i + 4), d = u === -1 ? e.length : u + 3;
+      n += e.slice(i, d), o = d;
       continue;
     }
-    const s = n.slice(i).match(/^<\s*(script|style|link)\b/)?.[1];
+    const s = r.slice(i).match(/^<\s*(script|style|link)\b/)?.[1];
     if (!s) {
-      r += "<", o = i + 1;
+      n += "<", o = i + 1;
       continue;
     }
-    const a = Ne(t, i);
+    const a = Rr(e, i);
     if (a === -1)
-      return r + t.slice(i);
-    const c = t.slice(i, a + 1);
-    if (r += /(?:^|\s)nonce(?:\s|=|>)/i.test(c) ? c : De(c, e), o = a + 1, s === "script" || s === "style") {
-      const u = n.indexOf(`</${s}`, o);
+      return n + e.slice(i);
+    const c = e.slice(i, a + 1);
+    if (n += /(?:^|\s)nonce(?:\s|=|>)/i.test(c) ? c : vr(c, t), o = a + 1, s === "script" || s === "style") {
+      const u = r.indexOf(`</${s}`, o);
       if (u === -1)
-        return r + t.slice(o);
-      r += t.slice(o, u), o = u;
+        return n + e.slice(o);
+      n += e.slice(o, u), o = u;
     }
   }
-  return r;
+  return n;
 }
-function Ne(t, e) {
-  let n;
-  for (let o = e + 1; o < t.length; o++) {
-    const r = t[o];
-    if (n) {
-      r === n && (n = void 0);
+function Rr(e, t) {
+  let r;
+  for (let o = t + 1; o < e.length; o++) {
+    const n = e[o];
+    if (r) {
+      n === r && (r = void 0);
       continue;
     }
-    if (r === '"' || r === "'")
-      n = r;
-    else if (r === ">")
+    if (n === '"' || n === "'")
+      r = n;
+    else if (n === ">")
       return o;
   }
   return -1;
 }
-function De(t, e) {
-  const n = /\/\s*>$/.test(t) ? t.lastIndexOf("/") : t.length - 1;
-  return `${t.slice(0, n)} nonce="${e}"${t.slice(n)}`;
+function vr(e, t) {
+  const r = /\/\s*>$/.test(e) ? e.lastIndexOf("/") : e.length - 1;
+  return `${e.slice(0, r)} nonce="${t}"${e.slice(r)}`;
 }
-function ot(t, e, n) {
+function ve(e, t, r) {
   const o = new RegExp(
-    `(\\snonce\\s*=\\s*)(["'])${ht(e)}\\2`,
+    `(\\snonce\\s*=\\s*)(["'])${je(t)}\\2`,
     "g"
   );
-  return t.replace(
+  return e.replace(
     o,
-    n ? `$1"${n}"` : ""
+    r ? `$1"${r}"` : ""
   );
 }
-function it(t, e) {
-  const n = t.headers.get("content-type"), o = t.headers.get("content-security-policy");
-  if (!n?.toLowerCase().startsWith("text/html") || !o)
+function be(e, t) {
+  const r = e.headers.get("content-type"), o = e.headers.get("content-security-policy");
+  if (!r?.toLowerCase().startsWith("text/html") || !o)
     return;
-  const r = `'nonce-${e}'`, i = st(
+  const n = `'nonce-${t}'`, i = $e(
     o,
     ["script-src-elem", "script-src"],
     "script-src",
-    r
-  ), s = Pe(
+    n
+  ), s = br(
     i,
     ["style-src-elem", "style-src"]
-  ) ? i : st(
+  ) ? i : $e(
     i,
     ["style-src-elem", "style-src"],
     "style-src",
-    r
+    n
   );
-  t.headers.set("content-security-policy", s), t.headers.set("cache-control", "private, no-store");
+  e.headers.set("content-security-policy", s), e.headers.set("cache-control", "private, no-store");
 }
-function st(t, e, n, o) {
-  const r = t.split(";").map((l) => l.trim()), i = wt(r, e), s = r.find(
-    (l) => l.split(/\s+/, 1)[0]?.toLowerCase() === "default-src"
+function $e(e, t, r, o) {
+  const n = e.split(";").map((d) => d.trim()), i = Fe(n, t), s = n.find(
+    (d) => d.split(/\s+/, 1)[0]?.toLowerCase() === "default-src"
   );
-  if (i === -1 && !s) return t;
-  const [a, ...c] = (i === -1 ? s : r[i]).split(/\s+/), u = [
