@farm.js/core 0.1.0-beta.97 → 0.1.0-beta.98

package/dist/integrations.d.mts

@@ -1,6 +1,6 @@
+export { cG as DefinedIntegration, bV as FARM_INTEGRATION_INTERNAL_DISPATCH_CONTEXT_KEY, p as FarmIntegration, bG as FarmIntegrationCategory, bZ as FarmIntegrationConfigContext, b_ as FarmIntegrationConfigDefinition, b$ as FarmIntegrationConfigInput, ct as FarmIntegrationContributedPlugin, c4 as FarmIntegrationData, cf as FarmIntegrationDocumentNavigation, cA as FarmIntegrationEndpointValue, cB as FarmIntegrationEndpoints, cD as FarmIntegrationEndpointsFactory, cC as FarmIntegrationEndpointsFactoryContext, c5 as FarmIntegrationHandlerContext, bS as FarmIntegrationInputSchema, c2 as FarmIntegrationLifecycleContext, c3 as FarmIntegrationLifecycleHook, c0 as FarmIntegrationLifecycleLogLevel, c1 as FarmIntegrationLifecycleLogger, cq as FarmIntegrationLogEvent, cp as FarmIntegrationLogPhase, cr as FarmIntegrationLogger, cb as FarmIntegrationMiddleware, cs as FarmIntegrationPluginOwner, ce as FarmIntegrationProvider, cd as FarmIntegrationProviderComponentReference, cc as FarmIntegrationProviderProps, bU as FarmIntegrationRequestContextStore, c8 as FarmIntegrationRoute, bY as FarmIntegrationRouteArgs, bW as FarmIntegrationRouteDb, cx as FarmIntegrationRouteFactory, c7 as FarmIntegrationRouteHook, c6 as FarmIntegrationRouteHookContext, bN as FarmIntegrationRouteInput, bT as FarmIntegrationRouteInputSchemas, bL as FarmIntegrationRouteInputSource, bK as FarmIntegrationRouteMethod, ca as FarmIntegrationRouteMiddleware, bI as FarmIntegrationRouteParamValue, bJ as FarmIntegrationRouteParams, bX as FarmIntegrationRouteStorageArgs, cz as FarmIntegrationRoutesFactory, cy as FarmIntegrationRoutesFactoryContext, cn as FarmIntegrationSchema, cj as FarmIntegrationSchemaConstraint, ci as FarmIntegrationSchemaField, cg as FarmIntegrationSchemaFieldType, ck as FarmIntegrationSchemaModel, cl as FarmIntegrationSchemaModelExtension, cm as FarmIntegrationSchemaModelOverride, ch as FarmIntegrationSchemaReference, bH as FarmIntegrationSlot, bR as FarmIntegrationStandardValidationResult, bP as FarmIntegrationValidationErrorLike, bO as FarmIntegrationValidationIssue, bM as FarmIntegrationValidationPathSegment, bQ as FarmIntegrationValidationResult, cu as FarmIntegrationsUserConfig, c9 as FarmTypedIntegrationRoute, cY as IntegrationOriginPolicy, cZ as IntegrationOriginRejection, c_ as IntegrationOriginResult, cE as createIntegrationRoute, cH as defineIntegration, co as defineIntegrationSchema, cV as describeIntegrationOriginRejection, cU as dispatchIntegrationRequest, cw as getFarmIntegrationPluginOwner, cv as getFarmIntegrationPluginServerRuntime, cM as getIntegrationDocumentNavigationMatchers, cK as getIntegrationProviders, cN as getIntegrationSchemas, cT as getRegisteredIntegrationAPIManifest, cO as getRegisteredIntegrationRuntime, cQ as getRegisteredIntegrationSchemas, cP as getRegisteredIntegrations, cF as integrationRoute, cI as isFarmIntegration, cL as isFarmIntegrationProviderComponentReference, cR as matchIntegrationRoute, cS as matchRegisteredIntegrationRoute, cW as resolveIntegrationAllowedOrigins, cJ as resolveIntegrationPlugins, cX as validateIntegrationRequestOrigin } from './client-plugins-CyTLPqjP.mjs';
 import 'react';
 export { F as FarmIntegrationAPI, e as FarmIntegrationAPIBodyFormat, f as FarmIntegrationAPIMethod, a as FarmIntegrationAPIOperation, g as FarmIntegrationAPIResponseFormat, b as api, d as defineIntegrationAPI, c as defineIntegrationAPIOperation } from './integration-api-BT024nuJ.mjs';
