@farm.js/core 0.1.37 → 0.1.38

package/dist/{chunk-UJZLSXUB.cjs → chunk-VU6AAZVY.cjs}

@@ -2033,6 +2033,21 @@ function resolveIntegrationMiddlewareParams(entry, pathname, config) {
   return null;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, resolveIntegrationMiddlewareParams, "resolveIntegrationMiddlewareParams");
+function integrationMiddlewareMayHandlePath(integrations, pathname, catchAllProbe) {
+  if (!integrations) return false;
+  const covers = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (entry) => resolveIntegrationMiddlewareParams(entry, pathname, void 0) !== null, "covers");
+  return Object.values(integrations).some(
+    (integration) => isFarmIntegration(integration) && (integration.middleware || []).some((entry) => {
+      if (catchAllProbe === void 0) return covers(entry);
+      if (!entry.matcher) return false;
+      const specific = (Array.isArray(entry.matcher) ? entry.matcher : [entry.matcher]).filter(
+        (matcher) => resolveIntegrationMiddlewareParams({ matcher }, catchAllProbe, void 0) === null
+      );
+      return specific.length > 0 && covers({ matcher: specific });
+    })
+  );
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, integrationMiddlewareMayHandlePath, "integrationMiddlewareMayHandlePath");
 var FARM_INTEGRATION_API_BASE_PATH_KEY = "__farmAPIServerBasePath";
 var integrationAPIPathnames = /* @__PURE__ */ new WeakMap();
 function getIntegrationAPIPathnames(config) {
@@ -2184,4 +2199,5 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, normalizeMatcher, "normalizeMatcher");
 
 
 
-exports.getFarmPluginIntegrationContext = getFarmPluginIntegrationContext; exports.FARM_INTEGRATION_INTERNAL_DISPATCH_CONTEXT_KEY = FARM_INTEGRATION_INTERNAL_DISPATCH_CONTEXT_KEY; exports.FARM_INTEGRATION_SET_COOKIES_KEY = FARM_INTEGRATION_SET_COOKIES_KEY; exports.forwardIntegrationSetCookies = forwardIntegrationSetCookies; exports.defineIntegrationSchema = defineIntegrationSchema; exports.getFarmIntegrationPluginServerRuntime = getFarmIntegrationPluginServerRuntime; exports.getFarmIntegrationPluginOwner = getFarmIntegrationPluginOwner; exports.createIntegrationRoute = createIntegrationRoute; exports.integrationRoute = integrationRoute; exports.defineIntegration = defineIntegration; exports.isFarmIntegration = isFarmIntegration; exports.resolveIntegrationPlugins = resolveIntegrationPlugins; exports.getIntegrationProviders = getIntegrationProviders; exports.isFarmIntegrationProviderComponentReference = isFarmIntegrationProviderComponentReference; exports.getIntegrationDocumentNavigationMatchers = getIntegrationDocumentNavigationMatchers; exports.getIntegrationSchemas = getIntegrationSchemas; exports.getRegisteredIntegrationRuntime = getRegisteredIntegrationRuntime; exports.getRegisteredIntegrations = getRegisteredIntegrations; exports.getRegisteredIntegrationSchemas = getRegisteredIntegrationSchemas; exports.matchIntegrationRoute = matchIntegrationRoute; exports.matchRegisteredIntegrationRoute = matchRegisteredIntegrationRoute; exports.getRegisteredIntegrationAPIManifest = getRegisteredIntegrationAPIManifest; exports.dispatchIntegrationRequest = dispatchIntegrationRequest; exports.dispatchIntegrationRequests = dispatchIntegrationRequests; exports.FARM_INTEGRATION_API_BASE_PATH_KEY = FARM_INTEGRATION_API_BASE_PATH_KEY;
+
+exports.getFarmPluginIntegrationContext = getFarmPluginIntegrationContext; exports.FARM_INTEGRATION_INTERNAL_DISPATCH_CONTEXT_KEY = FARM_INTEGRATION_INTERNAL_DISPATCH_CONTEXT_KEY; exports.FARM_INTEGRATION_SET_COOKIES_KEY = FARM_INTEGRATION_SET_COOKIES_KEY; exports.forwardIntegrationSetCookies = forwardIntegrationSetCookies; exports.defineIntegrationSchema = defineIntegrationSchema; exports.getFarmIntegrationPluginServerRuntime = getFarmIntegrationPluginServerRuntime; exports.getFarmIntegrationPluginOwner = getFarmIntegrationPluginOwner; exports.createIntegrationRoute = createIntegrationRoute; exports.integrationRoute = integrationRoute; exports.defineIntegration = defineIntegration; exports.isFarmIntegration = isFarmIntegration; exports.resolveIntegrationPlugins = resolveIntegrationPlugins; exports.getIntegrationProviders = getIntegrationProviders; exports.isFarmIntegrationProviderComponentReference = isFarmIntegrationProviderComponentReference; exports.getIntegrationDocumentNavigationMatchers = getIntegrationDocumentNavigationMatchers; exports.getIntegrationSchemas = getIntegrationSchemas; exports.getRegisteredIntegrationRuntime = getRegisteredIntegrationRuntime; exports.getRegisteredIntegrations = getRegisteredIntegrations; exports.getRegisteredIntegrationSchemas = getRegisteredIntegrationSchemas; exports.matchIntegrationRoute = matchIntegrationRoute; exports.matchRegisteredIntegrationRoute = matchRegisteredIntegrationRoute; exports.getRegisteredIntegrationAPIManifest = getRegisteredIntegrationAPIManifest; exports.dispatchIntegrationRequest = dispatchIntegrationRequest; exports.dispatchIntegrationRequests = dispatchIntegrationRequests; exports.integrationMiddlewareMayHandlePath = integrationMiddlewareMayHandlePath; exports.FARM_INTEGRATION_API_BASE_PATH_KEY = FARM_INTEGRATION_API_BASE_PATH_KEY;

