vinext 0.0.54 → 0.1.0

package/dist/server/app-route-handler-execution.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-route-handler-execution.js","names":[],"sources":["../../src/server/app-route-handler-execution.ts"],"sourcesContent":["import type { NextI18nConfig } from \"../config/next-config.js\";\nimport { setHeadersContext, type HeadersAccessPhase } from \"vinext/shims/headers\";\nimport type { ExecutionContextLike } from \"vinext/shims/request-context\";\nimport type { CachedRouteValue } from \"vinext/shims/cache\";\nimport type { NextRequest } from \"vinext/shims/server\";\nimport {\n  createStaticGenerationHeadersContext,\n  getAppRouteStaticGenerationErrorMessage,\n} from \"./app-static-generation.js\";\nimport {\n  isPossibleAppRouteActionRequest,\n  resolveAppRouteHandlerSpecialError,\n  shouldApplyAppRouteHandlerRevalidateHeader,\n  shouldWriteAppRouteHandlerCache,\n  type AppRouteHandlerModule,\n} from \"./app-route-handler-policy.js\";\nimport {\n  applyRouteHandlerMiddlewareContext,\n  applyRouteHandlerRevalidateHeader,\n  assertSupportedAppRouteHandlerResponse,\n  buildAppRouteCacheValue,\n  finalizeRouteHandlerResponse,\n  markRouteHandlerCacheMiss,\n  type RouteHandlerMiddlewareContext,\n} from \"./app-route-handler-response.js\";\nimport {\n  createTrackedAppRouteRequest,\n  markKnownDynamicAppRoute,\n} from \"./app-route-handler-runtime.js\";\n\nexport type AppRouteParams = Record<string, string | string[]>;\nexport type AppRouteDynamicUsageFn = () => boolean;\nexport type MarkAppRouteDynamicUsageFn = () => void;\n/**\n * Route handler context.\n *\n * `params` is `null` for non-dynamic routes (no `[param]` segments) so that\n * user code like `params ? await params : null` resolves to `null`, matching\n * Next.js behavior. For dynamic routes it's a thenable that resolves to the\n * matched params object.\n *\n * See: test/e2e/app-dir/app-routes/app-custom-routes.test.ts in Next.js for\n * the authoritative assertion (`expect(meta.params).toEqual(null)`).\n */\nexport type AppRouteHandlerFunction = (\n  request: NextRequest,\n  context: { params: AppRouteParams | null },\n) => Response | Promise<Response>;\nexport type RouteHandlerCacheSetter = (\n  key: string,\n  data: CachedRouteValue,\n  revalidateSeconds: number,\n  tags: string[],\n  expireSeconds?: number,\n) => Promise<void>;\ntype AppRouteErrorReporter = (\n  error: Error,\n  request: { path: string; method: string; headers: Record<string, string> },\n  route: { routerKind: \"App Router\"; routePath: string; routeType: \"route\" },\n) => void;\nexport type AppRouteDebugLogger = (event: string, detail: string) => void;\n\ntype RunAppRouteHandlerOptions = {\n  basePath?: string;\n  consumeDynamicUsage: AppRouteDynamicUsageFn;\n  draftModeSecret?: string;\n  dynamicConfig?: string;\n  handlerFn: AppRouteHandlerFunction;\n  i18n?: NextI18nConfig | null;\n  markDynamicUsage: MarkAppRouteDynamicUsageFn;\n  middlewareRequestHeaders?: Headers | null;\n  /**\n   * `null` for non-dynamic routes. Passed through to the handler context\n   * unchanged — callers are expected to compute this from `route.isDynamic`.\n   */\n  params: AppRouteParams | null;\n  request: Request;\n  routePattern?: string;\n  setHeadersAccessPhase?: (phase: HeadersAccessPhase) => HeadersAccessPhase;\n};\n\ntype RunAppRouteHandlerResult = {\n  dynamicUsedInHandler: boolean;\n  response: Response;\n};\n\ntype ExecuteAppRouteHandlerOptions = {\n  buildPageCacheTags: (pathname: string, extraTags: string[]) => string[];\n  clearRequestContext: () => void;\n  cleanPathname: string;\n  executionContext: ExecutionContextLike | null;\n  getAndClearPendingCookies: () => string[];\n  getCollectedFetchTags: () => string[];\n  getDraftModeCookieHeader: () => string | null | undefined;\n  handler: AppRouteHandlerModule;\n  isAutoHead: boolean;\n  isProduction: boolean;\n  isrDebug?: AppRouteDebugLogger;\n  isrRouteKey: (pathname: string) => string;\n  isrSet: RouteHandlerCacheSetter;\n  method: string;\n  middlewareContext: RouteHandlerMiddlewareContext;\n  reportRequestError: AppRouteErrorReporter;\n  expireSeconds?: number;\n  revalidateSeconds: number | null;\n  routePattern: string;\n  setHeadersAccessPhase: (phase: HeadersAccessPhase) => HeadersAccessPhase;\n} & RunAppRouteHandlerOptions;\n\nfunction configureAppRouteStaticGenerationContext(options: RunAppRouteHandlerOptions): void {\n  if (options.dynamicConfig === \"force-static\" || options.dynamicConfig === \"error\") {\n    setHeadersContext(\n      createStaticGenerationHeadersContext({\n        draftModeSecret: options.draftModeSecret,\n        dynamicConfig: options.dynamicConfig,\n        routeKind: \"route\",\n        routePattern: options.routePattern,\n      }),\n    );\n    options.setHeadersAccessPhase?.(\"route-handler\");\n  }\n}\n\nexport async function runAppRouteHandler(\n  options: RunAppRouteHandlerOptions,\n): Promise<RunAppRouteHandlerResult> {\n  options.consumeDynamicUsage();\n  configureAppRouteStaticGenerationContext(options);\n  const trackedRequest = createTrackedAppRouteRequest(options.request, {\n    basePath: options.basePath,\n    i18n: options.i18n,\n    middlewareHeaders: options.middlewareRequestHeaders,\n    onDynamicAccess() {\n      options.markDynamicUsage();\n    },\n    requestMode:\n      options.dynamicConfig === \"force-static\" || options.dynamicConfig === \"error\"\n        ? options.dynamicConfig\n        : \"auto\",\n    staticGenerationErrorMessage(expression) {\n      return getAppRouteStaticGenerationErrorMessage(options.routePattern, expression);\n    },\n  });\n  const response = await options.handlerFn(trackedRequest.request, {\n    params: options.params,\n  });\n\n  return {\n    dynamicUsedInHandler: options.consumeDynamicUsage(),\n    response,\n  };\n}\n\nexport async function executeAppRouteHandler(\n  options: ExecuteAppRouteHandlerOptions,\n): Promise<Response> {\n  const previousHeadersPhase = options.setHeadersAccessPhase(\"route-handler\");\n\n  try {\n    const { dynamicUsedInHandler, response } = await runAppRouteHandler({\n      ...options,\n      dynamicConfig: options.handler.dynamic,\n    });\n    assertSupportedAppRouteHandlerResponse(response);\n    const handlerSetCacheControl = response.headers.has(\"cache-control\");\n\n    if (dynamicUsedInHandler) {\n      markKnownDynamicAppRoute(options.routePattern);\n    }\n\n    if (\n      shouldApplyAppRouteHandlerRevalidateHeader({\n        dynamicUsedInHandler,\n        handlerSetCacheControl,\n        isAutoHead: options.isAutoHead,\n        method: options.method,\n        revalidateSeconds: options.revalidateSeconds,\n      })\n    ) {\n      const revalidateSeconds = options.revalidateSeconds;\n      if (revalidateSeconds == null) {\n        throw new Error(\"Expected route handler revalidate seconds\");\n      }\n      applyRouteHandlerRevalidateHeader(response, revalidateSeconds, options.expireSeconds);\n    }\n\n    if (\n      shouldWriteAppRouteHandlerCache({\n        dynamicConfig: options.handler.dynamic,\n        dynamicUsedInHandler,\n        handlerSetCacheControl,\n        isAutoHead: options.isAutoHead,\n        isProduction: options.isProduction,\n        method: options.method,\n        revalidateSeconds: options.revalidateSeconds,\n      })\n    ) {\n      markRouteHandlerCacheMiss(response);\n      const routeClone = response.clone();\n      const routeKey = options.isrRouteKey(options.cleanPathname);\n      const revalidateSeconds = options.revalidateSeconds;\n      if (revalidateSeconds == null) {\n        throw new Error(\"Expected route handler cache revalidate seconds\");\n      }\n      const routeTags = options.buildPageCacheTags(\n        options.cleanPathname,\n        options.getCollectedFetchTags(),\n      );\n      const routeWritePromise = (async () => {\n        try {\n          const routeCacheValue = await buildAppRouteCacheValue(routeClone);\n          await options.isrSet(\n            routeKey,\n            routeCacheValue,\n            revalidateSeconds,\n            routeTags,\n            options.expireSeconds,\n          );\n          options.isrDebug?.(\"route cache written\", routeKey);\n        } catch (cacheErr) {\n          console.error(\"[vinext] ISR route cache write error:\", cacheErr);\n        }\n      })();\n      options.executionContext?.waitUntil(routeWritePromise);\n    }\n\n    const pendingCookies = options.getAndClearPendingCookies();\n    const draftCookie = options.getDraftModeCookieHeader();\n    options.clearRequestContext();\n\n    return applyRouteHandlerMiddlewareContext(\n      finalizeRouteHandlerResponse(response, {\n        pendingCookies,\n        draftCookie,\n        isHead: options.isAutoHead,\n      }),\n      options.middlewareContext,\n    );\n  } catch (error) {\n    const pendingCookies = options.getAndClearPendingCookies();\n    const draftCookie = options.getDraftModeCookieHeader();\n    const specialError = resolveAppRouteHandlerSpecialError(error, options.request.url, {\n      isAction: isPossibleAppRouteActionRequest(options.request),\n    });\n    options.clearRequestContext();\n\n    if (specialError) {\n      if (specialError.kind === \"redirect\") {\n        return applyRouteHandlerMiddlewareContext(\n          finalizeRouteHandlerResponse(\n            new Response(null, {\n              status: specialError.statusCode,\n              headers: { Location: specialError.location },\n            }),\n            {\n              pendingCookies,\n              draftCookie,\n              isHead: options.isAutoHead,\n            },\n          ),\n          options.middlewareContext,\n        );\n      }\n\n      return applyRouteHandlerMiddlewareContext(\n        new Response(null, { status: specialError.statusCode }),\n        options.middlewareContext,\n      );\n    }\n\n    console.error(\"[vinext] Route handler error:\", error);\n    options.reportRequestError(\n      error instanceof Error ? error : new Error(String(error)),\n      {\n        path: options.cleanPathname,\n        method: options.request.method,\n        headers: Object.fromEntries(options.request.headers.entries()),\n      },\n      {\n        routerKind: \"App Router\",\n        routePath: options.routePattern,\n        routeType: \"route\",\n      },\n    );\n\n    return applyRouteHandlerMiddlewareContext(\n      new Response(null, { status: 500 }),\n      options.middlewareContext,\n    );\n  } finally {\n    options.setHeadersAccessPhase(previousHeadersPhase);\n  }\n}\n"],"mappings":";;;;;;AA6GA,SAAS,yCAAyC,SAA0C;CAC1F,IAAI,QAAQ,kBAAkB,kBAAkB,QAAQ,kBAAkB,SAAS;EACjF,kBACE,qCAAqC;GACnC,iBAAiB,QAAQ;GACzB,eAAe,QAAQ;GACvB,WAAW;GACX,cAAc,QAAQ;GACvB,CAAC,CACH;EACD,QAAQ,wBAAwB,gBAAgB;;;AAIpD,eAAsB,mBACpB,SACmC;CACnC,QAAQ,qBAAqB;CAC7B,yCAAyC,QAAQ;CACjD,MAAM,iBAAiB,6BAA6B,QAAQ,SAAS;EACnE,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,mBAAmB,QAAQ;EAC3B,kBAAkB;GAChB,QAAQ,kBAAkB;;EAE5B,aACE,QAAQ,kBAAkB,kBAAkB,QAAQ,kBAAkB,UAClE,QAAQ,gBACR;EACN,6BAA6B,YAAY;GACvC,OAAO,wCAAwC,QAAQ,cAAc,WAAW;;EAEnF,CAAC;CACF,MAAM,WAAW,MAAM,QAAQ,UAAU,eAAe,SAAS,EAC/D,QAAQ,QAAQ,QACjB,CAAC;CAEF,OAAO;EACL,sBAAsB,QAAQ,qBAAqB;EACnD;EACD;;AAGH,eAAsB,uBACpB,SACmB;CACnB,MAAM,uBAAuB,QAAQ,sBAAsB,gBAAgB;CAE3E,IAAI;EACF,MAAM,EAAE,sBAAsB,aAAa,MAAM,mBAAmB;GAClE,GAAG;GACH,eAAe,QAAQ,QAAQ;GAChC,CAAC;EACF,uCAAuC,SAAS;EAChD,MAAM,yBAAyB,SAAS,QAAQ,IAAI,gBAAgB;EAEpE,IAAI,sBACF,yBAAyB,QAAQ,aAAa;EAGhD,IACE,2CAA2C;GACzC;GACA;GACA,YAAY,QAAQ;GACpB,QAAQ,QAAQ;GAChB,mBAAmB,QAAQ;GAC5B,CAAC,EACF;GACA,MAAM,oBAAoB,QAAQ;GAClC,IAAI,qBAAqB,MACvB,MAAM,IAAI,MAAM,4CAA4C;GAE9D,kCAAkC,UAAU,mBAAmB,QAAQ,cAAc;;EAGvF,IACE,gCAAgC;GAC9B,eAAe,QAAQ,QAAQ;GAC/B;GACA;GACA,YAAY,QAAQ;GACpB,cAAc,QAAQ;GACtB,QAAQ,QAAQ;GAChB,mBAAmB,QAAQ;GAC5B,CAAC,EACF;GACA,0BAA0B,SAAS;GACnC,MAAM,aAAa,SAAS,OAAO;GACnC,MAAM,WAAW,QAAQ,YAAY,QAAQ,cAAc;GAC3D,MAAM,oBAAoB,QAAQ;GAClC,IAAI,qBAAqB,MACvB,MAAM,IAAI,MAAM,kDAAkD;GAEpE,MAAM,YAAY,QAAQ,mBACxB,QAAQ,eACR,QAAQ,uBAAuB,CAChC;GACD,MAAM,qBAAqB,YAAY;IACrC,IAAI;KACF,MAAM,kBAAkB,MAAM,wBAAwB,WAAW;KACjE,MAAM,QAAQ,OACZ,UACA,iBACA,mBACA,WACA,QAAQ,cACT;KACD,QAAQ,WAAW,uBAAuB,SAAS;aAC5C,UAAU;KACjB,QAAQ,MAAM,yCAAyC,SAAS;;OAEhE;GACJ,QAAQ,kBAAkB,UAAU,kBAAkB;;EAGxD,MAAM,iBAAiB,QAAQ,2BAA2B;EAC1D,MAAM,cAAc,QAAQ,0BAA0B;EACtD,QAAQ,qBAAqB;EAE7B,OAAO,mCACL,6BAA6B,UAAU;GACrC;GACA;GACA,QAAQ,QAAQ;GACjB,CAAC,EACF,QAAQ,kBACT;UACM,OAAO;EACd,MAAM,iBAAiB,QAAQ,2BAA2B;EAC1D,MAAM,cAAc,QAAQ,0BAA0B;EACtD,MAAM,eAAe,mCAAmC,OAAO,QAAQ,QAAQ,KAAK,EAClF,UAAU,gCAAgC,QAAQ,QAAQ,EAC3D,CAAC;EACF,QAAQ,qBAAqB;EAE7B,IAAI,cAAc;GAChB,IAAI,aAAa,SAAS,YACxB,OAAO,mCACL,6BACE,IAAI,SAAS,MAAM;IACjB,QAAQ,aAAa;IACrB,SAAS,EAAE,UAAU,aAAa,UAAU;IAC7C,CAAC,EACF;IACE;IACA;IACA,QAAQ,QAAQ;IACjB,CACF,EACD,QAAQ,kBACT;GAGH,OAAO,mCACL,IAAI,SAAS,MAAM,EAAE,QAAQ,aAAa,YAAY,CAAC,EACvD,QAAQ,kBACT;;EAGH,QAAQ,MAAM,iCAAiC,MAAM;EACrD,QAAQ,mBACN,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,EACzD;GACE,MAAM,QAAQ;GACd,QAAQ,QAAQ,QAAQ;GACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;GAC/D,EACD;GACE,YAAY;GACZ,WAAW,QAAQ;GACnB,WAAW;GACZ,CACF;EAED,OAAO,mCACL,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC,EACnC,QAAQ,kBACT;WACO;EACR,QAAQ,sBAAsB,qBAAqB"}

package/dist/server/app-route-handler-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-route-handler-policy.js","names":[],"sources":["../../src/server/app-route-handler-policy.ts"],"sourcesContent":["import {\n  buildRouteHandlerAllowHeader,\n  collectRouteHandlerMethods,\n  type RouteHandlerHttpMethod,\n  type RouteHandlerModule,\n} from \"./app-route-handler-runtime.js\";\nimport { NEXT_ACTION_HEADER, RSC_ACTION_HEADER } from \"./headers.js\";\nimport { parseNextHttpErrorDigest, parseNextRedirectDigest } from \"./next-error-digest.js\";\n\nexport type AppRouteHandlerModule = {\n  dynamic?: string;\n  revalidate?: unknown;\n} & RouteHandlerModule;\n\ntype AppRouteHandlerFunction = (...args: unknown[]) => unknown;\n\ntype ResolvedAppRouteHandlerMethod = {\n  allowHeaderForOptions: string;\n  exportedMethods: RouteHandlerHttpMethod[];\n  handlerFn: AppRouteHandlerFunction | undefined;\n  isAutoHead: boolean;\n  shouldAutoRespondToOptions: boolean;\n};\n\ntype AppRouteHandlerCacheReadOptions = {\n  dynamicConfig?: string;\n  handlerFn: unknown;\n  isAutoHead: boolean;\n  isKnownDynamic: boolean;\n  isProduction: boolean;\n  method: string;\n  revalidateSeconds: number | null;\n};\n\ntype AppRouteHandlerResponseCacheOptions = {\n  dynamicConfig?: string;\n  dynamicUsedInHandler: boolean;\n  handlerSetCacheControl: boolean;\n  isAutoHead: boolean;\n  isProduction: boolean;\n  method: string;\n  revalidateSeconds: number | null;\n};\n\ntype AppRouteHandlerSpecialError =\n  | {\n      kind: \"redirect\";\n      location: string;\n      statusCode: number;\n    }\n  | {\n      kind: \"status\";\n      statusCode: number;\n    };\n\ntype AppRouteHandlerSpecialErrorOptions = {\n  isAction: boolean;\n};\n\nexport function isPossibleAppRouteActionRequest(\n  request: Pick<Request, \"headers\" | \"method\">,\n): boolean {\n  if (request.method.toUpperCase() !== \"POST\") return false;\n\n  const contentType = request.headers.get(\"content-type\");\n  return (\n    request.headers.has(RSC_ACTION_HEADER) ||\n    request.headers.has(NEXT_ACTION_HEADER) ||\n    // Next.js uses strict equality here, so charset variants intentionally do\n    // not classify as action requests even though they are valid form posts.\n    contentType === \"application/x-www-form-urlencoded\" ||\n    contentType?.startsWith(\"multipart/form-data\") === true\n  );\n}\n\nexport function getAppRouteHandlerRevalidateSeconds(\n  handler: Pick<AppRouteHandlerModule, \"revalidate\">,\n): number | null {\n  // 0 is a meaningful value (\"never cache\") and must be preserved so the\n  // header path can emit a no-store Cache-Control.\n  // revalidate = false means \"cache indefinitely\" (Next.js segment config\n  // parity) — return Infinity to signal the cache-later path.\n  const { revalidate } = handler;\n  if (revalidate === false) return Infinity;\n  if (typeof revalidate !== \"number\" || !Number.isFinite(revalidate) || revalidate < 0) {\n    return null;\n  }\n  return revalidate;\n}\n\nexport function hasAppRouteHandlerDefaultExport(handler: RouteHandlerModule): boolean {\n  return typeof handler.default === \"function\";\n}\n\nexport function resolveAppRouteHandlerMethod(\n  handler: AppRouteHandlerModule,\n  method: string,\n): ResolvedAppRouteHandlerMethod {\n  const exportedMethods = collectRouteHandlerMethods(handler);\n  const allowHeaderForOptions = buildRouteHandlerAllowHeader(exportedMethods);\n  const shouldAutoRespondToOptions = method === \"OPTIONS\" && typeof handler.OPTIONS !== \"function\";\n\n  let handlerFn =\n    typeof handler[method as RouteHandlerHttpMethod] === \"function\"\n      ? (handler[method as RouteHandlerHttpMethod] as AppRouteHandlerFunction)\n      : undefined;\n  let isAutoHead = false;\n\n  if (\n    method === \"HEAD\" &&\n    typeof handler.HEAD !== \"function\" &&\n    typeof handler.GET === \"function\"\n  ) {\n    handlerFn = handler.GET as AppRouteHandlerFunction;\n    isAutoHead = true;\n  }\n\n  return {\n    allowHeaderForOptions,\n    exportedMethods,\n    handlerFn,\n    isAutoHead,\n    shouldAutoRespondToOptions,\n  };\n}\n\nexport function shouldReadAppRouteHandlerCache(options: AppRouteHandlerCacheReadOptions): boolean {\n  // revalidateSeconds === 0 means \"never cache\" and must skip the ISR read.\n  // A previously written entry (e.g. from before the handler opted out)\n  // must never be replayed once the author set revalidate = 0.\n  return (\n    options.isProduction &&\n    options.revalidateSeconds !== null &&\n    options.revalidateSeconds > 0 &&\n    options.revalidateSeconds !== Infinity &&\n    options.dynamicConfig !== \"force-dynamic\" &&\n    !options.isKnownDynamic &&\n    (options.method === \"GET\" || options.isAutoHead) &&\n    typeof options.handlerFn === \"function\"\n  );\n}\n\nexport function shouldApplyAppRouteHandlerRevalidateHeader(\n  options: Omit<AppRouteHandlerResponseCacheOptions, \"dynamicConfig\" | \"isProduction\">,\n): boolean {\n  // Includes revalidateSeconds === 0. That case emits the no-store\n  // Cache-Control, which is exactly the header a never-cache handler\n  // needs to suppress heuristic caching.\n  return (\n    options.revalidateSeconds !== null &&\n    !options.dynamicUsedInHandler &&\n    (options.method === \"GET\" || options.isAutoHead) &&\n    !options.handlerSetCacheControl\n  );\n}\n\nexport function shouldWriteAppRouteHandlerCache(\n  options: AppRouteHandlerResponseCacheOptions,\n): boolean {\n  // Excludes revalidateSeconds === 0. A never-cache response must not be\n  // persisted to ISR, even though it still needs a Cache-Control header.\n  return (\n    options.isProduction &&\n    options.revalidateSeconds !== null &&\n    options.revalidateSeconds > 0 &&\n    options.revalidateSeconds !== Infinity &&\n    options.dynamicConfig !== \"force-dynamic\" &&\n    shouldApplyAppRouteHandlerRevalidateHeader(options)\n  );\n}\n\nexport function resolveAppRouteHandlerSpecialError(\n  error: unknown,\n  requestUrl: string,\n  options?: AppRouteHandlerSpecialErrorOptions,\n): AppRouteHandlerSpecialError | null {\n  if (!(error && typeof error === \"object\" && \"digest\" in error)) {\n    return null;\n  }\n\n  const digest = String(error.digest);\n  const redirect = parseNextRedirectDigest(digest);\n  if (redirect) {\n    return {\n      kind: \"redirect\",\n      location: new URL(redirect.url, requestUrl).toString(),\n      statusCode: options?.isAction ? 303 : redirect.status,\n    };\n  }\n\n  const httpError = parseNextHttpErrorDigest(digest);\n  if (httpError) {\n    return {\n      kind: \"status\",\n      statusCode: httpError.status,\n    };\n  }\n\n  return null;\n}\n"],"mappings":";;;;AA2DA,SAAgB,gCACd,SACS;CACT,IAAI,QAAQ,OAAO,aAAa,KAAK,QAAQ,OAAO;CAEpD,MAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;CACvD,OACE,QAAQ,QAAQ,IAAA,eAAsB,IACtC,QAAQ,QAAQ,IAAA,cAAuB,IAGvC,gBAAgB,uCAChB,aAAa,WAAW,sBAAsB,KAAK;;AAIvD,SAAgB,oCACd,SACe;CAKf,MAAM,EAAE,eAAe;CACvB,IAAI,eAAe,OAAO,OAAO;CACjC,IAAI,OAAO,eAAe,YAAY,CAAC,OAAO,SAAS,WAAW,IAAI,aAAa,GACjF,OAAO;CAET,OAAO;;AAGT,SAAgB,gCAAgC,SAAsC;CACpF,OAAO,OAAO,QAAQ,YAAY;;AAGpC,SAAgB,6BACd,SACA,QAC+B;CAC/B,MAAM,kBAAkB,2BAA2B,QAAQ;CAC3D,MAAM,wBAAwB,6BAA6B,gBAAgB;CAC3E,MAAM,6BAA6B,WAAW,aAAa,OAAO,QAAQ,YAAY;CAEtF,IAAI,YACF,OAAO,QAAQ,YAAsC,aAChD,QAAQ,UACT,KAAA;CACN,IAAI,aAAa;CAEjB,IACE,WAAW,UACX,OAAO,QAAQ,SAAS,cACxB,OAAO,QAAQ,QAAQ,YACvB;EACA,YAAY,QAAQ;EACpB,aAAa;;CAGf,OAAO;EACL;EACA;EACA;EACA;EACA;EACD;;AAGH,SAAgB,+BAA+B,SAAmD;CAIhG,OACE,QAAQ,gBACR,QAAQ,sBAAsB,QAC9B,QAAQ,oBAAoB,KAC5B,QAAQ,sBAAsB,YAC9B,QAAQ,kBAAkB,mBAC1B,CAAC,QAAQ,mBACR,QAAQ,WAAW,SAAS,QAAQ,eACrC,OAAO,QAAQ,cAAc;;AAIjC,SAAgB,2CACd,SACS;CAIT,OACE,QAAQ,sBAAsB,QAC9B,CAAC,QAAQ,yBACR,QAAQ,WAAW,SAAS,QAAQ,eACrC,CAAC,QAAQ;;AAIb,SAAgB,gCACd,SACS;CAGT,OACE,QAAQ,gBACR,QAAQ,sBAAsB,QAC9B,QAAQ,oBAAoB,KAC5B,QAAQ,sBAAsB,YAC9B,QAAQ,kBAAkB,mBAC1B,2CAA2C,QAAQ;;AAIvD,SAAgB,mCACd,OACA,YACA,SACoC;CACpC,IAAI,EAAE,SAAS,OAAO,UAAU,YAAY,YAAY,QACtD,OAAO;CAGT,MAAM,SAAS,OAAO,MAAM,OAAO;CACnC,MAAM,WAAW,wBAAwB,OAAO;CAChD,IAAI,UACF,OAAO;EACL,MAAM;EACN,UAAU,IAAI,IAAI,SAAS,KAAK,WAAW,CAAC,UAAU;EACtD,YAAY,SAAS,WAAW,MAAM,SAAS;EAChD;CAGH,MAAM,YAAY,yBAAyB,OAAO;CAClD,IAAI,WACF,OAAO;EACL,MAAM;EACN,YAAY,UAAU;EACvB;CAGH,OAAO"}

