@finesoft/front 0.1.38 → 0.1.39

package/dist/chunk-XQ3UWZOS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../ssr/src/render.ts","../../ssr/src/create-render.ts","../../ssr/src/inject.ts","../../ssr/src/server-data.ts"],"sourcesContent":["/**\n * ssrRender — 通用 SSR 渲染管线\n *\n * 1. 创建 Framework + 注册 Controllers\n * 2. routeUrl → Intent\n * 3. dispatch → Page 数据\n * 4. 调用应用层提供的渲染函数\n */\n\nimport {\n\tFramework,\n\tcreateServerContext,\n\ttype BasePage,\n\ttype FrameworkConfig,\n\ttype MiddlewareResult,\n\ttype PostLoadContext,\n\ttype PrefetchedIntent,\n} from \"@finesoft/core\";\n\nexport interface SSRRenderOptions {\n\t/** 请求 URL */\n\turl: string;\n\t/** Framework 配置（含路由注册等） */\n\tframeworkConfig: FrameworkConfig;\n\t/** 注册 controllers 和路由的引导函数 */\n\tbootstrap: (framework: Framework) => void;\n\t/** 获取错误页面 */\n\tgetErrorPage: (status: number, message: string) => BasePage;\n\t/** 应用层渲染函数（如 Svelte SSR render） */\n\trenderApp: (page: BasePage, framework: Framework) => SSRAppResult;\n\t/** 可选的 SSR 请求上下文（如自定义 fetch） */\n\tssrContext?: SSRContext;\n}\n\n/** SSR 请求级上下文 */\nexport interface SSRContext {\n\t/** 自定义 fetch（如 Hono 内部路由回环） */\n\tfetch?: typeof globalThis.fetch;\n\t/** 原始 Request 对象（用于中间件读取 cookie/header） */\n\trequest?: Request;\n}\n\nexport interface SSRAppResult {\n\thtml: string;\n\thead: string;\n\tcss: string;\n}\n\nexport interface SSRRenderResult {\n\thtml: string;\n\thead: string;\n\tcss: string;\n\tserverData: PrefetchedIntent[];\n\t/** 该路由的渲染模式（由 Router 返回） */\n\trenderMode?: string;\n\t/** 中间件要求的重定向（服务端应返回 HTTP 301/302） */\n\tredirect?: { url: string; status: number };\n}\n\nexport async function ssrRender(\n\toptions: SSRRenderOptions,\n): Promise<SSRRenderResult> {\n\tconst {\n\t\turl,\n\t\tframeworkConfig,\n\t\tbootstrap,\n\t\tgetErrorPage,\n\t\trenderApp,\n\t\tssrContext,\n\t} = options;\n\n\t// 将 SSR 上下文中的 fetch 合并到 frameworkConfig，注入 DI 容器\n\tconst mergedConfig: FrameworkConfig = ssrContext?.fetch\n\t\t? { ...frameworkConfig, fetch: ssrContext.fetch }\n\t\t: frameworkConfig;\n\n\tconst framework = Framework.create(mergedConfig);\n\tbootstrap(framework);\n\n\ttry {\n\t\tconst parsed = new URL(url, \"http://localhost\");\n\t\tconst fullPath = parsed.pathname + parsed.search;\n\t\tconst match = framework.routeUrl(fullPath);\n\n\t\t// CSR 模式：跳过服务端渲染，返回空内容由客户端 JS 渲染\n\t\tif (match?.renderMode === \"csr\") {\n\t\t\treturn {\n\t\t\t\thtml: \"\",\n\t\t\t\thead: \"\",\n\t\t\t\tcss: \"\",\n\t\t\t\tserverData: [],\n\t\t\t\trenderMode: \"csr\",\n\t\t\t};\n\t\t}\n\n\t\tlet page: BasePage;\n\t\tlet serverData: PrefetchedIntent[] = [];\n\n\t\tif (match) {\n\t\t\t// ===== beforeLoad 中间件 =====\n\t\t\tconst navCtx = createServerContext({\n\t\t\t\turl: fullPath,\n\t\t\t\tintent: match.intent,\n\t\t\t\tcontainer: framework.container,\n\t\t\t\trequest: ssrContext?.request,\n\t\t\t});\n\t\t\tconst beforeResult = await framework.runBeforeLoad(\n\t\t\t\tnavCtx,\n\t\t\t\tmatch.beforeGuards,\n\t\t\t);\n\t\t\tif (beforeResult.kind !== \"next\") {\n\t\t\t\tconst earlyReturn = handleMiddlewareResult(\n\t\t\t\t\tbeforeResult,\n\t\t\t\t\tgetErrorPage,\n\t\t\t\t\trenderApp,\n\t\t\t\t\tframework,\n\t\t\t\t);\n\t\t\t\tif (earlyReturn) return earlyReturn;\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tpage = (await framework.dispatch(match.intent)) as BasePage;\n\t\t\t\tserverData = [{ intent: match.intent, data: page }];\n\t\t\t} catch (e) {\n\t\t\t\tconsole.error(\n\t\t\t\t\t`[SSR] dispatch failed for intent \"${match.intent.id}\":`,\n\t\t\t\t\te,\n\t\t\t\t);\n\t\t\t\tpage = getErrorPage(500, \"Internal error\");\n\t\t\t}\n\n\t\t\t// ===== afterLoad 中间件 =====\n\t\t\tconst postCtx: PostLoadContext = {\n\t\t\t\t...navCtx,\n\t\t\t\tpage,\n\t\t\t};\n\t\t\tconst afterResult = await framework.runAfterLoad(\n\t\t\t\tpostCtx,\n\t\t\t\tmatch.afterGuards,\n\t\t\t);\n\t\t\tif (afterResult.kind !