@demiurgejs/core 0.2.0-beta.4 → 0.2.0-beta.5

package/dist/index.js

@@ -1,15 +1,14 @@
 import { jsx as Et } from "react/jsx-runtime";
 import { createContext as We, useCallback as At, createElement as R, useContext as Je, useRef as k, useMemo as ae, useActionState as nr, useId as or, useLayoutEffect as ne, useState as U, useEffect as Y, Fragment as Te, Component as ir } from "react";
-import { g as ar, h as at, i as sr, H as cr, j as st, k as ur, l as lr, m as Me } from "./chunks/index-BVk9zWbe.js";
-import { F as oi, n as ii, o as ai, q as si, t as ci, d as ui, u as li, v as di, w as fi, x as hi, y as pi, z as mi, p as yi, a as gi, A as wi, B as vi } from "./chunks/index-BVk9zWbe.js";
-import { E as ct, C as dr, F as Ge, i as ee, G as fr, R as hr, H as Ye, I as Ze, J as Qe, K as pr, L as xt, N as mr, l as Xe, D as kt, O as Be, P as yr, r as gr, p as Rt, Q as wr, S as ut, T as vr, U as br, V as Sr, W as Er, X as Ar, Y as xr, Z as kr, _ as Rr } from "./chunks/testing-DueXbMo4.js";
-import { $ as Si, a0 as Ei, a1 as Ai, a2 as xi, a3 as ki, a4 as Ri, a5 as Ti, a6 as Mi, a7 as Ci, a8 as $i, a9 as Ni, aa as Li, ab as Ii, A as Di, ac as Pi, d as Oi, c as _i, z as Fi, k as Ui, j as Bi, ad as Hi, e as zi, ae as ji, af as Vi, ag as qi, ah as Ki, ai as Wi, aj as Ji, ak as Gi, al as Yi, am as Zi, h as Qi, an as Xi, ao as ea, ap as ta, aq as ra, ar as na, as as oa, g as ia, at as aa, au as sa, m as ca, av as ua, aw as la, ax as da, ay as fa, az as ha, aA as pa, aB as ma, aC as ya, aD as ga, s as wa, aE as va, B as ba, aF as Sa, aG as Ea, aH as Aa, aI as xa, aJ as ka, aK as Ra, aL as Ta, v as Ma, n as Ca, a as $a } from "./chunks/testing-DueXbMo4.js";
+import { g as ar, h as at, i as sr, H as cr, j as st, k as ur, l as lr, m as Me } from "./chunks/index-0MNiR_wo.js";
+import { F as oi, n as ii, o as ai, q as si, t as ci, d as ui, u as li, v as di, w as fi, x as hi, y as pi, z as mi, p as yi, a as gi, A as wi, B as vi } from "./chunks/index-0MNiR_wo.js";
+import { O as ct, J as dr, P as Ge, i as ee, Q as fr, R as hr, s as Ye, S as Ze, T as Xe, U as pr, V as xt, W as mr, l as Qe, L as kt, X as Be, Y as yr, r as gr, z as Rt, Z as wr, _ as ut, $ as vr, a0 as br, a1 as Sr, a2 as Er, a3 as Ar, a4 as xr, a5 as kr, a6 as Rr } from "./chunks/testing-CUwGj2ie.js";
+import { a7 as Si, D as Ei, a8 as Ai, a9 as xi, aa as ki, ab as Ri, ac as Ti, ad as Mi, ae as Ci, af as $i, ag as Ni, ah as Li, ai as Ii, aj as Di, ak as Pi, al as Oi, am as _i, an as Fi, H as Ui, ao as Bi, e as Hi, c as zi, G as ji, n as Vi, k as qi, ap as Ki, aq as Wi, ar as Ji, f as Gi, as as Yi, at as Zi, au as Xi, av as Qi, aw as ea, ax as ta, ay as ra, az as na, aA as oa, aB as ia, aC as aa, q as sa, aD as ca, aE as ua, h as la, aF as da, aG as fa, x as ha, aH as pa, aI as ma, aJ as ya, aK as ga, j as wa, aL as va, aM as ba, aN as Sa, m as Ea, aO as Aa, aP as xa, aQ as ka, aR as Ra, aS as Ta, aT as Ma, aU as Ca, aV as $a, aW as Na, p as La, aX as Ia, u as Da, aY as Pa, aZ as Oa, a_ as _a, w as Fa, a$ as Ua, I as Ba, K as Ha, b0 as za, b1 as ja, b2 as Va, b3 as qa, b4 as Ka, b5 as Wa, b6 as Ja, b7 as Ga, N as Ya, v as Za, b8 as Xa, o as Qa, b as es } from "./chunks/testing-CUwGj2ie.js";
 import { I as Tr } from "./chunks/static-files-ehaD1kE7.js";
-import { D as La, c as Ia, i as Da } from "./chunks/static-files-ehaD1kE7.js";
