@timber-js/app 0.2.0-alpha.20 → 0.2.0-alpha.201

package/dist/_chunks/actions-HUdJADAD.js

@@ -0,0 +1,345 @@
+import { i as revalidationAls } from "./als-registry-C6kcfprT.js";
+import { Z as withSpan, b as isDenySignal, x as isRedirectSignal } from "./logger-DqJ2VoAY.js";
+import { r as canonicalize } from "./canonicalize-CgHoscYO.js";
+import { t as cache } from "./cache-api-CAPbZTga.js";
+//#region src/server/form-data.ts
+/**
+* FormData preprocessing — schema-agnostic conversion of FormData to typed objects.
+*
+* FormData is all strings. Schema validation expects typed values. This module
+* bridges the gap with intelligent coercion that runs *before* schema validation.
+*
+* Inspired by zod-form-data, but schema-agnostic — works with any Standard Schema
+* library (Zod, Valibot, ArkType).
+*
+* See design/08-forms-and-actions.md §"parseFormData() and coerce helpers"
+*/
+/**
+* Convert FormData into a plain object with intelligent coercion.
+*
+* Handles:
+* - **Duplicate keys → arrays**: `tags=js&tags=ts` → `{ tags: ["js", "ts"] }`
+* - **Nested dot-paths**: `user.name=Alice` → `{ user: { name: "Alice" } }`
+* - **Empty strings → undefined**: Enables `.optional()` semantics in schemas
+* - **Empty Files → undefined**: File inputs with no selection become `undefined`
+* - **Strips `$ACTION_*` fields**: React's internal hidden fields are excluded
+*/
+function parseFormData(formData) {
+	const flat = {};
+	for (const key of new Set(formData.keys())) {
+		if (key.startsWith("$ACTION_")) continue;
+		if (DANGEROUS_KEYS.has(key)) continue;
+		const processed = formData.getAll(key).map(normalizeValue);
+		if (processed.length === 1) flat[key] = processed[0];
+		else flat[key] = processed.filter((v) => v !== void 0 && v !== "");
+	}
+	return expandDotPaths(flat);
+}
+/**
+* Normalize a single FormData entry value.
+* - Empty File objects (no selection) → undefined
+* - Strings pass through as-is (empty strings stay as empty strings so
+*   schema validators like `z.string().min(1, 'Required')` can produce
+*   their custom error messages instead of a generic type mismatch)
+* - Everything else passes through as-is
+*/
+function normalizeValue(value) {
+	if (value instanceof File && value.size === 0 && value.name === "") return;
+	return value;
+}
+/**
+* Expand dot-notation keys into nested objects.
+* `{ "user.name": "Alice", "user.age": "30" }` → `{ user: { name: "Alice", age: "30" } }`
+*
+* Keys without dots are left as-is. Bracket notation (e.g. `items[0]`) is NOT
+* supported — use dot notation (`items.0`) instead.
+*/
+function expandDotPaths(flat) {
+	const result = {};
+	let hasDotPaths = false;
+	for (const key of Object.keys(flat)) if (key.includes(".")) {
+		hasDotPaths = true;
+		break;
+	}
+	if (!hasDotPaths) return flat;
+	for (const [key, value] of Object.entries(flat)) {
+		const parts = key.split(".");
+		if (parts.some((p) => DANGEROUS_KEYS.has(p))) continue;
+		if (parts.length === 1) {
+			result[parts[0]] = value;
+			continue;
+		}
+		let current = result;
+		for (let i = 0; i < parts.length - 1; i++) {
+			const part = parts[i];
+			if (current[part] === void 0 || current[part] === null) current[part] = {};
+			if (typeof current[part] !== "object" || current[part] instanceof File) current[part] = {};
+			current = current[part];
+		}
+		current[parts[parts.length - 1]] = value;
+	}
+	return result;
+}
+var DANGEROUS_KEYS = /* @__PURE__ */ new Set(["__proto__"]);
+/**
+* Schema-agnostic coercion primitives for common FormData patterns.
+*
+* These are plain transform functions — they compose with any schema library's
+* `transform`/`preprocess` pipeline:
+*
+* ```ts
+* // Zod
+* z.preprocess(coerce.number, z.number())
+* // Valibot
+* v.pipe(v.unknown(), v.transform(coerce.number), v.number())
+* ```
+*/
+var coerce = {
+	/**
+	* Coerce an empty string to undefined for optional text fields.
+	* Use with `.optional()` schemas where an empty input means "not provided".
+	*
+	* ```ts
+	* // Zod
+	* z.unknown().transform(coerce.text).pipe(z.string().optional())
+	* // Valibot
+	* v.pipe(v.unknown(), v.transform(coerce.text), v.optional(v.string()))
+	* ```
+	*/
+	text(value) {
+		if (value === void 0 || value === null || value === "") return void 0;
+		if (typeof value === "string") return value;
+	},
+	/**
+	* Coerce a string to a number.
+	* - `"42"` → `42`
+	* - `"3.14"` → `3.14`
+	* - `""` / `undefined` / `null` → `undefined`
+	* - Non-numeric strings → `undefined` (schema validation will catch this)
+	*/
+	number(value) {
+		if (value === void 0 || value === null || value === "") return void 0;
+		if (typeof value === "number") return value;
+		if (typeof value !== "string") return void 0;
+		const num = Number(value);
+		if (Number.isNaN(num)) return void 0;
+		return num;
+	},
+	/**
+	* Coerce a checkbox value to a boolean.
+	* HTML checkboxes submit "on" when checked and are absent when unchecked.
+	* - `"on"` / any truthy string → `true`
+	* - `undefined` / `null` / `""` → `false`
+	*/
+	checkbox(value) {
+		if (value === void 0 || value === null || value === "") return false;
+		if (typeof value === "boolean") return value;
+		return typeof value === "string" && value.length > 0;
+	},
+	/**
+	* Parse a JSON string into an object.
+	* - Valid JSON string → parsed object
+	* - `""` / `undefined` / `null` → `undefined`
+	* - Invalid JSON → `undefined` (schema validation will catch this)
+	*/
+	json(value) {
+		if (value === void 0 || value === null || value === "") return void 0;
+		if (typeof value !== "string") return value;
+		try {
+			return JSON.parse(value);
+		} catch {
+			return;
+		}
+	},
+	/**
+	* Coerce a date string to a Date object.
+	* Handles `<input type="date">` (`"2024-01-15"`), `<input type="datetime-local">`
+	* (`"2024-01-15T10:30"`), and full ISO 8601 strings.
+	* - Valid date string → `Date`
+	* - `""` / `undefined` / `null` → `undefined`
+	* - Invalid date strings → `undefined` (schema validation will catch this)
+	* - Impossible dates that `new Date()` silently normalizes (e.g. Feb 31) → `undefined`
+	*/
+	date(value) {
+		if (value === void 0 || value === null || value === "") return void 0;
+		if (value instanceof Date) return value;
+		if (typeof value !== "string") return void 0;
+		const date = new Date(value);
+		if (Number.isNaN(date.getTime())) return void 0;
+		const ymdMatch = value.match(/^(\d{4})-(\d{2})-(\d{2})/);
+		if (ymdMatch) {
+			const inputYear = Number(ymdMatch[1]);
+			const inputMonth = Number(ymdMatch[2]);
+			const inputDay = Number(ymdMatch[3]);
+			const isUTC = value.length === 10 || value.endsWith("Z");
+			const parsedYear = isUTC ? date.getUTCFullYear() : date.getFullYear();
+			const parsedMonth = isUTC ? date.getUTCMonth() + 1 : date.getMonth() + 1;
+			const parsedDay = isUTC ? date.getUTCDate() : date.getDate();
+			if (inputYear !== parsedYear || inputMonth !== parsedMonth || inputDay !== parsedDay) return;
+		}
+		return date;
+	},
+	/**
+	* Create a File coercion function with optional size and mime type validation.
+	* Returns the File if valid, `undefined` otherwise.
+	*
+	* ```ts
+	* // Basic — just checks it's a real File
+	* z.preprocess(coerce.file(), z.instanceof(File))
+	*
+	* // With constraints
+	* z.preprocess(
+	*   coerce.file({ maxSize: 5 * 1024 * 1024, accept: ['image/png', 'image/jpeg'] }),
+	*   z.instanceof(File)
+	* )
+	* ```
+	*/
+	file(options) {
+		return (value) => {
+			if (value === void 0 || value === null || value === "") return void 0;
+			if (!(value instanceof File)) return void 0;
+			if (value.size === 0 && value.name === "") return void 0;
+			if (options?.maxSize !== void 0 && value.size > options.maxSize) return;
+			if (options?.accept !== void 0 && !options.accept.includes(value.type)) return;
+			return value;
+		};
+	}
+};
+//#endregion
+//#region src/server/actions.ts
+/**
+* Server action primitives: revalidatePath, revalidateTag, and the action handler.
+*
+* - revalidatePath(path) re-renders the route at that path and returns the RSC
+*   flight payload for inline reconciliation.
+* - revalidateTag(tag) invalidates timber.cache entries by tag.
+*
+* Both are callable from anywhere on the server — actions, API routes, handlers.
+*
+* The action handler processes incoming action requests, validates CSRF,
+* enforces body limits, executes the action, and returns the response
+* (with piggybacked RSC payload if revalidatePath was called).
+*
+* See design/08-forms-and-actions.md
+*/
+/**
+* Get the current revalidation state. Throws if called outside an action context.
