@farm.js/core 0.1.0-beta.16 → 0.1.0-beta.17

package/dist/internal/build-runtime.d.mts

@@ -0,0 +1,41 @@
+import { be as ResolvedFarmConfig } from '../client-plugins-278AvYHE.mjs';
+export { ah as loadConfig, ag as resolveConfig, ai as resolveDeployConfig } from '../client-plugins-278AvYHE.mjs';
+import { FarmProductionViteRuntime } from './config-runtime.mjs';
+export { l as logger } from '../utils-CKSHiip6.mjs';
+import '../plugin-BJDf43dc.mjs';
+import 'react';
+import 'http';
+import '../types-D1A6-XvH.mjs';
+import 'db0';
+import 'unstorage';
+import '../integration-api-CHT2OKAf.mjs';
+import '@farming-labs/orm';
+import '../types-DTzm4TCl.mjs';
+import '@farming-labs/docs';
+import '../markdown.mjs';
+import '../observability.mjs';
+import 'vite';
+import '../workflows.mjs';
+import '../cron.mjs';
+import '../env.mjs';
+import '../server-action-security.mjs';
+import '../server-fn-error-DDh14a0V.mjs';
+import '../image-config-Duob7wER.mjs';
+import '../types-BMxWr97v.mjs';
+import '../cache.mjs';
+import '../route-runtime-DoOHzCAD.mjs';
+import '../font.mjs';
+
+interface BuildOptions {
+    preset?: string;
+    root?: string;
+    universal?: boolean;
+    /** @internal Production Vite preload started by the CLI. */
+    productionVite?: FarmProductionViteRuntime | Promise<FarmProductionViteRuntime>;
+}
+/**
+ * Build Farm.js application for production
+ */
+declare function build(config: ResolvedFarmConfig, options?: BuildOptions): Promise<void>;
+
+export { build };

package/dist/internal/build-runtime.d.ts

@@ -0,0 +1,41 @@
+import { be as ResolvedFarmConfig } from '../client-plugins-CTQAkr7R.js';
+export { ah as loadConfig, ag as resolveConfig, ai as resolveDeployConfig } from '../client-plugins-CTQAkr7R.js';
+import { FarmProductionViteRuntime } from './config-runtime.js';
+export { l as logger } from '../utils-B6GaYNJL.js';
+import '../plugin-BJDf43dc.js';
+import 'react';
+import 'http';
+import '../types-D1A6-XvH.js';
+import 'db0';
+import 'unstorage';
+import '../integration-api-CHT2OKAf.js';
+import '@farming-labs/orm';
+import '../types-DTzm4TCl.js';
+import '@farming-labs/docs';
+import '../markdown.js';
+import '../observability.js';
+import 'vite';
+import '../workflows.js';
+import '../cron.js';
+import '../env.js';
+import '../server-action-security.js';
+import '../server-fn-error-DDh14a0V.js';
+import '../image-config-Duob7wER.js';
+import '../types-BMxWr97v.js';
+import '../cache.js';
+import '../route-runtime-DoOHzCAD.js';
+import '../font.js';
+
+interface BuildOptions {
+    preset?: string;
+    root?: string;
+    universal?: boolean;
+    /** @internal Production Vite preload started by the CLI. */
+    productionVite?: FarmProductionViteRuntime | Promise<FarmProductionViteRuntime>;
+}
+/**
+ * Build Farm.js application for production
+ */
+declare function build(config: ResolvedFarmConfig, options?: BuildOptions): Promise<void>;
+
+export { build };

