@elurjs/kit 2.4.4

package/dist/lib/node-http-DRAUhO0c.js

@@ -0,0 +1,617 @@
+import { a as e, o as t, s as n } from "./errors-ePYxDlhU.js";
+import { renderToString as r } from "@elurjs/core/server";
+import { existsSync as i } from "node:fs";
+import { createHmac as a, randomBytes as o, timingSafeEqual as s } from "node:crypto";
+//#region src/render/ssr-flag.ts
+var c = Symbol.for("@elurjs/core/reactivity-state");
+function l() {
+	return globalThis[c];
+}
+function u(e) {
+	let t = l();
+	t && (t.ssr = e);
+}
+function d() {
+	return l()?.ssr ?? !1;
+}
+//#endregion
+//#region src/render/render-to-string.ts
+async function f(e, t = {}) {
+	u(!0);
+	try {
+		return await r(e(), { markers: t.markers ?? "hydration" });
+	} finally {
+		u(!1);
+	}
+}
+//#endregion
+//#region src/build/document-shell.ts
+var p = {
+	"&": "&",
+	"<": "&lt;",
+	">": "&gt;",
+	"\"": "&quot;",
+	"'": "&#39;"
+};
+function m(e) {
+	return e.replace(/[&<>"']/g, (e) => p[e]);
+}
+function h(e) {
+	return JSON.stringify(e ?? null).replace(/</g, "\\u003c");
+}
+function g(e, t) {
+	let n = [], r = e.title ?? t;
+	e.title && n.push(`<title data-elur-head>${m(r)}</title>`), e.description && n.push(`<meta data-elur-head name="description" content="${m(e.description)}" />`), e.canonical && n.push(`<link data-elur-head rel="canonical" href="${m(e.canonical)}" />`), e.robots && n.push(`<meta data-elur-head name="robots" content="${m(e.robots)}" />`);
+	let i = e.openGraph;
+	i && (i.type && n.push(`<meta data-elur-head property="og:type" content="${m(i.type)}" />`), n.push(`<meta data-elur-head property="og:title" content="${m(i.title ?? r)}" />`), (i.description ?? e.description) && n.push(`<meta data-elur-head property="og:description" content="${m(i.description ?? e.description)}" />`), (i.url ?? e.canonical) && n.push(`<meta data-elur-head property="og:url" content="${m(i.url ?? e.canonical)}" />`), i.image && n.push(`<meta data-elur-head property="og:image" content="${m(i.image)}" />`), i.image && i.imageAlt && n.push(`<meta data-elur-head property="og:image:alt" content="${m(i.imageAlt)}" />`), i.image && i.imageWidth && n.push(`<meta data-elur-head property="og:image:width" content="${String(i.imageWidth)}" />`), i.image && i.imageHeight && n.push(`<meta data-elur-head property="og:image:height" content="${String(i.imageHeight)}" />`), i.image && i.imageType && n.push(`<meta data-elur-head property="og:image:type" content="${m(i.imageType)}" />`), i.siteName && n.push(`<meta data-elur-head property="og:site_name" content="${m(i.siteName)}" />`), i.locale && n.push(`<meta data-elur-head property="og:locale" content="${m(i.locale)}" />`));
+	let a = e.twitter;
+	if (a && (a.card && n.push(`<meta data-elur-head name="twitter:card" content="${m(a.card)}" />`), (a.title ?? r) && n.push(`<meta data-elur-head name="twitter:title" content="${m(a.title ?? r)}" />`), (a.description ?? e.description) && n.push(`<meta data-elur-head name="twitter:description" content="${m(a.description ?? e.description)}" />`), a.image && n.push(`<meta data-elur-head name="twitter:image" content="${m(a.image)}" />`), a.image && a.imageAlt && n.push(`<meta data-elur-head name="twitter:image:alt" content="${m(a.imageAlt)}" />`)), e.other) for (let [t, r] of Object.entries(e.other)) n.push(`<meta data-elur-head name="${m(t)}" content="${m(r)}" />`);
