@farm.js/core 0.1.37 → 0.1.39

package/dist/{devtools-KVOY2TCZ.mjs → devtools-5AFIPVUJ.mjs}

@@ -1,14 +1,15 @@
 import {
   getDeployTargetForPreset
-} from "./chunk-EXG5LD6B.mjs";
+} from "./chunk-75HN5IZ3.mjs";
 import "./chunk-XZNTNMHT.mjs";
 import "./chunk-RSOJ7DRT.mjs";
 import "./chunk-JBSVKMC5.mjs";
 import "./chunk-GHFS7RUB.mjs";
 import "./chunk-BUGNQIHC.mjs";
 import "./chunk-DAATZTKJ.mjs";
-import "./chunk-4E5WBPEG.mjs";
-import "./chunk-DTSROJ5J.mjs";
+import "./chunk-WFRT7JPX.mjs";
+import "./chunk-HD5CF3OE.mjs";
+import "./chunk-U6QLDL3G.mjs";
 import "./chunk-G2KY33I6.mjs";
 import {
   resolveCronConfig
@@ -16,16 +17,16 @@ import {
 import "./chunk-4WVJLURN.mjs";
 import "./chunk-4OOBRCJX.mjs";
 import "./chunk-FA2W42OV.mjs";
-import "./chunk-WWIKMBRN.mjs";
+import "./chunk-VNGH5MLF.mjs";
 import "./chunk-MVL2RAJW.mjs";
 import "./chunk-SFGWNC43.mjs";
 import "./chunk-Q2KB32T4.mjs";
 import "./chunk-2UC36WAC.mjs";
 import "./chunk-ONUEYC6N.mjs";
 import "./chunk-AELACLOB.mjs";
-import "./chunk-Z5BEWYVO.mjs";
+import "./chunk-ATSDUUFK.mjs";
 import "./chunk-44SYJEG3.mjs";
-import "./chunk-HZFM2LWQ.mjs";
+import "./chunk-P3PLW4FR.mjs";
 import "./chunk-ZLAT2CWY.mjs";
 import {
   mergeFarmRouteRuntimeConfigs,
@@ -51,6 +52,7 @@ import "./chunk-SAXPH6G5.mjs";
 import "./chunk-Z3HATSKO.mjs";
 import "./chunk-CBBLJMR5.mjs";
 import "./chunk-CQ6OSQ3K.mjs";
+import "./chunk-QRKIMN7T.mjs";
 import "./chunk-L3KT7IXV.mjs";
 import "./chunk-4RB44K6Z.mjs";
 import "./chunk-55YI3RRB.mjs";

package/dist/{devtools-JXFQNWSH.cjs → devtools-LW4QQ5J3.cjs}

@@ -1,14 +1,15 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunk3A4KGQYIcjs = require('./chunk-3A4KGQYI.cjs');
+var _chunkHRETEZ2Zcjs = require('./chunk-HRETEZ2Z.cjs');
 require('./chunk-KR6CKSXT.cjs');
 require('./chunk-6MVFL3R5.cjs');
 require('./chunk-YJRZR7VU.cjs');
 require('./chunk-Q5B3KJBP.cjs');
 require('./chunk-WBKEZXWE.cjs');
 require('./chunk-PSV6XKPO.cjs');
-require('./chunk-MRMI32SN.cjs');
-require('./chunk-4WQ6PGSJ.cjs');
+require('./chunk-QTXBII4Z.cjs');
+require('./chunk-WEW2JVA4.cjs');
+require('./chunk-2ZYGC6SS.cjs');
 require('./chunk-YFPGHF5F.cjs');
 
 
@@ -16,16 +17,16 @@ var _chunk6EXBPJ24cjs = require('./chunk-6EXBPJ24.cjs');
 require('./chunk-T5OJPTVN.cjs');
 require('./chunk-VEKFLAQM.cjs');
 require('./chunk-OHY2ZWUG.cjs');
-require('./chunk-EUV4YR3V.cjs');
+require('./chunk-SGBJ247Q.cjs');
 require('./chunk-J63ZH5OQ.cjs');
 require('./chunk-UYIHRDE4.cjs');
 require('./chunk-SDOTRX3V.cjs');
 require('./chunk-JDNHKPTD.cjs');
 require('./chunk-CMGMGHUZ.cjs');
 require('./chunk-OI6CMLWX.cjs');
-require('./chunk-UJZLSXUB.cjs');
+require('./chunk-BWIQR4DH.cjs');
 require('./chunk-G643DQCH.cjs');
-require('./chunk-4GWRFP22.cjs');
+require('./chunk-UPJLHLJU.cjs');
 require('./chunk-75RZHGLS.cjs');
 
