@lwrjs/view-registry 0.13.0-alpha.0 → 0.13.0-alpha.10

package/build/cjs/index.cjs

@@ -57,7 +57,7 @@ var LwrViewRegistry = class {
     observer.onAssetSourceChange(({payload}) => this.onAssetSourceChange(payload));
   }
   async onModuleDefinitionChange(moduleDefinition) {
-    if (process.env.MRT_HMR === "true") {
+    if ((0, import_shared_utils.isLocalDev)()) {
       this.viewDefinitions.clear();
       return;
     }
@@ -80,7 +80,7 @@ var LwrViewRegistry = class {
     }
   }
   async onViewSourceChange(compiledView) {
-    if (process.env.MRT_HMR === "true") {
+    if ((0, import_shared_utils.isLocalDev)()) {
       this.viewDefinitions.clear();
       return;
     }
@@ -194,6 +194,8 @@ var LwrViewRegistry = class {
           return viewDefinition2.viewDefinition;
         }
       }
+      const updatableViewParams = {...viewParams};
+      (0, import_utils.generateViewNonce)(updatableViewParams);
       const pendingViewDefCacheKey = viewDefCacheKey + viewParamKey;
       const viewDefinition = await this.pendingViewDefinitions.execute(pendingViewDefCacheKey, () => (0, import_instrumentation.getTracer)().trace({
         name: import_instrumentation.ViewSpan.RenderView,
@@ -201,7 +203,8 @@ var LwrViewRegistry = class {
           view: view.id,
           ssr: view.bootstrap?.ssr === true
         }
-      }, () => this.renderView(view, viewParams, runtimeEnvironment, runtimeParams, renderOptions)));
+      }, () => this.renderView(view, updatableViewParams, runtimeEnvironment, runtimeParams, renderOptions)));
+      viewDefinition.nonce = (0, import_utils.getViewNonce)(updatableViewParams);
       if (cacheDisabled === false) {
         const route = this.globalConfig.routes.find((r) => r.id === view.id);
         const ttl = (0, import_shared_utils.shortestTtl)(viewDefinition.cache?.ttl, route?.cache?.ttl);

package/build/cjs/linkers/legacy_view_bootstrap.cjs

@@ -101,6 +101,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
     groups: new Map()
   };
   const isSSR = view.bootstrap?.ssr;
+  const nonce = (0, import_utils.getViewNonce)(viewParams);
   let bootstrapModuleRef, versionedSpecifier = bootstrapSpecifier;
   const customElementsRecords = [];
   const flattenedElements = (0, import_utils2.flattenCustomElements)(customElements, isSSR);
@@ -125,6 +126,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
       if (!def.inline && !def.src) {
         throw Error(`Invalid Shim ${shimBundle}: ${JSON.stringify(def)}`);
       }
+      (0, import_utils.addExternalScriptNonce)(def, nonce);
       requiredResources.push(def);
       const errorShimDef = await resourceRegistry.getResource({specifier: "lwr-error-shim.js", version}, runtimeEnvironment, runtimeParams);
       if (!errorShimDef) {
@@ -133,6 +135,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
       if (!errorShimDef.inline && !errorShimDef.src) {
         throw Error(`Invalid Shim lwr-error-shim.js: ${JSON.stringify(errorShimDef)}`);
       }
+      (0, import_utils.addExternalScriptNonce)(errorShimDef, nonce);
       requiredResources.push(errorShimDef);
     }
     const bootstrapModuleGraph = await (0, import_shared_utils.getModuleGraphs)(bootstrapSpecifier, {includeUris: true, includeLinkedDefinitions: true, depth}, moduleRegistry, defRegistry, runtimeEnvironment, runtimeParams, visitedCache);
@@ -146,7 +149,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
     if (!uri) {
       throw Error(`Invalid Module Resource ${versionedSpecifier}`);
     }
-    moduleResources.push((0, import_utils.getModuleResourceByUri)(uri, runtimeEnvironment, {isPreload: false, isSSR}));
+    moduleResources.push((0, import_utils.getModuleResourceByUri)(uri, runtimeEnvironment, {isPreload: false, isSSR, nonce}));
     for (const depSpecifier of bootstrapModuleGraph.graphs[0].static) {
       const uri2 = getPreloadUri(depSpecifier, bootstrapModuleGraph.uriMap);
       if (uri2) {
@@ -235,7 +238,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
   }
   const dedupedUris = [...new Set(viewPreloads.uris)];
   for (const preloadUri of dedupedUris) {
-    moduleResources.push((0, import_utils.getModuleResourceByUri)(preloadUri, runtimeEnvironment, {isPreload: true, isSSR}));
+    moduleResources.push((0, import_utils.getModuleResourceByUri)(preloadUri, runtimeEnvironment, {isPreload: true, isSSR, nonce}));
   }
   const htmlResources = await Promise.all([...configResources, ...requiredResources, ...moduleResources].map(import_utils.generateHtmlTag));
   return {