package/dist/internal/build-runtime.mjs

@@ -1,19 +1,19 @@
 import {
   build
-} from "../chunk-AN3PQVKH.mjs";
+} from "../chunk-2FLBZFPG.mjs";
 import "../chunk-4S3ORGFA.mjs";
 import "../chunk-SL6HTIOK.mjs";
-import "../chunk-SLDBGSC3.mjs";
+import "../chunk-JAEAE27K.mjs";
 import "../chunk-V7RBCSDJ.mjs";
 import {
   loadConfig,
   resolveConfig,
   resolveDeployConfig
-} from "../chunk-T2KL7VEL.mjs";
+} from "../chunk-PZXBQKCH.mjs";
 import "../chunk-UVCIEUJC.mjs";
 import "../chunk-DJSGLHCN.mjs";
 import "../chunk-RQ633A5I.mjs";
-import "../chunk-OSWV5IJB.mjs";
+import "../chunk-T2M5QANG.mjs";
 import "../chunk-LGHEOHBU.mjs";
 import "../chunk-FRPWCMMG.mjs";
 import "../chunk-53MVSX3R.mjs";
@@ -25,7 +25,7 @@ import "../chunk-USWZZUEH.mjs";
 import "../chunk-XMFTIVJH.mjs";
 import "../chunk-7HO6AEOP.mjs";
 import "../chunk-USLFXFFH.mjs";
-import "../chunk-I4CUBGVF.mjs";
+import "../chunk-E257KFBU.mjs";
 import "../chunk-7MABZJIM.mjs";
 import "../chunk-YW7OBE6Q.mjs";
 import "../chunk-74YTBPTY.mjs";
@@ -37,9 +37,9 @@ import "../chunk-7FBJLMQH.mjs";
 import "../chunk-XIVV5IWN.mjs";
 import "../chunk-GXASWWJU.mjs";
 import "../chunk-K4667E2Q.mjs";
+import "../chunk-T4QJQK76.mjs";
 import "../chunk-MIUW47JX.mjs";
 import "../chunk-P7QDS5AT.mjs";
-import "../chunk-T4QJQK76.mjs";
 import "../chunk-E6EPN5BT.mjs";
 import "../chunk-QGOHVJ6J.mjs";
 import "../chunk-ARRYKOI5.mjs";
@@ -55,7 +55,7 @@ import {
 import "../chunk-HMRFYJK6.mjs";
 import "../chunk-RHIFZZUI.mjs";
 import "../chunk-LM2YNO4U.mjs";
-import "../chunk-BWJC5ZOD.mjs";
+import "../chunk-VFDBC3W7.mjs";
 import "../chunk-B3FFOIWS.mjs";
 import "../chunk-ITN462YM.mjs";
 import "../chunk-3HIVDX7J.mjs";

package/dist/internal/client-runtime.d.mts

@@ -0,0 +1,17 @@
+export { i as installChunkErrorRecovery } from '../chunk-recovery-lnQFzcQP.mjs';
+import { F as FarmIslandStrategy } from '../island-CfGru1MO.mjs';
+export { c as createClientPluginManager } from '../plugin-BJDf43dc.mjs';
+
+interface ScheduleFarmIslandHydrationOptions<T> {
+    container: Element;
+    strategy?: FarmIslandStrategy | null;
+    signal?: AbortSignal;
+    hydrate: () => T | Promise<T>;
+}
+/**
+ * Defer importing and hydrating a server-rendered client boundary until its
+ * configured trigger. The returned promise resolves with the hydration result.
+ */
+declare function scheduleFarmIslandHydration<T>({ container, strategy, signal, hydrate, }: ScheduleFarmIslandHydrationOptions<T>): Promise<T | undefined>;
+
+export { scheduleFarmIslandHydration };

package/dist/internal/client-runtime.d.ts

@@ -0,0 +1,17 @@
+export { i as installChunkErrorRecovery } from '../chunk-recovery-lnQFzcQP.js';
+import { F as FarmIslandStrategy } from '../island-CfGru1MO.js';
+export { c as createClientPluginManager } from '../plugin-BJDf43dc.js';
+
+interface ScheduleFarmIslandHydrationOptions<T> {
+    container: Element;
+    strategy?: FarmIslandStrategy | null;
+    signal?: AbortSignal;
+    hydrate: () => T | Promise<T>;
+}
+/**
+ * Defer importing and hydrating a server-rendered client boundary until its
+ * configured trigger. The returned promise resolves with the hydration result.
+ */
+declare function scheduleFarmIslandHydration<T>({ container, strategy, signal, hydrate, }: ScheduleFarmIslandHydrationOptions<T>): Promise<T | undefined>;
+
+export { scheduleFarmIslandHydration };