-import { k as Mr } from "./chunks/images-BQ80950B.js";
-import { d as Oa, l as _a, m as Fa, n as Ua, f as Ba, o as Ha, q as za, a as ja, s as Va, t as qa, b as Ka, h as Wa, j as Ja, r as Ga } from "./chunks/images-BQ80950B.js";
-import { E as Za, d as Qa, a as Xa, e as es, r as ts, s as rs, b as ns, c as os, v as is } from "./chunks/env-startup-DOBYWlZD.js";
-import { c as ss, s as cs } from "./chunks/session-store-ChModVcq.js";
+import { D as rs, c as ns, i as os } from "./chunks/static-files-ehaD1kE7.js";
+import { k as Mr } from "./chunks/images-CG7ZzayG.js";
+import { d as as, l as ss, m as cs, n as us, f as ls, o as ds, q as fs, a as hs, s as ps, t as ms, b as ys, h as gs, j as ws, r as vs } from "./chunks/images-CG7ZzayG.js";
+import { c as Ss, s as Es } from "./chunks/session-store-ChModVcq.js";
 import "react-dom/server";
 function xo(e) {
   return {
@@ -79,9 +78,9 @@ function $r(e) {
   return Dr(t, r), [
     `<svg xmlns="http://www.w3.org/2000/svg" width="${t}" height="${r}" viewBox="0 0 ${t} ${r}" role="img" aria-label="${j(i)}">`,
     `  <rect width="100%" height="100%" fill="${j(n)}" />`,
-    a ? `  <text x="72" y="96" fill="${j(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="32" font-weight="700">${Q(a)}</text>` : null,
-    `  <text x="72" y="${s ? 300 : 340}" fill="${j(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="76" font-weight="800">${Q(i)}</text>`,
-    s ? `  <text x="72" y="392" fill="${j(o)}" fill-opacity="0.78" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="38" font-weight="500">${Q(s)}</text>` : null,
+    a ? `  <text x="72" y="96" fill="${j(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="32" font-weight="700">${X(a)}</text>` : null,
+    `  <text x="72" y="${s ? 300 : 340}" fill="${j(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="76" font-weight="800">${X(i)}</text>`,
+    s ? `  <text x="72" y="392" fill="${j(o)}" fill-opacity="0.78" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="38" font-weight="500">${X(s)}</text>` : null,
     "</svg>"
   ].filter((u) => !!u).join(`
 `);
@@ -97,8 +96,8 @@ function Co(e) {
 function Nr(e) {
   return [
     "  <url>",
-    `    <loc>${Q(e.url)}</loc>`,
-    e.lastModified ? `    <lastmod>${Q(Lr(e.lastModified))}</lastmod>` : null,
+    `    <loc>${X(e.url)}</loc>`,
+    e.lastModified ? `    <lastmod>${X(Lr(e.lastModified))}</lastmod>` : null,
     e.changeFrequency ? `    <changefreq>${e.changeFrequency}</changefreq>` : null,
     e.priority !== void 0 ? `    <priority>${Ir(e.priority)}</priority>` : null,
     ...(e.alternates ?? []).map(
@@ -119,11 +118,11 @@ function Ir(e) {
 function de(e) {
   return e === void 0 ? [] : Array.isArray(e) ? e : [e];
 }
-function Q(e) {
+function X(e) {
   return e.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 }
 function j(e) {
-  return Q(e).replaceAll('"', "&quot;").replaceAll("'", "&apos;");
+  return X(e).replaceAll('"', "&quot;").replaceAll("'", "&apos;");
 }
 function Ce(e, t) {
   return e.length > t ? `${e.slice(0, t - 3)}...` : e;
@@ -232,8 +231,16 @@ const Do = {
           status: 401
         });
       },
+      // ADR 0018: a framework helper that declares an exception names itself
+      // as the source, so the audit separates it from an application
+      // declaration.