== \"next\") {\n\t\t\t\tconst lateReturn = handleMiddlewareResult(\n\t\t\t\t\tafterResult,\n\t\t\t\t\tgetErrorPage,\n\t\t\t\t\trenderApp,\n\t\t\t\t\tframework,\n\t\t\t\t);\n\t\t\t\tif (lateReturn) return lateReturn;\n\t\t\t}\n\t\t} else {\n\t\t\tpage = getErrorPage(404, \"Page not found\");\n\t\t}\n\n\t\tconst result = renderApp(page, framework);\n\n\t\treturn {\n\t\t\thtml: result.html,\n\t\t\thead: result.head,\n\t\t\tcss: result.css,\n\t\t\tserverData,\n\t\t\trenderMode: match?.renderMode,\n\t\t};\n\t} finally {\n\t\tframework.dispose();\n\t}\n}\n\n/**\n * 将中间件结果转换为 SSRRenderResult（如果需要短路返回）。\n * 返回 null 表示继续正常流程。\n */\nfunction handleMiddlewareResult(\n\tresult: MiddlewareResult,\n\tgetErrorPage: (status: number, message: string) => BasePage,\n\trenderApp: (page: BasePage, framework: Framework) => SSRAppResult,\n\tframework: Framework,\n): SSRRenderResult | null {\n\tswitch (result.kind) {\n\t\tcase \"next\":\n\t\t\treturn null;\n\t\tcase \"redirect\":\n\t\t\treturn {\n\t\t\t\thtml: \"\",\n\t\t\t\thead: \"\",\n\t\t\t\tcss: \"\",\n\t\t\t\tserverData: [],\n\t\t\t\tredirect: { url: result.url, status: result.status },\n\t\t\t};\n\t\tcase \"rewrite\":\n\t\t\treturn {\n\t\t\t\thtml: \"\",\n\t\t\t\thead: \"\",\n\t\t\t\tcss: \"\",\n\t\t\t\tserverData: [],\n\t\t\t\tredirect: { url: result.url, status: 301 },\n\t\t\t};\n\t\tcase \"deny\": {\n\t\t\tconst errorPage = getErrorPage(result.status, result.message);\n\t\t\tconst rendered = renderApp(errorPage, framework);\n\t\t\treturn {\n\t\t\t\thtml: rendered.html,\n\t\t\t\thead: rendered.head,\n\t\t\t\tcss: rendered.css,\n\t\t\t\tserverData: [],\n\t\t\t};\n\t\t}\n\t}\n}\n","/**\n * createSSRRender — 工厂函数，返回可直接被 SSR 服务器调用的 render 函数\n *\n * 将一次性配置（bootstrap / getErrorPage / renderApp）绑定后，\n * 返回 `(url, locale) => Promise<SSRRenderResult>` 签名，\n * 与 @finesoft/server 的 SSRModule 接口对齐。\n */\n\nimport type { BasePage, Framework, FrameworkConfig } from \"@finesoft/core\";\nimport {\n\tssrRender,\n\ttype SSRAppResult,\n\ttype SSRContext,\n\ttype SSRRenderResult,\n} from \"./render\";\n\nexport interface SSRRenderConfig {\n\t/** 注册 controllers 和路由的引导函数 */\n\tbootstrap: (framework: Framework) => void;\n\n\t/** 获取错误页面 */\n\tgetErrorPage: (status: number, message: string) => BasePage;\n\n\t/**\n\t * 应用层渲染函数\n\t *\n\t * @param page - 当前页面数据\n\t * @param locale - 当前语言\n\t * @returns SSR 渲染结果 { html, head, css }\n\t */\n\trenderApp: (page: BasePage, locale: string) => SSRAppResult;\n\n\t/** Framework 构造配置（可选） */\n\tframeworkConfig?: FrameworkConfig;\n}\n\n/**\n * 创建 render 函数\n *\n * @returns `render(url, locale, ssrContext?)` — 供 @finesoft/server SSRModule 使用\n */\nexport function createSSRRender(\n\tconfig: SSRRenderConfig,\n): (\n\turl: string,\n\tlocale: string,\n\tssrContext?: SSRContext,\n) => Promise<SSRRenderResult> {\n\tconst { bootstrap, getErrorPage, renderApp, frameworkConfig } = config;\n\n\treturn (url: string, locale: string, ssrContext?: SSRContext) =>\n\t\tssrRender({\n\t\t\turl,\n\t\t\tframeworkConfig: frameworkConfig ?? {},\n\t\t\tbootstrap,\n\t\t\tgetErrorPage,\n\t\t\trenderApp: (page) => renderApp(page, locale),\n\t\t\tssrContext,\n\t\t});\n}\n","/**\n * injectSSRContent — 将 SSR 渲染结果注入 HTML 模板\n */\n\n/** SSR HTML 模板占位符常量 */\nexport const SSR_PLACEHOLDERS = {\n\tLANG: \"<!--ssr-lang-->\",\n\tHEAD: \"<!--ssr-head-->\",\n\tBODY: \"<!--ssr-body-->\",\n\tDATA: \"<!