@demiurgejs/core 0.2.0-beta.4 → 0.2.0-beta.6

package/dist/index.js

@@ -1,15 +1,15 @@
 import { jsx as Et } from "react/jsx-runtime";
 import { createContext as We, useCallback as At, createElement as R, useContext as Je, useRef as k, useMemo as ae, useActionState as nr, useId as or, useLayoutEffect as ne, useState as U, useEffect as Y, Fragment as Te, Component as ir } from "react";
-import { g as ar, h as at, i as sr, H as cr, j as st, k as ur, l as lr, m as Me } from "./chunks/index-BVk9zWbe.js";
-import { F as oi, n as ii, o as ai, q as si, t as ci, d as ui, u as li, v as di, w as fi, x as hi, y as pi, z as mi, p as yi, a as gi, A as wi, B as vi } from "./chunks/index-BVk9zWbe.js";
-import { E as ct, C as dr, F as Ge, i as ee, G as fr, R as hr, H as Ye, I as Ze, J as Qe, K as pr, L as xt, N as mr, l as Xe, D as kt, O as Be, P as yr, r as gr, p as Rt, Q as wr, S as ut, T as vr, U as br, V as Sr, W as Er, X as Ar, Y as xr, Z as kr, _ as Rr } from "./chunks/testing-DueXbMo4.js";
-import { $ as Si, a0 as Ei, a1 as Ai, a2 as xi, a3 as ki, a4 as Ri, a5 as Ti, a6 as Mi, a7 as Ci, a8 as $i, a9 as Ni, aa as Li, ab as Ii, A as Di, ac as Pi, d as Oi, c as _i, z as Fi, k as Ui, j as Bi, ad as Hi, e as zi, ae as ji, af as Vi, ag as qi, ah as Ki, ai as Wi, aj as Ji, ak as Gi, al as Yi, am as Zi, h as Qi, an as Xi, ao as ea, ap as ta, aq as ra, ar as na, as as oa, g as ia, at as aa, au as sa, m as ca, av as ua, aw as la, ax as da, ay as fa, az as ha, aA as pa, aB as ma, aC as ya, aD as ga, s as wa, aE as va, B as ba, aF as Sa, aG as Ea, aH as Aa, aI as xa, aJ as ka, aK as Ra, aL as Ta, v as Ma, n as Ca, a as $a } from "./chunks/testing-DueXbMo4.js";
+import { g as ar, h as at, i as sr, H as cr, j as st, k as ur, l as lr, m as Me } from "./chunks/index-LYve1rQp.js";
+import { F as oi, n as ii, o as ai, p as si, q as ci, d as ui, t as li, u as di, v as fi, a as hi, w as pi } from "./chunks/index-LYve1rQp.js";
+import { O as ct, J as dr, P as Ge, i as ee, Q as fr, R as hr, s as Ye, S as Ze, T as Xe, U as pr, V as xt, W as mr, l as Qe, L as kt, X as Be, Y as yr, r as gr, z as Rt, Z as wr, _ as ut, $ as vr, a0 as br, a1 as Sr, a2 as Er, a3 as Ar, a4 as xr, a5 as kr, a6 as Rr } from "./chunks/testing-BEW1nchS.js";
+import { a7 as yi, D as gi, a8 as wi, a9 as vi, aa as bi, ab as Si, ac as Ei, ad as Ai, ae as xi, af as ki, ag as Ri, ah as Ti, ai as Mi, aj as Ci, ak as $i, al as Ni, am as Li, an as Ii, H as Di, ao as Pi, e as Oi, c as _i, G as Fi, n as Ui, k as Bi, ap as Hi, aq as zi, ar as ji, f as Vi, as as qi, at as Ki, au as Wi, av as Ji, aw as Gi, ax as Yi, ay as Zi, az as Xi, aA as Qi, aB as ea, aC as ta, q as ra, aD as na, aE as oa, h as ia, aF as aa, aG as sa, x as ca, aH as ua, aI as la, aJ as da, aK as fa, j as ha, aL as pa, aM as ma, aN as ya, m as ga, aO as wa, aP as va, aQ as ba, aR as Sa, aS as Ea, aT as Aa, aU as xa, aV as ka, aW as Ra, p as Ta, aX as Ma, u as Ca, aY as $a, aZ as Na, a_ as La, w as Ia, a$ as Da, I as Pa, K as Oa, b0 as _a, b1 as Fa, b2 as Ua, b3 as Ba, b4 as Ha, b5 as za, b6 as ja, b7 as Va, N as qa, v as Ka, b8 as Wa, o as Ja, b as Ga } from "./chunks/testing-BEW1nchS.js";
 import { I as Tr } from "./chunks/static-files-ehaD1kE7.js";
-import { D as La, c as Ia, i as Da } from "./chunks/static-files-ehaD1kE7.js";
-import { k as Mr } from "./chunks/images-BQ80950B.js";
