@farm.js/core 0.1.17 → 0.1.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (249) hide show
  1. package/dist/after.cjs +12 -225
  2. package/dist/agent-runtime.cjs +83 -2800
  3. package/dist/api/client.cjs +17 -4060
  4. package/dist/api/route-manager.cjs +34 -4354
  5. package/dist/api/runtime.cjs +29 -2696
  6. package/dist/api.cjs +88 -8434
  7. package/dist/app-markdown.cjs +39 -280
  8. package/dist/cache.cjs +38 -1560
  9. package/dist/chunk-22GUSVNJ.cjs +351 -0
  10. package/dist/chunk-2CQ74SP6.cjs +13 -0
  11. package/dist/chunk-2SJ4RQ6P.cjs +57 -0
  12. package/dist/chunk-3376ZTRC.cjs +1 -0
  13. package/dist/{chunk-YD4J4XCI.mjs → chunk-3XG26Z3J.mjs} +1 -1
  14. package/dist/chunk-4PNUXIVU.cjs +472 -0
  15. package/dist/chunk-4PPEPOZZ.cjs +21 -0
  16. package/dist/chunk-4ZFL5GFN.cjs +520 -0
  17. package/dist/chunk-5OVTOKGH.cjs +65 -0
  18. package/dist/chunk-5QIKR7RR.cjs +224 -0
  19. package/dist/chunk-5ZSWG4UX.cjs +127 -0
  20. package/dist/chunk-62YJ2IEB.cjs +238 -0
  21. package/dist/chunk-6EODJYCX.cjs +183 -0
  22. package/dist/chunk-6EXBPJ24.cjs +434 -0
  23. package/dist/chunk-6QQDAAAZ.cjs +38 -0
  24. package/dist/chunk-6V4TDWEC.cjs +455 -0
  25. package/dist/chunk-72ADZ6GQ.cjs +19 -0
  26. package/dist/chunk-75BRBIFP.cjs +172 -0
  27. package/dist/chunk-7W3CPVXS.cjs +24 -0
  28. package/dist/chunk-A6WIQH5Z.cjs +31 -0
  29. package/dist/chunk-AFOD3LYZ.cjs +377 -0
  30. package/dist/chunk-AMDMVWMI.cjs +39 -0
  31. package/dist/chunk-AORPIPNB.cjs +552 -0
  32. package/dist/chunk-ARJWXNQL.cjs +256 -0
  33. package/dist/chunk-AWRISO2H.cjs +2199 -0
  34. package/dist/chunk-AYJR42WX.cjs +711 -0
  35. package/dist/chunk-B4CH33IG.cjs +644 -0
  36. package/dist/chunk-BIDYX3SL.cjs +91 -0
  37. package/dist/chunk-BSTRERPP.cjs +40 -0
  38. package/dist/chunk-BYODCJD6.cjs +663 -0
  39. package/dist/chunk-C3VRMB6H.cjs +85 -0
  40. package/dist/chunk-C5GUTBZK.cjs +173 -0
  41. package/dist/chunk-CIAGU2X4.cjs +337 -0
  42. package/dist/chunk-CMGMGHUZ.cjs +27 -0
  43. package/dist/chunk-CXP5U3RW.cjs +54 -0
  44. package/dist/chunk-D2ULAULS.cjs +166 -0
  45. package/dist/chunk-D7JTOLFK.cjs +285 -0
  46. package/dist/chunk-DVM4FKZL.cjs +169 -0
  47. package/dist/chunk-DYEJQTDN.cjs +49 -0
  48. package/dist/chunk-E2BMSZ2W.cjs +151 -0
  49. package/dist/chunk-E3UK5IIB.cjs +593 -0
  50. package/dist/chunk-EM6SBQKM.cjs +470 -0
  51. package/dist/chunk-FJSWYIR7.cjs +482 -0
  52. package/dist/chunk-FK6GO24V.cjs +54 -0
  53. package/dist/chunk-FXUUWYAX.cjs +654 -0
  54. package/dist/chunk-G3HRIVEY.cjs +395 -0
  55. package/dist/chunk-G643DQCH.cjs +13 -0
  56. package/dist/chunk-G7HXGLEC.cjs +175 -0
  57. package/dist/chunk-GDSHDTJ4.cjs +152 -0
  58. package/dist/chunk-GNEO2XOF.cjs +2040 -0
  59. package/dist/{chunk-56DAX2BE.mjs → chunk-GYKJCFTS.mjs} +1 -1
  60. package/dist/chunk-H6G5INWM.cjs +1094 -0
  61. package/dist/chunk-HBTUGXHS.cjs +180 -0
  62. package/dist/chunk-HREOKQWT.cjs +45 -0
  63. package/dist/chunk-I4J452B7.cjs +435 -0
  64. package/dist/chunk-I57LW5VZ.cjs +94 -0
  65. package/dist/chunk-I7PUUDGY.cjs +389 -0
  66. package/dist/chunk-IAMRBF3Z.cjs +86 -0
  67. package/dist/chunk-IKNRN4VS.cjs +14214 -0
  68. package/dist/chunk-IQXFRNY2.cjs +169 -0
  69. package/dist/chunk-IXTFU4PL.cjs +2355 -0
  70. package/dist/chunk-J2OP5GG3.cjs +725 -0
  71. package/dist/chunk-J3LOGE4T.cjs +42 -0
  72. package/dist/chunk-J7FSKED3.cjs +93 -0
  73. package/dist/chunk-JDNHKPTD.cjs +22 -0
  74. package/dist/chunk-JSROZYYO.cjs +164 -0
  75. package/dist/chunk-K6FNHVDR.cjs +696 -0
  76. package/dist/chunk-KGZIORNL.cjs +43 -0
  77. package/dist/{chunk-MVIWBEJF.mjs → chunk-KPNVGRBL.mjs} +1 -1
  78. package/dist/chunk-KR6CKSXT.cjs +15 -0
  79. package/dist/chunk-KROWKCUH.cjs +185 -0
  80. package/dist/chunk-KVFPGF2M.cjs +46 -0
  81. package/dist/chunk-LCCBO7PJ.cjs +46 -0
  82. package/dist/chunk-LIUGYUX3.cjs +22 -0
  83. package/dist/chunk-LTNGXMQ6.cjs +55 -0
  84. package/dist/chunk-M2L4MYDQ.cjs +14 -0
  85. package/dist/chunk-MCJLA63J.cjs +1 -0
  86. package/dist/chunk-MKB2EGIR.cjs +148 -0
  87. package/dist/chunk-MQ3H6LT5.cjs +202 -0
  88. package/dist/chunk-MT763TDW.cjs +43 -0
  89. package/dist/chunk-MWSK6C4J.cjs +18 -0
  90. package/dist/chunk-MWWVKDW3.cjs +169 -0
  91. package/dist/chunk-NO3WWW3N.cjs +192 -0
  92. package/dist/chunk-NV3A5DXM.cjs +862 -0
  93. package/dist/chunk-NWOD6NIT.cjs +9 -0
  94. package/dist/chunk-NZKJGRB3.cjs +230 -0
  95. package/dist/chunk-OAVTUMJP.cjs +1496 -0
  96. package/dist/chunk-OHY2ZWUG.cjs +25 -0
  97. package/dist/chunk-OI6CMLWX.cjs +47 -0
  98. package/dist/chunk-OIEOCXKG.cjs +453 -0
  99. package/dist/chunk-OWOUTKIJ.cjs +558 -0
  100. package/dist/chunk-OX6O6WVA.cjs +74 -0
  101. package/dist/chunk-OXSIH4D6.cjs +476 -0
  102. package/dist/chunk-OYEUREB6.cjs +35 -0
  103. package/dist/chunk-PCOTGFSM.cjs +139 -0
  104. package/dist/chunk-PZYCPSCC.cjs +35 -0
