@farm.js/core 0.1.35 → 0.1.37

package/dist/{chunk-5SJWVY6R.mjs → chunk-QHSH7IH4.mjs}

@@ -10,6 +10,14 @@ function isFarmBlockedNavigationURL(url) {
   return true;
 }
 __name(isFarmBlockedNavigationURL, "isFarmBlockedNavigationURL");
+function isFarmScriptURL(href) {
+  try {
+    return new URL(href, "http://farm.invalid").protocol === "javascript:";
+  } catch {
+    return false;
+  }
+}
+__name(isFarmScriptURL, "isFarmScriptURL");
 function isFarmExternalNavigationURL(url, currentOrigin) {
   return url.protocol !== "http:" && url.protocol !== "https:" || url.origin !== currentOrigin;
 }
@@ -21,6 +29,7 @@ __name(resolveFarmNavigationURL, "resolveFarmNavigationURL");
 
 export {
   isFarmBlockedNavigationURL,
+  isFarmScriptURL,
   isFarmExternalNavigationURL,
   resolveFarmNavigationURL
 };

package/dist/{chunk-Q3VLETLE.mjs → chunk-RRMVL6CJ.mjs}

@@ -4,7 +4,7 @@ import {
   getServerActionSignal,
   isServerFnFailure,
   runWithServerActionRequest
-} from "./chunk-SMHH4VDG.mjs";
+} from "./chunk-4WVJLURN.mjs";
 import {
   applyFarmCacheInvalidationTargets
 } from "./chunk-MSSFIQGM.mjs";
@@ -12,8 +12,8 @@ import {
   getFarmRedirectError
 } from "./chunk-CBBLJMR5.mjs";
 import {
-  _resolveCurrentRequest
-} from "./chunk-IZY3V5XW.mjs";
+  _resolveCurrentRequestForApp
+} from "./chunk-S3VWVTVA.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";
@@ -118,7 +118,7 @@ function createServerFn(options) {
       throw labelInputErrors && isSchemaValidationFailure(cause) ? new ServerFnInputError(cause) : cause;
     }
     const executionContext = getServerActionExecutionContext();
-    const request = executionContext?.request ?? _resolveCurrentRequest();
+    const request = executionContext?.request ?? _resolveCurrentRequestForApp();
     const signal = executionContext?.signal ?? request?.signal ?? getServerActionSignal();
     const handlerContext = {
       input,

package/dist/{chunk-IZY3V5XW.mjs → chunk-S3VWVTVA.mjs}

@@ -4,6 +4,7 @@ import {
 
 // src/server/request-bridge.ts
 var CURRENT_REQUEST_RESOLVER_KEY = /* @__PURE__ */ Symbol.for("farm.currentRequestResolver");
+var APP_REQUEST_VIEW_KEY = /* @__PURE__ */ Symbol.for("farm.appRequestView");
 function getGlobalState() {
   return globalThis;
 }
@@ -16,8 +17,20 @@ function _resolveCurrentRequest() {
   return getGlobalState()[CURRENT_REQUEST_RESOLVER_KEY]?.();
 }
 __name(_resolveCurrentRequest, "_resolveCurrentRequest");
+function _setAppRequestView(view) {
+  getGlobalState()[APP_REQUEST_VIEW_KEY] = view;
+}
+__name(_setAppRequestView, "_setAppRequestView");
+function _resolveCurrentRequestForApp() {
+  const request = _resolveCurrentRequest();
+  const view = getGlobalState()[APP_REQUEST_VIEW_KEY];
+  return request && view ? view(request) : request;
+}
+__name(_resolveCurrentRequestForApp, "_resolveCurrentRequestForApp");
 
 export {
   _setCurrentRequestResolver,
-  _resolveCurrentRequest
+  _resolveCurrentRequest,
+  _setAppRequestView,
+  _resolveCurrentRequestForApp
 };

package/dist/{chunk-FFFW3OQ7.cjs → chunk-S6FJO323.cjs}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkC4SPBWFMcjs = require('./chunk-C4SPBWFM.cjs');
+var _chunkJEZO6VURcjs = require('./chunk-JEZO6VUR.cjs');
 
