@reckona/mreact-router 0.0.203 → 0.0.205

package/dist/config.d.ts

@@ -29,6 +29,8 @@ export interface AppRouterProjectOptions {
     buildConcurrency?: number | undefined;
     buildTargets?: readonly AppRouterBuildTarget[] | undefined;
     clientSourceMaps?: AppRouterClientSourceMapOption | undefined;
+    /** Project-local server module exporting a named `dehydrateOptions` policy. */
+    dehydratePolicyModule?: string | undefined;
     /**
      * Legacy route root. When provided without routesDir/projectRoot, this keeps
      * the historical "appDir is the whole app boundary" behavior.
@@ -52,6 +54,7 @@ export interface ResolvedAppRouterProject {
     buildTargets: readonly AppRouterBuildTarget[];
     clientSourceMaps: AppRouterClientSourceMapMode;
     clientConsolePureFunctions?: readonly string[] | undefined;
+    dehydratePolicyModule?: string | undefined;
     projectRoot: string;
     publicAssetBaseUrl?: string | undefined;
     publicDir: string;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC;AAExE,eAAO,MAAM,4BAA4B;;;CAMxC,CAAC;AACF;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AACjG;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACxE;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,4BAA4B,CAAC;AAEpF;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,iBAAiB,CAAC,EAAE,OAAO,GAAG,SAAS,4BAA4B,EAAE,GAAG,SAAS,CAAC;CACnF;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAC3D,gBAAgB,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC9D;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAClD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,YAAY,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC9C,gBAAgB,EAAE,4BAA4B,CAAC;IAC/C,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,uBAAuB,GAC/B,wBAAwB,CAuD1B;AAiBD,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,0BAA0B,CAAC,mBAAmB,CAAC,GACrD,SAAS,MAAM,EAAE,GAAG,SAAS,CAmB/B;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,8BAA8B,GAAG,SAAS,GAChD,4BAA4B,CAgB9B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,GACnD,SAAS,oBAAoB,EAAE,CAoBjC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC;AAExE,eAAO,MAAM,4BAA4B;;;CAMxC,CAAC;AACF;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AACjG;;GAEG;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACxE;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,4BAA4B,CAAC;AAEpF;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,iBAAiB,CAAC,EAAE,OAAO,GAAG,SAAS,4BAA4B,EAAE,GAAG,SAAS,CAAC;CACnF;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAC3D,gBAAgB,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC9D,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAClD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,YAAY,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC9C,gBAAgB,EAAE,4BAA4B,CAAC;IAC/C,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,uBAAuB,GAC/B,wBAAwB,CA2E1B;AA+BD,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,0BAA0B,CAAC,mBAAmB,CAAC,GACrD,SAAS,MAAM,EAAE,GAAG,SAAS,CAmB/B;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,8BAA8B,GAAG,SAAS,GAChD,4BAA4B,CAgB9B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,GACnD,SAAS,oBAAoB,EAAE,CAoBjC"}

package/dist/config.js

@@ -9,8 +9,9 @@ export function resolveAppRouterProjectOptions(options) {
         options.projectRoot === undefined &&
         options.routesDir === undefined) {
         const appDir = resolve(options.appDir);
+        const allowedSourceDirs = (options.allowedSourceDirs ?? [appDir]).map((directory) => resolveProjectPath(appDir, directory, "allowedSourceDirs"));
         return {
-            allowedSourceDirs: (options.allowedSourceDirs ?? [appDir]).map((directory) => resolveProjectPath(appDir, directory, "allowedSourceDirs")),
+            allowedSourceDirs,
             ...(options.assetBaseUrl === undefined ? {} : { assetBaseUrl: options.assetBaseUrl }),
             ...(options.buildConcurrency === undefined
                 ? {}
@@ -18,6 +19,11 @@ export function resolveAppRouterProjectOptions(options) {
             buildTargets: resolveBuildTargets(options.buildTargets),
             clientSourceMaps: resolveClientSourceMapMode(options.clientSourceMaps),
             ...(clientConsolePureFunctions === undefined ? {} : { clientConsolePureFunctions }),
+            ...(options.dehydratePolicyModule === undefined
+                ? {}
+                : {
+                    dehydratePolicyModule: resolvePolicyModule(appDir, options.dehydratePolicyModule, allowedSourceDirs),
+                }),
             projectRoot: appDir,
             ...(options.publicAssetBaseUrl === undefined
                 ? {}
@@ -29,8 +35,9 @@ export function resolveAppRouterProjectOptions(options) {
     const projectRoot = resolve(options.projectRoot ?? process.cwd());
     const routesDir = resolveProjectPath(projectRoot, options.routesDir ?? "src/app", "routesDir");
     const defaultAllowedSourceDirs = options.routesDir === undefined ? ["src"] : [defaultAllowedSourceDir(projectRoot, routesDir)];
+    const allowedSourceDirs = (options.allowedSourceDirs ?? defaultAllowedSourceDirs).map((directory) => resolveProjectPath(projectRoot, directory, "allowedSourceDirs"));
     return {
-        allowedSourceDirs: (options.allowedSourceDirs ?? defaultAllowedSourceDirs).map((directory) => resolveProjectPath(projectRoot, directory, "allowedSourceDirs")),
+        allowedSourceDirs,
         ...(options.assetBaseUrl === undefined ? {} : { assetBaseUrl: options.assetBaseUrl }),
         ...(options.buildConcurrency === undefined
             ? {}
@@ -38,6 +45,11 @@ export function resolveAppRouterProjectOptions(options) {
         buildTargets: resolveBuildTargets(options.buildTargets),
         clientSourceMaps: resolveClientSourceMapMode(options.clientSourceMaps),
         ...(clientConsolePureFunctions === undefined ? {} : { clientConsolePureFunctions }),
+        ...(options.dehydratePolicyModule === undefined
+            ? {}
+            : {
+                dehydratePolicyModule: resolvePolicyModule(projectRoot, options.dehydratePolicyModule, allowedSourceDirs),
+            }),
         projectRoot,
         ...(options.publicAssetBaseUrl === undefined
             ? {}
@@ -46,6 +58,13 @@ export function resolveAppRouterProjectOptions(options) {
         routesDir,
     };
 }
+function resolvePolicyModule(projectRoot, modulePath, allowedSourceDirs) {
+    const resolvedModule = resolveProjectPath(projectRoot, modulePath, "dehydratePolicyModule");
+    if (!allowedSourceDirs.some((directory) => isInsideDirectory(directory, resolvedModule))) {
+        throw new Error(`mreactRouter dehydratePolicyModule must resolve inside allowedSourceDirs: ${resolvedModule}`);
+    }
+    return resolvedModule;
+}
 function defaultAllowedSourceDir(projectRoot, routesDir) {
     const sourceRoot = dirname(routesDir);
     return basename(routesDir) === "app" && sourceRoot !== projectRoot ? sourceRoot : routesDir;

