vike 0.4.237 → 0.4.238-commit-5762291

package/dist/cjs/__internal/index.js

@@ -1,11 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.setGlobalContext_buildEntry = void 0;
+exports.setGlobalContext_prodBuildEntry = void 0;
 exports.route = route;
 exports.getPagesAndRoutes = getPagesAndRoutes;
-// Needed by Vike
+// Used by vike:build:pluginProdBuildEntry
 var globalContext_js_1 = require("../node/runtime/globalContext.js");
-Object.defineProperty(exports, "setGlobalContext_buildEntry", { enumerable: true, get: function () { return globalContext_js_1.setGlobalContext_buildEntry; } });
+Object.defineProperty(exports, "setGlobalContext_prodBuildEntry", { enumerable: true, get: function () { return globalContext_js_1.setGlobalContext_prodBuildEntry; } });
 const index_js_1 = require("../shared/route/index.js");
 const globalContext_js_2 = require("../node/runtime/globalContext.js");
 const assertSetup_js_1 = require("../utils/assertSetup.js");

package/dist/cjs/client/runtime-client-routing/globalContext.js

@@ -37,8 +37,8 @@ exports.getGlobalContextClientInternal = void 0;
 const createGetGlobalContextClient_js_1 = require("../shared/createGetGlobalContextClient.js");
 const loadPageRoutes_js_1 = require("../../shared/route/loadPageRoutes.js");
 // @ts-ignore
-const virtualFileExports = __importStar(require("virtual:vike:entry:client:client-routing"));
-const getGlobalContextClientInternal = (0, createGetGlobalContextClient_js_1.createGetGlobalContextClient)(virtualFileExports, true, addGlobalContext);
+const virtualFileExportsGlobalEntry = __importStar(require("virtual:vike:global-entry:client:client-routing"));
+const getGlobalContextClientInternal = (0, createGetGlobalContextClient_js_1.createGetGlobalContextClient)(virtualFileExportsGlobalEntry, true, addGlobalContext);
 exports.getGlobalContextClientInternal = getGlobalContextClientInternal;
 async function addGlobalContext(globalContext) {
     const { pageRoutes, onBeforeRouteHook } = await (0, loadPageRoutes_js_1.loadPageRoutes)(globalContext._pageFilesAll, globalContext._pageConfigs, globalContext._pageConfigGlobal, globalContext._allPageIds);

package/dist/cjs/client/runtime-server-routing/globalContext.js

@@ -36,6 +36,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getGlobalContextClientInternal = void 0;
 const createGetGlobalContextClient_js_1 = require("../shared/createGetGlobalContextClient.js");
 // @ts-ignore
-const virtualFileExports = __importStar(require("virtual:vike:entry:client:server-routing"));
-const getGlobalContextClientInternal = (0, createGetGlobalContextClient_js_1.createGetGlobalContextClient)(virtualFileExports, false);
+const virtualFileExportsGlobalEntry = __importStar(require("virtual:vike:global-entry:client:server-routing"));
+const getGlobalContextClientInternal = (0, createGetGlobalContextClient_js_1.createGetGlobalContextClient)(virtualFileExportsGlobalEntry, false);
 exports.getGlobalContextClientInternal = getGlobalContextClientInternal;

package/dist/cjs/client/runtime-server-routing/utils.js

@@ -30,5 +30,5 @@ __exportStar(require("../../utils/parseUrl.js"), exports);
 __exportStar(require("../../utils/slice.js"), exports);
 __exportStar(require("../../utils/unique.js"), exports); // Only used by Server Routing (not needed for Client Routing)
 __exportStar(require("../../utils/getPropAccessNotation.js"), exports);
-__exportStar(require("../../utils/augmentType.js"), exports);
+__exportStar(require("../../utils/updateType.js"), exports);
 __exportStar(require("../../utils/changeEnumerable.js"), exports);

