@farm.js/core 0.1.35 → 0.1.36

package/dist/{chunk-UJD4PHYB.mjs → chunk-4E5WBPEG.mjs}

@@ -1,11 +1,9 @@
 import {
-  getFarmMarkdownMirrorPath,
-  isFarmMarkdownMirrorExposed,
+  isFarmMetadataNoIndex
+} from "./chunk-DTSROJ5J.mjs";
+import {
   matchesFarmMarkdownRoutePattern
 } from "./chunk-WWIKMBRN.mjs";
-import {
-  FARM_INTERNAL_READ_HEADER
-} from "./chunk-MVL2RAJW.mjs";
 import {
   _markFarmOwnedResponse,
   _withFarmResponseHeaders
@@ -17,348 +15,6 @@ import {
   __name
 } from "./chunk-LPEX4YW6.mjs";
 
-// src/llms-txt.ts
-function resolveFarmLlmsTxtConfig(input) {
-  if (!input) return { enabled: false, include: [], exclude: [], full: false };
-  if (input === true) return { enabled: true, include: [], exclude: [], full: true };
-  if (typeof input !== "object") {
-    throw new TypeError("agent.llmsTxt must be true, false, or an options object.");
-  }
-  if (input.enabled === false) return { enabled: false, include: [], exclude: [], full: false };
-  for (const key of ["title", "summary", "details"]) {
-    if (input[key] !== void 0 && typeof input[key] !== "string") {
-      throw new TypeError(`agent.llmsTxt.${key} must be a string.`);
-    }
-  }
-  if (input.full !== void 0 && typeof input.full !== "boolean") {
-    throw new TypeError("agent.llmsTxt.full must be a boolean.");
-  }
-  if (input.revalidate !== void 0 && (typeof input.revalidate !== "number" || !Number.isFinite(input.revalidate) || input.revalidate < 0)) {
-    throw new TypeError("agent.llmsTxt.revalidate must be a number of seconds.");
-  }
-  return {
-    enabled: true,
-    ...input.title ? { title: input.title } : {},
-    ...input.summary ? { summary: input.summary } : {},
-    ...input.details ? { details: input.details } : {},
-    include: resolveRoutePatterns(input.include, "include"),
-    exclude: resolveRoutePatterns(input.exclude, "exclude"),
-    full: input.full !== false,
-    ...input.revalidate !== void 0 ? { revalidate: input.revalidate } : {}
-  };
-}
-__name(resolveFarmLlmsTxtConfig, "resolveFarmLlmsTxtConfig");
-function resolveRoutePatterns(value, key) {
-  if (value === void 0) return [];
-  if (!Array.isArray(value)) {
-    throw new TypeError(`agent.llmsTxt.${key} must be an array of route patterns.`);
-  }
-  return value.map((pattern, index) => {
-    if (typeof pattern !== "string" || !pattern.startsWith("/")) {
-      throw new TypeError(
-        `agent.llmsTxt.${key}[${index}] must be a route pattern starting with "/", such as "/docs/[...slug]".`
-      );
-    }
-    return pattern;
-  });
-}
-__name(resolveRoutePatterns, "resolveRoutePatterns");
-function collectFarmLlmsTxtPages(sources, options) {
-  const include = options.include ?? [];
-  const exclude = options.exclude ?? [];
-  const pages = /* @__PURE__ */ new Map();
-  for (const source of sources) {
-    const path = source.pattern;
-    if (path.includes("[") || pages.has(path)) continue;
-    if (include.length && !include.some((pattern) => matchesFarmMarkdownRoutePattern(pattern, path))) {
-      continue;
-    }
-    if (exclude.some((pattern) => matchesFarmMarkdownRoutePattern(pattern, path))) continue;
-    if (isMetadataNoIndex(source.metadata)) continue;
-    const target = isFarmMarkdownMirrorExposed(options.markdown, path) ? getFarmMarkdownMirrorPath(path) : path;
-    const description = readMetadataString(source.metadata, "description");
-    pages.set(path, {
-      path,
-      title: readMetadataTitle(source.metadata) ?? fallbackPageTitle(path),
-      url: `${options.origin}${applyFarmBasePath(target, options.basePath)}`,
-      ...description ? { description } : {}
-    });
-  }
-  return [...pages.values()].sort((left, right) => left.path.localeCompare(right.path));
-}
-__name(collectFarmLlmsTxtPages, "collectFarmLlmsTxtPages");
-function isMetadataNoIndex(metadata) {
-  if (!metadata || typeof metadata !== "object") return false;
-  const robots = metadata.robots;
-  if (typeof robots === "string") {
-    return robots.split(",").map((directive) => directive.trim().toLowerCase()).some((directive) => directive === "noindex" || directive === "none");
-  }
-  return Boolean(
-    robots && typeof robots === "object" && robots.index === false
-  );
-}
-__name(isMetadataNoIndex, "isMetadataNoIndex");
-function createFarmDefaultLlmsTxt(options) {
-  const { config, pages } = options;
-  const mcp = options.mcp ?? [];
-  const summary = config.summary ?? readMetadataString(options.rootMetadata, "description");
-  return {
-    title: config.title ?? readMetadataTitle(options.rootMetadata) ?? pages.find((page) => page.path === "/")?.title ?? new URL(options.origin).host,
-    ...summary ? { summary } : {},
-    ...config.details ? { details: config.details } : {},
-    sections: [
-      ...pages.length ? [
-        {
-          title: "Pages",
-          links: pages.map(({ title, url, description }) => ({
-            title,
-            url,
-            ...description ? { description } : {}