+* @internal
+*/
+function getRevalidationState() {
+	const state = revalidationAls.getStore();
+	if (!state) throw new Error("revalidatePath/revalidateTag called outside of a server action context. These functions can only be called during action execution.");
+	return state;
+}
+/**
+* Re-render the route at `path` and include the RSC flight payload in the
+* action response. The client reconciles inline — no separate fetch needed.
+*
+* Can be called from server actions, API routes, or any server-side context.
+*
+* @param path - The path to re-render (e.g. '/dashboard', '/todos').
+*/
+function revalidatePath(path) {
+	const state = getRevalidationState();
+	if (!state.paths.includes(path)) state.paths.push(path);
+}
+/**
+* Invalidate all timber.cache entries tagged with `tag`.
+* Does not return a payload — the next request for an invalidated entry re-executes.
+*
+* @param tag - The cache tag to invalidate (e.g. 'products', 'user:123').
+*/
+function revalidateTag(tag) {
+	const state = getRevalidationState();
+	if (!state.tags.includes(tag)) state.tags.push(tag);
+}
+function stripFragment(path) {
+	const idx = path.indexOf("#");
+	return idx >= 0 ? path.slice(0, idx) : path;
+}
+/**
+* Execute a server action and process revalidation.
+*
+* 1. Sets up revalidation state
+* 2. Calls the action function
+* 3. Processes revalidateTag calls (invalidates cache entries)
+* 4. Processes revalidatePath calls (re-renders and captures RSC payload)
+* 5. Returns the action result + optional RSC payload
+*
+* @param actionFn - The server action function to execute.
+* @param args - Arguments to pass to the action.
+* @param config - Handler configuration (cache handler, renderer).
+*/
+async function executeAction(actionFn, args, config = {}, spanMeta) {
+	const state = {
+		paths: [],
+		tags: []
+	};
+	let actionResult;
+	let redirectTo;
+	let redirectStatus;
+	await revalidationAls.run(state, async () => {
+		try {
+			actionResult = await withSpan("timber.action", {
+				...spanMeta?.actionFile ? { "timber.action_file": spanMeta.actionFile } : {},
+				...spanMeta?.actionName ? { "timber.action_name": spanMeta.actionName } : {}
+			}, () => actionFn(...args));
+		} catch (error) {
+			if (isRedirectSignal(error)) {
+				redirectTo = error.location;
+				redirectStatus = error.status;
+			} else throw error;
+		}
+	});
+	if (state.tags.length > 0) {
+		const results = await Promise.allSettled(state.tags.map((tag) => cache.invalidate({ tag })));
+		for (const r of results) if (r.status === "rejected") console.error("[timber] revalidateTag invalidation failed:", r.reason);
+	}
+	let revalidation;
+	let invalidatedPaths;
+	if (state.paths.length > 0) {
+		const path = state.paths[0];
+		if (config.requestPathname && !revalidationPathMatches(path, config.requestPathname, config.requestSearch)) invalidatedPaths = [stripFragment(path)];
+		else if (config.renderer) try {
+			revalidation = await config.renderer(path);
+		} catch (renderError) {
+			if (isRedirectSignal(renderError)) {
+				redirectTo = renderError.location;
+				redirectStatus = renderError.status;
+			} else if (isDenySignal(renderError)) console.error(`[timber] revalidatePath dropped — target middleware denied (status ${renderError.status})`);
+			else console.error("[timber] revalidatePath render failed:", renderError);
+		}
+	}
+	return {
+		actionResult,
+		revalidation,
+		invalidatedPaths,
+		...redirectTo ? {
+			redirectTo,
+			redirectStatus
+		} : {}
+	};
+}
+/**
+* Check if a `revalidatePath(path)` argument matches the request pathname.
+/**
+* Canonicalizes the revalidated path the same way the renderer does so
+* equivalent paths compare equal. Returns true when the paths match or
+* when comparison is inconclusive (validation failure → render to be safe).
+*/
+function revalidationPathMatches(revalidatedPath, requestPathname, requestSearch) {
+	const hashIdx = revalidatedPath.indexOf("#");
+	const noFragment = hashIdx >= 0 ? revalidatedPath.slice(0, hashIdx) : revalidatedPath;
+	const queryIdx = noFragment.indexOf("?");
+	const pathnameOnly = queryIdx >= 0 ? noFragment.slice(0, queryIdx) : noFragment;
+	const search = queryIdx >= 0 ? noFragment.slice(queryIdx) : "";
+	const canonical = canonicalize(pathnameOnly, true);
+	if (!canonical.ok) return true;
+	if (canonical.pathname !== requestPathname) return false;
+	if (search && search !== (requestSearch ?? "")) return false;
+	return true;
+}
+//#endregion
+export { parseFormData as a, coerce as i, revalidatePath as n, revalidateTag as r, executeAction as t };
+
+//# sourceMappingURL=actions-HUdJADAD.js.map

package/dist/_chunks/actions-HUdJADAD.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions-HUdJADAD.js","names":[],"sources":["../../src/server/form-data.ts","../../src/server/actions.ts"],"sourcesContent":["/**\n * FormData preprocessing — schema-agnostic conversion of FormData to typed objects.\n *\n * FormData is all strings. Schema validation expects typed values. This module\n * bridges the gap with intelligent coercion that runs *before* schema validation.\n *\n * Inspired by zod-form-data, but schema-agnostic — works with any Standard Schema\n * library (Zod, Valibot, ArkType).\n *\n * See design/08-forms-and-actions.md §\"parseFormData() and coerce helpers\"\n */\n\n// ─── parseFormData ───────────────────────────────────────────────────────\n\n/**\n * Convert FormData into a plain object with intelligent coercion.\n *\n * Handles:\n * - **Duplicate keys → arrays**: `tags=js&tags=ts` → `{ tags: [\"js\", \"ts\"] }`\n * - **Nested dot-paths**: `user.name=Alice` → `{ user: { name: \"Alice\" } }`\n * - **Empty strings → undefined**: Enables `.optional()` semantics in schemas\n * - **Empty Files → undefined**: File inputs with no selection become `undefined`\n * - **Strips `$ACTION_*` fields**: React's internal hidden fields are excluded\n */\nexport function parseFormData(formData: FormData): Record<string, unknown> {\n  const flat: Record<string, unknown> = {};\n\n  for (const key of new Set(formData.keys())) {\n    // Skip React internal fields\n    if (key.startsWith('$ACTION_')) continue;\n\n    // Skip prototype-pollution keys at the top level — assigning to\n    // `flat['__proto__']` invokes the prototype setter and can splice\n    // attacker-controlled data into `flat`'s prototype chain.\n    // The dot-path case is filtered separately in `expandDotPaths`.\n    if (DANGEROUS_KEYS.has(key)) continue;\n\n    const values = formData.getAll(key);\n    const processed = values.map(normalizeValue);\n\n    if (processed.length === 1) {\n      flat[key] = processed[0];\n    } else {\n      // Filter out undefined (empty Files) and empty strings from multi-value fields.\n      // Multi-value fields (e.g. tags=js&tags=&tags=ts) should not include blanks.\n      flat[key] = processed.filter((v) => v !== undefined && v !== '');\n    }\n  }\n\n  // Expand dot-notation paths into nested objects\n  return expandDotPaths(flat);\n}\n\n/**\n * Normalize a single FormData entry value.\n * - Empty File objects (no selection) → undefined\n * - Strings pass through as-is (empty strings stay as empty strings so\n *   schema validators like `z.string().min(1, 'Required')` can produce\n *   their custom error messages instead of a generic type mismatch)\n * - Everything else passes through as-is\n */\nfunction normalizeValue(value: FormDataEntryValue): unknown {\n  // File input with no selection: browsers submit a File with name=\"\" and size=0\n  if (value instanceof File && value.size === 0 && value.name === '') {\n    return undefined;\n  }\n\n  return value;\n}\n\n/**\n * Expand dot-notation keys into nested objects.\n * `{ \"user.name\": \"Alice\", \"user.age\": \"30\" }` → `{ user: { name: \"Alice\", age: \"30\" } }`\n *\n * Keys without dots are left as-is. Bracket notation (e.g. `items[0]`) is NOT\n * supported — use dot notation (`items.0`) instead.