--ssr-data-->\",\n} as const;\n\nexport interface InjectSSROptions {\n\ttemplate: string;\n\tlocale: string;\n\thead: string;\n\tcss: string;\n\thtml: string;\n\tserializedData: string;\n}\n\nexport function injectSSRContent(options: InjectSSROptions): string {\n\tconst { template, locale, head, css, html, serializedData } = options;\n\tconst cssTag = css ? `<style>${css}</style>` : \"\";\n\n\treturn template\n\t\t.replace(SSR_PLACEHOLDERS.LANG, locale)\n\t\t.replace(SSR_PLACEHOLDERS.HEAD, `${head}\\n${cssTag}`)\n\t\t.replace(SSR_PLACEHOLDERS.BODY, html)\n\t\t.replace(\n\t\t\tSSR_PLACEHOLDERS.DATA,\n\t\t\t`<script id=\"serialized-server-data\" type=\"application/json\">${serializedData}</script>`,\n\t\t);\n}\n\n/**\n * CSR 空壳注入 — 只替换 lang，清空 body/head/data 占位符\n * 用于 renderMode === \"csr\" 的路由\n */\nexport function injectCSRShell(template: string, locale: string): string {\n\treturn template\n\t\t.replace(SSR_PLACEHOLDERS.LANG, locale)\n\t\t.replace(SSR_PLACEHOLDERS.HEAD, \"\")\n\t\t.replace(SSR_PLACEHOLDERS.BODY, \"\")\n\t\t.replace(SSR_PLACEHOLDERS.DATA, \"\");\n}\n","/**\n * serializeServerData — 将 PrefetchedIntents 数据序列化为安全的 JSON\n *\n * 返回值可安全嵌入 <script> 标签。\n */\n\nimport type { PrefetchedIntent } from \"@finesoft/core\";\n\nconst HTML_REPLACEMENTS: Record<string, string> = {\n\t\"<\": \"\\\\u003C\",\n\t\">\": \"\\\\u003E\",\n\t\"/\": \"\\\\u002F\",\n\t\"\\u2028\": \"\\\\u2028\",\n\t\"\\u2029\": \"\\\\u2029\",\n};\n\nconst HTML_ESCAPE_PATTERN = /[<>/\\u2028\\u2029]/g;\n\nexport function serializeServerData(data: PrefetchedIntent[]): string {\n\tconst json = JSON.stringify(data);\n\treturn json.replace(\n\t\tHTML_ESCAPE_PATTERN,\n\t\t(match) => HTML_REPLACEMENTS[match] ?? match,\n\t);\n}\n"],"mappings":";;;;;;AA2DA,eAAsB,UACrB,SAC2B;AAC3B,QAAM;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD,IAAI;AAGJ,QAAM,eAAgC,YAAY,QAC/C,EAAE,GAAG,iBAAiB,OAAO,WAAW,MAAM,IAC9C;AAEH,QAAM,YAAY,UAAU,OAAO,YAAY;AAC/C,YAAU,SAAS;AAEnB,MAAI;AACH,UAAM,SAAS,IAAI,IAAI,KAAK,kBAAkB;AAC9C,UAAM,WAAW,OAAO,WAAW,OAAO;AAC1C,UAAM,QAAQ,UAAU,SAAS,QAAQ;AAGzC,QAAI,OAAO,eAAe,OAAO;AAChC,aAAO;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,YAAY,CAAC;AAAA,QACb,YAAY;AAAA,MACb;AAAA,IACD;AAEA,QAAI;AACJ,QAAI,aAAiC,CAAC;AAEtC,QAAI,OAAO;AAEV,YAAM,SAAS,oBAAoB;AAAA,QAClC,KAAK;AAAA,QACL,QAAQ,MAAM;AAAA,QACd,WAAW,UAAU;AAAA,QACrB,SAAS,YAAY;AAAA,MACtB,CAAC;AACD,YAAM,eAAe,MAAM,UAAU;AAAA,QACpC;AAAA,QACA,MAAM;AAAA,MACP;AACA,UAAI,aAAa,SAAS,QAAQ;AACjC,cAAM,cAAc;AAAA,UACnB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACD;AACA,YAAI,YAAa,QAAO;AAAA,MACzB;AAEA,UAAI;AACH,eAAQ,MAAM,UAAU,SAAS,MAAM,MAAM;AAC7C,qBAAa,CAAC,EAAE,QAAQ,MAAM,QAAQ,MAAM,KAAK,CAAC;AAAA,MACnD,SAAS,GAAG;AACX,gBAAQ;AAAA,UACP,qCAAqC,MAAM,OAAO,EAAE;AAAA,UACpD;AAAA,QACD;AACA,eAAO,aAAa,KAAK,gBAAgB;AAAA,MAC1C;AAGA,YAAM,UAA2B;AAAA,QAChC,GAAG;AAAA,QACH;AAAA,MACD;AACA,YAAM,cAAc,MAAM,UAAU;AAAA,QACnC;AAAA,QACA,MAAM;AAAA,MACP;AACA,UAAI,YAAY,SAAS,QAAQ;AAChC,cAAM,aAAa;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACD;AACA,YAAI,WAAY,QAAO;AAAA,MACxB;AAAA,IACD,OAAO;AACN,aAAO,aAAa,KAAK,gBAAgB;AAAA,IAC1C;AAEA,UAAM,SAAS,UAAU,MAAM,SAAS;AAExC,WAAO;AAAA,MACN,MAAM,OAAO;AAAA,MACb,MAAM,OAAO;AAAA,MACb,KAAK,OAAO;AAAA,MACZ;AAAA,MACA,YAAY,OAAO;AAAA,IACpB;AAAA,EACD,UAAE;AACD,cAAU,QAAQ;AAAA,EACnB;AACD;AAMA,SAAS,uBACR,QACA,cACA,WACA,WACyB;AACzB,UAAQ,OAAO,MAAM;AAAA,IACpB,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,YAAY,CAAC;AAAA,QACb,UAAU,EAAE,KAAK,OAAO,KAAK,QAAQ,OAAO,OAAO;AAAA,MACpD;AAAA,IACD,KAAK;AACJ,aAAO;AAAA,QACN,MAAM;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,YAAY,CAAC;AAAA,QACb,UAAU,EAAE,KAAK,OAAO,KAAK,QAAQ,IAAI;AAAA,MAC1C;AAAA,IACD,KAAK,QAAQ;AACZ,YAAM,YAAY,aAAa,OAAO,QAAQ,OAAO,OAAO;AAC5D,YAAM,WAAW,UAAU,WAAW,SAAS;AAC/C,aAAO;AAAA,QACN,MAAM,SAAS;AAAA,QACf,MAAM,SAAS;AAAA,QACf,KAAK,SAAS;AAAA,QACd,YAAY,CAAC;AAAA,MACd;AAAA,IACD;AAAA,EACD;AACD;;;ACtKO,SAAS,gBACf,QAK6B;AAC7B,QAAM,EAAE,WAAW,cAAc,WAAW,gBAAgB,IAAI;AAEhE,SAAO,CAAC,KAAa,QAAgB,eACpC,UAAU;AAAA,IACT;AAAA,IACA,iBAAiB,mBAAmB,CAAC;AAAA,IACrC;AAAA,IACA;AAAA,IACA,WAAW,CAAC,SAAS,UAAU,MAAM,MAAM;AAAA,IAC3C;AAAA,EACD,CAAC;AACH;;;ACtDO,IAAM,mBAAmB;AAAA,EAC/B,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AACP;AAWO,SAAS,iBAAiB,SAAmC;AACnE,QAAM,EAAE,UAAU,QAAQ,MAAM,KAAK,MAAM,eAAe,IAAI;AAC9D,QAAM,SAAS,MAAM,UAAU,GAAG,aAAa;AAE/C