-export { cG as DefinedIntegration, bV as FARM_INTEGRATION_INTERNAL_DISPATCH_CONTEXT_KEY, p as FarmIntegration, bG as FarmIntegrationCategory, bZ as FarmIntegrationConfigContext, b_ as FarmIntegrationConfigDefinition, b$ as FarmIntegrationConfigInput, ct as FarmIntegrationContributedPlugin, c4 as FarmIntegrationData, cf as FarmIntegrationDocumentNavigation, cA as FarmIntegrationEndpointValue, cB as FarmIntegrationEndpoints, cD as FarmIntegrationEndpointsFactory, cC as FarmIntegrationEndpointsFactoryContext, c5 as FarmIntegrationHandlerContext, bS as FarmIntegrationInputSchema, c2 as FarmIntegrationLifecycleContext, c3 as FarmIntegrationLifecycleHook, c0 as FarmIntegrationLifecycleLogLevel, c1 as FarmIntegrationLifecycleLogger, cq as FarmIntegrationLogEvent, cp as FarmIntegrationLogPhase, cr as FarmIntegrationLogger, cb as FarmIntegrationMiddleware, cs as FarmIntegrationPluginOwner, ce as FarmIntegrationProvider, cd as FarmIntegrationProviderComponentReference, cc as FarmIntegrationProviderProps, bU as FarmIntegrationRequestContextStore, c8 as FarmIntegrationRoute, bY as FarmIntegrationRouteArgs, bW as FarmIntegrationRouteDb, cx as FarmIntegrationRouteFactory, c7 as FarmIntegrationRouteHook, c6 as FarmIntegrationRouteHookContext, bN as FarmIntegrationRouteInput, bT as FarmIntegrationRouteInputSchemas, bL as FarmIntegrationRouteInputSource, bK as FarmIntegrationRouteMethod, ca as FarmIntegrationRouteMiddleware, bI as FarmIntegrationRouteParamValue, bJ as FarmIntegrationRouteParams, bX as FarmIntegrationRouteStorageArgs, cz as FarmIntegrationRoutesFactory, cy as FarmIntegrationRoutesFactoryContext, cn as FarmIntegrationSchema, cj as FarmIntegrationSchemaConstraint, ci as FarmIntegrationSchemaField, cg as FarmIntegrationSchemaFieldType, ck as FarmIntegrationSchemaModel, cl as FarmIntegrationSchemaModelExtension, cm as FarmIntegrationSchemaModelOverride, ch as FarmIntegrationSchemaReference, bH as FarmIntegrationSlot, bR as FarmIntegrationStandardValidationResult, bP as FarmIntegrationValidationErrorLike, bO as FarmIntegrationValidationIssue, bM as FarmIntegrationValidationPathSegment, bQ as FarmIntegrationValidationResult, cu as FarmIntegrationsUserConfig, c9 as FarmTypedIntegrationRoute, cE as createIntegrationRoute, cH as defineIntegration, co as defineIntegrationSchema, cU as dispatchIntegrationRequest, cw as getFarmIntegrationPluginOwner, cv as getFarmIntegrationPluginServerRuntime, cM as getIntegrationDocumentNavigationMatchers, cK as getIntegrationProviders, cN as getIntegrationSchemas, cT as getRegisteredIntegrationAPIManifest, cO as getRegisteredIntegrationRuntime, cQ as getRegisteredIntegrationSchemas, cP as getRegisteredIntegrations, cF as integrationRoute, cI as isFarmIntegration, cL as isFarmIntegrationProviderComponentReference, cR as matchIntegrationRoute, cS as matchRegisteredIntegrationRoute, cJ as resolveIntegrationPlugins } from './client-plugins-B6-07YmP.mjs';
 import './lifecycle-De0vQG45.mjs';
 import './route-CvEr4Uc9.mjs';
 import './cache.mjs';
@@ -16,7 +16,7 @@ import './markdown.mjs';
 import './observability.mjs';
 import '@opentelemetry/api';
 import 'vite';
-import './workflows-ChyK_oTu.mjs';
+import './workflows-BantWytQ.mjs';
 import './cron.mjs';
 import './env.mjs';
 import './navigation-errors-Dvwpzaer.mjs';

package/dist/integrations.d.ts

@@ -1,6 +1,6 @@
+export { cG as DefinedIntegration, bV as FARM_INTEGRATION_INTERNAL_DISPATCH_CONTEXT_KEY, p as FarmIntegration, bG as FarmIntegrationCategory, bZ as FarmIntegrationConfigContext, b_ as FarmIntegrationConfigDefinition, b$ as FarmIntegrationConfigInput, ct as FarmIntegrationContributedPlugin, c4 as FarmIntegrationData, cf as FarmIntegrationDocumentNavigation, cA as FarmIntegrationEndpointValue, cB as FarmIntegrationEndpoints, cD as FarmIntegrationEndpointsFactory, cC as FarmIntegrationEndpointsFactoryContext, c5 as FarmIntegrationHandlerContext, bS as FarmIntegrationInputSchema, c2 as FarmIntegrationLifecycleContext, c3 as FarmIntegrationLifecycleHook, c0 as FarmIntegrationLifecycleLogLevel, c1 as FarmIntegrationLifecycleLogger, cq as FarmIntegrationLogEvent, cp