what-server 0.5.4 → 0.6.0

package/README.md

@@ -129,7 +129,7 @@ const submitForm = formAction(async (formData) => {
 ## Links
 
 - [Documentation](https://whatfw.com)
-- [GitHub](https://github.com/zvndev/what-fw)
+- [GitHub](https://github.com/CelsianJs/what-framework)
 
 ## License
 

package/dist/actions.js

@@ -0,0 +1,352 @@
+// packages/server/src/actions.js
+import { signal, batch } from "what-core";
+var actionRegistry = /* @__PURE__ */ new Map();
+function getCsrfToken() {
+  if (typeof document !== "undefined") {
+    const meta = document.querySelector('meta[name="what-csrf-token"]');
+    if (meta) {
+      return meta.getAttribute("content");
+    }
+    const match = document.cookie.match(/(?:^|;\s*)what-csrf=([^;]+)/);
+    if (match) {
+      return decodeURIComponent(match[1]);
+    }
+  }
+  return null;
+}
+function generateCsrfToken() {
+  if (typeof crypto !== "undefined" && crypto.randomUUID) {
+    return crypto.randomUUID();
+  }
+  if (typeof crypto !== "undefined" && crypto.getRandomValues) {
+    const arr = new Uint8Array(16);
+    crypto.getRandomValues(arr);
+    return Array.from(arr, (b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  throw new Error("[what] No secure random source available for CSRF token generation");
+}
+function validateCsrfToken(requestToken, sessionToken) {
+  if (!requestToken || !sessionToken) return false;
+  if (requestToken.length !== sessionToken.length) return false;
+  let result = 0;
+  for (let i = 0; i < requestToken.length; i++) {
+    result |= requestToken.charCodeAt(i) ^ sessionToken.charCodeAt(i);
+  }
+  return result === 0;
+}
+function csrfMetaTag(token) {
+  const escaped = String(token).replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return `<meta name="what-csrf-token" content="${escaped}">`;
+}
+function generateActionId() {
+  const rand = typeof crypto !== "undefined" && crypto.getRandomValues ? Array.from(crypto.getRandomValues(new Uint8Array(6)), (b) => b.toString(16).padStart(2, "0")).join("") : Math.random().toString(36).slice(2, 10) + Date.now().toString(36);
+  return `a_${rand}`;
+}
+function action(fn, options = {}) {
+  const id = options.id || generateActionId();
+  const { onError, onSuccess, revalidate } = options;
+  if (typeof window === "undefined") {
+    actionRegistry.set(id, { fn, options });
+  }
+  async function callAction(...args) {
+    if (typeof window === "undefined") {
+      return fn(...args);
+    }
+    const timeout = options.timeout || 3e4;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    try {
+      const csrfToken = getCsrfToken();
+      const headers = {
+        "Content-Type": "application/json",
+        "X-What-Action": id
+      };
+      if (csrfToken) headers["X-CSRF-Token"] = csrfToken;
+      const response = await fetch("/__what_action", {
+        method: "POST",
+        headers,
+        credentials: "same-origin",
+        signal: controller.signal,
+        body: JSON.stringify({ args })
+      });
+      if (!response.ok) {
+        const error = await response.json().catch(() => ({ message: "Action failed" }));
+        throw new Error(error.message || "Action failed");
+      }
+      const result = await response.json();
+      if (onSuccess) onSuccess(result);
+      if (revalidate) {
+        for (const path of revalidate) {
+          invalidatePath(path);
+        }
+      }
+      return result;
+    } catch (error) {
+      if (error.name === "AbortError") {
+        const timeoutError = new Error(`Action "${id}" timed out after ${timeout}ms`);
+        timeoutError.code = "TIMEOUT";
+        if (onError) onError(timeoutError);
+        throw timeoutError;
+      }
+      if (onError) onError(error);
+      throw error;
+    } finally {
+      clearTimeout(timeoutId);
+    }
+  }
+  callAction._actionId = id;
+  callAction._isAction = true;
+  return callAction;
+}
+function formAction(actionFn, options = {}) {
+  const { onSuccess, onError, resetOnSuccess = true } = options;
+  return async (formDataOrEvent) => {
+    let formData;
+    let form;
+    if (formDataOrEvent instanceof Event) {
+      formDataOrEvent.preventDefault();
+      form = formDataOrEvent.target;
+      formData = new FormData(form);
+    } else {
+      formData = formDataOrEvent;
+    }
+    const data = {};
+    let hasFiles = false;
+    for (const [key, value] of formData.entries()) {
+      if (typeof File !== "undefined" && value instanceof File) {
+        hasFiles = true;
+      }
+      if (data[key]) {
+        if (Array.isArray(data[key])) {
+          data[key].push(value);
+        } else {
+          data[key] = [data[key], value];
+        }
+      } else {
+        data[key] = value;
+      }
+    }
+    try {
+      const result = hasFiles ? await actionFn(data, formData) : await actionFn(data);
+      if (onSuccess) onSuccess(result, form);
+      if (resetOnSuccess && form) form.reset();
+      return result;
+    } catch (error) {
+      if (onError) onError(error, form);
+      throw error;
+    }
+  };
+}
+function useAction(actionFn) {
+  const isPending = signal(false);
+  const error = signal(null);
+  const data = signal(null);
+  async function trigger(...args) {
+    isPending.set(true);
+    error.set(null);
+    try {
+      const result = await actionFn(...args);
+      data.set(result);
+      return result;
+    } catch (e) {
+      error.set(e);
+      throw e;
+    } finally {
+      isPending.set(false);
+    }
+  }
+  return {
+    trigger,
+    isPending: () => isPending(),
+    error: () => error(),
+    data: () => data(),
+    reset: () => {
+      error.set(null);
+      data.set(null);
+    }
+  };
+}
+function useFormAction(actionFn, options = {}) {
+  const { resetOnSuccess = true } = options;
+  const formRef = { current: null };
+  const actionState = useAction(formAction(actionFn, { resetOnSuccess }));
+  function handleSubmit(e) {
+    e.preventDefault();
+    const formData = new FormData(e.target);
+    formRef.current = e.target;
+    return actionState.trigger(formData);
+  }
+  return {
+    ...actionState,
+    handleSubmit,
+    formRef
+  };
+}
+function useOptimistic(initialValue, reducer) {
+  const value = signal(initialValue);
+  const pending = signal([]);
+  const baseValue = signal(initialValue);
+  function addOptimistic(action2) {
+    const optimisticValue = reducer(value.peek(), action2);
+    batch(() => {
+      pending.set([...pending.peek(), action2]);
+      value.set(optimisticValue);
+    });
+  }
+  function resolve(action2, serverValue) {
+    batch(() => {
+      pending.set(pending.peek().filter((a) => a !== action2));
+      if (serverValue !== void 0) {
+        baseValue.set(serverValue);
+        let current = serverValue;
+        for (const a of pending.peek()) {
+          current = reducer(current, a);
+        }
+        value.set(current);
+      }
+    });
+  }
+  function rollback(action2, realValue) {
+    batch(() => {
+      const newPending = pending.peek().filter((a) => a !== action2);
+      pending.set(newPending);
+      const base = realValue !== void 0 ? realValue : baseValue.peek();
+      baseValue.set(base);
+      let current = base;
+      for (const a of newPending) {
+        current = reducer(current, a);
+      }
+      value.set(current);
+    });
+  }
+  async function withOptimistic(action2, asyncFn) {
+    addOptimistic(action2);
+    try {
+      const result = await asyncFn();
+      resolve(action2, result);
+      return result;
+    } catch (e) {
+      rollback(action2);
+      throw e;
+    }
+  }
+  return {
+    value: () => value(),
+    isPending: () => pending().length > 0,
+    addOptimistic,
+    resolve,
+    rollback,
+    withOptimistic,
+    set: (v) => {
+      value.set(v);
+      baseValue.set(v);
+    }
+  };
+}
+var revalidationCallbacks = /* @__PURE__ */ new Map();
+function onRevalidate(path, callback) {
+  if (!revalidationCallbacks.has(path)) {
+    revalidationCallbacks.set(path, /* @__PURE__ */ new Set());
+  }
+  revalidationCallbacks.get(path).add(callback);
+  return () => {
+    revalidationCallbacks.get(path)?.delete(callback);
+  };
+}
+function invalidatePath(path) {
+  const callbacks = revalidationCallbacks.get(path);
+  if (callbacks) {
+    for (const cb of callbacks) {
+      try {
+        cb();
+      } catch (e) {
+        console.error("[what] Revalidation error:", e);
+      }
+    }
+  }
+}
+function handleActionRequest(req, actionId, args, options = {}) {
+  const { csrfToken: sessionCsrfToken, skipCsrf = false } = options;
+  if (!skipCsrf) {
+    if (!sessionCsrfToken) {
+      return Promise.resolve({
+        status: 500,
+        body: {
+          message: "[what] CSRF token not configured. Pass { csrfToken: sessionToken } to handleActionRequest, or { skipCsrf: true } to explicitly opt out."