,SAAO,SACL,QAAQ,iBAAiB,MAAM,MAAM,EACrC,QAAQ,iBAAiB,MAAM,GAAG,IAAI;AAAA,EAAK,MAAM,EAAE,EACnD,QAAQ,iBAAiB,MAAM,IAAI,EACnC;AAAA,IACA,iBAAiB;AAAA,IACjB,+DAA+D,cAAc;AAAA,EAC9E;AACF;AAMO,SAAS,eAAe,UAAkB,QAAwB;AACxE,SAAO,SACL,QAAQ,iBAAiB,MAAM,MAAM,EACrC,QAAQ,iBAAiB,MAAM,EAAE,EACjC,QAAQ,iBAAiB,MAAM,EAAE,EACjC,QAAQ,iBAAiB,MAAM,EAAE;AACpC;;;ACrCA,IAAM,oBAA4C;AAAA,EACjD,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,UAAU;AAAA,EACV,UAAU;AACX;AAEA,IAAM,sBAAsB;AAErB,SAAS,oBAAoB,MAAkC;AACrE,QAAM,OAAO,KAAK,UAAU,IAAI;AAChC,SAAO,KAAK;AAAA,IACX;AAAA,IACA,CAAC,UAAU,kBAAkB,KAAK,KAAK;AAAA,EACxC;AACD;","names":[]}

package/dist/index.cjs

@@ -395,7 +395,8 @@ var init_router = __esm({
     Router = class {
       routes = [];
       /** 添加路由规则 */
-      add(pattern, intentId, renderMode) {
+      add(pattern, intentId, renderModeOrOptions) {
+        const opts = typeof renderModeOrOptions === "string" ? { renderMode: renderModeOrOptions } : renderModeOrOptions ?? {};
         const paramNames = [];
         const regexStr = pattern.split(/(\/:[\w]+\??)/).map((segment) => {
           const paramMatch = segment.match(/^\/:(\w+)(\?)?$/);
@@ -410,7 +411,9 @@ var init_router = __esm({
           intentId,
           regex: new RegExp(`^${regexStr}/?$`),
           paramNames,
-          renderMode
+          renderMode: opts.renderMode,
+          beforeGuards: opts.beforeGuards,
+          afterGuards: opts.afterGuards
         });
         return this;
       }
@@ -432,7 +435,9 @@ var init_router = __esm({
             return {
               intent: { id: route.intentId, params },
               action: makeFlowAction(urlOrPath),
-              renderMode: route.renderMode
+              renderMode: route.renderMode,
+              beforeGuards: route.beforeGuards,
+              afterGuards: route.afterGuards
             };
           }
         }
@@ -507,6 +512,27 @@ var init_composite = __esm({
   }
 });
 
+// ../core/src/middleware/pipeline.ts
+async function runBeforeLoadGuards(guards, ctx) {
+  for (const guard of guards) {
+    const result = await guard(ctx);
+    if (result.kind !== "next") return result;
+  }
+  return { kind: "next" };
+}
+async function runAfterLoadGuards(guards, ctx) {
+  for (const guard of guards) {
+    const result = await guard(ctx);
+    if (result.kind !== "next") return result;
+  }
+  return { kind: "next" };
+}
+var init_pipeline = __esm({
+  "../core/src/middleware/pipeline.ts"() {
+    "use strict";
+  }
+});
+
 // ../core/src/prefetched-intents/stable-stringify.ts
 function stableStringify(obj, _seen) {
   if (obj === null || obj === void 0) return String(obj);
@@ -589,6 +615,7 @@ var init_framework = __esm({
     init_container();
     init_make_dependencies();
     init_dispatcher2();
+    init_pipeline();
     init_prefetched_intents();
     init_router();
     Framework = class _Framework {
@@ -597,6 +624,8 @@ var init_framework = __esm({
       actionDispatcher;
       router;
       prefetchedIntents;
+      beforeGuards = [];
+      afterGuards = [];
       constructor(container, prefetchedIntents) {
         this.container = container;
         this.intentDispatcher = new IntentDispatcher();
@@ -660,6 +689,25 @@ var init_framework = __esm({
       registerIntent(controller) {
         this.intentDispatcher.register(controller);
       }
+      // ===== Navigation Middleware =====
+      /** 注册 beforeLoad 守卫（路由匹配后、数据加载前） */
+      beforeLoad(guard) {
+        this.beforeGuards.push(guard);
+      }
+      /** 注册 afterLoad 守卫（数据加载后、渲染前） */
+      afterLoad(guard) {
+        this.afterGuards.push(guard);
+      }
+      /** 执行所有 beforeLoad 守卫（全局 → 路由级） */
+      runBeforeLoad(ctx, routeGuards) {
+        const guards = routeGuards?.length ? [...this.beforeGuards, ...routeGuards] : this.beforeGuards;
+        return runBeforeLoadGuards(guards, ctx);
