@rshono/core 1.0.0-rc.7 → 1.0.0-rc.8

package/dist/runtime/entry.rsc.js

@@ -1,12 +1,12 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Hono } from 'hono';
-import { bodyLimit } from 'hono/body-limit';
+import { HTTPException } from 'hono/http-exception';
 // The JSX factory, by name: the page element is created with this directly rather than as
 // `<Page {...props} />`, because a spread would drop the non-enumerable `ctx` prop. See `pageProps`.
 import { jsx } from 'react/jsx-runtime';
 // The bare specifier, not `/server.node`: the package ships a build per runtime behind export
-// conditions (`node`, `workerd`, `deno`, `edge-light`), and the RSC layer's `conditionNames` is what
-// picks one — so a non-Node deploy target gets its own build instead of Node's by hard-coded path.
+// conditions, and the RSC layer's `conditionNames` picks one — so a non-Node deploy target gets its
+// own build rather than Node's by hard-coded path.
 import { createTemporaryReferenceSet, decodeAction, decodeFormState, decodeReply, loadServerAction, renderToReadableStream, } from 'react-server-dom-rspack/server';
 // Resolved by the '@rshono/deploy' alias to the selected preset's runtime module — the one place
 // this file knows anything about where it is running. See `deploy/contract.ts`.
@@ -23,15 +23,11 @@ import { renderHTML } from './entry.ssr.js';
 import { RouterProvider } from './navigation.js';
 import { acceptsRsc, isActionRequest, parseRenderRequest, requestWantsRsc, wantsRsc } from './request.js';
 const serverApp = (serverAppModule.default ?? null);
-// Framework settings resolved from rshono.config.ts and compiled into the bundle at build time
-// (see builder/rspack-config.ts). These have no runtime env-var interface — env is for secrets.
-// Named after their ServerConfig fields, so what a setting does here is one grep from where it is
-// resolved. `isDev` among them: the build mode is decided by which command produced the bundle, not
-// by `process.env.NODE_ENV`, and not every runtime this deploys to has a `process` to read anyway.
-const CONFIG = __RSHONO_CONFIG__;
-const { isDev, cspEnabled, checkOrigin, maxBodyBytes } = CONFIG;
-/** Extra cross-origin hosts permitted to post server actions, beyond the app's own origin. */
-const allowedOrigins = new Set(CONFIG.allowedOrigins);
+// Framework settings resolved from rshono.config.ts and compiled into the bundle at build time (see
+// builder/rspack-config.ts). There is no runtime env-var interface for these — env is for secrets.
+// `isDev` among them: the build mode is decided by which command produced the bundle, and not every
+// runtime this deploys to has a `process.env.NODE_ENV` to read.
+const { isDev } = __RSHONO_CONFIG__;
 /** How long a prerendered page may be reused before revalidating. Also what `public/` files get. */
 const SSG_CACHE_CONTROL = 'public, max-age=300';
 /**
@@ -39,50 +35,25 @@ const SSG_CACHE_CONTROL = 'public, max-age=300';
  * the `Accept` header, which is what makes `Vary` non-optional here.
  */
 const PAGE_CONTENT_TYPE = /^(?:text\/html|text\/x-component)\b/;
-// The CSP is fixed per build apart from the nonce, so assemble everything but `script-src` once.
-const CSP_STATIC = Object.entries(CONFIG.cspDirectives)
-    .filter(([name]) => name !== 'script-src')
-    .map(([name, value]) => `${name} ${value}`)
-    .join('; ');
-const CSP_SCRIPT_SRC = CONFIG.cspDirectives['script-src'] ?? "'self'";
 // Called here rather than at the top of the deploy runtime's own module so the timing is unchanged:
 // `.env` is loaded once every import above has been evaluated, exactly as before.
 runtime.loadEnv();
 const routeConfig = userRoutes;
 export const routes = routeConfig.routes;
 /**
- * CSRF guard for server-action POSTs, layering the two signals a browser gives us.
+ * The per-request CSP nonce, if the app asked for one.
  *
- * `Sec-Fetch-Site` is set by the browser and unforgeable by page script, so `same-origin` settles
- * the question on its own — and short-circuiting on it is what keeps the check from misfiring on a
- * legitimate request whose `Host` the proxy rewrote. Everything else falls back to comparing the
- * `Origin` host against our own (see {@link publicUrl} — deliberately *not* against a raw
- * `X-Forwarded-Host`, which the client controls unless `trustProxy` says a proxy owns it).
+ * The framework does not mint this. `secureHeaders()` from `hono/secure-headers` does, when its
+ * policy contains the `NONCE` placeholder, and it stores it here — so an app opts into a
+ * nonce-based CSP by registering that middleware in `src/server.ts` and the framework's only job is
+ * to stamp the value into the render.
  *
- * A missing `Origin` is treated as same-origin: no-JS form posts from older browsers omit it, and
- * those same browsers send no `Sec-Fetch-Site` either, so there is nothing left to check. Hosts are
- * compared case-insensitively; the scheme is not compared, so this alone won't stop an
- * `http://` origin posting to the `https://` site (HSTS is the control for that).
+ * Readable from a route handler because `secureHeaders` resolves its directives *before* calling
+ * `next()`; the header itself is written on the way back out. Absent when the app registered no CSP,
+ * or one with no nonce in it — a fixed policy needs nothing from the render.
  */
-function isSameOriginAction(c) {
-    if (!checkOrigin)
-        return true;
-    const secFetchSite = c.req.header('sec-fetch-site');
-    if (secFetchSite === 'same-origin')
-        return true;
-    const origin = c.req.header('origin');
-    const originHost = origin ? URL.parse(origin)?.host.toLowerCase() || null : null;
-    if (origin !== undefined && originHost === null)
-        return false; // an Origin we can't parse is untrusted.
-    const trusted = originHost !== null && (originHost === publicUrl(c).host.toLowerCase() || allowedOrigins.has(originHost));
-    if (secFetchSite && secFetchSite !== 'none') {
-        // The browser tells us (unforgeably) this didn't originate from our own site — only a
-        // trusted (allowlisted) Origin may proceed.
-        return trusted;
-    }
-    if (originHost === null)
-        return true;
-    return trusted;
+function cspNonce(c) {
+    return c.get('secureHeadersNonce');
 }
 async function loadPageModule(load, label) {
     const mod = await load();
@@ -102,6 +73,14 @@ async function loadPageModule(load, label) {
 function acceptsHtml(c) {
     return c.req.header('accept')?.includes('text/html') ?? false;
 }
+/**
+ * The 404 for an app with no `notFound` page, and for a client that wanted neither HTML nor a flight
+ * payload. Shared for the `Vary`: this is still one of the answers a page URL gives depending on
+ * `Accept`, and a cache not told so can hand a plain-text 404 to a browser asking for a document.
+ */
+function plainNotFound(c) {
+    return c.text('Not Found', 404, { vary: 'Accept' });
+}
 /** A lazy once-cell: runs `load` at most once and caches the promise, but clears a rejection so a later call can retry. */
 function once(load) {
     let promise;
@@ -133,50 +112,26 @@ function releaseWhenDone(stream, done) {
         cancel: done,
     }));
 }
-/**
- * There is no render deadline here any more.
- *
- * A `renderTimeout` setting used to wrap every request in an `AbortController` with a timer, covering
- * the server action as well as the flight and SSR passes. Every host this deploys to enforces its own
- * request timeout — Workers, Vercel and Lambda all do — so the only shape that needed one was a Node
- * process facing the internet directly, and there a proxy is both the conventional and the more capable
- * place for it. The README shows the middleware for a Node deploy that wants one in-process.
- *
- * What the deadline *also* did was carry the client-disconnect signal into the two React renderers, and
- * that is kept — but not by handing them `c.req.raw.signal`. Both React renderers add an `abort`
- * listener to whatever signal they are given and only remove it if the abort fires, so a listener left on
- * a request-lifetime signal pins the flight request, the Fizz request and the whole rendered tree. That
- * is not theoretical: handing them the request signal directly cost ~169 kB per `/ssr` request, never
- * reclaimed by a major GC, and took GC from 5.8% to 12.9% of wall time under load.
- *
- * The deadline's own `AbortController` was, accidentally, what had kept that collectable — its signal
- * died with the render. So {@link renderComponent} keeps a per-render controller and forwards the request
- * signal into it, releasing the forwarder when the response ends. Never through `AbortSignal.any([...])`,
- * which reads better and leaks worse: a signal it produced is *composite*, and Node holds every composite
- * signal carrying an `abort` listener in a process-lifetime set (`gcPersistentSignals`) until it either
- * aborts or loses its last listener.
- */
 /**
  * Builds the props a page component is called with.
  *
- * `url` and `params` match `useNavigation()` field for field, so a read can move between a page and
- * a `'use client'` component unchanged. The `URL` is this page's own — `RequestContext` parses its own — so a
- * page that mutates it cannot disturb anything else on the request.
+ * `url` and `params` match `useNavigation()` field for field, so a read can move between a page and a
+ * `'use client'` component unchanged. The `URL` is this page's own, so mutating it cannot disturb
+ * anything else on the request.
  *
- * `ctx` is *defined* rather than assigned, and both parts of how carry their weight:
+ * `ctx` is *defined* rather than assigned, and both halves of how carry their weight:
  *
  * - **A getter**, so nothing is built for the pages that never read it, and so a `render: 'static'`
- *   page that does read it gets {@link getRequestContext}'s own "no per-request context while
- *   prerendering" error rather than a bare `undefined` — one explanation, in one place.
+ *   page that does read it gets {@link getRequestContext}'s "no per-request context while
+ *   prerendering" error rather than a bare `undefined`.
  * - **Non-enumerable**, so React's *development-only* serialization of a server component's props
  *   (the debug channel behind component stacks and the performance track) skips it. That walks own
  *   enumerable properties, and `ctx.hono` is the Hono {@link Context} — whose `env` holds the
- *   runtime's bindings. An enumerable `ctx` ships every one of them, secrets included, to the
- *   browser in dev, and grows a small page's flight payload by well over 10 kB. Production never
- *   serializes a server component's props at all, so this is the dev half of the same guarantee.
+ *   runtime's bindings. An enumerable `ctx` would ship every one of them, secrets included, to the
+ *   browser in dev, and add well over 10 kB to a small page's flight payload.
  *
- * The cost is that the element has to be created by handing this object to `jsx()` *by reference*:
- * a `<Page {...props} />` spread copies enumerable properties only, and would drop `ctx` silently.
+ * The cost is that the element has to be created by handing this object to `jsx()` *by reference*: a
+ * `<Page {...props} />` spread copies enumerable properties only, and would drop `ctx` silently.
  */
 function pageProps(c, errorInfo) {
     const props = { url: publicUrl(c), params: readParams(c), ...(errorInfo ? { error: errorInfo } : null) };
@@ -184,18 +139,16 @@ function pageProps(c, errorInfo) {
     return props;
 }
 async function renderComponent(c, Page, opts) {
-    // The client going away is the one thing that still aborts a render — but React's renderers must not
-    // be handed `c.req.raw.signal` to watch for it. Both of them add an `abort` listener and only remove
-    // it if the abort fires, so on the happy path the listener stays on a signal that lives as long as the
-    // request object, and through it pins the flight request, the Fizz request and the whole rendered
-    // tree. Measured at ~169 kB per `/ssr` request, never reclaimed by a major GC.
+    // A client going away aborts the render — but React's renderers must never be handed
+    // `c.req.raw.signal` to watch for it. Both add an `abort` listener and only remove it if the abort
+    // fires, so on the happy path that listener stays on a request-lifetime signal and through it pins
+    // the flight request, the Fizz request and the whole rendered tree (~169 kB per `/ssr` request,
+    // never reclaimed by a major GC).
     //
-    // So the render gets a controller of its own and the request signal only forwards into it. The
-    // forwarding listener is `once`, so an abort removes it, and {@link release} removes it on the normal
-    // path — which is what keeps the request from retaining the render. Deliberately not
-    // `AbortSignal.any()`: a signal it produced is *composite*, and Node holds every composite signal
-    // carrying an `abort` listener in a process-lifetime set until it aborts or loses its last listener,
-    // which is a worse leak than the one being fixed here.
