@timber-js/app 0.2.0-alpha.209 → 0.2.0-alpha.210

package/dist/_chunks/{scanner-Bw0oq1HB.js → scanner-DmqdxzbW.js}

@@ -1,11 +1,12 @@
-import { a as isDynamicMetadataExtension, n as classifyMetadataRoute } from "./metadata-routes-DSDjM_hJ.js";
-import { n as NULL_BYTE_RE, t as ENCODED_SEPARATOR_RE } from "./canonicalize-CgHoscYO.js";
-import { t as matchUrlParts } from "./tree-match-6yihorhk.js";
 import { i as DEFAULT_PAGE_EXTENSIONS, n as classifyUrlSegment, r as effectiveUrlSegment, t as classifySegment } from "./segment-classify-C539Pa2O.js";
 import { n as treePathDepth, t as computeSegmentTreePaths } from "./segment-keys-D5hu1hz4.js";
-import { _ as swallow } from "./logger-DiDt5ppH.js";
+import { t as matchUrlParts } from "./tree-match-6yihorhk.js";
+import { a as isDynamicMetadataExtension, n as classifyMetadataRoute } from "./metadata-routes-DSDjM_hJ.js";
+import { n as NULL_BYTE_RE, t as ENCODED_SEPARATOR_RE } from "./canonicalize-CgHoscYO.js";
+import { v as swallow } from "./logger-BP0LN6vP.js";
+import { parseAst } from "vite";
 import { basename, extname, join } from "node:path";
-import { readdirSync, statSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 //#region src/routing/collision-probe.ts
 /**
 * Find a URL in this collision space whose winner depends on `children` order,
@@ -1243,6 +1244,389 @@ function throwNestedSlot(slotPath, enclosingSlotPath) {
 	throw new Error(`Build error: parallel slot nested inside another parallel slot.\n  Directory: app/${slotPath}\n  Inside:    app/${enclosingSlotPath}\nA parallel slot is resolved only for a segment on the matched route chain, and a slot's own subtree is never on that chain — the slot resolver walks the slot's matched chain to apply its layouts, error boundaries and access gates, and never looks at slots declared inside it. So app/${slotPath} and everything below it can never render, and no request-time signal can tell you: an unreachable slot produces exactly what a slot that simply did not match produces.\nDeclare the slot on a segment of the main route chain instead, or move its pages into app/${enclosingSlotPath}'s own subtree.\nSee design/07-routing.md §"Parallel Routes".`);
 }
 //#endregion
+//#region src/routing/file-cache.ts
+var cache = /* @__PURE__ */ new Map();
+/**
+* Read a file's text content, returning a cached copy when the file
+* hasn't been modified since the last read (checked via mtime + size).
+*
+* Falls back to a fresh read on any stat/read error.
+*/
+function readFileCached(filePath) {
+	try {
+		const stat = statSync(filePath);
+		const entry = cache.get(filePath);
+		if (entry && entry.mtimeMs === stat.mtimeMs && entry.size === stat.size) return entry.content;
+		const content = readFileSync(filePath, "utf-8");
+		cache.set(filePath, {
+			mtimeMs: stat.mtimeMs,
+			size: stat.size,
+			content
+		});
+		return content;
+	} catch {
+		cache.delete(filePath);
+		return readFileSync(filePath, "utf-8");
+	}
+}
+//#endregion
+//#region src/routing/export-detect.ts
+/**
+* AST-based export detection for route files.
+*
+* Uses Vite's `parseAst` (backed by oxc) to precisely detect named and
+* default exports, replacing the regex-based approach that was fragile
+* with TypeScript syntax (type exports, `as` aliases, comments, etc.).
+*/
+function tryParse(source) {
+	try {
+		return parseAst(source, { lang: "tsx" });
+	} catch {
+		return null;
+	}
+}
+/**
+* Collect all named export identifiers from a parsed program.
+* Handles: `export function X`, `export const X`, `export { X }`,
+* `export { X } from '...'`, `export { Y as X }`.
+*/
+function collectNamedExports(program) {
+	const names = /* @__PURE__ */ new Set();
+	for (const stmt of program.body) {
+		if (stmt.type !== "ExportNamedDeclaration") continue;
+		if (stmt.exportKind === "type") continue;
+		if (stmt.declaration) {
+			if (stmt.declaration.id?.name) names.add(stmt.declaration.id.name);
+			if (stmt.declaration.declarations) {
+				for (const decl of stmt.declaration.declarations) if (decl.id?.name) names.add(decl.id.name);
+			}
+		}
+		if (stmt.specifiers) for (const spec of stmt.specifiers) {
+			if (spec.exportKind === "type") continue;
+			if (spec.exported?.name && spec.exported.name !== "default") names.add(spec.exported.name);
+		}
+	}
+	return names;
+}
+/**
+* The specifier exporting a *runtime* default from this statement, if any.
