@vigla/kit 0.0.0-stage → 0.1.1

package/dist/server/actions.js

@@ -0,0 +1,118 @@
+import { isForm, negotiate } from '../shared/http.js';
+import { serialize } from '../shared/serialization.js';
+import { ActionFailure, HttpError, Redirect } from '../shared/outcomes.js';
+import { FrameworkError, handleError } from './failure.js';
+import { runRequest } from './scope.js';
+import { versionHeader } from './headers.js';
+import * as errors from './errors.js';
+import { handleFormPost } from './remote/handler.js';
+import { identity } from '../shared/identity.js';
+export function actionLocation(url) {
+    const location = new URL(url);
+    for (const key of location.searchParams.keys())
+        if (key.startsWith('/')) {
+            location.searchParams.delete(key);
+            break;
+        }
+    return ((location.pathname.startsWith('//') ? `/.${location.pathname}` : location.pathname) +
+        location.search);
+}
+export function wantsActionJson(request) {
+    return (request.method === 'POST' &&
+        negotiate(request.headers.get('accept') ?? '*/*', ['application/json', 'text/html']) ===
+            'application/json');
+}
+export async function runAction(server, store, node) {
+    const { event } = store;
+    const location = actionLocation(event.url);
+    const remote = event.url.searchParams.get('/remote');
+    if (remote)
+        return handleFormPost(store, remote);
+    if (!node?.actions) {
+        event.setHeaders({ allow: 'GET' });
+        return { type: 'error', location, error: new FrameworkError(405, 'Method Not Allowed') };
+    }
+    const actions = node.actions;
+    if (actions.default && Object.keys(actions).length > 1)
+        errors.action_default_with_named();
+    try {
+        const selected = [...new URL(event.request.url).searchParams.keys()].find((key) => key.startsWith('/'));
+        const name = selected ? selected.slice(1) : 'default';
+        if (selected && name === 'default')
+            errors.action_name_reserved();
+        if (!Object.hasOwn(actions, name))
+            throw new FrameworkError(404, 'Not Found', `No action with name '${name}' found`);
+        if (!isForm(event.request))
+            throw new FrameworkError(415, 'Unsupported Media Type', `Form actions expect form-encoded data — received ${event.request.headers.get('content-type')}`);
+        const data = await server.tracer.span(`${identity.name}.form_action`, { [`${identity.name}.form_action.name`]: name, 'http.route': event.route.id ?? 'unknown' }, async (span) => {
+            const traced = { ...event, tracing: { ...event.tracing, current: span } };
+            return runRequest({ ...store, event: traced }, () => actions[name](traced));
+        });
+        if (data instanceof Redirect)
+            errors.action_return_redirect();
+        if (data instanceof HttpError)
+            errors.action_return_error();
+        if (data instanceof ActionFailure)
+            return { type: 'failure', status: data.status, location, data: data.data };
+        return { type: 'success', status: 200, location, data };
+    }
+    catch (error) {
+        if (error instanceof Redirect)
+            return { type: 'redirect', status: error.status, location: error.location };
+        if (error instanceof ActionFailure) {
+            try {
+                errors.action_throw_fail();
+            }
+            catch (failure) {
+                error = failure;
+            }
+        }
+        return { type: 'error', error, location };
+    }
+}
+export function serializeAction(data, server, id) {
+    try {
+        return serialize(data, server.hooks.transport);
+    }
+    catch (error) {
+        if (data instanceof Response)
+            errors.action_response_not_serializable({ id });
+        if (error instanceof Error && 'path' in error)
+            errors.action_data_not_serializable({
+                id,
+                message: error.message,
+                path: error.path ? `data${error.path}` : ''
+            });
+        throw error;
+    }
+}
+export async function actionResponse(server, store, result) {
+    let payload;
+    let status = 200;
+    if (result.type === 'error') {
+        const error = await handleError(store, result.error);
+        payload = { ...result, error };
+        status = error.status;
+    }
+    else if (result.type === 'redirect')
+        payload = result;
+    else if (result.type === 'success' && !result.data)
+        payload = { ...result, status: 204, data: undefined };
+    else {
+        try {
+            payload = {
+                ...result,
+                data: serializeAction(result.data, server, store.event.route.id ?? '')
+            };
+            status = result.status;
+        }
+        catch (error) {
+            return actionResponse(server, store, { type: 'error', error, location: result.location });
+        }
+    }
+    return Response.json(payload, {
+        status,
+        headers: versionHeader(server.options)
+    });
+}
+//# sourceMappingURL=actions.js.map

