@timber-js/app 0.2.0-alpha.192 → 0.2.0-alpha.195

package/src/server/slot-resolver.ts

@@ -16,26 +16,26 @@
  * See design/02-rendering-pipeline.md §"Parallel Slots"
  */
 
-import { TimberErrorBoundary } from '../client/error-boundary.js';
-import SlotErrorFallback from '../client/slot-error-fallback.js';
-import { SlotAccessGate } from './access-gate.js';
-import { wrapSegmentWithErrorBoundaries } from './error-boundary-wrapper.js';
-import { isClientReference } from './route-element-builder.js';
-import { loadModule } from './safe-load.js';
-import type { InterceptionContext, RouteMatch } from './pipeline.js';
-import { DenySignal, RedirectSignal } from './primitives.js';
-import { logRenderError } from './logger.js';
-import type { ManifestSegmentNode } from './route-matcher.js';
-import { setSlotParams, runWithSlotSegmentParams } from './request-context.js';
-import { coerceSlotParams } from './param-coercion.js';
-import type { CoercedParams } from '../shared/param-value.js';
-import { matchUrlParts } from './tree-match.js';
-import { extractUrlParts, consumedPartsThroughSegment } from './chain-url-parts.js';
-import { findInterceptingMatch } from './slot-interception.js';
-import { SegmentOutlet } from '../client/segment-outlet.js';
-import { shouldSkipSlot, type ClientStateTree } from './state-tree-diff.js';
-import { computeSlotKey, computeSlotContentKey } from '../routing/segment-keys.js';
-import { isStaticRequestDependent } from './request-dep.js';
+import { TimberErrorBoundary } from '../client/error-boundary.tsx';
+import SlotErrorFallback from '../client/slot-error-fallback.tsx';
+import { SlotAccessGate } from './access-gate.tsx';
+import { wrapSegmentWithErrorBoundaries } from './error-boundary-wrapper.ts';
+import { isClientReference } from './route-element-builder.ts';
+import { loadModule } from './safe-load.ts';
+import type { InterceptionContext, RouteMatch } from './pipeline.ts';
+import { DenySignal, RedirectSignal } from './primitives.ts';
+import { logRenderError } from './logger.ts';
+import type { ManifestSegmentNode } from './route-matcher.ts';
+import { setSlotParams, runWithSlotSegmentParams } from './request-context.ts';
+import { coerceSlotParams } from './param-coercion.ts';
+import type { CoercedParams } from '../shared/param-value.ts';
+import { matchUrlParts } from './tree-match.ts';
+import { extractUrlParts, consumedPartsThroughSegment } from './chain-url-parts.ts';
+import { findInterceptingMatch } from './slot-interception.ts';
+import { SegmentOutlet } from '../client/segment-outlet.tsx';
+import { shouldSkipSlot, type ClientStateTree } from './state-tree-diff.ts';
+import { computeSlotKey, computeSlotContentKey } from '../routing/segment-keys.ts';
+import { isStaticRequestDependent } from './request-dep.ts';
 
 type CreateElementFn = (...args: unknown[]) => React.ReactElement;
 
@@ -428,10 +428,6 @@ export interface SlotMatchResult {
  * pathname at the same point and already used `indexOf(owner)`. Two derivations
  * of one index is how they came apart; this is the shared one.
  *
- * The `urlPath` search survives only as a fallback for a `slotNode` that is not
- * attached to any segment in the chain. Production never does that —
- * `resolveSlotProps` iterates `segment.slots` — but unit tests construct a slot
- * node standalone, and for those the old behaviour is still the right answer.
  */
 export function findSlotOwnerIndex(
   slotNode: ManifestSegmentNode,
@@ -443,10 +439,6 @@ export function findSlotOwnerIndex(
     }
   }
 
-  for (let i = segments.length - 1; i >= 0; i--) {
-    if (segments[i].urlPath === slotNode.urlPath) return i;
-  }
-
   return -1;
 }
 

package/src/server/ssr-bridge-types.ts

@@ -29,8 +29,8 @@
  * and `CLAUDE.md` §"RSC and SSR Are Separate Vite Environments".
  */
 
-import type { CoercedParams } from '../shared/param-value.js';
-import type { SlotParamsRecord } from '../shared/slot-params.js';
+import type { CoercedParams } from '../shared/param-value.ts';
+import type { SlotParamsRecord } from '../shared/slot-params.ts';
 
 /**
  * Navigation context passed from the RSC environment to SSR.

package/src/server/ssr-entry.ts

@@ -18,13 +18,13 @@ import config from 'virtual:timber-config';
 // use codec.serialize() instead of String() fallback for URL interpolation.
 // @ts-expect-error — virtual module provided by timber-routing plugin
 import schemaCodecs from 'virtual:timber-schema';
-import { setLinkCodecs } from '../params/codec-registry.js';
+import { setLinkCodecs } from '../params/codec-registry.ts';
 setLinkCodecs(schemaCodecs);
 import {
   createFromReadableStream,
   createFromNodeStream,
   hasNodeStreamDecode,
-} from '../rsc-runtime/ssr.js';
+} from '../rsc-runtime/ssr.ts';
 import { AsyncLocalStorage } from 'node:async_hooks';
 
 import {
@@ -33,26 +33,26 @@ import {
   nodeReadableToWeb,
   useNodeStreams,
   buildSsrResponse,
-} from './ssr-render.js';
-import { logRenderError } from './logger.js';
-import { SsrStreamError } from './primitives.js';
-import { createBufferedTransformStream, injectHead, injectRscPayload } from './html-injectors.js';
-import { wrapSsrElement } from './ssr-wrappers.js';
-import { withSpan } from './tracing.js';
-import { setCurrentParams } from '../client/use-segment-params.js';
-import { registerSsrDataProvider, type SsrData } from '../client/ssr-data.js';
-import { readPayloadTree } from '../shared/payload-root.js';
-import type { NavContext } from './ssr-bridge-types.js';
+} from './ssr-render.ts';
+import { logRenderError } from './logger.ts';
+import { SsrStreamError } from './primitives.ts';
+import { createBufferedTransformStream, injectHead, injectRscPayload } from './html-injectors.ts';
+import { wrapSsrElement } from './ssr-wrappers.tsx';
+import { withSpan } from './tracing.ts';
+import { setCurrentParams } from '../client/use-segment-params.ts';
+import { registerSsrDataProvider, type SsrData } from '../client/ssr-data.ts';
+import { readPayloadTree } from '../shared/payload-root.ts';
+import type { NavContext } from './ssr-bridge-types.ts';
 
