vinext 0.0.52 → 0.0.54

package/dist/server/app-segment-config.js

@@ -1,3 +1,4 @@
+import { isEdgeApiRuntime } from "./edge-api-runtime.js";
 //#region src/server/app-segment-config.ts
 const DYNAMIC_VALUES = new Set([
 	"auto",
@@ -72,6 +73,7 @@ function resolveAppPageSegmentConfig(options) {
 			else config.fetchCache = fetchCache;
 		}
 		config.revalidateSeconds = resolveRevalidateSeconds(config.revalidateSeconds, segment.revalidate);
+		if (typeof segment.runtime === "string") config.runtime = segment.runtime;
 	}
 	if (config.dynamicConfig === "force-dynamic") config.revalidateSeconds = 0;
 	if (config.fetchCache === void 0) {
@@ -84,7 +86,10 @@ function resolveAppPageSegmentConfig(options) {
 function resolveAppPageFetchCacheMode(options) {
 	return resolveAppPageSegmentConfig(options).fetchCache ?? null;
 }
+function isEdgeRuntime(runtime) {
+	return isEdgeApiRuntime(runtime);
+}
 //#endregion
-export { resolveAppPageFetchCacheMode, resolveAppPageSegmentConfig };
+export { isEdgeRuntime, resolveAppPageFetchCacheMode, resolveAppPageSegmentConfig };
 
 //# sourceMappingURL=app-segment-config.js.map

package/dist/server/app-segment-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-segment-config.js","names":[],"sources":["../../src/server/app-segment-config.ts"],"sourcesContent":["import type { FetchCacheMode } from \"vinext/shims/fetch-cache\";\n\ntype AppRouteSegmentDynamic = \"auto\" | \"error\" | \"force-dynamic\" | \"force-static\";\n\ntype AppRouteSegmentConfigModule = {\n  dynamic?: unknown;\n  dynamicParams?: unknown;\n  fetchCache?: unknown;\n  revalidate?: unknown;\n};\n\ntype EffectiveAppPageSegmentConfig = {\n  dynamicConfig?: AppRouteSegmentDynamic;\n  dynamicParamsConfig?: boolean;\n  fetchCache?: FetchCacheMode;\n  revalidateSeconds: number | null;\n};\n\ntype ResolveAppPageSegmentConfigOptions = {\n  layouts?: readonly (AppRouteSegmentConfigModule | null | undefined)[];\n  page?: AppRouteSegmentConfigModule | null;\n};\n\nconst DYNAMIC_VALUES = new Set<unknown>([\"auto\", \"error\", \"force-dynamic\", \"force-static\"]);\nconst FETCH_CACHE_VALUES = new Set<unknown>([\n  \"auto\",\n  \"default-cache\",\n  \"default-no-store\",\n  \"force-cache\",\n  \"force-no-store\",\n  \"only-cache\",\n  \"only-no-store\",\n]);\n\nfunction isRouteSegmentDynamic(value: unknown): value is AppRouteSegmentDynamic {\n  return DYNAMIC_VALUES.has(value);\n}\n\nfunction isRouteSegmentFetchCache(value: unknown): value is FetchCacheMode {\n  return FETCH_CACHE_VALUES.has(value);\n}\n\nfunction resolveRevalidateSeconds(current: number | null, value: unknown): number | null {\n  // revalidate = false means \"cache indefinitely\" in Next.js segment config.\n  // Represent it as Infinity so downstream code can distinguish \"never\n  // revalidate\" (Infinity) from \"no config / unset\" (null).\n  if (value === false) {\n    if (current === null) return Infinity;\n    // Shortest-wins: any finite interval is shorter than Infinity.\n    return current === Infinity ? Infinity : current;\n  }\n\n  if (typeof value !== \"number\") {\n    return current;\n  }\n\n  if (current === null) {\n    return value;\n  }\n\n  return value < current ? value : current;\n}\n\nfunction isCacheFetchCacheMode(value: FetchCacheMode): boolean {\n  return value === \"default-cache\" || value === \"force-cache\" || value === \"only-cache\";\n}\n\nfunction describeFetchCacheConflict(value: FetchCacheMode): string {\n  return `Route segment config has incompatible fetchCache values including \"${value}\".`;\n}\n\n/**\n * Resolve the route segment config that applies to an App page route.\n *\n * Next.js collects config from every segment in the loader tree and reduces it\n * into the effective route config. The generated vinext entry already knows\n * the concrete layout/page modules for a route, so it should only describe\n * those modules and delegate the behavior to this helper.\n */\nexport function resolveAppPageSegmentConfig(\n  options: ResolveAppPageSegmentConfigOptions,\n): EffectiveAppPageSegmentConfig {\n  const segments = [...(options.layouts ?? []), options.page];\n  // Reduction strategies differ by field:\n  // - dynamic: child segments override parents.\n  // - dynamicParams: false is sticky across the route tree.\n  // - fetchCache: force/only modes take route-level precedence and reject conflicts.\n  // - revalidate: the shortest numeric interval wins.\n  const config: EffectiveAppPageSegmentConfig = {\n    revalidateSeconds: null,\n  };\n  let hasForceCache = false;\n  let hasForceNoStore = false;\n  let hasOnlyCache = false;\n  let hasOnlyNoStore = false;\n  let hasParentDefaultNoStore = false;\n\n  for (const segment of segments) {\n    if (!segment) continue;\n\n    if (isRouteSegmentDynamic(segment.dynamic)) {\n      config.dynamicConfig = segment.dynamic;\n    }\n\n    if (segment.dynamicParams === false) {\n      config.dynamicParamsConfig = false;\n    } else if (segment.dynamicParams === true && config.dynamicParamsConfig !== false) {\n      config.dynamicParamsConfig = true;\n    }\n\n    if (isRouteSegmentFetchCache(segment.fetchCache)) {\n      const fetchCache = segment.fetchCache;\n\n      if (hasParentDefaultNoStore && (fetchCache === \"auto\" || isCacheFetchCacheMode(fetchCache))) {\n        throw new Error(describeFetchCacheConflict(fetchCache));\n      }\n\n      if (fetchCache === \"force-cache\") hasForceCache = true;\n      if (fetchCache === \"force-no-store\") hasForceNoStore = true;\n      if (fetchCache === \"only-cache\") hasOnlyCache = true;\n      if (fetchCache === \"only-no-store\") hasOnlyNoStore = true;\n\n      const hasCacheEnforcer = hasForceCache || hasOnlyCache;\n      const hasNoStoreEnforcer = hasForceNoStore || hasOnlyNoStore;\n      if (hasCacheEnforcer && hasNoStoreEnforcer) {\n        throw new Error(describeFetchCacheConflict(fetchCache));\n      }\n\n      if (fetchCache === \"default-no-store\") {\n        hasParentDefaultNoStore = true;\n      }\n\n      if (hasForceCache) {\n        config.fetchCache = \"force-cache\";\n      } else if (hasForceNoStore) {\n        config.fetchCache = \"force-no-store\";\n      } else if (hasOnlyCache) {\n        config.fetchCache = \"only-cache\";\n      } else if (hasOnlyNoStore) {\n        config.fetchCache = \"only-no-store\";\n      } else {\n        config.fetchCache = fetchCache;\n      }\n    }\n\n    config.revalidateSeconds = resolveRevalidateSeconds(\n      config.revalidateSeconds,\n      segment.revalidate,\n    );\n  }\n\n  if (config.dynamicConfig === \"force-dynamic\") {\n    config.revalidateSeconds = 0;\n  }\n\n  // Top-level dynamic modes supply fetchCache defaults unless a segment does.\n  if (config.fetchCache === undefined) {\n    if (config.dynamicConfig === \"force-dynamic\") {\n      config.fetchCache = \"force-no-store\";\n    } else if (config.dynamicConfig === \"error\") {\n      config.fetchCache = \"only-cache\";\n    }\n  }\n\n  // Static-only dynamic modes change the default, but explicit dynamicParams wins.\n  if (\n    config.dynamicParamsConfig === undefined &&\n    (config.dynamicConfig === \"error\" || config.dynamicConfig === \"force-static\")\n  ) {\n    config.dynamicParamsConfig = false;\n  }\n\n  return config;\n}\n\nexport function resolveAppPageFetchCacheMode(\n  options: ResolveAppPageSegmentConfigOptions,\n): FetchCacheMode | null {\n  return resolveAppPageSegmentConfig(options).fetchCache ?? null;\n}\n"],"mappings":";AAuBA,MAAM,iBAAiB,IAAI,IAAa;CAAC;CAAQ;CAAS;CAAiB;CAAe,CAAC;AAC3F,MAAM,qBAAqB,IAAI,IAAa;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,sBAAsB,OAAiD;CAC9E,OAAO,eAAe,IAAI,MAAM;;AAGlC,SAAS,yBAAyB,OAAyC;CACzE,OAAO,mBAAmB,IAAI,MAAM;;AAGtC,SAAS,yBAAyB,SAAwB,OAA+B;CAIvF,IAAI,UAAU,OAAO;EACnB,IAAI,YAAY,MAAM,OAAO;EAE7B,OAAO,YAAY,WAAW,WAAW;;CAG3C,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,IAAI,YAAY,MACd,OAAO;CAGT,OAAO,QAAQ,UAAU,QAAQ;;AAGnC,SAAS,sBAAsB,OAAgC;CAC7D,OAAO,UAAU,mBAAmB,UAAU,iBAAiB,UAAU;;AAG3E,SAAS,2BAA2B,OAA+B;CACjE,OAAO,sEAAsE,MAAM;;;;;;;;;;AAWrF,SAAgB,4BACd,SAC+B;CAC/B,MAAM,WAAW,CAAC,GAAI,QAAQ,WAAW,EAAE,EAAG,QAAQ,KAAK;CAM3D,MAAM,SAAwC,EAC5C,mBAAmB,MACpB;CACD,IAAI,gBAAgB;CACpB,IAAI,kBAAkB;CACtB,IAAI,eAAe;CACnB,IAAI,iBAAiB;CACrB,IAAI,0BAA0B;CAE9B,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,CAAC,SAAS;EAEd,IAAI,sBAAsB,QAAQ,QAAQ,EACxC,OAAO,gBAAgB,QAAQ;EAGjC,IAAI,QAAQ,kBAAkB,OAC5B,OAAO,sBAAsB;OACxB,IAAI,QAAQ,kBAAkB,QAAQ,OAAO,wBAAwB,OAC1E,OAAO,sBAAsB;EAG/B,IAAI,yBAAyB,QAAQ,WAAW,EAAE;GAChD,MAAM,aAAa,QAAQ;GAE3B,IAAI,4BAA4B,eAAe,UAAU,sBAAsB,WAAW,GACxF,MAAM,IAAI,MAAM,2BAA2B,WAAW,CAAC;GAGzD,IAAI,eAAe,eAAe,gBAAgB;GAClD,IAAI,eAAe,kBAAkB,kBAAkB;GACvD,IAAI,eAAe,cAAc,eAAe;GAChD,IAAI,eAAe,iBAAiB,iBAAiB;GAIrD,KAFyB,iBAAiB,kBACf,mBAAmB,iBAE5C,MAAM,IAAI,MAAM,2BAA2B,WAAW,CAAC;GAGzD,IAAI,eAAe,oBACjB,0BAA0B;GAG5B,IAAI,eACF,OAAO,aAAa;QACf,IAAI,iBACT,OAAO,aAAa;QACf,IAAI,cACT,OAAO,aAAa;QACf,IAAI,gBACT,OAAO,aAAa;QAEpB,OAAO,aAAa;;EAIxB,OAAO,oBAAoB,yBACzB,OAAO,mBACP,QAAQ,WACT;;CAGH,IAAI,OAAO,kBAAkB,iBAC3B,OAAO,oBAAoB;CAI7B,IAAI,OAAO,eAAe,KAAA;MACpB,OAAO,kBAAkB,iBAC3B,OAAO,aAAa;OACf,IAAI,OAAO,kBAAkB,SAClC,OAAO,aAAa;;CAKxB,IACE,OAAO,wBAAwB,KAAA,MAC9B,OAAO,kBAAkB,WAAW,OAAO,kBAAkB,iBAE9D,OAAO,sBAAsB;CAG/B,OAAO;;AAGT,SAAgB,6BACd,SACuB;CACvB,OAAO,4BAA4B,QAAQ,CAAC,cAAc"}
+{"version":3,"file":"app-segment-config.js","names":[],"sources":["../../src/server/app-segment-config.ts"],"sourcesContent":["import type { FetchCacheMode } from \"vinext/shims/fetch-cache\";\nimport { isEdgeApiRuntime } from \"./edge-api-runtime.js\";\n\ntype AppRouteSegmentDynamic = \"auto\" | \"error\" | \"force-dynamic\" | \"force-static\";\n\ntype AppRouteSegmentConfigModule = {\n  dynamic?: unknown;\n  dynamicParams?: unknown;\n  fetchCache?: unknown;\n  revalidate?: unknown;\n  runtime?: unknown;\n};\n\ntype EffectiveAppPageSegmentConfig = {\n  dynamicConfig?: AppRouteSegmentDynamic;\n  dynamicParamsConfig?: boolean;\n  fetchCache?: FetchCacheMode;\n  revalidateSeconds: number | null;\n  runtime?: string;\n};\n\ntype ResolveAppPageSegmentConfigOptions = {\n  layouts?: readonly (AppRouteSegmentConfigModule | null | undefined)[];\n  page?: AppRouteSegmentConfigModule | null;\n};\n\nconst DYNAMIC_VALUES = new Set<unknown>([\"auto\", \"error\", \"force-dynamic\", \"force-static\"]);\nconst FETCH_CACHE_VALUES = new Set<unknown>([\n  \"auto\",\n  \"default-cache\",\n  \"default-no-store\",\n  \"force-cache\",\n  \"force-no-store\",\n  \"only-cache\",\n  \"only-no-store\",\n]);\n\nfunction isRouteSegmentDynamic(value: unknown): value is AppRouteSegmentDynamic {\n  return DYNAMIC_VALUES.has(value);\n}\n\nfunction isRouteSegmentFetchCache(value: unknown): value is FetchCacheMode {\n  return FETCH_CACHE_VALUES.has(value);\n}\n\nfunction resolveRevalidateSeconds(current: number | null, value: unknown): number | null {\n  // revalidate = false means \"cache indefinitely\" in Next.js segment config.\n  // Represent it as Infinity so downstream code can distinguish \"never\n  // revalidate\" (Infinity) from \"no config / unset\" (null).\n  if (value === false) {\n    if (current === null) return Infinity;\n    // Shortest-wins: any finite interval is shorter than Infinity.\n    return current === Infinity ? Infinity : current;\n  }\n\n  if (typeof value !== \"number\") {\n    return current;\n  }\n\n  if (current === null) {\n    return value;\n  }\n\n  return value < current ? value : current;\n}\n\nfunction isCacheFetchCacheMode(value: FetchCacheMode): boolean {\n  return value === \"default-cache\" || value === \"force-cache\" || value === \"only-cache\";\n}\n\nfunction describeFetchCacheConflict(value: FetchCacheMode): string {\n  return `Route segment config has incompatible fetchCache values including \"${value}\".`;\n}\n\n/**\n * Resolve the route segment config that applies to an App page route.\n *\n * Next.js collects config from every segment in the loader tree and reduces it\n * into the effective route config. The generated vinext entry already knows\n * the concrete layout/page modules for a route, so it should only describe\n * those modules and delegate the behavior to this helper.\n */\nexport function resolveAppPageSegmentConfig(\n  options: ResolveAppPageSegmentConfigOptions,\n): EffectiveAppPageSegmentConfig {\n  const segments = [...(options.layouts ?? []), options.page];\n  // Reduction strategies differ by field:\n  // - dynamic: child segments override parents.\n  // - dynamicParams: false is sticky across the route tree.\n  // - fetchCache: force/only modes take route-level precedence and reject conflicts.\n  // - revalidate: the shortest numeric interval wins.\n  const config: EffectiveAppPageSegmentConfig = {\n    revalidateSeconds: null,\n  };\n  let hasForceCache = false;\n  let hasForceNoStore = false;\n  let hasOnlyCache = false;\n  let hasOnlyNoStore = false;\n  let hasParentDefaultNoStore = false;\n\n  for (const segment of segments) {\n    if (!segment) continue;\n\n    if (isRouteSegmentDynamic(segment.dynamic)) {\n      config.dynamicConfig = segment.dynamic;\n    }\n\n    if (segment.dynamicParams === false) {\n      config.dynamicParamsConfig = false;\n    } else if (segment.dynamicParams === true && config.dynamicParamsConfig !== false) {\n      config.dynamicParamsConfig = true;\n    }\n\n    if (isRouteSegmentFetchCache(segment.fetchCache)) {\n      const fetchCache = segment.fetchCache;\n\n      if (hasParentDefaultNoStore && (fetchCache === \"auto\" || isCacheFetchCacheMode(fetchCache))) {\n        throw new Error(describeFetchCacheConflict(fetchCache));\n      }\n\n      if (fetchCache === \"force-cache\") hasForceCache = true;\n      if (fetchCache === \"force-no-store\") hasForceNoStore = true;\n      if (fetchCache === \"only-cache\") hasOnlyCache = true;\n      if (fetchCache === \"only-no-store\") hasOnlyNoStore = true;\n\n      const hasCacheEnforcer = hasForceCache || hasOnlyCache;\n      const hasNoStoreEnforcer = hasForceNoStore || hasOnlyNoStore;\n      if (hasCacheEnforcer && hasNoStoreEnforcer) {\n        throw new Error(describeFetchCacheConflict(fetchCache));\n      }\n\n      if (fetchCache === \"default-no-store\") {\n        hasParentDefaultNoStore = true;\n      }\n\n      if (hasForceCache) {\n        config.fetchCache = \"force-cache\";\n      } else if (hasForceNoStore) {\n        config.fetchCache = \"force-no-store\";\n      } else if (hasOnlyCache) {\n        config.fetchCache = \"only-cache\";\n      } else if (hasOnlyNoStore) {\n        config.fetchCache = \"only-no-store\";\n      } else {\n        config.fetchCache = fetchCache;\n      }\n    }\n\n    config.revalidateSeconds = resolveRevalidateSeconds(\n      config.revalidateSeconds,\n      segment.revalidate,\n    );\n\n    if (typeof segment.runtime === \"string\") {\n      config.runtime = segment.runtime;\n    }\n  }\n\n  if (config.dynamicConfig === \"force-dynamic\") {\n    config.revalidateSeconds = 0;\n  }\n\n  // Top-level dynamic modes supply fetchCache defaults unless a segment does.\n  if (config.fetchCache === undefined) {\n    if (config.dynamicConfig === \"force-dynamic\") {\n      config.fetchCache = \"force-no-store\";\n    } else if (config.dynamicConfig === \"error\") {\n      config.fetchCache = \"only-cache\";\n    }\n  }\n\n  // Static-only dynamic modes change the default, but explicit dynamicParams wins.\n  if (\n    config.dynamicParamsConfig === undefined &&\n    (config.dynamicConfig === \"error\" || config.dynamicConfig === \"force-static\")\n  ) {\n    config.dynamicParamsConfig = false;\n  }\n\n  return config;\n}\n\nexport function resolveAppPageFetchCacheMode(\n  options: ResolveAppPageSegmentConfigOptions,\n): FetchCacheMode | null {\n  return resolveAppPageSegmentConfig(options).fetchCache ?? null;\n}\n\nexport function isEdgeRuntime(runtime: string | undefined): boolean {\n  return isEdgeApiRuntime(runtime);\n}\n"],"mappings":";;AA0BA,MAAM,iBAAiB,IAAI,IAAa;CAAC;CAAQ;CAAS;CAAiB;CAAe,CAAC;AAC3F,MAAM,qBAAqB,IAAI,IAAa;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,sBAAsB,OAAiD;CAC9E,OAAO,eAAe,IAAI,MAAM;;AAGlC,SAAS,yBAAyB,OAAyC;CACzE,OAAO,mBAAmB,IAAI,MAAM;;AAGtC,SAAS,yBAAyB,SAAwB,OAA+B;CAIvF,IAAI,UAAU,OAAO;EACnB,IAAI,YAAY,MAAM,OAAO;EAE7B,OAAO,YAAY,WAAW,WAAW;;CAG3C,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,IAAI,YAAY,MACd,OAAO;CAGT,OAAO,QAAQ,UAAU,QAAQ;;AAGnC,SAAS,sBAAsB,OAAgC;CAC7D,OAAO,UAAU,mBAAmB,UAAU,iBAAiB,UAAU;;AAG3E,SAAS,2BAA2B,OAA+B;CACjE,OAAO,sEAAsE,MAAM;;;;;;;;;;AAWrF,SAAgB,4BACd,SAC+B;CAC/B,MAAM,WAAW,CAAC,GAAI,QAAQ,WAAW,EAAE,EAAG,QAAQ,KAAK;CAM3D,MAAM,SAAwC,EAC5C,mBAAmB,MACpB;CACD,IAAI,gBAAgB;CACpB,IAAI,kBAAkB;CACtB,IAAI,eAAe;CACnB,IAAI,iBAAiB;CACrB,IAAI,0BAA0B;CAE9B,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,CAAC,SAAS;EAEd,IAAI,sBAAsB,QAAQ,QAAQ,EACxC,OAAO,gBAAgB,QAAQ;EAGjC,IAAI,QAAQ,kBAAkB,OAC5B,OAAO,sBAAsB;OACxB,IAAI,QAAQ,kBAAkB,QAAQ,OAAO,wBAAwB,OAC1E,OAAO,sBAAsB;EAG/B,IAAI,yBAAyB,QAAQ,WAAW,EAAE;GAChD,MAAM,aAAa,QAAQ;GAE3B,IAAI,4BAA4B,eAAe,UAAU,sBAAsB,WAAW,GACxF,MAAM,IAAI,MAAM,2BAA2B,WAAW,CAAC;GAGzD,IAAI,eAAe,eAAe,gBAAgB;GAClD,IAAI,eAAe,kBAAkB,kBAAkB;GACvD,IAAI,eAAe,cAAc,eAAe;GAChD,IAAI,eAAe,iBAAiB,iBAAiB;GAIrD,KAFyB,iBAAiB,kBACf,mBAAmB,iBAE5C,MAAM,IAAI,MAAM,2BAA2B,WAAW,CAAC;GAGzD,IAAI,eAAe,oBACjB,0BAA0B;GAG5B,IAAI,eACF,OAAO,aAAa;QACf,IAAI,iBACT,OAAO,aAAa;QACf,IAAI,cACT,OAAO,aAAa;QACf,IAAI,gBACT,OAAO,aAAa;QAEpB,OAAO,aAAa;;EAIxB,OAAO,oBAAoB,yBACzB,OAAO,mBACP,QAAQ,WACT;EAED,IAAI,OAAO,QAAQ,YAAY,UAC7B,OAAO,UAAU,QAAQ;;CAI7B,IAAI,OAAO,kBAAkB,iBAC3B,OAAO,oBAAoB;CAI7B,IAAI,OAAO,eAAe,KAAA;MACpB,OAAO,kBAAkB,iBAC3B,OAAO,aAAa;OACf,IAAI,OAAO,kBAAkB,SAClC,OAAO,aAAa;;CAKxB,IACE,OAAO,wBAAwB,KAAA,MAC9B,OAAO,kBAAkB,WAAW,OAAO,kBAAkB,iBAE9D,OAAO,sBAAsB;CAG/B,OAAO;;AAGT,SAAgB,6BACd,SACuB;CACvB,OAAO,4BAA4B,QAAQ,CAAC,cAAc;;AAG5D,SAAgB,cAAc,SAAsC;CAClE,OAAO,iBAAiB,QAAQ"}

package/dist/server/app-server-action-execution.d.ts

@@ -1,3 +1,4 @@
+import { ActionRevalidationKind } from "../shims/cache.js";
 import { AppRscRenderMode } from "./app-rsc-render-mode.js";
 import { FetchCacheMode } from "../shims/fetch-cache.js";
 import { HeadersAccessPhase } from "../shims/headers.js";
@@ -28,15 +29,32 @@ type AppServerActionReturnValue = {
 type AppServerActionRoute = {
   pattern: string;
 };
-type ProgressiveServerActionResult = {
+/**
+ * Side-effect headers captured during a progressive (no-JS) server action's
+ * non-redirect execution. The caller (app-rsc-handler) must apply these to the
+ * page render response so that `cookies().set(...)` and revalidation kinds
+ * propagate to the browser. Without this, no-JS form submissions silently
+ * lose cookie/header mutations — see issue #1483.