package/dist/server/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/server/actions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAOjD,MAAM,UAAU,cAAc,CAAC,GAAQ;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE;QAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM;QACP,CAAC;IACF,OAAO,CACN,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACnF,QAAQ,CAAC,MAAM,CACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC/C,OAAO,CACN,OAAO,CAAC,MAAM,KAAK,MAAM;QACzB,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;YACnF,kBAAkB,CACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC9B,MAAc,EACd,KAAmB,EACnB,IAAiB;IAEjB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,MAAM;QAAE,OAAO,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QACpB,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,cAAc,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,yBAAyB,EAAE,CAAC;IAC3F,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACjF,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CACnB,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtD,IAAI,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;YAChC,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,wBAAwB,IAAI,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YACzB,MAAM,IAAI,cAAc,CACvB,GAAG,EACH,wBAAwB,EACxB,oDAAoD,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAC/F,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACpC,GAAG,QAAQ,CAAC,IAAI,cAAc,EAC9B,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,SAAS,EAAE,EAC1F,KAAK,EAAE,IAAI,EAAE,EAAE;YACd,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1E,OAAO,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,CAAC,CACD,CAAC;QACF,IAAI,IAAI,YAAY,QAAQ;YAAE,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAC9D,IAAI,IAAI,YAAY,SAAS;YAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC5D,IAAI,IAAI,YAAY,aAAa;YAChC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,QAAQ;YAC5B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC7E,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC;gBACJ,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBAClB,KAAK,GAAG,OAAO,CAAC;YACjB,CAAC;QACF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;AACF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,MAAc,EAAE,EAAU;IACxE,IAAI,CAAC;QACJ,OAAO,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,IAAI,YAAY,QAAQ;YAAE,MAAM,CAAC,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9E,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK;YAC5C,MAAM,CAAC,4BAA4B,CAAC;gBACnC,EAAE;gBACF,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;aAC3C,CAAC,CAAC;QACJ,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,MAAc,EACd,KAAmB,EACnB,MAAoB;IAEpB,IAAI,OAAgB,CAAC;IACrB,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;QAC/B,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,GAAG,MAAM,CAAC;SACnD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI;QACjD,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SAClD,CAAC;QACL,IAAI,CAAC;YACJ,OAAO,GAAG;gBACT,GAAG,MAAM;gBACT,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;aACtE,CAAC;YACF,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3F,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE;QAC7B,MAAM;QACN,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC;KACtC,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/cookies.d.ts

@@ -0,0 +1,14 @@
+import type { SerializeOptions } from 'cookie';
+import type { Cookies } from '../types/request.ts';
+import type { TrailingSlash } from '../types/internal/data.ts';
+export declare class CookieJar {
+    #private;
+    readonly cookies: Cookies;
+    constructor(request: Request, url: URL, dev: boolean, paths?: Map<string, Set<string>>);
+    set(name: string, value: string, options: SerializeOptions): void;
+    route(slash: TrailingSlash): void;
+    header(destination: URL, explicit: string | null): string;
+    apply(headers: Headers): void;
+    seal(): void;
+}
+//# sourceMappingURL=cookies.d.ts.map

package/dist/server/cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/server/cookies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAgB,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAW/D,qBAAa,SAAS;;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAa1B,YAAY,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAiDrF;IA8BD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI,CA2BhE;IAED,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAShC;IAED,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAaxD;IAED,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAa5B;IAED,IAAI,IAAI,IAAI,CAEX;CACD"}

