@farm.js/core 0.1.37 → 0.1.39

package/dist/{chunk-6TJITR2B.cjs → chunk-YFYUYWL7.cjs}

@@ -3,25 +3,31 @@
 var _chunkA6WIQH5Zcjs = require('./chunk-A6WIQH5Z.cjs');
 
 
-var _chunkMT763TDWcjs = require('./chunk-MT763TDW.cjs');
 
 
 
-var _chunkWT4TGLXTcjs = require('./chunk-WT4TGLXT.cjs');
+var _chunkWW46B6HAcjs = require('./chunk-WW46B6HA.cjs');
 
 
 
-var _chunk7DWNJI73cjs = require('./chunk-7DWNJI73.cjs');
+var _chunk5ULKUBIAcjs = require('./chunk-5ULKUBIA.cjs');
 
 
 
 
 
+var _chunkCIOT4HGTcjs = require('./chunk-CIOT4HGT.cjs');
 
 
 
 
-var _chunkTE2G5IONcjs = require('./chunk-TE2G5ION.cjs');
+
+
+
+
+
+
+var _chunkPGZDEPTMcjs = require('./chunk-PGZDEPTM.cjs');
 
 
 
@@ -29,7 +35,7 @@ var _chunkTE2G5IONcjs = require('./chunk-TE2G5ION.cjs');
 var _chunkMWWVKDW3cjs = require('./chunk-MWWVKDW3.cjs');
 
 
-var _chunkD3C5LBQYcjs = require('./chunk-D3C5LBQY.cjs');
+var _chunkWXJLNP33cjs = require('./chunk-WXJLNP33.cjs');
 
 
 var _chunkIK6LVLKCcjs = require('./chunk-IK6LVLKC.cjs');
@@ -38,7 +44,7 @@ var _chunkIK6LVLKCcjs = require('./chunk-IK6LVLKC.cjs');
 
 
 
-var _chunk3A4KGQYIcjs = require('./chunk-3A4KGQYI.cjs');
+var _chunkHRETEZ2Zcjs = require('./chunk-HRETEZ2Z.cjs');
 
 
 var _chunkKCMTCM6Icjs = require('./chunk-KCMTCM6I.cjs');
@@ -77,7 +83,7 @@ var _chunk2SJ4RQ6Pcjs = require('./chunk-2SJ4RQ6P.cjs');
 
 
 
-var _chunkQ5FYSK45cjs = require('./chunk-Q5FYSK45.cjs');
+var _chunkAS2VPMEEcjs = require('./chunk-AS2VPMEE.cjs');
 
 
 
@@ -95,12 +101,16 @@ var _chunk5D2JIPLHcjs = require('./chunk-5D2JIPLH.cjs');
 
 
 
-var _chunkLOFKRKO7cjs = require('./chunk-LOFKRKO7.cjs');
 
 
 
 
-var _chunkPTZ2TVNEcjs = require('./chunk-PTZ2TVNE.cjs');
+var _chunkRVXFINNScjs = require('./chunk-RVXFINNS.cjs');
+
+
+
+
+var _chunkH5CLOUZScjs = require('./chunk-H5CLOUZS.cjs');
 
 
 var _chunkCXP5U3RWcjs = require('./chunk-CXP5U3RW.cjs');
@@ -110,7 +120,7 @@ var _chunk3SDFA7UFcjs = require('./chunk-3SDFA7UF.cjs');
 
 
 
-var _chunkHITLGIAOcjs = require('./chunk-HITLGIAO.cjs');
+var _chunkCY2ZQ5C6cjs = require('./chunk-CY2ZQ5C6.cjs');
 
 
 
@@ -132,7 +142,8 @@ var _chunkWBKEZXWEcjs = require('./chunk-WBKEZXWE.cjs');
 var _chunkPSV6XKPOcjs = require('./chunk-PSV6XKPO.cjs');
 
 
-var _chunkMRMI32SNcjs = require('./chunk-MRMI32SN.cjs');
+
+var _chunk2ZYGC6SScjs = require('./chunk-2ZYGC6SS.cjs');
 
 
 
@@ -144,14 +155,14 @@ var _chunk6EXBPJ24cjs = require('./chunk-6EXBPJ24.cjs');
 var _chunkVEKFLAQMcjs = require('./chunk-VEKFLAQM.cjs');
 
 
-var _chunkB5PFZLKVcjs = require('./chunk-B5PFZLKV.cjs');
+var _chunkEKN7NSZOcjs = require('./chunk-EKN7NSZO.cjs');
 
 
 
 var _chunkOHY2ZWUGcjs = require('./chunk-OHY2ZWUG.cjs');
 
 
-var _chunkEUV4YR3Vcjs = require('./chunk-EUV4YR3V.cjs');
+var _chunkSGBJ247Qcjs = require('./chunk-SGBJ247Q.cjs');
 
 
 
@@ -160,20 +171,15 @@ var _chunkSDOTRX3Vcjs = require('./chunk-SDOTRX3V.cjs');
 
 
 
-var _chunkUJZLSXUBcjs = require('./chunk-UJZLSXUB.cjs');
-
-
-
+var _chunkBWIQR4DHcjs = require('./chunk-BWIQR4DH.cjs');
 
-var _chunkLPFV45AYcjs = require('./chunk-LPFV45AY.cjs');
 
 
 
+var _chunkLMPAPBUAcjs = require('./chunk-LMPAPBUA.cjs');
 
-var _chunk4GWRFP22cjs = require('./chunk-4GWRFP22.cjs');
 
-
-var _chunkU6MPZ35Qcjs = require('./chunk-U6MPZ35Q.cjs');
+var _chunkRWFLWR5Jcjs = require('./chunk-RWFLWR5J.cjs');
 
 
 var _chunkUFDAAQFXcjs = require('./chunk-UFDAAQFX.cjs');
@@ -200,12 +206,15 @@ var _chunk5QIKR7RRcjs = require('./chunk-5QIKR7RR.cjs');
 var _chunkKNBBQHO2cjs = require('./chunk-KNBBQHO2.cjs');
 
 
-var _chunkNQ6QFZWDcjs = require('./chunk-NQ6QFZWD.cjs');
+var _chunkQUCXCDE2cjs = require('./chunk-QUCXCDE2.cjs');
 
 
 var _chunkC5GUTBZKcjs = require('./chunk-C5GUTBZK.cjs');
 
 
+var _chunk6XWDE2P2cjs = require('./chunk-6XWDE2P2.cjs');
+
+
 var _chunkNO3WWW3Ncjs = require('./chunk-NO3WWW3N.cjs');
 
 
@@ -221,15 +230,15 @@ var _fs = require('fs');
 var FARM_CLIENT_CSS_HREF_PLACEHOLDER = "/__farm_client_css_href__";
 var FARM_CLIENT_JS_SRC_PLACEHOLDER = "/__farm_client_js_src__";
 async function hashAndCopy(sourcePath, destinationDir, hashedName) {
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   try {
-    const bytes = await fs.readFile(sourcePath);
+    const bytes = await fs3.readFile(sourcePath);
     if (bytes.length === 0) return null;
     const { createHash } = await import("crypto");
     const hash = createHash("sha256").update(bytes).digest("hex").slice(0, 8);
     const name = hashedName(hash);
-    await fs.mkdir(destinationDir, { recursive: true });
-    await fs.writeFile(_path2.default.join(destinationDir, name), bytes);
+    await fs3.mkdir(destinationDir, { recursive: true });
+    await fs3.writeFile(_path2.default.join(destinationDir, name), bytes);
     return name;
   } catch (e) {
     return null;
@@ -246,9 +255,9 @@ async function resolveHashedClientCssHref(clientOutputDir) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, resolveHashedClientCssHref, "resolveHashedClientCssHref");
 async function findFingerprintedClientEntry(clientOutputDir) {
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   try {
-    const entries = await fs.readdir(clientOutputDir);
+    const entries = await fs3.readdir(clientOutputDir);
     return _nullishCoalesce(entries.find((name) => /^farm-client-h[0-9a-f]+\.js$/.test(name)), () => ( null));
   } catch (e2) {
     return null;
@@ -258,10 +267,10 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, findFingerprintedClientEntry, "findFingerp
 async function resolveHashedClientJsSrc(clientOutputDir) {
   const entryName = await findFingerprintedClientEntry(clientOutputDir);
   if (!entryName) return "/farm-client.js";
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   const shim = `export * from "./${entryName}";
 `;
-  await fs.writeFile(_path2.default.join(clientOutputDir, "farm-client.js"), shim);
+  await fs3.writeFile(_path2.default.join(clientOutputDir, "farm-client.js"), shim);
   return `/${entryName}`;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, resolveHashedClientJsSrc, "resolveHashedClientJsSrc");
@@ -310,7 +319,7 @@ function getDocsTitle(docs) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, getDocsTitle, "getDocsTitle");
 function loadPages(contentDir, docs) {
-  return _chunkTE2G5IONcjs.discoverFarmDocsPages.call(void 0, contentDir, docs).map((page) => _chunkTE2G5IONcjs.loadFarmDocsPage.call(void 0, contentDir, docs, page.slug)).filter((page) => Boolean(page)).sort((a, b) => a.href.localeCompare(b.href));
+  return _chunkPGZDEPTMcjs.discoverFarmDocsPages.call(void 0, contentDir, docs).map((page) => _chunkPGZDEPTMcjs.loadFarmDocsPage.call(void 0, contentDir, docs, page.slug)).filter((page) => Boolean(page)).sort((a, b) => a.href.localeCompare(b.href));
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, loadPages, "loadPages");
 function findSocialImagePath(html) {
@@ -331,31 +340,34 @@ async function addHandlerRoute(routes, pathname, handler, absolutePaths) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, addHandlerRoute, "addHandlerRoute");
 async function compileFarmDocsManifest(docs, options) {
-  const contentDir = _chunkTE2G5IONcjs.resolveFarmDocsContentDir.call(void 0, docs, options);
+  const contentDir = _chunkPGZDEPTMcjs.resolveFarmDocsContentDir.call(void 0, docs, options);
   const pages = loadPages(contentDir, docs);
   const absolutePaths = [
     _path2.default.resolve(options.root),
     _path2.default.resolve(contentDir),
     docs.configPath || ""
   ];
-  const handler = _chunkTE2G5IONcjs.createFarmDocsHandler.call(void 0, docs, {
+  const handler = _chunkPGZDEPTMcjs.createFarmDocsHandler.call(void 0, docs, {
     root: options.root,
     srcDir: options.srcDir,
     clientEntry: options.clientEntry,
     fontAssets: options.fontAssets,
     fontStylesheetHref: options.fontStylesheetHref,
-    globalStylesheetHref: options.globalStylesheetHref
+    globalStylesheetHref: options.globalStylesheetHref,
+    isPathGuarded: options.isPathGuarded
   });
-  const apiHandler = _chunk7DWNJI73cjs.createFarmDocsAPIHandler.call(void 0, {
+  const apiHandler = _chunkCIOT4HGTcjs.createFarmDocsAPIHandler.call(void 0, {
     rootDir: options.root,
     srcDir: options.srcDir,
-    docs
+    docs,
+    isPathGuarded: options.isPathGuarded
   });
+  const publicPages = pages.filter((page) => !_optionalChain([options, 'access', _2 => _2.isPathGuarded, 'optionalCall', _3 => _3(page.href)]));
   const routes = {};
   const apiMarkdown = {};
   for (const page of pages) {
     const htmlResponse = await addHandlerRoute(routes, page.href, handler, absolutePaths);
-    const markdownPath = page.href === "/" ? "/.md" : `${page.href}.md`;
+    const markdownPath = _chunkPGZDEPTMcjs.getFarmDocsMarkdownPath.call(void 0, page.href);
     await addHandlerRoute(routes, markdownPath, handler, absolutePaths);
     if (htmlResponse) {
       const socialImagePath = findSocialImagePath(await htmlResponse.text());
@@ -363,6 +375,7 @@ async function compileFarmDocsManifest(docs, options) {
         await addHandlerRoute(routes, socialImagePath, handler, absolutePaths);
       }
     }
+    if (_optionalChain([options, 'access', _4 => _4.isPathGuarded, 'optionalCall', _5 => _5(page.href)])) continue;
     const apiResponse = await apiHandler(
       new Request(
         `${FARM_DOCS_COMPILED_ORIGIN}/api/docs?format=markdown&path=${encodeURIComponent(page.slug)}`
@@ -437,8 +450,8 @@ async function compileFarmDocsManifest(docs, options) {
       empty: await compileResponse(emptyResponse, absolutePaths),
       post: await compileResponse(postResponse, absolutePaths),
       search: {
-        pages: pages.map((page) => ({
-          ..._chunkTE2G5IONcjs.toFarmDocsMarkdownPage.call(void 0, page),
+        pages: publicPages.map((page) => ({
+          ..._chunkPGZDEPTMcjs.toFarmDocsMarkdownPage.call(void 0, page),
           sourcePath: `farm-docs:${page.slug || "index"}`
         })),
         search: _nullishCoalesce(searchConfig, () => ( true)),
@@ -450,6 +463,174 @@ async function compileFarmDocsManifest(docs, options) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, compileFarmDocsManifest, "compileFarmDocsManifest");
 
+// src/nitro/client-module-preloads.ts
+var _promises = require('fs/promises'); var _promises2 = _interopRequireDefault(_promises);
+
+var FARM_CLIENT_MODULE_PRELOADS_PLACEHOLDER = "__farm_client_module_preloads__";
+var FARM_CLIENT_MODULE_PRELOADS_FILE = "client-module-preloads.json";
+function collectFarmClientModulePreloads(bundle, options) {
+  const chunks = Object.values(bundle).filter(
+    (output) => output.type === "chunk"
+  );
+  const entry = chunks.find((chunk) => chunk.isEntry && chunk.name === options.entryName);
+  if (!entry) return null;
+  const byFile = new Map(chunks.map((chunk) => [chunk.fileName, chunk]));
+  const files = [];
+  const indexOf = /* @__PURE__ */ new Map();
+  const index = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (fileName) => {
+    let value = indexOf.get(fileName);
+    if (value === void 0) {
+      value = files.push(fileName) - 1;
+      indexOf.set(fileName, value);
+    }
+    return value;
+  }, "index");
+  const staticImports = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (chunk, loaded, into) => {
+    for (const fileName of _nullishCoalesce(chunk.imports, () => ( []))) {
+      const imported = byFile.get(fileName);
+      if (loaded.has(fileName) || !imported) continue;
+      loaded.add(fileName);
+      into.push(fileName);
+      staticImports(imported, loaded, into);
+    }
+    return into;
+  }, "staticImports");
+  const entryFiles = staticImports(entry, /* @__PURE__ */ new Set([entry.fileName]), []);
+  const entryLoaded = /* @__PURE__ */ new Set([entry.fileName, ...entryFiles]);
+  const modules = {};
+  for (const chunk of chunks) {
+    if (!chunk.isDynamicEntry || !chunk.facadeModuleId || entryLoaded.has(chunk.fileName)) {
+      continue;
+    }
+    const moduleId = chunk.facadeModuleId.split("?")[0];
+    if (!_path2.default.isAbsolute(moduleId)) continue;
+    const loaded = /* @__PURE__ */ new Set([...entryLoaded, chunk.fileName]);
+    modules[_chunk5QIKR7RRcjs.toViteModuleId.call(void 0, moduleId, options.root)] = [
+      chunk.fileName,
+      ...staticImports(chunk, loaded, [])
+    ].map(index);
+  }
+  return { files, entry: entryFiles.map(index), modules };
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, collectFarmClientModulePreloads, "collectFarmClientModulePreloads");
+function createFarmClientModulePreloadPlugin(options) {
+  return {
+    name: "farm-client-module-preloads",
+    async generateBundle(_output, bundle) {
+      await _promises2.default.mkdir(options.buildDir, { recursive: true });
+      await _promises2.default.writeFile(
+        _path2.default.join(options.buildDir, FARM_CLIENT_MODULE_PRELOADS_FILE),
+        JSON.stringify(collectFarmClientModulePreloads(bundle, options))
+      );
+    }
+  };
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, createFarmClientModulePreloadPlugin, "createFarmClientModulePreloadPlugin");
+async function readFarmClientModulePreloads(buildDir) {
+  try {
+    return JSON.parse(
+      await _promises2.default.readFile(_path2.default.join(buildDir, FARM_CLIENT_MODULE_PRELOADS_FILE), "utf8")
+    );
+  } catch (e4) {
+    return null;
+  }
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, readFarmClientModulePreloads, "readFarmClientModulePreloads");
+function encodeFarmClientModulePreloads(manifest) {
+  return JSON.stringify(JSON.stringify(manifest)).slice(1, -1).replace(/'/g, "\\u0027").replace(/`/g, "\\u0060").replace(/\$/g, "\\u0024").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, encodeFarmClientModulePreloads, "encodeFarmClientModulePreloads");
+
+// src/docs/module-preloads.ts
+
+
+var FARM_DOCS_MODULE_PRELOADS_PLACEHOLDER = "__farm_docs_module_preloads__";
+var FARM_DOCS_MODULE_PRELOADS_FILE = "docs-module-preloads.json";
+function normalizeModuleId(id) {
+  return id.split("?")[0].replace(/\\/g, "/");
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, normalizeModuleId, "normalizeModuleId");
+function collectFarmDocsModulePreloads(bundle, options) {
+  const chunks = Object.values(bundle).filter(
+    (output) => output.type === "chunk"
+  );
+  const byFile = new Map(chunks.map((chunk) => [chunk.fileName, chunk]));
+  const byModule = new Map(
+    chunks.filter((chunk) => chunk.facadeModuleId).map((chunk) => [normalizeModuleId(chunk.facadeModuleId), chunk])
+  );
+  const withStaticImports = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (fileName, into) => {
+    if (into.has(fileName) || !byFile.has(fileName)) return into;
+    into.add(fileName);
+    for (const imported of _nullishCoalesce(byFile.get(fileName).imports, () => ( []))) withStaticImports(imported, into);
+    return into;
+  }, "withStaticImports");
+  const runtimeChunks = options.runtimeModuleIds.map((id) => byModule.get(normalizeModuleId(id))).filter((chunk) => Boolean(chunk));
+  const entry = chunks.find((chunk) => chunk.isEntry && chunk.name === options.entryName);
+  if (!entry || runtimeChunks.length === 0) return null;
+  const runtime = withStaticImports(entry.fileName, /* @__PURE__ */ new Set());
+  for (const chunk of runtimeChunks) withStaticImports(chunk.fileName, runtime);
+  const files = [];
+  const indexOf = /* @__PURE__ */ new Map();
+  const index = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (fileName) => {
+    let value = indexOf.get(fileName);
+    if (value === void 0) {
+      value = files.push(fileName) - 1;
+      indexOf.set(fileName, value);
+    }
+    return value;
+  }, "index");
+  const pages = {};
+  const root = normalizeModuleId(_path2.default.resolve(options.root));
+  for (const [moduleId, chunk] of byModule) {
+    if (!/\.mdx?$/.test(moduleId) || !moduleId.startsWith(`${root}/`)) continue;
+    const own = [...withStaticImports(chunk.fileName, /* @__PURE__ */ new Set())].filter(
+      (fileName) => !runtime.has(fileName)
+    );
+    pages[moduleId.slice(root.length)] = own.map(index);
+  }
+  return { files, runtime: [...runtime].map(index), pages };
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, collectFarmDocsModulePreloads, "collectFarmDocsModulePreloads");
+function createFarmDocsModulePreloadPlugin(options) {
+  let runtimeModuleIds = [];
+  return {
+    name: "farm-docs-module-preloads",
+    async buildStart() {
+      const resolved = await Promise.all(
+        options.modules.map((specifier) => this.resolve(specifier, options.importer))
+      );
+      runtimeModuleIds = resolved.filter((value) => value !== null).map((value) => value.id);
+    },
+    async generateBundle(_output, bundle) {
+      const manifest = collectFarmDocsModulePreloads(bundle, {
+        root: options.root,
+        entryName: options.entryName,
+        runtimeModuleIds
+      });
+      await _promises2.default.mkdir(options.buildDir, { recursive: true });
+      await _promises2.default.writeFile(
+        _path2.default.join(options.buildDir, FARM_DOCS_MODULE_PRELOADS_FILE),
+        JSON.stringify(manifest)
+      );
+    }
+  };
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, createFarmDocsModulePreloadPlugin, "createFarmDocsModulePreloadPlugin");
+async function readFarmDocsModulePreloads(buildDir) {
+  try {
+    return JSON.parse(
+      await _promises2.default.readFile(_path2.default.join(buildDir, FARM_DOCS_MODULE_PRELOADS_FILE), "utf8")
+    );
+  } catch (e5) {
+    return null;
+  }
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, readFarmDocsModulePreloads, "readFarmDocsModulePreloads");
+function encodeFarmDocsModulePreloads(manifest) {
+  return JSON.stringify(JSON.stringify(manifest)).slice(1, -1).replace(/'/g, "\\u0027").replace(/`/g, "\\u0060").replace(/\$/g, "\\u0024").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, encodeFarmDocsModulePreloads, "encodeFarmDocsModulePreloads");
+
 // src/route-runtime-manifest.ts
 
 var FARM_ROUTE_RUNTIME_MANIFEST = "route-runtime-manifest.json";
@@ -524,10 +705,10 @@ async function createFarmRouteRuntimeManifest(options) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmRouteRuntimeManifest, "createFarmRouteRuntimeManifest");
 async function writeFarmRouteRuntimeManifest(directory, manifest) {
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   const manifestPath = _path2.default.join(directory, FARM_ROUTE_RUNTIME_MANIFEST);
-  await fs.mkdir(directory, { recursive: true });
-  await fs.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}
+  await fs3.mkdir(directory, { recursive: true });
+  await fs3.writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}
 `);
   return manifestPath;
 }
@@ -547,7 +728,7 @@ function validateFarmRouteRuntimeDeployment(manifest, preset) {
         `Route "${route.pattern}" requires the ${route.runtime} runtime, but preset "${preset}" emits ${runtime} functions. Choose a compatible preset or change the route runtime.`
       );
     }
-    if (_optionalChain([route, 'access', _2 => _2.regions, 'optionalAccess', _3 => _3.length]) && preset !== "vercel" && preset !== "vercel-edge") {
+    if (_optionalChain([route, 'access', _6 => _6.regions, 'optionalAccess', _7 => _7.length]) && preset !== "vercel" && preset !== "vercel-edge") {
       warnings.add(
         `Preset "${preset}" does not map per-route regions; Farm kept them in ${FARM_ROUTE_RUNTIME_MANIFEST} for deployment adapters.`
       );
@@ -572,7 +753,7 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, normalizeManifestSource, "normalizeManifes
 
 // src/nitro/vercel-route-runtime.ts
 
-async function createFarmVercelRouteRuntimeFunctions(outputDir, manifest, fs, basePath = "/") {
+async function createFarmVercelRouteRuntimeFunctions(outputDir, manifest, fs3, basePath = "/") {
   const dynamicRoutes = manifest.routes.filter(
     (route) => route.rendering === "dynamic" && route.runtime !== "edge"
   );
@@ -596,15 +777,15 @@ async function createFarmVercelRouteRuntimeFunctions(outputDir, manifest, fs, ba
   const destinations = /* @__PURE__ */ new Map();
   let groupIndex = 0;
   for (const [key, group] of groups) {
-    if (!_optionalChain([group, 'access', _4 => _4.config, 'access', _5 => _5.regions, 'optionalAccess', _6 => _6.length]) && !group.config.maxDuration) {
+    if (!_optionalChain([group, 'access', _8 => _8.config, 'access', _9 => _9.regions, 'optionalAccess', _10 => _10.length]) && !group.config.maxDuration) {
       destinations.set(key, "/__nitro");
       continue;
     }
     groupIndex += 1;
     const functionName = `__farm_runtime_${groupIndex}`;
     const functionDir = _path2.default.join(functionsDir, `${functionName}.func`);
-    await fs.cp(baseFunctionDir, functionDir, { recursive: true, force: true });
-    await configureVercelFunction(functionDir, group.config, fs);
+    await fs3.cp(baseFunctionDir, functionDir, { recursive: true, force: true });
+    await configureVercelFunction(functionDir, group.config, fs3);
     destinations.set(key, `/${functionName}`);
   }
   const routes = [];
@@ -653,20 +834,20 @@ function farmRoutePatternToVercelSource(pattern, basePath = "/") {
   return source === "/" ? normalizedBasePath : `${normalizedBasePath}${source}`;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, farmRoutePatternToVercelSource, "farmRoutePatternToVercelSource");
-async function configureVercelFunction(functionDir, config, fs) {
+async function configureVercelFunction(functionDir, config, fs3) {
   const configPath = _path2.default.join(functionDir, ".vc-config.json");
-  const current = JSON.parse(await fs.readFile(configPath, "utf8"));
+  const current = JSON.parse(await fs3.readFile(configPath, "utf8"));
   const next = {
     ...current,
-    ..._optionalChain([config, 'access', _7 => _7.regions, 'optionalAccess', _8 => _8.length]) ? { regions: config.regions } : {},
+    ..._optionalChain([config, 'access', _11 => _11.regions, 'optionalAccess', _12 => _12.length]) ? { regions: config.regions } : {},
     ...config.maxDuration ? { maxDuration: config.maxDuration } : {}
   };
-  await fs.writeFile(configPath, `${JSON.stringify(next, null, 2)}
+  await fs3.writeFile(configPath, `${JSON.stringify(next, null, 2)}
 `);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, configureVercelFunction, "configureVercelFunction");
 function hasVercelFunctionControls(route) {
-  return Boolean(_optionalChain([route, 'access', _9 => _9.regions, 'optionalAccess', _10 => _10.length]) || route.maxDuration);
+  return Boolean(_optionalChain([route, 'access', _13 => _13.regions, 'optionalAccess', _14 => _14.length]) || route.maxDuration);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, hasVercelFunctionControls, "hasVercelFunctionControls");
 function compareRuntimeRoutes(left, right) {
@@ -794,278 +975,6 @@ export default async function farmNetlifyHandler(request, context) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmNetlifyEntry, "createFarmNetlifyEntry");
 
