@qzsy/vinext 0.1.7

package/dist/server/file-based-metadata.js

@@ -0,0 +1,401 @@
+import { addBasePathToPathname, hasBasePath } from "../utils/base-path.js";
+import { fillRoutePatternSegments, routePattern } from "../routing/route-pattern.js";
+import { getMetadataImageRouteKind, getMetadataRouteKind, isValidMetadataImageId } from "./metadata-routes.js";
+import { makeThenableParams } from "../shims/thenable-params.js";
+//#region src/server/file-based-metadata.ts
+function routeApplies(routePath, routePrefix) {
+	if (!routePrefix) return true;
+	return routePath === routePrefix || routePath.startsWith(`${routePrefix}/`);
+}
+function routeScore(routePrefix) {
+	return routePrefix.split("/").filter(Boolean).length;
+}
+function routeSegmentsApply(routeSegments, routePrefixSegments) {
+	if (routePrefixSegments.length > routeSegments.length) return false;
+	for (let index = 0; index < routePrefixSegments.length; index++) if (routeSegments[index] !== routePrefixSegments[index]) return false;
+	return true;
+}
+function removeParallelRouteSegments(routeSegments) {
+	return routeSegments.filter((segment) => !segment.startsWith("@"));
+}
+function routeSegmentsApplyWithParallelSlots(routeSegments, routePrefixSegments) {
+	if (routeSegmentsApply(routeSegments, routePrefixSegments)) return true;
+	const visiblePrefixSegments = removeParallelRouteSegments(routePrefixSegments);
+	return visiblePrefixSegments.length !== routePrefixSegments.length && routeSegmentsApply(routeSegments, visiblePrefixSegments);
+}
+function routeSpecificity(route) {
+	return route.routeSegments?.length ?? routeScore(route.routePrefix);
+}
+function selectDeepestRoutes(metadataRoutes, kind, routePath, params, routeSegments) {
+	if (!metadataRoutes || metadataRoutes.length === 0) return [];
+	let selectedScore = -1;
+	const selectedRoutes = [];
+	for (const route of metadataRoutes) {
+		if ((route.headData?.kind ?? getMetadataRouteKind(route)) !== kind) continue;
+		if (routeSegments && route.routeSegments) {
+			if (!routeSegmentsApplyWithParallelSlots(routeSegments, route.routeSegments)) continue;
+			const currentScore = routeSpecificity(route);
+			if (currentScore > selectedScore) {
+				selectedScore = currentScore;
+				selectedRoutes.length = 0;
+				selectedRoutes.push(route);
+				continue;
+			}
+			if (currentScore === selectedScore) selectedRoutes.push(route);
+			continue;
+		}
+		const routePrefix = route.routePrefix;
+		const resolvedRoutePrefix = fillRoutePatternSegments(routePrefix, params);
+		const normalizedRoutePrefix = routePattern(routePrefix);
+		if (!routeApplies(routePath, routePrefix) && !routeApplies(routePath, normalizedRoutePrefix) && (!resolvedRoutePrefix || !routeApplies(routePath, resolvedRoutePrefix))) continue;
+		const currentScore = routeSpecificity(route);
+		if (currentScore > selectedScore) {
+			selectedScore = currentScore;
+			selectedRoutes.length = 0;
+			selectedRoutes.push(route);
+			continue;
+		}
+		if (currentScore === selectedScore) selectedRoutes.push(route);
+	}
+	return selectedRoutes;
+}
+function isStringOrUrl(value) {
+	return typeof value === "string" || typeof value === "object" && value instanceof URL;
+}
+function normalizeIconDescriptor(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+	const urlValue = Reflect.get(value, "url");
+	if (!isStringOrUrl(urlValue)) return null;
+	const entry = { url: urlValue };
+	const sizesValue = Reflect.get(value, "sizes");
+	if (typeof sizesValue === "string") entry.sizes = sizesValue;
+	const typeValue = Reflect.get(value, "type");
+	if (typeof typeValue === "string") entry.type = typeValue;
+	const mediaValue = Reflect.get(value, "media");
+	if (typeof mediaValue === "string") entry.media = mediaValue;
+	return entry;
+}
+function normalizeIconValue(value) {
+	if (isStringOrUrl(value)) return { url: value };
+	return normalizeIconDescriptor(value);
+}
+function normalizeIconValueList(values) {
+	const normalizedEntries = [];
+	for (const value of values) {
+		const normalizedValue = normalizeIconValue(value);
+		if (normalizedValue) normalizedEntries.push(normalizedValue);
+	}
+	return normalizedEntries;
+}
+function normalizeIconEntries(icon) {
+	const normalizedTopLevelValue = normalizeIconValue(icon);
+	if (normalizedTopLevelValue) return [normalizedTopLevelValue];
+	if (Array.isArray(icon)) return normalizeIconValueList(icon);
+	if (!isIconMap(icon)) return [];
+	const iconValue = icon.icon;
+	if (!iconValue) return [];
+	if (Array.isArray(iconValue)) return normalizeIconValueList(iconValue);
+	const normalizedValue = normalizeIconValue(iconValue);
+	return normalizedValue ? [normalizedValue] : [];
+}
+function isIconMap(value) {
