@farm.js/core 0.1.36 → 0.1.38

package/dist/internal/production-runtime.d.mts

@@ -1,24 +1,24 @@
 export { _runWithAfterRequest } from '../after.mjs';
-import { aJ as FarmMCPCatalogDetails, fN as APIRequestRuntime, bT as ResolvedFarmMCPConfig, aE as FarmMCPServerRegistration, fO as FarmLlmsTxtLink, I as FarmConfig, _ as FarmContextFactoryInput } from '../client-plugins-C3mK9Pol.mjs';
-export { fY as FarmLlmsTxtUserConfig, fZ as ResolvedFarmLlmsTxtConfig, g2 as applyFarmCspNonceToResponse, fS as collectFarmLlmsTxtPages, fQ as createFarmAgentRobots, fT as createFarmDefaultLlmsTxt, fR as createFarmDefaultSitemap, fW as createFarmLlmsFullRenderer, fU as createFarmLlmsMarkdownReader, fP as createFarmMetadataRouteResponse, g as getFarmRedirectError, i as isFarmNotFoundError, b as isFarmRedirectError, f_ as manageFarmDocumentPreloads, f$ as manageFarmHtmlPreloads, g0 as manageFarmLinkHeaderPreloads, aI as registerFarmMCPServer, fV as renderFarmLlmsFullTxt, g1 as reportFarmPreloadWarnings, fX as resolveFarmLlmsTxtConfig, g3 as resolveFarmSecurityConfig } from '../client-plugins-C3mK9Pol.mjs';
-export { m as mergeRouteRenderingDirectiveConfig } from '../route-rendering-f11yh5dp.mjs';
+import { aJ as FarmMCPCatalogDetails, cx as ResolvedFarmConfig, dO as FarmIntegrationsUserConfig, fR as APIRequestRuntime, bT as ResolvedFarmMCPConfig, aE as FarmMCPServerRegistration, fS as FarmLlmsTxtLink, I as FarmConfig, _ as FarmContextFactoryInput } from '../client-plugins-DUrIYX9B.mjs';
+export { g0 as FarmLlmsTxtUserConfig, g1 as ResolvedFarmLlmsTxtConfig, g6 as applyFarmCspNonceToResponse, fW as collectFarmLlmsTxtPages, fU as createFarmAgentRobots, g7 as createFarmCspNonce, fX as createFarmDefaultLlmsTxt, fV as createFarmDefaultSitemap, f_ as createFarmLlmsFullRenderer, fY as createFarmLlmsMarkdownReader, fT as createFarmMetadataRouteResponse, g as getFarmRedirectError, i as isFarmNotFoundError, b as isFarmRedirectError, g2 as manageFarmDocumentPreloads, g3 as manageFarmHtmlPreloads, g4 as manageFarmLinkHeaderPreloads, aI as registerFarmMCPServer, fZ as renderFarmLlmsFullTxt, g5 as reportFarmPreloadWarnings, f$ as resolveFarmLlmsTxtConfig, g8 as resolveFarmSecurityConfig, g9 as stampFarmCspNonce } from '../client-plugins-DUrIYX9B.mjs';
+export { m as mergeRouteRenderingDirectiveConfig } from '../route-rendering-CSBF78Ya.mjs';
 import { R as ResolvedFarmServerConfig } from '../workflows-jZ4BcdoZ.mjs';
 export { a as FarmServerConfig, y as bufferFarmRequestBody, z as cloneFarmRequestWithContext, A as createFarmNodeRequestAbortSignal, B as createFarmRequestBodyErrorResponse, C as matchesFarmIfNoneMatch, E as readFarmRequestBody, G as readNodeRequestBody, H as resolveFarmServerConfig } from '../workflows-jZ4BcdoZ.mjs';
-export { _ as _getRequestReadCount, a as _runWithCurrentRequest, g as getCurrentRequest, r as resolveFarmWebRequestOrigin } from '../request-CsGARcAw.mjs';
+export { _ as _getRequestReadCount, a as _runWithCurrentRequest, b as _runWithFarmCspNonce, g as getCurrentRequest, r as resolveFarmWebRequestOrigin } from '../request-DgCkIdcn.mjs';
 export { configureFarmCache, createFarmCacheKey, getFarmDataCache, normalizeRevalidatePath } from '../cache.mjs';
 import { k as FarmI18nUserConfig, R as ResolvedFarmI18nConfig } from '../types-CnH8DOqo.mjs';
 export { c as createFarmLocaleCookie, g as getFarmLocaleVaryHeaders } from '../resolver-khasx3fU.mjs';
 import { F as FarmLocalePathConfig } from '../index-BJJfLxJo.mjs';
 export { l as localizeFarmHref, a as localizeFarmPathname, s as stripFarmLocaleFromPathname } from '../index-BJJfLxJo.mjs';
-import { F as FarmDefaultMCPPage } from '../agent-mcp-BVExL8rZ.mjs';
-export { a as addMetadataImageReference, b as addMetadataMarkdownAlternate, g as collectFarmDefaultMCPPages, m as mergeMetadata, d as mergeModuleViewport, r as renderMetadataHead, e as renderViewportHead, h as resolveFarmDefaultMCPServer, f as resolveFarmNotFoundMetadata } from '../agent-mcp-BVExL8rZ.mjs';
-export { _ as _runWithMiddlewareContext, c as _runWithMiddlewareData, e as applyProductionMiddlewareHeaders, d as createProductionMiddlewareRunner } from '../production-runtime-CCeVZXst.mjs';
+import { F as FarmDefaultMCPPage } from '../agent-mcp-BwKlpnc7.mjs';
+export { a as addMetadataImageReference, b as addMetadataMarkdownAlternate, g as collectFarmDefaultMCPPages, m as mergeMetadata, d as mergeModuleViewport, r as renderMetadataHead, e as renderViewportHead, h as resolveFarmDefaultMCPServer, f as resolveFarmNotFoundMetadata } from '../agent-mcp-BwKlpnc7.mjs';
+export { _ as _runWithMiddlewareContext, c as _runWithMiddlewareData, e as applyProductionMiddlewareHeaders, d as createProductionMiddlewareRunner } from '../production-runtime-BQ4_WLwQ.mjs';
 export { L as configureFarmObservability, P as emitFarmEvent, Q as runWithFarmRequestSpan } from '../observability-CoXunYhS.mjs';
 export { f as createFarmInstrumentationLifecycle, r as resolveFarmInstrumentationRuntime } from '../instrumentation-runtime-CE06JLHZ.mjs';
 export { _setDefaultFarmThemeConfig, getTheme } from '../theme/server.mjs';
 import { c as FarmThemeRuntime, d as FarmThemeConfig, R as ResolvedFarmThemeConfig, a as FarmThemePreference } from '../types-DQnyD3VD.mjs';
 export { d as applyFarmBasePath, r as resolveFarmTrailingSlashRedirect, s as searchParamsToObject, b as setFarmBasePath, a as setFarmTrailingSlashPreference, c as stripFarmBasePath } from '../base-path-BU16ETmo.mjs';
-export { m as matchFarmPageRoute, p as parseRoutePath } from '../utils-B9V0S_yL.mjs';
+export { m as matchFarmPageRoute, p as parseRoutePath } from '../utils-DZciYXYl.mjs';
 import 'node:http';
 import '../lifecycle-DK06VuKP.mjs';
 import '../integration-api-0y4FXJpC.mjs';
@@ -149,6 +149,12 @@ interface FarmAppManifestInput {
         version: string;
         path: string;
     } | undefined;
+    /**
+     * Whether a guard written for a path (middleware, an integration's `protectedRoutes`)
+     * covers an MCP server's endpoint. Set by the server at runtime: such a server is listed
+     * as requiring authorization, without its tools, resources or prompts, in the public view.
+     */
+    guardCoversPath?: (path: string) => boolean;
 }
 type Env = Record<string, string | undefined>;
 /**
@@ -160,6 +166,37 @@ declare function createFarmAppManifestResponse(request: Request, input: FarmAppM
     env?: Env;
 }): Promise<Response>;
 
