vinext 0.0.12 → 0.0.13

package/dist/server/app-router-entry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-router-entry.d.ts","sourceRoot":"","sources":["../../src/server/app-router-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;mBAOoB,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;;AADlD,wBA2CE"}
+{"version":3,"file":"app-router-entry.d.ts","sourceRoot":"","sources":["../../src/server/app-router-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;mBAMoB,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;;AADlD,wBA0CE"}

package/dist/server/app-router-entry.js

@@ -13,35 +13,33 @@
  */
 // @ts-expect-error — virtual module resolved by vinext
 import rscHandler from "virtual:vinext-rsc-entry";
-import { normalizePath } from "./normalize-path.js";
 export default {
     async fetch(request) {
         const url = new URL(request.url);
-        // Normalize backslashes (browsers treat /\ as //) then decode and normalize path.
+        // Normalize backslashes (browsers treat /\ as //) before any other checks.
         const rawPathname = url.pathname.replaceAll("\\", "/");
         // Block protocol-relative URL open redirects (//evil.com/ or /\evil.com/).
+        // Check rawPathname BEFORE decode so the guard fires before normalization.
         if (rawPathname.startsWith("//")) {
             return new Response("404 Not Found", { status: 404 });
         }
-        // Decode percent-encoding and normalize the path for middleware/route matching.
-        let normalizedPathname;
+        // Validate that percent-encoding is well-formed. The RSC handler performs
+        // the actual decode + normalize; we only check here to return a clean 400
+        // instead of letting a malformed sequence crash downstream.
         try {
-            normalizedPathname = normalizePath(decodeURIComponent(rawPathname));
+            decodeURIComponent(rawPathname);
         }
         catch {
             // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of throwing.
             return new Response("Bad Request", { status: 400 });
         }
-        // Construct a new Request with normalized pathname so the RSC entry
-        // sees the canonical path for middleware and route matching.
-        let normalizedRequest = request;
-        if (normalizedPathname !== url.pathname) {
-            const normalizedUrl = new URL(url);
-            normalizedUrl.pathname = normalizedPathname;
-            normalizedRequest = new Request(normalizedUrl, request);
-        }
-        // Delegate to RSC handler
-        const result = await rscHandler(normalizedRequest);
+        // Do NOT decode/normalize the pathname here. The RSC handler
+        // (virtual:vinext-rsc-entry) is the single point of decoding — it calls
+        // decodeURIComponent + normalizePath on the incoming URL. Decoding here
+        // AND in the handler would double-decode, causing inconsistent path
+        // matching between middleware and routing.
+        // Delegate to RSC handler (which decodes + normalizes the pathname itself)
+        const result = await rscHandler(request);
         if (result instanceof Response) {
             return result;
         }

package/dist/server/app-router-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-router-entry.js","sourceRoot":"","sources":["../../src/server/app-router-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,uDAAuD;AACvD,OAAO,UAAU,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,eAAe;IACb,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEjC,kFAAkF;QAClF,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAEvD,2EAA2E;QAC3E,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,gFAAgF;QAChF,IAAI,kBAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,kBAAkB,GAAG,aAAa,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;YAChF,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,oEAAoE;QACpE,6DAA6D;QAC7D,IAAI,iBAAiB,GAAG,OAAO,CAAC;QAChC,IAAI,kBAAkB,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,aAAa,CAAC,QAAQ,GAAG,kBAAkB,CAAC;YAC5C,iBAAiB,GAAG,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,0BAA0B;QAC1B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAEnD,IAAI,MAAM,YAAY,QAAQ,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;CACF,CAAC","sourcesContent":["/**\n * Default Cloudflare Worker entry point for vinext App Router.\n *\n * Use this directly in wrangler.jsonc:\n *   \"main\": \"vinext/server/app-router-entry\"\n *\n * Or import and delegate to it from a custom worker:\n *   import handler from \"vinext/server/app-router-entry\";\n *   return handler.fetch(request);\n *\n * This file runs in the RSC environment. Configure the Cloudflare plugin with:\n *   cloudflare({ viteEnvironment: { name: \"rsc\", childEnvironments: [\"ssr\"] } })\n */\n\n// @ts-expect-error — virtual module resolved by vinext\nimport rscHandler from \"virtual:vinext-rsc-entry\";\nimport { normalizePath } from \"./normalize-path.js\";\n\nexport default {\n  async fetch(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n\n    // Normalize backslashes (browsers treat /\\ as //) then decode and normalize path.\n    const rawPathname = url.pathname.replaceAll(\"\\\\\", \"/\");\n\n    // Block protocol-relative URL open redirects (//evil.com/ or /\\evil.com/).\n    if (rawPathname.startsWith(\"//\")) {\n      return new Response(\"404 Not Found\", { status: 404 });\n    }\n\n    // Decode percent-encoding and normalize the path for middleware/route matching.\n    let normalizedPathname: string;\n    try {\n      normalizedPathname = normalizePath(decodeURIComponent(rawPathname));\n    } catch {\n      // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of throwing.\n      return new Response(\"Bad Request\", { status: 400 });\n    }\n\n    // Construct a new Request with normalized pathname so the RSC entry\n    // sees the canonical path for middleware and route matching.\n    let normalizedRequest = request;\n    if (normalizedPathname !== url.pathname) {\n      const normalizedUrl = new URL(url);\n      normalizedUrl.pathname = normalizedPathname;\n      normalizedRequest = new Request(normalizedUrl, request);\n    }\n\n    // Delegate to RSC handler\n    const result = await rscHandler(normalizedRequest);\n\n    if (result instanceof Response) {\n      return result;\n    }\n\n    if (result === null || result === undefined) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n\n    return new Response(String(result), { status: 200 });\n  },\n};\n"]}
+{"version":3,"file":"app-router-entry.js","sourceRoot":"","sources":["../../src/server/app-router-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,uDAAuD;AACvD,OAAO,UAAU,MAAM,0BAA0B,CAAC;AAElD,eAAe;IACb,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEjC,2EAA2E;QAC3E,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAEvD,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,4DAA4D;QAC5D,IAAI,CAAC;YACH,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;YAChF,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;QAEA,6DAA6D;QAC7D,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,2CAA2C;QAE5C,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,MAAM,YAAY,QAAQ,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;CACF,CAAC","sourcesContent":["/**\n * Default Cloudflare Worker entry point for vinext App Router.\n *\n * Use this directly in wrangler.jsonc:\n *   \"main\": \"vinext/server/app-router-entry\"\n *\n * Or import and delegate to it from a custom worker:\n *   import handler from \"vinext/server/app-router-entry\";\n *   return handler.fetch(request);\n *\n * This file runs in the RSC environment. Configure the Cloudflare plugin with:\n *   cloudflare({ viteEnvironment: { name: \"rsc\", childEnvironments: [\"ssr\"] } })\n */\n\n// @ts-expect-error — virtual module resolved by vinext\nimport rscHandler from \"virtual:vinext-rsc-entry\";\n\nexport default {\n  async fetch(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n\n    // Normalize backslashes (browsers treat /\\ as //) before any other checks.\n    const rawPathname = url.pathname.replaceAll(\"\\\\\", \"/\");\n\n    // Block protocol-relative URL open redirects (//evil.com/ or /\\evil.com/).\n    // Check rawPathname BEFORE decode so the guard fires before normalization.\n    if (rawPathname.startsWith(\"//\")) {\n      return new Response(\"404 Not Found\", { status: 404 });\n    }\n\n    // Validate that percent-encoding is well-formed. The RSC handler performs\n    // the actual decode + normalize; we only check here to return a clean 400\n    // instead of letting a malformed sequence crash downstream.\n    try {\n      decodeURIComponent(rawPathname);\n    } catch {\n      // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of throwing.\n      return new Response(\"Bad Request\", { status: 400 });\n    }\n\n     // Do NOT decode/normalize the pathname here. The RSC handler\n     // (virtual:vinext-rsc-entry) is the single point of decoding — it calls\n     // decodeURIComponent + normalizePath on the incoming URL. Decoding here\n     // AND in the handler would double-decode, causing inconsistent path\n     // matching between middleware and routing.\n\n    // Delegate to RSC handler (which decodes + normalizes the pathname itself)\n    const result = await rscHandler(request);\n\n    if (result instanceof Response) {\n      return result;\n    }\n\n    if (result === null || result === undefined) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n\n    return new Response(String(result), { status: 200 });\n  },\n};\n"]}

package/dist/server/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/server/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AA+B1C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqB9D;AAED,qDAAqD;AACrD,KAAK,aAAa,GACd,MAAM,GACN,MAAM,EAAE,GACR;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAA;CAAE,EAAE,CAAC;AAE1F;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,aAAa,GAAG,SAAS,GACjC,OAAO,CAqBT;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAiCvE;AAED,oCAAoC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,QAAQ,EAAE,OAAO,CAAC;IAClB,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,gBAAgB,CAAC,CAgH3B"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/server/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AA+B1C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqB9D;AAED,qDAAqD;AACrD,KAAK,aAAa,GACd,MAAM,GACN,MAAM,EAAE,GACR;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAA;CAAE,EAAE,CAAC;AAE1F;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,aAAa,GAAG,SAAS,GACjC,OAAO,CAqBT;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAiCvE;AAED,oCAAoC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,QAAQ,EAAE,OAAO,CAAC;IAClB,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,gBAAgB,CAAC,CAyH3B"}

package/dist/server/middleware.js

@@ -176,8 +176,16 @@ export async function runMiddleware(server, middlewarePath, request) {
     if (!matchesMiddleware(normalizedPathname, matcher)) {
         return { continue: true };
     }
+    // Construct a new Request with the fully decoded + normalized pathname so
+    // middleware always sees the same canonical path that the router uses.
+    let mwRequest = request;
+    if (normalizedPathname !== url.pathname) {
+        const mwUrl = new URL(url);
+        mwUrl.pathname = normalizedPathname;
+        mwRequest = new Request(mwUrl, request);
+    }
     // Wrap in NextRequest so middleware gets .nextUrl, .cookies, .geo, .ip, etc.
-    const nextRequest = request instanceof NextRequest ? request : new NextRequest(request);
+    const nextRequest = mwRequest instanceof NextRequest ? mwRequest : new NextRequest(mwRequest);
     // Execute the middleware
     let response;
     try {

package/dist/server/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/server/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;GAGG;AACH,MAAM,WAAW,GAAG;IAClB,UAAU;IACV,UAAU;IACV,WAAW;IACX,cAAc;IACd,cAAc;IACd,eAAe;CAChB,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,kEAAkE;IAClE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,sDAAsD;gBACpD,mDAAmD,CACtD,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,OAAkC;IAElC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,+EAA+E;QAC/E,oEAAoE;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;iBAAM,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBACvD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAe;IAC5D,wCAAwC;IACxC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;QAC3C,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,kCAAkC;IACpC,CAAC;IAED,2DAA2D;IAC3D,8DAA8D;IAC9D,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,6CAA6C,CAAC;IAC9D,IAAI,GAA2B,CAAC;IAChC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACzB,4DAA4D;YAC5D,QAAQ,IAAI,UAAU,CAAC;QACzB,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,gDAAgD;YAChD,QAAQ,IAAI,SAAS,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,6BAA6B;YAC7B,QAAQ,IAAI,SAAS,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1B,QAAQ,IAAI,KAAK,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;IAC5C,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,QAAQ,KAAK,OAAO,CAAC;AAC9B,CAAC;AAoBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,cAAsB,EACtB,OAAgB;IAEhB,0DAA0D;IAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IAEvD,4EAA4E;IAC5E,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC;IAChE,IAAI,OAAO,YAAY,KAAK,UAAU,EAAE,CAAC;QACvC,6DAA6D;QAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,uBAAuB;IACvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjC,wEAAwE;IACxE,qFAAqF;IACrF,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,kBAAkB,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,6EAA6E;IAC7E,MAAM,WAAW,GAAG,OAAO,YAAY,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IAExF,yBAAyB;IACzB,IAAI,QAA8B,CAAC;IACnC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YACnC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE;gBAC9B,MAAM,EAAE,GAAG;aACZ,CAAC;SACH,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,2DAA2D;IAC3D,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,GAAG,EAAE,CAAC;QACtD,kEAAkE;QAClE,MAAM,eAAe,GAAG,IAAI,OAAO,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5C,IACE,GAAG,KAAK,mBAAmB;gBAC3B,GAAG,KAAK,sBAAsB,EAC9B,CAAC;gBACD,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC7C,CAAC;IAED,kCAAkC;IAClC,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,QAAQ;gBACrB,cAAc,EAAE,QAAQ,CAAC,MAAM;aAChC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAChE,IAAI,UAAU,EAAE,CAAC;QACf,iDAAiD;QACjD,MAAM,eAAe,GAAG,IAAI,OAAO,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;gBACnC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,sDAAsD;QACtD,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACvD,WAAW,GAAG,aAAa,CAAC,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,GAAG,UAAU,CAAC;QAC3B,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,WAAW;YACvB,aAAa,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACpE,eAAe;SAChB,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC","sourcesContent":["/**\n * proxy.ts / middleware.ts runner\n *\n * Loads and executes the user's proxy.ts (Next.js 16) or middleware.ts file\n * before routing. Runs in Node (not Edge Runtime), per the vinext design.\n *\n * In Next.js 16, proxy.ts replaces middleware.ts:\n * - proxy.ts: default export function, runs on Node.js runtime\n * - middleware.ts: deprecated but still supported for Edge runtime use cases\n *\n * The proxy/middleware receives a NextRequest and can:\n * - Return NextResponse.next() to continue to the route\n * - Return NextResponse.redirect() to redirect\n * - Return NextResponse.rewrite() to rewrite the URL\n * - Set/modify headers and cookies\n * - Return a Response directly (e.g., for auth guards)\n *\n * Supports the `config.matcher` export for path filtering.\n */\n\nimport type { ViteDevServer } from \"vite\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { NextRequest } from \"../shims/server.js\";\nimport { safeRegExp } from \"../config/config-matchers.js\";\nimport { normalizePath } from \"./normalize-path.js\";\n\n/**\n * Possible proxy/middleware file names.\n * proxy.ts (Next.js 16) is checked first, then middleware.ts (deprecated).\n */\nconst PROXY_FILES = [\n  \"proxy.ts\",\n  \"proxy.js\",\n  \"proxy.mjs\",\n  \"src/proxy.ts\",\n  \"src/proxy.js\",\n  \"src/proxy.mjs\",\n];\n\nconst MIDDLEWARE_FILES = [\n  \"middleware.ts\",\n  \"middleware.tsx\",\n  \"middleware.js\",\n  \"middleware.mjs\",\n  \"src/middleware.ts\",\n  \"src/middleware.tsx\",\n  \"src/middleware.js\",\n  \"src/middleware.mjs\",\n];\n\n/**\n * Find the proxy or middleware file in the project root.\n * Checks for proxy.ts (Next.js 16) first, then falls back to middleware.ts.\n * If middleware.ts is found, logs a deprecation warning.\n */\nexport function findMiddlewareFile(root: string): string | null {\n  // Check proxy.ts first (Next.js 16 replacement for middleware.ts)\n  for (const file of PROXY_FILES) {\n    const fullPath = path.join(root, file);\n    if (fs.existsSync(fullPath)) {\n      return fullPath;\n    }\n  }\n\n  // Fall back to middleware.ts (deprecated in Next.js 16)\n  for (const file of MIDDLEWARE_FILES) {\n    const fullPath = path.join(root, file);\n    if (fs.existsSync(fullPath)) {\n      console.warn(\n        \"[vinext] middleware.ts is deprecated in Next.js 16. \" +\n          \"Rename to proxy.ts and export a default function.\",\n      );\n      return fullPath;\n    }\n  }\n  return null;\n}\n\n/** Matcher pattern from middleware config export. */\ntype MatcherConfig =\n  | string\n  | string[]\n  | { source: string; regexp?: string; locale?: boolean; has?: any[]; missing?: any[] }[];\n\n/**\n * Check if a pathname matches the middleware matcher config.\n * If no matcher is configured, middleware runs on all paths\n * except static files and internal Next.js paths.\n */\nexport function matchesMiddleware(\n  pathname: string,\n  matcher: MatcherConfig | undefined,\n): boolean {\n  if (!matcher) {\n    // Next.js default: middleware runs on ALL paths when no matcher is configured.\n    // Users opt out of specific paths by configuring a matcher pattern.\n    return true;\n  }\n\n  const patterns: string[] = [];\n  if (typeof matcher === \"string\") {\n    patterns.push(matcher);\n  } else if (Array.isArray(matcher)) {\n    for (const m of matcher) {\n      if (typeof m === \"string\") {\n        patterns.push(m);\n      } else if (m && typeof m === \"object\" && \"source\" in m) {\n        patterns.push(m.source);\n      }\n    }\n  }\n\n  return patterns.some((pattern) => matchPattern(pathname, pattern));\n}\n\n/**\n * Match a single pattern against a pathname.\n * Supports Next.js matcher patterns:\n *   /about          -> exact match\n *   /dashboard/:path*  -> prefix match with params\n *   /api/:path+     -> one or more segments\n *   /((?!api|_next).*)  -> regex patterns\n */\nexport function matchPattern(pathname: string, pattern: string): boolean {\n  // Handle regex patterns (starts with /)\n  if (pattern.includes(\"(\") || pattern.includes(\"\\\\\")) {\n    const re = safeRegExp(\"^\" + pattern + \"$\");\n    if (re) return re.test(pathname);\n    // Fall through to simple matching\n  }\n\n  // Convert Next.js path patterns to regex in a single pass.\n  // Matches /:param*, /:param+, :param, dots, and literal text.\n  let regexStr = \"\";\n  const tokenRe = /\\/:(\\w+)\\*|\\/:(\\w+)\\+|:(\\w+)|[.]|[^/:.]+|./g;\n  let tok: RegExpExecArray | null;\n  while ((tok = tokenRe.exec(pattern)) !== null) {\n    if (tok[1] !== undefined) {\n      // /:param* → optionally match slash + zero or more segments\n      regexStr += \"(?:/.*)?\";\n    } else if (tok[2] !== undefined) {\n      // /:param+ → match slash + one or more segments\n      regexStr += \"(?:/.+)\";\n    } else if (tok[3] !== undefined) {\n      // :param → match one segment\n      regexStr += \"([^/]+)\";\n    } else if (tok[0] === \".\") {\n      regexStr += \"\\\\.\";\n    } else {\n      regexStr += tok[0];\n    }\n  }\n\n  const re = safeRegExp(\"^\" + regexStr + \"$\");\n  if (re) return re.test(pathname);\n  return pathname === pattern;\n}\n\n/** Result of running middleware. */\nexport interface MiddlewareResult {\n  /** Whether to continue to the route handler. */\n  continue: boolean;\n  /** If set, redirect to this URL. */\n  redirectUrl?: string;\n  /** HTTP status for redirect (default 307). */\n  redirectStatus?: number;\n  /** If set, rewrite to this URL (internal). */\n  rewriteUrl?: string;\n  /** HTTP status for rewrite (e.g. 403 from NextResponse.rewrite(url, { status: 403 })). */\n  rewriteStatus?: number;\n  /** Headers to set on the response. */\n  responseHeaders?: Headers;\n  /** If the middleware returned a full Response, use it directly. */\n  response?: Response;\n}\n\n/**\n * Load and execute middleware for a given request.