-          }))
-        }
-      ] : [],
-      ...mcp.length ? [{ title: "MCP", links: mcp }] : []
-    ]
-  };
-}
-__name(createFarmDefaultLlmsTxt, "createFarmDefaultLlmsTxt");
-function serializeFarmLlmsTxt(value) {
-  if (typeof value === "string") {
-    if (!value.trim()) throw new TypeError("llms.ts returned an empty llms.txt");
-    return value.endsWith("\n") ? value : `${value}
-`;
-  }
-  if (!isRecord(value)) {
-    throw new TypeError("llms.ts must return llms.txt text, an llms.txt object, or a Response");
-  }
-  const title = requireText(value.title, "llms.ts must return a non-empty title");
-  const summary = optionalText(value.summary, "llms.ts summary must be a string");
-  const details = optionalText(value.details, "llms.ts details must be a string");
-  if (value.sections !== void 0 && !Array.isArray(value.sections)) {
-    throw new TypeError("llms.ts sections must be an array");
-  }
-  const blocks = [`# ${toSingleLine(title)}`];
-  if (summary?.trim()) blocks.push(`> ${toSingleLine(summary)}`);
-  if (details?.trim()) blocks.push(details.trim());
-  for (const [sectionIndex, section] of (value.sections ?? []).entries()) {
-    if (!isRecord(section)) {
-      throw new TypeError(`llms.ts section ${sectionIndex} must be an object`);
-    }
-    const sectionTitle = requireText(
-      section.title,
-      `llms.ts section ${sectionIndex} must include a non-empty title`
-    );
-    if (!Array.isArray(section.links)) {
-      throw new TypeError(`llms.ts section "${sectionTitle}" must include a links array`);
-    }
-    const links = section.links.map((link, linkIndex) => {
-      const where = `llms.ts section "${sectionTitle}" link ${linkIndex}`;
-      if (!isRecord(link)) throw new TypeError(`${where} must be an object`);
-      const linkTitle = requireText(link.title, `${where} must include a non-empty title`);
-      const url = requireText(link.url, `${where} must include a non-empty url`);
-      const description = optionalText(link.description, `${where} description must be a string`);
-      return `- [${escapeLinkText(linkTitle)}](${escapeLinkUrl(url)})${description?.trim() ? `: ${toSingleLine(description)}` : ""}`;
-    });
-    blocks.push(`## ${toSingleLine(sectionTitle)}`, links.join("\n"));
-  }
-  return `${blocks.filter(Boolean).join("\n\n")}
-`;
-}
-__name(serializeFarmLlmsTxt, "serializeFarmLlmsTxt");
-function createFarmLlmsMarkdownReader(fetchMarkdown) {
-  return async (url) => {
-    try {
-      const response = await fetchMarkdown(
-        new Request(url, {
-          headers: { accept: "text/markdown", [FARM_INTERNAL_READ_HEADER]: "llms-full" }
-        })
-      );
-      const type = response.headers.get("content-type") ?? "";
-      if (!response.ok || !type.toLowerCase().startsWith("text/markdown")) {
-        await response.body?.cancel();
-        return null;
-      }
-      return await response.text();
-    } catch {
-      return null;
-    }
-  };
-}
-__name(createFarmLlmsMarkdownReader, "createFarmLlmsMarkdownReader");
-var FARM_LLMS_FULL_PAGE_TIMEOUT_MS = 3e4;
-var LLMS_PAGE_TIMED_OUT = /* @__PURE__ */ Symbol("farm.llms.pageTimedOut");
-async function renderFarmLlmsFullTxt(value, options) {
-  const index = serializeFarmLlmsTxt(value);
-  if (typeof value === "string") return index;
-  const llms = value;
-  const links = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const section of llms.sections ?? []) {
-    for (const link of section.links) {
-      if (seen.has(link.url)) continue;
-      seen.add(link.url);
-      links.push(link);
-    }
-  }
-  const pageTimeout = options.pageTimeout ?? FARM_LLMS_FULL_PAGE_TIMEOUT_MS;
-  const readWithinTimeout = /* @__PURE__ */ __name(async (url) => {
-    let timer;
-    const timedOut = new Promise((resolve) => {
-      timer = setTimeout(resolve, pageTimeout, LLMS_PAGE_TIMED_OUT);
-    });
-    try {
-      const content = await Promise.race([options.readMarkdown(url), timedOut]);
-      if (content !== LLMS_PAGE_TIMED_OUT) return content;
-      options.onIncomplete?.();
-      return null;
-    } finally {
-      clearTimeout(timer);
-    }
-  }, "readWithinTimeout");
-  const contents = await mapWithConcurrency(
-    links,
-    options.concurrency ?? 4,
-    (link) => shouldInlineLlmsLink(link.url, options.origin) ? readWithinTimeout(link.url) : null
-  );
-  const blocks = [`# ${toSingleLine(llms.title)}`];
-  if (llms.summary?.trim()) blocks.push(`> ${toSingleLine(llms.summary)}`);
-  if (llms.details?.trim()) blocks.push(llms.details.trim());
-  const pages = links.map((link, index2) => {
-    const parts = [`## ${toSingleLine(link.title)}`, `URL: ${escapeLinkUrl(link.url)}`];
-    if (link.description?.trim()) parts.push(toSingleLine(link.description));
-    const content = stripFrontmatter(contents[index2] ?? "").trim();
-    if (content) parts.push(content);
-    return parts.join("\n\n");
-  });