+ *
+ * Next.js' equivalent path mutates `res.setHeader('set-cookie', ...)` during
+ * action execution (action-handler.ts → app-render.tsx), then `sendResponse`
+ * merges those headers with the rendered Response. vinext works with Response
+ * objects directly so the cookies must ride out via the result instead.
+ */
+type ProgressiveServerActionSideEffects = {
+  /** `Set-Cookie` headers from `cookies().set(...)` / `cookies().delete(...)`. */pendingCookies: string[]; /** `Set-Cookie` header from `draftMode().enable()/disable()` (if any). */
+  draftCookie: string | null | undefined; /** Resolved revalidation kind to emit via `x-action-revalidated`. */
+  revalidationKind: ActionRevalidationKind;
+};
+type ProgressiveServerActionResult = ({
   formState: ReactFormState | null;
   kind: "form-state";
-} | {
+} & ProgressiveServerActionSideEffects) | ({
   actionError: unknown;
   actionFailed: true;
   formState: null;
   kind: "form-state";
-};
+} & ProgressiveServerActionSideEffects);
 type AppServerActionMatch<TRoute extends AppServerActionRoute> = {
   params: AppPageParams;
   route: TRoute;
@@ -111,6 +129,7 @@ type HandleServerActionRscRequestOptions<TElement, TRoute extends AppServerActio
   getDraftModeCookieHeader: () => string | null | undefined;
   getRouteParamNames: (route: TRoute) => readonly string[];
   getSourceRoute: (sourceRouteIndex: number) => TRoute | undefined;
+  isEdgeRuntime?: boolean;
   isRscRequest: boolean;
   loadServerAction: (actionId: string) => Promise<unknown>;
   matchRoute: (pathname: string) => AppServerActionMatch<TRoute> | null;

package/dist/server/app-server-action-execution.js

@@ -7,11 +7,13 @@ import { getAndClearActionRevalidationKind } from "../shims/cache.js";
 import { APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI } from "./app-rsc-render-mode.js";
 import { setCurrentFetchCacheMode } from "../shims/fetch-cache.js";
 import { VINEXT_RSC_CONTENT_TYPE, VINEXT_RSC_VARY_HEADER, applyRscCompatibilityIdHeader } from "./app-rsc-cache-busting.js";
+import { readStreamAsTextWithLimit } from "../utils/text-stream.js";
 import { createServerActionNotFoundResponse, getServerActionNotFoundMessage, isServerActionNotFoundError } from "./server-action-not-found.js";
 import { mergeMiddlewareResponseHeaders } from "./middleware-response-headers.js";
+import { applyEdgeRuntimeHeader } from "./app-page-response.js";
 import { getNextErrorDigest, parseNextHttpErrorDigest, parseNextRedirectDigest } from "./next-error-digest.js";
-import { readStreamAsTextWithLimit } from "../utils/text-stream.js";
 import { resolveAppPageActionRerenderTarget } from "./app-page-request.js";
+import { getSetCookieName } from "./cookie-utils.js";
 //#region src/server/app-server-action-execution.ts
 /**
 * Matches Next.js' server action argument cap to prevent stack overflow in
@@ -32,6 +34,32 @@ function resolveActionRevalidationKind(hasModifiedCookies) {
 function isRequestBodyTooLarge(error) {
 	return error instanceof Error && error.message === "Request body too large";
 }
+/**
+* Collapse repeated `cookies().set(name, ...)` / `cookies().delete(name)`
+* calls down to the last value per name, matching Next.js'
+* `MutableRequestCookiesAdapter` semantics. Next.js stores response cookies in
+* a `ResponseCookies` Map keyed by name — multiple sets for the same cookie
+* collapse to the final value, and emit a single Set-Cookie header.
+*
+* Insertion order is preserved by first occurrence (Map iteration order),
+* which mirrors how `ResponseCookies` iterates its underlying Map. See
+* packages/next/src/server/web/spec-extension/adapters/request-cookies.ts.
+* Issue: https://github.com/cloudflare/vinext/issues/1481
+*/
+function dedupePendingCookies(cookies) {
+	if (cookies.length <= 1) return cookies.slice();
+	const byName = /* @__PURE__ */ new Map();
+	const unkeyed = [];
+	for (const cookie of cookies) {
+		const name = getSetCookieName(cookie);
+		if (name === null) {
+			unkeyed.push(cookie);
+			continue;
+		}
+		byName.set(name, cookie);
+	}
+	return [...unkeyed, ...byName.values()];
+}
 function isAppServerActionFunction(action) {
 	return typeof action === "function";
 }
@@ -209,19 +237,27 @@ async function handleProgressiveServerActionRequest(options) {
 			options.setHeadersAccessPhase(previousHeadersPhase);
 		}
 		if (!actionRedirect) {
-			getAndClearActionRevalidationKind();
+			const actionPendingCookies = options.getAndClearPendingCookies();
+			const actionDraftCookie = options.getDraftModeCookieHeader();
+			const revalidationKind = resolveActionRevalidationKind(actionPendingCookies.length > 0 || Boolean(actionDraftCookie));
 			if (actionFailed) return {
 				kind: "form-state",
 				formState: null,
 				actionError,
-				actionFailed
+				actionFailed,
+				pendingCookies: actionPendingCookies,
+				draftCookie: actionDraftCookie,
+				revalidationKind
 			};
 			return {
 				kind: "form-state",
-				formState: await options.decodeFormState(actionResult, body) ?? null
+				formState: await options.decodeFormState(actionResult, body) ?? null,
+				pendingCookies: actionPendingCookies,
+				draftCookie: actionDraftCookie,
+				revalidationKind
 			};
 		}
-		const actionPendingCookies = options.getAndClearPendingCookies();
+		const actionPendingCookies = dedupePendingCookies(options.getAndClearPendingCookies());
 		const actionDraftCookie = options.getDraftModeCookieHeader();
 		const actionRevalidationKind = resolveActionRevalidationKind(actionPendingCookies.length > 0 || Boolean(actionDraftCookie));
 		options.clearRequestContext();
@@ -339,7 +375,7 @@ async function handleServerActionRscRequest(options) {
 			options.setHeadersAccessPhase(previousHeadersPhase);
 		}
 		if (actionRedirect) {
-			const actionPendingCookies = options.getAndClearPendingCookies();
+			const actionPendingCookies = dedupePendingCookies(options.getAndClearPendingCookies());
 			const actionDraftCookie = options.getDraftModeCookieHeader();
 			const actionRevalidationKind = resolveActionRevalidationKind(actionPendingCookies.length > 0 || Boolean(actionDraftCookie));
 			options.clearRequestContext();
@@ -347,6 +383,7 @@ async function handleServerActionRscRequest(options) {
 				"Content-Type": VINEXT_RSC_CONTENT_TYPE,
 				Vary: VINEXT_RSC_VARY_HEADER
 			});
+			applyEdgeRuntimeHeader(redirectHeaders, options.isEdgeRuntime);
 			mergeMiddlewareResponseHeaders(redirectHeaders, options.middlewareHeaders);
 			applyRscCompatibilityIdHeader(redirectHeaders);
 			redirectHeaders.set(ACTION_REDIRECT_HEADER, applyActionRedirectBasePath(actionRedirect.url, options.basePath ?? ""));
@@ -360,7 +397,7 @@ async function handleServerActionRscRequest(options) {
 				headers: redirectHeaders
 			});
 		}
-		const actionPendingCookies = options.getAndClearPendingCookies();
+		const actionPendingCookies = dedupePendingCookies(options.getAndClearPendingCookies());
 		const actionDraftCookie = options.getDraftModeCookieHeader();
 		const actionRevalidationKind = resolveActionRevalidationKind(actionPendingCookies.length > 0 || Boolean(actionDraftCookie));
 		if (actionRevalidationKind === ACTION_DID_NOT_REVALIDATE) {
@@ -374,6 +411,7 @@ async function handleServerActionRscRequest(options) {
 				"Content-Type": VINEXT_RSC_CONTENT_TYPE,
 				Vary: VINEXT_RSC_VARY_HEADER
 			});
+			applyEdgeRuntimeHeader(actionHeaders, options.isEdgeRuntime);
 			mergeMiddlewareResponseHeaders(actionHeaders, options.middlewareHeaders);
 			applyRscCompatibilityIdHeader(actionHeaders);
 			return new Response(rscStream, {
@@ -430,6 +468,7 @@ async function handleServerActionRscRequest(options) {
 			"Content-Type": VINEXT_RSC_CONTENT_TYPE,
 			Vary: VINEXT_RSC_VARY_HEADER
 		});
+		applyEdgeRuntimeHeader(actionHeaders, options.isEdgeRuntime);
 		mergeMiddlewareResponseHeaders(actionHeaders, options.middlewareHeaders);
 		applyRscCompatibilityIdHeader(actionHeaders);
 		setActionRevalidatedHeader(actionHeaders, actionRevalidationKind);

package/dist/server/app-server-action-execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-server-action-execution.js","names":[],"sources":["../../src/server/app-server-action-execution.ts"],"sourcesContent":["import { getAndClearActionRevalidationKind, type ActionRevalidationKind } from \"vinext/shims/cache\";\nimport type { HeadersAccessPhase } from \"vinext/shims/headers\";\nimport { type FetchCacheMode, setCurrentFetchCacheMode } from \"vinext/shims/fetch-cache\";\nimport type { ReactFormState } from \"react-dom/client\";\nimport { isExternalUrl } from \"../config/config-matchers.js\";\nimport { addBasePathToPathname, hasBasePath } from \"../utils/base-path.js\";\nimport {\n  ACTION_FORWARDED_HEADER,\n  ACTION_REDIRECT_HEADER,\n  ACTION_REDIRECT_STATUS_HEADER,\n  ACTION_REDIRECT_TYPE_HEADER,\n  ACTION_REVALIDATED_HEADER,\n} from \"./headers.js\";\nimport {\n  VINEXT_RSC_CONTENT_TYPE,\n  VINEXT_RSC_VARY_HEADER,\n  applyRscCompatibilityIdHeader,\n} from \"./app-rsc-cache-busting.js\";\nimport { resolveAppPageActionRerenderTarget } from \"./app-page-request.js\";\nimport { mergeMiddlewareResponseHeaders } from \"./middleware-response-headers.js\";\nimport {\n  APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI,\n  type AppRscRenderMode,\n} from \"./app-rsc-render-mode.js\";\nimport {\n  getNextErrorDigest,\n  parseNextHttpErrorDigest,\n  parseNextRedirectDigest,\n} from \"./next-error-digest.js\";\nimport { validateCsrfOrigin, validateServerActionPayload } from \"./request-pipeline.js\";\nimport { readStreamAsTextWithLimit } from \"../utils/text-stream.js\";\nimport {\n  createServerActionNotFoundResponse,\n  getServerActionNotFoundMessage,\n  isServerActionNotFoundError,\n} from \"./server-action-not-found.js\";\nimport { internalServerErrorResponse, payloadTooLargeResponse } from \"./http-error-responses.js\";\n\ntype AppPageParams = Record<string, string | string[]>;\n\ntype AppServerActionErrorReporter = (\n  error: Error,\n  request: { path: string; method: string; headers: Record<string, string> },\n  route: { routerKind: \"App Router\"; routePath: string; routeType: \"action\" },\n) => void;\n\ntype AppServerActionDecoder = (body: FormData) => Promise<unknown>;\ntype AppServerActionFormStateDecoder = (\n  actionResult: unknown,\n  body: FormData,\n) => Promise<ReactFormState | undefined>;\n\ntype ReadFormDataWithLimit = (request: Request, maxBytes: number) => Promise<FormData>;\n\ntype ReadBodyWithLimit = (request: Request, maxBytes: number) => Promise<string>;\n\ntype AppServerActionFunction = (...args: unknown[]) => unknown;\n\ntype AppServerActionReturnValue =\n  | {\n      data: unknown;\n      ok: true;\n    }\n  | {\n      data: unknown;\n      ok: false;\n    };\n\ntype AppServerActionRedirect = {\n  status: number;\n  type: string;\n  url: string;\n};\n\ntype AppServerActionRoute = {\n  pattern: string;\n};\n\ntype ProgressiveServerActionResult =\n  | {\n      formState: ReactFormState | null;\n      kind: \"form-state\";\n    }\n  | {\n      actionError: unknown;\n      actionFailed: true;\n      formState: null;\n      kind: \"form-state\";\n    };\n\ntype AppServerActionMatch<TRoute extends AppServerActionRoute> = {\n  params: AppPageParams;\n  route: TRoute;\n};\n\ntype AppServerActionIntercept<TPage = unknown> = {\n  matchedParams: AppPageParams;\n  page: TPage;\n  slotId?: string | null;\n  slotKey: string;\n  sourceRouteIndex: number;\n};\n\ntype BuildServerActionPageElementOptions<TRoute extends AppServerActionRoute, TInterceptOpts> = {\n  cleanPathname: string;\n  interceptOpts: TInterceptOpts | undefined;\n  isRscRequest: boolean;\n  mountedSlotsHeader: string | null;\n  params: AppPageParams;\n  request: Request;\n  route: TRoute;\n  searchParams: URLSearchParams;\n  renderMode: AppRscRenderMode;\n};\n\ntype AppServerActionRscModel<TElement> = {\n  /**\n   * Omitted when the action did not invalidate page data. This mirrors Next.js'\n   * empty Flight payload for non-revalidating fetch actions: the client resolves\n   * the action value without committing a visible router update.\n   */\n  root?: TElement;\n  returnValue: AppServerActionReturnValue;\n};\n\ntype RenderServerActionRscStreamOptions<TTemporaryReferences> = {\n  onError: (error: unknown) => unknown;\n  temporaryReferences: TTemporaryReferences;\n};\n\ntype DecodeServerActionReplyOptions<TTemporaryReferences> = {\n  temporaryReferences: TTemporaryReferences;\n};\n\nexport type HandleProgressiveServerActionRequestOptions = {\n  actionId: string | null;\n  allowedOrigins: string[];\n  /** Configured next.config `basePath`. Prefixed onto progressive Location targets. */\n  basePath?: string;\n  cleanPathname: string;\n  clearRequestContext: () => void;\n  contentType: string;\n  decodeAction: AppServerActionDecoder;\n  decodeFormState: AppServerActionFormStateDecoder;\n  getAndClearPendingCookies: () => string[];\n  getDraftModeCookieHeader: () => string | null | undefined;\n  maxActionBodySize: number;\n  middlewareHeaders: Headers | null;\n  readFormDataWithLimit: ReadFormDataWithLimit;\n  reportRequestError: AppServerActionErrorReporter;\n  request: Request;\n  setHeadersAccessPhase: (phase: HeadersAccessPhase) => HeadersAccessPhase;\n};\n\nexport type HandleServerActionRscRequestOptions<\n  TElement,\n  TRoute extends AppServerActionRoute,\n  TInterceptOpts,\n  TTemporaryReferences,\n  TPage = unknown,\n> = {\n  actionId: string | null;\n  allowedOrigins: string[];\n  /** Configured next.config `basePath`. Prefixed onto ACTION_REDIRECT_HEADER targets. */\n  basePath?: string;\n  buildPageElement: (\n    options: BuildServerActionPageElementOptions<TRoute, TInterceptOpts>,\n  ) => TElement;\n  cleanPathname: string;\n  clearRequestContext: () => void;\n  contentType: string;\n  createNotFoundElement: (routeId: string) => TElement;\n  createPayloadRouteId: (pathname: string, interceptionContext: string | null) => string;\n  createRscOnErrorHandler: (\n    request: Request,\n    pathname: string,\n    pattern: string,\n  ) => (error: unknown) => unknown;\n  createTemporaryReferenceSet: () => TTemporaryReferences;\n  decodeReply: (\n    body: string | FormData,\n    options: DecodeServerActionReplyOptions<TTemporaryReferences>,\n  ) => Promise<unknown[]> | unknown[];\n  findIntercept: (pathname: string) => AppServerActionIntercept<TPage> | null;\n  getAndClearPendingCookies: () => string[];\n  getDraftModeCookieHeader: () => string | null | undefined;\n  getRouteParamNames: (route: TRoute) => readonly string[];\n  getSourceRoute: (sourceRouteIndex: number) => TRoute | undefined;\n  isRscRequest: boolean;\n  loadServerAction: (actionId: string) => Promise<unknown>;\n  matchRoute: (pathname: string) => AppServerActionMatch<TRoute> | null;\n  maxActionBodySize: number;\n  middlewareHeaders: Headers | null;\n  middlewareStatus: number | null | undefined;\n  mountedSlotsHeader: string | null;\n  readBodyWithLimit: ReadBodyWithLimit;\n  readFormDataWithLimit: ReadFormDataWithLimit;\n  renderToReadableStream: (\n    model: AppServerActionRscModel<TElement>,\n    options: RenderServerActionRscStreamOptions<TTemporaryReferences>,\n  ) => BodyInit | null | Promise<BodyInit | null>;\n  reportRequestError: AppServerActionErrorReporter;\n  resolveRouteFetchCacheMode?: (route: TRoute) => FetchCacheMode | null;\n  request: Request;\n  sanitizeErrorForClient: (error: unknown) => unknown;\n  searchParams: URLSearchParams;\n  setHeadersAccessPhase: (phase: HeadersAccessPhase) => HeadersAccessPhase;\n  setNavigationContext: (context: {\n    params: AppPageParams;\n    pathname: string;\n    searchParams: URLSearchParams;\n  }) => void;\n  toInterceptOpts: (intercept: AppServerActionIntercept<TPage>) => TInterceptOpts;\n};\n\n/**\n * Matches Next.js' server action argument cap to prevent stack overflow in\n * Function.prototype.apply when decoding hostile action payloads.