 // Pre-import Node.js stream modules at module load time — not per-request.
 // Dynamic imports of node-stream-transforms and node:stream/promises were
 // costing 3-17ms per request due to module resolution overhead.
 let _nodeStreamImports: {
-  createNodeBufferedTransform: typeof import('./node-stream-transforms.js').createNodeBufferedTransform;
-  createNodeHeadInjector: typeof import('./node-stream-transforms.js').createNodeHeadInjector;
-  createNodeMoveSuffixTransform: typeof import('./node-stream-transforms.js').createNodeMoveSuffixTransform;
-  createNodeFlightInjector: typeof import('./node-stream-transforms.js').createNodeFlightInjector;
-  runNodePipelineWithErrorHandling: typeof import('./node-stream-transforms.js').runNodePipelineWithErrorHandling;
+  createNodeBufferedTransform: typeof import('./node-stream-transforms.ts').createNodeBufferedTransform;
+  createNodeHeadInjector: typeof import('./node-stream-transforms.ts').createNodeHeadInjector;
+  createNodeMoveSuffixTransform: typeof import('./node-stream-transforms.ts').createNodeMoveSuffixTransform;
+  createNodeFlightInjector: typeof import('./node-stream-transforms.ts').createNodeFlightInjector;
+  runNodePipelineWithErrorHandling: typeof import('./node-stream-transforms.ts').runNodePipelineWithErrorHandling;
   ReadableFromWeb: (
     webStream: import('stream/web').ReadableStream
   ) => import('node:stream').Readable;
@@ -61,7 +61,7 @@ let _nodeStreamImports: {
 if (useNodeStreams) {
   try {
     const [transforms, stream] = await Promise.all([
-      import('./node-stream-transforms.js'),
+      import('./node-stream-transforms.ts'),
       import('node:stream'),
     ]);
     _nodeStreamImports = {

package/src/server/ssr-render.ts

@@ -23,9 +23,9 @@
 import type { ReactNode } from 'react';
 import { renderToReadableStream } from 'react-dom/server';
 
-import { createRenderTimeout, RenderTimeoutError } from './render-timeout.js';
-import { logRenderError, logStreamingError } from './logger.js';
-import { isAbortError, NOINDEX_SCRIPT } from './render-utils.js';
+import { createRenderTimeout, RenderTimeoutError } from './render-timeout.ts';
+import { logRenderError, logStreamingError } from './logger.ts';
+import { isAbortError, NOINDEX_SCRIPT } from './render-utils.ts';
 
 /**
  * React's production error sanitization message. When NODE_ENV=production,
@@ -312,7 +312,7 @@ async function renderViaReadableStream(
 
   // If a render timeout is configured, create a combined signal that
   // fires on either request abort OR timeout — whichever comes first.
-  let renderTimeout: import('./render-timeout.js').RenderTimeout | null = null;
+  let renderTimeout: import('./render-timeout.ts').RenderTimeout | null = null;
   let effectiveSignal = signal;
   if (timeoutMs && timeoutMs > 0) {
     renderTimeout = createRenderTimeout(timeoutMs, signal);

package/src/server/ssr-wrappers.tsx

@@ -33,7 +33,7 @@
  */
 
 import { createElement, Fragment, type ReactNode } from 'react';
-import { withNuqsSsrAdapter } from './nuqs-ssr-provider.js';
+import { withNuqsSsrAdapter } from './nuqs-ssr-provider.tsx';
 
 /**
  * SSR equivalent of NavigationRoot.

package/src/server/state-tree-diff.ts

@@ -14,7 +14,7 @@
  * See design/13-security.md §"State tree manipulation"
  */
 
-import { swallow } from './logger.js';
+import { swallow } from './logger.ts';
 
 // ─── State Tree Parsing ──────────────────────────────────────────
 

package/src/server/static-generator.ts

@@ -19,17 +19,17 @@
  * Design docs: design/11-platform.md §"static output mode"
  */
 
-import type { ManifestRoot, ManifestSegmentNode, ManifestFile } from './route-matcher.js';
-import { hasDynamicSegments, hasUserSitemap, resolvePathWithParams } from './sitemap-generator.js';
-import { loadModule } from './safe-load.js';
-import { METADATA_ROUTE_CONVENTIONS, resolveServePathForFile } from './metadata-routes.js';
-import { RSC_CONTENT_TYPE } from '../shared/rsc-media-type.js';
+import type { ManifestRoot, ManifestSegmentNode, ManifestFile } from './route-matcher.ts';
+import { hasDynamicSegments, hasUserSitemap, resolvePathWithParams } from './sitemap-generator.ts';
+import { loadModule } from './safe-load.ts';
+import { METADATA_ROUTE_CONVENTIONS, resolveServePathForFile } from './metadata-routes.ts';
+import { RSC_CONTENT_TYPE } from '../shared/rsc-media-type.ts';
 import {
   NOT_FOUND_ENTRY_PATH,
   NOT_FOUND_PROBE_PATH,
   resolveNotFoundPage,
   type NotFoundProbe,
-} from './static-not-found.js';
+} from './static-not-found.ts';
 
 // ─── Types ───────────────────────────────────────────────────────────────
 

package/src/server/static-not-found.ts

@@ -12,9 +12,9 @@
  * to a developer, and a wrong one sends them to the wrong file.
  */
 
-import { resolveStatusFile } from './status-code-resolver.js';
-import { DEFAULT_STATUS_PAGE_CONTENT_TYPE, defaultStatusPageHtml } from './default-status-page.js';
-import type { ManifestSegmentNode } from './route-matcher.js';
+import { resolveStatusFile } from './status-code-resolver.ts';
+import { DEFAULT_STATUS_PAGE_CONTENT_TYPE, defaultStatusPageHtml } from './default-status-page.ts';
+import type { ManifestSegmentNode } from './route-matcher.ts';
 
 /**
  * The probe path. `_timber/` is the framework's reserved prefix and

package/src/server/status-code-resolver.ts

@@ -31,7 +31,7 @@
  *   Then framework default (returns null)
  */
 
-import type { SegmentNode } from '../routing/types.js';
+import type { SegmentNode } from '../routing/types.ts';
 
 // ─── Types ───────────────────────────────────────────────────────────────────
 

package/src/server/tracing.ts

@@ -9,10 +9,10 @@
  */
 
 import { randomUUID } from 'node:crypto';
-import { traceAls, type TraceStore } from './als-registry.js';
+import { traceAls, type TraceStore } from './als-registry.ts';
 