+        }
+      });
+    }
+    const requestCsrfToken = req?.headers?.["x-csrf-token"] || req?.headers?.["X-CSRF-Token"];
+    if (!validateCsrfToken(requestCsrfToken, sessionCsrfToken)) {
+      return Promise.resolve({ status: 403, body: { message: "Invalid CSRF token" } });
+    }
+  }
+  const action2 = actionRegistry.get(actionId);
+  if (!action2) {
+    return Promise.resolve({ status: 404, body: { message: "Action not found" } });
+  }
+  if (!Array.isArray(args)) {
+    return Promise.resolve({ status: 400, body: { message: "Invalid action arguments" } });
+  }
+  return action2.fn(...args).then((result) => ({ status: 200, body: result })).catch((error) => {
+    console.error(`[what] Action "${actionId}" error:`, error);
+    return {
+      status: 500,
+      body: { message: "Action failed" }
+    };
+  });
+}
+function getRegisteredActions() {
+  return [...actionRegistry.keys()];
+}
+function useMutation(mutationFn, options = {}) {
+  const { onSuccess, onError, onSettled } = options;
+  const state = {
+    isPending: signal(false),
+    error: signal(null),
+    data: signal(null)
+  };
+  async function mutate(...args) {
+    state.isPending.set(true);
+    state.error.set(null);
+    try {
+      const result = await mutationFn(...args);
+      state.data.set(result);
+      if (onSuccess) onSuccess(result, ...args);
+      return result;
+    } catch (error) {
+      state.error.set(error);
+      if (onError) onError(error, ...args);
+      throw error;
+    } finally {
+      state.isPending.set(false);
+      if (onSettled) onSettled(state.data.peek(), state.error.peek(), ...args);
+    }
+  }
+  return {
+    mutate,
+    isPending: () => state.isPending(),
+    error: () => state.error(),
+    data: () => state.data(),
+    reset: () => {
+      state.error.set(null);
+      state.data.set(null);
+    }
+  };
+}
+export {
+  action,
+  csrfMetaTag,
+  formAction,
+  generateCsrfToken,
+  getRegisteredActions,
+  handleActionRequest,
+  invalidatePath,
+  onRevalidate,
+  useAction,
+  useFormAction,
+  useMutation,
+  useOptimistic,
+  validateCsrfToken
+};
+//# sourceMappingURL=actions.js.map

package/dist/actions.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/actions.js"],
+  "sourcesContent": ["// What Framework - Server Actions\n// Call server-side functions from client code seamlessly.\n// Similar to Next.js Server Actions / SolidStart server functions.\n//\n// Usage:\n//   // Define on server\n//   const saveUser = action(async (formData) => {\n//     'use server';\n//     const user = await db.users.create(formData);\n//     return { success: true, id: user.id };\n//   });\n//\n//   // Call from client\n//   const result = await saveUser({ name: 'John' });\n\nimport { signal, batch } from 'what-core';\n\n// Registry of server actions\nconst actionRegistry = new Map();\n\n// --- CSRF Protection ---\n// Server generates a token per session; client sends it with every action request.\n// The token is injected into the page via a meta tag or embedded in the server response.\n\n// Client: read the CSRF token from the page meta tag or cookie\n// Re-reads on every call to handle token rotation\nfunction getCsrfToken() {\n  if (typeof document !== 'undefined') {\n    // Try meta tag first\n    const meta = document.querySelector('meta[name=\"what-csrf-token\"]');\n    if (meta) {\n      return meta.getAttribute('content');\n    }\n    // Try cookie\n    const match = document.cookie.match(/(?:^|;\\s*)what-csrf=([^;]+)/);\n    if (match) {\n      return decodeURIComponent(match[1]);\n    }\n  }\n  return null;\n}\n\n// Server: generate a CSRF token (call this per session/request)\nexport function generateCsrfToken() {\n  if (typeof crypto !== 'undefined' && crypto.randomUUID) {\n    return crypto.randomUUID();\n  }\n  // Fallback for environments without crypto.randomUUID \u2014 use crypto.getRandomValues\n  if (typeof crypto !== 'undefined' && crypto.getRandomValues) {\n    const arr = new Uint8Array(16);\n    crypto.getRandomValues(arr);\n    return Array.from(arr, b => b.toString(16).padStart(2, '0')).join('');\n  }\n  // Last resort \u2014 should not be reached in modern environments\n  throw new Error('[what] No secure random source available for CSRF token generation');\n}\n\n// Server: validate CSRF token from request header against session token\nexport function validateCsrfToken(requestToken, sessionToken) {\n  if (!requestToken || !sessionToken) return false;\n  // Constant-time comparison to prevent timing attacks\n  if (requestToken.length !== sessionToken.length) return false;\n  let result = 0;\n  for (let i = 0; i < requestToken.length; i++) {\n    result |= requestToken.charCodeAt(i) ^ sessionToken.charCodeAt(i);\n  }\n  return result === 0;\n}\n\n// Server: middleware helper to inject CSRF meta tag into HTML\nexport function csrfMetaTag(token) {\n  // HTML-escape the token to prevent XSS if a non-standard value is used\n  const escaped = String(token).replace(/&/g, '&amp;').replace(/\"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');\n  return `<meta name=\"what-csrf-token\" content=\"${escaped}\">`;\n}\n\n// --- Define a server action ---\n\nfunction generateActionId() {\n  // Generate a random ID that's not easily enumerable\n  const rand = typeof crypto !== 'undefined' && crypto.getRandomValues\n    ? Array.from(crypto.getRandomValues(new Uint8Array(6)), b => b.toString(16).padStart(2, '0')).join('')\n    : Math.random().toString(36).slice(2, 10) + Date.now().toString(36);\n  return `a_${rand}`;\n}\n\nexport function action(fn, options = {}) {\n  const id = options.id || generateActionId();\n  const { onError, onSuccess, revalidate } = options;\n\n  // Server-side: register the action\n  if (typeof window === 'undefined') {\n    actionRegistry.set(id, { fn, options });\n  }\n\n  // Create the callable wrapper\n  async function callAction(...args) {\n    // Server-side: call directly\n    if (typeof window === 'undefined') {\n      return fn(...args);\n    }\n\n    // Client-side: call via fetch with timeout support\n    const timeout = options.timeout || 30000; // Default 30s timeout\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), timeout);\n\n    try {\n      const csrfToken = getCsrfToken();\n      const headers = {\n        'Content-Type': 'application/json',\n        'X-What-Action': id,\n      };\n      if (csrfToken) headers['X-CSRF-Token'] = csrfToken;\n\n      const response = await fetch('/__what_action', {\n        method: 'POST',\n        headers,\n        credentials: 'same-origin',\n        signal: controller.signal,\n        body: JSON.stringify({ args }),\n      });\n\n      if (!response.ok) {\n        const error = await response.json().catch(() => ({ message: 'Action failed' }));\n        throw new Error(error.message || 'Action failed');\n      }\n\n      const result = await response.json();\n\n      if (onSuccess) onSuccess(result);\n      if (revalidate) {\n        // Trigger revalidation of specified paths\n        for (const path of revalidate) {\n          invalidatePath(path);\n        }\n      }\n\n      return result;\n    } catch (error) {\n      if (error.name === 'AbortError') {\n        const timeoutError = new Error(`Action \"${id}\" timed out after ${timeout}ms`);\n        timeoutError.code = 'TIMEOUT';\n        if (onError) onError(timeoutError);\n        throw timeoutError;\n      }\n      if (onError) onError(error);\n      throw error;\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  callAction._actionId = id;\n  callAction._isAction = true;\n\n  return callAction;\n}\n\n// --- Form action helper ---\n// For forms that submit to server actions.