package/build/cjs/linkers/view_bootstrap.cjs

@@ -90,6 +90,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
     groups: new Map()
   };
   const isSSR = view.bootstrap?.ssr;
+  const nonce = (0, import_utils.getViewNonce)(viewParams);
   let bootstrapModuleRef, versionedSpecifier = bootstrapSpecifier;
   let importMetadata = {imports: {}};
   const customElementsRecords = [];
@@ -105,6 +106,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
       if (!def.inline && !def.src) {
         throw Error(`Invalid Shim ${shimBundle}: ${JSON.stringify(def)}`);
       }
+      (0, import_utils.addExternalScriptNonce)(def, nonce);
       requiredResources.push(def);
       const errorShimDef = await resourceRegistry.getResource({specifier: "lwr-error-shim.js", version}, runtimeEnvironment, runtimeParams);
       if (!errorShimDef) {
@@ -113,6 +115,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
       if (!errorShimDef.inline && !errorShimDef.src) {
         throw Error(`Invalid Shim lwr-error-shim.js: ${JSON.stringify(errorShimDef)}`);
       }
+      (0, import_utils.addExternalScriptNonce)(errorShimDef, nonce);
       requiredResources.push(errorShimDef);
     }
     const bootstrapModuleGraph = await (0, import_shared_utils.getModuleGraphs)(bootstrapSpecifier, {includeUris: true, includeLinkedDefinitions: true, depth}, moduleRegistry, defRegistry, runtimeEnvironment, runtimeParams, visitedCache);
@@ -126,7 +129,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
     if (!uri) {
       throw Error(`Invalid Module Resource ${versionedSpecifier}`);
     }
-    moduleResources.push((0, import_utils.getModuleResourceByUri)(uri, runtimeEnvironment, {isPreload: false, isSSR}));
+    moduleResources.push((0, import_utils.getModuleResourceByUri)(uri, runtimeEnvironment, {isPreload: false, isSSR, nonce}));
     for (const depSpecifier of bootstrapModuleGraph.graphs[0].static) {
       const uri2 = getPreloadUri(depSpecifier, bootstrapModuleGraph.uriMap);
       if (uri2) {
@@ -215,7 +218,7 @@ async function getHtmlResources(view, viewParams, resourceContext) {
   }
   const dedupedUris = [...new Set(viewPreloads.uris)];
   for (const preloadUri of dedupedUris) {
-    moduleResources.push((0, import_utils.getModuleResourceByUri)(preloadUri, runtimeEnvironment, {isPreload: true, isSSR}));
+    moduleResources.push((0, import_utils.getModuleResourceByUri)(preloadUri, runtimeEnvironment, {isPreload: true, isSSR, nonce}));
   }
   const htmlResources = await Promise.all([...configResources, ...requiredResources, ...moduleResources].map(import_utils.generateHtmlTag));
   const mapping = (0, import_shared_utils.getMappingUriPrefix)(runtimeEnvironment, runtimeParams);