+    // So the render gets a controller of its own and the request signal only forwards into it: the
+    // forwarder is `once`, so an abort removes it, and `release` removes it on the normal path. Not
+    // `AbortSignal.any()` — a signal it produced is *composite*, and Node holds every composite signal
+    // carrying an `abort` listener in a process-lifetime set until it aborts or loses its last listener.
     const requestSignal = c.req.raw.signal;
     const renderAbort = new AbortController();
     const signal = renderAbort.signal;
@@ -206,7 +159,10 @@ async function renderComponent(c, Page, opts) {
         requestSignal.addEventListener('abort', forwardAbort, { once: true });
     /** Detaches the forwarder once the response has been written, so nothing survives the request. */
     const release = () => requestSignal.removeEventListener('abort', forwardAbort);
-    const nonce = cspEnabled && !opts.isRsc ? crypto.randomUUID() : undefined;
+    // Documents only: the nonce goes on the bootstrap scripts and the `<meta>` React hydrates from,
+    // and a flight payload has neither. Leaving it off there is also what keeps a prerendered flight
+    // payload servable from disk under a nonce-based CSP.
+    const nonce = opts.isRsc ? undefined : cspNonce(c);
     const props = pageProps(c, opts.errorInfo);
     const root = (_jsxs(_Fragment, { children: [nonce && _jsx("meta", { property: "csp-nonce", nonce: nonce }), Page.entryCssFiles?.map((href) => (_jsx("link", { rel: "stylesheet", href: href, precedence: "default" }, href))), _jsx(RouterProvider, { href: props.url.href, params: props.params, children: jsx(Page, props) })] }));
     // `notFound` only when it is true, so the flight payload of an ordinary page doesn't carry the key.
@@ -256,15 +212,9 @@ async function renderComponent(c, Page, opts) {
         release();
         throw controlSignal;
     }
-    const headers = { 'content-type': 'text/html;charset=utf-8' };
-    if (nonce) {
-        // The nonce is always appended to whatever `script-src` resolved to, so overriding the
-        // directive in `cspDirectives` can widen the policy but can't accidentally drop the nonce.
-        // Dev additionally needs 'unsafe-eval' for react-refresh.
-        const scriptSrc = `script-src ${CSP_SCRIPT_SRC} 'nonce-${nonce}'${isDev ? " 'unsafe-eval'" : ''}`;
-        headers['content-security-policy'] = CSP_STATIC ? `${CSP_STATIC}; ${scriptSrc}` : scriptSrc;
-    }
-    return c.body(ssrResult.stream, (ssrResult.status ?? opts.status ?? 200), headers);
+    return c.body(ssrResult.stream, (ssrResult.status ?? opts.status ?? 200), {
+        'content-type': 'text/html;charset=utf-8',
+    });
 }
 async function renderPage(c, loadPage) {
     const request = c.req.raw;
@@ -274,9 +224,6 @@ async function renderPage(c, loadPage) {
     let temporaryReferences;
     let actionStatus;
     if (isActionRequest(renderRequest)) {
-        if (!isSameOriginAction(c)) {
-            return c.text('Forbidden: cross-origin server action rejected', 403);
-        }
         if (renderRequest.kind === 'rsc-action') {
             // Checked before the body is decoded, so an unknown id costs nothing to reject — and
             // `loadServerAction` would otherwise fault on the missing manifest entry, turning a bad
@@ -322,11 +269,13 @@ async function renderPage(c, loadPage) {
 }
 function buildApp() {
     const app = new Hono();
-    // Cheap, unconditional headers that only matter when something else has gone wrong: stop
-    // content-type sniffing, keep the full URL (paths, query) out of cross-origin referrers, and
-    // refuse to be framed by another origin (clickjacking). `frame-ancestors` in the opt-in CSP is
-    // stricter and takes precedence where both apply; this is the floor for everyone else.
-    // Set after `next()` so a route or middleware that sets its own value wins.
+    // Baseline security headers: stop content-type sniffing, keep the full URL out of cross-origin
+    // referrers, and refuse to be framed by another origin. A floor, not a policy — an app that wants
+    // the full set registers `secureHeaders()` from `hono/secure-headers` in src/server.ts, and
+    // because this is registered first it unwinds *last* and the "only if unset" checks stand aside
+    // for whatever that set. Kept in the framework rather than left to the app because it is
+    // registered ahead of `mountStaticAssets`, which is a terminal handler the sub-app never sees:
+    // without this, `/_static/*` would carry no security headers at all.
     app.use(async (c, next) => {
         await next();
         const headers = c.res.headers;
@@ -336,31 +285,33 @@ function buildApp() {
             headers.set('referrer-policy', 'strict-origin-when-cross-origin');
         if (!headers.has('x-frame-options'))
             headers.set('x-frame-options', 'SAMEORIGIN');
-        // Page responses only, from here down. Two things are true of them and of nothing else served
-        // here: one URL answers with either an HTML document or a flight payload depending on `Accept`,
-        // and the default page is request-specific (cookies, session, headers).
+        // React Refresh compiles updates with `eval`, so a dev build cannot run under any CSP an app
+        // would sensibly write for production. Widened here rather than asked of the app, so one policy
+        // in src/server.ts serves both and nobody debugs a blocked HMR socket. Only ever in dev, and
+        // only when the app has a `script-src` to widen.
+        if (isDev) {
+            const csp = headers.get('content-security-policy');
+            if (csp?.includes('script-src ')) {
+                headers.set('content-security-policy', csp.replace('script-src ', "script-src 'unsafe-eval' "));
+            }
+        }
+        // Page responses only, from here down: one URL answers with either an HTML document or a flight
+        // payload depending on `Accept`, and the default page is request-specific.
         if (!PAGE_CONTENT_TYPE.test(headers.get('content-type') ?? ''))
             return;
         appendVary(headers, 'Accept');
-        // Without this a page carries no cache directives at all, and a shared cache — a CDN, a
-        // corporate proxy — is free to store a logged-in user's page and hand it to someone else.
-        // `private` forbids exactly that; `no-cache` makes the browser revalidate its own copy rather
-        // than re-showing a stale personalised page. Neither blocks bfcache, which `no-store` would.
-        // A prerendered page, or anything a route set deliberately, already has its own value.
+        // Without this a page carries no cache directives at all, and a shared cache — a CDN, a corporate
+        // proxy — is free to store a logged-in user's page and hand it to someone else. `private` forbids
+        // that; `no-cache` makes the browser revalidate rather than re-show a stale personalised page.
+        // Neither blocks bfcache, which `no-store` would. A prerendered page already has its own value.
         if (!headers.has('cache-control'))
             headers.set('cache-control', 'private, no-cache');
     });
-    // A memory-exhaustion guard for *every* route — pages and actions, `{ type: 'endpoint' }` routes
-    // and the src/server.ts sub-app alike — since anything that buffers a body (`.json()`,
-    // `.formData()`) is exposed, not just server actions. Rejects an over-cap `Content-Length` up
-    // front and otherwise counts the stream, so a chunked or under-reported body is still cut off.
-    if (maxBodyBytes > 0) {
-        app.use(bodyLimit({ maxSize: maxBodyBytes, onError: (c) => c.text('Payload Too Large', 413) }));
-    }
     runtime.mountStaticAssets(app);
-    // Mounted ahead of the page routes so the sub-app's middleware (auth, logging, trailing-slash)
-    // wraps page requests too. The flip side: a *terminal* handler in src/server.ts at the same path
-    // as a page route wins over the page.
+    // Mounted ahead of the page routes so the sub-app's middleware (auth, logging, trailing-slash,
+    // and the security middleware the framework no longer owns — `csrf()`, `bodyLimit()`,
+    // `secureHeaders()`) wraps page requests too. The flip side: a *terminal* handler in
+    // src/server.ts at the same path as a page route wins over the page.
     if (serverApp) {
         app.route('/', serverApp);
     }
@@ -371,7 +322,9 @@ function buildApp() {
         const isRsc = requestWantsRsc(c.req.raw);
         if (signal instanceof RedirectSignal) {
             if (isRsc) {
-                return c.body(renderToReadableStream({ root: null, redirect: signal.location }, { signal: c.req.raw.signal }), 200, {
+                // No `signal`, deliberately — see `renderComponent`. This payload is two fields and no
+                // component tree, so there is nothing worth aborting and nothing worth a listener.
+                return c.body(renderToReadableStream({ root: null, redirect: signal.location }), 200, {
                     'content-type': 'text/x-component;charset=utf-8',
                 });
             }
@@ -380,8 +333,7 @@ function buildApp() {
         if (loadNotFoundPage) {
             return renderComponent(c, await loadNotFoundPage(), { status: 404, isRsc, notFound: true });
         }
-        // Plain text, but still one of the two answers this URL gives depending on `Accept`.
-        return c.text('Not Found', 404, { vary: 'Accept' });
+        return plainNotFound(c);
     };
     for (const route of routes) {
         if (isPageRoute(route)) {
@@ -393,15 +345,17 @@ function buildApp() {
                     if (servesPrerendered && c.req.method === 'GET') {
                         const isRsc = acceptsRsc(c.req.raw);
                         // A prerendered file is one fixed set of bytes, so it cannot carry a per-request nonce:
-                        // under `csp` the *document* has to be rendered per request. The flight payload never
-                        // carries a nonce, so it stays servable from the build either way.
-                        const mustRenderForNonce = cspEnabled && !isRsc;
-                        // Otherwise both representations come from the build, so a soft navigation is served from
-                        // it too rather than re-rendering a page that was already built.
+                        // where the app's CSP has one, the *document* has to be rendered per request. The flight
+                        // payload never carries a nonce, so it stays servable from the build either way.
+                        //
+                        // Decided per request rather than per build, which is what moving the CSP to
+                        // `secureHeaders()` buys: an app whose policy carries no `NONCE` keeps its prerendered
+                        // documents, where the old build-time `csp: true` flag gave every one of them up.
+                        const mustRenderForNonce = !isRsc && cspNonce(c) !== undefined;
                         if (!mustRenderForNonce) {
                             const page = await runtime.readPrerendered(c, isRsc ? 'flight' : 'html');
                             // A prerendered page is request-independent by construction, so it is safe to cache
-                            // publicly; the short max-age matches what `public/` files get. The ETag turns the
+                            // publicly; the short max-age matches what `public/` files get, and the ETag turns the
                             // revalidation that follows into a 304 rather than the page all over again.
                             //
                             // Answered outside `runWithContext`: no app code runs on this path, so there is no
@@ -448,12 +402,22 @@ function buildApp() {
         if (loadNotFoundPage && (isRsc || acceptsHtml(c))) {
             return runWithContext(c, async () => renderComponent(c, await loadNotFoundPage(), { status: 404, isRsc }));
         }
-        return c.text('Not Found', 404, { vary: 'Accept' });
+        return plainNotFound(c);
     });
     const loadErrorPage = routeConfig.error ? memoizePage(routeConfig.error, 'the error page') : null;
     app.onError(async (error, c) => {
         if (isControlSignal(error))
             return runWithContext(c, () => respondToControlSignal(c, error));
+        // Registering an `onError` at all replaces Hono's default handler, which is what would otherwise
+        // turn an `HTTPException` into the response it carries. Without this every middleware that
+        // rejects a request by throwing one — `csrf()` with a 403, `bodyLimit()` with a 413, an app's own
+        // `throw new HTTPException(401)` — would surface as a 500 error page instead of its own status.
+        // Rebuilt through `c` rather than returned as-is, exactly as Hono's own default does, so headers
+        // already prepared on the context (`c.header(…)` from middleware that ran first) survive.