package/dist/server/app-route-handler-response.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-route-handler-response.js","names":[],"sources":["../../src/server/app-route-handler-response.ts"],"sourcesContent":["import type { CachedRouteValue, CacheControlMetadata } from \"vinext/shims/cache\";\nimport {\n  buildCachedRevalidateCacheControl,\n  NEVER_CACHE_CONTROL,\n  STATIC_CACHE_CONTROL,\n} from \"./cache-control.js\";\nimport {\n  MIDDLEWARE_HEADER_PREFIX,\n  MIDDLEWARE_NEXT_HEADER,\n  MIDDLEWARE_REWRITE_HEADER,\n  NEXTJS_CACHE_HEADER,\n  VINEXT_CACHE_HEADER,\n} from \"./headers.js\";\nimport { setCacheStateHeaders } from \"./cache-headers.js\";\nimport { mergeMiddlewareResponseHeaders } from \"./middleware-response-headers.js\";\nimport { processMiddlewareHeaders } from \"./request-pipeline.js\";\nimport { getSetCookieName } from \"./cookie-utils.js\";\n\nexport type RouteHandlerMiddlewareContext = {\n  headers: Headers | null;\n  status: number | null;\n};\n\ntype BuildRouteHandlerCachedResponseOptions = {\n  cacheControl?: CacheControlMetadata;\n  cacheState: \"HIT\" | \"STALE\";\n  expireSeconds?: number;\n  isHead: boolean;\n  revalidateSeconds: number;\n};\n\ntype FinalizeRouteHandlerResponseOptions = {\n  pendingCookies: string[];\n  draftCookie?: string | null;\n  isHead: boolean;\n};\n\nconst APP_ROUTE_REWRITE_ERROR =\n  \"NextResponse.rewrite() was used in a app route handler, this is not currently supported. Please remove the invocation to continue.\";\nconst APP_ROUTE_NEXT_ERROR =\n  \"NextResponse.next() was used in a app route handler, this is not supported. See here for more info: https://nextjs.org/docs/messages/next-response-next-in-app-route-handler\";\n\nfunction hasMiddlewareHeader(headers: Headers): boolean {\n  for (const key of headers.keys()) {\n    if (key.startsWith(MIDDLEWARE_HEADER_PREFIX)) return true;\n  }\n  return false;\n}\n\nfunction buildRouteHandlerCacheControl(\n  cacheState: BuildRouteHandlerCachedResponseOptions[\"cacheState\"],\n  revalidateSeconds: number,\n  expireSeconds?: number,\n): string {\n  if (revalidateSeconds === 0) {\n    // A cached response is never produced for revalidate = 0 (the ISR write\n    // path skips it), so only the HIT/STALE->fresh rewrite can arrive here\n    // with a 0 value, via applyRouteHandlerRevalidateHeader. In all such\n    // cases the author opted out of caching entirely.\n    return NEVER_CACHE_CONTROL;\n  }\n\n  if (revalidateSeconds === Infinity) {\n    // revalidate = false / Infinity means \"cache indefinitely\" — emit the\n    // same static Cache-Control used by pages, not a dynamic SWR value.\n    return STATIC_CACHE_CONTROL;\n  }\n\n  return buildCachedRevalidateCacheControl(cacheState, revalidateSeconds, expireSeconds);\n}\n\nexport function applyRouteHandlerMiddlewareContext(\n  response: Response,\n  middlewareContext: RouteHandlerMiddlewareContext,\n): Response {\n  if (!middlewareContext.headers && middlewareContext.status == null) {\n    return response;\n  }\n\n  const responseHeaders = new Headers(response.headers);\n  mergeMiddlewareResponseHeaders(responseHeaders, middlewareContext.headers);\n\n  return new Response(response.body, {\n    status: middlewareContext.status ?? response.status,\n    statusText: response.statusText,\n    headers: responseHeaders,\n  });\n}\n\nexport function assertSupportedAppRouteHandlerResponse(response: Response): void {\n  // NextResponse.next() and rewrite() are middleware control-flow signals.\n  // Once an App Route handler has returned, Next.js rejects those responses.\n  if (response.headers.has(MIDDLEWARE_REWRITE_HEADER)) {\n    throw new Error(APP_ROUTE_REWRITE_ERROR);\n  }\n\n  if (response.headers.get(MIDDLEWARE_NEXT_HEADER) === \"1\") {\n    throw new Error(APP_ROUTE_NEXT_ERROR);\n  }\n}\n\nexport function buildRouteHandlerCachedResponse(\n  cachedValue: CachedRouteValue,\n  options: BuildRouteHandlerCachedResponseOptions,\n): Response {\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(cachedValue.headers)) {\n    if (Array.isArray(value)) {\n      for (const entry of value) {\n        headers.append(key, entry);\n      }\n    } else {\n      headers.set(key, value);\n    }\n  }\n  setCacheStateHeaders(headers, options.cacheState);\n  const revalidateSeconds = options.cacheControl?.revalidate ?? options.revalidateSeconds;\n  const expireSeconds =\n    options.cacheControl === undefined\n      ? undefined\n      : (options.cacheControl.expire ?? options.expireSeconds);\n  headers.set(\n    \"Cache-Control\",\n    buildRouteHandlerCacheControl(options.cacheState, revalidateSeconds, expireSeconds),\n  );\n\n  return new Response(options.isHead ? null : cachedValue.body, {\n    status: cachedValue.status,\n    headers,\n  });\n}\n\nexport function applyRouteHandlerRevalidateHeader(\n  response: Response,\n  revalidateSeconds: number,\n  expireSeconds?: number,\n): void {\n  response.headers.set(\n    \"cache-control\",\n    buildRouteHandlerCacheControl(\"HIT\", revalidateSeconds, expireSeconds),\n  );\n}\n\nexport function markRouteHandlerCacheMiss(response: Response): void {\n  setCacheStateHeaders(response.headers, \"MISS\");\n}\n\n/**\n * Returns true when the given Set-Cookie string already declares any of the\n * attributes that follow the first `;` (case-insensitively). Used to detect\n * whether a user-emitted Set-Cookie line already carries an explicit `Path=`,\n * matching Next.js's `appendMutableCookies` which re-runs every cookie through\n * `ResponseCookies.set` (and therefore picks up the `Path=/` default for any\n * cookie that didn't supply one).\n */\nfunction hasCookieAttribute(cookie: string, attributeName: string): boolean {\n  const target = attributeName.toLowerCase();\n  // Skip past the first '=' (the cookie value separator) so we don't match\n  // `attributeName=` inside the cookie value itself.\n  let i = cookie.indexOf(\";\");\n  while (i !== -1) {\n    // Trim leading whitespace after the ';'\n    let start = i + 1;\n    while (start < cookie.length && cookie[start] === \" \") start++;\n    const next = cookie.indexOf(\";\", start);\n    const end = next === -1 ? cookie.length : next;\n    const eq = cookie.indexOf(\"=\", start);\n    const attrEnd = eq === -1 || eq > end ? end : eq;\n    const attr = cookie.slice(start, attrEnd).trim().toLowerCase();\n    if (attr === target) {\n      return true;\n    }\n    i = next;\n  }\n  return false;\n}\n\n/**\n * Ensure each Set-Cookie line carries `Path=/` by default — Next.js's\n * `appendMutableCookies` re-runs every returned cookie through\n * `ResponseCookies.set`, which normalises a missing `path` to `/`. Without\n * this, a raw `new Response(..., { headers: [['Set-Cookie', 'bar=bar2']] })`\n * lands without `Path=/` and tests that assert on the full attribute set\n * (e.g. Next.js's `app-action.test.ts` route-handler-overrides case, see\n * issue #1484) break.\n */\nfunction normalizeReturnedCookie(cookie: string): string {\n  if (hasCookieAttribute(cookie, \"Path\")) {\n    return cookie;\n  }\n  return `${cookie}; Path=/`;\n}\n\nfunction applyMutableCookieFallbacks(headers: Headers, pendingCookies: string[]): void {\n  if (pendingCookies.length === 0) {\n    return;\n  }\n\n  const returnedCookies = headers.getSetCookie();\n  const returnedCookieNames = new Set<string>();\n  for (const cookie of returnedCookies) {\n    const name = getSetCookieName(cookie);\n    if (name) {\n      returnedCookieNames.add(name);\n    }\n  }\n\n  const fallbackCookies = new Map<string, string>();\n  const unkeyedFallbackCookies: string[] = [];\n  for (const cookie of pendingCookies) {\n    const name = getSetCookieName(cookie);\n    if (!name) {\n      unkeyedFallbackCookies.push(cookie);\n      continue;\n    }\n\n    if (!returnedCookieNames.has(name)) {\n      fallbackCookies.set(name, cookie);\n    }\n  }\n\n  headers.delete(\"Set-Cookie\");\n  for (const cookie of unkeyedFallbackCookies) {\n    headers.append(\"Set-Cookie\", cookie);\n  }\n  for (const cookie of fallbackCookies.values()) {\n    headers.append(\"Set-Cookie\", cookie);\n  }\n  for (const cookie of returnedCookies) {\n    headers.append(\"Set-Cookie\", normalizeReturnedCookie(cookie));\n  }\n}\n\nexport async function buildAppRouteCacheValue(response: Response): Promise<CachedRouteValue> {\n  const body = await response.arrayBuffer();\n  const headers: CachedRouteValue[\"headers\"] = {};\n\n  response.headers.forEach((value, key) => {\n    if (\n      key === \"set-cookie\" ||\n      key === VINEXT_CACHE_HEADER.toLowerCase() ||\n      key === NEXTJS_CACHE_HEADER.toLowerCase() ||\n      key === \"cache-control\" ||\n      key.startsWith(MIDDLEWARE_HEADER_PREFIX)\n    ) {\n      return;\n    }\n    headers[key] = value;\n  });\n  const setCookies = response.headers.getSetCookie?.() ?? [];\n  if (setCookies.length > 0) {\n    headers[\"set-cookie\"] = setCookies;\n  }\n\n  return {\n    kind: \"APP_ROUTE\",\n    body,\n    status: response.status,\n    headers,\n  };\n}\n\nexport function finalizeRouteHandlerResponse(\n  response: Response,\n  options: FinalizeRouteHandlerResponseOptions,\n): Response {\n  const { pendingCookies, draftCookie, isHead } = options;\n  if (\n    pendingCookies.length === 0 &&\n    !draftCookie &&\n    !isHead &&\n    !hasMiddlewareHeader(response.headers)\n  ) {\n    return response;\n  }\n\n  const headers = new Headers(response.headers);\n  processMiddlewareHeaders(headers);\n  applyMutableCookieFallbacks(headers, pendingCookies);\n  if (draftCookie) {\n    headers.append(\"Set-Cookie\", draftCookie);\n  }\n\n  return new Response(isHead ? null : response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  });\n}\n"],"mappings":";;;;;;;AAqCA,MAAM,0BACJ;AACF,MAAM,uBACJ;AAEF,SAAS,oBAAoB,SAA2B;CACtD,KAAK,MAAM,OAAO,QAAQ,MAAM,EAC9B,IAAI,IAAI,WAAA,gBAAoC,EAAE,OAAO;CAEvD,OAAO;;AAGT,SAAS,8BACP,YACA,mBACA,eACQ;CACR,IAAI,sBAAsB,GAKxB,OAAO;CAGT,IAAI,sBAAsB,UAGxB,OAAO;CAGT,OAAO,kCAAkC,YAAY,mBAAmB,cAAc;;AAGxF,SAAgB,mCACd,UACA,mBACU;CACV,IAAI,CAAC,kBAAkB,WAAW,kBAAkB,UAAU,MAC5D,OAAO;CAGT,MAAM,kBAAkB,IAAI,QAAQ,SAAS,QAAQ;CACrD,+BAA+B,iBAAiB,kBAAkB,QAAQ;CAE1E,OAAO,IAAI,SAAS,SAAS,MAAM;EACjC,QAAQ,kBAAkB,UAAU,SAAS;EAC7C,YAAY,SAAS;EACrB,SAAS;EACV,CAAC;;AAGJ,SAAgB,uCAAuC,UAA0B;CAG/E,IAAI,SAAS,QAAQ,IAAA,uBAA8B,EACjD,MAAM,IAAI,MAAM,wBAAwB;CAG1C,IAAI,SAAS,QAAQ,IAAA,oBAA2B,KAAK,KACnD,MAAM,IAAI,MAAM,qBAAqB;;AAIzC,SAAgB,gCACd,aACA,SACU;CACV,MAAM,UAAU,IAAI,SAAS;CAC7B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,YAAY,QAAQ,EAC5D,IAAI,MAAM,QAAQ,MAAM,EACtB,KAAK,MAAM,SAAS,OAClB,QAAQ,OAAO,KAAK,MAAM;MAG5B,QAAQ,IAAI,KAAK,MAAM;CAG3B,qBAAqB,SAAS,QAAQ,WAAW;CACjD,MAAM,oBAAoB,QAAQ,cAAc,cAAc,QAAQ;CACtE,MAAM,gBACJ,QAAQ,iBAAiB,KAAA,IACrB,KAAA,IACC,QAAQ,aAAa,UAAU,QAAQ;CAC9C,QAAQ,IACN,iBACA,8BAA8B,QAAQ,YAAY,mBAAmB,cAAc,CACpF;CAED,OAAO,IAAI,SAAS,QAAQ,SAAS,OAAO,YAAY,MAAM;EAC5D,QAAQ,YAAY;EACpB;EACD,CAAC;;AAGJ,SAAgB,kCACd,UACA,mBACA,eACM;CACN,SAAS,QAAQ,IACf,iBACA,8BAA8B,OAAO,mBAAmB,cAAc,CACvE;;AAGH,SAAgB,0BAA0B,UAA0B;CAClE,qBAAqB,SAAS,SAAS,OAAO;;;;;;;;;;AAWhD,SAAS,mBAAmB,QAAgB,eAAgC;CAC1E,MAAM,SAAS,cAAc,aAAa;CAG1C,IAAI,IAAI,OAAO,QAAQ,IAAI;CAC3B,OAAO,MAAM,IAAI;EAEf,IAAI,QAAQ,IAAI;EAChB,OAAO,QAAQ,OAAO,UAAU,OAAO,WAAW,KAAK;EACvD,MAAM,OAAO,OAAO,QAAQ,KAAK,MAAM;EACvC,MAAM,MAAM,SAAS,KAAK,OAAO,SAAS;EAC1C,MAAM,KAAK,OAAO,QAAQ,KAAK,MAAM;EACrC,MAAM,UAAU,OAAO,MAAM,KAAK,MAAM,MAAM;EAE9C,IADa,OAAO,MAAM,OAAO,QAAQ,CAAC,MAAM,CAAC,aACzC,KAAK,QACX,OAAO;EAET,IAAI;;CAEN,OAAO;;;;;;;;;;;AAYT,SAAS,wBAAwB,QAAwB;CACvD,IAAI,mBAAmB,QAAQ,OAAO,EACpC,OAAO;CAET,OAAO,GAAG,OAAO;;AAGnB,SAAS,4BAA4B,SAAkB,gBAAgC;CACrF,IAAI,eAAe,WAAW,GAC5B;CAGF,MAAM,kBAAkB,QAAQ,cAAc;CAC9C,MAAM,sCAAsB,IAAI,KAAa;CAC7C,KAAK,MAAM,UAAU,iBAAiB;EACpC,MAAM,OAAO,iBAAiB,OAAO;EACrC,IAAI,MACF,oBAAoB,IAAI,KAAK;;CAIjC,MAAM,kCAAkB,IAAI,KAAqB;CACjD,MAAM,yBAAmC,EAAE;CAC3C,KAAK,MAAM,UAAU,gBAAgB;EACnC,MAAM,OAAO,iBAAiB,OAAO;EACrC,IAAI,CAAC,MAAM;GACT,uBAAuB,KAAK,OAAO;GACnC;;EAGF,IAAI,CAAC,oBAAoB,IAAI,KAAK,EAChC,gBAAgB,IAAI,MAAM,OAAO;;CAIrC,QAAQ,OAAO,aAAa;CAC5B,KAAK,MAAM,UAAU,wBACnB,QAAQ,OAAO,cAAc,OAAO;CAEtC,KAAK,MAAM,UAAU,gBAAgB,QAAQ,EAC3C,QAAQ,OAAO,cAAc,OAAO;CAEtC,KAAK,MAAM,UAAU,iBACnB,QAAQ,OAAO,cAAc,wBAAwB,OAAO,CAAC;;AAIjE,eAAsB,wBAAwB,UAA+C;CAC3F,MAAM,OAAO,MAAM,SAAS,aAAa;CACzC,MAAM,UAAuC,EAAE;CAE/C,SAAS,QAAQ,SAAS,OAAO,QAAQ;EACvC,IACE,QAAQ,gBACR,QAAA,iBAA4B,aAAa,IACzC,QAAA,iBAA4B,aAAa,IACzC,QAAQ,mBACR,IAAI,WAAA,gBAAoC,EAExC;EAEF,QAAQ,OAAO;GACf;CACF,MAAM,aAAa,SAAS,QAAQ,gBAAgB,IAAI,EAAE;CAC1D,IAAI,WAAW,SAAS,GACtB,QAAQ,gBAAgB;CAG1B,OAAO;EACL,MAAM;EACN;EACA,QAAQ,SAAS;EACjB;EACD;;AAGH,SAAgB,6BACd,UACA,SACU;CACV,MAAM,EAAE,gBAAgB,aAAa,WAAW;CAChD,IACE,eAAe,WAAW,KAC1B,CAAC,eACD,CAAC,UACD,CAAC,oBAAoB,SAAS,QAAQ,EAEtC,OAAO;CAGT,MAAM,UAAU,IAAI,QAAQ,SAAS,QAAQ;CAC7C,yBAAyB,QAAQ;CACjC,4BAA4B,SAAS,eAAe;CACpD,IAAI,aACF,QAAQ,OAAO,cAAc,YAAY;CAG3C,OAAO,IAAI,SAAS,SAAS,OAAO,SAAS,MAAM;EACjD,QAAQ,SAAS;EACjB,YAAY,SAAS;EACrB;EACD,CAAC"}

package/dist/server/app-route-handler-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-route-handler-runtime.js","names":[],"sources":["../../src/server/app-route-handler-runtime.ts"],"sourcesContent":["import type { NextI18nConfig } from \"../config/next-config.js\";\nimport {\n  NextRequest,\n  RequestCookies,\n  sealRequestCookies,\n  sealRequestHeaders,\n  type NextURL,\n} from \"vinext/shims/server\";\nimport { buildRequestHeadersFromMiddlewareResponse } from \"./middleware-request-headers.js\";\n\nconst ROUTE_HANDLER_HTTP_METHODS = [\n  \"GET\",\n  \"HEAD\",\n  \"POST\",\n  \"PUT\",\n  \"DELETE\",\n  \"PATCH\",\n  \"OPTIONS\",\n] as const;\n\nexport type RouteHandlerHttpMethod = (typeof ROUTE_HANDLER_HTTP_METHODS)[number];\n\nexport type RouteHandlerModule = Partial<Record<RouteHandlerHttpMethod | \"default\", unknown>>;\n\n/**\n * Checks whether a string is a recognized HTTP method for App Router route\n * handlers. Invalid methods must be rejected with 400 before any auto-OPTIONS\n * or 405 logic runs.\n *\n * @see https://github.com/vercel/next.js/blob/canary/packages/next/src/server/web/http.ts\n */\nexport function isValidHTTPMethod(maybeMethod: string): maybeMethod is RouteHandlerHttpMethod {\n  return (ROUTE_HANDLER_HTTP_METHODS as readonly string[]).includes(maybeMethod);\n}\n\nexport function collectRouteHandlerMethods(handler: RouteHandlerModule): RouteHandlerHttpMethod[] {\n  const methods = ROUTE_HANDLER_HTTP_METHODS.filter(\n    (method) => typeof handler[method] === \"function\",\n  );\n\n  if (methods.includes(\"GET\") && !methods.includes(\"HEAD\")) {\n    methods.push(\"HEAD\");\n  }\n\n  return methods;\n}\n\nexport function buildRouteHandlerAllowHeader(exportedMethods: readonly string[]): string {\n  const allow = new Set(exportedMethods);\n  allow.add(\"OPTIONS\");\n  return Array.from(allow).sort().join(\", \");\n}\n\nconst _KNOWN_DYNAMIC_APP_ROUTE_HANDLERS_KEY = Symbol.for(\n  \"vinext.appRouteHandlerRuntime.knownDynamicHandlers\",\n);\nconst _g = globalThis as unknown as Record<PropertyKey, unknown>;\n\n// NOTE: This set starts empty on cold start. The first request may serve a\n// stale ISR cache entry before the handler runs and signals dynamic usage.\n// Next.js avoids this by determining dynamism statically at build time; vinext\n// learns it at runtime and remembers the result for the process lifetime.\nconst knownDynamicAppRouteHandlers = (_g[_KNOWN_DYNAMIC_APP_ROUTE_HANDLERS_KEY] ??=\n  new Set<string>()) as Set<string>;\n\nexport function isKnownDynamicAppRoute(pattern: string): boolean {\n  return knownDynamicAppRouteHandlers.has(pattern);\n}\n\nexport function markKnownDynamicAppRoute(pattern: string): void {\n  knownDynamicAppRouteHandlers.add(pattern);\n}\n\ntype RequestDynamicAccess =\n  | \"request.headers\"\n  | \"request.cookies\"\n  | \"request.ip\"\n  | \"request.geo\"\n  | \"request.url\"\n  | \"request.body\"\n  | \"request.blob\"\n  | \"request.json\"\n  | \"request.text\"\n  | \"request.arrayBuffer\"\n  | \"request.formData\";\n\ntype NextUrlDynamicAccess =\n  | \"nextUrl.search\"\n  | \"nextUrl.searchParams\"\n  | \"nextUrl.url\"\n  | \"nextUrl.href\"\n  | \"nextUrl.toJSON\"\n  | \"nextUrl.toString\"\n  | \"nextUrl.origin\";\n\ntype AppRouteDynamicRequestAccess = RequestDynamicAccess | NextUrlDynamicAccess;\ntype AppRouteRequestMode = \"auto\" | \"force-static\" | \"error\";\n\ntype TrackedAppRouteRequestOptions = {\n  basePath?: string;\n  i18n?: NextI18nConfig | null;\n  middlewareHeaders?: Headers | null;\n  onDynamicAccess?: (access: AppRouteDynamicRequestAccess) => void;\n  requestMode?: AppRouteRequestMode;\n  staticGenerationErrorMessage?: (expression?: string) => string;\n};\n\ntype TrackedAppRouteRequest = {\n  request: NextRequest;\n  didAccessDynamicRequest(): boolean;\n};\n\nfunction bindMethodIfNeeded<T>(value: T, target: object): T {\n  return typeof value === \"function\" ? (value.bind(target) as T) : value;\n}\n\nfunction buildNextConfig(options: TrackedAppRouteRequestOptions): {\n  basePath?: string;\n  i18n?: NextI18nConfig;\n} | null {\n  if (!options.basePath && !options.i18n) {\n    return null;\n  }\n\n  return {\n    basePath: options.basePath,\n    i18n: options.i18n ?? undefined,\n  };\n}\n\nfunction rebuildRequestWithHeaders(input: Request, headers: Headers): Request {\n  const method = input.method;\n  const hasBody = method !== \"GET\" && method !== \"HEAD\";\n  const init: RequestInit & { duplex?: \"half\" } = {\n    method,\n    headers,\n    cache: input.cache,\n    credentials: input.credentials,\n    integrity: input.integrity,\n    keepalive: input.keepalive,\n    mode: input.mode,\n    redirect: input.redirect,\n    referrer: input.referrer,\n    referrerPolicy: input.referrerPolicy,\n    signal: input.signal,\n  };\n\n  if (hasBody && input.body) {\n    init.body = input.body;\n    init.duplex = \"half\";\n  }\n\n  return new Request(input.url, init);\n}\n\nfunction cleanStaticUrl(url: string): string {\n  const cleanUrl = new URL(url);\n  cleanUrl.protocol = \"http:\";\n  cleanUrl.host = \"localhost:3000\";\n  cleanUrl.username = \"\";\n  cleanUrl.password = \"\";\n  cleanUrl.search = \"\";\n  cleanUrl.hash = \"\";\n  return cleanUrl.href;\n}\n\nfunction readEmptyBodyAsArrayBuffer(): Promise<ArrayBuffer> {\n  return new Response(null).arrayBuffer();\n}\n\nfunction readEmptyBodyAsBlob(): Promise<Blob> {\n  return new Response(null).blob();\n}\n\n// Empty JSON/form-data parses reject naturally; that keeps force-static body\n// stubs aligned with a bodyless request instead of inventing synthetic data.\nfunction readEmptyBodyAsFormData(): Promise<FormData> {\n  return new Response(null).formData();\n}\n\nfunction readEmptyBodyAsJson(): Promise<unknown> {\n  return new Response(null).json();\n}\n\nfunction readEmptyBodyAsText(): Promise<string> {\n  return new Response(null).text();\n}\n\nexport function createTrackedAppRouteRequest(\n  request: Request,\n  options: TrackedAppRouteRequestOptions = {},\n): TrackedAppRouteRequest {\n  let didAccessDynamicRequest = false;\n  const requestMode = options.requestMode ?? \"auto\";\n  const nextConfig = buildNextConfig(options);\n\n  const markDynamicAccess = (access: AppRouteDynamicRequestAccess): void => {\n    didAccessDynamicRequest = true;\n    options.onDynamicAccess?.(access);\n  };\n\n  // Mirror the dynamic request reads that Next.js tracks inside\n  // packages/next/src/server/route-modules/app-route/module.ts\n  // via proxyNextRequest(), but keep the logic in a normal typed module.\n  const wrapNextUrl = (nextUrl: NextURL): NextURL => {\n    const nextUrlHandler: ProxyHandler<NextURL> = {\n      get(target, prop): unknown {\n        switch (prop) {\n          case \"search\":\n          case \"searchParams\":\n          case \"url\":\n          case \"href\":\n          case \"toJSON\":\n          case \"toString\":\n          case \"origin\":\n            markDynamicAccess(`nextUrl.${String(prop)}` as NextUrlDynamicAccess);\n            return bindMethodIfNeeded(Reflect.get(target, prop, target), target);\n          case \"clone\":\n            return () => wrapNextUrl(target.clone());\n          default:\n            return bindMethodIfNeeded(Reflect.get(target, prop, target), target);\n        }\n      },\n    };\n\n    return new Proxy(nextUrl, nextUrlHandler);\n  };\n\n  const wrapForceStaticNextUrl = (nextUrl: NextURL): NextURL => {\n    const emptySearchParams = new URLSearchParams();\n    const staticHref = cleanStaticUrl(nextUrl.href);\n    const nextUrlHandler: ProxyHandler<NextURL> = {\n      get(target, prop): unknown {\n        switch (prop) {\n          case \"search\":\n            return \"\";\n          case \"searchParams\":\n            return emptySearchParams;\n          case \"href\":\n            return staticHref;\n          case \"url\":\n            return undefined;\n          case \"toJSON\":\n          case \"toString\":\n            return () => staticHref;\n          case \"clone\":\n            return () => wrapForceStaticNextUrl(target.clone());\n          default:\n            return bindMethodIfNeeded(Reflect.get(target, prop, target), target);\n        }\n      },\n    };\n\n    return new Proxy(nextUrl, nextUrlHandler);\n  };\n\n  const throwStaticGenerationError = (expression: string): never => {\n    throw new Error(\n      options.staticGenerationErrorMessage?.(expression) ??\n        `Route handler with \\`dynamic = \"error\"\\` used ${expression}.`,\n    );\n  };\n\n  const wrapRequireStaticNextUrl = (nextUrl: NextURL): NextURL => {\n    const nextUrlHandler: ProxyHandler<NextURL> = {\n      get(target, prop): unknown {\n        switch (prop) {\n          case \"search\":\n          case \"searchParams\":\n          case \"url\":\n          case \"href\":\n          case \"toJSON\":\n          case \"toString\":\n          case \"origin\":\n            return throwStaticGenerationError(`nextUrl.${String(prop)}`);\n          case \"clone\":\n            return () => wrapRequireStaticNextUrl(target.clone());\n          default:\n            return bindMethodIfNeeded(Reflect.get(target, prop, target), target);\n        }\n      },\n    };\n\n    return new Proxy(nextUrl, nextUrlHandler);\n  };\n\n  const wrapRequest = (input: Request): NextRequest => {\n    const requestHeaders = options.middlewareHeaders\n      ? buildRequestHeadersFromMiddlewareResponse(input.headers, options.middlewareHeaders)\n      : null;\n    const requestWithOverrides = requestHeaders\n      ? rebuildRequestWithHeaders(input, requestHeaders)\n      : input;\n    const nextRequest =\n      requestWithOverrides instanceof NextRequest\n        ? requestWithOverrides\n        : new NextRequest(requestWithOverrides, { nextConfig: nextConfig ?? undefined });\n    let proxiedNextUrl: NextURL | null = null;\n    let forceStaticNextUrl: NextURL | null = null;\n    let requireStaticNextUrl: NextURL | null = null;\n    let forceStaticHeaders: Headers | null = null;\n    let forceStaticCookies: RequestCookies | null = null;\n\n    const requestHandler: ProxyHandler<NextRequest> = {\n      get(target, prop): unknown {\n        if (requestMode === \"force-static\") {\n          switch (prop) {\n            case \"nextUrl\":\n              forceStaticNextUrl ??= wrapForceStaticNextUrl(target.nextUrl);\n              return forceStaticNextUrl;\n            case \"headers\":\n              forceStaticHeaders ??= sealRequestHeaders(new Headers());\n              return forceStaticHeaders;\n            case \"cookies\":\n              forceStaticCookies ??= sealRequestCookies(new RequestCookies(new Headers()));\n              return forceStaticCookies;\n            case \"url\":\n              return cleanStaticUrl(target.nextUrl.href);\n            case \"ip\":\n            case \"geo\":\n              return undefined;\n            case \"body\":\n              return null;\n            case \"arrayBuffer\":\n              return readEmptyBodyAsArrayBuffer;\n            case \"blob\":\n              return readEmptyBodyAsBlob;\n            case \"formData\":\n              return readEmptyBodyAsFormData;\n            case \"json\":\n              return readEmptyBodyAsJson;\n            case \"text\":\n              return readEmptyBodyAsText;\n            case \"clone\":\n              return () => wrapRequest(target.clone());\n            default:\n              return bindMethodIfNeeded(Reflect.get(target, prop, target), target);\n          }\n        }\n\n        if (requestMode === \"error\") {\n          switch (prop) {\n            case \"nextUrl\":\n              requireStaticNextUrl ??= wrapRequireStaticNextUrl(target.nextUrl);\n              return requireStaticNextUrl;\n            case \"headers\":\n            case \"cookies\":\n            case \"url\":\n            // Deliberate vinext divergence from Next.js: ip/geo are exposed\n            // on NextRequest for Cloudflare compatibility, so require-static\n            // treats them as dynamic request APIs instead of falling through.\n            case \"ip\":\n            case \"geo\":\n            case \"body\":\n            case \"blob\":\n            case \"json\":\n            case \"text\":\n            case \"arrayBuffer\":\n            case \"formData\":\n              return throwStaticGenerationError(`request.${String(prop)}`);\n            case \"clone\":\n              return () => wrapRequest(target.clone());\n            default:\n              return bindMethodIfNeeded(Reflect.get(target, prop, target), target);\n          }\n        }\n\n        switch (prop) {\n          case \"nextUrl\":\n            proxiedNextUrl ??= wrapNextUrl(target.nextUrl);\n            return proxiedNextUrl;\n          case \"headers\":\n          case \"cookies\":\n          case \"ip\":\n          case \"geo\":\n          case \"url\":\n          case \"body\":\n          case \"blob\":\n          case \"json\":\n          case \"text\":\n          case \"arrayBuffer\":\n          case \"formData\":\n            markDynamicAccess(`request.${String(prop)}` as RequestDynamicAccess);\n            return bindMethodIfNeeded(Reflect.get(target, prop, target), target);\n          case \"clone\":\n            return () => wrapRequest(target.clone());\n          default:\n            return bindMethodIfNeeded(Reflect.get(target, prop, target), target);\n        }\n      },\n    };\n\n    return new Proxy(nextRequest, requestHandler);\n  };\n\n  return {\n    request: wrapRequest(request),\n    didAccessDynamicRequest() {\n      return didAccessDynamicRequest;\n    },\n  };\n}\n"],"mappings":";;;AAUA,MAAM,6BAA6B;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;;;AAaD,SAAgB,kBAAkB,aAA4D;CAC5F,OAAQ,2BAAiD,SAAS,YAAY;;AAGhF,SAAgB,2BAA2B,SAAuD;CAChG,MAAM,UAAU,2BAA2B,QACxC,WAAW,OAAO,QAAQ,YAAY,WACxC;CAED,IAAI,QAAQ,SAAS,MAAM,IAAI,CAAC,QAAQ,SAAS,OAAO,EACtD,QAAQ,KAAK,OAAO;CAGtB,OAAO;;AAGT,SAAgB,6BAA6B,iBAA4C;CACvF,MAAM,QAAQ,IAAI,IAAI,gBAAgB;CACtC,MAAM,IAAI,UAAU;CACpB,OAAO,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK;;AAG5C,MAAM,wCAAwC,OAAO,IACnD,qDACD;AACD,MAAM,KAAK;AAMX,MAAM,+BAAgC,GAAG,2DACvC,IAAI,KAAa;AAEnB,SAAgB,uBAAuB,SAA0B;CAC/D,OAAO,6BAA6B,IAAI,QAAQ;;AAGlD,SAAgB,yBAAyB,SAAuB;CAC9D,6BAA6B,IAAI,QAAQ;;AA0C3C,SAAS,mBAAsB,OAAU,QAAmB;CAC1D,OAAO,OAAO,UAAU,aAAc,MAAM,KAAK,OAAO,GAAS;;AAGnE,SAAS,gBAAgB,SAGhB;CACP,IAAI,CAAC,QAAQ,YAAY,CAAC,QAAQ,MAChC,OAAO;CAGT,OAAO;EACL,UAAU,QAAQ;EAClB,MAAM,QAAQ,QAAQ,KAAA;EACvB;;AAGH,SAAS,0BAA0B,OAAgB,SAA2B;CAC5E,MAAM,SAAS,MAAM;CACrB,MAAM,UAAU,WAAW,SAAS,WAAW;CAC/C,MAAM,OAA0C;EAC9C;EACA;EACA,OAAO,MAAM;EACb,aAAa,MAAM;EACnB,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,UAAU,MAAM;EAChB,UAAU,MAAM;EAChB,gBAAgB,MAAM;EACtB,QAAQ,MAAM;EACf;CAED,IAAI,WAAW,MAAM,MAAM;EACzB,KAAK,OAAO,MAAM;EAClB,KAAK,SAAS;;CAGhB,OAAO,IAAI,QAAQ,MAAM,KAAK,KAAK;;AAGrC,SAAS,eAAe,KAAqB;CAC3C,MAAM,WAAW,IAAI,IAAI,IAAI;CAC7B,SAAS,WAAW;CACpB,SAAS,OAAO;CAChB,SAAS,WAAW;CACpB,SAAS,WAAW;CACpB,SAAS,SAAS;CAClB,SAAS,OAAO;CAChB,OAAO,SAAS;;AAGlB,SAAS,6BAAmD;CAC1D,OAAO,IAAI,SAAS,KAAK,CAAC,aAAa;;AAGzC,SAAS,sBAAqC;CAC5C,OAAO,IAAI,SAAS,KAAK,CAAC,MAAM;;AAKlC,SAAS,0BAA6C;CACpD,OAAO,IAAI,SAAS,KAAK,CAAC,UAAU;;AAGtC,SAAS,sBAAwC;CAC/C,OAAO,IAAI,SAAS,KAAK,CAAC,MAAM;;AAGlC,SAAS,sBAAuC;CAC9C,OAAO,IAAI,SAAS,KAAK,CAAC,MAAM;;AAGlC,SAAgB,6BACd,SACA,UAAyC,EAAE,EACnB;CACxB,IAAI,0BAA0B;CAC9B,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,aAAa,gBAAgB,QAAQ;CAE3C,MAAM,qBAAqB,WAA+C;EACxE,0BAA0B;EAC1B,QAAQ,kBAAkB,OAAO;;CAMnC,MAAM,eAAe,YAA8B;EAqBjD,OAAO,IAAI,MAAM,SAAS,EAnBxB,IAAI,QAAQ,MAAe;GACzB,QAAQ,MAAR;IACE,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;KACH,kBAAkB,WAAW,OAAO,KAAK,GAA2B;KACpE,OAAO,mBAAmB,QAAQ,IAAI,QAAQ,MAAM,OAAO,EAAE,OAAO;IACtE,KAAK,SACH,aAAa,YAAY,OAAO,OAAO,CAAC;IAC1C,SACE,OAAO,mBAAmB,QAAQ,IAAI,QAAQ,MAAM,OAAO,EAAE,OAAO;;KAKpC,CAAC;;CAG3C,MAAM,0BAA0B,YAA8B;EAC5D,MAAM,oBAAoB,IAAI,iBAAiB;EAC/C,MAAM,aAAa,eAAe,QAAQ,KAAK;EAuB/C,OAAO,IAAI,MAAM,SAAS,EArBxB,IAAI,QAAQ,MAAe;GACzB,QAAQ,MAAR;IACE,KAAK,UACH,OAAO;IACT,KAAK,gBACH,OAAO;IACT,KAAK,QACH,OAAO;IACT,KAAK,OACH;IACF,KAAK;IACL,KAAK,YACH,aAAa;IACf,KAAK,SACH,aAAa,uBAAuB,OAAO,OAAO,CAAC;IACrD,SACE,OAAO,mBAAmB,QAAQ,IAAI,QAAQ,MAAM,OAAO,EAAE,OAAO;;KAKpC,CAAC;;CAG3C,MAAM,8BAA8B,eAA8B;EAChE,MAAM,IAAI,MACR,QAAQ,+BAA+B,WAAW,IAChD,iDAAiD,WAAW,GAC/D;;CAGH,MAAM,4BAA4B,YAA8B;EAoB9D,OAAO,IAAI,MAAM,SAAS,EAlBxB,IAAI,QAAQ,MAAe;GACzB,QAAQ,MAAR;IACE,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK,UACH,OAAO,2BAA2B,WAAW,OAAO,KAAK,GAAG;IAC9D,KAAK,SACH,aAAa,yBAAyB,OAAO,OAAO,CAAC;IACvD,SACE,OAAO,mBAAmB,QAAQ,IAAI,QAAQ,MAAM,OAAO,EAAE,OAAO;;KAKpC,CAAC;;CAG3C,MAAM,eAAe,UAAgC;EACnD,MAAM,iBAAiB,QAAQ,oBAC3B,0CAA0C,MAAM,SAAS,QAAQ,kBAAkB,GACnF;EACJ,MAAM,uBAAuB,iBACzB,0BAA0B,OAAO,eAAe,GAChD;EACJ,MAAM,cACJ,gCAAgC,cAC5B,uBACA,IAAI,YAAY,sBAAsB,EAAE,YAAY,cAAc,KAAA,GAAW,CAAC;EACpF,IAAI,iBAAiC;EACrC,IAAI,qBAAqC;EACzC,IAAI,uBAAuC;EAC3C,IAAI,qBAAqC;EACzC,IAAI,qBAA4C;EA2FhD,OAAO,IAAI,MAAM,aAAa,EAxF5B,IAAI,QAAQ,MAAe;GACzB,IAAI,gBAAgB,gBAClB,QAAQ,MAAR;IACE,KAAK;KACH,uBAAuB,uBAAuB,OAAO,QAAQ;KAC7D,OAAO;IACT,KAAK;KACH,uBAAuB,mBAAmB,IAAI,SAAS,CAAC;KACxD,OAAO;IACT,KAAK;KACH,uBAAuB,mBAAmB,IAAI,eAAe,IAAI,SAAS,CAAC,CAAC;KAC5E,OAAO;IACT,KAAK,OACH,OAAO,eAAe,OAAO,QAAQ,KAAK;IAC5C,KAAK;IACL,KAAK,OACH;IACF,KAAK,QACH,OAAO;IACT,KAAK,eACH,OAAO;IACT,KAAK,QACH,OAAO;IACT,KAAK,YACH,OAAO;IACT,KAAK,QACH,OAAO;IACT,KAAK,QACH,OAAO;IACT,KAAK,SACH,aAAa,YAAY,OAAO,OAAO,CAAC;IAC1C,SACE,OAAO,mBAAmB,QAAQ,IAAI,QAAQ,MAAM,OAAO,EAAE,OAAO;;GAI1E,IAAI,gBAAgB,SAClB,QAAQ,MAAR;IACE,KAAK;KACH,yBAAyB,yBAAyB,OAAO,QAAQ;KACjE,OAAO;IACT,KAAK;IACL,KAAK;IACL,KAAK;IAIL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK,YACH,OAAO,2BAA2B,WAAW,OAAO,KAAK,GAAG;IAC9D,KAAK,SACH,aAAa,YAAY,OAAO,OAAO,CAAC;IAC1C,SACE,OAAO,mBAAmB,QAAQ,IAAI,QAAQ,MAAM,OAAO,EAAE,OAAO;;GAI1E,QAAQ,MAAR;IACE,KAAK;KACH,mBAAmB,YAAY,OAAO,QAAQ;KAC9C,OAAO;IACT,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;KACH,kBAAkB,WAAW,OAAO,KAAK,GAA2B;KACpE,OAAO,mBAAmB,QAAQ,IAAI,QAAQ,MAAM,OAAO,EAAE,OAAO;IACtE,KAAK,SACH,aAAa,YAAY,OAAO,OAAO,CAAC;IAC1C,SACE,OAAO,mBAAmB,QAAQ,IAAI,QAAQ,MAAM,OAAO,EAAE,OAAO;;KAKhC,CAAC;;CAG/C,OAAO;EACL,SAAS,YAAY,QAAQ;EAC7B,0BAA0B;GACxB,OAAO;;EAEV"}