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAO7E,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,UAAU,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;IAChD,cAAc,EAAE,CAAC,MAAM,CAAC;CAIzB,CAAC;AAwDF,MAAM,UAAU,8BAA8B,CAC5C,OAAgC;IAEhC,MAAM,0BAA0B,GAAG,iCAAiC,CAClE,OAAO,CAAC,UAAU,EAAE,iBAAiB,CACtC,CAAC;IAEF,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,OAAO,CAAC,WAAW,KAAK,SAAS;QACjC,OAAO,CAAC,SAAS,KAAK,SAAS,EAC/B,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEvC,OAAO;YACL,iBAAiB,EAAE,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3E,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAC3D;YACD,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YACrF,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACnD,YAAY,EAAE,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;YACvD,gBAAgB,EAAE,0BAA0B,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACtE,GAAG,CAAC,0BAA0B,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,CAAC;YACnF,WAAW,EAAE,MAAM;YACnB,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACvD,SAAS,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,EAAE,WAAW,CAAC;YACjF,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/F,MAAM,wBAAwB,GAC5B,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IAEhG,OAAO;QACL,iBAAiB,EAAE,CAAC,OAAO,CAAC,iBAAiB,IAAI,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3F,kBAAkB,CAAC,WAAW,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAChE;QACD,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACnD,YAAY,EAAE,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;QACvD,gBAAgB,EAAE,0BAA0B,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACtE,GAAG,CAAC,0BAA0B,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,CAAC;QACnF,WAAW;QACX,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvD,SAAS,EAAE,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,EAAE,WAAW,CAAC;QACtF,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,WAAmB,EAAE,SAAiB;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9F,CAAC;AAED,MAAM,kCAAkC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAC7E,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAA+B;IAC1E,OAAO;IACP,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,UAAU,iCAAiC,CAC/C,KAAsD;IAEtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5E,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5C,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,gEAAgE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iEAAiE,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,KAAK,CAAC;QAC/B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAiD;IAEjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,wDAAwD,CACjI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAoD;IAEpD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,4BAA4B,CAAC,cAAc,CAAC;IACrD,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mDAAmD,CACnH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,IAAY,EAAE,UAAkB;IACxE,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE7C,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,gBAAgB,UAAU,kDAAkD,IAAI,KAAK,UAAU,KAAK,YAAY,EAAE,CACnH,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE1C,OAAO,YAAY,KAAK,EAAE,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9F,CAAC","sourcesContent":["import { basename, dirname, isAbsolute, relative, resolve } from \"node:path\";\n\n/**\n * Selects the deployment runtime artifacts emitted by an app-router build.\n */\nexport type AppRouterBuildTarget = \"node\" | \"cloudflare\" | \"aws-lambda\";\n\nexport const appRouterBuildTargetMetadata = {\n  allTargets: [\"node\", \"cloudflare\", \"aws-lambda\"],\n  defaultTargets: [\"node\"],\n} as const satisfies {\n  allTargets: readonly AppRouterBuildTarget[];\n  defaultTargets: readonly AppRouterBuildTarget[];\n};\n/**\n * Names a browser console method that can be stripped from client bundles.\n */\nexport type AppRouterClientConsoleMethod = \"debug\" | \"error\" | \"info\" | \"log\" | \"trace\" | \"warn\";\n/**\n * Controls how client bundle source maps are generated.\n */\nexport type AppRouterClientSourceMapMode = \"none\" | \"hidden\" | \"linked\";\n/**\n * Configures client source map output with a boolean shortcut or explicit mode.\n */\nexport type AppRouterClientSourceMapOption = boolean | AppRouterClientSourceMapMode;\n\n/**\n * Configures production-only app-router build behavior.\n */\nexport interface AppRouterProductionOptions {\n  dropClientConsole?: boolean | readonly AppRouterClientConsoleMethod[] | undefined;\n}\n\nexport interface AppRouterProjectOptions {\n  assetBaseUrl?: string | undefined;\n  buildConcurrency?: number | undefined;\n  buildTargets?: readonly AppRouterBuildTarget[] | undefined;\n  clientSourceMaps?: AppRouterClientSourceMapOption | undefined;\n  /**\n   * Legacy route root. When provided without routesDir/projectRoot, this keeps\n   * the historical \"appDir is the whole app boundary\" behavior.\n   *\n   * @deprecated Use projectRoot + routesDir instead. The legacy appDir shortcut\n   * is kept for direct tests and older programmatic callers and is planned for\n   * removal after 0.1.0.\n   */\n  appDir?: string | undefined;\n  allowedSourceDirs?: readonly string[] | undefined;\n  projectRoot?: string | undefined;\n  production?: AppRouterProductionOptions | undefined;\n  publicDir?: string | undefined;\n  publicAssetBaseUrl?: string | undefined;\n  routesDir?: string | undefined;\n}\n\nexport interface ResolvedAppRouterProject {\n  allowedSourceDirs: readonly string[];\n  assetBaseUrl?: string | undefined;\n  buildConcurrency?: number | undefined;\n  buildTargets: readonly AppRouterBuildTarget[];\n  clientSourceMaps: AppRouterClientSourceMapMode;\n  clientConsolePureFunctions?: readonly string[] | undefined;\n  projectRoot: string;\n  publicAssetBaseUrl?: string | undefined;\n  publicDir: string;\n  routesDir: string;\n}\n\nexport function resolveAppRouterProjectOptions(\n  options: AppRouterProjectOptions,\n): ResolvedAppRouterProject {\n  const clientConsolePureFunctions = resolveClientConsolePureFunctions(\n    options.production?.dropClientConsole,\n  );\n\n  if (\n    options.appDir !== undefined &&\n    options.projectRoot === undefined &&\n    options.routesDir === undefined\n  ) {\n    const appDir = resolve(options.appDir);\n\n    return {\n      allowedSourceDirs: (options.allowedSourceDirs ?? [appDir]).map((directory) =>\n        resolveProjectPath(appDir, directory, \"allowedSourceDirs\"),\n      ),\n      ...(options.assetBaseUrl === undefined ? {} : { assetBaseUrl: options.assetBaseUrl }),\n      ...(options.buildConcurrency === undefined\n        ? {}\n        : { buildConcurrency: options.buildConcurrency }),\n      buildTargets: resolveBuildTargets(options.buildTargets),\n      clientSourceMaps: resolveClientSourceMapMode(options.clientSourceMaps),\n      ...(clientConsolePureFunctions === undefined ? {} : { clientConsolePureFunctions }),\n      projectRoot: appDir,\n      ...(options.publicAssetBaseUrl === undefined\n        ? {}\n        : { publicAssetBaseUrl: options.publicAssetBaseUrl }),\n      publicDir: resolveProjectPath(appDir, options.publicDir ?? \"public\", \"publicDir\"),\n      routesDir: appDir,\n    };\n  }\n\n  const projectRoot = resolve(options.projectRoot ?? process.cwd());\n  const routesDir = resolveProjectPath(projectRoot, options.routesDir ?? \"src/app\", \"routesDir\");\n  const defaultAllowedSourceDirs =\n    options.routesDir === undefined ? [\"src\"] : [defaultAllowedSourceDir(projectRoot, routesDir)];\n\n  return {\n    allowedSourceDirs: (options.allowedSourceDirs ?? defaultAllowedSourceDirs).map((directory) =>\n      resolveProjectPath(projectRoot, directory, \"allowedSourceDirs\"),\n    ),\n    ...(options.assetBaseUrl === undefined ? {} : { assetBaseUrl: options.assetBaseUrl }),\n    ...(options.buildConcurrency === undefined\n      ? {}\n      : { buildConcurrency: options.buildConcurrency }),\n    buildTargets: resolveBuildTargets(options.buildTargets),\n    clientSourceMaps: resolveClientSourceMapMode(options.clientSourceMaps),\n    ...(clientConsolePureFunctions === undefined ? {} : { clientConsolePureFunctions }),\n    projectRoot,\n    ...(options.publicAssetBaseUrl === undefined\n      ? {}\n      : { publicAssetBaseUrl: options.publicAssetBaseUrl }),\n    publicDir: resolveProjectPath(projectRoot, options.publicDir ?? \"public\", \"publicDir\"),\n    routesDir,\n  };\n}\n\nfunction defaultAllowedSourceDir(projectRoot: string, routesDir: string): string {\n  const sourceRoot = dirname(routesDir);\n  return basename(routesDir) === \"app\" && sourceRoot !