package/dist/server/cookies.js

@@ -0,0 +1,167 @@
+import { parseCookie, parseSetCookie, stringifySetCookie } from 'cookie';
+import { addDataSuffix } from '../shared/pathname.js';
+import * as errors from './errors.js';
+import * as warnings from './warnings.js';
+export class CookieJar {
+    cookies;
+    #url;
+    #header;
+    #raw;
+    #changes = new Map();
+    #queue = [];
+    #defaults;
+    #paths;
+    #dev;
+    #parsed;
+    #normalized = null;
+    #sealed = false;
+    constructor(request, url, dev, paths) {
+        this.#url = url;
+        this.#header = request.headers.get('cookie') ?? '';
+        this.#raw = parseCookie(this.#header, { decode: (value) => value });
+        this.#dev = dev;
+        this.#paths = paths;
+        this.#defaults = {
+            path: '/',
+            httpOnly: true,
+            sameSite: 'lax',
+            secure: !dev && !(url.hostname === 'localhost' && url.protocol === 'http:')
+        };
+        this.cookies = {
+            get: (name, options) => {
+                const current = this.#best(name);
+                if (current)
+                    return current.options.maxAge === 0 ? undefined : current.value;
+                const value = this.#parse(options)[name];
+                if (dev && value === undefined) {
+                    const paths = [...(this.#paths?.get(name) ?? [])].filter((path) => path !== url.pathname && pathMatches(path, url.pathname));
+                    if (paths.length)
+                        warnings.cookie_path_mismatch({
+                            name,
+                            pathname: url.pathname,
+                            paths: paths.join(' and ')
+                        });
+                }
+                return value;
+            },
+            getAll: (options) => {
+                const values = { ...this.#parse(options) };
+                for (const name of new Set([...this.#changes.values()].map((cookie) => cookie.name))) {
+                    const cookie = this.#best(name);
+                    if (cookie)
+                        values[name] = cookie.options.maxAge === 0 ? undefined : cookie.value;
+                }
+                return Object.entries(values).flatMap(([name, value]) => value === undefined ? [] : [{ name, value }]);
+            },
+            set: (name, value, options) => this.set(name, value, { ...this.#defaults, ...options }),
+            delete: (name, options) => this.set(name, '', { ...this.#defaults, ...options, maxAge: 0 }),
+            parse: parseSetCookie,
+            serialize: (name, value, options = {}) => {
+                const path = this.#path(options.path ?? '/', options.domain, true);
+                const { encode, ...attributes } = { ...this.#defaults, ...options, path };
+                return stringifySetCookie({ name, value, ...attributes }, { encode });
+            }
+        };
+    }
+    #parse(options) {
+        if (options?.decode)
+            return parseCookie(this.#header, options);
+        return (this.#parsed ??= parseCookie(this.#header));
+    }
+    #best(name) {
+        let chosen;
+        for (const cookie of this.#changes.values()) {
+            if (cookie.name === name &&
+                domainMatches(this.#url.hostname, cookie.options.domain) &&
+                pathMatches(this.#url.pathname, cookie.options.path) &&
+                (!chosen || cookie.options.path.length > chosen.options.path.length))
+                chosen = cookie;
+        }
+        return chosen;
+    }
+    #path(path, domain, serialize = false) {
+        if (domain && domain !== this.#url.hostname)
+            return path;
+        if (this.#normalized === null) {
+            if (serialize)
+                errors.cookies_serialize_before_route();
+            throw new Error('Cookie path resolved before routing');
+        }
+        return new URL(path, new URL(this.#normalized, this.#url.origin)).pathname;
+    }
+    set(name, value, options) {
+        if (this.#sealed)
+            errors.cookies_set_after_response();
+        if (this.#normalized === null) {
+            this.#queue.push(() => this.set(name, value, options));
+            return;
+        }
+        const path = this.#path(options.path ?? '/', options.domain);
+        if (this.#dev) {
+            const encoder = new TextEncoder();
+            if (encoder.encode(name).byteLength +
+                encoder.encode((options.encode ?? encodeURIComponent)(value)).byteLength >
+                4096)
+                errors.cookie_too_large({ name });
+            if (this.#paths) {
+                const paths = this.#paths.get(name) ?? new Set();
+                if (value)
+                    paths.add(path);
+                else
+                    paths.delete(path);
+                this.#paths.set(name, paths);
+            }
+        }
+        this.#changes.set(`${options.domain ?? ''}${path}?${encodeURIComponent(name)}`, {
+            name,
+            value,
+            options: { ...options, path }
+        });
+    }
+    route(slash) {
+        const path = this.#url.pathname;
+        this.#normalized =
+            slash === 'always' && !path.endsWith('/')
+                ? `${path}/`
+                : slash === 'never' && path !== '/'
+                    ? path.replace(/\/$/, '')
+                    : path;
+        for (const apply of this.#queue.splice(0))
+            apply();
+    }
+    header(destination, explicit) {
+        const values = { ...this.#raw };
+        for (const { name, value, options } of this.#changes.values()) {
+            if (domainMatches(destination.hostname, options.domain) &&
+                pathMatches(destination.pathname, options.path))
+                values[name] = (options.encode ?? encodeURIComponent)(value);
+        }
+        if (explicit)
+            Object.assign(values, parseCookie(explicit, { decode: (value) => value }));
+        return Object.entries(values)
+            .map(([name, value]) => `${name}=${value}`)
+            .join('; ');
+    }
+    apply(headers) {
+        for (const { name, value, options } of this.#changes.values()) {
+            const { encode, ...attributes } = options;
+            headers.append('set-cookie', stringifySetCookie({ name, value, ...attributes }, { encode }));
+            if (options.path.endsWith('.html'))
+                headers.append('set-cookie', stringifySetCookie({ name, value, ...attributes, path: addDataSuffix(options.path) }, { encode }));
+        }
+    }
+    seal() {
+        this.#sealed = true;
+    }
+}
+function domainMatches(host, domain) {
+    const constraint = domain?.replace(/^\./, '');
+    return !constraint || host === constraint || host.endsWith(`.${constraint}`);
+}
+function pathMatches(path, constraint) {
+    if (!constraint)
+        return true;
+    const root = constraint.replace(/\/$/, '');
+    return path === root || path.startsWith(`${root}/`);
+}
+//# sourceMappingURL=cookies.js.map