as FarmIntegrationLogPhase, cr as FarmIntegrationLogger, cb as FarmIntegrationMiddleware, cs as FarmIntegrationPluginOwner, ce as FarmIntegrationProvider, cd as FarmIntegrationProviderComponentReference, cc as FarmIntegrationProviderProps, bU as FarmIntegrationRequestContextStore, c8 as FarmIntegrationRoute, bY as FarmIntegrationRouteArgs, bW as FarmIntegrationRouteDb, cx as FarmIntegrationRouteFactory, c7 as FarmIntegrationRouteHook, c6 as FarmIntegrationRouteHookContext, bN as FarmIntegrationRouteInput, bT as FarmIntegrationRouteInputSchemas, bL as FarmIntegrationRouteInputSource, bK as FarmIntegrationRouteMethod, ca as FarmIntegrationRouteMiddleware, bI as FarmIntegrationRouteParamValue, bJ as FarmIntegrationRouteParams, bX as FarmIntegrationRouteStorageArgs, cz as FarmIntegrationRoutesFactory, cy as FarmIntegrationRoutesFactoryContext, cn as FarmIntegrationSchema, cj as FarmIntegrationSchemaConstraint, ci as FarmIntegrationSchemaField, cg as FarmIntegrationSchemaFieldType, ck as FarmIntegrationSchemaModel, cl as FarmIntegrationSchemaModelExtension, cm as FarmIntegrationSchemaModelOverride, ch as FarmIntegrationSchemaReference, bH as FarmIntegrationSlot, bR as FarmIntegrationStandardValidationResult, bP as FarmIntegrationValidationErrorLike, bO as FarmIntegrationValidationIssue, bM as FarmIntegrationValidationPathSegment, bQ as FarmIntegrationValidationResult, cu as FarmIntegrationsUserConfig, c9 as FarmTypedIntegrationRoute, cY as IntegrationOriginPolicy, cZ as IntegrationOriginRejection, c_ as IntegrationOriginResult, cE as createIntegrationRoute, cH as defineIntegration, co as defineIntegrationSchema, cV as describeIntegrationOriginRejection, cU as dispatchIntegrationRequest, cw as getFarmIntegrationPluginOwner, cv as getFarmIntegrationPluginServerRuntime, cM as getIntegrationDocumentNavigationMatchers, cK as getIntegrationProviders, cN as getIntegrationSchemas, cT as getRegisteredIntegrationAPIManifest, cO as getRegisteredIntegrationRuntime, cQ as getRegisteredIntegrationSchemas, cP as getRegisteredIntegrations, cF as integrationRoute, cI as isFarmIntegration, cL as isFarmIntegrationProviderComponentReference, cR as matchIntegrationRoute, cS as matchRegisteredIntegrationRoute, cW as resolveIntegrationAllowedOrigins, cJ as resolveIntegrationPlugins, cX as validateIntegrationRequestOrigin } from './client-plugins-D-UgzngJ.js';
 import 'react';
 export { F as FarmIntegrationAPI, e as FarmIntegrationAPIBodyFormat, f as FarmIntegrationAPIMethod, a as FarmIntegrationAPIOperation, g as FarmIntegrationAPIResponseFormat, b as api, d as defineIntegrationAPI, c as defineIntegrationAPIOperation } from './integration-api-BT024nuJ.js';
-export { cG as DefinedIntegration, bV as FARM_INTEGRATION_INTERNAL_DISPATCH_CONTEXT_KEY, p as FarmIntegration, bG as FarmIntegrationCategory, bZ as FarmIntegrationConfigContext, b_ as FarmIntegrationConfigDefinition, b$ as FarmIntegrationConfigInput, ct as FarmIntegrationContributedPlugin, c4 as FarmIntegrationData, cf as FarmIntegrationDocumentNavigation, cA as FarmIntegrationEndpointValue, cB as FarmIntegrationEndpoints, cD as FarmIntegrationEndpointsFactory, cC as FarmIntegrationEndpointsFactoryContext, c5 as FarmIntegrationHandlerContext, bS as FarmIntegrationInputSchema, c2 as FarmIntegrationLifecycleContext, c3 as FarmIntegrationLifecycleHook, c0 as FarmIntegrationLifecycleLogLevel, c1 as FarmIntegrationLifecycleLogger, cq as FarmIntegrationLogEvent, cp as FarmIntegrationLogPhase, cr as FarmIntegrationLogger, cb as FarmIntegrationMiddleware, cs as FarmIntegrationPluginOwner, ce as FarmIntegrationProvider, cd as FarmIntegrationProviderComponentReference, cc as FarmIntegrationProviderProps, bU as FarmIntegrationRequestContextStore, c8 as FarmIntegrationRoute, bY as FarmIntegrationRouteArgs, bW as FarmIntegrationRouteDb, cx