  105. package/dist/chunk-QBK2AA4U.cjs +445 -0
  106. package/dist/chunk-QBPXNZGV.cjs +487 -0
  107. package/dist/chunk-QNPEUFHQ.cjs +27 -0
  108. package/dist/chunk-QZRVZSPN.cjs +236 -0
  109. package/dist/chunk-R5A5KNVX.cjs +20 -0
  110. package/dist/chunk-R5JIFR6B.cjs +42 -0
  111. package/dist/chunk-R6AIILII.cjs +193 -0
  112. package/dist/chunk-RG3ZOTG5.cjs +34 -0
  113. package/dist/chunk-ROUTX2E5.cjs +390 -0
  114. package/dist/chunk-RTHIVJ2G.cjs +54 -0
  115. package/dist/chunk-S3A45T7F.cjs +166 -0
  116. package/dist/chunk-S3JO3N4H.cjs +17 -0
  117. package/dist/chunk-SK35NQKK.cjs +27 -0
  118. package/dist/chunk-SU7MH53P.cjs +180 -0
  119. package/dist/chunk-SVRTJOUF.cjs +113 -0
  120. package/dist/chunk-SWN467MP.cjs +18 -0
  121. package/dist/chunk-SYQ3MOWW.cjs +73 -0
  122. package/dist/chunk-T5CERMEH.cjs +417 -0
  123. package/dist/chunk-TFAXUHWX.cjs +206 -0
  124. package/dist/chunk-TIWHTW3Q.cjs +24 -0
  125. package/dist/chunk-TKJZFIML.cjs +20 -0
  126. package/dist/chunk-TKNSDBBN.cjs +193 -0
  127. package/dist/chunk-TWGMSEHX.cjs +525 -0
  128. package/dist/chunk-TYQUSXUG.cjs +1357 -0
  129. package/dist/chunk-U4KT7QP3.cjs +23 -0
  130. package/dist/chunk-UJ2C4ICS.cjs +277 -0
  131. package/dist/chunk-UN5GHC5V.cjs +10244 -0
  132. package/dist/chunk-UQZ4AYTH.cjs +168 -0
  133. package/dist/chunk-US2QVW3E.cjs +36 -0
  134. package/dist/chunk-VB6UCX3V.cjs +421 -0
  135. package/dist/chunk-VEKFLAQM.cjs +300 -0
  136. package/dist/chunk-VQDBNVOO.cjs +14 -0
  137. package/dist/chunk-W4E7WMXE.cjs +71 -0
  138. package/dist/chunk-WJ3HK3LJ.cjs +1102 -0
  139. package/dist/chunk-WMAPPDMM.cjs +28 -0
  140. package/dist/chunk-WMOGFOUJ.cjs +223 -0
  141. package/dist/chunk-WPYFSQKK.cjs +37 -0
  142. package/dist/chunk-WZMNW2IW.cjs +1415 -0
  143. package/dist/chunk-XGC343EY.cjs +443 -0
  144. package/dist/chunk-XSKZORAS.cjs +727 -0
  145. package/dist/chunk-XWAWFQFS.cjs +82 -0
  146. package/dist/chunk-Y4YMF2NQ.cjs +460 -0
  147. package/dist/chunk-Y4YWHNKU.cjs +250 -0
  148. package/dist/chunk-Y53ZSFN6.cjs +504 -0
  149. package/dist/chunk-YA6LLTIJ.cjs +411 -0
  150. package/dist/chunk-YFPGHF5F.cjs +202 -0
  151. package/dist/chunk-YJRZR7VU.cjs +28 -0
  152. package/dist/chunk-YTAABQEV.cjs +1 -0
  153. package/dist/chunk-YX3DBN4M.cjs +18 -0
  154. package/dist/chunk-YZTASLPQ.cjs +64 -0
  155. package/dist/chunk-Z5HIWVDP.cjs +2173 -0
  156. package/dist/chunk-ZEG3OPIB.cjs +93 -0
  157. package/dist/chunk-ZMN3H73H.cjs +155 -0
  158. package/dist/client/lifecycle.cjs +6 -35
  159. package/dist/client-plugins.cjs +7 -448
  160. package/dist/client.cjs +171 -9808
  161. package/dist/config.cjs +8 -36
  162. package/dist/cron.cjs +24 -491
  163. package/dist/deferred.cjs +26 -475
  164. package/dist/deployment.cjs +39 -210
  165. package/dist/devtools-OUIPHVV6.cjs +388 -0
  166. package/dist/devtools-client-4WAPJY5L.cjs +254 -0
  167. package/dist/devtools-ui-5GBDIGMK.cjs +1296 -0
  168. package/dist/docs.cjs +46 -5657
  169. package/dist/env-types.cjs +5 -226
  170. package/dist/env.cjs +21 -338
  171. package/dist/environment/vite.cjs +8 -372
  172. package/dist/environment.cjs +12 -94
  173. package/dist/font.cjs +13 -63
  174. package/dist/headers.cjs +7 -123
  175. package/dist/i18n/client.cjs +55 -294
  176. package/dist/i18n/index.cjs +22 -209
  177. package/dist/i18n/server.cjs +22 -745
  178. package/dist/image/server.cjs +13 -729
  179. package/dist/image/sharp.cjs +33 -171
  180. package/dist/image.cjs +41 -85
  181. package/dist/index.cjs +1151 -68080
  182. package/dist/index.mjs +3 -3
  183. package/dist/instrumentation.cjs +12 -138
  184. package/dist/integration-orm-55F7CII5.cjs +13 -0
  185. package/dist/integrations.cjs +55 -4090
  186. package/dist/internal/app-markdown-runtime.cjs +27 -224
  187. package/dist/internal/build-runtime.cjs +120 -52259
  188. package/dist/internal/build-runtime.mjs +3 -3
  189. package/dist/internal/cli-runtime.cjs +67 -13811
  190. package/dist/internal/client-error-overlay.cjs +80 -733
  191. package/dist/internal/client-error-overlay.mjs +1 -1
  192. package/dist/internal/client-runtime.cjs +81 -913
  193. package/dist/internal/compression-runtime.cjs +8 -214
  194. package/dist/internal/config-runtime.cjs +42 -6547
  195. package/dist/internal/docs-precompiled-runtime.cjs +26 -46
  196. package/dist/internal/infra-analytics-runtime.cjs +10 -536
  197. package/dist/internal/isolated-boundary.cjs +14 -414
  198. package/dist/internal/metadata-image-runtime.cjs +7 -285
  199. package/dist/internal/product-telemetry-runtime.cjs +42 -97
  200. package/dist/internal/product-telemetry-runtime.mjs +1 -1
  201. package/dist/internal/production-node-env.cjs +6 -63
  202. package/dist/internal/production-runtime.cjs +418 -7133
  203. package/dist/internal/request-cookies.cjs +6 -54
  204. package/dist/json-ld.cjs +24 -50
