@farm.js/core 0.1.31 → 0.1.34

package/dist/{chunk-7QOCTYBS.mjs → chunk-AGC75XAE.mjs}

@@ -1,7 +1,7 @@
 import {
   createFarmMarkdownViewResponse,
   requestAcceptsMarkdown
-} from "./chunk-JBC2FKRW.mjs";
+} from "./chunk-ZUSJDQ2Q.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";
@@ -107,6 +107,11 @@ function createFarmMarkdownRouteModule(input) {
   };
 }
 __name(createFarmMarkdownRouteModule, "createFarmMarkdownRouteModule");
+var publicSourceResponses = /* @__PURE__ */ new WeakSet();
+function isFarmMarkdownPublicSourceResponse(response) {
+  return publicSourceResponses.has(response);
+}
+__name(isFarmMarkdownPublicSourceResponse, "isFarmMarkdownPublicSourceResponse");
 async function createFarmMarkdownSourceResponse(options) {
   if (options.request.method !== "GET" && options.request.method !== "HEAD") {
     return null;
@@ -124,6 +129,36 @@ async function createFarmMarkdownSourceResponse(options) {
   if (!source) {
     return null;
   }
+  const anonymous = !options.request.headers.has("cookie") && !options.request.headers.has("authorization");
+  if (options.renderPage && (hasMarkdownExtension || !anonymous)) {
+    const publicUrl = new URL(url);
+    publicUrl.pathname = targetPathname;
+    const publicHeaders = new Headers(options.request.headers);
+    publicHeaders.delete("cookie");
+    publicHeaders.delete("authorization");
+    publicHeaders.set("accept", "text/markdown");
+    const publicResponse = await options.renderPage(
+      new Request(publicUrl, {
+        method: options.request.method,
+        headers: publicHeaders,
+        signal: options.request.signal
+      })
+    );
+    if (publicResponse.headers.get("X-Farm-Markdown-Route") === targetPathname) {
+      publicSourceResponses.add(publicResponse);
+      return publicResponse;
+    }
+    await publicResponse.body?.cancel();
+    if (!hasMarkdownExtension) return null;
+    return new Response(`No public Markdown version of ${targetPathname}.
+`, {
+      status: 404,
+      headers: {
+        "Content-Type": "text/plain; charset=utf-8",
+        "Cache-Control": "private, no-store"
+      }
+    });
+  }
   const headers = new Headers({
     "Content-Type": "text/markdown; charset=utf-8",
     "Content-Location": targetPathname === "/" ? "/index.md" : `${targetPathname}.md`,
@@ -152,5 +187,6 @@ export {
   titleFromMarkdown,
   createMarkdownMetadata,
   createFarmMarkdownRouteModule,
+  isFarmMarkdownPublicSourceResponse,
   createFarmMarkdownSourceResponse
 };

package/dist/{chunk-4ZQQL4IU.mjs → chunk-AHGECQEW.mjs}

@@ -1,7 +1,7 @@
 import {
   compiledFarmI18nMessages,
   getFarmI18nClientState
-} from "./chunk-TOVMYGYW.mjs";
+} from "./chunk-F2SE2VDO.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";

package/dist/{chunk-RG3ZOTG5.cjs → chunk-AI7QMY7O.cjs}

@@ -9,17 +9,23 @@ function parseRequestCookieHeader(header) {
     const separatorIndex = part.indexOf("=");
     if (separatorIndex === -1) {
       return {
-        name: decodeCookiePart(part),
+        name: decodeCookieName(part),
         value: ""
       };
     }
     return {
-      name: decodeCookiePart(part.slice(0, separatorIndex).trim()),
+      name: decodeCookieName(part.slice(0, separatorIndex).trim()),
       value: decodeCookiePart(part.slice(separatorIndex + 1).trim())
     };
   }).filter((cookie) => cookie.name.length > 0);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, parseRequestCookieHeader, "parseRequestCookieHeader");
+var RESERVED_PREFIX = /^__(host|secure)-/i;
+function decodeCookieName(raw) {
+  const decoded = decodeCookiePart(raw);
+  return RESERVED_PREFIX.test(decoded) && !RESERVED_PREFIX.test(raw) ? raw : decoded;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, decodeCookieName, "decodeCookieName");
 function decodeCookiePart(value) {
   try {
     return decodeURIComponent(value);
@@ -31,4 +37,5 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, decodeCookiePart, "decodeCookiePart");
 
