shared.js 33 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989
  1. import { json, text } from "@sveltejs/kit";
  2. import { SvelteKitError, HttpError } from "@sveltejs/kit/internal";
  3. import { with_request_store } from "@sveltejs/kit/internal/server";
  4. import * as devalue from "devalue";
  5. import { t as text_decoder, c as base64_decode, b as base64_encode } from "./utils.js";
  6. import { e as experimental_async_required, g as get_render_context, h as hydratable_serialization_failed } from "./render-context.js";
  7. import "clsx";
  8. const SVELTE_KIT_ASSETS = "/_svelte_kit_assets";
  9. const ENDPOINT_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS", "HEAD"];
  10. const MUTATIVE_METHODS = ["POST", "PUT", "PATCH", "DELETE"];
  11. const PAGE_METHODS = ["GET", "POST", "HEAD"];
  12. function set_nested_value(object, path_string, value) {
  13. if (path_string.startsWith("n:")) {
  14. path_string = path_string.slice(2);
  15. value = value === "" ? void 0 : parseFloat(value);
  16. } else if (path_string.startsWith("b:")) {
  17. path_string = path_string.slice(2);
  18. value = value === "on";
  19. }
  20. deep_set(object, split_path(path_string), value);
  21. }
  22. function convert_formdata(data) {
  23. const result = {};
  24. for (let key of data.keys()) {
  25. const is_array = key.endsWith("[]");
  26. let values = data.getAll(key);
  27. if (is_array) key = key.slice(0, -2);
  28. if (values.length > 1 && !is_array) {
  29. throw new Error(`Form cannot contain duplicated keys — "${key}" has ${values.length} values`);
  30. }
  31. values = values.filter(
  32. (entry) => typeof entry === "string" || entry.name !== "" || entry.size > 0
  33. );
  34. if (key.startsWith("n:")) {
  35. key = key.slice(2);
  36. values = values.map((v) => v === "" ? void 0 : parseFloat(
  37. /** @type {string} */
  38. v
  39. ));
  40. } else if (key.startsWith("b:")) {
  41. key = key.slice(2);
  42. values = values.map((v) => v === "on");
  43. }
  44. set_nested_value(result, key, is_array ? values : values[0]);
  45. }
  46. return result;
  47. }
  48. const BINARY_FORM_CONTENT_TYPE = "application/x-sveltekit-formdata";
  49. const BINARY_FORM_VERSION = 0;
  50. const HEADER_BYTES = 1 + 4 + 2;
  51. async function deserialize_binary_form(request) {
  52. if (request.headers.get("content-type") !== BINARY_FORM_CONTENT_TYPE) {
  53. const form_data = await request.formData();
  54. return { data: convert_formdata(form_data), meta: {}, form_data };
  55. }
  56. if (!request.body) {
  57. throw deserialize_error("no body");
  58. }
  59. const content_length = parseInt(request.headers.get("content-length") ?? "");
  60. if (Number.isNaN(content_length)) {
  61. throw deserialize_error("invalid Content-Length header");
  62. }
  63. const reader = request.body.getReader();
  64. const chunks = [];
  65. function get_chunk(index) {
  66. if (index in chunks) return chunks[index];
  67. let i = chunks.length;
  68. while (i <= index) {
  69. chunks[i] = reader.read().then((chunk) => chunk.value);
  70. i++;
  71. }
  72. return chunks[index];
  73. }
  74. async function get_buffer(offset, length) {
  75. let start_chunk;
  76. let chunk_start = 0;
  77. let chunk_index;
  78. for (chunk_index = 0; ; chunk_index++) {
  79. const chunk = await get_chunk(chunk_index);
  80. if (!chunk) return null;
  81. const chunk_end = chunk_start + chunk.byteLength;
  82. if (offset >= chunk_start && offset < chunk_end) {
  83. start_chunk = chunk;
  84. break;
  85. }
  86. chunk_start = chunk_end;
  87. }
  88. if (offset + length <= chunk_start + start_chunk.byteLength) {
  89. return start_chunk.subarray(offset - chunk_start, offset + length - chunk_start);
  90. }
  91. const chunks2 = [start_chunk.subarray(offset - chunk_start)];
  92. let cursor = start_chunk.byteLength - offset + chunk_start;
  93. while (cursor < length) {
  94. chunk_index++;
  95. let chunk = await get_chunk(chunk_index);
  96. if (!chunk) return null;
  97. if (chunk.byteLength > length - cursor) {
  98. chunk = chunk.subarray(0, length - cursor);
  99. }
  100. chunks2.push(chunk);
  101. cursor += chunk.byteLength;
  102. }
  103. const buffer = new Uint8Array(length);
  104. cursor = 0;
  105. for (const chunk of chunks2) {
  106. buffer.set(chunk, cursor);
  107. cursor += chunk.byteLength;
  108. }
  109. return buffer;
  110. }
  111. const header = await get_buffer(0, HEADER_BYTES);