+	if (!value || typeof value !== "object" || value instanceof URL || Array.isArray(value)) return false;
+	return normalizeIconValue(value) === null;
+}
+function cloneIconMap(value) {
+	if (!value) return {};
+	if (isIconMap(value)) return { ...value };
+	const iconEntries = normalizeIconEntries(value);
+	return iconEntries.length > 0 ? { icon: iconEntries } : {};
+}
+function buildIconEntry(headData) {
+	if (headData.kind !== "favicon" && headData.kind !== "icon") return null;
+	const iconEntry = { url: headData.href };
+	if (headData.sizes) iconEntry.sizes = headData.sizes;
+	if (headData.type) iconEntry.type = headData.type;
+	return iconEntry;
+}
+function buildAppleEntry(headData) {
+	if (headData.kind !== "apple") return null;
+	const appleEntry = { url: headData.href };
+	if (headData.sizes) appleEntry.sizes = headData.sizes;
+	if (headData.type) appleEntry.type = headData.type;
+	return appleEntry;
+}
+function normalizeAppleEntry(value) {
+	if (isStringOrUrl(value)) return { url: value };
+	return { ...value };
+}
+function markMetadataRouteSocialImage(entry) {
+	Object.defineProperty(entry, "metadataRoute", {
+		configurable: true,
+		enumerable: false,
+		value: true
+	});
+	return entry;
+}
+function buildSocialEntry(headData) {
+	if (headData.kind !== "openGraph" && headData.kind !== "twitter") return null;
+	const socialEntry = { url: headData.href };
+	if (headData.width !== void 0) socialEntry.width = headData.width;
+	if (headData.height !== void 0) socialEntry.height = headData.height;
+	if (headData.alt) socialEntry.alt = headData.alt;
+	if (headData.type) socialEntry.type = headData.type;
+	return markMetadataRouteSocialImage(socialEntry);
+}
+function normalizeMetadataImageId(route, id) {
+	const normalizedId = String(id);
+	if (!isValidMetadataImageId(normalizedId)) {
+		console.warn(`[vinext] Skipping metadata route ${route.servedUrl} image id "${normalizedId}" because metadata image ids must match /^[a-zA-Z0-9-_.]+$/.`);
+		return null;
+	}
+	return normalizedId;
+}
+function withContentHash(href, contentHash) {
+	if (!contentHash) return href;
+	return `${href}?${contentHash}`;
+}
+function hasOwnProperty(source, key) {
+	return Boolean(source && Object.prototype.hasOwnProperty.call(source, key));
+}
+function hasOpenGraphImages(metadata) {
+	return hasOwnProperty(metadata?.openGraph, "images");
+}
+function hasTwitterImages(metadata) {
+	return hasOwnProperty(metadata?.twitter, "images");
+}
+function hasIcons(metadata) {
+	return Boolean(metadata?.icons);
+}
+function getMetadataSourceForRoute(route, options, fallbackMetadata) {
+	if (!options?.metadataSources) return fallbackMetadata;
+	if (!route.routeSegments) return null;
+	for (let index = options.metadataSources.length - 1; index >= 0; index--) {
+		const source = options.metadataSources[index];
+		if (routeSegmentsApplyWithParallelSlots(source.routeSegments, route.routeSegments)) return source.metadata;
+	}
+	return null;
+}
+function socialRouteHasExplicitImagesAtSource(route, kind, options, fallbackMetadata) {
+	const sourceMetadata = getMetadataSourceForRoute(route, options, fallbackMetadata);
+	return kind === "openGraph" ? hasOpenGraphImages(sourceMetadata) : hasTwitterImages(sourceMetadata);
+}
+function iconRouteHasExplicitIconsAtSource(route, options, fallbackMetadata) {
+	return hasIcons(fallbackMetadata) || hasIcons(getMetadataSourceForRoute(route, options, null));
+}
+function readStringProperty(source, key) {
+	const value = Reflect.get(source, key);
+	return typeof value === "string" ? value : void 0;
+}
+function readNumberProperty(source, key) {
+	const value = Reflect.get(source, key);
+	return typeof value === "number" ? value : void 0;
+}
+function readStringOrNumberProperty(source, key) {
+	const value = Reflect.get(source, key);
+	if (typeof value === "string" || typeof value === "number") return value;
+}
+function readSizeProperty(source) {
+	const sizeValue = Reflect.get(source, "size");
+	if (typeof sizeValue !== "object" || sizeValue === null) return;
+	const width = readNumberProperty(sizeValue, "width");
+	const height = readNumberProperty(sizeValue, "height");
+	if (width === void 0 && height === void 0) return;
+	return {
+		width,
+		height
+	};
+}
+function readDynamicImageMetadataSource(source) {
+	return {
+		id: readStringOrNumberProperty(source, "id"),
+		alt: readStringProperty(source, "alt"),
+		contentType: readStringProperty(source, "contentType"),
+		size: readSizeProperty(source)
+	};
+}
+async function resolveDynamicImageMetadataSources(route, params) {
+	if (!route.module || typeof route.module !== "object") return [];
+	const generateImageMetadata = Reflect.get(route.module, "generateImageMetadata");