+	return n.map((e) => `\n    ${e}`).join("");
+}
+function _(e) {
+	let { body: t, title: n = "Elur Kit App", lang: r = "es", data: i, actions: a, clientEntry: o, htmlAttributes: s, headScripts: c, headLinks: l, metadata: u } = e, d = i === void 0 ? "" : `\n    <script type="application/json" id="elur-data">${h(i)}<\/script>`, f = a && Object.keys(a).length > 0 ? `\n    <script type="application/json" id="elur-actions">${h(a)}<\/script>` : "", p = o ? `\n    <script type="module" src="${m(o)}"><\/script>` : "", _ = s ? Object.entries(s).filter(([, e]) => e != null && e !== "").map(([e, t]) => ` ${m(e)}="${m(String(t))}"`).join("") : "", v = c ? c.filter((e) => typeof e == "string" && e.trim().length > 0).map((e) => e.trimStart().startsWith("<script") ? `\n    ${e}` : `\n    <script>${e.replace(/<\/script>/gi, "<\\/script>")}<\/script>`).join("") : "", y = u ? g(u, n) : "", b = u?.title ? "" : `\n    <title>${m(n)}</title>`, x = l ? l.filter((e) => typeof e == "string" && e.trim().length > 0).map((e) => `\n    ${e}`).join("") : "", S = e.renderEndpoint === !1 ? "\n    <meta name=\"elur:render-endpoint\" content=\"off\" />" : "";
+	return `<!DOCTYPE html>
+<html lang="${m(r)}"${_}>
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />${S}${b}${y}${x}${v}
+  </head>
+  <body>
+    <div id="app">${t}</div>${d}${f}${p}
+  </body>
+</html>
+`;
+}
+//#endregion
+//#region src/action/error-store.ts
+var v = "__elur_js_action_error", y = 3500, b = 15e3, x = process.env.ELUR_JS_ACTION_SECRET ?? o(32).toString("hex"), S = /* @__PURE__ */ new Map(), C = !1;
+function w() {
+	C || (C = !0, setTimeout(() => {
+		C = !1;
+		let e = Date.now();
+		for (let [t, n] of S) n.expiresAt <= e && S.delete(t);
+	}, b).unref?.());
+}
+function T(e) {
+	return `${a("sha256", x).update(e).digest("hex")}.${e}`;
+}
+function E(e) {
+	let t = e.indexOf(".");
+	if (t === -1) return;
+	let n = e.slice(0, t), r = e.slice(t + 1), i = a("sha256", x).update(r).digest("hex");
+	if (n.length === i.length) try {
+		if (s(Buffer.from(n), Buffer.from(i))) return r;
+	} catch {}
+}
+function D(e, t) {
+	let n = JSON.stringify({
+		d: e,
+		s: t
+	}), r = T(Buffer.from(n, "utf8").toString("base64url"));
+	if (r.length <= y) return { value: r };
+	let i = o(12).toString("hex");
+	return S.set(i, {
+		data: e,
+		status: t,
+		expiresAt: Date.now() + b
+	}), w(), {
+		value: T(`id:${i}`),
+		storeId: i
+	};
+}
+function O(e) {
+	if (!e) return;
+	let t = E(e);
+	if (t !== void 0) {
+		if (t.startsWith("id:")) {
+			let e = t.slice(3), n = S.get(e);
+			return !n || (S.delete(e), n.expiresAt <= Date.now()) ? void 0 : {
+				data: n.data,
+				status: n.status
+			};
+		}
+		try {
+			let e = Buffer.from(t, "base64url").toString("utf8"), n = JSON.parse(e);
+			return {
+				data: n.d,
+				status: n.s
+			};
+		} catch {
+			return;
+		}
+	}
+}
+var k = v;
+function A() {
+	return `${v}=; Path=/; Max-Age=0; SameSite=Lax`;
+}
+function j(e) {
+	return `${v}=${e}; Path=/; Max-Age=15; SameSite=Lax; HttpOnly`;
+}
+//#endregion
+//#region src/cache/policy.ts