-import { d as Oa, l as _a, m as Fa, n as Ua, f as Ba, o as Ha, q as za, a as ja, s as Va, t as qa, b as Ka, h as Wa, j as Ja, r as Ga } from "./chunks/images-BQ80950B.js";
-import { E as Za, d as Qa, a as Xa, e as es, r as ts, s as rs, b as ns, c as os, v as is } from "./chunks/env-startup-DOBYWlZD.js";
-import { c as ss, s as cs } from "./chunks/session-store-ChModVcq.js";
+import { D as Za, c as Xa, i as Qa } from "./chunks/static-files-ehaD1kE7.js";
+import { d as ts, m as rs, a as ns, p as os, r as is } from "./chunks/links-iU22QkCE.js";
+import { k as Mr } from "./chunks/images-QgdmLyQ3.js";
+import { d as ss, l as cs, m as us, n as ls, f as ds, o as fs, q as hs, b as ps, s as ms, t as ys, c as gs, i as ws, p as vs, r as bs } from "./chunks/images-QgdmLyQ3.js";
+import { c as Es, s as As } from "./chunks/session-store-ChModVcq.js";
 import "react-dom/server";
 function xo(e) {
   return {
@@ -79,9 +79,9 @@ function $r(e) {
   return Dr(t, r), [
     `<svg xmlns="http://www.w3.org/2000/svg" width="${t}" height="${r}" viewBox="0 0 ${t} ${r}" role="img" aria-label="${j(i)}">`,
     `  <rect width="100%" height="100%" fill="${j(n)}" />`,
-    a ? `  <text x="72" y="96" fill="${j(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="32" font-weight="700">${Q(a)}</text>` : null,
-    `  <text x="72" y="${s ? 300 : 340}" fill="${j(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="76" font-weight="800">${Q(i)}</text>`,
-    s ? `  <text x="72" y="392" fill="${j(o)}" fill-opacity="0.78" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="38" font-weight="500">${Q(s)}</text>` : null,
+    a ? `  <text x="72" y="96" fill="${j(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="32" font-weight="700">${X(a)}</text>` : null,
+    `  <text x="72" y="${s ? 300 : 340}" fill="${j(o)}" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="76" font-weight="800">${X(i)}</text>`,
+    s ? `  <text x="72" y="392" fill="${j(o)}" fill-opacity="0.78" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="38" font-weight="500">${X(s)}</text>` : null,
     "</svg>"
   ].filter((u) => !!u).join(`
 `);
@@ -97,8 +97,8 @@ function Co(e) {
 function Nr(e) {
   return [
     "  <url>",
-    `    <loc>${Q(e.url)}</loc>`,
-    e.lastModified ? `    <lastmod>${Q(Lr(e.lastModified))}</lastmod>` : null,
+    `    <loc>${X(e.url)}</loc>`,
+    e.lastModified ? `    <lastmod>${X(Lr(e.lastModified))}</lastmod>` : null,
     e.changeFrequency ? `    <changefreq>${e.changeFrequency}</changefreq>` : null,
     e.priority !== void 0 ? `    <priority>${Ir(e.priority)}</priority>` : null,
     ...(e.alternates ?? []).map(
@@ -119,11 +119,11 @@ function Ir(e) {
 function de(e) {
   return e === void 0 ? [] : Array.isArray(e) ? e : [e];
 }
-function Q(e) {
+function X(e) {
   return e.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 }
 function j(e) {
-  return Q(e).replaceAll('"', "&quot;").replaceAll("'", "&apos;");
+  return X(e).replaceAll('"', "&quot;").replaceAll("'", "&apos;");
 }
 function Ce(e, t) {
   return e.length > t ? `${e.slice(0, t - 3)}...` : e;
@@ -232,8 +232,16 @@ const Do = {
           status: 401
         });
       },
+      // ADR 0018: a framework helper that declares an exception names itself
+      // as the source, so the audit separates it from an application
+      // declaration.