+	if (typeof generateImageMetadata !== "function") return [readDynamicImageMetadataSource(route.module)];
+	const result = await generateImageMetadata({ params: makeThenableParams(params) });
+	if (!Array.isArray(result)) return [];
+	const sources = [];
+	for (const entry of result) if (typeof entry === "object" && entry !== null) {
+		const source = readDynamicImageMetadataSource(entry);
+		if (source.id === void 0) {
+			console.warn(`[vinext] Skipping metadata route ${route.servedUrl} image metadata entry because generateImageMetadata entries must include an id.`);
+			continue;
+		}
+		sources.push(source);
+	}
+	return sources;
+}
+async function resolveRouteHeadData(route, params) {
+	if (!route.isDynamic || !route.module || typeof route.module !== "object") return route.headData ? [route.headData] : [];
+	const routeKind = getMetadataImageRouteKind(route);
+	if (!routeKind) return route.headData ? [route.headData] : [];
+	const resolvedUrl = fillRoutePatternSegments(route.servedUrl, params);
+	if (!resolvedUrl) {
+		console.warn(`[vinext] Skipping metadata route ${route.servedUrl} because params did not fill all dynamic segments.`);
+		return [];
+	}
+	const metadataSources = await resolveDynamicImageMetadataSources(route, params);
+	const resolvedHeadData = [];
+	for (const metadataSource of metadataSources) {
+		let hrefBase = resolvedUrl;
+		if (metadataSource.id !== void 0) {
+			const normalizedId = normalizeMetadataImageId(route, metadataSource.id);
+			if (!normalizedId) continue;
+			hrefBase = `${resolvedUrl}/${normalizedId}`;
+		}
+		const href = withContentHash(hrefBase, route.contentHash);
+		const contentType = metadataSource.contentType ?? route.contentType;
+		const size = metadataSource.size;
+		if (routeKind === "icon" || routeKind === "apple") {
+			let sizes;
+			if (size?.width !== void 0 && size.height !== void 0) sizes = `${size.width}x${size.height}`;
+			resolvedHeadData.push({
+				kind: routeKind,
+				href,
+				sizes,
+				type: contentType
+			});
+			continue;
+		}
+		resolvedHeadData.push({
+			kind: routeKind,
+			href,
+			alt: metadataSource.alt,
+			height: size?.height,
+			type: contentType,
+			width: size?.width
+		});
+	}
+	return resolvedHeadData;
+}
+async function resolveHeadDataList(routes, params) {
+	return (await Promise.all(routes.map((route) => resolveRouteHeadData(route, params)))).flat();
+}
+/**
+* Prepend the configured basePath to a file-based metadata href.
+*
+* Hrefs at this point are framework-built strings of the form
+*   "/<route>/<file>[?<contentHash>]"
+* The basePath must go before the path portion only; the query (cache-busting
+* content hash) must be preserved verbatim. External URLs (http://, https://,
+* //, data:, blob:) are left untouched — those are user-controlled and the
+* framework has no business prefixing them.
+*
+* Idempotent: when the path already starts with `basePath` (or equals it),
+* the path is returned unchanged so consumers may safely apply the prefix
+* at any layer without risking `/base/base/icon.png`.
+*/
+function prefixMetadataHrefWithBasePath(href, basePath) {
+	if (!basePath) return href;
+	if (/^[a-z][a-z0-9+.-]*:/i.test(href) || href.startsWith("//")) return href;
+	if (!href.startsWith("/")) return href;
+	const queryIndex = href.indexOf("?");
+	const pathname = queryIndex === -1 ? href : href.slice(0, queryIndex);
+	const search = queryIndex === -1 ? "" : href.slice(queryIndex);
+	if (hasBasePath(pathname, basePath)) return href;
+	return `${addBasePathToPathname(pathname, basePath)}${search}`;
+}
+function applyBasePathToHeadDataList(headDataList, basePath) {
+	if (!basePath) return headDataList;
+	return headDataList.map((entry) => ({
+		...entry,
+		href: prefixMetadataHrefWithBasePath(entry.href, basePath)
+	}));
+}
+async function applyFileBasedMetadata(metadata, routePath, params, metadataRoutes, options) {
+	if (!metadataRoutes || metadataRoutes.length === 0) return metadata;
+	const routeSegments = options?.routeSegments ?? null;
+	const faviconRoutes = selectDeepestRoutes(metadataRoutes, "favicon", routePath, params, routeSegments);
+	const iconRoutes = selectDeepestRoutes(metadataRoutes, "icon", routePath, params, routeSegments).filter((route) => !iconRouteHasExplicitIconsAtSource(route, options, metadata));
+	const appleRoutes = selectDeepestRoutes(metadataRoutes, "apple", routePath, params, routeSegments).filter((route) => !iconRouteHasExplicitIconsAtSource(route, options, metadata));
+	const openGraphRoutes = selectDeepestRoutes(metadataRoutes, "openGraph", routePath, params, routeSegments).filter((route) => !socialRouteHasExplicitImagesAtSource(route, "openGraph", options, metadata));