as FarmIntegrationRouteFactory, c7 as FarmIntegrationRouteHook, c6 as FarmIntegrationRouteHookContext, bN as FarmIntegrationRouteInput, bT as FarmIntegrationRouteInputSchemas, bL as FarmIntegrationRouteInputSource, bK as FarmIntegrationRouteMethod, ca as FarmIntegrationRouteMiddleware, bI as FarmIntegrationRouteParamValue, bJ as FarmIntegrationRouteParams, bX as FarmIntegrationRouteStorageArgs, cz as FarmIntegrationRoutesFactory, cy as FarmIntegrationRoutesFactoryContext, cn as FarmIntegrationSchema, cj as FarmIntegrationSchemaConstraint, ci as FarmIntegrationSchemaField, cg as FarmIntegrationSchemaFieldType, ck as FarmIntegrationSchemaModel, cl as FarmIntegrationSchemaModelExtension, cm as FarmIntegrationSchemaModelOverride, ch as FarmIntegrationSchemaReference, bH as FarmIntegrationSlot, bR as FarmIntegrationStandardValidationResult, bP as FarmIntegrationValidationErrorLike, bO as FarmIntegrationValidationIssue, bM as FarmIntegrationValidationPathSegment, bQ as FarmIntegrationValidationResult, cu as FarmIntegrationsUserConfig, c9 as FarmTypedIntegrationRoute, cE as createIntegrationRoute, cH as defineIntegration, co as defineIntegrationSchema, cU as dispatchIntegrationRequest, cw as getFarmIntegrationPluginOwner, cv as getFarmIntegrationPluginServerRuntime, cM as getIntegrationDocumentNavigationMatchers, cK as getIntegrationProviders, cN as getIntegrationSchemas, cT as getRegisteredIntegrationAPIManifest, cO as getRegisteredIntegrationRuntime, cQ as getRegisteredIntegrationSchemas, cP as getRegisteredIntegrations, cF as integrationRoute, cI as isFarmIntegration, cL as isFarmIntegrationProviderComponentReference, cR as matchIntegrationRoute, cS as matchRegisteredIntegrationRoute, cJ as resolveIntegrationPlugins } from './client-plugins-By6MVUX-.js';
 import './lifecycle-De0vQG45.js';
 import './route-4pd-EVtw.js';
 import './cache.js';
@@ -16,7 +16,7 @@ import './markdown.js';
 import './observability.js';
 import '@opentelemetry/api';
 import 'vite';
-import './workflows-ChyK_oTu.js';
+import './workflows-BantWytQ.js';
 import './cron.js';
 import './env.js';
 import './navigation-errors-Dvwpzaer.js';

package/dist/integrations.mjs

@@ -3,6 +3,7 @@ import {
   createIntegrationRoute,
   defineIntegration,
   defineIntegrationSchema,
+  describeIntegrationOriginRejection,
   dispatchIntegrationRequest,
   getFarmIntegrationPluginOwner,
   getFarmIntegrationPluginServerRuntime,
@@ -18,8 +19,11 @@ import {
   isFarmIntegrationProviderComponentReference,
   matchIntegrationRoute,
   matchRegisteredIntegrationRoute,
-  resolveIntegrationPlugins
-} from "./chunk-AAC66ILR.mjs";
+  resolveIntegrationAllowedOrigins,
+  resolveIntegrationPlugins,
+  validateIntegrationRequestOrigin
+} from "./chunk-LXXG3K2Y.mjs";
+import "./chunk-FDWXXTWR.mjs";
 import "./chunk-VFPFBYG5.mjs";
 import "./chunk-35SSRS5K.mjs";
 import "./chunk-ZHQMHJAV.mjs";
@@ -41,6 +45,7 @@ export {
   defineIntegrationAPI,
   defineIntegrationAPIOperation,
   defineIntegrationSchema,
+  describeIntegrationOriginRejection,
   dispatchIntegrationRequest,
   getFarmIntegrationPluginOwner,
   getFarmIntegrationPluginServerRuntime,
@@ -56,6 +61,8 @@ export {
   isFarmIntegrationProviderComponentReference,
   matchIntegrationRoute,
   matchRegisteredIntegrationRoute,
-  resolveIntegrationPlugins
+  resolveIntegrationAllowedOrigins,
+  resolveIntegrationPlugins,
+  validateIntegrationRequestOrigin
 };
 //# sourceMappingURL=integrations.mjs.map

package/dist/internal/build-runtime.cjs

@@ -410,6 +410,54 @@ var init_route_pattern = __esm({
   }
 });
 
+// src/request-origin.ts
+function normalizeAllowedOriginPattern(value, label) {
+  const pattern = value.trim().toLowerCase();
+  if (!pattern) {
+    throw new TypeError(`${label} cannot contain empty values`);
+  }
+  if (pattern.includes("*")) {