 // Re-export the TraceStore type for public API consumers.
-export type { TraceStore } from './als-registry.js';
+export type { TraceStore } from './als-registry.ts';
 
 // ─── Public API ───────────────────────────────────────────────────────────
 
@@ -116,7 +116,7 @@ const DEV_TRACING_INIT_KEY = Symbol.for('timber.dev.tracing-initialized');
  * registers. Only called in dev mode — zero overhead in production.
  */
 export async function initDevTracing(
-  config: import('../dev-tools/logger.js').DevLoggerConfig
+  config: import('../dev-tools/logger.ts').DevLoggerConfig
 ): Promise<void> {
   const globals = globalThis as Record<symbol, unknown>;
   if (globals[DEV_TRACING_INIT_KEY]) return;
@@ -124,12 +124,12 @@ export async function initDevTracing(
   const api = await getOtelApi();
   if (!api) return;
 
-  let DevSpanProcessor: typeof import('../dev-tools/instrumentation.js').DevSpanProcessor;
+  let DevSpanProcessor: typeof import('../dev-tools/instrumentation.ts').DevSpanProcessor;
   let BasicTracerProvider: typeof import('@opentelemetry/sdk-trace-base').BasicTracerProvider;
   let AsyncLocalStorageContextManager: typeof import('@opentelemetry/context-async-hooks').AsyncLocalStorageContextManager;
 
   try {
-    ({ DevSpanProcessor } = await import('../dev-tools/instrumentation.js'));
+    ({ DevSpanProcessor } = await import('../dev-tools/instrumentation.ts'));
     ({ BasicTracerProvider } = await import('@opentelemetry/sdk-trace-base'));
     ({ AsyncLocalStorageContextManager } = await import('@opentelemetry/context-async-hooks'));
   } catch (err) {

package/src/server/tree-builder.ts

@@ -11,9 +11,9 @@
  */
 
 import type { ReactNode } from 'react';
-import type { RouteFile, SegmentNode } from '../routing/types.js';
-import { wrapSegmentWithErrorBoundaries } from './error-boundary-wrapper.js';
-import type { LoadedComponent } from './utils/element-type.js';
+import type { RouteFile, SegmentNode } from '../routing/types.ts';
+import { wrapSegmentWithErrorBoundaries } from './error-boundary-wrapper.ts';
+import type { LoadedComponent } from './utils/element-type.ts';
 
 // ─── Types ───────────────────────────────────────────────────────────────────
 
@@ -104,7 +104,7 @@ export interface AccessGateProps {
    * Omitted for skipped segments — a deny there must hard-navigate to
    * avoid rendering the deny page inside cached layout chrome (TIM-1074).
    */
-  denyPages?: import('./deny-boundary.js').DenyPageEntry[];
+  denyPages?: import('./deny-boundary.ts').DenyPageEntry[];
   /**
    * When true, this gate wraps a skipped segment. On deny, the gate
    * records the deny in ALS and rethrows so the response path can

package/src/server/tree-match.ts

@@ -15,7 +15,7 @@
  * See design/07-routing.md §"Request Lifecycle" and TIM-940.
  */
 
-import type { SegmentNode } from '../routing/types.js';
+import type { SegmentNode } from '../routing/types.ts';
 
 // ─── Public API ───────────────────────────────────────────────────────────
 

package/src/server/types.ts

@@ -1,7 +1,7 @@
 // Server-side type definitions
 
-import type { CoercedParams } from '../shared/param-value.js';
-import type { EarlyHint } from './early-hints.js';
+import type { CoercedParams } from '../shared/param-value.ts';
+import type { EarlyHint } from './early-hints.ts';
 
 /**
  * A value that is safe to pass through `JSON.stringify` without data loss.

package/src/server/utils/mdx-file.ts

@@ -9,8 +9,8 @@
  * See design/10-error-handling.md §"Status-Code File Variants".
  */
 
-/** MDX/markdown extensions — server components by default. */
-const MDX_EXTENSIONS = new Set(['.mdx', '.md']);
+/** MDX/markdown extensions (dotted) — the canonical list, also used by plugins/mdx.ts. */
+export const MDX_EXTENSIONS = new Set(['.mdx', '.md']);
 
 /**
  * Check if a file path ends with an MDX/markdown extension.

package/src/server/waituntil-bridge.ts

@@ -10,7 +10,7 @@
  * Design doc: design/11-platform.md §"waitUntil()"
  */
 
-import { waitUntilAls } from './als-registry.js';
+import { waitUntilAls } from './als-registry.ts';
 
 /**
  * Run a function with a per-request waitUntil handler installed.

package/src/server/workers-cache-bridge.ts

@@ -9,8 +9,8 @@
  * Design doc: design/06-caching.md, design/25-production-deployments.md
  */
 
-import { workersCachePurgeAls } from './als-registry.js';
-import type { WorkersCachePurgeCtx } from './als-registry.js';
+import { workersCachePurgeAls } from './als-registry.ts';
+import type { WorkersCachePurgeCtx } from './als-registry.ts';
 
 /**
  * Run a function with Workers Cache purge context available.

package/src/shared/als-slots.ts

@@ -31,7 +31,7 @@
  * design/41-global-params.md.
  */
 
-import type { CoercedParams } from './param-value.js';
+import type { CoercedParams } from './param-value.ts';
 
 interface AlsSlot<T> {
   /** Register the server-side getter. Called once at module-init time. */

package/src/shared/payload-root.ts

@@ -32,8 +32,8 @@
  * helpers here — producer and consumer do not each describe the payload.
  */
 
-import type { CoercedParams } from './param-value.js';
-import type { SlotParamsRecord } from './slot-params.js';
+import type { CoercedParams } from './param-value.ts';
+import type { SlotParamsRecord } from './slot-params.ts';
 