-  if (pages.length) blocks.push(pages.join("\n\n---\n\n"));
-  return `${blocks.join("\n\n")}
-`;
-}
-__name(renderFarmLlmsFullTxt, "renderFarmLlmsFullTxt");
-function createFarmLlmsFullRenderer(options = {}) {
-  const now = options.now ?? Date.now;
-  const ttl = (options.revalidate ?? 0) * 1e3;
-  const maxEntries = options.maxEntries ?? 16;
-  const entries = /* @__PURE__ */ new Map();
-  let queue = Promise.resolve();
-  const settle = /* @__PURE__ */ __name((body, complete, onSettled) => onSettled ? body.then((value) => (onSettled(complete()), value)) : body, "settle");
-  return (origin, render, onSettled) => {
-    const entry = entries.get(origin);
-    if (entry && entry.expires > now()) return settle(entry.body, entry.complete, onSettled);
-    entries.delete(origin);
-    let complete = true;
-    const body = queue.then(
-      () => render({
-        incomplete: /* @__PURE__ */ __name(() => {
-          complete = false;
-        }, "incomplete")
-      })
-    );
-    queue = body.catch(() => {
-    });
-    const pending = { body, expires: Number.POSITIVE_INFINITY, complete: /* @__PURE__ */ __name(() => complete, "complete") };
-    entries.set(origin, pending);
-    if (entries.size > maxEntries) entries.delete(entries.keys().next().value);
-    body.then(
-      () => {
-        if (entries.get(origin) !== pending) return;
-        if (ttl > 0 && complete) pending.expires = now() + ttl;
-        else entries.delete(origin);
-      },
-      () => {
-        if (entries.get(origin) === pending) entries.delete(origin);
-      }
-    );
-    return settle(body, pending.complete, onSettled);
-  };
-}
-__name(createFarmLlmsFullRenderer, "createFarmLlmsFullRenderer");
-function stripFrontmatter(markdown) {
-  const match = /^\uFEFF?---\r?\n[\s\S]*?\r?\n---[ \t]*(?:\r?\n|$)/.exec(markdown);
-  return match ? markdown.slice(match[0].length) : markdown;
-}
-__name(stripFrontmatter, "stripFrontmatter");
-function shouldInlineLlmsLink(url, origin) {
-  let target;
-  try {
-    target = new URL(url, origin);
-  } catch {
-    return false;
-  }
-  return target.origin === origin && !/\/llms(-full)?\.txt$/.test(target.pathname);
-}
-__name(shouldInlineLlmsLink, "shouldInlineLlmsLink");
-async function mapWithConcurrency(items, limit, run) {
-  const results = [];
-  let next = 0;
-  const worker = /* @__PURE__ */ __name(async () => {
-    while (next < items.length) {
-      const index = next++;
-      results[index] = await run(items[index]);
-    }
-  }, "worker");
-  await Promise.all(Array.from({ length: Math.min(Math.max(limit, 1), items.length) }, worker));
-  return results;
-}
-__name(mapWithConcurrency, "mapWithConcurrency");
-function readMetadataTitle(metadata) {
-  if (!isRecord(metadata)) return void 0;
-  const { title } = metadata;
-  if (typeof title === "string") return title.trim() || void 0;
-  if (isRecord(title)) {
-    for (const key of ["absolute", "default"]) {
-      const value = title[key];
-      if (typeof value === "string" && value.trim()) return value.trim();
-    }
-  }
-  return void 0;
-}
-__name(readMetadataTitle, "readMetadataTitle");
-function readMetadataString(metadata, key) {
-  if (!isRecord(metadata)) return void 0;
-  const value = metadata[key];
-  return typeof value === "string" && value.trim() ? value.trim() : void 0;
-}
-__name(readMetadataString, "readMetadataString");
-function fallbackPageTitle(path) {
-  if (path === "/") return "Home";
-  const segments = path.split("/").filter(Boolean);
-  const segment = segments[segments.length - 1] ?? path;
-  const words = segment.replace(/[-_]+/g, " ").trim();
-  return words ? words[0].toUpperCase() + words.slice(1) : path;
-}
-__name(fallbackPageTitle, "fallbackPageTitle");
-function toSingleLine(value) {
-  return value.replace(/\s+/g, " ").trim();
-}
-__name(toSingleLine, "toSingleLine");
-function escapeLinkText(value) {
-  return toSingleLine(value).replace(/[\\[\]]/g, "\\$&");
-}
-__name(escapeLinkText, "escapeLinkText");
-function escapeLinkUrl(value) {
-  return value.trim().replace(
-    /[\s()<>]/g,
-    (character) => character === "(" ? "%28" : character === ")" ? "%29" : encodeURIComponent(character)
-  );
-}
-__name(escapeLinkUrl, "escapeLinkUrl");
-function requireText(value, message) {
-  if (typeof value !== "string" || !value.trim()) throw new TypeError(message);
-  return value;
-}
-__name(requireText, "requireText");
-function optionalText(value, message) {
-  if (value === void 0) return void 0;
-  if (typeof value !== "string") throw new TypeError(message);
-  return value;
-}
-__name(optionalText, "optionalText");
-function isRecord(value) {
-  return Boolean(value && typeof value === "object" && !Array.isArray(value));
-}
-__name(isRecord, "isRecord");
-
 // src/agent-crawlers.ts
 var FARM_AI_CRAWLERS = {
   search: [
@@ -489,6 +145,73 @@ function resolveDefaultSitemap(options) {
 }
 __name(resolveDefaultSitemap, "resolveDefaultSitemap");
 