package/dist/{chunk-ADOAUDQ6.cjs → chunk-VXEEATVD.cjs}

@@ -6,7 +6,7 @@
 var _chunkDVM4FKZLcjs = require('./chunk-DVM4FKZL.cjs');
 
 
-var _chunkNICDYKBScjs = require('./chunk-NICDYKBS.cjs');
+var _chunk6XWDE2P2cjs = require('./chunk-6XWDE2P2.cjs');
 
 
 var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
@@ -29,7 +29,7 @@ function createRewritesPlugin(rewrites, {
       if (overrideBeforeRequest) {
         await overrideBeforeRequest(req, res, context);
       }
-      const url = _chunkNICDYKBScjs.resolveFarmRequestURL.call(void 0, req);
+      const url = _chunk6XWDE2P2cjs.resolveFarmRequestURL.call(void 0, req);
       const routePath = _chunkDVM4FKZLcjs.resolveConfigRoutePathname.call(void 0, url.pathname, i18n);
       const pathname = routePath.pathname;
       for (const { rewrite, pattern } of compiledRewrites) {

package/dist/{chunk-RRMVL6CJ.mjs → chunk-W36M2BQ4.mjs}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-CBBLJMR5.mjs";
 import {
   _resolveCurrentRequestForApp
-} from "./chunk-S3VWVTVA.mjs";
+} from "./chunk-QRKIMN7T.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";

package/dist/{chunk-4WQ6PGSJ.cjs → chunk-WEW2JVA4.cjs}

@@ -2,7 +2,7 @@
 
 
 
-var _chunkEUV4YR3Vcjs = require('./chunk-EUV4YR3V.cjs');
+var _chunkSGBJ247Qcjs = require('./chunk-SGBJ247Q.cjs');
 
 
 var _chunkJ63ZH5OQcjs = require('./chunk-J63ZH5OQ.cjs');
@@ -66,12 +66,12 @@ function collectFarmLlmsTxtPages(sources, options) {
   for (const source of sources) {
     const path = source.pattern;
     if (path.includes("[") || pages.has(path)) continue;
-    if (include.length && !include.some((pattern) => _chunkEUV4YR3Vcjs.matchesFarmMarkdownRoutePattern.call(void 0, pattern, path))) {
+    if (include.length && !include.some((pattern) => _chunkSGBJ247Qcjs.matchesFarmMarkdownRoutePattern.call(void 0, pattern, path))) {
       continue;
     }
-    if (exclude.some((pattern) => _chunkEUV4YR3Vcjs.matchesFarmMarkdownRoutePattern.call(void 0, pattern, path))) continue;
+    if (exclude.some((pattern) => _chunkSGBJ247Qcjs.matchesFarmMarkdownRoutePattern.call(void 0, pattern, path))) continue;
     if (isFarmMetadataNoIndex(source.metadata)) continue;
-    const target = _chunkEUV4YR3Vcjs.isFarmMarkdownMirrorExposed.call(void 0, options.markdown, path) ? _chunkEUV4YR3Vcjs.getFarmMarkdownMirrorPath.call(void 0, path) : path;
+    const target = _chunkSGBJ247Qcjs.isFarmMarkdownMirrorExposed.call(void 0, options.markdown, path) ? _chunkSGBJ247Qcjs.getFarmMarkdownMirrorPath.call(void 0, path) : path;
     const description = readMetadataString(source.metadata, "description");
     pages.set(path, {
       path,