+      }
+      /** 执行所有 afterLoad 守卫（全局 → 路由级） */
+      runAfterLoad(ctx, routeGuards) {
+        const guards = routeGuards?.length ? [...this.afterGuards, ...routeGuards] : this.afterGuards;
+        return runAfterLoadGuards(guards, ctx);
+      }
       /** 销毁 Framework 实例 */
       dispose() {
         this.container.dispose();
@@ -823,7 +871,11 @@ function defineRoutes(framework, definitions) {
       framework.registerIntent(def.controller);
       registeredIntents.add(def.intentId);
     }
-    framework.router.add(def.path, def.intentId, def.renderMode);
+    framework.router.add(def.path, def.intentId, {
+      renderMode: def.renderMode,
+      beforeGuards: def.beforeLoad,
+      afterGuards: def.afterLoad
+    });
   }
 }
 var init_define_routes = __esm({
@@ -943,6 +995,74 @@ var init_uuid = __esm({
   }
 });
 
+// ../core/src/middleware/context.ts
+function parseCookieString(str) {
+  const map = /* @__PURE__ */ new Map();
+  if (!str) return map;
+  for (const pair of str.split(";")) {
+    const idx = pair.indexOf("=");
+    if (idx === -1) continue;
+    const key = pair.slice(0, idx).trim();
+    const val = pair.slice(idx + 1).trim();
+    if (key) map.set(key, val);
+  }
+  return map;
+}
+function createServerContext(options) {
+  const { url, intent, container, request } = options;
+  const parsed = new URL(url, "http://localhost");
+  const cookieHeader = request?.headers.get("cookie") ?? "";
+  const cookies = parseCookieString(cookieHeader);
+  return {
+    url,
+    path: parsed.pathname,
+    params: intent.params ?? {},
+    intent,
+    isServer: true,
+    container,
+    getCookie: (name) => cookies.get(name),
+    getHeader: (name) => request?.headers.get(name) ?? void 0
+  };
+}
+function createBrowserContext(options) {
+  const { url, intent, container } = options;
+  const parsed = new URL(url, window.location.origin);
+  return {
+    url,
+    path: parsed.pathname,
+    params: intent.params ?? {},
+    intent,
+    isServer: false,
+    container,
+    getCookie: (name) => parseCookieString(document.cookie).get(name),
+    getHeader: () => void 0
+  };
+}
+var init_context = __esm({
+  "../core/src/middleware/context.ts"() {
+    "use strict";
+  }
+});
+
+// ../core/src/middleware/types.ts
+function next() {
+  return { kind: "next" };
+}
+function redirect(url, status = 302) {
+  return { kind: "redirect", url, status };
+}
+function rewrite(url) {
+  return { kind: "rewrite", url };
+}
+function deny(status = 403, message = "Forbidden") {
+  return { kind: "deny", status, message };
+}
+var init_types2 = __esm({
+  "../core/src/middleware/types.ts"() {
+    "use strict";
+  }
+});
+
 // ../core/src/index.ts
 var init_src = __esm({
   "../core/src/index.ts"() {
@@ -968,6 +1088,9 @@ var init_src = __esm({
     init_optional();
     init_url();
     init_uuid();
+    init_context();
+    init_pipeline();
+    init_types2();
   }
 });
 
@@ -1000,6 +1123,25 @@ async function ssrRender(options) {
     let page;
     let serverData = [];
     if (match) {
+      const navCtx = createServerContext({
+        url: fullPath,
+        intent: match.intent,
+        container: framework.container,
+        request: ssrContext?.request
+      });
+      const beforeResult = await framework.runBeforeLoad(
+        navCtx,
+        match.beforeGuards
+      );
+      if (beforeResult.kind !== "next") {
+        const earlyReturn = handleMiddlewareResult(
+          beforeResult,
+          getErrorPage,
+          renderApp,
+          framework
+        );
+        if (earlyReturn) return earlyReturn;
+      }
       try {
         page = await framework.dispatch(match.intent);
         serverData = [{ intent: match.intent, data: page }];
@@ -1010,6 +1152,23 @@ async function ssrRender(options) {
         );