\n\nexport function formAction(actionFn, options = {}) {\n  const { onSuccess, onError, resetOnSuccess = true } = options;\n\n  return async (formDataOrEvent) => {\n    let formData;\n    let form;\n\n    if (formDataOrEvent instanceof Event) {\n      formDataOrEvent.preventDefault();\n      form = formDataOrEvent.target;\n      formData = new FormData(form);\n    } else {\n      formData = formDataOrEvent;\n    }\n\n    // Convert FormData to plain object, preserving File instances\n    const data = {};\n    let hasFiles = false;\n    for (const [key, value] of formData.entries()) {\n      if (typeof File !== 'undefined' && value instanceof File) {\n        hasFiles = true;\n      }\n      if (data[key]) {\n        // Handle multiple values (e.g., checkboxes, multi-file inputs)\n        if (Array.isArray(data[key])) {\n          data[key].push(value);\n        } else {\n          data[key] = [data[key], value];\n        }\n      } else {\n        data[key] = value;\n      }\n    }\n\n    try {\n      // If form contains files, pass the raw FormData as second arg\n      // so the action handler can access files directly\n      const result = hasFiles\n        ? await actionFn(data, formData)\n        : await actionFn(data);\n      if (onSuccess) onSuccess(result, form);\n      if (resetOnSuccess && form) form.reset();\n      return result;\n    } catch (error) {\n      if (onError) onError(error, form);\n      throw error;\n    }\n  };\n}\n\n// --- useAction hook ---\n// Returns action state and trigger function.\n\nexport function useAction(actionFn) {\n  const isPending = signal(false);\n  const error = signal(null);\n  const data = signal(null);\n\n  async function trigger(...args) {\n    isPending.set(true);\n    error.set(null);\n\n    try {\n      const result = await actionFn(...args);\n      data.set(result);\n      return result;\n    } catch (e) {\n      error.set(e);\n      throw e;\n    } finally {\n      isPending.set(false);\n    }\n  }\n\n  return {\n    trigger,\n    isPending: () => isPending(),\n    error: () => error(),\n    data: () => data(),\n    reset: () => {\n      error.set(null);\n      data.set(null);\n    },\n  };\n}\n\n// --- useFormAction hook ---\n// Combines useAction with form handling.\n\nexport function useFormAction(actionFn, options = {}) {\n  const { resetOnSuccess = true } = options;\n  const formRef = { current: null };\n  const actionState = useAction(formAction(actionFn, { resetOnSuccess }));\n\n  function handleSubmit(e) {\n    e.preventDefault();\n    const formData = new FormData(e.target);\n    formRef.current = e.target;\n    return actionState.trigger(formData);\n  }\n\n  return {\n    ...actionState,\n    handleSubmit,\n    formRef,\n  };\n}\n\n// --- Optimistic updates ---\n\nexport function useOptimistic(initialValue, reducer) {\n  const value = signal(initialValue);\n  const pending = signal([]);\n  const baseValue = signal(initialValue); // Track the confirmed server value\n\n  function addOptimistic(action) {\n    const optimisticValue = reducer(value.peek(), action);\n    batch(() => {\n      pending.set([...pending.peek(), action]);\n      value.set(optimisticValue);\n    });\n  }\n\n  function resolve(action, serverValue) {\n    batch(() => {\n      pending.set(pending.peek().filter(a => a !== action));\n      if (serverValue !== undefined) {\n        baseValue.set(serverValue);\n        // Recompute optimistic state from new base + remaining pending actions\n        let current = serverValue;\n        for (const a of pending.peek()) {\n          current = reducer(current, a);\n        }\n        value.set(current);\n      }\n    });\n  }\n\n  function rollback(action, realValue) {\n    batch(() => {\n      const newPending = pending.peek().filter(a => a !== action);\n      pending.set(newPending);\n      const base = realValue !== undefined ? realValue : baseValue.peek();\n      baseValue.set(base);\n      // Recompute from base + remaining pending actions\n      let current = base;\n      for (const a of newPending) {\n        current = reducer(current, a);\n      }\n      value.set(current);\n    });\n  }\n\n  // Auto-rollback helper: wraps an async action with automatic rollback on error\n  async function withOptimistic(action, asyncFn) {\n    addOptimistic(action);\n    try {\n      const result = await asyncFn();\n      resolve(action, result);\n      return result;\n    } catch (e) {\n      rollback(action);\n      throw e;\n    }\n  }\n\n  return {\n    value: () => value(),\n    isPending: () => pending().length > 0,\n    addOptimistic,\n    resolve,\n    rollback,\n    withOptimistic,\n    set: (v) => { value.set(v); baseValue.set(v); },\n  };\n}\n\n// --- Path revalidation ---\n\nconst revalidationCallbacks = new Map();\n\nexport function onRevalidate(path, callback) {\n  if (!revalidationCallbacks.has(path)) {\n    revalidationCallbacks.set(path, new Set());\n  }\n  revalidationCallbacks.get(path).add(callback);\n\n  return () => {\n    revalidationCallbacks.get(path)?.delete(callback);\n  };\n}\n\nexport function invalidatePath(path) {\n  const callbacks = revalidationCallbacks.get(path);\n  if (callbacks) {\n    for (const cb of callbacks) {\n      try { cb(); } catch (e) { console.error('[what] Revalidation error:', e); }\n    }\n  }\n}\n\n// --- Server-side action handler ---\n// Add this to your server middleware.\n\nexport function handleActionRequest(req, actionId, args, options = {}) {\n  const { csrfToken: sessionCsrfToken, skipCsrf = false } = options;\n\n  // Validate CSRF token unless explicitly skipped\n  if (!skipCsrf) {\n    if (!sessionCsrfToken) {\n      // Fail closed: no CSRF token configured means the developer forgot to set it up.\n      // This prevents silent security vulnerabilities in production.\n      return Promise.resolve({\n        status: 500,\n        body: {\n          message: '[what] CSRF token not configured. ' +\n            'Pass { csrfToken: sessionToken } to handleActionRequest, ' +\n            'or { skipCsrf: true } to explicitly opt out.'\n        }\n      });\n    }\n    const requestCsrfToken = req?.headers?.['x-csrf-token'] || req?.headers?.['X-CSRF-Token'];\n    if (!validateCsrfToken(requestCsrfToken, sessionCsrfToken)) {\n      return Promise.resolve({ status: 403, body: { message: 'Invalid CSRF token' } });\n    }\n  }\n\n  const action = actionRegistry.get(actionId);\n  if (!action) {\n    return Promise.resolve({ status: 404, body: { message: 'Action not found' } });\n  }\n\n  // Validate args is an array to prevent prototype pollution\n  if (!Array.isArray(args)) {\n    return Promise.resolve({ status: 400, body: { message: 'Invalid action arguments' } });\n  }\n\n  return action.fn(...args)\n    .then(result => ({ status: 200, body: result }))\n    .catch(error => {\n      // Log the full error server-side, return generic message to client\n      console.error(`[what] Action \"${actionId}\" error:`, error);\n      return {\n        status: 500,\n        body: { message: 'Action failed' },\n      };\n    });\n}\n\n// --- Get all registered actions (for SSR/build) ---\n\nexport function getRegisteredActions() {\n  return [...actionRegistry.keys()];\n}\n\n// --- Mutation helper ---\n// Like useSWR mutation but simpler.