 /** The params published beside a tree. */
 export interface PublishedParams {

package/src/shared/rsc-media-type.ts

@@ -41,3 +41,19 @@ export const RSC_CONTENT_TYPE = 'text/x-component';
 export function isRscRequest(req: Request): boolean {
   return (req.headers.get('Accept') ?? '').includes(RSC_CONTENT_TYPE);
 }
+
+/**
+ * Does this Content-Type header value designate an RSC Flight payload?
+ *
+ * Case-insensitive exact media-type match per RFC 9110 §8.3.1 — media types
+ * are case-insensitive. Parameters (`;charset=utf-8`) are stripped before
+ * comparison.
+ *
+ * Contrast with `isRscRequest`, which uses substring containment because
+ * `Accept` is a list of types. A `Content-Type` header names exactly one
+ * type, so substring would over-match (e.g. `text/x-component-v2`).
+ */
+export function isRscContentType(contentType: string | null): boolean {
+  if (!contentType) return false;
+  return contentType.split(';')[0].trim().toLowerCase() === RSC_CONTENT_TYPE;
+}

package/src/shared/slot-params.ts

@@ -18,7 +18,7 @@
  * See design/41-global-params.md §"Params in a parallel slot".
  */
 
-import type { CoercedParams } from './param-value.js';
+import type { CoercedParams } from './param-value.ts';
 
 /** Slot tree path → that slot's own coerced params. */
 export type SlotParamsRecord = Record<string, CoercedParams>;

package/src/shims/font-google.ts

@@ -17,7 +17,7 @@
  * Design doc: 24-fonts.md, "Next.js Font Compatibility"
  */
 
-import type { GoogleFontConfig, FontResult } from '../fonts/types.js';
+import type { GoogleFontConfig, FontResult } from '../fonts/types.ts';
 
 export type { GoogleFontConfig, FontResult };
 

package/src/shims/font-local.ts

@@ -13,7 +13,7 @@
  * Design doc: 24-fonts.md, "Next.js Font Compatibility"
  */
 
-import type { LocalFontConfig, FontResult } from '../fonts/types.js';
+import type { LocalFontConfig, FontResult } from '../fonts/types.ts';
 
 export type { LocalFontConfig, FontResult };
 

package/src/shims/navigation-client.ts

@@ -23,13 +23,13 @@
  * See design/14-ecosystem.md §"next/navigation" for the full shim audit.
  */
 
-import { assertRelativeRedirectPath } from '../shared/href-validation.js';
-import type { RedirectTypeValue } from '../shared/redirect-type.js';
+import { assertRelativeRedirectPath } from '../shared/href-validation.ts';
+import type { RedirectTypeValue } from '../shared/redirect-type.ts';
 
 // Hooks — useSegmentParams and useSearchParams import from direct modules
 // since they're no longer in @timber-js/app/client public exports.
-export { useSegmentParams, useSegmentParams as useParams } from '../client/use-segment-params.js';
-export { useSearchParams } from '../client/use-search-params.js';
+export { useSegmentParams, useSegmentParams as useParams } from '../client/use-segment-params.ts';
+export { useSearchParams } from '../client/use-search-params.ts';
 export {
   usePathname,
   useRouter,
@@ -38,7 +38,7 @@ export {
 } from '@timber-js/app/client';
 
 // Single source of truth shared with server/primitives.ts.
-export { RedirectType } from '../shared/redirect-type.js';
+export { RedirectType } from '../shared/redirect-type.ts';
 
 /** Throw a plain Error carrying a framework signal digest. */
 function throwSignal(message: string, digest: Record<string, unknown>): never {

package/src/shims/navigation.ts

@@ -10,8 +10,8 @@
  */
 
 // Hooks re-exported for next/navigation compat
-export { useSegmentParams, useSegmentParams as useParams } from '../client/use-segment-params.js';
-export { useSearchParams } from '../client/use-search-params.js';
+export { useSegmentParams, useSegmentParams as useParams } from '../client/use-segment-params.ts';
+export { useSearchParams } from '../client/use-search-params.ts';
 export {
   usePathname,
   useRouter,