\n */\nconst SERVER_ACTION_ARGS_LIMIT = 1000;\nconst ACTION_DID_NOT_REVALIDATE = 0 satisfies ActionRevalidationKind;\nconst ACTION_DID_REVALIDATE_STATIC_AND_DYNAMIC = 1 satisfies ActionRevalidationKind;\n\nfunction setActionRevalidatedHeader(headers: Headers, kind: ActionRevalidationKind): void {\n  if (kind === ACTION_DID_NOT_REVALIDATE) return;\n  headers.set(ACTION_REVALIDATED_HEADER, JSON.stringify(kind));\n}\n\nfunction resolveActionRevalidationKind(hasModifiedCookies: boolean): ActionRevalidationKind {\n  const revalidationKind = getAndClearActionRevalidationKind();\n  // Cookie mutations are a hard override to STATIC_AND_DYNAMIC: any cookie\n  // change can invalidate downstream cached payloads regardless of what\n  // (if anything) the action explicitly revalidated, so we always emit the\n  // strongest kind. STATIC_AND_DYNAMIC is also the lowest numeric value, so\n  // this matches the max-precedence semantics in markActionRevalidation.\n  if (hasModifiedCookies) return ACTION_DID_REVALIDATE_STATIC_AND_DYNAMIC;\n  return revalidationKind;\n}\n\nfunction isRequestBodyTooLarge(error: unknown): boolean {\n  return error instanceof Error && error.message === \"Request body too large\";\n}\n\nfunction isAppServerActionFunction(action: unknown): action is AppServerActionFunction {\n  return typeof action === \"function\";\n}\n\nfunction normalizeError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\nfunction getServerActionFailureMessage(error: unknown): string {\n  return error instanceof Error && error.message ? error.message : String(error);\n}\n\nfunction validateServerActionArgs(args: readonly unknown[]): void {\n  if (args.length > SERVER_ACTION_ARGS_LIMIT) {\n    throw new Error(\n      `Server Action arguments list is too long (${args.length}). Maximum allowed is ${SERVER_ACTION_ARGS_LIMIT}.`,\n    );\n  }\n}\n\nexport async function readActionBodyWithLimit(request: Request, maxBytes: number): Promise<string> {\n  if (!request.body) return \"\";\n  return readStreamAsTextWithLimit(request.body, maxBytes, () => {\n    throw new Error(\"Request body too large\");\n  });\n}\n\nexport async function readActionFormDataWithLimit(\n  request: Request,\n  maxBytes: number,\n): Promise<FormData> {\n  if (!request.body) return new FormData();\n\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let totalSize = 0;\n\n  for (;;) {\n    const result = await reader.read();\n    if (result.done) break;\n\n    totalSize += result.value.byteLength;\n    if (totalSize > maxBytes) {\n      await reader.cancel();\n      throw new Error(\"Request body too large\");\n    }\n    chunks.push(result.value);\n  }\n\n  const combined = new Uint8Array(totalSize);\n  let offset = 0;\n  for (const chunk of chunks) {\n    combined.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  return new Response(combined, {\n    headers: { \"Content-Type\": request.headers.get(\"content-type\") || \"\" },\n  }).formData();\n}\n\nfunction getActionRedirect(error: unknown): AppServerActionRedirect | null {\n  const digest = getNextErrorDigest(error);\n  if (!digest) return null;\n\n  const redirect = parseNextRedirectDigest(digest);\n  if (!redirect) return null;\n\n  return {\n    status: redirect.status,\n    type: redirect.type ?? \"push\",\n    url: redirect.url,\n  };\n}\n\n/**\n * Prepend the configured next.config `basePath` to a server-action redirect\n * target before it goes on the wire.\n *\n * `redirect(\"/foo\")` called from a server action mounted at `/base/...` must\n * land the browser at `/base/foo`, mirroring how Next.js threads basePath\n * through `addPathPrefix(getURLFromRedirectError(err), basePath)` in\n * `app-render.tsx` for SSR redirects and in `action-handler.ts` for action\n * redirects.\n *\n * Idempotent and external-aware:\n *  - Empty basePath → returned unchanged.\n *  - External URLs (`http://`, `https://`, `data:`, protocol-relative `//`)\n *    are returned unchanged because the framework does not own those routes.\n *  - Targets that already start with the configured basePath are returned\n *    unchanged so this helper can be applied at any layer without risk of\n *    double-prefixing (`/base/base/foo`).\n *\n * Exported for tests. Used by both the progressive (no-JS form POST) and\n * RSC (`ACTION_REDIRECT_HEADER`) action redirect paths below.\n *\n * @see https://github.com/vercel/next.js/blob/canary/packages/next/src/server/app-render/action-handler.ts\n */\nexport function applyActionRedirectBasePath(url: string, basePath: string): string {\n  if (!basePath) return url;\n  if (isExternalUrl(url)) return url;\n  // Pathnames that already include basePath are returned as-is.\n  if (hasBasePath(url, basePath)) return url;\n  // Relative or hash/query-only targets cannot be prefixed safely without an\n  // origin; leave them to the caller's URL resolution.\n  if (!url.startsWith(\"/\")) return url;\n  // Split off optional query+hash so addBasePathToPathname only operates on\n  // the path. We must accept hash too because Next.js redirect targets may\n  // contain \"#anchor\".\n  const queryIndex = url.indexOf(\"?\");\n  const hashIndex = url.indexOf(\"#\");\n  const splitAt =\n    queryIndex === -1 ? hashIndex : hashIndex === -1 ? queryIndex : Math.min(queryIndex, hashIndex);\n  const pathname = splitAt === -1 ? url : url.slice(0, splitAt);\n  const suffix = splitAt === -1 ? \"\" : url.slice(splitAt);\n  return `${addBasePathToPathname(pathname, basePath)}${suffix}`;\n}\n\nfunction getActionHttpFallbackStatus(error: unknown): number | null {\n  const digest = getNextErrorDigest(error);\n  if (!digest) return null;\n\n  const httpError = parseNextHttpErrorDigest(digest);\n  if (!httpError || !Number.isInteger(httpError.status)) return null;\n\n  return httpError.status;\n}\n\nfunction createServerActionErrorResponse(\n  error: unknown,\n  options: {\n    cleanPathname: string;\n    clearRequestContext: () => void;\n    getAndClearPendingCookies: () => string[];\n    reportRequestError: AppServerActionErrorReporter;\n    request: Request;\n  },\n): Response {\n  options.getAndClearPendingCookies();\n  console.error(\"[vinext] Server action error:\", error);\n  options.reportRequestError(\n    normalizeError(error),\n    {\n      path: options.cleanPathname,\n      method: options.request.method,\n      headers: Object.fromEntries(options.request.headers.entries()),\n    },\n    { routerKind: \"App Router\", routePath: options.cleanPathname, routeType: \"action\" },\n  );\n  options.clearRequestContext();\n  return internalServerErrorResponse(\n    process.env.NODE_ENV === \"production\"\n      ? undefined\n      : \"Server action failed: \" + getServerActionFailureMessage(error),\n  );\n}\n\nfunction createActionNotFoundResponse(\n  actionId: string | null,\n  options: {\n    clearRequestContext: () => void;\n    getAndClearPendingCookies: () => string[];\n  },\n): Response {\n  options.getAndClearPendingCookies();\n  console.warn(getServerActionNotFoundMessage(actionId));\n  options.clearRequestContext();\n  return createServerActionNotFoundResponse();\n}\n\nexport function isProgressiveServerActionRequest(\n  request: Pick<Request, \"method\">,\n  contentType: string,\n  actionId: string | null,\n): boolean {\n  return (\n    request.method.toUpperCase() === \"POST\" &&\n    contentType.startsWith(\"multipart/form-data\") &&\n    !actionId\n  );\n}\n\nexport async function handleProgressiveServerActionRequest(\n  options: HandleProgressiveServerActionRequestOptions,\n): Promise<Response | ProgressiveServerActionResult | null> {\n  if (!isProgressiveServerActionRequest(options.request, options.contentType, options.actionId)) {\n    return null;\n  }\n\n  // Defensive guard: prevent infinite forwarding loops. See handleServerActionRscRequest.\n  if (options.request.headers.get(ACTION_FORWARDED_HEADER)) {\n    return createActionNotFoundResponse(null, {\n      clearRequestContext: options.clearRequestContext,\n      getAndClearPendingCookies: options.getAndClearPendingCookies,\n    });\n  }\n\n  const csrfResponse = validateCsrfOrigin(options.request, options.allowedOrigins);\n  if (csrfResponse) {\n    return csrfResponse;\n  }\n\n  const contentLength = parseInt(options.request.headers.get(\"content-length\") || \"0\", 10);\n  if (contentLength > options.maxActionBodySize) {\n    options.clearRequestContext();\n    return payloadTooLargeResponse();\n  }\n\n  try {\n    let body: FormData;\n    try {\n      // Progressive submissions can still fall through to a regular page render when\n      // the multipart body is not an action payload. Read a clone so that fallback\n      // code can still consume the original request body.\n      body = await options.readFormDataWithLimit(\n        options.request.clone(),\n        options.maxActionBodySize,\n      );\n    } catch (error) {\n      if (isRequestBodyTooLarge(error)) {\n        options.clearRequestContext();\n        return payloadTooLargeResponse();\n      }\n      throw error;\n    }\n\n    const payloadResponse = await validateServerActionPayload(body);\n    if (payloadResponse) {\n      options.clearRequestContext();\n      return payloadResponse;\n    }\n\n    const action = await options.decodeAction(body);\n    if (!isAppServerActionFunction(action)) {\n      return null;\n    }\n\n    let actionRedirect: AppServerActionRedirect | null = null;\n    let actionError: unknown = undefined;\n    let actionFailed = false;\n    let actionResult: unknown;\n    const previousHeadersPhase = options.setHeadersAccessPhase(\"action\");\n    try {\n      actionResult = await action();\n    } catch (error) {\n      actionRedirect = getActionRedirect(error);\n      if (!actionRedirect) {\n        actionError = error;\n        actionFailed = true;\n        const isControlFlow =\n          getActionHttpFallbackStatus(error) !== null || isServerActionNotFoundError(error, null);\n        if (!isControlFlow) {\n          console.error(\"[vinext] Server action error:\", error);\n          options.reportRequestError(\n            normalizeError(error),\n            {\n              path: options.cleanPathname,\n              method: options.request.method,\n              headers: Object.fromEntries(options.request.headers.entries()),\n            },\n            { routerKind: \"App Router\", routePath: options.cleanPathname, routeType: \"action\" },\n          );\n        }\n      }\n    } finally {\n      options.setHeadersAccessPhase(previousHeadersPhase);\n    }\n\n    if (!actionRedirect) {\n      getAndClearActionRevalidationKind();\n      if (actionFailed) {\n        return { kind: \"form-state\", formState: null, actionError, actionFailed };\n      }\n\n      const formState = await options.decodeFormState(actionResult, body);\n      return { kind: \"form-state\", formState: formState ?? null };\n    }\n\n    const actionPendingCookies = options.getAndClearPendingCookies();\n    const actionDraftCookie = options.getDraftModeCookieHeader();\n    const actionRevalidationKind = resolveActionRevalidationKind(\n      actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n    );\n    options.clearRequestContext();\n\n    const headers = new Headers();\n    // Prefix the configured basePath onto the redirect target before it\n    // becomes an absolute Location URL. Mirrors Next.js, which threads\n    // basePath through `addPathPrefix(...)` for server-action redirects.\n    const prefixedRedirectUrl = applyActionRedirectBasePath(\n      actionRedirect.url,\n      options.basePath ?? \"\",\n    );\n    headers.set(\"Location\", new URL(prefixedRedirectUrl, options.request.url).toString());\n    mergeMiddlewareResponseHeaders(headers, options.middlewareHeaders);\n    for (const cookie of actionPendingCookies) {\n      headers.append(\"Set-Cookie\", cookie);\n    }\n    if (actionDraftCookie) {\n      headers.append(\"Set-Cookie\", actionDraftCookie);\n    }\n    setActionRevalidatedHeader(headers, actionRevalidationKind);\n\n    return new Response(null, {\n      status: 303,\n      headers,\n    });\n  } catch (error) {\n    if (isServerActionNotFoundError(error, null)) {\n      return createActionNotFoundResponse(null, {\n        clearRequestContext: options.clearRequestContext,\n        getAndClearPendingCookies: options.getAndClearPendingCookies,\n      });\n    }\n\n    getAndClearActionRevalidationKind();\n    options.getAndClearPendingCookies();\n    console.error(\"[vinext] Server action payload parsing error:\", error);\n    options.reportRequestError(\n      normalizeError(error),\n      {\n        path: options.cleanPathname,\n        method: options.request.method,\n        headers: Object.fromEntries(options.request.headers.entries()),\n      },\n      { routerKind: \"App Router\", routePath: options.cleanPathname, routeType: \"action\" },\n    );\n    options.clearRequestContext();\n    return internalServerErrorResponse(\n      process.env.NODE_ENV === \"production\"\n        ? undefined\n        : \"Server action parsing failed: \" + getServerActionFailureMessage(error),\n    );\n  }\n}\n\nexport async function handleServerActionRscRequest<\n  TElement,\n  TRoute extends AppServerActionRoute,\n  TInterceptOpts,\n  TTemporaryReferences,\n  TPage = unknown,\n>(\n  options: HandleServerActionRscRequestOptions<\n    TElement,\n    TRoute,\n    TInterceptOpts,\n    TTemporaryReferences,\n    TPage\n  >,\n): Promise<Response | null> {\n  if (options.request.method.toUpperCase() !