 
 
-exports.parseRequestCookieHeader = parseRequestCookieHeader;
+
+exports.parseRequestCookieHeader = parseRequestCookieHeader; exports.decodeCookieName = decodeCookieName;

package/dist/{chunk-O3DTUAX2.mjs → chunk-AQZFOP7S.mjs}

@@ -24,15 +24,18 @@ import {
 import {
   resolveFarmComponentExtensions
 } from "./chunk-DAATZTKJ.mjs";
+import {
+  parseRouteSlotFile
+} from "./chunk-UBO4SGH4.mjs";
 import {
   discoverProgrammaticRoutePaths
-} from "./chunk-LNZ7JZUS.mjs";
+} from "./chunk-UDNPLXW7.mjs";
 import {
   readFarmI18nCatalogs
-} from "./chunk-FV45CKBC.mjs";
+} from "./chunk-QCFBDFRS.mjs";
 import {
   resolvePluginRoutes
-} from "./chunk-4IEPYMHF.mjs";
+} from "./chunk-3UEVPCGW.mjs";
 import {
   parseRoutePath
 } from "./chunk-KI3MESHB.mjs";
@@ -645,78 +648,6 @@ __name(matchSSGPage, "matchSSGPage");
 // src/routing/generate-route-types.ts
 import * as path from "path";
 import * as fs from "fs";
-
-// src/routing/route-slots.ts
-var SLOT_SEGMENT = /^@([A-Za-z][A-Za-z0-9_-]*)$/;
-function parseRouteSlotFile(filePath) {
-  const normalized = filePath.replace(/\\/g, "/");
-  const parts = normalized.split("/").filter(Boolean);
-  const fileName = parts.at(-1) ?? "";
-  const baseName = fileName.replace(/\.(tsx?|jsx?|vue|svelte)$/, "");
-  if (baseName !== "page" && baseName !== "default") return null;
-  const slotIndex = parts.findIndex((part) => SLOT_SEGMENT.test(part));
-  if (slotIndex < 0) return null;
-  if (parts.slice(slotIndex + 1, -1).some((part) => SLOT_SEGMENT.test(part))) {
-    throw new Error(`Nested route slots are not supported in "${filePath}"`);
-  }
-  const slotMatch = parts[slotIndex].match(SLOT_SEGMENT);
-  const name = slotMatch?.[1];
-  if (!name) return null;
-  const ownerParts = parts.slice(0, slotIndex);
-  const contentParts = parts.slice(slotIndex + 1, -1);
-  const marker = parseInterceptionMarker(contentParts[0]);
-  let targetBase = ownerParts;
-  let targetParts = contentParts;
-  if (marker) {
-    targetBase = marker.root === true ? [] : ownerParts.slice(0, Math.max(0, ownerParts.length - marker.up));
-    targetParts = [...marker.remainder ? [marker.remainder] : [], ...contentParts.slice(1)];
-  }
-  const ownerFile = [...ownerParts, "layout.tsx"].join("/");
-  const routeFile = [
-    ...baseName === "default" ? ownerParts : targetBase,
-    ...baseName === "default" ? [] : targetParts,
-    "page.tsx"
-  ].join("/");
-  return {
-    name,
-    ownerRoute: parseRoutePath(ownerFile || "layout.tsx"),
-    route: parseRoutePath(routeFile || "page.tsx"),
-    interception: marker !== null,
-    fallback: baseName === "default"
-  };
-}
-__name(parseRouteSlotFile, "parseRouteSlotFile");
-function createRouteSlotContainerId(name, ownerPattern) {
-  const owner = ownerPattern === "/" ? "root" : ownerPattern.replace(/^\//, "").replace(/[^A-Za-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "");
-  return `__farm_slot_${name}_${owner || "root"}__`;
-}
-__name(createRouteSlotContainerId, "createRouteSlotContainerId");
-function parseInterceptionMarker(segment) {
-  if (!segment) return null;
-  if (segment.startsWith("(...)")) {
-    return {
-      up: 0,
-      root: true,
-      remainder: segment.slice(5)
-    };
-  }
-  if (segment.startsWith("(.)")) {
-    return {
-      up: 0,
-      remainder: segment.slice(3)
-    };
-  }
-  let remainder = segment;
-  let up = 0;
-  while (remainder.startsWith("(..)")) {
-    up += 1;
-    remainder = remainder.slice(4);
-  }
-  return up > 0 ? { up, remainder } : null;
-}
-__name(parseInterceptionMarker, "parseInterceptionMarker");
-
-// src/routing/generate-route-types.ts
 function routeSegmentsToTsTypeLiteral(segments) {
   if (segments.length === 0) return '"/"';
   const hasDynamic = segments.some((s) => s.startsWith("["));
@@ -1405,8 +1336,6 @@ export {
   hasPPR,
   generateSSGManifest,
   matchSSGPage,
-  parseRouteSlotFile,
-  createRouteSlotContainerId,
   generateRouteTypes,
   generateFarmImageTypes,
   createFarmImageTypeDeclarations,