       security: {
-        csrf: !1
+        csrf: {
+          origin: "framework",
+          reason: "A webhook sender holds no browser session, so an HMAC signature replaces the CSRF check.",
+          source: "webhook.hmac()",
+          value: !1
+        }
       }
     };
   }
@@ -391,7 +399,7 @@ function Mt(e, t) {
       }, A = (h) => (a = Le(h), u = !1, d = !0, Le(h));
       return {
         async commit() {
-          return u ? [Qr(e.cookie)] : !a || !d ? [] : [Se({
+          return u ? [Xr(e.cookie)] : !a || !d ? [] : [Se({
             ...e.cookie,
             expires: new Date(a.expiresAt),
             value: await t.encode(a)
@@ -460,7 +468,7 @@ function Ct(e) {
     idleExpirationMs: n,
     keys: t,
     now: e.now ?? Date.now,
-    randomBytes: e.randomBytes ?? Xr,
+    randomBytes: e.randomBytes ?? Qr,
     renewal: e.renewal ?? !0
   };
 }
@@ -517,14 +525,14 @@ function Jr(e) {
         "HMAC",
         a,
         I(s),
-        I(X(`s1.${o.id}.${r[2]}`))
+        I(Q(`s1.${o.id}.${r[2]}`))
       ))
         return;
       const d = Nt(i);
       return d ? { currentKey: n === 0, record: d } : void 0;
     },
     async encode(t) {
-      const r = e[0], n = se(X(JSON.stringify(t))), o = `s1.${r.id}.${n}`, i = await crypto.subtle.importKey(
+      const r = e[0], n = se(Q(JSON.stringify(t))), o = `s1.${r.id}.${n}`, i = await crypto.subtle.importKey(
         "raw",
         I(r.value),
         { hash: "SHA-256", name: "HMAC" },
@@ -533,7 +541,7 @@ function Jr(e) {
       ), s = await crypto.subtle.sign(
         "HMAC",
         i,
-        I(X(o))
+        I(Q(o))
       );
       return `${o}.${se(new Uint8Array(s))}`;
     }
@@ -550,7 +558,7 @@ function Gr(e, t) {
         try {
           const u = await ht(i), d = await crypto.subtle.decrypt(
             {
-              additionalData: I(X(`e1.${i.id}`)),
+              additionalData: I(Q(`e1.${i.id}`)),
               iv: I(s),
               name: "AES-GCM"
             },
@@ -570,12 +578,12 @@ function Gr(e, t) {
         );
       const i = await ht(n), s = await crypto.subtle.encrypt(
         {
-          additionalData: I(X(`e1.${n.id}`)),
+          additionalData: I(Q(`e1.${n.id}`)),
           iv: I(o),
           name: "AES-GCM"
         },
         i,
-        I(X(JSON.stringify(r)))
+        I(Q(JSON.stringify(r)))
       );
       return `e1.${n.id}.${se(o)}.${se(new Uint8Array(s))}`;
     }
@@ -610,7 +618,7 @@ function ve(e) {
 function Zr(e, t) {
   return e.expiresAt <= t || e.idleExpiresAt !== void 0 && e.idleExpiresAt <= t;
 }
-function Qr(e) {
+function Xr(e) {
   return Se({
     ...e,
     expires: /* @__PURE__ */ new Date(0),
@@ -626,7 +634,7 @@ function pt(e) {
     );
   return se(t);
 }
-function Xr(e) {
+function Qr(e) {
   return crypto.getRandomValues(new Uint8Array(e));
 }
 function Ne(e) {
@@ -639,7 +647,7 @@ function Ne(e) {
 function Le(e) {
   return structuredClone(e);
 }
-function X(e) {
+function Q(e) {
   return new TextEncoder().encode(e);
 }
 function I(e) {
@@ -1133,7 +1141,7 @@ function An(e) {
       promise: void 0