package/dist/server/cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/server/cookies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AAIzE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAQ1C,MAAM,OAAO,SAAS;IACZ,OAAO,CAAU;IACjB,IAAI,CAAM;IACV,OAAO,CAAS;IAChB,IAAI,CAAqC;IACzC,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,MAAM,GAAsB,EAAE,CAAC;IAC/B,SAAS,CAAmB;IAC5B,MAAM,CAA4B;IAClC,IAAI,CAAU;IACvB,OAAO,CAAsC;IAC7C,WAAW,GAAkB,IAAI,CAAC;IAClC,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,OAAgB,EAAE,GAAQ,EAAE,GAAY,EAAE,KAAgC;QACrF,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG;YAChB,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;SAC3E,CAAC;QACF,IAAI,CAAC,OAAO,GAAG;YACd,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;gBACtB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,OAAO;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBAChC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CACvD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAClE,CAAC;oBACF,IAAI,KAAK,CAAC,MAAM;wBACf,QAAQ,CAAC,oBAAoB,CAAC;4BAC7B,IAAI;4BACJ,QAAQ,EAAE,GAAG,CAAC,QAAQ;4BACtB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;yBAC1B,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,KAAK,CAAC;YACd,CAAC;YACD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;gBACnB,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACtF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAChC,IAAI,MAAM;wBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACnF,CAAC;gBACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CACvD,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAC5C,CAAC;YACH,CAAC;YACD,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC;YACvF,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YAC3F,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE;gBACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACnE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC1E,OAAO,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,CAAC;SACD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,OAAsB;QAC5B,IAAI,OAAO,EAAE,MAAM;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,IAAY;QACjB,IAAI,MAA0B,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IACC,MAAM,CAAC,IAAI,KAAK,IAAI;gBACpB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBACpD,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;gBAEpE,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,MAAe,EAAE,SAAS,GAAG,KAAK;QACrD,IAAI,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC/B,IAAI,SAAS;gBAAE,MAAM,CAAC,8BAA8B,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,OAAyB;QACzD,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,0BAA0B,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACvD,OAAO;QACR,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;YAClC,IACC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;gBAC9B,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU;gBACzE,IAAI;gBAEJ,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;gBACzD,IAAI,KAAK;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;;oBACtB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;QACF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE;YAC/E,IAAI;YACJ,KAAK;YACL,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE;SAC7B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAoB;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,WAAW;YACf,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACxC,CAAC,CAAC,GAAG,IAAI,GAAG;gBACZ,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,KAAK,GAAG;oBAClC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBACzB,CAAC,CAAC,IAAI,CAAC;QACV,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,CAAC,WAAgB,EAAE,QAAuB;QAC/C,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/D,IACC,aAAa,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;gBACnD,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;gBAE/C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aAC3B,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;aAC1C,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAgB;QACrB,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC;YAC1C,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC7F,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACjC,OAAO,CAAC,MAAM,CACb,YAAY,EACZ,kBAAkB,CACjB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EACjE,EAAE,MAAM,EAAE,CACV,CACD,CAAC;QACJ,CAAC;IACF,CAAC;IAED,IAAI;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACrB,CAAC;CACD;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,MAAe;IACnD,MAAM,UAAU,GAAG,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,UAAU,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,UAAmB;IACrD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AACrD,CAAC"}