 
@@ -51,6 +52,7 @@ require('./chunk-DVM4FKZL.cjs');
 require('./chunk-FJ3M4CUX.cjs');
 require('./chunk-OX6O6WVA.cjs');
 require('./chunk-US2QVW3E.cjs');
+require('./chunk-ULASELLA.cjs');
 require('./chunk-BIDYX3SL.cjs');
 require('./chunk-I57LW5VZ.cjs');
 require('./chunk-NO3WWW3N.cjs');
@@ -355,7 +357,7 @@ async function createFarmDevtoolsSnapshot(input) {
   }));
   const deploymentPreset = String(_optionalChain([config, 'access', _13 => _13.deploy, 'optionalAccess', _14 => _14.preset]) || config.preset || "node-server");
   const deploymentTarget = String(
-    _optionalChain([config, 'access', _15 => _15.deploy, 'optionalAccess', _16 => _16.target]) || _chunk3A4KGQYIcjs.getDeployTargetForPreset.call(void 0, deploymentPreset) || "node"
+    _optionalChain([config, 'access', _15 => _15.deploy, 'optionalAccess', _16 => _16.target]) || _chunkHRETEZ2Zcjs.getDeployTargetForPreset.call(void 0, deploymentPreset) || "node"
   );
   const env = input.env || process.env;
   if (pageRoutes.length === 0) {

package/dist/docs.cjs

@@ -4,7 +4,7 @@
 
 
 
-var _chunk7DWNJI73cjs = require('./chunk-7DWNJI73.cjs');
+var _chunkCIOT4HGTcjs = require('./chunk-CIOT4HGT.cjs');
 
 
 
@@ -13,36 +13,37 @@ var _chunk7DWNJI73cjs = require('./chunk-7DWNJI73.cjs');
 
 
 
-var _chunkTE2G5IONcjs = require('./chunk-TE2G5ION.cjs');
+var _chunkPGZDEPTMcjs = require('./chunk-PGZDEPTM.cjs');
 require('./chunk-MWWVKDW3.cjs');
 require('./chunk-KGZIORNL.cjs');
 require('./chunk-IK6LVLKC.cjs');
-require('./chunk-3A4KGQYI.cjs');
+require('./chunk-HRETEZ2Z.cjs');
 require('./chunk-KR6CKSXT.cjs');
-require('./chunk-HITLGIAO.cjs');
+require('./chunk-CY2ZQ5C6.cjs');
 require('./chunk-HREOKQWT.cjs');
 require('./chunk-6MVFL3R5.cjs');
 require('./chunk-YJRZR7VU.cjs');
 require('./chunk-Q5B3KJBP.cjs');
 require('./chunk-WBKEZXWE.cjs');
 require('./chunk-PSV6XKPO.cjs');
-require('./chunk-MRMI32SN.cjs');
-require('./chunk-4WQ6PGSJ.cjs');
+require('./chunk-QTXBII4Z.cjs');
+require('./chunk-WEW2JVA4.cjs');
+require('./chunk-2ZYGC6SS.cjs');
 require('./chunk-YFPGHF5F.cjs');
 require('./chunk-6EXBPJ24.cjs');
 require('./chunk-T5OJPTVN.cjs');
 require('./chunk-VEKFLAQM.cjs');
 require('./chunk-OHY2ZWUG.cjs');
-require('./chunk-EUV4YR3V.cjs');
+require('./chunk-SGBJ247Q.cjs');
 require('./chunk-J63ZH5OQ.cjs');
 require('./chunk-UYIHRDE4.cjs');
 require('./chunk-SDOTRX3V.cjs');
 require('./chunk-JDNHKPTD.cjs');
 require('./chunk-CMGMGHUZ.cjs');
 require('./chunk-OI6CMLWX.cjs');
-require('./chunk-UJZLSXUB.cjs');
+require('./chunk-BWIQR4DH.cjs');
 require('./chunk-G643DQCH.cjs');
-require('./chunk-4GWRFP22.cjs');
+require('./chunk-UPJLHLJU.cjs');
 require('./chunk-LYLEZIG3.cjs');
 require('./chunk-75RZHGLS.cjs');
 require('./chunk-SOR334EB.cjs');
@@ -65,6 +66,7 @@ require('./chunk-DVM4FKZL.cjs');
 require('./chunk-FJ3M4CUX.cjs');
 require('./chunk-OX6O6WVA.cjs');
 require('./chunk-US2QVW3E.cjs');
+require('./chunk-ULASELLA.cjs');
 require('./chunk-BIDYX3SL.cjs');
 require('./chunk-I57LW5VZ.cjs');
 require('./chunk-NO3WWW3N.cjs');
@@ -82,4 +84,4 @@ require('./chunk-S3JO3N4H.cjs');
 