+        if (error instanceof HTTPException) {
+            const res = error.getResponse();
+            return c.newResponse(res.body, res);
+        }
         reportServerError(error, { source: 'request', request: c.req.raw, message: '[rshono] request error:' });
         const isRsc = requestWantsRsc(c.req.raw);
         if (loadErrorPage && (isRsc || acceptsHtml(c))) {

package/dist/runtime/entry.rsc.js.map

@@ -1 +1 @@
-{"version":3,"file":"entry.rsc.js","sourceRoot":"","sources":["../../src/runtime/entry.rsc.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAI5C,0FAA0F;AAC1F,qGAAqG;AACrG,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,8FAA8F;AAC9F,qGAAqG;AACrG,mGAAmG;AACnG,OAAO,EACL,2BAA2B,EAC3B,YAAY,EACZ,eAAe,EACf,WAAW,EACX,gBAAgB,EAChB,sBAAsB,GAGvB,MAAM,gCAAgC,CAAC;AACxC,iGAAiG;AACjG,gFAAgF;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,mFAAmF;AACnF,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACtD,sGAAsG;AACtG,OAAO,KAAK,eAAe,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAA2G,MAAM,cAAc,CAAC;AACpJ,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5H,OAAO,EAAE,eAAe,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE1G,MAAM,SAAS,GAAG,CAAE,eAAyC,CAAC,OAAO,IAAI,IAAI,CAAgB,CAAC;AAE9F,+FAA+F;AAC/F,gGAAgG;AAChG,kGAAkG;AAClG,oGAAoG;AACpG,mGAAmG;AACnG,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;AAChE,8FAA8F;AAC9F,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAEtD,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD;;;GAGG;AACH,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAEhE,iGAAiG;AACjG,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;KACpD,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,YAAY,CAAC;KACzC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;KAC1C,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,MAAM,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC;AAEtE,oGAAoG;AACpG,kFAAkF;AAClF,OAAO,CAAC,OAAO,EAAE,CAAC;AAElB,MAAM,WAAW,GAAG,UAAyB,CAAC;AAC9C,MAAM,CAAC,MAAM,MAAM,GAAqB,WAAW,CAAC,MAAM,CAAC;AAa3D;;;;;;;;;;;;;GAaG;AACH,SAAS,kBAAkB,CAAC,CAAU;IACpC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpD,IAAI,YAAY,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,yCAAyC;IAExG,MAAM,OAAO,GAAG,UAAU,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1H,IAAI,YAAY,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC5C,sFAAsF;QACtF,4CAA4C;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAA+C,EAAE,KAAa;IAC1F,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAiD,CAAC;IACnE,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,0CAA0C,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mCAAmC,KAAK,0DAA0D;YAChG,sGAAsG;YACtG,+GAA+G;YAC/G,mHAAmH,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kGAAkG;AAClG,SAAS,WAAW,CAAC,CAAU;IAC7B,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;AAChE,CAAC;AAED,2HAA2H;AAC3H,SAAS,IAAI,CAAI,IAAsB;IACrC,IAAI,OAA+B,CAAC;IACpC,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjB,iHAAiH;gBACjH,IAAI,OAAO,KAAK,OAAO;oBAAE,OAAO,GAAG,SAAS,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,MAAkC,EAAE,IAAgB;IAC3E,OAAO,MAAM,CAAC,WAAW,CACvB,IAAI,eAAe,CAAyB;QAC1C,SAAS,CAAC,KAAK,EAAE,UAAU;YACzB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;KACqC,CAAC,CACrD,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,SAAS,CAAC,CAAU,EAAE,SAAoC;IACjE,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACzG,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACvG,OAAO,KAA8C,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,CAAU,EAAE,IAAgC,EAAE,IAA4B;IACvG,qGAAqG;IACrG,qGAAqG;IACrG,uGAAuG;IACvG,kGAAkG;IAClG,+EAA+E;IAC/E,EAAE;IACF,+FAA+F;IAC/F,sGAAsG;IACtG,qFAAqF;IACrF,kGAAkG;IAClG,qGAAqG;IACrG,uDAAuD;IACvD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,aAAa,CAAC,OAAO;QAAE,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;;QAC9D,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,kGAAkG;IAClG,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAG,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,CACX,8BACG,KAAK,IAAI,eAAM,QAAQ,EAAC,WAAW,EAAC,KAAK,EAAE,KAAK,GAAI,EACpD,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACjC,eAAiB,GAAG,EAAC,YAAY,EAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAC,SAAS,IAAvD,IAAI,CAAsD,CACtE,CAAC,EAEF,KAAC,cAAc,IAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,YACvD,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GACF,IAChB,CACJ,CAAC;IAEF,oGAAoG;IACpG,MAAM,UAAU,GAAe,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAElJ,sFAAsF;IACtF,mGAAmG;IACnG,iGAAiG;IACjG,gFAAgF;IAChF,eAAe,CAAC,CAAC,CAAC,CAAC;IAEnB,IAAI,aAAwC,CAAC;IAC7C,MAAM,SAAS,GAAG,sBAAsB,CAAC,UAAU,EAAE;QACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,MAAM;QACN,OAAO,CAAC,KAAK;YACX,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,aAAa,GAAG,KAAK,CAAC;gBACtB,OAAO,KAAK,CAAC,MAAM,CAAC;YACtB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC7H,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAyB,EAAE;YAC/F,cAAc,EAAE,gCAAgC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAiD,CAAC;IACtD,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE;YACtC,gBAAgB,EAAE,IAAI,CAAC,YAAY;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM;YACN,KAAK;YACL,MAAM,EAAE,OAAO;YACf,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;YAC9H,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;SACpH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;QACV,IAAI,aAAa;YAAE,MAAM,aAAa,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;QACV,MAAM,aAAa,CAAC;IACtB,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,yBAAyB,EAAE,CAAC;IACtF,IAAI,KAAK,EAAE,CAAC;QACV,uFAAuF;QACvF,2FAA2F;QAC3F,0DAA0D;QAC1D,MAAM,SAAS,GAAG,cAAc,cAAc,WAAW,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClG,OAAO,CAAC,yBAAyB,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,CAAyB,EAAE,OAAO,CAAC,CAAC;AAC7G,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAU,EAAE,QAAmD;IACvF,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1B,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAElD,IAAI,WAAqC,CAAC;IAC1C,IAAI,SAAqC,CAAC;IAC1C,IAAI,mBAAsD,CAAC;IAC3D,IAAI,YAAgC,CAAC;IACrC,IAAI,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACxC,qFAAqF;YACrF,wFAAwF;YACxF,8FAA8F;YAC9F,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnF,OAAO,CAAC,CAAC,IAAI,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,WAAW,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9G,mBAAmB,GAAG,2BAA2B,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAY,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,CAAC;gBACH,WAAW,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACpE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,eAAe,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACxC,yFAAyF;gBACzF,oFAAoF;gBACpF,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;gBAClG,WAAW,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBACnC,YAAY,GAAG,GAAG,CAAC;YACrB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAC;YAC3F,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;gBACrC,SAAS,GAAG,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAC,IAAI,SAAS,CAAC;YAC7G,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE;QAC9B,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC;QAC9B,SAAS;QACT,WAAW;QACX,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,yFAAyF;IACzF,6FAA6F;IAC7F,+FAA+F;IAC/F,uFAAuF;IACvF,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,IAAI,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QACvG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAElF,8FAA8F;QAC9F,gGAAgG;QAChG,wEAAwE;QACxE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO;QACvE,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9B,wFAAwF;QACxF,0FAA0F;QAC1F,8FAA8F;QAC9F,6FAA6F;QAC7F,uFAAuF;QACvF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,iGAAiG;IACjG,uFAAuF;IACvF,8FAA8F;IAC9F,+FAA+F;IAC/F,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE/B,+FAA+F;IAC/F,iGAAiG;IACjG,sCAAsC;IACtC,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,IAAkB,EAAE,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7G,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9G,kFAAkF;IAClF,MAAM,sBAAsB,GAAG,KAAK,EAAE,CAAU,EAAE,MAAqB,EAAqB,EAAE;QAC5F,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,MAAM,YAAY,cAAc,EAAE,CAAC;YACrC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAuB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE;oBACvI,cAAc,EAAE,gCAAgC;iBACjD,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAA4B,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,eAAe,CAAC,CAAC,EAAE,MAAM,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,qFAAqF;QACrF,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,gGAAgG;YAChG,MAAM,iBAAiB,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;YAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAEhF,MAAM,OAAO,GAAY,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnC,IAAI,CAAC;oBACH,IAAI,iBAAiB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;wBAChD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACpC,wFAAwF;wBACxF,sFAAsF;wBACtF,mEAAmE;wBACnE,MAAM,kBAAkB,GAAG,UAAU,IAAI,CAAC,KAAK,CAAC;wBAChD,0FAA0F;wBAC1F,iEAAiE;wBACjE,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;4BACzE,oFAAoF;4BACpF,mFAAmF;4BACnF,4EAA4E;4BAC5E,EAAE;4BACF,mFAAmF;4BACnF,uFAAuF;4BACvF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gCAClB,MAAM,OAAO,GAAG;oCACd,eAAe,EAAE,iBAAiB;oCAClC,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,IAAI,EAAE,QAAQ;oCACd,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,yBAAyB;iCACrF,CAAC;gCACF,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;oCAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gCAC7F,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;4BACtF,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,OAAO,MAAM,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAChE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,eAAe,CAAC,KAAK,CAAC;wBAAE,OAAO,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;oBAC7F,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAChD,MAAM,OAAO,GAAY,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACzC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;gBAC1D,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC;YACrC,IAAI,MAAM,KAAK,KAAK;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;;gBAC9C,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEjC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,gBAAgB,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,cAAc,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7G,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7F,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACxG,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,aAAa,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAkB,KAAK;gBACpC,CAAC,CAAC;oBACE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACxD;gBACH,CAAC,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,OAAO,MAAM,cAAc,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAC3H,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,iBAAiB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;YAClI,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;AAE9B;;;;;;;GAOG;AACH,eAAe,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC","sourcesContent":["import type { Context, Handler } from 'hono';\nimport { Hono } from 'hono';\nimport { bodyLimit } from 'hono/body-limit';\nimport type { ContentfulStatusCode, RedirectStatusCode } from 'hono/utils/http-status';\nimport type React from 'react';\nimport type { ReactFormState } from 'react-dom/client';\n// The JSX factory, by name: the page element is created with this directly rather than as\n// `<Page {...props} />`, because a spread would drop the non-enumerable `ctx` prop. See `pageProps`.\nimport { jsx } from 'react/jsx-runtime';\n// The bare specifier, not `/server.node`: the package ships a build per runtime behind export\n// conditions (`node`, `workerd`, `deno`, `edge-light`), and the RSC layer's `conditionNames` is what\n// picks one — so a non-Node deploy target gets its own build instead of Node's by hard-coded path.\nimport {\n  createTemporaryReferenceSet,\n  decodeAction,\n  decodeFormState,\n  decodeReply,\n  loadServerAction,\n  renderToReadableStream,\n  type ServerEntry,\n  type TemporaryReferenceSet,\n} from 'react-server-dom-rspack/server';\n// Resolved by the '@rshono/deploy' alias to the selected preset's runtime module — the one place\n// this file knows anything about where it is running. See `deploy/contract.ts`.\nimport { runtime } from '@rshono/deploy';\n// @ts-expect-error — resolved by the '@rshono/routes' alias to the app's routes.ts\nimport { routes as userRoutes } from '@rshono/routes';\n// @ts-expect-error — resolved by the '@rshono/server-app' alias (src/server.ts or the empty fallback)\nimport * as serverAppModule from '@rshono/server-app';\nimport { isPageRoute, type ErrorPageInfo, type FallbackPage, type PageComponent, type PageProps, type Route, type RouteConfig } from '../router.js';\nimport { appendVary, etagMatches } from '../server/headers.js';\nimport { beginPageRender, getRequestContext, publicUrl, readParams, reportServerError, runWithContext } from './context.js';\nimport { isControlSignal, RedirectSignal, type ControlSignal } from './control.js';\nimport { renderHTML } from './entry.ssr.js';\n// Type-only, so it is erased — the RSC layer does not take its own instance of the SSR layer's module.