== \"POST\" || !options.actionId) {\n    return null;\n  }\n\n  // Defensive guard: if this request has already been forwarded between workers,\n  // do not attempt to process it again. Prevents infinite forwarding loops when\n  // middleware rewrites action POSTs. Matches Next.js behavior:\n  // https://github.com/vercel/next.js/commit/20892dd44e1321c13f755f051e48c3cadd75204b\n  if (options.request.headers.get(ACTION_FORWARDED_HEADER)) {\n    return createActionNotFoundResponse(options.actionId, {\n      clearRequestContext: options.clearRequestContext,\n      getAndClearPendingCookies: options.getAndClearPendingCookies,\n    });\n  }\n\n  const csrfResponse = validateCsrfOrigin(options.request, options.allowedOrigins);\n  if (csrfResponse) return csrfResponse;\n\n  const contentLength = parseInt(options.request.headers.get(\"content-length\") || \"0\", 10);\n  if (contentLength > options.maxActionBodySize) {\n    options.clearRequestContext();\n    return payloadTooLargeResponse();\n  }\n\n  try {\n    let body: string | FormData;\n    try {\n      body = options.contentType.startsWith(\"multipart/form-data\")\n        ? await options.readFormDataWithLimit(options.request, options.maxActionBodySize)\n        : await options.readBodyWithLimit(options.request, options.maxActionBodySize);\n    } catch (error) {\n      if (isRequestBodyTooLarge(error)) {\n        options.clearRequestContext();\n        return payloadTooLargeResponse();\n      }\n      throw error;\n    }\n\n    const payloadResponse = await validateServerActionPayload(body);\n    if (payloadResponse) {\n      options.clearRequestContext();\n      return payloadResponse;\n    }\n\n    let action: unknown;\n    try {\n      action = await options.loadServerAction(options.actionId);\n    } catch (error) {\n      if (isServerActionNotFoundError(error, options.actionId)) {\n        return createActionNotFoundResponse(options.actionId, {\n          clearRequestContext: options.clearRequestContext,\n          getAndClearPendingCookies: options.getAndClearPendingCookies,\n        });\n      }\n\n      throw error;\n    }\n\n    if (!isAppServerActionFunction(action)) {\n      return createActionNotFoundResponse(options.actionId, {\n        clearRequestContext: options.clearRequestContext,\n        getAndClearPendingCookies: options.getAndClearPendingCookies,\n      });\n    }\n\n    const temporaryReferences = options.createTemporaryReferenceSet();\n    const args = await options.decodeReply(body, { temporaryReferences });\n    let returnValue: AppServerActionReturnValue;\n    let actionRedirect: AppServerActionRedirect | null = null;\n    let actionStatus = 200;\n    const previousHeadersPhase = options.setHeadersAccessPhase(\"action\");\n    try {\n      try {\n        validateServerActionArgs(args);\n        const data = await action.apply(null, args);\n        returnValue = { ok: true, data };\n      } catch (error) {\n        actionRedirect = getActionRedirect(error);\n        if (actionRedirect) {\n          returnValue = { ok: true, data: undefined };\n        } else {\n          const httpFallbackStatus = getActionHttpFallbackStatus(error);\n          if (httpFallbackStatus !== null) {\n            actionStatus = httpFallbackStatus;\n            returnValue = { ok: false, data: error };\n          } else {\n            console.error(\"[vinext] Server action error:\", error);\n            returnValue = { ok: false, data: options.sanitizeErrorForClient(error) };\n          }\n        }\n      }\n    } finally {\n      options.setHeadersAccessPhase(previousHeadersPhase);\n    }\n\n    if (actionRedirect) {\n      const actionPendingCookies = options.getAndClearPendingCookies();\n      const actionDraftCookie = options.getDraftModeCookieHeader();\n      const actionRevalidationKind = resolveActionRevalidationKind(\n        actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n      );\n      options.clearRequestContext();\n      const redirectHeaders = new Headers({\n        \"Content-Type\": VINEXT_RSC_CONTENT_TYPE,\n        Vary: VINEXT_RSC_VARY_HEADER,\n      });\n      mergeMiddlewareResponseHeaders(redirectHeaders, options.middlewareHeaders);\n      applyRscCompatibilityIdHeader(redirectHeaders);\n      // Prefix basePath onto the redirect target. The client-side handler in\n      // app-browser-entry reads ACTION_REDIRECT_HEADER and calls\n      // window.location.assign/replace verbatim, so the value must already\n      // be a basePath-prefixed URL.\n      redirectHeaders.set(\n        ACTION_REDIRECT_HEADER,\n        applyActionRedirectBasePath(actionRedirect.url, options.basePath ?? \"\"),\n      );\n      redirectHeaders.set(ACTION_REDIRECT_TYPE_HEADER, actionRedirect.type);\n      redirectHeaders.set(ACTION_REDIRECT_STATUS_HEADER, String(actionRedirect.status));\n      for (const cookie of actionPendingCookies) {\n        redirectHeaders.append(\"Set-Cookie\", cookie);\n      }\n      if (actionDraftCookie) redirectHeaders.append(\"Set-Cookie\", actionDraftCookie);\n      setActionRevalidatedHeader(redirectHeaders, actionRevalidationKind);\n      return new Response(\"\", { status: 200, headers: redirectHeaders });\n    }\n\n    const actionPendingCookies = options.getAndClearPendingCookies();\n    const actionDraftCookie = options.getDraftModeCookieHeader();\n    const actionRevalidationKind = resolveActionRevalidationKind(\n      actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n    );\n\n    const shouldSkipPageRendering = actionRevalidationKind === ACTION_DID_NOT_REVALIDATE;\n    if (shouldSkipPageRendering) {\n      const onRenderError = options.createRscOnErrorHandler(\n        options.request,\n        options.cleanPathname,\n        options.cleanPathname,\n      );\n      const rscStream = await options.renderToReadableStream(\n        { returnValue },\n        { temporaryReferences, onError: onRenderError },\n      );\n\n      options.clearRequestContext();\n\n      const actionHeaders = new Headers({\n        \"Content-Type\": VINEXT_RSC_CONTENT_TYPE,\n        Vary: VINEXT_RSC_VARY_HEADER,\n      });\n      mergeMiddlewareResponseHeaders(actionHeaders, options.middlewareHeaders);\n      applyRscCompatibilityIdHeader(actionHeaders);\n\n      return new Response(rscStream, {\n        status: options.middlewareStatus ?? actionStatus,\n        headers: actionHeaders,\n      });\n    }\n\n    const match = options.matchRoute(options.cleanPathname);\n    let element: TElement;\n    let errorPattern = match ? match.route.pattern : options.cleanPathname;\n    if (match) {\n      const { route: actionRoute, params: actionParams } = match;\n      const actionRerenderTarget = resolveAppPageActionRerenderTarget({\n        cleanPathname: options.cleanPathname,\n        currentParams: actionParams,\n        currentRoute: actionRoute,\n        findIntercept: options.findIntercept,\n        getRouteParamNames: options.getRouteParamNames,\n        getSourceRoute: options.getSourceRoute,\n        isRscRequest: options.isRscRequest,\n        toInterceptOpts: options.toInterceptOpts,\n      });\n\n      options.setNavigationContext({\n        pathname: options.cleanPathname,\n        searchParams: options.searchParams,\n        params: actionRerenderTarget.navigationParams,\n      });\n      setCurrentFetchCacheMode(\n        options.resolveRouteFetchCacheMode?.(actionRerenderTarget.route) ?? null,\n      );\n      element = options.buildPageElement({\n        cleanPathname: options.cleanPathname,\n        interceptOpts: actionRerenderTarget.interceptOpts,\n        isRscRequest: options.isRscRequest,\n        mountedSlotsHeader: options.mountedSlotsHeader,\n        params: actionRerenderTarget.params,\n        request: options.request,\n        route: actionRerenderTarget.route,\n        searchParams: options.searchParams,\n        renderMode: APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI,\n      });\n      errorPattern = actionRerenderTarget.route.pattern;\n    } else {\n      const actionRouteId = options.createPayloadRouteId(options.cleanPathname, null);\n      element = options.createNotFoundElement(actionRouteId);\n    }\n\n    const onRenderError = options.createRscOnErrorHandler(\n      options.request,\n      options.cleanPathname,\n      errorPattern,\n    );\n    const rscStream = await options.renderToReadableStream(\n      { root: element, returnValue },\n      { temporaryReferences, onError: onRenderError },\n    );\n\n    const actionHeaders = new Headers({\n      \"Content-Type\": VINEXT_RSC_CONTENT_TYPE,\n      Vary: VINEXT_RSC_VARY_HEADER,\n    });\n    mergeMiddlewareResponseHeaders(actionHeaders, options.middlewareHeaders);\n    applyRscCompatibilityIdHeader(actionHeaders);\n    setActionRevalidatedHeader(actionHeaders, actionRevalidationKind);\n    const actionResponse = new Response(rscStream, {\n      status: options.middlewareStatus ?? actionStatus,\n      headers: actionHeaders,\n    });\n    if (actionPendingCookies.length > 0 || actionDraftCookie) {\n      for (const cookie of actionPendingCookies) {\n        actionResponse.headers.append(\"Set-Cookie\", cookie);\n      }\n      if (actionDraftCookie) actionResponse.headers.append(\"Set-Cookie\", actionDraftCookie);\n    }\n    return actionResponse;\n  } catch (error) {\n    getAndClearActionRevalidationKind();\n    return createServerActionErrorResponse(error, {\n      cleanPathname: options.cleanPathname,\n      clearRequestContext: options.clearRequestContext,\n      getAndClearPendingCookies: options.getAndClearPendingCookies,\n      reportRequestError: options.reportRequestError,\n      request: options.request,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA2NA,MAAM,2BAA2B;AACjC,MAAM,4BAA4B;AAClC,MAAM,2CAA2C;AAEjD,SAAS,2BAA2B,SAAkB,MAAoC;CACxF,IAAI,SAAS,2BAA2B;CACxC,QAAQ,IAAI,2BAA2B,KAAK,UAAU,KAAK,CAAC;;AAG9D,SAAS,8BAA8B,oBAAqD;CAC1F,MAAM,mBAAmB,mCAAmC;CAM5D,IAAI,oBAAoB,OAAO;CAC/B,OAAO;;AAGT,SAAS,sBAAsB,OAAyB;CACtD,OAAO,iBAAiB,SAAS,MAAM,YAAY;;AAGrD,SAAS,0BAA0B,QAAoD;CACrF,OAAO,OAAO,WAAW;;AAG3B,SAAS,eAAe,OAAuB;CAC7C,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC;;AAGlE,SAAS,8BAA8B,OAAwB;CAC7D,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,UAAU,OAAO,MAAM;;AAGhF,SAAS,yBAAyB,MAAgC;CAChE,IAAI,KAAK,SAAS,0BAChB,MAAM,IAAI,MACR,6CAA6C,KAAK,OAAO,wBAAwB,yBAAyB,GAC3G;;AAIL,eAAsB,wBAAwB,SAAkB,UAAmC;CACjG,IAAI,CAAC,QAAQ,MAAM,OAAO;CAC1B,OAAO,0BAA0B,QAAQ,MAAM,gBAAgB;EAC7D,MAAM,IAAI,MAAM,yBAAyB;GACzC;;AAGJ,eAAsB,4BACpB,SACA,UACmB;CACnB,IAAI,CAAC,QAAQ,MAAM,OAAO,IAAI,UAAU;CAExC,MAAM,SAAS,QAAQ,KAAK,WAAW;CACvC,MAAM,SAAuB,EAAE;CAC/B,IAAI,YAAY;CAEhB,SAAS;EACP,MAAM,SAAS,MAAM,OAAO,MAAM;EAClC,IAAI,OAAO,MAAM;EAEjB,aAAa,OAAO,MAAM;EAC1B,IAAI,YAAY,UAAU;GACxB,MAAM,OAAO,QAAQ;GACrB,MAAM,IAAI,MAAM,yBAAyB;;EAE3C,OAAO,KAAK,OAAO,MAAM;;CAG3B,MAAM,WAAW,IAAI,WAAW,UAAU;CAC1C,IAAI,SAAS;CACb,KAAK,MAAM,SAAS,QAAQ;EAC1B,SAAS,IAAI,OAAO,OAAO;EAC3B,UAAU,MAAM;;CAGlB,OAAO,IAAI,SAAS,UAAU,EAC5B,SAAS,EAAE,gBAAgB,QAAQ,QAAQ,IAAI,eAAe,IAAI,IAAI,EACvE,CAAC,CAAC,UAAU;;AAGf,SAAS,kBAAkB,OAAgD;CACzE,MAAM,SAAS,mBAAmB,MAAM;CACxC,IAAI,CAAC,QAAQ,OAAO;CAEpB,MAAM,WAAW,wBAAwB,OAAO;CAChD,IAAI,CAAC,UAAU,OAAO;CAEtB,OAAO;EACL,QAAQ,SAAS;EACjB,MAAM,SAAS,QAAQ;EACvB,KAAK,SAAS;EACf;;;;;;;;;;;;;;;;;;;;;;;;;AA0BH,SAAgB,4BAA4B,KAAa,UAA0B;CACjF,IAAI,CAAC,UAAU,OAAO;CACtB,IAAI,cAAc,IAAI,EAAE,OAAO;CAE/B,IAAI,YAAY,KAAK,SAAS,EAAE,OAAO;CAGvC,IAAI,CAAC,IAAI,WAAW,IAAI,EAAE,OAAO;CAIjC,MAAM,aAAa,IAAI,QAAQ,IAAI;CACnC,MAAM,YAAY,IAAI,QAAQ,IAAI;CAClC,MAAM,UACJ,eAAe,KAAK,YAAY,cAAc,KAAK,aAAa,KAAK,IAAI,YAAY,UAAU;CACjG,MAAM,WAAW,YAAY,KAAK,MAAM,IAAI,MAAM,GAAG,QAAQ;CAC7D,MAAM,SAAS,YAAY,KAAK,KAAK,IAAI,MAAM,QAAQ;CACvD,OAAO,GAAG,sBAAsB,UAAU,SAAS,GAAG;;AAGxD,SAAS,4BAA4B,OAA+B;CAClE,MAAM,SAAS,mBAAmB,MAAM;CACxC,IAAI,CAAC,QAAQ,OAAO;CAEpB,MAAM,YAAY,yBAAyB,OAAO;CAClD,IAAI,CAAC,aAAa,CAAC,OAAO,UAAU,UAAU,OAAO,EAAE,OAAO;CAE9D,OAAO,UAAU;;AAGnB,SAAS,gCACP,OACA,SAOU;CACV,QAAQ,2BAA2B;CACnC,QAAQ,MAAM,iCAAiC,MAAM;CACrD,QAAQ,mBACN,eAAe,MAAM,EACrB;EACE,MAAM,QAAQ;EACd,QAAQ,QAAQ,QAAQ;EACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;EAC/D,EACD;EAAE,YAAY;EAAc,WAAW,QAAQ;EAAe,WAAW;EAAU,CACpF;CACD,QAAQ,qBAAqB;CAC7B,OAAO,4BACL,QAAQ,IAAI,aAAa,eACrB,KAAA,IACA,2BAA2B,8BAA8B,MAAM,CACpE;;AAGH,SAAS,6BACP,UACA,SAIU;CACV,QAAQ,2BAA2B;CACnC,QAAQ,KAAK,+BAA+B,SAAS,CAAC;CACtD,QAAQ,qBAAqB;CAC7B,OAAO,oCAAoC;;AAG7C,SAAgB,iCACd,SACA,aACA,UACS;CACT,OACE,QAAQ,OAAO,aAAa,KAAK,UACjC,YAAY,WAAW,sBAAsB,IAC7C,CAAC;;AAIL,eAAsB,qCACpB,SAC0D;CAC1D,IAAI,CAAC,iCAAiC,QAAQ,SAAS,QAAQ,aAAa,QAAQ,SAAS,EAC3F,OAAO;CAIT,IAAI,QAAQ,QAAQ,QAAQ,IAAA,qBAA4B,EACtD,OAAO,6BAA6B,MAAM;EACxC,qBAAqB,QAAQ;EAC7B,2BAA2B,QAAQ;EACpC,CAAC;CAGJ,MAAM,eAAe,mBAAmB,QAAQ,SAAS,QAAQ,eAAe;CAChF,IAAI,cACF,OAAO;CAIT,IADsB,SAAS,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,KAAK,GACpE,GAAG,QAAQ,mBAAmB;EAC7C,QAAQ,qBAAqB;EAC7B,OAAO,yBAAyB;;CAGlC,IAAI;EACF,IAAI;EACJ,IAAI;GAIF,OAAO,MAAM,QAAQ,sBACnB,QAAQ,QAAQ,OAAO,EACvB,QAAQ,kBACT;WACM,OAAO;GACd,IAAI,sBAAsB,MAAM,EAAE;IAChC,QAAQ,qBAAqB;IAC7B,OAAO,yBAAyB;;GAElC,MAAM;;EAGR,MAAM,kBAAkB,MAAM,4BAA4B,KAAK;EAC/D,IAAI,iBAAiB;GACnB,QAAQ,qBAAqB;GAC7B,OAAO;;EAGT,MAAM,SAAS,MAAM,QAAQ,aAAa,KAAK;EAC/C,IAAI,CAAC,0BAA0B,OAAO,EACpC,OAAO;EAGT,IAAI,iBAAiD;EACrD,IAAI,cAAuB,KAAA;EAC3B,IAAI,eAAe;EACnB,IAAI;EACJ,MAAM,uBAAuB,QAAQ,sBAAsB,SAAS;EACpE,IAAI;GACF,eAAe,MAAM,QAAQ;WACtB,OAAO;GACd,iBAAiB,kBAAkB,MAAM;GACzC,IAAI,CAAC,gBAAgB;IACnB,cAAc;IACd,eAAe;IAGf,IAAI,EADF,4BAA4B,MAAM,KAAK,QAAQ,4BAA4B,OAAO,KAAK,GACrE;KAClB,QAAQ,MAAM,iCAAiC,MAAM;KACrD,QAAQ,mBACN,eAAe,MAAM,EACrB;MACE,MAAM,QAAQ;MACd,QAAQ,QAAQ,QAAQ;MACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;MAC/D,EACD;MAAE,YAAY;MAAc,WAAW,QAAQ;MAAe,WAAW;MAAU,CACpF;;;YAGG;GACR,QAAQ,sBAAsB,qBAAqB;;EAGrD,IAAI,CAAC,gBAAgB;GACnB,mCAAmC;GACnC,IAAI,cACF,OAAO;IAAE,MAAM;IAAc,WAAW;IAAM;IAAa;IAAc;GAI3E,OAAO;IAAE,MAAM;IAAc,WAAW,MADhB,QAAQ,gBAAgB,cAAc,KAAK,IACd;IAAM;;EAG7D,MAAM,uBAAuB,QAAQ,2BAA2B;EAChE,MAAM,oBAAoB,QAAQ,0BAA0B;EAC5D,MAAM,yBAAyB,8BAC7B,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;EACD,QAAQ,qBAAqB;EAE7B,MAAM,UAAU,IAAI,SAAS;EAI7B,MAAM,sBAAsB,4BAC1B,eAAe,KACf,QAAQ,YAAY,GACrB;EACD,QAAQ,IAAI,YAAY,IAAI,IAAI,qBAAqB,QAAQ,QAAQ,IAAI,CAAC,UAAU,CAAC;EACrF,+BAA+B,SAAS,QAAQ,kBAAkB;EAClE,KAAK,MAAM,UAAU,sBACnB,QAAQ,OAAO,cAAc,OAAO;EAEtC,IAAI,mBACF,QAAQ,OAAO,cAAc,kBAAkB;EAEjD,2BAA2B,SAAS,uBAAuB;EAE3D,OAAO,IAAI,SAAS,MAAM;GACxB,QAAQ;GACR;GACD,CAAC;UACK,OAAO;EACd,IAAI,4BAA4B,OAAO,KAAK,EAC1C,OAAO,6BAA6B,MAAM;GACxC,qBAAqB,QAAQ;GAC7B,2BAA2B,QAAQ;GACpC,CAAC;EAGJ,mCAAmC;EACnC,QAAQ,2BAA2B;EACnC,QAAQ,MAAM,iDAAiD,MAAM;EACrE,QAAQ,mBACN,eAAe,MAAM,EACrB;GACE,MAAM,QAAQ;GACd,QAAQ,QAAQ,QAAQ;GACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;GAC/D,EACD;GAAE,YAAY;GAAc,WAAW,QAAQ;GAAe,WAAW;GAAU,CACpF;EACD,QAAQ,qBAAqB;EAC7B,OAAO,4BACL,QAAQ,IAAI,aAAa,eACrB,KAAA,IACA,mCAAmC,8BAA8B,MAAM,CAC5E;;;AAIL,eAAsB,6BAOpB,SAO0B;CAC1B,IAAI,QAAQ,QAAQ,OAAO,aAAa,KAAK,UAAU,CAAC,QAAQ,UAC9D,OAAO;CAOT,IAAI,QAAQ,QAAQ,QAAQ,IAAA,qBAA4B,EACtD,OAAO,6BAA6B,QAAQ,UAAU;EACpD,qBAAqB,QAAQ;EAC7B,2BAA2B,QAAQ;EACpC,CAAC;CAGJ,MAAM,eAAe,mBAAmB,QAAQ,SAAS,QAAQ,eAAe;CAChF,IAAI,cAAc,OAAO;CAGzB,IADsB,SAAS,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,KAAK,GACpE,GAAG,QAAQ,mBAAmB;EAC7C,QAAQ,qBAAqB;EAC7B,OAAO,yBAAyB;;CAGlC,IAAI;EACF,IAAI;EACJ,IAAI;GACF,OAAO,QAAQ,YAAY,WAAW,sBAAsB,GACxD,MAAM,QAAQ,sBAAsB,QAAQ,SAAS,QAAQ,kBAAkB,GAC/E,MAAM,QAAQ,kBAAkB,QAAQ,SAAS,QAAQ,kBAAkB;WACxE,OAAO;GACd,IAAI,sBAAsB,MAAM,EAAE;IAChC,QAAQ,qBAAqB;IAC7B,OAAO,yBAAyB;;GAElC,MAAM;;EAGR,MAAM,kBAAkB,MAAM,4BAA4B,KAAK;EAC/D,IAAI,iBAAiB;GACnB,QAAQ,qBAAqB;GAC7B,OAAO;;EAGT,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,QAAQ,iBAAiB,QAAQ,SAAS;WAClD,OAAO;GACd,IAAI,4BAA4B,OAAO,QAAQ,SAAS,EACtD,OAAO,6BAA6B,QAAQ,UAAU;IACpD,qBAAqB,QAAQ;IAC7B,2BAA2B,QAAQ;IACpC,CAAC;GAGJ,MAAM;;EAGR,IAAI,CAAC,0BAA0B,OAAO,EACpC,OAAO,6BAA6B,QAAQ,UAAU;GACpD,qBAAqB,QAAQ;GAC7B,2BAA2B,QAAQ;GACpC,CAAC;EAGJ,MAAM,sBAAsB,QAAQ,6BAA6B;EACjE,MAAM,OAAO,MAAM,QAAQ,YAAY,MAAM,EAAE,qBAAqB,CAAC;EACrE,IAAI;EACJ,IAAI,iBAAiD;EACrD,IAAI,eAAe;EACnB,MAAM,uBAAuB,QAAQ,sBAAsB,SAAS;EACpE,IAAI;GACF,IAAI;IACF,yBAAyB,KAAK;IAE9B,cAAc;KAAE,IAAI;KAAM,MAAA,MADP,OAAO,MAAM,MAAM,KAAK;KACX;YACzB,OAAO;IACd,iBAAiB,kBAAkB,MAAM;IACzC,IAAI,gBACF,cAAc;KAAE,IAAI;KAAM,MAAM,KAAA;KAAW;SACtC;KACL,MAAM,qBAAqB,4BAA4B,MAAM;KAC7D,IAAI,uBAAuB,MAAM;MAC/B,eAAe;MACf,cAAc;OAAE,IAAI;OAAO,MAAM;OAAO;YACnC;MACL,QAAQ,MAAM,iCAAiC,MAAM;MACrD,cAAc;OAAE,IAAI;OAAO,MAAM,QAAQ,uBAAuB,MAAM;OAAE;;;;YAItE;GACR,QAAQ,sBAAsB,qBAAqB;;EAGrD,IAAI,gBAAgB;GAClB,MAAM,uBAAuB,QAAQ,2BAA2B;GAChE,MAAM,oBAAoB,QAAQ,0BAA0B;GAC5D,MAAM,yBAAyB,8BAC7B,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;GACD,QAAQ,qBAAqB;GAC7B,MAAM,kBAAkB,IAAI,QAAQ;IAClC,gBAAgB;IAChB,MAAM;IACP,CAAC;GACF,+BAA+B,iBAAiB,QAAQ,kBAAkB;GAC1E,8BAA8B,gBAAgB;GAK9C,gBAAgB,IACd,wBACA,4BAA4B,eAAe,KAAK,QAAQ,YAAY,GAAG,CACxE;GACD,gBAAgB,IAAI,6BAA6B,eAAe,KAAK;GACrE,gBAAgB,IAAI,+BAA+B,OAAO,eAAe,OAAO,CAAC;GACjF,KAAK,MAAM,UAAU,sBACnB,gBAAgB,OAAO,cAAc,OAAO;GAE9C,IAAI,mBAAmB,gBAAgB,OAAO,cAAc,kBAAkB;GAC9E,2BAA2B,iBAAiB,uBAAuB;GACnE,OAAO,IAAI,SAAS,IAAI;IAAE,QAAQ;IAAK,SAAS;IAAiB,CAAC;;EAGpE,MAAM,uBAAuB,QAAQ,2BAA2B;EAChE,MAAM,oBAAoB,QAAQ,0BAA0B;EAC5D,MAAM,yBAAyB,8BAC7B,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;EAGD,IADgC,2BAA2B,2BAC9B;GAC3B,MAAM,gBAAgB,QAAQ,wBAC5B,QAAQ,SACR,QAAQ,eACR,QAAQ,cACT;GACD,MAAM,YAAY,MAAM,QAAQ,uBAC9B,EAAE,aAAa,EACf;IAAE;IAAqB,SAAS;IAAe,CAChD;GAED,QAAQ,qBAAqB;GAE7B,MAAM,gBAAgB,IAAI,QAAQ;IAChC,gBAAgB;IAChB,MAAM;IACP,CAAC;GACF,+BAA+B,eAAe,QAAQ,kBAAkB;GACxE,8BAA8B,cAAc;GAE5C,OAAO,IAAI,SAAS,WAAW;IAC7B,QAAQ,QAAQ,oBAAoB;IACpC,SAAS;IACV,CAAC;;EAGJ,MAAM,QAAQ,QAAQ,WAAW,QAAQ,cAAc;EACvD,IAAI;EACJ,IAAI,eAAe,QAAQ,MAAM,MAAM,UAAU,QAAQ;EACzD,IAAI,OAAO;GACT,MAAM,EAAE,OAAO,aAAa,QAAQ,iBAAiB;GACrD,MAAM,uBAAuB,mCAAmC;IAC9D,eAAe,QAAQ;IACvB,eAAe;IACf,cAAc;IACd,eAAe,QAAQ;IACvB,oBAAoB,QAAQ;IAC5B,gBAAgB,QAAQ;IACxB,cAAc,QAAQ;IACtB,iBAAiB,QAAQ;IAC1B,CAAC;GAEF,QAAQ,qBAAqB;IAC3B,UAAU,QAAQ;IAClB,cAAc,QAAQ;IACtB,QAAQ,qBAAqB;IAC9B,CAAC;GACF,yBACE,QAAQ,6BAA6B,qBAAqB,MAAM,IAAI,KACrE;GACD,UAAU,QAAQ,iBAAiB;IACjC,eAAe,QAAQ;IACvB,eAAe,qBAAqB;IACpC,cAAc,QAAQ;IACtB,oBAAoB,QAAQ;IAC5B,QAAQ,qBAAqB;IAC7B,SAAS,QAAQ;IACjB,OAAO,qBAAqB;IAC5B,cAAc,QAAQ;IACtB,YAAY;IACb,CAAC;GACF,eAAe,qBAAqB,MAAM;SACrC;GACL,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,eAAe,KAAK;GAC/E,UAAU,QAAQ,sBAAsB,cAAc;;EAGxD,MAAM,gBAAgB,QAAQ,wBAC5B,QAAQ,SACR,QAAQ,eACR,aACD;EACD,MAAM,YAAY,MAAM,QAAQ,uBAC9B;GAAE,MAAM;GAAS;GAAa,EAC9B;GAAE;GAAqB,SAAS;GAAe,CAChD;EAED,MAAM,gBAAgB,IAAI,QAAQ;GAChC,gBAAgB;GAChB,MAAM;GACP,CAAC;EACF,+BAA+B,eAAe,QAAQ,kBAAkB;EACxE,8BAA8B,cAAc;EAC5C,2BAA2B,eAAe,uBAAuB;EACjE,MAAM,iBAAiB,IAAI,SAAS,WAAW;GAC7C,QAAQ,QAAQ,oBAAoB;GACpC,SAAS;GACV,CAAC;EACF,IAAI,qBAAqB,SAAS,KAAK,mBAAmB;GACxD,KAAK,MAAM,UAAU,sBACnB,eAAe,QAAQ,OAAO,cAAc,OAAO;GAErD,IAAI,mBAAmB,eAAe,QAAQ,OAAO,cAAc,kBAAkB;;EAEvF,OAAO;UACA,OAAO;EACd,mCAAmC;EACnC,OAAO,gCAAgC,OAAO;GAC5C,eAAe,QAAQ;GACvB,qBAAqB,QAAQ;GAC7B,2BAA2B,QAAQ;GACnC,oBAAoB,QAAQ;GAC5B,SAAS,QAAQ;GAClB,CAAC"}
+{"version":3,"file":"app-server-action-execution.js","names":[],"sources":["../../src/server/app-server-action-execution.ts"],"sourcesContent":["import { getAndClearActionRevalidationKind, type ActionRevalidationKind } from \"vinext/shims/cache\";\nimport type { HeadersAccessPhase } from \"vinext/shims/headers\";\nimport { type FetchCacheMode, setCurrentFetchCacheMode } from \"vinext/shims/fetch-cache\";\nimport type { ReactFormState } from \"react-dom/client\";\nimport { isExternalUrl } from \"../config/config-matchers.js\";\nimport { addBasePathToPathname, hasBasePath } from \"../utils/base-path.js\";\nimport {\n  ACTION_FORWARDED_HEADER,\n  ACTION_REDIRECT_HEADER,\n  ACTION_REDIRECT_STATUS_HEADER,\n  ACTION_REDIRECT_TYPE_HEADER,\n  ACTION_REVALIDATED_HEADER,\n} from \"./headers.js\";\nimport {\n  VINEXT_RSC_CONTENT_TYPE,\n  VINEXT_RSC_VARY_HEADER,\n  applyRscCompatibilityIdHeader,\n} from \"./app-rsc-cache-busting.js\";\nimport { applyEdgeRuntimeHeader } from \"./app-page-response.js\";\nimport { resolveAppPageActionRerenderTarget } from \"./app-page-request.js\";\nimport { mergeMiddlewareResponseHeaders } from \"./middleware-response-headers.js\";\nimport { getSetCookieName } from \"./cookie-utils.js\";\nimport {\n  APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI,\n  type AppRscRenderMode,\n} from \"./app-rsc-render-mode.js\";\nimport {\n  getNextErrorDigest,\n  parseNextHttpErrorDigest,\n  parseNextRedirectDigest,\n} from \"./next-error-digest.js\";\nimport { validateCsrfOrigin, validateServerActionPayload } from \"./request-pipeline.js\";\nimport { readStreamAsTextWithLimit } from \"../utils/text-stream.js\";\nimport {\n  createServerActionNotFoundResponse,\n  getServerActionNotFoundMessage,\n  isServerActionNotFoundError,\n} from \"./server-action-not-found.js\";\nimport { internalServerErrorResponse, payloadTooLargeResponse } from \"./http-error-responses.js\";\n\ntype AppPageParams = Record<string, string | string[]>;\n\ntype AppServerActionErrorReporter = (\n  error: Error,\n  request: { path: string; method: string; headers: Record<string, string> },\n  route: { routerKind: \"App Router\"; routePath: string; routeType: \"action\" },\n) => void;\n\ntype AppServerActionDecoder = (body: FormData) => Promise<unknown>;\ntype AppServerActionFormStateDecoder = (\n  actionResult: unknown,\n  body: FormData,\n) => Promise<ReactFormState | undefined>;\n\ntype ReadFormDataWithLimit = (request: Request, maxBytes: number) => Promise<FormData>;\n\ntype ReadBodyWithLimit = (request: Request, maxBytes: number) => Promise<string>;\n\ntype AppServerActionFunction = (...args: unknown[]) => unknown;\n\ntype AppServerActionReturnValue =\n  | {\n      data: unknown;\n      ok: true;\n    }\n  | {\n      data: unknown;\n      ok: false;\n    };\n\ntype AppServerActionRedirect = {\n  status: number;\n  type: string;\n  url: string;\n};\n\ntype AppServerActionRoute = {\n  pattern: string;\n};\n\n/**\n * Side-effect headers captured during a progressive (no-JS) server action's\n * non-redirect execution. The caller (app-rsc-handler) must apply these to the\n * page render response so that `cookies().set(...)` and revalidation kinds\n * propagate to the browser. Without this, no-JS form submissions silently\n * lose cookie/header mutations — see issue #1483.\n *\n * Next.js' equivalent path mutates `res.setHeader('set-cookie', ...)` during\n * action execution (action-handler.ts → app-render.tsx), then `sendResponse`\n * merges those headers with the rendered Response. vinext works with Response\n * objects directly so the cookies must ride out via the result instead.\n */\ntype ProgressiveServerActionSideEffects = {\n  /** `Set-Cookie` headers from `cookies().set(...)` / `cookies().delete(...)`. */\n  pendingCookies: string[];\n  /** `Set-Cookie` header from `draftMode().enable()/disable()` (if any). */\n  draftCookie: string | null | undefined;\n  /** Resolved revalidation kind to emit via `x-action-revalidated`. */\n  revalidationKind: ActionRevalidationKind;\n};\n\ntype ProgressiveServerActionResult =\n  | ({\n      formState: ReactFormState | null;\n      kind: \"form-state\";\n    } & ProgressiveServerActionSideEffects)\n  | ({\n      actionError: unknown;\n      actionFailed: true;\n      formState: null;\n      kind: \"form-state\";\n    } & ProgressiveServerActionSideEffects);\n\ntype AppServerActionMatch<TRoute extends AppServerActionRoute> = {\n  params: AppPageParams;\n  route: TRoute;\n};\n\ntype AppServerActionIntercept<TPage = unknown> = {\n  matchedParams: AppPageParams;\n  page: TPage;\n  slotId?: string | null;\n  slotKey: string;\n  sourceRouteIndex: number;\n};\n\ntype BuildServerActionPageElementOptions<TRoute extends AppServerActionRoute, TInterceptOpts> = {\n  cleanPathname: string;\n  interceptOpts: TInterceptOpts | undefined;\n  isRscRequest: boolean;\n  mountedSlotsHeader: string | null;\n  params: AppPageParams;\n  request: Request;\n  route: TRoute;\n  searchParams: URLSearchParams;\n  renderMode: AppRscRenderMode;\n};\n\ntype AppServerActionRscModel<TElement> = {\n  /**\n   * Omitted when the action did not invalidate page data. This mirrors Next.js'\n   * empty Flight payload for non-revalidating fetch actions: the client resolves\n   * the action value without committing a visible router update.\n   */\n  root?: TElement;\n  returnValue: AppServerActionReturnValue;\n};\n\ntype RenderServerActionRscStreamOptions<TTemporaryReferences> = {\n  onError: (error: unknown) => unknown;\n  temporaryReferences: TTemporaryReferences;\n};\n\ntype DecodeServerActionReplyOptions<TTemporaryReferences> = {\n  temporaryReferences: TTemporaryReferences;\n};\n\nexport type HandleProgressiveServerActionRequestOptions = {\n  actionId: string | null;\n  allowedOrigins: string[];\n  /** Configured next.config `basePath`. Prefixed onto progressive Location targets. */\n  basePath?: string;\n  cleanPathname: string;\n  clearRequestContext: () => void;\n  contentType: string;\n  decodeAction: AppServerActionDecoder;\n  decodeFormState: AppServerActionFormStateDecoder;\n  getAndClearPendingCookies: () => string[];\n  getDraftModeCookieHeader: () => string | null | undefined;\n  maxActionBodySize: number;\n  middlewareHeaders: Headers | null;\n  readFormDataWithLimit: ReadFormDataWithLimit;\n  reportRequestError: AppServerActionErrorReporter;\n  request: Request;\n  setHeadersAccessPhase: (phase: HeadersAccessPhase) => HeadersAccessPhase;\n};\n\nexport type HandleServerActionRscRequestOptions<\n  TElement,\n  TRoute extends AppServerActionRoute,\n  TInterceptOpts,\n  TTemporaryReferences,\n  TPage = unknown,\n> = {\n  actionId: string | null;\n  allowedOrigins: string[];\n  /** Configured next.config `basePath`. Prefixed onto ACTION_REDIRECT_HEADER targets. */\n  basePath?: string;\n  buildPageElement: (\n    options: BuildServerActionPageElementOptions<TRoute, TInterceptOpts>,\n  ) => TElement;\n  cleanPathname: string;\n  clearRequestContext: () => void;\n  contentType: string;\n  createNotFoundElement: (routeId: string) => TElement;\n  createPayloadRouteId: (pathname: string, interceptionContext: string | null) => string;\n  createRscOnErrorHandler: (\n    request: Request,\n    pathname: string,\n    pattern: string,\n  ) => (error: unknown) => unknown;\n  createTemporaryReferenceSet: () => TTemporaryReferences;\n  decodeReply: (\n    body: string | FormData,\n    options: DecodeServerActionReplyOptions<TTemporaryReferences>,\n  ) => Promise<unknown[]> | unknown[];\n  findIntercept: (pathname: string) => AppServerActionIntercept<TPage> | null;\n  getAndClearPendingCookies: () => string[];\n  getDraftModeCookieHeader: () => string | null | undefined;\n  getRouteParamNames: (route: TRoute) => readonly string[];\n  getSourceRoute: (sourceRouteIndex: number) => TRoute | undefined;\n  isEdgeRuntime?: boolean;\n  isRscRequest: boolean;\n  loadServerAction: (actionId: string) => Promise<unknown>;\n  matchRoute: (pathname: string) => AppServerActionMatch<TRoute> | null;\n  maxActionBodySize: number;\n  middlewareHeaders: Headers | null;\n  middlewareStatus: number | null | undefined;\n  mountedSlotsHeader: string | null;\n  readBodyWithLimit: ReadBodyWithLimit;\n  readFormDataWithLimit: ReadFormDataWithLimit;\n  renderToReadableStream: (\n    model: AppServerActionRscModel<TElement>,\n    options: RenderServerActionRscStreamOptions<TTemporaryReferences>,\n  ) => BodyInit | null | Promise<BodyInit | null>;\n  reportRequestError: AppServerActionErrorReporter;\n  resolveRouteFetchCacheMode?: (route: TRoute) => FetchCacheMode | null;\n  request: Request;\n  sanitizeErrorForClient: (error: unknown) => unknown;\n  searchParams: URLSearchParams;\n  setHeadersAccessPhase: (phase: HeadersAccessPhase) => HeadersAccessPhase;\n  setNavigationContext: (context: {\n    params: AppPageParams;\n    pathname: string;\n    searchParams: URLSearchParams;\n  }) => void;\n  toInterceptOpts: (intercept: AppServerActionIntercept<TPage>) => TInterceptOpts;\n};\n\n/**\n * Matches Next.js' server action argument cap to prevent stack overflow in\n * Function.prototype.apply when decoding hostile action payloads.