hono 4.2.9 → 4.3.1

package/dist/cjs/jsx/dom/render.js

@@ -20,14 +20,19 @@ var render_exports = {};
 __export(render_exports, {
   build: () => build,
   buildDataStack: () => buildDataStack,
+  createPortal: () => createPortal,
+  flushSync: () => flushSync,
   render: () => render,
   update: () => update
 });
 module.exports = __toCommonJS(render_exports);
+var import_children = require("../children");
 var import_constants = require("../constants");
 var import_context = require("../context");
 var import_hooks = require("../hooks");
+var import_utils = require("../utils");
 var import_context2 = require("./context");
+const HONO_PORTAL_ELEMENT = "_hp";
 const eventAliasMap = {
   Change: "Input",
   DoubleClick: "DblClick"
@@ -36,9 +41,10 @@ const nameSpaceMap = {
   svg: "http://www.w3.org/2000/svg",
   math: "http://www.w3.org/1998/Math/MathML"
 };
+const skipProps = /* @__PURE__ */ new Set(["children"]);
 const buildDataStack = [];
 let nameSpaceContext = void 0;
-const isNodeString = (node) => Array.isArray(node);
+const isNodeString = (node) => "t" in node;
 const getEventSpec = (key) => {
   const match = key.match(/^on([A-Z][a-zA-Z]+?(?:PointerCapture)?)(Capture)?$/);
   if (match) {
@@ -50,30 +56,35 @@ const getEventSpec = (key) => {
 const applyProps = (container, attributes, oldAttributes) => {
   attributes ||= {};
   for (const [key, value] of Object.entries(attributes)) {
-    if (!oldAttributes || oldAttributes[key] !== value) {
+    if (!skipProps.has(key) && (!oldAttributes || oldAttributes[key] !== value)) {
       const eventSpec = getEventSpec(key);
       if (eventSpec) {
-        if (typeof value !== "function") {
-          throw new Error(`Event handler for "${key}" is not a function`);
-        }
         if (oldAttributes) {
           container.removeEventListener(eventSpec[0], oldAttributes[key], eventSpec[1]);
         }
-        container.addEventListener(eventSpec[0], value, eventSpec[1]);
+        if (value != null) {
+          if (typeof value !== "function") {
+            throw new Error(`Event handler for "${key}" is not a function`);
+          }
+          container.addEventListener(eventSpec[0], value, eventSpec[1]);
+        }
       } else if (key === "dangerouslySetInnerHTML" && value) {
         container.innerHTML = value.__html;
       } else if (key === "ref") {
         if (typeof value === "function") {
           value(container);
-        } else if ("current" in value) {
+        } else if (value && "current" in value) {
           value.current = container;
         }
       } else if (key === "style") {
+        const style = container.style;
         if (typeof value === "string") {
-          container.style.cssText = value;
+          style.cssText = value;
         } else {
-          container.style.cssText = "";
-          Object.assign(container.style, value);
+          style.cssText = "";
+          if (value != null) {
+            (0, import_utils.styleObjectForEach)(value, style.setProperty.bind(style));
+          }
         }
       } else {
         const nodeName = container.nodeName;
@@ -110,7 +121,7 @@ const applyProps = (container, attributes, oldAttributes) => {
   }
   if (oldAttributes) {
     for (const [key, value] of Object.entries(oldAttributes)) {
-      if (!(key in attributes)) {
+      if (!skipProps.has(key) && !(key in attributes)) {
         const eventSpec = getEventSpec(key);
         if (eventSpec) {
           container.removeEventListener(eventSpec[0], value, eventSpec[1]);
@@ -139,8 +150,8 @@ const invokeTag = (context, node) => {
   try {
     return [
       func.call(null, {
-        ...node.props,
-        children: node.children
+        ...func.defaultProps || {},
+        ...node.props
       })
     ];
   } finally {
@@ -185,21 +196,30 @@ const findInsertBefore = (node) => {
 const removeNode = (node) => {
   if (!isNodeString(node)) {