       security: {
-        csrf: !1
+        csrf: {
+          origin: "framework",
+          reason: "A webhook sender holds no browser session, so an HMAC signature replaces the CSRF check.",
+          source: "webhook.hmac()",
+          value: !1
+        }
       }
     };
   }
@@ -391,7 +398,7 @@ function Mt(e, t) {
       }, A = (h) => (a = Le(h), u = !1, d = !0, Le(h));
       return {
         async commit() {
-          return u ? [Qr(e.cookie)] : !a || !d ? [] : [Se({
+          return u ? [Xr(e.cookie)] : !a || !d ? [] : [Se({
             ...e.cookie,
             expires: new Date(a.expiresAt),
             value: await t.encode(a)
@@ -460,7 +467,7 @@ function Ct(e) {
     idleExpirationMs: n,
     keys: t,
     now: e.now ?? Date.now,
-    randomBytes: e.randomBytes ?? Xr,
+    randomBytes: e.randomBytes ?? Qr,
     renewal: e.renewal ?? !0
   };
 }
@@ -517,14 +524,14 @@ function Jr(e) {
         "HMAC",
         a,
         I(s),
-        I(X(`s1.${o.id}.${r[2]}`))
+        I(Q(`s1.${o.id}.${r[2]}`))
       ))
         return;
       const d = Nt(i);
       return d ? { currentKey: n === 0, record: d } : void 0;
     },
     async encode(t) {
-      const r = e[0], n = se(X(JSON.stringify(t))), o = `s1.${r.id}.${n}`, i = await crypto.subtle.importKey(
+      const r = e[0], n = se(Q(JSON.stringify(t))), o = `s1.${r.id}.${n}`, i = await crypto.subtle.importKey(
         "raw",
         I(r.value),
         { hash: "SHA-256", name: "HMAC" },
@@ -533,7 +540,7 @@ function Jr(e) {
       ), s = await crypto.subtle.sign(
         "HMAC",
         i,
-        I(X(o))
+        I(Q(o))
       );
       return `${o}.${se(new Uint8Array(s))}`;
     }
@@ -550,7 +557,7 @@ function Gr(e, t) {
         try {
           const u = await ht(i), d = await crypto.subtle.decrypt(
             {
-              additionalData: I(X(`e1.${i.id}`)),
+              additionalData: I(Q(`e1.${i.id}`)),
               iv: I(s),
               name: "AES-GCM"
             },
@@ -570,12 +577,12 @@ function Gr(e, t) {
         );
       const i = await ht(n), s = await crypto.subtle.encrypt(
         {
-          additionalData: I(X(`e1.${n.id}`)),
+          additionalData: I(Q(`e1.${n.id}`)),
           iv: I(o),
           name: "AES-GCM"
         },
         i,
-        I(X(JSON.stringify(r)))
+        I(Q(JSON.stringify(r)))
       );
       return `e1.${n.id}.${se(o)}.${se(new Uint8Array(s))}`;
     }
@@ -610,7 +617,7 @@ function ve(e) {
 function Zr(e, t) {
   return e.expiresAt <= t || e.idleExpiresAt !== void 0 && e.idleExpiresAt <= t;
 }
-function Qr(e) {
+function Xr(e) {
   return Se({
     ...e,
     expires: /* @__PURE__ */ new Date(0),
@@ -626,7 +633,7 @@ function pt(e) {
     );
   return se(t);
 }
-function Xr(e) {
+function Qr(e) {
   return crypto.getRandomValues(new Uint8Array(e));
 }
 function Ne(e) {
@@ -639,7 +646,7 @@ function Ne(e) {
 function Le(e) {
   return structuredClone(e);
 }
-function X(e) {
+function Q(e) {
   return new TextEncoder().encode(e);
 }
 function I(e) {
@@ -1133,7 +1140,7 @@ function An(e) {
       promise: void 0
     };
     ze.add(o);
-    const s = Qe({
+    const s = Xe({
       to: e.route,