package/dist/server/app-router-entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-router-entry.js","names":["__rscBasePath","__rscAssetPrefix"],"sources":["../../src/server/app-router-entry.ts"],"sourcesContent":["/**\n * Default Cloudflare Worker entry point for vinext App Router.\n *\n * Use this directly in wrangler.jsonc:\n *   \"main\": \"vinext/server/app-router-entry\"\n *\n * Or import and delegate to it from a custom worker:\n *   import handler from \"vinext/server/app-router-entry\";\n *   return handler.fetch(request, env, ctx);\n *\n * This file runs in the RSC environment. Configure the Cloudflare plugin with:\n *   cloudflare({ viteEnvironment: { name: \"rsc\", childEnvironments: [\"ssr\"] } })\n */\n\nimport \"./server-globals.js\";\n// Virtual module generated by vinext at build time. The default export is\n// the request handler; `__assetPrefix` and `__basePath` are named exports\n// inlined from next.config (both as string literals) so this worker can\n// recognise asset-shaped requests without invoking the handler. Types\n// live in `virtual-vinext-rsc-entry.d.ts`; the generator is in\n// `entries/app-rsc-entry.ts`.\nimport rscHandler, {\n  __assetPrefix as __rscAssetPrefix,\n  __basePath as __rscBasePath,\n} from \"virtual:vinext-rsc-entry\";\nimport { runWithExecutionContext, type ExecutionContextLike } from \"vinext/shims/request-context\";\nimport { resolveStaticAssetSignal } from \"./worker-utils.js\";\nimport {\n  cloneRequestWithHeaders,\n  filterInternalHeaders,\n  isOpenRedirectShaped,\n} from \"./request-pipeline.js\";\nimport {\n  badRequestResponse,\n  notFoundResponse,\n  notFoundStaticAssetResponse,\n} from \"./http-error-responses.js\";\nimport { assetPrefixPathname, isNextStaticPath } from \"../utils/asset-prefix.js\";\n\n// Precompute the path components used for `_next/static/*` 404 short-circuit\n// detection. Both `__basePath` and `__assetPrefix` are inlined as\n// compile-time constants in the generated RSC entry — see entries/app-rsc-entry.ts.\nconst __workerBasePath: string = typeof __rscBasePath === \"string\" ? __rscBasePath : \"\";\nconst __workerAssetPathPrefix: string = assetPrefixPathname(\n  typeof __rscAssetPrefix === \"string\" ? __rscAssetPrefix : \"\",\n);\n\ntype WorkerAssetEnv = {\n  ASSETS?: {\n    fetch(request: Request): Promise<Response> | Response;\n  };\n};\n\nexport default {\n  async fetch(\n    request: Request,\n    env?: WorkerAssetEnv,\n    ctx?: ExecutionContextLike,\n  ): Promise<Response> {\n    return handleRequest(request, env, ctx);\n  },\n};\n\nasync function handleRequest(\n  request: Request,\n  env: WorkerAssetEnv | undefined,\n  ctx: ExecutionContextLike | undefined,\n): Promise<Response> {\n  const url = new URL(request.url);\n\n  // Block protocol-relative URL open redirects (//evil.com/, /\\evil.com/,\n  // /%5Cevil.com/, /%2F/evil.com/). Check BEFORE decode so both literal and\n  // percent-encoded variants are caught — encoded forms survive segment-wise\n  // decoding and would otherwise reach trailing-slash redirect emitters.\n  if (isOpenRedirectShaped(url.pathname)) {\n    return notFoundResponse();\n  }\n\n  // Validate that percent-encoding is well-formed. The RSC handler performs\n  // the actual decode + normalize; we only check here to return a clean 400\n  // instead of letting a malformed sequence crash downstream.\n  try {\n    decodeURIComponent(url.pathname);\n  } catch {\n    // Malformed percent-encoding (e.g. /%E0%A4%A) — return 400 instead of throwing.\n    return badRequestResponse();\n  }\n\n  // Invalid `_next/static/*` paths short-circuit with a plain-text 404\n  // instead of falling through to the RSC handler (which would render the\n  // full HTML 404 page). Valid assets are served by Cloudflare's ASSETS\n  // binding BEFORE the worker is invoked; only misses reach this code.\n  // Matches Next.js: packages/next/src/server/lib/router-server.ts.\n  if (isNextStaticPath(url.pathname, __workerBasePath, __workerAssetPathPrefix)) {\n    return notFoundStaticAssetResponse();\n  }\n\n  // Strip internal headers from inbound requests before any handler or\n  // middleware sees them. Must happen before the RSC handler runs.\n  // Builds a new Headers — Request.headers is immutable in Workers.\n  {\n    const filteredHeaders = filterInternalHeaders(request.headers);\n    request = cloneRequestWithHeaders(request, filteredHeaders);\n  }\n\n  // Do NOT decode/normalize the pathname here. The RSC handler\n  // (virtual:vinext-rsc-entry) is the single point of decoding — it calls\n  // decodeURIComponent + normalizePath on the incoming URL. Decoding here\n  // AND in the handler would double-decode, causing inconsistent path\n  // matching between middleware and routing.\n\n  // Delegate to RSC handler (which decodes + normalizes the pathname itself),\n  // wrapping in the ExecutionContext ALS scope so downstream code can reach\n  // ctx.waitUntil() without having ctx threaded through every call site.\n  const handleFn = () => rscHandler(request, ctx);\n  const result = await (ctx ? runWithExecutionContext(ctx, handleFn) : handleFn());\n\n  if (result instanceof Response) {\n    if (env?.ASSETS) {\n      const assetFetcher = env.ASSETS;\n      const assetResponse = await resolveStaticAssetSignal(result, {\n        fetchAsset: (path) =>\n          Promise.resolve(assetFetcher.fetch(new Request(new URL(path, request.url)))),\n      });\n      if (assetResponse) return assetResponse;\n    }\n    return result;\n  }\n\n  if (result === null || result === undefined) {\n    return notFoundResponse();\n  }\n\n  return new Response(String(result), { status: 200 });\n}\n"],"mappings":";;;;;;;;AA0CA,MAAM,mBAA2B,OAAOA,eAAkB,WAAWA,aAAgB;AACrF,MAAM,0BAAkC,oBACtC,OAAOC,kBAAqB,WAAWA,gBAAmB,GAC3D;AAQD,IAAA,2BAAe,EACb,MAAM,MACJ,SACA,KACA,KACmB;CACnB,OAAO,cAAc,SAAS,KAAK,IAAI;GAE1C;AAED,eAAe,cACb,SACA,KACA,KACmB;CACnB,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;CAMhC,IAAI,qBAAqB,IAAI,SAAS,EACpC,OAAO,kBAAkB;CAM3B,IAAI;EACF,mBAAmB,IAAI,SAAS;SAC1B;EAEN,OAAO,oBAAoB;;CAQ7B,IAAI,iBAAiB,IAAI,UAAU,kBAAkB,wBAAwB,EAC3E,OAAO,6BAA6B;CAMtC;EACE,MAAM,kBAAkB,sBAAsB,QAAQ,QAAQ;EAC9D,UAAU,wBAAwB,SAAS,gBAAgB;;CAY7D,MAAM,iBAAiB,WAAW,SAAS,IAAI;CAC/C,MAAM,SAAS,OAAO,MAAM,wBAAwB,KAAK,SAAS,GAAG,UAAU;CAE/E,IAAI,kBAAkB,UAAU;EAC9B,IAAI,KAAK,QAAQ;GACf,MAAM,eAAe,IAAI;GACzB,MAAM,gBAAgB,MAAM,yBAAyB,QAAQ,EAC3D,aAAa,SACX,QAAQ,QAAQ,aAAa,MAAM,IAAI,QAAQ,IAAI,IAAI,MAAM,QAAQ,IAAI,CAAC,CAAC,CAAC,EAC/E,CAAC;GACF,IAAI,eAAe,OAAO;;EAE5B,OAAO;;CAGT,IAAI,WAAW,QAAQ,WAAW,KAAA,GAChC,OAAO,kBAAkB;CAG3B,OAAO,IAAI,SAAS,OAAO,OAAO,EAAE,EAAE,QAAQ,KAAK,CAAC"}

package/dist/server/app-rsc-cache-busting.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-rsc-cache-busting.js","names":[],"sources":["../../src/server/app-rsc-cache-busting.ts"],"sourcesContent":["import { fnv1a64 } from \"../utils/hash.js\";\nimport {\n  APP_RSC_RENDER_MODE_NAVIGATION,\n  parseAppRscRenderMode,\n  type AppRscRenderMode,\n} from \"./app-rsc-render-mode.js\";\nimport {\n  NEXT_ROUTER_PREFETCH_HEADER,\n  NEXT_ROUTER_SEGMENT_PREFETCH_HEADER,\n  NEXT_ROUTER_STATE_TREE_HEADER,\n  NEXT_URL_HEADER,\n  RSC_HEADER,\n  VINEXT_INTERCEPTION_CONTEXT_HEADER,\n  VINEXT_MOUNTED_SLOTS_HEADER,\n  VINEXT_RSC_RENDER_MODE_HEADER,\n} from \"./headers.js\";\n\n/**\n * RSC cache-busting hashes cover the headers that make a `.rsc` payload vary.\n * Client-side variant headers must survive transit through CDNs and reverse\n * proxies; stripping them changes the server hash and turns stale URLs into\n * repeated canonicalization redirects.\n */\nexport const VINEXT_RSC_CACHE_BUSTING_SEARCH_PARAM = \"_rsc\";\nexport const VINEXT_RSC_COMPATIBILITY_ID_HEADER = \"X-Vinext-RSC-Compatibility-Id\";\nexport const VINEXT_RSC_CONTENT_TYPE = \"text/x-component\";\n\n// Re-export so existing consumers that import from this module keep working.\nexport { VINEXT_RSC_RENDER_MODE_HEADER } from \"./headers.js\";\n\nexport const VINEXT_RSC_VARY_HEADER = [\n  RSC_HEADER,\n  \"Accept\",\n  NEXT_ROUTER_STATE_TREE_HEADER,\n  NEXT_ROUTER_PREFETCH_HEADER,\n  NEXT_ROUTER_SEGMENT_PREFETCH_HEADER,\n  NEXT_URL_HEADER,\n  VINEXT_INTERCEPTION_CONTEXT_HEADER,\n  VINEXT_MOUNTED_SLOTS_HEADER,\n  VINEXT_RSC_RENDER_MODE_HEADER,\n].join(\", \");\n\nconst CACHE_BUSTING_DIGEST_BYTES = 12;\nconst textEncoder = new TextEncoder();\n\ntype CreateRscRequestHeadersOptions = {\n  interceptionContext?: string | null;\n  mountedSlotsHeader?: string | null;\n  renderMode?: AppRscRenderMode;\n};\n\ntype ResolveInvalidRscCacheBustingRequestOptions = {\n  isRscRequest: boolean;\n  request: Request;\n};\n\nfunction encodeBase64Url(bytes: Uint8Array): string {\n  let binary = \"\";\n  for (const byte of bytes) {\n    binary += String.fromCharCode(byte);\n  }\n\n  return btoa(binary).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replace(/=+$/, \"\");\n}\n\nfunction normalizeHeaderValue(value: string | null): string {\n  return value ?? \"0\";\n}\n\nfunction normalizeCompatibilityId(value: string | null | undefined): string | null {\n  return value && value.length > 0 ? value : null;\n}\n\nexport function getVinextRscCompatibilityId(): string | null {\n  return normalizeCompatibilityId(process.env.__VINEXT_RSC_COMPATIBILITY_ID);\n}\n\nexport function applyRscCompatibilityIdHeader(\n  headers: Headers,\n  compatibilityId: string | null | undefined = getVinextRscCompatibilityId(),\n): void {\n  const normalized = normalizeCompatibilityId(compatibilityId);\n  if (normalized) {\n    headers.set(VINEXT_RSC_COMPATIBILITY_ID_HEADER, normalized);\n  } else {\n    headers.delete(VINEXT_RSC_COMPATIBILITY_ID_HEADER);\n  }\n}\n\nexport function isRscCompatibilityIdCompatible(\n  responseCompatibilityId: string | null | undefined,\n  clientCompatibilityId: string | null | undefined = getVinextRscCompatibilityId(),\n): boolean {\n  const normalizedResponseCompatibilityId = normalizeCompatibilityId(responseCompatibilityId);\n  const normalizedClientCompatibilityId = normalizeCompatibilityId(clientCompatibilityId);\n  return (\n    normalizedClientCompatibilityId === null ||\n    (normalizedResponseCompatibilityId !== null &&\n      normalizedResponseCompatibilityId === normalizedClientCompatibilityId)\n  );\n}\n\ntype RscCompatibilityNavigationDecision =\n  | { kind: \"compatible\" }\n  | { hardNavigationTarget: string; kind: \"hard-navigate\" };\n\nexport function resolveHardNavigationTargetFromRscResponse(\n  responseUrl: string | null | undefined,\n  currentHref: string,\n  origin: string,\n): string {\n  if (!responseUrl) {\n    return currentHref;\n  }\n\n  const parsed = new URL(responseUrl, origin);\n  stripRscCacheBustingSearchParam(parsed);\n  const origUrl = new URL(currentHref, origin);\n  let pathname = stripRscSuffix(parsed.pathname);\n  if (origUrl.pathname.length > 1 && origUrl.pathname.endsWith(\"/\") && !pathname.endsWith(\"/\")) {\n    pathname += \"/\";\n  }\n\n  let hardNavigationTarget = pathname + parsed.search;\n  if (origUrl.hash) hardNavigationTarget += origUrl.hash;\n  return hardNavigationTarget;\n}\n\nexport function resolveRscCompatibilityNavigationDecision(options: {\n  clientCompatibilityId?: string | null;\n  currentHref: string;\n  origin: string;\n  responseCompatibilityId: string | null | undefined;\n  responseUrl?: string | null;\n}): RscCompatibilityNavigationDecision {\n  if (\n    isRscCompatibilityIdCompatible(options.responseCompatibilityId, options.clientCompatibilityId)\n  ) {\n    return { kind: \"compatible\" };\n  }\n\n  return {\n    hardNavigationTarget: resolveHardNavigationTargetFromRscResponse(\n      options.responseUrl,\n      options.currentHref,\n      options.origin,\n    ),\n    kind: \"hard-navigate\",\n  };\n}\n\nfunction normalizeRenderModeHeaderValue(value: string | null): string | null {\n  const renderMode = parseAppRscRenderMode(value);\n  return renderMode === APP_RSC_RENDER_MODE_NAVIGATION ? null : renderMode;\n}\n\ntype CreateCacheBustingInputOptions = {\n  includeRenderModeHeader?: boolean;\n};\n\nfunction createCacheBustingInput(\n  headers: Headers,\n  options: CreateCacheBustingInputOptions = {},\n): string | null {\n  // The order of these values determines the hash. Changing it is a breaking\n  // cache-key change and requires accepting the previous hash during rollout.\n  const values = [\n    headers.get(NEXT_ROUTER_PREFETCH_HEADER),\n    headers.get(NEXT_ROUTER_SEGMENT_PREFETCH_HEADER),\n    headers.get(NEXT_ROUTER_STATE_TREE_HEADER),\n    headers.get(NEXT_URL_HEADER),\n    headers.get(VINEXT_INTERCEPTION_CONTEXT_HEADER),\n    headers.get(VINEXT_MOUNTED_SLOTS_HEADER),\n    ...(options.includeRenderModeHeader === false\n      ? []\n      : [normalizeRenderModeHeaderValue(headers.get(VINEXT_RSC_RENDER_MODE_HEADER))]),\n  ];\n\n  if (values.every((value) => value === null)) {\n    return null;\n  }\n\n  return values.map(normalizeHeaderValue).join(\",\");\n}\n\nasync function sha256CacheBustingHash(input: string): Promise<string> {\n  const digest = await globalThis.crypto.subtle.digest(\"SHA-256\", textEncoder.encode(input));\n  return encodeBase64Url(new Uint8Array(digest).subarray(0, CACHE_BUSTING_DIGEST_BYTES));\n}\n\nfunction computeLegacyRscCacheBustingSearchParam(headers: Headers): string {\n  const input = createCacheBustingInput(headers);\n  return input === null ? \"\" : fnv1a64(input);\n}\n\nasync function computePreviousRscCacheBustingSearchParam(headers: Headers): Promise<string | null> {\n  const input = createCacheBustingInput(headers, { includeRenderModeHeader: false });\n  if (input === null) {\n    return null;\n  }\n\n  return sha256CacheBustingHash(input);\n}\n\nfunction computePreviousLegacyRscCacheBustingSearchParam(headers: Headers): string | null {\n  const input = createCacheBustingInput(headers, { includeRenderModeHeader: false });\n  return input === null ? null : fnv1a64(input);\n}\n\nfunction getSearchPairsWithoutRscCacheBusting(url: URL): string[] {\n  const rawQuery = url.search.startsWith(\"?\") ? url.search.slice(1) : url.search;\n  return rawQuery\n    .split(\"&\")\n    .filter((pair) => pair.length > 0 && !isRscCacheBustingSearchPair(pair));\n}\n\nfunction isRscCacheBustingSearchPair(pair: string): boolean {\n  const separatorIndex = pair.indexOf(\"=\");\n  const rawKey = separatorIndex === -1 ? pair : pair.slice(0, separatorIndex);\n\n  try {\n    return (\n      decodeURIComponent(rawKey.replaceAll(\"+\", \" \")) === VINEXT_RSC_CACHE_BUSTING_SEARCH_PARAM\n    );\n  } catch {\n    return rawKey === VINEXT_RSC_CACHE_BUSTING_SEARCH_PARAM;\n  }\n}\n\nexport async function computeRscCacheBustingSearchParam(headers: Headers): Promise<string> {\n  const input = createCacheBustingInput(headers);\n  if (input === null) {\n    return \"\";\n  }\n\n  return sha256CacheBustingHash(input);\n}\n\nexport function setRscCacheBustingSearchParam(url: URL, hash: string): void {\n  const pairs = getSearchPairsWithoutRscCacheBusting(url);\n\n  pairs.push(\n    hash.length > 0\n      ? `${VINEXT_RSC_CACHE_BUSTING_SEARCH_PARAM}=${hash}`\n      : VINEXT_RSC_CACHE_BUSTING_SEARCH_PARAM,\n  );\n  url.search = `?${pairs.join(\"&\")}`;\n}\n\nexport function stripRscCacheBustingSearchParam(url: URL): void {\n  const pairs = getSearchPairsWithoutRscCacheBusting(url);\n  url.search = pairs.length > 0 ? `?${pairs.join(\"&\")}` : \"\";\n}\n\n/**\n * Remove a trailing `.rsc` suffix from a pathname. Returns the pathname\n * unchanged when the suffix is absent.\n */\nexport function stripRscSuffix(pathname: string): string {\n  return pathname.endsWith(\".rsc\") ? pathname.slice(0, -4) : pathname;\n}\n\nexport function createRscRequestHeaders(options: CreateRscRequestHeadersOptions = {}): Headers {\n  const headers = new Headers({\n    Accept: VINEXT_RSC_CONTENT_TYPE,\n    [RSC_HEADER]: \"1\",\n  });\n\n  if (options.interceptionContext !== undefined && options.interceptionContext !== null) {\n    headers.set(VINEXT_INTERCEPTION_CONTEXT_HEADER, options.interceptionContext);\n  }\n\n  if (options.mountedSlotsHeader !== undefined && options.mountedSlotsHeader !== null) {\n    headers.set(VINEXT_MOUNTED_SLOTS_HEADER, options.mountedSlotsHeader);\n  }\n\n  const renderMode = options.renderMode ?? APP_RSC_RENDER_MODE_NAVIGATION;\n  if (renderMode !== APP_RSC_RENDER_MODE_NAVIGATION) {\n    headers.set(VINEXT_RSC_RENDER_MODE_HEADER, renderMode);\n  }\n\n  return headers;\n}\n\nfunction toRscRequestPath(href: string): string {\n  const hashIndex = href.indexOf(\"#\");\n  const beforeHash = hashIndex === -1 ? href : href.slice(0, hashIndex);\n  const queryIndex = beforeHash.indexOf(\"?\");\n  const pathname = queryIndex === -1 ? beforeHash : beforeHash.slice(0, queryIndex);\n  const query = queryIndex === -1 ? \"\" : beforeHash.slice(queryIndex);\n  const normalizedPath =\n    pathname.length > 1 && pathname.endsWith(\"/\") ? pathname.slice(0, -1) : pathname;\n  return `${normalizedPath}.rsc${query}`;\n}\n\nexport async function createRscRequestUrl(href: string, headers: Headers): Promise<string> {\n  const url = new URL(toRscRequestPath(href), \"http://vinext.local\");\n  const hash = await computeRscCacheBustingSearchParam(headers);\n  setRscCacheBustingSearchParam(url, hash);\n  return `${url.pathname}${url.search}`;\n}\n\nexport async function createRscRedirectLocation(\n  location: string,\n  request: Request,\n): Promise<string> {\n  const requestUrl = new URL(request.url);\n  const destinationUrl = new URL(location, requestUrl);\n\n  if (destinationUrl.origin !== requestUrl.origin) {\n    return destinationUrl.toString();\n  }\n\n  const rscPath = await createRscRequestUrl(\n    `${destinationUrl.pathname}${destinationUrl.search}`,\n    request.headers,\n  );\n  return `${destinationUrl.origin}${rscPath}`;\n}\n\nexport async function resolveInvalidRscCacheBustingRequest(\n  options: ResolveInvalidRscCacheBustingRequestOptions,\n): Promise<Response | null> {\n  if (\n    !options.isRscRequest ||\n    (options.request.method !== \"GET\" && options.request.method !== \"HEAD\")\n  ) {\n    return null;\n  }\n\n  const url = new URL(options.request.url);\n  const actualHash = url.searchParams.get(VINEXT_RSC_CACHE_BUSTING_SEARCH_PARAM);\n  const expectedHash = await computeRscCacheBustingSearchParam(options.request.headers);\n\n  if (actualHash === null && expectedHash === \"\") {\n    return null;\n  }\n\n  const acceptedHashes = new Set<string>([expectedHash]);\n  if (actualHash !== null && actualHash !== expectedHash) {\n    acceptedHashes.add(computeLegacyRscCacheBustingSearchParam(options.request.headers));\n    if (\n      normalizeRenderModeHeaderValue(options.request.headers.get(VINEXT_RSC_RENDER_MODE_HEADER)) ===\n      null\n    ) {\n      const previousHash = await computePreviousRscCacheBustingSearchParam(options.request.headers);\n      const previousLegacyHash = computePreviousLegacyRscCacheBustingSearchParam(\n        options.request.headers,\n      );\n      if (previousHash !== null) acceptedHashes.add(previousHash);\n      if (previousLegacyHash !== null) acceptedHashes.add(previousLegacyHash);\n    }\n  }\n\n  if (actualHash !== null && acceptedHashes.has(actualHash)) {\n    return null;\n  }\n\n  setRscCacheBustingSearchParam(url, expectedHash);\n  return new Response(null, {\n    status: 307,\n    headers: {\n      Location: `${url.pathname}${url.search}`,\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;AAuBA,MAAa,wCAAwC;AACrD,MAAa,qCAAqC;AAClD,MAAa,0BAA0B;AAKvC,MAAa,yBAAyB;;CAEpC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC,KAAK,KAAK;AAEZ,MAAM,6BAA6B;AACnC,MAAM,cAAc,IAAI,aAAa;AAarC,SAAS,gBAAgB,OAA2B;CAClD,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OACjB,UAAU,OAAO,aAAa,KAAK;CAGrC,OAAO,KAAK,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,QAAQ,OAAO,GAAG;;AAGlF,SAAS,qBAAqB,OAA8B;CAC1D,OAAO,SAAS;;AAGlB,SAAS,yBAAyB,OAAiD;CACjF,OAAO,SAAS,MAAM,SAAS,IAAI,QAAQ;;AAG7C,SAAgB,8BAA6C;CAC3D,OAAO,yBAAyB,QAAQ,IAAI,8BAA8B;;AAG5E,SAAgB,8BACd,SACA,kBAA6C,6BAA6B,EACpE;CACN,MAAM,aAAa,yBAAyB,gBAAgB;CAC5D,IAAI,YACF,QAAQ,IAAI,oCAAoC,WAAW;MAE3D,QAAQ,OAAO,mCAAmC;;AAItD,SAAgB,+BACd,yBACA,wBAAmD,6BAA6B,EACvE;CACT,MAAM,oCAAoC,yBAAyB,wBAAwB;CAC3F,MAAM,kCAAkC,yBAAyB,sBAAsB;CACvF,OACE,oCAAoC,QACnC,sCAAsC,QACrC,sCAAsC;;AAQ5C,SAAgB,2CACd,aACA,aACA,QACQ;CACR,IAAI,CAAC,aACH,OAAO;CAGT,MAAM,SAAS,IAAI,IAAI,aAAa,OAAO;CAC3C,gCAAgC,OAAO;CACvC,MAAM,UAAU,IAAI,IAAI,aAAa,OAAO;CAC5C,IAAI,WAAW,eAAe,OAAO,SAAS;CAC9C,IAAI,QAAQ,SAAS,SAAS,KAAK,QAAQ,SAAS,SAAS,IAAI,IAAI,CAAC,SAAS,SAAS,IAAI,EAC1F,YAAY;CAGd,IAAI,uBAAuB,WAAW,OAAO;CAC7C,IAAI,QAAQ,MAAM,wBAAwB,QAAQ;CAClD,OAAO;;AAGT,SAAgB,0CAA0C,SAMnB;CACrC,IACE,+BAA+B,QAAQ,yBAAyB,QAAQ,sBAAsB,EAE9F,OAAO,EAAE,MAAM,cAAc;CAG/B,OAAO;EACL,sBAAsB,2CACpB,QAAQ,aACR,QAAQ,aACR,QAAQ,OACT;EACD,MAAM;EACP;;AAGH,SAAS,+BAA+B,OAAqC;CAC3E,MAAM,aAAa,sBAAsB,MAAM;CAC/C,OAAO,eAAA,eAAgD,OAAO;;AAOhE,SAAS,wBACP,SACA,UAA0C,EAAE,EAC7B;CAGf,MAAM,SAAS;EACb,QAAQ,IAAI,4BAA4B;EACxC,QAAQ,IAAI,oCAAoC;EAChD,QAAQ,IAAI,8BAA8B;EAC1C,QAAQ,IAAI,gBAAgB;EAC5B,QAAQ,IAAI,mCAAmC;EAC/C,QAAQ,IAAI,4BAA4B;EACxC,GAAI,QAAQ,4BAA4B,QACpC,EAAE,GACF,CAAC,+BAA+B,QAAQ,IAAI,8BAA8B,CAAC,CAAC;EACjF;CAED,IAAI,OAAO,OAAO,UAAU,UAAU,KAAK,EACzC,OAAO;CAGT,OAAO,OAAO,IAAI,qBAAqB,CAAC,KAAK,IAAI;;AAGnD,eAAe,uBAAuB,OAAgC;CACpE,MAAM,SAAS,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,YAAY,OAAO,MAAM,CAAC;CAC1F,OAAO,gBAAgB,IAAI,WAAW,OAAO,CAAC,SAAS,GAAG,2BAA2B,CAAC;;AAGxF,SAAS,wCAAwC,SAA0B;CACzE,MAAM,QAAQ,wBAAwB,QAAQ;CAC9C,OAAO,UAAU,OAAO,KAAK,QAAQ,MAAM;;AAG7C,eAAe,0CAA0C,SAA0C;CACjG,MAAM,QAAQ,wBAAwB,SAAS,EAAE,yBAAyB,OAAO,CAAC;CAClF,IAAI,UAAU,MACZ,OAAO;CAGT,OAAO,uBAAuB,MAAM;;AAGtC,SAAS,gDAAgD,SAAiC;CACxF,MAAM,QAAQ,wBAAwB,SAAS,EAAE,yBAAyB,OAAO,CAAC;CAClF,OAAO,UAAU,OAAO,OAAO,QAAQ,MAAM;;AAG/C,SAAS,qCAAqC,KAAoB;CAEhE,QADiB,IAAI,OAAO,WAAW,IAAI,GAAG,IAAI,OAAO,MAAM,EAAE,GAAG,IAAI,QAErE,MAAM,IAAI,CACV,QAAQ,SAAS,KAAK,SAAS,KAAK,CAAC,4BAA4B,KAAK,CAAC;;AAG5E,SAAS,4BAA4B,MAAuB;CAC1D,MAAM,iBAAiB,KAAK,QAAQ,IAAI;CACxC,MAAM,SAAS,mBAAmB,KAAK,OAAO,KAAK,MAAM,GAAG,eAAe;CAE3E,IAAI;EACF,OACE,mBAAmB,OAAO,WAAW,KAAK,IAAI,CAAC,KAAK;SAEhD;EACN,OAAO,WAAW;;;AAItB,eAAsB,kCAAkC,SAAmC;CACzF,MAAM,QAAQ,wBAAwB,QAAQ;CAC9C,IAAI,UAAU,MACZ,OAAO;CAGT,OAAO,uBAAuB,MAAM;;AAGtC,SAAgB,8BAA8B,KAAU,MAAoB;CAC1E,MAAM,QAAQ,qCAAqC,IAAI;CAEvD,MAAM,KACJ,KAAK,SAAS,IACV,GAAG,sCAAsC,GAAG,SAC5C,sCACL;CACD,IAAI,SAAS,IAAI,MAAM,KAAK,IAAI;;AAGlC,SAAgB,gCAAgC,KAAgB;CAC9D,MAAM,QAAQ,qCAAqC,IAAI;CACvD,IAAI,SAAS,MAAM,SAAS,IAAI,IAAI,MAAM,KAAK,IAAI,KAAK;;;;;;AAO1D,SAAgB,eAAe,UAA0B;CACvD,OAAO,SAAS,SAAS,OAAO,GAAG,SAAS,MAAM,GAAG,GAAG,GAAG;;AAG7D,SAAgB,wBAAwB,UAA0C,EAAE,EAAW;CAC7F,MAAM,UAAU,IAAI,QAAQ;EAC1B,QAAQ;WACM;EACf,CAAC;CAEF,IAAI,QAAQ,wBAAwB,KAAA,KAAa,QAAQ,wBAAwB,MAC/E,QAAQ,IAAI,oCAAoC,QAAQ,oBAAoB;CAG9E,IAAI,QAAQ,uBAAuB,KAAA,KAAa,QAAQ,uBAAuB,MAC7E,QAAQ,IAAI,6BAA6B,QAAQ,mBAAmB;CAGtE,MAAM,aAAa,QAAQ,cAAA;CAC3B,IAAI,eAAA,cACF,QAAQ,IAAI,+BAA+B,WAAW;CAGxD,OAAO;;AAGT,SAAS,iBAAiB,MAAsB;CAC9C,MAAM,YAAY,KAAK,QAAQ,IAAI;CACnC,MAAM,aAAa,cAAc,KAAK,OAAO,KAAK,MAAM,GAAG,UAAU;CACrE,MAAM,aAAa,WAAW,QAAQ,IAAI;CAC1C,MAAM,WAAW,eAAe,KAAK,aAAa,WAAW,MAAM,GAAG,WAAW;CACjF,MAAM,QAAQ,eAAe,KAAK,KAAK,WAAW,MAAM,WAAW;CAGnE,OAAO,GADL,SAAS,SAAS,KAAK,SAAS,SAAS,IAAI,GAAG,SAAS,MAAM,GAAG,GAAG,GAAG,SACjD,MAAM;;AAGjC,eAAsB,oBAAoB,MAAc,SAAmC;CACzF,MAAM,MAAM,IAAI,IAAI,iBAAiB,KAAK,EAAE,sBAAsB;CAElE,8BAA8B,KAAK,MADhB,kCAAkC,QAAQ,CACrB;CACxC,OAAO,GAAG,IAAI,WAAW,IAAI;;AAG/B,eAAsB,0BACpB,UACA,SACiB;CACjB,MAAM,aAAa,IAAI,IAAI,QAAQ,IAAI;CACvC,MAAM,iBAAiB,IAAI,IAAI,UAAU,WAAW;CAEpD,IAAI,eAAe,WAAW,WAAW,QACvC,OAAO,eAAe,UAAU;CAGlC,MAAM,UAAU,MAAM,oBACpB,GAAG,eAAe,WAAW,eAAe,UAC5C,QAAQ,QACT;CACD,OAAO,GAAG,eAAe,SAAS;;AAGpC,eAAsB,qCACpB,SAC0B;CAC1B,IACE,CAAC,QAAQ,gBACR,QAAQ,QAAQ,WAAW,SAAS,QAAQ,QAAQ,WAAW,QAEhE,OAAO;CAGT,MAAM,MAAM,IAAI,IAAI,QAAQ,QAAQ,IAAI;CACxC,MAAM,aAAa,IAAI,aAAa,IAAI,sCAAsC;CAC9E,MAAM,eAAe,MAAM,kCAAkC,QAAQ,QAAQ,QAAQ;CAErF,IAAI,eAAe,QAAQ,iBAAiB,IAC1C,OAAO;CAGT,MAAM,iBAAiB,IAAI,IAAY,CAAC,aAAa,CAAC;CACtD,IAAI,eAAe,QAAQ,eAAe,cAAc;EACtD,eAAe,IAAI,wCAAwC,QAAQ,QAAQ,QAAQ,CAAC;EACpF,IACE,+BAA+B,QAAQ,QAAQ,QAAQ,IAAA,2BAAkC,CAAC,KAC1F,MACA;GACA,MAAM,eAAe,MAAM,0CAA0C,QAAQ,QAAQ,QAAQ;GAC7F,MAAM,qBAAqB,gDACzB,QAAQ,QAAQ,QACjB;GACD,IAAI,iBAAiB,MAAM,eAAe,IAAI,aAAa;GAC3D,IAAI,uBAAuB,MAAM,eAAe,IAAI,mBAAmB;;;CAI3E,IAAI,eAAe,QAAQ,eAAe,IAAI,WAAW,EACvD,OAAO;CAGT,8BAA8B,KAAK,aAAa;CAChD,OAAO,IAAI,SAAS,MAAM;EACxB,QAAQ;EACR,SAAS,EACP,UAAU,GAAG,IAAI,WAAW,IAAI,UACjC;EACF,CAAC"}