     node[import_constants.DOM_STASH]?.[1][import_hooks.STASH_EFFECT]?.forEach((data) => data[2]?.());
+    if (node.e && node.props?.ref) {
+      if (typeof node.props.ref === "function") {
+        node.props.ref(null);
+      } else {
+        node.props.ref.current = null;
+      }
+    }
     node.vC?.forEach(removeNode);
   }
-  node.e?.remove();
-  node.tag = void 0;
+  if (node.tag !== HONO_PORTAL_ELEMENT) {
+    node.e?.remove();
+  }
+  if (typeof node.tag === "function") {
+    updateMap.delete(node);
+    fallbackUpdateFnArrayMap.delete(node);
+  }
 };
 const apply = (node, container) => {
-  if (node.tag === void 0) {
-    return;
-  }
   node.c = container;
   applyNodeObject(node, container);
 };
 const applyNode = (node, container) => {
   if (isNodeString(node)) {
-    container.textContent = node[0];
+    container.textContent = node.t;
   } else {
     applyNodeObject(node, container);
   }
@@ -226,17 +246,17 @@ const applyNodeObject = (node, container) => {
     const child = next[i];
     let el;
     if (isNodeString(child)) {
-      if (child.e && child[1]) {
-        child.e.textContent = child[0];
+      if (child.e && child.d) {
+        child.e.textContent = child.t;
       }
-      child[1] = false;
-      el = child.e ||= document.createTextNode(child[0]);
+      child.d = false;
+      el = child.e ||= document.createTextNode(child.t);
     } else {
       el = child.e ||= child.n ? document.createElementNS(child.n, child.tag) : document.createElement(child.tag);
       applyProps(el, child.props, child.pP);
       applyNode(child, el);
     }
-    if (childNodes[offset] !== el && childNodes[offset - 1] !== child.e) {
+    if (childNodes[offset] !== el && childNodes[offset - 1] !== child.e && child.tag !== HONO_PORTAL_ELEMENT) {
       container.insertBefore(el, childNodes[offset] || null);
     }
   }
@@ -246,12 +266,10 @@ const applyNodeObject = (node, container) => {
     callbacks.forEach(([, , , cb]) => cb?.());
   });
 };
+const fallbackUpdateFnArrayMap = /* @__PURE__ */ new WeakMap();
 const build = (context, node, topLevelErrorHandlerNode, children) => {
-  if (node.tag === void 0) {
-    return;
-  }
   let errorHandler;
-  children ||= typeof node.tag == "function" ? invokeTag(context, node) : node.children;
+  children ||= typeof node.tag == "function" ? invokeTag(context, node) : (0, import_children.toArray)(node.props.children);
   if (children[0]?.tag === "") {
     errorHandler = children[0][import_constants.DOM_ERROR_HANDLER];
     topLevelErrorHandlerNode ||= node;
@@ -268,7 +286,7 @@ const build = (context, node, topLevelErrorHandlerNode, children) => {
           prevNode.nN = child;
         }
         prevNode = child;
-        if (typeof child.tag === "function" && import_context.globalContexts.length > 0) {
+        if (typeof child.tag === "function" && !child.tag[import_constants.DOM_INTERNAL_TAG] && import_context.globalContexts.length > 0) {
           child[import_constants.DOM_STASH][2] = import_context.globalContexts.map((c2) => [c2, c2.values.at(-1)]);
         }
         let oldChild;
@@ -282,9 +300,9 @@ const build = (context, node, topLevelErrorHandlerNode, children) => {
             if (!isNodeString(oldChild)) {
               vChildrenToRemove.push(oldChild);
             } else {
-              if (oldChild[0] !== child[0]) {
-                oldChild[0] = child[0];
-                oldChild[1] = true;
+              if (oldChild.t !== child.t) {
+                oldChild.t = child.t;
+                oldChild.d = true;
               }
               child = oldChild;
             }
@@ -293,7 +311,9 @@ const build = (context, node, topLevelErrorHandlerNode, children) => {
           } else {
             oldChild.pP = oldChild.props;
             oldChild.props = child.props;
-            oldChild.children = child.children;
+            if (typeof child.tag === "function") {
+              oldChild[import_constants.DOM_STASH][2] = child[import_constants.DOM_STASH][2] || [];