       ...e.path === void 0 ? {} : { path: e.path }
     }), a = xn({
@@ -1161,7 +1168,7 @@ function An(e) {
   };
 }
 function jo(e, t) {
-  const r = Qe({
+  const r = Xe({
     to: e.route,
     ...e.path === void 0 ? {} : { path: e.path }
   }), n = ae(
@@ -1261,7 +1268,7 @@ function Mn(e) {
   return function() {
     const [o, i] = U(() => F()), [s, a] = U(e.locale), u = Be(o.pathname, e.locales), d = k(o), [v, A] = U(
       () => e.initialMatch ?? { status: "loading" }
-    ), h = k(!!e.initialMatch), p = k(!0), E = k(0), g = k(void 0), b = k("navigation"), m = k(/* @__PURE__ */ new Map()), T = k(/* @__PURE__ */ new Map()), [H, w] = U(0), [$, C] = U(0), V = k(/* @__PURE__ */ new Set()), [Xt, rt] = U(0), O = k("push"), [ue, Ae] = U(null), [q, xe] = U(null), nt = k(null);
+    ), h = k(!!e.initialMatch), p = k(!0), E = k(0), g = k(void 0), b = k("navigation"), m = k(/* @__PURE__ */ new Map()), T = k(/* @__PURE__ */ new Map()), [H, w] = U(0), [$, C] = U(0), V = k(/* @__PURE__ */ new Set()), [Qt, rt] = U(0), O = k("push"), [ue, Ae] = U(null), [q, xe] = U(null), nt = k(null);
     nt.current = ue;
     const K = k(void 0), ke = k(void 0), P = k(void 0), W = k(!1), ot = k(/* @__PURE__ */ new Map()), J = k([]), er = k(0);
     function G() {
@@ -1573,7 +1580,7 @@ function Mn(e) {
           NotFound: e.notFound,
           match: v,
           pendingCommit: ue,
-          resolvedRouteVersion: Xt,
+          resolvedRouteVersion: Qt,
           onCommitted: (c) => {
             nt.current === c && xe(c);
           },
@@ -1662,7 +1669,7 @@ function Ln(e, t) {
     target: h,
     to: p,
     ...E
-  } = e, g = Qe(e), b = s, m = r.locales && (b ?? r.locale) ? Xe(
+  } = e, g = Xe(e), b = s, m = r.locales && (b ?? r.locale) ? Qe(
     g,
     b ?? r.locale,
     r.locales,
@@ -1704,7 +1711,7 @@ function Ko(e) {
       o
     ));
   }
-  const { submissionKey: A, ...h } = e, p = a ? d ? a : u?.url : h.action, E = typeof p == "string" && t.locales && (e.locale ?? t.locale) ? Xe(p, e.locale ?? t.locale, t.locales, typeof window > "u" ? "http://demiurge.local" : window.location.href) : p;
+  const { submissionKey: A, ...h } = e, p = a ? d ? a : u?.url : h.action, E = typeof p == "string" && t.locales && (e.locale ?? t.locale) ? Qe(p, e.locale ?? t.locale, t.locales, typeof window > "u" ? "http://demiurge.local" : window.location.href) : p;
   return R(
     Bt.Provider,
     {
@@ -1726,7 +1733,7 @@ function Ko(e) {
   );
 }
 function Wo(e) {
-  const t = Ee(), r = Ht(), n = _t(e.formAction), o = r && t.navigation === "server", i = t.locales && (e.locale ?? t.locale) ? Xe(n.url, e.locale ?? t.locale, t.locales, typeof window > "u" ? "http://demiurge.local" : window.location.href) : n.url;
+  const t = Ee(), r = Ht(), n = _t(e.formAction), o = r && t.navigation === "server", i = t.locales && (e.locale ?? t.locale) ? Qe(n.url, e.locale ?? t.locale, t.locales, typeof window > "u" ? "http://demiurge.local" : window.location.href) : n.url;
   return R("button", {
     ...e,
     locale: void 0,
@@ -2270,14 +2277,14 @@ const Yn = [
   "INP",
   "LCP",
   "TTFB"
-], Zn = new Set(Yn), Qn = /* @__PURE__ */ new Set([