     };
     ze.add(o);
-    const s = Qe({
+    const s = Xe({
       to: e.route,
       ...e.path === void 0 ? {} : { path: e.path }
     }), a = xn({
@@ -1161,7 +1169,7 @@ function An(e) {
   };
 }
 function jo(e, t) {
-  const r = Qe({
+  const r = Xe({
     to: e.route,
     ...e.path === void 0 ? {} : { path: e.path }
   }), n = ae(
@@ -1261,7 +1269,7 @@ function Mn(e) {
   return function() {
     const [o, i] = U(() => F()), [s, a] = U(e.locale), u = Be(o.pathname, e.locales), d = k(o), [v, A] = U(
       () => e.initialMatch ?? { status: "loading" }
-    ), h = k(!!e.initialMatch), p = k(!0), E = k(0), g = k(void 0), b = k("navigation"), m = k(/* @__PURE__ */ new Map()), T = k(/* @__PURE__ */ new Map()), [H, w] = U(0), [$, C] = U(0), V = k(/* @__PURE__ */ new Set()), [Xt, rt] = U(0), O = k("push"), [ue, Ae] = U(null), [q, xe] = U(null), nt = k(null);
+    ), h = k(!!e.initialMatch), p = k(!0), E = k(0), g = k(void 0), b = k("navigation"), m = k(/* @__PURE__ */ new Map()), T = k(/* @__PURE__ */ new Map()), [H, w] = U(0), [$, C] = U(0), V = k(/* @__PURE__ */ new Set()), [Qt, rt] = U(0), O = k("push"), [ue, Ae] = U(null), [q, xe] = U(null), nt = k(null);
     nt.current = ue;
     const K = k(void 0), ke = k(void 0), P = k(void 0), W = k(!1), ot = k(/* @__PURE__ */ new Map()), J = k([]), er = k(0);
     function G() {
@@ -1573,7 +1581,7 @@ function Mn(e) {
           NotFound: e.notFound,
           match: v,
           pendingCommit: ue,
-          resolvedRouteVersion: Xt,
+          resolvedRouteVersion: Qt,
           onCommitted: (c) => {
             nt.current === c && xe(c);
           },
@@ -1662,7 +1670,7 @@ function Ln(e, t) {
     target: h,
     to: p,
     ...E
-  } = e, g = Qe(e), b = s, m = r.locales && (b ?? r.locale) ? Xe(
+  } = e, g = Xe(e), b = s, m = r.locales && (b ?? r.locale) ? Qe(
     g,
     b ?? r.locale,
     r.locales,
@@ -1704,7 +1712,7 @@ function Ko(e) {
       o
     ));
   }
-  const { submissionKey: A, ...h } = e, p = a ? d ? a : u?.url : h.action, E = typeof p == "string" && t.locales && (e.locale ?? t.locale) ? Xe(p, e.locale ?? t.locale, t.locales, typeof window > "u" ? "http://demiurge.local" : window.location.href) : p;
+  const { submissionKey: A, ...h } = e, p = a ? d ? a : u?.url : h.action, E = typeof p == "string" && t.locales && (e.locale ?? t.locale) ? Qe(p, e.locale ?? t.locale, t.locales, typeof window > "u" ? "http://demiurge.local" : window.location.href) : p;
   return R(
     Bt.Provider,
     {
@@ -1726,7 +1734,7 @@ function Ko(e) {
   );
 }
 function Wo(e) {
-  const t = Ee(), r = Ht(), n = _t(e.formAction), o = r && t.navigation === "server", i = t.locales && (e.locale ?? t.locale) ? Xe(n.url, e.locale ?? t.locale, t.locales, typeof window > "u" ? "http://demiurge.local" : window.location.href) : n.url;
+  const t = Ee(), r = Ht(), n = _t(e.formAction), o = r && t.navigation === "server", i = t.locales && (e.locale ?? t.locale) ? Qe(n.url, e.locale ?? t.locale, t.locales, typeof window > "u" ? "http://demiurge.local" : window.location.href) : n.url;
   return R("button", {
     ...e,