package/dist/{chunk-WNLBF77X.cjs → chunk-ATK2R4CH.cjs}

@@ -1,14 +1,15 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
-var _chunk5OVTOKGHcjs = require('./chunk-5OVTOKGH.cjs');
+var _chunkFFFW3OQ7cjs = require('./chunk-FFFW3OQ7.cjs');
 
 
 var _chunkR5A5KNVXcjs = require('./chunk-R5A5KNVX.cjs');
 
 
 
-var _chunkSWN467MPcjs = require('./chunk-SWN467MP.cjs');
+
+var _chunkC4SPBWFMcjs = require('./chunk-C4SPBWFM.cjs');
 
 
 var _chunkJ7FSKED3cjs = require('./chunk-J7FSKED3.cjs');
@@ -216,11 +217,12 @@ var _SPARouter = class _SPARouter {
       viewTransition = false,
       refresh = false
     } = options;
-    const url = _chunkSWN467MPcjs.resolveFarmNavigationURL.call(void 0, href, window.location.href);
+    const url = _chunkC4SPBWFMcjs.resolveFarmNavigationURL.call(void 0, href, window.location.href);
+    if (_chunkC4SPBWFMcjs.isFarmBlockedNavigationURL.call(void 0, url)) return;
     const pathname = url.pathname;
     const search = url.search;
     const fullPath = pathname + search;
-    if (_chunkSWN467MPcjs.isFarmExternalNavigationURL.call(void 0, url, window.location.origin) || _chunk5OVTOKGHcjs.isFarmLocaleChangeHref.call(void 0, url.toString()) || this.options.shouldUseDocumentNavigation(pathname)) {
+    if (_chunkC4SPBWFMcjs.isFarmExternalNavigationURL.call(void 0, url, window.location.origin) || _chunkFFFW3OQ7cjs.isFarmLocaleChangeHref.call(void 0, url.toString()) || this.options.shouldUseDocumentNavigation(pathname)) {
       this.cancelActiveNavigation();
       if (replace) window.location.replace(url.toString());
       else window.location.assign(url.toString());
@@ -324,9 +326,9 @@ var _SPARouter = class _SPARouter {
    */
   async prefetch(href) {
     if (this.destroyed) return;
-    if (_chunk5OVTOKGHcjs.isFarmLocaleChangeHref.call(void 0, href)) return;
-    const url = _chunkSWN467MPcjs.resolveFarmNavigationURL.call(void 0, href, window.location.href);
-    if (_chunkSWN467MPcjs.isFarmExternalNavigationURL.call(void 0, url, window.location.origin)) return;
+    if (_chunkFFFW3OQ7cjs.isFarmLocaleChangeHref.call(void 0, href)) return;
+    const url = _chunkC4SPBWFMcjs.resolveFarmNavigationURL.call(void 0, href, window.location.href);
+    if (_chunkC4SPBWFMcjs.isFarmExternalNavigationURL.call(void 0, url, window.location.origin)) return;
     if (this.options.shouldUseDocumentNavigation(url.pathname)) return;
     const fullPath = url.pathname + url.search;
     const interceptFrom = window.location.pathname + window.location.search;
@@ -485,7 +487,7 @@ var _SPARouter = class _SPARouter {
     this.writePageState(action, readPageState(), href, false);
   }
   async commitNavigation(options) {
-    const historyUrl = _chunkSWN467MPcjs.resolveFarmNavigationURL.call(void 0, 
+    const historyUrl = _chunkC4SPBWFMcjs.resolveFarmNavigationURL.call(void 0, 
       options.pageData.canonicalPath || options.fullPath,
       window.location.href
     );
@@ -507,13 +509,13 @@ var _SPARouter = class _SPARouter {
       window.history.pushState(historyState, "", historyPath);
     }
     this.currentHistoryIndex = nextHistoryIndex;
-    const resolvedHistoryUrl = _chunkSWN467MPcjs.resolveFarmNavigationURL.call(void 0, historyPath, window.location.href);
+    const resolvedHistoryUrl = _chunkC4SPBWFMcjs.resolveFarmNavigationURL.call(void 0, historyPath, window.location.href);
     this.currentHistoryPath = resolvedHistoryUrl.pathname + resolvedHistoryUrl.search;
     this.currentHistoryHash = resolvedHistoryUrl.hash;
     this.currentInterceptFrom = historyState[FARM_INTERCEPT_FROM_KEY];
     notifyRouterHistoryChange();
     this.updateDocumentMetadata(options.pageData.metadata);
-    _chunk5OVTOKGHcjs._hydrateFarmI18n.call(void 0, options.pageData.i18n);
+    _chunkFFFW3OQ7cjs._hydrateFarmI18n.call(void 0, options.pageData.i18n);
     if (this.onNavigate) {
       await this.onNavigate(options.pageData);
     }
@@ -745,7 +747,7 @@ var _SPARouter = class _SPARouter {
       }
       if (!this.isCurrentNavigation(navigation, clientNavigation)) return;
       this.updateDocumentMetadata(pageData.metadata);
-      _chunk5OVTOKGHcjs._hydrateFarmI18n.call(void 0, pageData.i18n);
+      _chunkFFFW3OQ7cjs._hydrateFarmI18n.call(void 0, pageData.i18n);
       if (this.onNavigate) {
         await this.onNavigate(pageData);
       }
@@ -860,7 +862,7 @@ var _SPARouter = class _SPARouter {
   }
   writePageState(action, state, href, notify = true) {
     if (typeof window === "undefined") return;
-    const url = href ? _chunkSWN467MPcjs.resolveFarmNavigationURL.call(void 0, href, window.location.href).toString() : window.location.href;
+    const url = href ? _chunkC4SPBWFMcjs.resolveFarmNavigationURL.call(void 0, href, window.location.href).toString() : window.location.href;
     const parsedUrl = new URL(url);
     const nextPath = parsedUrl.pathname + parsedUrl.search;
     const historyPath = nextPath + parsedUrl.hash;

package/dist/{chunk-SORB3MAR.cjs → chunk-AWC4VUZL.cjs}

@@ -7,10 +7,10 @@ var _chunkSU7MH53Pcjs = require('./chunk-SU7MH53P.cjs');
 
 
 
-var _chunkWNLBF77Xcjs = require('./chunk-WNLBF77X.cjs');
+var _chunkATK2R4CHcjs = require('./chunk-ATK2R4CH.cjs');
 