package/dist/internal/config-runtime.cjs

@@ -3817,6 +3817,138 @@ function normalizeBudget(value, fallback) {
 }
 __name(normalizeBudget, "normalizeBudget");
 
+// src/security.ts
+function resolveFarmSecurityConfig(input) {
+  if (input === void 0) return { csp: false };
+  if (!isPlainRecord(input)) {
+    throw new TypeError("security must be an object containing the csp option.");
+  }
+  if (Object.prototype.hasOwnProperty.call(input, "contentSecurityPolicy")) {
+    throw new TypeError(
+      "security.contentSecurityPolicy is not supported. Use security.csp instead."
+    );
+  }
+  const csp = input.csp;
+  if (csp === void 0 || csp === false) return { csp: false };
+  if (typeof csp === "string") {
+    return {
+      csp: {
+        value: validateSerializedCsp(csp),
+        reportOnly: false
+      }
+    };
+  }
+  if (!isPlainRecord(csp)) {
+    throw new TypeError("security.csp must be a policy string, false, or an options object.");
+  }
+  const reportOnly = validateReportOnly(csp.reportOnly);
+  if (Object.prototype.hasOwnProperty.call(csp, "value")) {
+    if (Object.prototype.hasOwnProperty.call(csp, "policy") || Object.prototype.hasOwnProperty.call(csp, "directives")) {
+      throw new TypeError(
+        "Resolved security.csp values cannot include policy or directives options."
+      );
+    }
+    return {
+      csp: {
+        value: validateSerializedCsp(csp.value),
+        reportOnly
+      }
+    };
+  }
+  const { policy, directives } = csp;
+  if (policy !== void 0 && directives !== void 0) {
+    throw new TypeError("security.csp accepts either policy or directives, not both.");
+  }
+  if (policy === void 0 && directives === void 0) {
+    throw new TypeError("security.csp requires a policy string or directives object.");
+  }
+  return {
+    csp: {
+      value: policy !== void 0 ? validateSerializedCsp(policy) : serializeFarmCspDirectives(directives),
+      reportOnly
+    }
+  };
+}
+__name(resolveFarmSecurityConfig, "resolveFarmSecurityConfig");
+function serializeFarmCspDirectives(directives) {
+  if (!isPlainRecord(directives)) {
+    throw new TypeError("security.csp.directives must be an object.");
+  }
+  const serialized = [];
+  const normalizedNames = /* @__PURE__ */ new Set();
+  for (const [configuredName, configuredValue] of Object.entries(directives)) {
+    if (configuredValue === false || configuredValue === null || configuredValue === void 0) {
+      continue;
+    }
+    const name = normalizeDirectiveName(configuredName);
+    if (normalizedNames.has(name)) {
+      throw new TypeError(`security.csp contains the duplicate directive ${JSON.stringify(name)}.`);
+    }
+    normalizedNames.add(name);
+    const values = configuredValue === true ? [] : (Array.isArray(configuredValue) ? configuredValue : [configuredValue]).map(
+      validateDirectiveValue
+    );
+    serialized.push(values.length > 0 ? `${name} ${values.join(" ")}` : name);
+  }
+  if (serialized.length === 0) {
+    throw new TypeError("security.csp.directives must contain at least one enabled directive.");
+  }
+  return serialized.join("; ");
+}
+__name(serializeFarmCspDirectives, "serializeFarmCspDirectives");
+function getFarmSecurityHeader(security) {
+  if (!security.csp) return void 0;
+  return {
+    key: security.csp.reportOnly ? "Content-Security-Policy-Report-Only" : "Content-Security-Policy",
+    value: security.csp.value
+  };
+}
+__name(getFarmSecurityHeader, "getFarmSecurityHeader");