  112. if (!header) throw deserialize_error("too short");
  113. if (header[0] !== BINARY_FORM_VERSION) {
  114. throw deserialize_error(`got version ${header[0]}, expected version ${BINARY_FORM_VERSION}`);
  115. }
  116. const header_view = new DataView(header.buffer, header.byteOffset, header.byteLength);
  117. const data_length = header_view.getUint32(1, true);
  118. if (HEADER_BYTES + data_length > content_length) {
  119. throw deserialize_error("data overflow");
  120. }
  121. const file_offsets_length = header_view.getUint16(5, true);
  122. if (HEADER_BYTES + data_length + file_offsets_length > content_length) {
  123. throw deserialize_error("file offset table overflow");
  124. }
  125. const data_buffer = await get_buffer(HEADER_BYTES, data_length);
  126. if (!data_buffer) throw deserialize_error("data too short");
  127. let file_offsets;
  128. let files_start_offset;
  129. if (file_offsets_length > 0) {
  130. const file_offsets_buffer = await get_buffer(HEADER_BYTES + data_length, file_offsets_length);
  131. if (!file_offsets_buffer) throw deserialize_error("file offset table too short");
  132. const parsed_offsets = JSON.parse(text_decoder.decode(file_offsets_buffer));
  133. if (!Array.isArray(parsed_offsets) || parsed_offsets.some((n) => typeof n !== "number" || !Number.isInteger(n) || n < 0)) {
  134. throw deserialize_error("invalid file offset table");
  135. }
  136. file_offsets = /** @type {Array<number>} */
  137. parsed_offsets;
  138. files_start_offset = HEADER_BYTES + data_length + file_offsets_length;
  139. }
  140. const file_spans = [];
  141. const [data, meta] = devalue.parse(text_decoder.decode(data_buffer), {
  142. File: ([name, type, size, last_modified, index]) => {
  143. if (typeof name !== "string" || typeof type !== "string" || typeof size !== "number" || typeof last_modified !== "number" || typeof index !== "number") {
  144. throw deserialize_error("invalid file metadata");
  145. }
  146. let offset = file_offsets[index];
  147. if (offset === void 0) {
  148. throw deserialize_error("duplicate file offset table index");
  149. }
  150. file_offsets[index] = void 0;
  151. offset += files_start_offset;
  152. if (offset + size > content_length) {
  153. throw deserialize_error("file data overflow");
  154. }
  155. file_spans.push({ offset, size });
  156. return new Proxy(new LazyFile(name, type, size, last_modified, get_chunk, offset), {
  157. getPrototypeOf() {
  158. return File.prototype;
  159. }
  160. });
  161. }
  162. });
  163. file_spans.sort((a, b) => a.offset - b.offset || a.size - b.size);
  164. for (let i = 1; i < file_spans.length; i++) {
  165. const previous = file_spans[i - 1];
  166. const current = file_spans[i];
  167. const previous_end = previous.offset + previous.size;
  168. if (previous_end < current.offset) {
  169. throw deserialize_error("gaps in file data");
  170. }
  171. if (previous_end > current.offset) {
  172. throw deserialize_error("overlapping file data");
  173. }
  174. }
  175. void (async () => {
  176. let has_more = true;
  177. while (has_more) {
  178. const chunk = await get_chunk(chunks.length);
  179. has_more = !!chunk;
  180. }
  181. })();
  182. return { data, meta, form_data: null };
  183. }
  184. function deserialize_error(message) {
  185. return new SvelteKitError(400, "Bad Request", `Could not deserialize binary form: ${message}`);
  186. }
  187. class LazyFile {
  188. /** @type {(index: number) => Promise<Uint8Array<ArrayBuffer> | undefined>} */
  189. #get_chunk;
  190. /** @type {number} */
  191. #offset;
  192. /**
  193. * @param {string} name
  194. * @param {string} type
  195. * @param {number} size
  196. * @param {number} last_modified
  197. * @param {(index: number) => Promise<Uint8Array<ArrayBuffer> | undefined>} get_chunk
  198. * @param {number} offset
  199. */
  200. constructor(name, type, size, last_modified, get_chunk, offset) {
  201. this.name = name;
  202. this.type = type;
  203. this.size = size;
  204. this.lastModified = last_modified;
  205. this.webkitRelativePath = "";
  206. this.#get_chunk = get_chunk;
  207. this.#offset = offset;
  208. this.arrayBuffer = this.arrayBuffer.bind(this);
  209. this.bytes = this.bytes.bind(this);
  210. this.slice = this.slice.bind(this);
  211. this.stream = this.stream.bind(this);
  212. this.text = this.text.bind(this);
  213. }
  214. /** @type {ArrayBuffer | undefined} */
  215. #buffer;