-// src/nitro/node-server-entry.ts
-var FARM_NODE_ENV_MODULE_FILE = "farm-node-env.mjs";
-var FARM_NODE_ENV_MODULE_SOURCE = `if (!process.env.NODE_ENV) process.env.NODE_ENV = "production";
-`;
-function createFarmNodeServerEntry(options) {
-  const serverConfig = JSON.stringify(options.server);
-  const nitroEntryImport = `./${options.nitroEntryFile.replace(/^\.\//, "")}`;
-  return `
-import "./${FARM_NODE_ENV_MODULE_FILE}";
-import "#nitro/virtual/polyfills";
-import { NodeRequest, serve } from ${JSON.stringify(options.nodeAdapterModule)};
-import wsAdapter from ${JSON.stringify(options.websocketAdapterModule)};
-import { resolveWebsocketHooks, useNitroApp, useNitroHooks } from "#nitro/runtime/app";
-import { useRuntimeConfig } from "#nitro/runtime/runtime-config";
-import { trapUnhandledErrors } from "#nitro/runtime/error/hooks";
-import { setupCloseHooks } from "#nitro/runtime/shutdown";
-import { startScheduleRunner } from "#nitro/runtime/task";
-import { tracingSrvxPlugins } from "#nitro/virtual/tracing";
-import { farmProductionLifecycle } from ${JSON.stringify(nitroEntryImport)};
-
-const farmServerConfig = ${serverConfig};
-if (!process.env.NITRO_SHUTDOWN_TIMEOUT) {
-  process.env.NITRO_SHUTDOWN_TIMEOUT = String(farmServerConfig.gracefulShutdownTimeout);
-}
-const shutdownConfig = {
-  disabled: Boolean(process.env.NITRO_SHUTDOWN_DISABLED),
-  signals: (process.env.NITRO_SHUTDOWN_SIGNALS || "SIGTERM SIGINT")
-    .split(" ")
-    .map((signal) => signal.trim())
-    .filter(Boolean),
-  timeout: Number.parseInt(process.env.NITRO_SHUTDOWN_TIMEOUT || "", 10) || 30000,
-  forceExit: !process.env.NITRO_SHUTDOWN_NO_FORCE_EXIT,
-};
-
-const nitroApp = useNitroApp();
-useNitroHooks().hook("close", async () => {
-  try {
-    await farmProductionLifecycle.close("production-server-closed");
-  } catch (error) {
-    process.exitCode = 1;
-    throw error;
-  }
-});
-
-let startupSignal;
-let resolveStartupSignal;
-const startupSignalPromise = new Promise((resolve) => {
-  resolveStartupSignal = resolve;
-});
-const startupSignalListeners = new Map();
-if (!shutdownConfig.disabled) {
-  for (const signal of shutdownConfig.signals) {
-    const listener = (receivedSignal) => {
-      if (!startupSignal) {
-        startupSignal = receivedSignal;
-        resolveStartupSignal(receivedSignal);
-      }
-      farmProductionLifecycle.beginDrain(receivedSignal);
-    };
-    startupSignalListeners.set(signal, listener);
-    process.once(signal, listener);
-  }
-}
-
-try {
-  await Promise.race([
-    Promise.resolve().then(() => farmProductionLifecycle.start()),
-    startupSignalPromise,
-  ]);
-} catch (error) {
-  await farmProductionLifecycle.close("production-start-failed").catch((closeError) => {
-    console.error("[Farm] Runtime cleanup after startup failure failed:", closeError);
-  });
-  throw error;
-} finally {
-  for (const [signal, listener] of startupSignalListeners) {
-    process.removeListener(signal, listener);
-  }
-}
-
-if (startupSignal) {
-  let startupCloseTimer;
-  const startupCloseCompleted = await Promise.race([
-    Promise.resolve()
-      .then(() => farmProductionLifecycle.close(startupSignal))
-      .then(
-        () => true,
-        (error) => {
-          console.error("[Farm] Runtime shutdown during startup failed:", error);
-          process.exitCode = 1;
-          return true;
-        },
-      ),
-    new Promise((resolve) => {
-      startupCloseTimer = setTimeout(() => resolve(false), farmServerConfig.gracefulShutdownTimeout);
-    }),
-  ]);
-  clearTimeout(startupCloseTimer);
-  if (!startupCloseCompleted) {
-    console.warn("[Farm] Runtime startup did not settle before shutdown; forcing cleanup");
-    let forcedCloseTimer;
-    const forcedCloseCompleted = await Promise.race([
-      Promise.resolve()
-        .then(() => farmProductionLifecycle.forceClose(startupSignal))
-        .then(
-          () => true,
-          (error) => {
-            console.error("[Farm] Forced runtime shutdown during startup failed:", error);
-            process.exitCode = 1;
-            return true;
-          },
-        ),
-      new Promise((resolve) => {
-        forcedCloseTimer = setTimeout(
-          () => resolve(false),
-          farmServerConfig.gracefulShutdownTimeout,
-        );
-      }),
-    ]);
-    clearTimeout(forcedCloseTimer);
-    if (!forcedCloseCompleted) {
-      console.error("[Farm] Forced runtime shutdown during startup timed out");
-      process.exitCode = 1;
-    }
-  }
-  process.exit(process.exitCode || 0);
-}
-
-const cert = process.env.NITRO_SSL_CERT;
-const key = process.env.NITRO_SSL_KEY;
-const configuredPort = Number(process.env.NITRO_PORT || process.env.PORT);
-const port = Number.isFinite(configuredPort) && configuredPort > 0 ? configuredPort : 3000;
-const host = process.env.NITRO_HOST || process.env.HOST;
-const socketPath = process.env.NITRO_UNIX_SOCKET;
-const server = serve({
-  manual: true,
-  silent: true,
-  gracefulShutdown: false,
-  port,
-  hostname: host,
-  node: socketPath ? { path: socketPath } : undefined,
-  tls: cert && key ? { cert, key } : undefined,
-  fetch: nitroApp.fetch,
-  plugins: [...tracingSrvxPlugins],
-});
-const nodeServer = server.node?.server;
-if (!nodeServer) throw new Error("[Farm] Nitro did not create a Node server");
-
-nodeServer.headersTimeout = farmServerConfig.headersTimeout;
-nodeServer.requestTimeout = farmServerConfig.requestTimeout;
-nodeServer.keepAliveTimeout = farmServerConfig.keepAliveTimeout;
-
-let isShuttingDown = false;
-nodeServer.on("request", (_request, response) => {
-  response.once("finish", () => {
-    if (isShuttingDown) nodeServer.closeIdleConnections?.();
-  });
-});
-
-if (import.meta._websocket) {
-  const { handleUpgrade } = wsAdapter({ resolve: resolveWebsocketHooks });
-  nodeServer.on("upgrade", (request, socket, head) => {
-    handleUpgrade(
-      request,
-      socket,
-      head,
-      new NodeRequest({ req: request, upgrade: { socket, head } }),
-    );
-  });
-}
-
-setupCloseHooks(server);
-trapUnhandledErrors();
-
-let shutdownPromise;
-async function shutdown(signal) {
-  isShuttingDown = true;
-  farmProductionLifecycle.beginDrain(signal);
-
-  const gracefulClose = server.close().then(
-    () => true,
-    (error) => {
-      console.error("[Farm] Runtime shutdown failed:", error);
-      process.exitCode = 1;
-      return true;
-    },
-  );
-  nodeServer.closeIdleConnections?.();
-  let gracefulTimer;
-  const gracefullyClosed = await Promise.race([
-    gracefulClose,
-    new Promise((resolve) => {
-      gracefulTimer = setTimeout(() => resolve(false), shutdownConfig.timeout);
-    }),
-  ]);
-  clearTimeout(gracefulTimer);
-
-  if (!gracefullyClosed) {
-    console.warn("[Farm] Graceful shutdown timed out; forcing cleanup");
-    void server.close(true).catch((error) => {
-      console.error("[Farm] Forced server shutdown failed:", error);
-      process.exitCode = 1;
-    });
-
-    let forceTimer;
-    const forceClosed = await Promise.race([
-      Promise.resolve()
-        .then(() => farmProductionLifecycle.forceClose("production-server-closed"))
-        .then(
-          () => true,
-          (error) => {
-            console.error("[Farm] Forced runtime shutdown failed:", error);
-            process.exitCode = 1;
-            return true;
-          },
-        ),
-      new Promise((resolve) => {
-        forceTimer = setTimeout(() => resolve(false), shutdownConfig.timeout);
-      }),
-    ]);
-    clearTimeout(forceTimer);
-    if (!forceClosed) {
-      console.error("[Farm] Forced runtime shutdown timed out");
-      process.exitCode = 1;
-    }
-  }
-
-  if (shutdownConfig.forceExit) process.exit(process.exitCode || 0);
-}
-
-if (!shutdownConfig.disabled) {
-  for (const signal of shutdownConfig.signals) {
-    process.once(signal, (receivedSignal) => {
-      shutdownPromise ||= shutdown(receivedSignal);
-    });
-  }
-}
-
-try {
-  await server.serve();
-  const protocol = cert && key ? "https" : "http";
-  const addressInfo = nodeServer.address();
-  if (typeof addressInfo === "string") {
-    console.log(\`Listening on unix socket \${addressInfo}\`);
-  } else if (addressInfo) {
-    const configuredBaseURL = useRuntimeConfig().app.baseURL || "";
-    const baseURL = configuredBaseURL.endsWith("/")
-      ? configuredBaseURL.slice(0, -1)
-      : configuredBaseURL;
-    const address = addressInfo.family === "IPv6"
-      ? \`[\${addressInfo.address}]\`
-      : addressInfo.address;
-    console.log(\`Listening on \${protocol}://\${address}:\${addressInfo.port}\${baseURL}\`);
-  }
-} catch (error) {
-  console.error(error);
-  process.exitCode = 1;
-  await farmProductionLifecycle.close("production-listen-error").catch((closeError) => {
-    console.error("[Farm] Runtime cleanup after listen failure failed:", closeError);
-  });
-  throw error;
-}
-
-if (import.meta._tasks) {
-  startScheduleRunner({ waitUntil: server.waitUntil });
-}
-
-export default {};
-  `.trim();
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, createFarmNodeServerEntry, "createFarmNodeServerEntry");
-
 // src/nitro/universal-build.ts
 function preloadFarmNitroBuilder() {
   return import("nitro/builder").then(
@@ -1083,7 +992,7 @@ function findFarmCoreRoot(from) {
     if (_fs.existsSync.call(void 0, manifest)) {
       try {
         if (JSON.parse(_fs.readFileSync.call(void 0, manifest, "utf8")).name === "@farm.js/core") return dir;
-      } catch (e4) {
+      } catch (e6) {
       }
     }
     dir = _path2.default.dirname(dir);
@@ -1103,7 +1012,7 @@ function findInstalledPackageDir(name, from) {
     if (_fs.existsSync.call(void 0, _path2.default.join(candidate, "package.json"))) {
       try {
         return _fs.realpathSync.call(void 0, candidate);
-      } catch (e5) {
+      } catch (e7) {
         return null;
       }
     }
@@ -1120,7 +1029,7 @@ function collectFarmDependencyDirs(root) {
     let manifest;
     try {
       manifest = JSON.parse(_fs.readFileSync.call(void 0, _path2.default.join(dir, "package.json"), "utf8"));
-    } catch (e6) {
+    } catch (e8) {
       return;
     }
     for (const field of ["dependencies", "optionalDependencies", "peerDependencies"]) {
@@ -1136,7 +1045,7 @@ function collectFarmDependencyDirs(root) {
         if (name.startsWith("@farm.js/")) queue.push({ name, from: root });
       }
     }
-  } catch (e7) {
+  } catch (e9) {
   }
   for (let next = queue.pop(); next; next = queue.pop()) {
     const dir = findInstalledPackageDir(next.name, next.from);
@@ -1215,14 +1124,14 @@ function createPrerenderRuntimeResolverPlugin(root, resolveNitroEntry = resolveN
   return {
     name: "farm-prerender-runtime-resolver",
     async resolveId(id, _importer, options) {
-      if (_optionalChain([options, 'access', _11 => _11.custom, 'optionalAccess', _12 => _12.farmPrerenderRuntimeResolve])) return null;
+      if (_optionalChain([options, 'access', _15 => _15.custom, 'optionalAccess', _16 => _16.farmPrerenderRuntimeResolve])) return null;
       if (id.startsWith("\0") || id.startsWith(".") || id.startsWith("#") || id.startsWith("virtual:") || _path2.default.isAbsolute(id) || NODE_BUILTIN_MODULES.has(id)) {
         return null;
       }
       if (nitroEntry === void 0) {
         try {
           nitroEntry = resolveNitroEntry(root);
-        } catch (e8) {
+        } catch (e10) {
           nitroEntry = null;
         }
       }
@@ -1241,7 +1150,7 @@ function resolveNitroPackageEntry(root) {
   let runtimeRequire = projectRequire;
   try {
     runtimeRequire = _module.createRequire.call(void 0, projectRequire.resolve("@farm.js/core"));
-  } catch (e9) {
+  } catch (e11) {
   }
   return runtimeRequire.resolve("nitro");
 }
@@ -1298,7 +1207,7 @@ async function canUseRolldownBuilder() {
   try {
     await import("rolldown");
     return true;
-  } catch (e10) {
+  } catch (e12) {
     return false;
   }
 }
@@ -1314,7 +1223,7 @@ function hasReactDomEdgeServerBuild(root) {
   try {
     _module.createRequire.call(void 0, _path2.default.join(root, "package.json")).resolve("react-dom/server.edge");
     return true;
-  } catch (e11) {
+  } catch (e13) {
     return false;
   }
 }
@@ -1366,7 +1275,7 @@ function createMetadataImageWasmPlugin() {
   return {
     name: "farm-metadata-image-wasm",
     resolveId(source, importer) {
-      if (!source.endsWith(".wasm?module") || !_optionalChain([importer, 'optionalAccess', _13 => _13.replace, 'call', _14 => _14(/\\/g, "/"), 'access', _15 => _15.includes, 'call', _16 => _16("/@vercel/og/")])) {
+      if (!source.endsWith(".wasm?module") || !_optionalChain([importer, 'optionalAccess', _17 => _17.replace, 'call', _18 => _18(/\\/g, "/"), 'access', _19 => _19.includes, 'call', _20 => _20("/@vercel/og/")])) {
         return null;
       }
       const requestPath = source.slice(0, -"?module".length);
@@ -1492,9 +1401,9 @@ function restoreLiteralModuleSpecifiers(code, fileName, { parseSync, Visitor })
   if (needsAst) {
     replacements.length = 0;
     const restore = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (node) => {
-      if (_optionalChain([node, 'optionalAccess', _17 => _17.type]) !== "TemplateLiteral") return;
+      if (_optionalChain([node, 'optionalAccess', _21 => _21.type]) !== "TemplateLiteral") return;
       const template = node;
-      const value = _optionalChain([template, 'access', _18 => _18.quasis, 'access', _19 => _19[0], 'optionalAccess', _20 => _20.value, 'access', _21 => _21.cooked]);
+      const value = _optionalChain([template, 'access', _22 => _22.quasis, 'access', _23 => _23[0], 'optionalAccess', _24 => _24.value, 'access', _25 => _25.cooked]);
       if (template.expressions.length > 0 || typeof value !== "string") return;
       replacements.push({
         start: template.start,
@@ -1546,7 +1455,7 @@ function trimSlashes(value) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, trimSlashes, "trimSlashes");
 function resolveBuildDocsContentDir(config, root) {
-  if (!_optionalChain([config, 'access', _22 => _22.docs, 'optionalAccess', _23 => _23.enabled])) return null;
+  if (!_optionalChain([config, 'access', _26 => _26.docs, 'optionalAccess', _27 => _27.enabled])) return null;
   const configuredContentDir = config.docs.contentDir || config.docs.config.contentDir;
   if (typeof configuredContentDir === "string" && configuredContentDir.trim()) {
     const contentDir = _path2.default.isAbsolute(configuredContentDir) ? configuredContentDir : _path2.default.join(root, configuredContentDir);
@@ -1578,14 +1487,14 @@ function hasProjectPostcssConfig(root) {
     try {
       projectRequire.resolve(`./${file}`);
       return true;
-    } catch (e12) {
+    } catch (e14) {
       return false;
     }
   });
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, hasProjectPostcssConfig, "hasProjectPostcssConfig");
 async function findFarmConfigPath(root) {
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   const candidates = [
     "farm.config.ts",
     "farm.config.mts",
@@ -1599,26 +1508,17 @@ async function findFarmConfigPath(root) {
   for (const candidate of candidates) {
     const resolvedPath = _path2.default.join(root, candidate);
     try {
-      await fs.access(resolvedPath);
+      await fs3.access(resolvedPath);
       return resolvedPath;
-    } catch (e13) {
+    } catch (e15) {
     }
   }
   return null;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, findFarmConfigPath, "findFarmConfigPath");
-function hasFarmMiddlewareConfig(config) {
-  if (!config) return false;
-  if (Array.isArray(config)) return config.length > 0;
-  const configRecord = config;
-  return Boolean(
-    configRecord.matcher || configRecord.exclude || configRecord.runtime || configRecord.handler || Array.isArray(configRecord.handlers) && configRecord.handlers.length > 0
-  );
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, hasFarmMiddlewareConfig, "hasFarmMiddlewareConfig");
 function hasFarmServerRuntimePlugins(config) {
   return (config.plugins || []).some((plugin) => {
-    if (_chunkUJZLSXUBcjs.getFarmIntegrationPluginServerRuntime.call(void 0, plugin) === false) return false;
+    if (_chunkBWIQR4DHcjs.getFarmIntegrationPluginServerRuntime.call(void 0, plugin) === false) return false;
     return Boolean(
       plugin.setup || plugin.init || plugin.ready || plugin.shutdown || plugin.runtime || plugin.router || plugin.render || plugin.beforeRouteMatch || plugin.afterRouteMatch || plugin.beforeRender || plugin.afterRender || plugin.onError || plugin.transformHTML
     );
@@ -1631,19 +1531,19 @@ function hasFarmPluginRoutes(config) {
 _chunkS3JO3N4Hcjs.__name.call(void 0, hasFarmPluginRoutes, "hasFarmPluginRoutes");
 function farmServerRuntimePluginsMayHandlePath(config, pathname) {
   return (config.plugins || []).some(
-    (plugin) => _chunkUJZLSXUBcjs.getFarmIntegrationPluginServerRuntime.call(void 0, plugin) !== false && _chunkQ5FYSK45cjs.farmPluginMayAffectRuntimePath.call(void 0, plugin, pathname)
+    (plugin) => _chunkBWIQR4DHcjs.getFarmIntegrationPluginServerRuntime.call(void 0, plugin) !== false && _chunkAS2VPMEEcjs.farmPluginMayAffectRuntimePath.call(void 0, plugin, pathname)
   );
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, farmServerRuntimePluginsMayHandlePath, "farmServerRuntimePluginsMayHandlePath");
 async function discoverMiddlewareRoutes(appDir) {
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   const appDirs = Array.isArray(appDir) ? [...appDir] : [appDir];
   const routes = /* @__PURE__ */ new Map();
   async function walk(dir, routePath, directory, discovered) {
     let entries;
     try {
-      entries = await fs.readdir(dir, { withFileTypes: true });
-    } catch (e14) {
+      entries = await fs3.readdir(dir, { withFileTypes: true });
+    } catch (e16) {
       return;
     }
     const middlewareFile = entries.find(
@@ -1662,8 +1562,8 @@ async function discoverMiddlewareRoutes(appDir) {
       }
       await walk(
         _path2.default.join(dir, entry.name),
-        _chunkLPFV45AYcjs.appendMiddlewareRoutePath.call(void 0, routePath, entry.name),
-        _chunkLPFV45AYcjs.appendMiddlewareDirectory.call(void 0, directory, entry.name),
+        _chunkLMPAPBUAcjs.appendMiddlewareRoutePath.call(void 0, routePath, entry.name),
+        _chunkLMPAPBUAcjs.appendMiddlewareDirectory.call(void 0, directory, entry.name),
         discovered
       );
     }
@@ -1676,11 +1576,11 @@ async function discoverMiddlewareRoutes(appDir) {
       routes.set(route.directory, route);
     }
   }
-  return Array.from(routes.values()).sort(_chunkLPFV45AYcjs.compareMiddlewareRouteLocations).map(({ path: routePath, filePath }) => ({ path: routePath, filePath }));
+  return Array.from(routes.values()).sort(_chunkLMPAPBUAcjs.compareMiddlewareRouteLocations).map(({ path: routePath, filePath }) => ({ path: routePath, filePath }));
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, discoverMiddlewareRoutes, "discoverMiddlewareRoutes");
 function assertFarmDocsRuntimeSupported(config, preset) {
-  if (!_optionalChain([config, 'access', _24 => _24.docs, 'optionalAccess', _25 => _25.enabled]) || !_optionalChain([config, 'access', _26 => _26.docs, 'access', _27 => _27.adapter, 'optionalAccess', _28 => _28.server]) || _chunkC5GUTBZKcjs.getFarmPresetRuntime.call(void 0, preset) !== "edge" || Boolean(config.docs.adapter.edgeCompiler)) {
+  if (!_optionalChain([config, 'access', _28 => _28.docs, 'optionalAccess', _29 => _29.enabled]) || !_optionalChain([config, 'access', _30 => _30.docs, 'access', _31 => _31.adapter, 'optionalAccess', _32 => _32.server]) || _chunkC5GUTBZKcjs.getFarmPresetRuntime.call(void 0, preset) !== "edge" || Boolean(config.docs.adapter.edgeCompiler)) {
     return;
   }
   throw new Error(
@@ -1694,7 +1594,7 @@ async function buildUniversal(config, routeManager, apiRouteManager, serverRende
   assertFarmDocsRuntimeSupported(config, preset);
   const srcDir = config.srcDir || "src";
   const distDir = config.distDir || ".farm";
-  const deployOutputDir = _chunk3A4KGQYIcjs.resolveDeployOutputPath.call(void 0, root, config.deploy.outputDir);
+  const deployOutputDir = _chunkHRETEZ2Zcjs.resolveDeployOutputPath.call(void 0, root, config.deploy.outputDir);
   const lifecyclePluginManager = options.pluginManager;
   const productionViteResultPromise = Promise.allSettled([
     Promise.resolve(_nullishCoalesce(options.productionVite, () => ( _chunkA6WIQH5Zcjs.loadFarmProductionVite.call(void 0, ))))
@@ -1713,7 +1613,7 @@ async function buildUniversal(config, routeManager, apiRouteManager, serverRende
     const routeRuntimeManifestResultPromise = Promise.allSettled([routeRuntimeManifestPromise]);
     const pageRoutes = [];
     for (const [pattern, entry] of routeManager.getRoutes()) {
-      const markdownSourcePath = entry.markdownSourcePath || (_chunkB5PFZLKVcjs.isFarmMarkdownPageFile.call(void 0, entry.modulePath) ? entry.modulePath : void 0);
+      const markdownSourcePath = entry.markdownSourcePath || (_chunkEKN7NSZOcjs.isFarmMarkdownPageFile.call(void 0, entry.modulePath) ? entry.modulePath : void 0);
       pageRoutes.push({
         pattern,
         ...entry.directory ? { directory: entry.directory } : {},
@@ -1738,12 +1638,12 @@ async function buildUniversal(config, routeManager, apiRouteManager, serverRende
       })
     );
     _chunk5QIKR7RRcjs.logger.info(`\u{1F4CB} Found ${pageRoutes.length} page routes`);
-    const fs = await import("fs/promises");
+    const fs3 = await import("fs/promises");
     const layoutRoutes = [];
     const appDir = _path2.default.join(root, srcDir, "app");
     async function findLayoutsForClient(dir, routePrefix = "/") {
       try {
-        const entries = await fs.readdir(dir, { withFileTypes: true });
+        const entries = await fs3.readdir(dir, { withFileTypes: true });
         for (const entry of entries) {
           if (entry.isFile() && entry.name.match(/^layout\.(tsx?|jsx?|vue|svelte)$/)) {
             layoutRoutes.push({
@@ -1755,7 +1655,7 @@ async function buildUniversal(config, routeManager, apiRouteManager, serverRende
             await findLayoutsForClient(_path2.default.join(dir, entry.name), childPrefix);
           }
         }
-      } catch (e15) {
+      } catch (e17) {
       }
     }
     _chunkS3JO3N4Hcjs.__name.call(void 0, findLayoutsForClient, "findLayoutsForClient");
@@ -1896,12 +1796,12 @@ async function buildUniversal(config, routeManager, apiRouteManager, serverRende
     _chunk5QIKR7RRcjs.logger.error(`\u274C Build failed: ${error}`);
     throw error;
   } finally {
-    _optionalChain([rendererBuild, 'optionalAccess', _29 => _29.abort, 'call', _30 => _30()]);
+    _optionalChain([rendererBuild, 'optionalAccess', _33 => _33.abort, 'call', _34 => _34()]);
   }
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, buildUniversal, "buildUniversal");
 async function writeSSRAssetsToClient(bundle, outputDir) {
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   for (const [fileName, output] of Object.entries(bundle)) {
     if (output.type !== "asset") continue;
     if (fileName === "farm-fonts.css") {
@@ -1909,42 +1809,42 @@ async function writeSSRAssetsToClient(bundle, outputDir) {
       continue;
     }
     const filePath = _path2.default.join(outputDir, fileName);
-    await fs.mkdir(_path2.default.dirname(filePath), { recursive: true });
-    await fs.writeFile(filePath, output.source);
+    await fs3.mkdir(_path2.default.dirname(filePath), { recursive: true });
+    await fs3.writeFile(filePath, output.source);
   }
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, writeSSRAssetsToClient, "writeSSRAssetsToClient");
 async function copyFarmDocsFontAssetsToClient(root, outputDir) {
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   await Promise.all(
     _chunkHREOKQWTcjs.resolveFarmDocsFontAssets.call(void 0, root).map(async ({ sourcePath, url }) => {
       const targetPath = _path2.default.join(outputDir, url.replace(/^\/+/, ""));
-      await fs.mkdir(_path2.default.dirname(targetPath), { recursive: true });
-      await fs.copyFile(sourcePath, targetPath);
+      await fs3.mkdir(_path2.default.dirname(targetPath), { recursive: true });
+      await fs3.copyFile(sourcePath, targetPath);
     })
   );
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, copyFarmDocsFontAssetsToClient, "copyFarmDocsFontAssetsToClient");
 async function mergeBuiltFontCss(outputDir, fontCssSource) {
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   const fontCssPath = _path2.default.join(outputDir, "farm-fonts.css");
   let fontCss = fontCssSource;
   if (fontCss === void 0) {
     try {
-      fontCss = await fs.readFile(fontCssPath);
-    } catch (e16) {
+      fontCss = await fs3.readFile(fontCssPath);
+    } catch (e18) {
       return;
     }
   }
   const clientCssPath = _path2.default.join(outputDir, "farm-client.css");
   let clientCss = "";
   try {
-    clientCss = await fs.readFile(clientCssPath, "utf8");
-  } catch (e17) {
+    clientCss = await fs3.readFile(clientCssPath, "utf8");
+  } catch (e19) {
   }
   const normalizedFontCss = typeof fontCss === "string" ? fontCss : Buffer.from(fontCss).toString("utf8");
-  await fs.writeFile(fontCssPath, normalizedFontCss);
-  await fs.writeFile(clientCssPath, _chunkQ5FYSK45cjs.mergeFarmFontCss.call(void 0, clientCss, normalizedFontCss));
+  await fs3.writeFile(fontCssPath, normalizedFontCss);
+  await fs3.writeFile(clientCssPath, _chunkAS2VPMEEcjs.mergeFarmFontCss.call(void 0, clientCss, normalizedFontCss));
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, mergeBuiltFontCss, "mergeBuiltFontCss");
 var _IncompleteClientBuildOutputError = class _IncompleteClientBuildOutputError extends Error {
@@ -1956,14 +1856,14 @@ var _IncompleteClientBuildOutputError = class _IncompleteClientBuildOutputError
 _chunkS3JO3N4Hcjs.__name.call(void 0, _IncompleteClientBuildOutputError, "IncompleteClientBuildOutputError");
 var IncompleteClientBuildOutputError = _IncompleteClientBuildOutputError;
 async function validateClientBuildOutput(root, srcDir, outputDir) {
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   const fingerprinted = await findFingerprintedClientEntry(outputDir);
   const clientEntryPath = _path2.default.join(outputDir, _nullishCoalesce(fingerprinted, () => ( "farm-client.js")));
   let clientEntrySize = 0;
   try {
-    const clientEntry = await fs.stat(clientEntryPath);
+    const clientEntry = await fs3.stat(clientEntryPath);
     if (clientEntry.isFile()) clientEntrySize = clientEntry.size;
-  } catch (e18) {
+  } catch (e20) {
   }
   if (clientEntrySize === 0) {
     throw new IncompleteClientBuildOutputError("farm-client.js is missing or empty");
@@ -1972,12 +1872,12 @@ async function validateClientBuildOutput(root, srcDir, outputDir) {
   const globalsCssPath = _path2.default.join(root, srcDir, "app", "globals.css");
   let expectsCss = false;
   try {
-    const globalsCss = await fs.readFile(globalsCssPath, "utf8");
+    const globalsCss = await fs3.readFile(globalsCssPath, "utf8");
     expectsCss = globalsCss.replace(/\/\*[\s\S]*?\*\//g, "").trim().length > 0;
-  } catch (e19) {
+  } catch (e21) {
   }
   try {
-    const clientCss = await fs.stat(clientCssPath);
+    const clientCss = await fs3.stat(clientCssPath);
     if (expectsCss && (!clientCss.isFile() || clientCss.size === 0)) {
       throw new IncompleteClientBuildOutputError("farm-client.css is empty");
     }
@@ -1986,7 +1886,7 @@ async function validateClientBuildOutput(root, srcDir, outputDir) {
     if (expectsCss) {
       throw new IncompleteClientBuildOutputError("farm-client.css is missing");
     }
-    await fs.writeFile(clientCssPath, "");
+    await fs3.writeFile(clientCssPath, "");
   }
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, validateClientBuildOutput, "validateClientBuildOutput");
@@ -1994,7 +1894,7 @@ function getCachedClientModuleHydrationPlan(modulePath, root, mode, cache, optio
   const key = `${_path2.default.resolve(root)}\0${mode}\0${options.asyncOwnerIslands === true}\0${_path2.default.resolve(modulePath)}`;
   let plan = cache.get(key);
   if (!plan) {
-    plan = _chunkQ5FYSK45cjs.getClientModuleHydrationPlan.call(void 0, modulePath, root, mode, options);
+    plan = _chunkAS2VPMEEcjs.getClientModuleHydrationPlan.call(void 0, modulePath, root, mode, options);
     cache.set(key, plan);
   }
   return { ...plan, isolatedBoundaries: [...plan.isolatedBoundaries] };
@@ -2004,7 +1904,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
   const viteBuild = productionVite.build;
   const { farmPlugin, farmServerOnlyEntriesPlugin } = await import("./vite.cjs");
   const { PluginManager: PluginManager2 } = await import("./plugin.cjs");
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   const pluginManager = new PluginManager2({
     config,
     isDev: false,
@@ -2012,25 +1912,25 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
   });
   pluginManager.addPlugins(config.plugins || []);
   const clientPages = [];
-  const integrationProviders = _chunkUJZLSXUBcjs.getIntegrationProviders.call(void 0, config.integrations).filter(
+  const integrationProviders = _chunkBWIQR4DHcjs.getIntegrationProviders.call(void 0, config.integrations).filter(
     (provider) => provider.component || provider.type === "clerk"
   );
   const unsupportedIntegrationProvider = integrationProviders.find(
     (provider) => provider.supportsIsolatedHydration !== true
   );
-  if (_optionalChain([config, 'access', _31 => _31.experimental, 'optionalAccess', _32 => _32.isolatedClientHydration]) === "enabled" && _optionalChain([config, 'access', _33 => _33.experimental, 'optionalAccess', _34 => _34.serverComponents]) !== true && unsupportedIntegrationProvider) {
+  if (_optionalChain([config, 'access', _35 => _35.experimental, 'optionalAccess', _36 => _36.isolatedClientHydration]) === "enabled" && _optionalChain([config, 'access', _37 => _37.experimental, 'optionalAccess', _38 => _38.serverComponents]) !== true && unsupportedIntegrationProvider) {
     _chunk5QIKR7RRcjs.logger.warn(
       `[Farm.js] isolated hydration kept route-wide because integration provider "${unsupportedIntegrationProvider.name}" does not declare supportsIsolatedHydration: true.`
     );
   }
-  const isolatedMode = _chunkQ5FYSK45cjs.resolveFarmIsolatedClientHydrationMode.call(void 0, 
-    _optionalChain([config, 'access', _35 => _35.experimental, 'optionalAccess', _36 => _36.isolatedClientHydration]),
+  const isolatedMode = _chunkAS2VPMEEcjs.resolveFarmIsolatedClientHydrationMode.call(void 0, 
+    _optionalChain([config, 'access', _39 => _39.experimental, 'optionalAccess', _40 => _40.isolatedClientHydration]),
     {
-      serverComponents: _optionalChain([config, 'access', _37 => _37.experimental, 'optionalAccess', _38 => _38.serverComponents]) === true,
+      serverComponents: _optionalChain([config, 'access', _41 => _41.experimental, 'optionalAccess', _42 => _42.serverComponents]) === true,
       hasUnsupportedIntegrationProvider: Boolean(unsupportedIntegrationProvider)
     }
   );
-  const planOptions = _chunkQ5FYSK45cjs.getFarmClientHydrationPlanOptions.call(void 0, 
+  const planOptions = _chunkAS2VPMEEcjs.getFarmClientHydrationPlanOptions.call(void 0, 
     config.renderer,
     Boolean(unsupportedIntegrationProvider)
   );
@@ -2077,18 +1977,18 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
       };
     }
   });
-  const layoutAppliesToRoute = _chunkLOFKRKO7cjs.routeBoundaryCoversDirectory;
+  const layoutAppliesToRoute = _chunkRVXFINNScjs.routeBoundaryCoversDirectory;
   const routeDirectory = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (route) => _nullishCoalesce(route.directory, () => ( route.pattern)), "routeDirectory");
   const adapterOwnsDocsRuntime = Boolean(
-    _chunkPSV6XKPOcjs.isReactRenderer.call(void 0, config.renderer) && _optionalChain([config, 'access', _39 => _39.docs, 'optionalAccess', _40 => _40.enabled]) && _optionalChain([config, 'access', _41 => _41.docs, 'access', _42 => _42.adapter, 'optionalAccess', _43 => _43.server]) && config.docs.adapter.react
+    _chunkPSV6XKPOcjs.isReactRenderer.call(void 0, config.renderer) && _optionalChain([config, 'access', _43 => _43.docs, 'optionalAccess', _44 => _44.enabled]) && _optionalChain([config, 'access', _45 => _45.docs, 'access', _46 => _46.adapter, 'optionalAccess', _47 => _47.server]) && config.docs.adapter.react
   );
-  const adapterDocsEntry = _optionalChain([config, 'access', _44 => _44.docs, 'optionalAccess', _45 => _45.enabled]) ? `/${config.docs.entry || "docs"}`.replace(/\/+/g, "/").replace(/\/$/, "") || "/" : null;
+  const adapterDocsEntry = _optionalChain([config, 'access', _48 => _48.docs, 'optionalAccess', _49 => _49.enabled]) ? `/${config.docs.entry || "docs"}`.replace(/\/+/g, "/").replace(/\/$/, "") || "/" : null;
   const isAdapterDocsRoute = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (routePattern) => Boolean(
     adapterOwnsDocsRuntime && adapterDocsEntry && (adapterDocsEntry === "/" || routePattern === adapterDocsEntry || routePattern.startsWith(`${adapterDocsEntry}/`))
   ), "isAdapterDocsRoute");
-  const syntheticDocsEntry = _optionalChain([config, 'access', _46 => _46.docs, 'optionalAccess', _47 => _47.enabled]) && !adapterOwnsDocsRuntime ? adapterDocsEntry : null;
+  const syntheticDocsEntry = _optionalChain([config, 'access', _50 => _50.docs, 'optionalAccess', _51 => _51.enabled]) && !adapterOwnsDocsRuntime ? adapterDocsEntry : null;
   const syntheticDocsPatterns = syntheticDocsEntry ? syntheticDocsEntry === "/" ? ["/", "/[...slug]"] : [syntheticDocsEntry, `${syntheticDocsEntry}/[...slug]`] : [];
-  const markdownPagePlan = _chunkQ5FYSK45cjs.createMarkdownPageHydrationPlanner.call(void 0, 
+  const markdownPagePlan = _chunkAS2VPMEEcjs.createMarkdownPageHydrationPlanner.call(void 0, 
     _chunkOHY2ZWUGcjs.resolveFarmMdxComponentsModulePath.call(void 0, _chunkOHY2ZWUGcjs.resolveMdxConfig.call(void 0, config.mdx), root),
     root,
     isolatedMode,
@@ -2096,7 +1996,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
   );
   const routePlans = pageRoutes.map((route) => ({
     route,
-    metadata: _chunkB5PFZLKVcjs.isFarmMarkdownPageFile.call(void 0, route.modulePath) ? markdownPagePlan() : getCachedClientModuleHydrationPlan(
+    metadata: _chunkEKN7NSZOcjs.isFarmMarkdownPageFile.call(void 0, route.modulePath) ? markdownPagePlan() : getCachedClientModuleHydrationPlan(
       route.modulePath,
       root,
       isolatedMode,
@@ -2104,7 +2004,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
       planOptions
     )
   }));
-  _chunkQ5FYSK45cjs.enforceFarmIsolatedHydrationRouteBudget.call(void 0, 
+  _chunkAS2VPMEEcjs.enforceFarmIsolatedHydrationRouteBudget.call(void 0, 
     clientLayouts.map((layout) => ({
       pattern: layout.pattern,
       depth: layout.pattern.split("/").filter(Boolean).length,
@@ -2113,7 +2013,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
     [
       ...routePlans.map(({ route, metadata }) => ({
         pattern: routeDirectory(route),
-        depth: _chunkLOFKRKO7cjs.getRouteDirectoryDepth.call(void 0, routeDirectory(route)),
+        depth: _chunkRVXFINNScjs.getRouteDirectoryDepth.call(void 0, routeDirectory(route)),
         metadata
       })),
       ...syntheticDocsPatterns.map((pattern) => ({
@@ -2136,7 +2036,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
   for (const layout of clientLayouts) {
     const matchesBuiltRoute = pageRoutes.some((route) => layoutAppliesToRoute(layout.pattern, routeDirectory(route))) || Boolean(adapterDocsEntry && layoutAppliesToRoute(layout.pattern, adapterDocsEntry));
     if (matchesBuiltRoute && layout.suppressedAsyncHydration) {
-      _chunk5QIKR7RRcjs.logger.warn(`\u26A0\uFE0F  ${_chunkQ5FYSK45cjs.describeSuppressedAsyncHydration.call(void 0, layout.pattern, layout.fallbackReason)}`);
+      _chunk5QIKR7RRcjs.logger.warn(`\u26A0\uFE0F  ${_chunkAS2VPMEEcjs.describeSuppressedAsyncHydration.call(void 0, layout.pattern, layout.fallbackReason)}`);
     }
   }
   if (isolatedMode === "analyze") {
@@ -2160,7 +2060,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
       );
       if (metadata.suppressedAsyncHydration) {
         _chunk5QIKR7RRcjs.logger.warn(
-          `\u26A0\uFE0F  ${_chunkQ5FYSK45cjs.describeSuppressedAsyncHydration.call(void 0, route.pattern, metadata.fallbackReason)}`
+          `\u26A0\uFE0F  ${_chunkAS2VPMEEcjs.describeSuppressedAsyncHydration.call(void 0, route.pattern, metadata.fallbackReason)}`
         );
       }
       if (metadata.shouldHydrate || metadata.hasIsolatedClientBoundaries || applicableClientLayouts.length > 0) {
@@ -2185,7 +2085,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
             ...applicableClientLayouts.filter((layout) => layout.hasIsolatedClientBoundaries).flatMap((layout) => layout.isolatedBoundaries)
           ],
           // The server renders a server tree only below a hydrating layout.
-          ..._chunkQ5FYSK45cjs.usesFarmServerTree.call(void 0, metadata) && applicableClientLayouts.some((layout) => layout.shouldHydrate) ? { serverTree: true } : {}
+          ..._chunkAS2VPMEEcjs.usesFarmServerTree.call(void 0, metadata) && applicableClientLayouts.some((layout) => layout.shouldHydrate) ? { serverTree: true } : {}
         });
         _chunk5QIKR7RRcjs.logger.info(`\u{1F4F1} Found hydratable route: ${route.pattern} -> ${route.modulePath}`);
       }
@@ -2221,7 +2121,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
   }
   const clientRouteSlots = routeSlots.filter((slot) => {
     try {
-      return _chunkQ5FYSK45cjs.getClientModuleMetadata.call(void 0, slot.modulePath, root).shouldHydrate;
+      return _chunkAS2VPMEEcjs.getClientModuleMetadata.call(void 0, slot.modulePath, root).shouldHydrate;
     } catch (error) {
       _chunk5QIKR7RRcjs.logger.warn(`\u26A0\uFE0F  Could not inspect route slot ${slot.modulePath}: ${error}`);
       return false;
@@ -2231,8 +2131,8 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
     `\u{1F4F1} Total hydratable routes detected: ${clientPages.length} pages, ${clientLayouts.filter((layout) => layout.shouldHydrate || layout.hasIsolatedClientBoundaries).length} layouts, and ${clientRouteSlots.length} slots`
   );
   const clientEntryRoot = _path2.default.join(root, ".farm", "tmp");
-  await fs.mkdir(clientEntryRoot, { recursive: true });
-  const clientEntryDir = await fs.mkdtemp(_path2.default.join(clientEntryRoot, "client-entry-"));
+  await fs3.mkdir(clientEntryRoot, { recursive: true });
+  const clientEntryDir = await fs3.mkdtemp(_path2.default.join(clientEntryRoot, "client-entry-"));
   const clientEntryPath = _path2.default.join(clientEntryDir, "farm-client-entry.tsx");
   const clientHydrationCode = generateClientHydrationEntry(
     clientPages,
@@ -2242,19 +2142,19 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
     srcDir,
     adapterOwnsDocsRuntime ? false : _chunkMWWVKDW3cjs.isFarmDocsSearchEnabled.call(void 0, config.docs),
     adapterOwnsDocsRuntime ? void 0 : _chunkMWWVKDW3cjs.resolveFarmDocsSearchClientModule.call(void 0, root),
-    _optionalChain([config, 'access', _48 => _48.docs, 'optionalAccess', _49 => _49.enabled]) ? config.docs.entry : void 0,
-    adapterOwnsDocsRuntime ? _optionalChain([config, 'access', _50 => _50.docs, 'access', _51 => _51.adapter, 'optionalAccess', _52 => _52.react]) : void 0,
+    _optionalChain([config, 'access', _52 => _52.docs, 'optionalAccess', _53 => _53.enabled]) ? config.docs.entry : void 0,
+    adapterOwnsDocsRuntime ? _optionalChain([config, 'access', _54 => _54.docs, 'access', _55 => _55.adapter, 'optionalAccess', _56 => _56.react]) : void 0,
     config.i18n,
     config.plugins,
     config.renderer,
     config.publicRuntimeConfig,
     config.trailingSlash,
-    _chunkUJZLSXUBcjs.getIntegrationProviders.call(void 0, config.integrations),
+    _chunkBWIQR4DHcjs.getIntegrationProviders.call(void 0, config.integrations),
     config.basePath,
-    _chunkQ5FYSK45cjs.generateClientCachePersistenceCode.call(void 0, _chunkQ5FYSK45cjs.resolveFarmClientCacheAdapterEntry.call(void 0, root, config.cache)),
-    adapterOwnsDocsRuntime ? _chunkHITLGIAOcjs.getFarmDocsAdapterConfigModule.call(void 0, config.docs) : void 0
+    _chunkAS2VPMEEcjs.generateClientCachePersistenceCode.call(void 0, _chunkAS2VPMEEcjs.resolveFarmClientCacheAdapterEntry.call(void 0, root, config.cache)),
+    adapterOwnsDocsRuntime ? _chunkCY2ZQ5C6cjs.getFarmDocsAdapterConfigModule.call(void 0, config.docs) : void 0
   );
-  await fs.writeFile(clientEntryPath, clientHydrationCode);
+  await fs3.writeFile(clientEntryPath, clientHydrationCode);
   const hasScopedPostcssConfig = hasProjectPostcssConfig(root);
   let postcssSearchPath;
   let tailwindVitePlugin = void 0;
@@ -2266,9 +2166,9 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
     _chunk5QIKR7RRcjs.logger.info("\u{1F4E6} Using project PostCSS/Tailwind configuration");
   } else {
     const postcssConfigPath = _path2.default.join(clientEntryDir, "postcss.config.cjs");
-    await fs.writeFile(postcssConfigPath, "module.exports = { plugins: [] };\n");
+    await fs3.writeFile(postcssConfigPath, "module.exports = { plugins: [] };\n");
     postcssSearchPath = clientEntryDir;
-    tailwindVitePlugin = await _chunkQ5FYSK45cjs.loadTailwindVitePlugin.call(void 0, {
+    tailwindVitePlugin = await _chunkAS2VPMEEcjs.loadTailwindVitePlugin.call(void 0, {
       builder: productionVite.builder,
       announce: true
     });
@@ -2301,7 +2201,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
             hashCharacters: "hex",
             // Use predictable name for CSS so we can reference it in SSR HTML
             assetFileNames: /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (assetInfo) => {
-              if (_optionalChain([assetInfo, 'access', _53 => _53.name, 'optionalAccess', _54 => _54.endsWith, 'call', _55 => _55(".css")])) {
+              if (_optionalChain([assetInfo, 'access', _57 => _57.name, 'optionalAccess', _58 => _58.endsWith, 'call', _59 => _59(".css")])) {
                 return "farm-client.css";
               }
               return "assets/[name]-h[hash][extname]";
@@ -2337,13 +2237,30 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
         }
       },
       plugins: [
-        _chunkQ5FYSK45cjs.createFarmThemeCssPlugin.call(void 0, config.theme, config.basePath),
+        _chunkAS2VPMEEcjs.createFarmThemeCssPlugin.call(void 0, config.theme, config.basePath),
+        createFarmClientModulePreloadPlugin({
+          root,
+          buildDir: _path2.default.dirname(outputDir),
+          entryName: "farm-client"
+        }),
+        ...adapterOwnsDocsRuntime ? [
+          createFarmDocsModulePreloadPlugin({
+            root,
+            buildDir: _path2.default.dirname(outputDir),
+            importer: clientEntryPath,
+            entryName: "farm-client",
+            modules: [
+              config.docs.adapter.react,
+              _chunkCY2ZQ5C6cjs.getFarmDocsAdapterConfigModule.call(void 0, config.docs)
+            ].filter((specifier) => Boolean(specifier))
+          })
+        ] : [],
         ...tailwindVitePlugin ? [tailwindVitePlugin] : [],
         ...rendererVitePlugins,
         ...config.vite.plugins || [],
         farmServerOnlyEntriesPlugin(),
-        _chunkQ5FYSK45cjs.farmDocsClientConfigPlugin.call(void 0, 
-          adapterOwnsDocsRuntime ? _chunkHITLGIAOcjs.getFarmDocsAdapterConfigModule.call(void 0, config.docs) : void 0
+        _chunkAS2VPMEEcjs.farmDocsClientConfigPlugin.call(void 0, 
+          adapterOwnsDocsRuntime ? _chunkCY2ZQ5C6cjs.getFarmDocsAdapterConfigModule.call(void 0, config.docs) : void 0
         ),
         // Plugin to redirect @farm.js/core imports to client-only exports
         {
@@ -2401,7 +2318,7 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
       } : void 0,
       // Ensure React is bundled for client
       resolve: {
-        alias: _chunkQ5FYSK45cjs.createFarmSourceAlias.call(void 0, root, config.srcDir),
+        alias: _chunkAS2VPMEEcjs.createFarmSourceAlias.call(void 0, root, config.srcDir),
         dedupe: [...config.renderer.dedupe || []]
       },
       // Optimize dependencies - exclude server-side code from client bundle
@@ -2414,13 +2331,13 @@ async function buildClient(productionVite, config, root, srcDir, outputDir, page
         ]
       }
     };
-    await viteBuild(_chunkQ5FYSK45cjs.mergeFarmProductionViteConfig.call(void 0, clientViteConfig, config.vite));
+    await viteBuild(_chunkAS2VPMEEcjs.mergeFarmProductionViteConfig.call(void 0, clientViteConfig, config.vite));
     await mergeBuiltFontCss(outputDir);
     await validateClientBuildOutput(root, srcDir, outputDir);
   } finally {
     try {
-      await fs.rm(clientEntryDir, { recursive: true, force: true });
-    } catch (e20) {
+      await fs3.rm(clientEntryDir, { recursive: true, force: true });
+    } catch (e22) {
     }
   }
 }
@@ -3173,7 +3090,7 @@ function generateClientHydrationEntry(clientPages, layoutRoutes, clientRouteSlot
   direction: {}
 }, plugins = [], renderer = _chunkPSV6XKPOcjs.REACT_RENDERER, publicRuntimeConfig = void 0, trailingSlash = false, integrationProviders = [], basePath = "/", clientCachePersistence = { imports: "", init: "" }, docsConfigModule) {
   const toImportPath = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (targetPath) => targetPath.replace(/\\/g, "/"), "toImportPath");
-  const clientPluginEntry = _chunkQ5FYSK45cjs.generateFarmClientPluginEntryCode.call(void 0, 
+  const clientPluginEntry = _chunkAS2VPMEEcjs.generateFarmClientPluginEntryCode.call(void 0, 
     plugins,
     root,
     srcDir,
@@ -3184,7 +3101,7 @@ function generateClientHydrationEntry(clientPages, layoutRoutes, clientRouteSlot
 import { createRoot, hydrateRoot } from "react-dom/client";` : appSetupPath ? `import React, { createRoot, hydrateRoot, configureApp as __farmConfigureApp } from ${JSON.stringify(renderer.client)};
 import __farmAppSetup from ${JSON.stringify(_chunk5QIKR7RRcjs.toPosixPath.call(void 0, appSetupPath))};
 __farmConfigureApp(__farmAppSetup);` : `import React, { createRoot, hydrateRoot } from ${JSON.stringify(renderer.client)};`;
-  const providerClientCode = _chunkQ5FYSK45cjs.generateFarmIntegrationProviderClientCode.call(void 0, 
+  const providerClientCode = _chunkAS2VPMEEcjs.generateFarmIntegrationProviderClientCode.call(void 0, 
     integrationProviders,
     root,
     _nullishCoalesce(renderer.componentExtensions, () => ( []))
@@ -3196,12 +3113,12 @@ __farmConfigureApp(__farmAppSetup);` : `import React, { createRoot, hydrateRoot
   const hydratingLayoutPatterns = layoutRoutes.filter((layout) => layout.shouldHydrate).map((layout) => layout.pattern);
   layoutRoutes.forEach((layout, index) => {
     const relativePath = toImportPath(layout.modulePath);
-    const rendersOnClient = !layout.hasIsolatedClientBoundaries && hydratingLayoutPatterns.some((pattern) => _chunkWT4TGLXTcjs.layoutsCanCoverSamePage.call(void 0, layout.pattern, pattern));
+    const rendersOnClient = !layout.hasIsolatedClientBoundaries && hydratingLayoutPatterns.some((pattern) => _chunk5ULKUBIAcjs.layoutsCanCoverSamePage.call(void 0, layout.pattern, pattern));
     if (rendersOnClient) {
       layoutImportStatements.push(`import Layout${index} from "${relativePath}";`);
     }
-    const groupScope = _chunkLOFKRKO7cjs.getRouteGroupScope.call(void 0, layout.pattern);
-    const groupFields = groupScope ? `, urlPattern: ${JSON.stringify(_chunkLOFKRKO7cjs.stripRouteGroups.call(void 0, layout.pattern))}, groupScope: ${JSON.stringify(groupScope)}` : "";
+    const groupScope = _chunkRVXFINNScjs.getRouteGroupScope.call(void 0, layout.pattern);
+    const groupFields = groupScope ? `, urlPattern: ${JSON.stringify(_chunkRVXFINNScjs.stripRouteGroups.call(void 0, layout.pattern))}, groupScope: ${JSON.stringify(groupScope)}` : "";
     layoutRegistrations.push(
       `  { pattern: ${JSON.stringify(layout.pattern)}${groupFields}, Component: ${rendersOnClient ? `Layout${index}` : "null"}, shouldHydrate: ${JSON.stringify(layout.shouldHydrate)}, islandStrategy: ${JSON.stringify(layout.islandStrategy)} }`
     );
@@ -3251,7 +3168,7 @@ function isFarmDocsPath() {
   return false;
 }
 `;
-  const docsAdapterRuntime = _chunkHITLGIAOcjs.generateFarmDocsAdapterClientRuntime.call(void 0, 
+  const docsAdapterRuntime = _chunkCY2ZQ5C6cjs.generateFarmDocsAdapterClientRuntime.call(void 0, 
     docsAdapterReact,
     docsConfigModule
   );
@@ -3704,7 +3621,7 @@ function hasHydratableLayout(pathname) {
   });
 }
 