+function normalizeDirectiveName(value) {
+  const name = value.trim().replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
+  if (!/^[a-z][a-z0-9-]*$/.test(name)) {
+    throw new TypeError(`Invalid security.csp directive name: ${JSON.stringify(value)}.`);
+  }
+  return name;
+}
+__name(normalizeDirectiveName, "normalizeDirectiveName");
+function validateDirectiveValue(value) {
+  if (typeof value !== "string") {
+    throw new TypeError("security.csp directive values must be strings or booleans.");
+  }
+  const normalized = value.trim();
+  if (!normalized || /[;\r\n]/.test(normalized) || normalized.includes("\0")) {
+    throw new TypeError(`Invalid security.csp directive value: ${JSON.stringify(value)}.`);
+  }
+  return normalized;
+}
+__name(validateDirectiveValue, "validateDirectiveValue");
+function validateSerializedCsp(value) {
+  if (typeof value !== "string") {
+    throw new TypeError("security.csp policy must be a non-empty single-line string.");
+  }
+  const normalized = value.trim().replace(/;+$/g, "").trim();
+  if (!normalized || /[\r\n]/.test(normalized) || normalized.includes("\0")) {
+    throw new TypeError("security.csp policy must be a non-empty single-line string.");
+  }
+  return normalized;
+}
+__name(validateSerializedCsp, "validateSerializedCsp");
+function validateReportOnly(value) {
+  if (value === void 0) return false;
+  if (typeof value !== "boolean") {
+    throw new TypeError("security.csp.reportOnly must be a boolean.");
+  }
+  return value;
+}
+__name(validateReportOnly, "validateReportOnly");
+function isPlainRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+__name(isPlainRecord, "isPlainRecord");
+
 // src/config.ts
 var FARM_RESOLVED_CUSTOM_CONTEXT = /* @__PURE__ */ Symbol.for("farm.resolvedCustomContext");
 function normalizeDeployTarget(target) {
@@ -4092,6 +4224,8 @@ async function resolveConfig(userConfig, mode) {
   const routeRules = normalizeRouteRules(userConfig.routeRules);
   const routeRuleRedirects = routeRulesToRedirects(routeRules);
   const routeRuleHeaders = routeRulesToHeaders(routeRules);
+  const security = resolveFarmSecurityConfig(userConfig.security);
+  const securityHeader = getFarmSecurityHeader(security);
   const deploy = resolveDeployConfig(userConfig);
   const root = userConfig.root || process.cwd();
   const srcDir = userConfig.srcDir || "src";
@@ -4147,7 +4281,11 @@ async function resolveConfig(userConfig, mode) {
     trailingSlash: userConfig.trailingSlash ?? false,
     redirects: /* @__PURE__ */ __name(() => [...redirects, ...routeRuleRedirects], "redirects"),
     rewrites: /* @__PURE__ */ __name(() => rewrites, "rewrites"),
-    headers: /* @__PURE__ */ __name(() => [...headers, ...routeRuleHeaders], "headers"),
+    headers: /* @__PURE__ */ __name(() => [
+      ...headers,
+      ...routeRuleHeaders,
+      ...securityHeader ? [{ source: "/*", headers: [securityHeader] }] : []
+    ], "headers"),
     routeRules,
     images: resolveFarmImageConfig(userConfig.images),
     performance: resolveFarmPerformanceConfig(userConfig.performance),
@@ -4166,6 +4304,7 @@ async function resolveConfig(userConfig, mode) {
     notFound: userConfig.notFound || {},
     context: userConfig.context || (() => void 0),
     serverActions: resolveServerActionsConfig(userConfig.serverActions),
+    security,
     deploymentId,
     output: userConfig.output || "standalone",
     distDir: userConfig.distDir || ".farm",