@nanoforge-dev/editor 0.0.1 → 0.0.2-beta.394e65b

package/dist/server/index.js

@@ -1,10 +1,10 @@
-import { a as __commonJSMin, i as with_request_store, t as merge_tracing } from "./chunks/server-BlOy0jJl.js";
-import { Z as readable, _t as writable, mt as uneval } from "./chunks/dev-7V6fUCff.js";
-import { A as create_remote_key, B as stringify, C as validate_layout_server_exports, D as TRAILING_SLASH_PARAM, E as INVALIDATED_PARAM, F as normalize_error, G as assets, H as text_decoder, I as once, K as base, L as parse, M as get_relative_path, N as get_status, O as base64_encode, P as noop, R as parse_remote_arg, S as validate_layout_exports, T as validate_page_server_exports, U as text_encoder, V as stringify$1, W as app_dir, X as override, Z as reset, _ as normalize_path, a as set_read_implementation, b as strip_data_suffix, c as compact, d as find_route, f as has_data_suffix, g as noop_span, h as make_trackable, i as set_manifest, j as get_message, k as coalesce_to_error, l as decode_pathname, m as hash, n as options, o as add_data_suffix, p as has_resolution_suffix, r as read_implementation, s as add_resolution_suffix, t as get_hooks, u as disable_search, v as resolve, w as validate_page_exports, x as strip_resolution_suffix, z as split_remote_key } from "./chunks/internal-BqoJe00m.js";
-import { i as SvelteKitError, n as HttpError, r as Redirect, t as ActionFailure } from "./chunks/internal-BgFVxXcc.js";
-import { i as set_public_env, n as public_env, r as set_private_env } from "./chunks/shared-server-D--cyMsO.js";
-import { i as json, o as text, r as isRedirect, t as error } from "./chunks/exports-j3HcL9It.js";
-import { n as set_app } from "./chunks/app-l-cuFP__.js";
+import { t as __commonJSMin } from "./chunks/chunk-ByNZkrT6.js";
+import { St as writable, rt as readable, vt as uneval } from "./chunks/events-Bhh2w-5S.js";
+import { i as SvelteKitError, n as HttpError, r as Redirect, t as ActionFailure } from "./chunks/internal-DsA4iYdx.js";
+import { $ as text_encoder, A as with_request_store, B as coalesce_to_error, C as validate_layout_exports, D as merge_tracing, E as validate_page_server_exports, F as override, G as noop, H as get_message, I as reset, J as parse, K as normalize_error, L as INVALIDATED_PARAM, M as assets, N as base, Q as stringify$1, R as TRAILING_SLASH_PARAM, S as strip_resolution_suffix, T as validate_page_exports, U as get_relative_path, V as create_remote_key, W as get_status, X as split_remote_key, Y as parse_remote_arg, Z as stringify, _ as noop_span, a as set_read_implementation, c as compact, d as find_route, g as make_trackable, h as hash, i as set_manifest, j as app_dir, l as decode_pathname, m as has_resolution_suffix, n as options, o as add_data_suffix, p as has_data_suffix, q as once, r as read_implementation, s as add_resolution_suffix, t as get_hooks, u as disable_search, v as normalize_path, w as validate_layout_server_exports, x as strip_data_suffix, y as resolve, z as base64_encode } from "./chunks/internal2-DBpj29pr.js";
+import { i as json, o as text, r as isRedirect, t as error } from "./chunks/exports-CWOtdr_a.js";
+import { i as set_public_env, n as public_env, r as set_private_env } from "./chunks/shared-server-Cha0Qlv9.js";
+import { n as set_app } from "./chunks/app-DUeJj5RD.js";
 //#region .svelte-kit/adapter-bun/chunks/utils.js
 var ENDPOINT_METHODS = [
 	"GET",
@@ -20,9 +20,146 @@ var PAGE_METHODS = [
 	"POST",
 	"HEAD"
 ];
+var defaultParseOptions = {
+	decodeValues: true,
+	map: false,
+	silent: false,
+	split: "auto"
+};
+function isForbiddenKey(key) {
+	return typeof key !== "string" || key in {};
+}
+function createNullObj() {
+	return Object.create(null);
+}
+function isNonEmptyString(str) {
+	return typeof str === "string" && !!str.trim();
+}
+function parseString(setCookieValue, options) {
+	var parts = setCookieValue.split(";").filter(isNonEmptyString);
+	var parsed = parseNameValuePair(parts.shift());
+	var name = parsed.name;
+	var value = parsed.value;
+	options = options ? Object.assign({}, defaultParseOptions, options) : defaultParseOptions;
+	if (isForbiddenKey(name)) return null;
+	try {
+		value = options.decodeValues ? decodeURIComponent(value) : value;
+	} catch (e) {
+		console.error("set-cookie-parser: failed to decode cookie value. Set options.decodeValues=false to disable decoding.", e);
+	}
+	var cookie = createNullObj();
+	cookie.name = name;
+	cookie.value = value;
+	parts.forEach(function(part) {
+		var sides = part.split("=");
+		var key = sides.shift().trimLeft().toLowerCase();
+		if (isForbiddenKey(key)) return;
+		var value = sides.join("=");
+		if (key === "expires") cookie.expires = new Date(value);
+		else if (key === "max-age") {
+			var n = parseInt(value, 10);
+			if (!Number.isNaN(n)) cookie.maxAge = n;
+		} else if (key === "secure") cookie.secure = true;
+		else if (key === "httponly") cookie.httpOnly = true;
+		else if (key === "samesite") cookie.sameSite = value;
+		else if (key === "partitioned") cookie.partitioned = true;
+		else if (key) cookie[key] = value;
+	});
+	return cookie;
+}
+function parseNameValuePair(nameValuePairStr) {
+	var name = "";
+	var value = "";
+	var nameValueArr = nameValuePairStr.split("=");
+	if (nameValueArr.length > 1) {
+		name = nameValueArr.shift();
+		value = nameValueArr.join("=");
+	} else value = nameValuePairStr;
+	return {
+		name,
+		value
+	};
+}
+function parseSetCookie(input, options) {
+	options = options ? Object.assign({}, defaultParseOptions, options) : defaultParseOptions;