 
-var _chunk5OVTOKGHcjs = require('./chunk-5OVTOKGH.cjs');
+var _chunkFFFW3OQ7cjs = require('./chunk-FFFW3OQ7.cjs');
 
 
 var _chunkU4KT7QP3cjs = require('./chunk-U4KT7QP3.cjs');
@@ -52,7 +52,7 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, shouldBlockUnload, "shouldBlockUnload");
 function navigateViaRouter(href, basePath, replace, options = {}) {
   if (typeof window === "undefined") return;
   const url = _chunkI57LW5VZcjs.applyFarmBasePath.call(void 0, href, basePath);
-  const spaRouter = _chunkWNLBF77Xcjs.getInstalledFarmSPARouter.call(void 0, );
+  const spaRouter = _chunkATK2R4CHcjs.getInstalledFarmSPARouter.call(void 0, );
   if (spaRouter) {
     void spaRouter.navigate(url, {
       replace,
@@ -65,7 +65,7 @@ function navigateViaRouter(href, basePath, replace, options = {}) {
   } else {
     window.history.pushState(null, "", url);
   }
-  _chunkWNLBF77Xcjs.notifyHistoryChange.call(void 0, "url-search");
+  _chunkATK2R4CHcjs.notifyHistoryChange.call(void 0, "url-search");
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, navigateViaRouter, "navigateViaRouter");
 function useRouter(options = {}) {
@@ -85,7 +85,7 @@ function useRouter(options = {}) {
       setState(readRouterState(basePath, routeMatcher));
     }, "handlePopState");
     handlePopState();
-    const unsubscribe = _chunkWNLBF77Xcjs.subscribeHistoryChange.call(void 0, handlePopState);
+    const unsubscribe = _chunkATK2R4CHcjs.subscribeHistoryChange.call(void 0, handlePopState);
     return unsubscribe;
   }, [basePath, routeMatcher]);
   const push = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (href, navigateOptions) => {
@@ -96,11 +96,11 @@ function useRouter(options = {}) {
   }, "replace");
   const pushState = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (pageState, href) => {
     if (typeof window === "undefined") return;
-    _chunkWNLBF77Xcjs.getRouter.call(void 0, ).pushState(pageState, resolveClientHref(href, basePath));
+    _chunkATK2R4CHcjs.getRouter.call(void 0, ).pushState(pageState, resolveClientHref(href, basePath));
   }, "pushState");
   const replaceState = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (pageState, href) => {
     if (typeof window === "undefined") return;
-    _chunkWNLBF77Xcjs.getRouter.call(void 0, ).replaceState(pageState, resolveClientHref(href, basePath));
+    _chunkATK2R4CHcjs.getRouter.call(void 0, ).replaceState(pageState, resolveClientHref(href, basePath));
   }, "replaceState");
   const back = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, () => {
     if (typeof window !== "undefined") {
@@ -124,25 +124,25 @@ function useRouter(options = {}) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, useRouter, "useRouter");
 function usePageState() {
-  const [state, setState] = _react.useState.call(void 0, () => _chunkWNLBF77Xcjs.readPageState.call(void 0, ));
+  const [state, setState] = _react.useState.call(void 0, () => _chunkATK2R4CHcjs.readPageState.call(void 0, ));
   _react.useEffect.call(void 0, () => {