  205. package/dist/layers-E4WPJNY5.cjs +17 -0
  206. package/dist/manager-G4B2IPYE.cjs +14 -0
  207. package/dist/markdown.cjs +21 -547
  208. package/dist/middleware.cjs +36 -2995
  209. package/dist/navigation.cjs +22 -2588
  210. package/dist/nitro-4I2MYLY2.cjs +652 -0
  211. package/dist/observability.cjs +22 -614
  212. package/dist/og.cjs +5 -28
  213. package/dist/plugin.cjs +106 -37442
  214. package/dist/plugin.mjs +2 -2
  215. package/dist/query/client.cjs +113 -449
  216. package/dist/query/index.cjs +26 -288
  217. package/dist/query/parsers.cjs +23 -247
  218. package/dist/query/server.cjs +36 -298
  219. package/dist/renderer/react/client.cjs +9 -43
  220. package/dist/renderer/react/server.cjs +40 -103
  221. package/dist/renderer/react/vite.cjs +7 -29
  222. package/dist/renderer-client.cjs +126 -4295
  223. package/dist/renderer.cjs +31 -249
  224. package/dist/request.cjs +5 -68
  225. package/dist/router.cjs +11 -474
  226. package/dist/routes.cjs +42 -2461
  227. package/dist/schema-dev-notice-MXSZMVDG.cjs +56 -0
  228. package/dist/schema.cjs +6 -33
  229. package/dist/search-client-G3RICOFU.cjs +13 -0
  230. package/dist/server-action-security.cjs +25 -541
  231. package/dist/server-fn-client.cjs +6 -337
  232. package/dist/server-fn.cjs +32 -1841
  233. package/dist/server-plugins.cjs +15 -884
  234. package/dist/server-query-client.cjs +15 -1883
  235. package/dist/server-query.cjs +16 -1838
  236. package/dist/server.cjs +296 -44681
  237. package/dist/server.mjs +2 -2
  238. package/dist/storage.cjs +57 -576
  239. package/dist/testing.cjs +89 -3186
  240. package/dist/theme/client.cjs +13 -108
  241. package/dist/theme/index.cjs +6 -68
  242. package/dist/theme/runtime.cjs +13 -78
  243. package/dist/theme/server.cjs +10 -179
  244. package/dist/version.cjs +4 -32
  245. package/dist/version.mjs +1 -1
  246. package/dist/vite.cjs +119 -37773
  247. package/dist/vite.mjs +2 -2
  248. package/dist/workflows.cjs +19 -1040
  249. package/package.json +1 -1
@@ -0,0 +1,56 @@
1
+ "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
2
+
3
+
4
+ var _chunkAWRISO2Hcjs = require('./chunk-AWRISO2H.cjs');
5
+ require('./chunk-JSROZYYO.cjs');
6
+
7
+
8
+ var _chunk5QIKR7RRcjs = require('./chunk-5QIKR7RR.cjs');
9
+ require('./chunk-QNPEUFHQ.cjs');
10
+ require('./chunk-US2QVW3E.cjs');
11
+ require('./chunk-NO3WWW3N.cjs');
12
+
13
+
14
+ var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
15
+
16
+ // src/schema-dev-notice.ts
17
+ async function noticePendingSchemaChanges(config, options = {}) {
18
+ const lines = [];
19
+ try {
20
+ const owners = _chunkAWRISO2Hcjs.findSchemaTableOwners.call(void 0, config);
21
+ const timeoutMs = _nullishCoalesce(options.timeoutMs, () => ( 5e3));
22
+ for (const owner of owners) {
23
+ try {
24
+ const result = await withTimeout(
25
+ _chunkAWRISO2Hcjs.migrateSchemaTables.call(void 0, owner, { config, log: /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, () => {
26
+ }, "log") }),
27
+ timeoutMs
28
+ );
29
+ if (result.planned === 0) continue;
30
+ const { from, to } = _nullishCoalesce(result.upgrade, () => ( {}));
31
+ const name = from && to && from !== to ? `${owner.name} ${from} \u2192 ${to}` : owner.name;
32
+ lines.push(
33
+ `${name} has ${result.planned} change(s) to its tables that are not applied yet. Run \`farm ${owner.name} migrate\` to review them.`
34
+ );
35
+ } catch (e) {
36
+ }
37
+ }
38
+ } catch (e2) {
39
+ }
40
+ const log = _nullishCoalesce(options.log, () => ( ((message) => _chunk5QIKR7RRcjs.logger.warn(message))));
41
+ for (const line of lines) log(line);
42
+ return lines;
43
+ }
44
+ _chunkS3JO3N4Hcjs.__name.call(void 0, noticePendingSchemaChanges, "noticePendingSchemaChanges");
45
+ function withTimeout(work, timeoutMs) {
46
+ let timer;
47
+ const timeout = new Promise((_, reject) => {
48
+ timer = setTimeout(() => reject(new Error("timed out")), timeoutMs);
49
+ _optionalChain([timer, 'access', _2 => _2.unref, 'optionalCall', _3 => _3()]);
50
+ });
51
+ return Promise.race([work, timeout]).finally(() => clearTimeout(timer));
52
+ }
53
+ _chunkS3JO3N4Hcjs.__name.call(void 0, withTimeout, "withTimeout");
54
+
55
+
56
+ exports.noticePendingSchemaChanges = noticePendingSchemaChanges;
package/dist/schema.cjs CHANGED
@@ -1,34 +1,7 @@
1
- "use strict";
2
- var __defProp = Object.defineProperty;
3
- var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
4
- var __getOwnPropNames = Object.getOwnPropertyNames;
5
- var __hasOwnProp = Object.prototype.hasOwnProperty;
6
- var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
7
- var __export = (target, all) => {
8
- for (var name in all)
9
- __defProp(target, name, { get: all[name], enumerable: true });
10
- };
11
- var __copyProps = (to, from, except, desc) => {
12
- if (from && typeof from === "object" || typeof from === "function") {
13