         page = getErrorPage(500, "Internal error");
       }
+      const postCtx = {
+        ...navCtx,
+        page
+      };
+      const afterResult = await framework.runAfterLoad(
+        postCtx,
+        match.afterGuards
+      );
+      if (afterResult.kind !== "next") {
+        const lateReturn = handleMiddlewareResult(
+          afterResult,
+          getErrorPage,
+          renderApp,
+          framework
+        );
+        if (lateReturn) return lateReturn;
+      }
     } else {
       page = getErrorPage(404, "Page not found");
     }
@@ -1025,6 +1184,38 @@ async function ssrRender(options) {
     framework.dispose();
   }
 }
+function handleMiddlewareResult(result, getErrorPage, renderApp, framework) {
+  switch (result.kind) {
+    case "next":
+      return null;
+    case "redirect":
+      return {
+        html: "",
+        head: "",
+        css: "",
+        serverData: [],
+        redirect: { url: result.url, status: result.status }
+      };
+    case "rewrite":
+      return {
+        html: "",
+        head: "",
+        css: "",
+        serverData: [],
+        redirect: { url: result.url, status: 301 }
+      };
+    case "deny": {
+      const errorPage = getErrorPage(result.status, result.message);
+      const rendered = renderApp(errorPage, framework);
+      return {
+        html: rendered.html,
+        head: rendered.head,
+        css: rendered.css,
+        serverData: []
+      };
+    }
+  }
+}
 var init_render = __esm({
   "../ssr/src/render.ts"() {
     "use strict";
@@ -1294,17 +1485,22 @@ function createSSRApp(options) {
       const cached = isrCache.get(cacheKey);
       if (cached) return c.html(cached);
       const requestFetch = parentFetch ? createInternalFetch(parentFetch, ssrDepth + 1) : void 0;
+      const ssrContext = { request: c.req.raw };
+      if (requestFetch) ssrContext.fetch = requestFetch;
       const {
         html: appHtml,
         head,
         css,
         serverData,
-        renderMode
-      } = await render(
-        url,
-        locale,
-        requestFetch ? { fetch: requestFetch } : void 0
-      );
+        renderMode,
+        redirect: middlewareRedirect
+      } = await render(url, locale, ssrContext);
+      if (middlewareRedirect) {
+        return c.redirect(
+          middlewareRedirect.url,
+          middlewareRedirect.status
+        );
+      }
       if (renderMode === "csr") {
         return c.html(injectCSRShell(template, locale));
       }
@@ -1368,11 +1564,14 @@ __export(index_exports, {
   autoAdapter: () => autoAdapter,
   buildUrl: () => buildUrl,
   cloudflareAdapter: () => cloudflareAdapter,
+  createBrowserContext: () => createBrowserContext,
   createPrefetchedIntentsFromDom: () => createPrefetchedIntentsFromDom,
   createSSRApp: () => createSSRApp,
   createSSRRender: () => createSSRRender,
   createServer: () => createServer,
+  createServerContext: () => createServerContext,
   defineRoutes: () => defineRoutes,
+  deny: () => deny,
   deserializeServerData: () => deserializeServerData,
   detectRuntime: () => detectRuntime,
   finesoftFrontViteConfig: () => finesoftFrontViteConfig,
@@ -1391,10 +1590,12 @@ __export(index_exports, {
   makeFlowAction: () => makeFlowAction,
   mapEach: () => mapEach,
   netlifyAdapter: () => netlifyAdapter,
+  next: () => next,
   nodeAdapter: () => nodeAdapter,
   parseAcceptLanguage: () => parseAcceptLanguage,
   pipe: () => pipe,
   pipeAsync: () => pipeAsync,
+  redirect: () => redirect,
   registerActionHandlers: () => registerActionHandlers,
   registerExternalUrlHandler: () => registerExternalUrlHandler,
   registerFlowActionHandler: () => registerFlowActionHandler,
@@ -1405,6 +1606,9 @@ __export(index_exports, {
   resetFilterCache: () => resetFilterCache,
   resolveAdapter: () => resolveAdapter,