-${_chunkQ5FYSK45cjs.FARM_LAYOUT_ELEMENT_CLIENT_SOURCE}
+${_chunkAS2VPMEEcjs.FARM_LAYOUT_ELEMENT_CLIENT_SOURCE}
 // Wrap a page element with applicable layouts
 function wrapWithLayouts(pageElement, pathname, params) {
   const layouts = getApplicableLayouts(pathname);
@@ -4663,7 +4580,7 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
   const viteBuild = productionVite.build;
   const { farmPlugin, farmServerOnlyEntriesPlugin } = await import("./vite.cjs");
   const { PluginManager: PluginManager2 } = await import("./plugin.cjs");
-  const fs = await import("fs/promises");
+  const fs3 = await import("fs/promises");
   const pluginManager = new PluginManager2({
     config,
     isDev: false,
@@ -4678,12 +4595,12 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
     buildLifetime: rendererBuildLifetime
   });
   if (!hasScopedPostcssConfig) {
-    postcssConfigDir = await fs.mkdtemp(_path2.default.join(_os2.default.tmpdir(), "farm-postcss-"));
-    await fs.writeFile(
+    postcssConfigDir = await fs3.mkdtemp(_path2.default.join(_os2.default.tmpdir(), "farm-postcss-"));
+    await fs3.writeFile(
       _path2.default.join(postcssConfigDir, "postcss.config.cjs"),
       "module.exports = { plugins: [] };\n"
     );
-    tailwindVitePlugin = await _chunkQ5FYSK45cjs.loadTailwindVitePlugin.call(void 0, {
+    tailwindVitePlugin = await _chunkAS2VPMEEcjs.loadTailwindVitePlugin.call(void 0, {
       builder: productionVite.builder,
       label: "for SSR"
     });
@@ -4705,7 +4622,7 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
         fileName: entry.fileName,
         sourceType: "static",
         staticInfo: entry.staticInfo,
-        data: (await fs.readFile(entry.modulePath)).toString("base64")
+        data: (await fs3.readFile(entry.modulePath)).toString("base64")
       });
       continue;
     }
@@ -4779,7 +4696,7 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
   }
   const middlewareRoutes = await discoverMiddlewareRoutes(appDirs);
   const instrumentationPath = _chunkKCMTCM6Icjs.resolveFarmInstrumentationFile.call(void 0, root, config.srcDir || "src");
-  const notFoundPath = _chunkQ5FYSK45cjs.resolveFarmNotFoundComponentPath.call(void 0, config, appDirs);
+  const notFoundPath = _chunkAS2VPMEEcjs.resolveFarmNotFoundComponentPath.call(void 0, config, appDirs);
   if (notFoundPath) _chunk5QIKR7RRcjs.logger.info(`\u{1F4CB} Found custom 404 page: ${notFoundPath}`);
   layoutRoutes.sort((a, b) => {
     const depthA = a.pattern.split("/").filter(Boolean).length;
@@ -4796,13 +4713,13 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
   const hasServerRuntimeIntegrations = configuredIntegrationValues.some(
     (integration) => typeof integration === "object" && integration !== null && (!("serverRuntime" in integration) || integration.serverRuntime !== false)
   );
-  const hasIntegrationProviders = _chunkUJZLSXUBcjs.getIntegrationProviders.call(void 0, config.integrations).some(
+  const hasIntegrationProviders = _chunkBWIQR4DHcjs.getIntegrationProviders.call(void 0, config.integrations).some(
     (provider) => provider.component || provider.type === "clerk"
   );
   const hasObservabilityHandler = !!config.observability && typeof config.observability === "object" && "onEvent" in config.observability;
-  const hasMdxComponentConfig = Boolean(_optionalChain([config, 'access', _56 => _56.mdx, 'optionalAccess', _57 => _57.components]));
-  const hasMiddlewareConfig = hasFarmMiddlewareConfig(config.middleware);
-  const hasRouteContextConfig = _chunk3A4KGQYIcjs.hasCustomFarmRouteContext.call(void 0, config);
+  const hasMdxComponentConfig = Boolean(_optionalChain([config, 'access', _60 => _60.mdx, 'optionalAccess', _61 => _61.components]));
+  const hasMiddlewareConfig = _chunkRVXFINNScjs.hasFarmMiddlewareConfig.call(void 0, config.middleware);
+  const hasRouteContextConfig = _chunkHRETEZ2Zcjs.hasCustomFarmRouteContext.call(void 0, config);
   const hasServerRuntimePlugins = hasFarmServerRuntimePlugins(config);
   const hasPluginRoutes = hasFarmPluginRoutes(config);
   const hasServerCacheConfig = hasFarmServerCacheConfig(config.cache);
@@ -4812,20 +4729,39 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
   const hasConfiguredRuntimePlugins = Boolean(
     hasRuntimeConfigModule && (config.plugins || []).length > 0
   );
-  const farmDocsPrecompiledManifest = _optionalChain([config, 'access', _58 => _58.docs, 'optionalAccess', _59 => _59.enabled]) && _chunkC5GUTBZKcjs.getFarmPresetRuntime.call(void 0, preset) === "edge" ? _optionalChain([config, 'access', _60 => _60.docs, 'access', _61 => _61.adapter, 'optionalAccess', _62 => _62.server]) ? await _chunk7DWNJI73cjs.compileFarmDocsAdapterEdgeManifest.call(void 0, config.docs, {
-    root,
-    srcDir: config.srcDir,
-    clientEntry: FARM_CLIENT_JS_SRC_PLACEHOLDER,
-    fontStylesheetHref: "/farm-fonts.css",
-    globalStylesheetHref: "/assets/globals.css"
-  }) : await compileFarmDocsManifest(config.docs, {
-    root,
-    srcDir: config.srcDir,
-    clientEntry: FARM_CLIENT_JS_SRC_PLACEHOLDER,
-    fontAssets: _chunkHREOKQWTcjs.toFarmDocsPublicFontAssets.call(void 0, _chunkHREOKQWTcjs.resolveFarmDocsFontAssets.call(void 0, root)),
-    fontStylesheetHref: "/farm-fonts.css",
-    globalStylesheetHref: "/assets/globals.css"
-  }) : null;
+  if (_chunkCIOT4HGTcjs.hasFarmDocsRuntimeAdapter.call(void 0, config.docs)) {
+    const adapterGuardedPaths = new Set(getFarmDocsGuardedPaths(config, middlewareRoutes));
+    _chunkCIOT4HGTcjs.assertFarmDocsAdapterServesNoGuardedPages.call(void 0, 
+      config.docs,
+      { root, srcDir: config.srcDir },
+      (pathname) => adapterGuardedPaths.has(pathname)
+    );
+  }
+  const farmDocsCspNonceMarker = _chunk2ZYGC6SScjs.createFarmCspNonce.call(void 0, config.security);
+  const farmDocsPrecompiledManifest = _optionalChain([config, 'access', _62 => _62.docs, 'optionalAccess', _63 => _63.enabled]) && _chunkC5GUTBZKcjs.getFarmPresetRuntime.call(void 0, preset) === "edge" ? await _chunk6XWDE2P2cjs._runWithFarmCspNonce.call(void 0, 
+    farmDocsCspNonceMarker,
+    async () => _optionalChain([config, 'access', _64 => _64.docs, 'access', _65 => _65.adapter, 'optionalAccess', _66 => _66.server]) ? await _chunkCIOT4HGTcjs.compileFarmDocsAdapterEdgeManifest.call(void 0, config.docs, {
+      root,
+      srcDir: config.srcDir,
+      clientEntry: FARM_CLIENT_JS_SRC_PLACEHOLDER,
+      fontStylesheetHref: "/farm-fonts.css",
+      globalStylesheetHref: "/assets/globals.css"
+    }) : await (async () => {
+      const guardedPaths = new Set(getFarmDocsGuardedPaths(config, middlewareRoutes));
+      return compileFarmDocsManifest(config.docs, {
+        root,
+        srcDir: config.srcDir,
+        clientEntry: FARM_CLIENT_JS_SRC_PLACEHOLDER,
+        fontAssets: _chunkHREOKQWTcjs.toFarmDocsPublicFontAssets.call(void 0, _chunkHREOKQWTcjs.resolveFarmDocsFontAssets.call(void 0, root)),
+        fontStylesheetHref: "/farm-fonts.css",
+        globalStylesheetHref: "/assets/globals.css",
+        isPathGuarded: /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (pathname) => guardedPaths.has(pathname), "isPathGuarded")
+      });
+    })()
+  ) : null;
+  if (farmDocsPrecompiledManifest && farmDocsCspNonceMarker) {
+    farmDocsPrecompiledManifest.cspNonceMarker = farmDocsCspNonceMarker;
+  }
   const virtualEntryCode = generateVirtualEntryCode(
     apiRoutes,
     pageRoutes,
@@ -4909,7 +4845,7 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
         // Adapters can render provider scripts by serializing function source.
         // keepNames injects helper calls into those functions; after Nitro
         // minifies the server chunk the helper is no longer in script scope.
-        keepNames: !(_optionalChain([config, 'access', _63 => _63.docs, 'optionalAccess', _64 => _64.enabled]) && _optionalChain([config, 'access', _65 => _65.docs, 'access', _66 => _66.adapter, 'optionalAccess', _67 => _67.server])),
+        keepNames: !(_optionalChain([config, 'access', _67 => _67.docs, 'optionalAccess', _68 => _68.enabled]) && _optionalChain([config, 'access', _69 => _69.docs, 'access', _70 => _70.adapter, 'optionalAccess', _71 => _71.server])),
         jsxDev: false
       },
       // SSR configuration to externalize problematic modules
@@ -4959,10 +4895,10 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
       define: {
         __FARM_API_BASE_URL__: JSON.stringify(config.api.baseURL),
         __FARM_ENV__: JSON.stringify(_chunkVEKFLAQMcjs.createBundledEnv.call(void 0, config.env)),
-        __FARM_PUBLIC_ENV__: JSON.stringify(_optionalChain([config, 'access', _68 => _68.env, 'optionalAccess', _69 => _69.public]) || {})
+        __FARM_PUBLIC_ENV__: JSON.stringify(_optionalChain([config, 'access', _72 => _72.env, 'optionalAccess', _73 => _73.public]) || {})
       },
       plugins: [
-        _chunkQ5FYSK45cjs.createFarmThemeCssPlugin.call(void 0, config.theme, config.basePath),
+        _chunkAS2VPMEEcjs.createFarmThemeCssPlugin.call(void 0, config.theme, config.basePath),
         ...tailwindVitePlugin ? [tailwindVitePlugin] : [],
         ...rendererVitePlugins,
         ...config.vite.plugins || [],
@@ -5009,7 +4945,7 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
       resolve: {
         alias: [
           ...shouldAliasReactServerToWebBuild(config.renderer, preset) ? [createFarmReactWebServerAlias(hasReactDomEdgeServerBuild(root))] : [],
-          ...Object.entries(_chunkQ5FYSK45cjs.createFarmSourceAlias.call(void 0, root, config.srcDir)).map(
+          ...Object.entries(_chunkAS2VPMEEcjs.createFarmSourceAlias.call(void 0, root, config.srcDir)).map(
             ([find, replacement]) => ({ find, replacement })
           )
         ],
@@ -5017,12 +4953,12 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
         dedupe: [...config.renderer.dedupe || []]
       }
     };
-    await viteBuild(_chunkQ5FYSK45cjs.mergeFarmProductionViteConfig.call(void 0, serverViteConfig, config.vite));
+    await viteBuild(_chunkAS2VPMEEcjs.mergeFarmProductionViteConfig.call(void 0, serverViteConfig, config.vite));
   } finally {
     if (postcssConfigDir) {
       try {
-        await fs.rm(postcssConfigDir, { recursive: true, force: true });
-      } catch (e21) {
+        await fs3.rm(postcssConfigDir, { recursive: true, force: true });
+      } catch (e23) {
       }
     }
   }
@@ -5036,7 +4972,7 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, buildSSRInMemory, "buildSSRInMemory");
 function readFarmAppPackageIdentity(root) {
   try {
     return JSON.parse(_fs.readFileSync.call(void 0, _path2.default.join(root, "package.json"), "utf8"));
-  } catch (e22) {
+  } catch (e24) {
     return {};
   }
 }
@@ -5049,22 +4985,35 @@ function readFarmPageLastModified(pageRoutes) {
       lastModified[route.pattern] = _fs.statSync.call(void 0, 
         _nullishCoalesce(route.markdownSourcePath, () => ( route.modulePath))
       ).mtime.toISOString();
-    } catch (e23) {
+    } catch (e25) {
     }
   }
   return lastModified;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, readFarmPageLastModified, "readFarmPageLastModified");
+function getFarmDocsGuardedPaths(config, middlewareRoutes) {
+  if (!_optionalChain([config, 'access', _74 => _74.docs, 'optionalAccess', _75 => _75.enabled])) return [];
+  const contentDir = _chunkPGZDEPTMcjs.resolveFarmDocsContentDir.call(void 0, config.docs, {
+    root: config.root,
+    srcDir: config.srcDir
+  });
+  const guards = {
+    config: { middleware: config.middleware, integrations: config.integrations },
+    middlewareRoutes
+  };
+  return _chunkPGZDEPTMcjs.discoverFarmDocsPages.call(void 0, contentDir, config.docs).flatMap((page) => [page.href, _chunkPGZDEPTMcjs.getFarmDocsMarkdownPath.call(void 0, page.href)]).filter((pathname) => _chunkRVXFINNScjs.farmPathGuardCoversPage.call(void 0, guards, pathname));
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, getFarmDocsGuardedPaths, "getFarmDocsGuardedPaths");
 function getFarmAppOwnedDocsEnginePaths(agent, applicationMetadataRoutes) {
-  const llmsTxt = _optionalChain([agent, 'optionalAccess', _70 => _70.llmsTxt]);
+  const llmsTxt = _optionalChain([agent, 'optionalAccess', _76 => _76.llmsTxt]);
   const ownedByFile = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (kind) => applicationMetadataRoutes.some(
     (metadata) => metadata.kind === kind && metadata.pattern === "/"
   ), "ownedByFile");
   return [
-    ..._optionalChain([llmsTxt, 'optionalAccess', _71 => _71.enabled]) || ownedByFile("llms") ? ["/llms.txt"] : [],
-    ..._optionalChain([llmsTxt, 'optionalAccess', _72 => _72.enabled]) && llmsTxt.full || ownedByFile("llms-full") ? ["/llms-full.txt"] : [],
-    ..._optionalChain([agent, 'optionalAccess', _73 => _73.sitemap, 'optionalAccess', _74 => _74.enabled]) || ownedByFile("sitemap") ? ["/sitemap.xml"] : [],
-    ..._optionalChain([agent, 'optionalAccess', _75 => _75.crawlers, 'optionalAccess', _76 => _76.enabled]) || ownedByFile("robots") ? ["/robots.txt"] : []
+    ..._optionalChain([llmsTxt, 'optionalAccess', _77 => _77.enabled]) || ownedByFile("llms") ? ["/llms.txt"] : [],
+    ..._optionalChain([llmsTxt, 'optionalAccess', _78 => _78.enabled]) && llmsTxt.full || ownedByFile("llms-full") ? ["/llms-full.txt"] : [],
+    ..._optionalChain([agent, 'optionalAccess', _79 => _79.sitemap, 'optionalAccess', _80 => _80.enabled]) || ownedByFile("sitemap") ? ["/sitemap.xml"] : [],
+    ..._optionalChain([agent, 'optionalAccess', _81 => _81.crawlers, 'optionalAccess', _82 => _82.enabled]) || ownedByFile("robots") ? ["/robots.txt"] : []
   ];
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, getFarmAppOwnedDocsEnginePaths, "getFarmAppOwnedDocsEnginePaths");
@@ -5106,7 +5055,7 @@ function toVirtualEntryImportSpecifier(modulePath) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, toVirtualEntryImportSpecifier, "toVirtualEntryImportSpecifier");
 function generateNativeAuthIntegrationSource(auth) {
-  if (_optionalChain([auth, 'optionalAccess', _77 => _77.enabled]) !== true) {
+  if (_optionalChain([auth, 'optionalAccess', _83 => _83.enabled]) !== true) {
     return { importSource: "", registerSource: "" };
   }
   return {
@@ -5229,7 +5178,7 @@ function parseRouteRenderingDirectiveFromDisk(modulePath) {
     const directive = _chunk5D2JIPLHcjs.parseRouteRenderingDirective.call(void 0, source);
     if (_chunk5D2JIPLHcjs.findRequestBoundSourceBlockers.call(void 0, source).length === 0) return directive;
     return { ..._nullishCoalesce(directive, () => ( { ssg: false, ppr: false, directive: "" })), requestBound: true };
-  } catch (e24) {
+  } catch (e26) {
     return void 0;
   }
 }
@@ -5416,19 +5365,19 @@ ReactDOMServer.configureApp(__farmAppSetup);`;
 _chunkS3JO3N4Hcjs.__name.call(void 0, generateFarmRendererAppSetupServerCode, "generateFarmRendererAppSetupServerCode");
 function generateVirtualEntryCode(apiRoutes, pageRoutes, layoutRoutes, routeSlots, errorRoutes, metadataImageRoutes, applicationMetadataRoutes, middlewareRoutes, redirectRoutes, configuredRewriteRoutes, configuredHeaderRoutes, openAPIReference, notFoundPath, instrumentationPath, config, farmDocsPrecompiledManifest, configModulePath, hasServerRuntimeIntegrations, hasRuntimeIntegrationConfig, hasConfiguredRuntimePlugins, hasServerRuntimePlugins, preset, i18nCatalogs, isolatedClientBoundaryModules, hydrationPlanCache) {
   const hasCompressionRuntime = config.compress && _chunk2SJ4RQ6Pcjs.resolveFarmInstrumentationRuntime.call(void 0, preset) === "nodejs";
-  const servesAgentRobotsTxt = Boolean(_optionalChain([config, 'access', _78 => _78.agent, 'optionalAccess', _79 => _79.crawlers, 'optionalAccess', _80 => _80.enabled])) && !applicationMetadataRoutes.some(
+  const servesAgentRobotsTxt = Boolean(_optionalChain([config, 'access', _84 => _84.agent, 'optionalAccess', _85 => _85.crawlers, 'optionalAccess', _86 => _86.enabled])) && !applicationMetadataRoutes.some(
     (metadata) => metadata.kind === "robots" && metadata.pattern === "/"
   );
-  const servesAgentSitemap = Boolean(_optionalChain([config, 'access', _81 => _81.agent, 'optionalAccess', _82 => _82.sitemap, 'optionalAccess', _83 => _83.enabled])) && !applicationMetadataRoutes.some(
+  const servesAgentSitemap = Boolean(_optionalChain([config, 'access', _87 => _87.agent, 'optionalAccess', _88 => _88.sitemap, 'optionalAccess', _89 => _89.enabled])) && !applicationMetadataRoutes.some(
     (metadata) => metadata.kind === "sitemap" && metadata.pattern === "/"
   );
-  const servesDefaultMCP = _optionalChain([config, 'access', _84 => _84.agent, 'optionalAccess', _85 => _85.mcp]) === true && !_chunkPTZ2TVNEcjs.farmConfigMountsMCP.call(void 0, config) && !apiRoutes.some((route) => route.path === "/api/mcp");
-  const servesAiCatalog = _optionalChain([config, 'access', _86 => _86.agent, 'optionalAccess', _87 => _87.aiCatalog]) !== false;
+  const servesDefaultMCP = _optionalChain([config, 'access', _90 => _90.agent, 'optionalAccess', _91 => _91.mcp]) === true && !_chunkH5CLOUZScjs.farmConfigMountsMCP.call(void 0, config) && !apiRoutes.some((route) => route.path === "/api/mcp");
+  const servesAiCatalog = _optionalChain([config, 'access', _92 => _92.agent, 'optionalAccess', _93 => _93.aiCatalog]) !== false;
   const hasPluginRuntime = hasRuntimeIntegrationConfig || hasServerRuntimePlugins;
   const hasInfraAnalyticsRuntime = config.analytics !== false && _chunk2SJ4RQ6Pcjs.resolveFarmInstrumentationRuntime.call(void 0, preset) === "nodejs";
   const hasPrecompiledDocs = Boolean(farmDocsPrecompiledManifest);
   const adapterOwnsDocsRuntime = Boolean(
-    _chunkPSV6XKPOcjs.isReactRenderer.call(void 0, config.renderer) && _optionalChain([config, 'access', _88 => _88.docs, 'optionalAccess', _89 => _89.enabled]) && _optionalChain([config, 'access', _90 => _90.docs, 'access', _91 => _91.adapter, 'optionalAccess', _92 => _92.server]) && config.docs.adapter.react
+    _chunkPSV6XKPOcjs.isReactRenderer.call(void 0, config.renderer) && _optionalChain([config, 'access', _94 => _94.docs, 'optionalAccess', _95 => _95.enabled]) && _optionalChain([config, 'access', _96 => _96.docs, 'access', _97 => _97.adapter, 'optionalAccess', _98 => _98.server]) && config.docs.adapter.react
   );
   const docsConfigModulePath = adapterOwnsDocsRuntime && !hasPrecompiledDocs && config.docs.configPath && !config.docs.configPath.endsWith(".json") ? config.docs.configPath : void 0;
   const hasIsolatedClientGraphRuntime = _chunkPSV6XKPOcjs.isReactRenderer.call(void 0, config.renderer) && isolatedClientBoundaryModules.size > 0;
@@ -5461,9 +5410,9 @@ function renderFarmRouteServerTree(element) { return element; }`;
   const hasGeneratedMetadataImages = metadataImageRoutes.some(
     (image) => image.sourceType === "module"
   );
-  const hasMiddlewareRuntime = middlewareRoutes.length > 0 || hasFarmMiddlewareConfig(config.middleware);
-  const farmDocsFontAssets = _optionalChain([config, 'access', _93 => _93.docs, 'optionalAccess', _94 => _94.enabled]) ? _chunkHREOKQWTcjs.toFarmDocsPublicFontAssets.call(void 0, _chunkHREOKQWTcjs.resolveFarmDocsFontAssets.call(void 0, config.root)) : [];
-  const integrationProviders = _chunkUJZLSXUBcjs.getIntegrationProviders.call(void 0, config.integrations);
+  const hasMiddlewareRuntime = middlewareRoutes.length > 0 || _chunkRVXFINNScjs.hasFarmMiddlewareConfig.call(void 0, config.middleware);
+  const farmDocsFontAssets = _optionalChain([config, 'access', _99 => _99.docs, 'optionalAccess', _100 => _100.enabled]) ? _chunkHREOKQWTcjs.toFarmDocsPublicFontAssets.call(void 0, _chunkHREOKQWTcjs.resolveFarmDocsFontAssets.call(void 0, config.root)) : [];
+  const integrationProviders = _chunkBWIQR4DHcjs.getIntegrationProviders.call(void 0, config.integrations);
   const renderedIntegrationProviders = integrationProviders.filter(
     (provider) => provider.component || provider.type === "clerk"
   );
@@ -5472,16 +5421,16 @@ function renderFarmRouteServerTree(element) { return element; }`;
       `Integration provider components are not supported by the "${config.renderer.name}" renderer.`
     );
   }
-  const providerServerModules = _chunkQ5FYSK45cjs.generateFarmIntegrationProviderServerModules.call(void 0, 
+  const providerServerModules = _chunkAS2VPMEEcjs.generateFarmIntegrationProviderServerModules.call(void 0, 
     renderedIntegrationProviders,
     config.root,
     _nullishCoalesce(config.renderer.componentExtensions, () => ( []))
   );
   const resolvedIntegrationProviderFallback = Object.fromEntries(
     Object.entries(config.integrations).flatMap(([name, integration]) => {
-      const configuredProviders = _optionalChain([integration, 'optionalAccess', _95 => _95.providers]);
+      const configuredProviders = _optionalChain([integration, 'optionalAccess', _101 => _101.providers]);
       const providers = Array.isArray(configuredProviders) ? configuredProviders : [];
-      if (providers.some((provider) => typeof _optionalChain([provider, 'optionalAccess', _96 => _96.component]) === "function")) {
+      if (providers.some((provider) => typeof _optionalChain([provider, 'optionalAccess', _102 => _102.component]) === "function")) {
         throw new Error(
           `Integration provider components in production must use an importable component reference, for example component: { module: "@/components/provider" }.`
         );
@@ -5492,14 +5441,14 @@ function renderFarmRouteServerTree(element) { return element; }`;
   const unsupportedIntegrationProvider = renderedIntegrationProviders.find(
     (provider) => provider.supportsIsolatedHydration !== true
   );
-  const isolatedHydrationMode = _chunkQ5FYSK45cjs.resolveFarmIsolatedClientHydrationMode.call(void 0, 
-    _optionalChain([config, 'access', _97 => _97.experimental, 'optionalAccess', _98 => _98.isolatedClientHydration]),
+  const isolatedHydrationMode = _chunkAS2VPMEEcjs.resolveFarmIsolatedClientHydrationMode.call(void 0, 
+    _optionalChain([config, 'access', _103 => _103.experimental, 'optionalAccess', _104 => _104.isolatedClientHydration]),
     {
-      serverComponents: _optionalChain([config, 'access', _99 => _99.experimental, 'optionalAccess', _100 => _100.serverComponents]) === true,
+      serverComponents: _optionalChain([config, 'access', _105 => _105.experimental, 'optionalAccess', _106 => _106.serverComponents]) === true,
       hasUnsupportedIntegrationProvider: Boolean(unsupportedIntegrationProvider)
     }
   );
-  const hydrationPlanOptions = _chunkQ5FYSK45cjs.getFarmClientHydrationPlanOptions.call(void 0, 
+  const hydrationPlanOptions = _chunkAS2VPMEEcjs.getFarmClientHydrationPlanOptions.call(void 0, 
     config.renderer,
     Boolean(unsupportedIntegrationProvider)
   );
@@ -5513,7 +5462,7 @@ function renderFarmRouteServerTree(element) { return element; }`;
       hydrationPlanOptions
     )
   }));
-  const markdownPagePlan = _chunkQ5FYSK45cjs.createMarkdownPageHydrationPlanner.call(void 0, 
+  const markdownPagePlan = _chunkAS2VPMEEcjs.createMarkdownPageHydrationPlanner.call(void 0, 
     _chunkOHY2ZWUGcjs.resolveFarmMdxComponentsModulePath.call(void 0, _chunkOHY2ZWUGcjs.resolveMdxConfig.call(void 0, config.mdx), config.root),
     config.root,
     isolatedHydrationMode,
@@ -5522,7 +5471,7 @@ function renderFarmRouteServerTree(element) { return element; }`;
   const pageHydrationPlans = new Map(
     pageRoutes.map((route) => [
       route.modulePath,
-      _chunkB5PFZLKVcjs.isFarmMarkdownPageFile.call(void 0, route.modulePath) ? markdownPagePlan() : getCachedClientModuleHydrationPlan(
+      _chunkEKN7NSZOcjs.isFarmMarkdownPageFile.call(void 0, route.modulePath) ? markdownPagePlan() : getCachedClientModuleHydrationPlan(
         route.modulePath,
         config.root,
         isolatedHydrationMode,
@@ -5531,7 +5480,7 @@ function renderFarmRouteServerTree(element) { return element; }`;
       )
     ])
   );
-  _chunkQ5FYSK45cjs.enforceFarmIsolatedHydrationRouteBudget.call(void 0, 
+  _chunkAS2VPMEEcjs.enforceFarmIsolatedHydrationRouteBudget.call(void 0, 
     layoutHydrationPlans.map((layout) => ({
       pattern: layout.pattern,
       depth: layout.pattern.split("/").filter(Boolean).length,
@@ -5540,10 +5489,10 @@ function renderFarmRouteServerTree(element) { return element; }`;
     pageRoutes.map((route) => ({
       // Compared by directory so a grouped layout applies only inside its group.
       pattern: _nullishCoalesce(route.directory, () => ( route.pattern)),
-      depth: _chunkLOFKRKO7cjs.getRouteDirectoryDepth.call(void 0, _nullishCoalesce(route.directory, () => ( route.pattern))),
+      depth: _chunkRVXFINNScjs.getRouteDirectoryDepth.call(void 0, _nullishCoalesce(route.directory, () => ( route.pattern))),
       metadata: pageHydrationPlans.get(route.modulePath)
     })),
-    _chunkLOFKRKO7cjs.routeBoundaryCoversDirectory
+    _chunkRVXFINNScjs.routeBoundaryCoversDirectory
   );
   const providerServerImports = [
     providerServerModules.hasClerkProvider ? `import { ClerkProvider as FarmClerkProvider } from "@clerk/react";` : "",
@@ -5560,7 +5509,7 @@ function renderFarmRouteServerTree(element) { return element; }`;
     apiRegistrations.push(`
   {
     path: ${JSON.stringify(route.path)},
-    methods: ${JSON.stringify(route.methods.filter((method) => !_optionalChain([route, 'access', _101 => _101.pluginMethods, 'optionalAccess', _102 => _102.includes, 'call', _103 => _103(method)])))},
+    methods: ${JSON.stringify(route.methods.filter((method) => !_optionalChain([route, 'access', _107 => _107.pluginMethods, 'optionalAccess', _108 => _108.includes, 'call', _109 => _109(method)])))},
     endpoints: ${varName},
   }`);
   });
@@ -5573,7 +5522,7 @@ function renderFarmRouteServerTree(element) { return element; }`;
   }).map(({ route }) => route);
   orderedPageRoutes.forEach((route, index) => {
     const varName = `pageRoute${index}`;
-    if (_chunkB5PFZLKVcjs.isFarmMarkdownPageFile.call(void 0, route.modulePath)) {
+    if (_chunkEKN7NSZOcjs.isFarmMarkdownPageFile.call(void 0, route.modulePath)) {
       pageRegistrations.push(`
   {
     pattern: ${JSON.stringify(route.pattern)},${route.directory ? `
@@ -5603,8 +5552,9 @@ function renderFarmRouteServerTree(element) { return element; }`;
     pattern: ${JSON.stringify(route.pattern)},${route.directory ? `
     directory: ${JSON.stringify(route.directory)},` : ""}
     module: ${varName},
-    shouldHydrate: ${JSON.stringify(clientMetadata.shouldHydrate)},
-    islandStrategy: ${JSON.stringify(clientMetadata.islandStrategy)},${_chunkQ5FYSK45cjs.usesFarmServerTree.call(void 0, clientMetadata) ? "\n    serverTree: true," : ""}${renderingDirective ? `
+    shouldHydrate: ${JSON.stringify(clientMetadata.shouldHydrate)},${clientMetadata.shouldHydrate ? `
+    clientModule: ${JSON.stringify(_chunk5QIKR7RRcjs.toViteModuleId.call(void 0, route.modulePath, config.root))},` : ""}
+    islandStrategy: ${JSON.stringify(clientMetadata.islandStrategy)},${_chunkAS2VPMEEcjs.usesFarmServerTree.call(void 0, clientMetadata) ? "\n    serverTree: true," : ""}${renderingDirective ? `
     rendering: ${JSON.stringify(renderingDirective)},` : ""}
     ${route.source !== void 0 ? `markdownSource: {
       source: ${JSON.stringify(route.source)},
@@ -5661,12 +5611,12 @@ function renderFarmRouteServerTree(element) { return element; }`;
     errorImports.push(
       `import * as ${varName} from ${toVirtualEntryImportSpecifier(errorRoute.modulePath)};`
     );
-    const groupScope = _chunkLOFKRKO7cjs.getRouteGroupScope.call(void 0, errorRoute.pattern);
+    const groupScope = _chunkRVXFINNScjs.getRouteGroupScope.call(void 0, errorRoute.pattern);
     errorRegistrations.push(`
   {
-    pattern: ${JSON.stringify(_chunkLOFKRKO7cjs.stripRouteGroups.call(void 0, errorRoute.pattern))},${groupScope ? `
+    pattern: ${JSON.stringify(_chunkRVXFINNScjs.stripRouteGroups.call(void 0, errorRoute.pattern))},${groupScope ? `
     groupScope: ${JSON.stringify(groupScope)},
-    directoryDepth: ${_chunkLOFKRKO7cjs.getRouteDirectoryDepth.call(void 0, errorRoute.pattern)},` : ""}
+    directoryDepth: ${_chunkRVXFINNScjs.getRouteDirectoryDepth.call(void 0, errorRoute.pattern)},` : ""}
     module: ${varName},
   }`);
   });
@@ -5724,7 +5674,9 @@ function renderFarmRouteServerTree(element) { return element; }`;
   const productionRuntimeImport = `import {
   _getRequestReadCount,
   _runWithAfterRequest,
+  _resolveCurrentCspNonce,
   _runWithCurrentRequest,
+  _runWithFarmCspNonce,
   _runWithAPIRequestRuntime,
   _runWithMiddlewareContext,
   _runWithMiddlewareData,
@@ -5734,6 +5686,8 @@ function renderFarmRouteServerTree(element) { return element; }`;
   appendFarmRedirectQuery,
   applyFarmBasePath,
   applyFarmCspNonceToResponse,
+  createFarmCspNonce,
+  stampFarmCspNonce,
   applyFarmPreviewRobotsTag,
   applyFarmThemeDocument,
   appendFarmLinkHeader,
@@ -5755,6 +5709,7 @@ function renderFarmRouteServerTree(element) { return element; }`;
   createFarmAiCatalogResponse,
   createFarmApiCatalogResponse,
   createFarmAppManifestResponse,
+  farmPathGuardCoversEndpoint,
   collectFarmLlmsTxtPages,
   createFarmDefaultLlmsTxt,
   createFarmLlmsMarkdownReader,
@@ -5812,25 +5767,25 @@ function renderFarmRouteServerTree(element) { return element; }`;
   const infraAnalyticsImport = hasInfraAnalyticsRuntime ? `import { ${hasPluginRuntime ? "createFarmInfraAnalyticsPlugin" : "createFarmInfraAnalyticsRecorder"} } from "@farm.js/core/internal/infra-analytics-runtime";` : "";
   const compressionRuntimeImport = hasCompressionRuntime ? `import { compressFarmResponse${hasPluginRuntime ? ", createCompressionPlugin" : ""} } from "@farm.js/core/internal/compression-runtime";` : "";
   const i18nServerImport = config.i18n.enabled ? `import { _runWithFarmI18nRequest, _setDefaultFarmI18nRuntime, createFarmI18nRuntime, getFarmI18nClientSnapshot } from "@farm.js/core/i18n/server";` : "";
-  const docsHandlerImport = _optionalChain([config, 'access', _104 => _104.docs, 'optionalAccess', _105 => _105.enabled]) ? hasPrecompiledDocs ? `import { createFarmDocsPrecompiledRuntime } from "@farm.js/core/internal/docs-precompiled-runtime";
+  const docsHandlerImport = _optionalChain([config, 'access', _110 => _110.docs, 'optionalAccess', _111 => _111.enabled]) ? hasPrecompiledDocs ? `import { createFarmDocsPrecompiledRuntime } from "@farm.js/core/internal/docs-precompiled-runtime";
 const isFarmDocsAPIRequest = (requestOrPathname) => {
   const pathname = typeof requestOrPathname === "string"
     ? requestOrPathname
     : new URL(requestOrPathname.url).pathname;
-  const apiPath = ${JSON.stringify(_optionalChain([farmDocsPrecompiledManifest, 'optionalAccess', _106 => _106.apiPath]) || "/api/docs")};
+  const apiPath = ${JSON.stringify(_optionalChain([farmDocsPrecompiledManifest, 'optionalAccess', _112 => _112.apiPath]) || "/api/docs")};
   return pathname === apiPath || pathname.startsWith(apiPath + "/");
 };` : adapterOwnsDocsRuntime ? `import { isFarmDocsAPIRequest } from "@farm.js/core/docs";
 import { createFarmDocsRuntimeHandler as createFarmDocsAdapterRuntimeHandler } from ${JSON.stringify(config.docs.adapter.server)};
 import * as FarmDocsAdapterReact from ${JSON.stringify(config.docs.adapter.react)};${docsConfigModulePath ? `
 import * as farmDocsConfigModule from ${toVirtualEntryImportSpecifier(docsConfigModulePath)};` : ""}` : `import { createFarmDocsAPIHandler, createFarmDocsHandler, isFarmDocsAPIRequest } from "@farm.js/core/docs";` : "";
-  const docsFontImport = _optionalChain([config, 'access', _107 => _107.docs, 'optionalAccess', _108 => _108.enabled]) && !hasPrecompiledDocs ? `import { resolveFarmLayoutFonts } from "@farm.js/core/font";` : "";
-  const docsRuntimeImport = _optionalChain([config, 'access', _109 => _109.docs, 'optionalAccess', _110 => _110.enabled]) && !hasPrecompiledDocs ? `import { existsSync as farmDocsExistsSync } from "node:fs";
+  const docsFontImport = _optionalChain([config, 'access', _113 => _113.docs, 'optionalAccess', _114 => _114.enabled]) && !hasPrecompiledDocs ? `import { resolveFarmLayoutFonts } from "@farm.js/core/font";` : "";
+  const docsRuntimeImport = _optionalChain([config, 'access', _115 => _115.docs, 'optionalAccess', _116 => _116.enabled]) && !hasPrecompiledDocs ? `import { existsSync as farmDocsExistsSync } from "node:fs";
 import { dirname as farmDocsDirname, join as farmDocsJoin } from "node:path";
 import { fileURLToPath as farmDocsFileURLToPath } from "node:url";` : "";
-  const markdownHandlerImport = _optionalChain([config, 'access', _111 => _111.md, 'optionalAccess', _112 => _112.enabled]) ? `import { applyMarkdownNegotiationHeaders, createMarkdownMirrorResponse, getFarmMarkdownAlternatePath } from "@farm.js/core/markdown";` : "";
+  const markdownHandlerImport = _optionalChain([config, 'access', _117 => _117.md, 'optionalAccess', _118 => _118.enabled]) ? `import { applyMarkdownNegotiationHeaders, createMarkdownMirrorResponse, getFarmMarkdownAlternatePath } from "@farm.js/core/markdown";` : "";
   const appMarkdownImport = hasMarkdownPages ? `import { FARM_MARKDOWN_ANONYMOUS_CLIENT_ADDRESS, createFarmMarkdownRouteModule, createFarmMarkdownSourceResponse, isFarmMarkdownPublicSourceResponse } from "@farm.js/core/internal/app-markdown-runtime";` : "const createFarmMarkdownSourceResponse = null;\nconst isFarmMarkdownPublicSourceResponse = null;";
-  const markdownErrorImport = `import { FARM_MARKDOWN_CONTENT_TYPE, createFarmMarkdownErrorBody, farmRequestWantsMarkdown } from "@farm.js/core/markdown";`;
-  const mdxComponentsPath = typeof _optionalChain([config, 'access', _113 => _113.mdx, 'optionalAccess', _114 => _114.components]) === "string" ? _path2.default.isAbsolute(config.mdx.components) ? config.mdx.components : _path2.default.join(config.root, config.mdx.components) : null;
+  const markdownErrorImport = `import { FARM_MARKDOWN_CONTENT_TYPE, FARM_MARKDOWN_PAGE_CHECK_HEADER, _isFarmMarkdownPageCheck, createFarmMarkdownErrorBody, farmRequestWantsMarkdown } from "@farm.js/core/markdown";`;
+  const mdxComponentsPath = typeof _optionalChain([config, 'access', _119 => _119.mdx, 'optionalAccess', _120 => _120.components]) === "string" ? _path2.default.isAbsolute(config.mdx.components) ? config.mdx.components : _path2.default.join(config.root, config.mdx.components) : null;
   const mdxComponentsImport = mdxComponentsPath ? `import * as FarmMdxComponentsModule from ${toVirtualEntryImportSpecifier(mdxComponentsPath)};` : "";
   const layerConfigPaths = (config.layers || []).map((layer) => layer.configFile).filter((configFile) => Boolean(configFile)).filter((configFile) => configFile !== configModulePath);
   const layerConfigImports = layerConfigPaths.map(
@@ -5848,7 +5803,7 @@ import { fileURLToPath as farmDocsFileURLToPath } from "node:url";` : "";
   const integrationRuntimeImport = integrationRuntimeExports.length ? `import { ${integrationRuntimeExports.join(", ")} } from "@farm.js/core/integrations";` : "";
   const instrumentationImport = instrumentationPath ? `import * as FarmInstrumentationModule from ${toVirtualEntryImportSpecifier(instrumentationPath)};` : "";
   const nativeAuth = generateNativeAuthIntegrationSource(config.auth);
-  const nativeMCP = _chunkWT4TGLXTcjs.generateNativeMCPPluginSource.call(void 0, config.mcp);
+  const nativeMCP = _chunk5ULKUBIAcjs.generateNativeMCPPluginSource.call(void 0, config.mcp);
   const integrationImports = `
 ${configModulePath ? `import * as FarmUserConfigModule from ${toVirtualEntryImportSpecifier(configModulePath)};` : ""}
 ${layerConfigImports}
@@ -6035,7 +5990,7 @@ const farmResolvedRuntimeConfig = Object.assign({}, ...farmRuntimeConfigs);
 