package/build/cjs/utils.cjs

@@ -24,11 +24,14 @@ var __toModule = (module2) => {
 // packages/@lwrjs/view-registry/src/utils.ts
 __markAsModule(exports);
 __export(exports, {
+  addExternalScriptNonce: () => addExternalScriptNonce,
   createJsonModule: () => createJsonModule,
   generateHtmlTag: () => generateHtmlTag,
   generatePageContext: () => generatePageContext,
+  generateViewNonce: () => generateViewNonce,
   getModuleResource: () => getModuleResource,
   getModuleResourceByUri: () => getModuleResourceByUri,
+  getViewNonce: () => getViewNonce,
   isViewResponse: () => isViewResponse,
   normalizeRenderOptions: () => normalizeRenderOptions,
   normalizeRenderedResult: () => normalizeRenderedResult,
@@ -38,17 +41,19 @@ __export(exports, {
 var import_path = __toModule(require("path"));
 var import_shared_utils = __toModule(require("@lwrjs/shared-utils"));
 var import_identity = __toModule(require("@lwrjs/app-service/identity"));
+var import_crypto = __toModule(require("crypto"));
 function generateExternalStyle(src) {
   return `<link rel="stylesheet" href="${src}">`;
 }
-function generateExternalScript(type = "application/javascript", src, async, defer) {
+function generateExternalScript(type = "application/javascript", src, async, defer, nonce) {
   let scriptLoadOrder = "";
   if (defer) {
     scriptLoadOrder = " defer";
   } else if (async) {
     scriptLoadOrder = " async";
   }
-  return `<script type="${type}"${scriptLoadOrder} src="${src}"></script>`;
+  const nonceAttr = nonce ? ` nonce="${nonce}"` : "";
+  return `<script type="${type}"${scriptLoadOrder}${nonceAttr} src="${src}"></script>`;
 }
 function generateLinkPreloadTag({href, type}) {
   if (type === "module") {
@@ -57,13 +62,13 @@ function generateLinkPreloadTag({href, type}) {
     return `<link rel="preload" href="${href}" type="${type}" />`;
   }
 }
-function generateExternalTag({type, src = "", async, defer, isPreload}) {
+function generateExternalTag({type, src = "", async, defer, isPreload, nonce}) {
   if (isPreload) {
     return generateLinkPreloadTag({href: src, type});
   } else if (type === "text/css") {
     return generateExternalStyle(src);
   } else {
-    return generateExternalScript(type, src, async, defer);
+    return generateExternalScript(type, src, async, defer, nonce);
   }
 }
 async function generateInlineTag({specifier, type, content, stream, nonce}) {
@@ -223,14 +228,15 @@ async function getModuleResource(moduleId, runtimeEnvironment, moduleResourceMet
   };
 }
 function getModuleResourceByUri(uri, runtimeEnvironment, moduleResourceMeta) {
-  const {isSSR = false, isPreload = false} = moduleResourceMeta;
+  const {isSSR = false, isPreload = false, nonce} = moduleResourceMeta;
   const {format} = runtimeEnvironment;
   return {
     src: uri,
     type: format === "amd" ? "application/javascript" : "module",
     async: !isSSR && isPreload,
     defer: isSSR,
-    isPreload: format !== "amd" && isPreload
+    isPreload: format !== "amd" && isPreload,
+    nonce
   };
 }
 async function createJsonModule(specifier, moduleRegistry, environment, params) {
@@ -252,3 +258,19 @@ async function createJsonModule(specifier, moduleRegistry, environment, params)
     }
   };
 }
+function getViewNonce(viewParams) {
+  return viewParams?.page?.nonce;
+}
+function generateViewNonce(viewParams) {
+  const nonce = import_crypto.default.randomBytes(16).toString("base64");
+  if (!viewParams.page) {
+    viewParams.page = {nonce};
+  } else {
+    viewParams.page.nonce = nonce;
+  }
+}
+function addExternalScriptNonce(def, nonce) {
+  if (!def.inline) {
+    def.nonce = nonce;
+  }
+}