     if (typeof window === "undefined") return;
     const handlePopState = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, () => {
-      setState(_chunkWNLBF77Xcjs.readPageState.call(void 0, ));
+      setState(_chunkATK2R4CHcjs.readPageState.call(void 0, ));
     }, "handlePopState");
     handlePopState();
-    return _chunkWNLBF77Xcjs.subscribeHistoryChange.call(void 0, handlePopState);
+    return _chunkATK2R4CHcjs.subscribeHistoryChange.call(void 0, handlePopState);
   }, []);
   return state;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, usePageState, "usePageState");
 function useNavigation() {
   const [state, setState] = _react.useState.call(void 0, 
-    () => _chunkWNLBF77Xcjs.getRouter.call(void 0, ).getNavigationState()
+    () => _chunkATK2R4CHcjs.getRouter.call(void 0, ).getNavigationState()
   );
   _react.useEffect.call(void 0, () => {
     if (typeof window === "undefined") return;
-    return _chunkWNLBF77Xcjs.getRouter.call(void 0, ).subscribeNavigation(setState);
+    return _chunkATK2R4CHcjs.getRouter.call(void 0, ).subscribeNavigation(setState);
   }, []);
   return state;
 }
@@ -155,7 +155,7 @@ function useBlocker(options) {
     if (typeof window === "undefined" || !active) {
       return;
     }
-    return _chunkWNLBF77Xcjs.getRouter.call(void 0, ).addBlocker(
+    return _chunkATK2R4CHcjs.getRouter.call(void 0, ).addBlocker(
       async (context) => {
         const current = optionsRef.current;
         const when = typeof current.when === "function" ? current.when(context) : current.when;
@@ -179,7 +179,7 @@ function useScrollRestoration(key) {
   _react.useEffect.call(void 0, () => {
     const element = ref.current;
     if (!element) return;
-    return _chunkWNLBF77Xcjs.getRouter.call(void 0, ).registerScrollElement(key, element);
+    return _chunkATK2R4CHcjs.getRouter.call(void 0, ).registerScrollElement(key, element);
   }, [key]);
   return ref;
 }
@@ -195,13 +195,13 @@ function readRouterState(basePath, routeMatcher) {
     };
   }
   const pathname = normalizeClientPathname(url.pathname, basePath);
-  const i18n = _chunk5OVTOKGHcjs.getFarmI18nClientState.call(void 0, );
-  const routePathname = i18n ? _chunkBIDYX3SLcjs.stripFarmLocaleFromPathname.call(void 0, pathname, i18n) : pathname;
+  const i18n = _chunkFFFW3OQ7cjs.getFarmI18nClientState.call(void 0, );
+  const routePathname = i18n ? _chunkBIDYX3SLcjs.stripFarmLocaleFromPathname.call(void 0, pathname, { ...i18n, basePath: "/" }) : pathname;
   return {
     pathname,
     searchParams: url.searchParams,
     params: _optionalChain([routeMatcher, 'optionalAccess', _5 => _5.match, 'call', _6 => _6(routePathname), 'optionalAccess', _7 => _7.params]) || {},
-    pageState: typeof window === "undefined" ? null : _chunkWNLBF77Xcjs.readPageState.call(void 0, )
+    pageState: typeof window === "undefined" ? null : _chunkATK2R4CHcjs.readPageState.call(void 0, )
   };
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, readRouterState, "readRouterState");

