@tanstack/start-server-core 1.169.2 → 1.169.4

package/dist/esm/request-response.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-response.js","names":[],"sources":["../../src/request-response.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks'\n\nimport {\n  H3Event,\n  clearSession as h3_clearSession,\n  deleteCookie as h3_deleteCookie,\n  getRequestHost as h3_getRequestHost,\n  getRequestIP as h3_getRequestIP,\n  getRequestProtocol as h3_getRequestProtocol,\n  getRequestURL as h3_getRequestURL,\n  getSession as h3_getSession,\n  getValidatedQuery as h3_getValidatedQuery,\n  parseCookies as h3_parseCookies,\n  sanitizeStatusCode as h3_sanitizeStatusCode,\n  sanitizeStatusMessage as h3_sanitizeStatusMessage,\n  sealSession as h3_sealSession,\n  setCookie as h3_setCookie,\n  toResponse as h3_toResponse,\n  unsealSession as h3_unsealSession,\n  updateSession as h3_updateSession,\n  useSession as h3_useSession,\n} from 'h3-v2'\nimport type {\n  RequestHeaderMap,\n  RequestHeaderName,\n  ResponseHeaderMap,\n  ResponseHeaderName,\n  TypedHeaders,\n} from 'fetchdts'\n\nimport type { CookieSerializeOptions } from 'cookie-es'\nimport type {\n  Session,\n  SessionConfig,\n  SessionData,\n  SessionManager,\n  SessionUpdate,\n} from './session'\nimport type { StandardSchemaV1 } from '@standard-schema/spec'\nimport type { RequestHandler } from './request-handler'\n\ninterface StartEvent {\n  h3Event: H3Event\n}\n\n// Use a global symbol to ensure the same AsyncLocalStorage instance is shared\n// across different bundles that may each bundle this module.\nconst GLOBAL_EVENT_STORAGE_KEY = Symbol.for('tanstack-start:event-storage')\n\nconst globalObj = globalThis as typeof globalThis & {\n  [GLOBAL_EVENT_STORAGE_KEY]?: AsyncLocalStorage<StartEvent>\n}\n\nif (!globalObj[GLOBAL_EVENT_STORAGE_KEY]) {\n  globalObj[GLOBAL_EVENT_STORAGE_KEY] = new AsyncLocalStorage<StartEvent>()\n}\n\nconst eventStorage = globalObj[GLOBAL_EVENT_STORAGE_KEY]\n\nexport type { ResponseHeaderName, RequestHeaderName }\n\ntype HeadersWithGetSetCookie = Headers & {\n  getSetCookie?: () => Array<string>\n}\n\ntype MaybePromise<T> = T | Promise<T>\n\nfunction isPromiseLike<T>(value: MaybePromise<T>): value is Promise<T> {\n  return typeof (value as Promise<T>).then === 'function'\n}\n\nfunction getSetCookieValues(headers: Headers): Array<string> {\n  const headersWithSetCookie = headers as HeadersWithGetSetCookie\n  if (typeof headersWithSetCookie.getSetCookie === 'function') {\n    return headersWithSetCookie.getSetCookie()\n  }\n  const value = headers.get('set-cookie')\n  return value ? [value] : []\n}\n\nfunction mergeEventResponseHeaders(response: Response, event: H3Event): void {\n  if (response.ok) {\n    return\n  }\n\n  const eventSetCookies = getSetCookieValues(event.res.headers)\n  if (eventSetCookies.length === 0) {\n    return\n  }\n\n  const responseSetCookies = getSetCookieValues(response.headers)\n  response.headers.delete('set-cookie')\n  for (const cookie of responseSetCookies) {\n    response.headers.append('set-cookie', cookie)\n  }\n  for (const cookie of eventSetCookies) {\n    response.headers.append('set-cookie', cookie)\n  }\n}\n\nfunction attachResponseHeaders<T>(\n  value: MaybePromise<T>,\n  event: H3Event,\n): MaybePromise<T> {\n  if (isPromiseLike(value)) {\n    return value.then((resolved) => {\n      if (resolved instanceof Response) {\n        mergeEventResponseHeaders(resolved, event)\n      }\n      return resolved\n    })\n  }\n\n  if (value instanceof Response) {\n    mergeEventResponseHeaders(value, event)\n  }\n\n  return value\n}\n\nexport function requestHandler<TRegister = unknown>(\n  handler: RequestHandler<TRegister>,\n) {\n  return (request: Request, requestOpts: any): Promise<Response> | Response => {\n    let h3Event: H3Event\n    try {\n      h3Event = new H3Event(request)\n    } catch (error) {\n      if (error instanceof URIError) {\n        return new Response(null, {\n          status: 400,\n          statusText: 'Bad Request',\n        })\n      }\n      throw error\n    }\n\n    const response = eventStorage.run({ h3Event }, () =>\n      handler(request, requestOpts),\n    )\n    return h3_toResponse(attachResponseHeaders(response, h3Event), h3Event)\n  }\n}\n\nfunction getH3Event() {\n  const event = eventStorage.getStore()\n  if (!event) {\n    throw new Error(\n      `No StartEvent found in AsyncLocalStorage. Make sure you are using the function within the server runtime.`,\n    )\n  }\n  return event.h3Event\n}\n\nexport function getRequest(): Request {\n  const event = getH3Event()\n  return event.req\n}\n\nexport function getRequestHeaders(): TypedHeaders<RequestHeaderMap> {\n  return getH3Event().req.headers\n}\n\nexport function getRequestHeader(name: RequestHeaderName): string | undefined {\n  return getRequestHeaders().get(name) || undefined\n}\n\nexport function getRequestIP(opts?: {\n  /**\n   * Use the X-Forwarded-For HTTP header set by proxies.\n   *\n   * Note: Make sure that this header can be trusted (your application running behind a CDN or reverse proxy) before enabling.\n   */\n  xForwardedFor?: boolean\n}) {\n  return h3_getRequestIP(getH3Event(), opts)\n}\n\n/**\n * Get the request hostname.\n *\n * If `xForwardedHost` is `true`, it will use the `x-forwarded-host` header if it exists.\n *\n * If no host header is found, it will default to \"localhost\".\n */\nexport function getRequestHost(opts?: { xForwardedHost?: boolean }) {\n  return h3_getRequestHost(getH3Event(), opts)\n}\n\n/**\n * Get the full incoming request URL.\n *\n * If `xForwardedHost` is `true`, it will use the `x-forwarded-host` header if it exists.\n *\n * If `xForwardedProto` is `false`, it will not use the `x-forwarded-proto` header.\n */\nexport function getRequestUrl(opts?: {\n  xForwardedHost?: boolean\n  xForwardedProto?: boolean\n}) {\n  return h3_getRequestURL(getH3Event(), opts)\n}\n\n/**\n * Get the request protocol.\n *\n * If `x-forwarded-proto` header is set to \"https\", it will return \"https\". You can disable this behavior by setting `xForwardedProto` to `false`.\n *\n * If protocol cannot be determined, it will default to \"http\".\n */\nexport function getRequestProtocol(opts?: {\n  xForwardedProto?: boolean\n}): 'http' | 'https' | (string & {}) {\n  return h3_getRequestProtocol(getH3Event(), opts)\n}\n\nexport function setResponseHeaders(\n  headers: TypedHeaders<ResponseHeaderMap>,\n): void {\n  const event = getH3Event()\n  for (const [name, value] of Object.entries(headers)) {\n    event.res.headers.set(name, value)\n  }\n}\n\nexport function getResponseHeaders(): TypedHeaders<ResponseHeaderMap> {\n  const event = getH3Event()\n  return event.res.headers\n}\n\nexport function getResponseHeader(\n  name: ResponseHeaderName,\n): string | undefined {\n  const event = getH3Event()\n  return event.res.headers.get(name) || undefined\n}\n\nexport function setResponseHeader(\n  name: ResponseHeaderName,\n  value: string | Array<string>,\n): void {\n  const event = getH3Event()\n  if (Array.isArray(value)) {\n    event.res.headers.delete(name)\n    for (const valueItem of value) {\n      event.res.headers.append(name, valueItem)\n    }\n  } else {\n    event.res.headers.set(name, value)\n  }\n}\nexport function removeResponseHeader(name: ResponseHeaderName): void {\n  const event = getH3Event()\n  event.res.headers.delete(name)\n}\n\nexport function clearResponseHeaders(\n  headerNames?: Array<ResponseHeaderName>,\n): void {\n  const event = getH3Event()\n  // If headerNames is provided, clear only those headers\n  if (headerNames && headerNames.length > 0) {\n    for (const name of headerNames) {\n      event.res.headers.delete(name)\n    }\n    // Otherwise, clear all headers\n  } else {\n    for (const name of event.res.headers.keys()) {\n      event.res.headers.delete(name)\n    }\n  }\n}\n\nexport function getResponseStatus(): number {\n  return getH3Event().res.status || 200\n}\n\nexport function setResponseStatus(code?: number, text?: string): void {\n  const event = getH3Event()\n  if (code) {\n    event.res.status = h3_sanitizeStatusCode(code, event.res.status)\n  }\n  if (text) {\n    event.res.statusText = h3_sanitizeStatusMessage(text)\n  }\n}\n\n/**\n * Parse the request to get HTTP Cookie header string and return an object of all cookie name-value pairs.\n * @returns Object of cookie name-value pairs\n * ```ts\n * const cookies = getCookies()\n * ```\n */\nexport function getCookies(): Record<string, string> {\n  const event = getH3Event()\n  const cookies = h3_parseCookies(event)\n  const definedCookies: Record<string, string> = Object.create(null)\n\n  for (const [name, value] of Object.entries(cookies)) {\n    if (value !== undefined) {\n      definedCookies[name] = value\n    }\n  }\n\n  return definedCookies\n}\n\n/**\n * Get a cookie value by name.\n * @param name Name of the cookie to get\n * @returns {*} Value of the cookie (String or undefined)\n * ```ts\n * const authorization = getCookie('Authorization')\n * ```\n */\nexport function getCookie(name: string): string | undefined {\n  return getCookies()[name]\n}\n\n/**\n * Set a cookie value by name.\n * @param name Name of the cookie to set\n * @param value Value of the cookie to set\n * @param options {CookieSerializeOptions} Options for serializing the cookie\n * ```ts\n * setCookie('Authorization', '1234567')\n * ```\n */\nexport function setCookie(\n  name: string,\n  value: string,\n  options?: CookieSerializeOptions,\n): void {\n  const event = getH3Event()\n  h3_setCookie(event, name, value, options)\n}\n\n/**\n * Remove a cookie by name.\n * @param name Name of the cookie to delete\n * @param serializeOptions {CookieSerializeOptions} Cookie options\n * ```ts\n * deleteCookie('SessionId')\n * ```\n */\nexport function deleteCookie(\n  name: string,\n  options?: CookieSerializeOptions,\n): void {\n  const event = getH3Event()\n  h3_deleteCookie(event, name, options)\n}\n\nfunction getDefaultSessionConfig(config: SessionConfig): SessionConfig {\n  return {\n    name: 'start',\n    ...config,\n  }\n}\n\n/**\n * Create a session manager for the current request.\n */\nexport function useSession<TSessionData extends SessionData = SessionData>(\n  config: SessionConfig,\n): Promise<SessionManager<TSessionData>> {\n  const event = getH3Event()\n  return h3_useSession(event, getDefaultSessionConfig(config))\n}\n/**\n * Get the session for the current request\n */\nexport function getSession<TSessionData extends SessionData = SessionData>(\n  config: SessionConfig,\n): Promise<Session<TSessionData>> {\n  const event = getH3Event()\n  return h3_getSession(event, getDefaultSessionConfig(config))\n}\n\n/**\n * Update the session data for the current request.\n */\nexport function updateSession<TSessionData extends SessionData = SessionData>(\n  config: SessionConfig,\n  update?: SessionUpdate<TSessionData>,\n): Promise<Session<TSessionData>> {\n  const event = getH3Event()\n  return h3_updateSession(event, getDefaultSessionConfig(config), update)\n}\n\n/**\n * Encrypt and sign the session data for the current request.\n */\nexport function sealSession(config: SessionConfig): Promise<string> {\n  const event = getH3Event()\n  return h3_sealSession(event, getDefaultSessionConfig(config))\n}\n/**\n * Decrypt and verify the session data for the current request.\n */\nexport function unsealSession(\n  config: SessionConfig,\n  sealed: string,\n): Promise<Partial<Session>> {\n  const event = getH3Event()\n  return h3_unsealSession(event, getDefaultSessionConfig(config), sealed)\n}\n\n/**\n * Clear the session data for the current request.