+	if (!input) if (!options.map) return [];
+	else return createNullObj();
+	if (input.headers) if (typeof input.headers.getSetCookie === "function") input = input.headers.getSetCookie();
+	else if (input.headers["set-cookie"]) input = input.headers["set-cookie"];
+	else {
+		var sch = input.headers[Object.keys(input.headers).find(function(key) {
+			return key.toLowerCase() === "set-cookie";
+		})];
+		if (!sch && input.headers.cookie && !options.silent) console.warn("Warning: set-cookie-parser appears to have been called on a request object. It is designed to parse Set-Cookie headers from responses, not Cookie headers from requests. Set the option {silent: true} to suppress this warning.");
+		input = sch;
+	}
+	var split = options.split;
+	var isArray = Array.isArray(input);
+	if (split === "auto") split = !isArray;
+	if (!isArray) input = [input];
+	input = input.filter(isNonEmptyString);
+	if (split) input = input.map(splitCookiesString).flat();
+	if (!options.map) return input.map(function(str) {
+		return parseString(str, options);
+	}).filter(Boolean);
+	else {
+		var cookies = createNullObj();
+		return input.reduce(function(cookies, str) {
+			var cookie = parseString(str, options);
+			if (cookie && !isForbiddenKey(cookie.name)) cookies[cookie.name] = cookie;
+			return cookies;
+		}, cookies);
+	}
+}
+function splitCookiesString(cookiesString) {
+	if (Array.isArray(cookiesString)) return cookiesString;
+	if (typeof cookiesString !== "string") return [];
+	var cookiesStrings = [];
+	var pos = 0;
+	var start;
+	var ch;
+	var lastComma;
+	var nextStart;
+	var cookiesSeparatorFound;
+	function skipWhitespace() {
+		while (pos < cookiesString.length && /\s/.test(cookiesString.charAt(pos))) pos += 1;
+		return pos < cookiesString.length;
+	}
+	function notSpecialChar() {
+		ch = cookiesString.charAt(pos);
+		return ch !== "=" && ch !== ";" && ch !== ",";
+	}
+	while (pos < cookiesString.length) {
+		start = pos;
+		cookiesSeparatorFound = false;
+		while (skipWhitespace()) {
+			ch = cookiesString.charAt(pos);
+			if (ch === ",") {
+				lastComma = pos;
+				pos += 1;
+				skipWhitespace();
+				nextStart = pos;
+				while (pos < cookiesString.length && notSpecialChar()) pos += 1;
+				if (pos < cookiesString.length && cookiesString.charAt(pos) === "=") {
+					cookiesSeparatorFound = true;
+					pos = nextStart;
+					cookiesStrings.push(cookiesString.substring(start, lastComma));
+					start = pos;
+				} else pos = lastComma + 1;
+			} else pos += 1;
+		}
+		if (!cookiesSeparatorFound || pos >= cookiesString.length) cookiesStrings.push(cookiesString.substring(start, cookiesString.length));
+	}
+	return cookiesStrings;
+}
+parseSetCookie.parseSetCookie = parseSetCookie;
+parseSetCookie.parse = parseSetCookie;
+parseSetCookie.parseString = parseString;
+parseSetCookie.splitCookiesString = splitCookiesString;
 /** @import { RemoteForm } from '@sveltejs/kit' */
 /** @import { BinaryFormMeta, InternalRemoteFormIssue } from 'types' */
 /** @import { StandardSchemaV1 } from '@standard-schema/spec' */
+var decoder = new TextDecoder();
 /**
 * Sets a value in a nested object using a path string, mutating the original object
 * @param {Record<string, any>} object
@@ -81,8 +218,6 @@ async function deserialize_binary_form(request) {
 		};
 	}
 	if (!request.body) throw deserialize_error("no body");
-	const content_length = parseInt(request.headers.get("content-length") ?? "");
-	if (Number.isNaN(content_length)) throw deserialize_error("invalid Content-Length header");
 	const reader = request.body.getReader();
 	/** @type {Array<Promise<Uint8Array<ArrayBuffer> | undefined>>} */
 	const chunks = [];
@@ -144,9 +279,7 @@ async function deserialize_binary_form(request) {
 	if (header[0] !== BINARY_FORM_VERSION) throw deserialize_error(`got version ${header[0]}, expected version ${BINARY_FORM_VERSION}`);
 	const header_view = new DataView(header.buffer, header.byteOffset, header.byteLength);
 	const data_length = header_view.getUint32(1, true);
-	if (HEADER_BYTES + data_length > content_length) throw deserialize_error("data overflow");
 	const file_offsets_length = header_view.getUint16(5, true);
-	if (HEADER_BYTES + data_length + file_offsets_length > content_length) throw deserialize_error("file offset table overflow");
 	const data_buffer = await get_buffer(HEADER_BYTES, data_length);
 	if (!data_buffer) throw deserialize_error("data too short");
 	/** @type {Array<number | undefined>} */
@@ -156,20 +289,19 @@ async function deserialize_binary_form(request) {
 	if (file_offsets_length > 0) {
 		const file_offsets_buffer = await get_buffer(HEADER_BYTES + data_length, file_offsets_length);
 		if (!file_offsets_buffer) throw deserialize_error("file offset table too short");
-		const parsed_offsets = JSON.parse(text_decoder.decode(file_offsets_buffer));
+		const parsed_offsets = JSON.parse(decoder.decode(file_offsets_buffer));
 		if (!Array.isArray(parsed_offsets) || parsed_offsets.some((n) => typeof n !== "number" || !Number.isInteger(n) || n < 0)) throw deserialize_error("invalid file offset table");
 		file_offsets = parsed_offsets;
 		files_start_offset = HEADER_BYTES + data_length + file_offsets_length;
 	}
 	/** @type {Array<{ offset: number, size: number }>} */
 	const file_spans = [];
-	const [data, meta] = parse(text_decoder.decode(data_buffer), { File: ([name, type, size, last_modified, index]) => {
+	const [data, meta] = parse(decoder.decode(data_buffer), { File: ([name, type, size, last_modified, index]) => {