package/dist/{chunk-4E5WBPEG.mjs → chunk-WFRT7JPX.mjs}

@@ -1,13 +1,9 @@
 import {
   isFarmMetadataNoIndex
-} from "./chunk-DTSROJ5J.mjs";
+} from "./chunk-HD5CF3OE.mjs";
 import {
   matchesFarmMarkdownRoutePattern
-} from "./chunk-WWIKMBRN.mjs";
-import {
-  _markFarmOwnedResponse,
-  _withFarmResponseHeaders
-} from "./chunk-Z3HATSKO.mjs";
+} from "./chunk-VNGH5MLF.mjs";
 import {
   applyFarmBasePath
 } from "./chunk-4RB44K6Z.mjs";
@@ -212,519 +208,6 @@ function isRecord(value) {
 }
 __name(isRecord, "isRecord");
 
-// src/security.ts
-function resolveFarmSecurityConfig(input) {
-  if (input === void 0) return { csp: false };
-  if (!isPlainRecord(input)) {
-    throw new TypeError("security must be an object containing the csp option.");
-  }
-  if (Object.prototype.hasOwnProperty.call(input, "contentSecurityPolicy")) {
-    throw new TypeError(
-      "security.contentSecurityPolicy is not supported. Use security.csp instead."
-    );
-  }
-  const csp = input.csp;
-  if (csp === void 0 || csp === false) return { csp: false };
-  if (typeof csp === "string") {
-    return {
-      csp: {
-        value: validateSerializedCsp(csp),
-        reportOnly: false,
-        nonce: false
-      }
-    };
-  }
-  if (!isPlainRecord(csp)) {
-    throw new TypeError("security.csp must be a policy string, false, or an options object.");
-  }
-  const reportOnly = validateReportOnly(csp.reportOnly);
-  const nonce = validateNonce(csp.nonce);
-  if (Object.prototype.hasOwnProperty.call(csp, "value")) {
-    if (Object.prototype.hasOwnProperty.call(csp, "policy") || Object.prototype.hasOwnProperty.call(csp, "directives")) {
-      throw new TypeError(
-        "Resolved security.csp values cannot include policy or directives options."
-      );
-    }
-    return {
-      csp: {
-        value: validateSerializedCsp(csp.value),
-        reportOnly,
-        nonce
-      }
-    };
-  }
-  const { policy, directives } = csp;
-  if (policy !== void 0 && directives !== void 0) {
-    throw new TypeError("security.csp accepts either policy or directives, not both.");
-  }
-  if (policy === void 0 && directives === void 0) {
-    throw new TypeError("security.csp requires a policy string or directives object.");
-  }
-  return {
-    csp: {
-      value: policy !== void 0 ? validateSerializedCsp(policy) : serializeFarmCspDirectives(directives),
-      reportOnly,
-      nonce
-    }
-  };
-}
-__name(resolveFarmSecurityConfig, "resolveFarmSecurityConfig");
-function serializeFarmCspDirectives(directives) {
-  if (!isPlainRecord(directives)) {
-    throw new TypeError("security.csp.directives must be an object.");
-  }
-  const serialized = [];
-  const normalizedNames = /* @__PURE__ */ new Set();
-  for (const [configuredName, configuredValue] of Object.entries(directives)) {
-    if (configuredValue === false || configuredValue === null || configuredValue === void 0) {
-      continue;
-    }
-    const name = normalizeDirectiveName(configuredName);
-    if (normalizedNames.has(name)) {
-      throw new TypeError(`security.csp contains the duplicate directive ${JSON.stringify(name)}.`);
-    }
-    normalizedNames.add(name);
-    const values = configuredValue === true ? [] : (Array.isArray(configuredValue) ? configuredValue : [configuredValue]).map(
-      validateDirectiveValue
-    );
-    serialized.push(values.length > 0 ? `${name} ${values.join(" ")}` : name);
-  }
-  if (serialized.length === 0) {
-    throw new TypeError("security.csp.directives must contain at least one enabled directive.");
-  }
-  return serialized.join("; ");
-}
-__name(serializeFarmCspDirectives, "serializeFarmCspDirectives");
-function getFarmSecurityHeader(security, nonce) {
-  if (!security.csp) return void 0;
-  if (security.csp.nonce && !nonce) return void 0;
-  return {
-    key: security.csp.reportOnly ? "Content-Security-Policy-Report-Only" : "Content-Security-Policy",