\n\nexport function useMutation(mutationFn, options = {}) {\n  const { onSuccess, onError, onSettled } = options;\n\n  const state = {\n    isPending: signal(false),\n    error: signal(null),\n    data: signal(null),\n  };\n\n  async function mutate(...args) {\n    state.isPending.set(true);\n    state.error.set(null);\n\n    try {\n      const result = await mutationFn(...args);\n      state.data.set(result);\n      if (onSuccess) onSuccess(result, ...args);\n      return result;\n    } catch (error) {\n      state.error.set(error);\n      if (onError) onError(error, ...args);\n      throw error;\n    } finally {\n      state.isPending.set(false);\n      if (onSettled) onSettled(state.data.peek(), state.error.peek(), ...args);\n    }\n  }\n\n  return {\n    mutate,\n    isPending: () => state.isPending(),\n    error: () => state.error(),\n    data: () => state.data(),\n    reset: () => {\n      state.error.set(null);\n      state.data.set(null);\n    },\n  };\n}\n"],
+  "mappings": ";AAeA,SAAS,QAAQ,aAAa;AAG9B,IAAM,iBAAiB,oBAAI,IAAI;AAQ/B,SAAS,eAAe;AACtB,MAAI,OAAO,aAAa,aAAa;AAEnC,UAAM,OAAO,SAAS,cAAc,8BAA8B;AAClE,QAAI,MAAM;AACR,aAAO,KAAK,aAAa,SAAS;AAAA,IACpC;AAEA,UAAM,QAAQ,SAAS,OAAO,MAAM,6BAA6B;AACjE,QAAI,OAAO;AACT,aAAO,mBAAmB,MAAM,CAAC,CAAC;AAAA,IACpC;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,oBAAoB;AAClC,MAAI,OAAO,WAAW,eAAe,OAAO,YAAY;AACtD,WAAO,OAAO,WAAW;AAAA,EAC3B;AAEA,MAAI,OAAO,WAAW,eAAe,OAAO,iBAAiB;AAC3D,UAAM,MAAM,IAAI,WAAW,EAAE;AAC7B,WAAO,gBAAgB,GAAG;AAC1B,WAAO,MAAM,KAAK,KAAK,OAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA,EACtE;AAEA,QAAM,IAAI,MAAM,oEAAoE;AACtF;AAGO,SAAS,kBAAkB,cAAc,cAAc;AAC5D,MAAI,CAAC,gBAAgB,CAAC,aAAc,QAAO;AAE3C,MAAI,aAAa,WAAW,aAAa,OAAQ,QAAO;AACxD,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,cAAU,aAAa,WAAW,CAAC,IAAI,aAAa,WAAW,CAAC;AAAA,EAClE;AACA,SAAO,WAAW;AACpB;AAGO,SAAS,YAAY,OAAO;AAEjC,QAAM,UAAU,OAAO,KAAK,EAAE,QAAQ,MAAM,OAAO,EAAE,QAAQ,MAAM,QAAQ,EAAE,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,MAAM;AACvH,SAAO,yCAAyC,OAAO;AACzD;AAIA,SAAS,mBAAmB;AAE1B,QAAM,OAAO,OAAO,WAAW,eAAe,OAAO,kBACjD,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,GAAG,OAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,IACnG,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,KAAK,IAAI,EAAE,SAAS,EAAE;AACpE,SAAO,KAAK,IAAI;AAClB;AAEO,SAAS,OAAO,IAAI,UAAU,CAAC,GAAG;AACvC,QAAM,KAAK,QAAQ,MAAM,iBAAiB;AAC1C,QAAM,EAAE,SAAS,WAAW,WAAW,IAAI;AAG3C,MAAI,OAAO,WAAW,aAAa;AACjC,mBAAe,IAAI,IAAI,EAAE,IAAI,QAAQ,CAAC;AAAA,EACxC;AAGA,iBAAe,cAAc,MAAM;AAEjC,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,GAAG,GAAG,IAAI;AAAA,IACnB;AAGA,UAAM,UAAU,QAAQ,WAAW;AACnC,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM,WAAW,MAAM,GAAG,OAAO;AAE9D,QAAI;AACF,YAAM,YAAY,aAAa;AAC/B,YAAM,UAAU;AAAA,QACd,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,MACnB;AACA,UAAI,UAAW,SAAQ,cAAc,IAAI;AAEzC,YAAM,WAAW,MAAM,MAAM,kBAAkB;AAAA,QAC7C,QAAQ;AAAA,QACR;AAAA,QACA,aAAa;AAAA,QACb,QAAQ,WAAW;AAAA,QACnB,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAAA,MAC/B,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,QAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,EAAE,SAAS,gBAAgB,EAAE;AAC9E,cAAM,IAAI,MAAM,MAAM,WAAW,eAAe;AAAA,MAClD;AAEA,YAAM,SAAS,MAAM,SAAS,KAAK;AAEnC,UAAI,UAAW,WAAU,MAAM;AAC/B,UAAI,YAAY;AAEd,mBAAW,QAAQ,YAAY;AAC7B,yBAAe,IAAI;AAAA,QACrB;AAAA,MACF;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,MAAM,SAAS,cAAc;AAC/B,cAAM,eAAe,IAAI,MAAM,WAAW,EAAE,qBAAqB,OAAO,IAAI;AAC5E,qBAAa,OAAO;AACpB,YAAI,QAAS,SAAQ,YAAY;AACjC,cAAM;AAAA,MACR;AACA,UAAI,QAAS,SAAQ,KAAK;AAC1B,YAAM;AAAA,IACR,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AAEA,aAAW,YAAY;AACvB,aAAW,YAAY;AAEvB,SAAO;AACT;AAKO,SAAS,WAAW,UAAU,UAAU,CAAC,GAAG;AACjD,QAAM,EAAE,WAAW,SAAS,iBAAiB,KAAK,IAAI;AAEtD,SAAO,OAAO,oBAAoB;AAChC,QAAI;AACJ,QAAI;AAEJ,QAAI,2BAA2B,OAAO;AACpC,sBAAgB,eAAe;AAC/B,aAAO,gBAAgB;AACvB,iBAAW,IAAI,SAAS,IAAI;AAAA,IAC9B,OAAO;AACL,iBAAW;AAAA,IACb;AAGA,UAAM,OAAO,CAAC;AACd,QAAI,WAAW;AACf,eAAW,CAAC,KAAK,KAAK,KAAK,SAAS,QAAQ,GAAG;AAC7C,UAAI,OAAO,SAAS,eAAe,iBAAiB,MAAM;AACxD,mBAAW;AAAA,MACb;AACA,UAAI,KAAK,GAAG,GAAG;AAEb,YAAI,MAAM,QAAQ,KAAK,GAAG,CAAC,GAAG;AAC5B,eAAK,GAAG,EAAE,KAAK,KAAK;AAAA,QACtB,OAAO;AACL,eAAK,GAAG,IAAI,CAAC,KAAK,GAAG,GAAG,KAAK;AAAA,QAC/B;AAAA,MACF,OAAO;AACL,aAAK,GAAG,IAAI;AAAA,MACd;AAAA,IACF;AAEA,QAAI;AAGF,YAAM,SAAS,WACX,MAAM,SAAS,MAAM,QAAQ,IAC7B,MAAM,SAAS,IAAI;AACvB,UAAI,UAAW,WAAU,QAAQ,IAAI;AACrC,UAAI,kBAAkB,KAAM,MAAK,MAAM;AACvC,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,QAAS,SAAQ,OAAO,IAAI;AAChC,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAKO,SAAS,UAAU,UAAU;AAClC,QAAM,YAAY,OAAO,KAAK;AAC9B,QAAM,QAAQ,OAAO,IAAI;AACzB,QAAM,OAAO,OAAO,IAAI;AAExB,iBAAe,WAAW,MAAM;AAC9B,cAAU,IAAI,IAAI;AAClB,UAAM,IAAI,IAAI;AAEd,QAAI;AACF,YAAM,SAAS,MAAM,SAAS,GAAG,IAAI;AACrC,WAAK,IAAI,MAAM;AACf,aAAO;AAAA,IACT,SAAS,GAAG;AACV,YAAM,IAAI,CAAC;AACX,YAAM;AAAA,IACR,UAAE;AACA,gBAAU,IAAI,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,WAAW,MAAM,UAAU;AAAA,IAC3B,OAAO,MAAM,MAAM;AAAA,IACnB,MAAM,MAAM,KAAK;AAAA,IACjB,OAAO,MAAM;AACX,YAAM,IAAI,IAAI;AACd,WAAK,IAAI,IAAI;AAAA,IACf;AAAA,EACF;AACF;AAKO,SAAS,cAAc,UAAU,UAAU,CAAC,GAAG;AACpD,QAAM,EAAE,iBAAiB,KAAK,IAAI;AAClC,QAAM,UAAU,EAAE,SAAS,KAAK;AAChC,QAAM,cAAc,UAAU,WAAW,UAAU,EAAE,eAAe,CAAC,CAAC;AAEtE,WAAS,aAAa,GAAG;AACvB,MAAE,eAAe;AACjB,UAAM,WAAW,IAAI,SAAS,EAAE,MAAM;AACtC,YAAQ,UAAU,EAAE;AACpB,WAAO,YAAY,QAAQ,QAAQ;AAAA,EACrC;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA;AAAA,EACF;AACF;AAIO,SAAS,cAAc,cAAc,SAAS;AACnD,QAAM,QAAQ,OAAO,YAAY;AACjC,QAAM,UAAU,OAAO,CAAC,CAAC;AACzB,QAAM,YAAY,OAAO,YAAY;AAErC,WAAS,cAAcA,SAAQ;AAC7B,UAAM,kBAAkB,QAAQ,MAAM,KAAK,GAAGA,OAAM;AACpD,UAAM,MAAM;AACV,cAAQ,IAAI,CAAC,GAAG,QAAQ,KAAK,GAAGA,OAAM,CAAC;AACvC,YAAM,IAAI,eAAe;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,WAAS,QAAQA,SAAQ,aAAa;AACpC,UAAM,MAAM;AACV,cAAQ,IAAI,QAAQ,KAAK,EAAE,OAAO,OAAK,MAAMA,OAAM,CAAC;AACpD,UAAI,gBAAgB,QAAW;AAC7B,kBAAU,IAAI,WAAW;AAEzB,YAAI,UAAU;AACd,mBAAW,KAAK,QAAQ,KAAK,GAAG;AAC9B,oBAAU,QAAQ,SAAS,CAAC;AAAA,QAC9B;AACA,cAAM,IAAI,OAAO;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,WAAS,SAASA,SAAQ,WAAW;AACnC,UAAM,MAAM;AACV,YAAM,aAAa,QAAQ,KAAK,EAAE,OAAO,OAAK,MAAMA,OAAM;AAC1D,cAAQ,IAAI,UAAU;AACtB,YAAM,OAAO,cAAc,SAAY,YAAY,UAAU,KAAK;AAClE,gBAAU,IAAI,IAAI;AAElB,UAAI,UAAU;AACd,iBAAW,KAAK,YAAY;AAC1B,kBAAU,QAAQ,SAAS,CAAC;AAAA,MAC9B;AACA,YAAM,IAAI,OAAO;AAAA,IACnB,CAAC;AAAA,EACH;AAGA,iBAAe,eAAeA,SAAQ,SAAS;AAC7C,kBAAcA,OAAM;AACpB,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ;AAC7B,cAAQA,SAAQ,MAAM;AACtB,aAAO;AAAA,IACT,SAAS,GAAG;AACV,eAASA,OAAM;AACf,YAAM;AAAA,IACR;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,MAAM,MAAM;AAAA,IACnB,WAAW,MAAM,QAAQ,EAAE,SAAS;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,KAAK,CAAC,MAAM;AAAE,YAAM,IAAI,CAAC;AAAG,gBAAU,IAAI,CAAC;AAAA,IAAG;AAAA,EAChD;AACF;AAIA,IAAM,wBAAwB,oBAAI,IAAI;AAE/B,SAAS,aAAa,MAAM,UAAU;AAC3C,MAAI,CAAC,sBAAsB,IAAI,IAAI,GAAG;AACpC,0BAAsB,IAAI,MAAM,oBAAI,IAAI,CAAC;AAAA,EAC3C;AACA,wBAAsB,IAAI,IAAI,EAAE,IAAI,QAAQ;AAE5C,SAAO,MAAM;AACX,0BAAsB,IAAI,IAAI,GAAG,OAAO,QAAQ;AAAA,EAClD;AACF;AAEO,SAAS,eAAe,MAAM;AACnC,QAAM,YAAY,sBAAsB,IAAI,IAAI;AAChD,MAAI,WAAW;AACb,eAAW,MAAM,WAAW;AAC1B,UAAI;AAAE,WAAG;AAAA,MAAG,