package/dist/_chunks/actions-BjbbNRFN.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"actions-BjbbNRFN.js","names":[],"sources":["../../src/server/form-data.ts","../../src/server/actions.ts"],"sourcesContent":["/**\n * FormData preprocessing — schema-agnostic conversion of FormData to typed objects.\n *\n * FormData is all strings. Schema validation expects typed values. This module\n * bridges the gap with intelligent coercion that runs *before* schema validation.\n *\n * Inspired by zod-form-data, but schema-agnostic — works with any Standard Schema\n * library (Zod, Valibot, ArkType).\n *\n * See design/08-forms-and-actions.md §\"parseFormData() and coerce helpers\"\n */\n\n// ─── parseFormData ───────────────────────────────────────────────────────\n\n/**\n * Convert FormData into a plain object with intelligent coercion.\n *\n * Handles:\n * - **Duplicate keys → arrays**: `tags=js&tags=ts` → `{ tags: [\"js\", \"ts\"] }`\n * - **Nested dot-paths**: `user.name=Alice` → `{ user: { name: \"Alice\" } }`\n * - **Empty strings → undefined**: Enables `.optional()` semantics in schemas\n * - **Empty Files → undefined**: File inputs with no selection become `undefined`\n * - **Strips `$ACTION_*` fields**: React's internal hidden fields are excluded\n */\nexport function parseFormData(formData: FormData): Record<string, unknown> {\n  const flat: Record<string, unknown> = {};\n\n  for (const key of new Set(formData.keys())) {\n    // Skip React internal fields\n    if (key.startsWith('$ACTION_')) continue;\n\n    // Skip prototype-pollution keys at the top level — assigning to\n    // `flat['__proto__']` invokes the prototype setter and can splice\n    // attacker-controlled data into `flat`'s prototype chain.\n    // The dot-path case is filtered separately in `expandDotPaths`.\n    if (DANGEROUS_KEYS.has(key)) continue;\n\n    const values = formData.getAll(key);\n    const processed = values.map(normalizeValue);\n\n    if (processed.length === 1) {\n      flat[key] = processed[0];\n    } else {\n      // Filter out undefined (empty Files) and empty strings from multi-value fields.\n      // Multi-value fields (e.g. tags=js&tags=&tags=ts) should not include blanks.\n      flat[key] = processed.filter((v) => v !== undefined && v !== '');\n    }\n  }\n\n  // Expand dot-notation paths into nested objects\n  return expandDotPaths(flat);\n}\n\n/**\n * Normalize a single FormData entry value.\n * - Empty File objects (no selection) → undefined\n * - Strings pass through as-is (empty strings stay as empty strings so\n *   schema validators like `z.string().min(1, 'Required')` can produce\n *   their custom error messages instead of a generic type mismatch)\n * - Everything else passes through as-is\n */\nfunction normalizeValue(value: FormDataEntryValue): unknown {\n  // File input with no selection: browsers submit a File with name=\"\" and size=0\n  if (value instanceof File && value.size === 0 && value.name === '') {\n    return undefined;\n  }\n\n  return value;\n}\n\n/**\n * Expand dot-notation keys into nested objects.\n * `{ \"user.name\": \"Alice\", \"user.age\": \"30\" }` → `{ user: { name: \"Alice\", age: \"30\" } }`\n *\n * Keys without dots are left as-is. Bracket notation (e.g. `items[0]`) is NOT\n * supported — use dot notation (`items.0`) instead.\n */\nfunction expandDotPaths(flat: Record<string, unknown>): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  let hasDotPaths = false;\n\n  // First pass: check if any keys have dots\n  for (const key of Object.keys(flat)) {\n    if (key.includes('.')) {\n      hasDotPaths = true;\n      break;\n    }\n  }\n\n  // Fast path: no dot-notation keys, return as-is.\n  // Top-level dangerous keys are already filtered in `parseFormData` above.\n  if (!hasDotPaths) return flat;\n\n  for (const [key, value] of Object.entries(flat)) {\n    // Reject any path that contains __proto__ / constructor / prototype.\n    // Without this, `__proto__.x=1` writes to Object.prototype because\n    // `result['__proto__']` resolves to the prototype object itself.\n    const parts = key.split('.');\n    if (parts.some((p) => DANGEROUS_KEYS.has(p))) continue;\n\n    if (parts.length === 1) {\n      result[parts[0]] = value;\n      continue;\n    }\n\n    let current: Record<string, unknown> = result;\n    for (let i = 0; i < parts.length - 1; i++) {\n      const part = parts[i];\n      if (current[part] === undefined || current[part] === null) {\n        current[part] = {};\n      }\n      // If current[part] is not an object (e.g., a string from a non-dotted key),\n      // the dot-path takes precedence\n      if (typeof current[part] !== 'object' || current[part] instanceof File) {\n        current[part] = {};\n      }\n      current = current[part] as Record<string, unknown>;\n    }\n\n    current[parts[parts.length - 1]] = value;\n  }\n\n  return result;\n}\n\n// `__proto__` is the only key in this parser that escapes the dot-path\n// walk's `typeof !== 'object'` reset: accessing `obj['__proto__']` returns\n// `Object.prototype` (itself an object), so the walk steps into the global\n// prototype and the leaf write mutates it. `constructor` resolves to a\n// function (reset fires) and `prototype` is undefined on fresh objects\n// (reset fires), so neither escapes the walk — they parse as legit nested\n// keys and do not mutate anything global.\nconst DANGEROUS_KEYS = new Set(['__proto__']);\n\n// ─── Coercion Helpers ────────────────────────────────────────────────────\n\n/**\n * Schema-agnostic coercion primitives for common FormData patterns.\n *\n * These are plain transform functions — they compose with any schema library's\n * `transform`/`preprocess` pipeline:\n *\n * ```ts\n * // Zod\n * z.preprocess(coerce.number, z.number())\n * // Valibot\n * v.pipe(v.unknown(), v.transform(coerce.number), v.number())\n * ```\n */\nexport const coerce = {\n  /**\n   * Coerce an empty string to undefined for optional text fields.\n   * Use with `.optional()` schemas where an empty input means \"not provided\".