 
 var _chunkLIUGYUX3cjs = require('./chunk-LIUGYUX3.cjs');
@@ -48,7 +48,7 @@ function isFarmLocaleChangeHref(href) {
   const snapshot = getFarmI18nClientState();
   if (!snapshot || typeof window === "undefined") return false;
   if (snapshot.routing === "none") return false;
-  const target = _chunkC4SPBWFMcjs.resolveFarmNavigationURL.call(void 0, href, window.location.href);
+  const target = _chunkJEZO6VURcjs.resolveFarmNavigationURL.call(void 0, href, window.location.href);
   const match = _chunkBIDYX3SLcjs.resolveFarmLocalePath.call(void 0, target.pathname, snapshot);
   const targetLocale = match.locale || snapshot.defaultLocale;
   return targetLocale !== snapshot.locale;

package/dist/{chunk-VFQT3LAO.cjs → chunk-SDOTRX3V.cjs}

@@ -9,7 +9,7 @@ var _chunkCMGMGHUZcjs = require('./chunk-CMGMGHUZ.cjs');
 
 
 
-var _chunkOMVAU7NTcjs = require('./chunk-OMVAU7NT.cjs');
+var _chunkKIIMAWOJcjs = require('./chunk-KIIMAWOJ.cjs');
 
 
 var _chunk5QIKR7RRcjs = require('./chunk-5QIKR7RR.cjs');
@@ -136,10 +136,10 @@ function createFarmWorkflowRequestHandler(options) {
     try {
       payload = await readWorkflowPayload(
         request,
-        _chunkOMVAU7NTcjs.resolveFarmServerConfig.call(void 0, options.server).bodySizeLimit
+        _chunkKIIMAWOJcjs.resolveFarmServerConfig.call(void 0, options.server).bodySizeLimit
       );
     } catch (error) {
-      const response = _chunkOMVAU7NTcjs.createFarmRequestBodyErrorResponse.call(void 0, error);
+      const response = _chunkKIIMAWOJcjs.createFarmRequestBodyErrorResponse.call(void 0, error);
       if (response) return response;
       if (error instanceof SyntaxError) {
         return Response.json({ error: "Invalid workflow request body." }, { status: 400 });
@@ -220,7 +220,7 @@ async function prepareFarmWorkflowsForNitro(config) {
     createNitroWorkflowHTTPHandler(
       workflowConfig,
       workflows,
-      _chunkOMVAU7NTcjs.resolveFarmServerConfig.call(void 0, config.server)
+      _chunkKIIMAWOJcjs.resolveFarmServerConfig.call(void 0, config.server)
     ),
     "utf8"
   );
@@ -591,7 +591,7 @@ async function readWorkflowPayload(request, bodySizeLimit) {
   if (request.method === "GET" || request.method === "HEAD") {
     return _chunkQNPEUFHQcjs.searchParamsToObject.call(void 0, url.searchParams);
   }
-  const bytes = await _chunkOMVAU7NTcjs.readFarmRequestBody.call(void 0, request, bodySizeLimit);
+  const bytes = await _chunkKIIMAWOJcjs.readFarmRequestBody.call(void 0, request, bodySizeLimit);
   const text = new TextDecoder().decode(bytes);
   if (!text) return {};
   const contentType = (request.headers.get("content-type") || "").split(";", 1)[0].trim().toLowerCase();