package/build/cjs/view-handler.cjs

@@ -148,6 +148,9 @@ var LwrViewHandler = class {
         throw (0, import_diagnostics.createSingleDiagnosticError)({description: import_diagnostics.descriptions.APPLICATION.ROUTE_HANDLER_ERROR(route.id, message)}, import_diagnostics.LwrApplicationError);
       }
     });
+    if (response?.locale) {
+      runtimeParams.locale = response.locale;
+    }
     return response;
   }
   getBoundApi(viewRequest, route, runtimeEnvironment, runtimeParams) {

package/build/es/index.js

@@ -1,6 +1,6 @@
-import { InflightTasks, createStringBuilder, extractMetadataFromHtml, getCacheKeyFromJson, getSpecifier, normalizeResourcePath, shortestTtl, } from '@lwrjs/shared-utils';
+import { InflightTasks, createStringBuilder, extractMetadataFromHtml, getCacheKeyFromJson, getSpecifier, isLocalDev, normalizeResourcePath, shortestTtl, } from '@lwrjs/shared-utils';
 import { getTracer, ViewSpan } from '@lwrjs/instrumentation';
-import { normalizeRenderOptions, normalizeRenderedResult, reduceSourceAssetReferences } from './utils.js';
+import { generateViewNonce, getViewNonce, normalizeRenderOptions, normalizeRenderedResult, reduceSourceAssetReferences, } from './utils.js';
 import { linkLwrResources } from './linkers/link-lwr-resources.js';
 import { LRUCache } from 'lru-cache';
 import { DiagnosticsError, LwrServerError, createSingleDiagnosticError, descriptions, logger, } from '@lwrjs/diagnostics';
@@ -37,7 +37,7 @@ export class LwrViewRegistry {
     }
     async onModuleDefinitionChange(moduleDefinition) {
         // TODO we will make this more robust in the future w/ full MRT HMR
-        if (process.env.MRT_HMR === 'true') {
+        if (isLocalDev()) {
             this.viewDefinitions.clear();
             return;
         }
@@ -63,7 +63,7 @@ export class LwrViewRegistry {
     }
     async onViewSourceChange(compiledView) {
         // TODO we will make this more robust in the future w/ full MRT HMR
-        if (process.env.MRT_HMR === 'true') {
+        if (isLocalDev()) {
             this.viewDefinitions.clear();
             return;
         }
@@ -152,7 +152,7 @@ export class LwrViewRegistry {
             debug: runtimeEnvironment.debug,
         });
         logger.debug(`[view-registry][hasViewDefinition] viewDefId=${viewDefId}`);
-        // viewParams is an unbounded object and can be very large (17MB/view for developer.salesforce.com). Allowing conusmers
+        // viewParams is an unbounded object and can be very large (17MB/view for developer.salesforce.com). Allowing consumers
         // to provide a simple override avoids the excess memory / performance overhead of serializing & storing the viewParams
         // on every request, while still reusing our caching logic.
         const viewParamKey = viewParamCacheKey
@@ -196,6 +196,9 @@ export class LwrViewRegistry {
                     return viewDefinition.viewDefinition;
                 }
             }
+            // If we missed cache generate a nonce in the page context (we do not want it part of the cache key)
+            const updatableViewParams = { ...viewParams };
+            generateViewNonce(updatableViewParams);
             const pendingViewDefCacheKey = viewDefCacheKey + viewParamKey;
             const viewDefinition = await this.pendingViewDefinitions.execute(pendingViewDefCacheKey, () => getTracer().trace({
                 name: ViewSpan.RenderView,
@@ -203,7 +206,9 @@ export class LwrViewRegistry {
                     view: view.id,
                     ssr: view.bootstrap?.ssr === true,
                 },
-            }, () => this.renderView(view, viewParams, runtimeEnvironment, runtimeParams, renderOptions)));
+            }, () => this.renderView(view, updatableViewParams, runtimeEnvironment, runtimeParams, renderOptions)));
+            // Once the view is generated add the nonce to the response so it can be cached and then added to the headers
+            viewDefinition.nonce = getViewNonce(updatableViewParams);
             if (cacheDisabled === false) {
                 const route = this.globalConfig.routes.find((r) => r.id === view.id);
                 const ttl = shortestTtl(viewDefinition.cache?.ttl, route?.cache?.ttl);