+var M = {
+	mode: "dynamic",
+	revalidate: 0
+};
+function N(e) {
+	if (!e || typeof e != "object") return M;
+	let t = e, n = t.mode;
+	return n !== "public" && n !== "private" && n !== "dynamic" ? M : {
+		mode: n,
+		revalidate: typeof t.revalidate == "number" ? t.revalidate : 0,
+		tags: Array.isArray(t.tags) ? t.tags.filter((e) => typeof e == "string") : void 0
+	};
+}
+function P(e, t) {
+	return !(e.mode !== "public" || e.revalidate <= 0 || t.headers.get("Cookie") || t.headers.get("Authorization"));
+}
+//#endregion
+//#region src/ssr/render.ts
+var F = (e) => import(e);
+function I(e, t) {
+	let n = {}, r = [], i = [], a = (e) => {
+		if (!e || typeof e != "object") return;
+		let t = e.htmlAttributes;
+		t && Object.assign(n, t);
+		let a = e.headScripts;
+		Array.isArray(a) && r.push(...a);
+		let o = e.headLinks;
+		Array.isArray(o) && i.push(...o);
+	};
+	for (let e of t) a(e);
+	return a(e), {
+		htmlAttributes: n,
+		headScripts: [...new Set(r)],
+		headLinks: [...new Set(i)]
+	};
+}
+async function L(e) {
+	let { route: t, params: n = {}, searchParams: r = new URLSearchParams(), config: a, importer: o = F, actions: s, request: c } = e, { default: l, generateMetadata: u } = await o(t.pagePath), d, p, m, h = { response: void 0 };
+	if (t.dataPath) {
+		let e = await o(t.dataPath);
+		if (e.load) try {
+			d = await e.load({
+				params: n,
+				searchParams: r,
+				request: c
+			});
+		} catch (e) {
+			if (e instanceof Response) h.response = e;
+			else throw e;
+		}
+		typeof e.revalidate == "number" && (p = e.revalidate), e.cache && (m = N(e.cache), m.revalidate > 0 && (p = m.revalidate));
+	}
+	if (h.response) return {
+		html: "",
+		response: h.response,
+		status: h.response.status
+	};
+	let v, y;
+	if (c) {
+		let e = (c.headers.get("Cookie") ?? "").match(RegExp(`(?:^|;\\s*)${k}=([^;]+)`));
+		if (e) {
+			let t = O(e[1]);
+			t && (v = {
+				__elur_js_action_error: !0,
+				status: t.status,
+				data: t.data
+			}, y = `${k}=; Path=/; Max-Age=0; SameSite=Lax`);
+		}
+	}
+	let b = {
+		data: d ?? {},
+		params: n,
+		searchParams: r,
+		form: v
+	}, x = await Promise.all(t.layouts.map(async (e) => o(e))), S = await Promise.all(t.layouts.map(async (e) => {
+		let t = e.replace(/layout\.ts$/, "layout.data.ts");
+		if (!i(t)) return;
+		let a = await o(t);
+		if (a.load) try {
+			return await a.load({
+				params: n,
+				searchParams: r,
+				request: c
+			});
+		} catch (e) {
+			if (e instanceof Response) {
+				h.response = e;
+				return;
+			}
+			throw e;
+		}
+	})), C = h.response;
+	if (C) return {
+		html: "",
+		response: C,
+		status: C.status
+	};
+	let w;
+	if (t.slots) {
+		w = {};
+		for (let [e, n] of Object.entries(t.slots)) {
+			let t = await o(n);
+			w[e] = t.default(b);
+		}
+	}
+	let T = await f(() => {
+		let e = l(b);
+		for (let t = x.length - 1; t >= 0; t--) {
+			let { default: n } = x[t];
+			e = n({
+				children: e,
+				data: S[t],
+				slots: w
+			});
+		}
+		return e;
+	}), E = typeof d == "object" && d && "title" in d ? String(d.title ?? "Elur Kit") : "Elur Kit", { htmlAttributes: D, headScripts: A, headLinks: j } = I(d, S), M;
+	typeof u == "function" && (M = await u({
+		params: n,