package/dist/server/app-rsc-embedded-chunks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-rsc-embedded-chunks.js","names":[],"sources":["../../src/server/app-rsc-embedded-chunks.ts"],"sourcesContent":["export const RSC_EMBEDDED_BINARY_CHUNK = 3;\n\nexport type RscEmbeddedChunk = string | [typeof RSC_EMBEDDED_BINARY_CHUNK, string];\n\nconst BASE64_CHUNK_SIZE = 0x8000;\nconst textEncoder = new TextEncoder();\n\nexport function bytesToBase64(bytes: Uint8Array): string {\n  let binary = \"\";\n  for (let offset = 0; offset < bytes.byteLength; offset += BASE64_CHUNK_SIZE) {\n    binary += String.fromCharCode(...bytes.subarray(offset, offset + BASE64_CHUNK_SIZE));\n  }\n  return btoa(binary);\n}\n\nfunction base64ToBytes(base64: string): Uint8Array {\n  const binary = atob(base64);\n  const bytes = new Uint8Array(binary.length);\n  for (let index = 0; index < binary.length; index++) {\n    bytes[index] = binary.charCodeAt(index);\n  }\n  return bytes;\n}\n\nexport function decodeRscEmbeddedChunk(chunk: RscEmbeddedChunk): Uint8Array {\n  if (typeof chunk === \"string\") {\n    return textEncoder.encode(chunk);\n  }\n  return base64ToBytes(chunk[1]);\n}\n\nexport function concatUint8Arrays(chunks: readonly Uint8Array[]): Uint8Array<ArrayBuffer> {\n  let totalLength = 0;\n  for (const chunk of chunks) {\n    totalLength += chunk.byteLength;\n  }\n  const result = new Uint8Array(totalLength);\n  let offset = 0;\n  for (const chunk of chunks) {\n    result.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return result;\n}\n"],"mappings":";AAAA,MAAa,4BAA4B;AAIzC,MAAM,oBAAoB;AAC1B,MAAM,cAAc,IAAI,aAAa;AAErC,SAAgB,cAAc,OAA2B;CACvD,IAAI,SAAS;CACb,KAAK,IAAI,SAAS,GAAG,SAAS,MAAM,YAAY,UAAU,mBACxD,UAAU,OAAO,aAAa,GAAG,MAAM,SAAS,QAAQ,SAAS,kBAAkB,CAAC;CAEtF,OAAO,KAAK,OAAO;;AAGrB,SAAS,cAAc,QAA4B;CACjD,MAAM,SAAS,KAAK,OAAO;CAC3B,MAAM,QAAQ,IAAI,WAAW,OAAO,OAAO;CAC3C,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SACzC,MAAM,SAAS,OAAO,WAAW,MAAM;CAEzC,OAAO;;AAGT,SAAgB,uBAAuB,OAAqC;CAC1E,IAAI,OAAO,UAAU,UACnB,OAAO,YAAY,OAAO,MAAM;CAElC,OAAO,cAAc,MAAM,GAAG;;AAGhC,SAAgB,kBAAkB,QAAwD;CACxF,IAAI,cAAc;CAClB,KAAK,MAAM,SAAS,QAClB,eAAe,MAAM;CAEvB,MAAM,SAAS,IAAI,WAAW,YAAY;CAC1C,IAAI,SAAS;CACb,KAAK,MAAM,SAAS,QAAQ;EAC1B,OAAO,IAAI,OAAO,OAAO;EACzB,UAAU,MAAM;;CAElB,OAAO"}

package/dist/server/app-rsc-error-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-rsc-error-handler.js","names":[],"sources":["../../src/server/app-rsc-error-handler.ts"],"sourcesContent":["import { createRscOnErrorHandler } from \"./app-rsc-errors.js\";\n\ntype ReportRequestError = (\n  error: Error,\n  requestInfo: { path: string; method: string; headers: Record<string, string> },\n  errorContext: { routerKind: \"App Router\"; routePath: string; routeType: \"render\" },\n) => void;\n\n/**\n * Build a per-request RSC error handler that extracts request metadata from\n * the incoming Web `Request`, wires it into a `createRscOnErrorHandler` call,\n * and binds the configured `reportRequestError` reporter.\n *\n * Pure factory: takes all deps explicitly — no closure over module-level state.\n */\nexport function createAppRscOnErrorHandler(\n  reportRequestError: ReportRequestError,\n  request: Request,\n  pathname: string,\n  routePath: string,\n): (error: unknown) => string | undefined {\n  const requestHeaders: Record<string, string> = Object.fromEntries(request.headers.entries());\n  const requestInfo = {\n    path: pathname,\n    method: request.method,\n    headers: requestHeaders,\n  };\n  const errorContext = {\n    routerKind: \"App Router\" as const,\n    routePath: routePath || pathname,\n    routeType: \"render\" as const,\n  };\n  return createRscOnErrorHandler({\n    errorContext,\n    reportRequestError,\n    requestInfo,\n  });\n}\n"],"mappings":";;;;;;;;;AAeA,SAAgB,2BACd,oBACA,SACA,UACA,WACwC;CACxC,MAAM,iBAAyC,OAAO,YAAY,QAAQ,QAAQ,SAAS,CAAC;CAC5F,MAAM,cAAc;EAClB,MAAM;EACN,QAAQ,QAAQ;EAChB,SAAS;EACV;CAMD,OAAO,wBAAwB;EAC7B,cAAA;GALA,YAAY;GACZ,WAAW,aAAa;GACxB,WAAW;GAGC;EACZ;EACA;EACD,CAAC"}

package/dist/server/app-rsc-errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-rsc-errors.js","names":[],"sources":["../../src/server/app-rsc-errors.ts"],"sourcesContent":["import { resolveAppPageSpecialError } from \"./app-page-execution.js\";\n\ntype DigestError = Error & { digest?: string };\n\ntype RscRequestInfo = {\n  path: string;\n  method: string;\n  headers: Record<string, string>;\n};\n\ntype RscErrorContext = {\n  routerKind: \"App Router\";\n  routePath: string;\n  routeType: \"render\";\n};\n\ntype RscErrorReporter = (\n  error: Error,\n  requestInfo: RscRequestInfo,\n  errorContext: RscErrorContext,\n) => void;\n\ntype CreateRscOnErrorHandlerOptions = {\n  errorContext: RscErrorContext | null;\n  nodeEnv?: string;\n  reportRequestError: RscErrorReporter;\n  requestInfo: RscRequestInfo | null;\n};\n\nexport function hasDigest(error: unknown): error is { digest: unknown } {\n  return Boolean(error && typeof error === \"object\" && \"digest\" in error);\n}\n\nfunction getThrownValueMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nfunction getThrownValueStack(error: unknown): string {\n  return error instanceof Error ? error.stack || \"\" : \"\";\n}\n\n/**\n * djb2 hash matching Next.js's string-hash package for RSC error digests.\n */\nexport function errorDigest(input: string): string {\n  let hash = 5381;\n  for (let i = input.length - 1; i >= 0; i--) {\n    hash = (hash * 33) ^ input.charCodeAt(i);\n  }\n  return (hash >>> 0).toString();\n}\n\nexport function sanitizeErrorForClient(error: unknown, nodeEnv = process.env.NODE_ENV): unknown {\n  if (resolveAppPageSpecialError(error)) {\n    return error;\n  }\n\n  if (nodeEnv !== \"production\") {\n    return error;\n  }\n\n  const sanitized: DigestError = new Error(\n    \"An error occurred in the Server Components render. \" +\n      \"The specific message is omitted in production builds to avoid leaking sensitive details. \" +\n      \"A digest property is included on this error instance which may provide additional details about the nature of the error.\",\n  );\n  sanitized.digest = errorDigest(getThrownValueMessage(error) + getThrownValueStack(error));\n  return sanitized;\n}\n\nexport function createRscOnErrorHandler(\n  options: CreateRscOnErrorHandlerOptions,\n): (error: unknown) => string | undefined {\n  return (error) => {\n    const nodeEnv = options.nodeEnv ?? process.env.NODE_ENV;\n\n    if (hasDigest(error)) {\n      return String(error.digest);\n    }\n\n    if (\n      nodeEnv !== \"production\" &&\n      error instanceof Error &&\n      error.message.includes(\n        \"Only plain objects, and a few built-ins, can be passed to Client Components\",\n      )\n    ) {\n      console.error(\n        \"[vinext] RSC serialization error: a non-plain object was passed from a Server Component to a Client Component.\\n\" +\n          \"\\n\" +\n          \"Common causes:\\n\" +\n          \"  * Passing a module namespace (import * as X) directly as a prop.\\n\" +\n          \"    Unlike Next.js (webpack), Vite produces real ESM module namespace objects\\n\" +\n          \"    which are not serializable. Fix: pass individual values instead,\\n\" +\n          \"    e.g. <Comp value={module.value} />\\n\" +\n          \"  * Passing a class instance (new Foo()) as a prop.\\n\" +\n          \"    Fix: convert to a plain object, e.g. { id: foo.id, name: foo.name }\\n\" +\n          \"  * Passing a Date, Map, or Set. Use .toISOString(), [...map.entries()], etc.\\n\" +\n          \"  * Passing Object.create(null). Use { ...obj } to restore a prototype.\\n\" +\n          \"\\n\" +\n          \"Original error:\",\n        error.message,\n      );\n      return undefined;\n    }\n\n    if (options.requestInfo && options.errorContext && error) {\n      options.reportRequestError(\n        error instanceof Error ? error : new Error(getThrownValueMessage(error)),\n        options.requestInfo,\n        options.errorContext,\n      );\n    }\n\n    if (nodeEnv === \"production\" && error) {\n      return errorDigest(getThrownValueMessage(error) + getThrownValueStack(error));\n    }\n\n    return undefined;\n  };\n}\n"],"mappings":";;AA6BA,SAAgB,UAAU,OAA8C;CACtE,OAAO,QAAQ,SAAS,OAAO,UAAU,YAAY,YAAY,MAAM;;AAGzE,SAAS,sBAAsB,OAAwB;CACrD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;AAG/D,SAAS,oBAAoB,OAAwB;CACnD,OAAO,iBAAiB,QAAQ,MAAM,SAAS,KAAK;;;;;AAMtD,SAAgB,YAAY,OAAuB;CACjD,IAAI,OAAO;CACX,KAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,GAAG,KACrC,OAAQ,OAAO,KAAM,MAAM,WAAW,EAAE;CAE1C,QAAQ,SAAS,GAAG,UAAU;;AAGhC,SAAgB,uBAAuB,OAAgB,UAAU,QAAQ,IAAI,UAAmB;CAC9F,IAAI,2BAA2B,MAAM,EACnC,OAAO;CAGT,IAAI,YAAY,cACd,OAAO;CAGT,MAAM,4BAAyB,IAAI,MACjC,uQAGD;CACD,UAAU,SAAS,YAAY,sBAAsB,MAAM,GAAG,oBAAoB,MAAM,CAAC;CACzF,OAAO;;AAGT,SAAgB,wBACd,SACwC;CACxC,QAAQ,UAAU;EAChB,MAAM,UAAU,QAAQ,WAAW,QAAQ,IAAI;EAE/C,IAAI,UAAU,MAAM,EAClB,OAAO,OAAO,MAAM,OAAO;EAG7B,IACE,YAAY,gBACZ,iBAAiB,SACjB,MAAM,QAAQ,SACZ,8EACD,EACD;GACA,QAAQ,MACN,8qBAaA,MAAM,QACP;GACD;;EAGF,IAAI,QAAQ,eAAe,QAAQ,gBAAgB,OACjD,QAAQ,mBACN,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,sBAAsB,MAAM,CAAC,EACxE,QAAQ,aACR,QAAQ,aACT;EAGH,IAAI,YAAY,gBAAgB,OAC9B,OAAO,YAAY,sBAAsB,MAAM,GAAG,oBAAoB,MAAM,CAAC"}