== projectRoot ? sourceRoot : routesDir;\n}\n\nconst defaultDroppedClientConsoleMethods = [\"debug\", \"info\", \"log\"] as const;\nconst supportedClientConsoleMethods = new Set<AppRouterClientConsoleMethod>([\n  \"debug\",\n  \"error\",\n  \"info\",\n  \"log\",\n  \"trace\",\n  \"warn\",\n]);\n\nexport function resolveClientConsolePureFunctions(\n  value: AppRouterProductionOptions[\"dropClientConsole\"],\n): readonly string[] | undefined {\n  if (value === undefined || value === false) {\n    return undefined;\n  }\n\n  const methods = value === true ? defaultDroppedClientConsoleMethods : value;\n  const uniqueMethods = [...new Set(methods)];\n\n  for (const method of uniqueMethods) {\n    if (!supportedClientConsoleMethods.has(method)) {\n      throw new Error(\n        `Unsupported mreactRouter production.dropClientConsole method ${JSON.stringify(method)}. Expected \"debug\", \"error\", \"info\", \"log\", \"trace\", or \"warn\".`,\n      );\n    }\n  }\n\n  return uniqueMethods.length === 0\n    ? undefined\n    : uniqueMethods.map((method) => `console.${method}`);\n}\n\nexport function resolveClientSourceMapMode(\n  value: AppRouterClientSourceMapOption | undefined,\n): AppRouterClientSourceMapMode {\n  if (value === undefined || value === false || value === \"none\") {\n    return \"none\";\n  }\n\n  if (value === true || value === \"linked\") {\n    return \"linked\";\n  }\n\n  if (value === \"hidden\") {\n    return \"hidden\";\n  }\n\n  throw new Error(\n    `Unsupported mreactRouter clientSourceMaps value ${JSON.stringify(value)}. Expected false, true, \"none\", \"hidden\", or \"linked\".`,\n  );\n}\n\nexport function resolveBuildTargets(\n  targets: readonly AppRouterBuildTarget[] | undefined,\n): readonly AppRouterBuildTarget[] {\n  if (targets === undefined) {\n    return appRouterBuildTargetMetadata.defaultTargets;\n  }\n\n  const uniqueTargets = [...new Set(targets)];\n\n  if (uniqueTargets.length === 0) {\n    throw new Error(\"mreactRouter buildTargets must include at least one target.\");\n  }\n\n  for (const target of uniqueTargets) {\n    if (!appRouterBuildTargetMetadata.allTargets.some((supported) => supported === target)) {\n      throw new Error(\n        `Unsupported mreactRouter build target ${JSON.stringify(target)}. Expected \"node\", \"cloudflare\", or \"aws-lambda\".`,\n      );\n    }\n  }\n\n  return uniqueTargets;\n}\n\nfunction resolveProjectPath(root: string, path: string, optionName: string): string {\n  const resolvedPath = resolvePath(root, path);\n\n  if (!isInsideDirectory(root, resolvedPath)) {\n    throw new Error(\n      `mreactRouter ${optionName} must resolve inside projectRoot. projectRoot: ${root}; ${optionName}: ${resolvedPath}`,\n    );\n  }\n\n  return resolvedPath;\n}\n\nfunction resolvePath(root: string, path: string): string {\n  return isAbsolute(path) ? resolve(path) : resolve(root, path);\n}\n\nfunction isInsideDirectory(root: string, path: string): boolean {\n  const relativePath = relative(root, path);\n\n  return relativePath === \"\" || (!relativePath.startsWith(\"..\") && !isAbsolute(relativePath));\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAO7E,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,UAAU,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC;IAChD,cAAc,EAAE,CAAC,MAAM,CAAC;CAIzB,CAAC;AA2DF,MAAM,UAAU,8BAA8B,CAC5C,OAAgC;IAEhC,MAAM,0BAA0B,GAAG,iCAAiC,CAClE,OAAO,CAAC,UAAU,EAAE,iBAAiB,CACtC,CAAC;IAEF,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,OAAO,CAAC,WAAW,KAAK,SAAS;QACjC,OAAO,CAAC,SAAS,KAAK,SAAS,EAC/B,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,iBAAiB,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAClF,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAC3D,CAAC;QAEF,OAAO;YACL,iBAAiB;YACjB,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YACrF,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACnD,YAAY,EAAE,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;YACvD,gBAAgB,EAAE,0BAA0B,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACtE,GAAG,CAAC,0BAA0B,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,CAAC;YACnF,GAAG,CAAC,OAAO,CAAC,qBAAqB,KAAK,SAAS;gBAC7C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,qBAAqB,EAAE,mBAAmB,CACxC,MAAM,EACN,OAAO,CAAC,qBAAqB,EAC7B,iBAAiB,CAClB;iBACF,CAAC;YACN,WAAW,EAAE,MAAM;YACnB,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACvD,SAAS,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,EAAE,WAAW,CAAC;YACjF,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/F,MAAM,wBAAwB,GAC5B,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IAChG,MAAM,iBAAiB,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,wBAAwB,CAAC,CAAC,GAAG,CACnF,CAAC,SAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAC/E,CAAC;IAEF,OAAO;QACL,iBAAiB;QACjB,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACnD,YAAY,EAAE,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;QACvD,gBAAgB,EAAE,0BAA0B,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACtE,GAAG,CAAC,0BAA0B,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,CAAC;QACnF,GAAG,CAAC,OAAO,CAAC,qBAAqB,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,qBAAqB,EAAE,mBAAmB,CACxC,WAAW,EACX,OAAO,CAAC,qBAAqB,EAC7B,iBAAiB,CAClB;aACF,CAAC;QACN,WAAW;QACX,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvD,SAAS,EAAE,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,EAAE,WAAW,CAAC;QACtF,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,WAAmB,EACnB,UAAkB,EAClB,iBAAoC;IAEpC,MAAM,cAAc,GAAG,kBAAkB,CAAC,WAAW,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAC5F,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CACb,6EAA6E,cAAc,EAAE,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,uBAAuB,CAAC,WAAmB,EAAE,SAAiB;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9F,CAAC;AAED,MAAM,kCAAkC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAC7E,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAA+B;IAC1E,OAAO;IACP,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,UAAU,iCAAiC,CAC/C,KAAsD;IAEtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5E,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5C,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,gEAAgE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iEAAiE,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,KAAK,CAAC;QAC/B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAiD;IAEjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,wDAAwD,CACjI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAoD;IAEpD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,4BAA4B,CAAC,cAAc,CAAC;IACrD,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,mDAAmD,CACnH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,IAAY,EAAE,UAAkB;IACxE,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE7C,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,gBAAgB,UAAU,kDAAkD,IAAI,KAAK,UAAU,KAAK,YAAY,EAAE,CACnH,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE1C,OAAO,YAAY,KAAK,EAAE,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9F,CAAC","sourcesContent":["import { basename, dirname, isAbsolute, relative, resolve } from \"node:path\";\n\n/**\n * Selects the deployment runtime artifacts emitted by an app-router build.\n */\nexport type AppRouterBuildTarget = \"node\" | \"cloudflare\" | \"aws-lambda\";\n\nexport const appRouterBuildTargetMetadata = {\n  allTargets: [\"node\", \"cloudflare\", \"aws-lambda\"],\n  defaultTargets: [\"node\"],\n} as const satisfies {\n  allTargets: readonly AppRouterBuildTarget[];\n  defaultTargets: readonly AppRouterBuildTarget[];\n};\n/**\n * Names a browser console method that can be stripped from client bundles.\n */\nexport type AppRouterClientConsoleMethod = \"debug\" | \"error\" | \"info\" | \"log\" | \"trace\" | \"warn\";\n/**\n * Controls how client bundle source maps are generated.\n */\nexport type AppRouterClientSourceMapMode = \"none\" | \"hidden\" | \"linked\";\n/**\n * Configures client source map output with a boolean shortcut or explicit mode.\n */\nexport type AppRouterClientSourceMapOption = boolean | AppRouterClientSourceMapMode;\n\n/**\n * Configures production-only app-router build behavior.