\n */\nexport function clearSession(config: Partial<SessionConfig>): Promise<void> {\n  const event = getH3Event()\n  return h3_clearSession(event, { name: 'start', ...config })\n}\n\nexport function getResponse() {\n  const event = getH3Event()\n  return event.res\n}\n\n// not public API (yet)\nexport function getValidatedQuery<TSchema extends StandardSchemaV1>(\n  schema: StandardSchemaV1,\n): Promise<StandardSchemaV1.InferOutput<TSchema>> {\n  return h3_getValidatedQuery(getH3Event(), schema)\n}\n"],"mappings":";;;AA+CA,IAAM,2BAA2B,OAAO,IAAI,+BAA+B;AAE3E,IAAM,YAAY;AAIlB,IAAI,CAAC,UAAU,0BACb,WAAU,4BAA4B,IAAI,mBAA+B;AAG3E,IAAM,eAAe,UAAU;AAU/B,SAAS,cAAiB,OAA6C;AACrE,QAAO,OAAQ,MAAqB,SAAS;;AAG/C,SAAS,mBAAmB,SAAiC;CAC3D,MAAM,uBAAuB;AAC7B,KAAI,OAAO,qBAAqB,iBAAiB,WAC/C,QAAO,qBAAqB,cAAc;CAE5C,MAAM,QAAQ,QAAQ,IAAI,aAAa;AACvC,QAAO,QAAQ,CAAC,MAAM,GAAG,EAAE;;AAG7B,SAAS,0BAA0B,UAAoB,OAAsB;AAC3E,KAAI,SAAS,GACX;CAGF,MAAM,kBAAkB,mBAAmB,MAAM,IAAI,QAAQ;AAC7D,KAAI,gBAAgB,WAAW,EAC7B;CAGF,MAAM,qBAAqB,mBAAmB,SAAS,QAAQ;AAC/D,UAAS,QAAQ,OAAO,aAAa;AACrC,MAAK,MAAM,UAAU,mBACnB,UAAS,QAAQ,OAAO,cAAc,OAAO;AAE/C,MAAK,MAAM,UAAU,gBACnB,UAAS,QAAQ,OAAO,cAAc,OAAO;;AAIjD,SAAS,sBACP,OACA,OACiB;AACjB,KAAI,cAAc,MAAM,CACtB,QAAO,MAAM,MAAM,aAAa;AAC9B,MAAI,oBAAoB,SACtB,2BAA0B,UAAU,MAAM;AAE5C,SAAO;GACP;AAGJ,KAAI,iBAAiB,SACnB,2BAA0B,OAAO,MAAM;AAGzC,QAAO;;AAGT,SAAgB,eACd,SACA;AACA,SAAQ,SAAkB,gBAAmD;EAC3E,IAAI;AACJ,MAAI;AACF,aAAU,IAAI,QAAQ,QAAQ;WACvB,OAAO;AACd,OAAI,iBAAiB,SACnB,QAAO,IAAI,SAAS,MAAM;IACxB,QAAQ;IACR,YAAY;IACb,CAAC;AAEJ,SAAM;;AAMR,SAAO,WAAc,sBAHJ,aAAa,IAAI,EAAE,SAAS,QAC3C,QAAQ,SAAS,YAAY,CAC9B,EACoD,QAAQ,EAAE,QAAQ;;;AAI3E,SAAS,aAAa;CACpB,MAAM,QAAQ,aAAa,UAAU;AACrC,KAAI,CAAC,MACH,OAAM,IAAI,MACR,4GACD;AAEH,QAAO,MAAM;;AAGf,SAAgB,aAAsB;AAEpC,QADc,YAAY,CACb;;AAGf,SAAgB,oBAAoD;AAClE,QAAO,YAAY,CAAC,IAAI;;AAG1B,SAAgB,iBAAiB,MAA6C;AAC5E,QAAO,mBAAmB,CAAC,IAAI,KAAK,IAAI,KAAA;;AAG1C,SAAgB,eAAa,MAO1B;AACD,QAAO,aAAgB,YAAY,EAAE,KAAK;;;;;;;;;AAU5C,SAAgB,iBAAe,MAAqC;AAClE,QAAO,eAAkB,YAAY,EAAE,KAAK;;;;;;;;;AAU9C,SAAgB,cAAc,MAG3B;AACD,QAAO,cAAiB,YAAY,EAAE,KAAK;;;;;;;;;AAU7C,SAAgB,qBAAmB,MAEE;AACnC,QAAO,mBAAsB,YAAY,EAAE,KAAK;;AAGlD,SAAgB,mBACd,SACM;CACN,MAAM,QAAQ,YAAY;AAC1B,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,QAAQ,CACjD,OAAM,IAAI,QAAQ,IAAI,MAAM,MAAM;;AAItC,SAAgB,qBAAsD;AAEpE,QADc,YAAY,CACb,IAAI;;AAGnB,SAAgB,kBACd,MACoB;AAEpB,QADc,YAAY,CACb,IAAI,QAAQ,IAAI,KAAK,IAAI,KAAA;;AAGxC,SAAgB,kBACd,MACA,OACM;CACN,MAAM,QAAQ,YAAY;AAC1B,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,QAAM,IAAI,QAAQ,OAAO,KAAK;AAC9B,OAAK,MAAM,aAAa,MACtB,OAAM,IAAI,QAAQ,OAAO,MAAM,UAAU;OAG3C,OAAM,IAAI,QAAQ,IAAI,MAAM,MAAM;;AAGtC,SAAgB,qBAAqB,MAAgC;AACrD,aAAY,CACpB,IAAI,QAAQ,OAAO,KAAK;;AAGhC,SAAgB,qBACd,aACM;CACN,MAAM,QAAQ,YAAY;AAE1B,KAAI,eAAe,YAAY,SAAS,EACtC,MAAK,MAAM,QAAQ,YACjB,OAAM,IAAI,QAAQ,OAAO,KAAK;KAIhC,MAAK,MAAM,QAAQ,MAAM,IAAI,QAAQ,MAAM,CACzC,OAAM,IAAI,QAAQ,OAAO,KAAK;;AAKpC,SAAgB,oBAA4B;AAC1C,QAAO,YAAY,CAAC,IAAI,UAAU;;AAGpC,SAAgB,kBAAkB,MAAe,MAAqB;CACpE,MAAM,QAAQ,YAAY;AAC1B,KAAI,KACF,OAAM,IAAI,SAAS,mBAAsB,MAAM,MAAM,IAAI,OAAO;AAElE,KAAI,KACF,OAAM,IAAI,aAAa,sBAAyB,KAAK;;;;;;;;;AAWzD,SAAgB,aAAqC;CAEnD,MAAM,UAAU,aADF,YAAY,CACY;CACtC,MAAM,iBAAyC,OAAO,OAAO,KAAK;AAElE,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,QAAQ,CACjD,KAAI,UAAU,KAAA,EACZ,gBAAe,QAAQ;AAI3B,QAAO;;;;;;;;;;AAWT,SAAgB,UAAU,MAAkC;AAC1D,QAAO,YAAY,CAAC;;;;;;;;;;;AAYtB,SAAgB,YACd,MACA,OACA,SACM;AAEN,WADc,YAAY,EACN,MAAM,OAAO,QAAQ;;;;;;;;;;AAW3C,SAAgB,eACd,MACA,SACM;AAEN,cADc,YAAY,EACH,MAAM,QAAQ;;AAGvC,SAAS,wBAAwB,QAAsC;AACrE,QAAO;EACL,MAAM;EACN,GAAG;EACJ;;;;;AAMH,SAAgB,aACd,QACuC;AAEvC,QAAO,WADO,YAAY,EACE,wBAAwB,OAAO,CAAC;;;;;AAK9D,SAAgB,aACd,QACgC;AAEhC,QAAO,WADO,YAAY,EACE,wBAAwB,OAAO,CAAC;;;;;AAM9D,SAAgB,gBACd,QACA,QACgC;AAEhC,QAAO,cADO,YAAY,EACK,wBAAwB,OAAO,EAAE,OAAO;;;;;AAMzE,SAAgB,cAAY,QAAwC;AAElE,QAAO,YADO,YAAY,EACG,wBAAwB,OAAO,CAAC;;;;;AAK/D,SAAgB,gBACd,QACA,QAC2B;AAE3B,QAAO,cADO,YAAY,EACK,wBAAwB,OAAO,EAAE,OAAO;;;;;AAMzE,SAAgB,eAAa,QAA+C;AAE1E,QAAO,aADO,YAAY,EACI;EAAE,MAAM;EAAS,GAAG;EAAQ,CAAC;;AAG7D,SAAgB,cAAc;AAE5B,QADc,YAAY,CACb;;AAIf,SAAgB,oBACd,QACgD;AAChD,QAAO,kBAAqB,YAAY,EAAE,OAAO"}
+{"version":3,"file":"request-response.js","names":[],"sources":["../../src/request-response.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks'\n\nimport {\n  H3Event,\n  clearSession as h3_clearSession,\n  deleteCookie as h3_deleteCookie,\n  getRequestHost as h3_getRequestHost,\n  getRequestIP as h3_getRequestIP,\n  getRequestProtocol as h3_getRequestProtocol,\n  getRequestURL as h3_getRequestURL,\n  getSession as h3_getSession,\n  getValidatedQuery as h3_getValidatedQuery,\n  parseCookies as h3_parseCookies,\n  sanitizeStatusCode as h3_sanitizeStatusCode,\n  sanitizeStatusMessage as h3_sanitizeStatusMessage,\n  sealSession as h3_sealSession,\n  setCookie as h3_setCookie,\n  toResponse as h3_toResponse,\n  unsealSession as h3_unsealSession,\n  updateSession as h3_updateSession,\n  useSession as h3_useSession,\n} from 'h3-v2'\nimport type {\n  RequestHeaderMap,\n  RequestHeaderName,\n  ResponseHeaderMap,\n  ResponseHeaderName,\n  TypedHeaders,\n} from 'fetchdts'\n\nimport type { CookieSerializeOptions } from 'cookie-es'\nimport type {\n  Session,\n  SessionConfig,\n  SessionData,\n  SessionManager,\n  SessionUpdate,\n} from './session'\nimport type { StandardSchemaV1 } from '@standard-schema/spec'\nimport type { RequestHandler } from './request-handler'\n\ninterface StartEvent {\n  h3Event: H3Event\n}\n\n// Use a global symbol to ensure the same AsyncLocalStorage instance is shared\n// across different bundles that may each bundle this module.\nconst GLOBAL_EVENT_STORAGE_KEY = Symbol.for('tanstack-start:event-storage')\n\nconst globalObj = globalThis as typeof globalThis & {\n  [GLOBAL_EVENT_STORAGE_KEY]?: AsyncLocalStorage<StartEvent>\n}\n\nif (!globalObj[GLOBAL_EVENT_STORAGE_KEY]) {\n  globalObj[GLOBAL_EVENT_STORAGE_KEY] = new AsyncLocalStorage<StartEvent>()\n}\n\nconst eventStorage = globalObj[GLOBAL_EVENT_STORAGE_KEY]\n\nexport type { ResponseHeaderName, RequestHeaderName }\n\ntype HeadersWithGetSetCookie = Headers & {\n  getSetCookie?: () => Array<string>\n}\n\ntype MaybePromise<T> = T | Promise<T>\n\nfunction isPromiseLike<T>(value: MaybePromise<T>): value is Promise<T> {\n  return typeof (value as Promise<T>).then === 'function'\n}\n\nfunction getSetCookieValues(headers: Headers): Array<string> {\n  const headersWithSetCookie = headers as HeadersWithGetSetCookie\n  if (typeof headersWithSetCookie.getSetCookie === 'function') {\n    return headersWithSetCookie.getSetCookie()\n  }\n  const value = headers.get('set-cookie')\n  return value ? [value] : []\n}\n\nfunction mergeEventResponseHeaders(response: Response, event: H3Event): void {\n  if (response.ok) {\n    return\n  }\n\n  const eventSetCookies = getSetCookieValues(event.res.headers)\n  if (eventSetCookies.length === 0) {\n    return\n  }\n\n  const responseSetCookies = getSetCookieValues(response.headers)\n  response.headers.delete('set-cookie')\n  for (const cookie of responseSetCookies) {\n    response.headers.append('set-cookie', cookie)\n  }\n  for (const cookie of eventSetCookies) {\n    response.headers.append('set-cookie', cookie)\n  }\n}\n\nfunction attachResponseHeaders<T>(\n  value: MaybePromise<T>,\n  event: H3Event,\n): MaybePromise<T> {\n  if (isPromiseLike(value)) {\n    return value.then((resolved) => {\n      if (resolved instanceof Response) {\n        mergeEventResponseHeaders(resolved, event)\n      }\n      return resolved\n    })\n  }\n\n  if (value instanceof Response) {\n    mergeEventResponseHeaders(value, event)\n  }\n\n  return value\n}\n\nexport function requestHandler<TRegister = unknown>(\n  handler: RequestHandler<TRegister>,\n) {\n  return (request: Request, requestOpts: any): Promise<Response> | Response => {\n    let h3Event: H3Event\n    try {\n      h3Event = new H3Event(request)\n    } catch (error) {\n      if (error instanceof URIError) {\n        return new Response(null, {\n          status: 400,\n          statusText: 'Bad Request',\n        })\n      }\n      throw error\n    }\n\n    const response = eventStorage.run({ h3Event }, () =>\n      handler(request, requestOpts),\n    )\n    return h3_toResponse(attachResponseHeaders(response, h3Event), h3Event)\n  }\n}\n\nfunction getH3Event() {\n  const event = eventStorage.getStore()\n  if (!event) {\n    throw new Error(\n      `No StartEvent found in AsyncLocalStorage. Make sure you are using the function within the server runtime.`,\n    )\n  }\n  return event.h3Event\n}\n\nexport function getRequest(): Request {\n  const event = getH3Event()\n  return event.req\n}\n\nexport function getRequestHeaders(): TypedHeaders<RequestHeaderMap> {\n  return getH3Event().req.headers\n}\n\nexport function getRequestHeader(name: RequestHeaderName): string | undefined {\n  return getRequestHeaders().get(name) || undefined\n}\n\nexport function getRequestIP(opts?: {\n  /**\n   * Use the X-Forwarded-For HTTP header set by proxies.\n   *\n   * Note: Make sure that this header can be trusted (your application running behind a CDN or reverse proxy) before enabling.\n   */\n  xForwardedFor?: boolean\n}) {\n  return h3_getRequestIP(getH3Event(), opts)\n}\n\n/**\n * Get the request hostname.\n *\n * If `xForwardedHost` is `true`, it will use the `x-forwarded-host` header if it exists.\n *\n * If no host header is found, it will default to \"localhost\".\n */\nexport function getRequestHost(opts?: { xForwardedHost?: boolean }) {\n  return h3_getRequestHost(getH3Event(), opts)\n}\n\n/**\n * Get the full incoming request URL.\n *\n * If `xForwardedHost` is `true`, it will use the `x-forwarded-host` header if it exists.\n *\n * If `xForwardedProto` is `false`, it will not use the `x-forwarded-proto` header.\n */\nexport function getRequestUrl(opts?: {\n  xForwardedHost?: boolean\n  xForwardedProto?: boolean\n}) {\n  return h3_getRequestURL(getH3Event(), opts)\n}\n\n/**\n * Get the request protocol.\n *\n * If `x-forwarded-proto` header is set to \"https\", it will return \"https\". You can disable this behavior by setting `xForwardedProto` to `false`.\n *\n * If protocol cannot be determined, it will default to \"http\".\n */\nexport function getRequestProtocol(opts?: {\n  xForwardedProto?: boolean\n}): 'http' | 'https' | (string & {}) {\n  return h3_getRequestProtocol(getH3Event(), opts)\n}\n\nexport function setResponseHeaders(\n  headers: TypedHeaders<ResponseHeaderMap>,\n): void {\n  const event = getH3Event()\n  for (const [name, value] of Object.entries(headers)) {\n    event.res.headers.set(name, value)\n  }\n}\n\nexport function getResponseHeaders(): TypedHeaders<ResponseHeaderMap> {\n  const event = getH3Event()\n  return event.res.headers\n}\n\nexport function getResponseHeader(\n  name: ResponseHeaderName,\n): string | undefined {\n  const event = getH3Event()\n  return event.res.headers.get(name) || undefined\n}\n\nexport function setResponseHeader(\n  name: ResponseHeaderName,\n  value: string | Array<string>,\n): void {\n  const event = getH3Event()\n  if (Array.isArray(value)) {\n    event.res.headers.delete(name)\n    for (const valueItem of value) {\n      event.res.headers.append(name, valueItem)\n    }\n  } else {\n    event.res.headers.set(name, value)\n  }\n}\nexport function removeResponseHeader(name: ResponseHeaderName): void {\n  const event = getH3Event()\n  event.res.headers.delete(name)\n}\n\nexport function clearResponseHeaders(\n  headerNames?: Array<ResponseHeaderName>,\n): void {\n  const event = getH3Event()\n  // If headerNames is provided, clear only those headers\n  if (headerNames && headerNames.length > 0) {\n    for (const name of headerNames) {\n      event.res.headers.delete(name)\n    }\n    // Otherwise, clear all headers\n  } else {\n    for (const name of event.res.headers.keys()) {\n      event.res.headers.delete(name)\n    }\n  }\n}\n\nexport function getResponseStatus(): number {\n  return getH3Event().res.status || 200\n}\n\nexport function setResponseStatus(code?: number, text?: string): void {\n  const event = getH3Event()\n  if (code) {\n    event.res.status = h3_sanitizeStatusCode(code, event.res.status)\n  }\n  if (text) {\n    event.res.statusText = h3_sanitizeStatusMessage(text)\n  }\n}\n\n/**\n * Parse the request to get HTTP Cookie header string and return an object of all cookie name-value pairs.