-    value: nonce ? applyFarmCspNonceToPolicy(security.csp.value, nonce) : security.csp.value
-  };
-}
-__name(getFarmSecurityHeader, "getFarmSecurityHeader");
-function createFarmCspNonce(security) {
-  if (!security.csp || !security.csp.nonce) return void 0;
-  const bytes = new Uint8Array(16);
-  globalThis.crypto.getRandomValues(bytes);
-  return Array.from(bytes, (value) => value.toString(16).padStart(2, "0")).join("");
-}
-__name(createFarmCspNonce, "createFarmCspNonce");
-function applyFarmCspNonceToPolicy(policy, nonce) {
-  validateCspNonce(nonce);
-  return applyFarmCspScriptSourcesToPolicy(policy, [`'nonce-${nonce}'`]);
-}
-__name(applyFarmCspNonceToPolicy, "applyFarmCspNonceToPolicy");
-function applyFarmCspHashesToPolicy(policy, hashes) {
-  const sources = hashes.map((hash) => {
-    if (!/^sha(?:256|384|512)-[A-Za-z0-9+/]+={0,2}$/.test(hash)) {
-      throw new TypeError(`Invalid CSP script hash: ${JSON.stringify(hash)}.`);
-    }
-    return `'${hash}'`;
-  });
-  return applyFarmCspScriptSourcesToPolicy(policy, sources);
-}
-__name(applyFarmCspHashesToPolicy, "applyFarmCspHashesToPolicy");
-function applyFarmCspScriptSourcesToPolicy(policy, sources) {
-  const uniqueSources = [...new Set(sources)];
-  if (uniqueSources.length === 0) return policy;
-  const segments = policy.split(";").map((segment) => segment.trim()).filter(Boolean);
-  const names = segments.map((segment) => segment.split(/\s+/, 1)[0].toLowerCase());
-  const governingName = names.includes("script-src-elem") ? "script-src-elem" : names.includes("script-src") ? "script-src" : names.includes("default-src") ? "default-src" : void 0;
-  if (!governingName) return `${policy}; script-src ${uniqueSources.join(" ")}`;
-  return segments.map((segment, index) => {
-    if (names[index] !== governingName) return segment;
-    const existing = new Set(segment.split(/\s+/));
-    const missing = uniqueSources.filter((source) => !existing.has(source));
-    return missing.length > 0 ? `${segment} ${missing.join(" ")}` : segment;
-  }).join("; ");
-}
-__name(applyFarmCspScriptSourcesToPolicy, "applyFarmCspScriptSourcesToPolicy");
-function addFarmCspNonceToScriptTags(html, nonce) {
-  validateCspNonce(nonce);
-  return createFarmCspNonceRewriter(nonce).write(html, true);
-}
-__name(addFarmCspNonceToScriptTags, "addFarmCspNonceToScriptTags");
-function removeFarmCspNoncesFromScriptTags(html) {
-  return createFarmScriptTagRewriter(stripScriptNonceAttribute).write(html, true);
-}
-__name(removeFarmCspNoncesFromScriptTags, "removeFarmCspNoncesFromScriptTags");
-async function createFarmCspScriptHashes(html) {
-  const hashes = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const content of collectFarmInlineScriptContents(html)) {
-    const digest = await globalThis.crypto.subtle.digest(
-      "SHA-256",
-      new TextEncoder().encode(content)
-    );
-    let binary = "";
-    for (const byte of new Uint8Array(digest)) binary += String.fromCharCode(byte);
-    const hash = `sha256-${globalThis.btoa(binary)}`;
-    if (!seen.has(hash)) {
-      seen.add(hash);
-      hashes.push(hash);
-    }
-  }
-  return hashes;
-}
-__name(createFarmCspScriptHashes, "createFarmCspScriptHashes");
-async function applyFarmCspHashesToHtml(html, security) {
-  if (!security.csp || !security.csp.nonce) return void 0;
-  const staticHtml = removeFarmCspNoncesFromScriptTags(html);
-  const hashes = await createFarmCspScriptHashes(staticHtml);
-  return {
-    html: staticHtml,
-    header: {
-      key: security.csp.reportOnly ? "Content-Security-Policy-Report-Only" : "Content-Security-Policy",
-      value: applyFarmCspHashesToPolicy(security.csp.value, hashes)
-    }
-  };
-}
-__name(applyFarmCspHashesToHtml, "applyFarmCspHashesToHtml");
-function applyFarmCspNonceToResponse(response, security) {
-  if (!security.csp || !security.csp.nonce) return response;