\n */\nexport interface AppRouterProductionOptions {\n  dropClientConsole?: boolean | readonly AppRouterClientConsoleMethod[] | undefined;\n}\n\nexport interface AppRouterProjectOptions {\n  assetBaseUrl?: string | undefined;\n  buildConcurrency?: number | undefined;\n  buildTargets?: readonly AppRouterBuildTarget[] | undefined;\n  clientSourceMaps?: AppRouterClientSourceMapOption | undefined;\n  /** Project-local server module exporting a named `dehydrateOptions` policy. */\n  dehydratePolicyModule?: string | undefined;\n  /**\n   * Legacy route root. When provided without routesDir/projectRoot, this keeps\n   * the historical \"appDir is the whole app boundary\" behavior.\n   *\n   * @deprecated Use projectRoot + routesDir instead. The legacy appDir shortcut\n   * is kept for direct tests and older programmatic callers and is planned for\n   * removal after 0.1.0.\n   */\n  appDir?: string | undefined;\n  allowedSourceDirs?: readonly string[] | undefined;\n  projectRoot?: string | undefined;\n  production?: AppRouterProductionOptions | undefined;\n  publicDir?: string | undefined;\n  publicAssetBaseUrl?: string | undefined;\n  routesDir?: string | undefined;\n}\n\nexport interface ResolvedAppRouterProject {\n  allowedSourceDirs: readonly string[];\n  assetBaseUrl?: string | undefined;\n  buildConcurrency?: number | undefined;\n  buildTargets: readonly AppRouterBuildTarget[];\n  clientSourceMaps: AppRouterClientSourceMapMode;\n  clientConsolePureFunctions?: readonly string[] | undefined;\n  dehydratePolicyModule?: string | undefined;\n  projectRoot: string;\n  publicAssetBaseUrl?: string | undefined;\n  publicDir: string;\n  routesDir: string;\n}\n\nexport function resolveAppRouterProjectOptions(\n  options: AppRouterProjectOptions,\n): ResolvedAppRouterProject {\n  const clientConsolePureFunctions = resolveClientConsolePureFunctions(\n    options.production?.dropClientConsole,\n  );\n\n  if (\n    options.appDir !== undefined &&\n    options.projectRoot === undefined &&\n    options.routesDir === undefined\n  ) {\n    const appDir = resolve(options.appDir);\n    const allowedSourceDirs = (options.allowedSourceDirs ?? [appDir]).map((directory) =>\n      resolveProjectPath(appDir, directory, \"allowedSourceDirs\"),\n    );\n\n    return {\n      allowedSourceDirs,\n      ...(options.assetBaseUrl === undefined ? {} : { assetBaseUrl: options.assetBaseUrl }),\n      ...(options.buildConcurrency === undefined\n        ? {}\n        : { buildConcurrency: options.buildConcurrency }),\n      buildTargets: resolveBuildTargets(options.buildTargets),\n      clientSourceMaps: resolveClientSourceMapMode(options.clientSourceMaps),\n      ...(clientConsolePureFunctions === undefined ? {} : { clientConsolePureFunctions }),\n      ...(options.dehydratePolicyModule === undefined\n        ? {}\n        : {\n            dehydratePolicyModule: resolvePolicyModule(\n              appDir,\n              options.dehydratePolicyModule,\n              allowedSourceDirs,\n            ),\n          }),\n      projectRoot: appDir,\n      ...(options.publicAssetBaseUrl === undefined\n        ? {}\n        : { publicAssetBaseUrl: options.publicAssetBaseUrl }),\n      publicDir: resolveProjectPath(appDir, options.publicDir ?? \"public\", \"publicDir\"),\n      routesDir: appDir,\n    };\n  }\n\n  const projectRoot = resolve(options.projectRoot ?? process.cwd());\n  const routesDir = resolveProjectPath(projectRoot, options.routesDir ?? \"src/app\", \"routesDir\");\n  const defaultAllowedSourceDirs =\n    options.routesDir === undefined ? [\"src\"] : [defaultAllowedSourceDir(projectRoot, routesDir)];\n  const allowedSourceDirs = (options.allowedSourceDirs ?? defaultAllowedSourceDirs).map(\n    (directory) => resolveProjectPath(projectRoot, directory, \"allowedSourceDirs\"),\n  );\n\n  return {\n    allowedSourceDirs,\n    ...(options.assetBaseUrl === undefined ? {} : { assetBaseUrl: options.assetBaseUrl }),\n    ...(options.buildConcurrency === undefined\n      ? {}\n      : { buildConcurrency: options.buildConcurrency }),\n    buildTargets: resolveBuildTargets(options.buildTargets),\n    clientSourceMaps: resolveClientSourceMapMode(options.clientSourceMaps),\n    ...(clientConsolePureFunctions === undefined ? {} : { clientConsolePureFunctions }),\n    ...(options.dehydratePolicyModule === undefined\n      ? {}\n      : {\n          dehydratePolicyModule: resolvePolicyModule(\n            projectRoot,\n            options.dehydratePolicyModule,\n            allowedSourceDirs,\n          ),\n        }),\n    projectRoot,\n    ...(options.publicAssetBaseUrl === undefined\n      ? {}\n      : { publicAssetBaseUrl: options.publicAssetBaseUrl }),\n    publicDir: resolveProjectPath(projectRoot, options.publicDir ?? \"public\", \"publicDir\"),\n    routesDir,\n  };\n}\n\nfunction resolvePolicyModule(\n  projectRoot: string,\n  modulePath: string,\n  allowedSourceDirs: readonly string[],\n): string {\n  const resolvedModule = resolveProjectPath(projectRoot, modulePath, \"dehydratePolicyModule\");\n  if (!allowedSourceDirs.some((directory) => isInsideDirectory(directory, resolvedModule))) {\n    throw new Error(\n      `mreactRouter dehydratePolicyModule must resolve inside allowedSourceDirs: ${resolvedModule}`,\n    );\n  }\n  return resolvedModule;\n}\n\nfunction defaultAllowedSourceDir(projectRoot: string, routesDir: string): string {\n  const sourceRoot = dirname(routesDir);\n  return basename(routesDir) === \"app\" && sourceRoot !== projectRoot ? sourceRoot : routesDir;\n}\n\nconst defaultDroppedClientConsoleMethods = [\"debug\", \"info\", \"log\"] as const;\nconst supportedClientConsoleMethods = new Set<AppRouterClientConsoleMethod>([\n  \"debug\",\n  \"error\",\n  \"info\",\n  \"log\",\n  \"trace\",\n  \"warn\",\n]);\n\nexport function resolveClientConsolePureFunctions(\n  value: AppRouterProductionOptions[\"dropClientConsole\"],\n): readonly string[] | undefined {\n  if (value === undefined || value === false) {\n    return undefined;\n  }\n\n  const methods = value === true ? defaultDroppedClientConsoleMethods : value;\n  const uniqueMethods = [...new Set(methods)];\n\n  for (const method of uniqueMethods) {\n    if (!supportedClientConsoleMethods.has(method)) {\n      throw new Error(\n        `Unsupported mreactRouter production.dropClientConsole method ${JSON.stringify(method)}. Expected \"debug\", \"error\", \"info\", \"log\", \"trace\", or \"warn\".`,\n      );\n    }\n  }\n\n  return uniqueMethods.length === 0\n    ? undefined\n    : uniqueMethods.map((method) => `console.${method}`);\n}\n\nexport function resolveClientSourceMapMode(\n  value: AppRouterClientSourceMapOption | undefined,\n): AppRouterClientSourceMapMode {\n  if (value === undefined || value === false || value === \"none\") {\n    return \"none\";\n  }\n\n  if (value === true || value === \"linked\") {\n    return \"linked\";\n  }\n\n  if (value === \"hidden\") {\n    return \"hidden\";\n  }\n\n  throw new Error(\n    `Unsupported mreactRouter clientSourceMaps value ${JSON.stringify(value)}. Expected false, true, \"none\", \"hidden\", or \"linked\".`,\n  );\n}\n\nexport function resolveBuildTargets(\n  targets: readonly AppRouterBuildTarget[] | undefined,\n): readonly AppRouterBuildTarget[] {\n  if (targets === undefined) {\n    return appRouterBuildTargetMetadata.defaultTargets;\n  }\n\n  const uniqueTargets = [...new Set(targets)];\n\n  if (uniqueTargets.length === 0) {\n    throw new Error(\"mreactRouter buildTargets must include at least one target.\");\n  }\n\n  for (const target of uniqueTargets) {\n    if (!appRouterBuildTargetMetadata.allTargets.some((supported) => supported === target)) {\n      throw new Error(\n        `Unsupported mreactRouter build target ${JSON.stringify(target)}. Expected \"node\", \"cloudflare\", or \"aws-lambda\".`,\n      );\n    }\n  }\n\n  return uniqueTargets;\n}\n\nfunction resolveProjectPath(root: string, path: string, optionName: string): string {\n  const resolvedPath = resolvePath(root, path);\n\n  if (!isInsideDirectory(root, resolvedPath)) {\n    throw new Error(\n      `mreactRouter ${optionName} must resolve inside projectRoot. projectRoot: ${root}; ${optionName}: ${resolvedPath}`,\n    );\n  }\n\n  return resolvedPath;\n}\n\nfunction resolvePath(root: string, path: string): string {\n  return isAbsolute(path) ? resolve(path) : resolve(root, path);\n}\n\nfunction isInsideDirectory(root: string, path: string): boolean {\n  const relativePath = relative(root, path);\n\n  return relativePath === \"\" || (!relativePath.startsWith(\"..\") && !isAbsolute(relativePath));\n}\n"]}