\n * @returns Object of cookie name-value pairs\n * ```ts\n * const cookies = getCookies()\n * ```\n */\nexport function getCookies(): Record<string, string> {\n  const event = getH3Event()\n  const cookies = h3_parseCookies(event)\n  const definedCookies: Record<string, string> = Object.create(null)\n\n  for (const [name, value] of Object.entries(cookies)) {\n    if (value !== undefined) {\n      definedCookies[name] = value\n    }\n  }\n\n  return definedCookies\n}\n\n/**\n * Get a cookie value by name.\n * @param name Name of the cookie to get\n * @returns {*} Value of the cookie (String or undefined)\n * ```ts\n * const authorization = getCookie('Authorization')\n * ```\n */\nexport function getCookie(name: string): string | undefined {\n  return getCookies()[name]\n}\n\n/**\n * Set a cookie value by name.\n * @param name Name of the cookie to set\n * @param value Value of the cookie to set\n * @param options {CookieSerializeOptions} Options for serializing the cookie\n * ```ts\n * setCookie('Authorization', '1234567')\n * ```\n */\nexport function setCookie(\n  name: string,\n  value: string,\n  options?: CookieSerializeOptions,\n): void {\n  const event = getH3Event()\n  h3_setCookie(event, name, value, options)\n}\n\n/**\n * Remove a cookie by name.\n * @param name Name of the cookie to delete\n * @param serializeOptions {CookieSerializeOptions} Cookie options\n * ```ts\n * deleteCookie('SessionId')\n * ```\n */\nexport function deleteCookie(\n  name: string,\n  options?: CookieSerializeOptions,\n): void {\n  const event = getH3Event()\n  h3_deleteCookie(event, name, options)\n}\n\nfunction getDefaultSessionConfig(config: SessionConfig): SessionConfig {\n  return {\n    name: 'start',\n    ...config,\n  }\n}\n\n/**\n * Create a session manager for the current request.\n */\nexport function useSession<TSessionData extends SessionData = SessionData>(\n  config: SessionConfig,\n): Promise<SessionManager<TSessionData>> {\n  const event = getH3Event()\n  return h3_useSession(event, getDefaultSessionConfig(config))\n}\n/**\n * Get the session for the current request\n */\nexport function getSession<TSessionData extends SessionData = SessionData>(\n  config: SessionConfig,\n): Promise<Session<TSessionData>> {\n  const event = getH3Event()\n  return h3_getSession(event, getDefaultSessionConfig(config))\n}\n\n/**\n * Update the session data for the current request.\n */\nexport function updateSession<TSessionData extends SessionData = SessionData>(\n  config: SessionConfig,\n  update?: SessionUpdate<TSessionData>,\n): Promise<Session<TSessionData>> {\n  const event = getH3Event()\n  return h3_updateSession(event, getDefaultSessionConfig(config), update)\n}\n\n/**\n * Encrypt and sign the session data for the current request.\n */\nexport function sealSession(config: SessionConfig): Promise<string> {\n  const event = getH3Event()\n  return h3_sealSession(event, getDefaultSessionConfig(config))\n}\n/**\n * Decrypt and verify the session data for the current request.\n */\nexport function unsealSession(\n  config: SessionConfig,\n  sealed: string,\n): Promise<Partial<Session>> {\n  const event = getH3Event()\n  return h3_unsealSession(event, getDefaultSessionConfig(config), sealed)\n}\n\n/**\n * Clear the session data for the current request.\n */\nexport function clearSession(config: Partial<SessionConfig>): Promise<void> {\n  const event = getH3Event()\n  return h3_clearSession(event, { name: 'start', ...config })\n}\n\nexport function getResponse() {\n  const event = getH3Event()\n  return event.res\n}\n\n// not public API (yet)\nexport function getValidatedQuery<TSchema extends StandardSchemaV1>(\n  schema: StandardSchemaV1,\n): Promise<StandardSchemaV1.InferOutput<TSchema>> {\n  return h3_getValidatedQuery(getH3Event(), schema)\n}\n"],"mappings":";;;AA+CA,IAAM,2BAA2B,OAAO,IAAI,8BAA8B;AAE1E,IAAM,YAAY;AAIlB,IAAI,CAAC,UAAU,2BACb,UAAU,4BAA4B,IAAI,kBAA8B;AAG1E,IAAM,eAAe,UAAU;AAU/B,SAAS,cAAiB,OAA6C;CACrE,OAAO,OAAQ,MAAqB,SAAS;AAC/C;AAEA,SAAS,mBAAmB,SAAiC;CAC3D,MAAM,uBAAuB;CAC7B,IAAI,OAAO,qBAAqB,iBAAiB,YAC/C,OAAO,qBAAqB,aAAa;CAE3C,MAAM,QAAQ,QAAQ,IAAI,YAAY;CACtC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;AAC5B;AAEA,SAAS,0BAA0B,UAAoB,OAAsB;CAC3E,IAAI,SAAS,IACX;CAGF,MAAM,kBAAkB,mBAAmB,MAAM,IAAI,OAAO;CAC5D,IAAI,gBAAgB,WAAW,GAC7B;CAGF,MAAM,qBAAqB,mBAAmB,SAAS,OAAO;CAC9D,SAAS,QAAQ,OAAO,YAAY;CACpC,KAAK,MAAM,UAAU,oBACnB,SAAS,QAAQ,OAAO,cAAc,MAAM;CAE9C,KAAK,MAAM,UAAU,iBACnB,SAAS,QAAQ,OAAO,cAAc,MAAM;AAEhD;AAEA,SAAS,sBACP,OACA,OACiB;CACjB,IAAI,cAAc,KAAK,GACrB,OAAO,MAAM,MAAM,aAAa;EAC9B,IAAI,oBAAoB,UACtB,0BAA0B,UAAU,KAAK;EAE3C,OAAO;CACT,CAAC;CAGH,IAAI,iBAAiB,UACnB,0BAA0B,OAAO,KAAK;CAGxC,OAAO;AACT;AAEA,SAAgB,eACd,SACA;CACA,QAAQ,SAAkB,gBAAmD;EAC3E,IAAI;EACJ,IAAI;GACF,UAAU,IAAI,QAAQ,OAAO;EAC/B,SAAS,OAAO;GACd,IAAI,iBAAiB,UACnB,OAAO,IAAI,SAAS,MAAM;IACxB,QAAQ;IACR,YAAY;GACd,CAAC;GAEH,MAAM;EACR;EAKA,OAAO,WAAc,sBAHJ,aAAa,IAAI,EAAE,QAAQ,SAC1C,QAAQ,SAAS,WAAW,CAEa,GAAU,OAAO,GAAG,OAAO;CACxE;AACF;AAEA,SAAS,aAAa;CACpB,MAAM,QAAQ,aAAa,SAAS;CACpC,IAAI,CAAC,OACH,MAAM,IAAI,MACR,2GACF;CAEF,OAAO,MAAM;AACf;AAEA,SAAgB,aAAsB;CAEpC,OADc,WACP,EAAM;AACf;AAEA,SAAgB,oBAAoD;CAClE,OAAO,WAAW,EAAE,IAAI;AAC1B;AAEA,SAAgB,iBAAiB,MAA6C;CAC5E,OAAO,kBAAkB,EAAE,IAAI,IAAI,KAAK,KAAA;AAC1C;AAEA,SAAgB,eAAa,MAO1B;CACD,OAAO,aAAgB,WAAW,GAAG,IAAI;AAC3C;;;;;;;;AASA,SAAgB,iBAAe,MAAqC;CAClE,OAAO,eAAkB,WAAW,GAAG,IAAI;AAC7C;;;;;;;;AASA,SAAgB,cAAc,MAG3B;CACD,OAAO,cAAiB,WAAW,GAAG,IAAI;AAC5C;;;;;;;;AASA,SAAgB,qBAAmB,MAEE;CACnC,OAAO,mBAAsB,WAAW,GAAG,IAAI;AACjD;AAEA,SAAgB,mBACd,SACM;CACN,MAAM,QAAQ,WAAW;CACzB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,GAChD,MAAM,IAAI,QAAQ,IAAI,MAAM,KAAK;AAErC;AAEA,SAAgB,qBAAsD;CAEpE,OADc,WACP,EAAM,IAAI;AACnB;AAEA,SAAgB,kBACd,MACoB;CAEpB,OADc,WACP,EAAM,IAAI,QAAQ,IAAI,IAAI,KAAK,KAAA;AACxC;AAEA,SAAgB,kBACd,MACA,OACM;CACN,MAAM,QAAQ,WAAW;CACzB,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxB,MAAM,IAAI,QAAQ,OAAO,IAAI;EAC7B,KAAK,MAAM,aAAa,OACtB,MAAM,IAAI,QAAQ,OAAO,MAAM,SAAS;CAE5C,OACE,MAAM,IAAI,QAAQ,IAAI,MAAM,KAAK;AAErC;AACA,SAAgB,qBAAqB,MAAgC;CAEnE,WAAA,EAAM,IAAI,QAAQ,OAAO,IAAI;AAC/B;AAEA,SAAgB,qBACd,aACM;CACN,MAAM,QAAQ,WAAW;CAEzB,IAAI,eAAe,YAAY,SAAS,GACtC,KAAK,MAAM,QAAQ,aACjB,MAAM,IAAI,QAAQ,OAAO,IAAI;MAI/B,KAAK,MAAM,QAAQ,MAAM,IAAI,QAAQ,KAAK,GACxC,MAAM,IAAI,QAAQ,OAAO,IAAI;AAGnC;AAEA,SAAgB,oBAA4B;CAC1C,OAAO,WAAW,EAAE,IAAI,UAAU;AACpC;AAEA,SAAgB,kBAAkB,MAAe,MAAqB;CACpE,MAAM,QAAQ,WAAW;CACzB,IAAI,MACF,MAAM,IAAI,SAAS,mBAAsB,MAAM,MAAM,IAAI,MAAM;CAEjE,IAAI,MACF,MAAM,IAAI,aAAa,sBAAyB,IAAI;AAExD;;;;;;;;AASA,SAAgB,aAAqC;CAEnD,MAAM,UAAU,aADF,WACkB,CAAK;CACrC,MAAM,iBAAyC,OAAO,OAAO,IAAI;CAEjE,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,GAChD,IAAI,UAAU,KAAA,GACZ,eAAe,QAAQ;CAI3B,OAAO;AACT;;;;;;;;;AAUA,SAAgB,UAAU,MAAkC;CAC1D,OAAO,WAAW,EAAE;AACtB;;;;;;;;;;AAWA,SAAgB,YACd,MACA,OACA,SACM;CAEN,UADc,WACD,GAAO,MAAM,OAAO,OAAO;AAC1C;;;;;;;;;AAUA,SAAgB,eACd,MACA,SACM;CAEN,aADc,WACE,GAAO,MAAM,OAAO;AACtC;AAEA,SAAS,wBAAwB,QAAsC;CACrE,OAAO;EACL,MAAM;EACN,GAAG;CACL;AACF;;;;AAKA,SAAgB,aACd,QACuC;CAEvC,OAAO,WADO,WACO,GAAO,wBAAwB,MAAM,CAAC;AAC7D;;;;AAIA,SAAgB,aACd,QACgC;CAEhC,OAAO,WADO,WACO,GAAO,wBAAwB,MAAM,CAAC;AAC7D;;;;AAKA,SAAgB,gBACd,QACA,QACgC;CAEhC,OAAO,cADO,WACU,GAAO,wBAAwB,MAAM,GAAG,MAAM;AACxE;;;;AAKA,SAAgB,cAAY,QAAwC;CAElE,OAAO,YADO,WACQ,GAAO,wBAAwB,MAAM,CAAC;AAC9D;;;;AAIA,SAAgB,gBACd,QACA,QAC2B;CAE3B,OAAO,cADO,WACU,GAAO,wBAAwB,MAAM,GAAG,MAAM;AACxE;;;;AAKA,SAAgB,eAAa,QAA+C;CAE1E,OAAO,aADO,WACS,GAAO;EAAE,MAAM;EAAS,GAAG;CAAO,CAAC;AAC5D;AAEA,SAAgB,cAAc;CAE5B,OADc,WACP,EAAM;AACf;AAGA,SAAgB,oBACd,QACgD;CAChD,OAAO,kBAAqB,WAAW,GAAG,MAAM;AAClD"}

package/dist/esm/router-manifest.js

@@ -1,4 +1,4 @@
-import { buildDevStylesUrl, rootRouteId } from "@tanstack/router-core";
+import { DEV_STYLES_ATTR, buildDevStylesUrl, rootRouteId } from "@tanstack/router-core";
 //#region src/router-manifest.ts
 var DEV_SSR_STYLES_BASEPATH = process.env.TSS_DEV_SSR_STYLES_BASEPATH || "/";
 /**
@@ -16,44 +16,41 @@ var DEV_SSR_STYLES_BASEPATH = process.env.TSS_DEV_SSR_STYLES_BASEPATH || "/";
 async function getStartManifest(matchedRoutes) {
 	const { tsrStartManifest } = await import("tanstack-start-manifest:v");
 	const startManifest = tsrStartManifest();
-	const rootRoute = startManifest.routes[rootRouteId] = startManifest.routes[rootRouteId] || {};
-	rootRoute.assets = rootRoute.assets || [];
+	let routes = startManifest.routes;
+	let rootRoute = routes[rootRouteId];
+	const updateRootRoute = (nextRootRoute) => {
+		rootRoute = nextRootRoute;
+		routes = {
+			...routes,
+			[rootRouteId]: rootRoute
+		};
+	};
 	if (process.env.TSS_DEV_SERVER === "true" && process.env.TSS_DEV_SSR_STYLES_ENABLED !== "false" && matchedRoutes) {
 		const matchedRouteIds = matchedRoutes.map((route) => route.id);
-		rootRoute.assets.push({
-			tag: "link",
-			attrs: {
-				rel: "stylesheet",
+		updateRootRoute({
+			...rootRoute,
+			css: [...rootRoute?.css ?? [], {
 				href: buildDevStylesUrl(DEV_SSR_STYLES_BASEPATH, matchedRouteIds),
-				"data-tanstack-router-dev-styles": "true"
-			}
+				[DEV_STYLES_ATTR]: true
+			}]
 		});
 	}
-	let injectedHeadScripts;
-	if (process.env.TSS_DEV_SERVER === "true") {
-		const mod = await import("tanstack-start-injected-head-scripts:v");
-		if (mod.injectedHeadScripts) injectedHeadScripts = mod.injectedHeadScripts;
+	const manifestRoutes = {};
+	for (const k in routes) {
+		const v = routes[k];
+		const result = {};
+		if (v.preloads && v.preloads.length > 0) result.preloads = v.preloads;
+		if (v.scripts && v.scripts.length > 0) result.scripts = v.scripts;
+		if (v.css?.length) result.css = v.css;
+		if (result.preloads || result.scripts || result.css) manifestRoutes[k] = result;
 	}
 	return {
 		manifest: {
-			inlineCss: startManifest.inlineCss,
-			routes: Object.fromEntries(Object.entries(startManifest.routes).flatMap(([k, v]) => {
-				const result = {};
-				let hasData = false;
-				if (v.preloads && v.preloads.length > 0) {
-					result["preloads"] = v.preloads;
-					hasData = true;
-				}
-				if (v.assets && v.assets.length > 0) {
-					result["assets"] = v.assets;
-					hasData = true;
-				}
-				if (!hasData) return [];
-				return [[k, result]];
-			}))
+			...startManifest.scriptFormat ? { scriptFormat: startManifest.scriptFormat } : {},
+			...startManifest.inlineCss ? { inlineCss: startManifest.inlineCss } : {},
+			routes: manifestRoutes
 		},
-		clientEntry: startManifest.clientEntry,
-		injectedHeadScripts
+		clientEntry: startManifest.clientEntry
 	};
 }
 //#endregion