 function FarmDefault404Page() {
   return React.createElement(React.Fragment, null,
-    React.createElement("style", null, ${JSON.stringify(_chunkQ5FYSK45cjs.DEFAULT_NOT_FOUND_STYLES)}),
+    React.createElement("style", null, ${JSON.stringify(_chunkAS2VPMEEcjs.DEFAULT_NOT_FOUND_STYLES)}),
     React.createElement("main", {
       className: "farm-default-not-found",
       "aria-labelledby": "farm-default-not-found-title",
@@ -6128,7 +6083,7 @@ const serverRuntimeIntegrations = Object.fromEntries(
 );
 const integrationRuntimeConfig = Object.assign({}, ...farmRuntimeConfigs, {
   integrations: configuredIntegrations,
-  ${JSON.stringify(_chunkUJZLSXUBcjs.FARM_INTEGRATION_API_BASE_PATH_KEY)}: ${JSON.stringify(_chunkKNBBQHO2cjs.resolveFarmAPIServerBasePath.call(void 0, config.api))},
+  ${JSON.stringify(_chunkBWIQR4DHcjs.FARM_INTEGRATION_API_BASE_PATH_KEY)}: ${JSON.stringify(_chunkKNBBQHO2cjs.resolveFarmAPIServerBasePath.call(void 0, config.api))},
 });
 const farmInfraAnalytics = ${hasInfraAnalyticsRuntime ? hasPluginRuntime ? "createFarmInfraAnalyticsPlugin()" : "createFarmInfraAnalyticsRecorder()" : "null"};
 const configuredPlugins = [
@@ -6164,14 +6119,14 @@ const farmImageHandler = ${imageRuntime === "none" ? "null" : imageRuntime === "
   onError(error) { console.error("[Farm Image]", error); },
 })`};
 const farmMarkdownConfig = ${JSON.stringify(config.md)};
-const farmLlmsTxtConfig = ${JSON.stringify(_nullishCoalesce(_optionalChain([config, 'access', _115 => _115.agent, 'optionalAccess', _116 => _116.llmsTxt]), () => ( { enabled: false, include: [], exclude: [] })))};
-${_optionalChain([config, 'access', _117 => _117.agent, 'optionalAccess', _118 => _118.llmsTxt, 'optionalAccess', _119 => _119.enabled]) ? "const farmLlmsFullRenderer = createFarmLlmsFullRenderer({ revalidate: farmLlmsTxtConfig.revalidate });\n" : ""}${servesAgentRobotsTxt ? `const farmAgentCrawlers = ${JSON.stringify(config.agent.crawlers)};` : ""}
+const farmLlmsTxtConfig = ${JSON.stringify(_nullishCoalesce(_optionalChain([config, 'access', _121 => _121.agent, 'optionalAccess', _122 => _122.llmsTxt]), () => ( { enabled: false, include: [], exclude: [] })))};
+${_optionalChain([config, 'access', _123 => _123.agent, 'optionalAccess', _124 => _124.llmsTxt, 'optionalAccess', _125 => _125.enabled]) ? "const farmLlmsFullRenderer = createFarmLlmsFullRenderer({ revalidate: farmLlmsTxtConfig.revalidate });\n" : ""}${servesAgentRobotsTxt ? `const farmAgentCrawlers = ${JSON.stringify(config.agent.crawlers)};` : ""}
 const farmMdxConfig = ${JSON.stringify({
     ...config.mdx,
-    components: typeof _optionalChain([config, 'access', _120 => _120.mdx, 'optionalAccess', _121 => _121.components]) === "string" ? config.mdx.components : void 0
+    components: typeof _optionalChain([config, 'access', _126 => _126.mdx, 'optionalAccess', _127 => _127.components]) === "string" ? config.mdx.components : void 0
   })};
 const configuredFarmMdxComponents = farmUserConfig?.mdx?.components;
-${_optionalChain([config, 'access', _122 => _122.agent, 'optionalAccess', _123 => _123.noindexPreviews]) ? `// agent.noindexPreviews: the runtime environment decides, falling back to the
+${_optionalChain([config, 'access', _128 => _128.agent, 'optionalAccess', _129 => _129.noindexPreviews]) ? `// agent.noindexPreviews: the runtime environment decides, falling back to the
 // environment this was built in, since Netlify exposes its deploy context only
 // to the build.
 const farmNoindexPreview = resolveFarmPreviewDeployment(
@@ -6219,7 +6174,7 @@ export const farmProductionLifecycle = createFarmProductionLifecycle({
 });
 const farmI18nRuntime = ${config.i18n.enabled ? `createFarmI18nRuntime(farmI18nConfig, ${JSON.stringify(i18nCatalogs)})` : "null"};
 ${config.i18n.enabled ? "_setDefaultFarmI18nRuntime(farmI18nRuntime);" : ""}
-const farmDocsBundledContentDir = ${_optionalChain([config, 'access', _124 => _124.docs, 'optionalAccess', _125 => _125.enabled]) && !hasPrecompiledDocs ? `(() => {
+const farmDocsBundledContentDir = ${_optionalChain([config, 'access', _130 => _130.docs, 'optionalAccess', _131 => _131.enabled]) && !hasPrecompiledDocs ? `(() => {
   try {
     const currentDir = farmDocsDirname(farmDocsFileURLToPath(import.meta.url));
     const candidates = [
@@ -6234,13 +6189,42 @@ const farmDocsBundledContentDir = ${_optionalChain([config, 'access', _124 => _1
 })()` : "null"};
 const farmDocsResolvedConfig = ${generateFarmDocsRuntimeConfigExpression(config.docs, hasPrecompiledDocs)};
 const farmDocsRuntimeRoot = ${hasPrecompiledDocs ? '"."' : `farmDocsBundledContentDir || ${JSON.stringify(config.root)}`};
+// Docs pages a path-specific guard covers, decided at build time. The docs API and the
+// root llms/sitemap files answer anyone, so they leave these pages out.
+const farmDocsGuardedPaths = ${JSON.stringify(
+    hasPrecompiledDocs ? [] : getFarmDocsGuardedPaths(config, middlewareRoutes)
+  )};
+const farmDocsGuardedPathSet = new Set(farmDocsGuardedPaths);
+const isFarmDocsPathGuarded = (pathname) => farmDocsGuardedPathSet.has(pathname);
 globalThis.__FARM_DOCS_RUNTIME_CONFIG__ = {
   root: farmDocsRuntimeRoot,
   srcDir: ${JSON.stringify(config.srcDir)},
   docs: farmDocsResolvedConfig,
+  guardedPaths: farmDocsGuardedPaths,
 };
 const farmDocsPrecompiledRuntime = ${hasPrecompiledDocs ? `createFarmDocsPrecompiledRuntime(${JSON.stringify(farmDocsPrecompiledManifest)})` : "null"};
-const farmDocsHandler = ${_optionalChain([config, 'access', _126 => _126.docs, 'optionalAccess', _127 => _127.enabled]) ? hasPrecompiledDocs ? "farmDocsPrecompiledRuntime.handleDocsRequest" : adapterOwnsDocsRuntime ? `createFarmDocsAdapterRuntimeHandler({
+// Filled in from the client build once it has finished (see buildNitroUniversal).
+const farmDocsModulePreloads = (() => {
+  try {
+    return JSON.parse("${FARM_DOCS_MODULE_PRELOADS_PLACEHOLDER}");
+  } catch {
+    return null;
+  }
+})();
+// Paths the adapter matches against a page's source path the way the browser
+// finds the page's module.
+const farmDocsModulePreloadPaths = farmDocsModulePreloads
+  ? {
+      runtime: farmDocsModulePreloads.runtime.map((index) => "/" + farmDocsModulePreloads.files[index]),
+      pages: Object.fromEntries(
+        Object.entries(farmDocsModulePreloads.pages).map(([sourcePath, indexes]) => [
+          sourcePath,
+          indexes.map((index) => "/" + farmDocsModulePreloads.files[index]),
+        ]),
+      ),
+    }
+  : undefined;
+const farmDocsHandler = ${_optionalChain([config, 'access', _132 => _132.docs, 'optionalAccess', _133 => _133.enabled]) ? hasPrecompiledDocs ? "farmDocsPrecompiledRuntime.handleDocsRequest" : adapterOwnsDocsRuntime ? `createFarmDocsAdapterRuntimeHandler({
   ${docsConfigModulePath ? "...(farmDocsConfigModule.default || farmDocsConfigModule),\n  ...farmDocsResolvedConfig.configOverrides," : "...farmDocsResolvedConfig.config,"}
   entry: farmDocsResolvedConfig.config?.entry || String(farmDocsResolvedConfig.entry || "/docs").replace(/^\\/+|\\/+$/g, "") || "docs",
   docsPath: farmDocsResolvedConfig.entry,
@@ -6250,6 +6234,9 @@ const farmDocsHandler = ${_optionalChain([config, 'access', _126 => _126.docs, '
   // A production build's content cannot change, so the adapter reads its
   // navigation once instead of scanning the content directory per request.
   immutableContent: true,
+  // List the chunks a page needs, so the browser fetches them alongside the
+  // client entry instead of discovering them one import at a time.
+  modulePreloads: farmDocsModulePreloadPaths,
   clientEntry: "/__farm_client_js_src__",
   // Font CSS is merged into the client stylesheet; farm-fonts.css only exists when the
   // app has fonts, so linking it separately 404'd for apps without them.
@@ -6272,12 +6259,13 @@ const farmDocsHandler = ${_optionalChain([config, 'access', _126 => _126.docs, '
     ),
   fontStylesheetHref: "/farm-fonts.css",
   globalStylesheetHref: "/assets/globals.css",
+  isPathGuarded: isFarmDocsPathGuarded,
 })` : "null"};
-const farmDocsAPIHandler = ${_optionalChain([config, 'access', _128 => _128.docs, 'optionalAccess', _129 => _129.enabled]) ? hasPrecompiledDocs ? "farmDocsPrecompiledRuntime.handleAPIRequest" : adapterOwnsDocsRuntime ? "null" : `createFarmDocsAPIHandler({ rootDir: farmDocsRuntimeRoot, srcDir: ${JSON.stringify(config.srcDir)}, docs: farmDocsResolvedConfig })` : "null"};
+const farmDocsAPIHandler = ${_optionalChain([config, 'access', _134 => _134.docs, 'optionalAccess', _135 => _135.enabled]) ? hasPrecompiledDocs ? "farmDocsPrecompiledRuntime.handleAPIRequest" : adapterOwnsDocsRuntime ? "null" : `createFarmDocsAPIHandler({ rootDir: farmDocsRuntimeRoot, srcDir: ${JSON.stringify(config.srcDir)}, docs: farmDocsResolvedConfig, isPathGuarded: isFarmDocsPathGuarded })` : "null"};
 