package/dist/chunk-SGBZPZUW.mjs

@@ -0,0 +1,75 @@
+import {
+  __name
+} from "./chunk-LPEX4YW6.mjs";
+
+// src/api/dev-dispatch.ts
+import http from "http";
+import https from "https";
+import { Readable } from "stream";
+function createFarmDevServerDispatch(server) {
+  return (request) => new Promise((resolve, reject) => {
+    const address = server.httpServer?.address();
+    if (!address || typeof address === "string") {
+      throw new Error(
+        "Farm cannot dispatch an app endpoint request: the Vite dev server has no listening HTTP server."
+      );
+    }
+    const url = new URL(request.url);
+    const headers = {};
+    request.headers.forEach((value, name) => {
+      headers[name] = value;
+    });
+    headers.host = url.host;
+    const secure = Boolean(server.config.server.https);
+    const outgoing = (secure ? https : http).request(
+      {
+        host: loopbackAddress(address),
+        port: address.port,
+        method: request.method,
+        path: `${url.pathname}${url.search}`,
+        headers,
+        signal: request.signal,
+        // The listener is this process's own dev server, often with a self-signed certificate.
+        ...secure ? { rejectUnauthorized: false } : {}
+      },
+      (incoming) => {
+        const responseHeaders = new Headers();
+        for (const [name, value] of Object.entries(incoming.headers)) {
+          if (value === void 0) continue;
+          for (const entry of Array.isArray(value) ? value : [value]) {
+            responseHeaders.append(name, entry);
+          }
+        }
+        const status = incoming.statusCode ?? 502;
+        const hasBody = request.method !== "HEAD" && status !== 204 && status !== 205 && status !== 304;
+        if (!hasBody) incoming.resume();
+        try {
+          resolve(
+            new Response(
+              hasBody ? Readable.toWeb(incoming) : null,
+              { status, statusText: incoming.statusMessage, headers: responseHeaders }
+            )
+          );
+        } catch (error) {
+          incoming.destroy();
+          reject(error);
+        }
+      }
+    );
+    outgoing.on("error", reject);
+    if (request.body) {
+      Readable.fromWeb(request.body).on("error", (error) => outgoing.destroy(error)).pipe(outgoing);
+    } else {
+      outgoing.end();
+    }
+  });
+}
+__name(createFarmDevServerDispatch, "createFarmDevServerDispatch");
+function loopbackAddress({ address }) {
+  return address === "0.0.0.0" ? "127.0.0.1" : address === "::" ? "::1" : address;
+}
+__name(loopbackAddress, "loopbackAddress");
+
+export {
+  createFarmDevServerDispatch
+};

package/dist/{chunk-BMWDEBXO.cjs → chunk-SHLXACIO.cjs}

@@ -34,15 +34,42 @@ async function loadFarmDevModule(server, id, environmentName = "ssr") {
   }
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, loadFarmDevModule, "loadFarmDevModule");
+function invalidateFarmDevDependents(server, file, targets, environmentName = "ssr") {
+  const environment = server.environments[environmentName];
+  const graph = _optionalChain([environment, 'optionalAccess', _6 => _6.moduleGraph]);
+  if (!graph || targets.size === 0) return [];
+  const posix = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (filePath) => filePath.replace(/\\/g, "/"), "posix");
+  const byFile = new Map([...targets].map((target) => [posix(target), target]));
+  const reached = /* @__PURE__ */ new Set();
+  const seen = /* @__PURE__ */ new Set();
+  const queue = [..._nullishCoalesce(graph.getModulesByFile(posix(file)), () => ( []))];
+  while (queue.length > 0) {
+    const node = queue.pop();
+    if (seen.has(node)) continue;
+    seen.add(node);
+    const target = node.file ? byFile.get(posix(node.file)) : void 0;
+    if (target) reached.add(target);
+    queue.push(...node.importers);
+  }
+  if (reached.size === 0) return [];
+  const evaluatedModules = _optionalChain([environment, 'access', _7 => _7.runner, 'optionalAccess', _8 => _8.evaluatedModules]);
+  for (const node of seen) {
+    graph.invalidateModule(node);
+    const evaluated = node.id ? _optionalChain([evaluatedModules, 'optionalAccess', _9 => _9.getModuleById, 'call', _10 => _10(node.id)]) : void 0;
+    if (evaluated) evaluatedModules.invalidateModule(evaluated);
+  }
+  return [...reached];
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, invalidateFarmDevDependents, "invalidateFarmDevDependents");
 function invalidateFailedFarmDevModules(server) {
   for (const entry of Object.values(server.environments)) {
     const environment = entry;
     const failures = failedModules.get(environment);
-    if (!_optionalChain([failures, 'optionalAccess', _6 => _6.size])) continue;
+    if (!_optionalChain([failures, 'optionalAccess', _11 => _11.size])) continue;
     const runner = environment.runner;
     for (const [id, failed] of failures) {
       const evaluated = runner.evaluatedModules.getModuleById(id);
-      if (_optionalChain([evaluated, 'optionalAccess', _7 => _7.promise]) !== failed) continue;
+      if (_optionalChain([evaluated, 'optionalAccess', _12 => _12.promise]) !== failed) continue;
       const transformed = environment.moduleGraph.getModuleById(id);
       if (transformed) environment.moduleGraph.invalidateModule(transformed);
       if (evaluated) runner.evaluatedModules.invalidateModule(evaluated);
@@ -64,4 +91,5 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, toFileModuleUrl, "toFileModuleUrl");
 