   resolveRoot: () => resolveRoot,
+  rewrite: () => rewrite,
+  runAfterLoadGuards: () => runAfterLoadGuards,
+  runBeforeLoadGuards: () => runBeforeLoadGuards,
   serializeServerData: () => serializeServerData,
   shouldLog: () => shouldLog,
   ssrRender: () => ssrRender,
@@ -1587,31 +1791,49 @@ function registerFlowActionHandler(deps) {
   const { framework, log, callbacks, updateApp } = deps;
   let isFirstPage = true;
   let navigationId = 0;
+  const MAX_REDIRECTS = 5;
   const defaultGetScrollable = () => document.getElementById("scrollable-page-override") || document.getElementById("scrollable-page") || document.documentElement;
   const history = new History(log, {
     getScrollablePageElement: deps.getScrollablePageElement ?? defaultGetScrollable
   });
-  framework.onAction(ACTION_KINDS.FLOW, async (action) => {
-    const flowAction = action;
-    const url = flowAction.url;
-    log.debug(`FlowAction \u2192 ${url}`);
-    if (flowAction.presentationContext === "modal") {
-      const match2 = framework.routeUrl(url);
-      if (match2) {
-        const page = await framework.dispatch(
-          match2.intent
-        );
-        callbacks.onModal(page);
-      }
+  async function navigateTo(url, redirectCount, thisNav) {
+    if (redirectCount >= MAX_REDIRECTS) {
+      log.error(
+        `Navigation redirect loop detected (${MAX_REDIRECTS} redirects), stopping at: ${url}`
+      );
       return;
     }
-    const thisNav = ++navigationId;
     const shouldReplace = isFirstPage || url === window.location.pathname + window.location.search;
     const match = framework.routeUrl(url);
     if (!match) {
       log.warn(`FlowAction: no route for ${url}`);
       return;
     }
+    const navCtx = createBrowserContext({
+      url,
+      intent: match.intent,
+      container: framework.container
+    });
+    const beforeResult = await framework.runBeforeLoad(
+      navCtx,
+      match.beforeGuards
+    );
+    if (beforeResult.kind === "redirect") {
+      log.debug(`beforeLoad \u2192 redirect to ${beforeResult.url}`);
+      await navigateTo(beforeResult.url, redirectCount + 1, thisNav);
+      return;
+    }
+    if (beforeResult.kind === "deny") {
+      log.warn(
+        `beforeLoad \u2192 denied (${beforeResult.status}): ${beforeResult.message}`
+      );
+      return;
+    }
+    if (beforeResult.kind === "rewrite") {
+      log.debug(`beforeLoad \u2192 rewrite to ${beforeResult.url}`);
+      await navigateTo(beforeResult.url, redirectCount + 1, thisNav);
+      return;
+    }
     const pagePromise = framework.dispatch(
       match.intent
     );
@@ -1627,12 +1849,33 @@ function registerFlowActionHandler(deps) {
     history.beforeTransition();
     updateApp({
       page: pagePromise.then(
-        (page) => {
+        async (page) => {
           if (thisNav !== navigationId) {
             log.info("FlowAction commit superseded", url);
             return page;
           }
-          const canonicalURL = url;
+          const postCtx = {
+            ...navCtx,
+            page
+          };
+          const afterResult = await framework.runAfterLoad(
+            postCtx,
+            match.afterGuards
+          );
+          if (afterResult.kind === "redirect") {
+            log.debug(`afterLoad \u2192 redirect to ${afterResult.url}`);
+            navigateTo(afterResult.url, redirectCount + 1, thisNav);
+            return page;
+          }
+          let canonicalURL = url;
+          if (afterResult.kind === "rewrite") {
+            canonicalURL = afterResult.url;
+            log.debug(`afterLoad \u2192 rewrite URL to ${canonicalURL}`);
+          }
+          if (afterResult.kind === "deny") {
+            log.warn(`afterLoad \u2192 denied (${afterResult.status})`);
+            return page;
+          }
           if (shouldReplace) {