+            }
             child = oldChild;
           }
         } else if (!isNodeString(child) && nameSpaceContext) {
@@ -313,10 +333,20 @@ const build = (context, node, topLevelErrorHandlerNode, children) => {
     node.vR = vChildrenToRemove;
   } catch (e) {
     if (errorHandler) {
-      const fallback = errorHandler(
-        e,
-        () => update([0, false, context[2]], topLevelErrorHandlerNode)
-      );
+      const fallbackUpdateFn = () => update([0, false, context[2]], topLevelErrorHandlerNode);
+      const fallbackUpdateFnArray = fallbackUpdateFnArrayMap.get(topLevelErrorHandlerNode) || [];
+      fallbackUpdateFnArray.push(fallbackUpdateFn);
+      fallbackUpdateFnArrayMap.set(topLevelErrorHandlerNode, fallbackUpdateFnArray);
+      const fallback = errorHandler(e, () => {
+        const fnArray = fallbackUpdateFnArrayMap.get(topLevelErrorHandlerNode);
+        if (fnArray) {
+          const i = fnArray.indexOf(fallbackUpdateFn);
+          if (i !== -1) {
+            fnArray.splice(i, 1);
+            return fallbackUpdateFn();
+          }
+        }
+      });
       if (fallback) {
         if (context[0] === 1) {
           context[1] = true;
@@ -333,9 +363,12 @@ const buildNode = (node) => {
   if (node === void 0 || node === null || typeof node === "boolean") {
     return void 0;
   } else if (typeof node === "string" || typeof node === "number") {
-    return [node.toString(), true];
+    return { t: node.toString(), d: true };
   } else {
     if (typeof node.tag === "function") {
+      if (node[import_constants.DOM_STASH]) {
+        node = { ...node };
+      }
       ;
       node[import_constants.DOM_STASH] = [0, []];
     } else {
@@ -344,13 +377,13 @@ const buildNode = (node) => {
         ;
         node.n = ns;
         nameSpaceContext ||= (0, import_context2.createContext)("");
-        node.children = [
+        node.props.children = [
           {
             tag: nameSpaceContext.Provider,
             props: {
-              value: ns
-            },
-            children: node.children
+              value: ns,
+              children: node.props.children
+            }
           }
         ];
       }
@@ -377,6 +410,7 @@ const updateSync = (context, node) => {
   }
 };
 const updateMap = /* @__PURE__ */ new WeakMap();
+const currentUpdateSets = [];
 const update = async (context, node) => {
   const existing = updateMap.get(node);
   if (existing) {
@@ -397,26 +431,54 @@ const update = async (context, node) => {
       }
     }
   ]);
-  await Promise.resolve();
-  const latest = updateMap.get(node);
-  if (latest) {
-    updateMap.delete(node);
-    latest[1]();
+  if (currentUpdateSets.length) {
+    ;
+    currentUpdateSets.at(-1).add(node);
+  } else {
+    await Promise.resolve();
+    const latest = updateMap.get(node);
+    if (latest) {
+      updateMap.delete(node);
+      latest[1]();
+    }
   }
   return promise;
 };
 const render = (jsxNode, container) => {
-  const node = buildNode({ tag: "", children: [jsxNode] });
+  const node = buildNode({ tag: "", props: { children: jsxNode } });
   build([], node, void 0);
   const fragment = document.createDocumentFragment();
   apply(node, fragment);
   replaceContainer(node, fragment, container);
   container.replaceChildren(fragment);
 };
+const flushSync = (callback) => {
+  const set = /* @__PURE__ */ new Set();
+  currentUpdateSets.push(set);
+  callback();
+  set.forEach((node) => {
+    const latest = updateMap.get(node);
+    if (latest) {
+      updateMap.delete(node);
+      latest[1]();
+    }
+  });
+  currentUpdateSets.pop();
+};
+const createPortal = (children, container, key) => ({
+  tag: HONO_PORTAL_ELEMENT,
+  props: {
+    children
+  },
+  key,
+  e: container
+});
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   build,
   buildDataStack,
+  createPortal,
+  flushSync,
   render,
   update
 });