-    i === -1 ? n : a,
+  if (i === -1 && !s) return e;
+  const [a, ...c] = (i === -1 ? s : n[i]).split(/\s+/), u = [
+    i === -1 ? r : a,
     .../* @__PURE__ */ new Set([
-      ...c.filter((l) => l !== "'none'"),
+      ...c.filter((d) => d !== "'none'"),
       o
     ])
   ].join(" ");
-  return i === -1 ? r.push(u) : r[i] = u, r.join("; ");
+  return i === -1 ? n.push(u) : n[i] = u, n.join("; ");
 }
-function Pe(t, e) {
-  const n = t.split(";").map((s) => s.trim()), o = wt(n, e), i = (o === -1 ? n.find(
+function br(e, t) {
+  const r = e.split(";").map((s) => s.trim()), o = Fe(r, t), i = (o === -1 ? r.find(
     (s) => s.split(/\s+/, 1)[0]?.toLowerCase() === "default-src"
-  ) : n[o])?.split(/\s+/).slice(1) ?? [];
+  ) : r[o])?.split(/\s+/).slice(1) ?? [];
   return i.includes("'unsafe-inline'") && !i.some((s) => /^'(?:nonce-|sha(?:256|384|512)-)/i.test(s));
 }
-function wt(t, e) {
-  for (const n of e) {
-    const o = t.findIndex(
-      (r) => r.split(/\s+/, 1)[0]?.toLowerCase() === n
+function Fe(e, t) {
+  for (const r of t) {
+    const o = e.findIndex(
+      (n) => n.split(/\s+/, 1)[0]?.toLowerCase() === r
     );
     if (o !== -1) return o;
   }
   return -1;
 }
-const at = Symbol.for("demiurge.devManifest");
-async function ct(t, e, n) {
-  const o = e, r = o[at];
-  if (r)
-    return r;
-  const i = jt(
-    await Ve(t, n)
+const Se = Symbol.for("demiurge.devManifest");
+async function Z(e, t, r) {
+  const o = t, n = o[Se];
+  if (n)
+    return n;
+  const i = st(
+    await Tr(e, r)
   );
-  return o[at] = i, i;
+  return o[Se] = i, i;
 }
-function vt(t) {
+function ke(e) {
   return {
-    clientEntry: H,
-    lang: t.document?.lang,
-    title: t.document?.title
+    clientEntry: te,
+    lang: e.document?.lang,
+    title: e.document?.title
   };
 }
-function Oe(t, e) {
+function $r(e, t) {
   return {
-    ...vt(t),
+    ...ke(e),
     dev: !0,
-    transformDocument: e
+    transformDocument: t
   };
 }
-const ut = /* @__PURE__ */ new Set();
-function Me(t, e) {
-  ut.has(e) || t.fallbacks.notFound.some(
-    (n) => n.fileSegments.length === 0
-  ) || (ut.add(e), console.warn(Te($t(e, "@not-found.tsx"))));
+const xe = /* @__PURE__ */ new Set();
+function Sr(e, t) {
+  xe.has(t) || e.fallbacks.notFound.some(
+    (r) => r.fileSegments.length === 0
+  ) || (xe.add(t), console.warn(Or(He(t, "@not-found.tsx"))));
 }
-async function Ie(t, e = {}) {
-  const n = e.routesDir ?? "src/routes", o = h(t, n);
-  if (!J(o))
+async function xr(e, t = {}) {
+  const r = t.routesDir ?? "src/routes", o = b(e, r);
+  if (!re(o))
     return;
-  const r = await G(o);
-  if (r.map(
-    (a) => x(o, a).split($).join("/")
+  const n = await ie(o);
+  if (n.map(
+    (a) => N(o, a).split(O).join("/")
   ).some((a) => /^@not-found\.tsx?$/.test(a)))
     return;
-  const s = await Ce(r);
+  const s = await Er(n);
   if (s)
     throw new Error(
-      Fe(
-        n,
-        x(o, s).split($).join("/")
+      Pr(
+        r,
+        N(o, s).split(O).join("/")
       )
     );
 }
-async function Ce(t) {
-  for (const e of t)
-    if (!x(B(e), e).startsWith("@") && je(await pt(e, "utf8")))
-      return e;
+async function Er(e) {
+  for (const t of e)
+    if (!N(ne(t), t).startsWith("@") && Dr(await Pe(t, "utf8")))
+      return t;
 }
-const _e = R.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), lt = new RegExp(