SAAS,GAAG;AAAE,gBAAQ,MAAM,8BAA8B,CAAC;AAAA,MAAG;AAAA,IAC5E;AAAA,EACF;AACF;AAKO,SAAS,oBAAoB,KAAK,UAAU,MAAM,UAAU,CAAC,GAAG;AACrE,QAAM,EAAE,WAAW,kBAAkB,WAAW,MAAM,IAAI;AAG1D,MAAI,CAAC,UAAU;AACb,QAAI,CAAC,kBAAkB;AAGrB,aAAO,QAAQ,QAAQ;AAAA,QACrB,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,SAAS;AAAA,QAGX;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM,mBAAmB,KAAK,UAAU,cAAc,KAAK,KAAK,UAAU,cAAc;AACxF,QAAI,CAAC,kBAAkB,kBAAkB,gBAAgB,GAAG;AAC1D,aAAO,QAAQ,QAAQ,EAAE,QAAQ,KAAK,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;AAAA,IACjF;AAAA,EACF;AAEA,QAAMA,UAAS,eAAe,IAAI,QAAQ;AAC1C,MAAI,CAACA,SAAQ;AACX,WAAO,QAAQ,QAAQ,EAAE,QAAQ,KAAK,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;AAAA,EAC/E;AAGA,MAAI,CAAC,MAAM,QAAQ,IAAI,GAAG;AACxB,WAAO,QAAQ,QAAQ,EAAE,QAAQ,KAAK,MAAM,EAAE,SAAS,2BAA2B,EAAE,CAAC;AAAA,EACvF;AAEA,SAAOA,QAAO,GAAG,GAAG,IAAI,EACrB,KAAK,aAAW,EAAE,QAAQ,KAAK,MAAM,OAAO,EAAE,EAC9C,MAAM,WAAS;AAEd,YAAQ,MAAM,kBAAkB,QAAQ,YAAY,KAAK;AACzD,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM,EAAE,SAAS,gBAAgB;AAAA,IACnC;AAAA,EACF,CAAC;AACL;AAIO,SAAS,uBAAuB;AACrC,SAAO,CAAC,GAAG,eAAe,KAAK,CAAC;AAClC;AAKO,SAAS,YAAY,YAAY,UAAU,CAAC,GAAG;AACpD,QAAM,EAAE,WAAW,SAAS,UAAU,IAAI;AAE1C,QAAM,QAAQ;AAAA,IACZ,WAAW,OAAO,KAAK;AAAA,IACvB,OAAO,OAAO,IAAI;AAAA,IAClB,MAAM,OAAO,IAAI;AAAA,EACnB;AAEA,iBAAe,UAAU,MAAM;AAC7B,UAAM,UAAU,IAAI,IAAI;AACxB,UAAM,MAAM,IAAI,IAAI;AAEpB,QAAI;AACF,YAAM,SAAS,MAAM,WAAW,GAAG,IAAI;AACvC,YAAM,KAAK,IAAI,MAAM;AACrB,UAAI,UAAW,WAAU,QAAQ,GAAG,IAAI;AACxC,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,MAAM,IAAI,KAAK;AACrB,UAAI,QAAS,SAAQ,OAAO,GAAG,IAAI;AACnC,YAAM;AAAA,IACR,UAAE;AACA,YAAM,UAAU,IAAI,KAAK;AACzB,UAAI,UAAW,WAAU,MAAM,KAAK,KAAK,GAAG,MAAM,MAAM,KAAK,GAAG,GAAG,IAAI;AAAA,IACzE;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,WAAW,MAAM,MAAM,UAAU;AAAA,IACjC,OAAO,MAAM,MAAM,MAAM;AAAA,IACzB,MAAM,MAAM,MAAM,KAAK;AAAA,IACvB,OAAO,MAAM;AACX,YAAM,MAAM,IAAI,IAAI;AACpB,YAAM,KAAK,IAAI,IAAI;AAAA,IACrB;AAAA,EACF;AACF;",
+  "names": ["action"]
+}

package/dist/actions.min.js

@@ -0,0 +1,2 @@
+import{signal as p,batch as w}from"what-core";var A=new Map;function k(){if(typeof document<"u"){let e=document.querySelector('meta[name="what-csrf-token"]');if(e)return e.getAttribute("content");let t=document.cookie.match(/(?:^|;\s*)what-csrf=([^;]+)/);if(t)return decodeURIComponent(t[1])}return null}function v(){if(typeof crypto<"u"&&crypto.randomUUID)return crypto.randomUUID();if(typeof crypto<"u"&&crypto.getRandomValues){let e=new Uint8Array(16);return crypto.getRandomValues(e),Array.from(e,t=>t.toString(16).padStart(2,"0")).join("")}throw new Error("[what] No secure random source available for CSRF token generation")}function S(e,t){if(!e||!t||e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e.charCodeAt(n)^t.charCodeAt(n);return r===0}function T(e){return`<meta name="what-csrf-token" content="${String(e).replace(/&/g,"&amp;").replace(/"/g,"&quot;").replace(/</g,"&lt;").replace(/>/g,"&gt;")}">`}function b(){return`a_${typeof crypto<"u"&&crypto.getRandomValues?Array.from(crypto.getRandomValues(new Uint8Array(6)),t=>t.toString(16).padStart(2,"0")).join(""):Math.random().toString(36).slice(2,10)+Date.now().toString(36)}`}function F(e,t={}){let r=t.id||b(),{onError:n,onSuccess:f,revalidate:o}=t;typeof window>"u"&&A.set(r,{fn:e,options:t});async function s(...i){if(typeof window>"u")return e(...i);let u=t.timeout||3e4,l=new AbortController,a=setTimeout(()=>l.abort(),u);try{let c=k(),d={"Content-Type":"application/json","X-What-Action":r};c&&(d["X-CSRF-Token"]=c);let m=await fetch("/__what_action",{method:"POST",headers:d,credentials:"same-origin",signal:l.signal,body:JSON.stringify({args:i})});if(!m.ok){let h=await m.json().catch(()=>({message:"Action failed"}));throw new Error(h.message||"Action failed")}let g=await m.json();if(f&&f(g),o)for(let h of o)P(h);return g}catch(c){if(c.name==="AbortError"){let d=new Error(`Action "${r}" timed out after ${u}ms`);throw d.code="TIMEOUT",n&&n(d),d}throw n&&n(c),c}finally{clearTimeout(a)}}return s._actionId=r,s._isAction=!0,s}function C(e,t={}){let{onSuccess:r,onError:n,resetOnSuccess:f=!0}=t;return async o=>{let s,i;o instanceof Event?(o.preventDefault(),i=o.target,s=new FormData(i)):s=o;let u={},l=!1;for(let[a,c]of s.entries())typeof File<"u"&&c instanceof File&&(l=!0),u[a]?Array.isArray(u[a])?u[a].push(c):u[a]=[u[a],c]:u[a]=c;try{let a=l?await e(u,s):await e(u);return r&&r(a,i),f&&i&&i.reset(),a}catch(a){throw n&&n(a,i),a}}}function R(e){let t=p(!1),r=p(null),n=p(null);async function f(...o){t.set(!0),r.set(null);try{let s=await e(...o);return n.set(s),s}catch(s){throw r.set(s),s}finally{t.set(!1)}}return{trigger:f,isPending:()=>t(),error:()=>r(),data:()=>n(),reset:()=>{r.set(null),n.set(null)}}}function I(e,t={}){let{resetOnSuccess:r=!0}=t,n={current:null},f=R(C(e,{resetOnSuccess:r}));function o(s){s.preventDefault();let i=new FormData(s.target);return n.current=s.target,f.trigger(i)}return{...f,handleSubmit:o,formRef:n}}function U(e,t){let r=p(e),n=p([]),f=p(e);function o(l){let a=t(r.peek(),l);w(()=>{n.set([...n.peek(),l]),r.set(a)})}function s(l,a){w(()=>{if(n.set(n.peek().filter(c=>c!==l)),a!==void 0){f.set(a);let c=a;for(let d of n.peek())c=t(c,d);r.set(c)}})}function i(l,a){w(()=>{let c=n.peek().filter(g=>g!==l);n.set(c);let d=a!==void 0?a:f.peek();f.set(d);let m=d;for(let g of c)m=t(m,g);r.set(m)})}async function u(l,a){o(l);try{let c=await a();return s(l,c),c}catch(c){throw i(l),c}}return{value:()=>r(),isPending:()=>n().length>0,addOptimistic:o,resolve:s,rollback:i,withOptimistic:u,set:l=>{r.set(l),f.set(l)}}}var y=new Map;function E(e,t){return y.has(e)||y.set(e,new Set),y.get(e).add(t),()=>{y.get(e)?.delete(t)}}function P(e){let t=y.get(e);if(t)for(let r of t)try{r()}catch(n){console.error("[what] Revalidation error:",n)}}function D(e,t,r,n={}){let{csrfToken:f,skipCsrf:o=!1}=n;if(!o){if(!f)return Promise.resolve({status:500,body:{message:"[what] CSRF token not configured. Pass { csrfToken: sessionToken } to handleActionRequest, or { skipCsrf: true } to explicitly opt out."}});let i=e?.headers?.["x-csrf-token"]||e?.headers?.["X-CSRF-Token"];if(!S(i,f))return Promise.resolve({status:403,body:{message:"Invalid CSRF token"}})}let s=A.get(t);return s?Array.isArray(r)?s.fn(...r).then(i=>({status:200,body:i})).catch(i=>(console.error(`[what] Action "${t}" error:`,i),{status:500,body:{message:"Action failed"}})):Promise.resolve({status:400,body:{message:"Invalid action arguments"}}):Promise.resolve({status:404,body:{message:"Action not found"}})}function M(){return[...A.keys()]}function _(e,t={}){let{onSuccess:r,onError:n,onSettled:f}=t,o={isPending:p(!1),error:p(null),data:p(null)};async function s(...i){o.isPending.set(!0),o.error.set(null);try{let u=await e(...i);return o.data.set(u),r&&r(u,...i),u}catch(u){throw o.error.set(u),n&&n(u,...i),u}finally{o.isPending.set(!1),f&&f(o.data.peek(),o.error.peek(),...i)}}return{mutate:s,isPending:()=>o.isPending(),error:()=>o.error(),data:()=>o.data(),reset:()=>{o.error.set(null),o.data.set(null)}}}export{F as action,T as csrfMetaTag,C as formAction,v as generateCsrfToken,M as getRegisteredActions,D as handleActionRequest,P as invalidatePath,E as onRevalidate,R as useAction,I as useFormAction,_ as useMutation,U as useOptimistic,S as validateCsrfToken};
+//# sourceMappingURL=actions.min.js.map

package/dist/actions.min.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/actions.js"],