 
 
-exports.FarmDevEnvironmentError = FarmDevEnvironmentError; exports.loadFarmDevModule = loadFarmDevModule; exports.invalidateFailedFarmDevModules = invalidateFailedFarmDevModules; exports.toFileModuleUrl = toFileModuleUrl;
+
+exports.FarmDevEnvironmentError = FarmDevEnvironmentError; exports.loadFarmDevModule = loadFarmDevModule; exports.invalidateFarmDevDependents = invalidateFarmDevDependents; exports.invalidateFailedFarmDevModules = invalidateFailedFarmDevModules; exports.toFileModuleUrl = toFileModuleUrl;

package/dist/{chunk-ZXGAFZDO.cjs → chunk-T5OJPTVN.cjs}

@@ -6,7 +6,7 @@
 var _chunkSVRTJOUFcjs = require('./chunk-SVRTJOUF.cjs');
 
 
-var _chunkOMVAU7NTcjs = require('./chunk-OMVAU7NT.cjs');
+var _chunkKIIMAWOJcjs = require('./chunk-KIIMAWOJ.cjs');
 
 
 
@@ -107,7 +107,7 @@ function resolveServerActionsConfig(config) {
   const allowedOrigins = (_nullishCoalesce(_optionalChain([config, 'optionalAccess', _ => _.allowedOrigins]), () => ( []))).map(
     (value) => _chunkSVRTJOUFcjs.normalizeAllowedOriginPattern.call(void 0, value, SERVER_ACTION_ALLOWED_ORIGINS_LABEL)
   );
-  const bodySizeLimit = _chunkOMVAU7NTcjs.parseBodySizeLimit.call(void 0, 
+  const bodySizeLimit = _chunkKIIMAWOJcjs.parseBodySizeLimit.call(void 0, 
     _nullishCoalesce(_optionalChain([config, 'optionalAccess', _2 => _2.bodySizeLimit]), () => ( DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT)),
     "serverActions.bodySizeLimit"
   );

package/dist/{chunk-2ELDTQRN.mjs → chunk-TDNWPAVR.mjs}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-JM5XPKWH.mjs";
 import {
   getCurrentRequestOrNull
-} from "./chunk-FDR64H6B.mjs";
+} from "./chunk-3KGDJLJK.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";

package/dist/{chunk-VZJR7UTG.cjs → chunk-TE2G5ION.cjs}

@@ -18,7 +18,7 @@ var _chunkHREOKQWTcjs = require('./chunk-HREOKQWT.cjs');
 var _chunkEUV4YR3Vcjs = require('./chunk-EUV4YR3V.cjs');
 
 
-var _chunkOMVAU7NTcjs = require('./chunk-OMVAU7NT.cjs');
+var _chunkKIIMAWOJcjs = require('./chunk-KIIMAWOJ.cjs');
 
 
 var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
@@ -1947,7 +1947,7 @@ function createFarmDocsHandler(docs, options) {
         ETag: etag,
         "X-Content-Type-Options": "nosniff"
       });
-      if (_chunkOMVAU7NTcjs.matchesFarmIfNoneMatch.call(void 0, request.headers.get("if-none-match"), etag)) {
+      if (_chunkKIIMAWOJcjs.matchesFarmIfNoneMatch.call(void 0, request.headers.get("if-none-match"), etag)) {
         return new Response(null, { status: 304, headers });
       }
       if (request.method === "HEAD") return new Response(null, { status: 200, headers });