+    if (!/^(?:https?:\/\/)?\*\.[a-z0-9.-]+(?::\d+)?$/.test(pattern)) {
+      throw new TypeError(`Invalid ${label} pattern: ${JSON.stringify(value)}`);
+    }
+    return pattern;
+  }
+  if (pattern.includes("://")) {
+    let parsed;
+    try {
+      parsed = new URL(pattern);
+    } catch {
+      throw new TypeError(`Invalid ${label} value: ${JSON.stringify(value)}`);
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:" || parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash) {
+      throw new TypeError(`${label} must contain origins without paths: ${JSON.stringify(value)}`);
+    }
+    return parsed.origin;
+  }
+  if (/[/@?#]/.test(pattern)) {
+    throw new TypeError(`${label} must contain origins or hosts: ${JSON.stringify(value)}`);
+  }
+  try {
+    return new URL(`http://${pattern}`).host;
+  } catch {
+    throw new TypeError(`Invalid ${label} value: ${JSON.stringify(value)}`);
+  }
+}
+var init_request_origin = __esm({
+  "src/request-origin.ts"() {
+    "use strict";
+    __name(normalizeAllowedOriginPattern, "normalizeAllowedOriginPattern");
+  }
+});
+
+// src/integration-request-security.ts
+var init_integration_request_security = __esm({
+  "src/integration-request-security.ts"() {
+    "use strict";
+    init_request_origin();
+  }
+});
+
 // src/integration-api.ts
 function defineIntegrationAPIOperation(operation) {
   return {
@@ -1426,9 +1474,13 @@ function getStorage(namespace) {
   const namespaced = (0, import_unstorage.prefixStorage)(globalStorage, base);
   return {
     ...namespaced,
-    async clear() {
-      const keys = await namespaced.getKeys();
-      await Promise.all(keys.map((key) => namespaced.removeItem(key)));
+    // Scope the wipe to the namespace instead of the whole storage, and keep
+    // the caller's base so `clear("sessions")` cannot take unrelated keys with
+    // it. Dropping the argument silently widens a targeted clear into a
+    // namespace-wide delete.
+    async clear(base2, opts) {
+      const keys = await namespaced.getKeys(base2);
+      await Promise.all(keys.map((key) => namespaced.removeItem(key, opts)));
     }
   };
 }
@@ -3456,6 +3508,7 @@ var init_integrations = __esm({
   "src/integrations.ts"() {
     "use strict";
     init_route_pattern();
+    init_integration_request_security();
     init_integration_api();
     init_plugin_integration_context();
     init_decode();
@@ -3885,6 +3938,29 @@ var init_search_params = __esm({
   }
 });
 
+// src/utils/runtime-env.ts
+function getFarmRuntimeBindings() {
+  const runtimeBindings = globalThis.__env__;
+  return runtimeBindings && typeof runtimeBindings === "object" ? runtimeBindings : void 0;
+}
+function readFarmEnvironmentValue(name2) {
+  const runtimeValue = getFarmRuntimeBindings()?.[name2];
+  if (typeof runtimeValue === "string") return runtimeValue;
+  return typeof process !== "undefined" ? process.env?.[name2] : void 0;
+}
+function isFarmDeployedRuntime() {
+  if (getFarmRuntimeBindings()) return true;
+  return readFarmEnvironmentValue("NODE_ENV") === "production";
+}
+var init_runtime_env = __esm({
+  "src/utils/runtime-env.ts"() {
+    "use strict";
+    __name(getFarmRuntimeBindings, "getFarmRuntimeBindings");
+    __name(readFarmEnvironmentValue, "readFarmEnvironmentValue");
+    __name(isFarmDeployedRuntime, "isFarmDeployedRuntime");
+  }
+});
+
 // src/utils.ts
 function parseRoutePath(filePath) {
   const segments = [];
@@ -4109,7 +4185,8 @@ function resolveWorkflowsConfig(workflows) {
     dirs,
     route: normalizeWorkflowRoute(options.route || DEFAULT_FARM_WORKFLOW_ROUTE),
     secretEnv: options.secretEnv || DEFAULT_FARM_WORKFLOW_SECRET_ENV,
-    secret: options.secret
+    secret: options.secret,
+    allowUnsecured: options.allowUnsecured === true
   };
 }
 async function discoverFarmWorkflows(config, options = {}) {