- for (let key of __getOwnPropNames(from))
14
- if (!__hasOwnProp.call(to, key) && key !== except)
15
- __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
16
- }
17
- return to;
18
- };
19
- var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
1
+ "use strict";Object.defineProperty(exports, "__esModule", {value: true});
20
2
 
21
- // src/schema.ts
22
- var schema_exports = {};
23
- __export(schema_exports, {
24
- defineSchema: () => defineSchema
25
- });
26
- module.exports = __toCommonJS(schema_exports);
27
- function defineSchema(schema) {
28
- return schema;
29
- }
30
- __name(defineSchema, "defineSchema");
31
- // Annotate the CommonJS export names for ESM import in node:
32
- 0 && (module.exports = {
33
- defineSchema
34
- });
3
+ var _chunkG643DQCHcjs = require('./chunk-G643DQCH.cjs');
4
+ require('./chunk-S3JO3N4H.cjs');
5
+
6
+
7
+ exports.defineSchema = _chunkG643DQCHcjs.defineSchema;
@@ -0,0 +1,13 @@
1
+ "use strict";Object.defineProperty(exports, "__esModule", {value: true});
2
+
3
+
4
+
5
+
6
+ var _chunkMWWVKDW3cjs = require('./chunk-MWWVKDW3.cjs');
7
+ require('./chunk-S3JO3N4H.cjs');
8
+
9
+
10
+
11
+
12
+
13
+ exports.generateFarmDocsSearchBootstrapRuntime = _chunkMWWVKDW3cjs.generateFarmDocsSearchBootstrapRuntime; exports.generateFarmDocsSearchClientRuntime = _chunkMWWVKDW3cjs.generateFarmDocsSearchClientRuntime; exports.isFarmDocsSearchEnabled = _chunkMWWVKDW3cjs.isFarmDocsSearchEnabled; exports.resolveFarmDocsSearchClientModule = _chunkMWWVKDW3cjs.resolveFarmDocsSearchClientModule;
@@ -1,547 +1,31 @@
1
- "use strict";
2
- var __defProp = Object.defineProperty;
3
- var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
4
- var __getOwnPropNames = Object.getOwnPropertyNames;
5
- var __hasOwnProp = Object.prototype.hasOwnProperty;
6
- var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
7
- var __export = (target, all) => {
8
- for (var name in all)
9
- __defProp(target, name, { get: all[name], enumerable: true });
10
- };
11
- var __copyProps = (to, from, except, desc) => {
12
- if (from && typeof from === "object" || typeof from === "function") {
13
- for (let key of __getOwnPropNames(from))
14
- if (!__hasOwnProp.call(to, key) && key !== except)
15
- __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
16
- }
17
- return to;
18
- };
19
- var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
1
+ "use strict";Object.defineProperty(exports, "__esModule", {value: true});
20
2
 
21
- // src/server-action-security.ts
22
- var server_action_security_exports = {};
23
- __export(server_action_security_exports, {
24
- DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT: () => DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT,
25
- ServerActionRequestError: () => ServerActionRequestError,
26
- createServerActionRequestErrorResponse: () => createServerActionRequestErrorResponse,
27
- getServerActionExecutionContext: () => getServerActionExecutionContext,
28
- getServerActionInvalidations: () => getServerActionInvalidations,
29
- getServerActionSignal: () => getServerActionSignal,
30
- prepareServerActionRequest: () => prepareServerActionRequest,
31
- resolveServerActionsConfig: () => resolveServerActionsConfig,
32
- runWithServerActionRequest: () => runWithServerActionRequest,
33
- sanitizeServerActionError: () => sanitizeServerActionError,
34
- validateServerActionRequest: () => validateServerActionRequest
35
- });
36
- module.exports = __toCommonJS(server_action_security_exports);
37
- var import_node_async_hooks = require("async_hooks");
38
3
 
39
- // src/cache-invalidation.ts
40
- var FARM_CACHE_INVALIDATION_STATE = /* @__PURE__ */ Symbol.for("farm.cacheInvalidationState");
41
- var globalState = globalThis;
42
- function getFarmCacheInvalidationState() {
43
- return globalState[FARM_CACHE_INVALIDATION_STATE] ?? (globalState[FARM_CACHE_INVALIDATION_STATE] = {
44
- listeners: /* @__PURE__ */ new Set(),
45
- taskListeners: /* @__PURE__ */ new Set()
46
- });
47
- }
48
- __name(getFarmCacheInvalidationState, "getFarmCacheInvalidationState");
49
- function subscribeFarmCacheInvalidation(listener) {
50
- const state = getFarmCacheInvalidationState();
51
- state.listeners.add(listener);
52
- return () => state.listeners.delete(listener);
53
- }
54
- __name(subscribeFarmCacheInvalidation, "subscribeFarmCacheInvalidation");
55
- function subscribeFarmCacheTask(listener) {
56
- const state = getFarmCacheInvalidationState();
57
- state.taskListeners.add(listener);
58
- return () => state.taskListeners.delete(listener);
59
- }
60
- __name(subscribeFarmCacheTask, "subscribeFarmCacheTask");
61
4
 
62
- // src/request-origin.ts
63
- function getRequestSourceOrigin(request) {
64
- const origin = request.headers.get("origin")?.trim();
65
- if (origin) {
66
- return parseSourceOrigin(origin);
67
- }
68
- const referer = request.headers.get("referer")?.trim();
69