\nimport type { CancellableTransformer } from './flight-inject.js';\nimport { RouterProvider } from './navigation.js';\nimport { acceptsRsc, isActionRequest, parseRenderRequest, requestWantsRsc, wantsRsc } from './request.js';\n\nconst serverApp = ((serverAppModule as { default?: unknown }).default ?? null) as Hono | null;\n\n// Framework settings resolved from rshono.config.ts and compiled into the bundle at build time\n// (see builder/rspack-config.ts). These have no runtime env-var interface — env is for secrets.\n// Named after their ServerConfig fields, so what a setting does here is one grep from where it is\n// resolved. `isDev` among them: the build mode is decided by which command produced the bundle, not\n// by `process.env.NODE_ENV`, and not every runtime this deploys to has a `process` to read anyway.\nconst CONFIG = __RSHONO_CONFIG__;\nconst { isDev, cspEnabled, checkOrigin, maxBodyBytes } = CONFIG;\n/** Extra cross-origin hosts permitted to post server actions, beyond the app's own origin. */\nconst allowedOrigins = new Set(CONFIG.allowedOrigins);\n\n/** How long a prerendered page may be reused before revalidating. Also what `public/` files get. */\nconst SSG_CACHE_CONTROL = 'public, max-age=300';\n\n/**\n * The two content types a page can be served as. Both come back from the *same* URL depending on\n * the `Accept` header, which is what makes `Vary` non-optional here.\n */\nconst PAGE_CONTENT_TYPE = /^(?:text\\/html|text\\/x-component)\\b/;\n\n// The CSP is fixed per build apart from the nonce, so assemble everything but `script-src` once.\nconst CSP_STATIC = Object.entries(CONFIG.cspDirectives)\n  .filter(([name]) => name !== 'script-src')\n  .map(([name, value]) => `${name} ${value}`)\n  .join('; ');\nconst CSP_SCRIPT_SRC = CONFIG.cspDirectives['script-src'] ?? \"'self'\";\n\n// Called here rather than at the top of the deploy runtime's own module so the timing is unchanged:\n// `.env` is loaded once every import above has been evaluated, exactly as before.\nruntime.loadEnv();\n\nconst routeConfig = userRoutes as RouteConfig;\nexport const routes: readonly Route[] = routeConfig.routes;\n\n/** The result of a server action, as a discriminated union (a `Result<T, E>`) rather than an `ok` flag over one field. */\nexport type ActionResult = { ok: true; value: unknown } | { ok: false; error: unknown };\n\nexport type RscPayload = {\n  root: React.ReactNode;\n  returnValue?: ActionResult;\n  formState?: ReactFormState;\n  redirect?: string;\n  notFound?: boolean;\n};\n\n/**\n * CSRF guard for server-action POSTs, layering the two signals a browser gives us.\n *\n * `Sec-Fetch-Site` is set by the browser and unforgeable by page script, so `same-origin` settles\n * the question on its own — and short-circuiting on it is what keeps the check from misfiring on a\n * legitimate request whose `Host` the proxy rewrote. Everything else falls back to comparing the\n * `Origin` host against our own (see {@link publicUrl} — deliberately *not* against a raw\n * `X-Forwarded-Host`, which the client controls unless `trustProxy` says a proxy owns it).\n *\n * A missing `Origin` is treated as same-origin: no-JS form posts from older browsers omit it, and\n * those same browsers send no `Sec-Fetch-Site` either, so there is nothing left to check. Hosts are\n * compared case-insensitively; the scheme is not compared, so this alone won't stop an\n * `http://` origin posting to the `https://` site (HSTS is the control for that).\n */\nfunction isSameOriginAction(c: Context): boolean {\n  if (!checkOrigin) return true;\n\n  const secFetchSite = c.req.header('sec-fetch-site');\n  if (secFetchSite === 'same-origin') return true;\n\n  const origin = c.req.header('origin');\n  const originHost = origin ? URL.parse(origin)?.host.toLowerCase() || null : null;\n  if (origin !== undefined && originHost === null) return false; // an Origin we can't parse is untrusted.\n\n  const trusted = originHost !== null && (originHost === publicUrl(c).host.toLowerCase() || allowedOrigins.has(originHost));\n\n  if (secFetchSite && secFetchSite !== 'none') {\n    // The browser tells us (unforgeably) this didn't originate from our own site — only a\n    // trusted (allowlisted) Origin may proceed.\n    return trusted;\n  }\n\n  if (originHost === null) return true;\n  return trusted;\n}\n\nasync function loadPageModule(load: () => Promise<{ default: PageComponent }>, label: string): Promise<ServerEntry<PageComponent>> {\n  const mod = await load();\n  const Page = mod.default as ServerEntry<PageComponent> | undefined;\n  if (typeof Page !== 'function') {\n    throw new Error(`[rshono] The page module for ${label} must default-export a server component.`);\n  }\n  if (!Page.entryJsFiles) {\n    throw new Error(\n      `[rshono] The page component for ${label} is missing its client-asset info ('use server-entry'). ` +\n        \"The directive is added automatically for inline `component: () => import('…')` thunks in routes.ts. \" +\n        \"If this page is wired up another way, put 'use server-entry' on the first line of the page module yourself — \" +\n        \"and make sure the page is a server component (a 'use client' page must be wrapped by a server component instead).\",\n    );\n  }\n  return Page;\n}\n\n/** A browser navigation or a crawler, as opposed to a fetch that would rather have plain text. */\nfunction acceptsHtml(c: Context): boolean {\n  return c.req.header('accept')?.includes('text/html') ?? false;\n}\n\n/** A lazy once-cell: runs `load` at most once and caches the promise, but clears a rejection so a later call can retry. */\nfunction once<T>(load: () => Promise<T>): () => Promise<T> {\n  let promise: Promise<T> | undefined;\n  return () => {\n    if (!promise) {\n      const pending = (promise = load());\n      pending.catch(() => {\n        // Only clear if we're still holding the rejected promise (a later successful load may have already replaced it).\n        if (promise === pending) promise = undefined;\n      });\n    }\n    return promise;\n  };\n}\n\n/**\n * Passes `stream` through untouched, calling `done` once it ends — however it ends.\n *\n * Used on the flight-only response path, which has no transform of its own to hang a completion hook\n * off (the document path has {@link injectFlightPayload}). `done` must be idempotent: a cancelled\n * response can reach both `cancel` and the abort forwarder.\n */\nfunction releaseWhenDone(stream: ReadableStream<Uint8Array>, done: () => void): ReadableStream<Uint8Array> {\n  return stream.pipeThrough(\n    new TransformStream<Uint8Array, Uint8Array>({\n      transform(chunk, controller) {\n        controller.enqueue(chunk);\n      },\n      flush: done,\n      cancel: done,\n    } as CancellableTransformer<Uint8Array, Uint8Array>),\n  );\n}\n\ninterface ComponentRenderOptions {\n  status?: number;\n  isRsc: boolean;\n  formState?: ReactFormState;\n  returnValue?: RscPayload['returnValue'];\n  temporaryReferences?: TemporaryReferenceSet;\n  /** Passed when the page being rendered is the `error` page, which takes it as an extra prop. */\n  errorInfo?: ErrorPageInfo;\n  /** Marks the payload as the not-found page, so a soft navigation can tell it apart from the page it asked for. */\n  notFound?: boolean;\n}\n\n/**\n * There is no render deadline here any more.\n *\n * A `renderTimeout` setting used to wrap every request in an `AbortController` with a timer, covering\n * the server action as well as the flight and SSR passes. Every host this deploys to enforces its own\n * request timeout — Workers, Vercel and Lambda all do — so the only shape that needed one was a Node\n * process facing the internet directly, and there a proxy is both the conventional and the more capable\n * place for it. The README shows the middleware for a Node deploy that wants one in-process.\n *\n * What the deadline *also* did was carry the client-disconnect signal into the two React renderers, and\n * that is kept — but not by handing them `c.req.raw.signal`. Both React renderers add an `abort`\n * listener to whatever signal they are given and only remove it if the abort fires, so a listener left on\n * a request-lifetime signal pins the flight request, the Fizz request and the whole rendered tree. That\n * is not theoretical: handing them the request signal directly cost ~169 kB per `/ssr` request, never\n * reclaimed by a major GC, and took GC from 5.8% to 12.9% of wall time under load.\n *\n * The deadline's own `AbortController` was, accidentally, what had kept that collectable — its signal\n * died with the render. So {@link renderComponent} keeps a per-render controller and forwards the request\n * signal into it, releasing the forwarder when the response ends. Never through `AbortSignal.any([...])`,\n * which reads better and leaks worse: a signal it produced is *composite*, and Node holds every composite\n * signal carrying an `abort` listener in a process-lifetime set (`gcPersistentSignals`) until it either\n * aborts or loses its last listener.\n */\n\n/**\n * Builds the props a page component is called with.\n *\n * `url` and `params` match `useNavigation()` field for field, so a read can move between a page and\n * a `'use client'` component unchanged. The `URL` is this page's own — `RequestContext` parses its own — so a\n * page that mutates it cannot disturb anything else on the request.\n *\n * `ctx` is *defined* rather than assigned, and both parts of how carry their weight:\n *\n * - **A getter**, so nothing is built for the pages that never read it, and so a `render: 'static'`\n *   page that does read it gets {@link getRequestContext}'s own \"no per-request context while\n *   prerendering\" error rather than a bare `undefined` — one explanation, in one place.\n * - **Non-enumerable**, so React's *development-only* serialization of a server component's props\n *   (the debug channel behind component stacks and the performance track) skips it. That walks own\n *   enumerable properties, and `ctx.hono` is the Hono {@link Context} — whose `env` holds the\n *   runtime's bindings. An enumerable `ctx` ships every one of them, secrets included, to the\n *   browser in dev, and grows a small page's flight payload by well over 10 kB. Production never\n *   serializes a server component's props at all, so this is the dev half of the same guarantee.\n *\n * The cost is that the element has to be created by handing this object to `jsx()` *by reference*:\n * a `<Page {...props} />` spread copies enumerable properties only, and would drop `ctx` silently.\n */\nfunction pageProps(c: Context, errorInfo: ErrorPageInfo | undefined): PageProps & { error?: ErrorPageInfo } {\n  const props = { url: publicUrl(c), params: readParams(c), ...(errorInfo ? { error: errorInfo } : null) };\n  Object.defineProperty(props, 'ctx', { get: getRequestContext, enumerable: false, configurable: true });\n  return props as PageProps & { error?: ErrorPageInfo };\n}\n\nasync function renderComponent(c: Context, Page: ServerEntry<PageComponent>, opts: ComponentRenderOptions): Promise<Response> {\n  // The client going away is the one thing that still aborts a render — but React's renderers must not\n  // be handed `c.req.raw.signal` to watch for it. Both of them add an `abort` listener and only remove\n  // it if the abort fires, so on the happy path the listener stays on a signal that lives as long as the\n  // request object, and through it pins the flight request, the Fizz request and the whole rendered\n  // tree. Measured at ~169 kB per `/ssr` request, never reclaimed by a major GC.\n  //\n  // So the render gets a controller of its own and the request signal only forwards into it. The\n  // forwarding listener is `once`, so an abort removes it, and {@link release} removes it on the normal\n  // path — which is what keeps the request from retaining the render. Deliberately not\n  // `AbortSignal.any()`: a signal it produced is *composite*, and Node holds every composite signal\n  // carrying an `abort` listener in a process-lifetime set until it aborts or loses its last listener,\n  // which is a worse leak than the one being fixed here.