+], Zn = new Set(Yn), Xn = /* @__PURE__ */ new Set([
   "back-forward",
   "back-forward-cache",
   "navigate",
   "prerender",
   "reload",
   "restore"
-]), Xn = /* @__PURE__ */ new Set([
+]), Qn = /* @__PURE__ */ new Set([
   "good",
   "needs-improvement",
   "poor"
@@ -2286,10 +2293,10 @@ function eo(e) {
   return typeof e == "string" && Zn.has(e);
 }
 function to(e) {
-  return typeof e == "string" && Qn.has(e);
+  return typeof e == "string" && Xn.has(e);
 }
 function ro(e) {
-  return typeof e == "string" && Xn.has(e);
+  return typeof e == "string" && Qn.has(e);
 }
 const no = {
   CLS: { good: 0.1, poor: 0.25 },
@@ -2304,7 +2311,7 @@ function oo(e, t) {
   return t <= r.good ? "good" : t > r.poor ? "poor" : "needs-improvement";
 }
 const Zt = 32;
-function Qo(e) {
+function Xo(e) {
   const t = so(e.endpoint), r = co(e.metrics), n = uo(e.sampleRate);
   return {
     endpoint: t.url,
@@ -2314,7 +2321,7 @@ function Qo(e) {
     sampleRate: n
   };
 }
-function Xo(...e) {
+function Qo(...e) {
   const t = /* @__PURE__ */ new Set();
   for (const r of e)
     for (const n of r.needs.connect ?? [])
@@ -2429,7 +2436,7 @@ function po(e, t = {}) {
     w.persisted && (u = "back-forward-cache", a.clear(), d = 0, v = 0, A = 0, h = 0, p = void 0, E = void 0, o.has("FCP") && b("FCP", performance.now() - w.timeStamp));
   };
   if (o.has("TTFB")) {
-    const w = Qt();
+    const w = Xt();
     w && w.responseStart > 0 && b("TTFB", w.responseStart);
   }
   return o.has("FCP") && ye(i, { buffered: !0, type: "paint" }, (w) => {
@@ -2496,31 +2503,33 @@ function ye(e, t, r) {
     return;
   }
 }
-function Qt() {
+function Xt() {
   if (!(typeof performance > "u"))
     return performance.getEntriesByType("navigation")[0];
 }
 function yo() {
-  const e = Qt();
+  const e = Xt();
   return e?.type === "back_forward" ? "back-forward" : e?.type === "reload" || e?.type === "prerender" ? e.type : "navigate";
 }
 export {
   Ue as COLLECTED_WEB_VITAL_NAMES,
   Si as CacheNotFoundError,
-  La as DEFAULT_CONTENT_TYPE,
-  Za as EnvValidationError,
+  rs as DEFAULT_CONTENT_TYPE,
+  Ei as DEFAULT_MAX_BODY_SIZE,
+  Ai as EnvValidationError,
   oi as FRAMEWORK_TRUSTED_TYPES_POLICY,
   Ko as Form,
   Ar as HTTP_ERROR_STATUSES,
-  Ei as HttpError,
+  xi as HttpError,
   Go as Image,
   qo as Link,
   mr as MUTATION_REQUEST_HEADER,
   pr as MUTATION_REQUEST_VALUE,
   xt as MUTATION_RESPONSE_MEDIA_TYPE,
   Wo as MutationSubmit,
-  Ai as MutationValidationError,
+  ki as MutationValidationError,
   zo as RouteFocusBoundary,
+  Ri as RouteSerializationError,
   ii as Script,
   rn as SessionStoreConflictError,
   mt as SessionStoreUnavailableError,
@@ -2529,156 +2538,169 @@ export {
   ti as WebVitals,
   Yo as analytics,
   Be as applicationPathname,
-  xi as applyFetchMetadataVary,
-  ki as applyLocalizedMetadata,
+  Ti as applyFetchMetadataVary,
+  Mi as applyLocalizedMetadata,
   ai as assertAdapterCapabilities,
-  Ri as auditScriptDependencies,
-  Ti as cacheNotFound,
+  Ci as attachExceptionSource,
+  $i as auditScriptDependencies,
+  Ni as authorizeRoute,
+  Li as cacheNotFound,
   si as checkAdapterCapabilities,
-  Mi as checkFetchMetadata,