- if (referer) {
70
- return parseSourceOrigin(referer);
71
- }
72
- return { ok: true, origin: null };
73
- }
74
- __name(getRequestSourceOrigin, "getRequestSourceOrigin");
75
- function parseSourceOrigin(value) {
76
- if (value === "null") {
77
- return { ok: false, reason: "opaque-origin" };
78
- }
79
- try {
80
- const parsed = new URL(value);
81
- if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
82
- return { ok: false, reason: "invalid-origin" };
83
- }
84
- return { ok: true, origin: parsed.origin };
85
- } catch {
86
- return { ok: false, reason: "invalid-origin" };
87
- }
88
- }
89
- __name(parseSourceOrigin, "parseSourceOrigin");
90
- function matchesHostHeader(sourceOrigin, request) {
91
- const host = request.headers.get("host")?.trim().toLowerCase();
92
- if (!host) return false;
93
- try {
94
- const source = new URL(sourceOrigin);
95
- const target = new URL(request.url);
96
- return source.protocol === target.protocol && source.host.toLowerCase() === host;
97
- } catch {
98
- return false;
99
- }
100
- }
101
- __name(matchesHostHeader, "matchesHostHeader");
102
- function matchesAllowedOrigin(sourceOrigin, pattern) {
103
- const source = new URL(sourceOrigin);
104
- if (!pattern.includes("*")) {
105
- return pattern.includes("://") ? source.origin === pattern : source.host === pattern;
106
- }
107
- const schemeEnd = pattern.indexOf("://");
108
- const scheme = schemeEnd === -1 ? null : pattern.slice(0, schemeEnd + 1);
109
- const hostPattern = pattern.slice(schemeEnd === -1 ? 0 : schemeEnd + 3);
110
- const [wildcardHost, port] = splitHostAndPort(hostPattern);
111
- const baseHost = wildcardHost.slice(2);
112
- if (scheme && source.protocol !== scheme) return false;
113
- if (port && getEffectivePort(source) !== port) return false;
114
- if (!port && source.port) return false;
115
- return source.hostname.endsWith(`.${baseHost}`) && source.hostname !== baseHost;
116
- }
117
- __name(matchesAllowedOrigin, "matchesAllowedOrigin");
118
- function normalizeAllowedOriginPattern(value, label) {
119
- const pattern = value.trim().toLowerCase();
120
- if (!pattern) {
121
- throw new TypeError(`${label} cannot contain empty values`);
122
- }
123
- if (pattern.includes("*")) {
124
- if (!/^(?:https?:\/\/)?\*\.[a-z0-9.-]+(?::\d+)?$/.test(pattern)) {
125
- throw new TypeError(`Invalid ${label} pattern: ${JSON.stringify(value)}`);
126
- }
127
- return pattern;
128
- }
129
- if (pattern.includes("://")) {
130
- let parsed;
131
- try {
132
- parsed = new URL(pattern);
133
- } catch {
134
- throw new TypeError(`Invalid ${label} value: ${JSON.stringify(value)}`);
135
- }
136
- if (parsed.protocol !== "http:" && parsed.protocol !== "https:" || parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash) {
137
- throw new TypeError(`${label} must contain origins without paths: ${JSON.stringify(value)}`);
138
- }
139
- return parsed.origin;
140
- }
141
- if (/[/@?#]/.test(pattern)) {
142
- throw new TypeError(`${label} must contain origins or hosts: ${JSON.stringify(value)}`);
143
- }
144
- try {
145
- return new URL(`http://${pattern}`).host;
146
- } catch {
147
- throw new TypeError(`Invalid ${label} value: ${JSON.stringify(value)}`);
148
- }
149
- }
150
- __name(normalizeAllowedOriginPattern, "normalizeAllowedOriginPattern");
151
- function splitHostAndPort(value) {
152
- const separator = value.lastIndexOf(":");
153
- if (separator === -1) return [value, null];
154
- return [value.slice(0, separator), value.slice(separator + 1)];
155
- }
156
- __name(splitHostAndPort, "splitHostAndPort");
157
- function getEffectivePort(url) {
158
- if (url.port) return url.port;
159
- if (url.protocol === "https:") return "443";
160
- if (url.protocol === "http:") return "80";
161
- return "";
162
- }
163
- __name(getEffectivePort, "getEffectivePort");
164
5
 
165
- // src/server-fn-error.ts
166
- var FARM_SERVER_FN_FAILURE_SYMBOL = /* @__PURE__ */ Symbol.for("farm.server-fn.failure");
167
- function isServerFnFailure(value) {
168
- if (!value || typeof value !== "object") return false;
169
- const candidate = value;
170
- return candidate[FARM_SERVER_FN_FAILURE_SYMBOL] === true && candidate.name === "ServerFnFailure" && typeof candidate.code === "string" && Number.isInteger(candidate.status) && (candidate.status ?? 0) >= 400 && (candidate.status ?? 0) <= 599;
171
- }
172
- __name(isServerFnFailure, "isServerFnFailure");
173
- function serializeServerFnFailure(value) {
174
- if (!isServerFnFailure(value)) return null;
175
- return {
176
- name: "ServerFnFailure",
177
- message: value.message,
178
- code: value.code,
179
- status: value.status,
180
- data: value.data
181
- };
182
- }
183
- __name(serializeServerFnFailure, "serializeServerFnFailure");
184
6
 
185
- // src/server-http.ts
186
- function parseBodySizeLimit(value, optionName = "bodySizeLimit") {
187
- if (typeof value === "number") {