package/dist/{chunk-YMCXWPWK.mjs → chunk-BCMSYSN2.mjs}

@@ -52,6 +52,9 @@ function resolveFarmI18nConfig(input, options = {}) {
   if (sameSite !== "lax" && sameSite !== "strict" && sameSite !== "none") {
     throw new Error('i18n.cookie.sameSite must be "lax", "strict", or "none".');
   }
+  if (sameSite === "none" && input.cookie?.secure === false) {
+    throw new Error('i18n.cookie.secure cannot be false when i18n.cookie.sameSite is "none".');
+  }
   const direction = {};
   for (const [rawLocale, value] of Object.entries(input.direction || {})) {
     const locale = canonicalizeLocale(rawLocale);
@@ -82,7 +85,7 @@ function resolveFarmI18nConfig(input, options = {}) {
       ),
       path: normalizeCookiePath(input.cookie?.path),
       sameSite,
-      secure: input.cookie?.secure ?? options.mode === "production"
+      secure: input.cookie?.secure ?? (sameSite === "none" || options.mode === "production")
     },
     direction
   };

package/dist/{chunk-FYRBX5IY.cjs → chunk-BTAG7LI7.cjs}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkX7KZBF63cjs = require('./chunk-X7KZBF63.cjs');
+var _chunkUX5S4JEOcjs = require('./chunk-UX5S4JEO.cjs');
 
 
 var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
@@ -11,7 +11,7 @@ var _path = require('path'); var _path2 = _interopRequireDefault(_path);
 var _url = require('url');
 async function createFarmMarkdownRouteModuleFromFile(filePath, options = {}) {
   const source = await _promises.readFile.call(void 0, filePath, "utf8");
-  return _chunkX7KZBF63cjs.createFarmMarkdownRouteModule.call(void 0, {
+  return _chunkUX5S4JEOcjs.createFarmMarkdownRouteModule.call(void 0, {
     source,
     filePath,
     components: options.components,