package/dist/cjs/jsx/dom/utils.js

@@ -0,0 +1,33 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var utils_exports = {};
+__export(utils_exports, {
+  setInternalTagFlag: () => setInternalTagFlag
+});
+module.exports = __toCommonJS(utils_exports);
+var import_constants = require("../constants");
+const setInternalTagFlag = (fn) => {
+  ;
+  fn[import_constants.DOM_INTERNAL_TAG] = true;
+  return fn;
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  setInternalTagFlag
+});

package/dist/cjs/jsx/hooks/index.js

@@ -19,6 +19,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var hooks_exports = {};
 __export(hooks_exports, {
   STASH_EFFECT: () => STASH_EFFECT,
+  createRef: () => createRef,
+  forwardRef: () => forwardRef,
   startTransition: () => startTransition,
   startViewTransition: () => startViewTransition,
   use: () => use,
@@ -27,11 +29,13 @@ __export(hooks_exports, {
   useDeferredValue: () => useDeferredValue,
   useEffect: () => useEffect,
   useId: () => useId,
+  useImperativeHandle: () => useImperativeHandle,
   useLayoutEffect: () => useLayoutEffect,
   useMemo: () => useMemo,
   useReducer: () => useReducer,
   useRef: () => useRef,
   useState: () => useState,
+  useSyncExternalStore: () => useSyncExternalStore,
   useTransition: () => useTransition,
   useViewTransition: () => useViewTransition
 });
@@ -151,7 +155,7 @@ const useState = (initialState) => {
       if (typeof newState === "function") {
         newState = newState(stateData[0]);
       }
-      if (newState !== stateData[0]) {
+      if (!Object.is(newState, stateData[0])) {
         stateData[0] = newState;
         if (pendingStack.length) {
           const pendingType = pendingStack.at(-1);
@@ -299,9 +303,43 @@ let idCounter = 0;
 const useId = () => useMemo(() => `:r${(idCounter++).toString(32)}:`, []);
 const useDebugValue = (_value, _formatter) => {
 };
+const createRef = () => {
+  return { current: null };
+};
+const forwardRef = (Component) => {
+  return (props) => {
+    const { ref, ...rest } = props;
+    return Component(rest, ref);
+  };
+};
+const useImperativeHandle = (ref, createHandle, deps) => {
+  useEffect(() => {
+    ref.current = createHandle();
+    return () => {
+      ref.current = null;
+    };
+  }, deps);
+};
+let useSyncExternalStoreGetServerSnapshotNotified = false;
+const useSyncExternalStore = (subscribe, getSnapshot, getServerSnapshot) => {
+  const [state, setState] = useState(getSnapshot());
+  useEffect(
+    () => subscribe(() => {
+      setState(getSnapshot());
+    }),
+    []
+  );
+  if (getServerSnapshot && !useSyncExternalStoreGetServerSnapshotNotified) {
+    useSyncExternalStoreGetServerSnapshotNotified = true;
+    console.info("`getServerSnapshot` is not supported yet.");
+  }
+  return state;
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   STASH_EFFECT,
+  createRef,
+  forwardRef,
   startTransition,
   startViewTransition,
   use,
@@ -310,11 +348,13 @@ const useDebugValue = (_value, _formatter) => {
   useDeferredValue,
   useEffect,
   useId,
+  useImperativeHandle,
   useLayoutEffect,
   useMemo,
   useReducer,
   useRef,
   useState,
+  useSyncExternalStore,
   useTransition,
   useViewTransition
 });