package/dist/{chunk-IHNIDL6H.cjs → chunk-TO4GJ56K.cjs}

@@ -569,6 +569,10 @@ async function resolveProgrammaticRouteData(route, dataHooks, context) {
   if (routeDataKey == null) {
     return dataHooks.main(context);
   }
+  const revalidate = normalizeProgrammaticRouteStaleTime(dataHooks.staleTime, route.path);
+  if (revalidate === 0) {
+    return dataHooks.main(context);
+  }
   const cacheKey = _chunkNYJMY3JAcjs.createFarmCacheKey.call(void 0, ["route-data", routeDataKey]);
   const cacheOptions = {
     tags: [
@@ -579,7 +583,7 @@ async function resolveProgrammaticRouteData(route, dataHooks, context) {
       ...typeof context.path === "string" ? [context.path] : [],
       ...await resolveProgrammaticRouteDataKeys(dataHooks.paths, context)
     ],
-    revalidate: normalizeProgrammaticRouteStaleTime(dataHooks.staleTime)
+    revalidate
   };
   return _chunkYWN746UScjs.getFarmDataCache.call(void 0, ).getOrSet(cacheKey, () => dataHooks.main(context), cacheOptions);
 }
@@ -590,20 +594,26 @@ async function resolveProgrammaticRouteDataKeys(input, context) {
   return value.filter((item) => typeof item === "string" && item.trim().length > 0);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, resolveProgrammaticRouteDataKeys, "resolveProgrammaticRouteDataKeys");
-function normalizeProgrammaticRouteStaleTime(staleTime) {
+function normalizeProgrammaticRouteStaleTime(staleTime, routePath) {
   if (staleTime === void 0) return void 0;
   if (staleTime === false) return false;
+  let milliseconds;
   if (typeof staleTime === "number") {
-    if (!Number.isFinite(staleTime) || staleTime <= 0) return void 0;
-    return Math.max(1, Math.ceil(staleTime / 1e3));
+    milliseconds = staleTime;
+  } else {
+    const match = typeof staleTime === "string" && staleTime.match(/^(\d+(?:\.\d+)?)(ms|s|m|h)$/);
+    if (!match) {
+      throw new TypeError(
+        `Route "${routePath}" data.staleTime must be milliseconds or a duration like "250ms", "30s", "5m", or "1h".`
+      );
+    }
+    const unit = match[2];
+    milliseconds = Number(match[1]) * (unit === "ms" ? 1 : unit === "s" ? 1e3 : unit === "m" ? 6e4 : 36e5);
+  }
+  if (!Number.isFinite(milliseconds) || milliseconds < 0) {
+    throw new TypeError(`Route "${routePath}" data.staleTime must be a non-negative duration.`);
   }
-  const match = staleTime.match(/^(\d+(?:\.\d+)?)(ms|s|m|h)$/);
-  if (!match) return void 0;
-  const value = Number(match[1]);
-  if (!Number.isFinite(value) || value <= 0) return void 0;
-  const unit = match[2];
-  const milliseconds = unit === "ms" ? value : unit === "s" ? value * 1e3 : unit === "m" ? value * 6e4 : value * 36e5;
-  return Math.max(1, Math.ceil(milliseconds / 1e3));
+  return milliseconds === 0 ? 0 : Math.max(1, Math.ceil(milliseconds / 1e3));
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, normalizeProgrammaticRouteStaleTime, "normalizeProgrammaticRouteStaleTime");
 function isProgrammaticRoutePropsResolved(value) {
@@ -662,6 +672,7 @@ function normalizeProgrammaticRoute(route) {
     };
   }
   const routeActions = route.kind === "page" ? normalizeProgrammaticRouteActions(route) : void 0;
+  normalizeProgrammaticRouteStaleTime(_optionalChain([route, 'access', _11 => _11.data, 'optionalAccess', _12 => _12.staleTime]), route.path);
   return {
     ...route,
     ...routeActions,