@@ -4235,8 +4312,11 @@ async function prepareFarmWorkflowsForNitro(config) {
   await fs15.mkdir(generatedDir, { recursive: true });
   const tasks = {};
   const scheduledTasks = createScheduledTasks(workflows);
+  const wrapperNames = resolveWorkflowWrapperFileNames(workflows.map((workflow) => workflow.id));
   for (const workflow of workflows) {
-    const wrapperPath = toPosixPath(path42.join(generatedDir, `${safeFileName(workflow.id)}.mjs`));
+    const wrapperPath = toPosixPath(
+      path42.join(generatedDir, `${wrapperNames.get(workflow.id)}.mjs`)
+    );
     await fs15.writeFile(wrapperPath, createNitroTaskWrapper(workflow), "utf8");
     tasks[workflow.id] = {
       handler: wrapperPath,
@@ -4597,8 +4677,16 @@ function readScheduledTime(payload) {
   return payload && typeof payload === "object" && "scheduledTime" in payload ? payload.scheduledTime : void 0;
 }
 function verifyWorkflowSecret(request, config) {
-  const secret = config.secret || process.env[config.secretEnv] || "";
-  if (!secret) return null;
+  const secret = config.secret || readFarmEnvironmentValue(config.secretEnv) || "";
+  if (!secret) {
+    if (config.allowUnsecured === true || !isFarmDeployedRuntime()) return null;
+    return Response.json(
+      {
+        error: "Workflow route requires a secret. Set the CRON_SECRET environment variable, configure workflows.secret, or set workflows.allowUnsecured to true."
+      },
+      { status: 401 }
+    );
+  }
   const authorization = request.headers.get("authorization") || "";
   const bearer = authorization.match(/^Bearer\s+(.+)$/i)?.[1] || "";
   const headerSecret = request.headers.get("x-farm-workflow-secret") || "";
@@ -4611,6 +4699,37 @@ function joinRoute(...parts) {
 function trimSlashes(value) {
   return value.replace(/^\/+|\/+$/g, "");
 }
+function resolveWorkflowWrapperFileNames(ids) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const id of ids) {
+    const key = safeFileName(id).toLowerCase();
+    groups.set(key, (groups.get(key) ?? 0) + 1);
+  }
+  const resolved = /* @__PURE__ */ new Map();
+  const claimed = /* @__PURE__ */ new Map();
+  for (const id of ids) {
+    const base = safeFileName(id);
+    const key = base.toLowerCase();
+    const fileName = (groups.get(key) ?? 0) > 1 ? `${key}-${workflowIdFingerprint(id)}` : base;
+    const claimedBy = claimed.get(fileName.toLowerCase());
+    if (claimedBy !== void 0) {
+      throw new Error(
+        `Farm workflows ${JSON.stringify(claimedBy)} and ${JSON.stringify(id)} generate the same wrapper file ${JSON.stringify(`${fileName}.mjs`)}. Rename one of them.`
+      );
+    }
+    claimed.set(fileName.toLowerCase(), id);
+    resolved.set(id, fileName);
+  }
+  return resolved;
+}
+function workflowIdFingerprint(value) {
+  let hash = 2166136261;
+  for (let index = 0; index < value.length; index += 1) {
+    hash ^= value.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
 function safeFileName(value) {
   return value.replace(/[^a-zA-Z0-9._-]+/g, "-") || "workflow";
 }
@@ -4623,6 +4742,7 @@ var init_workflows = __esm({
     "use strict";
     init_server_http();
     init_search_params();
+    init_runtime_env();
     init_decode();
     init_utils();
     init_route_pattern();
@@ -4662,6 +4782,8 @@ var init_workflows = __esm({
     __name(verifyWorkflowSecret, "verifyWorkflowSecret");
     __name(joinRoute, "joinRoute");
     __name(trimSlashes, "trimSlashes");
+    __name(resolveWorkflowWrapperFileNames, "resolveWorkflowWrapperFileNames");
+    __name(workflowIdFingerprint, "workflowIdFingerprint");
     __name(safeFileName, "safeFileName");
     __name(relativePath, "relativePath");
   }
@@ -4713,9 +4835,10 @@ async function prepareFarmCronForNitro(config) {
   await fs15.rm(generatedDir, { recursive: true, force: true });