+*
+* Type-only exports erase, so they are not default exports at runtime — and
+* TypeScript spells that two ways, on two different nodes: `export type { X as
+* default }` marks the **statement**, `export { type X as default }` marks the
+* **specifier**. Both have to be checked, or a type alias reads as a component:
+* a status file whose only default is a type has nothing for the error boundary
+* to receive (the renderer's `mod?.default` skips it), so treating it as one
+* would fail a build over a file that cannot break anything.
+*
+* One implementation because two callers must agree on what "has a default
+* export" means: `hasDefaultExport` decides whether to warn that a page has
+* none, and `fileDefaultExportIsLocalValue` decides whether to fail the build.
+*/
+function defaultSpecifier(stmt) {
+	if (stmt.type !== "ExportNamedDeclaration" || !stmt.specifiers) return null;
+	if (stmt.exportKind === "type") return null;
+	for (const spec of stmt.specifiers) {
+		if (spec.exportKind === "type") continue;
+		if (spec.exported?.name === "default") return spec;
+	}
+	return null;
+}
+/**
+* Check whether a program has a default export.
+* Handles: `export default ...`, `export { X as default }`,
+* `export { default } from '...'`. Type-only defaults do not count —
+* see `defaultSpecifier`.
+*/
+function hasDefaultExport(program) {
+	for (const stmt of program.body) {
+		if (stmt.type === "ExportDefaultDeclaration") return true;
+		if (defaultSpecifier(stmt)) return true;
+	}
+	return false;
+}
+/**
+* Check whether a program has any bare `export * from '...'` declarations.
+* Excludes `export * as X from '...'` (namespace re-exports) since those
+* create a namespace object, not individual top-level exports.
+*/
+function hasStarExport(program) {
+	return program.body.some((stmt) => stmt.type === "ExportAllDeclaration" && !stmt.exported && stmt.exportKind !== "type");
+}
+/**
+* Check if a file has any of the given named exports.
+* Returns the set of matching export names.
+*/
+function fileHasAnyExport(filePath, exportNames) {
+	const matches = /* @__PURE__ */ new Set();
+	try {
+		const program = tryParse(readFileCached(filePath));
+		if (!program) return matches;
+		const exports = collectNamedExports(program);
+		for (const name of exportNames) if (exports.has(name)) matches.add(name);
+	} catch {}
+	return matches;
+}
+/**
+* Check if a file has a default export.
+* Returns false if the file doesn't exist or can't be parsed.
+*/
+function fileHasDefaultExport(filePath) {
+	if (!existsSync(filePath)) return false;
+	try {
+		const program = tryParse(readFileCached(filePath));
+		if (!program) return false;
+		return hasDefaultExport(program);
+	} catch {
+		return false;
+	}
+}
+/** Node types whose value is unambiguously constructed by this module. */
+var FUNCTION_LIKE = /* @__PURE__ */ new Set([
+	"FunctionDeclaration",
+	"FunctionExpression",
+	"ArrowFunctionExpression",
+	"ClassDeclaration",
+	"ClassExpression"
+]);
+/**
+* Expression wrappers that erase at runtime and so cannot change where a value
+* was constructed: `X as T`, `X satisfies T`, `<T>X`, `X!`, `X<T>`, `(X)`.
+*/
+var TRANSPARENT_WRAPPERS = /* @__PURE__ */ new Set([
+	"TSAsExpression",
+	"TSSatisfiesExpression",
+	"TSTypeAssertion",
+	"TSNonNullExpression",
+	"TSInstantiationExpression",
+	"ParenthesizedExpression"
+]);
+/**
+* Strip runtime-transparent wrappers so the node underneath can be classified.
+*
+* Without this, `(() => <h1 />) satisfies React.FC` reads as a
+* `TSSatisfiesExpression` rather than the arrow function it compiles to, and a
+* provably-local component is misread as one whose origin cannot be
+* determined — turning a build error into a warning.
+*/
+function unwrapTransparent(node) {
+	let current = node;
+	while (TRANSPARENT_WRAPPERS.has(current.type) && current.expression) current = current.expression;
+	return current;
+}
+/**
+* Whether `name` is bound at module top level to a function or class written
+* in this file. An imported binding can never match: imports are
+* `ImportDeclaration` specifiers, not function/class/variable declarations,
+* and a module-level name cannot be both.