\n */\nfunction expandDotPaths(flat: Record<string, unknown>): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  let hasDotPaths = false;\n\n  // First pass: check if any keys have dots\n  for (const key of Object.keys(flat)) {\n    if (key.includes('.')) {\n      hasDotPaths = true;\n      break;\n    }\n  }\n\n  // Fast path: no dot-notation keys, return as-is.\n  // Top-level dangerous keys are already filtered in `parseFormData` above.\n  if (!hasDotPaths) return flat;\n\n  for (const [key, value] of Object.entries(flat)) {\n    // Reject any path that contains __proto__ / constructor / prototype.\n    // Without this, `__proto__.x=1` writes to Object.prototype because\n    // `result['__proto__']` resolves to the prototype object itself.\n    const parts = key.split('.');\n    if (parts.some((p) => DANGEROUS_KEYS.has(p))) continue;\n\n    if (parts.length === 1) {\n      result[parts[0]] = value;\n      continue;\n    }\n\n    let current: Record<string, unknown> = result;\n    for (let i = 0; i < parts.length - 1; i++) {\n      const part = parts[i];\n      if (current[part] === undefined || current[part] === null) {\n        current[part] = {};\n      }\n      // If current[part] is not an object (e.g., a string from a non-dotted key),\n      // the dot-path takes precedence\n      if (typeof current[part] !== 'object' || current[part] instanceof File) {\n        current[part] = {};\n      }\n      current = current[part] as Record<string, unknown>;\n    }\n\n    current[parts[parts.length - 1]] = value;\n  }\n\n  return result;\n}\n\n// `__proto__` is the only key in this parser that escapes the dot-path\n// walk's `typeof !== 'object'` reset: accessing `obj['__proto__']` returns\n// `Object.prototype` (itself an object), so the walk steps into the global\n// prototype and the leaf write mutates it. `constructor` resolves to a\n// function (reset fires) and `prototype` is undefined on fresh objects\n// (reset fires), so neither escapes the walk — they parse as legit nested\n// keys and do not mutate anything global.\nconst DANGEROUS_KEYS = new Set(['__proto__']);\n\n// ─── Coercion Helpers ────────────────────────────────────────────────────\n\n/**\n * Schema-agnostic coercion primitives for common FormData patterns.\n *\n * These are plain transform functions — they compose with any schema library's\n * `transform`/`preprocess` pipeline:\n *\n * ```ts\n * // Zod\n * z.preprocess(coerce.number, z.number())\n * // Valibot\n * v.pipe(v.unknown(), v.transform(coerce.number), v.number())\n * ```\n */\nexport const coerce = {\n  /**\n   * Coerce an empty string to undefined for optional text fields.\n   * Use with `.optional()` schemas where an empty input means \"not provided\".\n   *\n   * ```ts\n   * // Zod\n   * z.unknown().transform(coerce.text).pipe(z.string().optional())\n   * // Valibot\n   * v.pipe(v.unknown(), v.transform(coerce.text), v.optional(v.string()))\n   * ```\n   */\n  text(value: unknown): string | undefined {\n    if (value === undefined || value === null || value === '') return undefined;\n    if (typeof value === 'string') return value;\n    return undefined;\n  },\n\n  /**\n   * Coerce a string to a number.\n   * - `\"42\"` → `42`\n   * - `\"3.14\"` → `3.14`\n   * - `\"\"` / `undefined` / `null` → `undefined`\n   * - Non-numeric strings → `undefined` (schema validation will catch this)\n   */\n  number(value: unknown): number | undefined {\n    if (value === undefined || value === null || value === '') return undefined;\n    if (typeof value === 'number') return value;\n    if (typeof value !== 'string') return undefined;\n    const num = Number(value);\n    if (Number.isNaN(num)) return undefined;\n    return num;\n  },\n\n  /**\n   * Coerce a checkbox value to a boolean.\n   * HTML checkboxes submit \"on\" when checked and are absent when unchecked.\n   * - `\"on\"` / any truthy string → `true`\n   * - `undefined` / `null` / `\"\"` → `false`\n   */\n  checkbox(value: unknown): boolean {\n    if (value === undefined || value === null || value === '') return false;\n    if (typeof value === 'boolean') return value;\n    // Any non-empty string (typically \"on\") is true\n    return typeof value === 'string' && value.length > 0;\n  },\n\n  /**\n   * Parse a JSON string into an object.\n   * - Valid JSON string → parsed object\n   * - `\"\"` / `undefined` / `null` → `undefined`\n   * - Invalid JSON → `undefined` (schema validation will catch this)\n   */\n  json(value: unknown): unknown {\n    if (value === undefined || value === null || value === '') return undefined;\n    if (typeof value !== 'string') return value;\n    try {\n      return JSON.parse(value);\n    } catch {\n      return undefined;\n    }\n  },\n\n  /**\n   * Coerce a date string to a Date object.\n   * Handles `<input type=\"date\">` (`\"2024-01-15\"`), `<input type=\"datetime-local\">`\n   * (`\"2024-01-15T10:30\"`), and full ISO 8601 strings.\n   * - Valid date string → `Date`\n   * - `\"\"` / `undefined` / `null` → `undefined`\n   * - Invalid date strings → `undefined` (schema validation will catch this)\n   * - Impossible dates that `new Date()` silently normalizes (e.g. Feb 31) → `undefined`\n   */\n  date(value: unknown): Date | undefined {\n    if (value === undefined || value === null || value === '') return undefined;\n    if (value instanceof Date) return value;\n    if (typeof value !== 'string') return undefined;\n    const date = new Date(value);\n    if (Number.isNaN(date.getTime())) return undefined;\n\n    // Overflow detection: extract Y/M/D from the input string and verify\n    // they match the parsed Date components. new Date('2024-02-31') silently\n    // normalizes to March 2nd — we reject such inputs.\n    const ymdMatch = value.match(/^(\\d{4})-(\\d{2})-(\\d{2})/);\n    if (ymdMatch) {\n      const inputYear = Number(ymdMatch[1]);\n      const inputMonth = Number(ymdMatch[2]);\n      const inputDay = Number(ymdMatch[3]);\n\n      // Use UTC methods for date-only and Z-suffixed strings to avoid\n      // timezone offset shifting the day. For datetime-local (no Z suffix),\n      // the Date constructor parses in local time, so use local methods.\n      const isUTC = value.length === 10 || value.endsWith('Z');\n      const parsedYear = isUTC ? date.getUTCFullYear() : date.getFullYear();\n      const parsedMonth = isUTC ? date.getUTCMonth() + 1 : date.getMonth() + 1;\n      const parsedDay = isUTC ? date.getUTCDate() : date.getDate();\n\n      if (inputYear !== parsedYear || inputMonth !== parsedMonth || inputDay !== parsedDay) {\n        return undefined;\n      }\n    }\n\n    return date;\n  },\n\n  /**\n   * Create a File coercion function with optional size and mime type validation.\n   * Returns the File if valid, `undefined` otherwise.\n   *\n   * ```ts\n   * // Basic — just checks it's a real File\n   * z.preprocess(coerce.file(), z.instanceof(File))\n   *\n   * // With constraints\n   * z.preprocess(\n   *   coerce.file({ maxSize: 5 * 1024 * 1024, accept: ['image/png', 'image/jpeg'] }),\n   *   z.instanceof(File)\n   * )\n   * ```\n   */\n  file(options?: { maxSize?: number; accept?: string[] }): (value: unknown) => File | undefined {\n    return (value: unknown): File | undefined => {\n      if (value === undefined || value === null || value === '') return undefined;\n      if (!(value instanceof File)) return undefined;\n\n      // Empty file input (no selection): browsers submit File with name=\"\" and size=0\n      if (value.size === 0 && value.name === '') return undefined;\n\n      if (options?.maxSize !== undefined && value.size > options.maxSize) {\n        return undefined;\n      }\n\n      if (options?.accept !== undefined && !options.accept.includes(value.type)) {\n        return undefined;\n      }\n\n      return value;\n    };\n  },\n};\n","/**\n * Server action primitives: revalidatePath, revalidateTag, and the action handler.\n *\n * - revalidatePath(path) re-renders the route at that path and returns the RSC\n *   flight payload for inline reconciliation.\n * - revalidateTag(tag) invalidates timber.cache entries by tag.