-  if (!response.headers.get("content-type")?.toLowerCase().includes("text/html")) return response;
-  const nonce = createFarmCspNonce(security);
-  const securityHeader = getFarmSecurityHeader(security, nonce);
-  if (!response.body) {
-    return _withFarmResponseHeaders(response, (headers2) => {
-      headers2.set(securityHeader.key, securityHeader.value);
-      headers2.delete("content-length");
-    });
-  }
-  const headers = new Headers(response.headers);
-  headers.set(securityHeader.key, securityHeader.value);
-  headers.delete("content-length");
-  const decoder = new TextDecoder();
-  const encoder = new TextEncoder();
-  const rewriter = createFarmCspNonceRewriter(nonce);
-  const body = response.body.pipeThrough(
-    new TransformStream({
-      transform(chunk, controller) {
-        const output = rewriter.write(decoder.decode(chunk, { stream: true }));
-        if (output) controller.enqueue(encoder.encode(output));
-      },
-      flush(controller) {
-        const output = rewriter.write(decoder.decode(), true);
-        if (output) controller.enqueue(encoder.encode(output));
-      }
-    })
-  );
-  return _markFarmOwnedResponse(
-    new Response(body, {
-      status: response.status,
-      statusText: response.statusText,
-      headers
-    })
-  );
-}
-__name(applyFarmCspNonceToResponse, "applyFarmCspNonceToResponse");
-function farmCspBlocksFrameworkInlineScripts(security) {
-  if (!security.csp) return false;
-  if (security.csp.nonce) return false;
-  const directives = parseCspDirectives(security.csp.value);
-  const governing = directives.get("script-src-elem") ?? directives.get("script-src") ?? directives.get("default-src");
-  if (!governing) return false;
-  const sources = governing.map((source) => source.toLowerCase());
-  const disablesUnsafeInline = sources.some(
-    (value) => value === "'strict-dynamic'" || value.startsWith("'nonce-") || value.startsWith("'sha256-") || value.startsWith("'sha384-") || value.startsWith("'sha512-")
-  );
-  return !sources.includes("'unsafe-inline'") || disablesUnsafeInline;
-}
-__name(farmCspBlocksFrameworkInlineScripts, "farmCspBlocksFrameworkInlineScripts");
-function parseCspDirectives(value) {
-  const directives = /* @__PURE__ */ new Map();
-  for (const segment of value.split(";")) {
-    const parts = segment.trim().split(/\s+/).filter(Boolean);
-    if (parts.length === 0) continue;
-    const name = parts[0].toLowerCase();
-    if (!directives.has(name)) directives.set(name, parts.slice(1));
-  }
-  return directives;
-}
-__name(parseCspDirectives, "parseCspDirectives");
-function normalizeDirectiveName(value) {
-  const name = value.trim().replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
-  if (!/^[a-z][a-z0-9-]*$/.test(name)) {
-    throw new TypeError(`Invalid security.csp directive name: ${JSON.stringify(value)}.`);
-  }
-  return name;
-}
-__name(normalizeDirectiveName, "normalizeDirectiveName");
-function validateDirectiveValue(value) {
-  if (typeof value !== "string") {
-    throw new TypeError("security.csp directive values must be strings or booleans.");
-  }
-  const normalized = value.trim();
-  if (!normalized || /[;\r\n]/.test(normalized) || normalized.includes("\0")) {
-    throw new TypeError(`Invalid security.csp directive value: ${JSON.stringify(value)}.`);
-  }
-  return normalized;
-}
-__name(validateDirectiveValue, "validateDirectiveValue");
-function validateSerializedCsp(value) {
-  if (typeof value !== "string") {
-    throw new TypeError("security.csp policy must be a non-empty single-line string.");
-  }
-  const normalized = value.trim().replace(/;+$/g, "").trim();
-  if (!normalized || /[\r\n]/.test(normalized) || normalized.includes("\0")) {
-    throw new TypeError("security.csp policy must be a non-empty single-line string.");
-  }
-  return normalized;
-}