\n  const requestSignal = c.req.raw.signal;\n  const renderAbort = new AbortController();\n  const signal = renderAbort.signal;\n  const forwardAbort = () => renderAbort.abort(requestSignal.reason);\n  if (requestSignal.aborted) renderAbort.abort(requestSignal.reason);\n  else requestSignal.addEventListener('abort', forwardAbort, { once: true });\n  /** Detaches the forwarder once the response has been written, so nothing survives the request. */\n  const release = () => requestSignal.removeEventListener('abort', forwardAbort);\n\n  const nonce = cspEnabled && !opts.isRsc ? crypto.randomUUID() : undefined;\n  const props = pageProps(c, opts.errorInfo);\n  const root = (\n    <>\n      {nonce && <meta property=\"csp-nonce\" nonce={nonce} />}\n      {Page.entryCssFiles?.map((href) => (\n        <link key={href} rel=\"stylesheet\" href={href} precedence=\"default\" />\n      ))}\n      {/* `href`, not the `URL` itself: these props cross into a client component, so they have to be serializable. */}\n      <RouterProvider href={props.url.href} params={props.params}>\n        {jsx(Page, props)}\n      </RouterProvider>\n    </>\n  );\n\n  // `notFound` only when it is true, so the flight payload of an ordinary page doesn't carry the key.\n  const rscPayload: RscPayload = { root, formState: opts.formState, returnValue: opts.returnValue, ...(opts.notFound ? { notFound: true } : null) };\n\n  // Past this line the response head belongs to the framework, so `ctx.setHeader()` and\n  // `ctx.cookies.set()` start throwing rather than writing somewhere nothing will read. It has to be\n  // the last thing before the render: a server action ran earlier in `renderPage` and legitimately\n  // writes to the response, and so does any middleware that wrapped this handler.\n  beginPageRender(c);\n\n  let controlSignal: ControlSignal | undefined;\n  const rscStream = renderToReadableStream(rscPayload, {\n    temporaryReferences: opts.temporaryReferences,\n    signal,\n    onError(error) {\n      if (isControlSignal(error)) {\n        controlSignal = error;\n        return error.digest;\n      }\n      if (!signal.aborted) reportServerError(error, { source: 'render', request: c.req.raw, message: '[rshono] render error:' });\n    },\n  });\n\n  if (opts.isRsc) {\n    return c.body(releaseWhenDone(rscStream, release), (opts.status ?? 200) as ContentfulStatusCode, {\n      'content-type': 'text/x-component;charset=utf-8',\n    });\n  }\n\n  let ssrResult: Awaited<ReturnType<typeof renderHTML>>;\n  try {\n    ssrResult = await renderHTML(rscStream, {\n      bootstrapScripts: Page.entryJsFiles,\n      formState: opts.formState,\n      signal,\n      nonce,\n      onDone: release,\n      onShellError: (error) => reportServerError(error, { source: 'ssr', request: c.req.raw, message: '[rshono] SSR shell error:' }),\n      onError: (error) => reportServerError(error, { source: 'ssr', request: c.req.raw, message: '[rshono] SSR error:' }),\n    });\n  } catch (error) {\n    release();\n    if (controlSignal) throw controlSignal;\n    throw error;\n  }\n  if (controlSignal) {\n    release();\n    throw controlSignal;\n  }\n  const headers: Record<string, string> = { 'content-type': 'text/html;charset=utf-8' };\n  if (nonce) {\n    // The nonce is always appended to whatever `script-src` resolved to, so overriding the\n    // directive in `cspDirectives` can widen the policy but can't accidentally drop the nonce.\n    // Dev additionally needs 'unsafe-eval' for react-refresh.\n    const scriptSrc = `script-src ${CSP_SCRIPT_SRC} 'nonce-${nonce}'${isDev ? \" 'unsafe-eval'\" : ''}`;\n    headers['content-security-policy'] = CSP_STATIC ? `${CSP_STATIC}; ${scriptSrc}` : scriptSrc;\n  }\n  return c.body(ssrResult.stream, (ssrResult.status ?? opts.status ?? 200) as ContentfulStatusCode, headers);\n}\n\nasync function renderPage(c: Context, loadPage: () => Promise<ServerEntry<PageComponent>>): Promise<Response> {\n  const request = c.req.raw;\n  const renderRequest = parseRenderRequest(request);\n\n  let returnValue: ActionResult | undefined;\n  let formState: ReactFormState | undefined;\n  let temporaryReferences: TemporaryReferenceSet | undefined;\n  let actionStatus: number | undefined;\n  if (isActionRequest(renderRequest)) {\n    if (!isSameOriginAction(c)) {\n      return c.text('Forbidden: cross-origin server action rejected', 403);\n    }\n    if (renderRequest.kind === 'rsc-action') {\n      // Checked before the body is decoded, so an unknown id costs nothing to reject — and\n      // `loadServerAction` would otherwise fault on the missing manifest entry, turning a bad\n      // request into an unhandled 500. `hasOwn` so `__proto__` doesn't resolve to a manifest entry.\n      if (!Object.hasOwn(__rspack_rsc_manifest__.serverManifest, renderRequest.actionId)) {\n        return c.text('Bad Request: unknown server action', 400);\n      }\n      const contentType = request.headers.get('content-type');\n      const body = contentType?.startsWith('multipart/form-data') ? await request.formData() : await request.text();\n      temporaryReferences = createTemporaryReferenceSet();\n      const args = await decodeReply<unknown[]>(body, { temporaryReferences });\n      const action = loadServerAction(renderRequest.actionId);\n      try {\n        returnValue = { ok: true, value: await action.apply(null, args) };\n      } catch (error) {\n        if (isControlSignal(error)) throw error;\n        // React sends a thrown action error to the client as an opaque marker in production — no\n        // message, no digest — so without this the failure would be invisible on both ends.\n        reportServerError(error, { source: 'action', request, message: '[rshono] server action error:' });\n        returnValue = { ok: false, error };\n        actionStatus = 500;\n      }\n    } else {\n      const formData = await request.formData();\n      const decodedAction = await decodeAction(formData, __rspack_rsc_manifest__.serverManifest);\n      if (decodedAction) {\n        const result = await decodedAction();\n        formState = (await decodeFormState(result, formData, __rspack_rsc_manifest__.serverManifest)) ?? undefined;\n      }\n    }\n  }\n\n  const Page = await loadPage();\n  return renderComponent(c, Page, {\n    status: actionStatus,\n    isRsc: wantsRsc(renderRequest),\n    formState,\n    returnValue,\n    temporaryReferences,\n  });\n}\n\nfunction buildApp(): Hono {\n  const app = new Hono();\n\n  // Cheap, unconditional headers that only matter when something else has gone wrong: stop\n  // content-type sniffing, keep the full URL (paths, query) out of cross-origin referrers, and\n  // refuse to be framed by another origin (clickjacking). `frame-ancestors` in the opt-in CSP is\n  // stricter and takes precedence where both apply; this is the floor for everyone else.\n  // Set after `next()` so a route or middleware that sets its own value wins.\n  app.use(async (c, next) => {\n    await next();\n    const headers = c.res.headers;\n    if (!headers.has('x-content-type-options')) headers.set('x-content-type-options', 'nosniff');\n    if (!headers.has('referrer-policy')) headers.set('referrer-policy', 'strict-origin-when-cross-origin');\n    if (!headers.has('x-frame-options')) headers.set('x-frame-options', 'SAMEORIGIN');\n\n    // Page responses only, from here down. Two things are true of them and of nothing else served\n    // here: one URL answers with either an HTML document or a flight payload depending on `Accept`,\n    // and the default page is request-specific (cookies, session, headers).\n    if (!PAGE_CONTENT_TYPE.test(headers.get('content-type') ?? '')) return;\n    appendVary(headers, 'Accept');\n    // Without this a page carries no cache directives at all, and a shared cache — a CDN, a\n    // corporate proxy — is free to store a logged-in user's page and hand it to someone else.\n    // `private` forbids exactly that; `no-cache` makes the browser revalidate its own copy rather\n    // than re-showing a stale personalised page. Neither blocks bfcache, which `no-store` would.\n    // A prerendered page, or anything a route set deliberately, already has its own value.\n    if (!headers.has('cache-control')) headers.set('cache-control', 'private, no-cache');\n  });\n\n  // A memory-exhaustion guard for *every* route — pages and actions, `{ type: 'endpoint' }` routes\n  // and the src/server.ts sub-app alike — since anything that buffers a body (`.json()`,\n  // `.formData()`) is exposed, not just server actions. Rejects an over-cap `Content-Length` up\n  // front and otherwise counts the stream, so a chunked or under-reported body is still cut off.\n  if (maxBodyBytes > 0) {\n    app.use(bodyLimit({ maxSize: maxBodyBytes, onError: (c) => c.text('Payload Too Large', 413) }));\n  }\n\n  runtime.mountStaticAssets(app);\n\n  // Mounted ahead of the page routes so the sub-app's middleware (auth, logging, trailing-slash)\n  // wraps page requests too. The flip side: a *terminal* handler in src/server.ts at the same path\n  // as a page route wins over the page.\n  if (serverApp) {\n    app.route('/', serverApp);\n  }\n\n  const memoizePage = (page: FallbackPage, label: string) => once(() => loadPageModule(page.component, label));\n  const loadNotFoundPage = routeConfig.notFound ? memoizePage(routeConfig.notFound, 'the notFound page') : null;\n\n  /** Turns a thrown `redirect()` / `notFound()` into the response it stands for. */\n  const respondToControlSignal = async (c: Context, signal: ControlSignal): Promise<Response> => {\n    const isRsc = requestWantsRsc(c.req.raw);\n    if (signal instanceof RedirectSignal) {\n      if (isRsc) {\n        return c.body(renderToReadableStream({ root: null, redirect: signal.location } satisfies RscPayload, { signal: c.req.raw.signal }), 200, {\n          'content-type': 'text/x-component;charset=utf-8',\n        });\n      }\n      return c.redirect(signal.location, signal.status as RedirectStatusCode);\n    }\n    if (loadNotFoundPage) {\n      return renderComponent(c, await loadNotFoundPage(), { status: 404, isRsc, notFound: true });\n    }\n    // Plain text, but still one of the two answers this URL gives depending on `Accept`.\n    return c.text('Not Found', 404, { vary: 'Accept' });\n  };\n\n  for (const route of routes) {\n    if (isPageRoute(route)) {\n      // Both are fixed for the life of the process, so resolve them once here instead of per request.\n      const servesPrerendered = !isDev && route.render === 'static';\n      const loadPage = once(() => loadPageModule(route.component, `\"${route.path}\"`));\n\n      const handler: Handler = async (c) => {\n        try {\n          if (servesPrerendered && c.req.method === 'GET') {\n            const isRsc = acceptsRsc(c.req.raw);\n            // A prerendered file is one fixed set of bytes, so it cannot carry a per-request nonce:\n            // under `csp` the *document* has to be rendered per request. The flight payload never\n            // carries a nonce, so it stays servable from the build either way.\n            const mustRenderForNonce = cspEnabled && !isRsc;\n            // Otherwise both representations come from the build, so a soft navigation is served from\n            // it too rather than re-rendering a page that was already built.\n            if (!mustRenderForNonce) {\n              const page = await runtime.readPrerendered(c, isRsc ? 'flight' : 'html');\n              // A prerendered page is request-independent by construction, so it is safe to cache\n              // publicly; the short max-age matches what `public/` files get. The ETag turns the\n              // revalidation that follows into a 304 rather than the page all over again.\n              //\n              // Answered outside `runWithContext`: no app code runs on this path, so there is no\n              // `getRequestContext()` to serve and no reason to pay for the AsyncLocalStorage scope.\n              if (page !== null) {\n                const headers = {\n                  'cache-control': SSG_CACHE_CONTROL,\n                  etag: page.etag,\n                  vary: 'Accept',\n                  'content-type': isRsc ? 'text/x-component;charset=utf-8' : 'text/html;charset=utf-8',\n                };\n                if (etagMatches(c.req.header('if-none-match'), page.etag)) return c.body(null, 304, headers);\n                return c.body(page.body, 200, { ...headers, 'content-length': page.contentLength });\n              }\n            }\n          }\n          return await runWithContext(c, () => renderPage(c, loadPage));\n        } catch (error) {\n          if (isControlSignal(error)) return runWithContext(c, () => respondToControlSignal(c, error));\n          throw error;\n        }\n      };\n      app.on(['GET', 'POST'], route.path, handler);\n    } else {\n      const loadEndpoint = once(() => route.server());\n      const handler: Handler = async (c, next) => {\n        const { handler: endpointHandler } = await loadEndpoint();\n        return endpointHandler(c, next);\n      };\n      const method = route.method ?? 'all';\n      if (method === 'all') app.all(route.path, handler);\n      else app.on(method.toUpperCase(), route.path, handler);\n    }\n  }\n\n  runtime.mountPublicFallback(app);\n\n  app.notFound(async (c) => {\n    const isRsc = requestWantsRsc(c.req.raw);\n    if (loadNotFoundPage && (isRsc || acceptsHtml(c))) {\n      return runWithContext(c, async () => renderComponent(c, await loadNotFoundPage(), { status: 404, isRsc }));\n    }\n    return c.text('Not Found', 404, { vary: 'Accept' });\n  });\n\n  const loadErrorPage = routeConfig.error ? memoizePage(routeConfig.error, 'the error page') : null;\n  app.onError(async (error, c) => {\n    if (isControlSignal(error)) return runWithContext(c, () => respondToControlSignal(c, error));\n    reportServerError(error, { source: 'request', request: c.req.raw, message: '[rshono] request error:' });\n    const isRsc = requestWantsRsc(c.req.raw);\n    if (loadErrorPage && (isRsc || acceptsHtml(c))) {\n      const errorInfo: ErrorPageInfo = isDev\n        ? {\n            message: error instanceof Error ? error.message : String(error),\n            stack: error instanceof Error ? error.stack : undefined,\n          }\n        : { message: 'Internal Server Error' };\n      try {\n        return await runWithContext(c, async () => renderComponent(c, await loadErrorPage(), { status: 500, isRsc, errorInfo }));\n      } catch (renderError) {\n        reportServerError(renderError, { source: 'request', request: c.req.raw, message: '[rshono] the error page failed to render:' });\n      }\n    }\n    const detail = isDev ? `\\n\\n${error instanceof Error ? (error.stack ?? error.message) : String(error)}` : '';\n    return c.text(`Internal Server Error${detail}`, 500, { vary: 'Accept' });\n  });\n\n  return app;\n}\n\nexport const app = buildApp();\n\n/**\n * The app, handed to whatever is hosting it.\n *\n * On a platform where rshono owns the process this binds a port and the default export is nothing;\n * where the host owns it, this *is* the export the platform looks for — so the same entry serves\n * both without a per-platform entry file. `app` and `routes` stay named exports either way, because\n * `rshono build` imports them to prerender `render: 'static'` routes.\n */\nexport default runtime.serveApp(app);\n"]}