\n *\n * Both are callable from anywhere on the server — actions, API routes, handlers.\n *\n * The action handler processes incoming action requests, validates CSRF,\n * enforces body limits, executes the action, and returns the response\n * (with piggybacked RSC payload if revalidatePath was called).\n *\n * See design/08-forms-and-actions.md\n */\n\nimport { cache } from '../cache/cache-api.ts';\nimport { canonicalize } from './canonicalize.ts';\nimport { isDenySignal, isRedirectSignal } from './primitives.ts';\nimport { withSpan } from './tracing.ts';\nimport { revalidationAls, type RevalidationState } from './als-registry.ts';\n// ─── Types ───────────────────────────────────────────────────────────────\n\n/** Result of rendering a revalidation — payload root before RSC serialization. */\nexport interface RevalidationResult {\n  /**\n   * The payload root — tree plus the params it rendered with, exactly as an\n   * ordinary route payload. The client splits it in `applyActionResult`.\n   */\n  payload: unknown;\n}\n\n/** Renderer function that builds a React element tree for a given path. */\nexport type RevalidateRenderer = (path: string) => Promise<RevalidationResult>;\n\n// Re-export the type from the registry for public API consumers.\nexport type { RevalidationState } from './als-registry.ts';\n\n/** Options for creating the action handler. */\nexport interface ActionHandlerConfig {\n  /** Renderer for producing RSC payloads during revalidation. */\n  renderer?: RevalidateRenderer;\n  /**\n   * Pathname of the page the action was submitted from. When set,\n   * revalidatePath renders are skipped for non-matching paths — the\n   * server cache is already invalidated, so the next navigation fetches\n   * fresh data. See TIM-1454.\n   */\n  requestPathname?: string;\n  /** Search string of the action request URL (e.g. `?page=1`). */\n  requestSearch?: string;\n}\n\n/** Result of handling a server action request. */\nexport interface ActionHandlerResult {\n  /** The action's return value (serialized). */\n  actionResult: unknown;\n  /** Revalidation result if revalidatePath was called (element tree, not yet serialized). */\n  revalidation?: RevalidationResult;\n  /**\n   * Paths passed to `revalidatePath()` that don't match the current page\n   * (TIM-1454). The client invalidates its caches for these so the next\n   * navigation fetches fresh data.\n   */\n  invalidatedPaths?: string[];\n  /** Redirect location if a RedirectSignal was thrown during revalidation. */\n  redirectTo?: string;\n  /** Redirect status code. */\n  redirectStatus?: number;\n}\n\n// ─── Revalidation State ──────────────────────────────────────────────────\n\n// Per-request revalidation state stored in AsyncLocalStorage (from als-registry.ts).\n// This ensures concurrent requests never share or overwrite each other's state\n// (the previous module-level global was vulnerable to cross-request pollution).\n\n/**\n * Run `fn` inside a revalidation ALS scope.\n * @internal — for tests that call revalidatePath/Tag directly without executeAction().\n */\nexport function _runWithRevalidationState<T>(state: RevalidationState, fn: () => T): T {\n  return revalidationAls.run(state, fn);\n}\n\n/**\n * Get the current revalidation state. Throws if called outside an action context.\n * @internal\n */\nfunction getRevalidationState(): RevalidationState {\n  const state = revalidationAls.getStore();\n  if (!state) {\n    throw new Error(\n      'revalidatePath/revalidateTag called outside of a server action context. ' +\n        'These functions can only be called during action execution.'\n    );\n  }\n  return state;\n}\n\n// ─── Public API ──────────────────────────────────────────────────────────\n\n/**\n * Re-render the route at `path` and include the RSC flight payload in the\n * action response. The client reconciles inline — no separate fetch needed.\n *\n * Can be called from server actions, API routes, or any server-side context.\n *\n * @param path - The path to re-render (e.g. '/dashboard', '/todos').\n */\nexport function revalidatePath(path: string): void {\n  const state = getRevalidationState();\n  if (!state.paths.includes(path)) {\n    state.paths.push(path);\n  }\n}\n\n/**\n * Invalidate all timber.cache entries tagged with `tag`.\n * Does not return a payload — the next request for an invalidated entry re-executes.\n *\n * @param tag - The cache tag to invalidate (e.g. 'products', 'user:123').\n */\nexport function revalidateTag(tag: string): void {\n  const state = getRevalidationState();\n  if (!state.tags.includes(tag)) {\n    state.tags.push(tag);\n  }\n}\n\n// ─── Helpers ────────────────────────────────────────────────────────────\n\nfunction stripFragment(path: string): string {\n  const idx = path.indexOf('#');\n  return idx >= 0 ? path.slice(0, idx) : path;\n}\n\n// ─── Action Handler ──────────────────────────────────────────────────────\n\n/**\n * Execute a server action and process revalidation.\n *\n * 1. Sets up revalidation state\n * 2. Calls the action function\n * 3. Processes revalidateTag calls (invalidates cache entries)\n * 4. Processes revalidatePath calls (re-renders and captures RSC payload)\n * 5. Returns the action result + optional RSC payload\n *\n * @param actionFn - The server action function to execute.\n * @param args - Arguments to pass to the action.\n * @param config - Handler configuration (cache handler, renderer).\n */\nexport async function executeAction(\n  actionFn: (...args: unknown[]) => Promise<unknown>,\n  args: unknown[],\n  config: ActionHandlerConfig = {},\n  spanMeta?: { actionFile?: string; actionName?: string }\n): Promise<ActionHandlerResult> {\n  const state: RevalidationState = { paths: [], tags: [] };\n  let actionResult: unknown;\n  let redirectTo: string | undefined;\n  let redirectStatus: number | undefined;\n\n  // Run the action inside ALS scope so revalidatePath/Tag resolve to this\n  // request's state object — concurrent requests each get their own scope.\n  await revalidationAls.run(state, async () => {\n    try {\n      actionResult = await withSpan(\n        'timber.action',\n        {\n          ...(spanMeta?.actionFile ? { 'timber.action_file': spanMeta.actionFile } : {}),\n          ...(spanMeta?.actionName ? { 'timber.action_name': spanMeta.actionName } : {}),\n        },\n        () => actionFn(...args)\n      );\n    } catch (error) {\n      if (isRedirectSignal(error)) {\n        redirectTo = error.location;\n        redirectStatus = error.status;\n      } else {\n        throw error;\n      }\n    }\n  });\n\n  // Process tag invalidation through cache.invalidate so it records the\n  // invalidation epoch — an in-flight cached fn must not re-store data this\n  // mutation just invalidated (TIM-1028). cache.invalidate resolves the\n  // module-level handler singleton: setCacheHandler() is called at boot from\n  // rsc-entry when timber.config.ts provides a cacheHandler; otherwise falls\n  // back to in-memory LRU (TIM-599).\n  if (state.tags.length > 0) {\n    // cache.invalidate handles both data-cache clearing AND component-seed\n    // tombstone writes (design/45 §ISR mechanics) — no separate tombstone\n    // step needed here.\n    // Best-effort: the action body already executed and its mutation committed.\n    // Use allSettled so all tags settle before proceeding — Promise.all would\n    // short-circuit on the first rejection, leaving other invalidations (including\n    // component-seed tombstone writes) in-flight during revalidatePath rendering.\n    const results = await Promise.allSettled(state.tags.map((tag) => cache.invalidate({ tag })));\n    for (const r of results) {\n      if (r.status === 'rejected') {\n        console.error('[timber] revalidateTag invalidation failed:', r.reason);\n      }\n    }\n  }\n\n  // Process path revalidation — build element tree (not yet serialized).\n  //\n  // TIM-1454: Only render the path if it matches the current page. Non-matching\n  // paths are collected as `invalidatedPaths` — the client evicts them from its\n  // caches so the next navigation fetches fresh data.