-__name(validateSerializedCsp, "validateSerializedCsp");
-function validateReportOnly(value) {
-  if (value === void 0) return false;
-  if (typeof value !== "boolean") {
-    throw new TypeError("security.csp.reportOnly must be a boolean.");
-  }
-  return value;
-}
-__name(validateReportOnly, "validateReportOnly");
-function validateNonce(value) {
-  if (value === void 0) return false;
-  if (typeof value !== "boolean") {
-    throw new TypeError("security.csp.nonce must be a boolean.");
-  }
-  return value;
-}
-__name(validateNonce, "validateNonce");
-function validateCspNonce(value) {
-  if (!/^[A-Za-z0-9+/_-]+={0,2}$/.test(value)) {
-    throw new TypeError("A CSP nonce must be a base64 or base64url value.");
-  }
-}
-__name(validateCspNonce, "validateCspNonce");
-function createFarmCspNonceRewriter(nonce) {
-  validateCspNonce(nonce);
-  return createFarmScriptTagRewriter((tag) => stampScriptTag(tag, nonce));
-}
-__name(createFarmCspNonceRewriter, "createFarmCspNonceRewriter");
-function createFarmScriptTagRewriter(transformScriptTag) {
-  let pending = "";
-  let rawTextElement;
-  return {
-    write(chunk, final = false) {
-      pending += chunk;
-      let output = "";
-      while (pending) {
-        if (rawTextElement) {
-          if (rawTextElement === "plaintext") {
-            output += pending;
-            pending = "";
-            break;
-          }
-          const closing = `</${rawTextElement}`;
-          const start2 = findRawTextEnd(pending, rawTextElement);
-          if (start2 === -1) {
-            if (final) {
-              output += pending;
-              pending = "";
-            } else {
-              const keep = matchingSuffixLength(pending, closing);
-              output += pending.slice(0, pending.length - keep);
-              pending = pending.slice(pending.length - keep);
-            }
-            break;
-          }
-          output += pending.slice(0, start2);
-          pending = pending.slice(start2);
-          const end2 = findHtmlTagEnd(pending);
-          if (end2 === -1) {
-            if (final) {
-              output += pending;
-              pending = "";
-            }
-            break;
-          }
-          output += pending.slice(0, end2 + 1);
-          pending = pending.slice(end2 + 1);
-          rawTextElement = void 0;
-          continue;
-        }
-        const start = pending.indexOf("<");
-        if (start === -1) {
-          output += pending;
-          pending = "";
-          break;
-        }
-        output += pending.slice(0, start);
-        pending = pending.slice(start);
-        if (pending.startsWith("<!--")) {
-          const end2 = pending.indexOf("-->", 4);
-          if (end2 === -1) {
-            if (final) {
-              output += pending;
-              pending = "";
-            }
-            break;
-          }
-          output += pending.slice(0, end2 + 3);
-          pending = pending.slice(end2 + 3);
-          continue;
-        }
-        if (!final && "<!--".startsWith(pending)) break;
-        const tagNameMatch = pending.match(/^<\/?([a-z][a-z0-9:-]*)\b/i);
-        if (!tagNameMatch) {
-          if (!final && /^<\/?[a-z][a-z0-9:-]*$/i.test(pending)) break;
-          output += pending[0];
-          pending = pending.slice(1);
-          continue;
-        }
-        const end = findHtmlTagEnd(pending);
-        if (end === -1) {
-          if (!final) break;
-          output += pending;
-          pending = "";
-          break;
-        }
-        const tag = pending.slice(0, end + 1);
-        const tagName = tagNameMatch[1].toLowerCase();
-        const isClosing = pending.startsWith("</");
-        const isSelfClosing = /\/\s*>$/.test(tag);
-        output += !isClosing && tagName === "script" ? transformScriptTag(tag) : tag;
-        pending = pending.slice(end + 1);