+/**
+ * Whether a guard written for this page's path covers it: middleware.ts in the page's
+ * folder or a parent below the root, a config middleware matcher, or an integration's
+ * middleware matcher (`protectedRoutes`). Public listings (sitemap.xml, llms.txt, the
+ * default MCP server) leave such a page out, so its path and title stay unpublished.
+ *
+ * Guards that cover every path (a root middleware.ts, middleware without a matcher or
+ * with a catch-all or function matcher, a plugin's `runtime.before`) name no page, so
+ * they hide nothing: the listings would otherwise be empty. Their pages are still read
+ * as an anonymous visitor, so a guard there keeps the content itself private.
+ *
+ * @internal
+ */
+declare function farmPathGuardCoversPage(options: {
+    config: {
+        middleware?: ResolvedFarmConfig["middleware"];
+        integrations?: FarmIntegrationsUserConfig;
+    };
+    middlewareRoutes: readonly {
+        path: string;
+    }[];
+}, pathname: string): boolean;
+/**
+ * {@link farmPathGuardCoversPage} for an endpoint served under `/api`, such as an
+ * `apiMcp()` server: a guard written for either the `/api` route or its public
+ * `api.basePath` form covers it.
+ *
+ * @internal
+ */
+declare function farmPathGuardCoversEndpoint(options: Parameters<typeof farmPathGuardCoversPage>[0], path: string, apiServerBasePath?: string): boolean;
+
 /**
  * Compare a caller-supplied secret against the configured one without leaking
  * how much of it matched.
@@ -244,9 +281,12 @@ declare function resolveFarmPreviewDeployment(env: FarmDeploymentEnv | undefined
 declare function applyFarmPreviewRobotsTag(response: Response): Response;
 
 /** Empty when the target is not an http(s) URL; the page then stays as rendered. */
-declare function createLateRedirectRecovery(url: string): string;
+declare function createLateRedirectRecovery(url: string, nonce?: string): string;
 /** `content` is the rendered not-found markup (the app's not-found page or the built-in one). */
-declare function createLateNotFoundRecovery(content: string): string;
+declare function createLateNotFoundRecovery(content: string, nonce?: string): string;
+
+/** The CSP nonce of the response being rendered, when `security.csp.nonce` is on. */
+declare function _resolveCurrentCspNonce(): string | undefined;
 
 /** Bind the owning app's live route dispatcher, never a process-wide route table. */
 declare function _runWithAPIRequestRuntime<T>(runtime: APIRequestRuntime, run: () => T): T;
@@ -464,4 +504,4 @@ declare function appendFarmRedirectQuery(destination: string, search: string): s
 
 declare function appendFarmLinkHeader(headers: Headers, value: string): void;
 
-export { _isFarmOwnedResponse, _markFarmOwnedResponse, _runWithAPIRequestRuntime, _withFarmResponseHeaders, appendFarmLinkHeader, appendFarmRedirectQuery, applyFarmPreviewRobotsTag, applyFarmThemeDocument, compareRouteSpecificity, createDefaultErrorMarkup, createFarmAiCatalogResponse, createFarmApiCatalogResponse, createFarmAppManifestResponse, createFarmLayoutSelector, createFarmLegacyRequest, createFarmProductionLifecycle, createFarmThemeDocumentParts, createLateNotFoundRecovery, createLateRedirectRecovery, ensureFarmDocumentMeta, farmSecretsMatch, generateNativeMCPPluginSource, getDefaultErrorStatusText, getRoutePatternSpecificity, handleFarmDefaultMCPRequest, isInRouteGroupScope as isInFarmRouteGroupScope, listFarmMCPLlmsTxtLinks, renderFarmLegacyErrorHtml, renderFarmLegacyHtml, renderFarmLocaleAlternateLinks, resolveDefaultErrorStatus, resolveFarmI18nConfig, resolveFarmPreviewDeployment, resolveFarmRouteContext, serializeFarmInlineValue, withFarmRouteContext };
+export { _isFarmOwnedResponse, _markFarmOwnedResponse, _resolveCurrentCspNonce, _runWithAPIRequestRuntime, _withFarmResponseHeaders, appendFarmLinkHeader, appendFarmRedirectQuery, applyFarmPreviewRobotsTag, applyFarmThemeDocument, compareRouteSpecificity, createDefaultErrorMarkup, createFarmAiCatalogResponse, createFarmApiCatalogResponse, createFarmAppManifestResponse, createFarmLayoutSelector, createFarmLegacyRequest, createFarmProductionLifecycle, createFarmThemeDocumentParts, createLateNotFoundRecovery, createLateRedirectRecovery, ensureFarmDocumentMeta, farmPathGuardCoversEndpoint, farmSecretsMatch, generateNativeMCPPluginSource, getDefaultErrorStatusText, getRoutePatternSpecificity, handleFarmDefaultMCPRequest, isInRouteGroupScope as isInFarmRouteGroupScope, listFarmMCPLlmsTxtLinks, renderFarmLegacyErrorHtml, renderFarmLegacyHtml, renderFarmLocaleAlternateLinks, resolveDefaultErrorStatus, resolveFarmI18nConfig, resolveFarmPreviewDeployment, resolveFarmRouteContext, serializeFarmInlineValue, withFarmRouteContext };