\n  let revalidation: RevalidationResult | undefined;\n  let invalidatedPaths: string[] | undefined;\n\n  if (state.paths.length > 0) {\n    const path = state.paths[0];\n\n    if (\n      config.requestPathname &&\n      !revalidationPathMatches(path, config.requestPathname, config.requestSearch)\n    ) {\n      invalidatedPaths = [stripFragment(path)];\n    } else if (config.renderer) {\n      try {\n        revalidation = await config.renderer(path);\n      } catch (renderError) {\n        if (isRedirectSignal(renderError)) {\n          redirectTo = renderError.location;\n          redirectStatus = renderError.status;\n        } else if (isDenySignal(renderError)) {\n          console.error(\n            `[timber] revalidatePath dropped — target middleware denied (status ${renderError.status})`\n          );\n        } else {\n          console.error('[timber] revalidatePath render failed:', renderError);\n        }\n      }\n    }\n  }\n\n  return {\n    actionResult,\n    revalidation,\n    invalidatedPaths,\n    ...(redirectTo ? { redirectTo, redirectStatus } : {}),\n  };\n}\n\n/**\n * Check if a `revalidatePath(path)` argument matches the request pathname.\n/**\n * Canonicalizes the revalidated path the same way the renderer does so\n * equivalent paths compare equal. Returns true when the paths match or\n * when comparison is inconclusive (validation failure → render to be safe).\n */\nfunction revalidationPathMatches(\n  revalidatedPath: string,\n  requestPathname: string,\n  requestSearch?: string\n): boolean {\n  const hashIdx = revalidatedPath.indexOf('#');\n  const noFragment = hashIdx >= 0 ? revalidatedPath.slice(0, hashIdx) : revalidatedPath;\n  const queryIdx = noFragment.indexOf('?');\n  const pathnameOnly = queryIdx >= 0 ? noFragment.slice(0, queryIdx) : noFragment;\n  const search = queryIdx >= 0 ? noFragment.slice(queryIdx) : '';\n  const canonical = canonicalize(pathnameOnly, true);\n  if (!canonical.ok) return true;\n  if (canonical.pathname !== requestPathname) return false;\n  // revalidatePath('/dashboard') (no search) matches any query variant.\n  // revalidatePath('/dashboard?tab=x') only matches that exact search.\n  if (search && search !== (requestSearch ?? '')) return false;\n  return true;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,cAAc,UAA6C;CACzE,MAAM,OAAgC,CAAC;CAEvC,KAAK,MAAM,OAAO,IAAI,IAAI,SAAS,KAAK,CAAC,GAAG;EAE1C,IAAI,IAAI,WAAW,UAAU,GAAG;EAMhC,IAAI,eAAe,IAAI,GAAG,GAAG;EAG7B,MAAM,YADS,SAAS,OAAO,GACb,CAAA,CAAO,IAAI,cAAc;EAE3C,IAAI,UAAU,WAAW,GACvB,KAAK,OAAO,UAAU;OAItB,KAAK,OAAO,UAAU,QAAQ,MAAM,MAAM,KAAA,KAAa,MAAM,EAAE;CAEnE;CAGA,OAAO,eAAe,IAAI;AAC5B;;;;;;;;;AAUA,SAAS,eAAe,OAAoC;CAE1D,IAAI,iBAAiB,QAAQ,MAAM,SAAS,KAAK,MAAM,SAAS,IAC9D;CAGF,OAAO;AACT;;;;;;;;AASA,SAAS,eAAe,MAAwD;CAC9E,MAAM,SAAkC,CAAC;CACzC,IAAI,cAAc;CAGlB,KAAK,MAAM,OAAO,OAAO,KAAK,IAAI,GAChC,IAAI,IAAI,SAAS,GAAG,GAAG;EACrB,cAAc;EACd;CACF;CAKF,IAAI,CAAC,aAAa,OAAO;CAEzB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;EAI/C,MAAM,QAAQ,IAAI,MAAM,GAAG;EAC3B,IAAI,MAAM,MAAM,MAAM,eAAe,IAAI,CAAC,CAAC,GAAG;EAE9C,IAAI,MAAM,WAAW,GAAG;GACtB,OAAO,MAAM,MAAM;GACnB;EACF;EAEA,IAAI,UAAmC;EACvC,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;GACzC,MAAM,OAAO,MAAM;GACnB,IAAI,QAAQ,UAAU,KAAA,KAAa,QAAQ,UAAU,MACnD,QAAQ,QAAQ,CAAC;GAInB,IAAI,OAAO,QAAQ,UAAU,YAAY,QAAQ,iBAAiB,MAChE,QAAQ,QAAQ,CAAC;GAEnB,UAAU,QAAQ;EACpB;EAEA,QAAQ,MAAM,MAAM,SAAS,MAAM;CACrC;CAEA,OAAO;AACT;AASA,IAAM,iCAAiB,IAAI,IAAI,CAAC,WAAW,CAAC;;;;;;;;;;;;;;AAiB5C,IAAa,SAAS;;;;;;;;;;;;CAYpB,KAAK,OAAoC;EACvC,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;EAClE,IAAI,OAAO,UAAU,UAAU,OAAO;CAExC;;;;;;;;CASA,OAAO,OAAoC;EACzC,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;EAClE,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;EACtC,MAAM,MAAM,OAAO,KAAK;EACxB,IAAI,OAAO,MAAM,GAAG,GAAG,OAAO,KAAA;EAC9B,OAAO;CACT;;;;;;;CAQA,SAAS,OAAyB;EAChC,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO;EAClE,IAAI,OAAO,UAAU,WAAW,OAAO;EAEvC,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS;CACrD;;;;;;;CAQA,KAAK,OAAyB;EAC5B,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;EAClE,IAAI,OAAO,UAAU,UAAU,OAAO;EACtC,IAAI;GACF,OAAO,KAAK,MAAM,KAAK;EACzB,QAAQ;GACN;EACF;CACF;;;;;;;;;;CAWA,KAAK,OAAkC;EACrC,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;EAClE,IAAI,iBAAiB,MAAM,OAAO;EAClC,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;EACtC,MAAM,OAAO,IAAI,KAAK,KAAK;EAC3B,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,GAAG,OAAO,KAAA;EAKzC,MAAM,WAAW,MAAM,MAAM,0BAA0B;EACvD,IAAI,UAAU;GACZ,MAAM,YAAY,OAAO,SAAS,EAAE;GACpC,MAAM,aAAa,OAAO,SAAS,EAAE;GACrC,MAAM,WAAW,OAAO,SAAS,EAAE;GAKnC,MAAM,QAAQ,MAAM,WAAW,MAAM,MAAM,SAAS,GAAG;GACvD,MAAM,aAAa,QAAQ,KAAK,eAAe,IAAI,KAAK,YAAY;GACpE,MAAM,cAAc,QAAQ,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,IAAI;GACvE,MAAM,YAAY,QAAQ,KAAK,WAAW,IAAI,KAAK,QAAQ;GAE3D,IAAI,cAAc,cAAc,eAAe,eAAe,aAAa,WACzE;EAEJ;EAEA,OAAO;CACT;;;;;;;;;;;;;;;;CAiBA,KAAK,SAAyF;EAC5F,QAAQ,UAAqC;GAC3C,IAAI,UAAU,KAAA,KAAa,UAAU,QAAQ,UAAU,IAAI,OAAO,KAAA;GAClE,IAAI,EAAE,iBAAiB,OAAO,OAAO,KAAA;GAGrC,IAAI,MAAM,SAAS,KAAK,MAAM,SAAS,IAAI,OAAO,KAAA;GAElD,IAAI,SAAS,YAAY,KAAA,KAAa,MAAM,OAAO,QAAQ,SACzD;GAGF,IAAI,SAAS,WAAW,KAAA,KAAa,CAAC,QAAQ,OAAO,SAAS,MAAM,IAAI,GACtE;GAGF,OAAO;EACT;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;ACtMA,SAAS,uBAA0C;CACjD,MAAM,QAAQ,gBAAgB,SAAS;CACvC,IAAI,CAAC,OACH,MAAM,IAAI,MACR,qIAEF;CAEF,OAAO;AACT;;;;;;;;;AAYA,SAAgB,eAAe,MAAoB;CACjD,MAAM,QAAQ,qBAAqB;CACnC,IAAI,CAAC,MAAM,MAAM,SAAS,IAAI,GAC5B,MAAM,MAAM,KAAK,IAAI;AAEzB;;;;;;;AAQA,SAAgB,cAAc,KAAmB;CAC/C,MAAM,QAAQ,qBAAqB;CACnC,IAAI,CAAC,MAAM,KAAK,SAAS,GAAG,GAC1B,MAAM,KAAK,KAAK,GAAG;AAEvB;AAIA,SAAS,cAAc,MAAsB;CAC3C,MAAM,MAAM,KAAK,QAAQ,GAAG;CAC5B,OAAO,OAAO,IAAI,KAAK,MAAM,GAAG,GAAG,IAAI;AACzC;;;;;;;;;;;;;;AAiBA,eAAsB,cACpB,UACA,MACA,SAA8B,CAAC,GAC/B,UAC8B;CAC9B,MAAM,QAA2B;EAAE,OAAO,CAAC;EAAG,MAAM,CAAC;CAAE;CACvD,IAAI;CACJ,IAAI;CACJ,IAAI;CAIJ,MAAM,gBAAgB,IAAI,OAAO,YAAY;EAC3C,IAAI;GACF,eAAe,MAAM,SACnB,iBACA;IACE,GAAI,UAAU,aAAa,EAAE,sBAAsB,SAAS,WAAW,IAAI,CAAC;IAC5E,GAAI,UAAU,aAAa,EAAE,sBAAsB,SAAS,WAAW,IAAI,CAAC;GAC9E,SACM,SAAS,GAAG,IAAI,CACxB;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,KAAK,GAAG;IAC3B,aAAa,MAAM;IACnB,iBAAiB,MAAM;GACzB,OACE,MAAM;EAEV;CACF,CAAC;CAQD,IAAI,MAAM,KAAK,SAAS,GAAG;EAQzB,MAAM,UAAU,MAAM,QAAQ,WAAW,MAAM,KAAK,KAAK,QAAQ,MAAM,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;EAC3F,KAAK,MAAM,KAAK,SACd,IAAI,EAAE,WAAW,YACf,QAAQ,MAAM,+CAA+C,EAAE,MAAM;CAG3E;CAOA,IAAI;CACJ,IAAI;CAEJ,IAAI,MAAM,MAAM,SAAS,GAAG;EAC1B,MAAM,OAAO,MAAM,MAAM;EAEzB,IACE,OAAO,mBACP,CAAC,wBAAwB,MAAM,OAAO,iBAAiB,OAAO,aAAa,GAE3E,mBAAmB,CAAC,cAAc,IAAI,CAAC;OAClC,IAAI,OAAO,UAChB,IAAI;GACF,eAAe,MAAM,OAAO,SAAS,IAAI;EAC3C,SAAS,aAAa;GACpB,IAAI,iBAAiB,WAAW,GAAG;IACjC,aAAa,YAAY;IACzB,iBAAiB,YAAY;GAC/B,OAAO,IAAI,aAAa,WAAW,GACjC,QAAQ,MACN,sEAAsE,YAAY,OAAO,EAC3F;QAEA,QAAQ,MAAM,0CAA0C,WAAW;EAEvE;CAEJ;CAEA,OAAO;EACL;EACA;EACA;EACA,GAAI,aAAa;GAAE;GAAY;EAAe,IAAI,CAAC;CACrD;AACF;;;;;;;;AASA,SAAS,wBACP,iBACA,iBACA,eACS;CACT,MAAM,UAAU,gBAAgB,QAAQ,GAAG;CAC3C,MAAM,aAAa,WAAW,IAAI,gBAAgB,MAAM,GAAG,OAAO,IAAI;CACtE,MAAM,WAAW,WAAW,QAAQ,GAAG;CACvC,MAAM,eAAe,YAAY,IAAI,WAAW,MAAM,GAAG,QAAQ,IAAI;CACrE,MAAM,SAAS,YAAY,IAAI,WAAW,MAAM,QAAQ,IAAI;CAC5D,MAAM,YAAY,aAAa,cAAc,IAAI;CACjD,IAAI,CAAC,UAAU,IAAI,OAAO;CAC1B,IAAI,UAAU,aAAa,iBAAiB,OAAO;CAGnD,IAAI,UAAU,YAAY,iBAAiB,KAAK,OAAO;CACvD,OAAO;AACT"}

package/dist/_chunks/als-registry-C6kcfprT.js

@@ -0,0 +1,41 @@
+import "#server-only-guard";
+import { AsyncLocalStorage } from "node:async_hooks";
+//#region src/server/als-registry.ts
+/**
+* Return a process-wide singleton `AsyncLocalStorage` keyed by `symbol`.
+*
+* `Symbol.for(...)` keys live in the cross-realm symbol registry, and
+* `globalThis` is shared across every module evaluation inside the same
+* Node.js process. Together they give a stable anchor that survives
+* re-evaluation of this file — the second evaluation observes the
+* `globalThis[symbol]` slot already populated by the first and hands
+* back the identical ALS instance.