-  `import\\s*\\{([^}]*)\\}\\s*from\\s*["']${_e}["']`,
+const Nr = P.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), Ee = new RegExp(
+  `import\\s*\\{([^}]*)\\}\\s*from\\s*["']${Nr}["']`,
   "g"
 );
-function je(t) {
-  const e = [...t.matchAll(lt)].flatMap(
-    (o) => o[1].split(",").flatMap((r) => {
-      const [i, s] = r.trim().split(/\s+as\s+/);
+function Dr(e) {
+  const t = [...e.matchAll(Ee)].flatMap(
+    (o) => o[1].split(",").flatMap((n) => {
+      const [i, s] = n.trim().split(/\s+as\s+/);
       return i.replace(/^type\s+/, "") === "page" ? [s ?? i] : [];
     })
   );
-  if (e.length === 0)
+  if (t.length === 0)
     return !1;
-  const n = t.replace(lt, "");
-  return e.some((o) => new RegExp(`\\b${o}\\s*\\(`).test(n));
+  const r = e.replace(Ee, "");
+  return t.some((o) => new RegExp(`\\b${o}\\s*\\(`).test(r));
 }
-function Fe(t, e) {
-  return `Demiurge will not build an app with page routes and no ${t}/@not-found.tsx.
+function Pr(e, t) {
+  return `Demiurge will not build an app with page routes and no ${e}/@not-found.tsx.
 
-"${e}" declares a page, so a browser can reach a path this app does not serve. Decide what that looks like rather than shipping the framework built-in.
+"${t}" declares a page, so a browser can reach a path this app does not serve. Decide what that looks like rather than shipping the framework built-in.
 
-Create ${t}/@not-found.tsx:
+Create ${e}/@not-found.tsx:
 
   export default function NotFound({ pathname }: { pathname: string }) {
     return <h1>Nothing at {pathname}</h1>;
@@ -1060,8 +1445,8 @@ Create ${t}/@not-found.tsx:
 
 It renders inside the layouts above the requested path. Opt out with "export const layout = false".`;
 }
-function Te(t) {
-  return `Demiurge is serving its built-in 404 because ${t} does not exist.
+function Or(e) {
+  return `Demiurge is serving its built-in 404 because ${e} does not exist.
 
 Create it before building for production:
 
@@ -1070,105 +1455,109 @@ Create it before building for production:
   }
 `;
 }
-function Ae({
-  entrySrc: t,
-  lang: e,
-  links: n,
+function Mr({
+  entrySrc: e,
+  lang: t,
+  links: r,
   metadata: o,
-  nonce: r,
+  nonce: n,
   scripts: i,
   styles: s,
   title: a
 }) {
-  return Nt({
-    entrySrc: t,
-    lang: e,
-    links: n,
+  return qe({
+    entrySrc: e,
+    lang: t,
+    links: r,
     metadata: o,
-    nonce: r,
+    nonce: n,
     scripts: i,
     styles: s,
     title: a
   });
 }
-async function M(t, e) {
-  const n = h(t, e.routesDir ?? "src/routes"), o = h(
-    t,
-    typeof e.typedRoutes == "object" ? e.typedRoutes.outputFile ?? et : et
+async function L(e, t) {
+  const r = b(e, t.routesDir ?? "src/routes"), o = b(
+    e,
+    typeof t.typedRoutes == "object" ? t.typedRoutes.outputFile ?? ge : ge
   );
-  await Tt({ outputFile: o, routesDir: n });
+  await dt({ outputFile: o, routesDir: r });
 }
-function j(t, e) {
-  return e.startsWith(t) && /\.tsx?$/.test(e);
+function J(e, t) {
+  return t.startsWith(e) && /\.tsx?$/.test(t);
 }
-async function Ve(t, e) {
-  const n = await G(e), o = {};
-  for (const r of n) {
-    const i = Be(e, r);
-    o[i] = async () => await t.ssrLoadModule(r);
+async function Tr(e, t) {
+  const r = await ie(t), o = {};
+  for (const n of r) {
+    const i = Fr(t, n);
+    o[i] = async () => await e.ssrLoadModule(n);
   }
   return o;
 }
-async function Le(t, e, n = {}) {