  216. async arrayBuffer() {
  217. this.#buffer ??= await new Response(this.stream()).arrayBuffer();
  218. return this.#buffer;
  219. }
  220. async bytes() {
  221. return new Uint8Array(await this.arrayBuffer());
  222. }
  223. /**
  224. * @param {number=} start
  225. * @param {number=} end
  226. * @param {string=} contentType
  227. */
  228. slice(start = 0, end = this.size, contentType = this.type) {
  229. if (start < 0) {
  230. start = Math.max(this.size + start, 0);
  231. } else {
  232. start = Math.min(start, this.size);
  233. }
  234. if (end < 0) {
  235. end = Math.max(this.size + end, 0);
  236. } else {
  237. end = Math.min(end, this.size);
  238. }
  239. const size = Math.max(end - start, 0);
  240. const file = new LazyFile(
  241. this.name,
  242. contentType,
  243. size,
  244. this.lastModified,
  245. this.#get_chunk,
  246. this.#offset + start
  247. );
  248. return file;
  249. }
  250. stream() {
  251. let cursor = 0;
  252. let chunk_index = 0;
  253. return new ReadableStream({
  254. start: async (controller) => {
  255. let chunk_start = 0;
  256. let start_chunk;
  257. for (chunk_index = 0; ; chunk_index++) {
  258. const chunk = await this.#get_chunk(chunk_index);
  259. if (!chunk) return null;
  260. const chunk_end = chunk_start + chunk.byteLength;
  261. if (this.#offset >= chunk_start && this.#offset < chunk_end) {
  262. start_chunk = chunk;
  263. break;
  264. }
  265. chunk_start = chunk_end;
  266. }
  267. if (this.#offset + this.size <= chunk_start + start_chunk.byteLength) {
  268. controller.enqueue(
  269. start_chunk.subarray(this.#offset - chunk_start, this.#offset + this.size - chunk_start)
  270. );
  271. controller.close();
  272. } else {
  273. controller.enqueue(start_chunk.subarray(this.#offset - chunk_start));
  274. cursor = start_chunk.byteLength - this.#offset + chunk_start;
  275. }
  276. },
  277. pull: async (controller) => {
  278. chunk_index++;
  279. let chunk = await this.#get_chunk(chunk_index);
  280. if (!chunk) {
  281. controller.error("incomplete file data");
  282. controller.close();
  283. return;
  284. }
  285. if (chunk.byteLength > this.size - cursor) {
  286. chunk = chunk.subarray(0, this.size - cursor);
  287. }
  288. controller.enqueue(chunk);
  289. cursor += chunk.byteLength;
  290. if (cursor >= this.size) {
  291. controller.close();
  292. }
  293. }
  294. });
  295. }
  296. async text() {
  297. return text_decoder.decode(await this.arrayBuffer());
  298. }
  299. }
  300. const path_regex = /^[a-zA-Z_$]\w*(\.[a-zA-Z_$]\w*|\[\d+\])*$/;
  301. function split_path(path) {
  302. if (!path_regex.test(path)) {
  303. throw new Error(`Invalid path ${path}`);
  304. }
  305. return path.split(/\.|\[|\]/).filter(Boolean);
  306. }
  307. function check_prototype_pollution(key) {
  308. if (key === "__proto__" || key === "constructor" || key === "prototype") {
  309. throw new Error(
  310. `Invalid key "${key}"`
  311. );
  312. }
  313. }
  314. function deep_set(object, keys, value) {
  315. let current = object;
  316. for (let i = 0; i < keys.length - 1; i += 1) {
  317. const key = keys[i];
  318. check_prototype_pollution(key);
  319. const is_array = /^\d+$/.test(keys[i + 1]);
  320. const exists = Object.hasOwn(current, key);
  321. const inner = current[key];
  322. if (exists && is_array !== Array.isArray(inner)) {
  323. throw new Error(`Invalid array key ${keys[i + 1]}`);
  324. }
  325. if (!exists) {
  326. current[key] = is_array ? [] : {};
  327. }
  328. current = current[key];
  329. }
  330. const final_key = keys[keys.length - 1];
  331. check_prototype_pollution(final_key);
  332. current[final_key] = value;
  333. }
  334. function normalize_issue(issue, server = false) {
  335. const normalized = { name: "", path: [], message: issue.message, server };
  336. if (issue.path !== void 0) {
  337. let name = "";
  338. for (const segment of issue.path) {
  339. const key = (
  340. /** @type {string | number} */
  341. typeof segment === "object" ? segment.key : segment
  342. );
  343. normalized.path.push(key);
  344. if (typeof key === "number") {
  345. name += `[${key}]`;
  346. } else if (typeof key === "string") {
  347. name += name === "" ? key : "." + key;
  348. }
  349. }
  350. normalized.name = name;
  351. }
  352. return normalized;
  353. }
  354. function flatten_issues(issues) {
  355. const result = {};
  356. for (const issue of issues) {