package/dist/internal/production-runtime.d.ts

@@ -1,24 +1,24 @@
 export { _runWithAfterRequest } from '../after.js';
-import { aJ as FarmMCPCatalogDetails, fN as APIRequestRuntime, bT as ResolvedFarmMCPConfig, aE as FarmMCPServerRegistration, fO as FarmLlmsTxtLink, I as FarmConfig, _ as FarmContextFactoryInput } from '../client-plugins-r1mOtSC1.js';
-export { fY as FarmLlmsTxtUserConfig, fZ as ResolvedFarmLlmsTxtConfig, g2 as applyFarmCspNonceToResponse, fS as collectFarmLlmsTxtPages, fQ as createFarmAgentRobots, fT as createFarmDefaultLlmsTxt, fR as createFarmDefaultSitemap, fW as createFarmLlmsFullRenderer, fU as createFarmLlmsMarkdownReader, fP as createFarmMetadataRouteResponse, g as getFarmRedirectError, i as isFarmNotFoundError, b as isFarmRedirectError, f_ as manageFarmDocumentPreloads, f$ as manageFarmHtmlPreloads, g0 as manageFarmLinkHeaderPreloads, aI as registerFarmMCPServer, fV as renderFarmLlmsFullTxt, g1 as reportFarmPreloadWarnings, fX as resolveFarmLlmsTxtConfig, g3 as resolveFarmSecurityConfig } from '../client-plugins-r1mOtSC1.js';
-export { m as mergeRouteRenderingDirectiveConfig } from '../route-rendering-BUZMH_64.js';
+import { aJ as FarmMCPCatalogDetails, cx as ResolvedFarmConfig, dO as FarmIntegrationsUserConfig, fR as APIRequestRuntime, bT as ResolvedFarmMCPConfig, aE as FarmMCPServerRegistration, fS as FarmLlmsTxtLink, I as FarmConfig, _ as FarmContextFactoryInput } from '../client-plugins-BvlNhGEB.js';
+export { g0 as FarmLlmsTxtUserConfig, g1 as ResolvedFarmLlmsTxtConfig, g6 as applyFarmCspNonceToResponse, fW as collectFarmLlmsTxtPages, fU as createFarmAgentRobots, g7 as createFarmCspNonce, fX as createFarmDefaultLlmsTxt, fV as createFarmDefaultSitemap, f_ as createFarmLlmsFullRenderer, fY as createFarmLlmsMarkdownReader, fT as createFarmMetadataRouteResponse, g as getFarmRedirectError, i as isFarmNotFoundError, b as isFarmRedirectError, g2 as manageFarmDocumentPreloads, g3 as manageFarmHtmlPreloads, g4 as manageFarmLinkHeaderPreloads, aI as registerFarmMCPServer, fZ as renderFarmLlmsFullTxt, g5 as reportFarmPreloadWarnings, f$ as resolveFarmLlmsTxtConfig, g8 as resolveFarmSecurityConfig, g9 as stampFarmCspNonce } from '../client-plugins-BvlNhGEB.js';
+export { m as mergeRouteRenderingDirectiveConfig } from '../route-rendering-Bji6S6a_.js';
 import { R as ResolvedFarmServerConfig } from '../workflows-jZ4BcdoZ.js';
 export { a as FarmServerConfig, y as bufferFarmRequestBody, z as cloneFarmRequestWithContext, A as createFarmNodeRequestAbortSignal, B as createFarmRequestBodyErrorResponse, C as matchesFarmIfNoneMatch, E as readFarmRequestBody, G as readNodeRequestBody, H as resolveFarmServerConfig } from '../workflows-jZ4BcdoZ.js';
-export { _ as _getRequestReadCount, a as _runWithCurrentRequest, g as getCurrentRequest, r as resolveFarmWebRequestOrigin } from '../request-Bkg-hERy.js';
+export { _ as _getRequestReadCount, a as _runWithCurrentRequest, b as _runWithFarmCspNonce, g as getCurrentRequest, r as resolveFarmWebRequestOrigin } from '../request-jF4jwx8f.js';
 export { configureFarmCache, createFarmCacheKey, getFarmDataCache, normalizeRevalidatePath } from '../cache.js';
 import { k as FarmI18nUserConfig, R as ResolvedFarmI18nConfig } from '../types-CnH8DOqo.js';
 export { c as createFarmLocaleCookie, g as getFarmLocaleVaryHeaders } from '../resolver-DadfRL6F.js';
 import { F as FarmLocalePathConfig } from '../index-CwoOP-MW.js';
 export { l as localizeFarmHref, a as localizeFarmPathname, s as stripFarmLocaleFromPathname } from '../index-CwoOP-MW.js';
-import { F as FarmDefaultMCPPage } from '../agent-mcp-luzfXK-P.js';
-export { a as addMetadataImageReference, b as addMetadataMarkdownAlternate, g as collectFarmDefaultMCPPages, m as mergeMetadata, d as mergeModuleViewport, r as renderMetadataHead, e as renderViewportHead, h as resolveFarmDefaultMCPServer, f as resolveFarmNotFoundMetadata } from '../agent-mcp-luzfXK-P.js';
-export { _ as _runWithMiddlewareContext, c as _runWithMiddlewareData, e as applyProductionMiddlewareHeaders, d as createProductionMiddlewareRunner } from '../production-runtime-DPnsggY3.js';
+import { F as FarmDefaultMCPPage } from '../agent-mcp-De1imoMS.js';
+export { a as addMetadataImageReference, b as addMetadataMarkdownAlternate, g as collectFarmDefaultMCPPages, m as mergeMetadata, d as mergeModuleViewport, r as renderMetadataHead, e as renderViewportHead, h as resolveFarmDefaultMCPServer, f as resolveFarmNotFoundMetadata } from '../agent-mcp-De1imoMS.js';
+export { _ as _runWithMiddlewareContext, c as _runWithMiddlewareData, e as applyProductionMiddlewareHeaders, d as createProductionMiddlewareRunner } from '../production-runtime-D2aMyzjr.js';
 export { L as configureFarmObservability, P as emitFarmEvent, Q as runWithFarmRequestSpan } from '../observability-CoXunYhS.js';
 export { f as createFarmInstrumentationLifecycle, r as resolveFarmInstrumentationRuntime } from '../instrumentation-runtime-CE06JLHZ.js';
 export { _setDefaultFarmThemeConfig, getTheme } from '../theme/server.js';
 import { c as FarmThemeRuntime, d as FarmThemeConfig, R as ResolvedFarmThemeConfig, a as FarmThemePreference } from '../types-DQnyD3VD.js';
 export { d as applyFarmBasePath, r as resolveFarmTrailingSlashRedirect, s as searchParamsToObject, b as setFarmBasePath, a as setFarmTrailingSlashPreference, c as stripFarmBasePath } from '../base-path-BU16ETmo.js';
-export { m as matchFarmPageRoute, p as parseRoutePath } from '../utils-CaoWKtYM.js';
+export { m as matchFarmPageRoute, p as parseRoutePath } from '../utils-BNxAKAuT.js';
 import 'node:http';
 import '../lifecycle-DK06VuKP.js';
 import '../integration-api-BPJo5oXb.js';
@@ -149,6 +149,12 @@ interface FarmAppManifestInput {
         version: string;
         path: string;
     } | undefined;
+    /**
+     * Whether a guard written for a path (middleware, an integration's `protectedRoutes`)
+     * covers an MCP server's endpoint. Set by the server at runtime: such a server is listed
+     * as requiring authorization, without its tools, resources or prompts, in the public view.
+     */
+    guardCoversPath?: (path: string) => boolean;
 }
 type Env = Record<string, string | undefined>;
 /**
@@ -160,6 +166,37 @@ declare function createFarmAppManifestResponse(request: Request, input: FarmAppM
     env?: Env;
 }): Promise<Response>;
 
+/**
+ * Whether a guard written for this page's path covers it: middleware.ts in the page's
+ * folder or a parent below the root, a config middleware matcher, or an integration's
+ * middleware matcher (`protectedRoutes`). Public listings (sitemap.xml, llms.txt, the
+ * default MCP server) leave such a page out, so its path and title stay unpublished.
+ *
+ * Guards that cover every path (a root middleware.ts, middleware without a matcher or
+ * with a catch-all or function matcher, a plugin's `runtime.before`) name no page, so
+ * they hide nothing: the listings would otherwise be empty. Their pages are still read
+ * as an anonymous visitor, so a guard there keeps the content itself private.
+ *
+ * @internal
+ */
+declare function farmPathGuardCoversPage(options: {
+    config: {
+        middleware?: ResolvedFarmConfig["middleware"];
+        integrations?: FarmIntegrationsUserConfig;
+    };
+    middlewareRoutes: readonly {
+        path: string;
+    }[];
+}, pathname: string): boolean;
+/**
+ * {@link farmPathGuardCoversPage} for an endpoint served under `/api`, such as an
+ * `apiMcp()` server: a guard written for either the `/api` route or its public
+ * `api.basePath` form covers it.
+ *
+ * @internal
+ */
+declare function farmPathGuardCoversEndpoint(options: Parameters<typeof farmPathGuardCoversPage>[0], path: string, apiServerBasePath?: string): boolean;
+
 /**
  * Compare a caller-supplied secret against the configured one without leaking
  * how much of it matched.
@@ -244,9 +281,12 @@ declare function resolveFarmPreviewDeployment(env: FarmDeploymentEnv | undefined
 declare function applyFarmPreviewRobotsTag(response: Response): Response;
 