package/dist/server/csp.d.ts

@@ -0,0 +1,16 @@
+import type { CspConfig } from '../types/csp.ts';
+export declare class Csp {
+    #private;
+    readonly nonce: string;
+    readonly hashes: boolean;
+    constructor(config: CspConfig, prerender: boolean, dev: boolean);
+    get scriptNonce(): boolean;
+    get styleNonce(): boolean;
+    get scriptHash(): boolean;
+    script(content: string): Promise<void>;
+    scriptHashes(hashes: readonly string[]): void;
+    style(content: string): Promise<void>;
+    apply(headers: Headers): void;
+    meta(): string;
+}
+//# sourceMappingURL=csp.d.ts.map

package/dist/server/csp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.d.ts","sourceRoot":"","sources":["../../src/server/csp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAiB,MAAM,iBAAiB,CAAC;AAsGhE,qBAAa,GAAG;;IACf,QAAQ,CAAC,KAAK,SAAsD;IAGpE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB,YAAY,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAW9D;IAED,IAAI,WAAW,IAAI,OAAO,CAEzB;IACD,IAAI,UAAU,IAAI,OAAO,CAExB;IACD,IAAI,UAAU,IAAI,OAAO,CAExB;IAEK,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK3C;IAED,YAAY,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAK5C;IAEK,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK1C;IAED,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAK5B;IAED,IAAI,IAAI,MAAM,CAKb;CACD"}