  357. (result.$ ??= []).push(issue);
  358. let name = "";
  359. if (issue.path !== void 0) {
  360. for (const key of issue.path) {
  361. if (typeof key === "number") {
  362. name += `[${key}]`;
  363. } else if (typeof key === "string") {
  364. name += name === "" ? key : "." + key;
  365. }
  366. (result[name] ??= []).push(issue);
  367. }
  368. }
  369. }
  370. return result;
  371. }
  372. function deep_get(object, path) {
  373. let current = object;
  374. for (const key of path) {
  375. if (current == null || typeof current !== "object") {
  376. return current;
  377. }
  378. current = current[key];
  379. }
  380. return current;
  381. }
  382. function create_field_proxy(target, get_input, set_input, get_issues, path = []) {
  383. const get_value = () => {
  384. return deep_get(get_input(), path);
  385. };
  386. return new Proxy(target, {
  387. get(target2, prop) {
  388. if (typeof prop === "symbol") return target2[prop];
  389. if (/^\d+$/.test(prop)) {
  390. return create_field_proxy({}, get_input, set_input, get_issues, [
  391. ...path,
  392. parseInt(prop, 10)
  393. ]);
  394. }
  395. const key = build_path_string(path);
  396. if (prop === "set") {
  397. const set_func = function(newValue) {
  398. set_input(path, newValue);
  399. return newValue;
  400. };
  401. return create_field_proxy(set_func, get_input, set_input, get_issues, [...path, prop]);
  402. }
  403. if (prop === "value") {
  404. return create_field_proxy(get_value, get_input, set_input, get_issues, [...path, prop]);
  405. }
  406. if (prop === "issues" || prop === "allIssues") {
  407. const issues_func = () => {
  408. const all_issues = get_issues()[key === "" ? "$" : key];
  409. if (prop === "allIssues") {
  410. return all_issues?.map((issue) => ({
  411. path: issue.path,
  412. message: issue.message
  413. }));
  414. }
  415. return all_issues?.filter((issue) => issue.name === key)?.map((issue) => ({
  416. path: issue.path,
  417. message: issue.message
  418. }));
  419. };
  420. return create_field_proxy(issues_func, get_input, set_input, get_issues, [...path, prop]);
  421. }
  422. if (prop === "as") {
  423. const as_func = (type, input_value) => {
  424. const is_array = type === "file multiple" || type === "select multiple" || type === "checkbox" && typeof input_value === "string";
  425. const prefix = type === "number" || type === "range" ? "n:" : type === "checkbox" && !is_array ? "b:" : "";
  426. const base_props = {
  427. name: prefix + key + (is_array ? "[]" : ""),
  428. get "aria-invalid"() {
  429. const issues = get_issues();
  430. return key in issues ? "true" : void 0;
  431. }
  432. };
  433. if (type !== "text" && type !== "select" && type !== "select multiple") {
  434. base_props.type = type === "file multiple" ? "file" : type;
  435. }
  436. if (type === "submit" || type === "hidden") {
  437. return Object.defineProperties(base_props, {
  438. value: { value: input_value, enumerable: true }
  439. });
  440. }
  441. if (type === "select" || type === "select multiple") {
  442. return Object.defineProperties(base_props, {
  443. multiple: { value: is_array, enumerable: true },
  444. value: {
  445. enumerable: true,
  446. get() {
  447. return input_value !== void 0 ? input_value : get_value();
  448. }
  449. }
  450. });
  451. }
  452. if (type === "checkbox" || type === "radio") {
  453. return Object.defineProperties(base_props, {
  454. value: { value: input_value ?? "on", enumerable: true },
  455. checked: {
  456. enumerable: true,
  457. get() {
  458. const value = get_value();
  459. if (type === "radio") {
  460. return value === input_value;
  461. }
  462. if (is_array) {
  463. return (value ?? []).includes(input_value);
  464. }
  465. return value;
  466. }
  467. }
  468. });
  469. }
  470. if (type === "file" || type === "file multiple") {
  471. return Object.defineProperties(base_props, {
  472. multiple: { value: is_array, enumerable: true },
  473. files: {
  474. enumerable: true,
  475. get() {
  476. const value = get_value();
  477. if (value instanceof File) {
  478. if (typeof DataTransfer !== "undefined") {
  479. const fileList = new DataTransfer();
  480. fileList.items.add(value);
  481. return fileList.files;
  482. }
  483. return { 0: value, length: 1 };
  484. }
  485. if (Array.isArray(value) && value.every((f) => f instanceof File)) {
  486. if (typeof DataTransfer !== "undefined") {