package/dist/{chunk-I6XDAKWQ.mjs → chunk-BTHHUD7Q.mjs}

@@ -25,6 +25,19 @@ function resolveFarmAPICanonicalPathname(pathname, serverBasePath = DEFAULT_FARM
   return pathname;
 }
 __name(resolveFarmAPICanonicalPathname, "resolveFarmAPICanonicalPathname");
+function createFarmAPIMiddlewarePathnames(serverBasePath = DEFAULT_FARM_API_BASE_PATH) {
+  const basePath = normalizeFarmAPIBasePath(serverBasePath);
+  if (basePath === DEFAULT_FARM_API_BASE_PATH) return (pathname) => [pathname];
+  const prefix = DEFAULT_FARM_API_BASE_PATH;
+  return (pathname) => {
+    const canonical = resolveFarmAPICanonicalPathname(pathname, basePath);
+    if (canonical !== prefix && !canonical.startsWith(`${prefix}/`)) return [pathname];
+    const suffix = canonical.slice(prefix.length);
+    const publicPath = basePath === "/" ? suffix || "/" : `${basePath}${suffix}`;
+    return [.../* @__PURE__ */ new Set([pathname, canonical, publicPath])];
+  };
+}
+__name(createFarmAPIMiddlewarePathnames, "createFarmAPIMiddlewarePathnames");
 function resolveFarmAPIServerRoutePath(routePath, serverBasePath = DEFAULT_FARM_API_BASE_PATH) {
   return resolveFarmAPIRequestURL(routePath, serverBasePath).pathname;
 }
@@ -33,5 +46,6 @@ __name(resolveFarmAPIServerRoutePath, "resolveFarmAPIServerRoutePath");
 export {
   resolveFarmAPIServerBasePath,
   resolveFarmAPICanonicalPathname,
+  createFarmAPIMiddlewarePathnames,
   resolveFarmAPIServerRoutePath
 };

package/dist/chunk-C4SPBWFM.cjs

@@ -0,0 +1,26 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
+
+// src/client/navigation-url.ts
+var FARM_NAVIGATION_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:"]);
+function isFarmBlockedNavigationURL(url) {
+  if (FARM_NAVIGATION_PROTOCOLS.has(url.protocol)) return false;
+  console.error(`[Farm.js] Blocked navigation to a ${url.protocol} URL as a security precaution.`);
+  return true;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, isFarmBlockedNavigationURL, "isFarmBlockedNavigationURL");
+function isFarmExternalNavigationURL(url, currentOrigin) {
+  return url.protocol !== "http:" && url.protocol !== "https:" || url.origin !== currentOrigin;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, isFarmExternalNavigationURL, "isFarmExternalNavigationURL");
+function resolveFarmNavigationURL(href, documentUrl) {
+  return new URL(href, documentUrl);
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, resolveFarmNavigationURL, "resolveFarmNavigationURL");
+
+
+
+
+
+exports.isFarmBlockedNavigationURL = isFarmBlockedNavigationURL; exports.isFarmExternalNavigationURL = isFarmExternalNavigationURL; exports.resolveFarmNavigationURL = resolveFarmNavigationURL;

package/dist/{chunk-JATSG2ZO.mjs → chunk-CLJYVZAD.mjs}

@@ -1,14 +1,15 @@
 import {
   _hydrateFarmI18n,
   isFarmLocaleChangeHref
-} from "./chunk-TOVMYGYW.mjs";
+} from "./chunk-F2SE2VDO.mjs";
 import {
   getHashTargetElement
 } from "./chunk-2PQNJXFM.mjs";
 import {
+  isFarmBlockedNavigationURL,
   isFarmExternalNavigationURL,
   resolveFarmNavigationURL
-} from "./chunk-5HGR3W6O.mjs";
+} from "./chunk-5SJWVY6R.mjs";
 import {
   createClientCancellation
 } from "./chunk-QVYLBY73.mjs";
@@ -217,6 +218,7 @@ var _SPARouter = class _SPARouter {
       refresh = false
     } = options;
     const url = resolveFarmNavigationURL(href, window.location.href);
+    if (isFarmBlockedNavigationURL(url)) return;
     const pathname = url.pathname;
     const search = url.search;
     const fullPath = pathname + search;