\n   *\n   * ```ts\n   * // Zod\n   * z.unknown().transform(coerce.text).pipe(z.string().optional())\n   * // Valibot\n   * v.pipe(v.unknown(), v.transform(coerce.text), v.optional(v.string()))\n   * ```\n   */\n  text(value: unknown): string | undefined {\n    if (value === undefined || value === null || value === '') return undefined;\n    if (typeof value === 'string') return value;\n    return undefined;\n  },\n\n  /**\n   * Coerce a string to a number.\n   * - `\"42\"` → `42`\n   * - `\"3.14\"` → `3.14`\n   * - `\"\"` / `undefined` / `null` → `undefined`\n   * - Non-numeric strings → `undefined` (schema validation will catch this)\n   */\n  number(value: unknown): number | undefined {\n    if (value === undefined || value === null || value === '') return undefined;\n    if (typeof value === 'number') return value;\n    if (typeof value !== 'string') return undefined;\n    const num = Number(value);\n    if (Number.isNaN(num)) return undefined;\n    return num;\n  },\n\n  /**\n   * Coerce a checkbox value to a boolean.\n   * HTML checkboxes submit \"on\" when checked and are absent when unchecked.\n   * - `\"on\"` / any truthy string → `true`\n   * - `undefined` / `null` / `\"\"` → `false`\n   */\n  checkbox(value: unknown): boolean {\n    if (value === undefined || value === null || value === '') return false;\n    if (typeof value === 'boolean') return value;\n    // Any non-empty string (typically \"on\") is true\n    return typeof value === 'string' && value.length > 0;\n  },\n\n  /**\n   * Parse a JSON string into an object.\n   * - Valid JSON string → parsed object\n   * - `\"\"` / `undefined` / `null` → `undefined`\n   * - Invalid JSON → `undefined` (schema validation will catch this)\n   */\n  json(value: unknown): unknown {\n    if (value === undefined || value === null || value === '') return undefined;\n    if (typeof value !== 'string') return value;\n    try {\n      return JSON.parse(value);\n    } catch {\n      return undefined;\n    }\n  },\n\n  /**\n   * Coerce a date string to a Date object.\n   * Handles `<input type=\"date\">` (`\"2024-01-15\"`), `<input type=\"datetime-local\">`\n   * (`\"2024-01-15T10:30\"`), and full ISO 8601 strings.\n   * - Valid date string → `Date`\n   * - `\"\"` / `undefined` / `null` → `undefined`\n   * - Invalid date strings → `undefined` (schema validation will catch this)\n   * - Impossible dates that `new Date()` silently normalizes (e.g. Feb 31) → `undefined`\n   */\n  date(value: unknown): Date | undefined {\n    if (value === undefined || value === null || value === '') return undefined;\n    if (value instanceof Date) return value;\n    if (typeof value !== 'string') return undefined;\n    const date = new Date(value);\n    if (Number.isNaN(date.getTime())) return undefined;\n\n    // Overflow detection: extract Y/M/D from the input string and verify\n    // they match the parsed Date components. new Date('2024-02-31') silently\n    // normalizes to March 2nd — we reject such inputs.\n    const ymdMatch = value.match(/^(\\d{4})-(\\d{2})-(\\d{2})/);\n    if (ymdMatch) {\n      const inputYear = Number(ymdMatch[1]);\n      const inputMonth = Number(ymdMatch[2]);\n      const inputDay = Number(ymdMatch[3]);\n\n      // Use UTC methods for date-only and Z-suffixed strings to avoid\n      // timezone offset shifting the day. For datetime-local (no Z suffix),\n      // the Date constructor parses in local time, so use local methods.\n      const isUTC = value.length === 10 || value.endsWith('Z');\n      const parsedYear = isUTC ? date.getUTCFullYear() : date.getFullYear();\n      const parsedMonth = isUTC ? date.getUTCMonth() + 1 : date.getMonth() + 1;\n      const parsedDay = isUTC ? date.getUTCDate() : date.getDate();\n\n      if (inputYear !== parsedYear || inputMonth !== parsedMonth || inputDay !== parsedDay) {\n        return undefined;\n      }\n    }\n\n    return date;\n  },\n\n  /**\n   * Create a File coercion function with optional size and mime type validation.\n   * Returns the File if valid, `undefined` otherwise.\n   *\n   * ```ts\n   * // Basic — just checks it's a real File\n   * z.preprocess(coerce.file(), z.instanceof(File))\n   *\n   * // With constraints\n   * z.preprocess(\n   *   coerce.file({ maxSize: 5 * 1024 * 1024, accept: ['image/png', 'image/jpeg'] }),\n   *   z.instanceof(File)\n   * )\n   * ```\n   */\n  file(options?: { maxSize?: number; accept?: string[] }): (value: unknown) => File | undefined {\n    return (value: unknown): File | undefined => {\n      if (value === undefined || value === null || value === '') return undefined;\n      if (!(value instanceof File)) return undefined;\n\n      // Empty file input (no selection): browsers submit File with name=\"\" and size=0\n      if (value.size === 0 && value.name === '') return undefined;\n\n      if (options?.maxSize !== undefined && value.size > options.maxSize) {\n        return undefined;\n      }\n\n      if (options?.accept !== undefined && !options.accept.includes(value.type)) {\n        return undefined;\n      }\n\n      return value;\n    };\n  },\n};\n","/**\n * Server action primitives: revalidatePath, revalidateTag, and the action handler.\n *\n * - revalidatePath(path) re-renders the route at that path and returns the RSC\n *   flight payload for inline reconciliation.\n * - revalidateTag(tag) invalidates timber.cache entries by tag.\n *\n * Both are callable from anywhere on the server — actions, API routes, handlers.\n *\n * The action handler processes incoming action requests, validates CSRF,\n * enforces body limits, executes the action, and returns the response\n * (with piggybacked RSC payload if revalidatePath was called).\n *\n * See design/08-forms-and-actions.md\n */\n\nimport { cache } from '../cache/cache-api';\nimport { DenySignal, RedirectSignal } from './primitives';\nimport { withSpan } from './tracing';\nimport { revalidationAls, type RevalidationState } from './als-registry.js';\n// ─── Types ───────────────────────────────────────────────────────────────\n\n/** Result of rendering a revalidation — payload root before RSC serialization. */\nexport interface RevalidationResult {\n  /**\n   * The payload root — tree plus the params it rendered with, exactly as an\n   * ordinary route payload. The client splits it in `applyRevalidation`.