 
 
-exports.createDocsAPI = _chunk7DWNJI73cjs.createDocsAPI; exports.createFarmDocsAPIHandler = _chunk7DWNJI73cjs.createFarmDocsAPIHandler; exports.createFarmDocsAdapterHandler = _chunk7DWNJI73cjs.createFarmDocsAdapterHandler; exports.createFarmDocsHandler = _chunkTE2G5IONcjs.createFarmDocsHandler; exports.discoverFarmDocsPages = _chunkTE2G5IONcjs.discoverFarmDocsPages; exports.getFarmDocsDocumentNavigationMatchers = _chunkTE2G5IONcjs.getFarmDocsDocumentNavigationMatchers; exports.getFarmDocsRouteTypeEntries = _chunkTE2G5IONcjs.getFarmDocsRouteTypeEntries; exports.hasFarmDocsRuntimeAdapter = _chunk7DWNJI73cjs.hasFarmDocsRuntimeAdapter; exports.isFarmDocsAPIRequest = _chunk7DWNJI73cjs.isFarmDocsAPIRequest; exports.isFarmDocsRequest = _chunkTE2G5IONcjs.isFarmDocsRequest; exports.loadFarmDocsPage = _chunkTE2G5IONcjs.loadFarmDocsPage; exports.resolveFarmDocsContentDir = _chunkTE2G5IONcjs.resolveFarmDocsContentDir;
+exports.createDocsAPI = _chunkCIOT4HGTcjs.createDocsAPI; exports.createFarmDocsAPIHandler = _chunkCIOT4HGTcjs.createFarmDocsAPIHandler; exports.createFarmDocsAdapterHandler = _chunkCIOT4HGTcjs.createFarmDocsAdapterHandler; exports.createFarmDocsHandler = _chunkPGZDEPTMcjs.createFarmDocsHandler; exports.discoverFarmDocsPages = _chunkPGZDEPTMcjs.discoverFarmDocsPages; exports.getFarmDocsDocumentNavigationMatchers = _chunkPGZDEPTMcjs.getFarmDocsDocumentNavigationMatchers; exports.getFarmDocsRouteTypeEntries = _chunkPGZDEPTMcjs.getFarmDocsRouteTypeEntries; exports.hasFarmDocsRuntimeAdapter = _chunkCIOT4HGTcjs.hasFarmDocsRuntimeAdapter; exports.isFarmDocsAPIRequest = _chunkCIOT4HGTcjs.isFarmDocsAPIRequest; exports.isFarmDocsRequest = _chunkPGZDEPTMcjs.isFarmDocsRequest; exports.loadFarmDocsPage = _chunkPGZDEPTMcjs.loadFarmDocsPage; exports.resolveFarmDocsContentDir = _chunkPGZDEPTMcjs.resolveFarmDocsContentDir;