+*/
+function bindsLocalFunction(program, name) {
+	for (const stmt of program.body) {
+		const decl = stmt.type === "ExportNamedDeclaration" ? stmt.declaration : stmt;
+		if (!decl) continue;
+		if ((decl.type === "FunctionDeclaration" || decl.type === "ClassDeclaration") && decl.id?.name === name) return true;
+		if (decl.type === "VariableDeclaration") {
+			for (const d of decl.declarations ?? []) if (d.id?.name === name && d.init && FUNCTION_LIKE.has(unwrapTransparent(d.init).type)) return true;
+		}
+	}
+	return false;
+}
+/**
+* Whether the default export is *provably* a value constructed by this module:
+* `export default function/class/() => {}`, or a name bound to a function or
+* class declared here — whether it leaves via `export default Name` or
+* `export { Name as default }`. Both spellings are the same fact about where
+* the value was built, so both must answer the same way.
+*
+* This is the sound half of "is this a server component?". A file with no
+* `'use client'` directive whose default export is built here is a server
+* component, full stop. Everything else — `export { default } from
+* './client-thing'`, `export default Imported`, `export default memo(X)`,
+* an unparseable file — returns false, because the exported value may have
+* been minted in a module that *does* carry the directive. Callers must not
+* infer "server component" from a missing directive alone.
+*/
+function fileDefaultExportIsLocalValue(filePath) {
+	if (!existsSync(filePath)) return false;
+	try {
+		const program = tryParse(readFileCached(filePath));
+		if (!program) return false;
+		for (const stmt of program.body) {
+			if (stmt.type === "ExportDefaultDeclaration") {
+				const decl = stmt.declaration && unwrapTransparent(stmt.declaration);
+				if (!decl) return false;
+				if (FUNCTION_LIKE.has(decl.type)) return true;
+				if (decl.type === "Identifier" && decl.name) return bindsLocalFunction(program, decl.name);
+				return false;
+			}
+			const spec = defaultSpecifier(stmt);
+			if (spec) {
+				if (stmt.source) return false;
+				return spec.local?.name ? bindsLocalFunction(program, spec.local.name) : false;
+			}
+		}
+		return false;
+	} catch {
+		return false;
+	}
+}
+/**
+* Check if a file has any `export * from '...'` declarations.
+* Returns false if the file doesn't exist or can't be parsed.
+*/
+function fileHasStarExport(filePath) {
+	if (!existsSync(filePath)) return false;
+	try {
+		const program = tryParse(readFileCached(filePath));
+		if (!program) return false;
+		return hasStarExport(program);
+	} catch {
+		return false;
+	}
+}
+function extractLiteralValue(node) {
+	if (!node) return void 0;
+	const n = node;
+	if (n.type === "Literal") return n.value;
+	if (n.type === "UnaryExpression" && n.operator === "-" && n.argument?.type === "Literal") return -n.argument.value;
+	if (n.type === "ArrayExpression") {
+		const elements = n.elements;
+		if (!elements) return void 0;
+		const result = [];
+		for (const el of elements) {
+			const v = extractLiteralValue(el);
+			if (v === void 0) return void 0;
+			result.push(v);
+		}
+		return result;
+	}
+}
+function extractObjectLiteral(node) {
+	if (node.type !== "ObjectExpression") return void 0;
+	const props = node.properties;
+	if (!props) return void 0;
+	const result = {};
+	for (const prop of props) {
+		const p = prop;
+		if (p.type === "SpreadElement") return void 0;
+		if (p.type !== "Property" || p.computed) return void 0;
+		const key = p.key?.type === "Identifier" ? p.key.name : p.key?.type === "Literal" ? String(p.key.value) : void 0;
+		if (!key) return void 0;
+		const value = extractLiteralValue(p.value);
+		if (value === void 0) return void 0;
+		result[key] = value;
+	}
+	return result;
+}
+/**
+* Extract the value of `export const prerender` from a file.
+* Returns undefined if the file doesn't export `prerender` or can't be parsed.
