@sveltejs/adapter-vercel 5.1.1 → 5.3.0

package/files/edge.js

@@ -12,6 +12,7 @@ const initialized = server.init({
  */
 export default async (request, context) => {
 	await initialized;
+
 	return server.respond(request, {
 		getClientAddress() {
 			return /** @type {string} */ (request.headers.get('x-forwarded-for'));

package/index.js

@@ -4,6 +4,7 @@ import { fileURLToPath } from 'node:url';
 import { nodeFileTrace } from '@vercel/nft';
 import esbuild from 'esbuild';
 import { get_pathname, pattern_to_src } from './utils.js';
+import { VERSION } from '@sveltejs/kit';
 
 const name = '@sveltejs/adapter-vercel';
 const DEFAULT_FUNCTION_NAME = 'fn';
@@ -57,7 +58,12 @@ const plugin = function (defaults = {}) {
 				functions: `${dir}/functions`
 			};
 
-			const static_config = static_vercel_config(builder, defaults);
+			builder.log.minor('Copying assets...');
+
+			builder.writeClient(dirs.static);
+			builder.writePrerendered(dirs.static);
+
+			const static_config = static_vercel_config(builder, defaults, dirs.static);
 
 			builder.log.minor('Generating serverless function...');
 
@@ -174,7 +180,11 @@ const plugin = function (defaults = {}) {
 						{
 							runtime: config.runtime,
 							regions: config.regions,
-							entrypoint: 'index.js'
+							entrypoint: 'index.js',
+							framework: {
+								slug: 'sveltekit',
+								version: VERSION
+							}
 						},
 						null,
 						'\t'
@@ -363,11 +373,6 @@ const plugin = function (defaults = {}) {
 			// including ISR aliases if there is only one function
 			static_config.routes.push({ src: '/.*', dest: `/${DEFAULT_FUNCTION_NAME}` });
 
-			builder.log.minor('Copying assets...');
-
-			builder.writeClient(dirs.static);
-			builder.writePrerendered(dirs.static);
-
 			builder.log.minor('Writing routes...');
 
 			write(`${dir}/config.json`, JSON.stringify(static_config, null, '\t'));
@@ -420,8 +425,9 @@ function write(file, data) {
 /**
  * @param {import('@sveltejs/kit').Builder} builder
  * @param {import('.').Config} config
+ * @param {string} dir
  */
-function static_vercel_config(builder, config) {
+function static_vercel_config(builder, config, dir) {
 	/** @type {any[]} */
 	const prerendered_redirects = [];
 
@@ -462,20 +468,60 @@ function static_vercel_config(builder, config) {
 		overrides[page.file] = { path: overrides_path };
 	}
 
-	return {
-		version: 3,
-		routes: [
-			...prerendered_redirects,
-			{
-				src: `/${builder.getAppPath()}/immutable/.+`,
-				headers: {
-					'cache-control': 'public, immutable, max-age=31536000'
+	const routes = [
+		...prerendered_redirects,
+		{
+			src: `/${builder.getAppPath()}/immutable/.+`,
+			headers: {
+				'cache-control': 'public, immutable, max-age=31536000'
+			}
+		}
+	];
+
+	// https://vercel.com/docs/deployments/skew-protection
+	if (process.env.VERCEL_SKEW_PROTECTION_ENABLED) {
+		routes.push({
+			src: '/.*',
+			has: [
+				{
+					type: 'header',
+					key: 'Sec-Fetch-Dest',
+					value: 'document'
 				}
+			],
+			headers: {
+				'Set-Cookie': `__vdpl=${process.env.VERCEL_DEPLOYMENT_ID}; Path=${builder.config.kit.paths.base}/; SameSite=Strict; Secure; HttpOnly`
 			},
-			{
-				handle: 'filesystem'
-			}
-		],
+			continue: true
+		});
+
+		// this is a dreadful hack that is necessary until the Vercel Build Output API
+		// allows you to set multiple cookies for a single route. essentially, since we
+		// know that the entry file will be requested immediately, we can set the second
+		// cookie in _that_ response rather than the document response
+		const base = `${dir}/${builder.config.kit.appDir}/immutable/entry`;
+		const entry = fs.readdirSync(base).find((file) => file.startsWith('start.'));
+
+		if (!entry) {
+			throw new Error('Could not find entry point');
+		}
+
+		routes.splice(-2, 0, {
+			src: `/${builder.getAppPath()}/immutable/entry/${entry}`,
+			headers: {
+				'Set-Cookie': `__vdpl=; Path=/${builder.getAppPath()}/version.json; SameSite=Strict; Secure; HttpOnly`
+			},
+			continue: true
+		});
+	}
+
+	routes.push({
+		handle: 'filesystem'
+	});
+
+	return {
+		version: 3,
+		routes,
 		overrides,
 		images
 	};
@@ -588,7 +634,11 @@ async function create_function_bundle(builder, entry, dir, config) {
 				maxDuration: config.maxDuration,
 				handler: path.relative(base + ancestor, entry),
 				launcherType: 'Nodejs',
-				experimentalResponseStreaming: !config.isr
+				experimentalResponseStreaming: !config.isr,
+				framework: {
+					slug: 'sveltekit',
+					version: VERSION
+				}
 			},
 			null,
 			'\t'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sveltejs/adapter-vercel",
-  "version": "5.1.1",
+  "version": "5.3.0",
   "description": "A SvelteKit adapter that creates a Vercel app",
   "repository": {
     "type": "git",
@@ -26,14 +26,14 @@
   ],
   "dependencies": {
     "@vercel/nft": "^0.26.1",
-    "esbuild": "^0.19.11"
+    "esbuild": "^0.20.2"
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "^3.0.1",
     "@types/node": "^18.19.3",
     "typescript": "^5.3.3",
-    "vitest": "^1.2.0",
-    "@sveltejs/kit": "^2.5.3"
+    "vitest": "^1.5.0",
+    "@sveltejs/kit": "^2.5.6"
   },
   "peerDependencies": {
     "@sveltejs/kit": "^2.4.0"