package/dist/server/csp.js

@@ -0,0 +1,148 @@
+import { base64, sha256 } from '../shared/hash.js';
+import { escapeHtml } from '../shared/escape.js';
+import * as errors from './errors.js';
+const keywords = new Set([
+    'self',
+    'unsafe-eval',
+    'unsafe-hashes',
+    'unsafe-inline',
+    'none',
+    'strict-dynamic',
+    'report-sample',
+    'report-sha256',
+    'report-sha384',
+    'report-sha512',
+    'wasm-unsafe-eval',
+    'trusted-types-eval',
+    'unsafe-allow-redirects',
+    'unsafe-webtransport-hashes',
+    'script'
+]);
+class Policy {
+    #directives;
+    #added = new Map();
+    script;
+    style;
+    constructor(directives, dev) {
+        this.#directives = { ...directives };
+        if (dev) {
+            for (const key of ['style-src', 'style-src-attr', 'style-src-elem']) {
+                const value = this.#directives[key] ??
+                    (key === 'style-src' ? this.#directives['default-src'] : undefined);
+                if (Array.isArray(value) && !value.includes('unsafe-inline'))
+                    this.#directives[key] = [
+                        ...value.filter((source) => !/^(nonce|sha\d+)-/.test(source)),
+                        'unsafe-inline'
+                    ];
+            }
+        }
+        this.script = ['script-src', 'script-src-elem'].some((key) => this.#needs(key));
+        this.style =
+            !dev && ['style-src', 'style-src-attr', 'style-src-elem'].some((key) => this.#needs(key));
+    }
+    #needs(key) {
+        const value = this.#directives[key] ??
+            (key === 'script-src' || key === 'style-src' ? this.#directives['default-src'] : undefined);
+        return (Array.isArray(value) &&
+            (!value.includes('unsafe-inline') ||
+                (key.startsWith('script') && value.includes('strict-dynamic'))));
+    }
+    add(kind, source) {
+        if (kind === 'style' && !this.style)
+            return;
+        const keys = kind === 'script'
+            ? ['script-src', 'script-src-elem']
+            : ['style-src', 'style-src-attr', 'style-src-elem'];
+        for (const key of keys) {
+            if (!this.#needs(key))
+                continue;
+            const values = this.#added.get(key) ?? new Set();
+            if (key === 'style-src-elem')
+                values.add('sha256-9OlNO0DNEeaVzHL4RZwCLsBHA8WBQ8toBp/4F5XV2nc=');
+            values.add(source);
+            this.#added.set(key, values);
+        }
+    }
+    header(meta = false) {
+        const values = { ...this.#directives };
+        for (const [key, added] of this.#added) {
+            const base = values[key] ?? (key === 'script-src' || key === 'style-src' ? values['default-src'] : []);
+            values[key] = [...new Set([...(Array.isArray(base) ? base : []), ...added])];
+        }
+        return Object.entries(values)
+            .flatMap(([name, value]) => {
+            if (!value || (meta && ['frame-ancestors', 'report-uri', 'sandbox'].includes(name)))
+                return [];
+            return [
+                [
+                    name,
+                    ...(Array.isArray(value)
+                        ? value.map((source) => keywords.has(source) || /^(nonce|sha\d+)-/.test(source) ? `'${source}'` : source)
+                        : [])
+                ].join(' ')
+            ];
+        })
+            .join('; ');
+    }
+}
+export class Csp {
+    nonce = base64(crypto.getRandomValues(new Uint8Array(16)));
+    #enforced;
+    #report;
+    hashes;
+    constructor(config, prerender, dev) {
+        if (prerender && config.mode === 'nonce')
+            errors.prerender_nonce();
+        this.hashes = config.mode === 'hash' || ((config.mode ?? 'auto') === 'auto' && prerender);
+        this.#enforced = new Policy(config.directives ?? {}, dev);
+        this.#report = new Policy(config.reportOnly ?? {}, dev);
+        if (Object.values(config.reportOnly ?? {}).some(Boolean) &&
+            !config.reportOnly?.['report-uri']?.length &&
+            !config.reportOnly?.['report-to']?.length)
+            errors.csp_report_only_missing_report();
+    }
+    get scriptNonce() {
+        return !this.hashes && (this.#enforced.script || this.#report.script);
+    }
+    get styleNonce() {
+        return !this.hashes && (this.#enforced.style || this.#report.style);
+    }
+    get scriptHash() {
+        return this.hashes && (this.#enforced.script || this.#report.script);
+    }
+    async script(content) {
+        if (!this.#enforced.script && !this.#report.script)
+            return;
+        const source = this.hashes ? `sha256-${await sha256(content)}` : `nonce-${this.nonce}`;
+        this.#enforced.add('script', source);
+        this.#report.add('script', source);
+    }
+    scriptHashes(hashes) {
+        for (const hash of hashes) {
+            this.#enforced.add('script', hash);
+            this.#report.add('script', hash);
+        }
+    }
+    async style(content) {
+        if (!this.#enforced.style && !this.#report.style)
+            return;
+        const source = this.hashes ? `sha256-${await sha256(content)}` : `nonce-${this.nonce}`;
+        this.#enforced.add('style', source);
+        this.#report.add('style', source);
+    }
+    apply(headers) {
+        const enforced = this.#enforced.header();
+        const report = this.#report.header();
+        if (enforced)
+            headers.set('content-security-policy', enforced);
+        if (report)
+            headers.set('content-security-policy-report-only', report);
+    }
+    meta() {
+        const value = this.#enforced.header(true);
+        return value
+            ? `<meta http-equiv="content-security-policy" content="${escapeHtml(value, true)}">`
+            : '';
+    }
+}
+//# sourceMappingURL=csp.js.map