package/dist/csp.d.ts

@@ -5,5 +5,6 @@ export interface ContentSecurityPolicyInput {
     remove?: readonly string[];
     replace?: Record<string, readonly string[] | string>;
 }
+export declare function responseHeadersContainCspNonce(headers: Headers): boolean;
 export declare function contentSecurityPolicy(csp: ContentSecurityPolicyInput | undefined): string | undefined;
 //# sourceMappingURL=csp.d.ts.map

package/dist/csp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csp.d.ts","sourceRoot":"","sources":["../src/csp.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC;CACtD;AA4CD,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,0BAA0B,GAAG,SAAS,GAC1C,MAAM,GAAG,SAAS,CAsCpB"}
+{"version":3,"file":"csp.d.ts","sourceRoot":"","sources":["../src/csp.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC;CACtD;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CASxE;AAsCD,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,0BAA0B,GAAG,SAAS,GAC1C,MAAM,GAAG,SAAS,CAoCpB"}

package/dist/csp.js

@@ -9,6 +9,15 @@
 // Allowed directive value shape: no `;`, no quote, no whitespace, no ASCII
 // control characters. Quoted-keyword forms (`'self'`, `'nonce-...'`,
 // `'sha256-...'`, etc.) are accepted via the `'...'` allow-list pattern.
+export function responseHeadersContainCspNonce(headers) {
+    for (const name of ["content-security-policy", "content-security-policy-report-only"]) {
+        const value = headers.get(name);
+        if (value !== null && /(?:^|[\s;,])'nonce-[^']+'(?=$|[\s;,])/i.test(value)) {
+            return true;
+        }
+    }
+    return false;
+}
 const VALID_NONCE = /^[A-Za-z0-9+/=_-]+$/;
 const VALID_DIRECTIVE_NAME = /^[a-z][a-z0-9-]*$/i;
 // One CSP "source expression". Reject anything containing `;`, quote,
@@ -31,11 +40,7 @@ function isValidDirectiveValue(value) {
     }
     for (let index = 0; index < value.length; index += 1) {
         const code = value.charCodeAt(index);
-        if (code <= 0x20 ||
-            code === 0x22 ||
-            code === 0x27 ||
-            code === 0x3b ||
-            code === 0x7f) {
+        if (code <= 0x20 || code === 0x22 || code === 0x27 || code === 0x3b || code === 0x7f) {
             return false;
         }
     }
@@ -65,6 +70,6 @@ export function contentSecurityPolicy(csp) {
         }
         serialized.push(`${name} ${values.join(" ")}`);
     }
-    return serialized.join("; ");
+    return serialized.length === 0 ? undefined : serialized.join("; ");
 }
 //# sourceMappingURL=csp.js.map