\n *\n * @param server - Vite dev server (for SSR module loading)\n * @param middlewarePath - Absolute path to the middleware file\n * @param request - The incoming Request object\n * @returns Middleware result describing what action to take\n */\nexport async function runMiddleware(\n  server: ViteDevServer,\n  middlewarePath: string,\n  request: Request,\n): Promise<MiddlewareResult> {\n  // Load the middleware module via Vite's SSR module loader\n  const mod = await server.ssrLoadModule(middlewarePath);\n\n  // Accept: default export, named \"proxy\" (Next.js 16), or named \"middleware\"\n  const middlewareFn = mod.default ?? mod.proxy ?? mod.middleware;\n  if (typeof middlewareFn !== \"function\") {\n    // No proxy/middleware function exported — continue as normal\n    return { continue: true };\n  }\n\n  // Check matcher config\n  const config = mod.config;\n  const matcher = config?.matcher;\n  const url = new URL(request.url);\n\n  // Normalize the pathname before middleware matching to prevent bypasses\n  // via percent-encoding (/%61dmin → /admin) or double slashes (/dashboard//settings).\n  let decodedPathname: string;\n  try {\n    decodedPathname = decodeURIComponent(url.pathname);\n  } catch {\n    // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of throwing.\n    return { continue: false, response: new Response(\"Bad Request\", { status: 400 }) };\n  }\n  const normalizedPathname = normalizePath(decodedPathname);\n\n  if (!matchesMiddleware(normalizedPathname, matcher)) {\n    return { continue: true };\n  }\n\n  // Wrap in NextRequest so middleware gets .nextUrl, .cookies, .geo, .ip, etc.\n  const nextRequest = request instanceof NextRequest ? request : new NextRequest(request);\n\n  // Execute the middleware\n  let response: Response | undefined;\n  try {\n    response = await middlewareFn(nextRequest);\n  } catch (e: any) {\n    console.error(\"[vinext] Middleware error:\", e);\n    const message =\n      process.env.NODE_ENV === \"production\"\n        ? \"Internal Server Error\"\n        : \"Middleware Error: \" + (e?.message ?? String(e));\n    return {\n      continue: false,\n      response: new Response(message, {\n        status: 500,\n      }),\n    };\n  }\n\n  // No response = continue\n  if (!response) {\n    return { continue: true };\n  }\n\n  // Check for x-middleware-next header (NextResponse.next())\n  if (response.headers.get(\"x-middleware-next\") === \"1\") {\n    // Continue to the route, but apply any headers the middleware set\n    const responseHeaders = new Headers();\n    for (const [key, value] of response.headers) {\n      if (\n        key !== \"x-middleware-next\" &&\n        key !== \"x-middleware-rewrite\"\n      ) {\n        responseHeaders.set(key, value);\n      }\n    }\n    return { continue: true, responseHeaders };\n  }\n\n  // Check for redirect (3xx status)\n  if (response.status >= 300 && response.status < 400) {\n    const location = response.headers.get(\"Location\") ?? response.headers.get(\"location\");\n    if (location) {\n      return {\n        continue: false,\n        redirectUrl: location,\n        redirectStatus: response.status,\n      };\n    }\n  }\n\n  // Check for rewrite (x-middleware-rewrite header)\n  const rewriteUrl = response.headers.get(\"x-middleware-rewrite\");\n  if (rewriteUrl) {\n    // Continue to the route but with a rewritten URL\n    const responseHeaders = new Headers();\n    for (const [key, value] of response.headers) {\n      if (key !== \"x-middleware-rewrite\") {\n        responseHeaders.set(key, value);\n      }\n    }\n    // Parse the rewrite URL — may be absolute or relative\n    let rewritePath: string;\n    try {\n      const rewriteParsed = new URL(rewriteUrl, request.url);\n      rewritePath = rewriteParsed.pathname + rewriteParsed.search;\n    } catch {\n      rewritePath = rewriteUrl;\n    }\n    return {\n      continue: true,\n      rewriteUrl: rewritePath,\n      rewriteStatus: response.status !== 200 ? response.status : undefined,\n      responseHeaders,\n    };\n  }\n\n  // Middleware returned a full Response (e.g., blocking, custom body)\n  return { continue: false, response };\n}\n"]}
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/server/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;GAGG;AACH,MAAM,WAAW,GAAG;IAClB,UAAU;IACV,UAAU;IACV,WAAW;IACX,cAAc;IACd,cAAc;IACd,eAAe;CAChB,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,kEAAkE;IAClE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,sDAAsD;gBACpD,mDAAmD,CACtD,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,OAAkC;IAElC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,+EAA+E;QAC/E,oEAAoE;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;iBAAM,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBACvD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAe;IAC5D,wCAAwC;IACxC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;QAC3C,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,kCAAkC;IACpC,CAAC;IAED,2DAA2D;IAC3D,8DAA8D;IAC9D,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,6CAA6C,CAAC;IAC9D,IAAI,GAA2B,CAAC;IAChC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACzB,4DAA4D;YAC5D,QAAQ,IAAI,UAAU,CAAC;QACzB,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,gDAAgD;YAChD,QAAQ,IAAI,SAAS,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,6BAA6B;YAC7B,QAAQ,IAAI,SAAS,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1B,QAAQ,IAAI,KAAK,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;IAC5C,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,QAAQ,KAAK,OAAO,CAAC;AAC9B,CAAC;AAoBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,cAAsB,EACtB,OAAgB;IAEhB,0DAA0D;IAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IAEvD,4EAA4E;IAC5E,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC;IAChE,IAAI,OAAO,YAAY,KAAK,UAAU,EAAE,CAAC;QACvC,6DAA6D;QAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,uBAAuB;IACvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjC,wEAAwE;IACxE,qFAAqF;IACrF,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,kBAAkB,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEA,0EAA0E;IAC1E,uEAAuE;IACxE,IAAI,SAAS,GAAG,OAAO,CAAC;IACxB,IAAI,kBAAkB,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,KAAK,CAAC,QAAQ,GAAG,kBAAkB,CAAC;QACpC,SAAS,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAC7E,MAAM,WAAW,GAAG,SAAS,YAAY,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;IAE9F,yBAAyB;IACzB,IAAI,QAA8B,CAAC;IACnC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YACnC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE;gBAC9B,MAAM,EAAE,GAAG;aACZ,CAAC;SACH,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,2DAA2D;IAC3D,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,GAAG,EAAE,CAAC;QACtD,kEAAkE;QAClE,MAAM,eAAe,GAAG,IAAI,OAAO,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5C,IACE,GAAG,KAAK,mBAAmB;gBAC3B,GAAG,KAAK,sBAAsB,EAC9B,CAAC;gBACD,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC7C,CAAC;IAED,kCAAkC;IAClC,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,QAAQ;gBACrB,cAAc,EAAE,QAAQ,CAAC,MAAM;aAChC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAChE,IAAI,UAAU,EAAE,CAAC;QACf,iDAAiD;QACjD,MAAM,eAAe,GAAG,IAAI,OAAO,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;gBACnC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,sDAAsD;QACtD,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACvD,WAAW,GAAG,aAAa,CAAC,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,GAAG,UAAU,CAAC;QAC3B,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,WAAW;YACvB,aAAa,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACpE,eAAe;SAChB,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC","sourcesContent":["/**\n * proxy.ts / middleware.ts runner\n *\n * Loads and executes the user's proxy.ts (Next.js 16) or middleware.ts file\n * before routing. Runs in Node (not Edge Runtime), per the vinext design.\n *\n * In Next.js 16, proxy.ts replaces middleware.ts:\n * - proxy.ts: default export function, runs on Node.js runtime\n * - middleware.ts: deprecated but still supported for Edge runtime use cases\n *\n * The proxy/middleware receives a NextRequest and can:\n * - Return NextResponse.next() to continue to the route\n * - Return NextResponse.redirect() to redirect\n * - Return NextResponse.rewrite() to rewrite the URL\n * - Set/modify headers and cookies\n * - Return a Response directly (e.g., for auth guards)\n *\n * Supports the `config.matcher` export for path filtering.\n */\n\nimport type { ViteDevServer } from \"vite\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { NextRequest } from \"../shims/server.js\";\nimport { safeRegExp } from \"../config/config-matchers.js\";\nimport { normalizePath } from \"./normalize-path.js\";\n\n/**\n * Possible proxy/middleware file names.\n * proxy.ts (Next.js 16) is checked first, then middleware.ts (deprecated).\n */\nconst PROXY_FILES = [\n  \"proxy.ts\",\n  \"proxy.js\",\n  \"proxy.mjs\",\n  \"src/proxy.ts\",\n  \"src/proxy.js\",\n  \"src/proxy.mjs\",\n];\n\nconst MIDDLEWARE_FILES = [\n  \"middleware.ts\",\n  \"middleware.tsx\",\n  \"middleware.js\",\n  \"middleware.mjs\",\n  \"src/middleware.ts\",\n  \"src/middleware.tsx\",\n  \"src/middleware.js\",\n  \"src/middleware.mjs\",\n];\n\n/**\n * Find the proxy or middleware file in the project root.\n * Checks for proxy.ts (Next.js 16) first, then falls back to middleware.ts.\n * If middleware.ts is found, logs a deprecation warning.\n */\nexport function findMiddlewareFile(root: string): string | null {\n  // Check proxy.ts first (Next.js 16 replacement for middleware.ts)\n  for (const file of PROXY_FILES) {\n    const fullPath = path.join(root, file);\n    if (fs.existsSync(fullPath)) {\n      return fullPath;\n    }\n  }\n\n  // Fall back to middleware.ts (deprecated in Next.js 16)\n  for (const file of MIDDLEWARE_FILES) {\n    const fullPath = path.join(root, file);\n    if (fs.existsSync(fullPath)) {\n      console.warn(\n        \"[vinext] middleware.ts is deprecated in Next.js 16. \" +\n          \"Rename to proxy.ts and export a default function.\",\n      );\n      return fullPath;\n    }\n  }\n  return null;\n}\n\n/** Matcher pattern from middleware config export. */\ntype MatcherConfig =\n  | string\n  | string[]\n  | { source: string; regexp?: string; locale?: boolean; has?: any[]; missing?: any[] }[];\n\n/**\n * Check if a pathname matches the middleware matcher config.\n * If no matcher is configured, middleware runs on all paths\n * except static files and internal Next.js paths.\n */\nexport function matchesMiddleware(\n  pathname: string,\n  matcher: MatcherConfig | undefined,\n): boolean {\n  if (!matcher) {\n    // Next.js default: middleware runs on ALL paths when no matcher is configured.\n    // Users opt out of specific paths by configuring a matcher pattern.\n    return true;\n  }\n\n  const patterns: string[] = [];\n  if (typeof matcher === \"string\") {\n    patterns.push(matcher);\n  } else if (Array.isArray(matcher)) {\n    for (const m of matcher) {\n      if (typeof m === \"string\") {\n        patterns.push(m);\n      } else if (m && typeof m === \"object\" && \"source\" in m) {\n        patterns.push(m.source);\n      }\n    }\n  }\n\n  return patterns.some((pattern) => matchPattern(pathname, pattern));\n}\n\n/**\n * Match a single pattern against a pathname.\n * Supports Next.js matcher patterns:\n *   /about          -> exact match\n *   /dashboard/:path*  -> prefix match with params\n *   /api/:path+     -> one or more segments\n *   /((?!api|_next).*)  -> regex patterns\n */\nexport function matchPattern(pathname: string, pattern: string): boolean {\n  // Handle regex patterns (starts with /)\n  if (pattern.includes(\"(\") || pattern.includes(\"\\\\\")) {\n    const re = safeRegExp(\"^\" + pattern + \"$\");\n    if (re) return re.test(pathname);\n    // Fall through to simple matching\n  }\n\n  // Convert Next.js path patterns to regex in a single pass.\n  // Matches /:param*, /:param+, :param, dots, and literal text.\n  let regexStr = \"\";\n  const tokenRe = /\\/:(\\w+)\\*|\\/:(\\w+)\\+|:(\\w+)|[.]|[^/:.]+|./g;\n  let tok: RegExpExecArray | null;\n  while ((tok = tokenRe.exec(pattern)) !== null) {\n    if (tok[1] !== undefined) {\n      // /:param* → optionally match slash + zero or more segments\n      regexStr += \"(?:/.*)?\";\n    } else if (tok[2] !== undefined) {\n      // /:param+ → match slash + one or more segments\n      regexStr += \"(?:/.+)\";\n    } else if (tok[3] !== undefined) {\n      // :param → match one segment\n      regexStr += \"([^/]+)\";\n    } else if (tok[0] === \".\") {\n      regexStr += \"\\\\.\";\n    } else {\n      regexStr += tok[0];\n    }\n  }\n\n  const re = safeRegExp(\"^\" + regexStr + \"$\");\n  if (re) return re.test(pathname);\n  return pathname === pattern;\n}\n\n/** Result of running middleware. */\nexport interface MiddlewareResult {\n  /** Whether to continue to the route handler. */\n  continue: boolean;\n  /** If set, redirect to this URL. */\n  redirectUrl?: string;\n  /** HTTP status for redirect (default 307). */\n  redirectStatus?: number;\n  /** If set, rewrite to this URL (internal). */\n  rewriteUrl?: string;\n  /** HTTP status for rewrite (e.g. 403 from NextResponse.rewrite(url, { status: 403 })). */\n  rewriteStatus?: number;\n  /** Headers to set on the response. */\n  responseHeaders?: Headers;\n  /** If the middleware returned a full Response, use it directly. */\n  response?: Response;\n}\n\n/**\n * Load and execute middleware for a given request.\n *\n * @param server - Vite dev server (for SSR module loading)\n * @param middlewarePath - Absolute path to the middleware file\n * @param request - The incoming Request object\n * @returns Middleware result describing what action to take\n */\nexport async function runMiddleware(\n  server: ViteDevServer,\n  middlewarePath: string,\n  request: Request,\n): Promise<MiddlewareResult> {\n  // Load the middleware module via Vite's SSR module loader\n  const mod = await server.ssrLoadModule(middlewarePath);\n\n  // Accept: default export, named \"proxy\" (Next.js 16), or named \"middleware\"\n  const middlewareFn = mod.default ?? mod.proxy ?? mod.middleware;\n  if (typeof middlewareFn !== \"function\") {\n    // No proxy/middleware function exported — continue as normal\n    return { continue: true };\n  }\n\n  // Check matcher config\n  const config = mod.config;\n  const matcher = config?.matcher;\n  const url = new URL(request.url);\n\n  // Normalize the pathname before middleware matching to prevent bypasses\n  // via percent-encoding (/%61dmin → /admin) or double slashes (/dashboard//settings).\n  let decodedPathname: string;\n  try {\n    decodedPathname = decodeURIComponent(url.pathname);\n  } catch {\n    // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of throwing.\n    return { continue: false, response: new Response(\"Bad Request\", { status: 400 }) };\n  }\n  const normalizedPathname = normalizePath(decodedPathname);\n\n  if (!matchesMiddleware(normalizedPathname, matcher)) {\n    return { continue: true };\n  }\n\n   // Construct a new Request with the fully decoded + normalized pathname so\n   // middleware always sees the same canonical path that the router uses.\n  let mwRequest = request;\n  if (normalizedPathname !== url.pathname) {\n    const mwUrl = new URL(url);\n    mwUrl.pathname = normalizedPathname;\n    mwRequest = new Request(mwUrl, request);\n  }\n\n  // Wrap in NextRequest so middleware gets .nextUrl, .cookies, .geo, .ip, etc.\n  const nextRequest = mwRequest instanceof NextRequest ? mwRequest : new NextRequest(mwRequest);\n\n  // Execute the middleware\n  let response: Response | undefined;\n  try {\n    response = await middlewareFn(nextRequest);\n  } catch (e: any) {\n    console.error(\"[vinext] Middleware error:\", e);\n    const message =\n      process.env.NODE_ENV === \"production\"\n        ? \"Internal Server Error\"\n        : \"Middleware Error: \" + (e?.message ?? String(e));\n    return {\n      continue: false,\n      response: new Response(message, {\n        status: 500,\n      }),\n    };\n  }\n\n  // No response = continue\n  if (!response) {\n    return { continue: true };\n  }\n\n  // Check for x-middleware-next header (NextResponse.next())\n  if (response.headers.get(\"x-middleware-next\") === \"1\") {\n    // Continue to the route, but apply any headers the middleware set\n    const responseHeaders = new Headers();\n    for (const [key, value] of response.headers) {\n      if (\n        key !== \"x-middleware-next\" &&\n        key !== \"x-middleware-rewrite\"\n      ) {\n        responseHeaders.set(key, value);\n      }\n    }\n    return { continue: true, responseHeaders };\n  }\n\n  // Check for redirect (3xx status)\n  if (response.status >= 300 && response.status < 400) {\n    const location = response.headers.get(\"Location\") ?? response.headers.get(\"location\");\n    if (location) {\n      return {\n        continue: false,\n        redirectUrl: location,\n        redirectStatus: response.status,\n      };\n    }\n  }\n\n  // Check for rewrite (x-middleware-rewrite header)\n  const rewriteUrl = response.headers.get(\"x-middleware-rewrite\");\n  if (rewriteUrl) {\n    // Continue to the route but with a rewritten URL\n    const responseHeaders = new Headers();\n    for (const [key, value] of response.headers) {\n      if (key !== \"x-middleware-rewrite\") {\n        responseHeaders.set(key, value);\n      }\n    }\n    // Parse the rewrite URL — may be absolute or relative\n    let rewritePath: string;\n    try {\n      const rewriteParsed = new URL(rewriteUrl, request.url);\n      rewritePath = rewriteParsed.pathname + rewriteParsed.search;\n    } catch {\n      rewritePath = rewriteUrl;\n    }\n    return {\n      continue: true,\n      rewriteUrl: rewritePath,\n      rewriteStatus: response.status !== 200 ? response.status : undefined,\n      responseHeaders,\n    };\n  }\n\n  // Middleware returned a full Response (e.g., blocking, custom body)\n  return { continue: false, response };\n}\n"]}

package/dist/server/prod-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prod-server.d.ts","sourceRoot":"","sources":["../../src/server/prod-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAuBpF,MAAM,WAAW,iBAAiB;IAChC,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,mDAAmD;AACnD,QAAA,MAAM,kBAAkB,aAetB,CAAC;AAEH,0GAA0G;AAC1G,QAAA,MAAM,kBAAkB,OAAO,CAAC;AAEhC;;;GAGG;AACH,iBAAS,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAQjF;AAoBD;;;GAGG;AACH,iBAAS,cAAc,CACrB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,MAAM,GAAG,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACzC,QAAQ,GAAE,OAAc,GACvB,IAAI,CAkCN;AA0FD;;;;;;;;;;;GAWG;AACH,iBAAS,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAcnE;AAED,4EAA4E;AAC5E,QAAA,MAAM,YAAY,EAAE,GAAG,CAAC,MAAM,CAK7B,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,UAAU,SAAkE,CAAC;AAEnF;;GAEG;AACH,iBAAS,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAmCvD;AA+ED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,OAAO,GAAE,iBAAsB,sFA6BpE;AAweD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"prod-server.d.ts","sourceRoot":"","sources":["../../src/server/prod-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAuBpF,MAAM,WAAW,iBAAiB;IAChC,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,mDAAmD;AACnD,QAAA,MAAM,kBAAkB,aAetB,CAAC;AAEH,0GAA0G;AAC1G,QAAA,MAAM,kBAAkB,OAAO,CAAC;AAEhC;;;GAGG;AACH,iBAAS,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAQjF;AAoBD;;;GAGG;AACH,iBAAS,cAAc,CACrB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,MAAM,GAAG,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACzC,QAAQ,GAAE,OAAc,GACvB,IAAI,CAkCN;AA0FD;;;;;;;;;;;GAWG;AACH,iBAAS,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAcnE;AAED,4EAA4E;AAC5E,QAAA,MAAM,YAAY,EAAE,GAAG,CAAC,MAAM,CAK7B,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,UAAU,SAAkE,CAAC;AAEnF;;GAEG;AACH,iBAAS,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAmCvD;AA+ED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,OAAO,GAAE,iBAAsB,sFA6BpE;AA4eD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/server/prod-server.js

@@ -524,9 +524,12 @@ async function startPagesRouterServer(options) {
     ];
     const server = createServer(async (req, res) => {
         const rawUrl = req.url ?? "/";
-        let url = rawUrl;
         // Normalize backslashes (browsers treat /\ as //), then decode and normalize path.