 // API routes bundled at build time
 const apiRoutes = ${apiRoutes.length > 0 ? "mergePluginAPIRoutes(" : ""}[${apiRegistrations.join(",")}
-]${apiRoutes.length > 0 ? `, configuredPlugins, ${JSON.stringify(apiRoutes.map(({ path: path8, methods }) => ({ path: path8, methods })))}, { bodySizeLimit: ${JSON.stringify(config.server.bodySizeLimit)}, dispatch: dispatchFarmPluginAPIRequest })` : ""};
+]${apiRoutes.length > 0 ? `, configuredPlugins, ${JSON.stringify(apiRoutes.map(({ path: path10, methods }) => ({ path: path10, methods })))}, { bodySizeLimit: ${JSON.stringify(config.server.bodySizeLimit)}, dispatch: dispatchFarmPluginAPIRequest })` : ""};
 // A plugin calling an app endpoint (an MCP tool, say) goes through the whole
 // pipeline, so the endpoint's middleware and integration guards run for it.
 function dispatchFarmPluginAPIRequest(request) {
@@ -6298,15 +6286,25 @@ function fetchFarmInnerRequest(request, context) {
 }
 const farmLocalAPIBasePath = ${JSON.stringify(_chunkKNBBQHO2cjs.resolveFarmAPIServerBasePath.call(void 0, config.api))};
 const farmOpenAPIReference = ${JSON.stringify(openAPIReference)};
-${_optionalChain([config, 'access', _130 => _130.agent, 'optionalAccess', _131 => _131.apiCatalog]) ? `const farmApiCatalogInput = ${JSON.stringify(_chunkLOFKRKO7cjs.resolveFarmApiCatalogInput.call(void 0, config))};
-` : ""}${_optionalChain([config, 'access', _132 => _132.agent, 'optionalAccess', _133 => _133.manifest]) !== false ? `const farmAppManifestInput = ${JSON.stringify(
-    _chunkLOFKRKO7cjs.resolveFarmAppManifestInput.call(void 0, config, {
+${_optionalChain([config, 'access', _136 => _136.agent, 'optionalAccess', _137 => _137.apiCatalog]) ? `const farmApiCatalogInput = ${JSON.stringify(_chunkRVXFINNScjs.resolveFarmApiCatalogInput.call(void 0, config))};
+` : ""}${_optionalChain([config, 'access', _138 => _138.agent, 'optionalAccess', _139 => _139.manifest]) !== false ? `const farmAppManifestInput = ${JSON.stringify(
+    _chunkRVXFINNScjs.resolveFarmAppManifestInput.call(void 0, config, {
       build: config.deploymentId,
-      packages: _chunkQ5FYSK45cjs.resolveFarmAppPackages.call(void 0, config.root),
-      webmcpTools: config.plugins.some(({ name }) => name === "farm:webmcp") ? _chunkQ5FYSK45cjs.collectFarmWebMCPTools.call(void 0, config.root, config.srcDir) : []
+      packages: _chunkAS2VPMEEcjs.resolveFarmAppPackages.call(void 0, config.root),
+      webmcpTools: config.plugins.some(({ name }) => name === "farm:webmcp") ? _chunkAS2VPMEEcjs.collectFarmWebMCPTools.call(void 0, config.root, config.srcDir) : []
     })
   )};
-${servesDefaultMCP ? "farmAppManifestInput.defaultMCP = getFarmDefaultMCPServer;\n" : ""}` : ""}
+${servesDefaultMCP ? "farmAppManifestInput.defaultMCP = getFarmDefaultMCPServer;\n" : ""}// A guard written for an MCP server's path keeps its tools out of the public view.
+farmAppManifestInput.guardCoversPath = (path) =>
+  farmPathGuardCoversEndpoint(
+    {
+      config: { middleware: farmMiddlewareConfig, integrations: serverRuntimeIntegrations },
+      middlewareRoutes: fileMiddlewareModules,
+    },
+    path,
+    farmLocalAPIBasePath,
+  );
+` : ""}
 function isFarmLocalAPIPathname(pathname) {
   return farmLocalAPIBasePath !== "/" &&
     (pathname === farmLocalAPIBasePath ||
@@ -6406,15 +6404,26 @@ function renderFarmClientBootstrapScript(canonicalPath, selectedRouteSlots, page
   }
   return '<script id="__farm_route_slots_data__" type="application/json">' +
     serializedRouteSlots +
-    '</script><script>' + source + '</script>';
+    '</script>' + stampFarmCspNonce('<script>' + source + '</script>');
 }
 
 function renderFarmRendererHydrationScript() {
   return typeof ReactDOMServer.generateHydrationScript === "function"
-    ? ReactDOMServer.generateHydrationScript()
+    ? stampFarmCspNonce(ReactDOMServer.generateHydrationScript())
     : "";
 }
 
+function renderFarmClientEntryScript() {
+  return stampFarmCspNonce('<script type="module" src="/__farm_client_js_src__"></script>');
+}
+
+// Renderer options for the response being rendered: its CSP nonce, which the
+// renderer puts on the inline scripts it emits.
+function getFarmRendererRenderOptions() {
+  const nonce = _resolveCurrentCspNonce();
+  return nonce ? { nonce } : undefined;
+}
+
 function escapeFarmHtmlAttribute(value) {
   return String(value)
     .replace(/&/g, "&amp;")
@@ -6456,6 +6465,7 @@ async function renderFarmElement(ReactDOMServer, element, routeKey) {
   if (farmRendererStreamingCapabilities.web &&
       typeof ReactDOMServer.renderToReadableStream === "function") {
     const stream = await ReactDOMServer.renderToReadableStream(element, {
+      nonce: _resolveCurrentCspNonce(),
       onError(error) {
         // redirect()/notFound() are control flow, not render failures: the
         // request handler must still receive them to map the response status,
@@ -6588,6 +6598,7 @@ async function renderFarmElement(ReactDOMServer, element, routeKey) {
       },
     };
     pipeableStream = ReactDOMServer.renderToPipeableStream(element, {
+      nonce: _resolveCurrentCspNonce(),
       onShellReady() {
         try {
           pipeableStream.pipe(destination);
@@ -6650,7 +6661,10 @@ async function renderFarmElement(ReactDOMServer, element, routeKey) {
   }
 
   if (ReactDOMServer.renderToStringWithHead) {
-    const rendered = await ReactDOMServer.renderToStringWithHead(element);
+    const rendered = await ReactDOMServer.renderToStringWithHead(
+      element,
+      getFarmRendererRenderOptions(),
+    );
     return {
       html: rendered.html,
       head: rendered.head || "",
@@ -6658,7 +6672,7 @@ async function renderFarmElement(ReactDOMServer, element, routeKey) {
       streamErrors,
     };
   }
-  const html = await ReactDOMServer.renderToString(element);
+  const html = await ReactDOMServer.renderToString(element, getFarmRendererRenderOptions());
   return { html, head: "", shellHtml: html, streamErrors };
 }
 
@@ -6697,7 +6711,7 @@ function renderFarmElementSync(ReactDOMServer, element, routeKey) {
   if (typeof ReactDOMServer.renderToString !== "function") return undefined;
   let html;
   try {
-    html = ReactDOMServer.renderToString(element);
+    html = ReactDOMServer.renderToString(element, getFarmRendererRenderOptions());
   } catch {
     html = undefined;
   }
@@ -6712,6 +6726,8 @@ function renderFarmElementSync(ReactDOMServer, element, routeKey) {
 function createFarmDocumentStream(contentStream, prefix, suffix, onComplete) {
   const encoder = new TextEncoder();
   const reader = contentStream.getReader();
+  // The suffix renders after the handler returned, outside its async scope.
+  const cspNonce = _resolveCurrentCspNonce();
   return new ReadableStream({
     start(controller) {
       controller.enqueue(encoder.encode(prefix));
@@ -6720,7 +6736,9 @@ function createFarmDocumentStream(contentStream, prefix, suffix, onComplete) {
       try {
         const result = await reader.read();
         if (result.done) {
-          const tail = typeof suffix === "function" ? await suffix() : suffix;
+          const tail = typeof suffix === "function"
+            ? await _runWithFarmCspNonce(cspNonce, suffix)
+            : suffix;
           controller.enqueue(encoder.encode(tail));
           if (onComplete) onComplete();
           controller.close();
@@ -6748,7 +6766,7 @@ function peelFarmDocumentPrefix(markup) {
   let inner = markup.replace(/^\\s+/, "");
   let hoisted = "";
   const wrapper = /^<div\\b[^>]*style=["']display\\s*:\\s*contents["'][^>]*>/i;
-  const hoistable = /${_chunkLOFKRKO7cjs.HOISTED_HEAD_ELEMENT.source}/i;
+  const hoistable = /${_chunkRVXFINNScjs.HOISTED_HEAD_ELEMENT.source}/i;
   let match;
   while ((match = wrapper.exec(inner) || hoistable.exec(inner))) {
     if (!/^<div/i.test(match[0])) hoisted += match[0];
@@ -6842,18 +6860,18 @@ function createFarmErrorDocument(html, title) {
       '  <meta name="viewport" content="width=device-width, initial-scale=1">\\n' +
       '  <link rel="icon" href="data:,">\\n' +
       '  <title>' + escapedTitle + '</title>\\n' +
-      '  <link rel="stylesheet" href="/__farm_client_css_href__">\\n' +
+      '  <link rel="stylesheet" href="/__farm_client_css_href__">' + renderFarmClientModulePreloads(html) + '\\n' +
       renderFarmRendererHydrationScript() + '\\n' +
       '</head>\\n<body>\\n' +
       '  <div id="root">' + html + '</div>\\n' +
       '  ' + renderFarmClientBootstrapScript() + '\\n' +
-      '  <script type="module" src="/__farm_client_js_src__"></script>\\n' +
+      '  ' + renderFarmClientEntryScript() + '\\n' +
       '</body>\\n</html>';
   }
 
   let fullHtml = ensureFarmDocumentRoot(ensureFarmDocumentHead(fullDocument));
   fullHtml = fullHtml
-    .replace(/<head([^>]*)>/i, '<head$1>\\n  <link rel="stylesheet" href="/__farm_client_css_href__">')
+    .replace(/<head([^>]*)>/i, function(match, attrs) { return '<head' + attrs + '>\\n  <link rel="stylesheet" href="/__farm_client_css_href__">' + renderFarmClientModulePreloads(fullDocument); })
     // Function replacements: dynamic markup may contain $-sequences ($&, $', $$)
     // that a string replacement would expand, corrupting the document.
     .replace(/<\\/head>/i, function() { return renderFarmRendererHydrationScript() + '\\n</head>'; })
@@ -6866,7 +6884,7 @@ function createFarmErrorDocument(html, title) {
       /<\\/body>/i,
       function() {
         return '  ' + renderFarmClientBootstrapScript() + '\\n' +
-          '  <script type="module" src="/__farm_client_js_src__"></script>\\n</body>';
+          '  ' + renderFarmClientEntryScript() + '\\n</body>';
       },
     );
   return fullHtml.trim().startsWith("<!DOCTYPE")
@@ -6874,6 +6892,53 @@ function createFarmErrorDocument(html, title) {
     : "<!DOCTYPE html>\\n" + fullHtml;
 }
 
+// The client modules a page needs before it hydrates, filled in from the client
+// build once it has finished (see buildNitroUniversal).
+const farmClientModulePreloads = (() => {
+  try {
+    return JSON.parse("${FARM_CLIENT_MODULE_PRELOADS_PLACEHOLDER}");
+  } catch {
+    return null;
+  }
+})();
+const farmClientEntryPreloadTags = farmClientModulePreloads
+  ? farmClientModulePreloads.entry.map(renderFarmClientModulePreload).join("")
+  : "";
+// The client modules a document's markup loads: its islands' boundaries and the
+// client references of its server tree.
+const FARM_CLIENT_MODULE_REFERENCE_PATTERN = /data-farm-client-boundary="([^"]+)"|"r":"(\\/[^"]+)"/g;
+
+function renderFarmClientModulePreload(index) {
+  return '\\n  <link rel="modulepreload" href="/' +
+    escapeFarmHtmlAttribute(farmClientModulePreloads.files[index]) +
+    '" fetchpriority="low">';
+}
+
+// The modulepreload links for a document: the entry's static imports, then the
+// modules its hydrating page and its markup load.
+function renderFarmClientModulePreloads(markup, pageModule) {
+  // A nonce policy blocks parser-inserted links without the nonce, and the
+  // response filter manages nonces on script elements only, so CSP nonce mode
+  // keeps the documents it had.
+  if (!farmClientModulePreloads || (farmSecurityConfig.csp && farmSecurityConfig.csp.nonce)) return "";
+  const modules = farmClientModulePreloads.modules;
+  const listed = new Set();
+  let tags = farmClientEntryPreloadTags;
+  const add = (moduleId) => {
+    if (!moduleId || !Object.prototype.hasOwnProperty.call(modules, moduleId)) return;
+    for (const index of modules[moduleId]) {
+      if (listed.has(index)) continue;
+      listed.add(index);
+      tags += renderFarmClientModulePreload(index);
+    }
+  };
+  add(pageModule);
+  if (typeof markup === "string") {
+    for (const match of markup.matchAll(FARM_CLIENT_MODULE_REFERENCE_PATTERN)) add(match[1] || match[2]);
+  }
+  return tags;
+}
+
 // The origin hreflang alternates resolve against when the route sets no
 // metadataBase. Forwarded authority counts only under server.trustProxy, the
 // same rule the development server applies.
@@ -6906,7 +6971,7 @@ function applyFarmI18nDocument(html, requestPath, snapshot, request, metadata) {
   });
   const runtimeMarkup =
     renderFarmI18nAlternateLinks(requestPath, snapshot, request, metadata) +
-    '<script>window.__FARM_I18N__ = ' + serializeFarmInlineValue(snapshot) + ';</script>';
+    stampFarmCspNonce('<script>window.__FARM_I18N__ = ' + serializeFarmInlineValue(snapshot) + ';</script>');
   nextHtml = nextHtml.replace(/<head([^>]*)>/i, function(_match, attributes) {
     // Function replacement: runtimeMarkup may contain $-sequences ($&, $', $$).
     return '<head' + attributes + '>' + runtimeMarkup;
@@ -6976,6 +7041,26 @@ function hasPrivateFarmRequestHeaders(request, farmLocaleResolution) {
   );
 }
 