   await fs15.mkdir(generatedDir, { recursive: true });
   const tasks = {};
+  const wrapperNames = resolveCronWrapperFileNames(cron.jobs.map((job) => job.name));
   for (const job of cron.jobs) {
     const taskName = getFarmCronTaskName(job.name);
-    const wrapperPath = toPosixPath(path42.join(generatedDir, `${safeFileName2(job.name)}.mjs`));
+    const wrapperPath = toPosixPath(path42.join(generatedDir, `${wrapperNames.get(job.name)}.mjs`));
     await fs15.writeFile(wrapperPath, createNitroCronTaskWrapper(job, cron.secretEnv), "utf8");
     tasks[taskName] = {
       handler: wrapperPath,
@@ -4977,6 +5100,37 @@ export default defineTask({
 });
 `.trim();
 }
+function resolveCronWrapperFileNames(names) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const name2 of names) {
+    const key = safeFileName2(name2).toLowerCase();
+    groups.set(key, (groups.get(key) ?? 0) + 1);
+  }
+  const resolved = /* @__PURE__ */ new Map();
+  const claimed = /* @__PURE__ */ new Map();
+  for (const name2 of names) {
+    const base = safeFileName2(name2);
+    const key = base.toLowerCase();
+    const fileName = (groups.get(key) ?? 0) > 1 ? `${key}-${cronNameFingerprint(name2)}` : base;
+    const claimedBy = claimed.get(fileName.toLowerCase());
+    if (claimedBy !== void 0) {
+      throw new Error(
+        `Farm cron jobs ${JSON.stringify(claimedBy)} and ${JSON.stringify(name2)} generate the same wrapper file ${JSON.stringify(`${fileName}.mjs`)}. Rename one of them.`
+      );
+    }
+    claimed.set(fileName.toLowerCase(), name2);
+    resolved.set(name2, fileName);
+  }
+  return resolved;
+}
+function cronNameFingerprint(value) {
+  let hash = 2166136261;
+  for (let index = 0; index < value.length; index += 1) {
+    hash ^= value.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
 function safeFileName2(value) {
   return value.replace(/[^a-zA-Z0-9._-]+/g, "-") || "cron";
 }
@@ -4985,6 +5139,7 @@ var init_cron = __esm({
   "src/cron.ts"() {
     "use strict";
     init_utils();
+    init_runtime_env();
     DEFAULT_FARM_CRON_SECRET_ENV = "CRON_SECRET";
     FARM_CRON_MANIFEST = "cron-manifest.json";
     CRON_FIELD_RANGES = [
@@ -5013,6 +5168,8 @@ var init_cron = __esm({
     __name(mergeTaskNames, "mergeTaskNames");
     __name(getFarmCronTaskName, "getFarmCronTaskName");
     __name(createNitroCronTaskWrapper, "createNitroCronTaskWrapper");
+    __name(resolveCronWrapperFileNames, "resolveCronWrapperFileNames");
+    __name(cronNameFingerprint, "cronNameFingerprint");
     __name(safeFileName2, "safeFileName");
   }
 });
@@ -5604,7 +5761,9 @@ var init_server_fn_error = __esm({
 
 // src/server-action-security.ts
 function resolveServerActionsConfig(config) {
-  const allowedOrigins = (config?.allowedOrigins ?? []).map(normalizeAllowedOriginPattern);
+  const allowedOrigins = (config?.allowedOrigins ?? []).map(
+    (value) => normalizeAllowedOriginPattern(value, SERVER_ACTION_ALLOWED_ORIGINS_LABEL)
+  );
   const bodySizeLimit = parseBodySizeLimit(
     config?.bodySizeLimit ?? DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT,
     "serverActions.bodySizeLimit"
@@ -5624,50 +5783,16 @@ function getServerActionStorage() {
   }
   return globalState2[SERVER_ACTION_STORAGE_KEY];
 }
-function normalizeAllowedOriginPattern(value) {
-  const pattern = value.trim().toLowerCase();
-  if (!pattern) {
-    throw new TypeError("serverActions.allowedOrigins cannot contain empty values");
-  }
-  if (pattern.includes("*")) {
-    if (!/^(?:https?:\/\/)?\*\.[a-z0-9.-]+(?::\d+)?$/.test(pattern)) {
-      throw new TypeError(`Invalid serverActions.allowedOrigins pattern: ${JSON.stringify(value)}`);
-    }
-    return pattern;
-  }
-  if (pattern.includes("://")) {
-    let parsed;
-    try {
-      parsed = new URL(pattern);
-    } catch {