 		if (typeof name !== "string" || typeof type !== "string" || typeof size !== "number" || typeof last_modified !== "number" || typeof index !== "number") throw deserialize_error("invalid file metadata");
 		let offset = file_offsets[index];
 		if (offset === void 0) throw deserialize_error("duplicate file offset table index");
 		file_offsets[index] = void 0;
 		offset += files_start_offset;
-		if (offset + size > content_length) throw deserialize_error("file data overflow");
 		file_spans.push({
 			offset,
 			size
@@ -294,7 +426,7 @@ var LazyFile = class LazyFile {
 		});
 	}
 	async text() {
-		return text_decoder.decode(await this.arrayBuffer());
+		return decoder.decode(await this.arrayBuffer());
 	}
 };
 var path_regex = /^[a-zA-Z_$]\w*(\.[a-zA-Z_$]\w*|\[\d+\])*$/;
@@ -324,8 +456,8 @@ function deep_set(object, keys, value) {
 		const key = keys[i];
 		check_prototype_pollution(key);
 		const is_array = /^\d+$/.test(keys[i + 1]);
-		const exists = Object.hasOwn(current, key);
-		const inner = current[key];
+		const inner = Object.hasOwn(current, key) ? current[key] : void 0;
+		const exists = inner != null;
 		if (exists && is_array !== Array.isArray(inner)) throw new Error(`Invalid array key ${keys[i + 1]}`);
 		if (!exists) current[key] = is_array ? [] : {};
 		current = current[key];
@@ -374,6 +506,22 @@ function negotiate(accept, types) {
 	return accepted;
 }
 /**
+* Reads all `Set-Cookie` headers as separate values. `Headers.get('set-cookie')`
+* collapses them into a single comma-joined string that browsers cannot parse, so
+* we use `Headers.getSetCookie()` where available and fall back to splitting the
+* joined string otherwise.
+*
+* TODO 3.0 `getSetCookie` is available in Node 19.7+; once we drop support for
+* older versions we can use it directly and remove the `splitCookiesString` fallback
+* @param {Headers} headers
+* @returns {string[]}
+*/
+function get_set_cookies(headers) {
+	if (typeof headers.getSetCookie === "function") return headers.getSetCookie();
+	const set_cookie = headers.get("set-cookie");
+	return set_cookie ? splitCookiesString(set_cookie) : [];
+}
+/**
 * Returns `true` if the request contains a `content-type` header with the given type
 * @param {Request} request
 * @param  {...string} types
@@ -423,6 +571,7 @@ function escape_html(str, is_attr) {
 		return dict[match] ?? `&#${match.charCodeAt(0)};`;
 	});
 }
+/** @import { ServerHooks } from 'types' */
 /**
 * @param {Partial<Record<import('types').HttpMethod, any>>} mod
 * @param {import('types').HttpMethod} method
@@ -560,6 +709,21 @@ function get_node_type(node_id) {
 	if (!filename) return "unknown";
 	return filename.split(".").slice(0, -1).join(".");
 }
+/**
+* Creates a serialiser for non-arbitrary POJOs using the app's transport hook
+* @param {ServerHooks['transport']} transport
+* @returns {(thing: unknown) => string | undefined}
+*/
+function create_replacer(transport) {
+	/** @param {unknown} thing */
+	const replacer = (thing) => {
+		for (const key in transport) {
+			const encoded = transport[key].encode(thing);
+			if (encoded) return `app.decode('${key}', ${uneval(encoded, replacer)})`;
+		}
+	};
+	return replacer;
+}
 //#endregion
 //#region .svelte-kit/adapter-bun/index.js
 /** @see https://github.com/microsoft/TypeScript/blob/904e7dd97dc8da1352c8e05d70829dff17c73214/src/lib/es2024.promise.d.ts */
@@ -823,12 +987,7 @@ async function call_action(event, event_state, actions) {
 * @param {ServerHooks['transport']} transport
 */
 function uneval_action_response(data, route_id, transport) {
-	const replacer = (thing) => {
-		for (const key in transport) {
-			const encoded = transport[key].encode(thing);
-			if (encoded) return `app.decode('${key}', ${uneval(encoded, replacer)})`;
-		}
-	};
+	const replacer = create_replacer(transport);
 	return try_serialize(data, (value) => uneval(value, replacer), route_id);
 }
 /**
@@ -998,6 +1157,7 @@ function server_data_serializer_json(event, event_state, options) {
 	const iterator = create_async_iterator();
 	const reducers = {
 		...Object.fromEntries(Object.entries(options.hooks.transport).map(([key, value]) => [key, value.encode])),
+		/** @param {any} thing */
 		Promise: (thing) => {
 			if (typeof thing?.then !== "function") return;
 			const id = promise_id++;
@@ -1110,6 +1270,7 @@ async function load_server_data({ event, event_state, state, node, parent }) {
 						new URL(info instanceof Request ? info.url : info, event.url);
 						return event.fetch(info, init);
 					},
+					/** @param {string[]} deps */
 					depends: (...deps) => {
 						for (const dep of deps) {
 							const { href } = new URL(dep, event.url);
@@ -1331,10 +1492,14 @@ function create_universal_fetch(event, state, fetched, csr, resolve_opts) {
 async function stream_to_string(stream) {
 	let result = "";
 	const reader = stream.getReader();
+	const decoder = new TextDecoder();
 	while (true) {
 		const { done, value } = await reader.read();
-		if (done) break;
-		result += text_decoder.decode(value);
+		if (done) {
+			result += decoder.decode();
+			break;
+		}
+		result += decoder.decode(value, { stream: true });
 	}
 	return result;
 }
@@ -1950,18 +2115,6 @@ async function render_response({ branch, fetched, options, manifest, state, page
 		} finally {
 			reset();
 		}
-		for (const { node } of branch) {
-			for (const url of node.imports) modulepreloads.add(url);
-			for (const url of node.stylesheets) stylesheets.add(url);
-			for (const url of node.fonts) fonts.add(url);