+{"version":3,"file":"entry.rsc.js","sourceRoot":"","sources":["../../src/runtime/entry.rsc.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQpD,0FAA0F;AAC1F,qGAAqG;AACrG,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,8FAA8F;AAC9F,oGAAoG;AACpG,mDAAmD;AACnD,OAAO,EACL,2BAA2B,EAC3B,YAAY,EACZ,eAAe,EACf,WAAW,EACX,gBAAgB,EAChB,sBAAsB,GAGvB,MAAM,gCAAgC,CAAC;AACxC,iGAAiG;AACjG,gFAAgF;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,mFAAmF;AACnF,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACtD,sGAAsG;AACtG,OAAO,KAAK,eAAe,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAA2G,MAAM,cAAc,CAAC;AACpJ,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5H,OAAO,EAAE,eAAe,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE1G,MAAM,SAAS,GAAG,CAAE,eAAyC,CAAC,OAAO,IAAI,IAAI,CAAgB,CAAC;AAE9F,oGAAoG;AACpG,mGAAmG;AACnG,oGAAoG;AACpG,gEAAgE;AAChE,MAAM,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC;AAEpC,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD;;;GAGG;AACH,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAEhE,oGAAoG;AACpG,kFAAkF;AAClF,OAAO,CAAC,OAAO,EAAE,CAAC;AAElB,MAAM,WAAW,GAAG,UAAyB,CAAC;AAC9C,MAAM,CAAC,MAAM,MAAM,GAAqB,WAAW,CAAC,MAAM,CAAC;AAa3D;;;;;;;;;;;GAWG;AACH,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAA+C,EAAE,KAAa;IAC1F,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAiD,CAAC;IACnE,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,0CAA0C,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mCAAmC,KAAK,0DAA0D;YAChG,sGAAsG;YACtG,+GAA+G;YAC/G,mHAAmH,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kGAAkG;AAClG,SAAS,WAAW,CAAC,CAAU;IAC7B,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,2HAA2H;AAC3H,SAAS,IAAI,CAAI,IAAsB;IACrC,IAAI,OAA+B,CAAC;IACpC,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjB,iHAAiH;gBACjH,IAAI,OAAO,KAAK,OAAO;oBAAE,OAAO,GAAG,SAAS,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,MAAkC,EAAE,IAAgB;IAC3E,OAAO,MAAM,CAAC,WAAW,CACvB,IAAI,eAAe,CAAyB;QAC1C,SAAS,CAAC,KAAK,EAAE,UAAU;YACzB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;KACqC,CAAC,CACrD,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,SAAS,CAAC,CAAU,EAAE,SAAoC;IACjE,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACzG,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACvG,OAAO,KAA8C,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,CAAU,EAAE,IAAgC,EAAE,IAA4B;IACvG,qFAAqF;IACrF,mGAAmG;IACnG,mGAAmG;IACnG,gGAAgG;IAChG,kCAAkC;IAClC,EAAE;IACF,+FAA+F;IAC/F,gGAAgG;IAChG,mGAAmG;IACnG,qGAAqG;IACrG,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,aAAa,CAAC,OAAO;QAAE,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;;QAC9D,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,kGAAkG;IAClG,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAE/E,gGAAgG;IAChG,iGAAiG;IACjG,sDAAsD;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,CACX,8BACG,KAAK,IAAI,eAAM,QAAQ,EAAC,WAAW,EAAC,KAAK,EAAE,KAAK,GAAI,EACpD,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACjC,eAAiB,GAAG,EAAC,YAAY,EAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAC,SAAS,IAAvD,IAAI,CAAsD,CACtE,CAAC,EAEF,KAAC,cAAc,IAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,YACvD,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GACF,IAChB,CACJ,CAAC;IAEF,oGAAoG;IACpG,MAAM,UAAU,GAAe,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAElJ,sFAAsF;IACtF,mGAAmG;IACnG,iGAAiG;IACjG,gFAAgF;IAChF,eAAe,CAAC,CAAC,CAAC,CAAC;IAEnB,IAAI,aAAwC,CAAC;IAC7C,MAAM,SAAS,GAAG,sBAAsB,CAAC,UAAU,EAAE;QACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,MAAM;QACN,OAAO,CAAC,KAAK;YACX,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,aAAa,GAAG,KAAK,CAAC;gBACtB,OAAO,KAAK,CAAC,MAAM,CAAC;YACtB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC7H,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAyB,EAAE;YAC/F,cAAc,EAAE,gCAAgC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAiD,CAAC;IACtD,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE;YACtC,gBAAgB,EAAE,IAAI,CAAC,YAAY;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM;YACN,KAAK;YACL,MAAM,EAAE,OAAO;YACf,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;YAC9H,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;SACpH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;QACV,IAAI,aAAa;YAAE,MAAM,aAAa,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;QACV,MAAM,aAAa,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,CAAyB,EAAE;QAChG,cAAc,EAAE,yBAAyB;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAU,EAAE,QAAmD;IACvF,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1B,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAElD,IAAI,WAAqC,CAAC;IAC1C,IAAI,SAAqC,CAAC;IAC1C,IAAI,mBAAsD,CAAC;IAC3D,IAAI,YAAgC,CAAC;IACrC,IAAI,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,IAAI,aAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACxC,qFAAqF;YACrF,wFAAwF;YACxF,8FAA8F;YAC9F,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnF,OAAO,CAAC,CAAC,IAAI,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,WAAW,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9G,mBAAmB,GAAG,2BAA2B,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAY,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,CAAC;gBACH,WAAW,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACpE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,eAAe,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACxC,yFAAyF;gBACzF,oFAAoF;gBACpF,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;gBAClG,WAAW,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBACnC,YAAY,GAAG,GAAG,CAAC;YACrB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAC;YAC3F,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;gBACrC,SAAS,GAAG,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAC,IAAI,SAAS,CAAC;YAC7G,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE;QAC9B,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC;QAC9B,SAAS;QACT,WAAW;QACX,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,+FAA+F;IAC/F,kGAAkG;IAClG,4FAA4F;IAC5F,gGAAgG;IAChG,yFAAyF;IACzF,+FAA+F;IAC/F,qEAAqE;IACrE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,IAAI,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QACvG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAElF,6FAA6F;QAC7F,gGAAgG;QAChG,6FAA6F;QAC7F,iDAAiD;QACjD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACnD,IAAI,GAAG,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;QAED,gGAAgG;QAChG,2EAA2E;QAC3E,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO;QACvE,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9B,kGAAkG;QAClG,kGAAkG;QAClG,+FAA+F;QAC/F,gGAAgG;QAChG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE/B,+FAA+F;IAC/F,sFAAsF;IACtF,qFAAqF;IACrF,qEAAqE;IACrE,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,IAAkB,EAAE,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7G,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9G,kFAAkF;IAClF,MAAM,sBAAsB,GAAG,KAAK,EAAE,CAAU,EAAE,MAAqB,EAAqB,EAAE;QAC5F,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,MAAM,YAAY,cAAc,EAAE,CAAC;YACrC,IAAI,KAAK,EAAE,CAAC;gBACV,uFAAuF;gBACvF,mFAAmF;gBACnF,OAAO,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAuB,CAAC,EAAE,GAAG,EAAE;oBACzG,cAAc,EAAE,gCAAgC;iBACjD,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAA4B,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,eAAe,CAAC,CAAC,EAAE,MAAM,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,gGAAgG;YAChG,MAAM,iBAAiB,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;YAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAEhF,MAAM,OAAO,GAAY,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnC,IAAI,CAAC;oBACH,IAAI,iBAAiB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;wBAChD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACpC,wFAAwF;wBACxF,yFAAyF;wBACzF,iFAAiF;wBACjF,EAAE;wBACF,6EAA6E;wBAC7E,uFAAuF;wBACvF,kFAAkF;wBAClF,MAAM,kBAAkB,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;wBAC/D,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;4BACzE,oFAAoF;4BACpF,uFAAuF;4BACvF,4EAA4E;4BAC5E,EAAE;4BACF,mFAAmF;4BACnF,uFAAuF;4BACvF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gCAClB,MAAM,OAAO,GAAG;oCACd,eAAe,EAAE,iBAAiB;oCAClC,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,IAAI,EAAE,QAAQ;oCACd,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,yBAAyB;iCACrF,CAAC;gCACF,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;oCAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gCAC7F,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;4BACtF,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,OAAO,MAAM,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAChE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,eAAe,CAAC,KAAK,CAAC;wBAAE,OAAO,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;oBAC7F,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAChD,MAAM,OAAO,GAAY,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACzC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;gBAC1D,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC;YACrC,IAAI,MAAM,KAAK,KAAK;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;;gBAC9C,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEjC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,gBAAgB,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,cAAc,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7G,CAAC;QACD,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7F,iGAAiG;QACjG,2FAA2F;QAC3F,kGAAkG;QAClG,gGAAgG;QAChG,iGAAiG;QACjG,0FAA0F;QAC1F,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QACD,iBAAiB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACxG,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,aAAa,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAkB,KAAK;gBACpC,CAAC,CAAC;oBACE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACxD;gBACH,CAAC,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,OAAO,MAAM,cAAc,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAC3H,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,iBAAiB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;YAClI,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;AAE9B;;;;;;;GAOG;AACH,eAAe,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC","sourcesContent":["import type { Context, Handler } from 'hono';\nimport { Hono } from 'hono';\nimport { HTTPException } from 'hono/http-exception';\n// Type-only, and imported for its side effect on the *type* level: the module augments Hono's\n// `ContextVariableMap` with `secureHeadersNonce`, which is how a nonce set by `secureHeaders()` in\n// src/server.ts is read back below. Nothing from it is used at runtime.\nimport type {} from 'hono/secure-headers';\nimport type { ContentfulStatusCode, RedirectStatusCode } from 'hono/utils/http-status';\nimport type React from 'react';\nimport type { ReactFormState } from 'react-dom/client';\n// The JSX factory, by name: the page element is created with this directly rather than as\n// `<Page {...props} />`, because a spread would drop the non-enumerable `ctx` prop. See `pageProps`.\nimport { jsx } from 'react/jsx-runtime';\n// The bare specifier, not `/server.node`: the package ships a build per runtime behind export\n// conditions, and the RSC layer's `conditionNames` picks one — so a non-Node deploy target gets its\n// own build rather than Node's by hard-coded path.