             history.replaceState({ page }, canonicalURL);
           } else {
@@ -1662,6 +1905,23 @@ function registerFlowActionHandler(deps) {
       isFirstPage
     });
     isFirstPage = false;
+  }
+  framework.onAction(ACTION_KINDS.FLOW, async (action) => {
+    const flowAction = action;
+    const url = flowAction.url;
+    log.debug(`FlowAction \u2192 ${url}`);
+    if (flowAction.presentationContext === "modal") {
+      const match = framework.routeUrl(url);
+      if (match) {
+        const page = await framework.dispatch(
+          match.intent
+        );
+        callbacks.onModal(page);
+      }
+      return;
+    }
+    const thisNav = ++navigationId;
+    await navigateTo(url, 0, thisNav);
   });
   history.onPopState(async (url, cachedState) => {
     log.debug(`popstate \u2192 ${url}, cached=${!!cachedState}`);
@@ -1686,6 +1946,30 @@ function registerFlowActionHandler(deps) {
       });
       return;
     }
+    const navCtx = createBrowserContext({
+      url: parsed.pathname + parsed.search,
+      intent: routeMatch.intent,
+      container: framework.container
+    });
+    const beforeResult = await framework.runBeforeLoad(
+      navCtx,
+      routeMatch.beforeGuards
+    );
+    if (beforeResult.kind === "redirect") {
+      log.debug(`popstate beforeLoad \u2192 redirect to ${beforeResult.url}`);
+      const thisNav = ++navigationId;
+      await navigateTo(beforeResult.url, 0, thisNav);
+      return;
+    }
+    if (beforeResult.kind === "deny" || beforeResult.kind === "rewrite") {
+      if (beforeResult.kind === "deny") {
+        log.warn(`popstate beforeLoad \u2192 denied`);
+      } else {
+        const thisNav = ++navigationId;
+        await navigateTo(beforeResult.url, 0, thisNav);
+      }
+      return;
+    }
     const pagePromise = framework.dispatch(
       routeMatch.intent
     );
@@ -1875,7 +2159,7 @@ function _sanitizeProxyPath(raw) {
     const pattern = `"${config.prefix}/*"`;
     const headersJson = JSON.stringify(config.headers ?? {});
     const cacheStr = config.cache ? JSON.stringify(config.cache) : "null";
-    const redirect = config.followRedirects ? '"follow"' : '"manual"';
+    const redirect2 = config.followRedirects ? '"follow"' : '"manual"';
     let authCode = "";
     if (config.auth) {
       const envKey = JSON.stringify(config.auth.envKey);
@@ -1894,7 +2178,7 @@ function _sanitizeProxyPath(raw) {
   _reqUrl.searchParams.forEach((v, k) => _target.searchParams.set(k, v));
   const _headers = ${headersJson};${authCode}
   try {
-    const _resp = await fetch(_target.toString(), { headers: _headers, redirect: ${redirect} });
+    const _resp = await fetch(_target.toString(), { headers: _headers, redirect: ${redirect2} });
     const _body = await _resp.text();
     const _rh = { "Content-Type": _resp.headers.get("Content-Type") || "application/json" };
     if (${cacheStr}) _rh["Cache-Control"] = ${cacheStr};
@@ -3319,11 +3603,14 @@ function finesoftFrontViteConfig(options = {}) {
   autoAdapter,
   buildUrl,
   cloudflareAdapter,
+  createBrowserContext,
   createPrefetchedIntentsFromDom,
   createSSRApp,
   createSSRRender,
   createServer,
+  createServerContext,
   defineRoutes,
+  deny,
   deserializeServerData,
   detectRuntime,
   finesoftFrontViteConfig,
@@ -3342,10 +3629,12 @@ function finesoftFrontViteConfig(options = {}) {
   makeFlowAction,
   mapEach,
   netlifyAdapter,
+  next,
   nodeAdapter,
   parseAcceptLanguage,
   pipe,
   pipeAsync,
+  redirect,
   registerActionHandlers,
   registerExternalUrlHandler,
   registerFlowActionHandler,
@@ -3356,6 +3645,9 @@ function finesoftFrontViteConfig(options = {}) {
   resetFilterCache,
   resolveAdapter,
   resolveRoot,
+  rewrite,
+  runAfterLoadGuards,
+  runBeforeLoadGuards,
   serializeServerData,
   shouldLog,
   ssrRender,