+  Ii as checkFetchMetadata,
   wn as checkWebSocketOrigin,
   po as collectWebVitals,
-  Ia as contentTypeForExtension,
-  Ci as createCache,
-  $i as createCorsHeaders,
-  Ni as createCsrfCookie,
-  Li as createCsrfToken,
+  ns as contentTypeForExtension,
+  Di as createCache,
+  Pi as createCorsHeaders,
+  Oi as createCsrfCookie,
+  _i as createCsrfToken,
   _o as createEncryptedCookieSession,
   Mn as createFileRouter,
   ci as createFrameworkScriptUrl,
-  Ii as createInvalidation,
-  Di as createMemoryCache,
-  Pi as createMemoryCacheStore,
+  Fi as createInvalidation,
+  Ui as createMemoryCache,
+  Bi as createMemoryCacheStore,
   $o as createMemoryIdempotencyStore,
-  Oi as createMemoryRateLimitStore,
-  ss as createMemorySessionStore,
+  Hi as createMemoryRateLimitStore,
+  Ss as createMemorySessionStore,
   An as createMutationAction,
-  _i as createRequestHandler,
+  zi as createRequestHandler,
   Se as createSecureCookie,
-  Fi as createSecurityAudit,
-  Ui as createSecurityHeaders,
+  ji as createSecurityAudit,
+  Vi as createSecurityHeaders,
   Uo as createSecurityReportHandler,
   Fo as createSessionManager,
   Oo as createSignedCookieSession,
-  Bi as cspHash,
-  Hi as cspNonce,
-  Oa as defaultFontPath,
+  qi as cspHash,
+  Ki as cspNonce,
+  as as defaultFontPath,
   ui as defineAdapter,
-  Qa as defineEnvSchema,
-  _a as defineFonts,
-  Fa as defineImages,
+  Wi as defineAuthorization,
+  Ji as defineEnvSchema,
+  ss as defineFonts,
+  cs as defineImages,
   Zo as defineInstrumentation,
   li as defineLinks,
-  zi as defineLocales,
-  ji as defineMetadata,
+  Gi as defineLocales,
+  Yi as defineMetadata,
   Io as defineMiddleware,
   To as defineOgImage,
   Ro as defineRobots,
-  Vi as defineRoutePolicy,
+  Zi as defineRoutePolicy,
   di as defineScripts,
-  qi as defineSecurityPolicy,
+  Xi as defineSecurityPolicy,
   xo as defineSitemap,
-  Ki as defineTags,
-  Qo as defineWebVitals,
-  Xa as deserializeEnvSchema,
-  Wi as enforceAllowedMethods,
-  Ji as enforceCsrfProtection,
-  Gi as enforceFetchMetadataPolicy,
-  Yi as enforceRateLimit,
-  Zi as enforceRequestSecurity,
+  Qi as defineTags,
+  Xo as defineWebVitals,
+  ea as deserializeEnvSchema,
+  ta as enforceAllowedMethods,
+  ra as enforceCsrfProtection,
+  na as enforceFetchMetadataPolicy,
+  oa as enforceRateLimit,
+  ia as enforceRequestSecurity,
   Ho as enforceWebSocketOrigin,
-  es as env,
-  Ua as font,
-  Ba as fontAssetFileName,
-  Ha as fontAssetUrl,
-  za as fontLinks,
-  ja as fontMediaType,
-  Va as fontPreloadLinks,
-  qa as fontSources,
-  Ka as fontStylesheetUrl,
+  aa as env,
+  us as font,
+  ls as fontAssetFileName,
+  ds as fontAssetUrl,
+  fs as fontLinks,
+  hs as fontMediaType,
+  ps as fontPreloadLinks,
+  ms as fontSources,
+  ys as fontStylesheetUrl,
+  sa as getBodySizeException,
+  ca as getCspException,
+  ua as getCsrfException,
   fi as getRequestClientAddress,
   hi as getScriptWorker,
-  Qi as handleRequestWithManifest,
-  Qe as href,
-  Xi as html,
+  la as handleRequestWithManifest,
+  Xe as href,
+  da as html,
   xr as httpError,
   Vo as hydrateFileRouter,
-  Wa as isAllowedImageSource,
-  ea as isCacheNotFoundError,