\nimport {\n  createTemporaryReferenceSet,\n  decodeAction,\n  decodeFormState,\n  decodeReply,\n  loadServerAction,\n  renderToReadableStream,\n  type ServerEntry,\n  type TemporaryReferenceSet,\n} from 'react-server-dom-rspack/server';\n// Resolved by the '@rshono/deploy' alias to the selected preset's runtime module — the one place\n// this file knows anything about where it is running. See `deploy/contract.ts`.\nimport { runtime } from '@rshono/deploy';\n// @ts-expect-error — resolved by the '@rshono/routes' alias to the app's routes.ts\nimport { routes as userRoutes } from '@rshono/routes';\n// @ts-expect-error — resolved by the '@rshono/server-app' alias (src/server.ts or the empty fallback)\nimport * as serverAppModule from '@rshono/server-app';\nimport { isPageRoute, type ErrorPageInfo, type FallbackPage, type PageComponent, type PageProps, type Route, type RouteConfig } from '../router.js';\nimport { appendVary, etagMatches } from '../server/headers.js';\nimport { beginPageRender, getRequestContext, publicUrl, readParams, reportServerError, runWithContext } from './context.js';\nimport { isControlSignal, RedirectSignal, type ControlSignal } from './control.js';\nimport { renderHTML } from './entry.ssr.js';\n// Type-only, so it is erased — the RSC layer does not take its own instance of the SSR layer's module.\nimport type { CancellableTransformer } from './flight-inject.js';\nimport { RouterProvider } from './navigation.js';\nimport { acceptsRsc, isActionRequest, parseRenderRequest, requestWantsRsc, wantsRsc } from './request.js';\n\nconst serverApp = ((serverAppModule as { default?: unknown }).default ?? null) as Hono | null;\n\n// Framework settings resolved from rshono.config.ts and compiled into the bundle at build time (see\n// builder/rspack-config.ts). There is no runtime env-var interface for these — env is for secrets.\n// `isDev` among them: the build mode is decided by which command produced the bundle, and not every\n// runtime this deploys to has a `process.env.NODE_ENV` to read.\nconst { isDev } = __RSHONO_CONFIG__;\n\n/** How long a prerendered page may be reused before revalidating. Also what `public/` files get. */\nconst SSG_CACHE_CONTROL = 'public, max-age=300';\n\n/**\n * The two content types a page can be served as. Both come back from the *same* URL depending on\n * the `Accept` header, which is what makes `Vary` non-optional here.\n */\nconst PAGE_CONTENT_TYPE = /^(?:text\\/html|text\\/x-component)\\b/;\n\n// Called here rather than at the top of the deploy runtime's own module so the timing is unchanged:\n// `.env` is loaded once every import above has been evaluated, exactly as before.\nruntime.loadEnv();\n\nconst routeConfig = userRoutes as RouteConfig;\nexport const routes: readonly Route[] = routeConfig.routes;\n\n/** The result of a server action, as a discriminated union (a `Result<T, E>`) rather than an `ok` flag over one field. */\nexport type ActionResult = { ok: true; value: unknown } | { ok: false; error: unknown };\n\nexport type RscPayload = {\n  root: React.ReactNode;\n  returnValue?: ActionResult;\n  formState?: ReactFormState;\n  redirect?: string;\n  notFound?: boolean;\n};\n\n/**\n * The per-request CSP nonce, if the app asked for one.\n *\n * The framework does not mint this. `secureHeaders()` from `hono/secure-headers` does, when its\n * policy contains the `NONCE` placeholder, and it stores it here — so an app opts into a\n * nonce-based CSP by registering that middleware in `src/server.ts` and the framework's only job is\n * to stamp the value into the render.\n *\n * Readable from a route handler because `secureHeaders` resolves its directives *before* calling\n * `next()`; the header itself is written on the way back out. Absent when the app registered no CSP,\n * or one with no nonce in it — a fixed policy needs nothing from the render.\n */\nfunction cspNonce(c: Context): string | undefined {\n  return c.get('secureHeadersNonce');\n}\n\nasync function loadPageModule(load: () => Promise<{ default: PageComponent }>, label: string): Promise<ServerEntry<PageComponent>> {\n  const mod = await load();\n  const Page = mod.default as ServerEntry<PageComponent> | undefined;\n  if (typeof Page !== 'function') {\n    throw new Error(`[rshono] The page module for ${label} must default-export a server component.`);\n  }\n  if (!Page.entryJsFiles) {\n    throw new Error(\n      `[rshono] The page component for ${label} is missing its client-asset info ('use server-entry'). ` +\n        \"The directive is added automatically for inline `component: () => import('…')` thunks in routes.ts. \" +\n        \"If this page is wired up another way, put 'use server-entry' on the first line of the page module yourself — \" +\n        \"and make sure the page is a server component (a 'use client' page must be wrapped by a server component instead).\",\n    );\n  }\n  return Page;\n}\n\n/** A browser navigation or a crawler, as opposed to a fetch that would rather have plain text. */\nfunction acceptsHtml(c: Context): boolean {\n  return c.req.header('accept')?.includes('text/html') ?? false;\n}\n\n/**\n * The 404 for an app with no `notFound` page, and for a client that wanted neither HTML nor a flight\n * payload. Shared for the `Vary`: this is still one of the answers a page URL gives depending on\n * `Accept`, and a cache not told so can hand a plain-text 404 to a browser asking for a document.\n */\nfunction plainNotFound(c: Context): Response {\n  return c.text('Not Found', 404, { vary: 'Accept' });\n}\n\n/** A lazy once-cell: runs `load` at most once and caches the promise, but clears a rejection so a later call can retry. */\nfunction once<T>(load: () => Promise<T>): () => Promise<T> {\n  let promise: Promise<T> | undefined;\n  return () => {\n    if (!promise) {\n      const pending = (promise = load());\n      pending.catch(() => {\n        // Only clear if we're still holding the rejected promise (a later successful load may have already replaced it).\n        if (promise === pending) promise = undefined;\n      });\n    }\n    return promise;\n  };\n}\n\n/**\n * Passes `stream` through untouched, calling `done` once it ends — however it ends.\n *\n * Used on the flight-only response path, which has no transform of its own to hang a completion hook\n * off (the document path has {@link injectFlightPayload}). `done` must be idempotent: a cancelled\n * response can reach both `cancel` and the abort forwarder.\n */\nfunction releaseWhenDone(stream: ReadableStream<Uint8Array>, done: () => void): ReadableStream<Uint8Array> {\n  return stream.pipeThrough(\n    new TransformStream<Uint8Array, Uint8Array>({\n      transform(chunk, controller) {\n        controller.enqueue(chunk);\n      },\n      flush: done,\n      cancel: done,\n    } as CancellableTransformer<Uint8Array, Uint8Array>),\n  );\n}\n\ninterface ComponentRenderOptions {\n  status?: number;\n  isRsc: boolean;\n  formState?: ReactFormState;\n  returnValue?: RscPayload['returnValue'];\n  temporaryReferences?: TemporaryReferenceSet;\n  /** Passed when the page being rendered is the `error` page, which takes it as an extra prop. */\n  errorInfo?: ErrorPageInfo;\n  /** Marks the payload as the not-found page, so a soft navigation can tell it apart from the page it asked for. */\n  notFound?: boolean;\n}\n\n/**\n * Builds the props a page component is called with.\n *\n * `url` and `params` match `useNavigation()` field for field, so a read can move between a page and a\n * `'use client'` component unchanged. The `URL` is this page's own, so mutating it cannot disturb\n * anything else on the request.\n *\n * `ctx` is *defined* rather than assigned, and both halves of how carry their weight:\n *\n * - **A getter**, so nothing is built for the pages that never read it, and so a `render: 'static'`\n *   page that does read it gets {@link getRequestContext}'s \"no per-request context while\n *   prerendering\" error rather than a bare `undefined`.\n * - **Non-enumerable**, so React's *development-only* serialization of a server component's props\n *   (the debug channel behind component stacks and the performance track) skips it. That walks own\n *   enumerable properties, and `ctx.hono` is the Hono {@link Context} — whose `env` holds the\n *   runtime's bindings. An enumerable `ctx` would ship every one of them, secrets included, to the\n *   browser in dev, and add well over 10 kB to a small page's flight payload.\n *\n * The cost is that the element has to be created by handing this object to `jsx()` *by reference*: a\n * `<Page {...props} />` spread copies enumerable properties only, and would drop `ctx` silently.\n */\nfunction pageProps(c: Context, errorInfo: ErrorPageInfo | undefined): PageProps & { error?: ErrorPageInfo } {\n  const props = { url: publicUrl(c), params: readParams(c), ...(errorInfo ? { error: errorInfo } : null) };\n  Object.defineProperty(props, 'ctx', { get: getRequestContext, enumerable: false, configurable: true });\n  return props as PageProps & { error?: ErrorPageInfo };\n}\n\nasync function renderComponent(c: Context, Page: ServerEntry<PageComponent>, opts: ComponentRenderOptions): Promise<Response> {\n  // A client going away aborts the render — but React's renderers must never be handed\n  // `c.req.raw.signal` to watch for it. Both add an `abort` listener and only remove it if the abort\n  // fires, so on the happy path that listener stays on a request-lifetime signal and through it pins\n  // the flight request, the Fizz request and the whole rendered tree (~169 kB per `/ssr` request,\n  // never reclaimed by a major GC).\n  //\n  // So the render gets a controller of its own and the request signal only forwards into it: the\n  // forwarder is `once`, so an abort removes it, and `release` removes it on the normal path. Not\n  // `AbortSignal.any()` — a signal it produced is *composite*, and Node holds every composite signal\n  // carrying an `abort` listener in a process-lifetime set until it aborts or loses its last listener.\n  const requestSignal = c.req.raw.signal;\n  const renderAbort = new AbortController();\n  const signal = renderAbort.signal;\n  const forwardAbort = () => renderAbort.abort(requestSignal.reason);\n  if (requestSignal.aborted) renderAbort.abort(requestSignal.reason);\n  else requestSignal.addEventListener('abort', forwardAbort, { once: true });\n  /** Detaches the forwarder once the response has been written, so nothing survives the request. */\n  const release = () => requestSignal.removeEventListener('abort', forwardAbort);\n\n  // Documents only: the nonce goes on the bootstrap scripts and the `<meta>` React hydrates from,\n  // and a flight payload has neither. Leaving it off there is also what keeps a prerendered flight\n  // payload servable from disk under a nonce-based CSP.\n  const nonce = opts.isRsc ? undefined : cspNonce(c);\n  const props = pageProps(c, opts.errorInfo);\n  const root = (\n    <>\n      {nonce && <meta property=\"csp-nonce\" nonce={nonce} />}\n      {Page.entryCssFiles?.map((href) => (\n        <link key={href} rel=\"stylesheet\" href={href} precedence=\"default\" />\n      ))}\n      {/* `href`, not the `URL` itself: these props cross into a client component, so they have to be serializable. */}\n      <RouterProvider href={props.url.href} params={props.params}>\n        {jsx(Page, props)}\n      </RouterProvider>\n    </>\n  );\n\n  // `notFound` only when it is true, so the flight payload of an ordinary page doesn't carry the key.\n  const rscPayload: RscPayload = { root, formState: opts.formState, returnValue: opts.returnValue, ...(opts.notFound ? { notFound: true } : null) };\n\n  // Past this line the response head belongs to the framework, so `ctx.setHeader()` and\n  // `ctx.cookies.set()` start throwing rather than writing somewhere nothing will read. It has to be\n  // the last thing before the render: a server action ran earlier in `renderPage` and legitimately\n  // writes to the response, and so does any middleware that wrapped this handler.\n  beginPageRender(c);\n\n  let controlSignal: ControlSignal | undefined;\n  const rscStream = renderToReadableStream(rscPayload, {\n    temporaryReferences: opts.temporaryReferences,\n    signal,\n    onError(error) {\n      if (isControlSignal(error)) {\n        controlSignal = error;\n        return error.digest;\n      }\n      if (!signal.aborted) reportServerError(error, { source: 'render', request: c.req.raw, message: '[rshono] render error:' });\n    },\n  });\n\n  if (opts.isRsc) {\n    return c.body(releaseWhenDone(rscStream, release), (opts.status ?? 200) as ContentfulStatusCode, {\n      'content-type': 'text/x-component;charset=utf-8',\n    });\n  }\n\n  let ssrResult: Awaited<ReturnType<typeof renderHTML>>;\n  try {\n    ssrResult = await renderHTML(rscStream, {\n      bootstrapScripts: Page.entryJsFiles,\n      formState: opts.formState,\n      signal,\n      nonce,\n      onDone: release,\n      onShellError: (error) => reportServerError(error, { source: 'ssr', request: c.req.raw, message: '[rshono] SSR shell error:' }),\n      onError: (error) => reportServerError(error, { source: 'ssr', request: c.req.raw, message: '[rshono] SSR error:' }),\n    });\n  } catch (error) {\n    release();\n    if (controlSignal) throw controlSignal;\n    throw error;\n  }\n  if (controlSignal) {\n    release();\n    throw controlSignal;\n  }\n  return c.body(ssrResult.stream, (ssrResult.status ?? opts.status ?? 