188
- if (!Number.isSafeInteger(value) || value <= 0) {
189
- throw new TypeError(`${optionName} must be a positive safe integer`);
190
- }
191
- return value;
192
- }
193
- const match = value.trim().toLowerCase().match(/^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb|kib|mib|gib)?$/);
194
- if (!match) {
195
- throw new TypeError(`${optionName} must be bytes or a size string such as "500kb" or "10mb"`);
196
- }
197
- const amount = Number(match[1]);
198
- const unit = match[2] ?? "b";
199
- const multiplier = {
200
- b: 1,
201
- kb: 1e3,
202
- mb: 1e6,
203
- gb: 1e9,
204
- kib: 1024,
205
- mib: 1048576,
206
- gib: 1073741824
207
- };
208
- const bytes = Math.floor(amount * multiplier[unit]);
209
- if (!Number.isSafeInteger(bytes) || bytes <= 0) {
210
- throw new TypeError(`${optionName} must resolve to a positive safe integer`);
211
- }
212
- return bytes;
213
- }
214
- __name(parseBodySizeLimit, "parseBodySizeLimit");
215
7
 
216
- // src/server-action-security.ts
217
- var SERVER_ACTION_ALLOWED_ORIGINS_LABEL = "serverActions.allowedOrigins";
218
- var DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT = 1e6;
219
- var _ServerActionRequestError = class _ServerActionRequestError extends Error {
220
- constructor(code, status, message) {
221
- super(message);
222
- this.name = "ServerActionRequestError";
223
- this.code = code;
224
- this.status = status;
225
- }
226
- };
227
- __name(_ServerActionRequestError, "ServerActionRequestError");
228
- var ServerActionRequestError = _ServerActionRequestError;
229
- var SERVER_ACTION_STORAGE_KEY = /* @__PURE__ */ Symbol.for("farm.serverActionStorage");
230
- var FALLBACK_ABORT_CONTROLLER_KEY = /* @__PURE__ */ Symbol.for("farm.serverActionFallbackAbortController");
231
- var FORM_ACTION_CONTENT_TYPES = /* @__PURE__ */ new Set([
232
- "application/x-www-form-urlencoded",
233
- "multipart/form-data"
234
- ]);
235
- var JAVASCRIPT_ACTION_CONTENT_TYPES = /* @__PURE__ */ new Set([
236
- "application/octet-stream",
237
- "application/x-www-form-urlencoded",
238
- "multipart/form-data",
239
- "text/plain"
240
- ]);
241
- function resolveServerActionsConfig(config) {
242
- const allowedOrigins = (config?.allowedOrigins ?? []).map(
243
- (value) => normalizeAllowedOriginPattern(value, SERVER_ACTION_ALLOWED_ORIGINS_LABEL)
244
- );
245
- const bodySizeLimit = parseBodySizeLimit(
246
- config?.bodySizeLimit ?? DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT,
247
- "serverActions.bodySizeLimit"
248
- );
249
- return Object.freeze({
250
- allowedOrigins: Object.freeze(allowedOrigins),
251
- bodySizeLimit
252
- });
253
- }
254
- __name(resolveServerActionsConfig, "resolveServerActionsConfig");
255
- function validateServerActionRequest(request, config) {
256
- if (request.method.toUpperCase() !== "POST") {
257
- throw new ServerActionRequestError(
258
- "INVALID_METHOD",
259
- 405,
260
- "Server actions only accept POST requests"
261
- );
262
- }
263
- const requestUrl = new URL(request.url);
264
- const sourceOrigin = resolveSourceOrigin(request);
265
- const fetchSite = request.headers.get("sec-fetch-site")?.trim().toLowerCase();
266
- if (!sourceOrigin) {
267
- if (fetchSite !== "same-origin") {
268
- throw new ServerActionRequestError(
269
- "MISSING_ORIGIN",
270
- 403,
271
- "Server action request is missing same-origin metadata"
272
- );
273
- }
274
- return;
275
- }
276
- const matchesRequest = sourceOrigin === requestUrl.origin || matchesHostHeader(sourceOrigin, request);
277
- const matchesConfiguredOrigin = config.allowedOrigins.some(
278
- (pattern) => matchesAllowedOrigin(sourceOrigin, pattern)
279
- );
280
- if (!matchesRequest && !matchesConfiguredOrigin) {
281
- throw new ServerActionRequestError(
282
- "INVALID_ORIGIN",
283
- 403,
284
- "Server action origin does not match the request origin"
285
- );
286
- }
287
- if (fetchSite === "cross-site" && !matchesConfiguredOrigin) {
288
- throw new ServerActionRequestError(
289
- "INVALID_ORIGIN",
290
- 403,
291
- "Cross-site server action request was rejected"
292
- );
293
- }
294
- }
295
- __name(validateServerActionRequest, "validateServerActionRequest");
296
- async function prepareServerActionRequest(request, config, kind, actionId) {
297
- validateServerActionRequest(request, config);
298
- if (kind === "javascript") {
299
- validateActionId(actionId);
300
- }
301
- const contentType = getSupportedContentType(request, kind);
302
- const bytes = await readBodyWithLimit(request, config.bodySizeLimit);
303
- if (kind === "form" || contentType === "multipart/form-data") {
304
- return {
305
- body: await parseFormData(request, bytes),
306
- contentType
307
- };
308
- }
309
- return {
310
- body: new TextDecoder().decode(bytes),
311
- contentType
312
- };
313
- }
314
- __name(prepareServerActionRequest, "prepareServerActionRequest");
315