package/dist/{chunk-J3LOGE4T.cjs → chunk-DQQOKWYA.cjs}

@@ -1,21 +1,21 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkRG3ZOTG5cjs = require('./chunk-RG3ZOTG5.cjs');
+var _chunkAI7QMY7Ocjs = require('./chunk-AI7QMY7O.cjs');
 
 
-var _chunk5ZSWG4UXcjs = require('./chunk-5ZSWG4UX.cjs');
+var _chunkUXFQ3UDAcjs = require('./chunk-UXFQ3UDA.cjs');
 
 
 var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
 
 // src/headers.ts
 function headers() {
-  return new Headers(_chunk5ZSWG4UXcjs.getCurrentRequest.call(void 0, ).headers);
+  return new Headers(_chunkUXFQ3UDAcjs.getCurrentRequest.call(void 0, ).headers);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, headers, "headers");
 function cookies() {
-  const cookieHeader = _chunk5ZSWG4UXcjs.getCurrentRequest.call(void 0, ).headers.get("cookie") || "";
-  const parsed = _chunkRG3ZOTG5cjs.parseRequestCookieHeader.call(void 0, cookieHeader);
+  const cookieHeader = _chunkUXFQ3UDAcjs.getCurrentRequest.call(void 0, ).headers.get("cookie") || "";
+  const parsed = _chunkAI7QMY7Ocjs.parseRequestCookieHeader.call(void 0, cookieHeader);
   return {
     get(name) {
       return parsed.find((cookie) => cookie.name === name);

package/dist/{chunk-JLRDISQL.cjs → chunk-DZ4DTRJ5.cjs}

@@ -1,9 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkSORB3MARcjs = require('./chunk-SORB3MAR.cjs');
+var _chunkAWC4VUZLcjs = require('./chunk-AWC4VUZL.cjs');
 
 
-var _chunkWNLBF77Xcjs = require('./chunk-WNLBF77X.cjs');
+var _chunkATK2R4CHcjs = require('./chunk-ATK2R4CH.cjs');
 
 
 var _chunkI57LW5VZcjs = require('./chunk-I57LW5VZ.cjs');
@@ -13,7 +13,7 @@ var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
 
 // src/navigation.ts
 function useRouter2() {
-  const router = _chunkSORB3MARcjs.useRouter.call(void 0, );
+  const router = _chunkAWC4VUZLcjs.useRouter.call(void 0, );
   return {
     push: router.push,
     replace: router.replace,
@@ -21,21 +21,21 @@ function useRouter2() {
     forward: router.forward,
     refresh() {
       if (typeof window === "undefined") return Promise.resolve();
-      return _chunkWNLBF77Xcjs.getRouter.call(void 0, ).refresh();
+      return _chunkATK2R4CHcjs.getRouter.call(void 0, ).refresh();
     },
     prefetch(href) {
       if (typeof window === "undefined") return Promise.resolve();
-      return _chunkWNLBF77Xcjs.getRouter.call(void 0, ).prefetch(_chunkI57LW5VZcjs.applyFarmBasePath.call(void 0, href));
+      return _chunkATK2R4CHcjs.getRouter.call(void 0, ).prefetch(_chunkI57LW5VZcjs.applyFarmBasePath.call(void 0, href));
     }
   };
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, useRouter2, "useRouter");
 function usePathname() {
-  return _chunkSORB3MARcjs.useRouter.call(void 0, ).pathname;
+  return _chunkAWC4VUZLcjs.useRouter.call(void 0, ).pathname;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, usePathname, "usePathname");
 function useSearchParams() {
-  return _chunkSORB3MARcjs.useRouter.call(void 0, ).searchParams;
+  return _chunkAWC4VUZLcjs.useRouter.call(void 0, ).searchParams;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, useSearchParams, "useSearchParams");