  487. const fileList = new DataTransfer();
  488. value.forEach((file) => fileList.items.add(file));
  489. return fileList.files;
  490. }
  491. const fileListLike = { length: value.length };
  492. value.forEach((file, index) => {
  493. fileListLike[index] = file;
  494. });
  495. return fileListLike;
  496. }
  497. return null;
  498. }
  499. }
  500. });
  501. }
  502. return Object.defineProperties(base_props, {
  503. value: {
  504. enumerable: true,
  505. get() {
  506. const value = input_value !== void 0 ? input_value : get_value();
  507. return value != null ? String(value) : "";
  508. }
  509. }
  510. });
  511. };
  512. return create_field_proxy(as_func, get_input, set_input, get_issues, [...path, "as"]);
  513. }
  514. return create_field_proxy({}, get_input, set_input, get_issues, [...path, prop]);
  515. }
  516. });
  517. }
  518. function build_path_string(path) {
  519. let result = "";
  520. for (const segment of path) {
  521. if (typeof segment === "number") {
  522. result += `[${segment}]`;
  523. } else {
  524. result += result === "" ? segment : "." + segment;
  525. }
  526. }
  527. return result;
  528. }
  529. function negotiate(accept, types) {
  530. const parts = [];
  531. accept.split(",").forEach((str, i) => {
  532. const match = /([^/ \t]+)\/([^; \t]+)[ \t]*(?:;[ \t]*q=([0-9.]+))?/.exec(str);
  533. if (match) {
  534. const [, type, subtype, q = "1"] = match;
  535. parts.push({ type, subtype, q: +q, i });
  536. }
  537. });
  538. parts.sort((a, b) => {
  539. if (a.q !== b.q) {
  540. return b.q - a.q;
  541. }
  542. if (a.subtype === "*" !== (b.subtype === "*")) {
  543. return a.subtype === "*" ? 1 : -1;
  544. }
  545. if (a.type === "*" !== (b.type === "*")) {
  546. return a.type === "*" ? 1 : -1;
  547. }
  548. return a.i - b.i;
  549. });
  550. let accepted;
  551. let min_priority = Infinity;
  552. for (const mimetype of types) {
  553. const [type, subtype] = mimetype.split("/");
  554. const priority = parts.findIndex(
  555. (part) => (part.type === type || part.type === "*") && (part.subtype === subtype || part.subtype === "*")
  556. );
  557. if (priority !== -1 && priority < min_priority) {
  558. accepted = mimetype;
  559. min_priority = priority;
  560. }
  561. }
  562. return accepted;
  563. }
  564. function is_content_type(request, ...types) {
  565. const type = request.headers.get("content-type")?.split(";", 1)[0].trim() ?? "";
  566. return types.includes(type.toLowerCase());
  567. }
  568. function is_form_content_type(request) {
  569. return is_content_type(
  570. request,
  571. "application/x-www-form-urlencoded",
  572. "multipart/form-data",
  573. "text/plain",
  574. BINARY_FORM_CONTENT_TYPE
  575. );
  576. }
  577. function coalesce_to_error(err) {
  578. return err instanceof Error || err && /** @type {any} */
  579. err.name && /** @type {any} */
  580. err.message ? (
  581. /** @type {Error} */
  582. err
  583. ) : new Error(JSON.stringify(err));
  584. }
  585. function normalize_error(error) {
  586. return (
  587. /** @type {import('../exports/internal/index.js').Redirect | HttpError | SvelteKitError | Error} */
  588. error
  589. );
  590. }
  591. function get_status(error) {
  592. return error instanceof HttpError || error instanceof SvelteKitError ? error.status : 500;
  593. }
  594. function get_message(error) {
  595. return error instanceof SvelteKitError ? error.text : "Internal Error";
  596. }
  597. const escape_html_attr_dict = {
  598. "&": "&amp;",
  599. '"': "&quot;"
  600. // Svelte also escapes < because the escape function could be called inside a `noscript` there
  601. // https://github.com/sveltejs/svelte/security/advisories/GHSA-8266-84wp-wv5c
  602. // However, that doesn't apply in SvelteKit
  603. };
  604. const escape_html_dict = {
  605. "&": "&amp;",
  606. "<": "&lt;"
  607. };
  608. const surrogates = (
  609. // high surrogate without paired low surrogate
  610. "[\\ud800-\\udbff](?![\\udc00-\\udfff])|[\\ud800-\\udbff][\\udc00-\\udfff]|[\\udc00-\\udfff]"
  611. );
  612. const escape_html_attr_regex = new RegExp(
  613. `[${Object.keys(escape_html_attr_dict).join("")}]|` + surrogates,
  614. "g"
  615. );
  616. const escape_html_regex = new RegExp(
  617. `[${Object.keys(escape_html_dict).join("")}]|` + surrogates,
  618. "g"
  619. );
  620. function escape_html(str, is_attr) {
  621. const dict = is_attr ? escape_html_attr_dict : escape_html_dict;