- function createServerActionRequestErrorResponse(error) {
316
- if (!(error instanceof ServerActionRequestError)) {
317
- return null;
318
- }
319
- const headers = new Headers({
320
- "cache-control": "no-store",
321
- "content-type": "text/plain; charset=utf-8",
322
- "x-content-type-options": "nosniff"
323
- });
324
- if (error.status === 405) {
325
- headers.set("allow", "POST");
326
- }
327
- return new Response(getPublicErrorMessage(error.status), {
328
- status: error.status,
329
- headers
330
- });
331
- }
332
- __name(createServerActionRequestErrorResponse, "createServerActionRequestErrorResponse");
333
- function sanitizeServerActionError(error) {
334
- const declaredFailure = serializeServerFnFailure(error);
335
- if (declaredFailure) return declaredFailure;
336
- return {
337
- name: "ServerActionError",
338
- message: "Server function failed"
339
- };
340
- }
341
- __name(sanitizeServerActionError, "sanitizeServerActionError");
342
- async function runWithServerActionRequest(request, callback) {
343
- throwIfAborted(request.signal);
344
- const context = {
345
- request,
346
- signal: request.signal,
347
- invalidations: /* @__PURE__ */ new Set(),
348
- cacheTasks: /* @__PURE__ */ new Set()
349
- };
350
- return getServerActionStorage().run(context, async () => {
351
- try {
352
- const result = await callback();
353
- await Promise.all(context.cacheTasks);
354
- return result;
355
- } catch (error) {
356
- await Promise.allSettled(context.cacheTasks);
357
- throw error;
358
- }
359
- });
360
- }
361
- __name(runWithServerActionRequest, "runWithServerActionRequest");
362
- function getServerActionExecutionContext() {
363
- return getServerActionStorage().getStore();
364
- }
365
- __name(getServerActionExecutionContext, "getServerActionExecutionContext");
366
- function getServerActionSignal() {
367
- return getServerActionExecutionContext()?.signal ?? getFallbackAbortController().signal;
368
- }
369
- __name(getServerActionSignal, "getServerActionSignal");
370
- function getServerActionInvalidations() {
371
- return Array.from(getServerActionExecutionContext()?.invalidations ?? []);
372
- }
373
- __name(getServerActionInvalidations, "getServerActionInvalidations");
374
- subscribeFarmCacheInvalidation((key) => {
375
- getServerActionExecutionContext()?.invalidations.add(key);
376
- });
377
- subscribeFarmCacheTask((task) => {
378
- getServerActionExecutionContext()?.cacheTasks.add(task);
379
- });
380
- function getServerActionStorage() {
381
- const globalState2 = globalThis;
382
- if (!globalState2[SERVER_ACTION_STORAGE_KEY]) {
383
- globalState2[SERVER_ACTION_STORAGE_KEY] = new import_node_async_hooks.AsyncLocalStorage();
384
- }
385
- return globalState2[SERVER_ACTION_STORAGE_KEY];
386
- }
387
- __name(getServerActionStorage, "getServerActionStorage");
388
- function getFallbackAbortController() {
389
- const globalState2 = globalThis;
390
- if (!globalState2[FALLBACK_ABORT_CONTROLLER_KEY]) {
391
- globalState2[FALLBACK_ABORT_CONTROLLER_KEY] = new AbortController();
392
- }
393
- return globalState2[FALLBACK_ABORT_CONTROLLER_KEY];
394
- }
395
- __name(getFallbackAbortController, "getFallbackAbortController");
396
- function resolveSourceOrigin(request) {
397
- const result = getRequestSourceOrigin(request);
398
- if (!result.ok) {
399
- throw new ServerActionRequestError(
400
- "INVALID_ORIGIN",
401
- 403,
402
- result.reason === "opaque-origin" ? "Opaque origins are not allowed" : "Invalid request origin"
403
- );
404
- }
405
- return result.origin;
406
- }
407
- __name(resolveSourceOrigin, "resolveSourceOrigin");
408
- function validateActionId(actionId) {
409
- if (!actionId || actionId.length > 4096 || hasControlCharacters(actionId)) {
410
- throw new ServerActionRequestError("INVALID_ACTION_ID", 400, "Invalid server action id");
411
- }
412
- }
413
- __name(validateActionId, "validateActionId");
414
- function hasControlCharacters(value) {
415
- for (let index = 0; index < value.length; index++) {
416
- const code = value.charCodeAt(index);
417
- if (code <= 31 || code === 127) return true;
418
- }
419
- return false;
420
- }
421
- __name(hasControlCharacters, "hasControlCharacters");
422
- function getSupportedContentType(request, kind) {
423
- const header = request.headers.get("content-type")?.trim().toLowerCase();
424
- const contentType = header?.split(";", 1)[0]?.trim() ?? "";
425
- const supported = kind === "form" ? FORM_ACTION_CONTENT_TYPES : JAVASCRIPT_ACTION_CONTENT_TYPES;
426
- if (!supported.has(contentType)) {
427
- throw new ServerActionRequestError(
428
- "UNSUPPORTED_CONTENT_TYPE",
429
- 415,
430
- "Unsupported server action content type"
431
- );
432
- }
433
- return contentType;
434
- }
435
- __name(getSupportedContentType, "getSupportedContentType");
436
- async function readBodyWithLimit(request, limit) {
437
- const contentLength = request.headers.get("content-length")?.trim();