-  Da as isContentHashedFileName,
+  gs as isAllowedImageSource,
+  fa as isCacheNotFoundError,
+  os as isContentHashedFileName,
   Rr as isHttpError,
-  ta as issueCsrfToken,
-  ra as json,
-  na as jsonl,
-  oa as link,
-  ia as localeDirection,
-  Xe as localizeHref,
-  aa as mergeRoutePolicies,
-  sa as mergeRouteSecurityPolicies,
-  ca as mergeSecurityPolicies,
-  ua as meta,
+  ha as isSecurityException,
+  pa as issueCsrfToken,
+  ma as json,
+  ya as jsonl,
+  ga as link,
+  wa as localeDirection,
+  Qe as localizeHref,
+  va as mergeRouteAccess,
+  ba as mergeRoutePolicies,
+  Sa as mergeRouteSecurityPolicies,
+  Ea as mergeSecurityPolicies,
+  Aa as meta,
   pi as modulePreload,
-  la as mutation,
-  da as mutationInput,
-  fa as notFound,
+  xa as mutation,
+  ka as mutationInput,
+  Ra as notFound,
   Lo as page,
   Ye as parseBodySize,
   ct as parseCacheDuration,
   Ge as parseCookieHeader,
-  Ja as parseImageOptimizerRequest,
-  ha as parseRateLimitWindow,
+  ws as parseImageOptimizerRequest,
+  Ta as parseRateLimitWindow,
   io as parseWebVitalsBeacon,
+  Ma as permitsRequest,
   Mr as planImageTransform,
   mi as preconnect,
   yi as preload,
-  pa as query,
-  ts as readEnv,
+  Ca as query,
+  $a as readEnv,
   Po as readSecureCookie,
   ei as readWebVitalsBeacon,
-  ma as redirect,
-  Ga as renderFontFaceCss,
+  Na as redirect,
+  vs as renderFontFaceCss,
   Co as renderOgImageResponse,
   $r as renderOgImageSvg,
   gi as renderPageResponse,
   Mo as renderRobots,
   ko as renderSitemap,
+  La as resolveCsp,
+  Ia as resolveCsrf,
   wi as resolveLinks,
   gr as resolveLocale,
-  ya as resolveMetadata,
+  Da as resolveMaxBodySize,
+  Pa as resolveMetadata,
+  Oa as resolveRouteAccess,
   vi as resolveScripts,
-  ga as response,
+  _a as response,
   No as runIdempotentMutation,
   Me as script,
   ce as secureCookieName,
-  wa as security,
+  Fa as security,
   mo as sendWebVitalsBeacon,
   dr as serializeCacheKey,
-  va as serializeCacheNamespace,
-  ba as serializeCacheTag,
-  rs as serializeEnvSchema,
-  cs as serializeSessionNamespace,
-  Sa as serverTiming,
-  Ea as sse,
+  Ua as serializeCacheNamespace,
+  Ba as serializeCacheTag,
+  Ha as serializeEnvSchema,
+  Es as serializeSessionNamespace,
+  za as serverTiming,
+  ja as sse,
   st as startDeferredScripts,
-  Aa as stream,
-  xa as structuredData,
-  ka as tag,
-  Ra as text,
-  Ta as toResponse,
-  ns as unstable_resetEnvironment,
-  os as unstable_startEnvironment,
+  Va as stream,
+  qa as structuredData,
+  Ka as tag,
+  Wa as text,
+  Ja as toResponse,
+  Ga as unstable_resetEnvironment,
+  Ya as unstable_startEnvironment,
   Jo as useFormNavigation,
   jo as useMutationAction,
   In as useNavigation,
   Sn as useRouteFocusBoundary,
-  Ma as validateCorsPolicy,
-  is as validateEnv,
-  Ca as validateRateLimitPolicy,
-  $a as validateRouteModules,
+  Za as validateCorsPolicy,
+  Xa as validateEnv,
+  Qa as validateRateLimitPolicy,
+  es as validateRouteModules,
   Vr as validateSecureCookie,
   Bo as validateUploads,
   oo as webVitalRating,
-  Xo as webVitalsPolicy,
+  Qo as webVitalsPolicy,
   Do as webhook
 };
 //# sourceMappingURL=index.js.map