package/build/es/linkers/legacy_view_bootstrap.js

@@ -1,7 +1,7 @@
 import { logger } from '@lwrjs/diagnostics';
 import { kebabCaseToModuleSpecifier, getModuleGraphs, GraphDepth, getModuleUriPrefix, explodeSpecifier, isBundler, getHydrateDirective, isGroupie, isExternalSpecifier, } from '@lwrjs/shared-utils';
 import { AppResourceEnum, getAppSpecifier } from '@lwrjs/app-service/identity';
-import { generateHtmlTag, getModuleResourceByUri } from '../utils.js';
+import { addExternalScriptNonce, generateHtmlTag, getModuleResourceByUri, getViewNonce } from '../utils.js';
 import { flattenCustomElements, getViewBootstrapConfigurationResource, getViewHmrConfigurationResource, } from './utils.js';
 import { setPreloadModulesMeta, getPreloadModulesMeta } from './preload-utils.js';
 function includeIdFactory(bundleConfig) {
@@ -92,6 +92,8 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
     };
     // Determine if server side rendering view modules
     const isSSR = view.bootstrap?.ssr;
+    // Page level nonce for script tags
+    const nonce = getViewNonce(viewParams);
     // ABS module and custom element references
     let bootstrapModuleRef, versionedSpecifier = bootstrapSpecifier;
     const customElementsRecords = [];
@@ -126,6 +128,7 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
             if (!def.inline && !def.src) {
                 throw Error(`Invalid Shim ${shimBundle}: ${JSON.stringify(def)}`);
             }
+            addExternalScriptNonce(def, nonce);
             requiredResources.push(def);
             // Always inline the error shim script after the shim
             const errorShimDef = (await resourceRegistry.getResource({ specifier: 'lwr-error-shim.js', version }, runtimeEnvironment, runtimeParams));
@@ -136,6 +139,7 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
             if (!errorShimDef.inline && !errorShimDef.src) {
                 throw Error(`Invalid Shim lwr-error-shim.js: ${JSON.stringify(errorShimDef)}`);
             }
+            addExternalScriptNonce(errorShimDef, nonce);
             requiredResources.push(errorShimDef);
         }
         // ------- Application Bootstrap module
@@ -155,7 +159,7 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
         if (!uri) {
             throw Error(`Invalid Module Resource ${versionedSpecifier}`);
         }
-        moduleResources.push(getModuleResourceByUri(uri, runtimeEnvironment, { isPreload: false, isSSR }));
+        moduleResources.push(getModuleResourceByUri(uri, runtimeEnvironment, { isPreload: false, isSSR, nonce }));
         // PRELOAD the bootstrap module static dependencies as preloaded script resources
         for (const depSpecifier of bootstrapModuleGraph.graphs[0].static) {
             const uri = getPreloadUri(depSpecifier, bootstrapModuleGraph.uriMap);
@@ -265,7 +269,7 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
     const dedupedUris = [...new Set(viewPreloads.uris)];
     // PRELOAD script resources for preload module URIs after the bootstrap module
     for (const preloadUri of dedupedUris) {
-        moduleResources.push(getModuleResourceByUri(preloadUri, runtimeEnvironment, { isPreload: true, isSSR }));
+        moduleResources.push(getModuleResourceByUri(preloadUri, runtimeEnvironment, { isPreload: true, isSSR, nonce }));
     }
     // generate html partial
     const htmlResources = await Promise.all([...configResources, ...requiredResources, ...moduleResources].map(generateHtmlTag));