  622. const escaped_str = str.replace(is_attr ? escape_html_attr_regex : escape_html_regex, (match) => {
  623. if (match.length === 2) {
  624. return match;
  625. }
  626. return dict[match] ?? `&#${match.charCodeAt(0)};`;
  627. });
  628. return escaped_str;
  629. }
  630. function method_not_allowed(mod, method) {
  631. return text(`${method} method not allowed`, {
  632. status: 405,
  633. headers: {
  634. // https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/405
  635. // "The server must generate an Allow header field in a 405 status code response"
  636. allow: allowed_methods(mod).join(", ")
  637. }
  638. });
  639. }
  640. function allowed_methods(mod) {
  641. const allowed = ENDPOINT_METHODS.filter((method) => method in mod);
  642. if ("GET" in mod && !("HEAD" in mod)) {
  643. allowed.push("HEAD");
  644. }
  645. return allowed;
  646. }
  647. function get_global_name(options) {
  648. return `__sveltekit_${options.version_hash}`;
  649. }
  650. function static_error_page(options, status, message) {
  651. let page = options.templates.error({ status, message: escape_html(message) });
  652. return text(page, {
  653. headers: { "content-type": "text/html; charset=utf-8" },
  654. status
  655. });
  656. }
  657. async function handle_fatal_error(event, state, options, error) {
  658. error = error instanceof HttpError ? error : coalesce_to_error(error);
  659. const status = get_status(error);
  660. const body = await handle_error_and_jsonify(event, state, options, error);
  661. const type = negotiate(event.request.headers.get("accept") || "text/html", [
  662. "application/json",
  663. "text/html"
  664. ]);
  665. if (event.isDataRequest || type === "application/json") {
  666. return json(body, {
  667. status
  668. });
  669. }
  670. return static_error_page(options, status, body.message);
  671. }
  672. async function handle_error_and_jsonify(event, state, options, error) {
  673. if (error instanceof HttpError) {
  674. return { message: "Unknown Error", ...error.body };
  675. }
  676. const status = get_status(error);
  677. const message = get_message(error);
  678. return await with_request_store(
  679. { event, state },
  680. () => options.hooks.handleError({ error, event, status, message })
  681. ) ?? { message };
  682. }
  683. function redirect_response(status, location) {
  684. const response = new Response(void 0, {
  685. status,
  686. headers: { location }
  687. });
  688. return response;
  689. }
  690. function clarify_devalue_error(event, error) {
  691. if (error.path) {
  692. return `Data returned from \`load\` while rendering ${event.route.id} is not serializable: ${error.message} (${error.path}). If you need to serialize/deserialize custom types, use transport hooks: https://svelte.dev/docs/kit/hooks#Universal-hooks-transport.`;
  693. }
  694. if (error.path === "") {
  695. return `Data returned from \`load\` while rendering ${event.route.id} is not a plain object`;
  696. }
  697. return error.message;
  698. }
  699. function serialize_uses(node) {
  700. const uses = {};
  701. if (node.uses && node.uses.dependencies.size > 0) {
  702. uses.dependencies = Array.from(node.uses.dependencies);
  703. }
  704. if (node.uses && node.uses.search_params.size > 0) {
  705. uses.search_params = Array.from(node.uses.search_params);
  706. }
  707. if (node.uses && node.uses.params.size > 0) {
  708. uses.params = Array.from(node.uses.params);
  709. }
  710. if (node.uses?.parent) uses.parent = 1;
  711. if (node.uses?.route) uses.route = 1;
  712. if (node.uses?.url) uses.url = 1;
  713. return uses;
  714. }
  715. function has_prerendered_path(manifest, pathname) {
  716. return manifest._.prerendered_routes.has(pathname) || pathname.at(-1) === "/" && manifest._.prerendered_routes.has(pathname.slice(0, -1));
  717. }
  718. function format_server_error(status, error, event) {
  719. const formatted_text = `
  720. \x1B[1;31m[${status}] ${event.request.method} ${event.url.pathname}\x1B[0m`;
  721. if (status === 404) {
  722. return formatted_text;
  723. }
  724. return `${formatted_text}
  725. ${error.stack}`;
  726. }
  727. function get_node_type(node_id) {
  728. const parts = node_id?.split("/");
  729. const filename = parts?.at(-1);
  730. if (!filename) return "unknown";
  731. const dot_parts = filename.split(".");
  732. return dot_parts.slice(0, -1).join(".");
  733. }