\n */\nconst SERVER_ACTION_ARGS_LIMIT = 1000;\nconst ACTION_DID_NOT_REVALIDATE = 0 satisfies ActionRevalidationKind;\nconst ACTION_DID_REVALIDATE_STATIC_AND_DYNAMIC = 1 satisfies ActionRevalidationKind;\n\nfunction setActionRevalidatedHeader(headers: Headers, kind: ActionRevalidationKind): void {\n  if (kind === ACTION_DID_NOT_REVALIDATE) return;\n  headers.set(ACTION_REVALIDATED_HEADER, JSON.stringify(kind));\n}\n\nfunction resolveActionRevalidationKind(hasModifiedCookies: boolean): ActionRevalidationKind {\n  const revalidationKind = getAndClearActionRevalidationKind();\n  // Cookie mutations are a hard override to STATIC_AND_DYNAMIC: any cookie\n  // change can invalidate downstream cached payloads regardless of what\n  // (if anything) the action explicitly revalidated, so we always emit the\n  // strongest kind. STATIC_AND_DYNAMIC is also the lowest numeric value, so\n  // this matches the max-precedence semantics in markActionRevalidation.\n  if (hasModifiedCookies) return ACTION_DID_REVALIDATE_STATIC_AND_DYNAMIC;\n  return revalidationKind;\n}\n\nfunction isRequestBodyTooLarge(error: unknown): boolean {\n  return error instanceof Error && error.message === \"Request body too large\";\n}\n\n/**\n * Collapse repeated `cookies().set(name, ...)` / `cookies().delete(name)`\n * calls down to the last value per name, matching Next.js'\n * `MutableRequestCookiesAdapter` semantics. Next.js stores response cookies in\n * a `ResponseCookies` Map keyed by name — multiple sets for the same cookie\n * collapse to the final value, and emit a single Set-Cookie header.\n *\n * Insertion order is preserved by first occurrence (Map iteration order),\n * which mirrors how `ResponseCookies` iterates its underlying Map. See\n * packages/next/src/server/web/spec-extension/adapters/request-cookies.ts.\n * Issue: https://github.com/cloudflare/vinext/issues/1481\n */\nfunction dedupePendingCookies(cookies: readonly string[]): string[] {\n  if (cookies.length <= 1) {\n    return cookies.slice();\n  }\n  const byName = new Map<string, string>();\n  const unkeyed: string[] = [];\n  for (const cookie of cookies) {\n    const name = getSetCookieName(cookie);\n    if (name === null) {\n      unkeyed.push(cookie);\n      continue;\n    }\n    // Map.set on an existing key replaces the value but preserves the\n    // insertion position of the original key — exactly the behaviour we need\n    // for `cookies().set(\"foo\", \"1\"); cookies().set(\"bar\", \"2\"); cookies().set(\"foo\", \"3\")`\n    // to come out as [foo=3, bar=2].\n    byName.set(name, cookie);\n  }\n  return [...unkeyed, ...byName.values()];\n}\n\nfunction isAppServerActionFunction(action: unknown): action is AppServerActionFunction {\n  return typeof action === \"function\";\n}\n\nfunction normalizeError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\nfunction getServerActionFailureMessage(error: unknown): string {\n  return error instanceof Error && error.message ? error.message : String(error);\n}\n\nfunction validateServerActionArgs(args: readonly unknown[]): void {\n  if (args.length > SERVER_ACTION_ARGS_LIMIT) {\n    throw new Error(\n      `Server Action arguments list is too long (${args.length}). Maximum allowed is ${SERVER_ACTION_ARGS_LIMIT}.`,\n    );\n  }\n}\n\nexport async function readActionBodyWithLimit(request: Request, maxBytes: number): Promise<string> {\n  if (!request.body) return \"\";\n  return readStreamAsTextWithLimit(request.body, maxBytes, () => {\n    throw new Error(\"Request body too large\");\n  });\n}\n\nexport async function readActionFormDataWithLimit(\n  request: Request,\n  maxBytes: number,\n): Promise<FormData> {\n  if (!request.body) return new FormData();\n\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let totalSize = 0;\n\n  for (;;) {\n    const result = await reader.read();\n    if (result.done) break;\n\n    totalSize += result.value.byteLength;\n    if (totalSize > maxBytes) {\n      await reader.cancel();\n      throw new Error(\"Request body too large\");\n    }\n    chunks.push(result.value);\n  }\n\n  const combined = new Uint8Array(totalSize);\n  let offset = 0;\n  for (const chunk of chunks) {\n    combined.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  return new Response(combined, {\n    headers: { \"Content-Type\": request.headers.get(\"content-type\") || \"\" },\n  }).formData();\n}\n\nfunction getActionRedirect(error: unknown): AppServerActionRedirect | null {\n  const digest = getNextErrorDigest(error);\n  if (!digest) return null;\n\n  const redirect = parseNextRedirectDigest(digest);\n  if (!redirect) return null;\n\n  return {\n    status: redirect.status,\n    type: redirect.type ?? \"push\",\n    url: redirect.url,\n  };\n}\n\n/**\n * Prepend the configured next.config `basePath` to a server-action redirect\n * target before it goes on the wire.\n *\n * `redirect(\"/foo\")` called from a server action mounted at `/base/...` must\n * land the browser at `/base/foo`, mirroring how Next.js threads basePath\n * through `addPathPrefix(getURLFromRedirectError(err), basePath)` in\n * `app-render.tsx` for SSR redirects and in `action-handler.ts` for action\n * redirects.\n *\n * Idempotent and external-aware:\n *  - Empty basePath → returned unchanged.\n *  - External URLs (`http://`, `https://`, `data:`, protocol-relative `//`)\n *    are returned unchanged because the framework does not own those routes.\n *  - Targets that already start with the configured basePath are returned\n *    unchanged so this helper can be applied at any layer without risk of\n *    double-prefixing (`/base/base/foo`).\n *\n * Exported for tests. Used by both the progressive (no-JS form POST) and\n * RSC (`ACTION_REDIRECT_HEADER`) action redirect paths below.\n *\n * @see https://github.com/vercel/next.js/blob/canary/packages/next/src/server/app-render/action-handler.ts\n */\nexport function applyActionRedirectBasePath(url: string, basePath: string): string {\n  if (!basePath) return url;\n  if (isExternalUrl(url)) return url;\n  // Pathnames that already include basePath are returned as-is.\n  if (hasBasePath(url, basePath)) return url;\n  // Relative or hash/query-only targets cannot be prefixed safely without an\n  // origin; leave them to the caller's URL resolution.\n  if (!url.startsWith(\"/\")) return url;\n  // Split off optional query+hash so addBasePathToPathname only operates on\n  // the path. We must accept hash too because Next.js redirect targets may\n  // contain \"#anchor\".\n  const queryIndex = url.indexOf(\"?\");\n  const hashIndex = url.indexOf(\"#\");\n  const splitAt =\n    queryIndex === -1 ? hashIndex : hashIndex === -1 ? queryIndex : Math.min(queryIndex, hashIndex);\n  const pathname = splitAt === -1 ? url : url.slice(0, splitAt);\n  const suffix = splitAt === -1 ? \"\" : url.slice(splitAt);\n  return `${addBasePathToPathname(pathname, basePath)}${suffix}`;\n}\n\nfunction getActionHttpFallbackStatus(error: unknown): number | null {\n  const digest = getNextErrorDigest(error);\n  if (!digest) return null;\n\n  const httpError = parseNextHttpErrorDigest(digest);\n  if (!httpError || !Number.isInteger(httpError.status)) return null;\n\n  return httpError.status;\n}\n\nfunction createServerActionErrorResponse(\n  error: unknown,\n  options: {\n    cleanPathname: string;\n    clearRequestContext: () => void;\n    getAndClearPendingCookies: () => string[];\n    reportRequestError: AppServerActionErrorReporter;\n    request: Request;\n  },\n): Response {\n  options.getAndClearPendingCookies();\n  console.error(\"[vinext] Server action error:\", error);\n  options.reportRequestError(\n    normalizeError(error),\n    {\n      path: options.cleanPathname,\n      method: options.request.method,\n      headers: Object.fromEntries(options.request.headers.entries()),\n    },\n    { routerKind: \"App Router\", routePath: options.cleanPathname, routeType: \"action\" },\n  );\n  options.clearRequestContext();\n  return internalServerErrorResponse(\n    process.env.NODE_ENV === \"production\"\n      ? undefined\n      : \"Server action failed: \" + getServerActionFailureMessage(error),\n  );\n}\n\nfunction createActionNotFoundResponse(\n  actionId: string | null,\n  options: {\n    clearRequestContext: () => void;\n    getAndClearPendingCookies: () => string[];\n  },\n): Response {\n  options.getAndClearPendingCookies();\n  console.warn(getServerActionNotFoundMessage(actionId));\n  options.clearRequestContext();\n  return createServerActionNotFoundResponse();\n}\n\nexport function isProgressiveServerActionRequest(\n  request: Pick<Request, \"method\">,\n  contentType: string,\n  actionId: string | null,\n): boolean {\n  return (\n    request.method.toUpperCase() === \"POST\" &&\n    contentType.startsWith(\"multipart/form-data\") &&\n    !actionId\n  );\n}\n\nexport async function handleProgressiveServerActionRequest(\n  options: HandleProgressiveServerActionRequestOptions,\n): Promise<Response | ProgressiveServerActionResult | null> {\n  if (!isProgressiveServerActionRequest(options.request, options.contentType, options.actionId)) {\n    return null;\n  }\n\n  // Defensive guard: prevent infinite forwarding loops. See handleServerActionRscRequest.\n  if (options.request.headers.get(ACTION_FORWARDED_HEADER)) {\n    return createActionNotFoundResponse(null, {\n      clearRequestContext: options.clearRequestContext,\n      getAndClearPendingCookies: options.getAndClearPendingCookies,\n    });\n  }\n\n  const csrfResponse = validateCsrfOrigin(options.request, options.allowedOrigins);\n  if (csrfResponse) {\n    return csrfResponse;\n  }\n\n  const contentLength = parseInt(options.request.headers.get(\"content-length\") || \"0\", 10);\n  if (contentLength > options.maxActionBodySize) {\n    options.clearRequestContext();\n    return payloadTooLargeResponse();\n  }\n\n  try {\n    let body: FormData;\n    try {\n      // Progressive submissions can still fall through to a regular page render when\n      // the multipart body is not an action payload. Read a clone so that fallback\n      // code can still consume the original request body.\n      body = await options.readFormDataWithLimit(\n        options.request.clone(),\n        options.maxActionBodySize,\n      );\n    } catch (error) {\n      if (isRequestBodyTooLarge(error)) {\n        options.clearRequestContext();\n        return payloadTooLargeResponse();\n      }\n      throw error;\n    }\n\n    const payloadResponse = await validateServerActionPayload(body);\n    if (payloadResponse) {\n      options.clearRequestContext();\n      return payloadResponse;\n    }\n\n    const action = await options.decodeAction(body);\n    if (!isAppServerActionFunction(action)) {\n      return null;\n    }\n\n    let actionRedirect: AppServerActionRedirect | null = null;\n    let actionError: unknown = undefined;\n    let actionFailed = false;\n    let actionResult: unknown;\n    const previousHeadersPhase = options.setHeadersAccessPhase(\"action\");\n    try {\n      actionResult = await action();\n    } catch (error) {\n      actionRedirect = getActionRedirect(error);\n      if (!actionRedirect) {\n        actionError = error;\n        actionFailed = true;\n        const isControlFlow =\n          getActionHttpFallbackStatus(error) !== null || isServerActionNotFoundError(error, null);\n        if (!isControlFlow) {\n          console.error(\"[vinext] Server action error:\", error);\n          options.reportRequestError(\n            normalizeError(error),\n            {\n              path: options.cleanPathname,\n              method: options.request.method,\n              headers: Object.fromEntries(options.request.headers.entries()),\n            },\n            { routerKind: \"App Router\", routePath: options.cleanPathname, routeType: \"action\" },\n          );\n        }\n      }\n    } finally {\n      options.setHeadersAccessPhase(previousHeadersPhase);\n    }\n\n    if (!actionRedirect) {\n      // Capture cookies/headers set during action execution so the caller can\n      // apply them to the rendered page response. Mirrors Next.js'\n      // `res.setHeader('set-cookie', ...)` path in app-render.tsx, which\n      // flushes `requestStore.mutableCookies` onto the response before SSR\n      // streaming begins. Without this, no-JS server-action form POSTs lose\n      // cookies/headers — see issue #1483.\n      const actionPendingCookies = options.getAndClearPendingCookies();\n      const actionDraftCookie = options.getDraftModeCookieHeader();\n      const revalidationKind = resolveActionRevalidationKind(\n        actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n      );\n\n      if (actionFailed) {\n        return {\n          kind: \"form-state\",\n          formState: null,\n          actionError,\n          actionFailed,\n          pendingCookies: actionPendingCookies,\n          draftCookie: actionDraftCookie,\n          revalidationKind,\n        };\n      }\n\n      const formState = await options.decodeFormState(actionResult, body);\n      return {\n        kind: \"form-state\",\n        formState: formState ?? null,\n        pendingCookies: actionPendingCookies,\n        draftCookie: actionDraftCookie,\n        revalidationKind,\n      };\n    }\n\n    const actionPendingCookies = dedupePendingCookies(options.getAndClearPendingCookies());\n    const actionDraftCookie = options.getDraftModeCookieHeader();\n    const actionRevalidationKind = resolveActionRevalidationKind(\n      actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n    );\n    options.clearRequestContext();\n\n    const headers = new Headers();\n    // Prefix the configured basePath onto the redirect target before it\n    // becomes an absolute Location URL. Mirrors Next.js, which threads\n    // basePath through `addPathPrefix(...)` for server-action redirects.