200) as ContentfulStatusCode, {\n    'content-type': 'text/html;charset=utf-8',\n  });\n}\n\nasync function renderPage(c: Context, loadPage: () => Promise<ServerEntry<PageComponent>>): Promise<Response> {\n  const request = c.req.raw;\n  const renderRequest = parseRenderRequest(request);\n\n  let returnValue: ActionResult | undefined;\n  let formState: ReactFormState | undefined;\n  let temporaryReferences: TemporaryReferenceSet | undefined;\n  let actionStatus: number | undefined;\n  if (isActionRequest(renderRequest)) {\n    if (renderRequest.kind === 'rsc-action') {\n      // Checked before the body is decoded, so an unknown id costs nothing to reject — and\n      // `loadServerAction` would otherwise fault on the missing manifest entry, turning a bad\n      // request into an unhandled 500. `hasOwn` so `__proto__` doesn't resolve to a manifest entry.\n      if (!Object.hasOwn(__rspack_rsc_manifest__.serverManifest, renderRequest.actionId)) {\n        return c.text('Bad Request: unknown server action', 400);\n      }\n      const contentType = request.headers.get('content-type');\n      const body = contentType?.startsWith('multipart/form-data') ? await request.formData() : await request.text();\n      temporaryReferences = createTemporaryReferenceSet();\n      const args = await decodeReply<unknown[]>(body, { temporaryReferences });\n      const action = loadServerAction(renderRequest.actionId);\n      try {\n        returnValue = { ok: true, value: await action.apply(null, args) };\n      } catch (error) {\n        if (isControlSignal(error)) throw error;\n        // React sends a thrown action error to the client as an opaque marker in production — no\n        // message, no digest — so without this the failure would be invisible on both ends.\n        reportServerError(error, { source: 'action', request, message: '[rshono] server action error:' });\n        returnValue = { ok: false, error };\n        actionStatus = 500;\n      }\n    } else {\n      const formData = await request.formData();\n      const decodedAction = await decodeAction(formData, __rspack_rsc_manifest__.serverManifest);\n      if (decodedAction) {\n        const result = await decodedAction();\n        formState = (await decodeFormState(result, formData, __rspack_rsc_manifest__.serverManifest)) ?? undefined;\n      }\n    }\n  }\n\n  const Page = await loadPage();\n  return renderComponent(c, Page, {\n    status: actionStatus,\n    isRsc: wantsRsc(renderRequest),\n    formState,\n    returnValue,\n    temporaryReferences,\n  });\n}\n\nfunction buildApp(): Hono {\n  const app = new Hono();\n\n  // Baseline security headers: stop content-type sniffing, keep the full URL out of cross-origin\n  // referrers, and refuse to be framed by another origin. A floor, not a policy — an app that wants\n  // the full set registers `secureHeaders()` from `hono/secure-headers` in src/server.ts, and\n  // because this is registered first it unwinds *last* and the \"only if unset\" checks stand aside\n  // for whatever that set. Kept in the framework rather than left to the app because it is\n  // registered ahead of `mountStaticAssets`, which is a terminal handler the sub-app never sees:\n  // without this, `/_static/*` would carry no security headers at all.\n  app.use(async (c, next) => {\n    await next();\n    const headers = c.res.headers;\n    if (!headers.has('x-content-type-options')) headers.set('x-content-type-options', 'nosniff');\n    if (!headers.has('referrer-policy')) headers.set('referrer-policy', 'strict-origin-when-cross-origin');\n    if (!headers.has('x-frame-options')) headers.set('x-frame-options', 'SAMEORIGIN');\n\n    // React Refresh compiles updates with `eval`, so a dev build cannot run under any CSP an app\n    // would sensibly write for production. Widened here rather than asked of the app, so one policy\n    // in src/server.ts serves both and nobody debugs a blocked HMR socket. Only ever in dev, and\n    // only when the app has a `script-src` to widen.\n    if (isDev) {\n      const csp = headers.get('content-security-policy');\n      if (csp?.includes('script-src ')) {\n        headers.set('content-security-policy', csp.replace('script-src ', \"script-src 'unsafe-eval' \"));\n      }\n    }\n\n    // Page responses only, from here down: one URL answers with either an HTML document or a flight\n    // payload depending on `Accept`, and the default page is request-specific.\n    if (!PAGE_CONTENT_TYPE.test(headers.get('content-type') ?? '')) return;\n    appendVary(headers, 'Accept');\n    // Without this a page carries no cache directives at all, and a shared cache — a CDN, a corporate\n    // proxy — is free to store a logged-in user's page and hand it to someone else. `private` forbids\n    // that; `no-cache` makes the browser revalidate rather than re-show a stale personalised page.\n    // Neither blocks bfcache, which `no-store` would. A prerendered page already has its own value.\n    if (!headers.has('cache-control')) headers.set('cache-control', 'private, no-cache');\n  });\n\n  runtime.mountStaticAssets(app);\n\n  // Mounted ahead of the page routes so the sub-app's middleware (auth, logging, trailing-slash,\n  // and the security middleware the framework no longer owns — `csrf()`, `bodyLimit()`,\n  // `secureHeaders()`) wraps page requests too. The flip side: a *terminal* handler in\n  // src/server.ts at the same path as a page route wins over the page.\n  if (serverApp) {\n    app.route('/', serverApp);\n  }\n\n  const memoizePage = (page: FallbackPage, label: string) => once(() => loadPageModule(page.component, label));\n  const loadNotFoundPage = routeConfig.notFound ? memoizePage(routeConfig.notFound, 'the notFound page') : null;\n\n  /** Turns a thrown `redirect()` / `notFound()` into the response it stands for. */\n  const respondToControlSignal = async (c: Context, signal: ControlSignal): Promise<Response> => {\n    const isRsc = requestWantsRsc(c.req.raw);\n    if (signal instanceof RedirectSignal) {\n      if (isRsc) {\n        // No `signal`, deliberately — see `renderComponent`. This payload is two fields and no\n        // component tree, so there is nothing worth aborting and nothing worth a listener.\n        return c.body(renderToReadableStream({ root: null, redirect: signal.location } satisfies RscPayload), 200, {\n          'content-type': 'text/x-component;charset=utf-8',\n        });\n      }\n      return c.redirect(signal.location, signal.status as RedirectStatusCode);\n    }\n    if (loadNotFoundPage) {\n      return renderComponent(c, await loadNotFoundPage(), { status: 404, isRsc, notFound: true });\n    }\n    return plainNotFound(c);\n  };\n\n  for (const route of routes) {\n    if (isPageRoute(route)) {\n      // Both are fixed for the life of the process, so resolve them once here instead of per request.\n      const servesPrerendered = !isDev && route.render === 'static';\n      const loadPage = once(() => loadPageModule(route.component, `\"${route.path}\"`));\n\n      const handler: Handler = async (c) => {\n        try {\n          if (servesPrerendered && c.req.method === 'GET') {\n            const isRsc = acceptsRsc(c.req.raw);\n            // A prerendered file is one fixed set of bytes, so it cannot carry a per-request nonce:\n            // where the app's CSP has one, the *document* has to be rendered per request. The flight\n            // payload never carries a nonce, so it stays servable from the build either way.\n            //\n            // Decided per request rather than per build, which is what moving the CSP to\n            // `secureHeaders()` buys: an app whose policy carries no `NONCE` keeps its prerendered\n            // documents, where the old build-time `csp: true` flag gave every one of them up.\n            const mustRenderForNonce = !isRsc && cspNonce(c) !== undefined;\n            if (!mustRenderForNonce) {\n              const page = await runtime.readPrerendered(c, isRsc ? 'flight' : 'html');\n              // A prerendered page is request-independent by construction, so it is safe to cache\n              // publicly; the short max-age matches what `public/` files get, and the ETag turns the\n              // revalidation that follows into a 304 rather than the page all over again.\n              //\n              // Answered outside `runWithContext`: no app code runs on this path, so there is no\n              // `getRequestContext()` to serve and no reason to pay for the AsyncLocalStorage scope.\n              if (page !== null) {\n                const headers = {\n                  'cache-control': SSG_CACHE_CONTROL,\n                  etag: page.etag,\n                  vary: 'Accept',\n                  'content-type': isRsc ? 'text/x-component;charset=utf-8' : 'text/html;charset=utf-8',\n                };\n                if (etagMatches(c.req.header('if-none-match'), page.etag)) return c.body(null, 304, headers);\n                return c.body(page.body, 200, { ...headers, 'content-length': page.contentLength });\n              }\n            }\n          }\n          return await runWithContext(c, () => renderPage(c, loadPage));\n        } catch (error) {\n          if (isControlSignal(error)) return runWithContext(c, () => respondToControlSignal(c, error));\n          throw error;\n        }\n      };\n      app.on(['GET', 'POST'], route.path, handler);\n    } else {\n      const loadEndpoint = once(() => route.server());\n      const handler: Handler = async (c, next) => {\n        const { handler: endpointHandler } = await loadEndpoint();\n        return endpointHandler(c, next);\n      };\n      const method = route.method ?? 'all';\n      if (method === 'all') app.all(route.path, handler);\n      else app.on(method.toUpperCase(), route.path, handler);\n    }\n  }\n\n  runtime.mountPublicFallback(app);\n\n  app.notFound(async (c) => {\n    const isRsc = requestWantsRsc(c.req.raw);\n    if (loadNotFoundPage && (isRsc || acceptsHtml(c))) {\n      return runWithContext(c, async () => renderComponent(c, await loadNotFoundPage(), { status: 404, isRsc }));\n    }\n    return plainNotFound(c);\n  });\n\n  const loadErrorPage = routeConfig.error ? memoizePage(routeConfig.error, 'the error page') : null;\n  app.onError(async (error, c) => {\n    if (isControlSignal(error)) return runWithContext(c, () => respondToControlSignal(c, error));\n    // Registering an `onError` at all replaces Hono's default handler, which is what would otherwise\n    // turn an `HTTPException` into the response it carries. Without this every middleware that\n    // rejects a request by throwing one — `csrf()` with a 403, `bodyLimit()` with a 413, an app's own\n    // `throw new HTTPException(401)` — would surface as a 500 error page instead of its own status.\n    // Rebuilt through `c` rather than returned as-is, exactly as Hono's own default does, so headers\n    // already prepared on the context (`c.header(…)` from middleware that ran first) survive.\n    if (error instanceof HTTPException) {\n      const res = error.getResponse();\n      return c.newResponse(res.body, res);\n    }\n    reportServerError(error, { source: 'request', request: c.req.raw, message: '[rshono] request error:' });\n    const isRsc = requestWantsRsc(c.req.raw);\n    if (loadErrorPage && (isRsc || acceptsHtml(c))) {\n      const errorInfo: ErrorPageInfo = isDev\n        ? {\n            message: error instanceof Error ? error.message : String(error),\n            stack: error instanceof Error ? error.stack : undefined,\n          }\n        : { message: 'Internal Server Error' };\n      try {\n        return await runWithContext(c, async () => renderComponent(c, await loadErrorPage(), { status: 500, isRsc, errorInfo }));\n      } catch (renderError) {\n        reportServerError(renderError, { source: 'request', request: c.req.raw, message: '[rshono] the error page failed to render:' });\n      }\n    }\n    const detail = isDev ? `\\n\\n${error instanceof Error ? (error.stack ?? error.message) : String(error)}` : '';\n    return c.text(`Internal Server Error${detail}`, 500, { vary: 'Accept' });\n  });\n\n  return app;\n}\n\nexport const app = buildApp();\n\n/**\n * The app, handed to whatever is hosting it.\n *\n * On a platform where rshono owns the process this binds a port and the default export is nothing;\n * where the host owns it, this *is* the export the platform looks for — so the same entry serves\n * both without a per-platform entry file. `app` and `routes` stay named exports either way, because\n * `rshono build` imports them to prerender `render: 'static'` routes.\n */\nexport default runtime.serveApp(app);\n"]}