+*/
+function getOrCreateAls(symbol) {
+	const g = globalThis;
+	const existing = g[symbol];
+	if (existing instanceof AsyncLocalStorage) return existing;
+	const created = new AsyncLocalStorage();
+	g[symbol] = created;
+	return created;
+}
+/** @internal — import via request-context.ts public API */
+var requestContextAls = getOrCreateAls(Symbol.for("timber:request-context-als"));
+/** @internal — import via tracing.ts public API */
+var traceAls = getOrCreateAls(Symbol.for("timber:trace-als"));
+/** @internal — import via server-timing.ts public API */
+var timingAls = getOrCreateAls(Symbol.for("timber:timing-als"));
+/** @internal — import via actions.ts public API */
+var revalidationAls = getOrCreateAls(Symbol.for("timber:revalidation-als"));
+/** @internal — import via form-flash.ts public API */
+var formFlashAls = getOrCreateAls(Symbol.for("timber:form-flash-als"));
+/** @internal — import via early-hints-sender.ts public API */
+var earlyHintsSenderAls = getOrCreateAls(Symbol.for("timber:early-hints-sender-als"));
+/** @internal — import via waituntil-bridge.ts public API */
+var waitUntilAls = getOrCreateAls(Symbol.for("timber:wait-until-als"));
+/** @internal — import via workers-cache-bridge.ts public API */
+var workersCachePurgeAls = getOrCreateAls(Symbol.for("timber:workers-cache-purge-als"));
+//#endregion
+export { timingAls as a, workersCachePurgeAls as c, revalidationAls as i, formFlashAls as n, traceAls as o, requestContextAls as r, waitUntilAls as s, earlyHintsSenderAls as t };
+
+//# sourceMappingURL=als-registry-C6kcfprT.js.map

package/dist/_chunks/als-registry-C6kcfprT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"als-registry-C6kcfprT.js","names":[],"sources":["../../src/server/als-registry.ts"],"sourcesContent":["/**\n * Centralized AsyncLocalStorage registry for server-side per-request state.\n *\n * ALL ALS instances used by the server framework live here. Individual\n * modules (request-context.ts, tracing.ts, actions.ts, etc.) import from\n * this registry and re-export public accessor functions.\n *\n * Why: ALS instances require singleton semantics — if two copies of the\n * same ALS exist (one from a relative import, one from a barrel import,\n * or the same file re-evaluated by Vite after an HMR invalidation), one\n * module writes to its copy and another reads from an empty copy.\n * Centralizing ALS creation in a single module + anchoring each instance\n * on `globalThis` under a `Symbol.for(...)` key eliminates this class of\n * bug, including the Vite-dev case where module instance split would\n * otherwise hand two copies of this file out of a single evaluation cycle.\n *\n * The `timber-shims` plugin remaps `@timber-js/app/server` to src/ in\n * RSC and SSR environments so import-specifier paths converge here, and\n * the `globalThis[SYMBOL_FOR]` anchor below closes the remaining gap: any\n * second evaluation of this module picks up the ALS the first evaluation\n * already stored rather than instantiating a fresh one. Same pattern the\n * Cloudflare bindings ALS uses in `adapters/cloudflare.ts`.\n *\n * DO NOT create ALS instances outside this file. If you need a new ALS,\n * add it here and import from `./als-registry.js` in the consuming module.\n * Inside this file, always route through `getOrCreateAls(symbol)` — a raw\n * `new AsyncLocalStorage()` reintroduces the instance-split hazard.\n *\n * See design/18-build-system.md §\"Module Singleton Strategy\" and\n * §\"Singleton State Registry\". Regression test:\n * `tests/als-registry-singleton.test.ts`.\n */\n\nimport '#server-only-guard';\nimport type { CoercedParams } from '../shared/param-value.ts';\nimport type { SlotParamsRecord } from '../shared/slot-params.ts';\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport type { DebugComponentEntry } from './rsc-entry/helpers.ts';\n\n/**\n * Return a process-wide singleton `AsyncLocalStorage` keyed by `symbol`.\n *\n * `Symbol.for(...)` keys live in the cross-realm symbol registry, and\n * `globalThis` is shared across every module evaluation inside the same\n * Node.js process. Together they give a stable anchor that survives\n * re-evaluation of this file — the second evaluation observes the\n * `globalThis[symbol]` slot already populated by the first and hands\n * back the identical ALS instance.\n */\nfunction getOrCreateAls<T>(symbol: symbol): AsyncLocalStorage<T> {\n  const g = globalThis as unknown as Record<symbol, unknown>;\n  const existing = g[symbol];\n  if (existing instanceof AsyncLocalStorage) {\n    return existing as AsyncLocalStorage<T>;\n  }\n  const created = new AsyncLocalStorage<T>();\n  g[symbol] = created;\n  return created;\n}\n\n// ─── Request Context ──────────────────────────────────────────────────────\n// Used by: request-context.ts (getHeaders(), getCookies(), getSearchParams())\n// Design doc: design/04-authorization.md\n\n/** @internal — import via request-context.ts public API */\nexport const requestContextAls = getOrCreateAls<RequestContextStore>(\n  Symbol.for('timber:request-context-als')\n);\n\nexport interface RequestContextStore {\n  /** Incoming request headers (read-only view). */\n  headers: Headers;\n  /** Raw cookie header string, parsed lazily into a Map on first access. */\n  cookieHeader: string;\n  /** Lazily-parsed cookie map (mutable — reflects write-overlay from set()). */\n  parsedCookies?: Map<string, string>;\n  /** Original (pre-overlay) frozen headers, kept for overlay merging. */\n  originalHeaders: Headers;\n  /**\n   * CSP nonce, created the first time middleware reads `ctx.nonce`. Read by\n   * the renderers via `getCspNonce()` and stamped on every inline script.\n   * Absent when no middleware asked for one. See server/csp-nonce.ts.\n   */\n  cspNonce?: string;\n  /**\n   * Raw URLSearchParams for the current request.\n   * To get typed parsed params, import a search params definition and\n   * call `.parse(searchParams())`.\n   */\n  searchParams: URLSearchParams;\n  /**\n   * Raw search string from the request URL (e.g. \"?foo=bar&baz=1\").\n   * Available synchronously for use in `redirect()` with `preserveSearchParams`.\n   */\n  searchString: string;\n  /**\n   * Coerced segment params for the current request.\n   * Set by the pipeline after route matching and param coercion, before\n   * middleware and rendering. Pages and layouts read params via\n   * `getSegmentParams()` instead of receiving them as a prop.\n   *\n   * See design/07-routing.md §\"params.ts — Convention File for Typed Params\"\n   */\n  segmentParams?: CoercedParams;\n  /**\n   * The matched segment path (e.g. '/(browse)/[artistSlug]/[year]').\n   * Includes route groups and parallel slots — uniquely identifies the\n   * segment in the route tree. Set by the pipeline alongside segmentParams.\n   * Used by getSegmentParams() for dev-mode validation.\n   * See design/41-global-params.md §Runtime Validation\n   */\n  matchedSegmentPath?: string;\n  /**\n   * Per-slot coerced segment params, keyed by the slot's full tree path\n   * (e.g. '/(browse)/@shows/[artistSlug]/[...year]').\n   *\n   * Each slot walks its own segment tree and may interpret URL parts\n   * differently from the main route (e.g. catch-all vs dynamic). This\n   * map stores slot-specific params so getSegmentParams(segmentPath)\n   * returns the correct types for slot pages.\n   *\n   * See design/07-routing.md §\"Parallel Slot Params\"\n   */\n  slotParams?: SlotParamsRecord;\n  /** Outgoing Set-Cookie entries (name → serialized value + options). Last write wins. */\n  cookieJar: Map<string, CookieEntry>;\n  /** Whether the response has flushed (headers committed). */\n  flushed: boolean;\n  /** Whether the current context allows cookie mutation. */\n  mutableContext: boolean;\n  /**\n   * Set by AccessGate or PageDenyBoundary when a DenySignal is caught\n   * server-side (inside the React tree, before React Flight sees it).\n   * The document path reads this after render to set the HTTP status code;\n   * the RSC payload path does not read it (a Flight payload response is always 200).\n   * See TIM-666, TIM-1495.\n   */\n  denyStatus?: number;\n  /**\n   * Dev-only: getter for the current request's RSC debug components.\n   * Set by renderRoute() so onPipelineError can include component tree\n   * context for render-phase errors without module-level shared state.\n   */\n  debugComponentsGetter?: () => DebugComponentEntry[];\n  /**\n   * Index of the first segment whose AccessGate denied during render.\n   * Recorded by AccessGate when it catches a DenySignal so post-render\n   * consumers (buildSegmentInfo, X-Timber-Segments header) can bound\n   * the segment list without a pre-render access pass. Infinity when\n   * no segment denied. See TIM-1363.\n   */\n  _firstDeniedSegmentIndex?: number;\n  /**\n   * Metadata entries collected during render by MetadataCollector.\n   * Populated per-segment in tree order (root→page) during\n   * renderToReadableStream. Entries may contain promises for dynamic\n   * metadata (resolved concurrently with page rendering, TIM-1367).\n   * MetadataHead awaits all entries before merging.\n   * See TIM-1363, TIM-1367, design/16-metadata.md.