+  "sourcesContent": ["// What Framework - Server Actions\n// Call server-side functions from client code seamlessly.\n// Similar to Next.js Server Actions / SolidStart server functions.\n//\n// Usage:\n//   // Define on server\n//   const saveUser = action(async (formData) => {\n//     'use server';\n//     const user = await db.users.create(formData);\n//     return { success: true, id: user.id };\n//   });\n//\n//   // Call from client\n//   const result = await saveUser({ name: 'John' });\n\nimport { signal, batch } from 'what-core';\n\n// Registry of server actions\nconst actionRegistry = new Map();\n\n// --- CSRF Protection ---\n// Server generates a token per session; client sends it with every action request.\n// The token is injected into the page via a meta tag or embedded in the server response.\n\n// Client: read the CSRF token from the page meta tag or cookie\n// Re-reads on every call to handle token rotation\nfunction getCsrfToken() {\n  if (typeof document !== 'undefined') {\n    // Try meta tag first\n    const meta = document.querySelector('meta[name=\"what-csrf-token\"]');\n    if (meta) {\n      return meta.getAttribute('content');\n    }\n    // Try cookie\n    const match = document.cookie.match(/(?:^|;\\s*)what-csrf=([^;]+)/);\n    if (match) {\n      return decodeURIComponent(match[1]);\n    }\n  }\n  return null;\n}\n\n// Server: generate a CSRF token (call this per session/request)\nexport function generateCsrfToken() {\n  if (typeof crypto !== 'undefined' && crypto.randomUUID) {\n    return crypto.randomUUID();\n  }\n  // Fallback for environments without crypto.randomUUID \u2014 use crypto.getRandomValues\n  if (typeof crypto !== 'undefined' && crypto.getRandomValues) {\n    const arr = new Uint8Array(16);\n    crypto.getRandomValues(arr);\n    return Array.from(arr, b => b.toString(16).padStart(2, '0')).join('');\n  }\n  // Last resort \u2014 should not be reached in modern environments\n  throw new Error('[what] No secure random source available for CSRF token generation');\n}\n\n// Server: validate CSRF token from request header against session token\nexport function validateCsrfToken(requestToken, sessionToken) {\n  if (!requestToken || !sessionToken) return false;\n  // Constant-time comparison to prevent timing attacks\n  if (requestToken.length !== sessionToken.length) return false;\n  let result = 0;\n  for (let i = 0; i < requestToken.length; i++) {\n    result |= requestToken.charCodeAt(i) ^ sessionToken.charCodeAt(i);\n  }\n  return result === 0;\n}\n\n// Server: middleware helper to inject CSRF meta tag into HTML\nexport function csrfMetaTag(token) {\n  // HTML-escape the token to prevent XSS if a non-standard value is used\n  const escaped = String(token).replace(/&/g, '&amp;').replace(/\"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');\n  return `<meta name=\"what-csrf-token\" content=\"${escaped}\">`;\n}\n\n// --- Define a server action ---\n\nfunction generateActionId() {\n  // Generate a random ID that's not easily enumerable\n  const rand = typeof crypto !== 'undefined' && crypto.getRandomValues\n    ? Array.from(crypto.getRandomValues(new Uint8Array(6)), b => b.toString(16).padStart(2, '0')).join('')\n    : Math.random().toString(36).slice(2, 10) + Date.now().toString(36);\n  return `a_${rand}`;\n}\n\nexport function action(fn, options = {}) {\n  const id = options.id || generateActionId();\n  const { onError, onSuccess, revalidate } = options;\n\n  // Server-side: register the action\n  if (typeof window === 'undefined') {\n    actionRegistry.set(id, { fn, options });\n  }\n\n  // Create the callable wrapper\n  async function callAction(...args) {\n    // Server-side: call directly\n    if (typeof window === 'undefined') {\n      return fn(...args);\n    }\n\n    // Client-side: call via fetch with timeout support\n    const timeout = options.timeout || 30000; // Default 30s timeout\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), timeout);\n\n    try {\n      const csrfToken = getCsrfToken();\n      const headers = {\n        'Content-Type': 'application/json',\n        'X-What-Action': id,\n      };\n      if (csrfToken) headers['X-CSRF-Token'] = csrfToken;\n\n      const response = await fetch('/__what_action', {\n        method: 'POST',\n        headers,\n        credentials: 'same-origin',\n        signal: controller.signal,\n        body: JSON.stringify({ args }),\n      });\n\n      if (!response.ok) {\n        const error = await response.json().catch(() => ({ message: 'Action failed' }));\n        throw new Error(error.message || 'Action failed');\n      }\n\n      const result = await response.json();\n\n      if (onSuccess) onSuccess(result);\n      if (revalidate) {\n        // Trigger revalidation of specified paths\n        for (const path of revalidate) {\n          invalidatePath(path);\n        }\n      }\n\n      return result;\n    } catch (error) {\n      if (error.name === 'AbortError') {\n        const timeoutError = new Error(`Action \"${id}\" timed out after ${timeout}ms`);\n        timeoutError.code = 'TIMEOUT';\n        if (onError) onError(timeoutError);\n        throw timeoutError;\n      }\n      if (onError) onError(error);\n      throw error;\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  callAction._actionId = id;\n  callAction._isAction = true;\n\n  return callAction;\n}\n\n// --- Form action helper ---\n// For forms that submit to server actions.\n\nexport function formAction(actionFn, options = {}) {\n  const { onSuccess, onError, resetOnSuccess = true } = options;\n\n  return async (formDataOrEvent) => {\n    let formData;\n    let form;\n\n    if (formDataOrEvent instanceof Event) {\n      formDataOrEvent.preventDefault();\n      form = formDataOrEvent.target;\n      formData = new FormData(form);\n    } else {\n      formData = formDataOrEvent;\n    }\n\n    // Convert FormData to plain object, preserving File instances\n    const data = {};\n    let hasFiles = false;\n    for (const [key, value] of formData.entries()) {\n      if (typeof File !== 'undefined' && value instanceof File) {\n        hasFiles = true;\n      }\n      if (data[key]) {\n        // Handle multiple values (e.g., checkboxes, multi-file inputs)\n        if (Array.isArray(data[key])) {\n          data[key].push(value);\n        } else {\n          data[key] = [data[key], value];\n        }\n      } else {\n        data[key] = value;\n      }\n    }\n\n    try {\n      // If form contains files, pass the raw FormData as second arg\n      // so the action handler can access files directly\n      const result = hasFiles\n        ? await actionFn(data, formData)\n        : await actionFn(data);\n      if (onSuccess) onSuccess(result, form);\n      if (resetOnSuccess && form) form.reset();\n      return result;\n    } catch (error) {\n      if (onError) onError(error, form);\n      throw error;\n    }\n  };\n}\n\n// --- useAction hook ---\n// Returns action state and trigger function.