-        const rawPagesPathname = url.split("?")[0].replaceAll("\\", "/");
+        // Rebuild `url` from the decoded pathname + original query string so all
+        // downstream consumers (resolvedUrl, resolvedPathname, config matchers)
+        // always work with the decoded, canonical path.
+        const rawPagesPathname = rawUrl.split("?")[0].replaceAll("\\", "/");
+        const rawQs = rawUrl.includes("?") ? rawUrl.slice(rawUrl.indexOf("?")) : "";
         let pathname;
         try {
             pathname = normalizePath(decodeURIComponent(rawPagesPathname));
@@ -537,6 +540,7 @@ async function startPagesRouterServer(options) {
             res.end("Bad Request");
             return;
         }
+        let url = pathname + rawQs;
         // Guard against protocol-relative URL open redirect attacks.
         // Check rawPagesPathname before normalizePath collapses //.
         if (rawPagesPathname.startsWith("//")) {

package/dist/server/prod-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"prod-server.js","sourceRoot":"","sources":["../../src/server/prod-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAE9K,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACtL,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,oFAAoF;AACpF,SAAS,cAAc,CAAC,GAAoB;IAC1C,OAAO,IAAI,cAAc,CAAC;QACxB,KAAK,CAAC,UAAU;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7E,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACxC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAaD,mDAAmD;AACnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,WAAW;IACX,UAAU;IACV,YAAY;IACZ,UAAU;IACV,iBAAiB;IACjB,wBAAwB;IACxB,kBAAkB;IAClB,iBAAiB;IACjB,uBAAuB;IACvB,qBAAqB;IACrB,sBAAsB;IACtB,eAAe;IACf,2BAA2B;IAC3B,kBAAkB;CACnB,CAAC,CAAC;AAEH,0GAA0G;AAC1G,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC;;;GAGG;AACH,SAAS,iBAAiB,CAAC,GAAoB;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,QAAmC;IAC3D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,IAAI,CAAC,oBAAoB,CAAC;gBAC/B,MAAM,EAAE;oBACN,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,+CAA+C;iBAC1F;aACF,CAAC,CAAC;QACL,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,8BAA8B;QACtE,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CACrB,GAAoB,EACpB,GAAmB,EACnB,IAAqB,EACrB,WAAmB,EACnB,UAAkB,EAClB,eAAuC,EAAE,EACzC,WAAoB,IAAI;IAExB,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1D,IAAI,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACrF,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC9C,4EAA4E;QAC5E,0EAA0E;QAC1E,oCAAoC;QACpC,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,SAAiB,CAAC;QACtB,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YACpD,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,mBAAmB,CAAC;QAC/G,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,iBAAiB,CAAC;QAChC,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE;YACxB,GAAG,YAAY;YACf,cAAc,EAAE,WAAW;YAC3B,kBAAkB,EAAE,QAAQ;YAC5B,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE;YACxB,GAAG,YAAY;YACf,cAAc,EAAE,WAAW;YAC3B,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,aAAa,GAA2B;IAC5C,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,wBAAwB;IAChC,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,+BAA+B;IACvC,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,kBAAkB;CAC3B,CAAC;AAEF;;;GAGG;AACH,SAAS,cAAc,CACrB,GAAoB,EACpB,GAAmB,EACnB,SAAiB,EACjB,QAAgB,EAChB,QAAiB,EACjB,YAAqC;IAErC,qFAAqF;IACrF,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,eAAe,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QACvF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,QAAQ,KAAK,GAAG;QAChB,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAC1B,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EACjC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;IAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,QAAQ;QAC3B,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,sBAAsB,CAAC;IAE3B,MAAM,WAAW,GAAG;QAClB,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,YAAY;QAC7B,GAAG,YAAY;KAChB,CAAC;IAEF,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,GAAG,WAAW;gBACd,kBAAkB,EAAE,QAAQ;gBAC5B,IAAI,EAAE,iBAAiB;aACxB,CAAC,CAAC;YACH,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAgB,CAAC,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChC,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,WAAW,CAAC,GAAoB,EAAE,QAAgB;IACzD,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAuB,CAAC;IAC3E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAEpC,IAAI,YAAY,EAAE,CAAC;QACjB,+DAA+D;QAC/D,gEAAgE;QAChE,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtE,IAAI,aAAa,IAAI,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACrD,OAAO,aAAa,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,UAAU,IAAI,QAAQ,CAAC;AAChC,CAAC;AAED,4EAA4E;AAC5E,MAAM,YAAY,GAAgB,IAAI,GAAG,CACvC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC;KACrC,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;KAClC,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC;AAEnF;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAoB;IAC5C,MAAM,QAAQ,GAAG,UAAU;QACzB,CAAC,CAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACrE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;IAEtD,MAAM,IAAI,GAAsC;QAC9C,MAAM;QACN,OAAO;KACR,CAAC;IAEF,IAAI,OAAO,EAAE,CAAC;QACZ,0EAA0E;QAC1E,kDAAkD;QAClD,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QAClD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,wCAAwC;IAChE,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,WAAqB,EACrB,GAAoB,EACpB,GAAmB,EACnB,QAAiB;IAEjB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAElC,kEAAkE;IAClE,MAAM,WAAW,GAAsC,EAAE,CAAC;IAC1D,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACxC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;gBACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACtB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,4CAA4C;IAC5C,sEAAsE;IACtE,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAExE,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrC,WAAW,CAAC,kBAAkB,CAAC,GAAG,QAAS,CAAC;QAC5C,+EAA+E;QAC/E,8EAA8E;QAC9E,qDAAqD;QACrD,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC1C,WAAW,CAAC,MAAM,CAAC,GAAG,YAAY,GAAG,mBAAmB,CAAC;YAC3D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEnC,kDAAkD;IAClD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,oDAAoD;IACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,IAA2C,CAAC,CAAC;IAE7F,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAS,CAAC,CAAC;QAC/C,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;IACtG,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAA6B,EAAE;IACnE,MAAM,EACJ,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAC3D,IAAI,GAAG,SAAS,EAChB,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,aAAa,GAAG,KAAK,GACtB,GAAG,OAAO,CAAC;IAEZ,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC;IAChC,qEAAqE;IACrE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAEtD,oBAAoB;IACpB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEhD,IAAI,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;AACtF,CAAC;AAYD;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,oBAAoB,CAAC,OAA+B;IACjE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAElE,uEAAuE;IACvE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,UAAU,GAA4C,SAAS,CAAC,OAAO,CAAC;IAE9E,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,mFAAmF;QACnF,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,aAAa,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;YAChF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,6DAA6D;QAC7D,uDAAuD;QACvD,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,IAAI,QAAQ,KAAK,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChF,OAAO;QACT,CAAC;QAED,6EAA6E;QAC7E,oEAAoE;QACpE,IAAI,QAAQ,KAAK,uBAAuB,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACnD,MAAM,oBAAoB,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,mBAAmB,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,2EAA2E;YAC3E,sEAAsE;YACtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;YAC5D,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,yDAAyD;YACzD,MAAM,oBAAoB,GAA2B;gBACnD,yBAAyB,EAAE,6BAA6B;gBACxD,wBAAwB,EAAE,SAAS;gBACnC,qBAAqB,EAAE,QAAQ;aAChC,CAAC;YACF,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBACtF,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,kEAAkE;YAClE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,uDAAuD;YACvD,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,gDAAgD,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;YAClF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAYD;;;;;;;;GAQG;AACH,KAAK,UAAU,sBAAsB,CAAC,OAAiC;IACrE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAErE,gEAAgE;IAChE,IAAI,WAAW,GAA6B,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACxE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,6EAA6E;IAC7E,kEAAkE;IAClE,oDAAoD;IACpD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IACzE,IAAI,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9E,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;YACpD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,UAAkB,CAAC,sBAAsB,GAAG,UAAU,CAAC;YAC1D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC;IAED,+EAA+E;IAC/E,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC;IAE3F,qEAAqE;IACrE,MAAM,QAAQ,GAAW,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;IACtD,MAAM,aAAa,GAAY,YAAY,EAAE,aAAa,IAAI,KAAK,CAAC;IACpE,MAAM,eAAe,GAAG,YAAY,EAAE,SAAS,IAAI,EAAE,CAAC;IACtD,MAAM,cAAc,GAAG,YAAY,EAAE,QAAQ,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACnG,MAAM,aAAa,GAAG,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC;IAClD,+EAA+E;IAC/E,MAAM,kBAAkB,GAAa;QACnC,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,IAAI,oBAAoB,CAAC;QAC9D,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,IAAI,mBAAmB,CAAC;KAC7D,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC9B,IAAI,GAAG,GAAG,MAAM,CAAC;QACjB,mFAAmF;QACnF,MAAM,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,aAAa,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;YAChF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,6DAA6D;QAC7D,4DAA4D;QAC5D,IAAI,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,qEAAqE;QACrE,kEAAkE;QAClE,2CAA2C;QAC3C,MAAM,gBAAgB,GAAG,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;YAChE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG;YACxC,CAAC,CAAC,QAAQ,CAAC;QACb,IACE,gBAAgB,KAAK,GAAG;YACxB,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC;YACrC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAC/D,CAAC;YACD,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,IAAI,QAAQ,KAAK,uBAAuB,IAAI,gBAAgB,KAAK,uBAAuB,EAAE,CAAC;YACzF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,2CAA2C;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;YAC5D,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,oBAAoB,GAA2B;gBACnD,yBAAyB,EAAE,6BAA6B;gBACxD,wBAAwB,EAAE,SAAS;gBACnC,qBAAqB,EAAE,QAAQ;aAChC,CAAC;YACF,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBACtF,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,iEAAiE;YACjE,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;gBACxD,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,GAAG,QAAQ,GAAG,EAAE,CAAC;gBACpB,QAAQ,GAAG,QAAQ,CAAC;YACtB,CAAC;YAED,iEAAiE;YACjE,IAAI,QAAQ,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC3C,IAAI,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClC,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;oBACjE,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;qBAAM,IAAI,CAAC,aAAa,IAAI,WAAW,EAAE,CAAC;oBACzC,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC/E,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;YACH,CAAC;YAED,0DAA0D;YAC1D,MAAM,WAAW,GAAG,UAAU;gBAC5B,CAAC,CAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;gBACrE,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,QAAQ,GAAG,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1F,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBAClE,IAAI,CAAC;oBAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,OAAO,CAAC,CAAC;YACX,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;YACtD,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,GAAG,QAAQ,MAAM,UAAU,GAAG,GAAG,EAAE,EAAE;gBAClE,MAAM;gBACN,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/C,gEAAgE;gBAChE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;aACrC,CAAC,CAAC;YAEH,2DAA2D;YAC3D,MAAM,MAAM,GAAmB,yBAAyB,CAAC,UAAU,CAAC,CAAC;YAErE,iEAAiE;YACjE,IAAI,WAAW,GAAG,GAAG,CAAC;YACtB,MAAM,iBAAiB,GAA2B,EAAE,CAAC;YACrD,IAAI,uBAA2C,CAAC;YAChD,IAAI,OAAO,aAAa,KAAK,UAAU,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;gBAE/C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACrB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;wBACvB,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,IAAI,GAAG,EAAE;4BAC1C,QAAQ,EAAE,MAAM,CAAC,WAAW;yBAC7B,CAAC,CAAC;wBACH,GAAG,CAAC,GAAG,EAAE,CAAC;wBACV,OAAO;oBACT,CAAC;oBACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACpB,+DAA+D;wBAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;wBAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBACnF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBACd,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,mEAAmE;gBACnE,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;wBAClD,iBAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;oBACjC,CAAC;gBACH,CAAC;gBAED,2BAA2B;gBAC3B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;gBAClC,CAAC;gBAED,mDAAmD;gBACnD,oDAAoD;gBACpD,uBAAuB,GAAG,MAAM,CAAC,aAAa,CAAC;YACjD,CAAC;YAED,wEAAwE;YACxE,mEAAmE;YACnE,sEAAsE;YACtE,sEAAsE;YACtE,wEAAwE;YACxE,MAAM,WAAW,GAAG,uBAAuB,CAAC;YAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACjD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC/C,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;oBACzD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAChC,CAAC;qBAAM,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC3C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,IAAI,gBAAgB,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEjD,iEAAiE;YACjE,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;gBAC9D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,aAAa,CAAC,gBAAgB,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;gBAC1E,IAAI,QAAQ,EAAE,CAAC;oBACb,mEAAmE;oBACnE,iCAAiC;oBACjC,kFAAkF;oBAClF,MAAM,IAAI,GAAG,mBAAmB,CAC9B,QAAQ,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;wBACpD,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW;wBACjC,CAAC,CAAC,QAAQ,CAAC,WAAW,CACzB,CAAC;oBACF,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClE,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,IAAI,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBACvC,MAAM,SAAS,GAAG,YAAY,CAAC,gBAAgB,EAAE,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACrF,IAAI,SAAS,EAAE,CAAC;oBACd,IAAI,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;wBACxE,MAAM,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;wBACzD,OAAO;oBACT,CAAC;oBACD,WAAW,GAAG,SAAS,CAAC;oBACxB,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,IAAI,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;gBACxE,IAAI,QAAkB,CAAC;gBACvB,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;oBACpC,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,IAAI,QAAQ,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACxE,CAAC;gBAED,sDAAsD;gBACtD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC/D,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC;gBAC/D,MAAM,eAAe,GAA2B,EAAE,GAAG,iBAAiB,EAAE,CAAC;gBACzE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAEhE,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,uBAAuB,IAAI,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;gBAClH,OAAO;YACT,CAAC;YAED,iEAAiE;YACjE,IAAI,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,YAAY,CAAC,gBAAgB,EAAE,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBACpF,IAAI,SAAS,EAAE,CAAC;oBACd,IAAI,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;wBACxE,MAAM,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;wBACzD,OAAO;oBACT,CAAC;oBACD,WAAW,GAAG,SAAS,CAAC;oBACxB,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,IAAI,QAA8B,CAAC;YACnC,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;gBACrC,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;gBAElE,+DAA+D;gBAC/D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;oBAC3E,MAAM,eAAe,GAAG,YAAY,CAAC,gBAAgB,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBACxF,IAAI,eAAe,EAAE,CAAC;wBACpB,IAAI,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;4BACnC,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;4BAC9E,MAAM,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;4BACzD,OAAO;wBACT,CAAC;wBACD,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;oBACxE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,sDAAsD;YACtD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/D,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC;YAC/D,MAAM,eAAe,GAA2B,EAAE,GAAG,iBAAiB,EAAE,CAAC;YACzE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAEhE,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,uBAAuB,IAAI,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QACpH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,gDAAgD,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;YAClF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6BAA6B;AAC7B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC","sourcesContent":["/**\n * Production server for vinext.