package/dist/esm/router-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"router-manifest.js","names":[],"sources":["../../src/router-manifest.ts"],"sourcesContent":["import { buildDevStylesUrl, rootRouteId } from '@tanstack/router-core'\nimport type {\n  AnyRoute,\n  ManifestAssetLink,\n  RouterManagedTag,\n} from '@tanstack/router-core'\nimport type { StartManifestWithClientEntry } from './transformAssetUrls'\n\n// Pre-computed constant for dev styles URL basepath.\n// Defaults to vite `base` (set via TSS_DEV_SSR_STYLES_BASEPATH in the plugin),\n// aligning dev styles with how other CSS/JS assets are served.\nconst DEV_SSR_STYLES_BASEPATH = process.env.TSS_DEV_SSR_STYLES_BASEPATH || '/'\n\n/**\n * @description Returns the router manifest data that should be sent to the client.\n * This includes only the assets and preloads for the current route and any\n * special assets that are needed for the client. It does not include relationships\n * between routes or any other data that is not needed for the client.\n *\n * The client entry URL is returned separately so that it can be transformed\n * (e.g. for CDN rewriting) before being embedded into the `<script>` tag.\n *\n * @param matchedRoutes - In dev mode, the matched routes are used to build\n * the dev styles URL for route-scoped CSS collection.\n */\nexport async function getStartManifest(\n  matchedRoutes?: ReadonlyArray<AnyRoute>,\n): Promise<StartManifestWithClientEntry> {\n  const { tsrStartManifest } = await import('tanstack-start-manifest:v')\n  const startManifest = tsrStartManifest()\n\n  const rootRoute = (startManifest.routes[rootRouteId] =\n    startManifest.routes[rootRouteId] || {})\n\n  rootRoute.assets = rootRoute.assets || []\n\n  // Inject dev styles link in dev mode (when SSR styles are enabled)\n  if (\n    process.env.TSS_DEV_SERVER === 'true' &&\n    process.env.TSS_DEV_SSR_STYLES_ENABLED !== 'false' &&\n    matchedRoutes\n  ) {\n    const matchedRouteIds = matchedRoutes.map((route) => route.id)\n    rootRoute.assets.push({\n      tag: 'link',\n      attrs: {\n        rel: 'stylesheet',\n        href: buildDevStylesUrl(DEV_SSR_STYLES_BASEPATH, matchedRouteIds),\n        'data-tanstack-router-dev-styles': 'true',\n      },\n    })\n  }\n\n  // Collect injected head scripts in dev mode (returned separately so we can\n  // build the client entry script tag after URL transforms are applied)\n  let injectedHeadScripts: string | undefined\n  if (process.env.TSS_DEV_SERVER === 'true') {\n    const mod = await import('tanstack-start-injected-head-scripts:v')\n    if (mod.injectedHeadScripts) {\n      injectedHeadScripts = mod.injectedHeadScripts\n    }\n  }\n\n  const manifest = {\n    inlineCss: startManifest.inlineCss,\n    routes: Object.fromEntries(\n      Object.entries(startManifest.routes).flatMap(([k, v]) => {\n        const result = {} as {\n          preloads?: Array<ManifestAssetLink>\n          assets?: Array<RouterManagedTag>\n        }\n        let hasData = false\n        if (v.preloads && v.preloads.length > 0) {\n          result['preloads'] = v.preloads\n          hasData = true\n        }\n        if (v.assets && v.assets.length > 0) {\n          result['assets'] = v.assets\n          hasData = true\n        }\n        if (!hasData) {\n          return []\n        }\n        return [[k, result]]\n      }),\n    ),\n  }\n\n  return {\n    manifest: manifest as StartManifestWithClientEntry['manifest'],\n    clientEntry: startManifest.clientEntry,\n    injectedHeadScripts,\n  }\n}\n"],"mappings":";;AAWA,IAAM,0BAA0B,QAAQ,IAAI,+BAA+B;;;;;;;;;;;;;AAc3E,eAAsB,iBACpB,eACuC;CACvC,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,gBAAgB,kBAAkB;CAExC,MAAM,YAAa,cAAc,OAAO,eACtC,cAAc,OAAO,gBAAgB,EAAE;AAEzC,WAAU,SAAS,UAAU,UAAU,EAAE;AAGzC,KACE,QAAQ,IAAI,mBAAmB,UAC/B,QAAQ,IAAI,+BAA+B,WAC3C,eACA;EACA,MAAM,kBAAkB,cAAc,KAAK,UAAU,MAAM,GAAG;AAC9D,YAAU,OAAO,KAAK;GACpB,KAAK;GACL,OAAO;IACL,KAAK;IACL,MAAM,kBAAkB,yBAAyB,gBAAgB;IACjE,mCAAmC;IACpC;GACF,CAAC;;CAKJ,IAAI;AACJ,KAAI,QAAQ,IAAI,mBAAmB,QAAQ;EACzC,MAAM,MAAM,MAAM,OAAO;AACzB,MAAI,IAAI,oBACN,uBAAsB,IAAI;;AA6B9B,QAAO;EACK,UA1BK;GACf,WAAW,cAAc;GACzB,QAAQ,OAAO,YACb,OAAO,QAAQ,cAAc,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO;IACvD,MAAM,SAAS,EAAE;IAIjB,IAAI,UAAU;AACd,QAAI,EAAE,YAAY,EAAE,SAAS,SAAS,GAAG;AACvC,YAAO,cAAc,EAAE;AACvB,eAAU;;AAEZ,QAAI,EAAE,UAAU,EAAE,OAAO,SAAS,GAAG;AACnC,YAAO,YAAY,EAAE;AACrB,eAAU;;AAEZ,QAAI,CAAC,QACH,QAAO,EAAE;AAEX,WAAO,CAAC,CAAC,GAAG,OAAO,CAAC;KACpB,CACH;GACF;EAIC,aAAa,cAAc;EAC3B;EACD"}
+{"version":3,"file":"router-manifest.js","names":[],"sources":["../../src/router-manifest.ts"],"sourcesContent":["import {\n  DEV_STYLES_ATTR,\n  buildDevStylesUrl,\n  rootRouteId,\n} from '@tanstack/router-core'\nimport type { AnyRoute, ServerManifestRoute } from '@tanstack/router-core'\nimport type { StartManifestWithClientEntry } from './transformAssetUrls'\n\n// Pre-computed constant for dev styles URL basepath.\n// Defaults to vite `base` (set via TSS_DEV_SSR_STYLES_BASEPATH in the plugin),\n// aligning dev styles with how other CSS/JS assets are served.\nconst DEV_SSR_STYLES_BASEPATH = process.env.TSS_DEV_SSR_STYLES_BASEPATH || '/'\n/**\n * @description Returns the router manifest data that should be sent to the client.\n * This includes only the assets and preloads for the current route and any\n * special assets that are needed for the client. It does not include relationships\n * between routes or any other data that is not needed for the client.\n *\n * The client entry URL is returned separately so that it can be transformed\n * (e.g. for CDN rewriting) before being embedded into the `<script>` tag.\n *\n * @param matchedRoutes - In dev mode, the matched routes are used to build\n * the dev styles URL for route-scoped CSS collection.\n */\nexport async function getStartManifest(\n  matchedRoutes?: ReadonlyArray<AnyRoute>,\n): Promise<StartManifestWithClientEntry> {\n  const { tsrStartManifest } = await import('tanstack-start-manifest:v')\n  const startManifest = tsrStartManifest()\n  let routes = startManifest.routes\n  let rootRoute = routes[rootRouteId]\n\n  const updateRootRoute = (nextRootRoute: ServerManifestRoute) => {\n    rootRoute = nextRootRoute\n    routes = {\n      ...routes,\n      [rootRouteId]: rootRoute,\n    }\n  }\n\n  // Inject dev styles link in dev mode (when SSR styles are enabled)\n  if (\n    process.env.TSS_DEV_SERVER === 'true' &&\n    process.env.TSS_DEV_SSR_STYLES_ENABLED !== 'false' &&\n    matchedRoutes\n  ) {\n    const matchedRouteIds = matchedRoutes.map((route) => route.id)\n    updateRootRoute({\n      ...rootRoute,\n      css: [\n        ...(rootRoute?.css ?? []),\n        {\n          href: buildDevStylesUrl(DEV_SSR_STYLES_BASEPATH, matchedRouteIds),\n          [DEV_STYLES_ATTR]: true,\n        },\n      ],\n    })\n  }\n\n  const manifestRoutes: Record<string, ServerManifestRoute> = {}\n\n  for (const k in routes) {\n    const v = routes[k]!\n    const result = {} as ServerManifestRoute\n\n    if (v.preloads && v.preloads.length > 0) {\n      result.preloads = v.preloads\n    }\n    if (v.scripts && v.scripts.length > 0) {\n      result.scripts = v.scripts\n    }\n    if (v.css?.length) {\n      result.css = v.css\n    }\n    if (result.preloads || result.scripts || result.css) {\n      manifestRoutes[k] = result\n    }\n  }\n\n  const manifest = {\n    ...(startManifest.scriptFormat\n      ? { scriptFormat: startManifest.scriptFormat }\n      : {}),\n    ...(startManifest.inlineCss ? { inlineCss: startManifest.inlineCss } : {}),\n    routes: manifestRoutes,\n  }\n\n  return {\n    manifest: manifest as StartManifestWithClientEntry['manifest'],\n    clientEntry: startManifest.clientEntry,\n  }\n}\n"],"mappings":";;AAWA,IAAM,0BAA0B,QAAQ,IAAI,+BAA+B;;;;;;;;;;;;;AAa3E,eAAsB,iBACpB,eACuC;CACvC,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,gBAAgB,iBAAiB;CACvC,IAAI,SAAS,cAAc;CAC3B,IAAI,YAAY,OAAO;CAEvB,MAAM,mBAAmB,kBAAuC;EAC9D,YAAY;EACZ,SAAS;GACP,GAAG;IACF,cAAc;EACjB;CACF;CAGA,IACE,QAAQ,IAAI,mBAAmB,UAC/B,QAAQ,IAAI,+BAA+B,WAC3C,eACA;EACA,MAAM,kBAAkB,cAAc,KAAK,UAAU,MAAM,EAAE;EAC7D,gBAAgB;GACd,GAAG;GACH,KAAK,CACH,GAAI,WAAW,OAAO,CAAC,GACvB;IACE,MAAM,kBAAkB,yBAAyB,eAAe;KAC/D,kBAAkB;GACrB,CACF;EACF,CAAC;CACH;CAEA,MAAM,iBAAsD,CAAC;CAE7D,KAAK,MAAM,KAAK,QAAQ;EACtB,MAAM,IAAI,OAAO;EACjB,MAAM,SAAS,CAAC;EAEhB,IAAI,EAAE,YAAY,EAAE,SAAS,SAAS,GACpC,OAAO,WAAW,EAAE;EAEtB,IAAI,EAAE,WAAW,EAAE,QAAQ,SAAS,GAClC,OAAO,UAAU,EAAE;EAErB,IAAI,EAAE,KAAK,QACT,OAAO,MAAM,EAAE;EAEjB,IAAI,OAAO,YAAY,OAAO,WAAW,OAAO,KAC9C,eAAe,KAAK;CAExB;CAUA,OAAO;EACK,UAAA;GARV,GAAI,cAAc,eACd,EAAE,cAAc,cAAc,aAAa,IAC3C,CAAC;GACL,GAAI,cAAc,YAAY,EAAE,WAAW,cAAc,UAAU,IAAI,CAAC;GACxE,QAAQ;EAIE;EACV,aAAa,cAAc;CAC7B;AACF"}

package/dist/esm/serializer/ServerFunctionSerializationAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"ServerFunctionSerializationAdapter.js","names":[],"sources":["../../../src/serializer/ServerFunctionSerializationAdapter.ts"],"sourcesContent":["import { createSerializationAdapter } from '@tanstack/router-core'\nimport { TSS_SERVER_FUNCTION } from '@tanstack/start-client-core'\nimport { getServerFnById } from '../getServerFnById'\n\nexport const ServerFunctionSerializationAdapter = createSerializationAdapter({\n  key: '$TSS/serverfn',\n  test: (v): v is { serverFnMeta: { id: string } } => {\n    if (typeof v !== 'function') return false\n\n    if (!(TSS_SERVER_FUNCTION in v)) return false\n\n    return !!v[TSS_SERVER_FUNCTION]\n  },\n  toSerializable: ({ serverFnMeta }) => ({ functionId: serverFnMeta.id }),\n  fromSerializable: ({ functionId }) => {\n    const fn = async (opts: any, signal: any): Promise<any> => {\n      // When a function ID is received through serialization (e.g., as a parameter\n      // to another server function), it originates from the client and must be\n      // validated the same way as direct HTTP calls to server functions.\n      const serverFn = await getServerFnById(functionId, { origin: 'client' })\n      const result = await serverFn(opts ?? {}, signal)\n      return result.result\n    }\n    return fn as never\n  },\n})\n"],"mappings":";;;;AAIA,IAAa,qCAAqC,2BAA2B;CAC3E,KAAK;CACL,OAAO,MAA6C;AAClD,MAAI,OAAO,MAAM,WAAY,QAAO;AAEpC,MAAI,EAAE,uBAAuB,GAAI,QAAO;AAExC,SAAO,CAAC,CAAC,EAAE;;CAEb,iBAAiB,EAAE,oBAAoB,EAAE,YAAY,aAAa,IAAI;CACtE,mBAAmB,EAAE,iBAAiB;EACpC,MAAM,KAAK,OAAO,MAAW,WAA8B;AAMzD,WADe,OADE,MAAM,gBAAgB,YAAY,EAAE,QAAQ,UAAU,CAAC,EAC1C,QAAQ,EAAE,EAAE,OAAO,EACnC;;AAEhB,SAAO;;CAEV,CAAC"}
+{"version":3,"file":"ServerFunctionSerializationAdapter.js","names":[],"sources":["../../../src/serializer/ServerFunctionSerializationAdapter.ts"],"sourcesContent":["import { createSerializationAdapter } from '@tanstack/router-core'\nimport { TSS_SERVER_FUNCTION } from '@tanstack/start-client-core'\nimport { getServerFnById } from '../getServerFnById'\n\nexport const ServerFunctionSerializationAdapter = createSerializationAdapter({\n  key: '$TSS/serverfn',\n  test: (v): v is { serverFnMeta: { id: string } } => {\n    if (typeof v !== 'function') return false\n\n    if (!(TSS_SERVER_FUNCTION in v)) return false\n\n    return !!v[TSS_SERVER_FUNCTION]\n  },\n  toSerializable: ({ serverFnMeta }) => ({ functionId: serverFnMeta.id }),\n  fromSerializable: ({ functionId }) => {\n    const fn = async (opts: any, signal: any): Promise<any> => {\n      // When a function ID is received through serialization (e.g., as a parameter\n      // to another server function), it originates from the client and must be\n      // validated the same way as direct HTTP calls to server functions.\n      const serverFn = await getServerFnById(functionId, { origin: 'client' })\n      const result = await serverFn(opts ?? {}, signal)\n      return result.result\n    }\n    return fn as never\n  },\n})\n"],"mappings":";;;;AAIA,IAAa,qCAAqC,2BAA2B;CAC3E,KAAK;CACL,OAAO,MAA6C;EAClD,IAAI,OAAO,MAAM,YAAY,OAAO;EAEpC,IAAI,EAAE,uBAAuB,IAAI,OAAO;EAExC,OAAO,CAAC,CAAC,EAAE;CACb;CACA,iBAAiB,EAAE,oBAAoB,EAAE,YAAY,aAAa,GAAG;CACrE,mBAAmB,EAAE,iBAAiB;EACpC,MAAM,KAAK,OAAO,MAAW,WAA8B;GAMzD,QAAO,OADc,MADE,gBAAgB,YAAY,EAAE,QAAQ,SAAS,CAAC,GACzC,QAAQ,CAAC,GAAG,MAAM,GAClC;EAChB;EACA,OAAO;CACT;AACF,CAAC"}