+*
+* Supports:
+*   export const prerender = true;
+*   export const prerender = false;
+*   export const prerender = { ttl: 3600, tags: ['docs'] };
+*/
+function getPrerenderExport(filePath) {
+	if (!existsSync(filePath)) return void 0;
+	try {
+		const program = tryParse(readFileCached(filePath));
+		if (!program) return void 0;
+		for (const stmt of program.body) {
+			if (stmt.type !== "ExportNamedDeclaration") continue;
+			if (stmt.exportKind === "type") continue;
+			if (!stmt.declaration) continue;
+			const decl = stmt.declaration;
+			if (decl.type !== "VariableDeclaration") continue;
+			const declarations = decl.declarations;
+			if (!declarations) continue;
+			for (const d of declarations) {
+				if (d.id?.name !== "prerender" || !d.init) continue;
+				const init = d.init;
+				if (init.type === "Literal" && typeof init.value === "boolean") return init.value;
+				if (init.type === "ObjectExpression") {
+					const obj = extractObjectLiteral(init);
+					if (!obj) return void 0;
+					const result = {};
+					if ("ttl" in obj && typeof obj.ttl === "number") result.ttl = obj.ttl;
+					if ("tags" in obj && Array.isArray(obj.tags) && obj.tags.every((t) => typeof t === "string")) result.tags = obj.tags;
+					return result;
+				}
+				return;
+			}
+		}
+		return;
+	} catch {
+		return;
+	}
+}
+function getCsrfExport(filePath) {
+	if (!existsSync(filePath)) return "absent";
+	const program = tryParse(readFileCached(filePath));
+	if (!program) return "absent";
+	let found = "absent";
+	for (const stmt of program.body) {
+		if (stmt.type !== "ExportNamedDeclaration" || stmt.exportKind === "type") continue;
+		for (const spec of stmt.specifiers ?? []) if (spec.exportKind !== "type" && specifierName(spec.exported) === "csrf") return "invalid";
+		const decl = stmt.declaration;
+		if (!decl) continue;
+		if (decl.id?.name === "csrf") return "invalid";
+		if (decl.type !== "VariableDeclaration") continue;
+		for (const d of decl.declarations ?? []) {
+			const id = d.id;
+			if (id?.type === "Identifier") {
+				if (id.name !== "csrf") continue;
+				const init = d.init && unwrapTransparent(d.init);
+				const literalFalse = init?.type === "Literal" && init.value === false;
+				if (decl.kind !== "const" || !literalFalse) return "invalid";
+				found = "exempt";
+			} else if (id && patternBinds(id, "csrf")) return "invalid";
+		}
+	}
+	return found;
+}
+/** An export specifier's name: `csrf` or the string literal `"csrf"`. */
+function specifierName(node) {
+	if (!node) return void 0;
+	return typeof node.value === "string" ? node.value : node.name;
+}
+/** Whether a destructuring pattern binds `name` anywhere inside it. */
+function patternBinds(node, name) {
+	if (!node || typeof node !== "object") return false;
+	const n = node;
+	switch (n.type) {
+		case "Identifier": return n.name === name;
+		case "ObjectPattern": return (n.properties ?? []).some((prop) => {
+			const p = prop;
+			return patternBinds(p.type === "RestElement" ? p.argument : p.value, name);
+		});
+		case "ArrayPattern": return (n.elements ?? []).some((el) => patternBinds(el, name));
+		case "RestElement": return patternBinds(n.argument, name);
+		case "AssignmentPattern": return patternBinds(n.left, name);
+		default: return false;
+	}
+}
+/**
+* Check if a file starts with a specific directive (e.g. "use client").
+* Directives are string literal expression statements at the top of the file.
+*/
+function fileHasDirective(filePath, directive) {
+	if (!existsSync(filePath)) return false;
+	try {
+		const program = tryParse(readFileCached(filePath));
+		if (!program) return false;
+		for (const stmt of program.body) {
+			if (stmt.type !== "ExpressionStatement") break;
+			const expr = stmt.expression;
+			if (expr?.type !== "Literal" || typeof expr.value !== "string") break;
+			if (expr.value === directive) return true;
+		}
+		return false;
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/routing/scanner.ts
 /**
 * Route discovery scanner.
@@ -1435,6 +1819,7 @@ function scanSegmentFiles(dirPath, node, extSet) {
 		}
 	}
 	if (node.route && node.page) throw new Error(`Build error: route.ts and page.* cannot coexist in the same segment.\n  route.ts: ${node.route.filePath}\n  page:     ${node.page.filePath}\nA URL is either an API endpoint or a rendered page, not both.`);
+	if (node.route && getCsrfExport(node.route.filePath) === "exempt") node.csrfExempt = true;
 }
 /**
 * Throw a build error for two files claiming the same convention slot in
@@ -1666,6 +2051,6 @@ function findScriptExtFile(dirPath, name) {
 	}
 }
 //#endregion
-export { scanRoutes as n, collectInterceptionRewrites as r, isRouteConventionFile as t };
+export { fileHasDefaultExport as a, getCsrfExport as c, collectInterceptionRewrites as d, fileHasAnyExport as i, getPrerenderExport as l, scanRoutes as n, fileHasDirective as o, fileDefaultExportIsLocalValue as r, fileHasStarExport as s, isRouteConventionFile as t, readFileCached as u };
 
-//# sourceMappingURL=scanner-Bw0oq1HB.js.map
+//# sourceMappingURL=scanner-DmqdxzbW.js.map