package/dist/server/app-rsc-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-rsc-handler.js","names":[],"sources":["../../src/server/app-rsc-handler.ts"],"sourcesContent":["import type {\n  NextHeader,\n  NextI18nConfig,\n  NextRedirect,\n  NextRewrite,\n} from \"../config/next-config.js\";\nimport {\n  isExternalUrl,\n  matchRedirect,\n  matchRewrite,\n  proxyExternalRequest,\n  requestContextFromRequest,\n  sanitizeDestination,\n  type BasePathMatchState,\n} from \"../config/config-matchers.js\";\nimport { headersContextFromRequest } from \"vinext/shims/headers\";\nimport {\n  ACTION_REVALIDATED_HEADER,\n  NEXT_ACTION_HEADER,\n  RSC_ACTION_HEADER,\n  RSC_HEADER,\n  VINEXT_MW_CTX_HEADER,\n  VINEXT_PRERENDER_ROUTE_PARAMS_HEADER,\n} from \"./headers.js\";\nimport { ensureFetchPatch, setCurrentFetchSoftTags } from \"vinext/shims/fetch-cache\";\nimport type { ReactFormState } from \"react-dom/client\";\nimport {\n  getRequestExecutionContext,\n  type ExecutionContextLike,\n} from \"vinext/shims/request-context\";\nimport { pickRootParams, setRootParams, type RootParams } from \"vinext/shims/root-params\";\nimport { createRequestContext, runWithRequestContext } from \"vinext/shims/unified-request-context\";\nimport { flattenErrorCauses } from \"../utils/error-cause.js\";\nimport { hasBasePath } from \"../utils/base-path.js\";\nimport { applyAppMiddleware, type AppMiddlewareContext } from \"./app-middleware.js\";\nimport { mergeMiddlewareResponseHeaders } from \"./app-page-response.js\";\nimport { handleAppPrerenderEndpoint } from \"./app-prerender-endpoints.js\";\nimport {\n  createRscRedirectLocation,\n  resolveInvalidRscCacheBustingRequest,\n  stripRscCacheBustingSearchParam,\n  stripRscSuffix,\n} from \"./app-rsc-cache-busting.js\";\nimport { finalizeAppRscResponse } from \"./app-rsc-response-finalizer.js\";\nimport { normalizeRscRequest } from \"./app-rsc-request-normalization.js\";\nimport { normalizeDefaultLocalePathname } from \"./pages-i18n.js\";\nimport { notFoundResponse } from \"./http-error-responses.js\";\nimport { getScriptNonceFromHeaderSources } from \"./csp.js\";\nimport { buildPageCacheTags } from \"./implicit-tags.js\";\nimport { isImageOptimizationPath } from \"./image-optimization.js\";\nimport { handleMetadataRouteRequest } from \"./metadata-route-response.js\";\nimport type { MiddlewareModule } from \"./middleware-runtime.js\";\nimport { runWithPrerenderWorkUnit } from \"./prerender-work-unit-setup.js\";\nimport { buildPostMwRequestContext } from \"./app-post-middleware-context.js\";\nimport type { AppRscRenderMode } from \"./app-rsc-render-mode.js\";\nimport {\n  cloneRequestWithHeaders,\n  filterInternalHeaders,\n  applyConfigHeadersToResponse,\n  normalizeTrailingSlash,\n  resolvePublicFileRoute,\n  validateImageUrl,\n} from \"./request-pipeline.js\";\nimport {\n  prerenderRouteParamsPayloadMatchesRoute,\n  readTrustedPrerenderRouteParams,\n  serializePrerenderRouteParamsHeader,\n} from \"./prerender-route-params.js\";\n\ntype AppPageParams = Record<string, string | string[]>;\ntype RequestContext = ReturnType<typeof requestContextFromRequest>;\ntype MetadataRoutes = Parameters<typeof handleMetadataRouteRequest>[0][\"metadataRoutes\"];\ntype MakeThenableParams = Parameters<typeof handleMetadataRouteRequest>[0][\"makeThenableParams\"];\ntype StaticParamsMap = Parameters<typeof handleAppPrerenderEndpoint>[1][\"staticParamsMap\"];\ntype RootParamNamesMap = Parameters<\n  typeof handleAppPrerenderEndpoint\n>[1][\"rootParamNamesByPattern\"];\n\ntype AppRscMiddlewareContext = AppMiddlewareContext;\n\ntype AppRscHandlerRoute = {\n  isDynamic: boolean;\n  page?: unknown;\n  pattern: string;\n  rootParamNames?: readonly string[];\n  routeHandler?: unknown;\n  routeSegments: readonly string[];\n};\n\ntype AppRscRouteMatch<TRoute> = {\n  params: AppPageParams;\n  route: TRoute;\n};\n\ntype DispatchMatchedPageOptions<TRoute> = {\n  cleanPathname: string;\n  formState: ReactFormState | null;\n  actionError?: unknown;\n  actionFailed?: boolean;\n  handlerStart: number;\n  interceptionContext: string | null;\n  isProgressiveActionRender: boolean;\n  isRscRequest: boolean;\n  middlewareContext: AppRscMiddlewareContext;\n  mountedSlotsHeader: string | null;\n  params: AppPageParams;\n  staticParamsValidationParams?: AppPageParams;\n  rootParams?: RootParams;\n  request: Request;\n  route: TRoute;\n  scriptNonce?: string;\n  searchParams: URLSearchParams;\n  renderMode: AppRscRenderMode;\n};\n\ntype DispatchMatchedRouteHandlerOptions<TRoute> = {\n  cleanPathname: string;\n  middlewareContext: AppRscMiddlewareContext;\n  /**\n   * `null` for non-dynamic routes. Mirrors Next.js' route handler context\n   * shape: user code that does `params ? await params : null` resolves to\n   * `null` for routes without dynamic segments. Dynamic routes receive the\n   * matched params object.\n   */\n  params: AppPageParams | null;\n  request: Request;\n  route: TRoute;\n  searchParams: URLSearchParams;\n};\n\ntype HandleProgressiveActionRequestOptions = {\n  actionId: string | null;\n  cleanPathname: string;\n  contentType: string;\n  middlewareContext: AppRscMiddlewareContext;\n  request: Request;\n};\n\n/**\n * Side-effect headers captured during a progressive (no-JS) server action's\n * non-redirect execution. Forwarded onto the page render response so that\n * `cookies().set(...)` and revalidation kinds reach the browser. See\n * `app-server-action-execution.ts` and issue #1483 for the full rationale.\n */\ntype ProgressiveActionSideEffects = {\n  pendingCookies: string[];\n  draftCookie: string | null | undefined;\n  /** Numeric revalidation kind: `0` (none), `1` (static+dynamic), etc. */\n  revalidationKind: number;\n};\n\ntype ProgressiveActionFormStateResult =\n  | ({\n      formState: ReactFormState | null;\n      kind: \"form-state\";\n    } & ProgressiveActionSideEffects)\n  | ({\n      actionError: unknown;\n      actionFailed: true;\n      formState: null;\n      kind: \"form-state\";\n    } & ProgressiveActionSideEffects);\n\ntype HandleServerActionRequestOptions = {\n  actionId: string | null;\n  cleanPathname: string;\n  contentType: string;\n  interceptionContext: string | null;\n  isRscRequest: boolean;\n  middlewareContext: AppRscMiddlewareContext;\n  mountedSlotsHeader: string | null;\n  request: Request;\n  searchParams: URLSearchParams;\n};\n\ntype RenderNotFoundOptions<TRoute> = {\n  isRscRequest: boolean;\n  matchedParams?: AppPageParams;\n  middlewareContext: AppRscMiddlewareContext;\n  request: Request;\n  route: TRoute | null;\n  scriptNonce?: string;\n};\n\ntype RenderPagesFallbackOptions = {\n  isRscRequest: boolean;\n  middlewareContext: AppRscMiddlewareContext;\n  request: Request;\n  url: URL;\n};\n\ntype NavigationContextValue = {\n  params: AppPageParams;\n  pathname: string;\n  searchParams: URLSearchParams;\n};\n\ntype CreateAppRscHandlerOptions<TRoute extends AppRscHandlerRoute> = {\n  basePath: string;\n  clearRequestContext: () => void;\n  configHeaders: NextHeader[];\n  configRedirects: NextRedirect[];\n  configRewrites: {\n    afterFiles: NextRewrite[];\n    beforeFiles: NextRewrite[];\n    fallback: NextRewrite[];\n  };\n  draftModeSecret: string;\n  dispatchMatchedPage: (options: DispatchMatchedPageOptions<TRoute>) => Promise<Response>;\n  dispatchMatchedRouteHandler: (\n    options: DispatchMatchedRouteHandlerOptions<TRoute>,\n  ) => Promise<Response>;\n  ensureInstrumentation?: () => Promise<void>;\n  handleProgressiveActionRequest: (\n    options: HandleProgressiveActionRequestOptions,\n  ) => Promise<Response | ProgressiveActionFormStateResult | null>;\n  handleServerActionRequest: (\n    options: HandleServerActionRequestOptions,\n  ) => Promise<Response | null>;\n  i18nConfig: NextI18nConfig | null;\n  isMiddlewareProxy: boolean;\n  loadPrerenderPagesRoutes?: () => Promise<unknown>;\n  makeThenableParams: MakeThenableParams;\n  matchRoute: (pathname: string) => AppRscRouteMatch<TRoute> | null;\n  metadataRoutes: MetadataRoutes;\n  middlewareModule: MiddlewareModule | null;\n  publicFiles: ReadonlySet<string>;\n  renderNotFound: (options: RenderNotFoundOptions<TRoute>) => Promise<Response | null>;\n  renderPagesFallback?: (options: RenderPagesFallbackOptions) => Promise<Response | null>;\n  rootParamNamesByPattern?: RootParamNamesMap;\n  setNavigationContext: (context: NavigationContextValue) => void;\n  staticParamsMap: StaticParamsMap;\n  trailingSlash: boolean;\n  validateDevRequestOrigin?: (request: Request) => Response | null;\n};\n\nfunction hasProperty<TKey extends PropertyKey>(\n  value: object,\n  key: TKey,\n): value is object & Record<TKey, unknown> {\n  return key in value;\n}\n\nfunction isExecutionContextLike(value: unknown): value is ExecutionContextLike {\n  if (!value || typeof value !== \"object\") return false;\n  return hasProperty(value, \"waitUntil\") && typeof value.waitUntil === \"function\";\n}\n\n// TODO(#1333): once App Router supports `basePath: false` rules (see\n// `normalizeRscRequest` — it 404s out-of-basePath requests before they\n// reach this code), pass `hadBasePath` here and skip the prefix when\n// false, mirroring the same guard in `prod-server.ts` and `deploy.ts`.\nfunction redirectDestinationWithBasePath(destination: string, basePath: string): string {\n  if (!basePath || isExternalUrl(destination) || hasBasePath(destination, basePath)) {\n    return destination;\n  }\n  return basePath + destination;\n}\n\nasync function applyRewrite(\n  options: {\n    basePathState: BasePathMatchState;\n    clearRequestContext: () => void;\n    request: Request;\n    requestContext: RequestContext;\n    rewrites: NextRewrite[];\n  },\n  cleanPathname: string,\n): Promise<Response | string | null> {\n  if (!options.rewrites.length) return null;\n\n  const rewritten = matchRewrite(\n    cleanPathname,\n    options.rewrites,\n    options.requestContext,\n    options.basePathState,\n  );\n  if (!rewritten) return null;\n\n  if (isExternalUrl(rewritten)) {\n    options.clearRequestContext();\n    return proxyExternalRequest(options.request, rewritten);\n  }\n\n  return rewritten;\n}\n\nfunction applyConfigHeadersToMiddlewareRedirect(\n  response: Response,\n  options: {\n    basePathState: BasePathMatchState;\n    configHeaders: NextHeader[];\n    pathname: string;\n    requestContext: RequestContext;\n  },\n): Response {\n  // Non-redirect middleware responses still pass through finalization, where\n  // config headers are applied once. Redirects skip finalization to avoid\n  // mutating immutable redirect headers, so they need the earlier header layer here.\n  if (response.status < 300 || response.status >= 400) return response;\n  if (!options.configHeaders.length) return response;\n\n  const headers = new Headers();\n  applyConfigHeadersToResponse(headers, {\n    configHeaders: options.configHeaders,\n    pathname: options.pathname,\n    requestContext: options.requestContext,\n    basePathState: options.basePathState,\n  });\n\n  if (!headers.entries().next().done) {\n    mergeMiddlewareResponseHeaders(headers, response.headers);\n    return new Response(response.body, {\n      status: response.status,\n      statusText: response.statusText,\n      headers,\n    });\n  }\n\n  return response;\n}\n\nasync function handleAppRscRequest<TRoute extends AppRscHandlerRoute>(\n  options: CreateAppRscHandlerOptions<TRoute>,\n  request: Request,\n  preMiddlewareRequestContext: RequestContext,\n  isDataRequest: boolean,\n): Promise<Response> {\n  const handlerStart = process.env.NODE_ENV !== \"production\" ? performance.now() : 0;\n\n  if (process.env.NODE_ENV !== \"production\") {\n    const originBlock = options.validateDevRequestOrigin?.(request);\n    if (originBlock) return originBlock;\n  }\n\n  const normalized = normalizeRscRequest(request, options.basePath);\n  if (normalized instanceof Response) return normalized;\n\n  const { url, isRscRequest, interceptionContextHeader, mountedSlotsHeader, renderMode } =\n    normalized;\n  let { pathname, cleanPathname } = normalized;\n  // Canonical (external) pathname the user requested. Middleware rewrites and\n  // next.config.js rewrites mutate `cleanPathname` so internal route matching\n  // can find the destination page, but hooks like `usePathname()` must reflect\n  // the original URL the user sees in the address bar.\n  // Matches Next.js: test/e2e/app-dir/hooks/hooks.test.ts —\n  //   \"should have the canonical url pathname on rewrite\"\n  const canonicalPathname = cleanPathname;\n\n  // The request reached this point so it was either under basePath (stripped\n  // by normalizeRscRequest) or basePath is empty. In both cases the matcher\n  // gating below treats default (basePath: true) rules as eligible. The App\n  // Router does not yet support `basePath: false` rules — they would need a\n  // pre-strip hook in normalizeRscRequest to fire. Tracked as follow-up to\n  // issue #1333.\n  const basePathState = { basePath: options.basePath, hadBasePath: true };\n\n  const prerenderEndpointResponse = await handleAppPrerenderEndpoint(request, {\n    isPrerenderEnabled() {\n      return process.env.VINEXT_PRERENDER === \"1\";\n    },\n    loadPagesRoutes: options.loadPrerenderPagesRoutes,\n    pathname,\n    rootParamNamesByPattern: options.rootParamNamesByPattern,\n    staticParamsMap: options.staticParamsMap,\n  });\n  if (prerenderEndpointResponse) return prerenderEndpointResponse;\n\n  const trailingSlashRedirect = normalizeTrailingSlash(\n    pathname,\n    options.basePath,\n    options.trailingSlash,\n    url.search,\n  );\n  if (trailingSlashRedirect) return trailingSlashRedirect;\n\n  // Default-locale path normalisation (issue #1336, item 4). Next.js\n  // splices in the (domain-aware) default locale on every request that\n  // arrives without a locale prefix before running config redirect / rewrite\n  // / header matching. Mirrors resolve-routes.ts lines ~250-263.\n  //\n  // Defined once here so the same helper is reused for the redirect match\n  // below, the middleware-redirect config header match further down, and the\n  // post-middleware rewrite matches. `i18nConfig` and `url.hostname` are\n  // request-scoped constants from this point on.\n  const matchPathname = (p: string): string =>\n    normalizeDefaultLocalePathname(p, options.i18nConfig, { hostname: url.hostname });\n\n  const redirectPathname = matchPathname(stripRscSuffix(pathname));\n  const redirect = matchRedirect(\n    redirectPathname,\n    options.configRedirects,\n    preMiddlewareRequestContext,\n    basePathState,\n  );\n  if (redirect) {\n    const destination = sanitizeDestination(\n      redirectDestinationWithBasePath(redirect.destination, options.basePath),\n    );\n    const location =\n      isRscRequest && request.headers.get(RSC_HEADER) === \"1\"\n        ? await createRscRedirectLocation(destination, request)\n        : destination;\n    return new Response(null, {\n      status: redirect.permanent ? 308 : 307,\n      headers: { Location: location },\n    });\n  }\n\n  const rscCacheBustingRedirect = await resolveInvalidRscCacheBustingRequest({\n    isRscRequest,\n    request,\n  });\n  if (rscCacheBustingRedirect) return rscCacheBustingRedirect;\n\n  const middlewareContext: AppRscMiddlewareContext = {\n    headers: null,\n    requestHeaders: null,\n    status: null,\n  };\n\n  if (options.middlewareModule) {\n    const middlewareResult = await applyAppMiddleware({\n      basePath: options.basePath,\n      cleanPathname,\n      context: middlewareContext,\n      i18nConfig: options.i18nConfig,\n      isDataRequest,\n      isProxy: options.isMiddlewareProxy,\n      module: options.middlewareModule,\n      request,\n      trailingSlash: options.trailingSlash,\n    });\n    if (middlewareResult.kind === \"response\") {\n      return applyConfigHeadersToMiddlewareRedirect(middlewareResult.response, {\n        basePathState,\n        configHeaders: options.configHeaders,\n        pathname: matchPathname(cleanPathname),\n        requestContext: preMiddlewareRequestContext,\n      });\n    }\n\n    cleanPathname = middlewareResult.cleanPathname;\n    if (middlewareResult.search !== null) {\n      url.search = middlewareResult.search;\n    }\n  }\n\n  const scriptNonce = getScriptNonceFromHeaderSources(request.headers, middlewareContext.headers);\n  const postMiddlewareRequestContext = buildPostMwRequestContext(request);\n\n  // Rewrites (beforeFiles, afterFiles, fallback) use `matchPathname` from\n  // above to splice in the default locale before matching. Route matching\n  // itself continues to use the un-prefixed `cleanPathname` because App\n  // Router files live under `app/...` with no locale segment. See issue\n  // #1336 item 4 / pages-i18n.normalizeDefaultLocalePathname.\n  const beforeFilesRewrite = await applyRewrite(\n    {\n      basePathState,\n      clearRequestContext: options.clearRequestContext,\n      request,\n      requestContext: postMiddlewareRequestContext,\n      rewrites: options.configRewrites.beforeFiles,\n    },\n    matchPathname(cleanPathname),\n  );\n  if (beforeFilesRewrite instanceof Response) return beforeFilesRewrite;\n  if (beforeFilesRewrite) cleanPathname = beforeFilesRewrite;\n\n  if (isImageOptimizationPath(cleanPathname)) {\n    const imageUrlResult = validateImageUrl(url.searchParams.get(\"url\"), request.url);\n    if (imageUrlResult instanceof Response) return imageUrlResult;\n    return Response.redirect(new URL(imageUrlResult, url.origin).href, 302);\n  }\n\n  const metadataRouteResponse = await handleMetadataRouteRequest({\n    metadataRoutes: options.metadataRoutes,\n    cleanPathname,\n    makeThenableParams: options.makeThenableParams,\n  });\n  if (metadataRouteResponse) return metadataRouteResponse;\n\n  const publicFileResponse = resolvePublicFileRoute({\n    cleanPathname,\n    middlewareContext,\n    pathname,\n    publicFiles: options.publicFiles,\n    request,\n  });\n  if (publicFileResponse) {\n    options.clearRequestContext();\n    return publicFileResponse;\n  }\n\n  if (isRscRequest) {\n    stripRscCacheBustingSearchParam(url);\n  }\n\n  options.setNavigationContext({\n    pathname: canonicalPathname,\n    searchParams: url.searchParams,\n    params: {},\n  });\n\n  // Eagerly seed `setRootParams` from the current cleanPathname before any\n  // action dispatch so that user code which reads `unstable_rootParams()`\n  // inside route handlers, `\"use cache\"` functions, and the page rerender\n  // that follows a successful server action observes the matched layout's\n  // root params. Without this seeding the rootParams remain null until the\n  // post-action match block below runs, which is too late for action\n  // execution and route-handler dispatch (both happen earlier).\n  //\n  // The route is matched against the pre-rewrite cleanPathname here. If the\n  // afterFiles / fallback rewrites further down land on a different route,\n  // the second `setRootParams` call below replaces this value before the\n  // page renders, so there is no stale-value risk for ordinary page renders.\n  // For action requests we intentionally do not re-run rewrites — actions\n  // are always processed against the cleanPathname they were posted to.\n  const preActionMatch = options.matchRoute(cleanPathname);\n  if (preActionMatch) {\n    setRootParams(pickRootParams(preActionMatch.params, preActionMatch.route.rootParamNames));\n  }\n\n  const actionId =\n    request.headers.get(RSC_ACTION_HEADER) ?? request.headers.get(NEXT_ACTION_HEADER);\n  const contentType = request.headers.get(\"content-type\") || \"\";\n\n  const progressiveActionResult = await options.handleProgressiveActionRequest({\n    actionId,\n    cleanPathname,\n    contentType,\n    middlewareContext,\n    request,\n  });\n  if (progressiveActionResult instanceof Response) return progressiveActionResult;\n  const isProgressiveActionRender = progressiveActionResult?.kind === \"form-state\";\n  const formState = isProgressiveActionRender ? progressiveActionResult.formState : null;\n  const failedProgressiveActionResult =\n    isProgressiveActionRender && \"actionFailed\" in progressiveActionResult\n      ? progressiveActionResult\n      : null;\n  const actionFailed = failedProgressiveActionResult !== null;\n  const actionError = failedProgressiveActionResult?.actionError;\n\n  const serverActionResponse = await options.handleServerActionRequest({\n    actionId,\n    cleanPathname,\n    contentType,\n    interceptionContext: interceptionContextHeader,\n    isRscRequest,\n    middlewareContext,\n    mountedSlotsHeader,\n    request,\n    searchParams: url.searchParams,\n  });\n  if (serverActionResponse) return serverActionResponse;\n\n  let match = preActionMatch;\n  if (!match || match.route.isDynamic) {\n    const afterFilesRewrite = await applyRewrite(\n      {\n        basePathState,\n        clearRequestContext: options.clearRequestContext,\n        request,\n        requestContext: postMiddlewareRequestContext,\n        rewrites: options.configRewrites.afterFiles,\n      },\n      matchPathname(cleanPathname),\n    );\n    if (afterFilesRewrite instanceof Response) return afterFilesRewrite;\n    if (afterFilesRewrite) {\n      cleanPathname = afterFilesRewrite;\n      match = options.matchRoute(cleanPathname);\n    }\n  }\n\n  if (!match) {\n    const fallbackRewrite = await applyRewrite(\n      {\n        basePathState,\n        clearRequestContext: options.clearRequestContext,\n        request,\n        requestContext: postMiddlewareRequestContext,\n        rewrites: options.configRewrites.fallback,\n      },\n      matchPathname(cleanPathname),\n    );\n    if (fallbackRewrite instanceof Response) return fallbackRewrite;\n    if (fallbackRewrite) {\n      cleanPathname = fallbackRewrite;\n      match = options.matchRoute(cleanPathname);\n    }\n  }\n\n  if (!match) {\n    // Dev-only favicon short-circuit: browsers auto-request /favicon.ico on\n    // every page load. Don't compile/render the not-found page for it.\n    // Check `canonicalPathname` (the original browser-requested URL) so a\n    // middleware rewrite that lands on `/favicon.ico` still falls through to\n    // the normal not-found render.\n    // Matches Next.js: packages/next/src/server/lib/router-server.ts —\n    // condition `parsedUrl.pathname === '/favicon.ico'`.\n    if (process.env.NODE_ENV !== \"production\" && canonicalPathname === \"/favicon.ico\") {\n      options.clearRequestContext();\n      return new Response(\"\", { status: 404 });\n    }\n\n    const pagesFallbackResponse = await options.renderPagesFallback?.({\n      isRscRequest,\n      middlewareContext,\n      request,\n      url,\n    });\n    if (pagesFallbackResponse) {\n      options.clearRequestContext();\n      return pagesFallbackResponse;\n    }\n\n    const renderedNotFoundResponse = await options.renderNotFound({\n      isRscRequest,\n      middlewareContext,\n      request,\n      route: null,\n      scriptNonce,\n    });\n    if (renderedNotFoundResponse) return renderedNotFoundResponse;\n\n    options.clearRequestContext();\n    const headers = new Headers();\n    mergeMiddlewareResponseHeaders(headers, middlewareContext.headers);\n    return notFoundResponse({ headers });\n  }\n\n  const { route, params } = match;\n  const prerenderRouteParamsPayload = readTrustedPrerenderRouteParams(request);\n  const prerenderRouteParams = prerenderRouteParamsPayloadMatchesRoute(\n    prerenderRouteParamsPayload,\n    route.pattern,\n    params,\n  )\n    ? prerenderRouteParamsPayload.params\n    : null;\n  const renderParams = prerenderRouteParams ?? params;\n  options.setNavigationContext({\n    pathname: canonicalPathname,\n    searchParams: url.searchParams,\n    params: renderParams,\n  });\n  const rootParams = pickRootParams(renderParams, route.rootParamNames);\n  setRootParams(rootParams);\n\n  if (route.routeHandler) {\n    setCurrentFetchSoftTags(\n      buildPageCacheTags(cleanPathname, [], [...route.routeSegments], \"route\"),\n    );\n    return options.dispatchMatchedRouteHandler({\n      cleanPathname,\n      middlewareContext,\n      // Non-dynamic routes report params as `null` to match Next.js. Internal\n      // bookkeeping above (navigation context, root params) keeps the matched\n      // object (always `{}` for non-dynamic) so `useParams()` etc. still see\n      // an object shape; only the user-facing handler context surfaces null.\n      params: route.isDynamic ? renderParams : null,\n      request,\n      route,\n      searchParams: url.searchParams,\n    });\n  }\n\n  const pageResponse = await options.dispatchMatchedPage({\n    cleanPathname,\n    formState,\n    actionError,\n    actionFailed,\n    handlerStart,\n    interceptionContext: interceptionContextHeader,\n    isProgressiveActionRender,\n    isRscRequest,\n    middlewareContext,\n    mountedSlotsHeader,\n    params: renderParams,\n    staticParamsValidationParams: prerenderRouteParams === null ? undefined : params,\n    rootParams,\n    request,\n    route,\n    scriptNonce,\n    searchParams: url.searchParams,\n    renderMode,\n  });\n\n  // No-JS progressive form actions write cookies via cookies().set() / draftMode()\n  // *during action execution*, before the page rerender begins. Those writes only\n  // exist on the request-scoped headers state; the page-render path never flushes\n  // them. We attach them here so the rendered Response carries the action's\n  // Set-Cookie headers and revalidation marker, mirroring Next.js'\n  // res.setHeader('set-cookie', ...) flush in action-handler.ts / app-render.tsx.\n  // Issue: https://github.com/cloudflare/vinext/issues/1483\n  if (isProgressiveActionRender) {\n    return applyProgressiveActionSideEffects(pageResponse, progressiveActionResult);\n  }\n  return pageResponse;\n}\n\n/**\n * Append `Set-Cookie` headers and the `x-action-revalidated` marker captured\n * during progressive (no-JS) server action execution to the page render\n * response. See issue #1483.\n *\n * Falls back to rebuilding the response when the headers object is immutable\n * (e.g. `Response.redirect()`), so cookies set by the action ride out on a\n * redirect issued during the rerender too.\n */\nfunction applyProgressiveActionSideEffects(\n  response: Response,\n  sideEffects: ProgressiveActionFormStateResult,\n): Response {\n  const hasPendingCookies = sideEffects.pendingCookies.length > 0;\n  const hasDraftCookie = Boolean(sideEffects.draftCookie);\n  const hasRevalidationKind = sideEffects.revalidationKind !== 0;\n  if (!hasPendingCookies && !hasDraftCookie && !hasRevalidationKind) {\n    return response;\n  }\n\n  const applyTo = (headers: Headers): void => {\n    for (const cookie of sideEffects.pendingCookies) {\n      headers.append(\"Set-Cookie\", cookie);\n    }\n    if (sideEffects.draftCookie) {\n      headers.append(\"Set-Cookie\", sideEffects.draftCookie);\n    }\n    if (hasRevalidationKind) {\n      headers.set(ACTION_REVALIDATED_HEADER, JSON.stringify(sideEffects.revalidationKind));\n    }\n  };\n\n  try {\n    applyTo(response.headers);\n    return response;\n  } catch {\n    // Headers were immutable (Response.redirect()/Response.error()) — rebuild\n    // with a fresh mutable Headers seeded from the original response.\n    const headers = new Headers(response.headers);\n    applyTo(headers);\n    return new Response(response.body, {\n      status: response.status,\n      statusText: response.statusText,\n      headers,\n    });\n  }\n}\n\nexport function createAppRscHandler<TRoute extends AppRscHandlerRoute>(\n  options: CreateAppRscHandlerOptions<TRoute>,\n): (request: Request, ctx: unknown) => Promise<Response> {\n  return async function appRscHandler(rawRequest, ctx) {\n    await options.ensureInstrumentation?.();\n\n    // Strip forged internal headers at the App Router request boundary.\n    // Must happen BEFORE headersContextFromRequest() and\n    // requestContextFromRequest() so the captured context never contains\n    // attacker-controlled internal headers. This is the correct boundary\n    // for pure App Router requests; in hybrid app+pages mode the connect\n    // handler already filtered headers upstream and x-vinext-mw-ctx\n    // (not in INTERNAL_HEADERS) carries the forwarded middleware context.\n    // srvx's NodeRequestHeaders reads from rawHeaders for iteration but falls\n    // back to req.headers for .get() / .has(). In the dev server we add\n    // x-vinext-mw-ctx to req.headers after the Request is built, so it is\n    // visible to .get() but lost when filterInternalHeaders iterates. Read it\n    // BEFORE iterating so applyForwardedMiddlewareContext can skip middleware.\n    const mwCtx = rawRequest.headers.get(VINEXT_MW_CTX_HEADER);\n    // Capture `x-nextjs-data` before filtering — the middleware redirect\n    // protocol needs to know whether the inbound request was a `_next/data`\n    // fetch to emit `x-nextjs-redirect` instead of an HTTP redirect.\n    const isDataRequest = rawRequest.headers.get(\"x-nextjs-data\") === \"1\";\n    // Read the trusted prerender route params before filtering strips the\n    // route-params header (it IS in VINEXT_INTERNAL_HEADERS), then re-attach the\n    // validated value below so the second read in handleAppRscRequest still sees\n    // it. The secret was already verified upstream at prod-server's\n    // nodeToWebRequest boundary; the surviving secret header (NOT in either\n    // internal-header list) lets readTrustedPrerenderRouteParams's\n    // VINEXT_PRERENDER gate pass on the reconstructed request. If the secret\n    // header is ever added to VINEXT_INTERNAL_HEADERS, that second read breaks.\n    const prerenderRouteParamsPayload = readTrustedPrerenderRouteParams(rawRequest);\n    const filteredHeaders = filterInternalHeaders(rawRequest.headers);\n    if (mwCtx !== null) {\n      filteredHeaders.set(VINEXT_MW_CTX_HEADER, mwCtx);\n    }\n    const prerenderRouteParamsHeader = serializePrerenderRouteParamsHeader(\n      prerenderRouteParamsPayload,\n    );\n    if (prerenderRouteParamsHeader !== null) {\n      filteredHeaders.set(VINEXT_PRERENDER_ROUTE_PARAMS_HEADER, prerenderRouteParamsHeader);\n    }\n    const request = cloneRequestWithHeaders(rawRequest, filteredHeaders);\n\n    const executionContext = isExecutionContextLike(ctx)\n      ? ctx\n      : (getRequestExecutionContext() ?? null);\n    const headersContext = headersContextFromRequest(request, {\n      draftModeSecret: options.draftModeSecret,\n    });\n    const requestContext = createRequestContext({\n      headersContext,\n      executionContext,\n      unstableCacheRevalidation: \"background\",\n    });\n\n    return runWithRequestContext(requestContext, () =>\n      runWithPrerenderWorkUnit(\n        async () => {\n          ensureFetchPatch();\n          const preMiddlewareRequestContext = requestContextFromRequest(request);\n          let response: Response;\n\n          try {\n            response = await handleAppRscRequest(\n              options,\n              request,\n              preMiddlewareRequestContext,\n              isDataRequest,\n            );\n          } catch (error) {\n            if (process.env.NODE_ENV !== \"production\") {\n              flattenErrorCauses(error);\n            }\n            throw error;\n          }\n\n          return finalizeAppRscResponse(response, request, {\n            basePath: options.basePath,\n            configHeaders: options.configHeaders,\n            i18nConfig: options.i18nConfig,\n            requestContext: preMiddlewareRequestContext,\n          });\n        },\n        { route: () => new URL(request.url).pathname },\n      ),\n    );\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA4OA,SAAS,YACP,OACA,KACyC;CACzC,OAAO,OAAO;;AAGhB,SAAS,uBAAuB,OAA+C;CAC7E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,OAAO,YAAY,OAAO,YAAY,IAAI,OAAO,MAAM,cAAc;;AAOvE,SAAS,gCAAgC,aAAqB,UAA0B;CACtF,IAAI,CAAC,YAAY,cAAc,YAAY,IAAI,YAAY,aAAa,SAAS,EAC/E,OAAO;CAET,OAAO,WAAW;;AAGpB,eAAe,aACb,SAOA,eACmC;CACnC,IAAI,CAAC,QAAQ,SAAS,QAAQ,OAAO;CAErC,MAAM,YAAY,aAChB,eACA,QAAQ,UACR,QAAQ,gBACR,QAAQ,cACT;CACD,IAAI,CAAC,WAAW,OAAO;CAEvB,IAAI,cAAc,UAAU,EAAE;EAC5B,QAAQ,qBAAqB;EAC7B,OAAO,qBAAqB,QAAQ,SAAS,UAAU;;CAGzD,OAAO;;AAGT,SAAS,uCACP,UACA,SAMU;CAIV,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK,OAAO;CAC5D,IAAI,CAAC,QAAQ,cAAc,QAAQ,OAAO;CAE1C,MAAM,UAAU,IAAI,SAAS;CAC7B,6BAA6B,SAAS;EACpC,eAAe,QAAQ;EACvB,UAAU,QAAQ;EAClB,gBAAgB,QAAQ;EACxB,eAAe,QAAQ;EACxB,CAAC;CAEF,IAAI,CAAC,QAAQ,SAAS,CAAC,MAAM,CAAC,MAAM;EAClC,+BAA+B,SAAS,SAAS,QAAQ;EACzD,OAAO,IAAI,SAAS,SAAS,MAAM;GACjC,QAAQ,SAAS;GACjB,YAAY,SAAS;GACrB;GACD,CAAC;;CAGJ,OAAO;;AAGT,eAAe,oBACb,SACA,SACA,6BACA,eACmB;CACnB,MAAM,eAAe,QAAQ,IAAI,aAAa,eAAe,YAAY,KAAK,GAAG;CAEjF,IAAI,QAAQ,IAAI,aAAa,cAAc;EACzC,MAAM,cAAc,QAAQ,2BAA2B,QAAQ;EAC/D,IAAI,aAAa,OAAO;;CAG1B,MAAM,aAAa,oBAAoB,SAAS,QAAQ,SAAS;CACjE,IAAI,sBAAsB,UAAU,OAAO;CAE3C,MAAM,EAAE,KAAK,cAAc,2BAA2B,oBAAoB,eACxE;CACF,IAAI,EAAE,UAAU,kBAAkB;CAOlC,MAAM,oBAAoB;CAQ1B,MAAM,gBAAgB;EAAE,UAAU,QAAQ;EAAU,aAAa;EAAM;CAEvE,MAAM,4BAA4B,MAAM,2BAA2B,SAAS;EAC1E,qBAAqB;GACnB,OAAO,QAAQ,IAAI,qBAAqB;;EAE1C,iBAAiB,QAAQ;EACzB;EACA,yBAAyB,QAAQ;EACjC,iBAAiB,QAAQ;EAC1B,CAAC;CACF,IAAI,2BAA2B,OAAO;CAEtC,MAAM,wBAAwB,uBAC5B,UACA,QAAQ,UACR,QAAQ,eACR,IAAI,OACL;CACD,IAAI,uBAAuB,OAAO;CAWlC,MAAM,iBAAiB,MACrB,+BAA+B,GAAG,QAAQ,YAAY,EAAE,UAAU,IAAI,UAAU,CAAC;CAGnF,MAAM,WAAW,cADQ,cAAc,eAAe,SAAS,CAE7C,EAChB,QAAQ,iBACR,6BACA,cACD;CACD,IAAI,UAAU;EACZ,MAAM,cAAc,oBAClB,gCAAgC,SAAS,aAAa,QAAQ,SAAS,CACxE;EACD,MAAM,WACJ,gBAAgB,QAAQ,QAAQ,IAAA,MAAe,KAAK,MAChD,MAAM,0BAA0B,aAAa,QAAQ,GACrD;EACN,OAAO,IAAI,SAAS,MAAM;GACxB,QAAQ,SAAS,YAAY,MAAM;GACnC,SAAS,EAAE,UAAU,UAAU;GAChC,CAAC;;CAGJ,MAAM,0BAA0B,MAAM,qCAAqC;EACzE;EACA;EACD,CAAC;CACF,IAAI,yBAAyB,OAAO;CAEpC,MAAM,oBAA6C;EACjD,SAAS;EACT,gBAAgB;EAChB,QAAQ;EACT;CAED,IAAI,QAAQ,kBAAkB;EAC5B,MAAM,mBAAmB,MAAM,mBAAmB;GAChD,UAAU,QAAQ;GAClB;GACA,SAAS;GACT,YAAY,QAAQ;GACpB;GACA,SAAS,QAAQ;GACjB,QAAQ,QAAQ;GAChB;GACA,eAAe,QAAQ;GACxB,CAAC;EACF,IAAI,iBAAiB,SAAS,YAC5B,OAAO,uCAAuC,iBAAiB,UAAU;GACvE;GACA,eAAe,QAAQ;GACvB,UAAU,cAAc,cAAc;GACtC,gBAAgB;GACjB,CAAC;EAGJ,gBAAgB,iBAAiB;EACjC,IAAI,iBAAiB,WAAW,MAC9B,IAAI,SAAS,iBAAiB;;CAIlC,MAAM,cAAc,gCAAgC,QAAQ,SAAS,kBAAkB,QAAQ;CAC/F,MAAM,+BAA+B,0BAA0B,QAAQ;CAOvE,MAAM,qBAAqB,MAAM,aAC/B;EACE;EACA,qBAAqB,QAAQ;EAC7B;EACA,gBAAgB;EAChB,UAAU,QAAQ,eAAe;EAClC,EACD,cAAc,cAAc,CAC7B;CACD,IAAI,8BAA8B,UAAU,OAAO;CACnD,IAAI,oBAAoB,gBAAgB;CAExC,IAAI,wBAAwB,cAAc,EAAE;EAC1C,MAAM,iBAAiB,iBAAiB,IAAI,aAAa,IAAI,MAAM,EAAE,QAAQ,IAAI;EACjF,IAAI,0BAA0B,UAAU,OAAO;EAC/C,OAAO,SAAS,SAAS,IAAI,IAAI,gBAAgB,IAAI,OAAO,CAAC,MAAM,IAAI;;CAGzE,MAAM,wBAAwB,MAAM,2BAA2B;EAC7D,gBAAgB,QAAQ;EACxB;EACA,oBAAoB,QAAQ;EAC7B,CAAC;CACF,IAAI,uBAAuB,OAAO;CAElC,MAAM,qBAAqB,uBAAuB;EAChD;EACA;EACA;EACA,aAAa,QAAQ;EACrB;EACD,CAAC;CACF,IAAI,oBAAoB;EACtB,QAAQ,qBAAqB;EAC7B,OAAO;;CAGT,IAAI,cACF,gCAAgC,IAAI;CAGtC,QAAQ,qBAAqB;EAC3B,UAAU;EACV,cAAc,IAAI;EAClB,QAAQ,EAAE;EACX,CAAC;CAgBF,MAAM,iBAAiB,QAAQ,WAAW,cAAc;CACxD,IAAI,gBACF,cAAc,eAAe,eAAe,QAAQ,eAAe,MAAM,eAAe,CAAC;CAG3F,MAAM,WACJ,QAAQ,QAAQ,IAAA,eAAsB,IAAI,QAAQ,QAAQ,IAAA,cAAuB;CACnF,MAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe,IAAI;CAE3D,MAAM,0BAA0B,MAAM,QAAQ,+BAA+B;EAC3E;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,IAAI,mCAAmC,UAAU,OAAO;CACxD,MAAM,4BAA4B,yBAAyB,SAAS;CACpE,MAAM,YAAY,4BAA4B,wBAAwB,YAAY;CAClF,MAAM,gCACJ,6BAA6B,kBAAkB,0BAC3C,0BACA;CACN,MAAM,eAAe,kCAAkC;CACvD,MAAM,cAAc,+BAA+B;CAEnD,MAAM,uBAAuB,MAAM,QAAQ,0BAA0B;EACnE;EACA;EACA;EACA,qBAAqB;EACrB;EACA;EACA;EACA;EACA,cAAc,IAAI;EACnB,CAAC;CACF,IAAI,sBAAsB,OAAO;CAEjC,IAAI,QAAQ;CACZ,IAAI,CAAC,SAAS,MAAM,MAAM,WAAW;EACnC,MAAM,oBAAoB,MAAM,aAC9B;GACE;GACA,qBAAqB,QAAQ;GAC7B;GACA,gBAAgB;GAChB,UAAU,QAAQ,eAAe;GAClC,EACD,cAAc,cAAc,CAC7B;EACD,IAAI,6BAA6B,UAAU,OAAO;EAClD,IAAI,mBAAmB;GACrB,gBAAgB;GAChB,QAAQ,QAAQ,WAAW,cAAc;;;CAI7C,IAAI,CAAC,OAAO;EACV,MAAM,kBAAkB,MAAM,aAC5B;GACE;GACA,qBAAqB,QAAQ;GAC7B;GACA,gBAAgB;GAChB,UAAU,QAAQ,eAAe;GAClC,EACD,cAAc,cAAc,CAC7B;EACD,IAAI,2BAA2B,UAAU,OAAO;EAChD,IAAI,iBAAiB;GACnB,gBAAgB;GAChB,QAAQ,QAAQ,WAAW,cAAc;;;CAI7C,IAAI,CAAC,OAAO;EAQV,IAAI,QAAQ,IAAI,aAAa,gBAAgB,sBAAsB,gBAAgB;GACjF,QAAQ,qBAAqB;GAC7B,OAAO,IAAI,SAAS,IAAI,EAAE,QAAQ,KAAK,CAAC;;EAG1C,MAAM,wBAAwB,MAAM,QAAQ,sBAAsB;GAChE;GACA;GACA;GACA;GACD,CAAC;EACF,IAAI,uBAAuB;GACzB,QAAQ,qBAAqB;GAC7B,OAAO;;EAGT,MAAM,2BAA2B,MAAM,QAAQ,eAAe;GAC5D;GACA;GACA;GACA,OAAO;GACP;GACD,CAAC;EACF,IAAI,0BAA0B,OAAO;EAErC,QAAQ,qBAAqB;EAC7B,MAAM,UAAU,IAAI,SAAS;EAC7B,+BAA+B,SAAS,kBAAkB,QAAQ;EAClE,OAAO,iBAAiB,EAAE,SAAS,CAAC;;CAGtC,MAAM,EAAE,OAAO,WAAW;CAC1B,MAAM,8BAA8B,gCAAgC,QAAQ;CAC5E,MAAM,uBAAuB,wCAC3B,6BACA,MAAM,SACN,OACD,GACG,4BAA4B,SAC5B;CACJ,MAAM,eAAe,wBAAwB;CAC7C,QAAQ,qBAAqB;EAC3B,UAAU;EACV,cAAc,IAAI;EAClB,QAAQ;EACT,CAAC;CACF,MAAM,aAAa,eAAe,cAAc,MAAM,eAAe;CACrE,cAAc,WAAW;CAEzB,IAAI,MAAM,cAAc;EACtB,wBACE,mBAAmB,eAAe,EAAE,EAAE,CAAC,GAAG,MAAM,cAAc,EAAE,QAAQ,CACzE;EACD,OAAO,QAAQ,4BAA4B;GACzC;GACA;GAKA,QAAQ,MAAM,YAAY,eAAe;GACzC;GACA;GACA,cAAc,IAAI;GACnB,CAAC;;CAGJ,MAAM,eAAe,MAAM,QAAQ,oBAAoB;EACrD;EACA;EACA;EACA;EACA;EACA,qBAAqB;EACrB;EACA;EACA;EACA;EACA,QAAQ;EACR,8BAA8B,yBAAyB,OAAO,KAAA,IAAY;EAC1E;EACA;EACA;EACA;EACA,cAAc,IAAI;EAClB;EACD,CAAC;CASF,IAAI,2BACF,OAAO,kCAAkC,cAAc,wBAAwB;CAEjF,OAAO;;;;;;;;;;;AAYT,SAAS,kCACP,UACA,aACU;CACV,MAAM,oBAAoB,YAAY,eAAe,SAAS;CAC9D,MAAM,iBAAiB,QAAQ,YAAY,YAAY;CACvD,MAAM,sBAAsB,YAAY,qBAAqB;CAC7D,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,qBAC5C,OAAO;CAGT,MAAM,WAAW,YAA2B;EAC1C,KAAK,MAAM,UAAU,YAAY,gBAC/B,QAAQ,OAAO,cAAc,OAAO;EAEtC,IAAI,YAAY,aACd,QAAQ,OAAO,cAAc,YAAY,YAAY;EAEvD,IAAI,qBACF,QAAQ,IAAI,2BAA2B,KAAK,UAAU,YAAY,iBAAiB,CAAC;;CAIxF,IAAI;EACF,QAAQ,SAAS,QAAQ;EACzB,OAAO;SACD;EAGN,MAAM,UAAU,IAAI,QAAQ,SAAS,QAAQ;EAC7C,QAAQ,QAAQ;EAChB,OAAO,IAAI,SAAS,SAAS,MAAM;GACjC,QAAQ,SAAS;GACjB,YAAY,SAAS;GACrB;GACD,CAAC;;;AAIN,SAAgB,oBACd,SACuD;CACvD,OAAO,eAAe,cAAc,YAAY,KAAK;EACnD,MAAM,QAAQ,yBAAyB;EAcvC,MAAM,QAAQ,WAAW,QAAQ,IAAI,qBAAqB;EAI1D,MAAM,gBAAgB,WAAW,QAAQ,IAAI,gBAAgB,KAAK;EASlE,MAAM,8BAA8B,gCAAgC,WAAW;EAC/E,MAAM,kBAAkB,sBAAsB,WAAW,QAAQ;EACjE,IAAI,UAAU,MACZ,gBAAgB,IAAI,sBAAsB,MAAM;EAElD,MAAM,6BAA6B,oCACjC,4BACD;EACD,IAAI,+BAA+B,MACjC,gBAAgB,IAAI,sCAAsC,2BAA2B;EAEvF,MAAM,UAAU,wBAAwB,YAAY,gBAAgB;EAEpE,MAAM,mBAAmB,uBAAuB,IAAI,GAChD,MACC,4BAA4B,IAAI;EAUrC,OAAO,sBANgB,qBAAqB;GAC1C,gBAJqB,0BAA0B,SAAS,EACxD,iBAAiB,QAAQ,iBAC1B,CAEe;GACd;GACA,2BAA2B;GAC5B,CAE0C,QACzC,yBACE,YAAY;GACV,kBAAkB;GAClB,MAAM,8BAA8B,0BAA0B,QAAQ;GACtE,IAAI;GAEJ,IAAI;IACF,WAAW,MAAM,oBACf,SACA,SACA,6BACA,cACD;YACM,OAAO;IACd,IAAI,QAAQ,IAAI,aAAa,cAC3B,mBAAmB,MAAM;IAE3B,MAAM;;GAGR,OAAO,uBAAuB,UAAU,SAAS;IAC/C,UAAU,QAAQ;IAClB,eAAe,QAAQ;IACvB,YAAY,QAAQ;IACpB,gBAAgB;IACjB,CAAC;KAEJ,EAAE,aAAa,IAAI,IAAI,QAAQ,IAAI,CAAC,UAAU,CAC/C,CACF"}