package/dist/esm/server-functions-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-functions-handler.js","names":[],"sources":["../../src/server-functions-handler.ts"],"sourcesContent":["import {\n  createRawStreamRPCPlugin,\n  invariant,\n  isNotFound,\n  isRedirect,\n} from '@tanstack/router-core'\nimport {\n  TSS_FORMDATA_CONTEXT,\n  X_TSS_RAW_RESPONSE,\n  X_TSS_SERIALIZED,\n  getDefaultSerovalPlugins,\n  safeObjectMerge,\n} from '@tanstack/start-client-core'\nimport { fromJSON, toCrossJSONAsync, toCrossJSONStream } from 'seroval'\nimport { getResponse } from './request-response'\nimport { getServerFnById } from './getServerFnById'\nimport {\n  TSS_CONTENT_TYPE_FRAMED_VERSIONED,\n  createMultiplexedStream,\n} from './frame-protocol'\nimport type { LateStreamRegistration } from './frame-protocol'\nimport type { Plugin as SerovalPlugin } from 'seroval'\n\n// Cache serovalPlugins at module level to avoid repeated calls\nlet serovalPlugins: Array<SerovalPlugin<any, any>> | undefined = undefined\n\n// Known FormData 'Content-Type' header values - module-level constant\nconst FORM_DATA_CONTENT_TYPES = [\n  'multipart/form-data',\n  'application/x-www-form-urlencoded',\n]\n\n// Maximum payload size for GET requests (1MB)\nconst MAX_PAYLOAD_SIZE = 1_000_000\n\nexport const handleServerAction = async ({\n  request,\n  context,\n  serverFnId,\n}: {\n  request: Request\n  context: any\n  serverFnId: string\n}) => {\n  const method = request.method\n  const methodUpper = method.toUpperCase()\n  const url = new URL(request.url)\n\n  const action = await getServerFnById(serverFnId, { origin: 'client' })\n\n  // Early method check: reject mismatched HTTP methods before parsing\n  // the request payload (FormData, JSON, query string, etc.)\n  if (action.method && methodUpper !== action.method) {\n    return new Response(\n      `expected ${action.method} method. Got ${methodUpper}`,\n      {\n        status: 405,\n        headers: {\n          Allow: action.method,\n        },\n      },\n    )\n  }\n\n  const isServerFn = request.headers.get('x-tsr-serverFn') === 'true'\n\n  // Initialize serovalPlugins lazily (cached at module level)\n  if (!serovalPlugins) {\n    serovalPlugins = getDefaultSerovalPlugins()\n  }\n\n  const contentType = request.headers.get('Content-Type')\n\n  function parsePayload(payload: any) {\n    const parsedPayload = fromJSON(payload, { plugins: serovalPlugins })\n    return parsedPayload as any\n  }\n\n  const response = await (async () => {\n    try {\n      let res = await (async () => {\n        // FormData\n        if (\n          FORM_DATA_CONTENT_TYPES.some(\n            (type) => contentType && contentType.includes(type),\n          )\n        ) {\n          // We don't support GET requests with FormData payloads... that seems impossible\n          if (methodUpper === 'GET') {\n            if (process.env.NODE_ENV !== 'production') {\n              throw new Error(\n                'Invariant failed: GET requests with FormData payloads are not supported',\n              )\n            }\n\n            invariant()\n          }\n          const formData = await request.formData()\n          const serializedContext = formData.get(TSS_FORMDATA_CONTEXT)\n          formData.delete(TSS_FORMDATA_CONTEXT)\n\n          const params = {\n            context,\n            data: formData,\n            method: methodUpper,\n          }\n          if (typeof serializedContext === 'string') {\n            try {\n              const parsedContext = JSON.parse(serializedContext)\n              const deserializedContext = fromJSON(parsedContext, {\n                plugins: serovalPlugins,\n              })\n              if (\n                typeof deserializedContext === 'object' &&\n                deserializedContext\n              ) {\n                params.context = safeObjectMerge(\n                  deserializedContext as Record<string, unknown>,\n                  context,\n                )\n              }\n            } catch (e) {\n              // Log warning for debugging but don't expose to client\n              if (process.env.NODE_ENV === 'development') {\n                console.warn('Failed to parse FormData context:', e)\n              }\n            }\n          }\n\n          return await action(params)\n        }\n\n        // Get requests use the query string\n        if (methodUpper === 'GET') {\n          // Get payload directly from searchParams\n          const payloadParam = url.searchParams.get('payload')\n          // Reject oversized payloads to prevent DoS\n          if (payloadParam && payloadParam.length > MAX_PAYLOAD_SIZE) {\n            throw new Error('Payload too large')\n          }\n          // If there's a payload, we should try to parse it\n          const payload: any = payloadParam\n            ? parsePayload(JSON.parse(payloadParam))\n            : {}\n          payload.context = safeObjectMerge(payload.context, context)\n          payload.method = methodUpper\n          // Send it through!\n          return await action(payload)\n        }\n\n        let jsonPayload\n        if (contentType?.includes('application/json')) {\n          jsonPayload = await request.json()\n        }\n\n        const payload = jsonPayload ? parsePayload(jsonPayload) : {}\n        payload.context = safeObjectMerge(payload.context, context)\n        payload.method = methodUpper\n        return await action(payload)\n      })()\n\n      const unwrapped = res.result || res.error\n\n      if (isNotFound(res)) {\n        res = isNotFoundResponse(res)\n      }\n\n      if (!isServerFn) {\n        return unwrapped\n      }\n\n      if (unwrapped instanceof Response) {\n        if (isRedirect(unwrapped)) {\n          return unwrapped\n        }\n        unwrapped.headers.set(X_TSS_RAW_RESPONSE, 'true')\n        return unwrapped\n      }\n\n      return serializeResult(res)\n\n      function serializeResult(res: unknown): Response {\n        let nonStreamingBody: any = undefined\n\n        const alsResponse = getResponse()\n        if (res !== undefined) {\n          // Collect raw streams encountered during initial synchronous serialization\n          const rawStreams = new Map<number, ReadableStream<Uint8Array>>()\n\n          // Track whether we're still in the initial synchronous phase\n          // After initial phase, new RawStreams go to lateStreamWriter\n          let initialPhase = true\n\n          // Late stream registration for RawStreams discovered after initial pass\n          // (e.g., from resolved Promises)\n          let lateStreamWriter:\n            | WritableStreamDefaultWriter<LateStreamRegistration>\n            | undefined\n          let lateStreamReadable:\n            | ReadableStream<LateStreamRegistration>\n            | undefined = undefined\n          const pendingLateStreams: Array<LateStreamRegistration> = []\n\n          const rawStreamPlugin = createRawStreamRPCPlugin(\n            (id: number, stream: ReadableStream<Uint8Array>) => {\n              if (initialPhase) {\n                rawStreams.set(id, stream)\n                return\n              }\n\n              if (lateStreamWriter) {\n                // Late stream - write to the late stream channel\n                lateStreamWriter.write({ id, stream }).catch(() => {\n                  // Ignore write errors - stream may be closed\n                })\n                return\n              }\n\n              // Discovered after initial phase but before writer exists.\n              pendingLateStreams.push({ id, stream })\n            },\n          )\n\n          // Build plugins with RawStreamRPCPlugin first (before default SSR plugin)\n          const plugins = [rawStreamPlugin, ...(serovalPlugins || [])]\n\n          // first run without the stream in case `result` does not need streaming\n          let done = false as boolean\n          const callbacks: {\n            onParse: (value: any) => void\n            onDone: () => void\n            onError: (error: any) => void\n          } = {\n            onParse: (value) => {\n              nonStreamingBody = value\n            },\n            onDone: () => {\n              done = true\n            },\n            onError: (error) => {\n              throw error\n            },\n          }\n          toCrossJSONStream(res, {\n            refs: new Map(),\n            plugins,\n            onParse(value) {\n              callbacks.onParse(value)\n            },\n            onDone() {\n              callbacks.onDone()\n            },\n            onError: (error) => {\n              callbacks.onError(error)\n            },\n          })\n\n          // End of initial synchronous phase - any new RawStreams are \"late\"\n          initialPhase = false\n\n          // If any RawStreams are discovered after this point but before the\n          // late-stream writer exists, we buffer them and flush once the writer\n          // is ready. This avoids an occasional missed-stream race.\n\n          // If no raw streams and done synchronously, return simple JSON\n          if (done && rawStreams.size === 0) {\n            return new Response(\n              nonStreamingBody ? JSON.stringify(nonStreamingBody) : undefined,\n              {\n                status: alsResponse.status,\n                statusText: alsResponse.statusText,\n                headers: {\n                  'Content-Type': 'application/json',\n                  [X_TSS_SERIALIZED]: 'true',\n                },\n              },\n            )\n          }\n\n          // Not done synchronously or has raw streams - use framed protocol\n          // This supports late RawStreams from resolved Promises\n          const { readable, writable } =\n            new TransformStream<LateStreamRegistration>()\n          lateStreamReadable = readable\n          lateStreamWriter = writable.getWriter()\n\n          // Flush any late streams that were discovered in the small window\n          // between end of initial serialization and writer setup.\n          for (const registration of pendingLateStreams) {\n            lateStreamWriter.write(registration).catch(() => {\n              // Ignore write errors - stream may be closed\n            })\n          }\n          pendingLateStreams.length = 0\n\n          // Create a stream of JSON chunks\n          const jsonStream = new ReadableStream<string>({\n            start(controller) {\n              callbacks.onParse = (value) => {\n                controller.enqueue(JSON.stringify(value) + '\\n')\n              }\n              callbacks.onDone = () => {\n                try {\n                  controller.close()\n                } catch {\n                  // Already closed\n                }\n                // Close late stream writer when JSON serialization is done\n                // Any RawStreams not yet discovered won't be sent\n                lateStreamWriter\n                  ?.close()\n                  .catch(() => {\n                    // Ignore close errors\n                  })\n                  .finally(() => {\n                    lateStreamWriter = undefined\n                  })\n              }\n\n              callbacks.onError = (error) => {\n                controller.error(error)\n                lateStreamWriter\n                  ?.abort(error)\n                  .catch(() => {\n                    // Ignore abort errors\n                  })\n                  .finally(() => {\n                    lateStreamWriter = undefined\n                  })\n              }\n\n              // Emit initial body if we have one\n              if (nonStreamingBody !== undefined) {\n                callbacks.onParse(nonStreamingBody)\n              }\n              // If serialization already completed synchronously, close now\n              // This handles the case where onDone was called during toCrossJSONStream\n              // before we overwrote callbacks.onDone\n              if (done) {\n                callbacks.onDone()\n              }\n            },\n            cancel() {\n              lateStreamWriter?.abort().catch(() => {})\n              lateStreamWriter = undefined\n            },\n          })\n\n          // Create multiplexed stream with JSON, initial raw streams, and late streams\n          const multiplexedStream = createMultiplexedStream(\n            jsonStream,\n            rawStreams,\n            lateStreamReadable,\n          )\n\n          return new Response(multiplexedStream, {\n            status: alsResponse.status,\n            statusText: alsResponse.statusText,\n            headers: {\n              'Content-Type': TSS_CONTENT_TYPE_FRAMED_VERSIONED,\n              [X_TSS_SERIALIZED]: 'true',\n            },\n          })\n        }\n\n        return new Response(undefined, {\n          status: alsResponse.status,\n          statusText: alsResponse.statusText,\n        })\n      }\n    } catch (error: any) {\n      if (error instanceof Response) {\n        return error\n      }\n      // else if (\n      //   isPlainObject(error) &&\n      //   'result' in error &&\n      //   error.result instanceof Response\n      // ) {\n      //   return error.result\n      // }\n\n      // Currently this server-side context has no idea how to\n      // build final URLs, so we need to defer that to the client.