+// A docs response a guard let this visitor read is theirs, as for pages: one for a
+// request with credentials, or with middleware request data, never fills a shared cache.
+// Middleware headers cannot do this, since they never replace a response's own.
+function withFarmDocsRequestCache(response, request, farmLocaleResolution, middlewareData, middlewareContext) {
+  if (
+    !hasPrivateFarmRequestHeaders(request, farmLocaleResolution) &&
+    !middlewareData?.size &&
+    !middlewareContext?.size
+  ) {
+    return response;
+  }
+  const headers = new Headers(response.headers);
+  headers.set("Cache-Control", "private, no-store");
+  return farmOwnedResponse(response.body, {
+    status: response.status,
+    statusText: response.statusText,
+    headers,
+  });
+}
+
 ${generateRuntimePathMatcherSource()}
 
 function getMatchingErrorBoundary(pathname) {
@@ -7206,6 +7291,27 @@ function createFarmAgentRobotsResponse(request) {
   );
 }
 ` : ""}
+// Static pages a path-specific guard covers (non-root middleware.ts, a config or
+// integration middleware matcher naming the path), decided at build time.
+// sitemap.xml, llms.txt and the default MCP server never list them, nor a page behind
+// a route guard.
+const farmAgentGuardedPages = new Set(${JSON.stringify(
+    pageRoutes.map((route) => route.pattern).filter(
+      (pattern) => !pattern.includes("[") && _chunkRVXFINNScjs.farmPathGuardCoversPage.call(void 0, 
+        {
+          config: { middleware: config.middleware, integrations: config.integrations },
+          middlewareRoutes
+        },
+        pattern
+      )
+    )
+  )});
+function getFarmAgentListedPageRoutes() {
+  return pageRoutes.filter(
+    (route) =>
+      !farmAgentGuardedPages.has(route.pattern) && !(route.module && route.module.__farmRouteGuard),
+  );
+}
 ${servesAgentSitemap ? `// sitemap.xml from agent.sitemap, built the same way as in development. Each page's
 // lastmod is its file's modification time, read at build time.
 const farmAgentSitemapConfig = ${JSON.stringify(config.agent.sitemap)};
@@ -7215,7 +7321,7 @@ function createFarmAgentSitemapResponse(request) {
   return createFarmMetadataRouteResponse(
     "sitemap",
     createFarmDefaultSitemap(
-      pageRoutes.map((route) => ({
+      getFarmAgentListedPageRoutes().map((route) => ({
         pattern: route.pattern,
         module: route.module,
         lastModified: farmAgentSitemapLastModified[route.pattern],
@@ -7238,12 +7344,12 @@ ${servesDefaultMCP ? `// agent.mcp: the default read-only MCP server at /mcp, as
 // aside for a page route that answers /mcp and for any MCP server published or
 // registered at runtime, such as the docs engine's.
 const farmDefaultMCPServer = ${JSON.stringify(
-    _chunkPTZ2TVNEcjs.createFarmDefaultMCPServer.call(void 0, readFarmAppPackageIdentity(config.root), _chunkNQ6QFZWDcjs.FARM_VERSION)
+    _chunkH5CLOUZScjs.createFarmDefaultMCPServer.call(void 0, readFarmAppPackageIdentity(config.root), _chunkQUCXCDE2cjs.FARM_VERSION)
   )};
 let farmDefaultMCPRouteFree;
 function getFarmDefaultMCPServer() {
   if (farmDefaultMCPRouteFree === undefined) {
-    farmDefaultMCPRouteFree = !matchPageRoute(${JSON.stringify(_chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_PATH)});
+    farmDefaultMCPRouteFree = !matchPageRoute(${JSON.stringify(_chunkH5CLOUZScjs.FARM_DEFAULT_MCP_PATH)});
   }
   return farmDefaultMCPRouteFree ? resolveFarmDefaultMCPServer(farmDefaultMCPServer) : undefined;
 }
@@ -7254,7 +7360,7 @@ async function handleFarmDefaultMCP(request) {
     basePath: ${JSON.stringify(config.basePath)},
     listPages: () =>
       collectFarmDefaultMCPPages(
-        pageRoutes.map((route) => ({ pattern: route.pattern, module: route.module })),
+        getFarmAgentListedPageRoutes().map((route) => ({ pattern: route.pattern, module: route.module })),
         { origin, basePath: ${JSON.stringify(config.basePath)}, markdown: farmMarkdownConfig },
       ),
     // A fresh request through this handler, so the caller's cookies never shape a page.
@@ -7274,7 +7380,7 @@ const farmDefaultMCPReadMarkdown = createFarmLlmsMarkdownReader((page) => fetch(
 function createFarmLlmsTxtContext(request, full) {
   const origin = new URL(request.url).origin;
   const pages = collectFarmLlmsTxtPages(
-    pageRoutes.map((route) => ({ pattern: route.pattern, metadata: route.module && route.module.metadata })),
+    getFarmAgentListedPageRoutes().map((route) => ({ pattern: route.pattern, metadata: route.module && route.module.metadata })),
     {
       origin,
       markdown: farmMarkdownConfig,
@@ -7538,7 +7644,7 @@ function hasLocalRequestRoute(request, routePathname) {
   if (${imageRuntime === "none" ? "false" : `pathname === ${JSON.stringify(config.images.path)}`}) {
     return true;
   }
-  ${_optionalChain([config, 'access', _134 => _134.docs, 'optionalAccess', _135 => _135.enabled]) ? `const docsPath = normalizeRuntimePath(farmDocsResolvedConfig?.entry || "/docs");
+  ${_optionalChain([config, 'access', _140 => _140.docs, 'optionalAccess', _141 => _141.enabled]) ? `const docsPath = normalizeRuntimePath(farmDocsResolvedConfig?.entry || "/docs");
   if (
     isFarmDocsAPIRequest(pathname) ||
     docsPath === "/" ||
@@ -7564,7 +7670,7 @@ function getFarmPluginRequestOptions(request) {
       route: { ...route, pattern: normalizeRuntimePath(farmOpenAPIReference.route) },
     };
   }
-  const isDocsAPIRequest = ${_optionalChain([config, 'access', _136 => _136.docs, 'optionalAccess', _137 => _137.enabled]) ? "isFarmDocsAPIRequest(pathname)" : "false"};
+  const isDocsAPIRequest = ${_optionalChain([config, 'access', _142 => _142.docs, 'optionalAccess', _143 => _143.enabled]) ? "isFarmDocsAPIRequest(pathname)" : "false"};
   const integrationMatch = ${hasServerRuntimeIntegrations ? `matchIntegrationRoute(serverRuntimeIntegrations, {
     pathname,
     method: request.method,
@@ -7661,7 +7767,7 @@ function getApplicableLayouts(pathname, directory) {
   return applicable;
 }
 
-${_optionalChain([config, 'access', _138 => _138.docs, 'optionalAccess', _139 => _139.enabled]) ? `async function wrapFarmDocsResponseWithLayouts(request, response) {
+${_optionalChain([config, 'access', _144 => _144.docs, 'optionalAccess', _145 => _145.enabled]) ? `async function wrapFarmDocsResponseWithLayouts(request, response) {
   if (request.method === "HEAD") return response;
   if (response.headers.get("x-farm-docs-adapter")) return response;
 
@@ -7751,7 +7857,7 @@ ${_optionalChain([config, 'access', _138 => _138.docs, 'optionalAccess', _139 =>
   if (!html.includes('src="/__farm_client_js_src__"')) {
     html = html.replace(
       /<[/]body>/i,
-      '  <script type="module" src="/__farm_client_js_src__"></script>\\n</body>',
+      function() { return '  ' + renderFarmClientEntryScript() + '\\n</body>'; },
     );
   }
   if (!html.includes('window._$HY')) {
@@ -7768,7 +7874,7 @@ ${_optionalChain([config, 'access', _138 => _138.docs, 'optionalAccess', _139 =>
 }` : ""}
 
 const pprShellCache = getFarmDataCache();
-const experimentalPPREnabled = ${JSON.stringify(_optionalChain([config, 'access', _140 => _140.experimental, 'optionalAccess', _141 => _141.ppr]) === true)};
+const experimentalPPREnabled = ${JSON.stringify(_optionalChain([config, 'access', _146 => _146.experimental, 'optionalAccess', _147 => _147.ppr]) === true)};
 
 function resolveRouteRenderingView(route) {
   // The same merge development uses: baked directive config under the
@@ -7788,6 +7894,9 @@ function resolvePPRConfig(route) {
 }
 
 function getPPRShellBypassReason(request, middlewareData, middlewareContext) {
+  // A shared shell would carry one response's nonce to every visitor, where
+  // the nonce filter strips it and Farm's scripts stop running.
+  if (farmSecurityConfig.csp && farmSecurityConfig.csp.nonce) return "csp-nonce";
   const method = request.method.toUpperCase();
   if (method !== "GET" && method !== "HEAD") return "method";
   if (request.headers.get("cookie")) return "cookie";
@@ -7897,7 +8006,7 @@ async function handleFarmRequest(request, adapterContext) {
     },
     { redirect: !isFarmLocalAPIPathname(requestUrl.pathname) }
   )` : "handleFarmRequestInContext(request, null, false, Date.now(), adapterContext, requestUrl)"};
-  ${_optionalChain([config, 'access', _142 => _142.md, 'optionalAccess', _143 => _143.enabled]) ? `const pathname = getFarmRoutePathname(requestUrl.pathname);
+  ${_optionalChain([config, 'access', _148 => _148.md, 'optionalAccess', _149 => _149.enabled]) ? `const pathname = getFarmRoutePathname(requestUrl.pathname);
   if (matchPageRoute(pathname)) {
     // The Link header advertises the public .md URL, like the head alternate.
     return applyMarkdownNegotiationHeaders(response, {
@@ -8053,7 +8162,7 @@ async function handleFarmRequestInContext(
   }
   ` : ""}
 
-  ${_optionalChain([config, 'access', _144 => _144.docs, 'optionalAccess', _145 => _145.enabled]) ? `
+  ${_optionalChain([config, 'access', _150 => _150.docs, 'optionalAccess', _151 => _151.enabled]) ? `
   // Docs responses are served after app middleware so route guards and
   // middleware headers apply to the docs engine like any other page content.
   // An app's own llms.txt, llms-full.txt, sitemap.xml, and robots.txt take
@@ -8065,11 +8174,17 @@ async function handleFarmRequestInContext(
     const docsResponse = await farmDocsHandler(cloneFarmRequestWithContext(request));
     if (docsResponse) {
       if (!docsResponse.headers.get("content-type")?.toLowerCase().includes("text/html")) {
-        return applyProductionMiddlewareHeaders(docsResponse, middlewareHeaders);
+        return applyProductionMiddlewareHeaders(
+          withFarmDocsRequestCache(docsResponse, request, farmLocaleResolution, middlewareData, middlewareContext),
+          middlewareHeaders,
+        );
       }
-      const wrappedDocsResponse = await wrapFarmDocsResponseWithLayouts(
+      const wrappedDocsResponse = withFarmDocsRequestCache(
+        await wrapFarmDocsResponseWithLayouts(request, docsResponse),
         request,
-        docsResponse,
+        farmLocaleResolution,
+        middlewareData,
+        middlewareContext,
       );
       const docsHeaders = new Headers(wrappedDocsResponse.headers);
       docsHeaders.set("x-farm-preload-buffered", "1");
@@ -8108,7 +8223,7 @@ async function handleFarmRequestInContext(
   }
   ` : ""}
 
-  ${_optionalChain([config, 'access', _146 => _146.md, 'optionalAccess', _147 => _147.enabled]) ? `
+  ${_optionalChain([config, 'access', _152 => _152.md, 'optionalAccess', _153 => _153.enabled]) ? `
   if (farmMarkdownConfig?.enabled) {
     const markdownResponse = await createMarkdownMirrorResponse({
       // The mirror helper only reads metadata and creates its own GET request.
@@ -8170,7 +8285,7 @@ async function handleFarmRequestInContext(
   ) {
     const method = request.method.toUpperCase();
     const response = method === "GET" || method === "HEAD"
-      ? farmOwnedResponse(method === "HEAD" ? null : farmOpenAPIReference.html, {
+      ? farmOwnedResponse(method === "HEAD" ? null : stampFarmCspNonce(farmOpenAPIReference.html), {
           status: 200,
           headers: {
             "Content-Type": "text/html; charset=utf-8",
@@ -8207,11 +8322,11 @@ async function handleFarmRequestInContext(
     return applyProductionMiddlewareHeaders(applicationMetadataResponse, middlewareHeaders);
   }
   ` : ""}
-  ${_optionalChain([config, 'access', _148 => _148.agent, 'optionalAccess', _149 => _149.manifest]) !== false ? `
+  ${_optionalChain([config, 'access', _154 => _154.agent, 'optionalAccess', _155 => _155.manifest]) !== false ? `
   // agent.manifest: /.well-known/farmjs.json (and 0.1.34's /.well-known/farmjs), the app's
   // public manifest; Farm Infra's signed request gets the full view.
   if (
-    [${JSON.stringify(_chunkLOFKRKO7cjs.FARM_APP_MANIFEST_PATH)}, ${JSON.stringify(_chunkLOFKRKO7cjs.FARM_APP_MANIFEST_LEGACY_PATH)}].includes(
+    [${JSON.stringify(_chunkRVXFINNScjs.FARM_APP_MANIFEST_PATH)}, ${JSON.stringify(_chunkRVXFINNScjs.FARM_APP_MANIFEST_LEGACY_PATH)}].includes(
       normalizeRuntimePath(routePathname),
     )
   ) {
@@ -8221,9 +8336,9 @@ async function handleFarmRequestInContext(
     );
   }
   ` : ""}
-  ${_optionalChain([config, 'access', _150 => _150.agent, 'optionalAccess', _151 => _151.apiCatalog]) ? `
+  ${_optionalChain([config, 'access', _156 => _156.agent, 'optionalAccess', _157 => _157.apiCatalog]) ? `
   // agent.apiCatalog: list the OpenAPI and MCP surfaces at the RFC 9727 path.
-  if (normalizeRuntimePath(routePathname) === ${JSON.stringify(_chunkLOFKRKO7cjs.FARM_API_CATALOG_PATH)}) {
+  if (normalizeRuntimePath(routePathname) === ${JSON.stringify(_chunkRVXFINNScjs.FARM_API_CATALOG_PATH)}) {
     return applyProductionMiddlewareHeaders(
       createFarmApiCatalogResponse(request.method, farmApiCatalogInput, request),
       middlewareHeaders,
@@ -8248,11 +8363,11 @@ async function handleFarmRequestInContext(
     );
   }
   ` : ""}
-  ${_optionalChain([config, 'access', _152 => _152.agent, 'optionalAccess', _153 => _153.llmsTxt, 'optionalAccess', _154 => _154.enabled]) ? `
+  ${_optionalChain([config, 'access', _158 => _158.agent, 'optionalAccess', _159 => _159.llmsTxt, 'optionalAccess', _160 => _160.enabled]) ? `
   // agent.llmsTxt with no llms.ts or llms-full.ts: serve the generated files.
   const farmGeneratedLlmsKind = normalizeRuntimePath(routePathname) === "/llms.txt"
     ? "llms"
-    : ${_optionalChain([config, 'access', _155 => _155.agent, 'optionalAccess', _156 => _156.llmsTxt, 'optionalAccess', _157 => _157.full]) ? `normalizeRuntimePath(routePathname) === "/llms-full.txt" ? "llms-full" : ` : ""}null;
+    : ${_optionalChain([config, 'access', _161 => _161.agent, 'optionalAccess', _162 => _162.llmsTxt, 'optionalAccess', _163 => _163.full]) ? `normalizeRuntimePath(routePathname) === "/llms-full.txt" ? "llms-full" : ` : ""}null;
   if (farmGeneratedLlmsKind) {
     const llmsContext = createFarmLlmsTxtContext(request, farmGeneratedLlmsKind === "llms-full");
     const llmsOrigin = new URL(request.url).origin;
@@ -8287,10 +8402,13 @@ async function handleFarmRequestInContext(
   }
   ` : ""}
 
-  ${_optionalChain([config, 'access', _158 => _158.docs, 'optionalAccess', _159 => _159.enabled]) ? `if (farmDocsAPIHandler && isFarmDocsAPIRequest(pathname)) {
+  ${_optionalChain([config, 'access', _164 => _164.docs, 'optionalAccess', _165 => _165.enabled]) ? `if (farmDocsAPIHandler && isFarmDocsAPIRequest(pathname)) {
     const docsAPIResponse = await farmDocsAPIHandler(cloneFarmRequestWithContext(request));
     if (docsAPIResponse) {
-      return applyProductionMiddlewareHeaders(docsAPIResponse, middlewareHeaders);
+      return applyProductionMiddlewareHeaders(
+        withFarmDocsRequestCache(docsAPIResponse, request, farmLocaleResolution, middlewareData, middlewareContext),
+        middlewareHeaders,
+      );
     }
   }` : ""}
 
@@ -8745,7 +8863,7 @@ async function handleFarmRequestInContext(
             );
           }
         }
-        ${_optionalChain([config, 'access', _160 => _160.md, 'optionalAccess', _161 => _161.enabled]) ? `
+        ${_optionalChain([config, 'access', _166 => _166.md, 'optionalAccess', _167 => _167.enabled]) ? `
         // Advertise the Markdown mirror in the head as well as the Link header,
         // using the public path the .md request will be resolved against.
         mergedMetadata = addMetadataMarkdownAlternate(
@@ -8764,7 +8882,7 @@ async function handleFarmRequestInContext(
           emitFarmEvent({ type: "cache.bypass", route: pathname, reason: "request-read" });
         }
 
-        const renderedMetadata = renderMetadataHead(mergedMetadata, { pathname, jsonLd: ${JSON.stringify(_nullishCoalesce(_optionalChain([config, 'access', _162 => _162.agent, 'optionalAccess', _163 => _163.jsonLd]), () => ( false)))} });
+        const renderedMetadata = renderMetadataHead(mergedMetadata, { pathname, jsonLd: ${JSON.stringify(_nullishCoalesce(_optionalChain([config, 'access', _168 => _168.agent, 'optionalAccess', _169 => _169.jsonLd]), () => ( false)))} });
         const title = renderedMetadata.title;
         const metaTags = renderedMetadata.tags;
         const hasFavicon = renderedMetadata.hasFavicon;
@@ -8804,13 +8922,16 @@ async function handleFarmRequestInContext(
 
         // Stream a suspended body as soon as React's shell is ready. Full-document
         // layouts, localized documents, and cacheable PPR shells still use the
-        // buffered path because they require whole-document transformation.
+        // buffered path because they require whole-document transformation, and so
+        // does the anonymous check behind a page's Markdown source: there, a
+        // redirect() under a loading boundary must still decide the status.
         if (
           pageStatus === 200 &&
           renderedPage.stream &&
           !hasFullDocument &&
           !farmI18nSnapshot &&
-          !pprCacheKey
+          !pprCacheKey &&
+          !_isFarmMarkdownPageCheck(request.headers.get(FARM_MARKDOWN_PAGE_CHECK_HEADER))
         ) {
           const farmThemeDocument = createFarmThemeDocumentParts(
             farmThemeConfig,
@@ -8824,7 +8945,7 @@ async function handleFarmRequestInContext(
             (hasFavicon ? '' : '  <link rel="icon" href="data:,">\\n') +
             '  <title>' + title + '</title>' + metaTags + '\\n' +
             '  <link rel="stylesheet" href="/__farm_client_css_href__">\\n' +
-            '  <link rel="modulepreload" href="/__farm_client_js_src__">\\n' +
+            '  <link rel="modulepreload" href="/__farm_client_js_src__">' + renderFarmClientModulePreloads(null, route.clientModule) + '\\n' +
             renderFarmRendererHydrationScript() + '\\n' +
             '</head>\\n<body>\\n  <div id="root">';
           const streamSuffix = '</div>\\n' +
@@ -8833,7 +8954,7 @@ async function handleFarmRequestInContext(
               routeSlotPayload,
               clientPageProps
             ) + '\\n' +
-            '  <script type="module" src="/__farm_client_js_src__"></script>\\n' +
+            '  ' + renderFarmClientEntryScript() + '\\n' +
             '</body>\\n</html>';
           const themedStreamPrefix = streamPrefix.replace(
             '<html lang="en">',
@@ -8857,7 +8978,8 @@ async function handleFarmRequestInContext(
               try {
                 return createLateNotFoundRecovery(
                   await ReactDOMServer.renderToString(
-                    wrapWithFarmIntegrationProviders(createFarmNotFoundElement(pathname))
+                    wrapWithFarmIntegrationProviders(createFarmNotFoundElement(pathname)),
+                    getFarmRendererRenderOptions()
                   )
                 ) + streamSuffix;
               } catch (error) {
@@ -8865,7 +8987,10 @@ async function handleFarmRequestInContext(
                 // needs their context cannot render alone, so use Farm's.
                 console.warn("not-found page could not render outside its layout, using Farm's:", error);
                 return createLateNotFoundRecovery(
-                  await ReactDOMServer.renderToString(React.createElement(FarmDefault404Page))
+                  await ReactDOMServer.renderToString(
+                    React.createElement(FarmDefault404Page),
+                    getFarmRendererRenderOptions()
+                  )
                 ) + streamSuffix;
               }
             },
@@ -8914,7 +9039,7 @@ async function handleFarmRequestInContext(
           );
           fullHtml = html
             // Inject CSS link after opening head tag or first meta tag
-            .replace(/<head([^>]*)>/i, '<head$1>\\n  <link rel="stylesheet" href="/__farm_client_css_href__">')
+            .replace(/<head([^>]*)>/i, function(match, attrs) { return '<head' + attrs + '>\\n  <link rel="stylesheet" href="/__farm_client_css_href__">' + renderFarmClientModulePreloads(html, route.clientModule); })
             .replace(/<\\/head>/i, () => renderFarmRendererHydrationScript() + '\\n</head>')
             // Explicit metadata wins over renderer and layout titles. Without
             // explicit metadata, a renderer title wins over the layout title.
@@ -8948,7 +9073,7 @@ async function handleFarmRequestInContext(
                 routeSlotPayload,
                 clientPageProps
               ) + '\\n' +
-                '  <script type="module" src="/__farm_client_js_src__"></script>\\n</body>',
+                '  ' + renderFarmClientEntryScript() + '\\n</body>',
             );
           
           // Last, so the charset (and the viewport, unless the layout wrote one) open the head.
@@ -8967,13 +9092,13 @@ async function handleFarmRequestInContext(
   \${viewportTags}
   \${hasFavicon ? "" : '<link rel="icon" href="data:,">'}
   \${suppressDefaultTitle ? "" : "<title>" + title + "</title>"}\${metaTags}\${rendererHead ? "\\n  " + rendererHead : ""}
-  <link rel="stylesheet" href="/__farm_client_css_href__">
+  <link rel="stylesheet" href="/__farm_client_css_href__">\${renderFarmClientModulePreloads(html, route.clientModule)}
   \${renderFarmRendererHydrationScript()}
 </head>
 <body>
   <div id="root">\${html}</div>
   \${renderFarmClientBootstrapScript(pageProps.__farmCanonicalPath, routeSlotPayload, clientPageProps)}
-  <script type="module" src="/__farm_client_js_src__"></script>
+  \${renderFarmClientEntryScript()}
 </body>
 </html>\`;
         }
@@ -9145,14 +9270,14 @@ async function handleFarmRequestInContext(
         }
       }
 
-      const fallbackHtml = createDefaultErrorMarkup({
+      const fallbackHtml = stampFarmCspNonce(createDefaultErrorMarkup({
         statusCode: errorStatus,
         statusText: errorStatusText,
         requestPath: pathname,
         method: request.method,
         development: false,
         mode: "production",
-      });
+      }));
       const fallbackDocument = applyFarmThemeDocument(
         applyFarmI18nDocument(
           createFarmErrorDocument(
@@ -9184,7 +9309,7 @@ async function handleFarmRequestInContext(
 ${servesDefaultMCP ? `
   // agent.mcp: no app route answered /mcp, so the default read-only server may.
   if (
-    normalizeRuntimePath(routePathname) === ${JSON.stringify(_chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_PATH)} &&
+    normalizeRuntimePath(routePathname) === ${JSON.stringify(_chunkH5CLOUZScjs.FARM_DEFAULT_MCP_PATH)} &&
     getFarmDefaultMCPServer()
   ) {
     return applyProductionMiddlewareHeaders(
@@ -9239,7 +9364,7 @@ ${servesDefaultMCP ? `
     }
     notFoundElement = wrapWithFarmIntegrationProviders(notFoundElement);
     
-    const html = await ReactDOMServer.renderToString(notFoundElement);
+    const html = await ReactDOMServer.renderToString(notFoundElement, getFarmRendererRenderOptions());
     // The layouts' and the not-found page's metadata, as the development renderer uses it.
     const notFoundMetadata = renderMetadataHead(
       await resolveFarmNotFoundMetadata(
@@ -9264,12 +9389,12 @@ ${servesDefaultMCP ? `
           "<head" + attrs + ">" +
           headContent.replace(/<title\\b[^>]*>[\\s\\S]*?<\\/title>\\s*/gi, "") +
           "\\n  <title>" + notFoundMetadata.title + "</title>" + notFoundMetadata.tags + "\\n</head>")
-        .replace(/<head([^>]*)>/i, '<head$1>\\n  <link rel="stylesheet" href="/__farm_client_css_href__">')
+        .replace(/<head([^>]*)>/i, function(match, attrs) { return '<head' + attrs + '>\\n  <link rel="stylesheet" href="/__farm_client_css_href__">' + renderFarmClientModulePreloads(fullDocument); })
         .replace(/<\\/head>/i, () => renderFarmRendererHydrationScript() + '\\n</head>')
         .replace(
           /<\\/body>/i,
           () => '  ' + renderFarmClientBootstrapScript() + '\\n' +
-            '  <script type="module" src="/__farm_client_js_src__"></script>\\n</body>',
+            '  ' + renderFarmClientEntryScript() + '\\n</body>',
         );
       fullHtml = ensureFarmDocumentMeta(fullHtml, notFoundMetadata.viewport);
       if (!fullHtml.trim().startsWith('<!DOCTYPE')) {
@@ -9282,14 +9407,14 @@ ${servesDefaultMCP ? `
   <meta charset="UTF-8">
   \${notFoundMetadata.viewport}
   \${notFoundMetadata.hasFavicon ? "" : '<link rel="icon" href="data:,">'}
-  <link rel="stylesheet" href="/__farm_client_css_href__">
+  <link rel="stylesheet" href="/__farm_client_css_href__">\${renderFarmClientModulePreloads(html)}
   <title>\${notFoundMetadata.title}</title>\${notFoundMetadata.tags}
   \${renderFarmRendererHydrationScript()}
 </head>
 <body>
   <div id="root">\${html}</div>
   \${renderFarmClientBootstrapScript()}
-  <script type="module" src="/__farm_client_js_src__"></script>
+  \${renderFarmClientEntryScript()}
 </body>
 </html>\`;
     }
@@ -9398,11 +9523,11 @@ ${generatePreloadResponseRuntimeSource()}
 