package/dist/docs.d.mts

@@ -1,6 +1,6 @@
 import { FarmLayoutFonts } from './font.mjs';
-import { aN as FarmDocsResolvedConfig, aE as FarmMCPServerRegistration, cH as FarmDocsUserConfig } from './client-plugins-CV4eJ9De.mjs';
-export { fc as FarmDocsConfigInput, fd as FarmDocsNavigationConfig, fg as FarmDocsSidebarItem, fe as FarmDocsSocialImageConfig, ff as FarmDocsSocialImageFonts } from './client-plugins-CV4eJ9De.mjs';
+import { aN as FarmDocsResolvedConfig, aE as FarmMCPServerRegistration, cH as FarmDocsUserConfig } from './client-plugins-CsCuCLBz.mjs';
+export { fd as FarmDocsConfigInput, fe as FarmDocsNavigationConfig, fh as FarmDocsSidebarItem, ff as FarmDocsSocialImageConfig, fg as FarmDocsSocialImageFonts } from './client-plugins-CsCuCLBz.mjs';
 import { DocsConfig } from '@farming-labs/docs';
 import './lifecycle-DK06VuKP.mjs';
 import './integration-api-0y4FXJpC.mjs';
@@ -51,6 +51,13 @@ interface FarmDocsHandlerOptions {
     fontStylesheetHref?: string;
     /** Application-owned global stylesheet, including the selected docs theme CSS import. */
     globalStylesheetHref?: string;
+    /**
+     * @internal Whether a path-specific guard (non-root middleware.ts, a config or
+     * integration middleware matcher) covers a docs URL such as `/docs/secret`. Such pages
+     * stay out of llms.txt, llms-full.txt, and the sitemaps, and their `.md` URL answers
+     * only when the guard covers it too.
+     */
+    isPathGuarded?: (pathname: string) => boolean;
 }
 interface FarmDocsPage {
     slug: string;
@@ -86,6 +93,8 @@ interface FarmDocsAdapterHandlerOptions {
      * route, name, and version; older adapters ignore it and older hosts do not pass it.
      */
     registerMCPServer?: (server: FarmMCPServerRegistration) => () => void;
+    /** The app's path guards; a guarded docs page refuses the adapter. */
+    isPathGuarded?: (pathname: string) => boolean;
 }
 declare function hasFarmDocsRuntimeAdapter(docs: FarmDocsResolvedConfig | undefined): docs is FarmDocsResolvedConfig & {
     adapter: NonNullable<FarmDocsResolvedConfig["adapter"]>;
@@ -114,6 +123,13 @@ interface FarmDocsAPIOptions {
      * it on the development server only; production handlers answer 404.
      */
     diagnostics?: boolean;
+    /**
+     * @internal Whether a path-specific guard (non-root middleware.ts, a config or
+     * integration middleware matcher) covers a docs URL such as `/docs/secret`. The API
+     * answers anyone, so such a page is left out of search, llms, the sitemaps, and the
+     * agent spec, and reading its Markdown here is a 404. Farm's server sets this.
+     */
+    isPathGuarded?: (pathname: string) => boolean;
 }
 interface FarmDocsCloudRouteOptions {
     locale?: string;
@@ -134,6 +150,8 @@ type FarmDocsRuntimeConfig = {
     root?: string;
     srcDir?: string;
     docs?: FarmDocsResolvedConfig;
+    /** Docs URLs a path-specific guard covers, decided when the app was built. */
+    guardedPaths?: readonly string[];
 };
 declare global {
     var __FARM_DOCS_RUNTIME_CONFIG__: FarmDocsRuntimeConfig | undefined;