package/dist/server/csp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.js","sourceRoot":"","sources":["../../src/server/csp.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACxB,MAAM;IACN,aAAa;IACb,eAAe;IACf,eAAe;IACf,MAAM;IACN,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,wBAAwB;IACxB,4BAA4B;IAC5B,QAAQ;CACR,CAAC,CAAC;AAGH,MAAM,MAAM;IACF,WAAW,CAAU;IACrB,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,MAAM,CAAU;IAChB,KAAK,CAAU;IAExB,YAAY,UAAyB,EAAE,GAAY;QAClD,IAAI,CAAC,WAAW,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;QACrC,IAAI,GAAG,EAAE,CAAC;YACT,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBACrE,MAAM,KAAK,GACV,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;oBACrB,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACrE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;oBAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG;wBACvB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC7D,eAAe;qBACf,CAAC;YACJ,CAAC;QACF,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK;YACT,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,CAAC,GAAW;QACjB,MAAM,KAAK,GACV,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YACrB,CAAC,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7F,OAAO,CACN,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAChC,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAChE,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAwB,EAAE,MAAc;QAC3C,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QAC5C,MAAM,IAAI,GACT,IAAI,KAAK,QAAQ;YAChB,CAAC,CAAC,CAAC,YAAY,EAAE,iBAAiB,CAAC;YACnC,CAAC,CAAC,CAAC,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACzD,IAAI,GAAG,KAAK,gBAAgB;gBAC3B,MAAM,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,KAAK;QAClB,MAAM,MAAM,GAAY,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,IAAI,GACT,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3F,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aAC3B,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;YAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClF,OAAO,EAAE,CAAC;YACX,OAAO;gBACN;oBACC,IAAI;oBACJ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;wBACvB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACrB,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAChF;wBACF,CAAC,CAAC,EAAE,CAAC;iBACN,CAAC,IAAI,CAAC,GAAG,CAAC;aACX,CAAC;QACH,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CACD;AAED,MAAM,OAAO,GAAG;IACN,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,MAAM,CAAU;IAEzB,YAAY,MAAiB,EAAE,SAAkB,EAAE,GAAY;QAC9D,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,eAAe,EAAE,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,MAAM,IAAI,SAAS,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,IACC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YACpD,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE,MAAM;YAC1C,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM;YAEzC,MAAM,CAAC,8BAA8B,EAAE,CAAC;IAC1C,CAAC;IAED,IAAI,WAAW;QACd,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,UAAU;QACb,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,UAAU;QACb,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QACvF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,YAAY,CAAC,MAAyB;QACrC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;IACF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAe;QAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QACvF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAgB;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,IAAI;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,KAAK;YACX,CAAC,CAAC,uDAAuD,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;YACpF,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;CACD"}