package/dist/{chunk-4JHOT46A.mjs → chunk-TPLJVC7E.mjs}

@@ -112,6 +112,82 @@ function isFarmMarkdownPublicSourceResponse(response) {
   return publicSourceResponses.has(response);
 }
 __name(isFarmMarkdownPublicSourceResponse, "isFarmMarkdownPublicSourceResponse");
+var ANONYMOUS_REQUEST_HEADERS = /* @__PURE__ */ new Set([
+  "accept",
+  "accept-encoding",
+  "accept-language",
+  "cache-control",
+  "connection",
+  "dnt",
+  "host",
+  "if-match",
+  "if-modified-since",
+  "if-none-match",
+  "if-range",
+  "if-unmodified-since",
+  "keep-alive",
+  "origin",
+  "pragma",
+  "priority",
+  "purpose",
+  "range",
+  "referer",
+  "save-data",
+  "sec-gpc",
+  "sec-purpose",
+  "te",
+  "traceparent",
+  "tracestate",
+  "upgrade-insecure-requests",
+  "user-agent",
+  "x-forwarded-host",
+  "x-forwarded-port",
+  "x-forwarded-proto",
+  "x-request-id"
+]);
+function isAnonymousRequestHeader(name) {
+  const lower = name.toLowerCase();
+  return ANONYMOUS_REQUEST_HEADERS.has(lower) || lower.startsWith("sec-fetch-") || lower.startsWith("sec-ch-");
+}
+__name(isAnonymousRequestHeader, "isAnonymousRequestHeader");
+var PAGE_CHECK_DROPPED_HEADERS = /* @__PURE__ */ new Set([
+  "accept-encoding",
+  "if-match",
+  "if-modified-since",
+  "if-none-match",
+  "if-range",
+  "if-unmodified-since",
+  "range"
+]);
+async function anonymousVisitorOpensPage(options, url, targetPathname) {
+  const pageUrl = new URL(url);
+  pageUrl.pathname = targetPathname;
+  const headers = new Headers();
+  for (const [name, value] of options.request.headers) {
+    if (!PAGE_CHECK_DROPPED_HEADERS.has(name.toLowerCase())) headers.append(name, value);
+  }
+  headers.set("accept", "text/html");
+  const response = await options.renderPage(
+    new Request(pageUrl, {
+      method: "GET",
+      headers,
+      redirect: "manual",
+      signal: options.request.signal
+    })
+  );
+  void response.body?.cancel().catch(() => {
+  });
+  return response.status >= 200 && response.status < 300 && Boolean(response.headers.get("content-type")?.toLowerCase().includes("text/html"));
+}
+__name(anonymousVisitorOpensPage, "anonymousVisitorOpensPage");
+function hasOnlyAnonymousHeaders(headers) {
+  for (const name of headers.keys()) {
+    if (!isAnonymousRequestHeader(name)) return false;
+  }
+  return true;
+}
+__name(hasOnlyAnonymousHeaders, "hasOnlyAnonymousHeaders");
+var FARM_MARKDOWN_ANONYMOUS_CLIENT_ADDRESS = "192.0.2.1";
 async function createFarmMarkdownSourceResponse(options) {
   if (options.request.method !== "GET" && options.request.method !== "HEAD") {
     return null;
@@ -129,13 +205,14 @@ async function createFarmMarkdownSourceResponse(options) {
   if (!source) {
     return null;
   }
-  const anonymous = !options.request.headers.has("cookie") && !options.request.headers.has("authorization");
+  const anonymous = hasOnlyAnonymousHeaders(options.request.headers) && (!options.clientAddress || options.clientAddress === FARM_MARKDOWN_ANONYMOUS_CLIENT_ADDRESS);
   if (options.renderPage && (hasMarkdownExtension || !anonymous)) {
     const publicUrl = new URL(url);
     publicUrl.pathname = targetPathname;
-    const publicHeaders = new Headers(options.request.headers);
-    publicHeaders.delete("cookie");
-    publicHeaders.delete("authorization");
+    const publicHeaders = new Headers();
+    for (const [name, value] of options.request.headers) {
+      if (isAnonymousRequestHeader(name)) publicHeaders.append(name, value);
+    }
     publicHeaders.set("accept", "text/markdown");
     const publicResponse = await options.renderPage(
       new Request(publicUrl, {
@@ -144,7 +221,7 @@ async function createFarmMarkdownSourceResponse(options) {
         signal: options.request.signal
       })
     );
-    if (publicResponse.headers.get("X-Farm-Markdown-Route") === targetPathname) {
+    if (publicResponse.headers.get("X-Farm-Markdown-Route") === targetPathname && publicResponse.headers.has("X-Farm-Markdown-Source")) {
       publicSourceResponses.add(publicResponse);
       return publicResponse;
     }
@@ -159,6 +236,9 @@ async function createFarmMarkdownSourceResponse(options) {
       }
     });
   }
+  if (options.renderPage && !await anonymousVisitorOpensPage(options, url, targetPathname)) {
+    return null;
+  }
   const headers = new Headers({
     "Content-Type": "text/markdown; charset=utf-8",
     "Content-Location": targetPathname === "/" ? "/index.md" : `${targetPathname}.md`,
@@ -188,5 +268,6 @@ export {
   createMarkdownMetadata,
   createFarmMarkdownRouteModule,
   isFarmMarkdownPublicSourceResponse,
+  FARM_MARKDOWN_ANONYMOUS_CLIENT_ADDRESS,
   createFarmMarkdownSourceResponse
 };