  734. function hydratable(key, fn) {
  735. {
  736. experimental_async_required();
  737. }
  738. const { hydratable: hydratable2 } = get_render_context();
  739. let entry = hydratable2.lookup.get(key);
  740. if (entry !== void 0) {
  741. return (
  742. /** @type {T} */
  743. entry.value
  744. );
  745. }
  746. const value = fn();
  747. entry = encode(key, value, hydratable2.unresolved_promises);
  748. hydratable2.lookup.set(key, entry);
  749. return value;
  750. }
  751. function encode(key, value, unresolved) {
  752. const entry = { value, serialized: "" };
  753. let uid = 1;
  754. entry.serialized = devalue.uneval(entry.value, (value2, uneval) => {
  755. if (is_promise(value2)) {
  756. const placeholder = `"${uid++}"`;
  757. const p = value2.then((v) => {
  758. entry.serialized = entry.serialized.replace(placeholder, `r(${uneval(v)})`);
  759. }).catch(
  760. (devalue_error) => hydratable_serialization_failed(
  761. key,
  762. serialization_stack(entry.stack, devalue_error?.stack)
  763. )
  764. );
  765. p.catch(() => {
  766. }).finally(() => unresolved?.delete(p));
  767. (entry.promises ??= []).push(p);
  768. return placeholder;
  769. }
  770. });
  771. return entry;
  772. }
  773. function is_promise(value) {
  774. return Object.prototype.toString.call(value) === "[object Promise]";
  775. }
  776. function serialization_stack(root_stack, uneval_stack) {
  777. let out = "";
  778. if (root_stack) {
  779. out += root_stack + "\n";
  780. }
  781. if (uneval_stack) {
  782. out += "Caused by:\n" + uneval_stack + "\n";
  783. }
  784. return out || "<missing stack trace>";
  785. }
  786. const INVALIDATED_PARAM = "x-sveltekit-invalidated";
  787. const TRAILING_SLASH_PARAM = "x-sveltekit-trailing-slash";
  788. function stringify(data, transport) {
  789. const encoders = Object.fromEntries(Object.entries(transport).map(([k, v]) => [k, v.encode]));
  790. return devalue.stringify(data, encoders);
  791. }
  792. const object_proto_names = /* @__PURE__ */ Object.getOwnPropertyNames(Object.prototype).sort().join("\0");
  793. function is_plain_object(thing) {
  794. if (typeof thing !== "object" || thing === null) return false;
  795. const proto = Object.getPrototypeOf(thing);
  796. return proto === Object.prototype || proto === null || Object.getPrototypeOf(proto) === null || Object.getOwnPropertyNames(proto).sort().join("\0") === object_proto_names;
  797. }
  798. function to_sorted(value, clones) {
  799. const clone = Object.getPrototypeOf(value) === null ? /* @__PURE__ */ Object.create(null) : {};
  800. clones.set(value, clone);
  801. Object.defineProperty(clone, remote_arg_marker, { value: true });
  802. for (const key of Object.keys(value).sort()) {
  803. const property = value[key];
  804. Object.defineProperty(clone, key, {
  805. value: clones.get(property) ?? property,
  806. enumerable: true,
  807. configurable: true,
  808. writable: true
  809. });
  810. }
  811. return clone;
  812. }
  813. const remote_object = "__skrao";
  814. const remote_map = "__skram";
  815. const remote_set = "__skras";
  816. const remote_regex_guard = "__skrag";
  817. const remote_arg_marker = Symbol(remote_object);
  818. function create_remote_arg_reducers(transport, sort, remote_arg_clones) {
  819. const remote_fns_reducers = {
  820. [remote_regex_guard]: (
  821. /** @type {(value: unknown) => void} */
  822. (value) => {
  823. if (value instanceof RegExp) {
  824. throw new Error("Regular expressions are not valid remote function arguments");
  825. }
  826. }
  827. )
  828. };
  829. if (sort) {
  830. remote_fns_reducers[remote_map] = (value) => {
  831. if (!(value instanceof Map)) {
  832. return;
  833. }
  834. const entries = [];
  835. for (const [key, val] of value) {
  836. entries.push([stringify2(key), stringify2(val)]);
  837. }
  838. return entries.sort(([a1, a2], [b1, b2]) => {
  839. if (a1 < b1) return -1;
  840. if (a1 > b1) return 1;
  841. if (a2 < b2) return -1;
  842. if (a2 > b2) return 1;
  843. return 0;
  844. });
  845. };
  846. remote_fns_reducers[remote_set] = (value) => {
  847. if (!(value instanceof Set)) {
  848. return;
  849. }
  850. const items = [];
  851. for (const item of value) {
  852. items.push(stringify2(item));
  853. }
  854. items.sort();
  855. return items;
  856. };
  857. remote_fns_reducers[remote_object] = (value) => {
  858. if (!is_plain_object(value)) {
  859. return;
  860. }