\n   */\n  payload: unknown;\n}\n\n/** Renderer function that builds a React element tree for a given path. */\nexport type RevalidateRenderer = (path: string) => Promise<RevalidationResult>;\n\n// Re-export the type from the registry for public API consumers.\nexport type { RevalidationState } from './als-registry.js';\n\n/** Options for creating the action handler. */\nexport interface ActionHandlerConfig {\n  /** Renderer for producing RSC payloads during revalidation. */\n  renderer?: RevalidateRenderer;\n}\n\n/** Result of handling a server action request. */\nexport interface ActionHandlerResult {\n  /** The action's return value (serialized). */\n  actionResult: unknown;\n  /** Revalidation result if revalidatePath was called (element tree, not yet serialized). */\n  revalidation?: RevalidationResult;\n  /** Redirect location if a RedirectSignal was thrown during revalidation. */\n  redirectTo?: string;\n  /** Redirect status code. */\n  redirectStatus?: number;\n}\n\n// ─── Revalidation State ──────────────────────────────────────────────────\n\n// Per-request revalidation state stored in AsyncLocalStorage (from als-registry.ts).\n// This ensures concurrent requests never share or overwrite each other's state\n// (the previous module-level global was vulnerable to cross-request pollution).\n\n/**\n * Run `fn` inside a revalidation ALS scope.\n * @internal — for tests that call revalidatePath/Tag directly without executeAction().\n */\nexport function _runWithRevalidationState<T>(state: RevalidationState, fn: () => T): T {\n  return revalidationAls.run(state, fn);\n}\n\n/**\n * Get the current revalidation state. Throws if called outside an action context.\n * @internal\n */\nfunction getRevalidationState(): RevalidationState {\n  const state = revalidationAls.getStore();\n  if (!state) {\n    throw new Error(\n      'revalidatePath/revalidateTag called outside of a server action context. ' +\n        'These functions can only be called during action execution.'\n    );\n  }\n  return state;\n}\n\n// ─── Public API ──────────────────────────────────────────────────────────\n\n/**\n * Re-render the route at `path` and include the RSC flight payload in the\n * action response. The client reconciles inline — no separate fetch needed.\n *\n * Can be called from server actions, API routes, or any server-side context.\n *\n * @param path - The path to re-render (e.g. '/dashboard', '/todos').\n */\nexport function revalidatePath(path: string): void {\n  const state = getRevalidationState();\n  if (!state.paths.includes(path)) {\n    state.paths.push(path);\n  }\n}\n\n/**\n * Invalidate all timber.cache entries tagged with `tag`.\n * Does not return a payload — the next request for an invalidated entry re-executes.\n *\n * @param tag - The cache tag to invalidate (e.g. 'products', 'user:123').\n */\nexport function revalidateTag(tag: string): void {\n  const state = getRevalidationState();\n  if (!state.tags.includes(tag)) {\n    state.tags.push(tag);\n  }\n}\n\n// ─── Action Handler ──────────────────────────────────────────────────────\n\n/**\n * Execute a server action and process revalidation.\n *\n * 1. Sets up revalidation state\n * 2. Calls the action function\n * 3. Processes revalidateTag calls (invalidates cache entries)\n * 4. Processes revalidatePath calls (re-renders and captures RSC payload)\n * 5. Returns the action result + optional RSC payload\n *\n * @param actionFn - The server action function to execute.\n * @param args - Arguments to pass to the action.\n * @param config - Handler configuration (cache handler, renderer).\n */\nexport async function executeAction(\n  actionFn: (...args: unknown[]) => Promise<unknown>,\n  args: unknown[],\n  config: ActionHandlerConfig = {},\n  spanMeta?: { actionFile?: string; actionName?: string }\n): Promise<ActionHandlerResult> {\n  const state: RevalidationState = { paths: [], tags: [] };\n  let actionResult: unknown;\n  let redirectTo: string | undefined;\n  let redirectStatus: number | undefined;\n\n  // Run the action inside ALS scope so revalidatePath/Tag resolve to this\n  // request's state object — concurrent requests each get their own scope.\n  await revalidationAls.run(state, async () => {\n    try {\n      actionResult = await withSpan(\n        'timber.action',\n        {\n          ...(spanMeta?.actionFile ? { 'timber.action_file': spanMeta.actionFile } : {}),\n          ...(spanMeta?.actionName ? { 'timber.action_name': spanMeta.actionName } : {}),\n        },\n        () => actionFn(...args)\n      );\n    } catch (error) {\n      if (error instanceof RedirectSignal) {\n        redirectTo = error.location;\n        redirectStatus = error.status;\n      } else {\n        throw error;\n      }\n    }\n  });\n\n  // Process tag invalidation through cache.invalidate so it records the\n  // invalidation epoch — an in-flight cached fn must not re-store data this\n  // mutation just invalidated (TIM-1028). cache.invalidate resolves the\n  // module-level handler singleton: setCacheHandler() is called at boot from\n  // rsc-entry when timber.config.ts provides a cacheHandler; otherwise falls\n  // back to in-memory LRU (TIM-599).\n  if (state.tags.length > 0) {\n    // cache.invalidate handles both data-cache clearing AND component-seed\n    // tombstone writes (design/45 §ISR mechanics) — no separate tombstone\n    // step needed here.\n    // Best-effort: the action body already executed and its mutation committed.\n    // Use allSettled so all tags settle before proceeding — Promise.all would\n    // short-circuit on the first rejection, leaving other invalidations (including\n    // component-seed tombstone writes) in-flight during revalidatePath rendering.\n    const results = await Promise.allSettled(state.tags.map((tag) => cache.invalidate({ tag })));\n    for (const r of results) {\n      if (r.status === 'rejected') {\n        console.error('[timber] revalidateTag invalidation failed:', r.reason);\n      }\n    }\n  }\n\n  // Process path revalidation — build element tree (not yet serialized)\n  let revalidation: RevalidationResult | undefined;\n  if (state.paths.length > 0 && config.renderer) {\n    // For now, render the first revalidated path.