\n *\n * Serves the built output from `vinext build`. Handles:\n * - Static asset serving from client build output\n * - Pages Router: SSR rendering + API route handling\n * - App Router: RSC/SSR rendering, route handlers, server actions\n * - Gzip/Brotli compression for text-based responses\n * - Streaming SSR for App Router\n *\n * Build output for Pages Router:\n * - dist/client/  — static assets (JS, CSS, images) + .vite/ssr-manifest.json\n * - dist/server/entry.js — SSR entry point (virtual:vinext-server-entry)\n *\n * Build output for App Router:\n * - dist/client/  — static assets (JS, CSS, images)\n * - dist/server/index.js — RSC entry (default export: handler(Request) → Response)\n * - dist/server/ssr/index.js — SSR entry (imported by RSC entry at runtime)\n */\nimport { createServer, type IncomingMessage, type ServerResponse } from \"node:http\";\nimport { Readable, pipeline } from \"node:stream\";\nimport { pathToFileURL } from \"node:url\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport zlib from \"node:zlib\";\nimport { matchRedirect, matchRewrite, matchHeaders, requestContextFromRequest, isExternalUrl, proxyExternalRequest, sanitizeDestination } from \"../config/config-matchers.js\";\nimport type { RequestContext } from \"../config/config-matchers.js\";\nimport { IMAGE_OPTIMIZATION_PATH, IMAGE_CONTENT_SECURITY_POLICY, parseImageParams, isSafeImageContentType, DEFAULT_DEVICE_SIZES, DEFAULT_IMAGE_SIZES } from \"./image-optimization.js\";\nimport { normalizePath } from \"./normalize-path.js\";\nimport { computeLazyChunks } from \"../index.js\";\n\n/** Convert a Node.js IncomingMessage into a ReadableStream for Web Request body. */\nfunction readNodeStream(req: IncomingMessage): ReadableStream<Uint8Array> {\n  return new ReadableStream({\n    start(controller) {\n      req.on(\"data\", (chunk: Buffer) => controller.enqueue(new Uint8Array(chunk)));\n      req.on(\"end\", () => controller.close());\n      req.on(\"error\", (err) => controller.error(err));\n    },\n  });\n}\n\nexport interface ProdServerOptions {\n  /** Port to listen on */\n  port?: number;\n  /** Host to bind to */\n  host?: string;\n  /** Path to the build output directory */\n  outDir?: string;\n  /** Disable compression (default: false) */\n  noCompression?: boolean;\n}\n\n/** Content types that benefit from compression. */\nconst COMPRESSIBLE_TYPES = new Set([\n  \"text/html\",\n  \"text/css\",\n  \"text/plain\",\n  \"text/xml\",\n  \"text/javascript\",\n  \"application/javascript\",\n  \"application/json\",\n  \"application/xml\",\n  \"application/xhtml+xml\",\n  \"application/rss+xml\",\n  \"application/atom+xml\",\n  \"image/svg+xml\",\n  \"application/manifest+json\",\n  \"application/wasm\",\n]);\n\n/** Minimum size threshold for compression (in bytes). Below this, compression overhead isn't worth it. */\nconst COMPRESS_THRESHOLD = 1024;\n\n/**\n * Parse the Accept-Encoding header and return the best supported encoding.\n * Preference order: br > gzip > deflate > identity.\n */\nfunction negotiateEncoding(req: IncomingMessage): \"br\" | \"gzip\" | \"deflate\" | null {\n  const accept = req.headers[\"accept-encoding\"];\n  if (!accept || typeof accept !== \"string\") return null;\n  const lower = accept.toLowerCase();\n  if (lower.includes(\"br\")) return \"br\";\n  if (lower.includes(\"gzip\")) return \"gzip\";\n  if (lower.includes(\"deflate\")) return \"deflate\";\n  return null;\n}\n\n/**\n * Create a compression stream for the given encoding.\n */\nfunction createCompressor(encoding: \"br\" | \"gzip\" | \"deflate\"): zlib.BrotliCompress | zlib.Gzip | zlib.Deflate {\n  switch (encoding) {\n    case \"br\":\n      return zlib.createBrotliCompress({\n        params: {\n          [zlib.constants.BROTLI_PARAM_QUALITY]: 4, // Fast compression (1-11, 4 is a good balance)\n        },\n      });\n    case \"gzip\":\n      return zlib.createGzip({ level: 6 }); // Default level, good balance\n    case \"deflate\":\n      return zlib.createDeflate({ level: 6 });\n  }\n}\n\n/**\n * Send a compressed response if the content type is compressible and the\n * client supports compression. Otherwise send uncompressed.\n */\nfunction sendCompressed(\n  req: IncomingMessage,\n  res: ServerResponse,\n  body: string | Buffer,\n  contentType: string,\n  statusCode: number,\n  extraHeaders: Record<string, string> = {},\n  compress: boolean = true,\n): void {\n  const buf = typeof body === \"string\" ? Buffer.from(body) : body;\n  const baseType = contentType.split(\";\")[0].trim();\n  const encoding = compress ? negotiateEncoding(req) : null;\n\n  if (encoding && COMPRESSIBLE_TYPES.has(baseType) && buf.length >= COMPRESS_THRESHOLD) {\n    const compressor = createCompressor(encoding);\n    // Merge Accept-Encoding into existing Vary header from extraHeaders instead\n    // of overwriting. Preserves Vary values set by the App Router for content\n    // negotiation (e.g. \"RSC, Accept\").\n    const existingVary = extraHeaders[\"Vary\"] ?? extraHeaders[\"vary\"];\n    let varyValue: string;\n    if (existingVary) {\n      const existing = String(existingVary).toLowerCase();\n      varyValue = existing.includes(\"accept-encoding\") ? String(existingVary) : existingVary + \", Accept-Encoding\";\n    } else {\n      varyValue = \"Accept-Encoding\";\n    }\n    res.writeHead(statusCode, {\n      ...extraHeaders,\n      \"Content-Type\": contentType,\n      \"Content-Encoding\": encoding,\n      Vary: varyValue,\n    });\n    compressor.end(buf);\n    pipeline(compressor, res, () => { /* ignore pipeline errors on closed connections */ });\n  } else {\n    res.writeHead(statusCode, {\n      ...extraHeaders,\n      \"Content-Type\": contentType,\n      \"Content-Length\": String(buf.length),\n    });\n    res.end(buf);\n  }\n}\n\n/** Content-type lookup for static assets. */\nconst CONTENT_TYPES: Record<string, string> = {\n  \".js\": \"application/javascript\",\n  \".mjs\": \"application/javascript\",\n  \".css\": \"text/css\",\n  \".html\": \"text/html\",\n  \".json\": \"application/json\",\n  \".png\": \"image/png\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".gif\": \"image/gif\",\n  \".svg\": \"image/svg+xml\",\n  \".ico\": \"image/x-icon\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n  \".ttf\": \"font/ttf\",\n  \".eot\": \"application/vnd.ms-fontobject\",\n  \".webp\": \"image/webp\",\n  \".avif\": \"image/avif\",\n  \".map\": \"application/json\",\n};\n\n/**\n * Try to serve a static file from the client build directory.\n * Returns true if the file was served, false otherwise.\n */\nfunction tryServeStatic(\n  req: IncomingMessage,\n  res: ServerResponse,\n  clientDir: string,\n  pathname: string,\n  compress: boolean,\n  extraHeaders?: Record<string, string>,\n): boolean {\n  // Resolve the path and guard against directory traversal (e.g. /../../../etc/passwd)\n  const resolvedClient = path.resolve(clientDir);\n  let decodedPathname: string;\n  try {\n    decodedPathname = decodeURIComponent(pathname);\n  } catch {\n    return false;\n  }\n  const staticFile = path.resolve(clientDir, \".\" + decodedPathname);\n  if (!staticFile.startsWith(resolvedClient + path.sep) && staticFile !== resolvedClient) {\n    return false;\n  }\n  if (\n    pathname === \"/\" ||\n    !fs.existsSync(staticFile) ||\n    !fs.statSync(staticFile).isFile()\n  ) {\n    return false;\n  }\n\n  const ext = path.extname(staticFile);\n  const ct = CONTENT_TYPES[ext] ?? \"application/octet-stream\";\n  const isHashed = pathname.startsWith(\"/assets/\");\n  const cacheControl = isHashed\n    ? \"public, max-age=31536000, immutable\"\n    : \"public, max-age=3600\";\n\n  const baseHeaders = {\n    \"Content-Type\": ct,\n    \"Cache-Control\": cacheControl,\n    ...extraHeaders,\n  };\n\n  const baseType = ct.split(\";\")[0].trim();\n  if (compress && COMPRESSIBLE_TYPES.has(baseType)) {\n    const encoding = negotiateEncoding(req);\n    if (encoding) {\n      const fileStream = fs.createReadStream(staticFile);\n      const compressor = createCompressor(encoding);\n      res.writeHead(200, {\n        ...baseHeaders,\n        \"Content-Encoding\": encoding,\n        Vary: \"Accept-Encoding\",\n      });\n      pipeline(fileStream, compressor, res, () => { /* ignore */ });\n      return true;\n    }\n  }\n\n  res.writeHead(200, baseHeaders);\n  fs.createReadStream(staticFile).pipe(res);\n  return true;\n}\n\n/**\n * Resolve the host for a request, ignoring X-Forwarded-Host to prevent\n * host header poisoning attacks (open redirects, cache poisoning).\n *\n * X-Forwarded-Host is only trusted when the VINEXT_TRUSTED_HOSTS env var\n * lists the forwarded host value. Without this, an attacker can send\n * X-Forwarded-Host: evil.com and poison any redirect that resolves\n * against request.url.\n *\n * On Cloudflare Workers, X-Forwarded-Host is always set by Cloudflare\n * itself, so this is only a concern for the Node.js prod-server.\n */\nfunction resolveHost(req: IncomingMessage, fallback: string): string {\n  const rawForwarded = req.headers[\"x-forwarded-host\"] as string | undefined;\n  const hostHeader = req.headers.host;\n\n  if (rawForwarded) {\n    // X-Forwarded-Host can be comma-separated when passing through\n    // multiple proxies — take only the first (client-facing) value.\n    const forwardedHost = rawForwarded.split(\",\")[0].trim().toLowerCase();\n    if (forwardedHost && trustedHosts.has(forwardedHost)) {\n      return forwardedHost;\n    }\n  }\n\n  return hostHeader || fallback;\n}\n\n/** Hosts that are allowed as X-Forwarded-Host values (stored lowercase). */\nconst trustedHosts: Set<string> = new Set(\n  (process.env.VINEXT_TRUSTED_HOSTS ?? \"\")\n    .split(\",\")\n    .map((h) => h.trim().toLowerCase())\n    .filter(Boolean),\n);\n\n/**\n * Whether to trust X-Forwarded-Proto from upstream proxies.\n * Enabled when VINEXT_TRUST_PROXY=1 or when VINEXT_TRUSTED_HOSTS is set\n * (having trusted hosts implies a trusted proxy).\n */\nconst trustProxy = process.env.VINEXT_TRUST_PROXY === \"1\" || trustedHosts.size > 0;\n\n/**\n * Convert a Node.js IncomingMessage to a Web Request object.\n */\nfunction nodeToWebRequest(req: IncomingMessage): Request {\n  const rawProto = trustProxy\n    ? (req.headers[\"x-forwarded-proto\"] as string)?.split(\",\")[0]?.trim()\n    : undefined;\n  const proto = rawProto === \"https\" || rawProto === \"http\" ? rawProto : \"http\";\n  const host = resolveHost(req, \"localhost\");\n  const origin = `${proto}://${host}`;\n  const url = new URL(req.url ?? \"/\", origin);\n\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(req.headers)) {\n    if (value === undefined) continue;\n    if (Array.isArray(value)) {\n      for (const v of value) headers.append(key, v);\n    } else {\n      headers.set(key, value);\n    }\n  }\n\n  const method = req.method ?? \"GET\";\n  const hasBody = method !== \"GET\" && method !== \"HEAD\";\n\n  const init: RequestInit & { duplex?: string } = {\n    method,\n    headers,\n  };\n\n  if (hasBody) {\n    // Convert Node.js readable stream to Web ReadableStream for request body.\n    // Readable.toWeb() is available since Node.js 17.\n    init.body = Readable.toWeb(req) as ReadableStream;\n    init.duplex = \"half\"; // Required for streaming request bodies\n  }\n\n  return new Request(url, init);\n}\n\n/**\n * Stream a Web Response back to a Node.js ServerResponse.\n * Supports streaming compression for SSR responses.\n */\nasync function sendWebResponse(\n  webResponse: Response,\n  req: IncomingMessage,\n  res: ServerResponse,\n  compress: boolean,\n): Promise<void> {\n  const status = webResponse.status;\n\n  // Collect headers, handling multi-value headers (e.g. Set-Cookie)\n  const nodeHeaders: Record<string, string | string[]> = {};\n  webResponse.headers.forEach((value, key) => {\n    const existing = nodeHeaders[key];\n    if (existing !== undefined) {\n      nodeHeaders[key] = Array.isArray(existing)\n        ? [...existing, value]\n        : [existing, value];\n    } else {\n      nodeHeaders[key] = value;\n    }\n  });\n\n  if (!webResponse.body) {\n    res.writeHead(status, nodeHeaders);\n    res.end();\n    return;\n  }\n\n  // Check if we should compress the response.\n  // Skip if the upstream already compressed (avoid double-compression).\n  const alreadyEncoded = webResponse.headers.has(\"content-encoding\");\n  const contentType = webResponse.headers.get(\"content-type\") ?? \"\";\n  const baseType = contentType.split(\";\")[0].trim();\n  const encoding = (compress && !alreadyEncoded) ? negotiateEncoding(req) : null;\n  const shouldCompress = !!(encoding && COMPRESSIBLE_TYPES.has(baseType));\n\n  if (shouldCompress) {\n    delete nodeHeaders[\"content-length\"];\n    delete nodeHeaders[\"Content-Length\"];\n    nodeHeaders[\"Content-Encoding\"] = encoding!;\n    // Merge Accept-Encoding into existing Vary header (e.g. \"RSC, Accept\") instead\n    // of overwriting. This prevents stripping the Vary values that the App Router\n    // sets for content negotiation (RSC stream vs HTML).\n    const existingVary = nodeHeaders[\"Vary\"] ?? nodeHeaders[\"vary\"];\n    if (existingVary) {\n      const existing = String(existingVary).toLowerCase();\n      if (!existing.includes(\"accept-encoding\")) {\n        nodeHeaders[\"Vary\"] = existingVary + \", Accept-Encoding\";\n      }\n    } else {\n      nodeHeaders[\"Vary\"] = \"Accept-Encoding\";\n    }\n  }\n\n  res.writeHead(status, nodeHeaders);\n\n  // HEAD requests: send headers only, skip the body\n  if (req.method === \"HEAD\") {\n    res.end();\n    return;\n  }\n\n  // Convert Web ReadableStream to Node.js Readable and pipe to response.\n  // Readable.fromWeb() is available since Node.js 17.\n  const nodeStream = Readable.fromWeb(webResponse.body as import(\"stream/web\").ReadableStream);\n\n  if (shouldCompress) {\n    const compressor = createCompressor(encoding!);\n    pipeline(nodeStream, compressor, res, () => { /* ignore pipeline errors on closed connections */ });\n  } else {\n    pipeline(nodeStream, res, () => { /* ignore pipeline errors on closed connections */ });\n  }\n}\n\n/**\n * Start the production server.\n *\n * Automatically detects whether the build is App Router (dist/server/index.js) or\n * Pages Router (dist/server/entry.js) and configures the appropriate handler.\n */\nexport async function startProdServer(options: ProdServerOptions = {}) {\n  const {\n    port = process.env.PORT ? parseInt(process.env.PORT) : 3000,\n    host = \"0.0.0.0\",\n    outDir = path.resolve(\"dist\"),\n    noCompression = false,\n  } = options;\n\n  const compress = !noCompression;\n  // Always resolve outDir to absolute to ensure dynamic import() works\n  const resolvedOutDir = path.resolve(outDir);\n  const clientDir = path.join(resolvedOutDir, \"client\");\n\n  // Detect build type\n  const rscEntryPath = path.join(resolvedOutDir, \"server\", \"index.js\");\n  const serverEntryPath = path.join(resolvedOutDir, \"server\", \"entry.js\");\n  const isAppRouter = fs.existsSync(rscEntryPath);\n\n  if (!isAppRouter && !fs.existsSync(serverEntryPath)) {\n    console.error(`[vinext] No build output found in ${outDir}`);\n    console.error(\"Run `vinext build` first.\");\n    process.exit(1);\n  }\n\n  if (isAppRouter) {\n    return startAppRouterServer({ port, host, clientDir, rscEntryPath, compress });\n  }\n\n  return startPagesRouterServer({ port, host, clientDir, serverEntryPath, compress });\n}\n\n// ─── App Router Production Server ─────────────────────────────────────────────\n\ninterface AppRouterServerOptions {\n  port: number;\n  host: string;\n  clientDir: string;\n  rscEntryPath: string;\n  compress: boolean;\n}\n\n/**\n * Start the App Router production server.\n *\n * The RSC entry (dist/server/index.js) exports a default handler function:\n *   handler(request: Request) → Promise<Response>\n *\n * This handler already does everything: route matching, RSC rendering,\n * SSR HTML generation (via import(\"./ssr/index.js\")), route handlers,\n * server actions, ISR caching, 404s, redirects, etc.\n *\n * The production server's job is simply to:\n * 1. Serve static assets from dist/client/\n * 2. Convert Node.js IncomingMessage → Web Request\n * 3. Call the RSC handler\n * 4. Stream the Web Response back (with optional compression)\n */\nasync function startAppRouterServer(options: AppRouterServerOptions) {\n  const { port, host, clientDir, rscEntryPath, compress } = options;\n\n  // Import the RSC handler (use file:// URL for reliable dynamic import)\n  const rscModule = await import(pathToFileURL(rscEntryPath).href);\n  const rscHandler: (request: Request) => Promise<Response> = rscModule.default;\n\n  if (typeof rscHandler !== \"function\") {\n    console.error(\"[vinext] RSC entry does not export a default handler function\");\n    process.exit(1);\n  }\n\n  const server = createServer(async (req, res) => {\n    const url = req.url ?? \"/\";\n    // Normalize backslashes (browsers treat /\\ as //), then decode and normalize path.\n    const rawPathname = url.split(\"?\")[0].replaceAll(\"\\\\\", \"/\");\n    let pathname: string;\n    try {\n      pathname = normalizePath(decodeURIComponent(rawPathname));\n    } catch {\n      // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of crashing.\n      res.writeHead(400);\n      res.end(\"Bad Request\");\n      return;\n    }\n\n    // Guard against protocol-relative URL open redirect attacks.\n    // Check rawPathname before normalizePath collapses //.\n    if (rawPathname.startsWith(\"//\")) {\n      res.writeHead(404);\n      res.end(\"404 Not Found\");\n      return;\n    }\n\n    // Serve static assets from client build\n    if (pathname !