 /** Empty when the target is not an http(s) URL; the page then stays as rendered. */
-declare function createLateRedirectRecovery(url: string): string;
+declare function createLateRedirectRecovery(url: string, nonce?: string): string;
 /** `content` is the rendered not-found markup (the app's not-found page or the built-in one). */
-declare function createLateNotFoundRecovery(content: string): string;
+declare function createLateNotFoundRecovery(content: string, nonce?: string): string;
+
+/** The CSP nonce of the response being rendered, when `security.csp.nonce` is on. */
+declare function _resolveCurrentCspNonce(): string | undefined;
 
 /** Bind the owning app's live route dispatcher, never a process-wide route table. */
 declare function _runWithAPIRequestRuntime<T>(runtime: APIRequestRuntime, run: () => T): T;
@@ -464,4 +504,4 @@ declare function appendFarmRedirectQuery(destination: string, search: string): s
 
 declare function appendFarmLinkHeader(headers: Headers, value: string): void;
 
-export { _isFarmOwnedResponse, _markFarmOwnedResponse, _runWithAPIRequestRuntime, _withFarmResponseHeaders, appendFarmLinkHeader, appendFarmRedirectQuery, applyFarmPreviewRobotsTag, applyFarmThemeDocument, compareRouteSpecificity, createDefaultErrorMarkup, createFarmAiCatalogResponse, createFarmApiCatalogResponse, createFarmAppManifestResponse, createFarmLayoutSelector, createFarmLegacyRequest, createFarmProductionLifecycle, createFarmThemeDocumentParts, createLateNotFoundRecovery, createLateRedirectRecovery, ensureFarmDocumentMeta, farmSecretsMatch, generateNativeMCPPluginSource, getDefaultErrorStatusText, getRoutePatternSpecificity, handleFarmDefaultMCPRequest, isInRouteGroupScope as isInFarmRouteGroupScope, listFarmMCPLlmsTxtLinks, renderFarmLegacyErrorHtml, renderFarmLegacyHtml, renderFarmLocaleAlternateLinks, resolveDefaultErrorStatus, resolveFarmI18nConfig, resolveFarmPreviewDeployment, resolveFarmRouteContext, serializeFarmInlineValue, withFarmRouteContext };
+export { _isFarmOwnedResponse, _markFarmOwnedResponse, _resolveCurrentCspNonce, _runWithAPIRequestRuntime, _withFarmResponseHeaders, appendFarmLinkHeader, appendFarmRedirectQuery, applyFarmPreviewRobotsTag, applyFarmThemeDocument, compareRouteSpecificity, createDefaultErrorMarkup, createFarmAiCatalogResponse, createFarmApiCatalogResponse, createFarmAppManifestResponse, createFarmLayoutSelector, createFarmLegacyRequest, createFarmProductionLifecycle, createFarmThemeDocumentParts, createLateNotFoundRecovery, createLateRedirectRecovery, ensureFarmDocumentMeta, farmPathGuardCoversEndpoint, farmSecretsMatch, generateNativeMCPPluginSource, getDefaultErrorStatusText, getRoutePatternSpecificity, handleFarmDefaultMCPRequest, isInRouteGroupScope as isInFarmRouteGroupScope, listFarmMCPLlmsTxtLinks, renderFarmLegacyErrorHtml, renderFarmLegacyHtml, renderFarmLocaleAlternateLinks, resolveDefaultErrorStatus, resolveFarmI18nConfig, resolveFarmPreviewDeployment, resolveFarmRouteContext, serializeFarmInlineValue, withFarmRouteContext };

package/dist/internal/production-runtime.mjs

@@ -1,23 +1,19 @@
 import {
   handleFarmDefaultMCPRequest
-} from "../chunk-6SJ2KJTA.mjs";
+} from "../chunk-EPYU2EBL.mjs";
 import {
+  createFarmLayoutSelector,
   generateNativeMCPPluginSource
-} from "../chunk-FXEF4PPL.mjs";
+} from "../chunk-TYMMBFN2.mjs";
 import {
   applyProductionMiddlewareHeaders,
   createProductionMiddlewareRunner
-} from "../chunk-OTC5BDGO.mjs";
+} from "../chunk-KHKLMNI5.mjs";
 import {
   createFarmInstrumentationLifecycle,
   resolveFarmInstrumentationRuntime
 } from "../chunk-H77NVNJ2.mjs";
-import {
-  matchSegmentParts,
-  normalizePathname,
-  parseRoutePattern,
-  splitNormalizedPathname
-} from "../chunk-OT6ZEW74.mjs";
+import "../chunk-OT6ZEW74.mjs";
 import {
   applyFarmThemeDocument,
   createDefaultErrorMarkup,
@@ -29,17 +25,17 @@ import {
   createLateNotFoundRecovery,
   createLateRedirectRecovery,
   ensureFarmDocumentMeta,
+  farmPathGuardCoversEndpoint,
   getDefaultErrorStatusText,
-  getRouteGroupScope,
   isInRouteGroupScope,
   listFarmMCPLlmsTxtLinks,
   renderFarmLocaleAlternateLinks,
   resolveDefaultErrorStatus
-} from "../chunk-LSZAVSGY.mjs";
+} from "../chunk-B6G5CKMC.mjs";
 import {
   collectFarmDefaultMCPPages,
   resolveFarmDefaultMCPServer
-} from "../chunk-UH6QN5NL.mjs";
+} from "../chunk-P664ZVTV.mjs";
 import {
   mergeRouteRenderingDirectiveConfig
 } from "../chunk-DAO7JGTS.mjs";
@@ -50,18 +46,16 @@ import "../chunk-XAXTTBUT.mjs";
 import {
   _setDefaultFarmThemeConfig,
   getTheme
-} from "../chunk-2ELDTQRN.mjs";
+} from "../chunk-CUM5NYL5.mjs";
 import {
-  applyFarmCspNonceToResponse,
   applyFarmPreviewRobotsTag,
   createFarmAgentRobots,
   createFarmDefaultSitemap,
   manageFarmDocumentPreloads,
   manageFarmHtmlPreloads,
   manageFarmLinkHeaderPreloads,
-  reportFarmPreloadWarnings,
-  resolveFarmSecurityConfig
-} from "../chunk-4E5WBPEG.mjs";
+  reportFarmPreloadWarnings
+} from "../chunk-WFRT7JPX.mjs";
 import {
   collectFarmLlmsTxtPages,
   createFarmDefaultLlmsTxt,
@@ -69,8 +63,14 @@ import {
   createFarmLlmsMarkdownReader,
   renderFarmLlmsFullTxt,
   resolveFarmLlmsTxtConfig
-} from "../chunk-DTSROJ5J.mjs";
-import "../chunk-WWIKMBRN.mjs";
+} from "../chunk-HD5CF3OE.mjs";
+import {
+  applyFarmCspNonceToResponse,
+  createFarmCspNonce,
+  resolveFarmSecurityConfig,
+  stampFarmCspNonce
+} from "../chunk-U6QLDL3G.mjs";
+import "../chunk-VNGH5MLF.mjs";
 import "../chunk-MVL2RAJW.mjs";
 import {
   farmSecretsMatch
@@ -80,11 +80,13 @@ import {
   resolveFarmRouteContext,
   withFarmRouteContext
 } from "../chunk-SEJ5N6SL.mjs";
+import "../chunk-IBUQWVYA.mjs";
+import "../chunk-44SYJEG3.mjs";
 import {
   _runWithMiddlewareContext,
   _runWithMiddlewareData
-} from "../chunk-2NNMOPDN.mjs";
-import "../chunk-JG6DJF5A.mjs";
+} from "../chunk-SKVTP5PR.mjs";
+import "../chunk-HZFM2LWQ.mjs";
 import {
   _runWithAPIRequestRuntime
 } from "../chunk-R3DS7A2T.mjs";
@@ -100,6 +102,8 @@ import {
   getFarmDataCache,
   normalizeRevalidatePath
 } from "../chunk-MSSFIQGM.mjs";
+import "../chunk-FZ6YYU2W.mjs";
+import "../chunk-FP2INE7H.mjs";
 import {
   bufferFarmRequestBody,
   cloneFarmRequestWithContext,
@@ -125,13 +129,15 @@ import {
   emitFarmEvent,
   runWithFarmRequestSpan
 } from "../chunk-FUZEBRP3.mjs";
+import "../chunk-Z2RZJZIZ.mjs";
 import "../chunk-BTHHUD7Q.mjs";
-import "../chunk-OO7GXVSR.mjs";
+import "../chunk-LI2F57NI.mjs";
 import {
   resolveFarmTrailingSlashRedirect,
   setFarmTrailingSlashPreference
 } from "../chunk-54UPOYFS.mjs";
 import "../chunk-WNSDDRNU.mjs";
+import "../chunk-JPLUGGRV.mjs";
 import "../chunk-G4MWPDSE.mjs";
 import "../chunk-O7BH5O46.mjs";
 import "../chunk-7LTCDQRS.mjs";
@@ -158,6 +164,7 @@ import "../chunk-4SIYUGRY.mjs";
 import {
   appendFarmRedirectQuery
 } from "../chunk-BRYHOB4X.mjs";
+import "../chunk-SAXPH6G5.mjs";
 import {
   _isFarmOwnedResponse,
   _markFarmOwnedResponse,
@@ -171,11 +178,14 @@ import {
 import {
   _getRequestReadCount,
   _runWithCurrentRequest,
+  _runWithFarmCspNonce,
   getCurrentRequest,
   resolveFarmWebRequestOrigin
-} from "../chunk-FDR64H6B.mjs";
+} from "../chunk-POSPE3IO.mjs";
 import "../chunk-CQ6OSQ3K.mjs";
-import "../chunk-IZY3V5XW.mjs";
+import {
+  _resolveCurrentCspNonce
+} from "../chunk-QRKIMN7T.mjs";
 import {
   localizeFarmHref,
   localizeFarmPathname,
@@ -194,36 +204,6 @@ import {
   __name
 } from "../chunk-LPEX4YW6.mjs";
 