438
- if (contentLength) {
439
- if (!/^\d+$/.test(contentLength)) {
440
- throw new ServerActionRequestError(
441
- "INVALID_CONTENT_LENGTH",
442
- 400,
443
- "Invalid content-length header"
444
- );
445
- }
446
- if (Number(contentLength) > limit) {
447
- throw new ServerActionRequestError("BODY_TOO_LARGE", 413, "Server action body is too large");
448
- }
449
- }
450
- throwIfAborted(request.signal);
451
- if (!request.body) return new Uint8Array();
452
- const reader = request.body.getReader();
453
- const chunks = [];
454
- let total = 0;
455
- const cancelBodyRead = /* @__PURE__ */ __name(() => {
456
- void reader.cancel(request.signal.reason).catch(() => {
457
- });
458
- }, "cancelBodyRead");
459
- request.signal.addEventListener("abort", cancelBodyRead, { once: true });
460
- try {
461
- while (true) {
462
- throwIfAborted(request.signal);
463
- const { done, value } = await reader.read();
464
- if (done) break;
465
- if (!value) continue;
466
- total += value.byteLength;
467
- if (total > limit) {
468
- const error = new ServerActionRequestError(
469
- "BODY_TOO_LARGE",
470
- 413,
471
- "Server action body is too large"
472
- );
473
- void reader.cancel(error).catch(() => {
474
- });
475
- throw error;
476
- }
477
- chunks.push(value);
478
- }
479
- } catch (error) {
480
- if (request.signal.aborted) throwIfAborted(request.signal);
481
- throw error;
482
- } finally {
483
- request.signal.removeEventListener("abort", cancelBodyRead);
484
- reader.releaseLock();
485
- }
486
- throwIfAborted(request.signal);
487
- const body = new Uint8Array(total);
488
- let offset = 0;
489
- for (const chunk of chunks) {
490
- body.set(chunk, offset);
491
- offset += chunk.byteLength;
492
- }
493
- return body;
494
- }
495
- __name(readBodyWithLimit, "readBodyWithLimit");
496
- async function parseFormData(request, bytes) {
497
- const body = new ArrayBuffer(bytes.byteLength);
498
- new Uint8Array(body).set(bytes);
499
- const copy = new Request(request.url, {
500
- method: "POST",
501
- headers: request.headers,
502
- body
503
- });
504
- try {
505
- return await copy.formData();
506
- } catch {
507
- throw new ServerActionRequestError("INVALID_BODY", 400, "Invalid server action form body");
508
- }
509
- }
510
- __name(parseFormData, "parseFormData");
511
- function getPublicErrorMessage(status) {
512
- switch (status) {
513
- case 400:
514
- return "Bad Request";
515
- case 403:
516
- return "Forbidden";
517
- case 405:
518
- return "Method Not Allowed";
519
- case 413:
520
- return "Payload Too Large";
521
- case 415:
522
- return "Unsupported Media Type";
523
- default:
524
- return "Server Action Request Failed";
525
- }
526
- }
527
- __name(getPublicErrorMessage, "getPublicErrorMessage");
528
- function throwIfAborted(signal) {
529
- if (!signal.aborted) return;
530
- if (signal.reason !== void 0) throw signal.reason;
531
- throw new DOMException("The operation was aborted", "AbortError");
532
- }
533
- __name(throwIfAborted, "throwIfAborted");
534
- // Annotate the CommonJS export names for ESM import in node:
535
- 0 && (module.exports = {
536
- DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT,
537
- ServerActionRequestError,
538
- createServerActionRequestErrorResponse,
539
- getServerActionExecutionContext,
540
- getServerActionInvalidations,
541
- getServerActionSignal,
542
- prepareServerActionRequest,
543
- resolveServerActionsConfig,
544
- runWithServerActionRequest,
545
- sanitizeServerActionError,
546
- validateServerActionRequest
547
- });
8
+
9
+
10
+
11
+
12
+
13
+ var _chunkT5CERMEHcjs = require('./chunk-T5CERMEH.cjs');
14
+ require('./chunk-SVRTJOUF.cjs');
15
+ require('./chunk-EM6SBQKM.cjs');
16
+ require('./chunk-ZEG3OPIB.cjs');
17
+ require('./chunk-NO3WWW3N.cjs');
18
+ require('./chunk-S3JO3N4H.cjs');
19
+
20
+
21
+
22
+
23
+
24
+
25
+
26
+
27
+
28
+
29
+
30
+
31
+ exports.DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT = _chunkT5CERMEHcjs.DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT; exports.ServerActionRequestError = _chunkT5CERMEHcjs.ServerActionRequestError; exports.createServerActionRequestErrorResponse = _chunkT5CERMEHcjs.createServerActionRequestErrorResponse; exports.getServerActionExecutionContext = _chunkT5CERMEHcjs.getServerActionExecutionContext; exports.getServerActionInvalidations = _chunkT5CERMEHcjs.getServerActionInvalidations; exports.getServerActionSignal = _chunkT5CERMEHcjs.getServerActionSignal; exports.prepareServerActionRequest = _chunkT5CERMEHcjs.prepareServerActionRequest; exports.resolveServerActionsConfig = _chunkT5CERMEHcjs.resolveServerActionsConfig; exports.runWithServerActionRequest = _chunkT5CERMEHcjs.runWithServerActionRequest; exports.sanitizeServerActionError = _chunkT5CERMEHcjs.sanitizeServerActionError; exports.validateServerActionRequest = _chunkT5CERMEHcjs.validateServerActionRequest;