\n      // The client will check for __redirect and __notFound keys,\n      // and if they exist, it will handle them appropriately.\n\n      if (isNotFound(error)) {\n        return isNotFoundResponse(error)\n      }\n\n      console.info()\n      console.info('Server Fn Error!')\n      console.info()\n      console.error(error)\n      console.info()\n\n      const serializedError = JSON.stringify(\n        await Promise.resolve(\n          toCrossJSONAsync(error, {\n            refs: new Map(),\n            plugins: serovalPlugins,\n          }),\n        ),\n      )\n      const response = getResponse()\n      return new Response(serializedError, {\n        status: response.status ?? 500,\n        statusText: response.statusText,\n        headers: {\n          'Content-Type': 'application/json',\n          [X_TSS_SERIALIZED]: 'true',\n        },\n      })\n    }\n  })()\n\n  return response\n}\n\nfunction isNotFoundResponse(error: any) {\n  const { headers, ...rest } = error\n\n  return new Response(JSON.stringify(rest), {\n    status: 404,\n    headers: {\n      'Content-Type': 'application/json',\n      ...(headers || {}),\n    },\n  })\n}\n"],"mappings":";;;;;;;AAwBA,IAAI,iBAA6D,KAAA;AAGjE,IAAM,0BAA0B,CAC9B,uBACA,oCACD;AAGD,IAAM,mBAAmB;AAEzB,IAAa,qBAAqB,OAAO,EACvC,SACA,SACA,iBAKI;CAEJ,MAAM,cADS,QAAQ,OACI,aAAa;CACxC,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;CAEhC,MAAM,SAAS,MAAM,gBAAgB,YAAY,EAAE,QAAQ,UAAU,CAAC;AAItE,KAAI,OAAO,UAAU,gBAAgB,OAAO,OAC1C,QAAO,IAAI,SACT,YAAY,OAAO,OAAO,eAAe,eACzC;EACE,QAAQ;EACR,SAAS,EACP,OAAO,OAAO,QACf;EACF,CACF;CAGH,MAAM,aAAa,QAAQ,QAAQ,IAAI,iBAAiB,KAAK;AAG7D,KAAI,CAAC,eACH,kBAAiB,0BAA0B;CAG7C,MAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;CAEvD,SAAS,aAAa,SAAc;AAElC,SADsB,SAAS,SAAS,EAAE,SAAS,gBAAgB,CAAC;;AAuVtE,QAnViB,OAAO,YAAY;AAClC,MAAI;GACF,IAAI,MAAM,OAAO,YAAY;AAE3B,QACE,wBAAwB,MACrB,SAAS,eAAe,YAAY,SAAS,KAAK,CACpD,EACD;AAEA,SAAI,gBAAgB,OAAO;AACzB,UAAA,QAAA,IAAA,aAA6B,aAC3B,OAAM,IAAI,MACR,0EACD;AAGH,iBAAW;;KAEb,MAAM,WAAW,MAAM,QAAQ,UAAU;KACzC,MAAM,oBAAoB,SAAS,IAAI,qBAAqB;AAC5D,cAAS,OAAO,qBAAqB;KAErC,MAAM,SAAS;MACb;MACA,MAAM;MACN,QAAQ;MACT;AACD,SAAI,OAAO,sBAAsB,SAC/B,KAAI;MAEF,MAAM,sBAAsB,SADN,KAAK,MAAM,kBAAkB,EACC,EAClD,SAAS,gBACV,CAAC;AACF,UACE,OAAO,wBAAwB,YAC/B,oBAEA,QAAO,UAAU,gBACf,qBACA,QACD;cAEI,GAAG;AAEV,UAAA,QAAA,IAAA,aAA6B,cAC3B,SAAQ,KAAK,qCAAqC,EAAE;;AAK1D,YAAO,MAAM,OAAO,OAAO;;AAI7B,QAAI,gBAAgB,OAAO;KAEzB,MAAM,eAAe,IAAI,aAAa,IAAI,UAAU;AAEpD,SAAI,gBAAgB,aAAa,SAAS,iBACxC,OAAM,IAAI,MAAM,oBAAoB;KAGtC,MAAM,UAAe,eACjB,aAAa,KAAK,MAAM,aAAa,CAAC,GACtC,EAAE;AACN,aAAQ,UAAU,gBAAgB,QAAQ,SAAS,QAAQ;AAC3D,aAAQ,SAAS;AAEjB,YAAO,MAAM,OAAO,QAAQ;;IAG9B,IAAI;AACJ,QAAI,aAAa,SAAS,mBAAmB,CAC3C,eAAc,MAAM,QAAQ,MAAM;IAGpC,MAAM,UAAU,cAAc,aAAa,YAAY,GAAG,EAAE;AAC5D,YAAQ,UAAU,gBAAgB,QAAQ,SAAS,QAAQ;AAC3D,YAAQ,SAAS;AACjB,WAAO,MAAM,OAAO,QAAQ;OAC1B;GAEJ,MAAM,YAAY,IAAI,UAAU,IAAI;AAEpC,OAAI,WAAW,IAAI,CACjB,OAAM,mBAAmB,IAAI;AAG/B,OAAI,CAAC,WACH,QAAO;AAGT,OAAI,qBAAqB,UAAU;AACjC,QAAI,WAAW,UAAU,CACvB,QAAO;AAET,cAAU,QAAQ,IAAI,oBAAoB,OAAO;AACjD,WAAO;;AAGT,UAAO,gBAAgB,IAAI;GAE3B,SAAS,gBAAgB,KAAwB;IAC/C,IAAI,mBAAwB,KAAA;IAE5B,MAAM,cAAc,aAAa;AACjC,QAAI,QAAQ,KAAA,GAAW;KAErB,MAAM,6BAAa,IAAI,KAAyC;KAIhE,IAAI,eAAe;KAInB,IAAI;KAGJ,IAAI,qBAEY,KAAA;KAChB,MAAM,qBAAoD,EAAE;KAuB5D,MAAM,UAAU,CArBQ,0BACrB,IAAY,WAAuC;AAClD,UAAI,cAAc;AAChB,kBAAW,IAAI,IAAI,OAAO;AAC1B;;AAGF,UAAI,kBAAkB;AAEpB,wBAAiB,MAAM;QAAE;QAAI;QAAQ,CAAC,CAAC,YAAY,GAEjD;AACF;;AAIF,yBAAmB,KAAK;OAAE;OAAI;OAAQ,CAAC;OAE1C,EAGiC,GAAI,kBAAkB,EAAE,CAAE;KAG5D,IAAI,OAAO;KACX,MAAM,YAIF;MACF,UAAU,UAAU;AAClB,0BAAmB;;MAErB,cAAc;AACZ,cAAO;;MAET,UAAU,UAAU;AAClB,aAAM;;MAET;AACD,uBAAkB,KAAK;MACrB,sBAAM,IAAI,KAAK;MACf;MACA,QAAQ,OAAO;AACb,iBAAU,QAAQ,MAAM;;MAE1B,SAAS;AACP,iBAAU,QAAQ;;MAEpB,UAAU,UAAU;AAClB,iBAAU,QAAQ,MAAM;;MAE3B,CAAC;AAGF,oBAAe;AAOf,SAAI,QAAQ,WAAW,SAAS,EAC9B,QAAO,IAAI,SACT,mBAAmB,KAAK,UAAU,iBAAiB,GAAG,KAAA,GACtD;MACE,QAAQ,YAAY;MACpB,YAAY,YAAY;MACxB,SAAS;OACP,gBAAgB;QACf,mBAAmB;OACrB;MACF,CACF;KAKH,MAAM,EAAE,UAAU,aAChB,IAAI,iBAAyC;AAC/C,0BAAqB;AACrB,wBAAmB,SAAS,WAAW;AAIvC,UAAK,MAAM,gBAAgB,mBACzB,kBAAiB,MAAM,aAAa,CAAC,YAAY,GAE/C;AAEJ,wBAAmB,SAAS;KAwD5B,MAAM,oBAAoB,wBArDP,IAAI,eAAuB;MAC5C,MAAM,YAAY;AAChB,iBAAU,WAAW,UAAU;AAC7B,mBAAW,QAAQ,KAAK,UAAU,MAAM,GAAG,KAAK;;AAElD,iBAAU,eAAe;AACvB,YAAI;AACF,oBAAW,OAAO;gBACZ;AAKR,0BACI,OAAO,CACR,YAAY,GAEX,CACD,cAAc;AACb,4BAAmB,KAAA;UACnB;;AAGN,iBAAU,WAAW,UAAU;AAC7B,mBAAW,MAAM,MAAM;AACvB,0BACI,MAAM,MAAM,CACb,YAAY,GAEX,CACD,cAAc;AACb,4BAAmB,KAAA;UACnB;;AAIN,WAAI,qBAAqB,KAAA,EACvB,WAAU,QAAQ,iBAAiB;AAKrC,WAAI,KACF,WAAU,QAAQ;;MAGtB,SAAS;AACP,yBAAkB,OAAO,CAAC,YAAY,GAAG;AACzC,0BAAmB,KAAA;;MAEtB,CAAC,EAKA,YACA,mBACD;AAED,YAAO,IAAI,SAAS,mBAAmB;MACrC,QAAQ,YAAY;MACpB,YAAY,YAAY;MACxB,SAAS;OACP,gBAAgB;QACf,mBAAmB;OACrB;MACF,CAAC;;AAGJ,WAAO,IAAI,SAAS,KAAA,GAAW;KAC7B,QAAQ,YAAY;KACpB,YAAY,YAAY;KACzB,CAAC;;WAEG,OAAY;AACnB,OAAI,iBAAiB,SACnB,QAAO;AAeT,OAAI,WAAW,MAAM,CACnB,QAAO,mBAAmB,MAAM;AAGlC,WAAQ,MAAM;AACd,WAAQ,KAAK,mBAAmB;AAChC,WAAQ,MAAM;AACd,WAAQ,MAAM,MAAM;AACpB,WAAQ,MAAM;GAEd,MAAM,kBAAkB,KAAK,UAC3B,MAAM,QAAQ,QACZ,iBAAiB,OAAO;IACtB,sBAAM,IAAI,KAAK;IACf,SAAS;IACV,CAAC,CACH,CACF;GACD,MAAM,WAAW,aAAa;AAC9B,UAAO,IAAI,SAAS,iBAAiB;IACnC,QAAQ,SAAS,UAAU;IAC3B,YAAY,SAAS;IACrB,SAAS;KACP,gBAAgB;MACf,mBAAmB;KACrB;IACF,CAAC;;KAEF;;AAKN,SAAS,mBAAmB,OAAY;CACtC,MAAM,EAAE,SAAS,GAAG,SAAS;AAE7B,QAAO,IAAI,SAAS,KAAK,UAAU,KAAK,EAAE;EACxC,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,GAAI,WAAW,EAAE;GAClB;EACF,CAAC"}
+{"version":3,"file":"server-functions-handler.js","names":[],"sources":["../../src/server-functions-handler.ts"],"sourcesContent":["import {\n  createRawStreamRPCPlugin,\n  invariant,\n  isNotFound,\n  isRedirect,\n} from '@tanstack/router-core'\nimport {\n  TSS_FORMDATA_CONTEXT,\n  X_TSS_RAW_RESPONSE,\n  X_TSS_SERIALIZED,\n  getDefaultSerovalPlugins,\n  safeObjectMerge,\n} from '@tanstack/start-client-core'\nimport { fromJSON, toCrossJSONAsync, toCrossJSONStream } from 'seroval'\nimport { getResponse } from './request-response'\nimport { getServerFnById } from './getServerFnById'\nimport {\n  TSS_CONTENT_TYPE_FRAMED_VERSIONED,\n  createMultiplexedStream,\n} from './frame-protocol'\nimport type { LateStreamRegistration } from './frame-protocol'\nimport type { Plugin as SerovalPlugin } from 'seroval'\n\n// Cache serovalPlugins at module level to avoid repeated calls\nlet serovalPlugins: Array<SerovalPlugin<any, any>> | undefined = undefined\n\n// Known FormData 'Content-Type' header values - module-level constant\nconst FORM_DATA_CONTENT_TYPES = [\n  'multipart/form-data',\n  'application/x-www-form-urlencoded',\n]\n\n// Maximum payload size for GET requests (1MB)\nconst MAX_PAYLOAD_SIZE = 1_000_000\n\nexport const handleServerAction = async ({\n  request,\n  context,\n  serverFnId,\n}: {\n  request: Request\n  context: any\n  serverFnId: string\n}) => {\n  const method = request.method\n  const methodUpper = method.toUpperCase()\n  const url = new URL(request.url)\n\n  const action = await getServerFnById(serverFnId, { origin: 'client' })\n\n  // Early method check: reject mismatched HTTP methods before parsing\n  // the request payload (FormData, JSON, query string, etc.)\n  if (action.method && methodUpper !== action.method) {\n    return new Response(\n      `expected ${action.method} method. Got ${methodUpper}`,\n      {\n        status: 405,\n        headers: {\n          Allow: action.method,\n        },\n      },\n    )\n  }\n\n  const isServerFn = request.headers.get('x-tsr-serverFn') === 'true'\n\n  // Initialize serovalPlugins lazily (cached at module level)\n  if (!serovalPlugins) {\n    serovalPlugins = getDefaultSerovalPlugins()\n  }\n\n  const contentType = request.headers.get('Content-Type')\n\n  function parsePayload(payload: any) {\n    const parsedPayload = fromJSON(payload, { plugins: serovalPlugins })\n    return parsedPayload as any\n  }\n\n  const response = await (async () => {\n    try {\n      let res = await (async () => {\n        // FormData\n        if (\n          FORM_DATA_CONTENT_TYPES.some(\n            (type) => contentType && contentType.includes(type),\n          )\n        ) {\n          // We don't support GET requests with FormData payloads... that seems impossible\n          if (methodUpper === 'GET') {\n            if (process.env.NODE_ENV !== 'production') {\n              throw new Error(\n                'Invariant failed: GET requests with FormData payloads are not supported',\n              )\n            }\n\n            invariant()\n          }\n          const formData = await request.formData()\n          const serializedContext = formData.get(TSS_FORMDATA_CONTEXT)\n          formData.delete(TSS_FORMDATA_CONTEXT)\n\n          const params = {\n            context,\n            data: formData,\n            method: methodUpper,\n          }\n          if (typeof serializedContext === 'string') {\n            try {\n              const parsedContext = JSON.parse(serializedContext)\n              const deserializedContext = fromJSON(parsedContext, {\n                plugins: serovalPlugins,\n              })\n              if (\n                typeof deserializedContext === 'object' &&\n                deserializedContext\n              ) {\n                params.context = safeObjectMerge(\n                  deserializedContext as Record<string, unknown>,\n                  context,\n                )\n              }\n            } catch (e) {\n              // Log warning for debugging but don't expose to client\n              if (process.env.NODE_ENV === 'development') {\n                console.warn('Failed to parse FormData context:', e)\n              }\n            }\n          }\n\n          return await action(params)\n        }\n\n        // Get requests use the query string\n        if (methodUpper === 'GET') {\n          // Get payload directly from searchParams\n          const payloadParam = url.searchParams.get('payload')\n          // Reject oversized payloads to prevent DoS\n          if (payloadParam && payloadParam.length > MAX_PAYLOAD_SIZE) {\n            throw new Error('Payload too large')\n          }\n          // If there's a payload, we should try to parse it\n          const payload: any = payloadParam\n            ? parsePayload(JSON.parse(payloadParam))\n            : {}\n          payload.context = safeObjectMerge(payload.context, context)\n          payload.method = methodUpper\n          // Send it through!\n          return await action(payload)\n        }\n\n        let jsonPayload\n        if (contentType?.includes('application/json')) {\n          jsonPayload = await request.json()\n        }\n\n        const payload = jsonPayload ? parsePayload(jsonPayload) : {}\n        payload.context = safeObjectMerge(payload.context, context)\n        payload.method = methodUpper\n        return await action(payload)\n      })()\n\n      const unwrapped = res.result || res.error\n\n      if (isNotFound(res)) {\n        res = isNotFoundResponse(res)\n      }\n\n      if (!isServerFn) {\n        return unwrapped\n      }\n\n      if (unwrapped instanceof Response) {\n        if (isRedirect(unwrapped)) {\n          return unwrapped\n        }\n        unwrapped.headers.set(X_TSS_RAW_RESPONSE, 'true')\n        return unwrapped\n      }\n\n      return serializeResult(res)\n\n      function serializeResult(res: unknown): Response {\n        let nonStreamingBody: any = undefined\n\n        const alsResponse = getResponse()\n        if (res !