-			if (node.inline_styles && !client.inline) Object.entries(await node.inline_styles()).forEach(([filename, css]) => {
-				if (typeof css === "string") {
-					inline_styles.set(filename, css);
-					return;
-				}
-				inline_styles.set(filename, css(`${assets$1}/${app_dir}/immutable/assets`, assets$1));
-			});
-		}
 	} else rendered = {
 		head: "",
 		html: "",
@@ -1971,6 +2124,18 @@ async function render_response({ branch, fetched, options, manifest, state, page
 		},
 		hashes: { script: [] }
 	};
+	for (const { node } of branch) {
+		for (const url of node.imports) modulepreloads.add(url);
+		for (const url of node.stylesheets) stylesheets.add(url);
+		for (const url of node.fonts) fonts.add(url);
+		if (node.inline_styles && !client.inline) Object.entries(await node.inline_styles()).forEach(([filename, css]) => {
+			if (typeof css === "string") {
+				inline_styles.set(filename, css);
+				return;
+			}
+			inline_styles.set(filename, css(`${assets$1}/${app_dir}/immutable/assets`, assets$1));
+		});
+	}
 	const head = new Head(rendered.head, !!state.prerendering);
 	let body = rendered.html;
 	/** @param {string} path */
@@ -2107,7 +2272,7 @@ async function render_response({ branch, fetched, options, manifest, state, page
 					if (!entry.serialize) continue;
 					const remote_key = create_remote_key(internals.id, key);
 					const store = internals.type === "prerender" ? prerender : query;
-					if (event_state.remote.refreshes?.[remote_key] !== void 0) store[remote_key] = await entry.data;
+					if (event_state.remote.refreshes?.has(remote_key) || event_state.remote.reconnects?.has(remote_key)) store[remote_key] = await entry.data;
 					else {
 						const result = await Promise.race([Promise.resolve(entry.data).then((v) => ({
 							settled: true,
@@ -2125,12 +2290,7 @@ async function render_response({ branch, fetched, options, manifest, state, page
 					}
 				}
 			}
-			const replacer = (thing) => {
-				for (const key in options.hooks.transport) {
-					const encoded = options.hooks.transport[key].encode(thing);
-					if (encoded) return `app.decode('${key}', ${uneval(encoded, replacer)})`;
-				}
-			};
+			const replacer = create_replacer(options.hooks.transport);
 			if (Object.keys(query).length > 0) serialized_query_data = `${global}.query = ${uneval(query, replacer)};\n\n\t\t\t\t\t\t`;
 			if (Object.keys(prerender).length > 0) serialized_prerender_data = `${global}.prerender = ${uneval(prerender, replacer)};\n\n\t\t\t\t\t\t`;
 		}
@@ -2277,6 +2437,7 @@ var Head = class {
 	}
 };
 var PageNodes = class {
+	/** All layout nodes and the page node, if any */
 	data;
 	/**
 	* @param {Array<import('types').SSRNode | undefined>} nodes
@@ -2491,7 +2652,8 @@ async function handle_remote_call_internal(event, state, options, manifest, id)
 			return json({
 				type: "result",
 				result: stringify(result, transport),
-				refreshes: result.issues ? void 0 : await serialize_refreshes()
+				refreshes: result.issues ? void 0 : await serialize_singleflight(state.remote.refreshes),
+				reconnects: result.issues ? void 0 : await serialize_singleflight(state.remote.reconnects)
 			});
 		}
 		if (internals.type === "command") {
@@ -2505,9 +2667,77 @@ async function handle_remote_call_internal(event, state, options, manifest, id)
 					event,
 					state
 				}, () => fn(arg)), transport),
-				refreshes: await serialize_refreshes()
+				refreshes: await serialize_singleflight(state.remote.refreshes),
+				reconnects: await serialize_singleflight(state.remote.reconnects)
 			});
 		}
+		if (internals.type === "query_live") {
+			if (event.request.method !== "GET") throw new SvelteKitError(405, "Method Not Allowed", `\`query.live\` functions must be invoked via GET request, not ${event.request.method}`);
+			const payload = new URL(event.request.url).searchParams.get("payload");
+			const generator = internals.run(event, state, parse_remote_arg(payload, transport));
+			const encoder = new TextEncoder();
+			/**
+			* @param {ReadableStreamDefaultController} controller
+			* @param {any} payload
+			*/
+			function send(controller, payload) {
+				controller.enqueue(encoder.encode(JSON.stringify(payload) + "\n"));
+			}
+			let closed = false;
+			/** @type {string | undefined} */
+			let result = void 0;
+			async function cancel() {
+				if (closed) return;
+				closed = true;
+				await generator.return(void 0);
+			}
+			event.request.signal.addEventListener("abort", cancel, { once: true });
+			return new Response(new ReadableStream({
+				async pull(controller) {
+					if (event.request.signal.aborted) {
+						await cancel();
+						controller.close();
+						return;
+					}
+					try {
+						while (true) {
+							const { value, done } = await generator.next();
+							if (done) {
+								await cancel();
+								controller.close();
+								return;
+							}
+							if (result !== (result = stringify(value, transport))) {
+								send(controller, {
+									type: "result",
+									result
+								});
+								return;
+							}
+						}
+					} catch (error) {
+						if (!event.request.signal.aborted) if (error instanceof Redirect) send(controller, {
+							type: "redirect",
+							location: error.location
+						});
+						else {
+							const status = error instanceof HttpError || error instanceof SvelteKitError ? error.status : 500;
+							send(controller, {
+								type: "error",
+								error: await handle_error_and_jsonify(event, state, options, error),
+								status
+							});
+						}
+						await cancel();