== \"/\" && tryServeStatic(req, res, clientDir, pathname, compress)) {\n      return;\n    }\n\n    // Image optimization passthrough (Node.js prod server has no Images binding;\n    // serves the original file with cache headers and security headers)\n    if (pathname === IMAGE_OPTIMIZATION_PATH) {\n      const parsedUrl = new URL(url, \"http://localhost\");\n      const defaultAllowedWidths = [...DEFAULT_DEVICE_SIZES, ...DEFAULT_IMAGE_SIZES];\n      const params = parseImageParams(parsedUrl, defaultAllowedWidths);\n      if (!params) {\n        res.writeHead(400);\n        res.end(\"Bad Request\");\n        return;\n      }\n      // Block SVG and other unsafe content types by checking the file extension.\n      // This must happen before serving to prevent XSS via SVG passthrough.\n      const ext = path.extname(params.imageUrl).toLowerCase();\n      const ct = CONTENT_TYPES[ext] ?? \"application/octet-stream\";\n      if (!isSafeImageContentType(ct)) {\n        res.writeHead(400);\n        res.end(\"The requested resource is not an allowed image type\");\n        return;\n      }\n      // Serve the original image with CSP and security headers\n      const imageSecurityHeaders: Record<string, string> = {\n        \"Content-Security-Policy\": IMAGE_CONTENT_SECURITY_POLICY,\n        \"X-Content-Type-Options\": \"nosniff\",\n        \"Content-Disposition\": \"inline\",\n      };\n      if (tryServeStatic(req, res, clientDir, params.imageUrl, false, imageSecurityHeaders)) {\n        return;\n      }\n      res.writeHead(404);\n      res.end(\"Image not found\");\n      return;\n    }\n\n    try {\n      // Convert Node.js request to Web Request and call the RSC handler\n      const request = nodeToWebRequest(req);\n      const response = await rscHandler(request);\n\n      // Stream the Web Response back to the Node.js response\n      await sendWebResponse(response, req, res, compress);\n    } catch (e) {\n      console.error(\"[vinext] Server error:\", e);\n      if (!res.headersSent) {\n        res.writeHead(500);\n        res.end(\"Internal Server Error\");\n      }\n    }\n  });\n\n  await new Promise<void>((resolve) => {\n    server.listen(port, host, () => {\n      const addr = server.address();\n      const actualPort = typeof addr === \"object\" && addr ? addr.port : port;\n      console.log(`[vinext] Production server running at http://${host}:${actualPort}`);\n      resolve();\n    });\n  });\n\n  return server;\n}\n\n// ─── Pages Router Production Server ───────────────────────────────────────────\n\ninterface PagesRouterServerOptions {\n  port: number;\n  host: string;\n  clientDir: string;\n  serverEntryPath: string;\n  compress: boolean;\n}\n\n/**\n * Start the Pages Router production server.\n *\n * Uses the server entry (dist/server/entry.js) which exports:\n * - renderPage(request, url, manifest) — SSR rendering (Web Request → Response)\n * - handleApiRoute(request, url) — API route handling (Web Request → Response)\n * - runMiddleware(request) — middleware execution\n * - vinextConfig — embedded next.config.js settings\n */\nasync function startPagesRouterServer(options: PagesRouterServerOptions) {\n  const { port, host, clientDir, serverEntryPath, compress } = options;\n\n  // Load the SSR manifest (maps module URLs to client asset URLs)\n  let ssrManifest: Record<string, string[]> = {};\n  const manifestPath = path.join(clientDir, \".vite\", \"ssr-manifest.json\");\n  if (fs.existsSync(manifestPath)) {\n    ssrManifest = JSON.parse(fs.readFileSync(manifestPath, \"utf-8\"));\n  }\n\n  // Load the build manifest to compute lazy chunks — chunks only reachable via\n  // dynamic imports (React.lazy, next/dynamic). These should not be\n  // modulepreloaded since they are fetched on demand.\n  const buildManifestPath = path.join(clientDir, \".vite\", \"manifest.json\");\n  if (fs.existsSync(buildManifestPath)) {\n    try {\n      const buildManifest = JSON.parse(fs.readFileSync(buildManifestPath, \"utf-8\"));\n      const lazyChunks = computeLazyChunks(buildManifest);\n      if (lazyChunks.length > 0) {\n        (globalThis as any).__VINEXT_LAZY_CHUNKS__ = lazyChunks;\n      }\n    } catch { /* ignore parse errors */ }\n  }\n\n  // Import the server entry module (use file:// URL for reliable dynamic import)\n  const serverEntry = await import(pathToFileURL(serverEntryPath).href);\n  const { renderPage, handleApiRoute: handleApi, runMiddleware, vinextConfig } = serverEntry;\n\n  // Extract config values (embedded at build time in the server entry)\n  const basePath: string = vinextConfig?.basePath ?? \"\";\n  const trailingSlash: boolean = vinextConfig?.trailingSlash ?? false;\n  const configRedirects = vinextConfig?.redirects ?? [];\n  const configRewrites = vinextConfig?.rewrites ?? { beforeFiles: [], afterFiles: [], fallback: [] };\n  const configHeaders = vinextConfig?.headers ?? [];\n  // Compute allowed image widths from config (union of deviceSizes + imageSizes)\n  const allowedImageWidths: number[] = [\n    ...(vinextConfig?.images?.deviceSizes ?? DEFAULT_DEVICE_SIZES),\n    ...(vinextConfig?.images?.imageSizes ?? DEFAULT_IMAGE_SIZES),\n  ];\n\n  const server = createServer(async (req, res) => {\n    const rawUrl = req.url ?? \"/\";\n    let url = rawUrl;\n    // Normalize backslashes (browsers treat /\\ as //), then decode and normalize path.\n    const rawPagesPathname = url.split(\"?\")[0].replaceAll(\"\\\\\", \"/\");\n    let pathname: string;\n    try {\n      pathname = normalizePath(decodeURIComponent(rawPagesPathname));\n    } catch {\n      // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of crashing.\n      res.writeHead(400);\n      res.end(\"Bad Request\");\n      return;\n    }\n\n    // Guard against protocol-relative URL open redirect attacks.\n    // Check rawPagesPathname before normalizePath collapses //.\n    if (rawPagesPathname.startsWith(\"//\")) {\n      res.writeHead(404);\n      res.end(\"404 Not Found\");\n      return;\n    }\n\n    // ── 1. Static assets ──────────────────────────────────────────\n    // Serve static files from client build. When basePath is configured,\n    // Vite's `base` config ensures assets are under basePath/assets/.\n    // We check both with and without basePath.\n    const staticLookupPath = basePath && pathname.startsWith(basePath)\n      ? pathname.slice(basePath.length) || \"/\"\n      : pathname;\n    if (\n      staticLookupPath !== \"/\" &&\n      !staticLookupPath.startsWith(\"/api/\") &&\n      tryServeStatic(req, res, clientDir, staticLookupPath, compress)\n    ) {\n      return;\n    }\n\n    // ── Image optimization passthrough ──────────────────────────────\n    if (pathname === IMAGE_OPTIMIZATION_PATH || staticLookupPath === IMAGE_OPTIMIZATION_PATH) {\n      const parsedUrl = new URL(rawUrl, \"http://localhost\");\n      const params = parseImageParams(parsedUrl, allowedImageWidths);\n      if (!params) {\n        res.writeHead(400);\n        res.end(\"Bad Request\");\n        return;\n      }\n      // Block SVG and other unsafe content types\n      const ext = path.extname(params.imageUrl).toLowerCase();\n      const ct = CONTENT_TYPES[ext] ?? \"application/octet-stream\";\n      if (!isSafeImageContentType(ct)) {\n        res.writeHead(400);\n        res.end(\"The requested resource is not an allowed image type\");\n        return;\n      }\n      const imageSecurityHeaders: Record<string, string> = {\n        \"Content-Security-Policy\": IMAGE_CONTENT_SECURITY_POLICY,\n        \"X-Content-Type-Options\": \"nosniff\",\n        \"Content-Disposition\": \"inline\",\n      };\n      if (tryServeStatic(req, res, clientDir, params.imageUrl, false, imageSecurityHeaders)) {\n        return;\n      }\n      res.writeHead(404);\n      res.end(\"Image not found\");\n      return;\n    }\n\n    try {\n      // ── 2. Strip basePath ─────────────────────────────────────────\n      if (basePath && pathname.startsWith(basePath)) {\n        const stripped = pathname.slice(basePath.length) || \"/\";\n        const qs = url.includes(\"?\") ? url.slice(url.indexOf(\"?\")) : \"\";\n        url = stripped + qs;\n        pathname = stripped;\n      }\n\n      // ── 3. Trailing slash normalization ───────────────────────────\n      if (pathname !== \"/\" && !pathname.startsWith(\"/api\")) {\n        const hasTrailing = pathname.endsWith(\"/\");\n        if (trailingSlash && !hasTrailing) {\n          const qs = url.includes(\"?\") ? url.slice(url.indexOf(\"?\")) : \"\";\n          res.writeHead(308, { Location: basePath + pathname + \"/\" + qs });\n          res.end();\n          return;\n        } else if (!trailingSlash && hasTrailing) {\n          const qs = url.includes(\"?\") ? url.slice(url.indexOf(\"?\")) : \"\";\n          res.writeHead(308, { Location: basePath + pathname.replace(/\\/+$/, \"\") + qs });\n          res.end();\n          return;\n        }\n      }\n\n      // Convert Node.js req to Web Request for the server entry\n      const rawProtocol = trustProxy\n        ? (req.headers[\"x-forwarded-proto\"] as string)?.split(\",\")[0]?.trim()\n        : undefined;\n      const protocol = rawProtocol === \"https\" || rawProtocol === \"http\" ? rawProtocol : \"http\";\n      const hostHeader = resolveHost(req, `${host}:${port}`);\n      const reqHeaders = Object.entries(req.headers).reduce((h, [k, v]) => {\n        if (v) h.set(k, Array.isArray(v) ? v.join(\", \") : v);\n        return h;\n      }, new Headers());\n      const method = req.method ?? \"GET\";\n      const hasBody = method !== \"GET\" && method !== \"HEAD\";\n      const webRequest = new Request(`${protocol}://${hostHeader}${url}`, {\n        method,\n        headers: reqHeaders,\n        body: hasBody ? readNodeStream(req) : undefined,\n        // @ts-expect-error — duplex needed for streaming request bodies\n        duplex: hasBody ? \"half\" : undefined,\n      });\n\n      // Build request context for has/missing condition matching\n      const reqCtx: RequestContext = requestContextFromRequest(webRequest);\n\n      // ── 4. Run middleware ─────────────────────────────────────────\n      let resolvedUrl = url;\n      const middlewareHeaders: Record<string, string> = {};\n      let middlewareRewriteStatus: number | undefined;\n      if (typeof runMiddleware === \"function\") {\n        const result = await runMiddleware(webRequest);\n\n        if (!result.continue) {\n          if (result.redirectUrl) {\n            res.writeHead(result.redirectStatus ?? 307, {\n              Location: result.redirectUrl,\n            });\n            res.end();\n            return;\n          }\n          if (result.response) {\n            // Use arrayBuffer() to handle binary response bodies correctly\n            const body = Buffer.from(await result.response.arrayBuffer());\n            res.writeHead(result.response.status, Object.fromEntries(result.response.headers));\n            res.end(body);\n            return;\n          }\n        }\n\n        // Collect middleware response headers to merge into final response\n        if (result.responseHeaders) {\n          for (const [key, value] of result.responseHeaders) {\n            middlewareHeaders[key] = value;\n          }\n        }\n\n        // Apply middleware rewrite\n        if (result.rewriteUrl) {\n          resolvedUrl = result.rewriteUrl;\n        }\n\n        // Apply custom status code from middleware rewrite\n        // (e.g. NextResponse.rewrite(url, { status: 403 }))\n        middlewareRewriteStatus = result.rewriteStatus;\n      }\n\n      // Unpack x-middleware-request-* headers into the actual request so that\n      // renderPage / handleApiRoute see the middleware-modified headers.\n      // Strip ALL x-middleware-* headers from the response — this prefix is\n      // reserved for internal routing signals and must never reach clients.\n      // (Matches Next.js behavior where x-middleware-* headers are internal.)\n      const mwReqPrefix = \"x-middleware-request-\";\n      for (const key of Object.keys(middlewareHeaders)) {\n        if (key.startsWith(mwReqPrefix)) {\n          const realName = key.slice(mwReqPrefix.length);\n          webRequest.headers.set(realName, middlewareHeaders[key]);\n          delete middlewareHeaders[key];\n        } else if (key.startsWith(\"x-middleware-\")) {\n          delete middlewareHeaders[key];\n        }\n      }\n\n      let resolvedPathname = resolvedUrl.split(\"?\")[0];\n\n      // ── 5. Apply custom headers from next.config.js ───────────────\n      if (configHeaders.length) {\n        const matched = matchHeaders(resolvedPathname, configHeaders);\n        for (const h of matched) {\n          middlewareHeaders[h.key.toLowerCase()] = h.value;\n        }\n      }\n\n      // ── 6. Apply redirects from next.config.js ────────────────────\n      if (configRedirects.length) {\n        const redirect = matchRedirect(resolvedPathname, configRedirects, reqCtx);\n        if (redirect) {\n          // Guard against double-prefixing: only add basePath if destination\n          // doesn't already start with it.\n          // Sanitize the final destination to prevent protocol-relative URL open redirects.\n          const dest = sanitizeDestination(\n            basePath && !redirect.destination.startsWith(basePath)\n              ? basePath + redirect.destination\n              : redirect.destination,\n          );\n          res.writeHead(redirect.permanent ? 308 : 307, { Location: dest });\n          res.end();\n          return;\n        }\n      }\n\n      // ── 7. Apply beforeFiles rewrites from next.config.js ─────────\n      if (configRewrites.beforeFiles?.length) {\n        const rewritten = matchRewrite(resolvedPathname, configRewrites.beforeFiles, reqCtx);\n        if (rewritten) {\n          if (isExternalUrl(rewritten)) {\n            const proxyResponse = await proxyExternalRequest(webRequest, rewritten);\n            await sendWebResponse(proxyResponse, req, res, compress);\n            return;\n          }\n          resolvedUrl = rewritten;\n          resolvedPathname = rewritten.split(\"?\")[0];\n        }\n      }\n\n      // ── 8. API routes ─────────────────────────────────────────────\n      if (resolvedPathname.startsWith(\"/api/\") || resolvedPathname === \"/api\") {\n        let response: Response;\n        if (typeof handleApi === \"function\") {\n          response = await handleApi(webRequest, resolvedUrl);\n        } else {\n          response = new Response(\"404 - API route not found\", { status: 404 });\n        }\n\n        // Merge middleware + config headers into the response\n        const responseBody = Buffer.from(await response.arrayBuffer());\n        const ct = response.headers.get(\"content-type\") ?? \"text/html\";\n        const responseHeaders: Record<string, string> = { ...middlewareHeaders };\n        response.headers.forEach((v, k) => { responseHeaders[k] = v; });\n\n        sendCompressed(req, res, responseBody, ct, middlewareRewriteStatus ?? response.status, responseHeaders, compress);\n        return;\n      }\n\n      // ── 9. Apply afterFiles rewrites from next.config.js ──────────\n      if (configRewrites.afterFiles?.length) {\n        const rewritten = matchRewrite(resolvedPathname, configRewrites.afterFiles, reqCtx);\n        if (rewritten) {\n          if (isExternalUrl(rewritten)) {\n            const proxyResponse = await proxyExternalRequest(webRequest, rewritten);\n            await sendWebResponse(proxyResponse, req, res, compress);\n            return;\n          }\n          resolvedUrl = rewritten;\n          resolvedPathname = rewritten.split(\"?\")[0];\n        }\n      }\n\n      // ── 10. SSR page rendering ────────────────────────────────────\n      let response: Response | undefined;\n      if (typeof renderPage === \"function\") {\n        response = await renderPage(webRequest, resolvedUrl, ssrManifest);\n\n        // ── 11. Fallback rewrites (if SSR returned 404) ─────────────\n        if (response && response.status === 404 && configRewrites.fallback?.length) {\n          const fallbackRewrite = matchRewrite(resolvedPathname, configRewrites.fallback, reqCtx);\n          if (fallbackRewrite) {\n            if (isExternalUrl(fallbackRewrite)) {\n              const proxyResponse = await proxyExternalRequest(webRequest, fallbackRewrite);\n              await sendWebResponse(proxyResponse, req, res, compress);\n              return;\n            }\n            response = await renderPage(webRequest, fallbackRewrite, ssrManifest);\n          }\n        }\n      }\n\n      if (!response) {\n        res.writeHead(404);\n        res.end(\"404 - Not found\");\n        return;\n      }\n\n      // Merge middleware + config headers into the response\n      const responseBody = Buffer.from(await response.arrayBuffer());\n      const ct = response.headers.get(\"content-type\") ?? \"text/html\";\n      const responseHeaders: Record<string, string> = { ...middlewareHeaders };\n      response.headers.forEach((v, k) => { responseHeaders[k] = v; });\n\n      sendCompressed(req, res, responseBody, ct, middlewareRewriteStatus ?? response.status, responseHeaders, compress);\n    } catch (e) {\n      console.error(\"[vinext] Server error:\", e);\n      res.writeHead(500);\n      res.end(\"Internal Server Error\");\n    }\n  });\n\n  await new Promise<void>((resolve) => {\n    server.listen(port, host, () => {\n      const addr = server.address();\n      const actualPort = typeof addr === \"object\" && addr ? addr.port : port;\n      console.log(`[vinext] Production server running at http://${host}:${actualPort}`);\n      resolve();\n    });\n  });\n\n  return server;\n}\n\n// Export helpers for testing\nexport { sendCompressed, negotiateEncoding, COMPRESSIBLE_TYPES, COMPRESS_THRESHOLD, resolveHost, trustedHosts, trustProxy, nodeToWebRequest };\n"]}