+		searchParams: r,
+		request: c,
+		data: d
+	})), M ||= R(d) ?? z(S);
+	let P = M?.title ?? E, L = _({
+		title: P,
+		lang: a.lang,
+		body: T,
+		data: d,
+		actions: s,
+		htmlAttributes: D,
+		headScripts: A,
+		headLinks: j,
+		metadata: M,
+		clientEntry: a.clientEntry,
+		renderEndpoint: a.renderEndpoint
+	}), B = M ? g(M, P) : "";
+	return {
+		html: L,
+		revalidate: p,
+		clearActionErrorCookie: y,
+		head: B,
+		resolvedTitle: P,
+		cachePolicy: m
+	};
+}
+function R(e) {
+	if (e && typeof e == "object" && "metadata" in e) {
+		let t = e.metadata;
+		if (t && typeof t == "object") return t;
+	}
+}
+function z(e) {
+	for (let t of e) {
+		let e = R(t);
+		if (e) return e;
+	}
+}
+async function B(e) {
+	let t = e.status === 404 ? e.routes.error404 : e.routes.error500;
+	if (t) try {
+		let { html: n } = await L({
+			route: t,
+			params: {},
+			searchParams: new URLSearchParams(),
+			config: e.config,
+			actions: e.actions,
+			importer: e.importer
+		});
+		return {
+			html: n,
+			status: e.status
+		};
+	} catch (t) {
+		console.error(`[render] error ${e.status} page failed`, t);
+		return;
+	}
+}
+//#endregion
+//#region src/ssr/match.ts
+function V(e, t) {
+	let n = e.split("?")[0].split("/").filter(Boolean).map(U), r = [...t].sort((e, t) => W(t.path) - W(e.path));
+	for (let e of r) {
+		let t = G(n, e.path.split("/").filter(Boolean), e.optionalCatchAll);
+		if (t) return {
+			route: e,
+			params: t,
+			searchParams: new URLSearchParams()
+		};
+	}
+}
+function H(e, t) {
+	let n = e.split("?")[0].split("/").filter(Boolean).map(U), r = [...t].sort((e, t) => W(t.path) - W(e.path));
+	for (let e of r) {
+		let t = G(n, e.path.split("/").filter(Boolean));
+		if (t) return {
+			route: e,
+			params: t
+		};
+	}
+}
+function U(e) {
+	try {
+		return decodeURIComponent(e);
+	} catch {
+		return e;
+	}
+}
+function W(e) {
+	return e.split("/").filter(Boolean).reduce((e, t) => t.endsWith("*") ? e : t.startsWith(":") ? e + 1 : e + 2, 0);
+}
+function G(e, t, n = !1) {
+	let r = {}, i = 0;
+	for (let a = 0; a < t.length; a++) {
+		let o = t[a];
+		if (o.endsWith("*")) {
+			let t = o.slice(1, -1), a = e.slice(i);
+			return a.length === 0 && !n ? void 0 : (r[t] = a.length > 0 ? a : [], r);
+		}
+		if (o.startsWith(":")) {
+			let t = e[i];
+			if (t === void 0) return;
+			r[o.slice(1)] = t, i++;
+			continue;
+		}
+		if (o !== e[i]) return;
+		i++;
+	}
+	if (i === e.length) return r;
+}
+//#endregion
+//#region src/action/origin.ts
+function K(e) {
+	if (e) try {
+		let t = new URL(e);
+		return t.protocol !== "http:" && t.protocol !== "https:" ? void 0 : t.origin;
+	} catch {
+		return;
+	}
+}
+function q(e, t = {}) {
+	let n = K(e.url);
+	if (!n) return "Invalid target URL";
+	let r = e.headers.get("Origin"), i = e.headers.get("Referer");
+	if (!r && !i) return t.strictOrigin ? "Missing Origin and Referer headers" : void 0;
+	let a = K(r || i);
+	if (!a) return r ? "Invalid Origin header" : "Invalid Referer header";
+	if (a !== n && !t.allowedOrigins?.some((e) => K(e) === a)) return `Cross-origin request blocked: source "${a}" != target "${n}"`;
+}
+function J(e) {
+	return new Response(e, {
+		status: 403,