package/dist/server/app-rsc-render-mode.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-rsc-render-mode.js","names":[],"sources":["../../src/server/app-rsc-render-mode.ts"],"sourcesContent":["export type AppRscRenderMode =\n  | \"navigation\"\n  | \"prefetch-loading-shell\"\n  | \"refresh-preserve-ui\"\n  | \"action-rerender-preserve-ui\";\n\nexport const APP_RSC_RENDER_MODE_NAVIGATION = \"navigation\" satisfies AppRscRenderMode;\nexport const APP_RSC_RENDER_MODE_PREFETCH_LOADING_SHELL =\n  \"prefetch-loading-shell\" satisfies AppRscRenderMode;\nexport const APP_RSC_RENDER_MODE_REFRESH_PRESERVE_UI =\n  \"refresh-preserve-ui\" satisfies AppRscRenderMode;\nexport const APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI =\n  \"action-rerender-preserve-ui\" satisfies AppRscRenderMode;\n\nexport function shouldSuppressLoadingBoundaries(mode: AppRscRenderMode): boolean {\n  return (\n    mode === APP_RSC_RENDER_MODE_REFRESH_PRESERVE_UI ||\n    mode === APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI\n  );\n}\n\nfunction shouldUsePreserveUiCacheVariant(mode: AppRscRenderMode): boolean {\n  return shouldSuppressLoadingBoundaries(mode);\n}\n\nexport function getRscRenderModeCacheVariant(mode: AppRscRenderMode): string | null {\n  if (mode === APP_RSC_RENDER_MODE_PREFETCH_LOADING_SHELL) {\n    return \"prefetch-loading-shell\";\n  }\n\n  return shouldUsePreserveUiCacheVariant(mode) ? \"preserve-ui\" : null;\n}\n\nexport function parseAppRscRenderMode(value: string | null): AppRscRenderMode {\n  switch (value) {\n    case APP_RSC_RENDER_MODE_PREFETCH_LOADING_SHELL:\n      return APP_RSC_RENDER_MODE_PREFETCH_LOADING_SHELL;\n    case APP_RSC_RENDER_MODE_REFRESH_PRESERVE_UI:\n      return APP_RSC_RENDER_MODE_REFRESH_PRESERVE_UI;\n    case APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI:\n      return APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI;\n    case null:\n    default:\n      return APP_RSC_RENDER_MODE_NAVIGATION;\n  }\n}\n"],"mappings":";AAMA,MAAa,iCAAiC;AAC9C,MAAa,6CACX;AACF,MAAa,0CACX;AACF,MAAa,kDACX;AAEF,SAAgB,gCAAgC,MAAiC;CAC/E,OACE,SAAA,yBACA,SAAA;;AAIJ,SAAS,gCAAgC,MAAiC;CACxE,OAAO,gCAAgC,KAAK;;AAG9C,SAAgB,6BAA6B,MAAuC;CAClF,IAAI,SAAA,0BACF,OAAO;CAGT,OAAO,gCAAgC,KAAK,GAAG,gBAAgB;;AAGjE,SAAgB,sBAAsB,OAAwC;CAC5E,QAAQ,OAAR;EACE,KAAK,4CACH,OAAO;EACT,KAAK,yCACH,OAAO;EACT,KAAK,iDACH,OAAO;EAET,SACE,OAAO"}

package/dist/server/app-rsc-request-normalization.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-rsc-request-normalization.js","names":[],"sources":["../../src/server/app-rsc-request-normalization.ts"],"sourcesContent":["import { normalizePath } from \"./normalize-path.js\";\nimport { normalizePathnameForRouteMatchStrict } from \"../routing/utils.js\";\nimport { guardProtocolRelativeUrl } from \"./request-pipeline.js\";\nimport { hasBasePath, stripBasePath } from \"../utils/base-path.js\";\nimport {\n  RSC_HEADER,\n  VINEXT_CLIENT_REUSE_MANIFEST_HEADER,\n  VINEXT_INTERCEPTION_CONTEXT_HEADER,\n  VINEXT_MOUNTED_SLOTS_HEADER,\n  VINEXT_RSC_RENDER_MODE_HEADER,\n} from \"./headers.js\";\nimport {\n  parseClientReuseManifestHeader,\n  type ClientReuseManifestParseResult,\n} from \"./client-reuse-manifest.js\";\nimport { normalizeInterceptionContextHeader } from \"./app-interception-context-header.js\";\nimport { normalizeMountedSlotsHeader } from \"./app-mounted-slots-header.js\";\nimport { stripRscSuffix, VINEXT_RSC_CACHE_BUSTING_SEARCH_PARAM } from \"./app-rsc-cache-busting.js\";\nimport {\n  APP_RSC_RENDER_MODE_NAVIGATION,\n  parseAppRscRenderMode,\n  type AppRscRenderMode,\n} from \"./app-rsc-render-mode.js\";\nimport { badRequestResponse, notFoundResponse } from \"./http-error-responses.js\";\n\nexport { normalizeMountedSlotsHeader } from \"./app-mounted-slots-header.js\";\n\nexport type NormalizedRscRequest = {\n  /** Parsed URL. Callers may mutate `url.search` after middleware runs. */\n  url: URL;\n  /** Normalized pathname with basePath stripped. Used for all internal routing. */\n  pathname: string;\n  /** Pathname with `.rsc` suffix removed. Used for route matching and navigation context. */\n  cleanPathname: string;\n  /** True when the request targets a canonical `.rsc` payload URL. */\n  isRscRequest: boolean;\n  /** Sanitized X-Vinext-Interception-Context header (null bytes stripped). null when absent. */\n  interceptionContextHeader: string | null;\n  /** Normalized x-vinext-mounted-slots header (deduplicated, sorted). null when absent or blank. */\n  mountedSlotsHeader: string | null;\n  /** Semantic RSC payload mode. HTML requests always normalize to \"navigation\". */\n  renderMode: AppRscRenderMode;\n  /** Disabled ClientReuseManifest hint. Never authorizes skip transport in this stage. */\n  clientReuseManifest: ClientReuseManifestParseResult;\n};\n\n/**\n * Normalize an App Router RSC request.\n *\n * Performs all security-sensitive and compatibility-sensitive preprocessing before\n * route matching. The ordering of steps is security-critical — changing it introduces\n * vulnerabilities:\n *\n *   1. Parse URL\n *   2. Protocol-relative URL guard — on the raw pathname, BEFORE normalizePath collapses\n *      `//` to `/`. If the guard ran after normalization, `//evil.com` → `/evil.com`\n *      would bypass the check and reach the trailing-slash redirector, which echoes the\n *      path into a `Location` header that browsers interpret as protocol-relative.\n *   3. Strict percent-decode each segment — throws on malformed sequences (→ 400). Must\n *      run before basePath check so %2F-encoded slashes cannot create fake basePath prefixes.\n *   4. Collapse double-slashes, resolve `.` and `..` segments (normalizePath)\n *   5. basePath check + strip — 404 when pathname lacks the basePath prefix.\n *      `/__vinext/` bypasses this for internal prerender endpoints.\n *   6. RSC detection: `.rsc` suffix, or Next-style `RSC: 1` plus the internal\n *      `_rsc` cache-busting query. The header alone does not select payload\n *      rendering at the canonical HTML URL, so caches that ignore Vary cannot\n *      store Flight responses under HTML URLs.\n *   7. cleanPathname — pathname with `.rsc` suffix stripped\n *   8. Sanitize X-Vinext-Interception-Context — strip null bytes (header injection)\n *   9. Normalize x-vinext-mounted-slots — dedup and sort for canonical cache keys\n *   10. Read semantic render mode for refresh/action payload rendering\n *   11. Parse disabled ClientReuseManifest hints on canonical RSC payload requests\n *\n * @returns A 400 or 404 Response for invalid or out-of-scope inputs,\n *          or a NormalizedRscRequest for valid requests.\n */\nexport function normalizeRscRequest(\n  request: Request,\n  basePath: string,\n): Response | NormalizedRscRequest {\n  const url = new URL(request.url);\n\n  // Step 2: Guard against protocol-relative open redirects on the raw pathname.\n  // normalizePath (step 4) would collapse //evil.com to /evil.com, causing the\n  // guard to miss it. Raw pathname must be checked first.\n  const protoGuard = guardProtocolRelativeUrl(url.pathname);\n  if (protoGuard) return protoGuard;\n\n  // Step 3: Strict segment-wise percent-decode. Preserves encoded path delimiters\n  // (%2F stays %2F) to prevent encoded slashes from acting as path separators.\n  // Throws on malformed sequences like %GG — caller must return 400.\n  let decoded: string;\n  try {\n    decoded = normalizePathnameForRouteMatchStrict(url.pathname);\n  } catch {\n    return badRequestResponse();\n  }\n\n  // Step 4: Collapse double-slashes and resolve . / .. segments.\n  let pathname = normalizePath(decoded);\n\n  // Step 5: basePath check and strip.\n  // Skipped when basePath is empty (no basePath configured).\n  // /__vinext/ prefix bypasses the check for internal prerender endpoints\n  // that must be reachable regardless of basePath configuration.\n  if (basePath) {\n    if (!hasBasePath(pathname, basePath) && !pathname.startsWith(\"/__vinext/\")) {\n      return notFoundResponse();\n    }\n    pathname = stripBasePath(pathname, basePath);\n  }\n\n  // Steps 6-7: RSC detection and cleanPathname.\n  const isRscRequest =\n    pathname.endsWith(\".rsc\") ||\n    (request.headers.get(RSC_HEADER) === \"1\" &&\n      url.searchParams.has(VINEXT_RSC_CACHE_BUSTING_SEARCH_PARAM));\n  const cleanPathname = stripRscSuffix(pathname);\n\n  // Step 8: Validate and sanitize X-Vinext-Interception-Context.\n  //\n  // The legitimate value is always a same-origin URL pathname (`/feed`,\n  // `/photos/42`, …) emitted by the vinext browser entry. We strip null bytes\n  // (header-injection defense), bound length, and require a pathname-shaped\n  // value so an attacker cannot fan out unbounded distinct values into the\n  // RSC / optimistic-route cache keys. See SECURITY-AUDIT-2026-05.md F-PROD-1.\n  const interceptionContextHeader = normalizeInterceptionContextHeader(\n    request.headers.get(VINEXT_INTERCEPTION_CONTEXT_HEADER),\n  );\n\n  // Step 9: Normalize mounted-slots header for canonical cache keying.\n  const mountedSlotsHeader = normalizeMountedSlotsHeader(\n    request.headers.get(VINEXT_MOUNTED_SLOTS_HEADER),\n  );\n  const renderMode = isRscRequest\n    ? parseAppRscRenderMode(request.headers.get(VINEXT_RSC_RENDER_MODE_HEADER))\n    : APP_RSC_RENDER_MODE_NAVIGATION;\n  const clientReuseManifest = isRscRequest\n    ? parseClientReuseManifestHeader(request.headers.get(VINEXT_CLIENT_REUSE_MANIFEST_HEADER))\n    : ({ kind: \"absent\" } satisfies ClientReuseManifestParseResult);\n\n  return {\n    clientReuseManifest,\n    url,\n    pathname,\n    cleanPathname,\n    isRscRequest,\n    interceptionContextHeader,\n    mountedSlotsHeader,\n    renderMode,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EA,SAAgB,oBACd,SACA,UACiC;CACjC,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;CAKhC,MAAM,aAAa,yBAAyB,IAAI,SAAS;CACzD,IAAI,YAAY,OAAO;CAKvB,IAAI;CACJ,IAAI;EACF,UAAU,qCAAqC,IAAI,SAAS;SACtD;EACN,OAAO,oBAAoB;;CAI7B,IAAI,WAAW,cAAc,QAAQ;CAMrC,IAAI,UAAU;EACZ,IAAI,CAAC,YAAY,UAAU,SAAS,IAAI,CAAC,SAAS,WAAW,aAAa,EACxE,OAAO,kBAAkB;EAE3B,WAAW,cAAc,UAAU,SAAS;;CAI9C,MAAM,eACJ,SAAS,SAAS,OAAO,IACxB,QAAQ,QAAQ,IAAA,MAAe,KAAK,OACnC,IAAI,aAAa,IAAA,OAA0C;CAC/D,MAAM,gBAAgB,eAAe,SAAS;CAS9C,MAAM,4BAA4B,mCAChC,QAAQ,QAAQ,IAAI,mCAAmC,CACxD;CAGD,MAAM,qBAAqB,4BACzB,QAAQ,QAAQ,IAAI,4BAA4B,CACjD;CACD,MAAM,aAAa,eACf,sBAAsB,QAAQ,QAAQ,IAAI,8BAA8B,CAAC,GACzE;CAKJ,OAAO;EACL,qBAL0B,eACxB,+BAA+B,QAAQ,QAAQ,IAAI,oCAAoC,CAAC,GACvF,EAAE,MAAM,UAAU;EAIrB;EACA;EACA;EACA;EACA;EACA;EACA;EACD"}

package/dist/server/app-rsc-response-finalizer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-rsc-response-finalizer.js","names":[],"sources":["../../src/server/app-rsc-response-finalizer.ts"],"sourcesContent":["import type { NextHeader, NextI18nConfig } from \"../config/next-config.js\";\nimport type { RequestContext } from \"../config/config-matchers.js\";\nimport { VINEXT_STATIC_FILE_HEADER } from \"./headers.js\";\nimport { applyConfigHeadersToResponse } from \"./request-pipeline.js\";\nimport { VINEXT_RSC_VARY_HEADER } from \"./app-rsc-cache-busting.js\";\nimport { mergeVaryHeader } from \"./middleware-response-headers.js\";\nimport { hasBasePath, stripBasePath } from \"../utils/base-path.js\";\nimport { normalizePath } from \"./normalize-path.js\";\nimport { normalizePathnameForRouteMatch } from \"../routing/utils.js\";\nimport { normalizeDefaultLocalePathname } from \"./pages-i18n.js\";\n\ntype FinalizeAppRscResponseOptions = {\n  basePath: string;\n  configHeaders: NextHeader[];\n  /**\n   * i18n config used to splice the default locale into unprefixed paths\n   * before config header matching, so locale-aware `has`/`missing` rules\n   * with `:locale` placeholders or `locale: false` overrides still match\n   * default-locale URLs (issue #1336, item 4).\n   */\n  i18nConfig: NextI18nConfig | null;\n  /**\n   * Original pre-middleware request context.\n   * Next.js evaluates config header has/missing conditions against the\n   * unmodified incoming request, so callers must pass the snapshot taken\n   * before middleware runs.\n   */\n  requestContext: RequestContext;\n};\n\n/**\n * Apply App Router response finalization that must happen outside individual\n * route dispatchers.\n *\n * Called once per request in the outer handler() wrapper, after all route\n * handling, so that every response path (page, route handler, server action,\n * metadata, not-found) gets headers applied consistently.\n *\n * Skips 3xx redirect responses. Response.redirect() creates immutable\n * headers that throw on mutation, and Next.js does not apply config headers\n * to redirects regardless.\n */\nexport function finalizeAppRscResponse(\n  response: Response,\n  request: Request,\n  options: FinalizeAppRscResponseOptions,\n): Response {\n  // 3xx responses: Response.redirect() headers are immutable (throws on write),\n  // and Next.js deliberately excludes config headers from redirect responses.\n  if (response.status >= 300 && response.status < 400) {\n    return response;\n  }\n\n  if (!response.headers.has(VINEXT_STATIC_FILE_HEADER)) {\n    mergeVaryHeader(response.headers, VINEXT_RSC_VARY_HEADER);\n  }\n\n  if (!options.configHeaders.length) {\n    return response;\n  }\n\n  const url = new URL(request.url);\n  let pathname: string;\n  try {\n    pathname = normalizePath(normalizePathnameForRouteMatch(url.pathname));\n  } catch {\n    // Malformed percent-encoding. The request reached this point only because\n    // normalizePathnameForRouteMatchStrict ran earlier and returned 400 for\n    // truly-malformed paths. This catch exists as a safety net for edge cases;\n    // keep the historical raw-path fallback rather than crashing the response.\n    pathname = url.pathname;\n  }\n\n  // Config header sources are defined without basePath prefix. Strip basePath\n  // at a segment boundary (not a string prefix) so /app2/page with basePath\n  // /app is not incorrectly treated as /app with suffix /2/page.\n  const hadBasePath = !options.basePath || hasBasePath(pathname, options.basePath);\n  pathname = stripBasePath(pathname, options.basePath);\n\n  // Default-locale path normalisation (issue #1336, item 4). Splice in the\n  // (domain-aware) default locale on unprefixed paths so locale-aware\n  // `has`/`missing` rules with `:locale` placeholders or `locale: false`\n  // overrides still match default-locale URLs. Mirrors the call sites in\n  // `prod-server.ts`, `deploy.ts`, and `app-rsc-handler.ts`.\n  const matchPathname = options.i18nConfig\n    ? normalizeDefaultLocalePathname(pathname, options.i18nConfig, { hostname: url.hostname })\n    : pathname;\n\n  applyConfigHeadersToResponse(response.headers, {\n    configHeaders: options.configHeaders,\n    pathname: matchPathname,\n    requestContext: options.requestContext,\n    basePathState: { basePath: options.basePath, hadBasePath },\n  });\n\n  return response;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA0CA,SAAgB,uBACd,UACA,SACA,SACU;CAGV,IAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAC9C,OAAO;CAGT,IAAI,CAAC,SAAS,QAAQ,IAAA,uBAA8B,EAClD,gBAAgB,SAAS,SAAS,uBAAuB;CAG3D,IAAI,CAAC,QAAQ,cAAc,QACzB,OAAO;CAGT,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;CAChC,IAAI;CACJ,IAAI;EACF,WAAW,cAAc,+BAA+B,IAAI,SAAS,CAAC;SAChE;EAKN,WAAW,IAAI;;CAMjB,MAAM,cAAc,CAAC,QAAQ,YAAY,YAAY,UAAU,QAAQ,SAAS;CAChF,WAAW,cAAc,UAAU,QAAQ,SAAS;CAOpD,MAAM,gBAAgB,QAAQ,aAC1B,+BAA+B,UAAU,QAAQ,YAAY,EAAE,UAAU,IAAI,UAAU,CAAC,GACxF;CAEJ,6BAA6B,SAAS,SAAS;EAC7C,eAAe,QAAQ;EACvB,UAAU;EACV,gBAAgB,QAAQ;EACxB,eAAe;GAAE,UAAU,QAAQ;GAAU;GAAa;EAC3D,CAAC;CAEF,OAAO"}

package/dist/server/app-rsc-route-matching.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-rsc-route-matching.js","names":[],"sources":["../../src/server/app-rsc-route-matching.ts"],"sourcesContent":["import { buildRouteTrie, trieMatch } from \"../routing/route-trie.js\";\nimport {\n  matchRoutePattern,\n  matchRoutePatternPrefix,\n  type RoutePatternParams,\n} from \"../routing/route-pattern.js\";\nimport { splitPathnameForRouteMatch } from \"../routing/utils.js\";\n\ntype AppRscRouteParams = RoutePatternParams;\n\ntype AppRscInterceptForMatching = {\n  targetPattern: string;\n  /**\n   * URL pattern of the *intercepting route* (the path that owns the slot,\n   * with route groups and `@slot` segments stripped). Mirrors Next.js'\n   * `interceptingRoute` from `extractInterceptionRouteInformation`.\n   *\n   * Next.js implements interception as a rewrite that fires only when the\n   * `Next-URL` header matches `^<sourceMatchPattern>(?:/.*)?$`. vinext's\n   * matcher enforces the same constraint at `findIntercept`: an intercept\n   * whose `targetPattern` matches the request URL is only valid when the\n   * provided source pathname (X-Vinext-Interception-Context / Next-URL)\n   * matches this pattern, with descendants allowed.\n   *\n   * Optional for backwards compat: when absent or empty, the matcher falls\n   * back to the legacy behavior of matching by target alone (still gated on\n   * a non-null source pathname).\n   *\n   * @see https://github.com/vercel/next.js/blob/canary/packages/next/src/lib/generate-interception-routes-rewrites.ts\n   */\n  sourceMatchPattern?: string;\n  interceptLayouts: readonly unknown[];\n  page: unknown;\n  params: readonly string[];\n};\n\ntype AppRscSlotForMatching = {\n  id?: string | null;\n  intercepts?: readonly AppRscInterceptForMatching[];\n};\n\ntype AppRscRouteForMatching = {\n  patternParts: string[];\n  slots?: Record<string, AppRscSlotForMatching>;\n};\n\ntype AppRscInterceptMatch = AppRscInterceptLookupEntry & {\n  matchedParams: AppRscRouteParams;\n};\n\ntype AppRscInterceptLookupEntry = {\n  sourceRouteIndex: number;\n  slotKey: string;\n  targetPattern: string;\n  targetPatternParts: string[];\n  sourceMatchPattern: string | null;\n  sourceMatchPatternParts: string[] | null;\n  interceptLayouts: readonly unknown[];\n  page: unknown;\n  params: readonly string[];\n  slotId: string | null;\n};\n\nfunction createRouteParams(): AppRscRouteParams {\n  return Object.create(null);\n}\n\nfunction appRscPathnameParts(pathname: string): string[] {\n  const pathOnly = pathname.split(\"?\")[0];\n  const normalized = pathOnly === \"/\" ? \"/\" : pathOnly.replace(/\\/$/, \"\");\n  return splitPathnameForRouteMatch(normalized);\n}\n\nexport function createAppRscRouteMatcher<Route extends AppRscRouteForMatching>(\n  routes: Route[],\n): {\n  matchRoute(url: string): { route: Route; params: AppRscRouteParams } | null;\n  findIntercept(pathname: string, sourcePathname?: string | null): AppRscInterceptMatch | null;\n} {\n  const routeTrie = buildRouteTrie(routes);\n  const interceptLookup = createInterceptLookup(routes);\n\n  return {\n    matchRoute(url) {\n      return trieMatch(routeTrie, appRscPathnameParts(url));\n    },\n    findIntercept(pathname, sourcePathname = null) {\n      // Mirror Next.js' rewrite semantics: interception only fires when the\n      // Next-URL header is present AND matches the intercepting route's regex\n      // (with descendants allowed). Without a source pathname there is no\n      // header for the rewrite to gate on, so we render the direct route.\n      // https://github.com/vercel/next.js/blob/canary/packages/next/src/lib/generate-interception-routes-rewrites.ts\n      if (sourcePathname === null) return null;\n\n      const urlParts = appRscPathnameParts(pathname);\n      const sourceParts = appRscPathnameParts(sourcePathname);\n\n      for (const entry of interceptLookup) {\n        // Primary gate: when the intercept declares a `sourceMatchPattern`\n        // (the intercepting route's path, descendants allowed), require the\n        // request's source pathname to satisfy it. This mirrors Next.js'\n        // `^<interceptingRoute>(?:/.*)?$` header regex precisely and is the\n        // authoritative gate when the manifest carries the pattern.\n        if (!matchInterceptSource(sourceParts, entry)) continue;\n\n        const params = matchAppRscRoutePattern(urlParts, entry.targetPatternParts);\n        if (params === null) continue;\n\n        const sourceRoute = routes[entry.sourceRouteIndex];\n        const matchedSourceParams = sourceRoute\n          ? matchAppRscRoutePattern(sourceParts, sourceRoute.patternParts)\n          : null;\n\n        // Secondary gate (from #1249): when the entry has no\n        // `sourceMatchPatternParts` declared (older manifest shapes), reject\n        // sources that don't match the slot owner's route pattern exactly.\n        // This is the safety net that keeps unrelated sources from pulling\n        // in a modal they have no slot for. When `sourceMatchPatternParts`\n        // *is* declared, `matchInterceptSource` above has already approved\n        // the source (including descendants), so a stricter exact-match\n        // check on the slot-owner route here would defeat the descendant\n        // semantics — fall back to empty params instead.\n        if (matchedSourceParams === null && entry.sourceMatchPatternParts === null) {\n          continue;\n        }\n        const sourceParams = matchedSourceParams ?? createRouteParams();\n        return { ...entry, matchedParams: mergeMatchedParams(sourceParams, params) };\n      }\n      return null;\n    },\n  };\n}\n\n/**\n * Check whether the request's source pathname (Next-URL / interception\n * context) satisfies the intercept entry's intercepting-route pattern, with\n * descendants allowed. Mirrors the header regex shape Next.js emits for the\n * generated interception rewrite: `^<pattern>(?:/.*)?$`.\n *\n * When the entry has no declared `sourceMatchPatternParts`, fall back to the\n * legacy behavior of accepting any source (we still require the source to be\n * non-null at the caller — see `findIntercept`).\n */\nfunction matchInterceptSource(sourceParts: string[], entry: AppRscInterceptLookupEntry): boolean {\n  const patternParts = entry.sourceMatchPatternParts;\n  if (!patternParts) return true;\n  // Root pattern (`/`) matches any source.\n  if (patternParts.length === 0) return true;\n  return matchRoutePatternPrefix(sourceParts, patternParts);\n}\n\nfunction createInterceptLookup<Route extends AppRscRouteForMatching>(\n  routes: Route[],\n): AppRscInterceptLookupEntry[] {\n  const interceptLookup: AppRscInterceptLookupEntry[] = [];\n  for (let routeIndex = 0; routeIndex < routes.length; routeIndex++) {\n    const route = routes[routeIndex];\n    if (!route.slots) continue;\n    for (const [slotKey, slotModule] of Object.entries(route.slots)) {\n      if (!slotModule.intercepts) continue;\n      for (const intercept of slotModule.intercepts) {\n        const sourceMatchPattern = intercept.sourceMatchPattern ?? null;\n        const sourceMatchPatternParts = sourceMatchPattern\n          ? sourceMatchPattern.split(\"/\").filter(Boolean)\n          : null;\n        interceptLookup.push({\n          sourceRouteIndex: routeIndex,\n          slotKey,\n          slotId: typeof slotModule.id === \"string\" ? slotModule.id : null,\n          targetPattern: intercept.targetPattern,\n          targetPatternParts: intercept.targetPattern.split(\"/\").filter(Boolean),\n          sourceMatchPattern,\n          sourceMatchPatternParts,\n          interceptLayouts: intercept.interceptLayouts,\n          page: intercept.page,\n          params: intercept.params,\n        });\n      }\n    }\n  }\n  return interceptLookup;\n}\n\nexport function matchAppRscRoutePattern(\n  urlParts: string[],\n  patternParts: string[],\n): AppRscRouteParams | null {\n  return matchRoutePattern(urlParts, patternParts);\n}\n\nfunction mergeMatchedParams(\n  sourceParams: AppRscRouteParams,\n  targetParams: AppRscRouteParams,\n): AppRscRouteParams {\n  return Object.assign(createRouteParams(), sourceParams, targetParams);\n}\n"],"mappings":";;;;AA+DA,SAAS,oBAAuC;CAC9C,OAAO,OAAO,OAAO,KAAK;;AAG5B,SAAS,oBAAoB,UAA4B;CACvD,MAAM,WAAW,SAAS,MAAM,IAAI,CAAC;CAErC,OAAO,2BADY,aAAa,MAAM,MAAM,SAAS,QAAQ,OAAO,GAAG,CAC1B;;AAG/C,SAAgB,yBACd,QAIA;CACA,MAAM,YAAY,eAAe,OAAO;CACxC,MAAM,kBAAkB,sBAAsB,OAAO;CAErD,OAAO;EACL,WAAW,KAAK;GACd,OAAO,UAAU,WAAW,oBAAoB,IAAI,CAAC;;EAEvD,cAAc,UAAU,iBAAiB,MAAM;GAM7C,IAAI,mBAAmB,MAAM,OAAO;GAEpC,MAAM,WAAW,oBAAoB,SAAS;GAC9C,MAAM,cAAc,oBAAoB,eAAe;GAEvD,KAAK,MAAM,SAAS,iBAAiB;IAMnC,IAAI,CAAC,qBAAqB,aAAa,MAAM,EAAE;IAE/C,MAAM,SAAS,wBAAwB,UAAU,MAAM,mBAAmB;IAC1E,IAAI,WAAW,MAAM;IAErB,MAAM,cAAc,OAAO,MAAM;IACjC,MAAM,sBAAsB,cACxB,wBAAwB,aAAa,YAAY,aAAa,GAC9D;IAWJ,IAAI,wBAAwB,QAAQ,MAAM,4BAA4B,MACpE;IAEF,MAAM,eAAe,uBAAuB,mBAAmB;IAC/D,OAAO;KAAE,GAAG;KAAO,eAAe,mBAAmB,cAAc,OAAO;KAAE;;GAE9E,OAAO;;EAEV;;;;;;;;;;;;AAaH,SAAS,qBAAqB,aAAuB,OAA4C;CAC/F,MAAM,eAAe,MAAM;CAC3B,IAAI,CAAC,cAAc,OAAO;CAE1B,IAAI,aAAa,WAAW,GAAG,OAAO;CACtC,OAAO,wBAAwB,aAAa,aAAa;;AAG3D,SAAS,sBACP,QAC8B;CAC9B,MAAM,kBAAgD,EAAE;CACxD,KAAK,IAAI,aAAa,GAAG,aAAa,OAAO,QAAQ,cAAc;EACjE,MAAM,QAAQ,OAAO;EACrB,IAAI,CAAC,MAAM,OAAO;EAClB,KAAK,MAAM,CAAC,SAAS,eAAe,OAAO,QAAQ,MAAM,MAAM,EAAE;GAC/D,IAAI,CAAC,WAAW,YAAY;GAC5B,KAAK,MAAM,aAAa,WAAW,YAAY;IAC7C,MAAM,qBAAqB,UAAU,sBAAsB;IAC3D,MAAM,0BAA0B,qBAC5B,mBAAmB,MAAM,IAAI,CAAC,OAAO,QAAQ,GAC7C;IACJ,gBAAgB,KAAK;KACnB,kBAAkB;KAClB;KACA,QAAQ,OAAO,WAAW,OAAO,WAAW,WAAW,KAAK;KAC5D,eAAe,UAAU;KACzB,oBAAoB,UAAU,cAAc,MAAM,IAAI,CAAC,OAAO,QAAQ;KACtE;KACA;KACA,kBAAkB,UAAU;KAC5B,MAAM,UAAU;KAChB,QAAQ,UAAU;KACnB,CAAC;;;;CAIR,OAAO;;AAGT,SAAgB,wBACd,UACA,cAC0B;CAC1B,OAAO,kBAAkB,UAAU,aAAa;;AAGlD,SAAS,mBACP,cACA,cACmB;CACnB,OAAO,OAAO,OAAO,mBAAmB,EAAE,cAAc,aAAa"}