-      throw new TypeError(`Invalid serverActions.allowedOrigins value: ${JSON.stringify(value)}`);
-    }
-    if (parsed.protocol !== "http:" && parsed.protocol !== "https:" || parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash) {
-      throw new TypeError(
-        `serverActions.allowedOrigins must contain origins without paths: ${JSON.stringify(value)}`
-      );
-    }
-    return parsed.origin;
-  }
-  if (/[/@?#]/.test(pattern)) {
-    throw new TypeError(
-      `serverActions.allowedOrigins must contain origins or hosts: ${JSON.stringify(value)}`
-    );
-  }
-  try {
-    return new URL(`http://${pattern}`).host;
-  } catch {
-    throw new TypeError(`Invalid serverActions.allowedOrigins value: ${JSON.stringify(value)}`);
-  }
-}
-var import_node_async_hooks, DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT, SERVER_ACTION_STORAGE_KEY;
+var import_node_async_hooks, SERVER_ACTION_ALLOWED_ORIGINS_LABEL, DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT, SERVER_ACTION_STORAGE_KEY;
 var init_server_action_security = __esm({
   "src/server-action-security.ts"() {
     "use strict";
     import_node_async_hooks = require("async_hooks");
     init_cache_invalidation();
+    init_request_origin();
     init_server_fn_error();
     init_server_http();
+    SERVER_ACTION_ALLOWED_ORIGINS_LABEL = "serverActions.allowedOrigins";
     DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT = 1e6;
     SERVER_ACTION_STORAGE_KEY = /* @__PURE__ */ Symbol.for("farm.serverActionStorage");
     __name(resolveServerActionsConfig, "resolveServerActionsConfig");
@@ -5679,7 +5804,6 @@ var init_server_action_security = __esm({
       getServerActionExecutionContext()?.cacheTasks.add(task);
     });
     __name(getServerActionStorage, "getServerActionStorage");
-    __name(normalizeAllowedOriginPattern, "normalizeAllowedOriginPattern");
   }
 });
 
@@ -17097,7 +17221,7 @@ var init_server3 = __esm({
 var version;
 var init_package = __esm({
   "package.json"() {
-    version = "0.1.0-beta.97";
+    version = "0.1.0-beta.98";
   }
 });
 
@@ -25232,10 +25356,11 @@ function createFarmImageHandler(config, options) {
         "quality"
       );
       const accept = request.headers.get("accept") ?? "";
+      const negotiatedFormat = selectOutputFormat(accept, config.formats) ?? "";
       const cacheKey = `${sourceUrl.href}
 ${width}
 ${quality}
-${accept}`;
+${negotiatedFormat}`;
       let optimized = cache.get(cacheKey);
       if (!optimized) {
         const fetchedSource = await fetchImageSource(
@@ -25262,7 +25387,8 @@ ${accept}`;
           quality,
           accept,
           formats: config.formats,
-          signal: request.signal
+          signal: request.signal,
+          maximumResponseBody: config.maximumResponseBody
         });
         throwIfAborted2(request.signal);
         validateTransformedResult(result, config);
@@ -25593,7 +25719,7 @@ function throwIfAborted2(signal) {
 function isAbortError(error) {
   return error instanceof Error && error.name === "AbortError";
 }
-var _FarmImageRequestError, FarmImageRequestError, _FarmImageMemoryCache, FarmImageMemoryCache;
+var _FarmImageRequestError, FarmImageRequestError, DEFAULT_IMAGE_TRANSFORM_BODY_LIMIT, _FarmImageMemoryCache, FarmImageMemoryCache;
 var init_image_server = __esm({
   "src/image-server.ts"() {
     "use strict";
@@ -25609,6 +25735,7 @@ var init_image_server = __esm({
     __name(_FarmImageRequestError, "FarmImageRequestError");
     FarmImageRequestError = _FarmImageRequestError;
     __name(createFarmImageHandler, "createFarmImageHandler");
+    DEFAULT_IMAGE_TRANSFORM_BODY_LIMIT = 10 * 1024 * 1024;
     __name(selectOutputFormat, "selectOutputFormat");
     __name(isPrivateImageAddress, "isPrivateImageAddress");
     __name(parseAllowedInteger, "parseAllowedInteger");