+						controller.close();
+					}
+				},
+				cancel
+			}), { headers: {
+				"cache-control": "private, no-store",
+				"content-type": "application/x-ndjson"
+			} });
+		}
 		const payload = internals.type === "prerender" ? additional_args : new URL(event.request.url).searchParams.get("payload");
 		return json({
 			type: "result",
@@ -2520,7 +2750,8 @@ async function handle_remote_call_internal(event, state, options, manifest, id)
 		if (error instanceof Redirect) return json({
 			type: "redirect",
 			location: error.location,
-			refreshes: await serialize_refreshes()
+			refreshes: await serialize_singleflight(state.remote.refreshes),
+			reconnects: await serialize_singleflight(state.remote.reconnects)
 		});
 		const status = error instanceof HttpError || error instanceof SvelteKitError ? error.status : 500;
 		return json({
@@ -2532,11 +2763,10 @@ async function handle_remote_call_internal(event, state, options, manifest, id)
 			headers: { "cache-control": "private, no-store" }
 		});
 	}
-	async function serialize_refreshes() {
-		const refreshes = state.remote.refreshes ?? {};
-		const entries = Object.entries(refreshes);
-		if (entries.length === 0) return;
-		const results = await Promise.all(entries.map(async ([key, promise]) => {
+	/** @param {Map<string, Promise<any>> | null} map */
+	async function serialize_singleflight(map) {
+		if (!map || map.size === 0) return;
+		const results = await Promise.all(Array.from(map, async ([key, promise]) => {
 			try {
 				return [key, {
 					type: "result",
@@ -2639,19 +2869,21 @@ function get_remote_id(url) {
 function get_remote_action(url) {
 	return url.searchParams.get("/remote");
 }
+/** @import { ActionResult, RequestEvent, SSRManifest } from '@sveltejs/kit' */
+/** @import { PageNodeIndexes, RequestState, RequiredResolveOptions, ServerDataNode, SSRComponent, SSRNode, SSROptions, SSRState } from 'types' */
 /**
 * The maximum request depth permitted before assuming we're stuck in an infinite loop
 */
 var MAX_DEPTH = 10;
 /**
-* @param {import('@sveltejs/kit').RequestEvent} event
-* @param {import('types').RequestState} event_state
-* @param {import('types').PageNodeIndexes} page
-* @param {import('types').SSROptions} options
-* @param {import('@sveltejs/kit').SSRManifest} manifest
-* @param {import('types').SSRState} state
+* @param {RequestEvent} event
+* @param {RequestState} event_state
+* @param {PageNodeIndexes} page
+* @param {SSROptions} options
+* @param {SSRManifest} manifest
+* @param {SSRState} state
 * @param {import('../../../utils/page_nodes.js').PageNodes} nodes
-* @param {import('types').RequiredResolveOptions} resolve_opts
+* @param {RequiredResolveOptions} resolve_opts
 * @returns {Promise<Response>}
 */
 async function render_page(event, event_state, page, options, manifest, state, nodes, resolve_opts) {
@@ -2660,7 +2892,7 @@ async function render_page(event, event_state, page, options, manifest, state, n
 	try {
 		const leaf_node = nodes.page();
 		let status = 200;
-		/** @type {import('@sveltejs/kit').ActionResult | undefined} */
+		/** @type {ActionResult | undefined} */
 		let action_result = void 0;
 		if (is_action_request(event)) {
 			const remote_id = get_remote_action(event.url);
@@ -2682,7 +2914,13 @@ async function render_page(event, event_state, page, options, manifest, state, n
 		const ssr = nodes.ssr();
 		const csr = nodes.csr();
 		if (ssr === false && !(state.prerendering && should_prerender_data)) return await render_response({
-			branch: [],
+			branch: compact(nodes.data).map((node) => {
+				return {
+					node,
+					data: null,
+					server_data: null
+				};
+			}),
 			fetched,
 			page_config: {
 				ssr: false,
@@ -2704,7 +2942,7 @@ async function render_page(event, event_state, page, options, manifest, state, n
 		let load_error = null;
 		const data_serializer = server_data_serializer(event, event_state, options);
 		const data_serializer_json = state.prerendering && should_prerender_data ? server_data_serializer_json(event, event_state, options) : null;
-		/** @type {Array<Promise<import('types').ServerDataNode | null>>} */
+		/** @type {Array<Promise<ServerDataNode | null>>} */
 		const server_promises = nodes.data.map((node, i) => {
 			if (load_error) throw load_error;
 			return Promise.resolve().then(async () => {
@@ -2846,7 +3084,7 @@ async function render_page(event, event_state, page, options, manifest, state, n
 			},
 			status,
 			error: null,
-			branch: !ssr ? [] : compact(branch),
+			branch: compact(branch),
 			action_result,
 			fetched,
 			data_serializer: !ssr ? server_data_serializer(event, event_state, options) : data_serializer,
@@ -2868,14 +3106,14 @@ async function render_page(event, event_state, page, options, manifest, state, n
 }
 /**
 *
-* @param {import('types').SSROptions} options
+* @param {SSROptions} options
 * @param {boolean} ssr
 * @param {Array<import('./types.js').Loaded | null>} branch
-* @param {import('types').PageNodeIndexes} page
-* @param {import('@sveltejs/kit').SSRManifest} manifest
+* @param {PageNodeIndexes} page
+* @param {SSRManifest} manifest
 */
 async function load_error_components(options, ssr, branch, page, manifest) {
-	/** @type {Array<import('types').SSRComponent | undefined> | undefined} */
+	/** @type {Array<SSRComponent | undefined> | undefined} */
 	let error_components;
 	if (options.server_error_boundaries && ssr) {
 		let last_idx = -1;
@@ -2997,6 +3235,12 @@ function redirect_json_response(redirect) {
 		location: redirect.location
 	});
 }
+/*!