\n    const prefixedRedirectUrl = applyActionRedirectBasePath(\n      actionRedirect.url,\n      options.basePath ?? \"\",\n    );\n    headers.set(\"Location\", new URL(prefixedRedirectUrl, options.request.url).toString());\n    mergeMiddlewareResponseHeaders(headers, options.middlewareHeaders);\n    for (const cookie of actionPendingCookies) {\n      headers.append(\"Set-Cookie\", cookie);\n    }\n    if (actionDraftCookie) {\n      headers.append(\"Set-Cookie\", actionDraftCookie);\n    }\n    setActionRevalidatedHeader(headers, actionRevalidationKind);\n\n    return new Response(null, {\n      status: 303,\n      headers,\n    });\n  } catch (error) {\n    if (isServerActionNotFoundError(error, null)) {\n      return createActionNotFoundResponse(null, {\n        clearRequestContext: options.clearRequestContext,\n        getAndClearPendingCookies: options.getAndClearPendingCookies,\n      });\n    }\n\n    getAndClearActionRevalidationKind();\n    options.getAndClearPendingCookies();\n    console.error(\"[vinext] Server action payload parsing error:\", error);\n    options.reportRequestError(\n      normalizeError(error),\n      {\n        path: options.cleanPathname,\n        method: options.request.method,\n        headers: Object.fromEntries(options.request.headers.entries()),\n      },\n      { routerKind: \"App Router\", routePath: options.cleanPathname, routeType: \"action\" },\n    );\n    options.clearRequestContext();\n    return internalServerErrorResponse(\n      process.env.NODE_ENV === \"production\"\n        ? undefined\n        : \"Server action parsing failed: \" + getServerActionFailureMessage(error),\n    );\n  }\n}\n\nexport async function handleServerActionRscRequest<\n  TElement,\n  TRoute extends AppServerActionRoute,\n  TInterceptOpts,\n  TTemporaryReferences,\n  TPage = unknown,\n>(\n  options: HandleServerActionRscRequestOptions<\n    TElement,\n    TRoute,\n    TInterceptOpts,\n    TTemporaryReferences,\n    TPage\n  >,\n): Promise<Response | null> {\n  if (options.request.method.toUpperCase() !== \"POST\" || !options.actionId) {\n    return null;\n  }\n\n  // Defensive guard: if this request has already been forwarded between workers,\n  // do not attempt to process it again. Prevents infinite forwarding loops when\n  // middleware rewrites action POSTs. Matches Next.js behavior:\n  // https://github.com/vercel/next.js/commit/20892dd44e1321c13f755f051e48c3cadd75204b\n  if (options.request.headers.get(ACTION_FORWARDED_HEADER)) {\n    return createActionNotFoundResponse(options.actionId, {\n      clearRequestContext: options.clearRequestContext,\n      getAndClearPendingCookies: options.getAndClearPendingCookies,\n    });\n  }\n\n  const csrfResponse = validateCsrfOrigin(options.request, options.allowedOrigins);\n  if (csrfResponse) return csrfResponse;\n\n  const contentLength = parseInt(options.request.headers.get(\"content-length\") || \"0\", 10);\n  if (contentLength > options.maxActionBodySize) {\n    options.clearRequestContext();\n    return payloadTooLargeResponse();\n  }\n\n  try {\n    let body: string | FormData;\n    try {\n      body = options.contentType.startsWith(\"multipart/form-data\")\n        ? await options.readFormDataWithLimit(options.request, options.maxActionBodySize)\n        : await options.readBodyWithLimit(options.request, options.maxActionBodySize);\n    } catch (error) {\n      if (isRequestBodyTooLarge(error)) {\n        options.clearRequestContext();\n        return payloadTooLargeResponse();\n      }\n      throw error;\n    }\n\n    const payloadResponse = await validateServerActionPayload(body);\n    if (payloadResponse) {\n      options.clearRequestContext();\n      return payloadResponse;\n    }\n\n    let action: unknown;\n    try {\n      action = await options.loadServerAction(options.actionId);\n    } catch (error) {\n      if (isServerActionNotFoundError(error, options.actionId)) {\n        return createActionNotFoundResponse(options.actionId, {\n          clearRequestContext: options.clearRequestContext,\n          getAndClearPendingCookies: options.getAndClearPendingCookies,\n        });\n      }\n\n      throw error;\n    }\n\n    if (!isAppServerActionFunction(action)) {\n      return createActionNotFoundResponse(options.actionId, {\n        clearRequestContext: options.clearRequestContext,\n        getAndClearPendingCookies: options.getAndClearPendingCookies,\n      });\n    }\n\n    const temporaryReferences = options.createTemporaryReferenceSet();\n    const args = await options.decodeReply(body, { temporaryReferences });\n    let returnValue: AppServerActionReturnValue;\n    let actionRedirect: AppServerActionRedirect | null = null;\n    let actionStatus = 200;\n    const previousHeadersPhase = options.setHeadersAccessPhase(\"action\");\n    try {\n      try {\n        validateServerActionArgs(args);\n        const data = await action.apply(null, args);\n        returnValue = { ok: true, data };\n      } catch (error) {\n        actionRedirect = getActionRedirect(error);\n        if (actionRedirect) {\n          returnValue = { ok: true, data: undefined };\n        } else {\n          const httpFallbackStatus = getActionHttpFallbackStatus(error);\n          if (httpFallbackStatus !== null) {\n            actionStatus = httpFallbackStatus;\n            returnValue = { ok: false, data: error };\n          } else {\n            console.error(\"[vinext] Server action error:\", error);\n            returnValue = { ok: false, data: options.sanitizeErrorForClient(error) };\n          }\n        }\n      }\n    } finally {\n      options.setHeadersAccessPhase(previousHeadersPhase);\n    }\n\n    if (actionRedirect) {\n      const actionPendingCookies = dedupePendingCookies(options.getAndClearPendingCookies());\n      const actionDraftCookie = options.getDraftModeCookieHeader();\n      const actionRevalidationKind = resolveActionRevalidationKind(\n        actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n      );\n      options.clearRequestContext();\n      const redirectHeaders = new Headers({\n        \"Content-Type\": VINEXT_RSC_CONTENT_TYPE,\n        Vary: VINEXT_RSC_VARY_HEADER,\n      });\n      applyEdgeRuntimeHeader(redirectHeaders, options.isEdgeRuntime);\n      mergeMiddlewareResponseHeaders(redirectHeaders, options.middlewareHeaders);\n      applyRscCompatibilityIdHeader(redirectHeaders);\n      // Prefix basePath onto the redirect target. The client-side handler in\n      // app-browser-entry reads ACTION_REDIRECT_HEADER and calls\n      // window.location.assign/replace verbatim, so the value must already\n      // be a basePath-prefixed URL.\n      redirectHeaders.set(\n        ACTION_REDIRECT_HEADER,\n        applyActionRedirectBasePath(actionRedirect.url, options.basePath ?? \"\"),\n      );\n      redirectHeaders.set(ACTION_REDIRECT_TYPE_HEADER, actionRedirect.type);\n      redirectHeaders.set(ACTION_REDIRECT_STATUS_HEADER, String(actionRedirect.status));\n      for (const cookie of actionPendingCookies) {\n        redirectHeaders.append(\"Set-Cookie\", cookie);\n      }\n      if (actionDraftCookie) redirectHeaders.append(\"Set-Cookie\", actionDraftCookie);\n      setActionRevalidatedHeader(redirectHeaders, actionRevalidationKind);\n      return new Response(\"\", { status: 200, headers: redirectHeaders });\n    }\n\n    const actionPendingCookies = dedupePendingCookies(options.getAndClearPendingCookies());\n    const actionDraftCookie = options.getDraftModeCookieHeader();\n    const actionRevalidationKind = resolveActionRevalidationKind(\n      actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n    );\n\n    const shouldSkipPageRendering = actionRevalidationKind === ACTION_DID_NOT_REVALIDATE;\n    if (shouldSkipPageRendering) {\n      const onRenderError = options.createRscOnErrorHandler(\n        options.request,\n        options.cleanPathname,\n        options.cleanPathname,\n      );\n      const rscStream = await options.renderToReadableStream(\n        { returnValue },\n        { temporaryReferences, onError: onRenderError },\n      );\n\n      options.clearRequestContext();\n\n      const actionHeaders = new Headers({\n        \"Content-Type\": VINEXT_RSC_CONTENT_TYPE,\n        Vary: VINEXT_RSC_VARY_HEADER,\n      });\n      applyEdgeRuntimeHeader(actionHeaders, options.isEdgeRuntime);\n      mergeMiddlewareResponseHeaders(actionHeaders, options.middlewareHeaders);\n      applyRscCompatibilityIdHeader(actionHeaders);\n\n      return new Response(rscStream, {\n        status: options.middlewareStatus ?? actionStatus,\n        headers: actionHeaders,\n      });\n    }\n\n    const match = options.matchRoute(options.cleanPathname);\n    let element: TElement;\n    let errorPattern = match ? match.route.pattern : options.cleanPathname;\n    if (match) {\n      const { route: actionRoute, params: actionParams } = match;\n      const actionRerenderTarget = resolveAppPageActionRerenderTarget({\n        cleanPathname: options.cleanPathname,\n        currentParams: actionParams,\n        currentRoute: actionRoute,\n        findIntercept: options.findIntercept,\n        getRouteParamNames: options.getRouteParamNames,\n        getSourceRoute: options.getSourceRoute,\n        isRscRequest: options.isRscRequest,\n        toInterceptOpts: options.toInterceptOpts,\n      });\n\n      options.setNavigationContext({\n        pathname: options.cleanPathname,\n        searchParams: options.searchParams,\n        params: actionRerenderTarget.navigationParams,\n      });\n      setCurrentFetchCacheMode(\n        options.resolveRouteFetchCacheMode?.(actionRerenderTarget.route) ?? null,\n      );\n      element = options.buildPageElement({\n        cleanPathname: options.cleanPathname,\n        interceptOpts: actionRerenderTarget.interceptOpts,\n        isRscRequest: options.isRscRequest,\n        mountedSlotsHeader: options.mountedSlotsHeader,\n        params: actionRerenderTarget.params,\n        request: options.request,\n        route: actionRerenderTarget.route,\n        searchParams: options.searchParams,\n        renderMode: APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI,\n      });\n      errorPattern = actionRerenderTarget.route.pattern;\n    } else {\n      const actionRouteId = options.createPayloadRouteId(options.cleanPathname, null);\n      element = options.createNotFoundElement(actionRouteId);\n    }\n\n    const onRenderError = options.createRscOnErrorHandler(\n      options.request,\n      options.cleanPathname,\n      errorPattern,\n    );\n    const rscStream = await options.renderToReadableStream(\n      { root: element, returnValue },\n      { temporaryReferences, onError: onRenderError },\n    );\n\n    const actionHeaders = new Headers({\n      \"Content-Type\": VINEXT_RSC_CONTENT_TYPE,\n      Vary: VINEXT_RSC_VARY_HEADER,\n    });\n    applyEdgeRuntimeHeader(actionHeaders, options.isEdgeRuntime);\n    mergeMiddlewareResponseHeaders(actionHeaders, options.middlewareHeaders);\n    applyRscCompatibilityIdHeader(actionHeaders);\n    setActionRevalidatedHeader(actionHeaders, actionRevalidationKind);\n    const actionResponse = new Response(rscStream, {\n      status: options.middlewareStatus ?? actionStatus,\n      headers: actionHeaders,\n    });\n    if (actionPendingCookies.length > 0 || actionDraftCookie) {\n      for (const cookie of actionPendingCookies) {\n        actionResponse.headers.append(\"Set-Cookie\", cookie);\n      }\n      if (actionDraftCookie) actionResponse.headers.append(\"Set-Cookie\", actionDraftCookie);\n    }\n    return actionResponse;\n  } catch (error) {\n    getAndClearActionRevalidationKind();\n    return createServerActionErrorResponse(error, {\n      cleanPathname: options.cleanPathname,\n      clearRequestContext: options.clearRequestContext,\n      getAndClearPendingCookies: options.getAndClearPendingCookies,\n      reportRequestError: options.reportRequestError,\n      request: options.request,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmPA,MAAM,2BAA2B;AACjC,MAAM,4BAA4B;AAClC,MAAM,2CAA2C;AAEjD,SAAS,2BAA2B,SAAkB,MAAoC;CACxF,IAAI,SAAS,2BAA2B;CACxC,QAAQ,IAAI,2BAA2B,KAAK,UAAU,KAAK,CAAC;;AAG9D,SAAS,8BAA8B,oBAAqD;CAC1F,MAAM,mBAAmB,mCAAmC;CAM5D,IAAI,oBAAoB,OAAO;CAC/B,OAAO;;AAGT,SAAS,sBAAsB,OAAyB;CACtD,OAAO,iBAAiB,SAAS,MAAM,YAAY;;;;;;;;;;;;;;AAerD,SAAS,qBAAqB,SAAsC;CAClE,IAAI,QAAQ,UAAU,GACpB,OAAO,QAAQ,OAAO;CAExB,MAAM,yBAAS,IAAI,KAAqB;CACxC,MAAM,UAAoB,EAAE;CAC5B,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,OAAO,iBAAiB,OAAO;EACrC,IAAI,SAAS,MAAM;GACjB,QAAQ,KAAK,OAAO;GACpB;;EAMF,OAAO,IAAI,MAAM,OAAO;;CAE1B,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO,QAAQ,CAAC;;AAGzC,SAAS,0BAA0B,QAAoD;CACrF,OAAO,OAAO,WAAW;;AAG3B,SAAS,eAAe,OAAuB;CAC7C,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC;;AAGlE,SAAS,8BAA8B,OAAwB;CAC7D,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,UAAU,OAAO,MAAM;;AAGhF,SAAS,yBAAyB,MAAgC;CAChE,IAAI,KAAK,SAAS,0BAChB,MAAM,IAAI,MACR,6CAA6C,KAAK,OAAO,wBAAwB,yBAAyB,GAC3G;;AAIL,eAAsB,wBAAwB,SAAkB,UAAmC;CACjG,IAAI,CAAC,QAAQ,MAAM,OAAO;CAC1B,OAAO,0BAA0B,QAAQ,MAAM,gBAAgB;EAC7D,MAAM,IAAI,MAAM,yBAAyB;GACzC;;AAGJ,eAAsB,4BACpB,SACA,UACmB;CACnB,IAAI,CAAC,QAAQ,MAAM,OAAO,IAAI,UAAU;CAExC,MAAM,SAAS,QAAQ,KAAK,WAAW;CACvC,MAAM,SAAuB,EAAE;CAC/B,IAAI,YAAY;CAEhB,SAAS;EACP,MAAM,SAAS,MAAM,OAAO,MAAM;EAClC,IAAI,OAAO,MAAM;EAEjB,aAAa,OAAO,MAAM;EAC1B,IAAI,YAAY,UAAU;GACxB,MAAM,OAAO,QAAQ;GACrB,MAAM,IAAI,MAAM,yBAAyB;;EAE3C,OAAO,KAAK,OAAO,MAAM;;CAG3B,MAAM,WAAW,IAAI,WAAW,UAAU;CAC1C,IAAI,SAAS;CACb,KAAK,MAAM,SAAS,QAAQ;EAC1B,SAAS,IAAI,OAAO,OAAO;EAC3B,UAAU,MAAM;;CAGlB,OAAO,IAAI,SAAS,UAAU,EAC5B,SAAS,EAAE,gBAAgB,QAAQ,QAAQ,IAAI,eAAe,IAAI,IAAI,EACvE,CAAC,CAAC,UAAU;;AAGf,SAAS,kBAAkB,OAAgD;CACzE,MAAM,SAAS,mBAAmB,MAAM;CACxC,IAAI,CAAC,QAAQ,OAAO;CAEpB,MAAM,WAAW,wBAAwB,OAAO;CAChD,IAAI,CAAC,UAAU,OAAO;CAEtB,OAAO;EACL,QAAQ,SAAS;EACjB,MAAM,SAAS,QAAQ;EACvB,KAAK,SAAS;EACf;;;;;;;;;;;;;;;;;;;;;;;;;AA0BH,SAAgB,4BAA4B,KAAa,UAA0B;CACjF,IAAI,CAAC,UAAU,OAAO;CACtB,IAAI,cAAc,IAAI,EAAE,OAAO;CAE/B,IAAI,YAAY,KAAK,SAAS,EAAE,OAAO;CAGvC,IAAI,CAAC,IAAI,WAAW,IAAI,EAAE,OAAO;CAIjC,MAAM,aAAa,IAAI,QAAQ,IAAI;CACnC,MAAM,YAAY,IAAI,QAAQ,IAAI;CAClC,MAAM,UACJ,eAAe,KAAK,YAAY,cAAc,KAAK,aAAa,KAAK,IAAI,YAAY,UAAU;CACjG,MAAM,WAAW,YAAY,KAAK,MAAM,IAAI,MAAM,GAAG,QAAQ;CAC7D,MAAM,SAAS,YAAY,KAAK,KAAK,IAAI,MAAM,QAAQ;CACvD,OAAO,GAAG,sBAAsB,UAAU,SAAS,GAAG;;AAGxD,SAAS,4BAA4B,OAA+B;CAClE,MAAM,SAAS,mBAAmB,MAAM;CACxC,IAAI,CAAC,QAAQ,OAAO;CAEpB,MAAM,YAAY,yBAAyB,OAAO;CAClD,IAAI,CAAC,aAAa,CAAC,OAAO,UAAU,UAAU,OAAO,EAAE,OAAO;CAE9D,OAAO,UAAU;;AAGnB,SAAS,gCACP,OACA,SAOU;CACV,QAAQ,2BAA2B;CACnC,QAAQ,MAAM,iCAAiC,MAAM;CACrD,QAAQ,mBACN,eAAe,MAAM,EACrB;EACE,MAAM,QAAQ;EACd,QAAQ,QAAQ,QAAQ;EACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;EAC/D,EACD;EAAE,YAAY;EAAc,WAAW,QAAQ;EAAe,WAAW;EAAU,CACpF;CACD,QAAQ,qBAAqB;CAC7B,OAAO,4BACL,QAAQ,IAAI,aAAa,eACrB,KAAA,IACA,2BAA2B,8BAA8B,MAAM,CACpE;;AAGH,SAAS,6BACP,UACA,SAIU;CACV,QAAQ,2BAA2B;CACnC,QAAQ,KAAK,+BAA+B,SAAS,CAAC;CACtD,QAAQ,qBAAqB;CAC7B,OAAO,oCAAoC;;AAG7C,SAAgB,iCACd,SACA,aACA,UACS;CACT,OACE,QAAQ,OAAO,aAAa,KAAK,UACjC,YAAY,WAAW,sBAAsB,IAC7C,CAAC;;AAIL,eAAsB,qCACpB,SAC0D;CAC1D,IAAI,CAAC,iCAAiC,QAAQ,SAAS,QAAQ,aAAa,QAAQ,SAAS,EAC3F,OAAO;CAIT,IAAI,QAAQ,QAAQ,QAAQ,IAAA,qBAA4B,EACtD,OAAO,6BAA6B,MAAM;EACxC,qBAAqB,QAAQ;EAC7B,2BAA2B,QAAQ;EACpC,CAAC;CAGJ,MAAM,eAAe,mBAAmB,QAAQ,SAAS,QAAQ,eAAe;CAChF,IAAI,cACF,OAAO