-// src/routing/layout-selector.ts
-function createFarmLayoutSelector(layouts, resolveRouteDirectory) {
-  const prepared = layouts.map((layout) => {
-    const segments = layout.pattern === "/" ? [] : parseRoutePattern(layout.pattern);
-    return {
-      layout,
-      segments: segments.length === 0 ? null : segments,
-      groupScope: getRouteGroupScope(layout.pattern)
-    };
-  });
-  return (pathname, routeDirectory) => {
-    const applicable = [];
-    let parts;
-    let directory = routeDirectory;
-    for (const { layout, segments, groupScope } of prepared) {
-      if (segments !== null) {
-        parts ?? (parts = splitNormalizedPathname(normalizePathname(pathname.replace(/\/$/, "") || "/")));
-        if (matchSegmentParts(segments, parts, true) === null) continue;
-      }
-      if (groupScope !== null) {
-        if (directory === void 0) directory = resolveRouteDirectory?.(pathname) ?? null;
-        if (!isInRouteGroupScope(directory, groupScope)) continue;
-      }
-      applicable.push(layout);
-    }
-    return applicable;
-  };
-}
-__name(createFarmLayoutSelector, "createFarmLayoutSelector");
-
 // src/production-lifecycle.ts
 function createFarmProductionLifecycle(options) {
   let state = "starting";
@@ -526,9 +506,11 @@ export {
   _getRequestReadCount,
   _isFarmOwnedResponse,
   _markFarmOwnedResponse,
+  _resolveCurrentCspNonce,
   _runWithAPIRequestRuntime,
   _runWithAfterRequest,
   _runWithCurrentRequest,
+  _runWithFarmCspNonce,
   _runWithMiddlewareContext,
   _runWithMiddlewareData,
   _setDefaultFarmThemeConfig,
@@ -555,6 +537,7 @@ export {
   createFarmApiCatalogResponse,
   createFarmAppManifestResponse,
   createFarmCacheKey,
+  createFarmCspNonce,
   createFarmDefaultLlmsTxt,
   createFarmDefaultSitemap,
   createFarmInstrumentationLifecycle,
@@ -573,6 +556,7 @@ export {
   createProductionMiddlewareRunner,
   emitFarmEvent,
   ensureFarmDocumentMeta,
+  farmPathGuardCoversEndpoint,
   farmSecretsMatch,
   generateNativeMCPPluginSource,
   getCurrentRequest,
@@ -626,6 +610,7 @@ export {
   serializeFarmInlineValue,
   setFarmBasePath,
   setFarmTrailingSlashPreference,
+  stampFarmCspNonce,
   stripFarmBasePath,
   stripFarmLocaleFromPathname,
   withFarmRouteContext

package/dist/markdown.cjs

@@ -14,7 +14,10 @@
 
 
 
-var _chunkEUV4YR3Vcjs = require('./chunk-EUV4YR3V.cjs');
+
+
+
+var _chunkSGBJ247Qcjs = require('./chunk-SGBJ247Q.cjs');
 require('./chunk-J63ZH5OQ.cjs');
 require('./chunk-75RZHGLS.cjs');
 require('./chunk-E3UK5IIB.cjs');
@@ -41,4 +44,7 @@ require('./chunk-S3JO3N4H.cjs');
 
 
 