     locale: void 0,
@@ -2270,14 +2278,14 @@ const Yn = [
   "INP",
   "LCP",
   "TTFB"
-], Zn = new Set(Yn), Qn = /* @__PURE__ */ new Set([
+], Zn = new Set(Yn), Xn = /* @__PURE__ */ new Set([
   "back-forward",
   "back-forward-cache",
   "navigate",
   "prerender",
   "reload",
   "restore"
-]), Xn = /* @__PURE__ */ new Set([
+]), Qn = /* @__PURE__ */ new Set([
   "good",
   "needs-improvement",
   "poor"
@@ -2286,10 +2294,10 @@ function eo(e) {
   return typeof e == "string" && Zn.has(e);
 }
 function to(e) {
-  return typeof e == "string" && Qn.has(e);
+  return typeof e == "string" && Xn.has(e);
 }
 function ro(e) {
-  return typeof e == "string" && Xn.has(e);
+  return typeof e == "string" && Qn.has(e);
 }
 const no = {
   CLS: { good: 0.1, poor: 0.25 },
@@ -2304,7 +2312,7 @@ function oo(e, t) {
   return t <= r.good ? "good" : t > r.poor ? "poor" : "needs-improvement";
 }
 const Zt = 32;
-function Qo(e) {
+function Xo(e) {
   const t = so(e.endpoint), r = co(e.metrics), n = uo(e.sampleRate);
   return {
     endpoint: t.url,
@@ -2314,7 +2322,7 @@ function Qo(e) {
     sampleRate: n
   };
 }
-function Xo(...e) {
+function Qo(...e) {
   const t = /* @__PURE__ */ new Set();
   for (const r of e)
     for (const n of r.needs.connect ?? [])
@@ -2429,7 +2437,7 @@ function po(e, t = {}) {
     w.persisted && (u = "back-forward-cache", a.clear(), d = 0, v = 0, A = 0, h = 0, p = void 0, E = void 0, o.has("FCP") && b("FCP", performance.now() - w.timeStamp));
   };
   if (o.has("TTFB")) {
-    const w = Qt();
+    const w = Xt();
     w && w.responseStart > 0 && b("TTFB", w.responseStart);
   }
   return o.has("FCP") && ye(i, { buffered: !0, type: "paint" }, (w) => {
@@ -2496,31 +2504,33 @@ function ye(e, t, r) {
     return;
   }
 }
-function Qt() {
+function Xt() {
   if (!(typeof performance > "u"))
     return performance.getEntriesByType("navigation")[0];
 }
 function yo() {
-  const e = Qt();
+  const e = Xt();
   return e?.type === "back_forward" ? "back-forward" : e?.type === "reload" || e?.type === "prerender" ? e.type : "navigate";
 }
 export {
   Ue as COLLECTED_WEB_VITAL_NAMES,
-  Si as CacheNotFoundError,
-  La as DEFAULT_CONTENT_TYPE,
-  Za as EnvValidationError,
+  yi as CacheNotFoundError,
+  Za as DEFAULT_CONTENT_TYPE,
+  gi as DEFAULT_MAX_BODY_SIZE,
+  wi as EnvValidationError,
   oi as FRAMEWORK_TRUSTED_TYPES_POLICY,
   Ko as Form,
   Ar as HTTP_ERROR_STATUSES,
-  Ei as HttpError,
+  vi as HttpError,
   Go as Image,
   qo as Link,
   mr as MUTATION_REQUEST_HEADER,
   pr as MUTATION_REQUEST_VALUE,
   xt as MUTATION_RESPONSE_MEDIA_TYPE,
   Wo as MutationSubmit,
-  Ai as MutationValidationError,
+  bi as MutationValidationError,
   zo as RouteFocusBoundary,
+  Si as RouteSerializationError,
   ii as Script,
   rn as SessionStoreConflictError,
   mt as SessionStoreUnavailableError,
@@ -2529,16 +2539,18 @@ export {
   ti as WebVitals,
   Yo as analytics,
   Be as applicationPathname,
-  xi as applyFetchMetadataVary,
-  ki as applyLocalizedMetadata,
+  Ei as applyFetchMetadataVary,
+  Ai as applyLocalizedMetadata,
   ai as assertAdapterCapabilities,