package/dist/cjs/jsx/index.js

@@ -19,13 +19,16 @@ var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "defau
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var jsx_exports = {};
 __export(jsx_exports, {
+  Children: () => import_children.Children,
   ErrorBoundary: () => import_components.ErrorBoundary,
   Fragment: () => import_base.Fragment,
   Suspense: () => import_streaming.Suspense,
   cloneElement: () => import_base.cloneElement,
   createContext: () => import_context.createContext,
   createElement: () => import_base.jsx,
+  createRef: () => import_hooks.createRef,
   default: () => jsx_default,
+  forwardRef: () => import_hooks.forwardRef,
   isValidElement: () => import_base.isValidElement,
   jsx: () => import_base.jsx,
   memo: () => import_base.memo,
@@ -38,16 +41,19 @@ __export(jsx_exports, {
   useDeferredValue: () => import_hooks.useDeferredValue,
   useEffect: () => import_hooks.useEffect,
   useId: () => import_hooks.useId,
+  useImperativeHandle: () => import_hooks.useImperativeHandle,
   useLayoutEffect: () => import_hooks.useLayoutEffect,
   useMemo: () => import_hooks.useMemo,
   useReducer: () => import_hooks.useReducer,
   useRef: () => import_hooks.useRef,
   useState: () => import_hooks.useState,
+  useSyncExternalStore: () => import_hooks.useSyncExternalStore,
   useTransition: () => import_hooks.useTransition,
   useViewTransition: () => import_hooks.useViewTransition
 });
 module.exports = __toCommonJS(jsx_exports);
 var import_base = require("./base");
+var import_children = require("./children");
 var import_components = require("./components");
 var import_context = require("./context");
 var import_hooks = require("./hooks");
@@ -77,16 +83,24 @@ var jsx_default = {
   useViewTransition: import_hooks.useViewTransition,
   useMemo: import_hooks.useMemo,
   useLayoutEffect: import_hooks.useLayoutEffect,
-  Suspense: import_streaming.Suspense
+  createRef: import_hooks.createRef,
+  forwardRef: import_hooks.forwardRef,
+  useImperativeHandle: import_hooks.useImperativeHandle,
+  useSyncExternalStore: import_hooks.useSyncExternalStore,
+  Suspense: import_streaming.Suspense,
+  Children: import_children.Children
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  Children,
   ErrorBoundary,
   Fragment,
   Suspense,
   cloneElement,
   createContext,
   createElement,
+  createRef,
+  forwardRef,
   isValidElement,
   jsx,
   memo,
@@ -99,11 +113,13 @@ var jsx_default = {
   useDeferredValue,
   useEffect,
   useId,
+  useImperativeHandle,
   useLayoutEffect,
   useMemo,
   useReducer,
   useRef,
   useState,
+  useSyncExternalStore,
   useTransition,
   useViewTransition
 });

package/dist/cjs/jsx/jsx-dev-runtime.js

@@ -30,7 +30,6 @@ function jsxDEV(tag, props, key) {
     node = (0, import_base.jsxFn)(tag, props, []);
   } else {
     const children = props.children;
-    delete props["children"];
     node = Array.isArray(children) ? (0, import_base.jsxFn)(tag, props, children) : (0, import_base.jsxFn)(tag, props, [children]);
   }
   node.key = key;

package/dist/cjs/jsx/utils.js

@@ -18,7 +18,8 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var utils_exports = {};
 __export(utils_exports, {
-  normalizeIntrinsicElementProps: () => normalizeIntrinsicElementProps
+  normalizeIntrinsicElementProps: () => normalizeIntrinsicElementProps,
+  styleObjectForEach: () => styleObjectForEach
 });
 module.exports = __toCommonJS(utils_exports);
 const normalizeIntrinsicElementProps = (props) => {
@@ -27,7 +28,16 @@ const normalizeIntrinsicElementProps = (props) => {
     delete props["className"];
   }
 };
+const styleObjectForEach = (style, fn) => {
+  for (const [k, v] of Object.entries(style)) {
+    fn(
+      k[0] === "-" ? k : k.replace(/[A-Z]/g, (m) => `-${m.toLowerCase()}`),
+      v == null ? null : typeof v === "number" ? v + "px" : v
+    );
+  }
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  normalizeIntrinsicElementProps
+  normalizeIntrinsicElementProps,
+  styleObjectForEach
 });

package/dist/cjs/middleware/bearer-auth/index.js

@@ -25,6 +25,7 @@ var import_http_exception = require("../../http-exception");
 var import_buffer = require("../../utils/buffer");
 const TOKEN_STRINGS = "[A-Za-z0-9._~+/-]+=*";
 const PREFIX = "Bearer";
+const HEADER = "Authorization";
 const bearerAuth = (options) => {
   if (!("token" in options || "verifyToken" in options)) {
     throw new Error('bearer auth middleware requires options for "token"');
@@ -37,7 +38,7 @@ const bearerAuth = (options) => {
   }
   const realm = options.realm?.replace(/"/g, '\\"');
   return async function bearerAuth2(c, next) {
-    const headerToken = c.req.header("Authorization");
+    const headerToken = c.req.header(options.headerName || HEADER);
     if (!headerToken) {
       const res = new Response("Unauthorized", {
         status: 401,