 // Export as Web Standard fetch API
 export async function fetch(request, context) {
-  ${_optionalChain([config, 'access', _164 => _164.agent, 'optionalAccess', _165 => _165.noindexPreviews]) ? "const response = await" : "return"} _runWithAPIRequestRuntime({
+  ${_optionalChain([config, 'access', _170 => _170.agent, 'optionalAccess', _171 => _171.noindexPreviews]) ? "const response = await" : "return"} _runWithAPIRequestRuntime({
     basePath: farmLocalAPIBasePath,
     dispatch: async (localRequest) =>
       (await handleAPIRequest(localRequest)) ?? Response.json({ error: "Not Found" }, { status: 404 }),
-  }, () => handleFarmFetch(request, context));${_optionalChain([config, 'access', _166 => _166.agent, 'optionalAccess', _167 => _167.noindexPreviews]) ? `
+  }, () => handleFarmFetch(request, context));${_optionalChain([config, 'access', _172 => _172.agent, 'optionalAccess', _173 => _173.noindexPreviews]) ? `
   // Keep every response of a preview deployment out of search indexes.
   return farmNoindexPreview ? applyFarmPreviewRobotsTag(response) : response;` : ""}
 }
@@ -9423,6 +9548,9 @@ async function handleFarmFetch(request, context) {
     () =>
       runWithFarmRequestSpan(request, async () => {
         const runtimeOptions = farmPluginRuntime ? getFarmPluginRequestOptions(request) : null;
+        // Created before rendering so only scripts Farm, the renderer, or the
+        // app (through getCspNonce()) give it carry the response nonce.
+        const cspNonce = createFarmCspNonce(farmSecurityConfig);
         const prepareResponse = async (runtimeRequest, responsePromise) => {
           const response = await responsePromise;
           // Headers need the path eagerly; preload reporting needs it only for
@@ -9434,6 +9562,7 @@ async function handleFarmFetch(request, context) {
             applyFarmCspNonceToResponse(
               applyConfiguredResponseHeaders(response, routePathname),
               farmSecurityConfig,
+              cspNonce,
             ),
             routePathname,
             runtimeRequest,
@@ -9466,7 +9595,7 @@ async function handleFarmFetch(request, context) {
             : ` : ""}prepareResponse(request, handleFarmRequest(request, context));
 
         const response = await _runWithCurrentRequest(request, () =>
-          _runWithAfterRequest(request, runRequest, context),
+          _runWithFarmCspNonce(cspNonce, () => _runWithAfterRequest(request, runRequest, context)),
         );
         return ${hasCompressionRuntime && !hasPluginRuntime ? "compressFarmResponse(request, response, getFarmOwnedBufferedHtml(response), farmLazyBufferedHtml.has(response))" : "response"};
       }),
@@ -9541,26 +9670,6 @@ function middlewarePatternMatches(pattern, pathname) {
   return new RegExp(`^${expression}/?$`).test(pathname);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, middlewarePatternMatches, "middlewarePatternMatches");
-function configMiddlewareMayHandlePath(config, pathname) {
-  if (!hasFarmMiddlewareConfig(config)) return false;
-  const entries = Array.isArray(config) ? config : [config];
-  return entries.some((entry) => {
-    if (!entry.matcher && !entry.exclude) return true;
-    const matchers = entry.matcher ? (Array.isArray(entry.matcher) ? entry.matcher : [entry.matcher]).map(
-      (matcher) => (
-        // A request-aware matcher cannot be proven safe at build time.
-        typeof matcher === "function" ? () => true : matcher
-      )
-    ) : void 0;
-    const compiled = _chunk4GWRFP22cjs.compileMiddlewareConfig.call(void 0, { matcher: matchers, exclude: entry.exclude });
-    return _chunk4GWRFP22cjs.matchesCompiledMiddlewareConfig.call(void 0, pathname, compiled, {}).matched;
-  });
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, configMiddlewareMayHandlePath, "configMiddlewareMayHandlePath");
-function appMiddlewareMayHandlePath(middlewareRoutes, pathname) {
-  return middlewareRoutes.some((route) => _chunk4GWRFP22cjs.matchesMiddlewareRoute.call(void 0, pathname, route).matched);
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, appMiddlewareMayHandlePath, "appMiddlewareMayHandlePath");
 function routePatternSpecificity(pattern) {
   return pattern.split("/").filter(Boolean).reduce((score, segment) => {
     if (segment === "**" || segment.startsWith("[[...")) return score + 1;
@@ -9596,13 +9705,13 @@ function getPhysicalPrerenderBypassReason(options) {
   if (rewriteSources.some((source) => middlewarePatternMatches(source, pathname))) {
     return "rewrite";
   }
-  if (appMiddlewareMayHandlePath(middlewareRoutes, pathname)) return "app middleware";
-  if (configMiddlewareMayHandlePath(config.middleware, pathname)) return "configured middleware";
-  if (_chunk3A4KGQYIcjs.hasCustomFarmRouteContext.call(void 0, config)) return "request context";
+  if (_chunkRVXFINNScjs.appMiddlewareMayHandlePath.call(void 0, middlewareRoutes, pathname)) return "app middleware";
+  if (_chunkRVXFINNScjs.configMiddlewareMayHandlePath.call(void 0, config.middleware, pathname)) return "configured middleware";
+  if (_chunkHRETEZ2Zcjs.hasCustomFarmRouteContext.call(void 0, config)) return "request context";
   if (farmServerRuntimePluginsMayHandlePath(config, pathname)) return "server runtime plugin";
   const manifestEntry = getManifestPageEntry(routeRuntimeManifest, pathname);
-  if (_optionalChain([manifestEntry, 'optionalAccess', _168 => _168.rendering]) === "dynamic") return "dynamic runtime manifest";
-  if (manifestEntry && (manifestEntry.runtime !== "auto" || Boolean(_optionalChain([manifestEntry, 'access', _169 => _169.regions, 'optionalAccess', _170 => _170.length])) || manifestEntry.maxDuration !== void 0)) {
+  if (_optionalChain([manifestEntry, 'optionalAccess', _174 => _174.rendering]) === "dynamic") return "dynamic runtime manifest";
+  if (manifestEntry && (manifestEntry.runtime !== "auto" || Boolean(_optionalChain([manifestEntry, 'access', _175 => _175.regions, 'optionalAccess', _176 => _176.length])) || manifestEntry.maxDuration !== void 0)) {
     return "route runtime controls";
   }
   const routeRule = getEffectiveRouteRule(config, pathname);
@@ -9616,7 +9725,7 @@ function getPhysicalPrerenderBypassReason(options) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, getPhysicalPrerenderBypassReason, "getPhysicalPrerenderBypassReason");
 async function buildNitroUniversal(config, routeManager, apiRouteManager, serverRenderer, preset, root, distDir, ssrBundle, ssrEntryFile, clientOutputDir, routeRuntimeManifest, configuredHeaderRoutes, nitroBuilderResultPromise, pluginManager) {
-  const [fs, nitroBuilderResult] = await Promise.all([
+  const [fs3, nitroBuilderResult] = await Promise.all([
     import("fs/promises"),
     nitroBuilderResultPromise
   ]);
@@ -9624,7 +9733,7 @@ async function buildNitroUniversal(config, routeManager, apiRouteManager, server
   const nitroBuilder = nitroBuilderResult.value;
   const isVercel = preset === "vercel" || preset === "vercel-edge";
   const isCloudflareWorker = preset === "cloudflare-module";
-  const outputDir = _chunk3A4KGQYIcjs.resolveDeployOutputPath.call(void 0, root, config.deploy.outputDir);
+  const outputDir = _chunkHRETEZ2Zcjs.resolveDeployOutputPath.call(void 0, root, config.deploy.outputDir);
   const runtimeServerOutputDir = isVercel ? _path2.default.join(outputDir, "functions", "__nitro.func") : _path2.default.join(outputDir, "server");
   const ssrOutputDir = _path2.default.join(root, distDir, "ssr");
   const imageRuntime = resolveImageRuntime(config, preset);
@@ -9695,12 +9804,22 @@ async function buildNitroUniversal(config, routeManager, apiRouteManager, server
   }
   const scheduledTasks = _chunk6EXBPJ24cjs.mergeScheduledTasks.call(void 0, farmWorkflows.scheduledTasks, farmCron.scheduledTasks);
   const cloudflareCronConfig = _chunk6EXBPJ24cjs.createFarmCronCloudflareConfig.call(void 0, farmCron.jobs);
-  const [clientCssHref, clientJsSrc] = await Promise.all([
+  const [clientCssHref, clientJsSrc, docsModulePreloads, clientModulePreloads] = await Promise.all([
     resolveHashedClientCssHref(clientOutputDir),
-    resolveHashedClientJsSrc(clientOutputDir)
+    resolveHashedClientJsSrc(clientOutputDir),
+    readFarmDocsModulePreloads(_path2.default.join(root, distDir)),
+    readFarmClientModulePreloads(_path2.default.join(root, distDir))
   ]);
+  const encodedDocsModulePreloads = encodeFarmDocsModulePreloads(docsModulePreloads);
+  const encodedClientModulePreloads = encodeFarmClientModulePreloads(clientModulePreloads);
   for (const output of Object.values(ssrBundle)) {
     if (output.type !== "chunk") continue;
+    if (output.code.includes(FARM_DOCS_MODULE_PRELOADS_PLACEHOLDER)) {
+      output.code = output.code.split(FARM_DOCS_MODULE_PRELOADS_PLACEHOLDER).join(encodedDocsModulePreloads);
+    }
+    if (output.code.includes(FARM_CLIENT_MODULE_PRELOADS_PLACEHOLDER)) {
+      output.code = output.code.split(FARM_CLIENT_MODULE_PRELOADS_PLACEHOLDER).join(encodedClientModulePreloads);
+    }
     if (output.code.includes(FARM_CLIENT_CSS_HREF_PLACEHOLDER)) {
       output.code = output.code.split(FARM_CLIENT_CSS_HREF_PLACEHOLDER).join(clientCssHref);
     }
@@ -9708,11 +9827,11 @@ async function buildNitroUniversal(config, routeManager, apiRouteManager, server
       output.code = output.code.split(FARM_CLIENT_JS_SRC_PLACEHOLDER).join(clientJsSrc);
     }
   }
-  await fs.mkdir(ssrOutputDir, { recursive: true });
+  await fs3.mkdir(ssrOutputDir, { recursive: true });
   for (const [fileName, output] of Object.entries(ssrBundle)) {
     const filePath = _path2.default.join(ssrOutputDir, fileName);
-    await fs.mkdir(_path2.default.dirname(filePath), { recursive: true });
-    await fs.writeFile(filePath, output.type === "chunk" ? output.code : output.source);
+    await fs3.mkdir(_path2.default.dirname(filePath), { recursive: true });
+    await fs3.writeFile(filePath, output.type === "chunk" ? output.code : output.source);
   }
   const nitroEntryPath = _path2.default.join(ssrOutputDir, "nitro-entry.mjs");
   const nodeAdapterModule = preset === "node-server" ? resolveNitroRuntimeDependency(root, "srvx/node") : null;
@@ -9866,16 +9985,16 @@ function toFarmNodeResponse(request, response) {
   })
 }` : ""}
   `.trim();
-  await fs.writeFile(nitroEntryPath, nitroEntryCode);
+  await fs3.writeFile(nitroEntryPath, nitroEntryCode);
   const farmNodeServerEntryPath = preset === "node-server" ? _path2.default.join(ssrOutputDir, "farm-node-server-entry.mjs") : null;
   if (farmNodeServerEntryPath && nodeAdapterModule) {
-    await fs.writeFile(
-      _path2.default.join(ssrOutputDir, FARM_NODE_ENV_MODULE_FILE),
-      FARM_NODE_ENV_MODULE_SOURCE
+    await fs3.writeFile(
+      _path2.default.join(ssrOutputDir, _chunkWW46B6HAcjs.FARM_NODE_ENV_MODULE_FILE),
+      _chunkWW46B6HAcjs.FARM_NODE_ENV_MODULE_SOURCE
     );
-    await fs.writeFile(
+    await fs3.writeFile(
       farmNodeServerEntryPath,
-      createFarmNodeServerEntry({
+      _chunkWW46B6HAcjs.createFarmNodeServerEntry.call(void 0, {
         nitroEntryFile: _path2.default.basename(nitroEntryPath),
         nodeAdapterModule,
         server: config.server,
@@ -9885,7 +10004,7 @@ function toFarmNodeResponse(request, response) {
   }
   const farmNetlifyEntryPath = preset === "netlify" ? _path2.default.join(ssrOutputDir, "farm-netlify-entry.mjs") : null;
   if (farmNetlifyEntryPath) {
-    await fs.writeFile(
+    await fs3.writeFile(
       farmNetlifyEntryPath,
       createFarmNetlifyEntry({
         nitroNetlifyEntry: resolveNitroNetlifyEntry(resolveNitroPackageEntry(root))
@@ -10014,20 +10133,20 @@ function toFarmNodeResponse(request, response) {
     snapshotSSRRebundleOptions(nitroConfig)
   );
   const requestedBuilder = _nullishCoalesce(nitroConfig.builder, () => ( process.env.NITRO_BUILDER));
-  const canReusePrebuiltSSR = isPrebuiltSSRCandidate && nitroConfig.preset === "node-server" && (requestedBuilder === void 0 || requestedBuilder === "rollup" || requestedBuilder === "rolldown") && nitroConfig.sourcemap === false && !hasCustomOxcOptions && !hasLateBuildMutationConfig && !hasUnsupportedSSRRebundleOverrides && _optionalChain([nitroConfig, 'access', _171 => _171.rollupConfig, 'optionalAccess', _172 => _172.external]) === nitroRollupExternal && !hasRollupPlugins(_optionalChain([nitroConfig, 'access', _173 => _173.rollupConfig, 'optionalAccess', _174 => _174.plugins])) && customRollupKeys.length === 0 && _path2.default.resolve(_optionalChain([nitroConfig, 'access', _175 => _175.output, 'optionalAccess', _176 => _176.serverDir]) || "") === _path2.default.resolve(expectedServerDir) && Boolean(
-    _optionalChain([nitroConfig, 'access', _177 => _177.handlers, 'optionalAccess', _178 => _178.some, 'call', _179 => _179(
-      (handler) => _path2.default.resolve(_optionalChain([handler, 'optionalAccess', _180 => _180.handler]) || "") === nitroEntryPath
+  const canReusePrebuiltSSR = isPrebuiltSSRCandidate && nitroConfig.preset === "node-server" && (requestedBuilder === void 0 || requestedBuilder === "rollup" || requestedBuilder === "rolldown") && nitroConfig.sourcemap === false && !hasCustomOxcOptions && !hasLateBuildMutationConfig && !hasUnsupportedSSRRebundleOverrides && _optionalChain([nitroConfig, 'access', _177 => _177.rollupConfig, 'optionalAccess', _178 => _178.external]) === nitroRollupExternal && !hasRollupPlugins(_optionalChain([nitroConfig, 'access', _179 => _179.rollupConfig, 'optionalAccess', _180 => _180.plugins])) && customRollupKeys.length === 0 && _path2.default.resolve(_optionalChain([nitroConfig, 'access', _181 => _181.output, 'optionalAccess', _182 => _182.serverDir]) || "") === _path2.default.resolve(expectedServerDir) && Boolean(
+    _optionalChain([nitroConfig, 'access', _183 => _183.handlers, 'optionalAccess', _184 => _184.some, 'call', _185 => _185(
+      (handler) => _path2.default.resolve(_optionalChain([handler, 'optionalAccess', _186 => _186.handler]) || "") === nitroEntryPath
     )])
   );
   const selectRolldownBuilder = canReusePrebuiltSSR && requestedBuilder === void 0 && await canUseRolldownBuilder();
   if (selectRolldownBuilder) nitroConfig.builder = "rolldown";
   const useRolldownBuilder = canReusePrebuiltSSR && (_nullishCoalesce(nitroConfig.builder, () => ( process.env.NITRO_BUILDER))) === "rolldown";
   const shouldMinify = nitroConfig.minify !== false;
-  const keepServerNames = !(_optionalChain([config, 'access', _181 => _181.docs, 'optionalAccess', _182 => _182.enabled]) && _optionalChain([config, 'access', _183 => _183.docs, 'access', _184 => _184.adapter, 'optionalAccess', _185 => _185.server]));
+  const keepServerNames = !(_optionalChain([config, 'access', _187 => _187.docs, 'optionalAccess', _188 => _188.enabled]) && _optionalChain([config, 'access', _189 => _189.docs, 'access', _190 => _190.adapter, 'optionalAccess', _191 => _191.server]));
   const useFarmServerMinifier = shouldMinify && nitroConfig.sourcemap === false && !hasCustomOxcOptions && !hasLateBuildMutationConfig;
   const serverChunkMinifier = useFarmServerMinifier ? createServerChunkMinifyPlugin({ keepNames: keepServerNames, target: "esnext" }) : null;
   if (canReusePrebuiltSSR) {
-    const configuredRollupPlugins = _optionalChain([nitroConfig, 'access', _186 => _186.rollupConfig, 'optionalAccess', _187 => _187.plugins]);
+    const configuredRollupPlugins = _optionalChain([nitroConfig, 'access', _192 => _192.rollupConfig, 'optionalAccess', _193 => _193.plugins]);
     nitroConfig.rollupConfig = {
       ...nitroConfig.rollupConfig,
       plugins: [
@@ -10038,10 +10157,10 @@ function toFarmNodeResponse(request, response) {
   }
   nitroConfig.minify = useFarmServerMinifier ? false : shouldMinify;
   const nitroInstance = await nitroBuilder.createNitro(nitroConfig);
-  if (_optionalChain([config, 'access', _188 => _188.md, 'optionalAccess', _189 => _189.enabled])) {
+  if (_optionalChain([config, 'access', _194 => _194.md, 'optionalAccess', _195 => _195.enabled])) {
     nitroInstance.hooks.hook("prerender:generate", (route) => {
-      if (!route.contents || !_optionalChain([route, 'access', _190 => _190.contentType, 'optionalAccess', _191 => _191.toLowerCase, 'call', _192 => _192(), 'access', _193 => _193.includes, 'call', _194 => _194("html")])) return;
-      const alternatePath = _chunkEUV4YR3Vcjs.getFarmMarkdownAlternatePath.call(void 0, config.md, route.route);
+      if (!route.contents || !_optionalChain([route, 'access', _196 => _196.contentType, 'optionalAccess', _197 => _197.toLowerCase, 'call', _198 => _198(), 'access', _199 => _199.includes, 'call', _200 => _200("html")])) return;
+      const alternatePath = _chunkSGBJ247Qcjs.getFarmMarkdownAlternatePath.call(void 0, config.md, route.route);
       if (!alternatePath) return;
       const routeRule = nitroInstance.options.routeRules[route.route] || {};
       const alternate = `<${alternatePath}>; rel="alternate"; type="text/markdown"`;
@@ -10061,8 +10180,8 @@ function toFarmNodeResponse(request, response) {
   }
   if (config.security.csp && config.security.csp.nonce) {
     nitroInstance.hooks.hook("prerender:generate", async (route) => {
-      if (!route.contents || !_optionalChain([route, 'access', _195 => _195.contentType, 'optionalAccess', _196 => _196.toLowerCase, 'call', _197 => _197(), 'access', _198 => _198.includes, 'call', _199 => _199("html")])) return;
-      const staticCsp = await _chunkMRMI32SNcjs.applyFarmCspHashesToHtml.call(void 0, route.contents, config.security);
+      if (!route.contents || !_optionalChain([route, 'access', _201 => _201.contentType, 'optionalAccess', _202 => _202.toLowerCase, 'call', _203 => _203(), 'access', _204 => _204.includes, 'call', _205 => _205("html")])) return;
+      const staticCsp = await _chunk2ZYGC6SScjs.applyFarmCspHashesToHtml.call(void 0, route.contents, config.security);
       if (!staticCsp) return;
       route.contents = staticCsp.html;
       const routeRule = nitroInstance.options.routeRules[route.route] || {};
@@ -10108,9 +10227,9 @@ function toFarmNodeResponse(request, response) {
           ssrBundle,
           _path2.default.join(prerenderServerDir, FARM_SSR_OUTPUT_DIR),
           null,
-          fs
+          fs3
         );
-        await registerPrebuiltSSRPackageImport(prerenderServerDir, ssrEntryFile, fs);
+        await registerPrebuiltSSRPackageImport(prerenderServerDir, ssrEntryFile, fs3);
       });
     });
   }
@@ -10132,16 +10251,16 @@ function toFarmNodeResponse(request, response) {
   }
   if (prerenderRoutes.length > 0) {
     _chunk5QIKR7RRcjs.logger.info(`\u{1F4C4} Pre-rendering ${prerenderRoutes.length} SSG page(s)`);
-    const previousPrerender = process.env[_chunkD3C5LBQYcjs.FARM_PRERENDER_ENV];
-    process.env[_chunkD3C5LBQYcjs.FARM_PRERENDER_ENV] = "1";
+    const previousPrerender = process.env[_chunkWXJLNP33cjs.FARM_PRERENDER_ENV];
+    process.env[_chunkWXJLNP33cjs.FARM_PRERENDER_ENV] = "1";
     try {
       await nitroBuilder.prerender(nitroInstance);
     } finally {
-      if (previousPrerender === void 0) delete process.env[_chunkD3C5LBQYcjs.FARM_PRERENDER_ENV];
-      else process.env[_chunkD3C5LBQYcjs.FARM_PRERENDER_ENV] = previousPrerender;
+      if (previousPrerender === void 0) delete process.env[_chunkWXJLNP33cjs.FARM_PRERENDER_ENV];
+      else process.env[_chunkWXJLNP33cjs.FARM_PRERENDER_ENV] = previousPrerender;
     }
   }
-  const sharpRuntimeStagePromise = imageRuntime === "node" ? stageSharpRuntime(config, root, distDir, fs, preset) : Promise.resolve(null);
+  const sharpRuntimeStagePromise = imageRuntime === "node" ? stageSharpRuntime(config, root, distDir, fs3, preset) : Promise.resolve(null);
   const prebuiltSSRFilesPromise = canReusePrebuiltSSR ? prepareSSRBundleFiles(
     ssrBundle,
     shouldMinify ? { keepNames: keepServerNames, target: "node18" } : null
@@ -10154,7 +10273,7 @@ function toFarmNodeResponse(request, response) {
   await nitroInstance.close();
   if (nitroBuildResult.status === "rejected") {
     if (sharpRuntimeStageResult.status === "fulfilled" && sharpRuntimeStageResult.value) {
-      await fs.rm(sharpRuntimeStageResult.value.stageDir, {
+      await fs3.rm(sharpRuntimeStageResult.value.stageDir, {
         recursive: true,
         force: true
       });
@@ -10167,20 +10286,20 @@ function toFarmNodeResponse(request, response) {
   if (prebuiltSSRFilesResult.status === "rejected") {
     throw prebuiltSSRFilesResult.reason;
   }
-  const stagedSharpRuntime = await _asyncNullishCoalesce(sharpRuntimeStageResult.value, async () => ( (imageRuntime === "node" ? await stageSharpRuntime(config, root, distDir, fs, preset) : null)));
+  const stagedSharpRuntime = await _asyncNullishCoalesce(sharpRuntimeStageResult.value, async () => ( (imageRuntime === "node" ? await stageSharpRuntime(config, root, distDir, fs3, preset) : null)));
   const runtimeCopyPromise = (async () => {
     if (stagedSharpRuntime) {
-      await installStagedSharpRuntime(stagedSharpRuntime, runtimeServerOutputDir, fs);
+      await installStagedSharpRuntime(stagedSharpRuntime, runtimeServerOutputDir, fs3);
     }
     if (useExternalMetadataImageRuntime) {
-      await copyMetadataImageRuntime(root, runtimeServerOutputDir, fs);
+      await copyMetadataImageRuntime(root, runtimeServerOutputDir, fs3);
     }
   })();
   const copyResults = await Promise.allSettled([
     prebuiltSSRFilesResult.value ? writeSSRBundleFiles(
       prebuiltSSRFilesResult.value,
       _path2.default.join(outputDir, "server", FARM_SSR_OUTPUT_DIR),
-      fs
+      fs3
     ) : Promise.resolve(),
     runtimeCopyPromise
   ]);
@@ -10189,7 +10308,7 @@ function toFarmNodeResponse(request, response) {
   );
   if (failedCopy) throw failedCopy.reason;
   if (canReusePrebuiltSSR) {
-    await registerPrebuiltSSRPackageImport(_path2.default.join(outputDir, "server"), ssrEntryFile, fs);
+    await registerPrebuiltSSRPackageImport(_path2.default.join(outputDir, "server"), ssrEntryFile, fs3);
     _chunk5QIKR7RRcjs.logger.info("\u26A1 Reused Farm's prebuilt SSR bundle for the Node output");
   }
   if (useRolldownBuilder) {
@@ -10204,7 +10323,7 @@ function toFarmNodeResponse(request, response) {
     });
   }
   if (isVercel) {
-    await postProcessVercelOutput(root, outputDir, fs, config, farmWorkflows, routeRuntimeManifest);
+    await postProcessVercelOutput(root, outputDir, fs3, config, farmWorkflows, routeRuntimeManifest);
   }
   _chunk5QIKR7RRcjs.logger.success(`\u2705 Nitro build completed with preset: ${preset}`);
 }
@@ -10232,24 +10351,24 @@ function prepareSSRBundleFiles(ssrBundle, minifyOptions) {
   );
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, prepareSSRBundleFiles, "prepareSSRBundleFiles");
-async function writeSSRBundleFiles(files, targetDir, fs) {
-  await fs.rm(targetDir, { recursive: true, force: true });
+async function writeSSRBundleFiles(files, targetDir, fs3) {
+  await fs3.rm(targetDir, { recursive: true, force: true });
   await Promise.all(
     files.map(async ({ fileName, contents }) => {
       const targetPath = _path2.default.join(targetDir, fileName);
-      await fs.mkdir(_path2.default.dirname(targetPath), { recursive: true });
-      await fs.writeFile(targetPath, contents);
+      await fs3.mkdir(_path2.default.dirname(targetPath), { recursive: true });
+      await fs3.writeFile(targetPath, contents);
     })
   );
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, writeSSRBundleFiles, "writeSSRBundleFiles");
-async function copyPrebuiltSSRBundle(ssrBundle, targetDir, minifyOptions, fs) {
-  await writeSSRBundleFiles(await prepareSSRBundleFiles(ssrBundle, minifyOptions), targetDir, fs);
+async function copyPrebuiltSSRBundle(ssrBundle, targetDir, minifyOptions, fs3) {
+  await writeSSRBundleFiles(await prepareSSRBundleFiles(ssrBundle, minifyOptions), targetDir, fs3);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, copyPrebuiltSSRBundle, "copyPrebuiltSSRBundle");
-async function registerPrebuiltSSRPackageImport(serverDir, ssrEntryFile, fs) {
+async function registerPrebuiltSSRPackageImport(serverDir, ssrEntryFile, fs3) {
   const packagePath = _path2.default.join(serverDir, "package.json");
-  const packageJSON = await fs.readFile(packagePath, "utf8").then((contents) => JSON.parse(contents)).catch((error) => {
+  const packageJSON = await fs3.readFile(packagePath, "utf8").then((contents) => JSON.parse(contents)).catch((error) => {
     if (error.code === "ENOENT") return { type: "module" };
     throw error;
   });
@@ -10259,54 +10378,54 @@ async function registerPrebuiltSSRPackageImport(serverDir, ssrEntryFile, fs) {
     ...existingImports,
     [FARM_SSR_PACKAGE_IMPORT]: `./${outputEntry}`
   };
-  await fs.mkdir(serverDir, { recursive: true });
-  await fs.writeFile(packagePath, `${JSON.stringify(packageJSON, null, 2)}
+  await fs3.mkdir(serverDir, { recursive: true });
+  await fs3.writeFile(packagePath, `${JSON.stringify(packageJSON, null, 2)}
 `);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, registerPrebuiltSSRPackageImport, "registerPrebuiltSSRPackageImport");
-async function moveVercelOutputPath(src, dest, fs) {
+async function moveVercelOutputPath(src, dest, fs3) {
   try {
-    await fs.rename(src, dest);
+    await fs3.rename(src, dest);
     return;
   } catch (error) {
-    const code = _optionalChain([error, 'optionalAccess', _200 => _200.code]);
+    const code = _optionalChain([error, 'optionalAccess', _206 => _206.code]);
     if (code !== "EPERM" && code !== "EACCES" && code !== "EXDEV" && code !== "ENOTEMPTY") {
       throw error;
     }
   }
-  await fs.cp(src, dest, { recursive: true, force: true });
-  await fs.rm(src, { recursive: true, force: true });
+  await fs3.cp(src, dest, { recursive: true, force: true });
+  await fs3.rm(src, { recursive: true, force: true });
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, moveVercelOutputPath, "moveVercelOutputPath");
-async function postProcessVercelOutput(root, outputDir, fs, config, farmWorkflows, routeRuntimeManifest) {
+async function postProcessVercelOutput(root, outputDir, fs3, config, farmWorkflows, routeRuntimeManifest) {
   const serverDir = _path2.default.join(outputDir, "server");
   const functionsDir = _path2.default.join(outputDir, "functions");
   const nitroFuncDir = _path2.default.join(functionsDir, "__nitro.func");
   const staticDir = _path2.default.join(outputDir, "static");
   const publicDir = _path2.default.join(outputDir, "public");
-  await fs.mkdir(nitroFuncDir, { recursive: true });
-  const serverContents = await fs.readdir(serverDir).catch((error) => {
+  await fs3.mkdir(nitroFuncDir, { recursive: true });
+  const serverContents = await fs3.readdir(serverDir).catch((error) => {
     if (error.code === "ENOENT") return [];
     throw error;
   });
   for (const file of serverContents) {
-    await moveVercelOutputPath(_path2.default.join(serverDir, file), _path2.default.join(nitroFuncDir, file), fs);
+    await moveVercelOutputPath(_path2.default.join(serverDir, file), _path2.default.join(nitroFuncDir, file), fs3);
   }
-  if (serverContents.length > 0) await fs.rm(serverDir, { recursive: true, force: true });
+  if (serverContents.length > 0) await fs3.rm(serverDir, { recursive: true, force: true });
   try {
-    await moveVercelOutputPath(publicDir, staticDir, fs);
+    await moveVercelOutputPath(publicDir, staticDir, fs3);
   } catch (error) {
-    if (_optionalChain([error, 'optionalAccess', _201 => _201.code]) !== "ENOENT") throw error;
+    if (_optionalChain([error, 'optionalAccess', _207 => _207.code]) !== "ENOENT") throw error;
   }
-  await copyFarmDocsContentForVercel(config, root, nitroFuncDir, fs);
-  await copyPrismaClientForVercel(root, nitroFuncDir, fs);
+  await copyFarmDocsContentForVercel(config, root, nitroFuncDir, fs3);
+  await copyPrismaClientForVercel(root, nitroFuncDir, fs3);
   const configPath = _path2.default.join(outputDir, "config.json");
-  const configContent = await fs.readFile(configPath, "utf-8");
+  const configContent = await fs3.readFile(configPath, "utf-8");
   const vercelConfig = JSON.parse(configContent);
   const runtimeRoutes = await createFarmVercelRouteRuntimeFunctions(
     outputDir,
     routeRuntimeManifest,
-    fs,
+    fs3,
     config.basePath
   );
   vercelConfig.routes = buildFarmVercelRoutes({
@@ -10321,25 +10440,25 @@ async function postProcessVercelOutput(root, outputDir, fs, config, farmWorkflow
     vercelConfigWithWorkflowCrons,
     config.cron.jobs
   );
-  await fs.writeFile(configPath, JSON.stringify(vercelConfigWithCrons, null, 2));
+  await fs3.writeFile(configPath, JSON.stringify(vercelConfigWithCrons, null, 2));
   _chunk5QIKR7RRcjs.logger.info("\u2705 Post-processed Vercel output for Build Output API v3");
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, postProcessVercelOutput, "postProcessVercelOutput");
-async function copyFarmDocsContentForVercel(config, root, nitroFuncDir, fs) {
+async function copyFarmDocsContentForVercel(config, root, nitroFuncDir, fs3) {
   const docsContentDir = resolveBuildDocsContentDir(config, root);
   if (!docsContentDir) return;
   const bundledContentDir = _path2.default.join(nitroFuncDir, "farm-docs-content");
-  const lastModifiedManifest = _chunkTE2G5IONcjs.createFarmDocsLastModifiedManifest.call(void 0, docsContentDir, {
+  const lastModifiedManifest = _chunkPGZDEPTMcjs.createFarmDocsLastModifiedManifest.call(void 0, docsContentDir, {
     fallback: "now"
   });
-  await fs.rm(bundledContentDir, { recursive: true, force: true });
-  await fs.mkdir(_path2.default.dirname(bundledContentDir), { recursive: true });
-  await fs.cp(docsContentDir, bundledContentDir, {
+  await fs3.rm(bundledContentDir, { recursive: true, force: true });
+  await fs3.mkdir(_path2.default.dirname(bundledContentDir), { recursive: true });
+  await fs3.cp(docsContentDir, bundledContentDir, {
     recursive: true,
     force: true
   });
-  await fs.writeFile(
-    _path2.default.join(bundledContentDir, _chunkTE2G5IONcjs.FARM_DOCS_LAST_MODIFIED_MANIFEST),
+  await fs3.writeFile(
+    _path2.default.join(bundledContentDir, _chunkPGZDEPTMcjs.FARM_DOCS_LAST_MODIFIED_MANIFEST),
     `${JSON.stringify(lastModifiedManifest, null, 2)}
 `
   );
@@ -10362,21 +10481,21 @@ function platformFieldAllows(field, value) {
   return allowed.length === 0 || allowed.includes(value);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, platformFieldAllows, "platformFieldAllows");
-async function stageSharpRuntime(config, root, distDir, fs, preset) {
+async function stageSharpRuntime(config, root, distDir, fs3, preset) {
   const functionPlatform = resolveServerFunctionPlatform(preset);
   const projectRequire = _module.createRequire.call(void 0, _path2.default.join(root, "package.json"));
   let sharpRequire = projectRequire;
   if (!resolvePackageJson(projectRequire, "sharp")) {
     try {
       sharpRequire = _module.createRequire.call(void 0, projectRequire.resolve("@farm.js/core"));
-    } catch (e25) {
+    } catch (e27) {
     }
   }
   const copiedPackages = /* @__PURE__ */ new Map();
   const packageCopies = /* @__PURE__ */ new Map();
   const stageRoot = _path2.default.join(root, distDir, "tmp");
-  await fs.mkdir(stageRoot, { recursive: true });
-  const stageDir = await fs.mkdtemp(_path2.default.join(stageRoot, "sharp-runtime-"));
+  await fs3.mkdir(stageRoot, { recursive: true });
+  const stageDir = await fs3.mkdtemp(_path2.default.join(stageRoot, "sharp-runtime-"));
   const targetNodeModules = _path2.default.join(stageDir, "node_modules");
   function copyPackage(packageName, parentRequire) {
     const activeCopy = packageCopies.get(packageName);
@@ -10389,19 +10508,19 @@ async function stageSharpRuntime(config, root, distDir, fs, preset) {
   async function copyPackageOnce(packageName, parentRequire) {
     const packageJsonPath = resolvePackageJson(parentRequire, packageName);
     if (!packageJsonPath) return;
-    const packageJson = JSON.parse(await fs.readFile(packageJsonPath, "utf8"));
+    const packageJson = JSON.parse(await fs3.readFile(packageJsonPath, "utf8"));
     if (functionPlatform && !packageSupportsPlatform(packageJson, functionPlatform)) return;
     const packageDir = _path2.default.dirname(packageJsonPath);
     const targetDir = _path2.default.join(targetNodeModules, ...packageName.split("/"));
     copiedPackages.set(packageName, String(packageJson.version || "*"));
-    await fs.mkdir(_path2.default.dirname(targetDir), { recursive: true });
+    await fs3.mkdir(_path2.default.dirname(targetDir), { recursive: true });
     const packageRequire = _module.createRequire.call(void 0, packageJsonPath);
     const dependencies = {
       ...packageJson.dependencies,
       ...packageJson.optionalDependencies
     };
     await settleAllOrThrow([
-      fs.cp(packageDir, targetDir, {
+      fs3.cp(packageDir, targetDir, {
         recursive: true,
         force: true,
         dereference: true,
@@ -10416,10 +10535,10 @@ async function stageSharpRuntime(config, root, distDir, fs, preset) {
   try {
     await copyPackage("sharp", sharpRequire);
     if (!copiedPackages.has("sharp")) {
-      throw new Error(`Farm image optimization requires sharp. ${_chunkQ5FYSK45cjs.SHARP_INSTALL_HINT}`);
+      throw new Error(`Farm image optimization requires sharp. ${_chunkAS2VPMEEcjs.SHARP_INSTALL_HINT}`);
     }
   } catch (error) {
-    await fs.rm(stageDir, { recursive: true, force: true });
+    await fs3.rm(stageDir, { recursive: true, force: true });
     throw error;
   }
   return {
@@ -10430,19 +10549,19 @@ async function stageSharpRuntime(config, root, distDir, fs, preset) {
   };
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, stageSharpRuntime, "stageSharpRuntime");
-async function installStagedSharpRuntime(staged, nitroFuncDir, fs) {
+async function installStagedSharpRuntime(staged, nitroFuncDir, fs3) {
   const stagedNodeModules = _path2.default.join(staged.stageDir, "node_modules");
   const targetNodeModules = _path2.default.join(nitroFuncDir, "node_modules");
   try {
-    await mergeStagedDirectory(stagedNodeModules, targetNodeModules, fs);
-    const functionPackage = await readNitroOutputPackage(nitroFuncDir, fs);
+    await mergeStagedDirectory(stagedNodeModules, targetNodeModules, fs3);
+    const functionPackage = await readNitroOutputPackage(nitroFuncDir, fs3);
     functionPackage.dependencies = {
       ...functionPackage.dependencies,
       ...staged.dependencies
     };
-    await writeNitroOutputPackage(nitroFuncDir, functionPackage, fs);
+    await writeNitroOutputPackage(nitroFuncDir, functionPackage, fs3);
   } finally {
-    await fs.rm(staged.stageDir, { recursive: true, force: true });
+    await fs3.rm(staged.stageDir, { recursive: true, force: true });
   }
   _chunk5QIKR7RRcjs.logger.info(
     `\u{1F5BC}\uFE0F  Bundled Sharp image runtime (${Object.keys(staged.dependencies).length} packages)`
@@ -10457,15 +10576,15 @@ async function settleAllOrThrow(operations) {
   if (failure) throw failure.reason;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, settleAllOrThrow, "settleAllOrThrow");
-async function mergeStagedDirectory(sourceDir, targetDir, fs) {
-  await fs.mkdir(targetDir, { recursive: true });
-  const entries = await fs.readdir(sourceDir, { withFileTypes: true });
+async function mergeStagedDirectory(sourceDir, targetDir, fs3) {
+  await fs3.mkdir(targetDir, { recursive: true });
+  const entries = await fs3.readdir(sourceDir, { withFileTypes: true });
   await settleAllOrThrow(
     entries.map(async (entry) => {
       const sourcePath = _path2.default.join(sourceDir, entry.name);
       const targetPath = _path2.default.join(targetDir, entry.name);
       try {
-        await fs.rename(sourcePath, targetPath);
+        await fs3.rename(sourcePath, targetPath);
         return;
       } catch (error) {
         const code = error.code;
@@ -10474,16 +10593,16 @@ async function mergeStagedDirectory(sourceDir, targetDir, fs) {
         }
       }
       if (entry.isDirectory()) {
-        await mergeStagedDirectory(sourcePath, targetPath, fs);
-        await fs.rm(sourcePath, { recursive: true, force: true });
+        await mergeStagedDirectory(sourcePath, targetPath, fs3);
+        await fs3.rm(sourcePath, { recursive: true, force: true });
         return;
       }
-      await fs.cp(sourcePath, targetPath, {
+      await fs3.cp(sourcePath, targetPath, {
         force: true,
         dereference: true,
         mode: _fs.constants.COPYFILE_FICLONE
       });
-      await fs.rm(sourcePath, { force: true });
+      await fs3.rm(sourcePath, { force: true });
     })
   );
 }
@@ -10503,44 +10622,44 @@ function resolveMetadataImageRuntimePackageJson(root) {
   if (packageJsonPath) return packageJsonPath;
   try {
     return resolvePackageJson(_module.createRequire.call(void 0, projectRequire.resolve("@farm.js/core")), "@vercel/og");
-  } catch (e26) {
+  } catch (e28) {
     return null;
   }
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, resolveMetadataImageRuntimePackageJson, "resolveMetadataImageRuntimePackageJson");
-async function copyMetadataImageRuntime(root, nitroFuncDir, fs) {
+async function copyMetadataImageRuntime(root, nitroFuncDir, fs3) {
   const packageJsonPath = resolveMetadataImageRuntimePackageJson(root);
   if (!packageJsonPath) return;
-  const packageJson = JSON.parse(await fs.readFile(packageJsonPath, "utf8"));
+  const packageJson = JSON.parse(await fs3.readFile(packageJsonPath, "utf8"));
   const packageDir = _path2.default.dirname(packageJsonPath);
   const targetDir = _path2.default.join(nitroFuncDir, "node_modules", "@vercel", "og");
-  await fs.mkdir(_path2.default.dirname(targetDir), { recursive: true });
-  await fs.cp(packageDir, targetDir, {
+  await fs3.mkdir(_path2.default.dirname(targetDir), { recursive: true });
+  await fs3.cp(packageDir, targetDir, {
     recursive: true,
     force: true,
     dereference: true,
     mode: _fs.constants.COPYFILE_FICLONE
   });
-  const functionPackage = await readNitroOutputPackage(nitroFuncDir, fs);
+  const functionPackage = await readNitroOutputPackage(nitroFuncDir, fs3);
   functionPackage.dependencies = {
     ...functionPackage.dependencies,
     "@vercel/og": String(packageJson.version || "0.11.1")
   };
-  await writeNitroOutputPackage(nitroFuncDir, functionPackage, fs);
+  await writeNitroOutputPackage(nitroFuncDir, functionPackage, fs3);
   _chunk5QIKR7RRcjs.logger.info("\u{1F5BC}\uFE0F  Bundled generated metadata image runtime");
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, copyMetadataImageRuntime, "copyMetadataImageRuntime");
-async function readNitroOutputPackage(outputDir, fs) {
+async function readNitroOutputPackage(outputDir, fs3) {
   const packagePath = _path2.default.join(outputDir, "package.json");
-  return fs.readFile(packagePath, "utf8").then((contents) => JSON.parse(contents)).catch((error) => {
+  return fs3.readFile(packagePath, "utf8").then((contents) => JSON.parse(contents)).catch((error) => {
     if (error.code === "ENOENT") return {};
     throw error;
   });
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, readNitroOutputPackage, "readNitroOutputPackage");
-async function writeNitroOutputPackage(outputDir, packageJson, fs) {
-  await fs.mkdir(outputDir, { recursive: true });
-  await fs.writeFile(
+async function writeNitroOutputPackage(outputDir, packageJson, fs3) {
+  await fs3.mkdir(outputDir, { recursive: true });
+  await fs3.writeFile(
     _path2.default.join(outputDir, "package.json"),
     `${JSON.stringify(packageJson, null, 2)}
 `
@@ -10554,7 +10673,7 @@ function resolvePackageJson(parentRequire, packageName) {
       const resolved = parentRequire.resolve(request);
       if (resolved.endsWith(".json")) return resolved;
       _nullishCoalesce(metadataModule, () => ( (metadataModule = resolved)));
-    } catch (e27) {
+    } catch (e29) {
     }
   }
   try {
@@ -10565,55 +10684,55 @@ function resolvePackageJson(parentRequire, packageName) {
         try {
           const manifest = JSON.parse(_fs.readFileSync.call(void 0, candidate, "utf8"));
           if (manifest.name === packageName) return candidate;
-        } catch (e28) {
+        } catch (e30) {
         }
       }
       if (_path2.default.basename(directory) === "node_modules") break;
       directory = _path2.default.dirname(directory);
     }
-  } catch (e29) {
+  } catch (e31) {
   }
   return null;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, resolvePackageJson, "resolvePackageJson");
-async function copyPrismaClientForVercel(root, nitroFuncDir, fs) {
+async function copyPrismaClientForVercel(root, nitroFuncDir, fs3) {
   const projectRequire = _module.createRequire.call(void 0, _path2.default.join(root, "package.json"));
   let prismaClientDir;
   try {
     prismaClientDir = _path2.default.dirname(projectRequire.resolve("@prisma/client/default.js"));
-  } catch (e30) {
+  } catch (e32) {
     return;
   }
   const generatedClientDir = _path2.default.join(prismaClientDir, "..", "..", ".prisma", "client");
   try {
-    await fs.access(generatedClientDir);
-  } catch (e31) {
+    await fs3.access(generatedClientDir);
+  } catch (e33) {
     return;
   }
   const targetNodeModules = _path2.default.join(nitroFuncDir, "node_modules");
   const targetPrismaScopeDir = _path2.default.join(targetNodeModules, "@prisma");
   const targetGeneratedDir = _path2.default.join(targetNodeModules, ".prisma", "client");
   const targetClientDir = _path2.default.join(targetPrismaScopeDir, "client");
-  await fs.mkdir(targetPrismaScopeDir, { recursive: true });
-  await fs.cp(prismaClientDir, targetClientDir, {
+  await fs3.mkdir(targetPrismaScopeDir, { recursive: true });
+  await fs3.cp(prismaClientDir, targetClientDir, {
     recursive: true,
     force: true
   });
-  await fs.cp(generatedClientDir, targetGeneratedDir, {
+  await fs3.cp(generatedClientDir, targetGeneratedDir, {
     recursive: true,
     force: true
   });
   const clientPackagePath = _path2.default.join(prismaClientDir, "package.json");
   const [functionPackage, clientPackageContent] = await Promise.all([
-    readNitroOutputPackage(nitroFuncDir, fs),
-    fs.readFile(clientPackagePath, "utf-8")
+    readNitroOutputPackage(nitroFuncDir, fs3),
+    fs3.readFile(clientPackagePath, "utf-8")
   ]);
   const clientPackage = JSON.parse(clientPackageContent);
   functionPackage.dependencies = {
     ...functionPackage.dependencies,
     "@prisma/client": clientPackage.version
   };
-  await writeNitroOutputPackage(nitroFuncDir, functionPackage, fs);
+  await writeNitroOutputPackage(nitroFuncDir, functionPackage, fs3);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, copyPrismaClientForVercel, "copyPrismaClientForVercel");
 