-  Ri as auditScriptDependencies,
+  xi as attachExceptionSource,
+  ki as auditScriptDependencies,
+  Ri as authorizeRoute,
   Ti as cacheNotFound,
   si as checkAdapterCapabilities,
   Mi as checkFetchMetadata,
   wn as checkWebSocketOrigin,
   po as collectWebVitals,
-  Ia as contentTypeForExtension,
+  Xa as contentTypeForExtension,
   Ci as createCache,
   $i as createCorsHeaders,
   Ni as createCsrfCookie,
@@ -2551,7 +2563,7 @@ export {
   Pi as createMemoryCacheStore,
   $o as createMemoryIdempotencyStore,
   Oi as createMemoryRateLimitStore,
-  ss as createMemorySessionStore,
+  Es as createMemorySessionStore,
   An as createMutationAction,
   _i as createRequestHandler,
   Se as createSecureCookie,
@@ -2562,123 +2574,134 @@ export {
   Oo as createSignedCookieSession,
   Bi as cspHash,
   Hi as cspNonce,
-  Oa as defaultFontPath,
+  ss as defaultFontPath,
   ui as defineAdapter,
-  Qa as defineEnvSchema,
-  _a as defineFonts,
-  Fa as defineImages,
+  zi as defineAuthorization,
+  ji as defineEnvSchema,
+  cs as defineFonts,
+  us as defineImages,
   Zo as defineInstrumentation,
-  li as defineLinks,
-  zi as defineLocales,
-  ji as defineMetadata,
+  ts as defineLinks,
+  Vi as defineLocales,
+  qi as defineMetadata,
   Io as defineMiddleware,
   To as defineOgImage,
   Ro as defineRobots,
-  Vi as defineRoutePolicy,
-  di as defineScripts,
-  qi as defineSecurityPolicy,
+  Ki as defineRoutePolicy,
+  li as defineScripts,
+  Wi as defineSecurityPolicy,
   xo as defineSitemap,
-  Ki as defineTags,
-  Qo as defineWebVitals,
-  Xa as deserializeEnvSchema,
-  Wi as enforceAllowedMethods,
-  Ji as enforceCsrfProtection,
-  Gi as enforceFetchMetadataPolicy,
-  Yi as enforceRateLimit,
-  Zi as enforceRequestSecurity,
+  Ji as defineTags,
+  Xo as defineWebVitals,
+  Gi as deserializeEnvSchema,
+  Yi as enforceAllowedMethods,
+  Zi as enforceCsrfProtection,
+  Xi as enforceFetchMetadataPolicy,
+  Qi as enforceRateLimit,
+  ea as enforceRequestSecurity,
   Ho as enforceWebSocketOrigin,
-  es as env,
-  Ua as font,
-  Ba as fontAssetFileName,
-  Ha as fontAssetUrl,
-  za as fontLinks,
-  ja as fontMediaType,
-  Va as fontPreloadLinks,
-  qa as fontSources,
-  Ka as fontStylesheetUrl,
-  fi as getRequestClientAddress,
-  hi as getScriptWorker,
-  Qi as handleRequestWithManifest,
-  Qe as href,
-  Xi as html,
+  ta as env,
+  ls as font,
+  ds as fontAssetFileName,
+  fs as fontAssetUrl,
+  hs as fontLinks,
+  ps as fontMediaType,
+  ms as fontPreloadLinks,
+  ys as fontSources,
+  gs as fontStylesheetUrl,
+  ra as getBodySizeException,
+  na as getCspException,
+  oa as getCsrfException,
+  di as getRequestClientAddress,
+  fi as getScriptWorker,
+  ia as handleRequestWithManifest,
+  Xe as href,
+  aa as html,
   xr as httpError,
   Vo as hydrateFileRouter,
-  Wa as isAllowedImageSource,
-  ea as isCacheNotFoundError,
-  Da as isContentHashedFileName,
+  ws as isAllowedImageSource,
+  sa as isCacheNotFoundError,
+  Qa as isContentHashedFileName,
   Rr as isHttpError,
-  ta as issueCsrfToken,
-  ra as json,
-  na as jsonl,
-  oa as link,