package/dist/server/app-segment-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-segment-config.js","names":[],"sources":["../../src/server/app-segment-config.ts"],"sourcesContent":["import type { FetchCacheMode } from \"vinext/shims/fetch-cache\";\nimport { isEdgeApiRuntime } from \"./edge-api-runtime.js\";\n\ntype AppRouteSegmentDynamic = \"auto\" | \"error\" | \"force-dynamic\" | \"force-static\";\n\ntype AppRouteSegmentConfigModule = {\n  dynamic?: unknown;\n  dynamicParams?: unknown;\n  fetchCache?: unknown;\n  revalidate?: unknown;\n  runtime?: unknown;\n};\n\ntype EffectiveAppPageSegmentConfig = {\n  dynamicConfig?: AppRouteSegmentDynamic;\n  dynamicParamsConfig?: boolean;\n  fetchCache?: FetchCacheMode;\n  revalidateSeconds: number | null;\n  runtime?: string;\n};\n\ntype ResolveAppPageSegmentConfigOptions = {\n  layouts?: readonly (AppRouteSegmentConfigModule | null | undefined)[];\n  page?: AppRouteSegmentConfigModule | null;\n};\n\nconst DYNAMIC_VALUES = new Set<unknown>([\"auto\", \"error\", \"force-dynamic\", \"force-static\"]);\nconst FETCH_CACHE_VALUES = new Set<unknown>([\n  \"auto\",\n  \"default-cache\",\n  \"default-no-store\",\n  \"force-cache\",\n  \"force-no-store\",\n  \"only-cache\",\n  \"only-no-store\",\n]);\n\nfunction isRouteSegmentDynamic(value: unknown): value is AppRouteSegmentDynamic {\n  return DYNAMIC_VALUES.has(value);\n}\n\nfunction isRouteSegmentFetchCache(value: unknown): value is FetchCacheMode {\n  return FETCH_CACHE_VALUES.has(value);\n}\n\nfunction resolveRevalidateSeconds(current: number | null, value: unknown): number | null {\n  // revalidate = false means \"cache indefinitely\" in Next.js segment config.\n  // Represent it as Infinity so downstream code can distinguish \"never\n  // revalidate\" (Infinity) from \"no config / unset\" (null).\n  if (value === false) {\n    if (current === null) return Infinity;\n    // Shortest-wins: any finite interval is shorter than Infinity.\n    return current === Infinity ? Infinity : current;\n  }\n\n  if (typeof value !== \"number\") {\n    return current;\n  }\n\n  if (current === null) {\n    return value;\n  }\n\n  return value < current ? value : current;\n}\n\nfunction isCacheFetchCacheMode(value: FetchCacheMode): boolean {\n  return value === \"default-cache\" || value === \"force-cache\" || value === \"only-cache\";\n}\n\nfunction describeFetchCacheConflict(value: FetchCacheMode): string {\n  return `Route segment config has incompatible fetchCache values including \"${value}\".`;\n}\n\n/**\n * Resolve the route segment config that applies to an App page route.\n *\n * Next.js collects config from every segment in the loader tree and reduces it\n * into the effective route config. The generated vinext entry already knows\n * the concrete layout/page modules for a route, so it should only describe\n * those modules and delegate the behavior to this helper.\n */\nexport function resolveAppPageSegmentConfig(\n  options: ResolveAppPageSegmentConfigOptions,\n): EffectiveAppPageSegmentConfig {\n  const segments = [...(options.layouts ?? []), options.page];\n  // Reduction strategies differ by field:\n  // - dynamic: child segments override parents.\n  // - dynamicParams: false is sticky across the route tree.\n  // - fetchCache: force/only modes take route-level precedence and reject conflicts.\n  // - revalidate: the shortest numeric interval wins.\n  const config: EffectiveAppPageSegmentConfig = {\n    revalidateSeconds: null,\n  };\n  let hasForceCache = false;\n  let hasForceNoStore = false;\n  let hasOnlyCache = false;\n  let hasOnlyNoStore = false;\n  let hasParentDefaultNoStore = false;\n\n  for (const segment of segments) {\n    if (!segment) continue;\n\n    if (isRouteSegmentDynamic(segment.dynamic)) {\n      config.dynamicConfig = segment.dynamic;\n    }\n\n    if (segment.dynamicParams === false) {\n      config.dynamicParamsConfig = false;\n    } else if (segment.dynamicParams === true && config.dynamicParamsConfig !== false) {\n      config.dynamicParamsConfig = true;\n    }\n\n    if (isRouteSegmentFetchCache(segment.fetchCache)) {\n      const fetchCache = segment.fetchCache;\n\n      if (hasParentDefaultNoStore && (fetchCache === \"auto\" || isCacheFetchCacheMode(fetchCache))) {\n        throw new Error(describeFetchCacheConflict(fetchCache));\n      }\n\n      if (fetchCache === \"force-cache\") hasForceCache = true;\n      if (fetchCache === \"force-no-store\") hasForceNoStore = true;\n      if (fetchCache === \"only-cache\") hasOnlyCache = true;\n      if (fetchCache === \"only-no-store\") hasOnlyNoStore = true;\n\n      const hasCacheEnforcer = hasForceCache || hasOnlyCache;\n      const hasNoStoreEnforcer = hasForceNoStore || hasOnlyNoStore;\n      if (hasCacheEnforcer && hasNoStoreEnforcer) {\n        throw new Error(describeFetchCacheConflict(fetchCache));\n      }\n\n      if (fetchCache === \"default-no-store\") {\n        hasParentDefaultNoStore = true;\n      }\n\n      if (hasForceCache) {\n        config.fetchCache = \"force-cache\";\n      } else if (hasForceNoStore) {\n        config.fetchCache = \"force-no-store\";\n      } else if (hasOnlyCache) {\n        config.fetchCache = \"only-cache\";\n      } else if (hasOnlyNoStore) {\n        config.fetchCache = \"only-no-store\";\n      } else {\n        config.fetchCache = fetchCache;\n      }\n    }\n\n    config.revalidateSeconds = resolveRevalidateSeconds(\n      config.revalidateSeconds,\n      segment.revalidate,\n    );\n\n    if (typeof segment.runtime === \"string\") {\n      config.runtime = segment.runtime;\n    }\n  }\n\n  if (config.dynamicConfig === \"force-dynamic\") {\n    config.revalidateSeconds = 0;\n  }\n\n  // Top-level dynamic modes supply fetchCache defaults unless a segment does.\n  if (config.fetchCache === undefined) {\n    if (config.dynamicConfig === \"force-dynamic\") {\n      config.fetchCache = \"force-no-store\";\n    } else if (config.dynamicConfig === \"error\") {\n      config.fetchCache = \"only-cache\";\n    }\n  }\n\n  // Static-only dynamic modes change the default, but explicit dynamicParams wins.\n  if (\n    config.dynamicParamsConfig === undefined &&\n    (config.dynamicConfig === \"error\" || config.dynamicConfig === \"force-static\")\n  ) {\n    config.dynamicParamsConfig = false;\n  }\n\n  return config;\n}\n\nexport function resolveAppPageFetchCacheMode(\n  options: ResolveAppPageSegmentConfigOptions,\n): FetchCacheMode | null {\n  return resolveAppPageSegmentConfig(options).fetchCache ?? null;\n}\n\nexport function isEdgeRuntime(runtime: string | undefined): boolean {\n  return isEdgeApiRuntime(runtime);\n}\n"],"mappings":";;AA0BA,MAAM,iBAAiB,IAAI,IAAa;CAAC;CAAQ;CAAS;CAAiB;CAAe,CAAC;AAC3F,MAAM,qBAAqB,IAAI,IAAa;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,sBAAsB,OAAiD;CAC9E,OAAO,eAAe,IAAI,MAAM;;AAGlC,SAAS,yBAAyB,OAAyC;CACzE,OAAO,mBAAmB,IAAI,MAAM;;AAGtC,SAAS,yBAAyB,SAAwB,OAA+B;CAIvF,IAAI,UAAU,OAAO;EACnB,IAAI,YAAY,MAAM,OAAO;EAE7B,OAAO,YAAY,WAAW,WAAW;;CAG3C,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,IAAI,YAAY,MACd,OAAO;CAGT,OAAO,QAAQ,UAAU,QAAQ;;AAGnC,SAAS,sBAAsB,OAAgC;CAC7D,OAAO,UAAU,mBAAmB,UAAU,iBAAiB,UAAU;;AAG3E,SAAS,2BAA2B,OAA+B;CACjE,OAAO,sEAAsE,MAAM;;;;;;;;;;AAWrF,SAAgB,4BACd,SAC+B;CAC/B,MAAM,WAAW,CAAC,GAAI,QAAQ,WAAW,EAAE,EAAG,QAAQ,KAAK;CAM3D,MAAM,SAAwC,EAC5C,mBAAmB,MACpB;CACD,IAAI,gBAAgB;CACpB,IAAI,kBAAkB;CACtB,IAAI,eAAe;CACnB,IAAI,iBAAiB;CACrB,IAAI,0BAA0B;CAE9B,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,CAAC,SAAS;EAEd,IAAI,sBAAsB,QAAQ,QAAQ,EACxC,OAAO,gBAAgB,QAAQ;EAGjC,IAAI,QAAQ,kBAAkB,OAC5B,OAAO,sBAAsB;OACxB,IAAI,QAAQ,kBAAkB,QAAQ,OAAO,wBAAwB,OAC1E,OAAO,sBAAsB;EAG/B,IAAI,yBAAyB,QAAQ,WAAW,EAAE;GAChD,MAAM,aAAa,QAAQ;GAE3B,IAAI,4BAA4B,eAAe,UAAU,sBAAsB,WAAW,GACxF,MAAM,IAAI,MAAM,2BAA2B,WAAW,CAAC;GAGzD,IAAI,eAAe,eAAe,gBAAgB;GAClD,IAAI,eAAe,kBAAkB,kBAAkB;GACvD,IAAI,eAAe,cAAc,eAAe;GAChD,IAAI,eAAe,iBAAiB,iBAAiB;GAIrD,KAFyB,iBAAiB,kBACf,mBAAmB,iBAE5C,MAAM,IAAI,MAAM,2BAA2B,WAAW,CAAC;GAGzD,IAAI,eAAe,oBACjB,0BAA0B;GAG5B,IAAI,eACF,OAAO,aAAa;QACf,IAAI,iBACT,OAAO,aAAa;QACf,IAAI,cACT,OAAO,aAAa;QACf,IAAI,gBACT,OAAO,aAAa;QAEpB,OAAO,aAAa;;EAIxB,OAAO,oBAAoB,yBACzB,OAAO,mBACP,QAAQ,WACT;EAED,IAAI,OAAO,QAAQ,YAAY,UAC7B,OAAO,UAAU,QAAQ;;CAI7B,IAAI,OAAO,kBAAkB,iBAC3B,OAAO,oBAAoB;CAI7B,IAAI,OAAO,eAAe,KAAA;MACpB,OAAO,kBAAkB,iBAC3B,OAAO,aAAa;OACf,IAAI,OAAO,kBAAkB,SAClC,OAAO,aAAa;;CAKxB,IACE,OAAO,wBAAwB,KAAA,MAC9B,OAAO,kBAAkB,WAAW,OAAO,kBAAkB,iBAE9D,OAAO,sBAAsB;CAG/B,OAAO;;AAGT,SAAgB,6BACd,SACuB;CACvB,OAAO,4BAA4B,QAAQ,CAAC,cAAc;;AAG5D,SAAgB,cAAc,SAAsC;CAClE,OAAO,iBAAiB,QAAQ"}