\n   */\n  _metadataEntries?: Array<{\n    metadata: import('./types.ts').Metadata | Promise<import('./types.ts').Metadata | null>;\n    isPage: boolean;\n  }>;\n}\n\n/** A single outgoing cookie entry in the cookie jar. */\nexport interface CookieEntry {\n  name: string;\n  value: string;\n  options: import('./cookie-context.ts').CookieOptions;\n}\n\n// ─── Tracing ──────────────────────────────────────────────────────────────\n// Used by: tracing.ts (getTraceId(), getSpanId())\n// Design doc: design/17-logging.md\n\nexport interface TraceStore {\n  /** 32-char lowercase hex trace ID (OTEL or UUID fallback). */\n  traceId: string;\n  /** OTEL span ID if available, undefined otherwise. */\n  spanId?: string;\n  /**\n   * Innermost active native platform span (e.g. Cloudflare's `Span` from\n   * tracing.enterSpan()). Tracked so setSpanAttribute() can set attributes\n   * after span creation — the platform API has no getActiveSpan() equivalent.\n   * Saved/restored by withSpan() around each callback. See TIM-1135.\n   */\n  platformSpan?: import('./tracing.ts').PlatformSpan;\n}\n\n/** @internal — import via tracing.ts public API */\nexport const traceAls = getOrCreateAls<TraceStore>(Symbol.for('timber:trace-als'));\n\n// ─── Server-Timing ────────────────────────────────────────────────────────\n// Used by: server-timing.ts (recordTiming(), withTiming())\n// Design doc: (dev-only performance instrumentation)\n\nexport interface TimingStore {\n  entries: import('./server-timing.ts').TimingEntry[];\n}\n\n/** @internal — import via server-timing.ts public API */\nexport const timingAls = getOrCreateAls<TimingStore>(Symbol.for('timber:timing-als'));\n\n// ─── Revalidation ─────────────────────────────────────────────────────────\n// Used by: actions.ts (revalidatePath(), revalidateTag())\n// Design doc: design/08-forms-and-actions.md\n\nexport interface RevalidationState {\n  /** Paths to re-render (populated by revalidatePath calls). */\n  paths: string[];\n  /** Tags to invalidate (populated by revalidateTag calls). */\n  tags: string[];\n}\n\n/** @internal — import via actions.ts public API */\nexport const revalidationAls = getOrCreateAls<RevalidationState>(\n  Symbol.for('timber:revalidation-als')\n);\n\n// ─── Form Flash ───────────────────────────────────────────────────────────\n// Used by: form-flash.ts (getFormFlash())\n// Design doc: design/08-forms-and-actions.md §\"No-JS Error Round-Trip\"\n\n/** @internal — import via form-flash.ts public API */\nexport const formFlashAls = getOrCreateAls<import('./form-flash.ts').FormFlashData>(\n  Symbol.for('timber:form-flash-als')\n);\n\n// ─── Early Hints Sender ──────────────────────────────────────────────────\n// Used by: early-hints-sender.ts (sendEarlyHints103())\n// Design doc: design/02-rendering-pipeline.md §\"Early Hints (103)\"\n\n/** Function that sends Link header values as a 103 Early Hints response. */\nexport type EarlyHintsSenderFn = (links: string[]) => void;\n\n/** @internal — import via early-hints-sender.ts public API */\nexport const earlyHintsSenderAls = getOrCreateAls<EarlyHintsSenderFn>(\n  Symbol.for('timber:early-hints-sender-als')\n);\n\n// ─── waitUntil Bridge ────────────────────────────────────────────────────\n// Used by: waituntil-bridge.ts (waitUntil())\n// Design doc: design/11-platform.md §\"waitUntil()\"\n\n/** Function that extends the request lifecycle with a background promise. */\nexport type WaitUntilFn = (promise: Promise<unknown>) => void;\n\n/** @internal — import via waituntil-bridge.ts public API */\nexport const waitUntilAls = getOrCreateAls<WaitUntilFn>(Symbol.for('timber:wait-until-als'));\n\n// ─── Workers Cache Purge Bridge ─────────────────────────────────────────\n// Used by: workers-cache-bridge.ts (runWithWorkersCachePurge())\n// Design doc: design/06-caching.md, design/25-production-deployments.md\n\n/** Workers Cache purge function from Cloudflare ExecutionContext.cache. */\nexport interface WorkersCachePurgeCtx {\n  purge(opts: { tags: string[] }): Promise<void>;\n}\n\n/** @internal — import via workers-cache-bridge.ts public API */\nexport const workersCachePurgeAls = getOrCreateAls<WorkersCachePurgeCtx>(\n  Symbol.for('timber:workers-cache-purge-als')\n);\n"],"mappings":";;;;;;;;;;;;;AAiDA,SAAS,eAAkB,QAAsC;CAC/D,MAAM,IAAI;CACV,MAAM,WAAW,EAAE;CACnB,IAAI,oBAAoB,mBACtB,OAAO;CAET,MAAM,UAAU,IAAI,kBAAqB;CACzC,EAAE,UAAU;CACZ,OAAO;AACT;;AAOA,IAAa,oBAAoB,eAC/B,OAAO,IAAI,4BAA4B,CACzC;;AA6HA,IAAa,WAAW,eAA2B,OAAO,IAAI,kBAAkB,CAAC;;AAWjF,IAAa,YAAY,eAA4B,OAAO,IAAI,mBAAmB,CAAC;;AAcpF,IAAa,kBAAkB,eAC7B,OAAO,IAAI,yBAAyB,CACtC;;AAOA,IAAa,eAAe,eAC1B,OAAO,IAAI,uBAAuB,CACpC;;AAUA,IAAa,sBAAsB,eACjC,OAAO,IAAI,+BAA+B,CAC5C;;AAUA,IAAa,eAAe,eAA4B,OAAO,IAAI,uBAAuB,CAAC;;AAY3F,IAAa,uBAAuB,eAClC,OAAO,IAAI,gCAAgC,CAC7C"}

package/dist/_chunks/als-slots-BEEIPKYm.js

@@ -0,0 +1,26 @@
+//#region src/shared/als-slots.ts
+function createAlsSlot(message) {
+	let fn;
+	return {
+		set(next) {
+			fn = next;
+		},
+		get() {
+			if (!fn) throw new Error(message);
+			return fn();
+		}
+	};
+}
+var searchParamsSlot = createAlsSlot("[timber] searchParams.get() is only available on the server. Use searchParams.useQueryStates() on the client.");
+var segmentParamsSlot = createAlsSlot("[timber] segmentParams.get() is only available on the server. Use segmentParams.useSegmentParams() on the client.");
+/** @internal Called from `server/request-context.ts` at module init. */
+var _setGetSearchParamsFn = searchParamsSlot.set;
+/** @internal Read by `search-params/define.ts` inside `.get()`. */
+var getSearchParamsFromAls = searchParamsSlot.get;
+/** @internal Called from `server/request-context.ts` at module init. */
+var _setGetSegmentParamsFn = segmentParamsSlot.set;
+segmentParamsSlot.get;
+//#endregion
+export { _setGetSegmentParamsFn as n, getSearchParamsFromAls as r, _setGetSearchParamsFn as t };
+
+//# sourceMappingURL=als-slots-BEEIPKYm.js.map

package/dist/_chunks/als-slots-BEEIPKYm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"als-slots-BEEIPKYm.js","names":[],"sources":["../../src/shared/als-slots.ts"],"sourcesContent":["/**\n * ALS getter slots for the isomorphic `define*` modules.\n *\n * `searchParams.get()` and `segmentParams.get()` read per-request state out of\n * `server/als-registry.ts`, but the modules that expose them are *isomorphic*:\n * `search-params/define.ts` and `segment-params/define.ts` are imported by\n * `'use client'` components for their hooks, so neither may import\n * `node:async_hooks` — not even transitively, because the dep optimizer\n * pre-bundles them before per-environment resolution runs. So the server\n * registers its getter into a slot at module-init time and the define modules\n * read the slot.\n *\n * The slots live here, in a module with **no imports at all**, rather than in\n * the define modules themselves. That is the whole point: `request-context.ts`\n * has to reach the setter, and when the setter lived in\n * `search-params/define.ts` every server entry that touched\n * `@timber-js/app/server` pulled that module — and therefore its `'use client'`\n * import of `client/use-query-states.ts`, and therefore `nuqs` — into the\n * server graph. `nuqs` named-imports `createContext`/`useContext` from React,\n * which React's `react-server` export withholds, so `@timber-js/app`,\n * `@timber-js/app/server`, `@timber-js/app/cookies` and `@timber-js/app/cache`\n * all failed to instantiate under the `react-server` condition (TIM-1298).\n * A leaf module breaks the edge without a registration ceremony on either side.\n *\n * Registration must be eager, not a call-time `await import()`: the async\n * microtask a dynamic import introduces loses AsyncLocalStorage context inside\n * React's RSC Flight renderer, which broke `getSearchParams()` in parallel slot\n * pages (TIM-523).\n *\n * See design/23-search-params.md §\"defineSearchParams — The Factory\" and\n * design/41-global-params.md.\n */\n\nimport type { CoercedParams } from './param-value.ts';\n\ninterface AlsSlot<T> {\n  /** Register the server-side getter. Called once at module-init time. */\n  set(fn: () => T): void;\n  /** Read through to the registered getter, or throw the client-side message. */\n  get(): T;\n}\n\nfunction createAlsSlot<T>(message: string): AlsSlot<T> {\n  let fn: (() => T) | undefined;\n  return {\n    set(next) {\n      fn = next;\n    },\n    get() {\n      if (!fn) throw new Error(message);\n      return fn();\n    },\n  };\n}\n\nconst searchParamsSlot = createAlsSlot<URLSearchParams>(\n  '[timber] searchParams.get() is only available on the server. ' +\n    'Use searchParams.useQueryStates() on the client.'\n);\n\nconst segmentParamsSlot = createAlsSlot<CoercedParams>(\n  '[timber] segmentParams.get() is only available on the server. ' +\n    'Use segmentParams.useSegmentParams() on the client.'\n);\n\n/** @internal Called from `server/request-context.ts` at module init. */\nexport const _setGetSearchParamsFn = searchParamsSlot.set;\n/** @internal Read by `search-params/define.ts` inside `.get()`. */\nexport const getSearchParamsFromAls = searchParamsSlot.get;\n\n/** @internal Called from `server/request-context.ts` at module init. */\nexport const _setGetSegmentParamsFn = segmentParamsSlot.set;\n/** @internal Read by `segment-params/define.ts` inside `.get()`. */\nexport const getSegmentParamsFromAls = segmentParamsSlot.get;\n"],"mappings":";AA0CA,SAAS,cAAiB,SAA6B;CACrD,IAAI;CACJ,OAAO;EACL,IAAI,MAAM;GACR,KAAK;EACP;EACA,MAAM;GACJ,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,OAAO;GAChC,OAAO,GAAG;EACZ;CACF;AACF;AAEA,IAAM,mBAAmB,cACvB,+GAEF;AAEA,IAAM,oBAAoB,cACxB,mHAEF;;AAGA,IAAa,wBAAwB,iBAAiB;;AAEtD,IAAa,yBAAyB,iBAAiB;;AAGvD,IAAa,yBAAyB,kBAAkB;AAEjB,kBAAkB"}

package/dist/_chunks/base-path-DaQrzbez.js

@@ -0,0 +1,80 @@
+//#region src/shared/base-path.ts
+/**
+* Deployment base path — Vite's resolved `base`, as it applies to the URLs
+* timber addresses at runtime.