package/dist/cjs/middleware/secure-headers/index.js

@@ -18,6 +18,7 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var secure_headers_exports = {};
 __export(secure_headers_exports, {
+  NONCE: () => NONCE,
   secureHeaders: () => secureHeaders
 });
 module.exports = __toCommonJS(secure_headers_exports);
@@ -49,11 +50,29 @@ const DEFAULT_OPTIONS = {
   xPermittedCrossDomainPolicies: true,
   xXssProtection: true
 };
+const generateNonce = () => {
+  const buffer = new Uint8Array(16);
+  crypto.getRandomValues(buffer);
+  return Buffer.from(buffer).toString("base64");
+};
+const NONCE = (ctx) => {
+  const nonce = ctx.get("secureHeadersNonce") || (() => {
+    const newNonce = generateNonce();
+    ctx.set("secureHeadersNonce", newNonce);
+    return newNonce;
+  })();
+  return `'nonce-${nonce}'`;
+};
 const secureHeaders = (customOptions) => {
   const options = { ...DEFAULT_OPTIONS, ...customOptions };
   const headersToSet = getFilteredHeaders(options);
+  const callbacks = [];
   if (options.contentSecurityPolicy) {
-    headersToSet.push(["Content-Security-Policy", getCSPDirectives(options.contentSecurityPolicy)]);
+    const [callback, value] = getCSPDirectives(options.contentSecurityPolicy);
+    if (callback) {
+      callbacks.push(callback);
+    }
+    headersToSet.push(["Content-Security-Policy", value]);
   }
   if (options.reportingEndpoints) {
     headersToSet.push(["Reporting-Endpoints", getReportingEndpoints(options.reportingEndpoints)]);
@@ -62,8 +81,9 @@ const secureHeaders = (customOptions) => {
     headersToSet.push(["Report-To", getReportToOptions(options.reportTo)]);
   }
   return async function secureHeaders2(ctx, next) {
+    const headersToSetForReq = callbacks.length === 0 ? headersToSet : callbacks.reduce((acc, cb) => cb(ctx, acc), headersToSet);
     await next();
-    setHeaders(ctx, headersToSet);
+    setHeaders(ctx, headersToSetForReq);
     ctx.res.headers.delete("X-Powered-By");
   };
 };
@@ -74,13 +94,42 @@ function getFilteredHeaders(options) {
   });
 }
 function getCSPDirectives(contentSecurityPolicy) {
-  return Object.entries(contentSecurityPolicy || []).map(([directive, value]) => {
-    const kebabCaseDirective = directive.replace(
-      /[A-Z]+(?![a-z])|[A-Z]/g,
-      (match, offset) => offset ? "-" + match.toLowerCase() : match.toLowerCase()
+  const callbacks = [];
+  const resultValues = [];
+  for (const [directive, value] of Object.entries(contentSecurityPolicy)) {
+    const valueArray = Array.isArray(value) ? value : [value];
+    valueArray.forEach((value2, i) => {
+      if (typeof value2 === "function") {
+        const index = i * 2 + 2 + resultValues.length;
+        callbacks.push((ctx, values) => {
+          values[index] = value2(ctx, directive);
+        });
+      }
+    });
+    resultValues.push(
+      directive.replace(
+        /[A-Z]+(?![a-z])|[A-Z]/g,
+        (match, offset) => offset ? "-" + match.toLowerCase() : match.toLowerCase()
+      ),
+      ...valueArray.flatMap((value2) => [" ", value2]),
+      "; "
     );
-    return `${kebabCaseDirective} ${Array.isArray(value) ? value.join(" ") : value}`;
-  }).join("; ");
+  }
+  resultValues.pop();
+  return callbacks.length === 0 ? [void 0, resultValues.join("")] : [
+    (ctx, headersToSet) => headersToSet.map((values) => {
+      if (values[0] === "Content-Security-Policy") {
+        const clone = values[1].slice();
+        callbacks.forEach((cb) => {
+          cb(ctx, clone);
+        });
+        return [values[0], clone.join("")];
+      } else {
+        return values;
+      }
+    }),
+    resultValues
+  ];
 }
 function getReportingEndpoints(reportingEndpoints = []) {
   return reportingEndpoints.map((endpoint) => `${endpoint.name}="${endpoint.url}"`).join(", ");
@@ -95,5 +144,6 @@ function setHeaders(ctx, headersToSet) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  NONCE,
   secureHeaders
 });