+// src/agent-sitemap.ts
+function resolveFarmAgentSitemap(input) {
+  if (!input) return { enabled: false, include: [], exclude: [] };
+  if (input === true) return { enabled: true, include: [], exclude: [] };
+  if (typeof input !== "object") {
+    throw new TypeError("agent.sitemap must be true, false, or an options object.");
+  }
+  if (input.enabled === false) return { enabled: false, include: [], exclude: [] };
+  return {
+    enabled: true,
+    include: resolveRoutePatterns(input.include, "include"),
+    exclude: resolveRoutePatterns(input.exclude, "exclude")
+  };
+}
+__name(resolveFarmAgentSitemap, "resolveFarmAgentSitemap");
+function resolveRoutePatterns(value, key) {
+  if (value === void 0) return [];
+  if (!Array.isArray(value)) {
+    throw new TypeError(`agent.sitemap.${key} must be an array of route patterns.`);
+  }
+  return value.map((pattern, index) => {
+    if (typeof pattern !== "string" || !pattern.startsWith("/")) {
+      throw new TypeError(
+        `agent.sitemap.${key}[${index}] must be a route pattern starting with "/", such as "/admin/[...path]".`
+      );
+    }
+    return pattern;
+  });
+}
+__name(resolveRoutePatterns, "resolveRoutePatterns");
+function createFarmDefaultSitemap(sources, options) {
+  const { include, exclude } = options.config;
+  const base = toAbsoluteHttpOrigin(options.metadataBase) ?? options.origin;
+  const entries = /* @__PURE__ */ new Map();
+  for (const source of sources) {
+    const path = source.pattern;
+    if (path.includes("[") || path.includes("(") || entries.has(path)) continue;
+    if (include.length && !include.some((pattern) => matchesFarmMarkdownRoutePattern(pattern, path))) {
+      continue;
+    }
+    if (exclude.some((pattern) => matchesFarmMarkdownRoutePattern(pattern, path))) continue;
+    const module = isRecord(source.module) ? source.module : void 0;
+    if (isFarmMetadataNoIndex(module?.metadata)) continue;
+    if (module?.__farmRouteGuard) continue;
+    entries.set(path, {
+      url: new URL(applyFarmBasePath(path, options.basePath), base).href,
+      ...source.lastModified ? { lastModified: source.lastModified } : {}
+    });
+  }
+  return [...entries.entries()].sort(([left], [right]) => left.localeCompare(right)).map(([, entry]) => entry);
+}
+__name(createFarmDefaultSitemap, "createFarmDefaultSitemap");
+function toAbsoluteHttpOrigin(value) {
+  if (typeof value !== "string" && !(value instanceof URL)) return void 0;
+  try {
+    const url = new URL(String(value));
+    return url.protocol === "https:" || url.protocol === "http:" ? url.origin : void 0;
+  } catch {
+    return void 0;
+  }
+}
+__name(toAbsoluteHttpOrigin, "toAbsoluteHttpOrigin");
+function isRecord(value) {
+  return Boolean(value && typeof value === "object");
+}
+__name(isRecord, "isRecord");
+
 // src/security.ts
 function resolveFarmSecurityConfig(input) {
   if (input === void 0) return { csp: false };
@@ -1411,15 +1134,10 @@ function applyFarmPreviewRobotsTag(response) {
 __name(applyFarmPreviewRobotsTag, "applyFarmPreviewRobotsTag");
 