+* cookie
+* Copyright(c) 2012-2014 Roman Shtylman
+* Copyright(c) 2015 Douglas Christopher Wilson
+* MIT Licensed
+*/
 var import_cookie = (/* @__PURE__ */ __commonJSMin(((exports) => {
 	/**
 	* Module exports.
@@ -3205,6 +3449,10 @@ function get_cookies(request, url) {
 	};
 	/** @type {import('@sveltejs/kit').Cookies} */
 	const cookies = {
+		/**
+		* @param {string} name
+		* @param {import('cookie').CookieParseOptions} [opts]
+		*/
 		get(name, opts) {
 			const best_match = Array.from(new_cookies.values()).filter((c) => {
 				return c.name === name && domain_matches(url.hostname, c.options.domain) && path_matches(url.pathname, c.options.path);
@@ -3212,6 +3460,9 @@ function get_cookies(request, url) {
 			if (best_match) return best_match.options.maxAge === 0 ? void 0 : best_match.value;
 			return (0, import_cookie.parse)(header, { decode: opts?.decode })[name];
 		},
+		/**
+		* @param {import('cookie').CookieParseOptions} [opts]
+		*/
 		getAll(opts) {
 			const cookies = (0, import_cookie.parse)(header, { decode: opts?.decode });
 			const lookup = /* @__PURE__ */ new Map();
@@ -3225,6 +3476,11 @@ function get_cookies(request, url) {
 				value
 			}));
 		},
+		/**
+		* @param {string} name
+		* @param {string} value
+		* @param {import('./page/types.js').Cookie['options']} options
+		*/
 		set(name, value, options) {
 			const illegal_characters = name.match(INVALID_COOKIE_CHARACTER_REGEX);
 			if (illegal_characters) console.warn(`The cookie name "${name}" will be invalid in SvelteKit 3.0 as it contains ${illegal_characters.join(" and ")}. See RFC 2616 for more details https://datatracker.ietf.org/doc/html/rfc2616#section-2.2`);
@@ -3234,6 +3490,10 @@ function get_cookies(request, url) {
 				...options
 			});
 		},
+		/**
+		* @param {string} name
+		*  @param {import('./page/types.js').Cookie['options']} options
+		*/
 		delete(name, options) {
 			validate_options(options);
 			cookies.set(name, "", {
@@ -3241,6 +3501,11 @@ function get_cookies(request, url) {
 				maxAge: 0
 			});
 		},
+		/**
+		* @param {string} name
+		* @param {string} value
+		*  @param {import('./page/types.js').Cookie['options']} options
+		*/
 		serialize(name, value, options) {
 			validate_options(options);
 			let path = options.path;
@@ -3351,142 +3616,6 @@ function add_cookies_to_headers(headers, cookies) {
 		}
 	}
 }
-var defaultParseOptions = {
-	decodeValues: true,
-	map: false,
-	silent: false,
-	split: "auto"
-};
-function isForbiddenKey(key) {
-	return typeof key !== "string" || key in {};
-}
-function createNullObj() {
-	return Object.create(null);
-}
-function isNonEmptyString(str) {
-	return typeof str === "string" && !!str.trim();
-}
-function parseString(setCookieValue, options) {
-	var parts = setCookieValue.split(";").filter(isNonEmptyString);
-	var parsed = parseNameValuePair(parts.shift());
-	var name = parsed.name;
-	var value = parsed.value;
-	options = options ? Object.assign({}, defaultParseOptions, options) : defaultParseOptions;
-	if (isForbiddenKey(name)) return null;
-	try {
-		value = options.decodeValues ? decodeURIComponent(value) : value;
-	} catch (e) {
-		console.error("set-cookie-parser: failed to decode cookie value. Set options.decodeValues=false to disable decoding.", e);
-	}
-	var cookie = createNullObj();
-	cookie.name = name;
-	cookie.value = value;
-	parts.forEach(function(part) {
-		var sides = part.split("=");
-		var key = sides.shift().trimLeft().toLowerCase();
-		if (isForbiddenKey(key)) return;
-		var value = sides.join("=");
-		if (key === "expires") cookie.expires = new Date(value);
-		else if (key === "max-age") {
-			var n = parseInt(value, 10);
-			if (!Number.isNaN(n)) cookie.maxAge = n;
-		} else if (key === "secure") cookie.secure = true;
-		else if (key === "httponly") cookie.httpOnly = true;
-		else if (key === "samesite") cookie.sameSite = value;
-		else if (key === "partitioned") cookie.partitioned = true;
-		else if (key) cookie[key] = value;
-	});
-	return cookie;
-}
-function parseNameValuePair(nameValuePairStr) {
-	var name = "";
-	var value = "";
-	var nameValueArr = nameValuePairStr.split("=");
-	if (nameValueArr.length > 1) {
-		name = nameValueArr.shift();
-		value = nameValueArr.join("=");
-	} else value = nameValuePairStr;
-	return {
-		name,
-		value
-	};
-}
-function parseSetCookie(input, options) {
-	options = options ? Object.assign({}, defaultParseOptions, options) : defaultParseOptions;
-	if (!input) if (!options.map) return [];
-	else return createNullObj();
-	if (input.headers) if (typeof input.headers.getSetCookie === "function") input = input.headers.getSetCookie();
-	else if (input.headers["set-cookie"]) input = input.headers["set-cookie"];
-	else {
-		var sch = input.headers[Object.keys(input.headers).find(function(key) {
-			return key.toLowerCase() === "set-cookie";
-		})];
-		if (!sch && input.headers.cookie && !options.silent) console.warn("Warning: set-cookie-parser appears to have been called on a request object. It is designed to parse Set-Cookie headers from responses, not Cookie headers from requests. Set the option {silent: true} to suppress this warning.");
-		input = sch;
-	}
-	var split = options.split;
-	var isArray = Array.isArray(input);
-	if (split === "auto") split = !isArray;