package/build/es/linkers/view_bootstrap.js

@@ -1,7 +1,7 @@
 import { logger } from '@lwrjs/diagnostics';
 import { kebabCaseToModuleSpecifier, toImportMetadata, getModuleGraphs, getMappingUriPrefix, GraphDepth, explodeSpecifier, isBundler, getHydrateDirective, isGroupie, } from '@lwrjs/shared-utils';
 import { AppResourceEnum, getAppSpecifier } from '@lwrjs/app-service/identity';
-import { generateHtmlTag, getModuleResourceByUri } from '../utils.js';
+import { addExternalScriptNonce, generateHtmlTag, getModuleResourceByUri, getViewNonce } from '../utils.js';
 import { flattenCustomElements, getViewBootstrapConfigurationResource, getViewHmrConfigurationResource, } from './utils.js';
 import { setPreloadModulesMeta, getPreloadModulesMeta } from './preload-utils.js';
 export async function getHtmlResources(view, viewParams, resourceContext) {
@@ -75,6 +75,8 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
     };
     // Determine if server side rendering view modules
     const isSSR = view.bootstrap?.ssr;
+    // Page level nonce for script tags
+    const nonce = getViewNonce(viewParams);
     // ABS module and custom element references
     let bootstrapModuleRef, versionedSpecifier = bootstrapSpecifier;
     let importMetadata = { imports: {} };
@@ -94,6 +96,7 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
             if (!def.inline && !def.src) {
                 throw Error(`Invalid Shim ${shimBundle}: ${JSON.stringify(def)}`);
             }
+            addExternalScriptNonce(def, nonce);
             requiredResources.push(def);
             // Always inline the error shim script after the shim
             const errorShimDef = (await resourceRegistry.getResource({ specifier: 'lwr-error-shim.js', version }, runtimeEnvironment, runtimeParams));
@@ -104,6 +107,7 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
             if (!errorShimDef.inline && !errorShimDef.src) {
                 throw Error(`Invalid Shim lwr-error-shim.js: ${JSON.stringify(errorShimDef)}`);
             }
+            addExternalScriptNonce(errorShimDef, nonce);
             requiredResources.push(errorShimDef);
         }
         // ------- Application Bootstrap module
@@ -122,7 +126,7 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
         if (!uri) {
             throw Error(`Invalid Module Resource ${versionedSpecifier}`);
         }
-        moduleResources.push(getModuleResourceByUri(uri, runtimeEnvironment, { isPreload: false, isSSR }));
+        moduleResources.push(getModuleResourceByUri(uri, runtimeEnvironment, { isPreload: false, isSSR, nonce }));
         // PRELOAD the bootstrap module static dependencies as preloaded script resources
         for (const depSpecifier of bootstrapModuleGraph.graphs[0].static) {
             const uri = getPreloadUri(depSpecifier, bootstrapModuleGraph.uriMap);
@@ -234,7 +238,7 @@ export async function getHtmlResources(view, viewParams, resourceContext) {
     // PRELOAD script resources for preload module URIs after the bootstrap module
     const dedupedUris = [...new Set(viewPreloads.uris)];
     for (const preloadUri of dedupedUris) {
-        moduleResources.push(getModuleResourceByUri(preloadUri, runtimeEnvironment, { isPreload: true, isSSR }));
+        moduleResources.push(getModuleResourceByUri(preloadUri, runtimeEnvironment, { isPreload: true, isSSR, nonce }));
     }
     // generate html partial
     const htmlResources = await Promise.all([...configResources, ...requiredResources, ...moduleResources].map(generateHtmlTag));