+*
+* A static build deployed under a sub-path (`base: '/repo/'`, the GitHub
+* Pages project-site layout) serves every generated file below that prefix:
+* the document for `/about` lives at `/repo/about/index.html`, its flight
+* payload at `/repo/_rsc/about/index.rsc`. The client works in *route space* — the
+* paths the app declares — so both a strip (browser URL → route path) and a
+* prefix (route-space path → URL) are needed, and this module owns both.
+*
+* Pure functions, no state: the caller supplies the base. `client/rsc-fetch.ts`
+* holds the client's copy, set at bootstrap from `virtual:timber-config`.
+*
+* See design/11-platform.md §"Deploying under a non-root base" (TIM-1261).
+*/
+/** `https://cdn.example.com/`, `//cdn.example.com/` — a base pointing off-origin. */
+function isAbsoluteUrlBase(base) {
+	return base.startsWith("//") || /^[a-z][a-z0-9+.-]*:\/\//i.test(base);
+}
+/**
+* True when `base` is document-relative (`'./'`, `'foo/'`) — it makes asset
+* URLs resolve against whatever document loaded them, which says nothing
+* about where the deployment sits, so no prefix can be computed from it.
+*/
+function isRelativeBase(base) {
+	if (!base) return false;
+	return !base.startsWith("/") && !isAbsoluteUrlBase(base);
+}
+/**
+* Normalize Vite's `base` into a path prefix. Always returns a value with a
+* leading and trailing slash.
+*
+* Two forms carry no usable deployment prefix and normalize to `/`:
+*
+* - **An absolute-URL base** points *assets* at a CDN. The HTML documents and
+*   `.rsc` payloads are still served from the deployment origin, so their
+*   URLs stay root-relative. This is correct, not a degradation.
+* - **A relative base** — see `isRelativeBase`. The static build warns,
+*   because SPA navigation then only works at the domain root.
+*/
+function normalizeBasePath(base) {
+	if (!base) return "/";
+	if (isAbsoluteUrlBase(base) || isRelativeBase(base)) return "/";
+	return base.endsWith("/") ? base : `${base}/`;
+}
+/**
+* Strip the base prefix from a browser pathname, returning the route-space
+* path. With base `/repo/`: `/repo/about` → `/about`, `/repo/` and `/repo`
+* → `/`.
+*
+* A pathname outside the base is returned unchanged. It cannot be served by
+* this deployment at all, so there is no better answer than letting the
+* resulting fetch 404 and the router hard-navigate — visibly wrong beats
+* silently rewritten.
+*
+* @param base A normalized base (see `normalizeBasePath`).
+*/
+function stripBasePath(base, pathname) {
+	if (base === "/") return pathname;
+	const withoutTrailingSlash = base.slice(0, -1);
+	if (pathname === withoutTrailingSlash) return "/";
+	if (!pathname.startsWith(base)) return pathname;
+	return pathname.slice(withoutTrailingSlash.length);
+}
+/**
+* Prefix a route-space, root-relative path with the base.
+* `/_rsc/about/index.rsc` → `/repo/_rsc/about/index.rsc`.
+*
+* @param base A normalized base (see `normalizeBasePath`).
+*/
+function withBasePath(base, path) {
+	if (base === "/") return path;
+	return path.startsWith("/") ? base.slice(0, -1) + path : `${base}${path}`;
+}
+//#endregion
+export { withBasePath as i, normalizeBasePath as n, stripBasePath as r, isRelativeBase as t };
+
+//# sourceMappingURL=base-path-DaQrzbez.js.map

package/dist/_chunks/base-path-DaQrzbez.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-path-DaQrzbez.js","names":[],"sources":["../../src/shared/base-path.ts"],"sourcesContent":["/**\n * Deployment base path — Vite's resolved `base`, as it applies to the URLs\n * timber addresses at runtime.\n *\n * A static build deployed under a sub-path (`base: '/repo/'`, the GitHub\n * Pages project-site layout) serves every generated file below that prefix:\n * the document for `/about` lives at `/repo/about/index.html`, its flight\n * payload at `/repo/_rsc/about/index.rsc`. The client works in *route space* — the\n * paths the app declares — so both a strip (browser URL → route path) and a\n * prefix (route-space path → URL) are needed, and this module owns both.\n *\n * Pure functions, no state: the caller supplies the base. `client/rsc-fetch.ts`\n * holds the client's copy, set at bootstrap from `virtual:timber-config`.\n *\n * See design/11-platform.md §\"Deploying under a non-root base\" (TIM-1261).\n */\n\n/** `https://cdn.example.com/`, `//cdn.example.com/` — a base pointing off-origin. */\nfunction isAbsoluteUrlBase(base: string): boolean {\n  return base.startsWith('//') || /^[a-z][a-z0-9+.-]*:\\/\\//i.test(base);\n}\n\n/**\n * True when `base` is document-relative (`'./'`, `'foo/'`) — it makes asset\n * URLs resolve against whatever document loaded them, which says nothing\n * about where the deployment sits, so no prefix can be computed from it.\n */\nexport function isRelativeBase(base: string | undefined): boolean {\n  if (!base) return false;\n  return !base.startsWith('/') && !isAbsoluteUrlBase(base);\n}\n\n/**\n * Normalize Vite's `base` into a path prefix. Always returns a value with a\n * leading and trailing slash.\n *\n * Two forms carry no usable deployment prefix and normalize to `/`:\n *\n * - **An absolute-URL base** points *assets* at a CDN. The HTML documents and\n *   `.rsc` payloads are still served from the deployment origin, so their\n *   URLs stay root-relative. This is correct, not a degradation.\n * - **A relative base** — see `isRelativeBase`. The static build warns,\n *   because SPA navigation then only works at the domain root.\n */\nexport function normalizeBasePath(base: string | undefined): string {\n  if (!base) return '/';\n  if (isAbsoluteUrlBase(base) || isRelativeBase(base)) return '/';\n  return base.endsWith('/') ? base : `${base}/`;\n}\n\n/**\n * Strip the base prefix from a browser pathname, returning the route-space\n * path. With base `/repo/`: `/repo/about` → `/about`, `/repo/` and `/repo`\n * → `/`.\n *\n * A pathname outside the base is returned unchanged. It cannot be served by\n * this deployment at all, so there is no better answer than letting the\n * resulting fetch 404 and the router hard-navigate — visibly wrong beats\n * silently rewritten.\n *\n * @param base A normalized base (see `normalizeBasePath`).\n */\nexport function stripBasePath(base: string, pathname: string): string {\n  if (base === '/') return pathname;\n  const withoutTrailingSlash = base.slice(0, -1);\n  if (pathname === withoutTrailingSlash) return '/';\n  if (!pathname.startsWith(base)) return pathname;\n  return pathname.slice(withoutTrailingSlash.length);\n}\n\n/**\n * Prefix a route-space, root-relative path with the base.\n * `/_rsc/about/index.rsc` → `/repo/_rsc/about/index.rsc`.\n *\n * @param base A normalized base (see `normalizeBasePath`).\n */\nexport function withBasePath(base: string, path: string): string {\n  if (base === '/') return path;\n  return path.startsWith('/') ? base.slice(0, -1) + path : `${base}${path}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,SAAS,kBAAkB,MAAuB;CAChD,OAAO,KAAK,WAAW,IAAI,KAAK,2BAA2B,KAAK,IAAI;AACtE;;;;;;AAOA,SAAgB,eAAe,MAAmC;CAChE,IAAI,CAAC,MAAM,OAAO;CAClB,OAAO,CAAC,KAAK,WAAW,GAAG,KAAK,CAAC,kBAAkB,IAAI;AACzD;;;;;;;;;;;;;AAcA,SAAgB,kBAAkB,MAAkC;CAClE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,kBAAkB,IAAI,KAAK,eAAe,IAAI,GAAG,OAAO;CAC5D,OAAO,KAAK,SAAS,GAAG,IAAI,OAAO,GAAG,KAAK;AAC7C;;;;;;;;;;;;;AAcA,SAAgB,cAAc,MAAc,UAA0B;CACpE,IAAI,SAAS,KAAK,OAAO;CACzB,MAAM,uBAAuB,KAAK,MAAM,GAAG,EAAE;CAC7C,IAAI,aAAa,sBAAsB,OAAO;CAC9C,IAAI,CAAC,SAAS,WAAW,IAAI,GAAG,OAAO;CACvC,OAAO,SAAS,MAAM,qBAAqB,MAAM;AACnD;;;;;;;AAQA,SAAgB,aAAa,MAAc,MAAsB;CAC/D,IAAI,SAAS,KAAK,OAAO;CACzB,OAAO,KAAK,WAAW,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,OAAO,GAAG,OAAO;AACrE"}