== undefined) {\n          // Collect raw streams encountered during initial synchronous serialization\n          const rawStreams = new Map<number, ReadableStream<Uint8Array>>()\n\n          // Track whether we're still in the initial synchronous phase\n          // After initial phase, new RawStreams go to lateStreamWriter\n          let initialPhase = true\n\n          // Late stream registration for RawStreams discovered after initial pass\n          // (e.g., from resolved Promises)\n          let lateStreamWriter:\n            | WritableStreamDefaultWriter<LateStreamRegistration>\n            | undefined\n          let lateStreamReadable:\n            | ReadableStream<LateStreamRegistration>\n            | undefined = undefined\n          const pendingLateStreams: Array<LateStreamRegistration> = []\n\n          const rawStreamPlugin = createRawStreamRPCPlugin(\n            (id: number, stream: ReadableStream<Uint8Array>) => {\n              if (initialPhase) {\n                rawStreams.set(id, stream)\n                return\n              }\n\n              if (lateStreamWriter) {\n                // Late stream - write to the late stream channel\n                lateStreamWriter.write({ id, stream }).catch(() => {\n                  // Ignore write errors - stream may be closed\n                })\n                return\n              }\n\n              // Discovered after initial phase but before writer exists.\n              pendingLateStreams.push({ id, stream })\n            },\n          )\n\n          // Build plugins with RawStreamRPCPlugin first (before default SSR plugin)\n          const plugins = [rawStreamPlugin, ...(serovalPlugins || [])]\n\n          // first run without the stream in case `result` does not need streaming\n          let done = false as boolean\n          const callbacks: {\n            onParse: (value: any) => void\n            onDone: () => void\n            onError: (error: any) => void\n          } = {\n            onParse: (value) => {\n              nonStreamingBody = value\n            },\n            onDone: () => {\n              done = true\n            },\n            onError: (error) => {\n              throw error\n            },\n          }\n          toCrossJSONStream(res, {\n            refs: new Map(),\n            plugins,\n            onParse(value) {\n              callbacks.onParse(value)\n            },\n            onDone() {\n              callbacks.onDone()\n            },\n            onError: (error) => {\n              callbacks.onError(error)\n            },\n          })\n\n          // End of initial synchronous phase - any new RawStreams are \"late\"\n          initialPhase = false\n\n          // If any RawStreams are discovered after this point but before the\n          // late-stream writer exists, we buffer them and flush once the writer\n          // is ready. This avoids an occasional missed-stream race.\n\n          // If no raw streams and done synchronously, return simple JSON\n          if (done && rawStreams.size === 0) {\n            return new Response(\n              nonStreamingBody ? JSON.stringify(nonStreamingBody) : undefined,\n              {\n                status: alsResponse.status,\n                statusText: alsResponse.statusText,\n                headers: {\n                  'Content-Type': 'application/json',\n                  [X_TSS_SERIALIZED]: 'true',\n                },\n              },\n            )\n          }\n\n          // Not done synchronously or has raw streams - use framed protocol\n          // This supports late RawStreams from resolved Promises\n          const { readable, writable } =\n            new TransformStream<LateStreamRegistration>()\n          lateStreamReadable = readable\n          lateStreamWriter = writable.getWriter()\n\n          // Flush any late streams that were discovered in the small window\n          // between end of initial serialization and writer setup.\n          for (const registration of pendingLateStreams) {\n            lateStreamWriter.write(registration).catch(() => {\n              // Ignore write errors - stream may be closed\n            })\n          }\n          pendingLateStreams.length = 0\n\n          // Create a stream of JSON chunks\n          const jsonStream = new ReadableStream<string>({\n            start(controller) {\n              callbacks.onParse = (value) => {\n                controller.enqueue(JSON.stringify(value) + '\\n')\n              }\n              callbacks.onDone = () => {\n                try {\n                  controller.close()\n                } catch {\n                  // Already closed\n                }\n                // Close late stream writer when JSON serialization is done\n                // Any RawStreams not yet discovered won't be sent\n                lateStreamWriter\n                  ?.close()\n                  .catch(() => {\n                    // Ignore close errors\n                  })\n                  .finally(() => {\n                    lateStreamWriter = undefined\n                  })\n              }\n\n              callbacks.onError = (error) => {\n                controller.error(error)\n                lateStreamWriter\n                  ?.abort(error)\n                  .catch(() => {\n                    // Ignore abort errors\n                  })\n                  .finally(() => {\n                    lateStreamWriter = undefined\n                  })\n              }\n\n              // Emit initial body if we have one\n              if (nonStreamingBody !== undefined) {\n                callbacks.onParse(nonStreamingBody)\n              }\n              // If serialization already completed synchronously, close now\n              // This handles the case where onDone was called during toCrossJSONStream\n              // before we overwrote callbacks.onDone\n              if (done) {\n                callbacks.onDone()\n              }\n            },\n            cancel() {\n              lateStreamWriter?.abort().catch(() => {})\n              lateStreamWriter = undefined\n            },\n          })\n\n          // Create multiplexed stream with JSON, initial raw streams, and late streams\n          const multiplexedStream = createMultiplexedStream(\n            jsonStream,\n            rawStreams,\n            lateStreamReadable,\n          )\n\n          return new Response(multiplexedStream, {\n            status: alsResponse.status,\n            statusText: alsResponse.statusText,\n            headers: {\n              'Content-Type': TSS_CONTENT_TYPE_FRAMED_VERSIONED,\n              [X_TSS_SERIALIZED]: 'true',\n            },\n          })\n        }\n\n        return new Response(undefined, {\n          status: alsResponse.status,\n          statusText: alsResponse.statusText,\n        })\n      }\n    } catch (error: any) {\n      if (error instanceof Response) {\n        return error\n      }\n      // else if (\n      //   isPlainObject(error) &&\n      //   'result' in error &&\n      //   error.result instanceof Response\n      // ) {\n      //   return error.result\n      // }\n\n      // Currently this server-side context has no idea how to\n      // build final URLs, so we need to defer that to the client.\n      // The client will check for __redirect and __notFound keys,\n      // and if they exist, it will handle them appropriately.\n\n      if (isNotFound(error)) {\n        return isNotFoundResponse(error)\n      }\n\n      console.info()\n      console.info('Server Fn Error!')\n      console.info()\n      console.error(error)\n      console.info()\n\n      const serializedError = JSON.stringify(\n        await Promise.resolve(\n          toCrossJSONAsync(error, {\n            refs: new Map(),\n            plugins: serovalPlugins,\n          }),\n        ),\n      )\n      const response = getResponse()\n      return new Response(serializedError, {\n        status: response.status ?? 500,\n        statusText: response.statusText,\n        headers: {\n          'Content-Type': 'application/json',\n          [X_TSS_SERIALIZED]: 'true',\n        },\n      })\n    }\n  })()\n\n  return response\n}\n\nfunction isNotFoundResponse(error: any) {\n  const { headers, ...rest } = error\n\n  return new Response(JSON.stringify(rest), {\n    status: 404,\n    headers: {\n      'Content-Type': 'application/json',\n      ...(headers || {}),\n    },\n  })\n}\n"],"mappings":";;;;;;;AAwBA,IAAI,iBAA6D,KAAA;AAGjE,IAAM,0BAA0B,CAC9B,uBACA,mCACF;AAGA,IAAM,mBAAmB;AAEzB,IAAa,qBAAqB,OAAO,EACvC,SACA,SACA,iBAKI;CAEJ,MAAM,cADS,QAAQ,OACI,YAAY;CACvC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;CAE/B,MAAM,SAAS,MAAM,gBAAgB,YAAY,EAAE,QAAQ,SAAS,CAAC;CAIrE,IAAI,OAAO,UAAU,gBAAgB,OAAO,QAC1C,OAAO,IAAI,SACT,YAAY,OAAO,OAAO,eAAe,eACzC;EACE,QAAQ;EACR,SAAS,EACP,OAAO,OAAO,OAChB;CACF,CACF;CAGF,MAAM,aAAa,QAAQ,QAAQ,IAAI,gBAAgB,MAAM;CAG7D,IAAI,CAAC,gBACH,iBAAiB,yBAAyB;CAG5C,MAAM,cAAc,QAAQ,QAAQ,IAAI,cAAc;CAEtD,SAAS,aAAa,SAAc;EAElC,OADsB,SAAS,SAAS,EAAE,SAAS,eAAe,CAC3D;CACT;CAqVA,OAAO,OAnViB,YAAY;EAClC,IAAI;GACF,IAAI,MAAM,OAAO,YAAY;IAE3B,IACE,wBAAwB,MACrB,SAAS,eAAe,YAAY,SAAS,IAAI,CACpD,GACA;KAEA,IAAI,gBAAgB,OAAO;MACzB,IAAA,QAAA,IAAA,aAA6B,cAC3B,MAAM,IAAI,MACR,yEACF;MAGF,UAAU;KACZ;KACA,MAAM,WAAW,MAAM,QAAQ,SAAS;KACxC,MAAM,oBAAoB,SAAS,IAAI,oBAAoB;KAC3D,SAAS,OAAO,oBAAoB;KAEpC,MAAM,SAAS;MACb;MACA,MAAM;MACN,QAAQ;KACV;KACA,IAAI,OAAO,sBAAsB,UAC/B,IAAI;MAEF,MAAM,sBAAsB,SADN,KAAK,MAAM,iBACI,GAAe,EAClD,SAAS,eACX,CAAC;MACD,IACE,OAAO,wBAAwB,YAC/B,qBAEA,OAAO,UAAU,gBACf,qBACA,OACF;KAEJ,SAAS,GAAG;MAEV,IAAA,QAAA,IAAA,aAA6B,eAC3B,QAAQ,KAAK,qCAAqC,CAAC;KAEvD;KAGF,OAAO,MAAM,OAAO,MAAM;IAC5B;IAGA,IAAI,gBAAgB,OAAO;KAEzB,MAAM,eAAe,IAAI,aAAa,IAAI,SAAS;KAEnD,IAAI,gBAAgB,aAAa,SAAS,kBACxC,MAAM,IAAI,MAAM,mBAAmB;KAGrC,MAAM,UAAe,eACjB,aAAa,KAAK,MAAM,YAAY,CAAC,IACrC,CAAC;KACL,QAAQ,UAAU,gBAAgB,QAAQ,SAAS,OAAO;KAC1D,QAAQ,SAAS;KAEjB,OAAO,MAAM,OAAO,OAAO;IAC7B;IAEA,IAAI;IACJ,IAAI,aAAa,SAAS,kBAAkB,GAC1C,cAAc,MAAM,QAAQ,KAAK;IAGnC,MAAM,UAAU,cAAc,aAAa,WAAW,IAAI,CAAC;IAC3D,QAAQ,UAAU,gBAAgB,QAAQ,SAAS,OAAO;IAC1D,QAAQ,SAAS;IACjB,OAAO,MAAM,OAAO,OAAO;GAC7B,GAAG;GAEH,MAAM,YAAY,IAAI,UAAU,IAAI;GAEpC,IAAI,WAAW,GAAG,GAChB,MAAM,mBAAmB,GAAG;GAG9B,IAAI,CAAC,YACH,OAAO;GAGT,IAAI,qBAAqB,UAAU;IACjC,IAAI,WAAW,SAAS,GACtB,OAAO;IAET,UAAU,QAAQ,IAAI,oBAAoB,MAAM;IAChD,OAAO;GACT;GAEA,OAAO,gBAAgB,GAAG;GAE1B,SAAS,gBAAgB,KAAwB;IAC/C,IAAI,mBAAwB,KAAA;IAE5B,MAAM,cAAc,YAAY;IAChC,IAAI,QAAQ,KAAA,GAAW;KAErB,MAAM,6BAAa,IAAI,IAAwC;KAI/D,IAAI,eAAe;KAInB,IAAI;KAGJ,IAAI,qBAEY,KAAA;KAChB,MAAM,qBAAoD,CAAC;KAuB3D,MAAM,UAAU,CArBQ,0BACrB,IAAY,WAAuC;MAClD,IAAI,cAAc;OAChB,WAAW,IAAI,IAAI,MAAM;OACzB;MACF;MAEA,IAAI,kBAAkB;OAEpB,iBAAiB,MAAM;QAAE;QAAI;OAAO,CAAC,EAAE,YAAY,CAEnD,CAAC;OACD;MACF;MAGA,mBAAmB,KAAK;OAAE;OAAI;MAAO,CAAC;KACxC,CAIe,GAAiB,GAAI,kBAAkB,CAAC,CAAE;KAG3D,IAAI,OAAO;KACX,MAAM,YAIF;MACF,UAAU,UAAU;OAClB,mBAAmB;MACrB;MACA,cAAc;OACZ,OAAO;MACT;MACA,UAAU,UAAU;OAClB,MAAM;MACR;KACF;KACA,kBAAkB,KAAK;MACrB,sBAAM,IAAI,IAAI;MACd;MACA,QAAQ,OAAO;OACb,UAAU,QAAQ,KAAK;MACzB;MACA,SAAS;OACP,UAAU,OAAO;MACnB;MACA,UAAU,UAAU;OAClB,UAAU,QAAQ,KAAK;MACzB;KACF,CAAC;KAGD,eAAe;KAOf,IAAI,QAAQ,WAAW,SAAS,GAC9B,OAAO,IAAI,SACT,mBAAmB,KAAK,UAAU,gBAAgB,IAAI,KAAA,GACtD;MACE,QAAQ,YAAY;MACpB,YAAY,YAAY;MACxB,SAAS;OACP,gBAAgB;QACf,mBAAmB;MACtB;KACF,CACF;KAKF,MAAM,EAAE,UAAU,aAChB,IAAI,gBAAwC;KAC9C,qBAAqB;KACrB,mBAAmB,SAAS,UAAU;KAItC,KAAK,MAAM,gBAAgB,oBACzB,iBAAiB,MAAM,YAAY,EAAE,YAAY,CAEjD,CAAC;KAEH,mBAAmB,SAAS;KAwD5B,MAAM,oBAAoB,wBACxB,IAtDqB,eAAuB;MAC5C,MAAM,YAAY;OAChB,UAAU,WAAW,UAAU;QAC7B,WAAW,QAAQ,KAAK,UAAU,KAAK,IAAI,IAAI;OACjD;OACA,UAAU,eAAe;QACvB,IAAI;SACF,WAAW,MAAM;QACnB,QAAQ,CAER;QAGA,kBACI,MAAM,EACP,YAAY,CAEb,CAAC,EACA,cAAc;SACb,mBAAmB,KAAA;QACrB,CAAC;OACL;OAEA,UAAU,WAAW,UAAU;QAC7B,WAAW,MAAM,KAAK;QACtB,kBACI,MAAM,KAAK,EACZ,YAAY,CAEb,CAAC,EACA,cAAc;SACb,mBAAmB,KAAA;QACrB,CAAC;OACL;OAGA,IAAI,qBAAqB,KAAA,GACvB,UAAU,QAAQ,gBAAgB;OAKpC,IAAI,MACF,UAAU,OAAO;MAErB;MACA,SAAS;OACP,kBAAkB,MAAM,EAAE,YAAY,CAAC,CAAC;OACxC,mBAAmB,KAAA;MACrB;KACF,CAIE,GACA,YACA,kBACF;KAEA,OAAO,IAAI,SAAS,mBAAmB;MACrC,QAAQ,YAAY;MACpB,YAAY,YAAY;MACxB,SAAS;OACP,gBAAgB;QACf,mBAAmB;MACtB;KACF,CAAC;IACH;IAEA,OAAO,IAAI,SAAS,KAAA,GAAW;KAC7B,QAAQ,YAAY;KACpB,YAAY,YAAY;IAC1B,CAAC;GACH;EACF,SAAS,OAAY;GACnB,IAAI,iBAAiB,UACnB,OAAO;GAeT,IAAI,WAAW,KAAK,GAClB,OAAO,mBAAmB,KAAK;GAGjC,QAAQ,KAAK;GACb,QAAQ,KAAK,kBAAkB;GAC/B,QAAQ,KAAK;GACb,QAAQ,MAAM,KAAK;GACnB,QAAQ,KAAK;GAEb,MAAM,kBAAkB,KAAK,UAC3B,MAAM,QAAQ,QACZ,iBAAiB,OAAO;IACtB,sBAAM,IAAI,IAAI;IACd,SAAS;GACX,CAAC,CACH,CACF;GACA,MAAM,WAAW,YAAY;GAC7B,OAAO,IAAI,SAAS,iBAAiB;IACnC,QAAQ,SAAS,UAAU;IAC3B,YAAY,SAAS;IACrB,SAAS;KACP,gBAAgB;MACf,mBAAmB;IACtB;GACF,CAAC;EACH;CACF,GAAG;AAGL;AAEA,SAAS,mBAAmB,OAAY;CACtC,MAAM,EAAE,SAAS,GAAG,SAAS;CAE7B,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;EACxC,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,GAAI,WAAW,CAAC;EAClB;CACF,CAAC;AACH"}