package/dist/server/app-server-action-execution.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-server-action-execution.js","names":[],"sources":["../../src/server/app-server-action-execution.ts"],"sourcesContent":["import { getAndClearActionRevalidationKind, type ActionRevalidationKind } from \"vinext/shims/cache\";\nimport type { HeadersAccessPhase } from \"vinext/shims/headers\";\nimport { type FetchCacheMode, setCurrentFetchCacheMode } from \"vinext/shims/fetch-cache\";\nimport type { ReactFormState } from \"react-dom/client\";\nimport { isExternalUrl } from \"../config/config-matchers.js\";\nimport { addBasePathToPathname, hasBasePath } from \"../utils/base-path.js\";\nimport {\n  ACTION_FORWARDED_HEADER,\n  ACTION_REDIRECT_HEADER,\n  ACTION_REDIRECT_STATUS_HEADER,\n  ACTION_REDIRECT_TYPE_HEADER,\n  ACTION_REVALIDATED_HEADER,\n} from \"./headers.js\";\nimport {\n  VINEXT_RSC_CONTENT_TYPE,\n  VINEXT_RSC_VARY_HEADER,\n  applyRscCompatibilityIdHeader,\n} from \"./app-rsc-cache-busting.js\";\nimport { applyEdgeRuntimeHeader } from \"./app-page-response.js\";\nimport { resolveAppPageActionRerenderTarget } from \"./app-page-request.js\";\nimport { mergeMiddlewareResponseHeaders } from \"./middleware-response-headers.js\";\nimport { getSetCookieName } from \"./cookie-utils.js\";\nimport {\n  APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI,\n  type AppRscRenderMode,\n} from \"./app-rsc-render-mode.js\";\nimport {\n  getNextErrorDigest,\n  parseNextHttpErrorDigest,\n  parseNextRedirectDigest,\n} from \"./next-error-digest.js\";\nimport { validateCsrfOrigin, validateServerActionPayload } from \"./request-pipeline.js\";\nimport { readStreamAsTextWithLimit } from \"../utils/text-stream.js\";\nimport {\n  createServerActionNotFoundResponse,\n  getServerActionNotFoundMessage,\n  isServerActionNotFoundError,\n} from \"./server-action-not-found.js\";\nimport { internalServerErrorResponse, payloadTooLargeResponse } from \"./http-error-responses.js\";\n\ntype AppPageParams = Record<string, string | string[]>;\n\ntype AppServerActionErrorReporter = (\n  error: Error,\n  request: { path: string; method: string; headers: Record<string, string> },\n  route: { routerKind: \"App Router\"; routePath: string; routeType: \"action\" },\n) => void;\n\ntype AppServerActionDecoder = (body: FormData) => Promise<unknown>;\ntype AppServerActionFormStateDecoder = (\n  actionResult: unknown,\n  body: FormData,\n) => Promise<ReactFormState | undefined>;\n\ntype ReadFormDataWithLimit = (request: Request, maxBytes: number) => Promise<FormData>;\n\ntype ReadBodyWithLimit = (request: Request, maxBytes: number) => Promise<string>;\n\ntype AppServerActionFunction = (...args: unknown[]) => unknown;\n\ntype AppServerActionReturnValue =\n  | {\n      data: unknown;\n      ok: true;\n    }\n  | {\n      data: unknown;\n      ok: false;\n    };\n\ntype AppServerActionRedirect = {\n  status: number;\n  type: string;\n  url: string;\n};\n\ntype AppServerActionRoute = {\n  pattern: string;\n};\n\n/**\n * Side-effect headers captured during a progressive (no-JS) server action's\n * non-redirect execution. The caller (app-rsc-handler) must apply these to the\n * page render response so that `cookies().set(...)` and revalidation kinds\n * propagate to the browser. Without this, no-JS form submissions silently\n * lose cookie/header mutations — see issue #1483.\n *\n * Next.js' equivalent path mutates `res.setHeader('set-cookie', ...)` during\n * action execution (action-handler.ts → app-render.tsx), then `sendResponse`\n * merges those headers with the rendered Response. vinext works with Response\n * objects directly so the cookies must ride out via the result instead.\n */\ntype ProgressiveServerActionSideEffects = {\n  /** `Set-Cookie` headers from `cookies().set(...)` / `cookies().delete(...)`. */\n  pendingCookies: string[];\n  /** `Set-Cookie` header from `draftMode().enable()/disable()` (if any). */\n  draftCookie: string | null | undefined;\n  /** Resolved revalidation kind to emit via `x-action-revalidated`. */\n  revalidationKind: ActionRevalidationKind;\n};\n\ntype ProgressiveServerActionResult =\n  | ({\n      formState: ReactFormState | null;\n      kind: \"form-state\";\n    } & ProgressiveServerActionSideEffects)\n  | ({\n      actionError: unknown;\n      actionFailed: true;\n      formState: null;\n      kind: \"form-state\";\n    } & ProgressiveServerActionSideEffects);\n\ntype AppServerActionMatch<TRoute extends AppServerActionRoute> = {\n  params: AppPageParams;\n  route: TRoute;\n};\n\ntype AppServerActionIntercept<TPage = unknown> = {\n  matchedParams: AppPageParams;\n  page: TPage;\n  slotId?: string | null;\n  slotKey: string;\n  sourceRouteIndex: number;\n};\n\ntype BuildServerActionPageElementOptions<TRoute extends AppServerActionRoute, TInterceptOpts> = {\n  cleanPathname: string;\n  interceptOpts: TInterceptOpts | undefined;\n  isRscRequest: boolean;\n  mountedSlotsHeader: string | null;\n  params: AppPageParams;\n  request: Request;\n  route: TRoute;\n  searchParams: URLSearchParams;\n  renderMode: AppRscRenderMode;\n};\n\ntype AppServerActionRscModel<TElement> = {\n  /**\n   * Omitted when the action did not invalidate page data. This mirrors Next.js'\n   * empty Flight payload for non-revalidating fetch actions: the client resolves\n   * the action value without committing a visible router update.\n   */\n  root?: TElement;\n  returnValue: AppServerActionReturnValue;\n};\n\ntype RenderServerActionRscStreamOptions<TTemporaryReferences> = {\n  onError: (error: unknown) => unknown;\n  temporaryReferences: TTemporaryReferences;\n};\n\ntype DecodeServerActionReplyOptions<TTemporaryReferences> = {\n  temporaryReferences: TTemporaryReferences;\n};\n\nexport type HandleProgressiveServerActionRequestOptions = {\n  actionId: string | null;\n  allowedOrigins: string[];\n  /** Configured next.config `basePath`. Prefixed onto progressive Location targets. */\n  basePath?: string;\n  cleanPathname: string;\n  clearRequestContext: () => void;\n  contentType: string;\n  decodeAction: AppServerActionDecoder;\n  decodeFormState: AppServerActionFormStateDecoder;\n  getAndClearPendingCookies: () => string[];\n  getDraftModeCookieHeader: () => string | null | undefined;\n  maxActionBodySize: number;\n  middlewareHeaders: Headers | null;\n  readFormDataWithLimit: ReadFormDataWithLimit;\n  reportRequestError: AppServerActionErrorReporter;\n  request: Request;\n  setHeadersAccessPhase: (phase: HeadersAccessPhase) => HeadersAccessPhase;\n};\n\nexport type HandleServerActionRscRequestOptions<\n  TElement,\n  TRoute extends AppServerActionRoute,\n  TInterceptOpts,\n  TTemporaryReferences,\n  TPage = unknown,\n> = {\n  actionId: string | null;\n  allowedOrigins: string[];\n  /** Configured next.config `basePath`. Prefixed onto ACTION_REDIRECT_HEADER targets. */\n  basePath?: string;\n  buildPageElement: (\n    options: BuildServerActionPageElementOptions<TRoute, TInterceptOpts>,\n  ) => TElement;\n  cleanPathname: string;\n  clearRequestContext: () => void;\n  contentType: string;\n  createNotFoundElement: (routeId: string) => TElement;\n  createPayloadRouteId: (pathname: string, interceptionContext: string | null) => string;\n  createRscOnErrorHandler: (\n    request: Request,\n    pathname: string,\n    pattern: string,\n  ) => (error: unknown) => unknown;\n  createTemporaryReferenceSet: () => TTemporaryReferences;\n  decodeReply: (\n    body: string | FormData,\n    options: DecodeServerActionReplyOptions<TTemporaryReferences>,\n  ) => Promise<unknown[]> | unknown[];\n  findIntercept: (pathname: string) => AppServerActionIntercept<TPage> | null;\n  getAndClearPendingCookies: () => string[];\n  getDraftModeCookieHeader: () => string | null | undefined;\n  getRouteParamNames: (route: TRoute) => readonly string[];\n  getSourceRoute: (sourceRouteIndex: number) => TRoute | undefined;\n  isEdgeRuntime?: boolean;\n  isRscRequest: boolean;\n  loadServerAction: (actionId: string) => Promise<unknown>;\n  matchRoute: (pathname: string) => AppServerActionMatch<TRoute> | null;\n  maxActionBodySize: number;\n  middlewareHeaders: Headers | null;\n  middlewareStatus: number | null | undefined;\n  mountedSlotsHeader: string | null;\n  readBodyWithLimit: ReadBodyWithLimit;\n  readFormDataWithLimit: ReadFormDataWithLimit;\n  renderToReadableStream: (\n    model: AppServerActionRscModel<TElement>,\n    options: RenderServerActionRscStreamOptions<TTemporaryReferences>,\n  ) => BodyInit | null | Promise<BodyInit | null>;\n  reportRequestError: AppServerActionErrorReporter;\n  resolveRouteFetchCacheMode?: (route: TRoute) => FetchCacheMode | null;\n  request: Request;\n  sanitizeErrorForClient: (error: unknown) => unknown;\n  searchParams: URLSearchParams;\n  setHeadersAccessPhase: (phase: HeadersAccessPhase) => HeadersAccessPhase;\n  setNavigationContext: (context: {\n    params: AppPageParams;\n    pathname: string;\n    searchParams: URLSearchParams;\n  }) => void;\n  toInterceptOpts: (intercept: AppServerActionIntercept<TPage>) => TInterceptOpts;\n};\n\n/**\n * Matches Next.js' server action argument cap to prevent stack overflow in\n * Function.prototype.apply when decoding hostile action payloads.\n */\nconst SERVER_ACTION_ARGS_LIMIT = 1000;\nconst ACTION_DID_NOT_REVALIDATE = 0 satisfies ActionRevalidationKind;\nconst ACTION_DID_REVALIDATE_STATIC_AND_DYNAMIC = 1 satisfies ActionRevalidationKind;\n\nfunction setActionRevalidatedHeader(headers: Headers, kind: ActionRevalidationKind): void {\n  if (kind === ACTION_DID_NOT_REVALIDATE) return;\n  headers.set(ACTION_REVALIDATED_HEADER, JSON.stringify(kind));\n}\n\nfunction resolveActionRevalidationKind(hasModifiedCookies: boolean): ActionRevalidationKind {\n  const revalidationKind = getAndClearActionRevalidationKind();\n  // Cookie mutations are a hard override to STATIC_AND_DYNAMIC: any cookie\n  // change can invalidate downstream cached payloads regardless of what\n  // (if anything) the action explicitly revalidated, so we always emit the\n  // strongest kind. STATIC_AND_DYNAMIC is also the lowest numeric value, so\n  // this matches the max-precedence semantics in markActionRevalidation.\n  if (hasModifiedCookies) return ACTION_DID_REVALIDATE_STATIC_AND_DYNAMIC;\n  return revalidationKind;\n}\n\nfunction isRequestBodyTooLarge(error: unknown): boolean {\n  return error instanceof Error && error.message === \"Request body too large\";\n}\n\n/**\n * Collapse repeated `cookies().set(name, ...)` / `cookies().delete(name)`\n * calls down to the last value per name, matching Next.js'\n * `MutableRequestCookiesAdapter` semantics. Next.js stores response cookies in\n * a `ResponseCookies` Map keyed by name — multiple sets for the same cookie\n * collapse to the final value, and emit a single Set-Cookie header.\n *\n * Insertion order is preserved by first occurrence (Map iteration order),\n * which mirrors how `ResponseCookies` iterates its underlying Map. See\n * packages/next/src/server/web/spec-extension/adapters/request-cookies.ts.\n * Issue: https://github.com/cloudflare/vinext/issues/1481\n */\nfunction dedupePendingCookies(cookies: readonly string[]): string[] {\n  if (cookies.length <= 1) {\n    return cookies.slice();\n  }\n  const byName = new Map<string, string>();\n  const unkeyed: string[] = [];\n  for (const cookie of cookies) {\n    const name = getSetCookieName(cookie);\n    if (name === null) {\n      unkeyed.push(cookie);\n      continue;\n    }\n    // Map.set on an existing key replaces the value but preserves the\n    // insertion position of the original key — exactly the behaviour we need\n    // for `cookies().set(\"foo\", \"1\"); cookies().set(\"bar\", \"2\"); cookies().set(\"foo\", \"3\")`\n    // to come out as [foo=3, bar=2].\n    byName.set(name, cookie);\n  }\n  return [...unkeyed, ...byName.values()];\n}\n\nfunction isAppServerActionFunction(action: unknown): action is AppServerActionFunction {\n  return typeof action === \"function\";\n}\n\nfunction normalizeError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\nfunction getServerActionFailureMessage(error: unknown): string {\n  return error instanceof Error && error.message ? error.message : String(error);\n}\n\nfunction validateServerActionArgs(args: readonly unknown[]): void {\n  if (args.length > SERVER_ACTION_ARGS_LIMIT) {\n    throw new Error(\n      `Server Action arguments list is too long (${args.length}). Maximum allowed is ${SERVER_ACTION_ARGS_LIMIT}.`,\n    );\n  }\n}\n\nexport async function readActionBodyWithLimit(request: Request, maxBytes: number): Promise<string> {\n  if (!request.body) return \"\";\n  return readStreamAsTextWithLimit(request.body, maxBytes, () => {\n    throw new Error(\"Request body too large\");\n  });\n}\n\nexport async function readActionFormDataWithLimit(\n  request: Request,\n  maxBytes: number,\n): Promise<FormData> {\n  if (!request.body) return new FormData();\n\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let totalSize = 0;\n\n  for (;;) {\n    const result = await reader.read();\n    if (result.done) break;\n\n    totalSize += result.value.byteLength;\n    if (totalSize > maxBytes) {\n      await reader.cancel();\n      throw new Error(\"Request body too large\");\n    }\n    chunks.push(result.value);\n  }\n\n  const combined = new Uint8Array(totalSize);\n  let offset = 0;\n  for (const chunk of chunks) {\n    combined.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  return new Response(combined, {\n    headers: { \"Content-Type\": request.headers.get(\"content-type\") || \"\" },\n  }).formData();\n}\n\nfunction getActionRedirect(error: unknown): AppServerActionRedirect | null {\n  const digest = getNextErrorDigest(error);\n  if (!digest) return null;\n\n  const redirect = parseNextRedirectDigest(digest);\n  if (!redirect) return null;\n\n  return {\n    status: redirect.status,\n    type: redirect.type ?? \"push\",\n    url: redirect.url,\n  };\n}\n\n/**\n * Prepend the configured next.config `basePath` to a server-action redirect\n * target before it goes on the wire.\n *\n * `redirect(\"/foo\")` called from a server action mounted at `/base/...` must\n * land the browser at `/base/foo`, mirroring how Next.js threads basePath\n * through `addPathPrefix(getURLFromRedirectError(err), basePath)` in\n * `app-render.tsx` for SSR redirects and in `action-handler.ts` for action\n * redirects.\n *\n * Idempotent and external-aware:\n *  - Empty basePath → returned unchanged.\n *  - External URLs (`http://`, `https://`, `data:`, protocol-relative `//`)\n *    are returned unchanged because the framework does not own those routes.\n *  - Targets that already start with the configured basePath are returned\n *    unchanged so this helper can be applied at any layer without risk of\n *    double-prefixing (`/base/base/foo`).\n *\n * Exported for tests. Used by both the progressive (no-JS form POST) and\n * RSC (`ACTION_REDIRECT_HEADER`) action redirect paths below.\n *\n * @see https://github.com/vercel/next.js/blob/canary/packages/next/src/server/app-render/action-handler.ts\n */\nexport function applyActionRedirectBasePath(url: string, basePath: string): string {\n  if (!basePath) return url;\n  if (isExternalUrl(url)) return url;\n  // Pathnames that already include basePath are returned as-is.\n  if (hasBasePath(url, basePath)) return url;\n  // Relative or hash/query-only targets cannot be prefixed safely without an\n  // origin; leave them to the caller's URL resolution.\n  if (!url.startsWith(\"/\")) return url;\n  // Split off optional query+hash so addBasePathToPathname only operates on\n  // the path. We must accept hash too because Next.js redirect targets may\n  // contain \"#anchor\".\n  const queryIndex = url.indexOf(\"?\");\n  const hashIndex = url.indexOf(\"#\");\n  const splitAt =\n    queryIndex === -1 ? hashIndex : hashIndex === -1 ? queryIndex : Math.min(queryIndex, hashIndex);\n  const pathname = splitAt === -1 ? url : url.slice(0, splitAt);\n  const suffix = splitAt === -1 ? \"\" : url.slice(splitAt);\n  return `${addBasePathToPathname(pathname, basePath)}${suffix}`;\n}\n\nfunction getActionHttpFallbackStatus(error: unknown): number | null {\n  const digest = getNextErrorDigest(error);\n  if (!digest) return null;\n\n  const httpError = parseNextHttpErrorDigest(digest);\n  if (!httpError || !Number.isInteger(httpError.status)) return null;\n\n  return httpError.status;\n}\n\nfunction createServerActionErrorResponse(\n  error: unknown,\n  options: {\n    cleanPathname: string;\n    clearRequestContext: () => void;\n    getAndClearPendingCookies: () => string[];\n    reportRequestError: AppServerActionErrorReporter;\n    request: Request;\n  },\n): Response {\n  options.getAndClearPendingCookies();\n  console.error(\"[vinext] Server action error:\", error);\n  options.reportRequestError(\n    normalizeError(error),\n    {\n      path: options.cleanPathname,\n      method: options.request.method,\n      headers: Object.fromEntries(options.request.headers.entries()),\n    },\n    { routerKind: \"App Router\", routePath: options.cleanPathname, routeType: \"action\" },\n  );\n  options.clearRequestContext();\n  return internalServerErrorResponse(\n    process.env.NODE_ENV === \"production\"\n      ? undefined\n      : \"Server action failed: \" + getServerActionFailureMessage(error),\n  );\n}\n\nfunction createActionNotFoundResponse(\n  actionId: string | null,\n  options: {\n    clearRequestContext: () => void;\n    getAndClearPendingCookies: () => string[];\n  },\n): Response {\n  options.getAndClearPendingCookies();\n  console.warn(getServerActionNotFoundMessage(actionId));\n  options.clearRequestContext();\n  return createServerActionNotFoundResponse();\n}\n\nexport function isProgressiveServerActionRequest(\n  request: Pick<Request, \"method\">,\n  contentType: string,\n  actionId: string | null,\n): boolean {\n  return (\n    request.method.toUpperCase() === \"POST\" &&\n    contentType.startsWith(\"multipart/form-data\") &&\n    !actionId\n  );\n}\n\nexport async function handleProgressiveServerActionRequest(\n  options: HandleProgressiveServerActionRequestOptions,\n): Promise<Response | ProgressiveServerActionResult | null> {\n  if (!isProgressiveServerActionRequest(options.request, options.contentType, options.actionId)) {\n    return null;\n  }\n\n  // Defensive guard: prevent infinite forwarding loops. See handleServerActionRscRequest.\n  if (options.request.headers.get(ACTION_FORWARDED_HEADER)) {\n    return createActionNotFoundResponse(null, {\n      clearRequestContext: options.clearRequestContext,\n      getAndClearPendingCookies: options.getAndClearPendingCookies,\n    });\n  }\n\n  const csrfResponse = validateCsrfOrigin(options.request, options.allowedOrigins);\n  if (csrfResponse) {\n    return csrfResponse;\n  }\n\n  const contentLength = parseInt(options.request.headers.get(\"content-length\") || \"0\", 10);\n  if (contentLength > options.maxActionBodySize) {\n    options.clearRequestContext();\n    return payloadTooLargeResponse();\n  }\n\n  try {\n    let body: FormData;\n    try {\n      // Progressive submissions can still fall through to a regular page render when\n      // the multipart body is not an action payload. Read a clone so that fallback\n      // code can still consume the original request body.\n      body = await options.readFormDataWithLimit(\n        options.request.clone(),\n        options.maxActionBodySize,\n      );\n    } catch (error) {\n      if (isRequestBodyTooLarge(error)) {\n        options.clearRequestContext();\n        return payloadTooLargeResponse();\n      }\n      throw error;\n    }\n\n    const payloadResponse = await validateServerActionPayload(body);\n    if (payloadResponse) {\n      options.clearRequestContext();\n      return payloadResponse;\n    }\n\n    const action = await options.decodeAction(body);\n    if (!isAppServerActionFunction(action)) {\n      return null;\n    }\n\n    let actionRedirect: AppServerActionRedirect | null = null;\n    let actionError: unknown = undefined;\n    let actionFailed = false;\n    let actionResult: unknown;\n    const previousHeadersPhase = options.setHeadersAccessPhase(\"action\");\n    try {\n      actionResult = await action();\n    } catch (error) {\n      actionRedirect = getActionRedirect(error);\n      if (!actionRedirect) {\n        actionError = error;\n        actionFailed = true;\n        const isControlFlow =\n          getActionHttpFallbackStatus(error) !== null || isServerActionNotFoundError(error, null);\n        if (!isControlFlow) {\n          console.error(\"[vinext] Server action error:\", error);\n          options.reportRequestError(\n            normalizeError(error),\n            {\n              path: options.cleanPathname,\n              method: options.request.method,\n              headers: Object.fromEntries(options.request.headers.entries()),\n            },\n            { routerKind: \"App Router\", routePath: options.cleanPathname, routeType: \"action\" },\n          );\n        }\n      }\n    } finally {\n      options.setHeadersAccessPhase(previousHeadersPhase);\n    }\n\n    if (!actionRedirect) {\n      // Capture cookies/headers set during action execution so the caller can\n      // apply them to the rendered page response. Mirrors Next.js'\n      // `res.setHeader('set-cookie', ...)` path in app-render.tsx, which\n      // flushes `requestStore.mutableCookies` onto the response before SSR\n      // streaming begins. Without this, no-JS server-action form POSTs lose\n      // cookies/headers — see issue #1483.\n      const actionPendingCookies = options.getAndClearPendingCookies();\n      const actionDraftCookie = options.getDraftModeCookieHeader();\n      const revalidationKind = resolveActionRevalidationKind(\n        actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n      );\n\n      if (actionFailed) {\n        return {\n          kind: \"form-state\",\n          formState: null,\n          actionError,\n          actionFailed,\n          pendingCookies: actionPendingCookies,\n          draftCookie: actionDraftCookie,\n          revalidationKind,\n        };\n      }\n\n      const formState = await options.decodeFormState(actionResult, body);\n      return {\n        kind: \"form-state\",\n        formState: formState ?? null,\n        pendingCookies: actionPendingCookies,\n        draftCookie: actionDraftCookie,\n        revalidationKind,\n      };\n    }\n\n    const actionPendingCookies = dedupePendingCookies(options.getAndClearPendingCookies());\n    const actionDraftCookie = options.getDraftModeCookieHeader();\n    const actionRevalidationKind = resolveActionRevalidationKind(\n      actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n    );\n    options.clearRequestContext();\n\n    const headers = new Headers();\n    // Prefix the configured basePath onto the redirect target before it\n    // becomes an absolute Location URL. Mirrors Next.js, which threads\n    // basePath through `addPathPrefix(...)` for server-action redirects.\n    const prefixedRedirectUrl = applyActionRedirectBasePath(\n      actionRedirect.url,\n      options.basePath ?? \"\",\n    );\n    headers.set(\"Location\", new URL(prefixedRedirectUrl, options.request.url).toString());\n    mergeMiddlewareResponseHeaders(headers, options.middlewareHeaders);\n    for (const cookie of actionPendingCookies) {\n      headers.append(\"Set-Cookie\", cookie);\n    }\n    if (actionDraftCookie) {\n      headers.append(\"Set-Cookie\", actionDraftCookie);\n    }\n    setActionRevalidatedHeader(headers, actionRevalidationKind);\n\n    return new Response(null, {\n      status: 303,\n      headers,\n    });\n  } catch (error) {\n    if (isServerActionNotFoundError(error, null)) {\n      return createActionNotFoundResponse(null, {\n        clearRequestContext: options.clearRequestContext,\n        getAndClearPendingCookies: options.getAndClearPendingCookies,\n      });\n    }\n\n    getAndClearActionRevalidationKind();\n    options.getAndClearPendingCookies();\n    console.error(\"[vinext] Server action payload parsing error:\", error);\n    options.reportRequestError(\n      normalizeError(error),\n      {\n        path: options.cleanPathname,\n        method: options.request.method,\n        headers: Object.fromEntries(options.request.headers.entries()),\n      },\n      { routerKind: \"App Router\", routePath: options.cleanPathname, routeType: \"action\" },\n    );\n    options.clearRequestContext();\n    return internalServerErrorResponse(\n      process.env.NODE_ENV === \"production\"\n        ? undefined\n        : \"Server action parsing failed: \" + getServerActionFailureMessage(error),\n    );\n  }\n}\n\nexport async function handleServerActionRscRequest<\n  TElement,\n  TRoute extends AppServerActionRoute,\n  TInterceptOpts,\n  TTemporaryReferences,\n  TPage = unknown,\n>(\n  options: HandleServerActionRscRequestOptions<\n    TElement,\n    TRoute,\n    TInterceptOpts,\n    TTemporaryReferences,\n    TPage\n  >,\n): Promise<Response | null> {\n  if (options.request.method.toUpperCase() !== \"POST\" || !options.actionId) {\n    return null;\n  }\n\n  // Defensive guard: if this request has already been forwarded between workers,\n  // do not attempt to process it again. Prevents infinite forwarding loops when\n  // middleware rewrites action POSTs. Matches Next.js behavior:\n  // https://github.com/vercel/next.js/commit/20892dd44e1321c13f755f051e48c3cadd75204b\n  if (options.request.headers.get(ACTION_FORWARDED_HEADER)) {\n    return createActionNotFoundResponse(options.actionId, {\n      clearRequestContext: options.clearRequestContext,\n      getAndClearPendingCookies: options.getAndClearPendingCookies,\n    });\n  }\n\n  const csrfResponse = validateCsrfOrigin(options.request, options.allowedOrigins);\n  if (csrfResponse) return csrfResponse;\n\n  const contentLength = parseInt(options.request.headers.get(\"content-length\") || \"0\", 10);\n  if (contentLength > options.maxActionBodySize) {\n    options.clearRequestContext();\n    return payloadTooLargeResponse();\n  }\n\n  try {\n    let body: string | FormData;\n    try {\n      body = options.contentType.startsWith(\"multipart/form-data\")\n        ? await options.readFormDataWithLimit(options.request, options.maxActionBodySize)\n        : await options.readBodyWithLimit(options.request, options.maxActionBodySize);\n    } catch (error) {\n      if (isRequestBodyTooLarge(error)) {\n        options.clearRequestContext();\n        return payloadTooLargeResponse();\n      }\n      throw error;\n    }\n\n    const payloadResponse = await validateServerActionPayload(body);\n    if (payloadResponse) {\n      options.clearRequestContext();\n      return payloadResponse;\n    }\n\n    let action: unknown;\n    try {\n      action = await options.loadServerAction(options.actionId);\n    } catch (error) {\n      if (isServerActionNotFoundError(error, options.actionId)) {\n        return createActionNotFoundResponse(options.actionId, {\n          clearRequestContext: options.clearRequestContext,\n          getAndClearPendingCookies: options.getAndClearPendingCookies,\n        });\n      }\n\n      throw error;\n    }\n\n    if (!isAppServerActionFunction(action)) {\n      return createActionNotFoundResponse(options.actionId, {\n        clearRequestContext: options.clearRequestContext,\n        getAndClearPendingCookies: options.getAndClearPendingCookies,\n      });\n    }\n\n    const temporaryReferences = options.createTemporaryReferenceSet();\n    const args = await options.decodeReply(body, { temporaryReferences });\n    let returnValue: AppServerActionReturnValue;\n    let actionRedirect: AppServerActionRedirect | null = null;\n    let actionStatus = 200;\n    const previousHeadersPhase = options.setHeadersAccessPhase(\"action\");\n    try {\n      try {\n        validateServerActionArgs(args);\n        const data = await action.apply(null, args);\n        returnValue = { ok: true, data };\n      } catch (error) {\n        actionRedirect = getActionRedirect(error);\n        if (actionRedirect) {\n          returnValue = { ok: true, data: undefined };\n        } else {\n          const httpFallbackStatus = getActionHttpFallbackStatus(error);\n          if (httpFallbackStatus !== null) {\n            actionStatus = httpFallbackStatus;\n            returnValue = { ok: false, data: error };\n          } else {\n            console.error(\"[vinext] Server action error:\", error);\n            returnValue = { ok: false, data: options.sanitizeErrorForClient(error) };\n          }\n        }\n      }\n    } finally {\n      options.setHeadersAccessPhase(previousHeadersPhase);\n    }\n\n    if (actionRedirect) {\n      const actionPendingCookies = dedupePendingCookies(options.getAndClearPendingCookies());\n      const actionDraftCookie = options.getDraftModeCookieHeader();\n      const actionRevalidationKind = resolveActionRevalidationKind(\n        actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n      );\n      options.clearRequestContext();\n      const redirectHeaders = new Headers({\n        \"Content-Type\": VINEXT_RSC_CONTENT_TYPE,\n        Vary: VINEXT_RSC_VARY_HEADER,\n      });\n      applyEdgeRuntimeHeader(redirectHeaders, options.isEdgeRuntime);\n      mergeMiddlewareResponseHeaders(redirectHeaders, options.middlewareHeaders);\n      applyRscCompatibilityIdHeader(redirectHeaders);\n      // Prefix basePath onto the redirect target. The client-side handler in\n      // app-browser-entry reads ACTION_REDIRECT_HEADER and calls\n      // window.location.assign/replace verbatim, so the value must already\n      // be a basePath-prefixed URL.\n      redirectHeaders.set(\n        ACTION_REDIRECT_HEADER,\n        applyActionRedirectBasePath(actionRedirect.url, options.basePath ?? \"\"),\n      );\n      redirectHeaders.set(ACTION_REDIRECT_TYPE_HEADER, actionRedirect.type);\n      redirectHeaders.set(ACTION_REDIRECT_STATUS_HEADER, String(actionRedirect.status));\n      for (const cookie of actionPendingCookies) {\n        redirectHeaders.append(\"Set-Cookie\", cookie);\n      }\n      if (actionDraftCookie) redirectHeaders.append(\"Set-Cookie\", actionDraftCookie);\n      setActionRevalidatedHeader(redirectHeaders, actionRevalidationKind);\n      return new Response(\"\", { status: 200, headers: redirectHeaders });\n    }\n\n    const actionPendingCookies = dedupePendingCookies(options.getAndClearPendingCookies());\n    const actionDraftCookie = options.getDraftModeCookieHeader();\n    const actionRevalidationKind = resolveActionRevalidationKind(\n      actionPendingCookies.length > 0 || Boolean(actionDraftCookie),\n    );\n\n    const shouldSkipPageRendering = actionRevalidationKind === ACTION_DID_NOT_REVALIDATE;\n    if (shouldSkipPageRendering) {\n      const onRenderError = options.createRscOnErrorHandler(\n        options.request,\n        options.cleanPathname,\n        options.cleanPathname,\n      );\n      const rscStream = await options.renderToReadableStream(\n        { returnValue },\n        { temporaryReferences, onError: onRenderError },\n      );\n\n      options.clearRequestContext();\n\n      const actionHeaders = new Headers({\n        \"Content-Type\": VINEXT_RSC_CONTENT_TYPE,\n        Vary: VINEXT_RSC_VARY_HEADER,\n      });\n      applyEdgeRuntimeHeader(actionHeaders, options.isEdgeRuntime);\n      mergeMiddlewareResponseHeaders(actionHeaders, options.middlewareHeaders);\n      applyRscCompatibilityIdHeader(actionHeaders);\n\n      return new Response(rscStream, {\n        status: options.middlewareStatus ?? actionStatus,\n        headers: actionHeaders,\n      });\n    }\n\n    const match = options.matchRoute(options.cleanPathname);\n    let element: TElement;\n    let errorPattern = match ? match.route.pattern : options.cleanPathname;\n    if (match) {\n      const { route: actionRoute, params: actionParams } = match;\n      const actionRerenderTarget = resolveAppPageActionRerenderTarget({\n        cleanPathname: options.cleanPathname,\n        currentParams: actionParams,\n        currentRoute: actionRoute,\n        findIntercept: options.findIntercept,\n        getRouteParamNames: options.getRouteParamNames,\n        getSourceRoute: options.getSourceRoute,\n        isRscRequest: options.isRscRequest,\n        toInterceptOpts: options.toInterceptOpts,\n      });\n\n      options.setNavigationContext({\n        pathname: options.cleanPathname,\n        searchParams: options.searchParams,\n        params: actionRerenderTarget.navigationParams,\n      });\n      setCurrentFetchCacheMode(\n        options.resolveRouteFetchCacheMode?.(actionRerenderTarget.route) ?? null,\n      );\n      element = options.buildPageElement({\n        cleanPathname: options.cleanPathname,\n        interceptOpts: actionRerenderTarget.interceptOpts,\n        isRscRequest: options.isRscRequest,\n        mountedSlotsHeader: options.mountedSlotsHeader,\n        params: actionRerenderTarget.params,\n        request: options.request,\n        route: actionRerenderTarget.route,\n        searchParams: options.searchParams,\n        renderMode: APP_RSC_RENDER_MODE_ACTION_RERENDER_PRESERVE_UI,\n      });\n      errorPattern = actionRerenderTarget.route.pattern;\n    } else {\n      const actionRouteId = options.createPayloadRouteId(options.cleanPathname, null);\n      element = options.createNotFoundElement(actionRouteId);\n    }\n\n    const onRenderError = options.createRscOnErrorHandler(\n      options.request,\n      options.cleanPathname,\n      errorPattern,\n    );\n    const rscStream = await options.renderToReadableStream(\n      { root: element, returnValue },\n      { temporaryReferences, onError: onRenderError },\n    );\n\n    const actionHeaders = new Headers({\n      \"Content-Type\": VINEXT_RSC_CONTENT_TYPE,\n      Vary: VINEXT_RSC_VARY_HEADER,\n    });\n    applyEdgeRuntimeHeader(actionHeaders, options.isEdgeRuntime);\n    mergeMiddlewareResponseHeaders(actionHeaders, options.middlewareHeaders);\n    applyRscCompatibilityIdHeader(actionHeaders);\n    setActionRevalidatedHeader(actionHeaders, actionRevalidationKind);\n    const actionResponse = new Response(rscStream, {\n      status: options.middlewareStatus ?? actionStatus,\n      headers: actionHeaders,\n    });\n    if (actionPendingCookies.length > 0 || actionDraftCookie) {\n      for (const cookie of actionPendingCookies) {\n        actionResponse.headers.append(\"Set-Cookie\", cookie);\n      }\n      if (actionDraftCookie) actionResponse.headers.append(\"Set-Cookie\", actionDraftCookie);\n    }\n    return actionResponse;\n  } catch (error) {\n    getAndClearActionRevalidationKind();\n    return createServerActionErrorResponse(error, {\n      cleanPathname: options.cleanPathname,\n      clearRequestContext: options.clearRequestContext,\n      getAndClearPendingCookies: options.getAndClearPendingCookies,\n      reportRequestError: options.reportRequestError,\n      request: options.request,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmPA,MAAM,2BAA2B;AACjC,MAAM,4BAA4B;AAClC,MAAM,2CAA2C;AAEjD,SAAS,2BAA2B,SAAkB,MAAoC;CACxF,IAAI,SAAS,2BAA2B;CACxC,QAAQ,IAAI,2BAA2B,KAAK,UAAU,KAAK,CAAC;;AAG9D,SAAS,8BAA8B,oBAAqD;CAC1F,MAAM,mBAAmB,mCAAmC;CAM5D,IAAI,oBAAoB,OAAO;CAC/B,OAAO;;AAGT,SAAS,sBAAsB,OAAyB;CACtD,OAAO,iBAAiB,SAAS,MAAM,YAAY;;;;;;;;;;;;;;AAerD,SAAS,qBAAqB,SAAsC;CAClE,IAAI,QAAQ,UAAU,GACpB,OAAO,QAAQ,OAAO;CAExB,MAAM,yBAAS,IAAI,KAAqB;CACxC,MAAM,UAAoB,EAAE;CAC5B,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,OAAO,iBAAiB,OAAO;EACrC,IAAI,SAAS,MAAM;GACjB,QAAQ,KAAK,OAAO;GACpB;;EAMF,OAAO,IAAI,MAAM,OAAO;;CAE1B,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO,QAAQ,CAAC;;AAGzC,SAAS,0BAA0B,QAAoD;CACrF,OAAO,OAAO,WAAW;;AAG3B,SAAS,eAAe,OAAuB;CAC7C,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC;;AAGlE,SAAS,8BAA8B,OAAwB;CAC7D,OAAO,iBAAiB,SAAS,MAAM,UAAU,MAAM,UAAU,OAAO,MAAM;;AAGhF,SAAS,yBAAyB,MAAgC;CAChE,IAAI,KAAK,SAAS,0BAChB,MAAM,IAAI,MACR,6CAA6C,KAAK,OAAO,wBAAwB,yBAAyB,GAC3G;;AAIL,eAAsB,wBAAwB,SAAkB,UAAmC;CACjG,IAAI,CAAC,QAAQ,MAAM,OAAO;CAC1B,OAAO,0BAA0B,QAAQ,MAAM,gBAAgB;EAC7D,MAAM,IAAI,MAAM,yBAAyB;GACzC;;AAGJ,eAAsB,4BACpB,SACA,UACmB;CACnB,IAAI,CAAC,QAAQ,MAAM,OAAO,IAAI,UAAU;CAExC,MAAM,SAAS,QAAQ,KAAK,WAAW;CACvC,MAAM,SAAuB,EAAE;CAC/B,IAAI,YAAY;CAEhB,SAAS;EACP,MAAM,SAAS,MAAM,OAAO,MAAM;EAClC,IAAI,OAAO,MAAM;EAEjB,aAAa,OAAO,MAAM;EAC1B,IAAI,YAAY,UAAU;GACxB,MAAM,OAAO,QAAQ;GACrB,MAAM,IAAI,MAAM,yBAAyB;;EAE3C,OAAO,KAAK,OAAO,MAAM;;CAG3B,MAAM,WAAW,IAAI,WAAW,UAAU;CAC1C,IAAI,SAAS;CACb,KAAK,MAAM,SAAS,QAAQ;EAC1B,SAAS,IAAI,OAAO,OAAO;EAC3B,UAAU,MAAM;;CAGlB,OAAO,IAAI,SAAS,UAAU,EAC5B,SAAS,EAAE,gBAAgB,QAAQ,QAAQ,IAAI,eAAe,IAAI,IAAI,EACvE,CAAC,CAAC,UAAU;;AAGf,SAAS,kBAAkB,OAAgD;CACzE,MAAM,SAAS,mBAAmB,MAAM;CACxC,IAAI,CAAC,QAAQ,OAAO;CAEpB,MAAM,WAAW,wBAAwB,OAAO;CAChD,IAAI,CAAC,UAAU,OAAO;CAEtB,OAAO;EACL,QAAQ,SAAS;EACjB,MAAM,SAAS,QAAQ;EACvB,KAAK,SAAS;EACf;;;;;;;;;;;;;;;;;;;;;;;;;AA0BH,SAAgB,4BAA4B,KAAa,UAA0B;CACjF,IAAI,CAAC,UAAU,OAAO;CACtB,IAAI,cAAc,IAAI,EAAE,OAAO;CAE/B,IAAI,YAAY,KAAK,SAAS,EAAE,OAAO;CAGvC,IAAI,CAAC,IAAI,WAAW,IAAI,EAAE,OAAO;CAIjC,MAAM,aAAa,IAAI,QAAQ,IAAI;CACnC,MAAM,YAAY,IAAI,QAAQ,IAAI;CAClC,MAAM,UACJ,eAAe,KAAK,YAAY,cAAc,KAAK,aAAa,KAAK,IAAI,YAAY,UAAU;CACjG,MAAM,WAAW,YAAY,KAAK,MAAM,IAAI,MAAM,GAAG,QAAQ;CAC7D,MAAM,SAAS,YAAY,KAAK,KAAK,IAAI,MAAM,QAAQ;CACvD,OAAO,GAAG,sBAAsB,UAAU,SAAS,GAAG;;AAGxD,SAAS,4BAA4B,OAA+B;CAClE,MAAM,SAAS,mBAAmB,MAAM;CACxC,IAAI,CAAC,QAAQ,OAAO;CAEpB,MAAM,YAAY,yBAAyB,OAAO;CAClD,IAAI,CAAC,aAAa,CAAC,OAAO,UAAU,UAAU,OAAO,EAAE,OAAO;CAE9D,OAAO,UAAU;;AAGnB,SAAS,gCACP,OACA,SAOU;CACV,QAAQ,2BAA2B;CACnC,QAAQ,MAAM,iCAAiC,MAAM;CACrD,QAAQ,mBACN,eAAe,MAAM,EACrB;EACE,MAAM,QAAQ;EACd,QAAQ,QAAQ,QAAQ;EACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;EAC/D,EACD;EAAE,YAAY;EAAc,WAAW,QAAQ;EAAe,WAAW;EAAU,CACpF;CACD,QAAQ,qBAAqB;CAC7B,OAAO,4BACL,QAAQ,IAAI,aAAa,eACrB,KAAA,IACA,2BAA2B,8BAA8B,MAAM,CACpE;;AAGH,SAAS,6BACP,UACA,SAIU;CACV,QAAQ,2BAA2B;CACnC,QAAQ,KAAK,+BAA+B,SAAS,CAAC;CACtD,QAAQ,qBAAqB;CAC7B,OAAO,oCAAoC;;AAG7C,SAAgB,iCACd,SACA,aACA,UACS;CACT,OACE,QAAQ,OAAO,aAAa,KAAK,UACjC,YAAY,WAAW,sBAAsB,IAC7C,CAAC;;AAIL,eAAsB,qCACpB,SAC0D;CAC1D,IAAI,CAAC,iCAAiC,QAAQ,SAAS,QAAQ,aAAa,QAAQ,SAAS,EAC3F,OAAO;CAIT,IAAI,QAAQ,QAAQ,QAAQ,IAAA,qBAA4B,EACtD,OAAO,6BAA6B,MAAM;EACxC,qBAAqB,QAAQ;EAC7B,2BAA2B,QAAQ;EACpC,CAAC;CAGJ,MAAM,eAAe,mBAAmB,QAAQ,SAAS,QAAQ,eAAe;CAChF,IAAI,cACF,OAAO;CAIT,IADsB,SAAS,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,KAAK,GACpE,GAAG,QAAQ,mBAAmB;EAC7C,QAAQ,qBAAqB;EAC7B,OAAO,yBAAyB;;CAGlC,IAAI;EACF,IAAI;EACJ,IAAI;GAIF,OAAO,MAAM,QAAQ,sBACnB,QAAQ,QAAQ,OAAO,EACvB,QAAQ,kBACT;WACM,OAAO;GACd,IAAI,sBAAsB,MAAM,EAAE;IAChC,QAAQ,qBAAqB;IAC7B,OAAO,yBAAyB;;GAElC,MAAM;;EAGR,MAAM,kBAAkB,MAAM,4BAA4B,KAAK;EAC/D,IAAI,iBAAiB;GACnB,QAAQ,qBAAqB;GAC7B,OAAO;;EAGT,MAAM,SAAS,MAAM,QAAQ,aAAa,KAAK;EAC/C,IAAI,CAAC,0BAA0B,OAAO,EACpC,OAAO;EAGT,IAAI,iBAAiD;EACrD,IAAI,cAAuB,KAAA;EAC3B,IAAI,eAAe;EACnB,IAAI;EACJ,MAAM,uBAAuB,QAAQ,sBAAsB,SAAS;EACpE,IAAI;GACF,eAAe,MAAM,QAAQ;WACtB,OAAO;GACd,iBAAiB,kBAAkB,MAAM;GACzC,IAAI,CAAC,gBAAgB;IACnB,cAAc;IACd,eAAe;IAGf,IAAI,EADF,4BAA4B,MAAM,KAAK,QAAQ,4BAA4B,OAAO,KAAK,GACrE;KAClB,QAAQ,MAAM,iCAAiC,MAAM;KACrD,QAAQ,mBACN,eAAe,MAAM,EACrB;MACE,MAAM,QAAQ;MACd,QAAQ,QAAQ,QAAQ;MACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;MAC/D,EACD;MAAE,YAAY;MAAc,WAAW,QAAQ;MAAe,WAAW;MAAU,CACpF;;;YAGG;GACR,QAAQ,sBAAsB,qBAAqB;;EAGrD,IAAI,CAAC,gBAAgB;GAOnB,MAAM,uBAAuB,QAAQ,2BAA2B;GAChE,MAAM,oBAAoB,QAAQ,0BAA0B;GAC5D,MAAM,mBAAmB,8BACvB,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;GAED,IAAI,cACF,OAAO;IACL,MAAM;IACN,WAAW;IACX;IACA;IACA,gBAAgB;IAChB,aAAa;IACb;IACD;GAIH,OAAO;IACL,MAAM;IACN,WAAW,MAHW,QAAQ,gBAAgB,cAAc,KAAK,IAGzC;IACxB,gBAAgB;IAChB,aAAa;IACb;IACD;;EAGH,MAAM,uBAAuB,qBAAqB,QAAQ,2BAA2B,CAAC;EACtF,MAAM,oBAAoB,QAAQ,0BAA0B;EAC5D,MAAM,yBAAyB,8BAC7B,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;EACD,QAAQ,qBAAqB;EAE7B,MAAM,UAAU,IAAI,SAAS;EAI7B,MAAM,sBAAsB,4BAC1B,eAAe,KACf,QAAQ,YAAY,GACrB;EACD,QAAQ,IAAI,YAAY,IAAI,IAAI,qBAAqB,QAAQ,QAAQ,IAAI,CAAC,UAAU,CAAC;EACrF,+BAA+B,SAAS,QAAQ,kBAAkB;EAClE,KAAK,MAAM,UAAU,sBACnB,QAAQ,OAAO,cAAc,OAAO;EAEtC,IAAI,mBACF,QAAQ,OAAO,cAAc,kBAAkB;EAEjD,2BAA2B,SAAS,uBAAuB;EAE3D,OAAO,IAAI,SAAS,MAAM;GACxB,QAAQ;GACR;GACD,CAAC;UACK,OAAO;EACd,IAAI,4BAA4B,OAAO,KAAK,EAC1C,OAAO,6BAA6B,MAAM;GACxC,qBAAqB,QAAQ;GAC7B,2BAA2B,QAAQ;GACpC,CAAC;EAGJ,mCAAmC;EACnC,QAAQ,2BAA2B;EACnC,QAAQ,MAAM,iDAAiD,MAAM;EACrE,QAAQ,mBACN,eAAe,MAAM,EACrB;GACE,MAAM,QAAQ;GACd,QAAQ,QAAQ,QAAQ;GACxB,SAAS,OAAO,YAAY,QAAQ,QAAQ,QAAQ,SAAS,CAAC;GAC/D,EACD;GAAE,YAAY;GAAc,WAAW,QAAQ;GAAe,WAAW;GAAU,CACpF;EACD,QAAQ,qBAAqB;EAC7B,OAAO,4BACL,QAAQ,IAAI,aAAa,eACrB,KAAA,IACA,mCAAmC,8BAA8B,MAAM,CAC5E;;;AAIL,eAAsB,6BAOpB,SAO0B;CAC1B,IAAI,QAAQ,QAAQ,OAAO,aAAa,KAAK,UAAU,CAAC,QAAQ,UAC9D,OAAO;CAOT,IAAI,QAAQ,QAAQ,QAAQ,IAAA,qBAA4B,EACtD,OAAO,6BAA6B,QAAQ,UAAU;EACpD,qBAAqB,QAAQ;EAC7B,2BAA2B,QAAQ;EACpC,CAAC;CAGJ,MAAM,eAAe,mBAAmB,QAAQ,SAAS,QAAQ,eAAe;CAChF,IAAI,cAAc,OAAO;CAGzB,IADsB,SAAS,QAAQ,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,KAAK,GACpE,GAAG,QAAQ,mBAAmB;EAC7C,QAAQ,qBAAqB;EAC7B,OAAO,yBAAyB;;CAGlC,IAAI;EACF,IAAI;EACJ,IAAI;GACF,OAAO,QAAQ,YAAY,WAAW,sBAAsB,GACxD,MAAM,QAAQ,sBAAsB,QAAQ,SAAS,QAAQ,kBAAkB,GAC/E,MAAM,QAAQ,kBAAkB,QAAQ,SAAS,QAAQ,kBAAkB;WACxE,OAAO;GACd,IAAI,sBAAsB,MAAM,EAAE;IAChC,QAAQ,qBAAqB;IAC7B,OAAO,yBAAyB;;GAElC,MAAM;;EAGR,MAAM,kBAAkB,MAAM,4BAA4B,KAAK;EAC/D,IAAI,iBAAiB;GACnB,QAAQ,qBAAqB;GAC7B,OAAO;;EAGT,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,QAAQ,iBAAiB,QAAQ,SAAS;WAClD,OAAO;GACd,IAAI,4BAA4B,OAAO,QAAQ,SAAS,EACtD,OAAO,6BAA6B,QAAQ,UAAU;IACpD,qBAAqB,QAAQ;IAC7B,2BAA2B,QAAQ;IACpC,CAAC;GAGJ,MAAM;;EAGR,IAAI,CAAC,0BAA0B,OAAO,EACpC,OAAO,6BAA6B,QAAQ,UAAU;GACpD,qBAAqB,QAAQ;GAC7B,2BAA2B,QAAQ;GACpC,CAAC;EAGJ,MAAM,sBAAsB,QAAQ,6BAA6B;EACjE,MAAM,OAAO,MAAM,QAAQ,YAAY,MAAM,EAAE,qBAAqB,CAAC;EACrE,IAAI;EACJ,IAAI,iBAAiD;EACrD,IAAI,eAAe;EACnB,MAAM,uBAAuB,QAAQ,sBAAsB,SAAS;EACpE,IAAI;GACF,IAAI;IACF,yBAAyB,KAAK;IAE9B,cAAc;KAAE,IAAI;KAAM,MAAA,MADP,OAAO,MAAM,MAAM,KAAK;KACX;YACzB,OAAO;IACd,iBAAiB,kBAAkB,MAAM;IACzC,IAAI,gBACF,cAAc;KAAE,IAAI;KAAM,MAAM,KAAA;KAAW;SACtC;KACL,MAAM,qBAAqB,4BAA4B,MAAM;KAC7D,IAAI,uBAAuB,MAAM;MAC/B,eAAe;MACf,cAAc;OAAE,IAAI;OAAO,MAAM;OAAO;YACnC;MACL,QAAQ,MAAM,iCAAiC,MAAM;MACrD,cAAc;OAAE,IAAI;OAAO,MAAM,QAAQ,uBAAuB,MAAM;OAAE;;;;YAItE;GACR,QAAQ,sBAAsB,qBAAqB;;EAGrD,IAAI,gBAAgB;GAClB,MAAM,uBAAuB,qBAAqB,QAAQ,2BAA2B,CAAC;GACtF,MAAM,oBAAoB,QAAQ,0BAA0B;GAC5D,MAAM,yBAAyB,8BAC7B,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;GACD,QAAQ,qBAAqB;GAC7B,MAAM,kBAAkB,IAAI,QAAQ;IAClC,gBAAgB;IAChB,MAAM;IACP,CAAC;GACF,uBAAuB,iBAAiB,QAAQ,cAAc;GAC9D,+BAA+B,iBAAiB,QAAQ,kBAAkB;GAC1E,8BAA8B,gBAAgB;GAK9C,gBAAgB,IACd,wBACA,4BAA4B,eAAe,KAAK,QAAQ,YAAY,GAAG,CACxE;GACD,gBAAgB,IAAI,6BAA6B,eAAe,KAAK;GACrE,gBAAgB,IAAI,+BAA+B,OAAO,eAAe,OAAO,CAAC;GACjF,KAAK,MAAM,UAAU,sBACnB,gBAAgB,OAAO,cAAc,OAAO;GAE9C,IAAI,mBAAmB,gBAAgB,OAAO,cAAc,kBAAkB;GAC9E,2BAA2B,iBAAiB,uBAAuB;GACnE,OAAO,IAAI,SAAS,IAAI;IAAE,QAAQ;IAAK,SAAS;IAAiB,CAAC;;EAGpE,MAAM,uBAAuB,qBAAqB,QAAQ,2BAA2B,CAAC;EACtF,MAAM,oBAAoB,QAAQ,0BAA0B;EAC5D,MAAM,yBAAyB,8BAC7B,qBAAqB,SAAS,KAAK,QAAQ,kBAAkB,CAC9D;EAGD,IADgC,2BAA2B,2BAC9B;GAC3B,MAAM,gBAAgB,QAAQ,wBAC5B,QAAQ,SACR,QAAQ,eACR,QAAQ,cACT;GACD,MAAM,YAAY,MAAM,QAAQ,uBAC9B,EAAE,aAAa,EACf;IAAE;IAAqB,SAAS;IAAe,CAChD;GAED,QAAQ,qBAAqB;GAE7B,MAAM,gBAAgB,IAAI,QAAQ;IAChC,gBAAgB;IAChB,MAAM;IACP,CAAC;GACF,uBAAuB,eAAe,QAAQ,cAAc;GAC5D,+BAA+B,eAAe,QAAQ,kBAAkB;GACxE,8BAA8B,cAAc;GAE5C,OAAO,IAAI,SAAS,WAAW;IAC7B,QAAQ,QAAQ,oBAAoB;IACpC,SAAS;IACV,CAAC;;EAGJ,MAAM,QAAQ,QAAQ,WAAW,QAAQ,cAAc;EACvD,IAAI;EACJ,IAAI,eAAe,QAAQ,MAAM,MAAM,UAAU,QAAQ;EACzD,IAAI,OAAO;GACT,MAAM,EAAE,OAAO,aAAa,QAAQ,iBAAiB;GACrD,MAAM,uBAAuB,mCAAmC;IAC9D,eAAe,QAAQ;IACvB,eAAe;IACf,cAAc;IACd,eAAe,QAAQ;IACvB,oBAAoB,QAAQ;IAC5B,gBAAgB,QAAQ;IACxB,cAAc,QAAQ;IACtB,iBAAiB,QAAQ;IAC1B,CAAC;GAEF,QAAQ,qBAAqB;IAC3B,UAAU,QAAQ;IAClB,cAAc,QAAQ;IACtB,QAAQ,qBAAqB;IAC9B,CAAC;GACF,yBACE,QAAQ,6BAA6B,qBAAqB,MAAM,IAAI,KACrE;GACD,UAAU,QAAQ,iBAAiB;IACjC,eAAe,QAAQ;IACvB,eAAe,qBAAqB;IACpC,cAAc,QAAQ;IACtB,oBAAoB,QAAQ;IAC5B,QAAQ,qBAAqB;IAC7B,SAAS,QAAQ;IACjB,OAAO,qBAAqB;IAC5B,cAAc,QAAQ;IACtB,YAAY;IACb,CAAC;GACF,eAAe,qBAAqB,MAAM;SACrC;GACL,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,eAAe,KAAK;GAC/E,UAAU,QAAQ,sBAAsB,cAAc;;EAGxD,MAAM,gBAAgB,QAAQ,wBAC5B,QAAQ,SACR,QAAQ,eACR,aACD;EACD,MAAM,YAAY,MAAM,QAAQ,uBAC9B;GAAE,MAAM;GAAS;GAAa,EAC9B;GAAE;GAAqB,SAAS;GAAe,CAChD;EAED,MAAM,gBAAgB,IAAI,QAAQ;GAChC,gBAAgB;GAChB,MAAM;GACP,CAAC;EACF,uBAAuB,eAAe,QAAQ,cAAc;EAC5D,+BAA+B,eAAe,QAAQ,kBAAkB;EACxE,8BAA8B,cAAc;EAC5C,2BAA2B,eAAe,uBAAuB;EACjE,MAAM,iBAAiB,IAAI,SAAS,WAAW;GAC7C,QAAQ,QAAQ,oBAAoB;GACpC,SAAS;GACV,CAAC;EACF,IAAI,qBAAqB,SAAS,KAAK,mBAAmB;GACxD,KAAK,MAAM,UAAU,sBACnB,eAAe,QAAQ,OAAO,cAAc,OAAO;GAErD,IAAI,mBAAmB,eAAe,QAAQ,OAAO,cAAc,kBAAkB;;EAEvF,OAAO;UACA,OAAO;EACd,mCAAmC;EACnC,OAAO,gCAAgC,OAAO;GAC5C,eAAe,QAAQ;GACvB,qBAAqB,QAAQ;GAC7B,2BAA2B,QAAQ;GACnC,oBAAoB,QAAQ;GAC5B,SAAS,QAAQ;GAClB,CAAC"}