\n\nexport function useAction(actionFn) {\n  const isPending = signal(false);\n  const error = signal(null);\n  const data = signal(null);\n\n  async function trigger(...args) {\n    isPending.set(true);\n    error.set(null);\n\n    try {\n      const result = await actionFn(...args);\n      data.set(result);\n      return result;\n    } catch (e) {\n      error.set(e);\n      throw e;\n    } finally {\n      isPending.set(false);\n    }\n  }\n\n  return {\n    trigger,\n    isPending: () => isPending(),\n    error: () => error(),\n    data: () => data(),\n    reset: () => {\n      error.set(null);\n      data.set(null);\n    },\n  };\n}\n\n// --- useFormAction hook ---\n// Combines useAction with form handling.\n\nexport function useFormAction(actionFn, options = {}) {\n  const { resetOnSuccess = true } = options;\n  const formRef = { current: null };\n  const actionState = useAction(formAction(actionFn, { resetOnSuccess }));\n\n  function handleSubmit(e) {\n    e.preventDefault();\n    const formData = new FormData(e.target);\n    formRef.current = e.target;\n    return actionState.trigger(formData);\n  }\n\n  return {\n    ...actionState,\n    handleSubmit,\n    formRef,\n  };\n}\n\n// --- Optimistic updates ---\n\nexport function useOptimistic(initialValue, reducer) {\n  const value = signal(initialValue);\n  const pending = signal([]);\n  const baseValue = signal(initialValue); // Track the confirmed server value\n\n  function addOptimistic(action) {\n    const optimisticValue = reducer(value.peek(), action);\n    batch(() => {\n      pending.set([...pending.peek(), action]);\n      value.set(optimisticValue);\n    });\n  }\n\n  function resolve(action, serverValue) {\n    batch(() => {\n      pending.set(pending.peek().filter(a => a !== action));\n      if (serverValue !== undefined) {\n        baseValue.set(serverValue);\n        // Recompute optimistic state from new base + remaining pending actions\n        let current = serverValue;\n        for (const a of pending.peek()) {\n          current = reducer(current, a);\n        }\n        value.set(current);\n      }\n    });\n  }\n\n  function rollback(action, realValue) {\n    batch(() => {\n      const newPending = pending.peek().filter(a => a !== action);\n      pending.set(newPending);\n      const base = realValue !== undefined ? realValue : baseValue.peek();\n      baseValue.set(base);\n      // Recompute from base + remaining pending actions\n      let current = base;\n      for (const a of newPending) {\n        current = reducer(current, a);\n      }\n      value.set(current);\n    });\n  }\n\n  // Auto-rollback helper: wraps an async action with automatic rollback on error\n  async function withOptimistic(action, asyncFn) {\n    addOptimistic(action);\n    try {\n      const result = await asyncFn();\n      resolve(action, result);\n      return result;\n    } catch (e) {\n      rollback(action);\n      throw e;\n    }\n  }\n\n  return {\n    value: () => value(),\n    isPending: () => pending().length > 0,\n    addOptimistic,\n    resolve,\n    rollback,\n    withOptimistic,\n    set: (v) => { value.set(v); baseValue.set(v); },\n  };\n}\n\n// --- Path revalidation ---\n\nconst revalidationCallbacks = new Map();\n\nexport function onRevalidate(path, callback) {\n  if (!revalidationCallbacks.has(path)) {\n    revalidationCallbacks.set(path, new Set());\n  }\n  revalidationCallbacks.get(path).add(callback);\n\n  return () => {\n    revalidationCallbacks.get(path)?.delete(callback);\n  };\n}\n\nexport function invalidatePath(path) {\n  const callbacks = revalidationCallbacks.get(path);\n  if (callbacks) {\n    for (const cb of callbacks) {\n      try { cb(); } catch (e) { console.error('[what] Revalidation error:', e); }\n    }\n  }\n}\n\n// --- Server-side action handler ---\n// Add this to your server middleware.\n\nexport function handleActionRequest(req, actionId, args, options = {}) {\n  const { csrfToken: sessionCsrfToken, skipCsrf = false } = options;\n\n  // Validate CSRF token unless explicitly skipped\n  if (!skipCsrf) {\n    if (!sessionCsrfToken) {\n      // Fail closed: no CSRF token configured means the developer forgot to set it up.\n      // This prevents silent security vulnerabilities in production.\n      return Promise.resolve({\n        status: 500,\n        body: {\n          message: '[what] CSRF token not configured. ' +\n            'Pass { csrfToken: sessionToken } to handleActionRequest, ' +\n            'or { skipCsrf: true } to explicitly opt out.'\n        }\n      });\n    }\n    const requestCsrfToken = req?.headers?.['x-csrf-token'] || req?.headers?.['X-CSRF-Token'];\n    if (!validateCsrfToken(requestCsrfToken, sessionCsrfToken)) {\n      return Promise.resolve({ status: 403, body: { message: 'Invalid CSRF token' } });\n    }\n  }\n\n  const action = actionRegistry.get(actionId);\n  if (!action) {\n    return Promise.resolve({ status: 404, body: { message: 'Action not found' } });\n  }\n\n  // Validate args is an array to prevent prototype pollution\n  if (!Array.isArray(args)) {\n    return Promise.resolve({ status: 400, body: { message: 'Invalid action arguments' } });\n  }\n\n  return action.fn(...args)\n    .then(result => ({ status: 200, body: result }))\n    .catch(error => {\n      // Log the full error server-side, return generic message to client\n      console.error(`[what] Action \"${actionId}\" error:`, error);\n      return {\n        status: 500,\n        body: { message: 'Action failed' },\n      };\n    });\n}\n\n// --- Get all registered actions (for SSR/build) ---\n\nexport function getRegisteredActions() {\n  return [...actionRegistry.keys()];\n}\n\n// --- Mutation helper ---\n// Like useSWR mutation but simpler.\n\nexport function useMutation(mutationFn, options = {}) {\n  const { onSuccess, onError, onSettled } = options;\n\n  const state = {\n    isPending: signal(false),\n    error: signal(null),\n    data: signal(null),\n  };\n\n  async function mutate(...args) {\n    state.isPending.set(true);\n    state.error.set(null);\n\n    try {\n      const result = await mutationFn(...args);\n      state.data.set(result);\n      if (onSuccess) onSuccess(result, ...args);\n      return result;\n    } catch (error) {\n      state.error.set(error);\n      if (onError) onError(error, ...args);\n      throw error;\n    } finally {\n      state.isPending.set(false);\n      if (onSettled) onSettled(state.data.peek(), state.error.peek(), ...args);\n    }\n  }\n\n  return {\n    mutate,\n    isPending: () => state.isPending(),\n    error: () => state.error(),\n    data: () => state.data(),\n    reset: () => {\n      state.error.set(null);\n      state.data.set(null);\n    },\n  };\n}\n"],