package/dist/cjs/client/shared/createGetGlobalContextClient.js

@@ -13,23 +13,23 @@ const globalObject = (0, utils_js_1.getGlobalObject)('createGetGlobalContextClie
         globalContextInitialPromiseResolve,
     };
 })());
-function createGetGlobalContextClient(virtualFileExports, isClientRouting, addGlobalContext) {
+function createGetGlobalContextClient(virtualFileExportsGlobalEntry, isClientRouting, addGlobalContext) {
     (0, utils_js_1.assert)(globalObject.isClientRouting === undefined || globalObject.isClientRouting === isClientRouting);
     globalObject.isClientRouting = isClientRouting;
     // Eagerly call onCreateGlobalContext() hook
     getGlobalContext();
     return getGlobalContext;
     async function getGlobalContext() {
-        // HMR => virtualFileExports differ
-        if (globalObject.virtualFileExports === virtualFileExports) {
+        // HMR => virtualFileExportsGlobalEntry differ
+        if (globalObject.virtualFileExportsGlobalEntry === virtualFileExportsGlobalEntry) {
             const globalContext = await globalObject.globalContextPromise;
             return globalContext;
         }
         else {
-            globalObject.virtualFileExports = virtualFileExports;
+            globalObject.virtualFileExportsGlobalEntry = virtualFileExportsGlobalEntry;
         }
         // Create
-        const globalContextPromise = (0, createGlobalContextShared_js_1.createGlobalContextShared)(virtualFileExports, globalObject, undefined, async (globalContext) => {
+        const globalContextPromise = (0, createGlobalContextShared_js_1.createGlobalContextShared)(virtualFileExportsGlobalEntry, globalObject, undefined, async (globalContext) => {
             const globalContextAddendum = {
                 /**
                  * Whether the environment is client-side or server-side / pre-rendering.

package/dist/cjs/node/api/build.js

@@ -3,45 +3,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.build = build;
 const prepareViteApiCall_js_1 = require("./prepareViteApiCall.js");
 const vite_1 = require("vite");
-const context_js_1 = require("../cli/context.js");
-const context_js_2 = require("../prerender/context.js");
-const utils_js_1 = require("./utils.js");
 /**
  * Programmatically trigger `$ vike build`
  *
  * https://vike.dev/api#build
  */
 async function build(options = {}) {
-    const { viteConfigFromUserEnhanced, vikeConfig } = await (0, prepareViteApiCall_js_1.prepareViteApiCall)(options, 'build');
-    // Pass it to pluginAutoFullBuild()
+    const { viteConfigFromUserEnhanced } = await (0, prepareViteApiCall_js_1.prepareViteApiCall)(options, 'build');
+    // Pass it to vike:build:pluginBuildApp
     if (viteConfigFromUserEnhanced)
         viteConfigFromUserEnhanced._viteConfigFromUserEnhanced = viteConfigFromUserEnhanced;
-    if (vikeConfig.config.vite6BuilderApp) {
-        // This assertion isn't reliable: the user may still use a Vite version older than 6.0.0 — see https://github.com/vitejs/vite/pull/19355
-        (0, utils_js_1.assertVersion)('Vite', vite_1.version, '6.0.0');
-        const builder = await (0, vite_1.createBuilder)(viteConfigFromUserEnhanced);
-        // See Vite plugin vike:build:pluginBuildApp
-        await builder.buildApp();
-    }
-    else {
-        // This buildVite() call does everything:
-        // 1. Build client-side
-        // 2. Build server-side
-        //    > See: https://github.com/vikejs/vike/blob/c6c7533a56b3a16fc43ed644fc5c10c02d0ff375/vike/node/plugin/plugins/autoFullBuild.ts#L90
-        // 3. Pre-render (if enabled)
-        //    > See: https://github.com/vikejs/vike/blob/c6c7533a56b3a16fc43ed644fc5c10c02d0ff375/vike/node/plugin/plugins/autoFullBuild.ts#L98
-        //    > We purposely don't start the pre-rendering in this `build()` function but in a Rollup hook instead.
-        //    > Rationale: https://github.com/vikejs/vike/issues/2123
-        await (0, vite_1.build)(viteConfigFromUserEnhanced);
-        // After pre-rendering, when using the Vike CLI, the process is forcefully exited at the end of the buildVite() call above.
-        if (
-        // When calling Vike's prerender() API pre-rendering is run without force exit
-        ![false, 'prerender()'].includes((0, context_js_2.wasPrerenderRun)()) &&
-            // When calling Vike's build() API pre-rendering is auto run without force exit
-            (0, context_js_1.isVikeCli)()) {
-            (0, utils_js_1.assert)(false);
-        }
-    }
+    const builder = await (0, vite_1.createBuilder)(viteConfigFromUserEnhanced);
+    // buildApp() is implemented by vike:build:pluginBuildApp
+    await builder.buildApp();
     return {
     /* We don't return `viteConfig` because `viteConfigFromUserEnhanced` is `InlineConfig` not `ResolvedConfig`
     viteConfig: viteConfigFromUserEnhanced,