package/dist/csp.js.map

@@ -1 +1 @@
-{"version":3,"file":"csp.js","sourceRoot":"","sources":["../src/csp.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AACzE,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,qEAAqE;AACrE,yEAAyE;AAUzE,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAC1C,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAClD,sEAAsE;AACtE,gEAAgE;AAChE,mEAAmE;AACnE,2BAA2B;AAC3B,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAE/D,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAErC,IACE,IAAI,IAAI,IAAI;YACZ,IAAI,KAAK,IAAI;YACb,IAAI,KAAK,IAAI;YACb,IAAI,KAAK,IAAI;YACb,IAAI,KAAK,IAAI,EACb,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAA2C;IAE3C,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,IAAI,GAAG,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CACjB,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,+BAA+B,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAE9D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,SAAS,CACjB,mCAAmC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CACvE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;QAE9B,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["// CSP header serializer used by the App Router metadata pipeline.\n//\n// Validates both nonce and directive values before string-concatenating\n// them into the Content-Security-Policy header. Background: directive\n// concatenation with `; ` and quoted-source concatenation with `' '` are\n// trivially escapable if untrusted strings reach the metadata field.\n//\n// Allowed nonce shape: base64 / base64url alphabet only (`+/=` and `-_=`).\n// Allowed directive value shape: no `;`, no quote, no whitespace, no ASCII\n// control characters. Quoted-keyword forms (`'self'`, `'nonce-...'`,\n// `'sha256-...'`, etc.) are accepted via the `'...'` allow-list pattern.\n\nexport interface ContentSecurityPolicyInput {\n  disable?: boolean;\n  directives?: Record<string, readonly string[] | string>;\n  nonce?: string;\n  remove?: readonly string[];\n  replace?: Record<string, readonly string[] | string>;\n}\n\nconst VALID_NONCE = /^[A-Za-z0-9+/=_-]+$/;\nconst VALID_DIRECTIVE_NAME = /^[a-z][a-z0-9-]*$/i;\n// One CSP \"source expression\". Reject anything containing `;`, quote,\n// whitespace, or ASCII control characters. Quoted keywords like\n// `'self'`, `'unsafe-inline'`, `'nonce-XYZ='` are accepted via the\n// alternate `'...'` shape.\nconst VALID_QUOTED_DIRECTIVE_VALUE = /^'[A-Za-z0-9+/=_:.-]+'$/;\n\nfunction isValidNonce(nonce: string): boolean {\n  return VALID_NONCE.test(nonce);\n}\n\nfunction isValidDirectiveName(name: string): boolean {\n  return VALID_DIRECTIVE_NAME.test(name);\n}\n\nfunction isValidDirectiveValue(value: string): boolean {\n  if (VALID_QUOTED_DIRECTIVE_VALUE.test(value)) {\n    return true;\n  }\n\n  if (value.length === 0) {\n    return false;\n  }\n\n  for (let index = 0; index < value.length; index += 1) {\n    const code = value.charCodeAt(index);\n\n    if (\n      code <= 0x20 ||\n      code === 0x22 ||\n      code === 0x27 ||\n      code === 0x3b ||\n      code === 0x7f\n    ) {\n      return false;\n    }\n  }\n\n  return true;\n}\n\nexport function contentSecurityPolicy(\n  csp: ContentSecurityPolicyInput | undefined,\n): string | undefined {\n  if (csp?.disable === true || csp?.directives === undefined) {\n    return undefined;\n  }\n\n  if (csp.nonce !== undefined && !isValidNonce(csp.nonce)) {\n    throw new TypeError(\n      `invalid CSP nonce: ${JSON.stringify(csp.nonce)} - must be base64 / base64url`,\n    );\n  }\n\n  const serialized: string[] = [];\n\n  for (const [name, value] of Object.entries(csp.directives)) {\n    if (!isValidDirectiveName(name)) {\n      throw new TypeError(`invalid CSP directive name: ${JSON.stringify(name)}`);\n    }\n\n    const rawValues = Array.isArray(value) ? [...value] : [value];\n\n    for (const rawValue of rawValues) {\n      if (typeof rawValue !== \"string\" || !isValidDirectiveValue(rawValue)) {\n        throw new TypeError(\n          `invalid CSP directive value for ${name}: ${JSON.stringify(rawValue)}`,\n        );\n      }\n    }\n\n    const values = [...rawValues];\n\n    if (csp.nonce !== undefined && (name === \"script-src\" || name === \"style-src\")) {\n      values.push(`'nonce-${csp.nonce}'`);\n    }\n\n    serialized.push(`${name} ${values.join(\" \")}`);\n  }\n\n  return serialized.join(\"; \");\n}\n"]}
+{"version":3,"file":"csp.js","sourceRoot":"","sources":["../src/csp.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AACzE,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,qEAAqE;AACrE,yEAAyE;AAUzE,MAAM,UAAU,8BAA8B,CAAC,OAAgB;IAC7D,KAAK,MAAM,IAAI,IAAI,CAAC,yBAAyB,EAAE,qCAAqC,CAAC,EAAE,CAAC;QACtF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,IAAI,IAAI,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAC1C,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAClD,sEAAsE;AACtE,gEAAgE;AAChE,mEAAmE;AACnE,2BAA2B;AAC3B,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAE/D,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAErC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAA2C;IAE3C,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,IAAI,GAAG,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CACjB,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,+BAA+B,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAE9D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,SAAS,CAAC,mCAAmC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;QAE9B,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC","sourcesContent":["// CSP header serializer used by the App Router metadata pipeline.\n//\n// Validates both nonce and directive values before string-concatenating\n// them into the Content-Security-Policy header. Background: directive\n// concatenation with `; ` and quoted-source concatenation with `' '` are\n// trivially escapable if untrusted strings reach the metadata field.\n//\n// Allowed nonce shape: base64 / base64url alphabet only (`+/=` and `-_=`).\n// Allowed directive value shape: no `;`, no quote, no whitespace, no ASCII\n// control characters. Quoted-keyword forms (`'self'`, `'nonce-...'`,\n// `'sha256-...'`, etc.) are accepted via the `'...'` allow-list pattern.\n\nexport interface ContentSecurityPolicyInput {\n  disable?: boolean;\n  directives?: Record<string, readonly string[] | string>;\n  nonce?: string;\n  remove?: readonly string[];\n  replace?: Record<string, readonly string[] | string>;\n}\n\nexport function responseHeadersContainCspNonce(headers: Headers): boolean {\n  for (const name of [\"content-security-policy\", \"content-security-policy-report-only\"]) {\n    const value = headers.get(name);\n    if (value !== null && /(?:^|[\\s;,])'nonce-[^']+'(?=$|[\\s;,])/i.test(value)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nconst VALID_NONCE = /^[A-Za-z0-9+/=_-]+$/;\nconst VALID_DIRECTIVE_NAME = /^[a-z][a-z0-9-]*$/i;\n// One CSP \"source expression\". Reject anything containing `;`, quote,\n// whitespace, or ASCII control characters. Quoted keywords like\n// `'self'`, `'unsafe-inline'`, `'nonce-XYZ='` are accepted via the\n// alternate `'...'` shape.\nconst VALID_QUOTED_DIRECTIVE_VALUE = /^'[A-Za-z0-9+/=_:.-]+'$/;\n\nfunction isValidNonce(nonce: string): boolean {\n  return VALID_NONCE.test(nonce);\n}\n\nfunction isValidDirectiveName(name: string): boolean {\n  return VALID_DIRECTIVE_NAME.test(name);\n}\n\nfunction isValidDirectiveValue(value: string): boolean {\n  if (VALID_QUOTED_DIRECTIVE_VALUE.test(value)) {\n    return true;\n  }\n\n  if (value.length === 0) {\n    return false;\n  }\n\n  for (let index = 0; index < value.length; index += 1) {\n    const code = value.charCodeAt(index);\n\n    if (code <= 0x20 || code === 0x22 || code === 0x27 || code === 0x3b || code === 0x7f) {\n      return false;\n    }\n  }\n\n  return true;\n}\n\nexport function contentSecurityPolicy(\n  csp: ContentSecurityPolicyInput | undefined,\n): string | undefined {\n  if (csp?.disable === true || csp?.directives === undefined) {\n    return undefined;\n  }\n\n  if (csp.nonce !== undefined && !isValidNonce(csp.nonce)) {\n    throw new TypeError(\n      `invalid CSP nonce: ${JSON.stringify(csp.nonce)} - must be base64 / base64url`,\n    );\n  }\n\n  const serialized: string[] = [];\n\n  for (const [name, value] of Object.entries(csp.directives)) {\n    if (!isValidDirectiveName(name)) {\n      throw new TypeError(`invalid CSP directive name: ${JSON.stringify(name)}`);\n    }\n\n    const rawValues = Array.isArray(value) ? [...value] : [value];\n\n    for (const rawValue of rawValues) {\n      if (typeof rawValue !== \"string\" || !isValidDirectiveValue(rawValue)) {\n        throw new TypeError(`invalid CSP directive value for ${name}: ${JSON.stringify(rawValue)}`);\n      }\n    }\n\n    const values = [...rawValues];\n\n    if (csp.nonce !== undefined && (name === \"script-src\" || name === \"style-src\")) {\n      values.push(`'nonce-${csp.nonce}'`);\n    }\n\n    serialized.push(`${name} ${values.join(\" \")}`);\n  }\n\n  return serialized.length === 0 ? undefined : serialized.join(\"; \");\n}\n"]}