+{"version":3,"file":"prod-server.js","sourceRoot":"","sources":["../../src/server/prod-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAE9K,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACtL,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,oFAAoF;AACpF,SAAS,cAAc,CAAC,GAAoB;IAC1C,OAAO,IAAI,cAAc,CAAC;QACxB,KAAK,CAAC,UAAU;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7E,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACxC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAaD,mDAAmD;AACnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,WAAW;IACX,UAAU;IACV,YAAY;IACZ,UAAU;IACV,iBAAiB;IACjB,wBAAwB;IACxB,kBAAkB;IAClB,iBAAiB;IACjB,uBAAuB;IACvB,qBAAqB;IACrB,sBAAsB;IACtB,eAAe;IACf,2BAA2B;IAC3B,kBAAkB;CACnB,CAAC,CAAC;AAEH,0GAA0G;AAC1G,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC;;;GAGG;AACH,SAAS,iBAAiB,CAAC,GAAoB;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,QAAmC;IAC3D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,IAAI,CAAC,oBAAoB,CAAC;gBAC/B,MAAM,EAAE;oBACN,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,+CAA+C;iBAC1F;aACF,CAAC,CAAC;QACL,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,8BAA8B;QACtE,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CACrB,GAAoB,EACpB,GAAmB,EACnB,IAAqB,EACrB,WAAmB,EACnB,UAAkB,EAClB,eAAuC,EAAE,EACzC,WAAoB,IAAI;IAExB,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1D,IAAI,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACrF,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC9C,4EAA4E;QAC5E,0EAA0E;QAC1E,oCAAoC;QACpC,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,SAAiB,CAAC;QACtB,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YACpD,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,mBAAmB,CAAC;QAC/G,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,iBAAiB,CAAC;QAChC,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE;YACxB,GAAG,YAAY;YACf,cAAc,EAAE,WAAW;YAC3B,kBAAkB,EAAE,QAAQ;YAC5B,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE;YACxB,GAAG,YAAY;YACf,cAAc,EAAE,WAAW;YAC3B,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,aAAa,GAA2B;IAC5C,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,wBAAwB;IAChC,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,+BAA+B;IACvC,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,kBAAkB;CAC3B,CAAC;AAEF;;;GAGG;AACH,SAAS,cAAc,CACrB,GAAoB,EACpB,GAAmB,EACnB,SAAiB,EACjB,QAAgB,EAChB,QAAiB,EACjB,YAAqC;IAErC,qFAAqF;IACrF,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,eAAe,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QACvF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,QAAQ,KAAK,GAAG;QAChB,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAC1B,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EACjC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;IAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,QAAQ;QAC3B,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,sBAAsB,CAAC;IAE3B,MAAM,WAAW,GAAG;QAClB,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,YAAY;QAC7B,GAAG,YAAY;KAChB,CAAC;IAEF,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,GAAG,WAAW;gBACd,kBAAkB,EAAE,QAAQ;gBAC5B,IAAI,EAAE,iBAAiB;aACxB,CAAC,CAAC;YACH,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAgB,CAAC,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChC,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,WAAW,CAAC,GAAoB,EAAE,QAAgB;IACzD,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAuB,CAAC;IAC3E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAEpC,IAAI,YAAY,EAAE,CAAC;QACjB,+DAA+D;QAC/D,gEAAgE;QAChE,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtE,IAAI,aAAa,IAAI,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACrD,OAAO,aAAa,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,UAAU,IAAI,QAAQ,CAAC;AAChC,CAAC;AAED,4EAA4E;AAC5E,MAAM,YAAY,GAAgB,IAAI,GAAG,CACvC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC;KACrC,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;KAClC,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC;AAEnF;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAoB;IAC5C,MAAM,QAAQ,GAAG,UAAU;QACzB,CAAC,CAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACrE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;IAEtD,MAAM,IAAI,GAAsC;QAC9C,MAAM;QACN,OAAO;KACR,CAAC;IAEF,IAAI,OAAO,EAAE,CAAC;QACZ,0EAA0E;QAC1E,kDAAkD;QAClD,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QAClD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,wCAAwC;IAChE,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,WAAqB,EACrB,GAAoB,EACpB,GAAmB,EACnB,QAAiB;IAEjB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAElC,kEAAkE;IAClE,MAAM,WAAW,GAAsC,EAAE,CAAC;IAC1D,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACxC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;gBACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACtB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,4CAA4C;IAC5C,sEAAsE;IACtE,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAExE,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrC,WAAW,CAAC,kBAAkB,CAAC,GAAG,QAAS,CAAC;QAC5C,+EAA+E;QAC/E,8EAA8E;QAC9E,qDAAqD;QACrD,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC1C,WAAW,CAAC,MAAM,CAAC,GAAG,YAAY,GAAG,mBAAmB,CAAC;YAC3D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEnC,kDAAkD;IAClD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,oDAAoD;IACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,IAA2C,CAAC,CAAC;IAE7F,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAS,CAAC,CAAC;QAC/C,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;IACtG,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAA6B,EAAE;IACnE,MAAM,EACJ,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAC3D,IAAI,GAAG,SAAS,EAChB,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,aAAa,GAAG,KAAK,GACtB,GAAG,OAAO,CAAC;IAEZ,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC;IAChC,qEAAqE;IACrE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAEtD,oBAAoB;IACpB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEhD,IAAI,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;AACtF,CAAC;AAYD;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,oBAAoB,CAAC,OAA+B;IACjE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAElE,uEAAuE;IACvE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,UAAU,GAA4C,SAAS,CAAC,OAAO,CAAC;IAE9E,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,mFAAmF;QACnF,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,aAAa,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;YAChF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,6DAA6D;QAC7D,uDAAuD;QACvD,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,IAAI,QAAQ,KAAK,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChF,OAAO;QACT,CAAC;QAED,6EAA6E;QAC7E,oEAAoE;QACpE,IAAI,QAAQ,KAAK,uBAAuB,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACnD,MAAM,oBAAoB,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,mBAAmB,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,2EAA2E;YAC3E,sEAAsE;YACtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;YAC5D,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,yDAAyD;YACzD,MAAM,oBAAoB,GAA2B;gBACnD,yBAAyB,EAAE,6BAA6B;gBACxD,wBAAwB,EAAE,SAAS;gBACnC,qBAAqB,EAAE,QAAQ;aAChC,CAAC;YACF,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBACtF,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,kEAAkE;YAClE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,uDAAuD;YACvD,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,gDAAgD,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;YAClF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAYD;;;;;;;;GAQG;AACH,KAAK,UAAU,sBAAsB,CAAC,OAAiC;IACrE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAErE,gEAAgE;IAChE,IAAI,WAAW,GAA6B,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACxE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,6EAA6E;IAC7E,kEAAkE;IAClE,oDAAoD;IACpD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IACzE,IAAI,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9E,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;YACpD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,UAAkB,CAAC,sBAAsB,GAAG,UAAU,CAAC;YAC1D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC;IAED,+EAA+E;IAC/E,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC;IAE3F,qEAAqE;IACrE,MAAM,QAAQ,GAAW,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;IACtD,MAAM,aAAa,GAAY,YAAY,EAAE,aAAa,IAAI,KAAK,CAAC;IACpE,MAAM,eAAe,GAAG,YAAY,EAAE,SAAS,IAAI,EAAE,CAAC;IACtD,MAAM,cAAc,GAAG,YAAY,EAAE,QAAQ,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACnG,MAAM,aAAa,GAAG,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC;IAClD,+EAA+E;IAC/E,MAAM,kBAAkB,GAAa;QACnC,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,IAAI,oBAAoB,CAAC;QAC9D,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,IAAI,mBAAmB,CAAC;KAC7D,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC9B,mFAAmF;QACnF,yEAAyE;QACzE,wEAAwE;QACxE,gDAAgD;QAChD,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,aAAa,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;YAChF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,GAAG,GAAG,QAAQ,GAAG,KAAK,CAAC;QAE3B,6DAA6D;QAC7D,4DAA4D;QAC5D,IAAI,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,qEAAqE;QACrE,kEAAkE;QAClE,2CAA2C;QAC3C,MAAM,gBAAgB,GAAG,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;YAChE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG;YACxC,CAAC,CAAC,QAAQ,CAAC;QACb,IACE,gBAAgB,KAAK,GAAG;YACxB,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC;YACrC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAC/D,CAAC;YACD,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,IAAI,QAAQ,KAAK,uBAAuB,IAAI,gBAAgB,KAAK,uBAAuB,EAAE,CAAC;YACzF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,2CAA2C;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;YAC5D,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,oBAAoB,GAA2B;gBACnD,yBAAyB,EAAE,6BAA6B;gBACxD,wBAAwB,EAAE,SAAS;gBACnC,qBAAqB,EAAE,QAAQ;aAChC,CAAC;YACF,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBACtF,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,iEAAiE;YACjE,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;gBACxD,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,GAAG,QAAQ,GAAG,EAAE,CAAC;gBACpB,QAAQ,GAAG,QAAQ,CAAC;YACtB,CAAC;YAED,iEAAiE;YACjE,IAAI,QAAQ,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC3C,IAAI,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClC,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;oBACjE,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;qBAAM,IAAI,CAAC,aAAa,IAAI,WAAW,EAAE,CAAC;oBACzC,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC/E,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;YACH,CAAC;YAED,0DAA0D;YAC1D,MAAM,WAAW,GAAG,UAAU;gBAC5B,CAAC,CAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;gBACrE,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,QAAQ,GAAG,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1F,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBAClE,IAAI,CAAC;oBAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,OAAO,CAAC,CAAC;YACX,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;YACtD,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,GAAG,QAAQ,MAAM,UAAU,GAAG,GAAG,EAAE,EAAE;gBAClE,MAAM;gBACN,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/C,gEAAgE;gBAChE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;aACrC,CAAC,CAAC;YAEH,2DAA2D;YAC3D,MAAM,MAAM,GAAmB,yBAAyB,CAAC,UAAU,CAAC,CAAC;YAErE,iEAAiE;YACjE,IAAI,WAAW,GAAG,GAAG,CAAC;YACtB,MAAM,iBAAiB,GAA2B,EAAE,CAAC;YACrD,IAAI,uBAA2C,CAAC;YAChD,IAAI,OAAO,aAAa,KAAK,UAAU,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;gBAE/C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACrB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;wBACvB,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,IAAI,GAAG,EAAE;4BAC1C,QAAQ,EAAE,MAAM,CAAC,WAAW;yBAC7B,CAAC,CAAC;wBACH,GAAG,CAAC,GAAG,EAAE,CAAC;wBACV,OAAO;oBACT,CAAC;oBACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACpB,+DAA+D;wBAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;wBAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;wBACnF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBACd,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,mEAAmE;gBACnE,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;wBAClD,iBAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;oBACjC,CAAC;gBACH,CAAC;gBAED,2BAA2B;gBAC3B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;gBAClC,CAAC;gBAED,mDAAmD;gBACnD,oDAAoD;gBACpD,uBAAuB,GAAG,MAAM,CAAC,aAAa,CAAC;YACjD,CAAC;YAED,wEAAwE;YACxE,mEAAmE;YACnE,sEAAsE;YACtE,sEAAsE;YACtE,wEAAwE;YACxE,MAAM,WAAW,GAAG,uBAAuB,CAAC;YAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACjD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC/C,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;oBACzD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAChC,CAAC;qBAAM,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC3C,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,IAAI,gBAAgB,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEjD,iEAAiE;YACjE,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;gBAC9D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,aAAa,CAAC,gBAAgB,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;gBAC1E,IAAI,QAAQ,EAAE,CAAC;oBACb,mEAAmE;oBACnE,iCAAiC;oBACjC,kFAAkF;oBAClF,MAAM,IAAI,GAAG,mBAAmB,CAC9B,QAAQ,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;wBACpD,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW;wBACjC,CAAC,CAAC,QAAQ,CAAC,WAAW,CACzB,CAAC;oBACF,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClE,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,IAAI,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBACvC,MAAM,SAAS,GAAG,YAAY,CAAC,gBAAgB,EAAE,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACrF,IAAI,SAAS,EAAE,CAAC;oBACd,IAAI,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;wBACxE,MAAM,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;wBACzD,OAAO;oBACT,CAAC;oBACD,WAAW,GAAG,SAAS,CAAC;oBACxB,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,IAAI,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;gBACxE,IAAI,QAAkB,CAAC;gBACvB,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;oBACpC,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,IAAI,QAAQ,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACxE,CAAC;gBAED,sDAAsD;gBACtD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC/D,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC;gBAC/D,MAAM,eAAe,GAA2B,EAAE,GAAG,iBAAiB,EAAE,CAAC;gBACzE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAEhE,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,uBAAuB,IAAI,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;gBAClH,OAAO;YACT,CAAC;YAED,iEAAiE;YACjE,IAAI,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,YAAY,CAAC,gBAAgB,EAAE,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBACpF,IAAI,SAAS,EAAE,CAAC;oBACd,IAAI,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;wBACxE,MAAM,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;wBACzD,OAAO;oBACT,CAAC;oBACD,WAAW,GAAG,SAAS,CAAC;oBACxB,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,iEAAiE;YACjE,IAAI,QAA8B,CAAC;YACnC,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;gBACrC,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;gBAElE,+DAA+D;gBAC/D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;oBAC3E,MAAM,eAAe,GAAG,YAAY,CAAC,gBAAgB,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBACxF,IAAI,eAAe,EAAE,CAAC;wBACpB,IAAI,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;4BACnC,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;4BAC9E,MAAM,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;4BACzD,OAAO;wBACT,CAAC;wBACD,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;oBACxE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,sDAAsD;YACtD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/D,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC;YAC/D,MAAM,eAAe,GAA2B,EAAE,GAAG,iBAAiB,EAAE,CAAC;YACzE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAEhE,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,uBAAuB,IAAI,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QACpH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,gDAAgD,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;YAClF,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6BAA6B;AAC7B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC","sourcesContent":["/**\n * Production server for vinext.