package/dist/cjs/node/api/context.js

@@ -1,22 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isVikeCliOrApi = isVikeCliOrApi;
-exports.setContextApiOperation = setContextApiOperation;
-exports.clearContextApiOperation = clearContextApiOperation;
-exports.getApiOperation = getApiOperation;
-const utils_js_1 = require("./utils.js");
+exports.setContextVikeApiOperation = setContextVikeApiOperation;
+exports.clearContextVikeApiOperation = clearContextVikeApiOperation;
+exports.getVikeApiOperation = getVikeApiOperation;
+// We don't import from ./utils.js because we tolerate this file to be loaded in production
+const utils_js_1 = require("../runtime/utils.js");
 const globalObject = (0, utils_js_1.getGlobalObject)('api/context.ts', {});
-function getApiOperation() {
-    return globalObject.apiOperation ?? null;
+function getVikeApiOperation() {
+    return globalObject.vikeApiOperation ?? null;
 }
 function isVikeCliOrApi() {
     // The CLI uses the API
-    return !!globalObject.apiOperation;
+    return !!globalObject.vikeApiOperation;
 }
-function setContextApiOperation(operation, options) {
-    (0, utils_js_1.assert)(!globalObject.apiOperation);
-    globalObject.apiOperation = { operation, options };
+function setContextVikeApiOperation(operation, options) {
+    (0, utils_js_1.assert)(!globalObject.vikeApiOperation);
+    globalObject.vikeApiOperation = { operation, options };
 }
-function clearContextApiOperation() {
-    globalObject.apiOperation = undefined;
+function clearContextVikeApiOperation() {
+    globalObject.vikeApiOperation = undefined;
 }

package/dist/cjs/node/api/dev.js

@@ -3,14 +3,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.dev = dev;
 const prepareViteApiCall_js_1 = require("./prepareViteApiCall.js");
 const vite_1 = require("vite");
-const globalContext_js_1 = require("../runtime/globalContext.js");
 /**
  * Programmatically trigger `$ vike dev`
  *
  * https://vike.dev/api#dev
  */
 async function dev(options = {}) {
-    (0, globalContext_js_1.setGlobalContext_isProduction)(false);
     const { viteConfigFromUserEnhanced } = await (0, prepareViteApiCall_js_1.prepareViteApiCall)(options, 'dev');
     const server = await (0, vite_1.createServer)(viteConfigFromUserEnhanced);
     return {

package/dist/cjs/node/api/index.js

@@ -34,8 +34,6 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.prerender = exports.preview = exports.dev = exports.build = void 0;
-const assertIsNotBrowser_js_1 = require("../../utils/assertIsNotBrowser.js");
-(0, assertIsNotBrowser_js_1.assertIsNotBrowser)();
 const build_ = async (...args) => (await Promise.resolve().then(() => __importStar(require('./build.js')))).build(...args);
 exports.build = build_;
 const dev_ = async (...args) => (await Promise.resolve().then(() => __importStar(require('./dev.js')))).dev(...args);

package/dist/cjs/node/api/onLoad.js

@@ -2,8 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.onLoad = onLoad;
 const assertIsNotBrowser_js_1 = require("../../utils/assertIsNotBrowser.js");
-const utils_js_1 = require("../runtime/utils.js");
+const assertSetup_js_1 = require("../../utils/assertSetup.js");
 function onLoad() {
     (0, assertIsNotBrowser_js_1.assertIsNotBrowser)();
-    (0, utils_js_1.assertIsNotProductionRuntime)();
+    (0, assertSetup_js_1.assertIsNotProductionRuntime)();
 }