+  "mappings": "AAeA,OAAS,UAAAA,EAAQ,SAAAC,MAAa,YAG9B,IAAMC,EAAiB,IAAI,IAQ3B,SAASC,GAAe,CACtB,GAAI,OAAO,SAAa,IAAa,CAEnC,IAAMC,EAAO,SAAS,cAAc,8BAA8B,EAClE,GAAIA,EACF,OAAOA,EAAK,aAAa,SAAS,EAGpC,IAAMC,EAAQ,SAAS,OAAO,MAAM,6BAA6B,EACjE,GAAIA,EACF,OAAO,mBAAmBA,EAAM,CAAC,CAAC,CAEtC,CACA,OAAO,IACT,CAGO,SAASC,GAAoB,CAClC,GAAI,OAAO,OAAW,KAAe,OAAO,WAC1C,OAAO,OAAO,WAAW,EAG3B,GAAI,OAAO,OAAW,KAAe,OAAO,gBAAiB,CAC3D,IAAMC,EAAM,IAAI,WAAW,EAAE,EAC7B,cAAO,gBAAgBA,CAAG,EACnB,MAAM,KAAKA,EAAKC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CACtE,CAEA,MAAM,IAAI,MAAM,oEAAoE,CACtF,CAGO,SAASC,EAAkBC,EAAcC,EAAc,CAG5D,GAFI,CAACD,GAAgB,CAACC,GAElBD,EAAa,SAAWC,EAAa,OAAQ,MAAO,GACxD,IAAIC,EAAS,EACb,QAASC,EAAI,EAAGA,EAAIH,EAAa,OAAQG,IACvCD,GAAUF,EAAa,WAAWG,CAAC,EAAIF,EAAa,WAAWE,CAAC,EAElE,OAAOD,IAAW,CACpB,CAGO,SAASE,EAAYC,EAAO,CAGjC,MAAO,yCADS,OAAOA,CAAK,EAAE,QAAQ,KAAM,OAAO,EAAE,QAAQ,KAAM,QAAQ,EAAE,QAAQ,KAAM,MAAM,EAAE,QAAQ,KAAM,MAAM,CAChE,IACzD,CAIA,SAASC,GAAmB,CAK1B,MAAO,KAHM,OAAO,OAAW,KAAe,OAAO,gBACjD,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,EAAGR,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EACnG,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAG,EAAE,EAAI,KAAK,IAAI,EAAE,SAAS,EAAE,CACpD,EAClB,CAEO,SAASS,EAAOC,EAAIC,EAAU,CAAC,EAAG,CACvC,IAAMC,EAAKD,EAAQ,IAAMH,EAAiB,EACpC,CAAE,QAAAK,EAAS,UAAAC,EAAW,WAAAC,CAAW,EAAIJ,EAGvC,OAAO,OAAW,KACpBjB,EAAe,IAAIkB,EAAI,CAAE,GAAAF,EAAI,QAAAC,CAAQ,CAAC,EAIxC,eAAeK,KAAcC,EAAM,CAEjC,GAAI,OAAO,OAAW,IACpB,OAAOP,EAAG,GAAGO,CAAI,EAInB,IAAMC,EAAUP,EAAQ,SAAW,IAC7BQ,EAAa,IAAI,gBACjBC,EAAY,WAAW,IAAMD,EAAW,MAAM,EAAGD,CAAO,EAE9D,GAAI,CACF,IAAMG,EAAY1B,EAAa,EACzB2B,EAAU,CACd,eAAgB,mBAChB,gBAAiBV,CACnB,EACIS,IAAWC,EAAQ,cAAc,EAAID,GAEzC,IAAME,EAAW,MAAM,MAAM,iBAAkB,CAC7C,OAAQ,OACR,QAAAD,EACA,YAAa,cACb,OAAQH,EAAW,OACnB,KAAM,KAAK,UAAU,CAAE,KAAAF,CAAK,CAAC,CAC/B,CAAC,EAED,GAAI,CAACM,EAAS,GAAI,CAChB,IAAMC,EAAQ,MAAMD,EAAS,KAAK,EAAE,MAAM,KAAO,CAAE,QAAS,eAAgB,EAAE,EAC9E,MAAM,IAAI,MAAMC,EAAM,SAAW,eAAe,CAClD,CAEA,IAAMpB,EAAS,MAAMmB,EAAS,KAAK,EAGnC,GADIT,GAAWA,EAAUV,CAAM,EAC3BW,EAEF,QAAWU,KAAQV,EACjBW,EAAeD,CAAI,EAIvB,OAAOrB,CACT,OAASoB,EAAO,CACd,GAAIA,EAAM,OAAS,aAAc,CAC/B,IAAMG,EAAe,IAAI,MAAM,WAAWf,CAAE,qBAAqBM,CAAO,IAAI,EAC5E,MAAAS,EAAa,KAAO,UAChBd,GAASA,EAAQc,CAAY,EAC3BA,CACR,CACA,MAAId,GAASA,EAAQW,CAAK,EACpBA,CACR,QAAE,CACA,aAAaJ,CAAS,CACxB,CACF,CAEA,OAAAJ,EAAW,UAAYJ,EACvBI,EAAW,UAAY,GAEhBA,CACT,CAKO,SAASY,EAAWC,EAAUlB,EAAU,CAAC,EAAG,CACjD,GAAM,CAAE,UAAAG,EAAW,QAAAD,EAAS,eAAAiB,EAAiB,EAAK,EAAInB,EAEtD,MAAO,OAAOoB,GAAoB,CAChC,IAAIC,EACAC,EAEAF,aAA2B,OAC7BA,EAAgB,eAAe,EAC/BE,EAAOF,EAAgB,OACvBC,EAAW,IAAI,SAASC,CAAI,GAE5BD,EAAWD,EAIb,IAAMG,EAAO,CAAC,EACVC,EAAW,GACf,OAAW,CAACC,EAAKC,CAAK,IAAKL,EAAS,QAAQ,EACtC,OAAO,KAAS,KAAeK,aAAiB,OAClDF,EAAW,IAETD,EAAKE,CAAG,EAEN,MAAM,QAAQF,EAAKE,CAAG,CAAC,EACzBF,EAAKE,CAAG,EAAE,KAAKC,CAAK,EAEpBH,EAAKE,CAAG,EAAI,CAACF,EAAKE,CAAG,EAAGC,CAAK,EAG/BH,EAAKE,CAAG,EAAIC,EAIhB,GAAI,CAGF,IAAMjC,EAAS+B,EACX,MAAMN,EAASK,EAAMF,CAAQ,EAC7B,MAAMH,EAASK,CAAI,EACvB,OAAIpB,GAAWA,EAAUV,EAAQ6B,CAAI,EACjCH,GAAkBG,GAAMA,EAAK,MAAM,EAChC7B,CACT,OAASoB,EAAO,CACd,MAAIX,GAASA,EAAQW,EAAOS,CAAI,EAC1BT,CACR,CACF,CACF,CAKO,SAASc,EAAUT,EAAU,CAClC,IAAMU,EAAY/C,EAAO,EAAK,EACxBgC,EAAQhC,EAAO,IAAI,EACnB0C,EAAO1C,EAAO,IAAI,EAExB,eAAegD,KAAWvB,EAAM,CAC9BsB,EAAU,IAAI,EAAI,EAClBf,EAAM,IAAI,IAAI,EAEd,GAAI,CACF,IAAMpB,EAAS,MAAMyB,EAAS,GAAGZ,CAAI,EACrC,OAAAiB,EAAK,IAAI9B,CAAM,EACRA,CACT,OAASqC,EAAG,CACV,MAAAjB,EAAM,IAAIiB,CAAC,EACLA,CACR,QAAE,CACAF,EAAU,IAAI,EAAK,CACrB,CACF,CAEA,MAAO,CACL,QAAAC,EACA,UAAW,IAAMD,EAAU,EAC3B,MAAO,IAAMf,EAAM,EACnB,KAAM,IAAMU,EAAK,EACjB,MAAO,IAAM,CACXV,EAAM,IAAI,IAAI,EACdU,EAAK,IAAI,IAAI,CACf,CACF,CACF,CAKO,SAASQ,EAAcb,EAAUlB,EAAU,CAAC,EAAG,CACpD,GAAM,CAAE,eAAAmB,EAAiB,EAAK,EAAInB,EAC5BgC,EAAU,CAAE,QAAS,IAAK,EAC1BC,EAAcN,EAAUV,EAAWC,EAAU,CAAE,eAAAC,CAAe,CAAC,CAAC,EAEtE,SAASe,EAAaJ,EAAG,CACvBA,EAAE,eAAe,EACjB,IAAMT,EAAW,IAAI,SAASS,EAAE,MAAM,EACtC,OAAAE,EAAQ,QAAUF,EAAE,OACbG,EAAY,QAAQZ,CAAQ,CACrC,CAEA,MAAO,CACL,GAAGY,EACH,aAAAC,EACA,QAAAF,CACF,CACF,CAIO,SAASG,EAAcC,EAAcC,EAAS,CACnD,IAAMX,EAAQ7C,EAAOuD,CAAY,EAC3BE,EAAUzD,EAAO,CAAC,CAAC,EACnB0D,EAAY1D,EAAOuD,CAAY,EAErC,SAASI,EAAc1C,EAAQ,CAC7B,IAAM2C,EAAkBJ,EAAQX,EAAM,KAAK,EAAG5B,CAAM,EACpDhB,EAAM,IAAM,CACVwD,EAAQ,IAAI,CAAC,GAAGA,EAAQ,KAAK,EAAGxC,CAAM,CAAC,EACvC4B,EAAM,IAAIe,CAAe,CAC3B,CAAC,CACH,CAEA,SAASC,EAAQ5C,EAAQ6C,EAAa,CACpC7D,EAAM,IAAM,CAEV,GADAwD,EAAQ,IAAIA,EAAQ,KAAK,EAAE,OAAOM,GAAKA,IAAM9C,CAAM,CAAC,EAChD6C,IAAgB,OAAW,CAC7BJ,EAAU,IAAII,CAAW,EAEzB,IAAIE,EAAUF,EACd,QAAWC,KAAKN,EAAQ,KAAK,EAC3BO,EAAUR,EAAQQ,EAASD,CAAC,EAE9BlB,EAAM,IAAImB,CAAO,CACnB,CACF,CAAC,CACH,CAEA,SAASC,EAAShD,EAAQiD,EAAW,CACnCjE,EAAM,IAAM,CACV,IAAMkE,EAAaV,EAAQ,KAAK,EAAE,OAAOM,GAAKA,IAAM9C,CAAM,EAC1DwC,EAAQ,IAAIU,CAAU,EACtB,IAAMC,EAAOF,IAAc,OAAYA,EAAYR,EAAU,KAAK,EAClEA,EAAU,IAAIU,CAAI,EAElB,IAAIJ,EAAUI,EACd,QAAWL,KAAKI,EACdH,EAAUR,EAAQQ,EAASD,CAAC,EAE9BlB,EAAM,IAAImB,CAAO,CACnB,CAAC,CACH,CAGA,eAAeK,EAAepD,EAAQqD,EAAS,CAC7CX,EAAc1C,CAAM,EACpB,GAAI,CACF,IAAML,EAAS,MAAM0D,EAAQ,EAC7B,OAAAT,EAAQ5C,EAAQL,CAAM,EACfA,CACT,OAASqC,EAAG,CACV,MAAAgB,EAAShD,CAAM,EACTgC,CACR,CACF,CAEA,MAAO,CACL,MAAO,IAAMJ,EAAM,EACnB,UAAW,IAAMY,EAAQ,EAAE,OAAS,EACpC,cAAAE,EACA,QAAAE,EACA,SAAAI,EACA,eAAAI,EACA,IAAME,GAAM,CAAE1B,EAAM,IAAI0B,CAAC,EAAGb,EAAU,IAAIa,CAAC,CAAG,CAChD,CACF,CAIA,IAAMC,EAAwB,IAAI,IAE3B,SAASC,EAAaxC,EAAMyC,EAAU,CAC3C,OAAKF,EAAsB,IAAIvC,CAAI,GACjCuC,EAAsB,IAAIvC,EAAM,IAAI,GAAK,EAE3CuC,EAAsB,IAAIvC,CAAI,EAAE,IAAIyC,CAAQ,EAErC,IAAM,CACXF,EAAsB,IAAIvC,CAAI,GAAG,OAAOyC,CAAQ,CAClD,CACF,CAEO,SAASxC,EAAeD,EAAM,CACnC,IAAM0C,EAAYH,EAAsB,IAAIvC,CAAI,EAChD,GAAI0C,EACF,QAAWC,KAAMD,EACf,GAAI,CAAEC,EAAG,CAAG,OAAS3B,EAAG,CAAE,QAAQ,MAAM,6BAA8BA,CAAC,CAAG,CAGhF,CAKO,SAAS4B,EAAoBC,EAAKC,EAAUtD,EAAMN,EAAU,CAAC,EAAG,CACrE,GAAM,CAAE,UAAW6D,EAAkB,SAAAC,EAAW,EAAM,EAAI9D,EAG1D,GAAI,CAAC8D,EAAU,CACb,GAAI,CAACD,EAGH,OAAO,QAAQ,QAAQ,CACrB,OAAQ,IACR,KAAM,CACJ,QAAS,yIAGX,CACF,CAAC,EAEH,IAAME,EAAmBJ,GAAK,UAAU,cAAc,GAAKA,GAAK,UAAU,cAAc,EACxF,GAAI,CAACrE,EAAkByE,EAAkBF,CAAgB,EACvD,OAAO,QAAQ,QAAQ,CAAE,OAAQ,IAAK,KAAM,CAAE,QAAS,oBAAqB,CAAE,CAAC,CAEnF,CAEA,IAAM/D,EAASf,EAAe,IAAI6E,CAAQ,EAC1C,OAAK9D,EAKA,MAAM,QAAQQ,CAAI,EAIhBR,EAAO,GAAG,GAAGQ,CAAI,EACrB,KAAKb,IAAW,CAAE,OAAQ,IAAK,KAAMA,CAAO,EAAE,EAC9C,MAAMoB,IAEL,QAAQ,MAAM,kBAAkB+C,CAAQ,WAAY/C,CAAK,EAClD,CACL,OAAQ,IACR,KAAM,CAAE,QAAS,eAAgB,CACnC,EACD,EAZM,QAAQ,QAAQ,CAAE,OAAQ,IAAK,KAAM,CAAE,QAAS,0BAA2B,CAAE,CAAC,EAL9E,QAAQ,QAAQ,CAAE,OAAQ,IAAK,KAAM,CAAE,QAAS,kBAAmB,CAAE,CAAC,CAkBjF,CAIO,SAASmD,GAAuB,CACrC,MAAO,CAAC,GAAGjF,EAAe,KAAK,CAAC,CAClC,CAKO,SAASkF,EAAYC,EAAYlE,EAAU,CAAC,EAAG,CACpD,GAAM,CAAE,UAAAG,EAAW,QAAAD,EAAS,UAAAiE,CAAU,EAAInE,EAEpCoE,EAAQ,CACZ,UAAWvF,EAAO,EAAK,EACvB,MAAOA,EAAO,IAAI,EAClB,KAAMA,EAAO,IAAI,CACnB,EAEA,eAAewF,KAAU/D,EAAM,CAC7B8D,EAAM,UAAU,IAAI,EAAI,EACxBA,EAAM,MAAM,IAAI,IAAI,EAEpB,GAAI,CACF,IAAM3E,EAAS,MAAMyE,EAAW,GAAG5D,CAAI,EACvC,OAAA8D,EAAM,KAAK,IAAI3E,CAAM,EACjBU,GAAWA,EAAUV,EAAQ,GAAGa,CAAI,EACjCb,CACT,OAASoB,EAAO,CACd,MAAAuD,EAAM,MAAM,IAAIvD,CAAK,EACjBX,GAASA,EAAQW,EAAO,GAAGP,CAAI,EAC7BO,CACR,QAAE,CACAuD,EAAM,UAAU,IAAI,EAAK,EACrBD,GAAWA,EAAUC,EAAM,KAAK,KAAK,EAAGA,EAAM,MAAM,KAAK,EAAG,GAAG9D,CAAI,CACzE,CACF,CAEA,MAAO,CACL,OAAA+D,EACA,UAAW,IAAMD,EAAM,UAAU,EACjC,MAAO,IAAMA,EAAM,MAAM,EACzB,KAAM,IAAMA,EAAM,KAAK,EACvB,MAAO,IAAM,CACXA,EAAM,MAAM,IAAI,IAAI,EACpBA,EAAM,KAAK,IAAI,IAAI,CACrB,CACF,CACF",
+  "names": ["signal", "batch", "actionRegistry", "getCsrfToken", "meta", "match", "generateCsrfToken", "arr", "b", "validateCsrfToken", "requestToken", "sessionToken", "result", "i", "csrfMetaTag", "token", "generateActionId", "action", "fn", "options", "id", "onError", "onSuccess", "revalidate", "callAction", "args", "timeout", "controller", "timeoutId", "csrfToken", "headers", "response", "error", "path", "invalidatePath", "timeoutError", "formAction", "actionFn", "resetOnSuccess", "formDataOrEvent", "formData", "form", "data", "hasFiles", "key", "value", "useAction", "isPending", "trigger", "e", "useFormAction", "formRef", "actionState", "handleSubmit", "useOptimistic", "initialValue", "reducer", "pending", "baseValue", "addOptimistic", "optimisticValue", "resolve", "serverValue", "a", "current", "rollback", "realValue", "newPending", "base", "withOptimistic", "asyncFn", "v", "revalidationCallbacks", "onRevalidate", "callback", "callbacks", "cb", "handleActionRequest", "req", "actionId", "sessionCsrfToken", "skipCsrf", "requestCsrfToken", "getRegisteredActions", "useMutation", "mutationFn", "onSettled", "state", "mutate"]
+}