package/build/es/utils.d.ts

@@ -1,4 +1,4 @@
-import type { AssetReference, JsonCompatible, LinkedViewDefinition, LwrErrorRoute, LwrRoute, ModuleBundler, ModuleId, ModuleJson, ModuleRegistry, NormalizedRenderingResult, PublicModuleRegistry, RenderOptions, RenderedAssetReference, RenderingResult, ResourceDefinition, RouteHandlerViewResponse, RuntimeEnvironment, RuntimeParams, ViewModuleResourceContext, ViewPageContext, ViewRequest, ViewResponse } from '@lwrjs/types';
+import type { AssetReference, JsonCompatible, LinkedViewDefinition, LwrErrorRoute, LwrRoute, ModuleBundler, ModuleId, ModuleJson, ModuleRegistry, NormalizedRenderingResult, PublicModuleRegistry, RenderOptions, RenderedAssetReference, RenderingResult, ResourceDefinition, RouteHandlerViewResponse, RuntimeEnvironment, RuntimeParams, ViewModuleResourceContext, ViewPageContext, ViewParams, ViewRequest, ViewResponse } from '@lwrjs/types';
 export type HTMLResource = Partial<ResourceDefinition>;
 export declare function generateHtmlTag(definition: HTMLResource): Promise<string>;
 export declare function normalizeRenderedResult({ renderedView, metadata, options, cache, }: RenderingResult): NormalizedRenderingResult;
@@ -10,4 +10,16 @@ export declare function toJsonFormat(viewRequest: ViewRequest, viewDefinition: L
 export declare function getModuleResource(moduleId: Pick<ModuleId, 'specifier' | 'version'>, runtimeEnvironment: RuntimeEnvironment, moduleResourceMeta: ViewModuleResourceContext, defRegistry: ModuleRegistry | ModuleBundler, runtimeParams: RuntimeParams): Promise<ResourceDefinition>;
 export declare function getModuleResourceByUri(uri: string, runtimeEnvironment: RuntimeEnvironment, moduleResourceMeta: ViewModuleResourceContext): ResourceDefinition;
 export declare function createJsonModule(specifier: string, moduleRegistry: PublicModuleRegistry, environment: RuntimeEnvironment, params: RuntimeParams): Promise<ModuleJson>;
+/**
+ * Get the nonce set on the page context of the view params
+ */
+export declare function getViewNonce(viewParams: ViewParams): string;
+/**
+ * Generate a nonce in the page context of the view params
+ */
+export declare function generateViewNonce(viewParams: ViewParams): void;
+/**
+ * Add a nonce to a script definition in view if it is external (not inline)
+ */
+export declare function addExternalScriptNonce(def: ResourceDefinition, nonce: string): void;
 //# sourceMappingURL=utils.d.ts.map