package/dist/server/csrf.d.ts

@@ -0,0 +1,3 @@
+import type { ServerCsrf, ServerPaths } from '../types/internal/server.ts';
+export declare function csrfResponse(request: Request, remote: boolean, csrf: ServerCsrf, paths: ServerPaths): Response | null;
+//# sourceMappingURL=csrf.d.ts.map

package/dist/server/csrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE3E,wBAAgB,YAAY,CAC3B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,WAAW,GAChB,QAAQ,GAAG,IAAI,CAmBjB"}

package/dist/server/csrf.js

@@ -0,0 +1,24 @@
+import { isForm } from '../shared/http.js';
+export function csrfResponse(request, remote, csrf, paths) {
+    if (!remote && !csrf.checkOrigin)
+        return null;
+    const origin = request.headers.get('origin');
+    const self = paths.origin || new URL(request.url).origin;
+    const forbidden = remote
+        ? request.method !== 'GET' && origin !== self
+        : ['POST', 'PUT', 'PATCH', 'DELETE'].includes(request.method) &&
+            (!request.headers.has('content-type') || isForm(request)) &&
+            origin !== self &&
+            (!origin || !csrf.trustedOrigins.includes(origin));
+    if (!forbidden)
+        return null;
+    const message = remote
+        ? 'Cross-site remote requests are forbidden'
+        : `Cross-site ${request.method} form submissions are forbidden`;
+    const json = remote || request.headers.get('accept') === 'application/json';
+    return new Response(json ? JSON.stringify({ message }) : message, {
+        status: 403,
+        headers: { 'content-type': json ? 'application/json' : 'text/plain' }
+    });
+}
+//# sourceMappingURL=csrf.js.map

package/dist/server/csrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAG3C,MAAM,UAAU,YAAY,CAC3B,OAAgB,EAChB,MAAe,EACf,IAAgB,EAChB,KAAkB;IAElB,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM;QACvB,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,IAAI;QAC7C,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,KAAK,IAAI;YACf,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM;QACrB,CAAC,CAAC,0CAA0C;QAC5C,CAAC,CAAC,cAAc,OAAO,CAAC,MAAM,iCAAiC,CAAC;IACjE,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC;IAC5E,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;QACjE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,EAAE;KACrE,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/data.d.ts

@@ -0,0 +1,18 @@
+import type { DataErrorNode, DataSkippedNode, SerializedUses } from '../types/internal/data.ts';
+import type { RequestStore, ServerDataNode, Uses } from '../types/internal/server.ts';
+import type { PageBranch } from '../types/internal/routes.ts';
+import type { Server } from './index.ts';
+export declare function serializedUses(uses: Uses): SerializedUses;
+export interface SerializedData {
+    data: string;
+    chunks: AsyncIterable<string> | null;
+}
+type DataResult = ServerDataNode | DataErrorNode | DataSkippedNode | null;
+export declare class DataSerializer {
+    #private;
+    constructor(server: Server, store: RequestStore, html: boolean, namespace?: string);
+    serialize(nodes: DataResult[]): SerializedData;
+}
+export declare function dataResponse(server: Server, store: RequestStore, page: PageBranch | null, invalidated?: boolean[]): Promise<Response>;
+export {};
+//# sourceMappingURL=data.d.ts.map

package/dist/server/data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../src/server/data.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,aAAa,EAEb,eAAe,EACf,cAAc,EACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAWzC,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,cAAc,CASzD;AAED,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;CACrC;AAED,KAAK,UAAU,GAAG,cAAc,GAAG,aAAa,GAAG,eAAe,GAAG,IAAI,CAAC;AAE1E,qBAAa,cAAc;;IAQ1B,YAAY,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,SAAK,EAM7E;IA6DD,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,cAAc,CAiC7C;CACD;AAED,wBAAsB,YAAY,CACjC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,UAAU,GAAG,IAAI,EACvB,WAAW,CAAC,EAAE,OAAO,EAAE,GACrB,OAAO,CAAC,QAAQ,CAAC,CAiFnB"}