package/dist/dehydrate-policy.d.ts

@@ -0,0 +1,3 @@
+import type { DehydrateOptions } from "@reckona/mreact-query";
+export declare function dehydrateOptionsFromModule(module: unknown, label: string): DehydrateOptions;
+//# sourceMappingURL=dehydrate-policy.d.ts.map

package/dist/dehydrate-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dehydrate-policy.d.ts","sourceRoot":"","sources":["../src/dehydrate-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,MAAM,GACZ,gBAAgB,CAiBlB"}

package/dist/dehydrate-policy.js

@@ -0,0 +1,16 @@
+export function dehydrateOptionsFromModule(module, label) {
+    if (module === null || typeof module !== "object" || !("dehydrateOptions" in module)) {
+        throw new Error(`${label} must export a named dehydrateOptions object.`);
+    }
+    const dehydrateOptions = module.dehydrateOptions;
+    if (dehydrateOptions === null || typeof dehydrateOptions !== "object") {
+        throw new Error(`${label} must export a named dehydrateOptions object.`);
+    }
+    const shouldDehydrateQuery = dehydrateOptions
+        .shouldDehydrateQuery;
+    if (shouldDehydrateQuery !== undefined && typeof shouldDehydrateQuery !== "function") {
+        throw new Error(`${label} dehydrateOptions.shouldDehydrateQuery must be a function.`);
+    }
+    return dehydrateOptions;
+}
+//# sourceMappingURL=dehydrate-policy.js.map

package/dist/dehydrate-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dehydrate-policy.js","sourceRoot":"","sources":["../src/dehydrate-policy.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,0BAA0B,CACxC,MAAe,EACf,KAAa;IAEb,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,kBAAkB,IAAI,MAAM,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,gBAAgB,GAAI,MAAyC,CAAC,gBAAgB,CAAC;IACrF,IAAI,gBAAgB,KAAK,IAAI,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,oBAAoB,GAAI,gBAAuD;SAClF,oBAAoB,CAAC;IACxB,IAAI,oBAAoB,KAAK,SAAS,IAAI,OAAO,oBAAoB,KAAK,UAAU,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4DAA4D,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,gBAAoC,CAAC;AAC9C,CAAC","sourcesContent":["import type { DehydrateOptions } from \"@reckona/mreact-query\";\n\nexport function dehydrateOptionsFromModule(\n  module: unknown,\n  label: string,\n): DehydrateOptions {\n  if (module === null || typeof module !== \"object\" || !(\"dehydrateOptions\" in module)) {\n    throw new Error(`${label} must export a named dehydrateOptions object.`);\n  }\n\n  const dehydrateOptions = (module as { dehydrateOptions?: unknown }).dehydrateOptions;\n  if (dehydrateOptions === null || typeof dehydrateOptions !== \"object\") {\n    throw new Error(`${label} must export a named dehydrateOptions object.`);\n  }\n\n  const shouldDehydrateQuery = (dehydrateOptions as { shouldDehydrateQuery?: unknown })\n    .shouldDehydrateQuery;\n  if (shouldDehydrateQuery !== undefined && typeof shouldDehydrateQuery !== \"function\") {\n    throw new Error(`${label} dehydrateOptions.shouldDehydrateQuery must be a function.`);\n  }\n\n  return dehydrateOptions as DehydrateOptions;\n}\n"]}

package/dist/dev-server.d.ts

@@ -1,15 +1,17 @@
 import { type Server } from "node:http";
+import type { DehydrateOptions } from "@reckona/mreact-query";
 import { type UserConfig } from "vite";
 import type { AppRouterServerActionOptions } from "./actions.js";
 import { type AppRouterCache } from "./cache.js";
 import { type AppRouterProjectOptions } from "./config.js";
 import type { AppRouterImportPolicy } from "./import-policy.js";
 import { type AppRouterLogger } from "./logger.js";
-import type { HttpUpgradeHandler } from "./upgrade.js";
+import { type HttpUpgradeOriginPolicy, type ManagedHttpUpgradeHandler } from "./upgrade.js";
 /**
  * Configures the Vite-powered app-router development server.
  */
 export interface StartDevServerOptions extends AppRouterProjectOptions {
+    dehydrateOptions?: DehydrateOptions | undefined;
     port?: number | undefined;
     hostname?: string;
     importPolicy?: AppRouterImportPolicy | undefined;
@@ -18,7 +20,10 @@ export interface StartDevServerOptions extends AppRouterProjectOptions {
     serverActions?: AppRouterServerActionOptions | undefined;
     verboseErrors?: boolean | undefined;
     viteConfig?: UserConfig | undefined;
-    onUpgrade?: HttpUpgradeHandler | undefined;
+    onUpgrade?: ManagedHttpUpgradeHandler | undefined;
+    upgradeCloseTimeoutMs?: number | undefined;
+    upgradeDecisionTimeoutMs?: number | undefined;
+    upgradeOriginPolicy?: HttpUpgradeOriginPolicy | undefined;
 }
 /**
  * Starts the local app-router development server with Vite middleware and route compilation.

package/dist/dev-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-server.d.ts","sourceRoot":"","sources":["../src/dev-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAItD,OAAO,EAAoC,KAAK,UAAU,EAAsB,MAAM,MAAM,CAAC;AAC7F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAMhE,OAAO,EAKL,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,uBAAuB;IACpE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACjD,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACrC,UAAU,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACxC,aAAa,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACzD,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACpC,SAAS,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC5C;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC;IAAE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAwHlE"}
+{"version":3,"file":"dev-server.d.ts","sourceRoot":"","sources":["../src/dev-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAKtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAoC,KAAK,UAAU,EAAsB,MAAM,MAAM,CAAC;AAC7F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAMhE,OAAO,EAKL,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAKL,KAAK,uBAAuB,EAE5B,KAAK,yBAAyB,EAC/B,MAAM,cAAc,CAAC;AAEtB;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,uBAAuB;IACpE,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAChD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACjD,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACrC,UAAU,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACxC,aAAa,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACzD,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACpC,SAAS,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAClD,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,mBAAmB,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC3D;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC;IAAE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAyKlE"}