-  const o = new URL(e.url);
-  return Ct(t.routes, o.pathname) ? await _t(t, e, n) : "next";
+async function Ar(e, t, r = {}) {
+  const o = new URL(t.url);
+  return Oe(e.routes, o.pathname) ? await it(e, t, r) : "next";
 }
-async function G(t) {
-  return (await dt(t, {
+async function ie(e) {
+  return (await De(e, {
     recursive: !0,
     withFileTypes: !0
-  })).filter((n) => n.isFile() && /\.tsx?$/.test(n.name)).map((n) => h(n.parentPath, n.name));
+  })).filter((r) => r.isFile() && /\.tsx?$/.test(r.name)).map((r) => b(r.parentPath, r.name));
 }
-const We = 8, ke = 50;
-async function He(t, e, n) {
-  const o = new Array(t.length);
-  let r = 0;
+const Cr = 8, Ir = 50;
+async function jr(e, t, r) {
+  const o = new Array(e.length);
+  let n = 0;
   const i = Array.from(
-    { length: Math.min(e, t.length) },
+    { length: Math.min(t, e.length) },
     async () => {
-      for (; r < t.length; ) {
-        const s = r++;
-        o[s] = await n(t[s]);
+      for (; n < e.length; ) {
+        const s = n++;
+        o[s] = await r(e[s]);
       }
     }
   );
   return await Promise.all(i), o;
 }
-async function ft(t, e = {}) {
-  const n = h(t, e.routesDir ?? "src/routes");
-  return J(n) ? (await He(
-    await G(n),
-    We,
-    Qt
+async function Ne(e, t = {}) {
+  const r = b(e, t.routesDir ?? "src/routes");
+  return re(r) ? (await jr(
+    await ie(r),
+    Cr,
+    Nt
   )).flat().sort(
-    (r, i) => r.file.localeCompare(i.file) || (r.exportName ?? "").localeCompare(i.exportName ?? "") || r.code.localeCompare(i.code)
+    (n, i) => n.file.localeCompare(i.file) || (n.exportName ?? "").localeCompare(i.exportName ?? "") || n.code.localeCompare(i.code)
   ) : [];
 }
-function Je(t) {
+function _r(e) {
   return [
     "Demiurge found invalid static route policy:",
-    ...t.map(bt)
+    ...e.map(Le)
   ].join(`
 `);
 }
-function bt(t) {
-  return `${t.exportName ? `${t.file} export ${t.exportName}` : t.file}: [${t.code}] ${t.message}`;
+function Le(e) {
+  return `${e.exportName ? `${e.file} export ${e.exportName}` : e.file}: [${e.code}] ${e.message}`;
 }
-function Be(t, e) {
-  return `./routes/${x(t, e).split($).join("/")}`;
+function Fr(e, t) {
+  return `./routes/${N(e, t).split(O).join("/")}`;
 }
 export {
-  rr as demiurge,
-  Ie as unstable_assertRootNotFoundRoute,
-  we as unstable_createClientEntrySource,
-  Ve as unstable_createDevRouteImporters,
-  Ae as unstable_createDocumentHtml,
-  ve as unstable_createServerEntrySource,
-  je as unstable_declaresPageRoute,
-  Je as unstable_formatStaticPolicyFindings,
-  Le as unstable_handleDevRequest,
-  le as unstable_stripClientPageData,
-  ft as unstable_verifyRoutePolicies,
-  Xt as unstable_verifyRoutePolicySource
+  Yr as demiurge,
+  Te as unstable_ROUTE_AUDIT_PATH,
+  xr as unstable_assertRootNotFoundRoute,
+  ur as unstable_createClientEntrySource,
+  Tr as unstable_createDevRouteImporters,
+  Mr as unstable_createDocumentHtml,
+  Vt as unstable_createRouteAudit,
+  lr as unstable_createServerEntrySource,
+  Dr as unstable_declaresPageRoute,
+  _r as unstable_formatStaticPolicyFindings,
+  Ar as unstable_handleDevRequest,
+  yr as unstable_isRouteAuditEnabled,
+  Jt as unstable_renderRouteAuditDocument,
+  tr as unstable_stripClientPageData,
+  Ne as unstable_verifyRoutePolicies,
+  Dt as unstable_verifyRoutePolicySource
 };
 //# sourceMappingURL=index.js.map