+	const twitterRoutes = selectDeepestRoutes(metadataRoutes, "twitter", routePath, params, routeSegments).filter((route) => !socialRouteHasExplicitImagesAtSource(route, "twitter", options, metadata));
+	const manifestRoutes = selectDeepestRoutes(metadataRoutes, "manifest", routePath, params, routeSegments);
+	const basePath = options?.basePath ?? "";
+	const [rawFaviconHeadData, rawIconHeadData, rawAppleHeadData, rawOpenGraphHeadData, rawTwitterHeadData, rawManifestHeadData] = await Promise.all([
+		resolveHeadDataList(faviconRoutes, params),
+		resolveHeadDataList(iconRoutes, params),
+		resolveHeadDataList(appleRoutes, params),
+		resolveHeadDataList(openGraphRoutes, params),
+		resolveHeadDataList(twitterRoutes, params),
+		resolveHeadDataList(manifestRoutes, params)
+	]);
+	const faviconHeadData = applyBasePathToHeadDataList(rawFaviconHeadData, basePath);
+	const iconHeadData = applyBasePathToHeadDataList(rawIconHeadData, basePath);
+	const appleHeadData = applyBasePathToHeadDataList(rawAppleHeadData, basePath);
+	const openGraphHeadData = applyBasePathToHeadDataList(rawOpenGraphHeadData, basePath);
+	const twitterHeadData = applyBasePathToHeadDataList(rawTwitterHeadData, basePath);
+	const manifestHeadData = applyBasePathToHeadDataList(rawManifestHeadData, basePath);
+	if (!metadata && faviconHeadData.length === 0 && iconHeadData.length === 0 && appleHeadData.length === 0 && openGraphHeadData.length === 0 && twitterHeadData.length === 0 && manifestHeadData.length === 0) return null;
+	const nextMetadata = metadata ? { ...metadata } : {};
+	const faviconEntries = [];
+	for (const headData of faviconHeadData) {
+		const iconEntry = buildIconEntry(headData);
+		if (iconEntry) faviconEntries.push(iconEntry);
+	}
+	if (faviconEntries.length > 0) {
+		const nextIcons = cloneIconMap(nextMetadata.icons);
+		const normalizedIcons = normalizeIconEntries(nextIcons);
+		nextIcons.icon = [...faviconEntries, ...normalizedIcons];
+		nextMetadata.icons = nextIcons;
+	}
+	{
+		const nextIcons = cloneIconMap(nextMetadata.icons);
+		const iconEntries = [];
+		for (const headData of iconHeadData) {
+			const iconEntry = buildIconEntry(headData);
+			if (iconEntry) iconEntries.push(iconEntry);
+		}
+		if (iconEntries.length > 0) {
+			const normalizedIcons = normalizeIconEntries(nextIcons);
+			nextIcons.icon = [...iconEntries, ...normalizedIcons];
+		}
+		const appleEntries = [];
+		for (const headData of appleHeadData) {
+			const appleEntry = buildAppleEntry(headData);
+			if (appleEntry) appleEntries.push(appleEntry);
+		}
+		if (appleEntries.length > 0) {
+			const existingApple = nextIcons.apple;
+			const normalizedAppleEntries = [];
+			if (Array.isArray(existingApple)) for (const entry of existingApple) normalizedAppleEntries.push(normalizeAppleEntry(entry));
+			else if (existingApple) normalizedAppleEntries.push(normalizeAppleEntry(existingApple));
+			nextIcons.apple = [...appleEntries, ...normalizedAppleEntries];
+		}
+		if (iconEntries.length > 0 || appleEntries.length > 0) nextMetadata.icons = nextIcons;
+	}
+	if (openGraphHeadData.length > 0) {
+		const socialEntries = [];
+		for (const headData of openGraphHeadData) {
+			const socialEntry = buildSocialEntry(headData);
+			if (socialEntry) socialEntries.push(socialEntry);
+		}
+		if (socialEntries.length > 0) {
+			const nextOpenGraph = nextMetadata.openGraph ? { ...nextMetadata.openGraph } : {};
+			nextOpenGraph.images = socialEntries;
+			nextMetadata.openGraph = nextOpenGraph;
+		}
+	}
+	if (twitterHeadData.length > 0) {
+		const socialEntries = [];
+		for (const headData of twitterHeadData) {
+			const socialEntry = buildSocialEntry(headData);
+			if (socialEntry) socialEntries.push(socialEntry);
+		}
+		if (socialEntries.length > 0) {
+			const nextTwitter = nextMetadata.twitter ? { ...nextMetadata.twitter } : {};
+			nextTwitter.images = socialEntries;
+			nextMetadata.twitter = nextTwitter;
+		}
+	}
+	if (manifestHeadData.length > 0 && manifestHeadData[0].kind === "manifest") nextMetadata.manifest = manifestHeadData[0].href;
+	return nextMetadata;
+}
+//#endregion
+export { applyFileBasedMetadata };

package/dist/server/headers.d.ts

@@ -0,0 +1,114 @@
+//#region src/server/headers.d.ts
+/**
+ * Internal HTTP header name constants used throughout vinext.
+ *
+ * Centralizes all custom header names so they are defined once and referenced
+ * everywhere via imports. Keeping them in one module prevents typos, makes
+ * rename-refactors trivial, and lets grep find every consumer instantly.
+ *
+ * Standard HTTP headers (Content-Type, Cache-Control, etc.) are intentionally
+ * omitted — only vinext-internal and Next.js-protocol headers belong here.