-exports.FARM_MARKDOWN_CONTENT_TYPE = _chunkEUV4YR3Vcjs.FARM_MARKDOWN_CONTENT_TYPE; exports.applyMarkdownNegotiationHeaders = _chunkEUV4YR3Vcjs.applyMarkdownNegotiationHeaders; exports.createFarmMarkdownErrorBody = _chunkEUV4YR3Vcjs.createFarmMarkdownErrorBody; exports.createMarkdownMirrorResponse = _chunkEUV4YR3Vcjs.createMarkdownMirrorResponse; exports.extractFarmPageActions = _chunkEUV4YR3Vcjs.extractFarmPageActions; exports.farmAcceptQuality = _chunkEUV4YR3Vcjs.farmAcceptQuality; exports.farmRequestWantsMarkdown = _chunkEUV4YR3Vcjs.farmRequestWantsMarkdown; exports.getFarmMarkdownAlternatePath = _chunkEUV4YR3Vcjs.getFarmMarkdownAlternatePath; exports.getFarmMarkdownMirrorPath = _chunkEUV4YR3Vcjs.getFarmMarkdownMirrorPath; exports.htmlToMarkdown = _chunkEUV4YR3Vcjs.htmlToMarkdown; exports.isFarmMarkdownMirrorExposed = _chunkEUV4YR3Vcjs.isFarmMarkdownMirrorExposed; exports.matchesFarmMarkdownRoutePattern = _chunkEUV4YR3Vcjs.matchesFarmMarkdownRoutePattern; exports.requestAcceptsMarkdown = _chunkEUV4YR3Vcjs.requestAcceptsMarkdown; exports.resolveMarkdownConfig = _chunkEUV4YR3Vcjs.resolveMarkdownConfig; exports.resolveMarkdownMirrorTarget = _chunkEUV4YR3Vcjs.resolveMarkdownMirrorTarget;
+
+
+
+exports.FARM_MARKDOWN_CONTENT_TYPE = _chunkSGBJ247Qcjs.FARM_MARKDOWN_CONTENT_TYPE; exports.FARM_MARKDOWN_PAGE_CHECK_HEADER = _chunkSGBJ247Qcjs.FARM_MARKDOWN_PAGE_CHECK_HEADER; exports._getFarmMarkdownPageCheckToken = _chunkSGBJ247Qcjs._getFarmMarkdownPageCheckToken; exports._isFarmMarkdownPageCheck = _chunkSGBJ247Qcjs._isFarmMarkdownPageCheck; exports.applyMarkdownNegotiationHeaders = _chunkSGBJ247Qcjs.applyMarkdownNegotiationHeaders; exports.createFarmMarkdownErrorBody = _chunkSGBJ247Qcjs.createFarmMarkdownErrorBody; exports.createMarkdownMirrorResponse = _chunkSGBJ247Qcjs.createMarkdownMirrorResponse; exports.extractFarmPageActions = _chunkSGBJ247Qcjs.extractFarmPageActions; exports.farmAcceptQuality = _chunkSGBJ247Qcjs.farmAcceptQuality; exports.farmRequestWantsMarkdown = _chunkSGBJ247Qcjs.farmRequestWantsMarkdown; exports.getFarmMarkdownAlternatePath = _chunkSGBJ247Qcjs.getFarmMarkdownAlternatePath; exports.getFarmMarkdownMirrorPath = _chunkSGBJ247Qcjs.getFarmMarkdownMirrorPath; exports.htmlToMarkdown = _chunkSGBJ247Qcjs.htmlToMarkdown; exports.isFarmMarkdownMirrorExposed = _chunkSGBJ247Qcjs.isFarmMarkdownMirrorExposed; exports.matchesFarmMarkdownRoutePattern = _chunkSGBJ247Qcjs.matchesFarmMarkdownRoutePattern; exports.requestAcceptsMarkdown = _chunkSGBJ247Qcjs.requestAcceptsMarkdown; exports.resolveMarkdownConfig = _chunkSGBJ247Qcjs.resolveMarkdownConfig; exports.resolveMarkdownMirrorTarget = _chunkSGBJ247Qcjs.resolveMarkdownMirrorTarget;

package/dist/markdown.d.mts

@@ -1,4 +1,4 @@
-export { fm as ApplyMarkdownNegotiationHeadersOptions, fl as CreateMarkdownMirrorResponseOptions, z as FARM_MARKDOWN_CONTENT_TYPE, fj as FarmMarkdownMirrorTarget, aF as FarmMarkdownResolvedConfig, fi as FarmMarkdownResolvedRoute, fh as FarmMarkdownRouteInput, cI as FarmMarkdownUserConfig, fB as FarmPageFormAction, fz as FarmPageFormField, fy as FarmPageFormOption, fA as FarmPageFormSubmit, fk as ResolveMarkdownMirrorTargetOptions, fq as applyMarkdownNegotiationHeaders, A as createFarmMarkdownErrorBody, fp as createMarkdownMirrorResponse, fC as extractFarmPageActions, fs as farmAcceptQuality, B as farmRequestWantsMarkdown, fv as getFarmMarkdownAlternatePath, fu as getFarmMarkdownMirrorPath, fr as htmlToMarkdown, fw as isFarmMarkdownMirrorExposed, fx as matchesFarmMarkdownRoutePattern, ft as requestAcceptsMarkdown, fn as resolveMarkdownConfig, fo as resolveMarkdownMirrorTarget } from './client-plugins-C3mK9Pol.mjs';
+export { fq as ApplyMarkdownNegotiationHeadersOptions, fp as CreateMarkdownMirrorResponseOptions, z as FARM_MARKDOWN_CONTENT_TYPE, fi as FARM_MARKDOWN_PAGE_CHECK_HEADER, fn as FarmMarkdownMirrorTarget, aF as FarmMarkdownResolvedConfig, fm as FarmMarkdownResolvedRoute, fl as FarmMarkdownRouteInput, cI as FarmMarkdownUserConfig, fF as FarmPageFormAction, fD as FarmPageFormField, fC as FarmPageFormOption, fE as FarmPageFormSubmit, fo as ResolveMarkdownMirrorTargetOptions, fj as _getFarmMarkdownPageCheckToken, fk as _isFarmMarkdownPageCheck, fu as applyMarkdownNegotiationHeaders, A as createFarmMarkdownErrorBody, ft as createMarkdownMirrorResponse, fG as extractFarmPageActions, fw as farmAcceptQuality, B as farmRequestWantsMarkdown, fz as getFarmMarkdownAlternatePath, fy as getFarmMarkdownMirrorPath, fv as htmlToMarkdown, fA as isFarmMarkdownMirrorExposed, fB as matchesFarmMarkdownRoutePattern, fx as requestAcceptsMarkdown, fr as resolveMarkdownConfig, fs as resolveMarkdownMirrorTarget } from './client-plugins-DUrIYX9B.mjs';
 import './lifecycle-DK06VuKP.mjs';
 import './integration-api-0y4FXJpC.mjs';
 import './endpoint-CCHFqyTE.mjs';

package/dist/markdown.d.ts

@@ -1,4 +1,4 @@
-export { fm as ApplyMarkdownNegotiationHeadersOptions, fl as CreateMarkdownMirrorResponseOptions, z as FARM_MARKDOWN_CONTENT_TYPE, fj as FarmMarkdownMirrorTarget, aF as FarmMarkdownResolvedConfig, fi as FarmMarkdownResolvedRoute, fh as FarmMarkdownRouteInput, cI as FarmMarkdownUserConfig, fB as FarmPageFormAction, fz as FarmPageFormField, fy as FarmPageFormOption, fA as FarmPageFormSubmit, fk as ResolveMarkdownMirrorTargetOptions, fq as applyMarkdownNegotiationHeaders, A as createFarmMarkdownErrorBody, fp as createMarkdownMirrorResponse, fC as extractFarmPageActions, fs as farmAcceptQuality, B as farmRequestWantsMarkdown, fv as getFarmMarkdownAlternatePath, fu as getFarmMarkdownMirrorPath, fr as htmlToMarkdown, fw as isFarmMarkdownMirrorExposed, fx as matchesFarmMarkdownRoutePattern, ft as requestAcceptsMarkdown, fn as resolveMarkdownConfig, fo as resolveMarkdownMirrorTarget } from './client-plugins-r1mOtSC1.js';
+export { fq as ApplyMarkdownNegotiationHeadersOptions, fp as CreateMarkdownMirrorResponseOptions, z as FARM_MARKDOWN_CONTENT_TYPE, fi as FARM_MARKDOWN_PAGE_CHECK_HEADER, fn as FarmMarkdownMirrorTarget, aF as FarmMarkdownResolvedConfig, fm as FarmMarkdownResolvedRoute, fl as FarmMarkdownRouteInput, cI as FarmMarkdownUserConfig, fF as FarmPageFormAction, fD as FarmPageFormField, fC as FarmPageFormOption, fE as FarmPageFormSubmit, fo as ResolveMarkdownMirrorTargetOptions, fj as _getFarmMarkdownPageCheckToken, fk as _isFarmMarkdownPageCheck, fu as applyMarkdownNegotiationHeaders, A as createFarmMarkdownErrorBody, ft as createMarkdownMirrorResponse, fG as extractFarmPageActions, fw as farmAcceptQuality, B as farmRequestWantsMarkdown, fz as getFarmMarkdownAlternatePath, fy as getFarmMarkdownMirrorPath, fv as htmlToMarkdown, fA as isFarmMarkdownMirrorExposed, fB as matchesFarmMarkdownRoutePattern, fx as requestAcceptsMarkdown, fr as resolveMarkdownConfig, fs as resolveMarkdownMirrorTarget } from './client-plugins-BvlNhGEB.js';
 import './lifecycle-DK06VuKP.js';
 import './integration-api-BPJo5oXb.js';
 import './endpoint-CA-TNX60.js';