-	if (!isArray) input = [input];
-	input = input.filter(isNonEmptyString);
-	if (split) input = input.map(splitCookiesString).flat();
-	if (!options.map) return input.map(function(str) {
-		return parseString(str, options);
-	}).filter(Boolean);
-	else {
-		var cookies = createNullObj();
-		return input.reduce(function(cookies, str) {
-			var cookie = parseString(str, options);
-			if (cookie && !isForbiddenKey(cookie.name)) cookies[cookie.name] = cookie;
-			return cookies;
-		}, cookies);
-	}
-}
-function splitCookiesString(cookiesString) {
-	if (Array.isArray(cookiesString)) return cookiesString;
-	if (typeof cookiesString !== "string") return [];
-	var cookiesStrings = [];
-	var pos = 0;
-	var start;
-	var ch;
-	var lastComma;
-	var nextStart;
-	var cookiesSeparatorFound;
-	function skipWhitespace() {
-		while (pos < cookiesString.length && /\s/.test(cookiesString.charAt(pos))) pos += 1;
-		return pos < cookiesString.length;
-	}
-	function notSpecialChar() {
-		ch = cookiesString.charAt(pos);
-		return ch !== "=" && ch !== ";" && ch !== ",";
-	}
-	while (pos < cookiesString.length) {
-		start = pos;
-		cookiesSeparatorFound = false;
-		while (skipWhitespace()) {
-			ch = cookiesString.charAt(pos);
-			if (ch === ",") {
-				lastComma = pos;
-				pos += 1;
-				skipWhitespace();
-				nextStart = pos;
-				while (pos < cookiesString.length && notSpecialChar()) pos += 1;
-				if (pos < cookiesString.length && cookiesString.charAt(pos) === "=") {
-					cookiesSeparatorFound = true;
-					pos = nextStart;
-					cookiesStrings.push(cookiesString.substring(start, lastComma));
-					start = pos;
-				} else pos = lastComma + 1;
-			} else pos += 1;
-		}
-		if (!cookiesSeparatorFound || pos >= cookiesString.length) cookiesStrings.push(cookiesString.substring(start, cookiesString.length));
-	}
-	return cookiesStrings;
-}
-parseSetCookie.parseSetCookie = parseSetCookie;
-parseSetCookie.parse = parseSetCookie;
-parseSetCookie.parseString = parseString;
-parseSetCookie.splitCookiesString = splitCookiesString;
 /**
 * @param {{
 *   event: import('@sveltejs/kit').RequestEvent;
@@ -3556,8 +3685,7 @@ function create_fetch({ event, options, manifest, state, get_cookie_header, set_
 				if (!request.headers.has("accept")) request.headers.set("accept", "*/*");
 				if (!request.headers.has("accept-language")) request.headers.set("accept-language", event.request.headers.get("accept-language"));
 				const response = await internal_fetch(request, options, manifest, state);
-				const set_cookie = response.headers.get("set-cookie");
-				if (set_cookie) for (const str of splitCookiesString(set_cookie)) {
+				for (const str of get_set_cookies(response.headers)) {
 					const { name, value, ...options } = parseString(str, { decodeValues: false });
 					set_internal(name, value, {
 						path: options.path ?? (url.pathname.split("/").slice(0, -1).join("/") || "/"),
@@ -3615,7 +3743,7 @@ async function internal_fetch(request, options, manifest, state) {
 	});
 }
 /** @type {string} */
-var body;
+var payload;
 /** @type {string} */
 var etag;
 /** @type {Headers} */
@@ -3625,7 +3753,8 @@ var headers;
 * @returns {Response}
 */
 function get_public_env(request) {
-	body ??= `export const env=${JSON.stringify(public_env)}`;
+	const script = request.url.endsWith(".script.js");
+	payload ??= uneval(public_env);
 	etag ??= `W/${Date.now()}`;
 	headers ??= new Headers({
 		"content-type": "application/javascript; charset=utf-8",
@@ -3635,9 +3764,10 @@ function get_public_env(request) {
 		status: 304,
 		headers
 	});
-	return new Response(body, { headers });
+	if (script) return new Response(`globalThis.__sveltekit_sw={env:${payload}}`, { headers });
+	return new Response(`export const env=${payload}`, { headers });
 }
-/** @import { RequestState } from 'types' */
+/** @import { RequestState, SSRNode } from 'types' */
 /** @type {import('types').RequiredResolveOptions['transformPageChunk']} */
 var default_transform = ({ html }) => html;
 /** @type {import('types').RequiredResolveOptions['filterSerializedResponseHeaders']} */
@@ -3713,7 +3843,9 @@ async function internal_respond(request, options, manifest, state) {
 			forms: null,
 			refreshes: null,
 			requested: null,
-			validated: null
+			reconnects: null,
+			batches: null,
+			live_iterators: null
 		},
 		is_in_remote_function: false,
 		is_in_render: false,
@@ -3761,6 +3893,7 @@ async function internal_respond(request, options, manifest, state) {
 		config: {},
 		prerender: !!state.prerendering?.fallback
 	});
+	/** @type {string | null} */
 	let resolved_path = url.pathname;
 	if (!remote_id) {
 		const prerendering_reroute_state = state.prerendering?.inside_reroute;
@@ -3776,10 +3909,21 @@ async function internal_respond(request, options, manifest, state) {
 			if (state.prerendering) state.prerendering.inside_reroute = prerendering_reroute_state;
 		}
 	}
+	/** @type {import('types').RequiredResolveOptions} */
+	let resolve_opts = {
+		transformPageChunk: default_transform,
+		filterSerializedResponseHeaders: default_filter,
+		preload: default_preload
+	};
+	/** @type {import('types').TrailingSlash} */
+	let trailing_slash = "never";
+	/** @type {PageNodes | undefined} */
+	let page_nodes;
 	try {
 		resolved_path = decode_pathname(resolved_path);