;CAIT,IADsB,SAAS,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,KAAK,GACpE,GAAG,QAAQ,mBAAmB;EAC7C,QAAQ,qBAAqB;EAC7B,OAAO,yBAAyB;;CAGlC,IAAI;EACF,IAAI;EACJ,IAAI;GAIF,OAAO,MAAM,QAAQ,sBACnB,QAAQ,QAAQ,OAAO,EACvB,QAAQ,kBACT;WACM,OAAO;GACd,IAAI,sBAAsB,MAAM,EAAE;IAChC,QAAQ,qBAAqB;IAC7B,OAAO,yBAAyB;;GAElC,MAAM;;EAGR,MAAM,kBAAkB,MAAM,4BAA4B,KAAK;EAC/D,IAAI,iBAAiB;GACnB,QAAQ,qBAAqB;GAC7B,OAAO;;EAGT,MAAM,SAAS,MAAM,QAAQ,aAAa,KAAK;EAC/C,IAAI,CAAC,0BAA0B,OAAO,EACpC,OAAO;EAGT,IAAI,iBAAiD;EACrD,IAAI,cAAuB,KAAA;EAC3B,IAAI,eAAe;EACnB,IAAI;EACJ,MAAM,uBAAuB,QAAQ,sBAAsB,SAAS;EACpE,IAAI;GACF,eAAe,MAAM,QAAQ;WACtB,OAAO;GACd,iBAAiB,kBAAkB,MAAM;GACzC,IAAI,CAAC,gBAAgB;IACnB,cAAc;IACd,eAAe;IAGf,IAAI,EADF,4BAA4B,MAAM,KAAK,QAAQ,4BAA4B,OAAO,KAAK,GACrE;KAClB,QAAQ,MAAM,iCAAiC,MAAM;KACrD,QAAQ,mBACN,eAAe,MAAM,EACrB;MACE,MAAM,QAAQ;MACd,QAAQ,QAAQ,QAAQ;MACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;MAC/D,EACD;MAAE,YAAY;MAAc,WAAW,QAAQ;MAAe,WAAW;MAAU,CACpF;;;YAGG;GACR,QAAQ,sBAAsB,qBAAqB;;EAGrD,IAAI,CAAC,gBAAgB;GAOnB,MAAM,uBAAuB,QAAQ,2BAA2B;GAChE,MAAM,oBAAoB,QAAQ,0BAA0B;GAC5D,MAAM,mBAAmB,8BACvB,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;GAED,IAAI,cACF,OAAO;IACL,MAAM;IACN,WAAW;IACX;IACA;IACA,gBAAgB;IAChB,aAAa;IACb;IACD;GAIH,OAAO;IACL,MAAM;IACN,WAAW,MAHW,QAAQ,gBAAgB,cAAc,KAAK,IAGzC;IACxB,gBAAgB;IAChB,aAAa;IACb;IACD;;EAGH,MAAM,uBAAuB,qBAAqB,QAAQ,2BAA2B,CAAC;EACtF,MAAM,oBAAoB,QAAQ,0BAA0B;EAC5D,MAAM,yBAAyB,8BAC7B,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;EACD,QAAQ,qBAAqB;EAE7B,MAAM,UAAU,IAAI,SAAS;EAI7B,MAAM,sBAAsB,4BAC1B,eAAe,KACf,QAAQ,YAAY,GACrB;EACD,QAAQ,IAAI,YAAY,IAAI,IAAI,qBAAqB,QAAQ,QAAQ,IAAI,CAAC,UAAU,CAAC;EACrF,+BAA+B,SAAS,QAAQ,kBAAkB;EAClE,KAAK,MAAM,UAAU,sBACnB,QAAQ,OAAO,cAAc,OAAO;EAEtC,IAAI,mBACF,QAAQ,OAAO,cAAc,kBAAkB;EAEjD,2BAA2B,SAAS,uBAAuB;EAE3D,OAAO,IAAI,SAAS,MAAM;GACxB,QAAQ;GACR;GACD,CAAC;UACK,OAAO;EACd,IAAI,4BAA4B,OAAO,KAAK,EAC1C,OAAO,6BAA6B,MAAM;GACxC,qBAAqB,QAAQ;GAC7B,2BAA2B,QAAQ;GACpC,CAAC;EAGJ,mCAAmC;EACnC,QAAQ,2BAA2B;EACnC,QAAQ,MAAM,iDAAiD,MAAM;EACrE,QAAQ,mBACN,eAAe,MAAM,EACrB;GACE,MAAM,QAAQ;GACd,QAAQ,QAAQ,QAAQ;GACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;GAC/D,EACD;GAAE,YAAY;GAAc,WAAW,QAAQ;GAAe,WAAW;GAAU,CACpF;EACD,QAAQ,qBAAqB;EAC7B,OAAO,4BACL,QAAQ,IAAI,aAAa,eACrB,KAAA,IACA,mCAAmC,8BAA8B,MAAM,CAC5E;;;AAIL,eAAsB,6BAOpB,SAO0B;CAC1B,IAAI,QAAQ,QAAQ,OAAO,aAAa,KAAK,UAAU,CAAC,QAAQ,UAC9D,OAAO;CAOT,IAAI,QAAQ,QAAQ,QAAQ,IAAA,qBAA4B,EACtD,OAAO,6BAA6B,QAAQ,UAAU;EACpD,qBAAqB,QAAQ;EAC7B,2BAA2B,QAAQ;EACpC,CAAC;CAGJ,MAAM,eAAe,mBAAmB,QAAQ,SAAS,QAAQ,eAAe;CAChF,IAAI,cAAc,OAAO;CAGzB,IADsB,SAAS,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,KAAK,GACpE,GAAG,QAAQ,mBAAmB;EAC7C,QAAQ,qBAAqB;EAC7B,OAAO,yBAAyB;;CAGlC,IAAI;EACF,IAAI;EACJ,IAAI;GACF,OAAO,QAAQ,YAAY,WAAW,sBAAsB,GACxD,MAAM,QAAQ,sBAAsB,QAAQ,SAAS,QAAQ,kBAAkB,GAC/E,MAAM,QAAQ,kBAAkB,QAAQ,SAAS,QAAQ,kBAAkB;WACxE,OAAO;GACd,IAAI,sBAAsB,MAAM,EAAE;IAChC,QAAQ,qBAAqB;IAC7B,OAAO,yBAAyB;;GAElC,MAAM;;EAGR,MAAM,kBAAkB,MAAM,4BAA4B,KAAK;EAC/D,IAAI,iBAAiB;GACnB,QAAQ,qBAAqB;GAC7B,OAAO;;EAGT,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,QAAQ,iBAAiB,QAAQ,SAAS;WAClD,OAAO;GACd,IAAI,4BAA4B,OAAO,QAAQ,SAAS,EACtD,OAAO,6BAA6B,QAAQ,UAAU;IACpD,qBAAqB,QAAQ;IAC7B,2BAA2B,QAAQ;IACpC,CAAC;GAGJ,MAAM;;EAGR,IAAI,CAAC,0BAA0B,OAAO,EACpC,OAAO,6BAA6B,QAAQ,UAAU;GACpD,qBAAqB,QAAQ;GAC7B,2BAA2B,QAAQ;GACpC,CAAC;EAGJ,MAAM,sBAAsB,QAAQ,6BAA6B;EACjE,MAAM,OAAO,MAAM,QAAQ,YAAY,MAAM,EAAE,qBAAqB,CAAC;EACrE,IAAI;EACJ,IAAI,iBAAiD;EACrD,IAAI,eAAe;EACnB,MAAM,uBAAuB,QAAQ,sBAAsB,SAAS;EACpE,IAAI;GACF,IAAI;IACF,yBAAyB,KAAK;IAE9B,cAAc;KAAE,IAAI;KAAM,MAAA,MADP,OAAO,MAAM,MAAM,KAAK;KACX;YACzB,OAAO;IACd,iBAAiB,kBAAkB,MAAM;IACzC,IAAI,gBACF,cAAc;KAAE,IAAI;KAAM,MAAM,KAAA;KAAW;SACtC;KACL,MAAM,qBAAqB,4BAA4B,MAAM;KAC7D,IAAI,uBAAuB,MAAM;MAC/B,eAAe;MACf,cAAc;OAAE,IAAI;OAAO,MAAM;OAAO;YACnC;MACL,QAAQ,MAAM,iCAAiC,MAAM;MACrD,cAAc;OAAE,IAAI;OAAO,MAAM,QAAQ,uBAAuB,MAAM;OAAE;;;;YAItE;GACR,QAAQ,sBAAsB,qBAAqB;;EAGrD,IAAI,gBAAgB;GAClB,MAAM,uBAAuB,qBAAqB,QAAQ,2BAA2B,CAAC;GACtF,MAAM,oBAAoB,QAAQ,0BAA0B;GAC5D,MAAM,yBAAyB,8BAC7B,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;GACD,QAAQ,qBAAqB;GAC7B,MAAM,kBAAkB,IAAI,QAAQ;IAClC,gBAAgB;IAChB,MAAM;IACP,CAAC;GACF,uBAAuB,iBAAiB,QAAQ,cAAc;GAC9D,+BAA+B,iBAAiB,QAAQ,kBAAkB;GAC1E,8BAA8B,gBAAgB;GAK9C,gBAAgB,IACd,wBACA,4BAA4B,eAAe,KAAK,QAAQ,YAAY,GAAG,CACxE;GACD,gBAAgB,IAAI,6BAA6B,eAAe,KAAK;GACrE,gBAAgB,IAAI,+BAA+B,OAAO,eAAe,OAAO,CAAC;GACjF,KAAK,MAAM,UAAU,sBACnB,gBAAgB,OAAO,cAAc,OAAO;GAE9C,IAAI,mBAAmB,gBAAgB,OAAO,cAAc,kBAAkB;GAC9E,2BAA2B,iBAAiB,uBAAuB;GACnE,OAAO,IAAI,SAAS,IAAI;IAAE,QAAQ;IAAK,SAAS;IAAiB,CAAC;;EAGpE,MAAM,uBAAuB,qBAAqB,QAAQ,2BAA2B,CAAC;EACtF,MAAM,oBAAoB,QAAQ,0BAA0B;EAC5D,MAAM,yBAAyB,8BAC7B,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;EAGD,IADgC,2BAA2B,2BAC9B;GAC3B,MAAM,gBAAgB,QAAQ,wBAC5B,QAAQ,SACR,QAAQ,eACR,QAAQ,cACT;GACD,MAAM,YAAY,MAAM,QAAQ,uBAC9B,EAAE,aAAa,EACf;IAAE;IAAqB,SAAS;IAAe,CAChD;GAED,QAAQ,qBAAqB;GAE7B,MAAM,gBAAgB,IAAI,QAAQ;IAChC,gBAAgB;IAChB,MAAM;IACP,CAAC;GACF,uBAAuB,eAAe,QAAQ,cAAc;GAC5D,+BAA+B,eAAe,QAAQ,kBAAkB;GACxE,8BAA8B,cAAc;GAE5C,OAAO,IAAI,SAAS,WAAW;IAC7B,QAAQ,QAAQ,oBAAoB;IACpC,SAAS;IACV,CAAC;;EAGJ,MAAM,QAAQ,QAAQ,WAAW,QAAQ,cAAc;EACvD,IAAI;EACJ,IAAI,eAAe,QAAQ,MAAM,MAAM,UAAU,QAAQ;EACzD,IAAI,OAAO;GACT,MAAM,EAAE,OAAO,aAAa,QAAQ,iBAAiB;GACrD,MAAM,uBAAuB,mCAAmC;IAC9D,eAAe,QAAQ;IACvB,eAAe;IACf,cAAc;IACd,eAAe,QAAQ;IACvB,oBAAoB,QAAQ;IAC5B,gBAAgB,QAAQ;IACxB,cAAc,QAAQ;IACtB,iBAAiB,QAAQ;IAC1B,CAAC;GAEF,QAAQ,qBAAqB;IAC3B,UAAU,QAAQ;IAClB,cAAc,QAAQ;IACtB,QAAQ,qBAAqB;IAC9B,CAAC;GACF,yBACE,QAAQ,6BAA6B,qBAAqB,MAAM,IAAI,KACrE;GACD,UAAU,QAAQ,iBAAiB;IACjC,eAAe,QAAQ;IACvB,eAAe,qBAAqB;IACpC,cAAc,QAAQ;IACtB,oBAAoB,QAAQ;IAC5B,QAAQ,qBAAqB;IAC7B,SAAS,QAAQ;IACjB,OAAO,qBAAqB;IAC5B,cAAc,QAAQ;IACtB,YAAY;IACb,CAAC;GACF,eAAe,qBAAqB,MAAM;SACrC;GACL,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,eAAe,KAAK;GAC/E,UAAU,QAAQ,sBAAsB,cAAc;;EAGxD,MAAM,gBAAgB,QAAQ,wBAC5B,QAAQ,SACR,QAAQ,eACR,aACD;EACD,MAAM,YAAY,MAAM,QAAQ,uBAC9B;GAAE,MAAM;GAAS;GAAa,EAC9B;GAAE;GAAqB,SAAS;GAAe,CAChD;EAED,MAAM,gBAAgB,IAAI,QAAQ;GAChC,gBAAgB;GAChB,MAAM;GACP,CAAC;EACF,uBAAuB,eAAe,QAAQ,cAAc;EAC5D,+BAA+B,eAAe,QAAQ,kBAAkB;EACxE,8BAA8B,cAAc;EAC5C,2BAA2B,eAAe,uBAAuB;EACjE,MAAM,iBAAiB,IAAI,SAAS,WAAW;GAC7C,QAAQ,QAAQ,oBAAoB;GACpC,SAAS;GACV,CAAC;EACF,IAAI,qBAAqB,SAAS,KAAK,mBAAmB;GACxD,KAAK,MAAM,UAAU,sBACnB,eAAe,QAAQ,OAAO,cAAc,OAAO;GAErD,IAAI,mBAAmB,eAAe,QAAQ,OAAO,cAAc,kBAAkB;;EAEvF,OAAO;UACA,OAAO;EACd,mCAAmC;EACnC,OAAO,gCAAgC,OAAO;GAC5C,eAAe,QAAQ;GACvB,qBAAqB,QAAQ;GAC7B,2BAA2B,QAAQ;GACnC,oBAAoB,QAAQ;GAC5B,SAAS,QAAQ;GAClB,CAAC"}

package/dist/server/app-ssr-entry.d.ts

@@ -23,6 +23,12 @@ declare function handleSsr(rscStream: ReadableStream<Uint8Array>, navContext: Na
   };
   formState?: ReactFormState | null;
   basePath?: string;
+  /**
+   * Allow-list of OpenTelemetry propagation keys (from
+   * `experimental.clientTraceMetadata`) to render as `<meta>` tags in the
+   * SSR head. Undefined or empty disables emission entirely.
+   */
+  clientTraceMetadata?: readonly string[];
   rootParams?: RootParams;
   /** When true, wait for the full React tree (including Suspense boundaries)
    *  to resolve before returning the HTML stream. Used for static prerender

package/dist/server/app-ssr-entry.js

@@ -8,12 +8,14 @@ import { ServerInsertedHTMLContext, appRouterInstance, clearServerInsertedHTML,
 import { runWithNavigationContext } from "../shims/navigation-state.js";
 import { withScriptNonce } from "../shims/script-nonce-context.js";
 import { createInlineScriptTag, createNonceAttribute, escapeHtmlAttr, safeJsonStringify } from "./html.js";
+import { getClientTraceMetadataHTML } from "./client-trace-metadata.js";
 import { ElementsContext, Slot } from "../shims/slot.js";
 import { createNavigationRuntimeRscMetadataScript, createRscEmbedTransform, createTickBufferedTransform } from "./app-ssr-stream.js";
 import { RSC_FORM_STATE_GLOBAL } from "./app-browser-hydration.js";
 import { createClientReferencePreloader } from "./app-client-reference-preloader.js";
 import { deferUntilStreamConsumed } from "./app-page-stream.js";
 import { runWithRootParamsScope } from "../shims/root-params.js";
+import { BeforeInteractiveContext } from "../shims/before-interactive-context.js";
 import { createSsrErrorMetaRenderer } from "./app-ssr-error-meta.js";
 import { Fragment, createElement, use } from "react";
 import { renderToReadableStream, renderToStaticMarkup } from "react-dom/server.edge";
@@ -48,15 +50,48 @@ function renderInsertedHtml(insertedElements) {
 	} catch {}
 	return insertedHTML;
 }
-function renderFontHtml(fontData, nonce) {
+/**
+* Render captured `<Script strategy="beforeInteractive">` inline scripts to
+* HTML, ready to splice immediately after `<head ...>` opens. Each entry has
+* already had its inline content escaped via `escapeInlineContent(..., "script")`
+* inside the Script shim, so this function only quotes the attributes that
+* actually go on the tag (id, nonce, plus the residual passthroughs).
+*
+* Keeping this function colocated with the rest of the head-injection
+* helpers makes it obvious where the boundary is: anything passed through
+* here is being concatenated directly into HTML; treat the inputs
+* accordingly.
+*/
+const VALID_ATTR_NAME = /^[a-zA-Z][\w.-]*$/;
+function renderBeforeInteractiveInlineScripts(scripts) {
+	if (scripts.length === 0) return "";
+	let html = "";
+	for (const script of scripts) {
+		let attrs = "";
+		if (script.id) attrs += ` id="${escapeHtmlAttr(script.id)}"`;
+		attrs += createNonceAttribute(script.nonce);
+		if (script.attributes) for (const [key, value] of Object.entries(script.attributes)) {
+			if (!VALID_ATTR_NAME.test(key)) continue;
+			if (value === true) attrs += ` ${key}`;
+			else if (typeof value === "string") attrs += ` ${key}="${escapeHtmlAttr(value)}"`;
+		}
+		html += `<script${attrs}>${script.innerHTML}<\/script>`;
+	}
+	return html;
+}
+function renderFontHtml(fontData, nonce, options = {}) {
 	if (!fontData) return "";
 	let fontHTML = "";
 	const nonceAttr = createNonceAttribute(nonce);
+	const includeStyles = options.includeStyles ?? true;
 	for (const url of fontData.links ?? []) fontHTML += `<link rel="stylesheet"${nonceAttr} href="${escapeHtmlAttr(url)}" />\n`;
 	for (const preload of fontData.preloads ?? []) fontHTML += `<link rel="preload"${nonceAttr} href="${escapeHtmlAttr(preload.href)}" as="font" type="${escapeHtmlAttr(preload.type)}" crossorigin />\n`;
-	if (fontData.styles && fontData.styles.length > 0) fontHTML += `<style data-vinext-fonts${nonceAttr}>${fontData.styles.join("\n")}</style>\n`;
+	if (includeStyles && fontData.styles && fontData.styles.length > 0) fontHTML += `<style data-vinext-fonts${nonceAttr}>${fontData.styles.join("\n")}</style>\n`;
 	return fontHTML;
 }
+function hasInlineCssManifest(manifest) {
+	return manifest !== void 0 && Object.keys(manifest).length > 0;
+}
 /**
 * Extract the bootstrap module URL from the `import("...")` string that
 * `import.meta.viteRsc.loadBootstrapScriptContent("index")` returns.
@@ -119,7 +154,12 @@ async function handleSsr(rscStream, navContext, fontData, options) {
 				}
 				const flightRootElement = createElement(VinextFlightRoot);
 				const root = AppRouterContext ? createElement(AppRouterContext.Provider, { value: appRouterInstance }, flightRootElement) : flightRootElement;
-				const ssrRoot = withScriptNonce(ServerInsertedHTMLContext ? createElement(ServerInsertedHTMLContext.Provider, { value: useServerInsertedHTML }, root) : root, options?.scriptNonce);
+				const ssrTree = ServerInsertedHTMLContext ? createElement(ServerInsertedHTMLContext.Provider, { value: useServerInsertedHTML }, root) : root;
+				const beforeInteractiveInlineScripts = [];
+				const registerBeforeInteractiveInlineScript = (script) => {
+					beforeInteractiveInlineScripts.push(script);
+				};
+				const ssrRoot = withScriptNonce(createElement(BeforeInteractiveContext.Provider, { value: registerBeforeInteractiveInlineScript }, ssrTree), options?.scriptNonce);
 				const bootstrapModuleUrl = extractBootstrapModuleUrl(await import.meta.viteRsc.loadBootstrapScriptContent("index"));
 				const errorMetaRenderer = createSsrErrorMetaRenderer({ basePath: options?.basePath });
 				const htmlStream = await renderToReadableStream(ssrRoot, {
@@ -133,16 +173,27 @@ async function handleSsr(rscStream, navContext, fontData, options) {
 					}
 				});
 				if (options?.waitForAllReady === true) await htmlStream.allReady;
-				const fontHTML = renderFontHtml(fontData, options?.scriptNonce);
+				const inlineCssManifest = globalThis.__VINEXT_INLINE_CSS__;
+				const fontStyles = fontData?.styles ?? [];
+				const mergeFontStylesIntoInlineCss = fontStyles.length > 0 && hasInlineCssManifest(inlineCssManifest);
+				const inlineCssFontStyles = mergeFontStylesIntoInlineCss ? fontStyles.join("\n") : "";
+				const inlineCssFontStyleFallbackHTML = mergeFontStylesIntoInlineCss ? renderFontHtml({ styles: fontStyles }, options?.scriptNonce) : "";
+				const fontHTML = renderFontHtml(fontData, options?.scriptNonce, { includeStyles: !mergeFontStylesIntoInlineCss });
+				let traceMetaHTML = null;
+				const getTraceMetaHTML = () => {
+					if (traceMetaHTML === null) traceMetaHTML = getClientTraceMetadataHTML(options?.clientTraceMetadata);
+					return traceMetaHTML;
+				};
 				let didInjectHeadHTML = false;
 				const getInsertedHTML = () => {
 					const insertedHTML = renderInsertedHtml(renderServerInsertedHTML());
 					const errorMetaHTML = errorMetaRenderer.flush();
 					if (didInjectHeadHTML) return insertedHTML + errorMetaHTML;
 					didInjectHeadHTML = true;
-					return buildHeadInjectionHtml(navContext, bootstrapModuleUrl, options?.formState ?? null, insertedHTML + errorMetaHTML, fontHTML, options?.scriptNonce);
+					return buildHeadInjectionHtml(navContext, bootstrapModuleUrl, options?.formState ?? null, insertedHTML + errorMetaHTML + getTraceMetaHTML(), fontHTML, options?.scriptNonce);
 				};
-				return deferUntilStreamConsumed(htmlStream.pipeThrough(createTickBufferedTransform(rscEmbed, getInsertedHTML)), cleanup);
+				const getBeforeInteractiveHeadHTML = () => renderBeforeInteractiveInlineScripts(beforeInteractiveInlineScripts);
+				return deferUntilStreamConsumed(htmlStream.pipeThrough(createTickBufferedTransform(rscEmbed, getInsertedHTML, getBeforeInteractiveHeadHTML, inlineCssManifest, inlineCssFontStyles, inlineCssFontStyleFallbackHTML, options?.scriptNonce)), cleanup);
 			} catch (error) {
 				cleanup();
 				throw error;