package/dist/docs.d.ts

@@ -1,6 +1,6 @@
 import { FarmLayoutFonts } from './font.js';
-import { aN as FarmDocsResolvedConfig, aE as FarmMCPServerRegistration, cH as FarmDocsUserConfig } from './client-plugins-C8DjftDF.js';
-export { fc as FarmDocsConfigInput, fd as FarmDocsNavigationConfig, fg as FarmDocsSidebarItem, fe as FarmDocsSocialImageConfig, ff as FarmDocsSocialImageFonts } from './client-plugins-C8DjftDF.js';
+import { aN as FarmDocsResolvedConfig, aE as FarmMCPServerRegistration, cH as FarmDocsUserConfig } from './client-plugins-D0ke-Hc8.js';
+export { fd as FarmDocsConfigInput, fe as FarmDocsNavigationConfig, fh as FarmDocsSidebarItem, ff as FarmDocsSocialImageConfig, fg as FarmDocsSocialImageFonts } from './client-plugins-D0ke-Hc8.js';
 import { DocsConfig } from '@farming-labs/docs';
 import './lifecycle-DK06VuKP.js';
 import './integration-api-BPJo5oXb.js';
@@ -51,6 +51,13 @@ interface FarmDocsHandlerOptions {
     fontStylesheetHref?: string;
     /** Application-owned global stylesheet, including the selected docs theme CSS import. */
     globalStylesheetHref?: string;
+    /**
+     * @internal Whether a path-specific guard (non-root middleware.ts, a config or
+     * integration middleware matcher) covers a docs URL such as `/docs/secret`. Such pages
+     * stay out of llms.txt, llms-full.txt, and the sitemaps, and their `.md` URL answers
+     * only when the guard covers it too.
+     */
+    isPathGuarded?: (pathname: string) => boolean;
 }
 interface FarmDocsPage {
     slug: string;
@@ -86,6 +93,8 @@ interface FarmDocsAdapterHandlerOptions {
      * route, name, and version; older adapters ignore it and older hosts do not pass it.
      */
     registerMCPServer?: (server: FarmMCPServerRegistration) => () => void;
+    /** The app's path guards; a guarded docs page refuses the adapter. */
+    isPathGuarded?: (pathname: string) => boolean;
 }
 declare function hasFarmDocsRuntimeAdapter(docs: FarmDocsResolvedConfig | undefined): docs is FarmDocsResolvedConfig & {
     adapter: NonNullable<FarmDocsResolvedConfig["adapter"]>;
@@ -114,6 +123,13 @@ interface FarmDocsAPIOptions {
      * it on the development server only; production handlers answer 404.
      */
     diagnostics?: boolean;
+    /**
+     * @internal Whether a path-specific guard (non-root middleware.ts, a config or
+     * integration middleware matcher) covers a docs URL such as `/docs/secret`. The API
+     * answers anyone, so such a page is left out of search, llms, the sitemaps, and the
+     * agent spec, and reading its Markdown here is a 404. Farm's server sets this.
+     */
+    isPathGuarded?: (pathname: string) => boolean;
 }
 interface FarmDocsCloudRouteOptions {
     locale?: string;
@@ -134,6 +150,8 @@ type FarmDocsRuntimeConfig = {
     root?: string;
     srcDir?: string;
     docs?: FarmDocsResolvedConfig;
+    /** Docs URLs a path-specific guard covers, decided when the app was built. */
+    guardedPaths?: readonly string[];
 };
 declare global {
     var __FARM_DOCS_RUNTIME_CONFIG__: FarmDocsRuntimeConfig | undefined;

package/dist/docs.mjs

@@ -4,7 +4,7 @@ import {
   createFarmDocsAdapterHandler,
   hasFarmDocsRuntimeAdapter,
   isFarmDocsAPIRequest
-} from "./chunk-XOPOIFTJ.mjs";
+} from "./chunk-YKZRDB5Z.mjs";
 import {
   createFarmDocsHandler,
   discoverFarmDocsPages,
@@ -13,36 +13,37 @@ import {
   isFarmDocsRequest,
   loadFarmDocsPage,
   resolveFarmDocsContentDir
-} from "./chunk-O6WAEAX3.mjs";
+} from "./chunk-5BWWFHR2.mjs";
 import "./chunk-UP4CW6WP.mjs";
 import "./chunk-TFQG7TBC.mjs";
 import "./chunk-2VQKKQ6D.mjs";
-import "./chunk-EXG5LD6B.mjs";
+import "./chunk-75HN5IZ3.mjs";
 import "./chunk-XZNTNMHT.mjs";
-import "./chunk-ENLZ4R3Y.mjs";
+import "./chunk-J7K2NZD6.mjs";
 import "./chunk-TVGP4BBZ.mjs";
 import "./chunk-RSOJ7DRT.mjs";
 import "./chunk-JBSVKMC5.mjs";
 import "./chunk-GHFS7RUB.mjs";
 import "./chunk-BUGNQIHC.mjs";
 import "./chunk-DAATZTKJ.mjs";
-import "./chunk-4E5WBPEG.mjs";
-import "./chunk-DTSROJ5J.mjs";
+import "./chunk-WFRT7JPX.mjs";
+import "./chunk-HD5CF3OE.mjs";
+import "./chunk-U6QLDL3G.mjs";
 import "./chunk-G2KY33I6.mjs";
 import "./chunk-YHOCRI4H.mjs";
 import "./chunk-4WVJLURN.mjs";
 import "./chunk-4OOBRCJX.mjs";
 import "./chunk-FA2W42OV.mjs";
-import "./chunk-WWIKMBRN.mjs";
+import "./chunk-VNGH5MLF.mjs";
 import "./chunk-MVL2RAJW.mjs";
 import "./chunk-SFGWNC43.mjs";
 import "./chunk-Q2KB32T4.mjs";
 import "./chunk-2UC36WAC.mjs";
 import "./chunk-ONUEYC6N.mjs";
 import "./chunk-AELACLOB.mjs";
-import "./chunk-Z5BEWYVO.mjs";
+import "./chunk-ATSDUUFK.mjs";
 import "./chunk-44SYJEG3.mjs";
-import "./chunk-HZFM2LWQ.mjs";
+import "./chunk-P3PLW4FR.mjs";
 import "./chunk-YOZYCI6Z.mjs";
 import "./chunk-ZLAT2CWY.mjs";
 import "./chunk-2J7W2WND.mjs";
@@ -65,6 +66,7 @@ import "./chunk-SAXPH6G5.mjs";
 import "./chunk-Z3HATSKO.mjs";
 import "./chunk-CBBLJMR5.mjs";
 import "./chunk-CQ6OSQ3K.mjs";
+import "./chunk-QRKIMN7T.mjs";
 import "./chunk-L3KT7IXV.mjs";
 import "./chunk-4RB44K6Z.mjs";
 import "./chunk-55YI3RRB.mjs";