\n    // Multiple paths could be supported via multipart streaming in the future.\n    const path = state.paths[0];\n    try {\n      revalidation = await config.renderer(path);\n    } catch (renderError) {\n      if (renderError instanceof RedirectSignal) {\n        // Revalidation triggered a redirect (e.g., session expired,\n        // middleware on the target path called `redirect()`).\n        redirectTo = renderError.location;\n        redirectStatus = renderError.status;\n      } else if (renderError instanceof DenySignal) {\n        // Target path's middleware/access denied this user.\n        //\n        // Dropping the revalidation here is the security boundary added\n        // in TIM-996: without this branch, a DenySignal would fall into\n        // the `console.error` path AND the element tree would have\n        // already been built and serialized — leaking a privileged RSC\n        // payload to the action submitter. By the time the signal\n        // surfaces, the renderer has thrown BEFORE building the tree,\n        // so we simply drop `revalidation` and ship the action result\n        // alone. The action itself still succeeded.\n        console.error(\n          `[timber] revalidatePath dropped — target middleware denied (status ${renderError.status})`\n        );\n      } else {\n        // Log but don't fail the action — revalidation is best-effort.\n        // Includes input-validation rejections from the renderer\n        // (e.g., revalidatePath('//evil.com/admin')).\n        console.error('[timber] revalidatePath render failed:', renderError);\n      }\n    }\n  }\n\n  return {\n    actionResult,\n    revalidation,\n    ...(redirectTo ? { redirectTo, redirectStatus } : {}),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,cAAc,UAA6C;CACzE,MAAM,OAAgC,CAAC;CAEvC,KAAK,MAAM,OAAO,IAAI,IAAI,SAAS,KAAK,CAAC,GAAG;EAE1C,IAAI,IAAI,WAAW,UAAU,GAAG;EAMhC,IAAI,eAAe,IAAI,GAAG,GAAG;EAG7B,MAAM,YADS,SAAS,OAAO,GACb,CAAA,CAAO,IAAI,cAAc;EAE3C,IAAI,UAAU,WAAW,GACvB,KAAK,OAAO,UAAU;OAItB,KAAK,OAAO,UAAU,QAAQ,MAAM,MAAM,KAAA,KAAa,MAAM,EAAE;CAEnE;CAGA,OAAO,eAAe,IAAI;AAC5B;;;;;;;;;AAUA,SAAS,eAAe,OAAoC;CAE1D,IAAI,iBAAiB,QAAQ,MAAM,SAAS,KAAK,MAAM,SAAS,IAC9D;CAGF,OAAO;AACT;;;;;;;;AASA,SAAS,eAAe,MAAwD;CAC9E,MAAM,SAAkC,CAAC;CACzC,IAAI,cAAc;CAGlB,KAAK,MAAM,OAAO,OAAO,KAAK,IAAI,GAChC,IAAI,IAAI,SAAS,GAAG,GAAG;EACrB,cAAc;EACd;CACF;CAKF,IAAI,CAAC,aAAa,OAAO;CAEzB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;EAI/C,MAAM,QAAQ,IAAI,MAAM,GAAG;EAC3B,IAAI,MAAM,MAAM,MAAM,eAAe,IAAI,CAAC,CAAC,GAAG;EAE9C,IAAI,MAAM,WAAW,GAAG;GACtB,OAAO,MAAM,MAAM;GACnB;EACF;EAEA,IAAI,UAAmC;EACvC,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;GACzC,MAAM,OAAO,MAAM;GACnB,IAAI,QAAQ,UAAU,KAAA,KAAa,QAAQ,UAAU,MACnD,QAAQ,QAAQ,CAAC;GAInB,IAAI,OAAO,QAAQ,UAAU,YAAY,QAAQ,iBAAiB,MAChE,QAAQ,QAAQ,CAAC;GAEnB,UAAU,QAAQ;EACpB;EAEA,QAAQ,MAAM,MAAM,SAAS,MAAM;CACrC;CAEA,OAAO;AACT;AASA,IAAM,iCAAiB,IAAI,IAAI,CAAC,WAAW,CAAC;;;;;;;;;;;;;;AAiB5C,IAAa,SAAS;;;;;;;;;;;;CAYpB,KAAK,OAAoC;EACvC,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;EAClE,IAAI,OAAO,UAAU,UAAU,OAAO;CAExC;;;;;;;;CASA,OAAO,OAAoC;EACzC,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;EAClE,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;EACtC,MAAM,MAAM,OAAO,KAAK;EACxB,IAAI,OAAO,MAAM,GAAG,GAAG,OAAO,KAAA;EAC9B,OAAO;CACT;;;;;;;CAQA,SAAS,OAAyB;EAChC,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO;EAClE,IAAI,OAAO,UAAU,WAAW,OAAO;EAEvC,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS;CACrD;;;;;;;CAQA,KAAK,OAAyB;EAC5B,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;EAClE,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,IAAI;GACF,OAAO,KAAK,MAAM,KAAK;EACzB,QAAQ;GACN;EACF;CACF;;;;;;;;;;CAWA,KAAK,OAAkC;EACrC,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;EAClE,IAAI,iBAAiB,MAAM,OAAO;EAClC,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;EACtC,MAAM,OAAO,IAAI,KAAK,KAAK;EAC3B,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,GAAG,OAAO,KAAA;EAKzC,MAAM,WAAW,MAAM,MAAM,0BAA0B;EACvD,IAAI,UAAU;GACZ,MAAM,YAAY,OAAO,SAAS,EAAE;GACpC,MAAM,aAAa,OAAO,SAAS,EAAE;GACrC,MAAM,WAAW,OAAO,SAAS,EAAE;GAKnC,MAAM,QAAQ,MAAM,WAAW,MAAM,MAAM,SAAS,GAAG;GACvD,MAAM,aAAa,QAAQ,KAAK,eAAe,IAAI,KAAK,YAAY;GACpE,MAAM,cAAc,QAAQ,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,IAAI;GACvE,MAAM,YAAY,QAAQ,KAAK,WAAW,IAAI,KAAK,QAAQ;GAE3D,IAAI,cAAc,cAAc,eAAe,eAAe,aAAa,WACzE;EAEJ;EAEA,OAAO;CACT;;;;;;;;;;;;;;;;CAiBA,KAAK,SAAyF;EAC5F,QAAQ,UAAqC;GAC3C,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;GAClE,IAAI,EAAE,iBAAiB,OAAO,OAAO,KAAA;GAGrC,IAAI,MAAM,SAAS,KAAK,MAAM,SAAS,IAAI,OAAO,KAAA;GAElD,IAAI,SAAS,YAAY,KAAA,KAAa,MAAM,OAAO,QAAQ,SACzD;GAGF,IAAI,SAAS,WAAW,KAAA,KAAa,CAAC,QAAQ,OAAO,SAAS,MAAM,IAAI,GACtE;GAGF,OAAO;EACT;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;ACtNA,SAAS,uBAA0C;CACjD,MAAM,QAAQ,gBAAgB,SAAS;CACvC,IAAI,CAAC,OACH,MAAM,IAAI,MACR,qIAEF;CAEF,OAAO;AACT;;;;;;;;;AAYA,SAAgB,eAAe,MAAoB;CACjD,MAAM,QAAQ,qBAAqB;CACnC,IAAI,CAAC,MAAM,MAAM,SAAS,IAAI,GAC5B,MAAM,MAAM,KAAK,IAAI;AAEzB;;;;;;;AAQA,SAAgB,cAAc,KAAmB;CAC/C,MAAM,QAAQ,qBAAqB;CACnC,IAAI,CAAC,MAAM,KAAK,SAAS,GAAG,GAC1B,MAAM,KAAK,KAAK,GAAG;AAEvB;;;;;;;;;;;;;;AAiBA,eAAsB,cACpB,UACA,MACA,SAA8B,CAAC,GAC/B,UAC8B;CAC9B,MAAM,QAA2B;EAAE,OAAO,CAAC;EAAG,MAAM,CAAC;CAAE;CACvD,IAAI;CACJ,IAAI;CACJ,IAAI;CAIJ,MAAM,gBAAgB,IAAI,OAAO,YAAY;EAC3C,IAAI;GACF,eAAe,MAAM,SACnB,iBACA;IACE,GAAI,UAAU,aAAa,EAAE,sBAAsB,SAAS,WAAW,IAAI,CAAC;IAC5E,GAAI,UAAU,aAAa,EAAE,sBAAsB,SAAS,WAAW,IAAI,CAAC;GAC9E,SACM,SAAS,GAAG,IAAI,CACxB;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,gBAAgB;IACnC,aAAa,MAAM;IACnB,iBAAiB,MAAM;GACzB,OACE,MAAM;EAEV;CACF,CAAC;CAQD,IAAI,MAAM,KAAK,SAAS,GAAG;EAQzB,MAAM,UAAU,MAAM,QAAQ,WAAW,MAAM,KAAK,KAAK,QAAQ,MAAM,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;EAC3F,KAAK,MAAM,KAAK,SACd,IAAI,EAAE,WAAW,YACf,QAAQ,MAAM,+CAA+C,EAAE,MAAM;CAG3E;CAGA,IAAI;CACJ,IAAI,MAAM,MAAM,SAAS,KAAK,OAAO,UAAU;EAG7C,MAAM,OAAO,MAAM,MAAM;EACzB,IAAI;GACF,eAAe,MAAM,OAAO,SAAS,IAAI;EAC3C,SAAS,aAAa;GACpB,IAAI,uBAAuB,gBAAgB;IAGzC,aAAa,YAAY;IACzB,iBAAiB,YAAY;GAC/B,OAAO,IAAI,uBAAuB,YAWhC,QAAQ,MACN,sEAAsE,YAAY,OAAO,EAC3F;QAKA,QAAQ,MAAM,0CAA0C,WAAW;EAEvE;CACF;CAEA,OAAO;EACL;EACA;EACA,GAAI,aAAa;GAAE;GAAY;EAAe,IAAI,CAAC;CACrD;AACF"}