+ */
+/** ISR / page cache state indicator: "HIT" | "MISS" | "STALE" | "STATIC". */
+declare const VINEXT_CACHE_HEADER = "X-Vinext-Cache";
+/** Next.js public ISR / page cache state indicator. */
+declare const NEXTJS_CACHE_HEADER = "x-nextjs-cache";
+/** Static file signal — value is URL-encoded pathname. */
+declare const VINEXT_STATIC_FILE_HEADER = "x-vinext-static-file";
+/** Serialized middleware context (JSON) forwarded from dev server to RSC entry. */
+declare const VINEXT_MW_CTX_HEADER = "x-vinext-mw-ctx";
+/** Timing metrics: `handlerStart,compileMs,renderMs`. */
+declare const VINEXT_TIMING_HEADER = "x-vinext-timing";
+/** Build-time prerender authentication secret. */
+declare const VINEXT_PRERENDER_SECRET_HEADER = "x-vinext-prerender-secret";
+/** URL-encoded JSON route params for build-time prerender renders. */
+declare const VINEXT_PRERENDER_ROUTE_PARAMS_HEADER = "x-vinext-prerender-route-params";
+/** Internal endpoint used to evaluate App Router generateStaticParams exports. */
+declare const VINEXT_PRERENDER_STATIC_PARAMS_PATH = "/__vinext/prerender/static-params";
+/** Internal endpoint used to evaluate Pages Router getStaticPaths exports. */
+declare const VINEXT_PRERENDER_PAGES_STATIC_PATHS_PATH = "/__vinext/prerender/pages-static-paths";
+/** TPR (Tailored Per-Request) revalidation interval in seconds. */
+declare const VINEXT_REVALIDATE_HEADER = "x-vinext-revalidate";
+/** Marker on cached ISR entries indicating RSC payload (value "1"). */
+declare const VINEXT_RSC_MARKER_HEADER = "x-vinext-rsc";
+/** URL-encoded JSON route params carried on RSC responses. */
+declare const VINEXT_PARAMS_HEADER = "X-Vinext-Params";
+/** Deduplicated, sorted list of mounted layout slots for cache keying. */
+declare const VINEXT_MOUNTED_SLOTS_HEADER = "X-Vinext-Mounted-Slots";
+/** Per-page dynamic stale time in seconds for App Router RSC responses. */
+declare const VINEXT_DYNAMIC_STALE_TIME_HEADER = "X-Vinext-Dynamic-Stale-Time";
+/** Route interception context for parallel/intercepting routes. */
+declare const VINEXT_INTERCEPTION_CONTEXT_HEADER = "X-Vinext-Interception-Context";
+/** RSC render mode (e.g. "navigation", "prefetch"). */
+declare const VINEXT_RSC_RENDER_MODE_HEADER = "X-Vinext-Rsc-Render-Mode";
+/** Disabled-by-default client hint describing already-held App Router payload entries. */
+declare const VINEXT_CLIENT_REUSE_MANIFEST_HEADER = "X-Vinext-Client-Reuse-Manifest";
+/**
+ * Side-channel signal that an RSC response (HTTP 200) encodes a `redirect()`
+ * thrown during render. The header value is the redirect target (path-only
+ * for same-origin, absolute for cross-origin). The flight body still carries
+ * the canonical `NEXT_REDIRECT;...` digest so Next.js's own tests can read it
+ * via response.body; this header is purely for vinext's own client
+ * (`navigateRsc` in app-browser-entry.ts) to follow the redirect inside the
+ * same navigation transaction — keeping `useTransition`'s pending state
+ * continuous across the hop. Pre-1347 vinext relied on `fetch`'s auto-follow
+ * of a 307 for that, but the new 200 + flight format leaves it without a
+ * cheap way to detect the redirect ahead of stream decode.
+ */
+declare const VINEXT_RSC_REDIRECT_HEADER = "X-Vinext-Rsc-Redirect";
+/** Standard RSC header — value "1" indicates an RSC payload request. */
+declare const RSC_HEADER = "RSC";
+/** Server Action invocation header (vinext/vite-rsc protocol). */
+declare const RSC_ACTION_HEADER = "x-rsc-action";
+/** Next.js Server Action invocation header (fallback for x-rsc-action). */
+declare const NEXT_ACTION_HEADER = "next-action";
+/** Next.js action-not-found indicator (value "1"). */
+declare const NEXTJS_ACTION_NOT_FOUND_HEADER = "x-nextjs-action-not-found";
+/**
+ * Deployment ID header used by the Pages Router for deployment-skew
+ * protection. Set on every `/_next/data/` response so the client can detect
+ * when a new deployment has been rolled out and trigger a hard navigation.
+ * Mirrors `NEXT_NAV_DEPLOYMENT_ID_HEADER` from Next.js `lib/constants.ts`.