-        if (!isClosing && !isSelfClosing && rawTextElements.has(tagName)) {
-          rawTextElement = tagName;
-        }
-      }
-      return output;
-    }
-  };
-}
-__name(createFarmScriptTagRewriter, "createFarmScriptTagRewriter");
-var rawTextElements = /* @__PURE__ */ new Map([
-  ["iframe", /<\/iframe(?=[\s/>]|$)/gi],
-  ["noembed", /<\/noembed(?=[\s/>]|$)/gi],
-  ["noframes", /<\/noframes(?=[\s/>]|$)/gi],
-  ["plaintext", null],
-  ["script", /<\/script(?=[\s/>]|$)/gi],
-  ["style", /<\/style(?=[\s/>]|$)/gi],
-  ["textarea", /<\/textarea(?=[\s/>]|$)/gi],
-  ["title", /<\/title(?=[\s/>]|$)/gi],
-  ["xmp", /<\/xmp(?=[\s/>]|$)/gi]
-]);
-function stampScriptTag(tag, nonce) {
-  const opening = tag.match(/^<script\b/i)?.[0];
-  if (!opening) return tag;
-  const attributes = stripScriptNonceAttribute(tag).slice(opening.length, -1);
-  return `<script nonce="${nonce}"${attributes}>`;
-}
-__name(stampScriptTag, "stampScriptTag");
-function stripScriptNonceAttribute(tag) {
-  let normalized = tag;
-  let range = findScriptTagAttributeRange(normalized, "nonce");
-  while (range) {
-    normalized = normalized.slice(0, range.start) + normalized.slice(range.end);
-    range = findScriptTagAttributeRange(normalized, "nonce");
-  }
-  return normalized;
-}
-__name(stripScriptNonceAttribute, "stripScriptNonceAttribute");
-function collectFarmInlineScriptContents(html) {
-  const contents = [];
-  let offset = 0;
-  while (offset < html.length) {
-    const start = html.indexOf("<", offset);
-    if (start === -1) break;
-    if (html.startsWith("<!--", start)) {
-      const commentEnd = html.indexOf("-->", start + 4);
-      offset = commentEnd === -1 ? html.length : commentEnd + 3;
-      continue;
-    }
-    const remaining = html.slice(start);
-    const tagNameMatch = remaining.match(/^<\/?([a-z][a-z0-9:-]*)\b/i);
-    if (!tagNameMatch) {
-      offset = start + 1;
-      continue;
-    }
-    const tagEnd = findHtmlTagEnd(remaining);
-    if (tagEnd === -1) break;
-    const tag = remaining.slice(0, tagEnd + 1);
-    const tagName = tagNameMatch[1].toLowerCase();
-    const isClosing = remaining.startsWith("</");
-    const isSelfClosing = /\/\s*>$/.test(tag);
-    offset = start + tagEnd + 1;
-    if (isClosing || isSelfClosing || !rawTextElements.has(tagName)) continue;
-    if (tagName === "plaintext") break;
-    const closingStart = findRawTextEnd(html, tagName, offset);
-    const contentEnd = closingStart === -1 ? html.length : closingStart;
-    if (tagName === "script" && !findScriptTagAttributeRange(tag, "src")) {
-      contents.push(html.slice(offset, contentEnd));
-    }
-    if (closingStart === -1) break;
-    const closingEnd = findHtmlTagEnd(html.slice(contentEnd));
-    if (closingEnd === -1) break;
-    offset = contentEnd + closingEnd + 1;
-  }
-  return contents;
-}
-__name(collectFarmInlineScriptContents, "collectFarmInlineScriptContents");
-function findScriptTagAttributeRange(tag, expectedName) {
-  const opening = tag.match(/^<script\b/i)?.[0];
-  if (!opening) return void 0;
-  let offset = opening.length;
-  while (offset < tag.length - 1) {
-    const whitespaceStart = offset;
-    while (/\s/.test(tag[offset] || "")) offset++;
-    if (tag[offset] === "/" || tag[offset] === ">" || offset >= tag.length - 1) break;
-    const nameStart = offset;
-    while (offset < tag.length && !/[\s=/>]/.test(tag[offset])) offset++;
-    const name = tag.slice(nameStart, offset).toLowerCase();
-    while (/\s/.test(tag[offset] || "")) offset++;
-    if (tag[offset] === "=") {
-      offset++;
-      while (/\s/.test(tag[offset] || "")) offset++;
-      const quote = tag[offset] === '"' || tag[offset] === "'" ? tag[offset++] : void 0;
-      if (quote) {
-        while (offset < tag.length && tag[offset] !== quote) offset++;
-        if (tag[offset] === quote) offset++;
-      } else {