 	} catch {
-		return text("Malformed URI", { status: 400 });
+		resolved_path = null;
+		return await handle();
 	}
 	if (resolved_path !== decode_pathname(url.pathname) && !state.prerendering?.fallback && has_prerendered_path(manifest, resolved_path)) {
 		const url = new URL(request.url);
@@ -3807,7 +3951,7 @@ async function internal_respond(request, options, manifest, state) {
 		resolved_path = resolved_path.slice(base.length) || "/";
 	}
 	if (is_route_resolution_request) return resolve_route(resolved_path, new URL(request.url), manifest);
-	if (resolved_path === `/_app/env.js`) return get_public_env(request);
+	if (resolved_path === `/_app/env.js` || resolved_path === `/_app/env.script.js`) return get_public_env(request);
 	if (!remote_id && resolved_path.startsWith(`/_app`)) {
 		const headers = new Headers();
 		headers.set("cache-control", "public, max-age=0, must-revalidate");
@@ -3825,17 +3969,8 @@ async function internal_respond(request, options, manifest, state) {
 			event.params = result.params;
 		}
 	}
-	/** @type {import('types').RequiredResolveOptions} */
-	let resolve_opts = {
-		transformPageChunk: default_transform,
-		filterSerializedResponseHeaders: default_filter,
-		preload: default_preload
-	};
-	/** @type {import('types').TrailingSlash} */
-	let trailing_slash = "never";
 	try {
-		/** @type {PageNodes | undefined} */
-		const page_nodes = route?.page ? new PageNodes(await load_page_nodes(route.page, manifest)) : void 0;
+		page_nodes = route?.page ? new PageNodes(await load_page_nodes(route.page, manifest)) : void 0;
 		if (route && !remote_id) {
 			if (url.pathname === base || url.pathname === base + "/") trailing_slash = "always";
 			else if (page_nodes) trailing_slash = page_nodes.trailing_slash();
@@ -3862,13 +3997,25 @@ async function internal_respond(request, options, manifest, state) {
 					config = page_nodes.get_config() ?? config;
 					prerender = page_nodes.prerender();
 				}
-				if (state.before_handle) state.before_handle(event, config, prerender);
 				if (state.emulator?.platform) event.platform = await state.emulator.platform({
 					config,
 					prerender
 				});
+				if (state.before_handle) return await state.before_handle(event, config, prerender, handle);
 			}
 		}
+		return await handle();
+	} catch (e) {
+		if (e instanceof Redirect) try {
+			const response = is_data_request || remote_id ? redirect_json_response(e) : route?.page && is_action_json_request(event) ? action_json_redirect(e) : redirect_response(e.status, e.location);
+			add_cookies_to_headers(response.headers, new_cookies.values());
+			return response;
+		} catch (err) {
+			return await handle_fatal_error(event, event_state, options, err);
+		}
+		return await handle_fatal_error(event, event_state, options, e);
+	}
+	async function handle() {
 		set_trailing_slash(trailing_slash);
 		if (state.prerendering && !state.prerendering.fallback && !state.prerendering.inside_reroute) disable_search(url);
 		const response = await record_span({
@@ -3929,12 +4076,12 @@ async function internal_respond(request, options, manifest, state) {
 					"content-location",
 					"date",
 					"expires",
-					"vary",
-					"set-cookie"
+					"vary"
 				]) {
 					const value = response.headers.get(key);
 					if (value) headers.set(key, value);
 				}
+				for (const cookie of get_set_cookies(response.headers)) headers.append("set-cookie", cookie);
 				return new Response(void 0, {
 					status: 304,
 					headers
@@ -3946,15 +4093,6 @@ async function internal_respond(request, options, manifest, state) {
 			if (location) return redirect_json_response(new Redirect(response.status, location));
 		}
 		return response;
-	} catch (e) {
-		if (e instanceof Redirect) try {
-			const response = is_data_request || remote_id ? redirect_json_response(e) : route?.page && is_action_json_request(event) ? action_json_redirect(e) : redirect_response(e.status, e.location);
-			add_cookies_to_headers(response.headers, new_cookies.values());
-			return response;
-		} catch (err) {
-			return await handle_fatal_error(event, event_state, options, err);
-		}
-		return await handle_fatal_error(event, event_state, options, e);
 	}
 	/**
 	* @param {import('@sveltejs/kit').RequestEvent} event
@@ -3968,6 +4106,16 @@ async function internal_respond(request, options, manifest, state) {
 				filterSerializedResponseHeaders: opts.filterSerializedResponseHeaders || default_filter,
 				preload: opts.preload || default_preload
 			};
+			if (resolved_path === null) return await respond_with_error({
+				event,
+				event_state,
+				options,
+				manifest,
+				state,
+				status: 400,
+				error: new SvelteKitError(400, "Malformed URI", `Failed to decode URI: ${event.url.pathname}`),
+				resolve_opts
+			});
 			if (options.hash_routing || state.prerendering?.fallback) return await render_response({
 				event,
 				event_state,
@@ -3980,7 +4128,11 @@ async function internal_respond(request, options, manifest, state) {
 				},
 				status: 200,
 				error: null,
-				branch: [],
+				branch: [{
+					node: await manifest._.nodes[0](),
+					data: null,
+					server_data: null
+				}],
 				fetched: [],
 				resolve_opts,
 				data_serializer: server_data_serializer(event, event_state, options)