package/dist/markdown.mjs

@@ -1,5 +1,8 @@
 import {
   FARM_MARKDOWN_CONTENT_TYPE,
+  FARM_MARKDOWN_PAGE_CHECK_HEADER,
+  _getFarmMarkdownPageCheckToken,
+  _isFarmMarkdownPageCheck,
   applyMarkdownNegotiationHeaders,
   createFarmMarkdownErrorBody,
   createMarkdownMirrorResponse,
@@ -14,7 +17,7 @@ import {
   requestAcceptsMarkdown,
   resolveMarkdownConfig,
   resolveMarkdownMirrorTarget
-} from "./chunk-WWIKMBRN.mjs";
+} from "./chunk-VNGH5MLF.mjs";
 import "./chunk-MVL2RAJW.mjs";
 import "./chunk-ZLAT2CWY.mjs";
 import "./chunk-FUZEBRP3.mjs";
@@ -27,6 +30,9 @@ import "./chunk-55YI3RRB.mjs";
 import "./chunk-LPEX4YW6.mjs";
 export {
   FARM_MARKDOWN_CONTENT_TYPE,
+  FARM_MARKDOWN_PAGE_CHECK_HEADER,
+  _getFarmMarkdownPageCheckToken,
+  _isFarmMarkdownPageCheck,
   applyMarkdownNegotiationHeaders,
   createFarmMarkdownErrorBody,
   createMarkdownMirrorResponse,

package/dist/middleware.cjs

@@ -7,16 +7,16 @@
 
 
 
-var _chunk4NU4GGTCcjs = require('./chunk-4NU4GGTC.cjs');
+var _chunkXKVVMZP5cjs = require('./chunk-XKVVMZP5.cjs');
 
 
 
 
-var _chunkBPMATOP2cjs = require('./chunk-BPMATOP2.cjs');
+var _chunkN32CC42Mcjs = require('./chunk-N32CC42M.cjs');
 
 
 
-var _chunkZWM5KGAAcjs = require('./chunk-ZWM5KGAA.cjs');
+var _chunkKCQBAKIYcjs = require('./chunk-KCQBAKIY.cjs');
 require('./chunk-M7MKQXAF.cjs');
 
 
@@ -27,8 +27,8 @@ require('./chunk-M7MKQXAF.cjs');
 
 
 
-var _chunk3BU22U3Mcjs = require('./chunk-3BU22U3M.cjs');
-require('./chunk-Z2HLU4IX.cjs');
+var _chunkZXH4TS3Fcjs = require('./chunk-ZXH4TS3F.cjs');
+require('./chunk-4GWRFP22.cjs');
 require('./chunk-M2L4MYDQ.cjs');
 require('./chunk-SHLXACIO.cjs');
 require('./chunk-HLJ6MBUZ.cjs');
@@ -41,11 +41,12 @@ require('./chunk-S3A45T7F.cjs');
 require('./chunk-AI7QMY7O.cjs');
 require('./chunk-FJ3M4CUX.cjs');
 require('./chunk-OX6O6WVA.cjs');
-require('./chunk-UXFQ3UDA.cjs');
+require('./chunk-6XWDE2P2.cjs');
+
 
 
 var _chunkUS2QVW3Ecjs = require('./chunk-US2QVW3E.cjs');
-require('./chunk-U4KT7QP3.cjs');
+require('./chunk-ULASELLA.cjs');
 require('./chunk-BIDYX3SL.cjs');
 require('./chunk-I57LW5VZ.cjs');
 require('./chunk-NO3WWW3N.cjs');
@@ -73,4 +74,5 @@ require('./chunk-S3JO3N4H.cjs');
 
 
 
-exports.MiddlewareManager = _chunkZWM5KGAAcjs.MiddlewareManager; exports.UnsupportedRateLimitStorageError = _chunk4NU4GGTCcjs.UnsupportedRateLimitStorageError; exports._runWithMiddlewareContext = _chunk3BU22U3Mcjs._runWithMiddlewareContext; exports._runWithMiddlewareData = _chunk3BU22U3Mcjs._runWithMiddlewareData; exports.applyProductionMiddlewareHeaders = _chunkBPMATOP2cjs.applyProductionMiddlewareHeaders; exports.canonicalizeRequestPathSegments = _chunkUS2QVW3Ecjs.canonicalizeRequestPathSegments; exports.createContext = _chunkZWM5KGAAcjs.createContext; exports.createProductionMiddlewareRunner = _chunkBPMATOP2cjs.createProductionMiddlewareRunner; exports.farmMiddlewarePlugin = _chunk4NU4GGTCcjs.farmMiddlewarePlugin; exports.getFromMiddleware = _chunk4NU4GGTCcjs.getFromMiddleware; exports.getMiddlewareContext = _chunk3BU22U3Mcjs.getMiddlewareContext; exports.getMiddlewareData = _chunk3BU22U3Mcjs.getMiddlewareData; exports.getMiddlewareValue = _chunk3BU22U3Mcjs.getMiddlewareValue; exports.getRateLimitStatus = _chunk4NU4GGTCcjs.getRateLimitStatus; exports.hasMiddlewareData = _chunk4NU4GGTCcjs.hasMiddlewareData; exports.matchesMiddlewareConfig = _chunkBPMATOP2cjs.matchesMiddlewareConfig; exports.memoryRateLimitStorage = _chunk4NU4GGTCcjs.memoryRateLimitStorage; exports.middleware = _chunk4NU4GGTCcjs.middleware; exports.parseMiddlewareCookieHeader = _chunk3BU22U3Mcjs.parseMiddlewareCookieHeader; exports.serializeMiddlewareCookie = _chunk3BU22U3Mcjs.serializeMiddlewareCookie; exports.serializeMiddlewareCookieDeletion = _chunk3BU22U3Mcjs.serializeMiddlewareCookieDeletion; exports.unwrapMiddleware = _chunk4NU4GGTCcjs.unwrapMiddleware;
+
+exports.MiddlewareManager = _chunkKCQBAKIYcjs.MiddlewareManager; exports.UnsupportedRateLimitStorageError = _chunkXKVVMZP5cjs.UnsupportedRateLimitStorageError; exports._runWithMiddlewareContext = _chunkZXH4TS3Fcjs._runWithMiddlewareContext; exports._runWithMiddlewareData = _chunkZXH4TS3Fcjs._runWithMiddlewareData; exports.applyProductionMiddlewareHeaders = _chunkN32CC42Mcjs.applyProductionMiddlewareHeaders; exports.canonicalizeRequestPathSegments = _chunkUS2QVW3Ecjs.canonicalizeRequestPathSegments; exports.canonicalizeRequestPathname = _chunkUS2QVW3Ecjs.canonicalizeRequestPathname; exports.createContext = _chunkKCQBAKIYcjs.createContext; exports.createProductionMiddlewareRunner = _chunkN32CC42Mcjs.createProductionMiddlewareRunner; exports.farmMiddlewarePlugin = _chunkXKVVMZP5cjs.farmMiddlewarePlugin; exports.getFromMiddleware = _chunkXKVVMZP5cjs.getFromMiddleware; exports.getMiddlewareContext = _chunkZXH4TS3Fcjs.getMiddlewareContext; exports.getMiddlewareData = _chunkZXH4TS3Fcjs.getMiddlewareData; exports.getMiddlewareValue = _chunkZXH4TS3Fcjs.getMiddlewareValue; exports.getRateLimitStatus = _chunkXKVVMZP5cjs.getRateLimitStatus; exports.hasMiddlewareData = _chunkXKVVMZP5cjs.hasMiddlewareData; exports.matchesMiddlewareConfig = _chunkN32CC42Mcjs.matchesMiddlewareConfig; exports.memoryRateLimitStorage = _chunkXKVVMZP5cjs.memoryRateLimitStorage; exports.middleware = _chunkXKVVMZP5cjs.middleware; exports.parseMiddlewareCookieHeader = _chunkZXH4TS3Fcjs.parseMiddlewareCookieHeader; exports.serializeMiddlewareCookie = _chunkZXH4TS3Fcjs.serializeMiddlewareCookie; exports.serializeMiddlewareCookieDeletion = _chunkZXH4TS3Fcjs.serializeMiddlewareCookieDeletion; exports.unwrapMiddleware = _chunkXKVVMZP5cjs.unwrapMiddleware;