 export {
-  resolveFarmLlmsTxtConfig,
-  collectFarmLlmsTxtPages,
-  createFarmDefaultLlmsTxt,
-  serializeFarmLlmsTxt,
-  createFarmLlmsMarkdownReader,
-  renderFarmLlmsFullTxt,
-  createFarmLlmsFullRenderer,
   resolveFarmAgentCrawlers,
   createFarmAgentRobots,
+  resolveFarmAgentSitemap,
+  createFarmDefaultSitemap,
   resolveFarmSecurityConfig,
   getFarmSecurityHeader,
   createFarmCspNonce,

package/dist/{chunk-2G2NNLE2.mjs → chunk-4GLOOWKE.mjs}

@@ -1,12 +1,12 @@
+import {
+  APITypeGenerator
+} from "./chunk-F3VB7ONA.mjs";
 import {
   readSchemaTables
 } from "./chunk-HALDNTIV.mjs";
 import {
   resolveSchemaModels
 } from "./chunk-ZMSZZXOR.mjs";
-import {
-  APITypeGenerator
-} from "./chunk-F3VB7ONA.mjs";
 import {
   mergeRouteRenderingDirectiveConfig
 } from "./chunk-DAO7JGTS.mjs";
@@ -20,7 +20,7 @@ import {
 import {
   getFarmAppDirectories,
   getFarmSourceRoots
-} from "./chunk-JHWOVJ3M.mjs";
+} from "./chunk-BUGNQIHC.mjs";
 import {
   resolveFarmComponentExtensions
 } from "./chunk-DAATZTKJ.mjs";