+		headers: { "Content-Type": "text/plain; charset=utf-8" }
+	});
+}
+//#endregion
+//#region src/action/server.ts
+var Y = 1048576;
+async function X(e, t) {
+	let n = e.headers.get("Content-Length");
+	if (n && parseInt(n, 10) > t) return {
+		ok: !1,
+		response: new Response("Request body too large", {
+			status: 413,
+			headers: { "Content-Type": "text/plain" }
+		})
+	};
+	let r = e.body?.getReader();
+	if (!r) return {
+		ok: !0,
+		text: ""
+	};
+	let i = [], a = 0;
+	try {
+		for (;;) {
+			let { done: e, value: n } = await r.read();
+			if (e) break;
+			if (a += n.byteLength, a > t) {
+				try {
+					r.cancel();
+				} catch {}
+				return {
+					ok: !1,
+					response: new Response("Request body too large", {
+						status: 413,
+						headers: { "Content-Type": "text/plain" }
+					})
+				};
+			}
+			i.push(n);
+		}
+	} finally {
+		try {
+			r.releaseLock();
+		} catch {}
+	}
+	let o = new Uint8Array(a), s = 0;
+	for (let e of i) o.set(e, s), s += e.byteLength;
+	return {
+		ok: !0,
+		text: new TextDecoder().decode(o)
+	};
+}
+function Z(e) {
+	let t = new URLSearchParams(e), n = {};
+	for (let [e, r] of t) n[e] === void 0 ? n[e] = r : Array.isArray(n[e]) ? n[e].push(r) : n[e] = [n[e], r];
+	return n;
+}
+async function Q(e, t = Y) {
+	if (e.method !== "POST") return {
+		ok: !1,
+		response: new Response("Method not allowed", {
+			status: 405,
+			headers: { "Content-Type": "text/plain" }
+		})
+	};
+	let n = e.headers.get("Content-Type") ?? "", r = (e.headers.get("Accept") ?? "").includes("application/json"), i, a, o = [];
+	if (n.includes("application/json")) {
+		let n = await X(e, t);
+		if (!n.ok) return {
+			ok: !1,
+			response: n.response
+		};
+		let r;
+		try {
+			r = JSON.parse(n.text);
+		} catch {
+			return {
+				ok: !1,
+				response: new Response("Invalid JSON body", {
+					status: 400,
+					headers: { "Content-Type": "text/plain" }
+				})
+			};
+		}
+		i = r.name, a = r.page, o = Array.isArray(r.args) ? r.args : [];
+	} else if (n.includes("application/x-www-form-urlencoded") || n.includes("multipart/form-data")) {
+		if (n.includes("multipart/form-data")) {
+			let n = e.headers.get("Content-Length");
+			if (n && parseInt(n, 10) > t) return {
+				ok: !1,
+				response: new Response("Request body too large", {
+					status: 413,
+					headers: { "Content-Type": "text/plain" }
+				})
+			};
+			let r;
+			try {
+				r = await e.formData();
+			} catch {
+				return {
+					ok: !1,
+					response: new Response("Invalid form body", {
+						status: 400,
+						headers: { "Content-Type": "text/plain" }
+					})
+				};
+			}
+			i = r.get("__elur_js_action_name") ?? void 0, a = r.get("__elur_js_action_page") ?? void 0;
+			let s = {};
+			for (let [e, t] of r) e !== "__elur_js_action_name" && e !== "__elur_js_action_page" && (s[e] = t);
+			o = [s];
+		} else {
+			let n = await X(e, t);
+			if (!n.ok) return {
+				ok: !1,
+				response: n.response
+			};
+			let r = Z(n.text);
+			i = r.__elur_js_action_name, a = r.__elur_js_action_page;
+			let s = {};
+			for (let [e, t] of Object.entries(r)) e !== "__elur_js_action_name" && e !== "__elur_js_action_page" && (s[e] = t);
+			o = [s];
+		}
+	} else {
+		let n = await X(e, t);