package/dist/middleware.d.mts

@@ -1,10 +1,10 @@
-import { eJ as MiddlewareChain, eO as RateLimitStorage, eP as RateLimitStatus, eQ as MemoryRateLimitStorageOptions, aC as MiddlewareContext, az as FarmMiddlewareConfig, eF as MiddlewareFunction, aB as MiddlewareConfig, E as MiddlewareProps, eL as CookieOptions } from './client-plugins-C3mK9Pol.mjs';
-export { eK as CookieJar, eS as MiddlewareResult, eI as MiddlewareStore, eR as NextFunction, eM as RateLimitConfig, eN as RateLimitIncrementResult, ay as ReadonlyMiddlewareStore, eG as RequestMiddleware, eH as RequestMiddlewareContext } from './client-plugins-C3mK9Pol.mjs';
+import { eK as MiddlewareChain, eP as RateLimitStorage, eQ as RateLimitStatus, eR as MemoryRateLimitStorageOptions, aC as MiddlewareContext, az as FarmMiddlewareConfig, eG as MiddlewareFunction, aB as MiddlewareConfig, E as MiddlewareProps, eM as CookieOptions } from './client-plugins-DUrIYX9B.mjs';
+export { eL as CookieJar, eT as MiddlewareResult, eJ as MiddlewareStore, eS as NextFunction, eN as RateLimitConfig, eO as RateLimitIncrementResult, ay as ReadonlyMiddlewareStore, eH as RequestMiddleware, eI as RequestMiddlewareContext } from './client-plugins-DUrIYX9B.mjs';
 import { IncomingMessage, ServerResponse } from 'http';
 import { ViteDevServer, Plugin } from 'vite';
 import { a as FarmServerConfig, R as ResolvedFarmServerConfig } from './workflows-jZ4BcdoZ.mjs';
 import { R as ResolvedFarmI18nConfig } from './types-CnH8DOqo.mjs';
-export { _ as _runWithMiddlewareContext, c as _runWithMiddlewareData, e as applyProductionMiddlewareHeaders, d as createProductionMiddlewareRunner, g as getMiddlewareContext, a as getMiddlewareData, b as getMiddlewareValue, m as matchesMiddlewareConfig } from './production-runtime-CCeVZXst.mjs';
+export { _ as _runWithMiddlewareContext, c as _runWithMiddlewareData, e as applyProductionMiddlewareHeaders, d as createProductionMiddlewareRunner, g as getMiddlewareContext, a as getMiddlewareData, b as getMiddlewareValue, m as matchesMiddlewareConfig } from './production-runtime-BQ4_WLwQ.mjs';
 import './lifecycle-DK06VuKP.mjs';
 import './integration-api-0y4FXJpC.mjs';
 import './endpoint-CCHFqyTE.mjs';
@@ -60,7 +60,9 @@ declare function middleware(basePath?: string): MiddlewareChain;
 /**
  * Create a middleware context from request/response
  */
-declare function createContext(req: IncomingMessage, res: ServerResponse, viteServer?: ViteDevServer, parent?: MiddlewareContext["parent"], server?: FarmServerConfig | ResolvedFarmServerConfig): MiddlewareContext;
+declare function createContext(req: IncomingMessage, res: ServerResponse, viteServer?: ViteDevServer, parent?: MiddlewareContext["parent"], server?: FarmServerConfig | ResolvedFarmServerConfig, 
+/** Strip basePath/locale the way page routing does, for `ctx.routePathname`. */
+toRoutePathname?: (pathname: string) => string): MiddlewareContext;
 
 interface DiscoveredMiddleware {
     path: string;
@@ -171,6 +173,26 @@ declare function hasMiddlewareData(middleware: MiddlewareProps | undefined): boo
  * slash grows a path segment that was not in the request.
  */
 declare function canonicalizeRequestPathSegments(pathname: string): string[];
+/**
+ * The string form of {@link canonicalizeRequestPathSegments}, for matchers that
+ * run a regex or a prefix check over the whole pathname instead of walking
+ * segments.
+ *
+ * A decoded `/` is re-encoded as `%2F` so it stays inside its segment for a
+ * matcher that treats `/` as a separator, and so a capture that a redirect or
+ * rewrite reuses keeps the encoding it arrived with.
+ *
+ * A run of slashes collapses to one, because every route matcher drops empty
+ * segments: `//dashboard` renders `/dashboard`, so a guard comparing `//dashboard`
+ * against `/dashboard` let the protected page through. A trailing slash and case
+ * are otherwise left exactly as they arrived: this changes which pathname a
+ * pattern is compared against, never what the pattern means.
+ *
+ * Decoding happens once. A path that still contains `%` after decoding, such as
+ * `%2541BC` decoding to `%41BC`, keeps it; decoding a second time would resolve
+ * a different route than the request asked for.
+ */
+declare function canonicalizeRequestPathname(pathname: string): string;
 
 declare function parseMiddlewareCookieHeader(cookieHeader?: string | null): Record<string, string>;
 declare function serializeMiddlewareCookie(name: string, value: string, options?: CookieOptions): string;
@@ -202,4 +224,4 @@ interface FarmMiddlewarePluginOptions {
 }
 declare function farmMiddlewarePlugin(options?: FarmMiddlewarePluginOptions): Plugin;
 
-export { CookieOptions, FarmMiddlewareConfig, type FarmMiddlewarePluginOptions, MemoryRateLimitStorageOptions, MiddlewareChain, MiddlewareConfig, MiddlewareContext, MiddlewareFunction, MiddlewareManager, RateLimitStatus, RateLimitStorage, UnsupportedRateLimitStorageError, canonicalizeRequestPathSegments, createContext, farmMiddlewarePlugin, getFromMiddleware, getRateLimitStatus, hasMiddlewareData, memoryRateLimitStorage, middleware, parseMiddlewareCookieHeader, serializeMiddlewareCookie, serializeMiddlewareCookieDeletion, unwrapMiddleware };
+export { CookieOptions, FarmMiddlewareConfig, type FarmMiddlewarePluginOptions, MemoryRateLimitStorageOptions, MiddlewareChain, MiddlewareConfig, MiddlewareContext, MiddlewareFunction, MiddlewareManager, RateLimitStatus, RateLimitStorage, UnsupportedRateLimitStorageError, canonicalizeRequestPathSegments, canonicalizeRequestPathname, createContext, farmMiddlewarePlugin, getFromMiddleware, getRateLimitStatus, hasMiddlewareData, memoryRateLimitStorage, middleware, parseMiddlewareCookieHeader, serializeMiddlewareCookie, serializeMiddlewareCookieDeletion, unwrapMiddleware };