package/build/es/utils.js

@@ -1,10 +1,11 @@
 import { basename, extname } from 'path';
 import { explodeSpecifier, getMappingUriPrefix, getSpecifier, getClientBootstrapConfigurationUri, mimeLookup, DEFAULT_TITLE, streamToString, } from '@lwrjs/shared-utils';
 import { AppResourceEnum, getAppSpecifier, ResourceIdentityTypes, } from '@lwrjs/app-service/identity';
+import crypto from 'crypto';
 function generateExternalStyle(src) {
     return `<link rel="stylesheet" href="${src}">`;
 }
-function generateExternalScript(type = 'application/javascript', src, async, defer) {
+function generateExternalScript(type = 'application/javascript', src, async, defer, nonce) {
     let scriptLoadOrder = '';
     if (defer) {
         scriptLoadOrder = ' defer';
@@ -12,7 +13,8 @@ function generateExternalScript(type = 'application/javascript', src, async, def
     else if (async) {
         scriptLoadOrder = ' async';
     }
-    return `<script type="${type}"${scriptLoadOrder} src="${src}"></script>`;
+    const nonceAttr = nonce ? ` nonce="${nonce}"` : '';
+    return `<script type="${type}"${scriptLoadOrder}${nonceAttr} src="${src}"></script>`;
 }
 function generateLinkPreloadTag({ href, type }) {
     if (type === 'module') {
@@ -22,7 +24,7 @@ function generateLinkPreloadTag({ href, type }) {
         return `<link rel="preload" href="${href}" type="${type}" />`;
     }
 }
-function generateExternalTag({ type, src = '', async, defer, isPreload }) {
+function generateExternalTag({ type, src = '', async, defer, isPreload, nonce }) {
     if (isPreload) {
         return generateLinkPreloadTag({ href: src, type: type });
     }
@@ -30,7 +32,7 @@ function generateExternalTag({ type, src = '', async, defer, isPreload }) {
         return generateExternalStyle(src);
     }
     else {
-        return generateExternalScript(type, src, async, defer);
+        return generateExternalScript(type, src, async, defer, nonce);
     }
 }
 async function generateInlineTag({ specifier, type, content, stream, nonce }) {
@@ -203,7 +205,7 @@ export async function getModuleResource(moduleId, runtimeEnvironment, moduleReso
     };
 }
 export function getModuleResourceByUri(uri, runtimeEnvironment, moduleResourceMeta) {
-    const { isSSR = false, isPreload = false } = moduleResourceMeta;
+    const { isSSR = false, isPreload = false, nonce } = moduleResourceMeta;
     const { format } = runtimeEnvironment;
     return {
         src: uri,
@@ -213,6 +215,7 @@ export function getModuleResourceByUri(uri, runtimeEnvironment, moduleResourceMe
         // only use link preload for ESM for compat reasons.
         // AMD should use regular script tags for preloading
         isPreload: format !== 'amd' && isPreload,
+        nonce,
     };
 }
 // Given a specifier and resource type, return the JSON serialized Module data
@@ -236,4 +239,30 @@ export async function createJsonModule(specifier, moduleRegistry, environment, p
         },
     };
 }
+/**
+ * Get the nonce set on the page context of the view params
+ */
+export function getViewNonce(viewParams) {
+    return viewParams?.page?.nonce;
+}
+/**
+ * Generate a nonce in the page context of the view params
+ */
+export function generateViewNonce(viewParams) {
+    const nonce = crypto.randomBytes(16).toString('base64');
+    if (!viewParams.page) {
+        viewParams.page = { nonce };
+    }
+    else {
+        viewParams.page.nonce = nonce;
+    }
+}
+/**
+ * Add a nonce to a script definition in view if it is external (not inline)
+ */
+export function addExternalScriptNonce(def, nonce) {
+    if (!def.inline) {
+        def.nonce = nonce;
+    }
+}
 //# sourceMappingURL=utils.js.map

package/build/es/view-handler.js

@@ -165,6 +165,10 @@ export class LwrViewHandler {
                 throw createSingleDiagnosticError({ description: descriptions.APPLICATION.ROUTE_HANDLER_ERROR(route.id, message) }, LwrApplicationError);
             }
         });
+        // if the locale was returned by the route handler update the runtime time params
+        if (response?.locale) {
+            runtimeParams.locale = response.locale;
+        }
         return response;
     }
     /*

package/package.json

@@ -4,7 +4,7 @@
     "publishConfig": {
         "access": "public"
     },
-    "version": "0.13.0-alpha.0",
+    "version": "0.13.0-alpha.10",
     "homepage": "https://developer.salesforce.com/docs/platform/lwr/overview",
     "repository": {
         "type": "git",
@@ -30,17 +30,17 @@
         "build/**/*.d.ts"
     ],
     "dependencies": {
-        "@lwrjs/app-service": "0.13.0-alpha.0",
-        "@lwrjs/diagnostics": "0.13.0-alpha.0",
-        "@lwrjs/instrumentation": "0.13.0-alpha.0",
-        "@lwrjs/shared-utils": "0.13.0-alpha.0",
-        "lru-cache": "^10.2.0"
+        "@lwrjs/app-service": "0.13.0-alpha.10",
+        "@lwrjs/diagnostics": "0.13.0-alpha.10",
+        "@lwrjs/instrumentation": "0.13.0-alpha.10",
+        "@lwrjs/shared-utils": "0.13.0-alpha.10",
+        "lru-cache": "^10.2.2"
     },
     "devDependencies": {
-        "@lwrjs/types": "0.13.0-alpha.0"
+        "@lwrjs/types": "0.13.0-alpha.10"
     },
     "engines": {
         "node": ">=18.0.0"
     },
-    "gitHead": "c5fe8db55c74513dbb0937d1b4568109715a13fb"
+    "gitHead": "53e2a825868b4c9b1662419b531c80be13afd779"
 }