\n *\n * Serves the built output from `vinext build`. Handles:\n * - Static asset serving from client build output\n * - Pages Router: SSR rendering + API route handling\n * - App Router: RSC/SSR rendering, route handlers, server actions\n * - Gzip/Brotli compression for text-based responses\n * - Streaming SSR for App Router\n *\n * Build output for Pages Router:\n * - dist/client/  — static assets (JS, CSS, images) + .vite/ssr-manifest.json\n * - dist/server/entry.js — SSR entry point (virtual:vinext-server-entry)\n *\n * Build output for App Router:\n * - dist/client/  — static assets (JS, CSS, images)\n * - dist/server/index.js — RSC entry (default export: handler(Request) → Response)\n * - dist/server/ssr/index.js — SSR entry (imported by RSC entry at runtime)\n */\nimport { createServer, type IncomingMessage, type ServerResponse } from \"node:http\";\nimport { Readable, pipeline } from \"node:stream\";\nimport { pathToFileURL } from \"node:url\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport zlib from \"node:zlib\";\nimport { matchRedirect, matchRewrite, matchHeaders, requestContextFromRequest, isExternalUrl, proxyExternalRequest, sanitizeDestination } from \"../config/config-matchers.js\";\nimport type { RequestContext } from \"../config/config-matchers.js\";\nimport { IMAGE_OPTIMIZATION_PATH, IMAGE_CONTENT_SECURITY_POLICY, parseImageParams, isSafeImageContentType, DEFAULT_DEVICE_SIZES, DEFAULT_IMAGE_SIZES } from \"./image-optimization.js\";\nimport { normalizePath } from \"./normalize-path.js\";\nimport { computeLazyChunks } from \"../index.js\";\n\n/** Convert a Node.js IncomingMessage into a ReadableStream for Web Request body. */\nfunction readNodeStream(req: IncomingMessage): ReadableStream<Uint8Array> {\n  return new ReadableStream({\n    start(controller) {\n      req.on(\"data\", (chunk: Buffer) => controller.enqueue(new Uint8Array(chunk)));\n      req.on(\"end\", () => controller.close());\n      req.on(\"error\", (err) => controller.error(err));\n    },\n  });\n}\n\nexport interface ProdServerOptions {\n  /** Port to listen on */\n  port?: number;\n  /** Host to bind to */\n  host?: string;\n  /** Path to the build output directory */\n  outDir?: string;\n  /** Disable compression (default: false) */\n  noCompression?: boolean;\n}\n\n/** Content types that benefit from compression. */\nconst COMPRESSIBLE_TYPES = new Set([\n  \"text/html\",\n  \"text/css\",\n  \"text/plain\",\n  \"text/xml\",\n  \"text/javascript\",\n  \"application/javascript\",\n  \"application/json\",\n  \"application/xml\",\n  \"application/xhtml+xml\",\n  \"application/rss+xml\",\n  \"application/atom+xml\",\n  \"image/svg+xml\",\n  \"application/manifest+json\",\n  \"application/wasm\",\n]);\n\n/** Minimum size threshold for compression (in bytes). Below this, compression overhead isn't worth it. */\nconst COMPRESS_THRESHOLD = 1024;\n\n/**\n * Parse the Accept-Encoding header and return the best supported encoding.\n * Preference order: br > gzip > deflate > identity.\n */\nfunction negotiateEncoding(req: IncomingMessage): \"br\" | \"gzip\" | \"deflate\" | null {\n  const accept = req.headers[\"accept-encoding\"];\n  if (!accept || typeof accept !== \"string\") return null;\n  const lower = accept.toLowerCase();\n  if (lower.includes(\"br\")) return \"br\";\n  if (lower.includes(\"gzip\")) return \"gzip\";\n  if (lower.includes(\"deflate\")) return \"deflate\";\n  return null;\n}\n\n/**\n * Create a compression stream for the given encoding.\n */\nfunction createCompressor(encoding: \"br\" | \"gzip\" | \"deflate\"): zlib.BrotliCompress | zlib.Gzip | zlib.Deflate {\n  switch (encoding) {\n    case \"br\":\n      return zlib.createBrotliCompress({\n        params: {\n          [zlib.constants.BROTLI_PARAM_QUALITY]: 4, // Fast compression (1-11, 4 is a good balance)\n        },\n      });\n    case \"gzip\":\n      return zlib.createGzip({ level: 6 }); // Default level, good balance\n    case \"deflate\":\n      return zlib.createDeflate({ level: 6 });\n  }\n}\n\n/**\n * Send a compressed response if the content type is compressible and the\n * client supports compression. Otherwise send uncompressed.\n */\nfunction sendCompressed(\n  req: IncomingMessage,\n  res: ServerResponse,\n  body: string | Buffer,\n  contentType: string,\n  statusCode: number,\n  extraHeaders: Record<string, string> = {},\n  compress: boolean = true,\n): void {\n  const buf = typeof body === \"string\" ? Buffer.from(body) : body;\n  const baseType = contentType.split(\";\")[0].trim();\n  const encoding = compress ? negotiateEncoding(req) : null;\n\n  if (encoding && COMPRESSIBLE_TYPES.has(baseType) && buf.length >= COMPRESS_THRESHOLD) {\n    const compressor = createCompressor(encoding);\n    // Merge Accept-Encoding into existing Vary header from extraHeaders instead\n    // of overwriting. Preserves Vary values set by the App Router for content\n    // negotiation (e.g. \"RSC, Accept\").\n    const existingVary = extraHeaders[\"Vary\"] ?? extraHeaders[\"vary\"];\n    let varyValue: string;\n    if (existingVary) {\n      const existing = String(existingVary).toLowerCase();\n      varyValue = existing.includes(\"accept-encoding\") ? String(existingVary) : existingVary + \", Accept-Encoding\";\n    } else {\n      varyValue = \"Accept-Encoding\";\n    }\n    res.writeHead(statusCode, {\n      ...extraHeaders,\n      \"Content-Type\": contentType,\n      \"Content-Encoding\": encoding,\n      Vary: varyValue,\n    });\n    compressor.end(buf);\n    pipeline(compressor, res, () => { /* ignore pipeline errors on closed connections */ });\n  } else {\n    res.writeHead(statusCode, {\n      ...extraHeaders,\n      \"Content-Type\": contentType,\n      \"Content-Length\": String(buf.length),\n    });\n    res.end(buf);\n  }\n}\n\n/** Content-type lookup for static assets. */\nconst CONTENT_TYPES: Record<string, string> = {\n  \".js\": \"application/javascript\",\n  \".mjs\": \"application/javascript\",\n  \".css\": \"text/css\",\n  \".html\": \"text/html\",\n  \".json\": \"application/json\",\n  \".png\": \"image/png\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".gif\": \"image/gif\",\n  \".svg\": \"image/svg+xml\",\n  \".ico\": \"image/x-icon\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n  \".ttf\": \"font/ttf\",\n  \".eot\": \"application/vnd.ms-fontobject\",\n  \".webp\": \"image/webp\",\n  \".avif\": \"image/avif\",\n  \".map\": \"application/json\",\n};\n\n/**\n * Try to serve a static file from the client build directory.\n * Returns true if the file was served, false otherwise.\n */\nfunction tryServeStatic(\n  req: IncomingMessage,\n  res: ServerResponse,\n  clientDir: string,\n  pathname: string,\n  compress: boolean,\n  extraHeaders?: Record<string, string>,\n): boolean {\n  // Resolve the path and guard against directory traversal (e.g. /../../../etc/passwd)\n  const resolvedClient = path.resolve(clientDir);\n  let decodedPathname: string;\n  try {\n    decodedPathname = decodeURIComponent(pathname);\n  } catch {\n    return false;\n  }\n  const staticFile = path.resolve(clientDir, \".\" + decodedPathname);\n  if (!staticFile.startsWith(resolvedClient + path.sep) && staticFile !== resolvedClient) {\n    return false;\n  }\n  if (\n    pathname === \"/\" ||\n    !fs.existsSync(staticFile) ||\n    !fs.statSync(staticFile).isFile()\n  ) {\n    return false;\n  }\n\n  const ext = path.extname(staticFile);\n  const ct = CONTENT_TYPES[ext] ?? \"application/octet-stream\";\n  const isHashed = pathname.startsWith(\"/assets/\");\n  const cacheControl = isHashed\n    ? \"public, max-age=31536000, immutable\"\n    : \"public, max-age=3600\";\n\n  const baseHeaders = {\n    \"Content-Type\": ct,\n    \"Cache-Control\": cacheControl,\n    ...extraHeaders,\n  };\n\n  const baseType = ct.split(\";\")[0].trim();\n  if (compress && COMPRESSIBLE_TYPES.has(baseType)) {\n    const encoding = negotiateEncoding(req);\n    if (encoding) {\n      const fileStream = fs.createReadStream(staticFile);\n      const compressor = createCompressor(encoding);\n      res.writeHead(200, {\n        ...baseHeaders,\n        \"Content-Encoding\": encoding,\n        Vary: \"Accept-Encoding\",\n      });\n      pipeline(fileStream, compressor, res, () => { /* ignore */ });\n      return true;\n    }\n  }\n\n  res.writeHead(200, baseHeaders);\n  fs.createReadStream(staticFile).pipe(res);\n  return true;\n}\n\n/**\n * Resolve the host for a request, ignoring X-Forwarded-Host to prevent\n * host header poisoning attacks (open redirects, cache poisoning).\n *\n * X-Forwarded-Host is only trusted when the VINEXT_TRUSTED_HOSTS env var\n * lists the forwarded host value. Without this, an attacker can send\n * X-Forwarded-Host: evil.com and poison any redirect that resolves\n * against request.url.\n *\n * On Cloudflare Workers, X-Forwarded-Host is always set by Cloudflare\n * itself, so this is only a concern for the Node.js prod-server.\n */\nfunction resolveHost(req: IncomingMessage, fallback: string): string {\n  const rawForwarded = req.headers[\"x-forwarded-host\"] as string | undefined;\n  const hostHeader = req.headers.host;\n\n  if (rawForwarded) {\n    // X-Forwarded-Host can be comma-separated when passing through\n    // multiple proxies — take only the first (client-facing) value.\n    const forwardedHost = rawForwarded.split(\",\")[0].trim().toLowerCase();\n    if (forwardedHost && trustedHosts.has(forwardedHost)) {\n      return forwardedHost;\n    }\n  }\n\n  return hostHeader || fallback;\n}\n\n/** Hosts that are allowed as X-Forwarded-Host values (stored lowercase). */\nconst trustedHosts: Set<string> = new Set(\n  (process.env.VINEXT_TRUSTED_HOSTS ?? \"\")\n    .split(\",\")\n    .map((h) => h.trim().toLowerCase())\n    .filter(Boolean),\n);\n\n/**\n * Whether to trust X-Forwarded-Proto from upstream proxies.\n * Enabled when VINEXT_TRUST_PROXY=1 or when VINEXT_TRUSTED_HOSTS is set\n * (having trusted hosts implies a trusted proxy).\n */\nconst trustProxy = process.env.VINEXT_TRUST_PROXY === \"1\" || trustedHosts.size > 0;\n\n/**\n * Convert a Node.js IncomingMessage to a Web Request object.\n */\nfunction nodeToWebRequest(req: IncomingMessage): Request {\n  const rawProto = trustProxy\n    ? (req.headers[\"x-forwarded-proto\"] as string)?.split(\",\")[0]?.trim()\n    : undefined;\n  const proto = rawProto === \"https\" || rawProto === \"http\" ? rawProto : \"http\";\n  const host = resolveHost(req, \"localhost\");\n  const origin = `${proto}://${host}`;\n  const url = new URL(req.url ?? \"/\", origin);\n\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(req.headers)) {\n    if (value === undefined) continue;\n    if (Array.isArray(value)) {\n      for (const v of value) headers.append(key, v);\n    } else {\n      headers.set(key, value);\n    }\n  }\n\n  const method = req.method ?? \"GET\";\n  const hasBody = method !== \"GET\" && method !== \"HEAD\";\n\n  const init: RequestInit & { duplex?: string } = {\n    method,\n    headers,\n  };\n\n  if (hasBody) {\n    // Convert Node.js readable stream to Web ReadableStream for request body.\n    // Readable.toWeb() is available since Node.js 17.\n    init.body = Readable.toWeb(req) as ReadableStream;\n    init.duplex = \"half\"; // Required for streaming request bodies\n  }\n\n  return new Request(url, init);\n}\n\n/**\n * Stream a Web Response back to a Node.js ServerResponse.\n * Supports streaming compression for SSR responses.\n */\nasync function sendWebResponse(\n  webResponse: Response,\n  req: IncomingMessage,\n  res: ServerResponse,\n  compress: boolean,\n): Promise<void> {\n  const status = webResponse.status;\n\n  // Collect headers, handling multi-value headers (e.g. Set-Cookie)\n  const nodeHeaders: Record<string, string | string[]> = {};\n  webResponse.headers.forEach((value, key) => {\n    const existing = nodeHeaders[key];\n    if (existing !== undefined) {\n      nodeHeaders[key] = Array.isArray(existing)\n        ? [...existing, value]\n        : [existing, value];\n    } else {\n      nodeHeaders[key] = value;\n    }\n  });\n\n  if (!webResponse.body) {\n    res.writeHead(status, nodeHeaders);\n    res.end();\n    return;\n  }\n\n  // Check if we should compress the response.\n  // Skip if the upstream already compressed (avoid double-compression).\n  const alreadyEncoded = webResponse.headers.has(\"content-encoding\");\n  const contentType = webResponse.headers.get(\"content-type\") ?? \"\";\n  const baseType = contentType.split(\";\")[0].trim();\n  const encoding = (compress && !alreadyEncoded) ? negotiateEncoding(req) : null;\n  const shouldCompress = !!(encoding && COMPRESSIBLE_TYPES.has(baseType));\n\n  if (shouldCompress) {\n    delete nodeHeaders[\"content-length\"];\n    delete nodeHeaders[\"Content-Length\"];\n    nodeHeaders[\"Content-Encoding\"] = encoding!;\n    // Merge Accept-Encoding into existing Vary header (e.g. \"RSC, Accept\") instead\n    // of overwriting. This prevents stripping the Vary values that the App Router\n    // sets for content negotiation (RSC stream vs HTML).\n    const existingVary = nodeHeaders[\"Vary\"] ?? nodeHeaders[\"vary\"];\n    if (existingVary) {\n      const existing = String(existingVary).toLowerCase();\n      if (!existing.includes(\"accept-encoding\")) {\n        nodeHeaders[\"Vary\"] = existingVary + \", Accept-Encoding\";\n      }\n    } else {\n      nodeHeaders[\"Vary\"] = \"Accept-Encoding\";\n    }\n  }\n\n  res.writeHead(status, nodeHeaders);\n\n  // HEAD requests: send headers only, skip the body\n  if (req.method === \"HEAD\") {\n    res.end();\n    return;\n  }\n\n  // Convert Web ReadableStream to Node.js Readable and pipe to response.\n  // Readable.fromWeb() is available since Node.js 17.\n  const nodeStream = Readable.fromWeb(webResponse.body as import(\"stream/web\").ReadableStream);\n\n  if (shouldCompress) {\n    const compressor = createCompressor(encoding!);\n    pipeline(nodeStream, compressor, res, () => { /* ignore pipeline errors on closed connections */ });\n  } else {\n    pipeline(nodeStream, res, () => { /* ignore pipeline errors on closed connections */ });\n  }\n}\n\n/**\n * Start the production server.\n *\n * Automatically detects whether the build is App Router (dist/server/index.js) or\n * Pages Router (dist/server/entry.js) and configures the appropriate handler.\n */\nexport async function startProdServer(options: ProdServerOptions = {}) {\n  const {\n    port = process.env.PORT ? parseInt(process.env.PORT) : 3000,\n    host = \"0.0.0.0\",\n    outDir = path.resolve(\"dist\"),\n    noCompression = false,\n  } = options;\n\n  const compress = !noCompression;\n  // Always resolve outDir to absolute to ensure dynamic import() works\n  const resolvedOutDir = path.resolve(outDir);\n  const clientDir = path.join(resolvedOutDir, \"client\");\n\n  // Detect build type\n  const rscEntryPath = path.join(resolvedOutDir, \"server\", \"index.js\");\n  const serverEntryPath = path.join(resolvedOutDir, \"server\", \"entry.js\");\n  const isAppRouter = fs.existsSync(rscEntryPath);\n\n  if (!isAppRouter && !fs.existsSync(serverEntryPath)) {\n    console.error(`[vinext] No build output found in ${outDir}`);\n    console.error(\"Run `vinext build` first.\");\n    process.exit(1);\n  }\n\n  if (isAppRouter) {\n    return startAppRouterServer({ port, host, clientDir, rscEntryPath, compress });\n  }\n\n  return startPagesRouterServer({ port, host, clientDir, serverEntryPath, compress });\n}\n\n// ─── App Router Production Server ─────────────────────────────────────────────\n\ninterface AppRouterServerOptions {\n  port: number;\n  host: string;\n  clientDir: string;\n  rscEntryPath: string;\n  compress: boolean;\n}\n\n/**\n * Start the App Router production server.\n *\n * The RSC entry (dist/server/index.js) exports a default handler function:\n *   handler(request: Request) → Promise<Response>\n *\n * This handler already does everything: route matching, RSC rendering,\n * SSR HTML generation (via import(\"./ssr/index.js\")), route handlers,\n * server actions, ISR caching, 404s, redirects, etc.\n *\n * The production server's job is simply to:\n * 1. Serve static assets from dist/client/\n * 2. Convert Node.js IncomingMessage → Web Request\n * 3. Call the RSC handler\n * 4. Stream the Web Response back (with optional compression)\n */\nasync function startAppRouterServer(options: AppRouterServerOptions) {\n  const { port, host, clientDir, rscEntryPath, compress } = options;\n\n  // Import the RSC handler (use file:// URL for reliable dynamic import)\n  const rscModule = await import(pathToFileURL(rscEntryPath).href);\n  const rscHandler: (request: Request) => Promise<Response> = rscModule.default;\n\n  if (typeof rscHandler !== \"function\") {\n    console.error(\"[vinext] RSC entry does not export a default handler function\");\n    process.exit(1);\n  }\n\n  const server = createServer(async (req, res) => {\n    const url = req.url ?? \"/\";\n    // Normalize backslashes (browsers treat /\\ as //), then decode and normalize path.\n    const rawPathname = url.split(\"?\")[0].replaceAll(\"\\\\\", \"/\");\n    let pathname: string;\n    try {\n      pathname = normalizePath(decodeURIComponent(rawPathname));\n    } catch {\n      // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of crashing.\n      res.writeHead(400);\n      res.end(\"Bad Request\");\n      return;\n    }\n\n    // Guard against protocol-relative URL open redirect attacks.\n    // Check rawPathname before normalizePath collapses //.\n    if (rawPathname.startsWith(\"//\")) {\n      res.writeHead(404);\n      res.end(\"404 Not Found\");\n      return;\n    }\n\n    // Serve static assets from client build\n    if (pathname !== \"/\" && tryServeStatic(req, res, clientDir, pathname, compress)) {\n      return;\n    }\n\n    // Image optimization passthrough (Node.js prod server has no Images binding;\n    // serves the original file with cache headers and security headers)\n    if (pathname === IMAGE_OPTIMIZATION_PATH) {\n      const parsedUrl = new URL(url, \"http://localhost\");\n      const defaultAllowedWidths = [...DEFAULT_DEVICE_SIZES, ...DEFAULT_IMAGE_SIZES];\n      const params = parseImageParams(parsedUrl, defaultAllowedWidths);\n      if (!params) {\n        res.writeHead(400);\n        res.end(\"Bad Request\");\n        return;\n      }\n      // Block SVG and other unsafe content types by checking the file extension.\n      // This must happen before serving to prevent XSS via SVG passthrough.