+ */
+declare const NEXTJS_DEPLOYMENT_ID_HEADER = "x-nextjs-deployment-id";
+/** Forwarded action marker — set when a request has already been forwarded between workers. */
+declare const ACTION_FORWARDED_HEADER = "x-action-forwarded";
+/** Indicates revalidation occurred — value is JSON kind (1 = path/tag, 2 = dynamic-only). */
+declare const ACTION_REVALIDATED_HEADER = "x-action-revalidated";
+/** Redirect URL from a Server Action. */
+declare const ACTION_REDIRECT_HEADER = "x-action-redirect";
+/** Redirect type from a Server Action ("push" | "replace"). */
+declare const ACTION_REDIRECT_TYPE_HEADER = "x-action-redirect-type";
+/** HTTP status for a Server Action redirect (e.g. "308"). */
+declare const ACTION_REDIRECT_STATUS_HEADER = "x-action-redirect-status";
+/** Prefix for forwarded request headers (e.g. `x-middleware-request-cookie`). */
+declare const MIDDLEWARE_REQUEST_HEADER_PREFIX = "x-middleware-request-";
+/** Comma-separated list of header names that middleware wants to override. */
+declare const MIDDLEWARE_OVERRIDE_HEADERS = "x-middleware-override-headers";
+/** Carries cookies set by middleware for same-render reads. */
+declare const MIDDLEWARE_SET_COOKIE_HEADER = "x-middleware-set-cookie";
+/** Signal from `NextResponse.next()` — value "1" means "continue to next handler". */
+declare const MIDDLEWARE_NEXT_HEADER = "x-middleware-next";
+/** Rewrite destination URL set by `NextResponse.rewrite()`. */
+declare const MIDDLEWARE_REWRITE_HEADER = "x-middleware-rewrite";
+/** Generic prefix for all middleware internal headers. */
+declare const MIDDLEWARE_HEADER_PREFIX = "x-middleware-";
+declare const NEXT_ROUTER_STATE_TREE_HEADER = "Next-Router-State-Tree";
+declare const NEXT_ROUTER_PREFETCH_HEADER = "Next-Router-Prefetch";
+declare const NEXT_ROUTER_SEGMENT_PREFETCH_HEADER = "Next-Router-Segment-Prefetch";
+declare const NEXT_URL_HEADER = "Next-Url";
+/** Lowercase flight header variants used in middleware forwarding. */
+declare const FLIGHT_HEADERS: readonly string[];
+/**
+ * Headers that must be stripped from external requests before any handler
+ * processes them. An attacker could forge these to influence routing or
+ * impersonate internal data fetches.
+ *
+ * Ported from Next.js `INTERNAL_HEADERS`:
+ * https://github.com/vercel/next.js/blob/canary/packages/next/src/server/lib/server-ipc/utils.ts
+ */
+declare const INTERNAL_HEADERS: string[];
+/** Vinext-only internal headers stripped alongside Next.js protocol internals. */
+declare const VINEXT_INTERNAL_HEADERS: string[];
+//#endregion
+export { ACTION_FORWARDED_HEADER, ACTION_REDIRECT_HEADER, ACTION_REDIRECT_STATUS_HEADER, ACTION_REDIRECT_TYPE_HEADER, ACTION_REVALIDATED_HEADER, FLIGHT_HEADERS, INTERNAL_HEADERS, MIDDLEWARE_HEADER_PREFIX, MIDDLEWARE_NEXT_HEADER, MIDDLEWARE_OVERRIDE_HEADERS, MIDDLEWARE_REQUEST_HEADER_PREFIX, MIDDLEWARE_REWRITE_HEADER, MIDDLEWARE_SET_COOKIE_HEADER, NEXTJS_ACTION_NOT_FOUND_HEADER, NEXTJS_CACHE_HEADER, NEXTJS_DEPLOYMENT_ID_HEADER, NEXT_ACTION_HEADER, NEXT_ROUTER_PREFETCH_HEADER, NEXT_ROUTER_SEGMENT_PREFETCH_HEADER, NEXT_ROUTER_STATE_TREE_HEADER, NEXT_URL_HEADER, RSC_ACTION_HEADER, RSC_HEADER, VINEXT_CACHE_HEADER, VINEXT_CLIENT_REUSE_MANIFEST_HEADER, VINEXT_DYNAMIC_STALE_TIME_HEADER, VINEXT_INTERCEPTION_CONTEXT_HEADER, VINEXT_INTERNAL_HEADERS, VINEXT_MOUNTED_SLOTS_HEADER, VINEXT_MW_CTX_HEADER, VINEXT_PARAMS_HEADER, VINEXT_PRERENDER_PAGES_STATIC_PATHS_PATH, VINEXT_PRERENDER_ROUTE_PARAMS_HEADER, VINEXT_PRERENDER_SECRET_HEADER, VINEXT_PRERENDER_STATIC_PARAMS_PATH, VINEXT_REVALIDATE_HEADER, VINEXT_RSC_MARKER_HEADER, VINEXT_RSC_REDIRECT_HEADER, VINEXT_RSC_RENDER_MODE_HEADER, VINEXT_STATIC_FILE_HEADER, VINEXT_TIMING_HEADER };

package/dist/server/headers.js

@@ -0,0 +1,136 @@
+//#region src/server/headers.ts
+/**
+* Internal HTTP header name constants used throughout vinext.
+*
+* Centralizes all custom header names so they are defined once and referenced
+* everywhere via imports. Keeping them in one module prevents typos, makes
+* rename-refactors trivial, and lets grep find every consumer instantly.
+*
+* Standard HTTP headers (Content-Type, Cache-Control, etc.) are intentionally
+* omitted — only vinext-internal and Next.js-protocol headers belong here.