package/dist/esm/transformAssetUrls.d.ts

@@ -1,21 +1,18 @@
-import { AssetCrossOrigin, Awaitable, Manifest, RouterManagedTag } from '@tanstack/router-core';
+import { AssetCrossOrigin, Awaitable, ManifestScript, ScriptFormat, ServerManifest } from '@tanstack/router-core';
 export type { AssetCrossOrigin };
 export type TransformAssetsContext = {
     url: string;
-    kind: 'modulepreload';
+    kind: 'script';
 } | {
     url: string;
     kind: 'stylesheet';
-} | {
-    url: string;
-    kind: 'clientEntry';
 } | {
     url: string;
     kind: 'css-url';
     stylesheetHref: string;
 };
 export type TransformAssetKind = TransformAssetsContext['kind'];
-type TransformAssetsShorthandCrossOriginKind = Exclude<TransformAssetKind, 'clientEntry' | 'css-url'>;
+type TransformAssetsShorthandCrossOriginKind = Exclude<TransformAssetKind, 'css-url'>;
 export type TransformAssetResult = string | {
     href: string;
     crossOrigin?: AssetCrossOrigin;
@@ -77,7 +74,7 @@ export type TransformAssetsOptions = (TransformAssetsOptionsBase & {
  * crossOrigin: 'anonymous'
  *
  * // Different values per kind
- * crossOrigin: { modulepreload: 'anonymous', stylesheet: 'use-credentials' }
+ * crossOrigin: { script: 'anonymous', stylesheet: 'use-credentials' }
  * ```
  */
 export type TransformAssetsCrossOriginConfig = AssetCrossOrigin | Partial<Record<TransformAssetsShorthandCrossOriginKind, AssetCrossOrigin>>;
@@ -96,7 +93,7 @@ export interface TransformAssetsObjectShorthand {
     /** URL prefix prepended to every asset URL. */
     prefix: string;
     /**
-     * Optional crossOrigin attribute applied to manifest-managed `<link>` assets.
+     * Optional crossOrigin attribute applied to transformed script and stylesheet assets.
      *
      * Accepts a single value or a per-kind record.
      */
@@ -114,26 +111,24 @@ export type ResolvedTransformAssetsConfig = {
 };
 export declare function resolveTransformAssetsConfig(transform: TransformAssets): ResolvedTransformAssetsConfig;
 export interface StartManifestWithClientEntry {
-    manifest: Manifest;
+    manifest: ServerManifest;
     clientEntry: string;
-    /** Script content prepended before the client entry import (dev only) */
-    injectedHeadScripts?: string;
 }
 /**
  * Builds the client entry `<script>` tag from a (possibly transformed) client
- * entry URL and optional injected head scripts.
+ * entry URL.
  */
-export declare function buildClientEntryScriptTag(clientEntry: string, injectedHeadScripts?: string): RouterManagedTag;
+export declare function buildClientEntryScriptTag(clientEntry: string, scriptFormat?: ScriptFormat, crossOrigin?: AssetCrossOrigin): ManifestScript;
 export declare function transformManifestAssets(source: StartManifestWithClientEntry, transformFn: TransformAssetsFn, _opts?: {
     clone?: boolean;
     inlineCss?: boolean;
-}): Promise<Manifest>;
+}): Promise<ServerManifest>;
 /**
- * Builds a final Manifest from a StartManifestWithClientEntry without any
+ * Builds a final ServerManifest from a StartManifestWithClientEntry without any
  * URL transforms. Used when no transformAssets option is provided.
  *
  * Returns a new manifest object so the cached base manifest is never mutated.
  */
 export declare function buildManifestWithClientEntry(source: StartManifestWithClientEntry, opts?: {
     inlineCss?: boolean;
-}): Manifest;
+}): ServerManifest;

package/dist/esm/transformAssetUrls.js

@@ -1,4 +1,4 @@
-import { resolveManifestAssetLink, rootRouteId } from "@tanstack/router-core";
+import { getManifestScriptFormat, resolveManifestAssetLink, resolveManifestCssLink } from "@tanstack/router-core";
 //#region src/transformAssetUrls.ts
 function normalizeTransformAssetResult(result) {
 	if (typeof result === "string") return { href: result };
@@ -65,7 +65,7 @@ function resolveTransformAssetsConfig(transform) {
 			type: "transform",
 			transformFn: ({ url, kind }) => {
 				const href = `${prefix}${url}`;
-				if (kind === "clientEntry" || kind === "css-url") return { href };
+				if (kind === "css-url") return { href };
 				const co = resolveTransformAssetsCrossOrigin(crossOrigin, kind);
 				return co ? {
 					href,
@@ -88,82 +88,109 @@ function resolveTransformAssetsConfig(transform) {
 }
 /**
 * Builds the client entry `<script>` tag from a (possibly transformed) client
-* entry URL and optional injected head scripts.
+* entry URL.
 */
-function buildClientEntryScriptTag(clientEntry, injectedHeadScripts) {
-	let script = `import(${JSON.stringify(clientEntry)})`;
-	if (injectedHeadScripts) script = `${injectedHeadScripts};${script}`;
-	return {
-		tag: "script",
-		attrs: {
-			type: "module",
-			async: true
-		},
-		children: script
-	};
+function buildClientEntryScriptTag(clientEntry, scriptFormat = "module", crossOrigin) {
+	return { attrs: {
+		...scriptFormat === "module" ? { type: "module" } : {},
+		async: true,
+		src: clientEntry,
+		...crossOrigin ? { crossOrigin } : {}
+	} };
 }
-function assignManifestAssetLink(link, next) {
+function assignManifestLink(link, next) {
 	if (typeof link === "string") return next.crossOrigin ? next : next.href;
-	return next.crossOrigin ? next : { href: next.href };
+	const nextLink = {
+		...link,
+		href: next.href
+	};
+	if (next.crossOrigin) nextLink.crossOrigin = next.crossOrigin;
+	else delete nextLink.crossOrigin;
+	return nextLink;
+}
+function appendUniqueManifestAssetLink(target, link) {
+	const href = typeof link === "string" ? link : link.href;
+	if (target) {
+		for (const item of target) if ((typeof item === "string" ? item : item.href) === href) return target;
+	}
+	return [...target ?? [], link];
+}
+function addClientEntryToManifest(manifest, clientEntry) {
+	const rootRoute = manifest.routes.__root__ ?? {};
+	const rootScripts = rootRoute.scripts ?? [];
+	const scripts = rootScripts.some((script) => script.attrs?.src === clientEntry) ? rootScripts : [...rootScripts, buildClientEntryScriptTag(clientEntry, getManifestScriptFormat(manifest))];
+	manifest.routes = {
+		...manifest.routes,
+		__root__: {
+			...rootRoute,
+			preloads: appendUniqueManifestAssetLink(rootRoute.preloads, clientEntry),
+			scripts
+		}
+	};
 }
 async function transformManifestAssets(source, transformFn, _opts) {
 	const manifest = structuredClone(source.manifest);
-	if (!(_opts?.inlineCss !== false)) delete manifest.inlineCss;
+	const inlineCssEnabled = _opts?.inlineCss !== false;
+	const scriptTransforms = /* @__PURE__ */ new Map();
+	const transformScript = (url) => {
+		const cached = scriptTransforms.get(url);
+		if (cached) return cached;
+		const transformed = Promise.resolve(transformFn({
+			url,
+			kind: "script"
+		})).then(normalizeTransformAssetResult);
+		scriptTransforms.set(url, transformed);
+		return transformed;
+	};
+	if (!inlineCssEnabled) delete manifest.inlineCss;
 	else if (manifest.inlineCss) manifest.inlineCss = await transformInlineCssStyles(manifest.inlineCss, transformFn);
+	addClientEntryToManifest(manifest, source.clientEntry);
 	for (const route of Object.values(manifest.routes)) {
-		if (route.preloads) route.preloads = await Promise.all(route.preloads.map(async (link) => {
+		if (route.preloads?.length) route.preloads = await Promise.all(route.preloads.map(async (link) => {
+			const result = await transformScript(resolveManifestAssetLink(link).href);
+			return assignManifestLink(link, {
+				href: result.href,
+				crossOrigin: result.crossOrigin
+			});
+		}));
+		if (route.css?.length && !manifest.inlineCss) route.css = await Promise.all(route.css.map(async (link) => {
 			const result = normalizeTransformAssetResult(await transformFn({
-				url: resolveManifestAssetLink(link).href,
-				kind: "modulepreload"
+				url: resolveManifestCssLink(link).href,
+				kind: "stylesheet"
 			}));
-			return assignManifestAssetLink(link, {
+			return assignManifestLink(link, {
 				href: result.href,
 				crossOrigin: result.crossOrigin
 			});
 		}));
-		if (route.assets && !manifest.inlineCss) {
-			for (const asset of route.assets) if (asset.tag === "link" && asset.attrs?.href) {
-				const rel = asset.attrs.rel;
-				if (!(typeof rel === "string" ? rel.split(/\s+/) : []).includes("stylesheet")) continue;
-				const result = normalizeTransformAssetResult(await transformFn({
-					url: asset.attrs.href,
-					kind: "stylesheet"
-				}));
-				asset.attrs.href = result.href;
-				if (result.crossOrigin) asset.attrs.crossOrigin = result.crossOrigin;
-				else delete asset.attrs.crossOrigin;
-			}
+		if (route.scripts?.length) for (const script of route.scripts) {
+			const src = script.attrs?.src;
+			if (typeof src !== "string") continue;
+			const result = await transformScript(src);
+			script.attrs = {
+				...script.attrs,
+				src: result.href
+			};
+			if (result.crossOrigin) script.attrs.crossOrigin = result.crossOrigin;
+			else delete script.attrs.crossOrigin;
 		}
 	}
-	const transformedClientEntry = normalizeTransformAssetResult(await transformFn({
-		url: source.clientEntry,
-		kind: "clientEntry"
-	}));
-	const rootRoute = manifest.routes[rootRouteId] = manifest.routes[rootRouteId] || {};
-	rootRoute.assets = rootRoute.assets || [];
-	rootRoute.assets.push(buildClientEntryScriptTag(transformedClientEntry.href, source.injectedHeadScripts));
 	return manifest;
 }
 /**
-* Builds a final Manifest from a StartManifestWithClientEntry without any
+* Builds a final ServerManifest from a StartManifestWithClientEntry without any
 * URL transforms. Used when no transformAssets option is provided.
 *
 * Returns a new manifest object so the cached base manifest is never mutated.
 */
 function buildManifestWithClientEntry(source, opts) {
-	const scriptTag = buildClientEntryScriptTag(source.clientEntry, source.injectedHeadScripts);
-	const baseRootRoute = source.manifest.routes[rootRouteId];
-	const routes = {
-		...source.manifest.routes,
-		[rootRouteId]: {
-			...baseRootRoute,
-			assets: [...baseRootRoute?.assets || [], scriptTag]
-		}
-	};
-	return {
-		...opts?.inlineCss === false ? {} : { inlineCss: structuredClone(source.manifest.inlineCss) },
-		routes
+	const manifest = {
+		...source.manifest.scriptFormat ? { scriptFormat: source.manifest.scriptFormat } : {},
+		...opts?.inlineCss !== false && source.manifest.inlineCss ? { inlineCss: structuredClone(source.manifest.inlineCss) } : {},
+		routes: { ...source.manifest.routes }
 	};
+	addClientEntryToManifest(manifest, source.clientEntry);
+	return manifest;
 }
 //#endregion
 export { buildManifestWithClientEntry, resolveTransformAssetsConfig, transformManifestAssets };