package/dist/dev-server.js

@@ -1,12 +1,14 @@
 import { createServer } from "node:http";
 import { readFile } from "node:fs/promises";
-import { resolve } from "node:path";
+import { isIP } from "node:net";
+import { posix, resolve } from "node:path";
 import { createServer as createViteServer } from "vite";
 import { createMemoryRouteCache } from "./cache.js";
 import { resolveAppRouterProjectOptions } from "./config.js";
 import { createAppRouterVitePlugin } from "./vite.js";
 import { loadMreactRouterViteConfigDetails, } from "./vite-config.js";
 import { emitRouterLog, logDurationMs, logNow, nodeRequestPath, } from "./logger.js";
+import { assertValidHttpUpgradeOriginPolicy, closeServerWithUpgrades, createManagedHttpUpgradeLifecycle, validateHttpUpgradeOrigin, } from "./upgrade.js";
 /**
  * Starts the local app-router development server with Vite middleware and route compilation.
  *
@@ -20,6 +22,9 @@ export async function startDevServer(options) {
     const userViteServerConfig = typeof userViteConfig.server === "object" ? userViteConfig.server : {};
     const userHmrConfig = typeof userViteServerConfig.hmr === "object" ? userViteServerConfig.hmr : {};
     const port = options.port ?? resolved.serverPort ?? 3001;
+    const upgradeCloseTimeoutMs = finiteNonNegativeTimeout(options.upgradeCloseTimeoutMs, 1_000, "upgradeCloseTimeoutMs");
+    const upgradeDecisionTimeoutMs = finiteNonNegativeTimeout(options.upgradeDecisionTimeoutMs, 1_000, "upgradeDecisionTimeoutMs");
+    assertValidHttpUpgradeOriginPolicy(options.upgradeOriginPolicy);
     const routeCache = options.routeCache ?? createMemoryRouteCache();
     const declaredPackages = await readDeclaredProjectPackages(project.projectRoot);
     const configImportPolicy = resolved.importPolicy;
@@ -35,6 +40,7 @@ export async function startDevServer(options) {
         ],
     };
     let vite;
+    let actualPort = port;
     const server = createServer((incoming, outgoing) => {
         const logger = options.logger;
         const startedAt = logger === undefined ? undefined : logNow();
@@ -76,8 +82,17 @@ export async function startDevServer(options) {
             outgoing.end("Not Found");
         });
     });
-    if (options.onUpgrade !== undefined) {
-        server.on("upgrade", options.onUpgrade);
+    const upgradeLifecycle = options.onUpgrade === undefined
+        ? undefined
+        : createManagedHttpUpgradeLifecycle({
+            decisionTimeoutMs: upgradeDecisionTimeoutMs,
+            handler: options.onUpgrade,
+            isOriginAllowed: (request) => validateDevUpgradeOrigin(request, options.upgradeOriginPolicy, hostname, actualPort, vite),
+            logger: options.logger,
+            shouldBypass: (request) => isViteHmrUpgradeRequest(request, vite),
+        });
+    if (upgradeLifecycle !== undefined) {
+        server.on("upgrade", upgradeLifecycle.handle);
     }
     vite = await createViteServer({
         ...userViteConfig,
@@ -93,6 +108,8 @@ export async function startDevServer(options) {
             ...(userViteConfig.plugins ?? []),
             createAppRouterVitePlugin({
                 allowedSourceDirs: project.allowedSourceDirs,
+                dehydrateOptions: options.dehydrateOptions ?? resolved.dehydrateOptions,
+                dehydratePolicyModule: project.dehydratePolicyModule,
                 projectRoot: project.projectRoot,
                 publicDir: project.publicDir,
                 routesDir: project.routesDir,
@@ -111,18 +128,105 @@ export async function startDevServer(options) {
         throw error;
     }
     const address = server.address();
-    const actualPort = typeof address === "object" && address !== null ? address.port : port;
+    actualPort = typeof address === "object" && address !== null ? address.port : port;
+    let closePromise;
     return {
         server,
-        url: `http://${hostname}:${actualPort}`,
-        close: async () => {
-            await vite?.close();
-            await new Promise((resolve, reject) => {
-                server.close((error) => (error ? reject(error) : resolve()));
-            });
+        url: `http://${formatNodeAuthority(hostname, actualPort)}`,
+        close: () => {
+            closePromise ??= (async () => {
+                upgradeLifecycle?.beginClose();
+                const httpClose = upgradeLifecycle === undefined
+                    ? new Promise((resolve, reject) => {
+                        server.close((error) => (error ? reject(error) : resolve()));
+                    })
+                    : closeServerWithUpgrades({
+                        lifecycle: upgradeLifecycle,
+                        server,
+                        timeoutMs: upgradeCloseTimeoutMs,
+                    });
+                const results = await Promise.allSettled([vite?.close(), httpClose]);
+                const errors = results.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+                if (errors.length > 0) {
+                    throw new AggregateError(errors, "Failed to close the mreact development server.");
+                }
+            })();
+            return closePromise;
         },
     };
 }
+function validateDevUpgradeOrigin(request, policy, hostname, port, vite) {
+    if (!isDevUpgradeHostAllowed(request.headers.host, vite?.config.server.allowedHosts)) {
+        return { ok: false, reason: "disallowed-origin" };
+    }
+    if (policy === "unchecked") {
+        return { ok: true, origin: request.headers.origin };
+    }
+    if (typeof policy === "object") {
+        return validateHttpUpgradeOrigin(request, policy);
+    }
+    try {
+        return validateHttpUpgradeOrigin(request, {
+            allowedOrigins: [`http://${request.headers.host ?? formatNodeAuthority(hostname, port)}`],
+        });
+    }
+    catch {
+        return { ok: false, reason: "malformed-origin" };
+    }
+}
+function isDevUpgradeHostAllowed(hostHeader, allowedHosts) {
+    if (allowedHosts === true || hostHeader === undefined) {
+        return true;
+    }
+    const host = hostHeader.trim();
+    if (host.startsWith("[")) {
+        const closingBracket = host.indexOf("]");
+        return closingBracket > 0 && isIP(host.slice(1, closingBracket)) === 6;
+    }
+    const colon = host.indexOf(":");
+    const hostname = colon === -1 ? host : host.slice(0, colon);
+    if (isIP(hostname) === 4 || hostname === "localhost" || hostname.endsWith(".localhost")) {
+        return true;
+    }
+    return (allowedHosts ?? []).some((allowedHost) => allowedHost === hostname ||
+        (allowedHost.startsWith(".") &&
+            (allowedHost.slice(1) === hostname || hostname.endsWith(allowedHost))));
+}
+function formatNodeAuthority(hostname, port) {
+    const host = hostname.includes(":") && !hostname.startsWith("[") ? `[${hostname}]` : hostname;
+    return `${host}:${port}`;
+}
+function isViteHmrUpgradeRequest(request, vite) {
+    if (vite === undefined) {
+        return false;
+    }
+    const protocol = request.headers["sec-websocket-protocol"];
+    if (protocol !== "vite-hmr" && protocol !== "vite-ping") {
+        return false;
+    }
+    const hmr = vite.config.server.hmr;
+    if (hmr === false) {
+        return false;
+    }
+    const hmrPath = typeof hmr === "object" ? hmr.path : undefined;
+    const expectedPath = hmrPath === undefined ? vite.config.base : posix.join(vite.config.base, hmrPath);
+    try {
+        return new URL(request.url ?? "/", "http://mreact.local").pathname === expectedPath;
+    }
+    catch {
+        return false;
+    }
+}
+function finiteNonNegativeTimeout(value, fallback, name) {
+    const timeout = value ?? fallback;
+    if (!Number.isFinite(timeout) ||
+        timeout < 0 ||
+        !Number.isSafeInteger(timeout) ||
+        timeout > 2_147_483_647) {
+        throw new TypeError(`${name} must be a finite non-negative safe integer no greater than 2147483647.`);
+    }
+    return timeout;
+}
 function listenDevHttpServer(server, port, hostname) {
     return new Promise((resolve, reject) => {
         const onError = (error) => {
@@ -156,6 +260,9 @@ async function resolveStartDevServerProject(options) {
     }
     const config = await loadOptionalMreactRouterViteConfig(resolve(options.projectRoot ?? process.cwd()));
     return {
+        ...(config?.dehydrateOptions === undefined
+            ? {}
+            : { dehydrateOptions: config.dehydrateOptions }),
         ...(config?.importPolicy === undefined ? {} : { importPolicy: config.importPolicy }),
         project: resolveAppRouterProjectOptions({
             ...config?.project,
@@ -208,7 +315,9 @@ function sendDevServerError(outgoing, error, options) {
     outgoing.statusCode = 500;
     outgoing.setHeader("content-type", "text/plain; charset=utf-8");
     outgoing.end(options.verboseErrors === true
-        ? error instanceof Error ? error.stack : String(error)
+        ? error instanceof Error
+            ? error.stack
+            : String(error)
         : "Internal Server Error");
 }
 //# sourceMappingURL=dev-server.js.map