package/dist/{chunk-NRSN7G7E.mjs → chunk-TW4GYDBJ.mjs}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-JM5XPKWH.mjs";
 import {
   getCurrentRequest
-} from "./chunk-FDR64H6B.mjs";
+} from "./chunk-3KGDJLJK.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";

package/dist/{chunk-XBML5KMG.cjs → chunk-U6MPZ35Q.cjs}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkSJNMVDDFcjs = require('./chunk-SJNMVDDF.cjs');
+var _chunkFUCSUGDMcjs = require('./chunk-FUCSUGDM.cjs');
 
 
 var _chunk2CQ74SP6cjs = require('./chunk-2CQ74SP6.cjs');
@@ -17,7 +17,7 @@ var _chunkLYLEZIG3cjs = require('./chunk-LYLEZIG3.cjs');
 
 
 
-var _chunkXCACDAZZcjs = require('./chunk-XCACDAZZ.cjs');
+var _chunkNDILNQ4Lcjs = require('./chunk-NDILNQ4L.cjs');
 
 
 var _chunkWMAPPDMMcjs = require('./chunk-WMAPPDMM.cjs');
@@ -31,7 +31,7 @@ var _chunkSOR334EBcjs = require('./chunk-SOR334EB.cjs');
 
 
 
-var _chunkBMWDEBXOcjs = require('./chunk-BMWDEBXO.cjs');
+var _chunkSHLXACIOcjs = require('./chunk-SHLXACIO.cjs');
 