-  ia as localeDirection,
-  Xe as localizeHref,
-  aa as mergeRoutePolicies,
-  sa as mergeRouteSecurityPolicies,
-  ca as mergeSecurityPolicies,
-  ua as meta,
-  pi as modulePreload,
-  la as mutation,
-  da as mutationInput,
-  fa as notFound,
+  ca as isSecurityException,
+  ua as issueCsrfToken,
+  la as json,
+  da as jsonl,
+  fa as link,
+  ha as localeDirection,
+  Qe as localizeHref,
+  pa as mergeRouteAccess,
+  ma as mergeRoutePolicies,
+  ya as mergeRouteSecurityPolicies,
+  ga as mergeSecurityPolicies,
+  wa as meta,
+  rs as modulePreload,
+  va as mutation,
+  ba as mutationInput,
+  Sa as notFound,
   Lo as page,
   Ye as parseBodySize,
   ct as parseCacheDuration,
   Ge as parseCookieHeader,
-  Ja as parseImageOptimizerRequest,
-  ha as parseRateLimitWindow,
+  vs as parseImageOptimizerRequest,
+  Ea as parseRateLimitWindow,
   io as parseWebVitalsBeacon,
+  Aa as permitsRequest,
   Mr as planImageTransform,
-  mi as preconnect,
-  yi as preload,
-  pa as query,
-  ts as readEnv,
+  ns as preconnect,
+  os as preload,
+  xa as query,
+  ka as readEnv,
   Po as readSecureCookie,
   ei as readWebVitalsBeacon,
-  ma as redirect,
-  Ga as renderFontFaceCss,
+  Ra as redirect,
+  bs as renderFontFaceCss,
   Co as renderOgImageResponse,
   $r as renderOgImageSvg,
-  gi as renderPageResponse,
+  hi as renderPageResponse,
   Mo as renderRobots,
   ko as renderSitemap,
-  wi as resolveLinks,
+  Ta as resolveCsp,
+  Ma as resolveCsrf,
+  is as resolveLinks,
   gr as resolveLocale,
-  ya as resolveMetadata,
-  vi as resolveScripts,
-  ga as response,
+  Ca as resolveMaxBodySize,
+  $a as resolveMetadata,
+  Na as resolveRouteAccess,
+  pi as resolveScripts,
+  La as response,
   No as runIdempotentMutation,
   Me as script,
   ce as secureCookieName,
-  wa as security,
+  Ia as security,
   mo as sendWebVitalsBeacon,
   dr as serializeCacheKey,
-  va as serializeCacheNamespace,
-  ba as serializeCacheTag,
-  rs as serializeEnvSchema,
-  cs as serializeSessionNamespace,
-  Sa as serverTiming,
-  Ea as sse,
+  Da as serializeCacheNamespace,
+  Pa as serializeCacheTag,
+  Oa as serializeEnvSchema,
+  As as serializeSessionNamespace,
+  _a as serverTiming,
+  Fa as sse,
   st as startDeferredScripts,
-  Aa as stream,
-  xa as structuredData,
-  ka as tag,
-  Ra as text,
-  Ta as toResponse,
-  ns as unstable_resetEnvironment,
-  os as unstable_startEnvironment,
+  Ua as stream,
+  Ba as structuredData,
+  Ha as tag,
+  za as text,
+  ja as toResponse,
+  Va as unstable_resetEnvironment,
+  qa as unstable_startEnvironment,
   Jo as useFormNavigation,
   jo as useMutationAction,
   In as useNavigation,
   Sn as useRouteFocusBoundary,
-  Ma as validateCorsPolicy,
-  is as validateEnv,
-  Ca as validateRateLimitPolicy,
-  $a as validateRouteModules,
+  Ka as validateCorsPolicy,
+  Wa as validateEnv,
+  Ja as validateRateLimitPolicy,
+  Ga as validateRouteModules,
   Vr as validateSecureCookie,
   Bo as validateUploads,
   oo as webVitalRating,
-  Xo as webVitalsPolicy,
+  Qo as webVitalsPolicy,
   Do as webhook
 };
 //# sourceMappingURL=index.js.map