+*/
+/** ISR / page cache state indicator: "HIT" | "MISS" | "STALE" | "STATIC". */
+const VINEXT_CACHE_HEADER = "X-Vinext-Cache";
+/** Next.js public ISR / page cache state indicator. */
+const NEXTJS_CACHE_HEADER = "x-nextjs-cache";
+/** Static file signal — value is URL-encoded pathname. */
+const VINEXT_STATIC_FILE_HEADER = "x-vinext-static-file";
+/** Serialized middleware context (JSON) forwarded from dev server to RSC entry. */
+const VINEXT_MW_CTX_HEADER = "x-vinext-mw-ctx";
+/** Timing metrics: `handlerStart,compileMs,renderMs`. */
+const VINEXT_TIMING_HEADER = "x-vinext-timing";
+/** Build-time prerender authentication secret. */
+const VINEXT_PRERENDER_SECRET_HEADER = "x-vinext-prerender-secret";
+/** URL-encoded JSON route params for build-time prerender renders. */
+const VINEXT_PRERENDER_ROUTE_PARAMS_HEADER = "x-vinext-prerender-route-params";
+/** Internal endpoint used to evaluate App Router generateStaticParams exports. */
+const VINEXT_PRERENDER_STATIC_PARAMS_PATH = "/__vinext/prerender/static-params";
+/** Internal endpoint used to evaluate Pages Router getStaticPaths exports. */
+const VINEXT_PRERENDER_PAGES_STATIC_PATHS_PATH = "/__vinext/prerender/pages-static-paths";
+/** TPR (Tailored Per-Request) revalidation interval in seconds. */
+const VINEXT_REVALIDATE_HEADER = "x-vinext-revalidate";
+/** Marker on cached ISR entries indicating RSC payload (value "1"). */
+const VINEXT_RSC_MARKER_HEADER = "x-vinext-rsc";
+/** URL-encoded JSON route params carried on RSC responses. */
+const VINEXT_PARAMS_HEADER = "X-Vinext-Params";
+/** Deduplicated, sorted list of mounted layout slots for cache keying. */
+const VINEXT_MOUNTED_SLOTS_HEADER = "X-Vinext-Mounted-Slots";
+/** Per-page dynamic stale time in seconds for App Router RSC responses. */
+const VINEXT_DYNAMIC_STALE_TIME_HEADER = "X-Vinext-Dynamic-Stale-Time";
+/** Route interception context for parallel/intercepting routes. */
+const VINEXT_INTERCEPTION_CONTEXT_HEADER = "X-Vinext-Interception-Context";
+/** RSC render mode (e.g. "navigation", "prefetch"). */
+const VINEXT_RSC_RENDER_MODE_HEADER = "X-Vinext-Rsc-Render-Mode";
+/** Disabled-by-default client hint describing already-held App Router payload entries. */
+const VINEXT_CLIENT_REUSE_MANIFEST_HEADER = "X-Vinext-Client-Reuse-Manifest";
+/**
+* Side-channel signal that an RSC response (HTTP 200) encodes a `redirect()`
+* thrown during render. The header value is the redirect target (path-only
+* for same-origin, absolute for cross-origin). The flight body still carries
+* the canonical `NEXT_REDIRECT;...` digest so Next.js's own tests can read it
+* via response.body; this header is purely for vinext's own client
+* (`navigateRsc` in app-browser-entry.ts) to follow the redirect inside the
+* same navigation transaction — keeping `useTransition`'s pending state
+* continuous across the hop. Pre-1347 vinext relied on `fetch`'s auto-follow
+* of a 307 for that, but the new 200 + flight format leaves it without a
+* cheap way to detect the redirect ahead of stream decode.
+*/
+const VINEXT_RSC_REDIRECT_HEADER = "X-Vinext-Rsc-Redirect";
+/** Standard RSC header — value "1" indicates an RSC payload request. */
+const RSC_HEADER = "RSC";
+/** Server Action invocation header (vinext/vite-rsc protocol). */
+const RSC_ACTION_HEADER = "x-rsc-action";
+/** Next.js Server Action invocation header (fallback for x-rsc-action). */
+const NEXT_ACTION_HEADER = "next-action";
+/** Next.js action-not-found indicator (value "1"). */
+const NEXTJS_ACTION_NOT_FOUND_HEADER = "x-nextjs-action-not-found";
+/**
+* Deployment ID header used by the Pages Router for deployment-skew
+* protection. Set on every `/_next/data/` response so the client can detect
+* when a new deployment has been rolled out and trigger a hard navigation.
+* Mirrors `NEXT_NAV_DEPLOYMENT_ID_HEADER` from Next.js `lib/constants.ts`.