  861. if (Object.hasOwn(value, remote_arg_marker)) {
  862. return;
  863. }
  864. if (remote_arg_clones.has(value)) {
  865. return remote_arg_clones.get(value);
  866. }
  867. return to_sorted(value, remote_arg_clones);
  868. };
  869. }
  870. const user_reducers = Object.fromEntries(
  871. Object.entries(transport).map(([k, v]) => [k, v.encode])
  872. );
  873. const all_reducers = { ...user_reducers, ...remote_fns_reducers };
  874. const stringify2 = (value) => devalue.stringify(value, all_reducers);
  875. return all_reducers;
  876. }
  877. function create_remote_arg_revivers(transport) {
  878. const remote_fns_revivers = {
  879. /** @type {(value: unknown) => unknown} */
  880. [remote_object]: (value) => value,
  881. /** @type {(value: unknown) => Map<unknown, unknown>} */
  882. [remote_map]: (value) => {
  883. if (!Array.isArray(value)) {
  884. throw new Error("Invalid data for Map reviver");
  885. }
  886. const map = /* @__PURE__ */ new Map();
  887. for (const item of value) {
  888. if (!Array.isArray(item) || item.length !== 2 || typeof item[0] !== "string" || typeof item[1] !== "string") {
  889. throw new Error("Invalid data for Map reviver");
  890. }
  891. const [key, val] = item;
  892. map.set(parse(key), parse(val));
  893. }
  894. return map;
  895. },
  896. /** @type {(value: unknown) => Set<unknown>} */
  897. [remote_set]: (value) => {
  898. if (!Array.isArray(value)) {
  899. throw new Error("Invalid data for Set reviver");
  900. }
  901. const set = /* @__PURE__ */ new Set();
  902. for (const item of value) {
  903. if (typeof item !== "string") {
  904. throw new Error("Invalid data for Set reviver");
  905. }
  906. set.add(parse(item));
  907. }
  908. return set;
  909. }
  910. };
  911. const user_revivers = Object.fromEntries(
  912. Object.entries(transport).map(([k, v]) => [k, v.decode])
  913. );
  914. const all_revivers = { ...user_revivers, ...remote_fns_revivers };
  915. const parse = (data) => devalue.parse(data, all_revivers);
  916. return all_revivers;
  917. }
  918. function stringify_remote_arg(value, transport, sort = true) {
  919. if (value === void 0) return "";
  920. const json_string = devalue.stringify(
  921. value,
  922. create_remote_arg_reducers(transport, sort, /* @__PURE__ */ new Map())
  923. );
  924. const bytes = new TextEncoder().encode(json_string);
  925. return base64_encode(bytes).replaceAll("=", "").replaceAll("+", "-").replaceAll("/", "_");
  926. }
  927. function parse_remote_arg(string, transport) {
  928. if (!string) return void 0;
  929. const json_string = text_decoder.decode(
  930. // no need to add back `=` characters, atob can handle it
  931. base64_decode(string.replaceAll("-", "+").replaceAll("_", "/"))
  932. );
  933. return devalue.parse(json_string, create_remote_arg_revivers(transport));
  934. }
  935. function create_remote_key(id, payload) {
  936. return id + "/" + payload;
  937. }
  938. function split_remote_key(key) {
  939. const i = key.lastIndexOf("/");
  940. if (i === -1) {
  941. throw new Error(`Invalid remote key: ${key}`);
  942. }
  943. return {
  944. id: key.slice(0, i),
  945. payload: key.slice(i + 1)
  946. };
  947. }
  948. function unfriendly_hydratable(key, fn) {
  949. if (!hydratable) {
  950. throw new Error("Remote functions require Svelte 5.44.0 or later");
  951. }
  952. return hydratable(key, fn);
  953. }
  954. export {
  955. flatten_issues as A,
  956. deep_set as B,
  957. ENDPOINT_METHODS as E,
  958. INVALIDATED_PARAM as I,
  959. MUTATIVE_METHODS as M,
  960. PAGE_METHODS as P,
  961. SVELTE_KIT_ASSETS as S,
  962. TRAILING_SLASH_PARAM as T,
  963. normalize_error as a,
  964. get_global_name as b,
  965. clarify_devalue_error as c,
  966. get_node_type as d,
  967. escape_html as e,
  968. create_remote_key as f,
  969. get_status as g,
  970. handle_error_and_jsonify as h,
  971. is_form_content_type as i,
  972. static_error_page as j,
  973. stringify as k,
  974. deserialize_binary_form as l,
  975. method_not_allowed as m,
  976. negotiate as n,
  977. split_remote_key as o,
  978. parse_remote_arg as p,
  979. has_prerendered_path as q,
  980. redirect_response as r,
  981. serialize_uses as s,
  982. handle_fatal_error as t,
  983. format_server_error as u,
  984. stringify_remote_arg as v,
  985. unfriendly_hydratable as w,
  986. create_field_proxy as x,
  987. normalize_issue as y,
  988. set_nested_value as z
  989. };