+		if (!n.ok) return {
+			ok: !1,
+			response: n.response
+		};
+		let r = Z(n.text);
+		i = r.__elur_js_action_name, a = r.__elur_js_action_page;
+		let s = {};
+		for (let [e, t] of Object.entries(r)) e !== "__elur_js_action_name" && e !== "__elur_js_action_page" && (s[e] = t);
+		o = [s];
+	}
+	return !i || typeof i != "string" ? {
+		ok: !1,
+		response: new Response("Missing action name", {
+			status: 400,
+			headers: { "Content-Type": "text/plain" }
+		})
+	} : {
+		ok: !0,
+		name: i,
+		page: a,
+		args: o,
+		wantsJson: r
+	};
+}
+async function $(r, i, a = {}) {
+	let o = q(r, a);
+	if (o) return J(o);
+	let s = await Q(r, a.bodyLimit ?? Y);
+	if (!s.ok) return s.response;
+	let { name: c, page: l, args: u, wantsJson: d } = s;
+	try {
+		let n = await i(c, l);
+		if (!n) {
+			let e = l ? `Action not found: ${c} (page: ${l})` : `Action not found: ${c}`;
+			return new Response(e, {
+				status: 404,
+				headers: { "Content-Type": "text/plain" }
+			});
+		}
+		let a = await n(...u);
+		if (e(a)) {
+			if (d) return new Response(JSON.stringify({
+				__elur_js_action_failure: !0,
+				status: a.status,
+				data: a.data
+			}), {
+				status: a.status,
+				headers: { "Content-Type": "application/json" }
+			});
+			let e = r.headers.get("Referer") ?? "/", t = new URL(e, "http://localhost"), { value: n } = D(a.data, a.status);
+			return new Response(null, {
+				status: 303,
+				headers: {
+					Location: t.pathname + t.search,
+					"Content-Type": "text/plain",
+					"Set-Cookie": j(n)
+				}
+			});
+		}
+		if (t(a)) return d ? new Response(JSON.stringify({
+			__elur_js_action_redirect: !0,
+			status: a.status,
+			location: a.location
+		}), {
+			status: 200,
+			headers: { "Content-Type": "application/json" }
+		}) : new Response(null, {
+			status: a.status,
+			headers: {
+				Location: a.location,
+				"Content-Type": "text/plain"
+			}
+		});
+		if (d) return new Response(JSON.stringify(a ?? null), {
+			status: 200,
+			headers: { "Content-Type": "application/json" }
+		});
+		let o = r.headers.get("Referer") ?? "/";
+		return new Response(null, {
+			status: 303,
+			headers: {
+				Location: typeof a == "string" ? a : o,
+				"Content-Type": "text/plain"
+			}
+		});
+	} catch (e) {
+		return console.error("[elur-kit] Action error:", e), n(e, { includeDetail: !1 });
+	}
+}
+//#endregion
+//#region src/runtime/node-http.ts
+var ee = globalThis.AbortController ?? AbortController;
+function te(e, t) {
+	let n = new Headers();
+	for (let t = 0; t < e.rawHeaders.length; t += 2) n.append(e.rawHeaders[t], e.rawHeaders[t + 1]);
+	let r = new ee();
+	e.once("aborted", () => r.abort()), e.once("close", () => {
+		e.complete || r.abort();
+	});
+	let i = e.socket.encrypted ? "https" : "http", a = {
+		method: e.method ?? "GET",
+		headers: n,
+		signal: r.signal
+	};
+	return t != null && a.method !== "GET" && a.method !== "HEAD" && (a.body = t), new Request(`${i}://${n.get("host") ?? "localhost"}${e.url ?? "/"}`, a);
+}
+//#endregion
+export { _, H as a, B as c, k as d, A as f, g, j as h, q as i, L as l, D as m, $ as n, V as o, O as p, J as r, I as s, te as t, P as u, f as v, d as y };
+
+//# sourceMappingURL=node-http-DRAUhO0c.js.map