+*/
+const NEXTJS_DEPLOYMENT_ID_HEADER = "x-nextjs-deployment-id";
+/** Forwarded action marker — set when a request has already been forwarded between workers. */
+const ACTION_FORWARDED_HEADER = "x-action-forwarded";
+/** Indicates revalidation occurred — value is JSON kind (1 = path/tag, 2 = dynamic-only). */
+const ACTION_REVALIDATED_HEADER = "x-action-revalidated";
+/** Redirect URL from a Server Action. */
+const ACTION_REDIRECT_HEADER = "x-action-redirect";
+/** Redirect type from a Server Action ("push" | "replace"). */
+const ACTION_REDIRECT_TYPE_HEADER = "x-action-redirect-type";
+/** HTTP status for a Server Action redirect (e.g. "308"). */
+const ACTION_REDIRECT_STATUS_HEADER = "x-action-redirect-status";
+/** Prefix for forwarded request headers (e.g. `x-middleware-request-cookie`). */
+const MIDDLEWARE_REQUEST_HEADER_PREFIX = "x-middleware-request-";
+/** Comma-separated list of header names that middleware wants to override. */
+const MIDDLEWARE_OVERRIDE_HEADERS = "x-middleware-override-headers";
+/** Carries cookies set by middleware for same-render reads. */
+const MIDDLEWARE_SET_COOKIE_HEADER = "x-middleware-set-cookie";
+/** Signal from `NextResponse.next()` — value "1" means "continue to next handler". */
+const MIDDLEWARE_NEXT_HEADER = "x-middleware-next";
+/** Rewrite destination URL set by `NextResponse.rewrite()`. */
+const MIDDLEWARE_REWRITE_HEADER = "x-middleware-rewrite";
+/** Redirect URL set by middleware. */
+const MIDDLEWARE_REDIRECT_HEADER = "x-middleware-redirect";
+/** Skip-middleware signal. */
+const MIDDLEWARE_SKIP_HEADER = "x-middleware-skip";
+/** Generic prefix for all middleware internal headers. */
+const MIDDLEWARE_HEADER_PREFIX = "x-middleware-";
+const NEXT_ROUTER_STATE_TREE_HEADER = "Next-Router-State-Tree";
+const NEXT_ROUTER_PREFETCH_HEADER = "Next-Router-Prefetch";
+const NEXT_ROUTER_SEGMENT_PREFETCH_HEADER = "Next-Router-Segment-Prefetch";
+const NEXT_URL_HEADER = "Next-Url";
+/** Lowercase flight header variants used in middleware forwarding. */
+const FLIGHT_HEADERS = [
+	"rsc",
+	"next-router-state-tree",
+	"next-router-prefetch",
+	"next-hmr-refresh",
+	"next-router-segment-prefetch"
+];
+/**
+* Headers that must be stripped from external requests before any handler
+* processes them. An attacker could forge these to influence routing or
+* impersonate internal data fetches.
+*
+* Ported from Next.js `INTERNAL_HEADERS`:
+* https://github.com/vercel/next.js/blob/canary/packages/next/src/server/lib/server-ipc/utils.ts
+*/
+const INTERNAL_HEADERS = [
+	MIDDLEWARE_REWRITE_HEADER,
+	MIDDLEWARE_REDIRECT_HEADER,
+	MIDDLEWARE_SET_COOKIE_HEADER,
+	MIDDLEWARE_SKIP_HEADER,
+	MIDDLEWARE_OVERRIDE_HEADERS,
+	MIDDLEWARE_NEXT_HEADER,
+	"x-now-route-matches",
+	"x-matched-path",
+	"x-nextjs-data",
+	"x-next-resume-state-length",
+	ACTION_FORWARDED_HEADER
+];
+/** Vinext-only internal headers stripped alongside Next.js protocol internals. */
+const VINEXT_INTERNAL_HEADERS = [VINEXT_PRERENDER_ROUTE_PARAMS_HEADER];
+//#endregion
+export { ACTION_FORWARDED_HEADER, ACTION_REDIRECT_HEADER, ACTION_REDIRECT_STATUS_HEADER, ACTION_REDIRECT_TYPE_HEADER, ACTION_REVALIDATED_HEADER, FLIGHT_HEADERS, INTERNAL_HEADERS, MIDDLEWARE_HEADER_PREFIX, MIDDLEWARE_NEXT_HEADER, MIDDLEWARE_OVERRIDE_HEADERS, MIDDLEWARE_REQUEST_HEADER_PREFIX, MIDDLEWARE_REWRITE_HEADER, MIDDLEWARE_SET_COOKIE_HEADER, NEXTJS_ACTION_NOT_FOUND_HEADER, NEXTJS_CACHE_HEADER, NEXTJS_DEPLOYMENT_ID_HEADER, NEXT_ACTION_HEADER, NEXT_ROUTER_PREFETCH_HEADER, NEXT_ROUTER_SEGMENT_PREFETCH_HEADER, NEXT_ROUTER_STATE_TREE_HEADER, NEXT_URL_HEADER, RSC_ACTION_HEADER, RSC_HEADER, VINEXT_CACHE_HEADER, VINEXT_CLIENT_REUSE_MANIFEST_HEADER, VINEXT_DYNAMIC_STALE_TIME_HEADER, VINEXT_INTERCEPTION_CONTEXT_HEADER, VINEXT_INTERNAL_HEADERS, VINEXT_MOUNTED_SLOTS_HEADER, VINEXT_MW_CTX_HEADER, VINEXT_PARAMS_HEADER, VINEXT_PRERENDER_PAGES_STATIC_PATHS_PATH, VINEXT_PRERENDER_ROUTE_PARAMS_HEADER, VINEXT_PRERENDER_SECRET_HEADER, VINEXT_PRERENDER_STATIC_PARAMS_PATH, VINEXT_REVALIDATE_HEADER, VINEXT_RSC_MARKER_HEADER, VINEXT_RSC_REDIRECT_HEADER, VINEXT_RSC_RENDER_MODE_HEADER, VINEXT_STATIC_FILE_HEADER, VINEXT_TIMING_HEADER };