package/dist/headers.cjs

@@ -1,12 +1,14 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkVR4GD5I3cjs = require('./chunk-VR4GD5I3.cjs');
+
+var _chunkEIPC3FDAcjs = require('./chunk-EIPC3FDA.cjs');
 require('./chunk-AI7QMY7O.cjs');
-require('./chunk-NICDYKBS.cjs');
-require('./chunk-OW67PDDS.cjs');
+require('./chunk-6XWDE2P2.cjs');
+require('./chunk-ULASELLA.cjs');
 require('./chunk-S3JO3N4H.cjs');
 
 
 
-exports.cookies = _chunkVR4GD5I3cjs.cookies; exports.headers = _chunkVR4GD5I3cjs.headers;
+
+exports.cookies = _chunkEIPC3FDAcjs.cookies; exports.getCspNonce = _chunkEIPC3FDAcjs.getCspNonce; exports.headers = _chunkEIPC3FDAcjs.headers;

package/dist/headers.d.mts

@@ -18,5 +18,15 @@ interface ReadonlyRequestCookies extends Iterable<RequestCookie> {
 }
 declare function headers(): ReadonlyHeaders;
 declare function cookies(): ReadonlyRequestCookies;
+/**
+ * The CSP nonce of the response being rendered, or `undefined` when
+ * `security.csp.nonce` is off or nothing is being rendered.
+ *
+ * In nonce mode Farm keeps the nonce only on scripts that carry it: its own
+ * bootstraps and the renderer's streaming scripts. Pass it to an inline
+ * script the app writes itself, `<script nonce={getCspNonce()}>`, to let that
+ * script run. Every other script loses its nonce attribute.
+ */
+declare function getCspNonce(): string | undefined;
 
-export { type ReadonlyHeaders, type ReadonlyRequestCookies, type RequestCookie, cookies, headers };
+export { type ReadonlyHeaders, type ReadonlyRequestCookies, type RequestCookie, cookies, getCspNonce, headers };

package/dist/headers.d.ts

@@ -18,5 +18,15 @@ interface ReadonlyRequestCookies extends Iterable<RequestCookie> {
 }
 declare function headers(): ReadonlyHeaders;
 declare function cookies(): ReadonlyRequestCookies;
+/**
+ * The CSP nonce of the response being rendered, or `undefined` when
+ * `security.csp.nonce` is off or nothing is being rendered.
+ *
+ * In nonce mode Farm keeps the nonce only on scripts that carry it: its own
+ * bootstraps and the renderer's streaming scripts. Pass it to an inline
+ * script the app writes itself, `<script nonce={getCspNonce()}>`, to let that
+ * script run. Every other script loses its nonce attribute.
+ */
+declare function getCspNonce(): string | undefined;
 
-export { type ReadonlyHeaders, type ReadonlyRequestCookies, type RequestCookie, cookies, headers };
+export { type ReadonlyHeaders, type ReadonlyRequestCookies, type RequestCookie, cookies, getCspNonce, headers };

package/dist/headers.mjs

@@ -1,12 +1,14 @@
 import {
   cookies,
+  getCspNonce,
   headers
-} from "./chunk-TW4GYDBJ.mjs";
+} from "./chunk-MLY2RP5R.mjs";
 import "./chunk-JM5XPKWH.mjs";
-import "./chunk-3KGDJLJK.mjs";
-import "./chunk-S3VWVTVA.mjs";
+import "./chunk-POSPE3IO.mjs";
+import "./chunk-QRKIMN7T.mjs";
 import "./chunk-LPEX4YW6.mjs";
 export {
   cookies,
+  getCspNonce,
   headers
 };