-        while (offset < tag.length && !/[\s>]/.test(tag[offset])) offset++;
-      }
-    }
-    if (name === expectedName) return { start: whitespaceStart, end: offset };
-  }
-  return void 0;
-}
-__name(findScriptTagAttributeRange, "findScriptTagAttributeRange");
-function findRawTextEnd(input, tagName, offset = 0) {
-  const closing = rawTextElements.get(tagName);
-  closing.lastIndex = offset;
-  return closing.exec(input)?.index ?? -1;
-}
-__name(findRawTextEnd, "findRawTextEnd");
-function matchingSuffixLength(input, token) {
-  const limit = Math.min(token.length - 1, input.length);
-  for (let length = limit; length > 0; length--) {
-    if (token.startsWith(input.slice(-length).toLowerCase())) return length;
-  }
-  return 0;
-}
-__name(matchingSuffixLength, "matchingSuffixLength");
-function findHtmlTagEnd(tag) {
-  let quote;
-  for (let index = 1; index < tag.length; index++) {
-    const character = tag[index];
-    if (quote) {
-      if (character === quote) quote = void 0;
-    } else if (character === '"' || character === "'") {
-      quote = character;
-    } else if (character === ">") {
-      return index;
-    }
-  }
-  return -1;
-}
-__name(findHtmlTagEnd, "findHtmlTagEnd");
-function isPlainRecord(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const prototype = Object.getPrototypeOf(value);
-  return prototype === Object.prototype || prototype === null;
-}
-__name(isPlainRecord, "isPlainRecord");
-
 // src/preload.ts
 var DEFAULT_PRELOAD_CONFIG = {
   mode: "enforce",
@@ -977,7 +460,7 @@ function findHtmlLinkElements(html) {
     rawTextTag.lastIndex = start;
     const rawText = rawTextTag.exec(lowerHtml);
     if (rawText?.[1]) {
-      const openingEnd = findHtmlTagEnd2(html, start);
+      const openingEnd = findHtmlTagEnd(html, start);
       if (openingEnd === -1) break;
       if (rawText[1] === "svg" && html[openingEnd - 2] === "/") {
         cursor = openingEnd;
@@ -992,13 +475,13 @@ function findHtmlLinkElements(html) {
         cursor = html.length;
         continue;
       }
-      const closingEnd = findHtmlTagEnd2(html, closingStart);
+      const closingEnd = findHtmlTagEnd(html, closingStart);
       cursor = closingEnd === -1 ? html.length : closingEnd;
       continue;
     }
     linkTag.lastIndex = start;
     if (linkTag.test(html)) {
-      const end = findHtmlTagEnd2(html, start);
+      const end = findHtmlTagEnd(html, start);
       if (end === -1) break;
       elements.push({ start, end, value: html.slice(start, end) });
       cursor = end;
@@ -1006,7 +489,7 @@ function findHtmlLinkElements(html) {
     }
     ordinaryTag.lastIndex = start;
     if (ordinaryTag.test(html)) {
-      const end = findHtmlTagEnd2(html, start);
+      const end = findHtmlTagEnd(html, start);
       cursor = end === -1 ? html.length : end;
       continue;
     }
@@ -1042,7 +525,7 @@ function findHtmlClosingTag(html, tagName, start) {
   return -1;
 }
 __name(findHtmlClosingTag, "findHtmlClosingTag");
-function findHtmlTagEnd2(html, start) {
+function findHtmlTagEnd(html, start) {
   let quote;
   for (let index = start + 1; index < html.length; index += 1) {
     const character = html[index];
@@ -1056,7 +539,7 @@ function findHtmlTagEnd2(html, start) {
   }
   return -1;
 }
-__name(findHtmlTagEnd2, "findHtmlTagEnd");
+__name(findHtmlTagEnd, "findHtmlTagEnd");
 function removeHtmlLinkElements(html, elements, removed) {
   let cursor = 0;
   let output = "";
@@ -1138,14 +621,6 @@ export {
   createFarmAgentRobots,
   resolveFarmAgentSitemap,
   createFarmDefaultSitemap,
-  resolveFarmSecurityConfig,
-  getFarmSecurityHeader,
-  createFarmCspNonce,
-  addFarmCspNonceToScriptTags,
-  applyFarmCspHashesToHtml,
-  applyFarmCspNonceToResponse,
-  farmCspBlocksFrameworkInlineScripts,
-  createFarmCspNonceRewriter,
   resolveFarmPerformanceConfig,
   manageFarmHtmlPreloads,
   manageFarmLinkHeaderPreloads,