@@ -10643,7 +10762,7 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmProjectModuleSsrEnvironment, "cr
 
 // src/build/index.ts
 async function build(config, options = {}) {
-  return _chunkMT763TDWcjs.withProductionNodeEnv.call(void 0, () => buildWithProductionNodeEnv(config, options));
+  return _chunkWW46B6HAcjs.withProductionNodeEnv.call(void 0, () => buildWithProductionNodeEnv(config, options));
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, build, "build");
 function createBuildTargetBaseline(config) {
@@ -10654,7 +10773,7 @@ function createBuildTargetBaseline(config) {
     preset,
     distDir,
     outputDir,
-    outputWasDerived: outputDir === _chunk3A4KGQYIcjs.getDefaultDeployOutputDir.call(void 0, config.deploy.target, preset, distDir)
+    outputWasDerived: outputDir === _chunkHRETEZ2Zcjs.getDefaultDeployOutputDir.call(void 0, config.deploy.target, preset, distDir)
   };
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createBuildTargetBaseline, "createBuildTargetBaseline");
@@ -10664,8 +10783,8 @@ function resolveBuildTargets(config, options, baseline) {
   const distDir = config.distDir || ".farm";
   const outputWasReplaced = config.deploy.outputDir !== baseline.outputDir;
   const shouldRefreshDerivedOutput = baseline.outputWasDerived && !outputWasReplaced && (preset !== baseline.preset || distDir !== baseline.distDir);
-  const deployTarget = preset === config.deploy.preset ? config.deploy.target : _chunk3A4KGQYIcjs.getDeployTargetForPreset.call(void 0, preset);
-  const outputDir = shouldRefreshDerivedOutput ? _chunk3A4KGQYIcjs.getDefaultDeployOutputDir.call(void 0, deployTarget, preset, distDir) : config.deploy.outputDir;
+  const deployTarget = preset === config.deploy.preset ? config.deploy.target : _chunkHRETEZ2Zcjs.getDeployTargetForPreset.call(void 0, preset);
+  const outputDir = shouldRefreshDerivedOutput ? _chunkHRETEZ2Zcjs.getDefaultDeployOutputDir.call(void 0, deployTarget, preset, distDir) : config.deploy.outputDir;
   return {
     root,
     preset,
@@ -10673,7 +10792,7 @@ function resolveBuildTargets(config, options, baseline) {
     distDir,
     deployTarget,
     outputDir,
-    deployOutputDir: _chunk3A4KGQYIcjs.resolveDeployOutputPath.call(void 0, root, outputDir)
+    deployOutputDir: _chunkHRETEZ2Zcjs.resolveDeployOutputPath.call(void 0, root, outputDir)
   };
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, resolveBuildTargets, "resolveBuildTargets");
@@ -10682,7 +10801,7 @@ async function buildWithProductionNodeEnv(inputConfig, options) {
   const targetBaseline = createBuildTargetBaseline(config);
   let targets;
   const productionViteResultPromise = options.universal === false ? void 0 : Promise.allSettled([Promise.resolve(_nullishCoalesce(options.productionVite, () => ( _chunkA6WIQH5Zcjs.loadFarmProductionVite.call(void 0, ))))]);
-  const pluginManager = new (0, _chunkQ5FYSK45cjs.PluginManager)({
+  const pluginManager = new (0, _chunkAS2VPMEEcjs.PluginManager)({
     config,
     isDev: false,
     isProd: true
@@ -10711,12 +10830,12 @@ async function buildWithProductionNodeEnv(inputConfig, options) {
     };
     config = {
       ...config,
-      images: _chunkQ5FYSK45cjs.resolveFarmImageProviderForRuntime.call(void 0, config.images, {
+      images: _chunkAS2VPMEEcjs.resolveFarmImageProviderForRuntime.call(void 0, config.images, {
         root: targets.root,
         preset: targets.preset
       })
     };
-    if (_optionalChain([config, 'access', _202 => _202.docs, 'optionalAccess', _203 => _203.enabled])) await _chunkIK6LVLKCcjs.loadFarmDocsEngine.call(void 0, );
+    if (_optionalChain([config, 'access', _208 => _208.docs, 'optionalAccess', _209 => _209.enabled])) await _chunkIK6LVLKCcjs.loadFarmDocsEngine.call(void 0, );
     pluginManager.updateContext({ config });
     const { root, preset, srcDir, distDir, deployOutputDir } = targets;
     _chunk5QIKR7RRcjs.logger.info(`\u{1F69C} Building Farm.js application with preset: ${preset}...`);
@@ -10730,8 +10849,8 @@ async function buildWithProductionNodeEnv(inputConfig, options) {
     });
     _chunk5QIKR7RRcjs.logger.info("\u{1F50D} Discovering routes and API endpoints...");
     const productionViteResult = productionViteResultPromise ? (await productionViteResultPromise)[0] : void 0;
-    if (_optionalChain([productionViteResult, 'optionalAccess', _204 => _204.status]) === "rejected") throw productionViteResult.reason;
-    const productionVite = _optionalChain([productionViteResult, 'optionalAccess', _205 => _205.value]);
+    if (_optionalChain([productionViteResult, 'optionalAccess', _210 => _210.status]) === "rejected") throw productionViteResult.reason;
+    const productionVite = _optionalChain([productionViteResult, 'optionalAccess', _211 => _211.value]);
     const createViteServer = productionVite ? productionVite.createServer : (await import("vite")).createServer;
     projectModuleServer = await createProjectModuleServer(
       createViteServer,
@@ -10739,7 +10858,7 @@ async function buildWithProductionNodeEnv(inputConfig, options) {
       root,
       rendererBuild.signal
     );
-    const farmApp = _chunkQ5FYSK45cjs.createFarmApp.call(void 0, config, projectModuleServer);
+    const farmApp = _chunkAS2VPMEEcjs.createFarmApp.call(void 0, config, projectModuleServer);
     await farmApp.initialize();
     const routeManager = farmApp.getRouteManager();
     const serverRenderer = farmApp.getServerRenderer();
@@ -10749,8 +10868,8 @@ async function buildWithProductionNodeEnv(inputConfig, options) {
       layers: config.layers,
       plugins: config.plugins,
       extraRoutes: [
-        ..._optionalChain([config, 'access', _206 => _206.openapi, 'optionalAccess', _207 => _207.enabled]) && config.openapi.route ? [config.openapi.route] : [],
-        ..._chunkTE2G5IONcjs.getFarmDocsRouteTypeEntries.call(void 0, config.docs)
+        ..._optionalChain([config, 'access', _212 => _212.openapi, 'optionalAccess', _213 => _213.enabled]) && config.openapi.route ? [config.openapi.route] : [],
+        ..._chunkPGZDEPTMcjs.getFarmDocsRouteTypeEntries.call(void 0, config.docs)
       ],
       suppressLintOnLink: config.suppressLintOnLink,
       componentExtensions: config.renderer.componentExtensions,
@@ -10759,7 +10878,7 @@ async function buildWithProductionNodeEnv(inputConfig, options) {
       const message = error instanceof Error ? error.message : String(error);
       _chunk5QIKR7RRcjs.logger.warn(`Route type generation failed (farm.d.ts may be stale): ${message}`);
     });
-    const apiRouteManager = new (0, _chunkU6MPZ35Qcjs.APIRouteManager)(
+    const apiRouteManager = new (0, _chunkRWFLWR5Jcjs.APIRouteManager)(
       _chunkWBKEZXWEcjs.getFarmAppDirectories.call(void 0, config),
       projectModuleServer,
       {
@@ -10834,7 +10953,7 @@ async function buildWithProductionNodeEnv(inputConfig, options) {
     throw error;
   } finally {
     try {
-      await _optionalChain([projectModuleServer, 'optionalAccess', _208 => _208.close, 'call', _209 => _209()]);
+      await _optionalChain([projectModuleServer, 'optionalAccess', _214 => _214.close, 'call', _215 => _215()]);
     } finally {
       rendererBuild.abort();
     }
@@ -10846,7 +10965,7 @@ async function createProjectModuleServer(createViteServer, config, root, buildLi
     ssr: true,
     buildLifetime
   });
-  const viteConfig = _chunkQ5FYSK45cjs.mergeFarmViteConfig.call(void 0, 
+  const viteConfig = _chunkAS2VPMEEcjs.mergeFarmViteConfig.call(void 0, 
     {
       root,
       appType: "custom",
@@ -10858,7 +10977,7 @@ async function createProjectModuleServer(createViteServer, config, root, buildLi
       },
       plugins: [
         ...rendererVitePlugins,
-        _chunkQ5FYSK45cjs.farmFontImportsPlugin.call(void 0, {
+        _chunkAS2VPMEEcjs.farmFontImportsPlugin.call(void 0, {
           root,
           basePath: config.basePath,
           publicDir: config.publicDir
@@ -10870,7 +10989,7 @@ async function createProjectModuleServer(createViteServer, config, root, buildLi
         hmr: false
       },
       resolve: {
-        alias: _chunkQ5FYSK45cjs.createFarmSourceAlias.call(void 0, root, config.srcDir),
+        alias: _chunkAS2VPMEEcjs.createFarmSourceAlias.call(void 0, root, config.srcDir),
         dedupe: [...config.renderer.dedupe || []]
       },
       optimizeDeps: {
@@ -10903,10 +11022,10 @@ async function createProjectModuleServer(createViteServer, config, root, buildLi
       noDiscovery: true
     },
     // An app or plugin that brings its own SSR environment keeps it.
-    environments: _optionalChain([viteConfig, 'access', _210 => _210.environments, 'optionalAccess', _211 => _211.ssr, 'optionalAccess', _212 => _212.dev, 'optionalAccess', _213 => _213.createEnvironment]) ? viteConfig.environments : {
+    environments: _optionalChain([viteConfig, 'access', _216 => _216.environments, 'optionalAccess', _217 => _217.ssr, 'optionalAccess', _218 => _218.dev, 'optionalAccess', _219 => _219.createEnvironment]) ? viteConfig.environments : {
       ...viteConfig.environments,
       ssr: {
-        ..._optionalChain([viteConfig, 'access', _214 => _214.environments, 'optionalAccess', _215 => _215.ssr]),
+        ..._optionalChain([viteConfig, 'access', _220 => _220.environments, 'optionalAccess', _221 => _221.ssr]),
         ...await createFarmProjectModuleSsrEnvironment()
       }
     }
@@ -10964,7 +11083,7 @@ async function buildSSR(viteBuild, config, root, srcDir, outputDir) {
     define: {
       __FARM_API_BASE_URL__: JSON.stringify(config.api.baseURL),
       __FARM_ENV__: JSON.stringify(_chunkVEKFLAQMcjs.createBundledEnv.call(void 0, config.env)),
-      __FARM_PUBLIC_ENV__: JSON.stringify(_optionalChain([config, 'access', _216 => _216.env, 'optionalAccess', _217 => _217.public]) || {})
+      __FARM_PUBLIC_ENV__: JSON.stringify(_optionalChain([config, 'access', _222 => _222.env, 'optionalAccess', _223 => _223.public]) || {})
     },
     plugins: [
       farmI18nClientBridgePlugin(),
@@ -10999,7 +11118,7 @@ async function buildNitro(config, routeManager, apiRouteManager, serverRenderer,
   if (pluginManager) {
     nitroConfig = await pluginManager.runHookSerial("beforeNitroBuild", nitroConfig);
   }
-  const outputDir = _chunk3A4KGQYIcjs.resolveDeployOutputPath.call(void 0, root, config.deploy.outputDir);
+  const outputDir = _chunkHRETEZ2Zcjs.resolveDeployOutputPath.call(void 0, root, config.deploy.outputDir);
   const serverOutputDir = _path2.default.join(outputDir, "server");
   const publicOutputDir = _path2.default.join(outputDir, "public");
   const { mkdir, cp } = await import("fs/promises");
@@ -11013,10 +11132,10 @@ async function buildNitro(config, routeManager, apiRouteManager, serverRenderer,
     const manifestPath = _path2.default.join(publicOutputDir, "farm-client-manifest.json");
     const assetsDir = _path2.default.join(publicOutputDir, "assets");
     const manifestExists = await import("fs/promises").then(
-      (fs) => fs.access(manifestPath).then(() => true).catch(() => false)
+      (fs3) => fs3.access(manifestPath).then(() => true).catch(() => false)
     );
     const assetsExist = await import("fs/promises").then(
-      (fs) => fs.access(assetsDir).then(() => true).catch(() => false)
+      (fs3) => fs3.access(assetsDir).then(() => true).catch(() => false)
     );
     if (manifestExists && assetsExist) {
       _chunk5QIKR7RRcjs.logger.info("\u2705 Verified client assets are present");
@@ -11058,7 +11177,7 @@ async function buildNitro(config, routeManager, apiRouteManager, serverRenderer,
       const { readFile } = await import("fs/promises");
       const manifestContent = await readFile(clientManifestPath, "utf-8");
       farmRegistry.clientManifest = JSON.parse(manifestContent);
-    } catch (e32) {
+    } catch (e34) {
       farmRegistry.clientManifest = {};
     }
   } catch (error) {
@@ -11070,7 +11189,7 @@ async function buildNitro(config, routeManager, apiRouteManager, serverRenderer,
       root,
       preset,
       distDir,
-      outputDir: _chunk3A4KGQYIcjs.resolveDeployOutputPath.call(void 0, root, config.deploy.outputDir)
+      outputDir: _chunkHRETEZ2Zcjs.resolveDeployOutputPath.call(void 0, root, config.deploy.outputDir)
     });
   }
 }