package/dist/{chunk-62XKI4Z3.cjs → chunk-4NU4GGTC.cjs}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkULAWS2PAcjs = require('./chunk-ULAWS2PA.cjs');
+var _chunkZWM5KGAAcjs = require('./chunk-ZWM5KGAA.cjs');
 
 
 var _chunkHLJ6MBUZcjs = require('./chunk-HLJ6MBUZ.cjs');
@@ -415,7 +415,7 @@ function farmMiddlewarePlugin(options = {}) {
       mode: server.config.mode === "production" ? "production" : "development",
       basePath: _nullishCoalesce(options.basePath, () => ( "/"))
     });
-    manager = new (0, _chunkULAWS2PAcjs.MiddlewareManager)(
+    manager = new (0, _chunkZWM5KGAAcjs.MiddlewareManager)(
       getMiddlewareAppDirectory(server.config.root, srcDir),
       server,
       options.middleware,

package/dist/{chunk-4JHOT46A.mjs → chunk-4WCZJQUO.mjs}

@@ -112,6 +112,55 @@ function isFarmMarkdownPublicSourceResponse(response) {
   return publicSourceResponses.has(response);
 }
 __name(isFarmMarkdownPublicSourceResponse, "isFarmMarkdownPublicSourceResponse");
+var ANONYMOUS_REQUEST_HEADERS = /* @__PURE__ */ new Set([
+  "accept",
+  "accept-encoding",
+  "accept-language",
+  "cache-control",
+  "connection",
+  "dnt",
+  "forwarded",
+  "host",
+  "if-match",
+  "if-modified-since",
+  "if-none-match",
+  "if-range",
+  "if-unmodified-since",
+  "keep-alive",
+  "origin",
+  "pragma",
+  "priority",
+  "purpose",
+  "range",
+  "referer",
+  "save-data",
+  "sec-gpc",
+  "sec-purpose",
+  "te",
+  "traceparent",
+  "tracestate",
+  "upgrade-insecure-requests",
+  "user-agent",
+  "via",
+  "x-forwarded-for",
+  "x-forwarded-host",
+  "x-forwarded-port",
+  "x-forwarded-proto",
+  "x-real-ip",
+  "x-request-id"
+]);
+function isAnonymousRequestHeader(name) {
+  const lower = name.toLowerCase();
+  return ANONYMOUS_REQUEST_HEADERS.has(lower) || lower.startsWith("sec-fetch-") || lower.startsWith("sec-ch-");
+}
+__name(isAnonymousRequestHeader, "isAnonymousRequestHeader");
+function hasOnlyAnonymousHeaders(headers) {
+  for (const name of headers.keys()) {
+    if (!isAnonymousRequestHeader(name)) return false;
+  }
+  return true;
+}
+__name(hasOnlyAnonymousHeaders, "hasOnlyAnonymousHeaders");
 async function createFarmMarkdownSourceResponse(options) {
   if (options.request.method !== "GET" && options.request.method !== "HEAD") {
     return null;
@@ -129,13 +178,14 @@ async function createFarmMarkdownSourceResponse(options) {
   if (!source) {
     return null;
   }
-  const anonymous = !options.request.headers.has("cookie") && !options.request.headers.has("authorization");
+  const anonymous = hasOnlyAnonymousHeaders(options.request.headers);
   if (options.renderPage && (hasMarkdownExtension || !anonymous)) {
     const publicUrl = new URL(url);
     publicUrl.pathname = targetPathname;
-    const publicHeaders = new Headers(options.request.headers);
-    publicHeaders.delete("cookie");
-    publicHeaders.delete("authorization");
+    const publicHeaders = new Headers();
+    for (const [name, value] of options.request.headers) {
+      if (isAnonymousRequestHeader(name)) publicHeaders.append(name, value);
+    }
     publicHeaders.set("accept", "text/markdown");
     const publicResponse = await options.renderPage(
       new Request(publicUrl, {