\n      const ext = path.extname(params.imageUrl).toLowerCase();\n      const ct = CONTENT_TYPES[ext] ?? \"application/octet-stream\";\n      if (!isSafeImageContentType(ct)) {\n        res.writeHead(400);\n        res.end(\"The requested resource is not an allowed image type\");\n        return;\n      }\n      // Serve the original image with CSP and security headers\n      const imageSecurityHeaders: Record<string, string> = {\n        \"Content-Security-Policy\": IMAGE_CONTENT_SECURITY_POLICY,\n        \"X-Content-Type-Options\": \"nosniff\",\n        \"Content-Disposition\": \"inline\",\n      };\n      if (tryServeStatic(req, res, clientDir, params.imageUrl, false, imageSecurityHeaders)) {\n        return;\n      }\n      res.writeHead(404);\n      res.end(\"Image not found\");\n      return;\n    }\n\n    try {\n      // Convert Node.js request to Web Request and call the RSC handler\n      const request = nodeToWebRequest(req);\n      const response = await rscHandler(request);\n\n      // Stream the Web Response back to the Node.js response\n      await sendWebResponse(response, req, res, compress);\n    } catch (e) {\n      console.error(\"[vinext] Server error:\", e);\n      if (!res.headersSent) {\n        res.writeHead(500);\n        res.end(\"Internal Server Error\");\n      }\n    }\n  });\n\n  await new Promise<void>((resolve) => {\n    server.listen(port, host, () => {\n      const addr = server.address();\n      const actualPort = typeof addr === \"object\" && addr ? addr.port : port;\n      console.log(`[vinext] Production server running at http://${host}:${actualPort}`);\n      resolve();\n    });\n  });\n\n  return server;\n}\n\n// ─── Pages Router Production Server ───────────────────────────────────────────\n\ninterface PagesRouterServerOptions {\n  port: number;\n  host: string;\n  clientDir: string;\n  serverEntryPath: string;\n  compress: boolean;\n}\n\n/**\n * Start the Pages Router production server.\n *\n * Uses the server entry (dist/server/entry.js) which exports:\n * - renderPage(request, url, manifest) — SSR rendering (Web Request → Response)\n * - handleApiRoute(request, url) — API route handling (Web Request → Response)\n * - runMiddleware(request) — middleware execution\n * - vinextConfig — embedded next.config.js settings\n */\nasync function startPagesRouterServer(options: PagesRouterServerOptions) {\n  const { port, host, clientDir, serverEntryPath, compress } = options;\n\n  // Load the SSR manifest (maps module URLs to client asset URLs)\n  let ssrManifest: Record<string, string[]> = {};\n  const manifestPath = path.join(clientDir, \".vite\", \"ssr-manifest.json\");\n  if (fs.existsSync(manifestPath)) {\n    ssrManifest = JSON.parse(fs.readFileSync(manifestPath, \"utf-8\"));\n  }\n\n  // Load the build manifest to compute lazy chunks — chunks only reachable via\n  // dynamic imports (React.lazy, next/dynamic). These should not be\n  // modulepreloaded since they are fetched on demand.\n  const buildManifestPath = path.join(clientDir, \".vite\", \"manifest.json\");\n  if (fs.existsSync(buildManifestPath)) {\n    try {\n      const buildManifest = JSON.parse(fs.readFileSync(buildManifestPath, \"utf-8\"));\n      const lazyChunks = computeLazyChunks(buildManifest);\n      if (lazyChunks.length > 0) {\n        (globalThis as any).__VINEXT_LAZY_CHUNKS__ = lazyChunks;\n      }\n    } catch { /* ignore parse errors */ }\n  }\n\n  // Import the server entry module (use file:// URL for reliable dynamic import)\n  const serverEntry = await import(pathToFileURL(serverEntryPath).href);\n  const { renderPage, handleApiRoute: handleApi, runMiddleware, vinextConfig } = serverEntry;\n\n  // Extract config values (embedded at build time in the server entry)\n  const basePath: string = vinextConfig?.basePath ?? \"\";\n  const trailingSlash: boolean = vinextConfig?.trailingSlash ?? false;\n  const configRedirects = vinextConfig?.redirects ?? [];\n  const configRewrites = vinextConfig?.rewrites ?? { beforeFiles: [], afterFiles: [], fallback: [] };\n  const configHeaders = vinextConfig?.headers ?? [];\n  // Compute allowed image widths from config (union of deviceSizes + imageSizes)\n  const allowedImageWidths: number[] = [\n    ...(vinextConfig?.images?.deviceSizes ?? DEFAULT_DEVICE_SIZES),\n    ...(vinextConfig?.images?.imageSizes ?? DEFAULT_IMAGE_SIZES),\n  ];\n\n  const server = createServer(async (req, res) => {\n    const rawUrl = req.url ?? \"/\";\n    // Normalize backslashes (browsers treat /\\ as //), then decode and normalize path.\n    // Rebuild `url` from the decoded pathname + original query string so all\n    // downstream consumers (resolvedUrl, resolvedPathname, config matchers)\n    // always work with the decoded, canonical path.\n    const rawPagesPathname = rawUrl.split(\"?\")[0].replaceAll(\"\\\\\", \"/\");\n    const rawQs = rawUrl.includes(\"?\") ? rawUrl.slice(rawUrl.indexOf(\"?\")) : \"\";\n    let pathname: string;\n    try {\n      pathname = normalizePath(decodeURIComponent(rawPagesPathname));\n    } catch {\n      // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of crashing.\n      res.writeHead(400);\n      res.end(\"Bad Request\");\n      return;\n    }\n    let url = pathname + rawQs;\n\n    // Guard against protocol-relative URL open redirect attacks.\n    // Check rawPagesPathname before normalizePath collapses //.\n    if (rawPagesPathname.startsWith(\"//\")) {\n      res.writeHead(404);\n      res.end(\"404 Not Found\");\n      return;\n    }\n\n    // ── 1. Static assets ──────────────────────────────────────────\n    // Serve static files from client build. When basePath is configured,\n    // Vite's `base` config ensures assets are under basePath/assets/.\n    // We check both with and without basePath.\n    const staticLookupPath = basePath && pathname.startsWith(basePath)\n      ? pathname.slice(basePath.length) || \"/\"\n      : pathname;\n    if (\n      staticLookupPath !== \"/\" &&\n      !staticLookupPath.startsWith(\"/api/\") &&\n      tryServeStatic(req, res, clientDir, staticLookupPath, compress)\n    ) {\n      return;\n    }\n\n    // ── Image optimization passthrough ──────────────────────────────\n    if (pathname === IMAGE_OPTIMIZATION_PATH || staticLookupPath === IMAGE_OPTIMIZATION_PATH) {\n      const parsedUrl = new URL(rawUrl, \"http://localhost\");\n      const params = parseImageParams(parsedUrl, allowedImageWidths);\n      if (!params) {\n        res.writeHead(400);\n        res.end(\"Bad Request\");\n        return;\n      }\n      // Block SVG and other unsafe content types\n      const ext = path.extname(params.imageUrl).toLowerCase();\n      const ct = CONTENT_TYPES[ext] ?? \"application/octet-stream\";\n      if (!isSafeImageContentType(ct)) {\n        res.writeHead(400);\n        res.end(\"The requested resource is not an allowed image type\");\n        return;\n      }\n      const imageSecurityHeaders: Record<string, string> = {\n        \"Content-Security-Policy\": IMAGE_CONTENT_SECURITY_POLICY,\n        \"X-Content-Type-Options\": \"nosniff\",\n        \"Content-Disposition\": \"inline\",\n      };\n      if (tryServeStatic(req, res, clientDir, params.imageUrl, false, imageSecurityHeaders)) {\n        return;\n      }\n      res.writeHead(404);\n      res.end(\"Image not found\");\n      return;\n    }\n\n    try {\n      // ── 2. Strip basePath ─────────────────────────────────────────\n      if (basePath && pathname.startsWith(basePath)) {\n        const stripped = pathname.slice(basePath.length) || \"/\";\n        const qs = url.includes(\"?\") ? url.slice(url.indexOf(\"?\")) : \"\";\n        url = stripped + qs;\n        pathname = stripped;\n      }\n\n      // ── 3. Trailing slash normalization ───────────────────────────\n      if (pathname !== \"/\" && !pathname.startsWith(\"/api\")) {\n        const hasTrailing = pathname.endsWith(\"/\");\n        if (trailingSlash && !hasTrailing) {\n          const qs = url.includes(\"?\") ? url.slice(url.indexOf(\"?\")) : \"\";\n          res.writeHead(308, { Location: basePath + pathname + \"/\" + qs });\n          res.end();\n          return;\n        } else if (!trailingSlash && hasTrailing) {\n          const qs = url.includes(\"?\") ? url.slice(url.indexOf(\"?\")) : \"\";\n          res.writeHead(308, { Location: basePath + pathname.replace(/\\/+$/, \"\") + qs });\n          res.end();\n          return;\n        }\n      }\n\n      // Convert Node.js req to Web Request for the server entry\n      const rawProtocol = trustProxy\n        ? (req.headers[\"x-forwarded-proto\"] as string)?.split(\",\")[0]?.trim()\n        : undefined;\n      const protocol = rawProtocol === \"https\" || rawProtocol === \"http\" ? rawProtocol : \"http\";\n      const hostHeader = resolveHost(req, `${host}:${port}`);\n      const reqHeaders = Object.entries(req.headers).reduce((h, [k, v]) => {\n        if (v) h.set(k, Array.isArray(v) ? v.join(\", \") : v);\n        return h;\n      }, new Headers());\n      const method = req.method ?? \"GET\";\n      const hasBody = method !== \"GET\" && method !== \"HEAD\";\n      const webRequest = new Request(`${protocol}://${hostHeader}${url}`, {\n        method,\n        headers: reqHeaders,\n        body: hasBody ? readNodeStream(req) : undefined,\n        // @ts-expect-error — duplex needed for streaming request bodies\n        duplex: hasBody ? \"half\" : undefined,\n      });\n\n      // Build request context for has/missing condition matching\n      const reqCtx: RequestContext = requestContextFromRequest(webRequest);\n\n      // ── 4. Run middleware ─────────────────────────────────────────\n      let resolvedUrl = url;\n      const middlewareHeaders: Record<string, string> = {};\n      let middlewareRewriteStatus: number | undefined;\n      if (typeof runMiddleware === \"function\") {\n        const result = await runMiddleware(webRequest);\n\n        if (!result.continue) {\n          if (result.redirectUrl) {\n            res.writeHead(result.redirectStatus ?? 307, {\n              Location: result.redirectUrl,\n            });\n            res.end();\n            return;\n          }\n          if (result.response) {\n            // Use arrayBuffer() to handle binary response bodies correctly\n            const body = Buffer.from(await result.response.arrayBuffer());\n            res.writeHead(result.response.status, Object.fromEntries(result.response.headers));\n            res.end(body);\n            return;\n          }\n        }\n\n        // Collect middleware response headers to merge into final response\n        if (result.responseHeaders) {\n          for (const [key, value] of result.responseHeaders) {\n            middlewareHeaders[key] = value;\n          }\n        }\n\n        // Apply middleware rewrite\n        if (result.rewriteUrl) {\n          resolvedUrl = result.rewriteUrl;\n        }\n\n        // Apply custom status code from middleware rewrite\n        // (e.g. NextResponse.rewrite(url, { status: 403 }))\n        middlewareRewriteStatus = result.rewriteStatus;\n      }\n\n      // Unpack x-middleware-request-* headers into the actual request so that\n      // renderPage / handleApiRoute see the middleware-modified headers.\n      // Strip ALL x-middleware-* headers from the response — this prefix is\n      // reserved for internal routing signals and must never reach clients.\n      // (Matches Next.js behavior where x-middleware-* headers are internal.)\n      const mwReqPrefix = \"x-middleware-request-\";\n      for (const key of Object.keys(middlewareHeaders)) {\n        if (key.startsWith(mwReqPrefix)) {\n          const realName = key.slice(mwReqPrefix.length);\n          webRequest.headers.set(realName, middlewareHeaders[key]);\n          delete middlewareHeaders[key];\n        } else if (key.startsWith(\"x-middleware-\")) {\n          delete middlewareHeaders[key];\n        }\n      }\n\n      let resolvedPathname = resolvedUrl.split(\"?\")[0];\n\n      // ── 5. Apply custom headers from next.config.js ───────────────\n      if (configHeaders.length) {\n        const matched = matchHeaders(resolvedPathname, configHeaders);\n        for (const h of matched) {\n          middlewareHeaders[h.key.toLowerCase()] = h.value;\n        }\n      }\n\n      // ── 6. Apply redirects from next.config.js ────────────────────\n      if (configRedirects.length) {\n        const redirect = matchRedirect(resolvedPathname, configRedirects, reqCtx);\n        if (redirect) {\n          // Guard against double-prefixing: only add basePath if destination\n          // doesn't already start with it.\n          // Sanitize the final destination to prevent protocol-relative URL open redirects.\n          const dest = sanitizeDestination(\n            basePath && !redirect.destination.startsWith(basePath)\n              ? basePath + redirect.destination\n              : redirect.destination,\n          );\n          res.writeHead(redirect.permanent ? 308 : 307, { Location: dest });\n          res.end();\n          return;\n        }\n      }\n\n      // ── 7. Apply beforeFiles rewrites from next.config.js ─────────\n      if (configRewrites.beforeFiles?.length) {\n        const rewritten = matchRewrite(resolvedPathname, configRewrites.beforeFiles, reqCtx);\n        if (rewritten) {\n          if (isExternalUrl(rewritten)) {\n            const proxyResponse = await proxyExternalRequest(webRequest, rewritten);\n            await sendWebResponse(proxyResponse, req, res, compress);\n            return;\n          }\n          resolvedUrl = rewritten;\n          resolvedPathname = rewritten.split(\"?\")[0];\n        }\n      }\n\n      // ── 8. API routes ─────────────────────────────────────────────\n      if (resolvedPathname.startsWith(\"/api/\") || resolvedPathname === \"/api\") {\n        let response: Response;\n        if (typeof handleApi === \"function\") {\n          response = await handleApi(webRequest, resolvedUrl);\n        } else {\n          response = new Response(\"404 - API route not found\", { status: 404 });\n        }\n\n        // Merge middleware + config headers into the response\n        const responseBody = Buffer.from(await response.arrayBuffer());\n        const ct = response.headers.get(\"content-type\") ?? \"text/html\";\n        const responseHeaders: Record<string, string> = { ...middlewareHeaders };\n        response.headers.forEach((v, k) => { responseHeaders[k] = v; });\n\n        sendCompressed(req, res, responseBody, ct, middlewareRewriteStatus ?? response.status, responseHeaders, compress);\n        return;\n      }\n\n      // ── 9. Apply afterFiles rewrites from next.config.js ──────────\n      if (configRewrites.afterFiles?.length) {\n        const rewritten = matchRewrite(resolvedPathname, configRewrites.afterFiles, reqCtx);\n        if (rewritten) {\n          if (isExternalUrl(rewritten)) {\n            const proxyResponse = await proxyExternalRequest(webRequest, rewritten);\n            await sendWebResponse(proxyResponse, req, res, compress);\n            return;\n          }\n          resolvedUrl = rewritten;\n          resolvedPathname = rewritten.split(\"?\")[0];\n        }\n      }\n\n      // ── 10. SSR page rendering ────────────────────────────────────\n      let response: Response | undefined;\n      if (typeof renderPage === \"function\") {\n        response = await renderPage(webRequest, resolvedUrl, ssrManifest);\n\n        // ── 11. Fallback rewrites (if SSR returned 404) ─────────────\n        if (response && response.status === 404 && configRewrites.fallback?.length) {\n          const fallbackRewrite = matchRewrite(resolvedPathname, configRewrites.fallback, reqCtx);\n          if (fallbackRewrite) {\n            if (isExternalUrl(fallbackRewrite)) {\n              const proxyResponse = await proxyExternalRequest(webRequest, fallbackRewrite);\n              await sendWebResponse(proxyResponse, req, res, compress);\n              return;\n            }\n            response = await renderPage(webRequest, fallbackRewrite, ssrManifest);\n          }\n        }\n      }\n\n      if (!response) {\n        res.writeHead(404);\n        res.end(\"404 - Not found\");\n        return;\n      }\n\n      // Merge middleware + config headers into the response\n      const responseBody = Buffer.from(await response.arrayBuffer());\n      const ct = response.headers.get(\"content-type\") ?? \"text/html\";\n      const responseHeaders: Record<string, string> = { ...middlewareHeaders };\n      response.headers.forEach((v, k) => { responseHeaders[k] = v; });\n\n      sendCompressed(req, res, responseBody, ct, middlewareRewriteStatus ?? response.status, responseHeaders, compress);\n    } catch (e) {\n      console.error(\"[vinext] Server error:\", e);\n      res.writeHead(500);\n      res.end(\"Internal Server Error\");\n    }\n  });\n\n  await new Promise<void>((resolve) => {\n    server.listen(port, host, () => {\n      const addr = server.address();\n      const actualPort = typeof addr === \"object\" && addr ? addr.port : port;\n      console.log(`[vinext] Production server running at http://${host}:${actualPort}`);\n      resolve();\n    });\n  });\n\n  return server;\n}\n\n// Export helpers for testing\nexport { sendCompressed, negotiateEncoding, COMPRESSIBLE_TYPES, COMPRESS_THRESHOLD, resolveHost, trustedHosts, trustProxy, nodeToWebRequest };\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vinext",
-  "version": "0.0.12",
+  "version": "0.0.13",
   "description": "Run Next.js apps on Vite. Drop-in replacement for the next CLI.",
   "license": "MIT",
   "repository": {