 
 var _chunk5QIKR7RRcjs = require('./chunk-5QIKR7RR.cjs');
@@ -68,6 +68,15 @@ var _APIRouteManager = class _APIRouteManager {
     this.i18n = options.i18n;
     this.bodySizeLimit = options.bodySizeLimit;
     this.basePath = options.basePath;
+    this.dispatch = options.dispatch;
+  }
+  /** Every file the current handlers were loaded from: route files and root routes files. */
+  getSourceFiles() {
+    const files = /* @__PURE__ */ new Set();
+    for (const sources of this.endpointSources.values()) {
+      for (const { filePath } of sources.values()) files.add(filePath);
+    }
+    return files;
   }
   /**
    * Discover route.ts files in /app/api and explicit endpoints in root routes.ts
@@ -93,8 +102,9 @@ var _APIRouteManager = class _APIRouteManager {
         await this.loadProgrammaticApiRoutes(appDir);
       }
       this.routes = new Map(
-        _chunkXCACDAZZcjs.mergePluginAPIRoutes.call(void 0, [...this.routes.values()], this.plugins, void 0, {
-          bodySizeLimit: this.bodySizeLimit
+        _chunkNDILNQ4Lcjs.mergePluginAPIRoutes.call(void 0, [...this.routes.values()], this.plugins, void 0, {
+          bodySizeLimit: this.bodySizeLimit,
+          dispatch: this.dispatch
         }).map((route) => [route.path, route])
       );
     } catch (error) {
@@ -140,7 +150,7 @@ var _APIRouteManager = class _APIRouteManager {
       const routeModule = await this.loadModule(filePath);
       const endpoints = {};
       const availableMethods = [];
-      for (const method of _chunkXCACDAZZcjs.API_ROUTE_METHODS) {
+      for (const method of _chunkNDILNQ4Lcjs.API_ROUTE_METHODS) {
         if (routeModule[method]) {
           endpoints[method] = routeModule[method];
           availableMethods.push(method);
@@ -210,7 +220,7 @@ var _APIRouteManager = class _APIRouteManager {
   async loadProgrammaticApiRoutes(appDir) {
     const candidateRoots = [path.dirname(appDir), appDir];
     const routeFiles = Array.from(
-      new Set(candidateRoots.flatMap((srcRoot) => _chunkSJNMVDDFcjs.findProgrammaticRouteFilesInDir.call(void 0, srcRoot)))
+      new Set(candidateRoots.flatMap((srcRoot) => _chunkFUCSUGDMcjs.findProgrammaticRouteFilesInDir.call(void 0, srcRoot)))
     );
     if (routeFiles.length === 0) return;
     const { getProgrammaticRouteManifest } = await import("./routes.cjs");
@@ -256,11 +266,11 @@ var _APIRouteManager = class _APIRouteManager {
   }
   async loadModule(filePath) {
     if (this.viteServer) {
-      return await _chunkBMWDEBXOcjs.loadFarmDevModule.call(void 0, this.viteServer, filePath);
+      return await _chunkSHLXACIOcjs.loadFarmDevModule.call(void 0, this.viteServer, filePath);
     }
     return await import(
       /* @vite-ignore */
-      _chunkBMWDEBXOcjs.toFileModuleUrl.call(void 0, filePath)
+      _chunkSHLXACIOcjs.toFileModuleUrl.call(void 0, filePath)
     );
   }
   addEndpoint(routePath, filePath, method, endpoint, appDir, runtimeConfig = {}) {
@@ -322,7 +332,7 @@ var _APIRouteManager = class _APIRouteManager {
       const url = new URL(request.url);
       const pathname = url.pathname;
       const method = request.method.toUpperCase();
-      const match = _chunkXCACDAZZcjs.matchAPIRouteAtBasePath.call(void 0, this.routes, pathname, this.basePath);
+      const match = _chunkNDILNQ4Lcjs.matchAPIRouteAtBasePath.call(void 0, this.routes, pathname, this.basePath);
       if (!match) {
         return new Response(JSON.stringify({ error: "Not Found" }), {
           status: 404,
@@ -330,19 +340,19 @@ var _APIRouteManager = class _APIRouteManager {
         });
       }
       const { route, params } = match;
-      const endpoint = _chunkXCACDAZZcjs.resolveAPIRouteEndpoint.call(void 0, route, method);
+      const endpoint = _chunkNDILNQ4Lcjs.resolveAPIRouteEndpoint.call(void 0, route, method);
       if (!endpoint) {
         return new Response(JSON.stringify({ error: "Method Not Allowed" }), {
           status: 405,
           headers: {
-            Allow: _chunkXCACDAZZcjs.getAllowedAPIRouteMethods.call(void 0, route).join(", "),
+            Allow: _chunkNDILNQ4Lcjs.getAllowedAPIRouteMethods.call(void 0, route).join(", "),
             "Content-Type": "application/json"
           }
         });
       }
       const invoke = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, async () => {
         try {
-          return await _chunkXCACDAZZcjs.invokeAPIRouteEndpoint.call(void 0, endpoint, request, params, this.bodySizeLimit);
+          return await _chunkNDILNQ4Lcjs.invokeAPIRouteEndpoint.call(void 0, endpoint, request, params, this.bodySizeLimit);
         } catch (error) {
           if (options.throwOnError) throw error;
           console.error(`[API Error] ${pathname}:`, error);
@@ -364,7 +374,7 @@ var _APIRouteManager = class _APIRouteManager {
     return Boolean(this.matchRoute(pathname));
   }
   matchRoute(pathname) {
-    return _chunkXCACDAZZcjs.matchAPIRouteAtBasePath.call(void 0, this.routes, pathname, this.basePath);
+    return _chunkNDILNQ4Lcjs.matchAPIRouteAtBasePath.call(void 0, this.routes, pathname, this.basePath);
   }
   /**
    * Get all routes for client type generation