package/dist/cjs/node/api/prepareViteApiCall.js

@@ -51,13 +51,13 @@ const getEnvVarObject_js_1 = require("../vite/shared/getEnvVarObject.js");
 const globalObject = (0, utils_js_1.getGlobalObject)('api/prepareViteApiCall.ts', {});
 async function prepareViteApiCall(options, operation) {
     clear();
-    (0, context_js_1.setContextApiOperation)(operation, options);
+    (0, context_js_1.setContextVikeApiOperation)(operation, options);
     const viteConfigFromUserApiOptions = options.viteConfig;
     return resolveConfigs(viteConfigFromUserApiOptions, operation);
 }
 // For subsequent API calls, e.g. calling prerender() after build()
 function clear() {
-    (0, context_js_1.clearContextApiOperation)();
+    (0, context_js_1.clearContextVikeApiOperation)();
     (0, globalContext_js_1.clearGlobalContext)();
 }
 async function resolveConfigs(viteConfigFromUserApiOptions, operation) {
@@ -71,7 +71,6 @@ async function resolveConfigs(viteConfigFromUserApiOptions, operation) {
     const viteConfigFromUserEnhanced = applyVikeViteConfig(viteInfo.viteConfigFromUserEnhanced, vikeConfig);
     const { viteConfigResolved } = await assertViteRoot2(viteInfo.root, viteConfigFromUserEnhanced, operation);
     return {
-        vikeConfig,
         viteConfigResolved, // ONLY USE if strictly necessary. (We plan to remove assertViteRoot2() as explained in the comments of that function.)
         viteConfigFromUserEnhanced,
     };

package/dist/cjs/node/api/preview.js

@@ -11,17 +11,16 @@ const getOutDirs_js_1 = require("../vite/shared/getOutDirs.js");
 const utils_js_1 = require("./utils.js");
 const picocolors_1 = __importDefault(require("@brillout/picocolors"));
 const node_path_1 = __importDefault(require("node:path"));
-const utils_js_2 = require("../runtime/utils.js");
 /**
  * Programmatically trigger `$ vike preview`
  *
  * https://vike.dev/api#preview
  */
 async function preview(options = {}) {
-    (0, utils_js_2.onSetupPreview)();
+    (0, utils_js_1.onSetupPreview)();
     const { viteConfigFromUserEnhanced, viteConfigResolved } = await (0, prepareViteApiCall_js_1.prepareViteApiCall)(options, 'preview');
     if (viteConfigResolved.vitePluginServerEntry?.inject) {
-        const outDir = (0, getOutDirs_js_1.getOutDirs)(viteConfigResolved).outDirRoot;
+        const outDir = (0, getOutDirs_js_1.getOutDirs)(viteConfigResolved, undefined).outDirRoot;
         const { outServerIndex } = await (0, runtime_1.importServerProductionIndex)({ outDir });
         const outServerIndexRelative = node_path_1.default.relative(viteConfigResolved.root, outServerIndex);
         (0, utils_js_1.assertWarning)(false, `Never run ${picocolors_1.default.cyan('$ vike preview')} in production, run ${picocolors_1.default.cyan(`$ node ${outServerIndexRelative}`)} instead (or Bun/Deno).`, { onlyOnce: true });

package/dist/cjs/node/api/utils.js

@@ -24,3 +24,4 @@ __exportStar(require("../../utils/path.js"), exports);
 __exportStar(require("../../utils/isObject.js"), exports);
 __exportStar(require("../../utils/assertVersion.js"), exports);
 __exportStar(require("../../utils/pick.js"), exports);
+__exportStar(require("../../utils/assertSetup.js"), exports);

package/dist/cjs/node/cli/index.js

@@ -7,6 +7,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.prerender = void 0;
 var prerender_js_1 = require("../api/prerender.js");
 Object.defineProperty(exports, "prerender", { enumerable: true, get: function () { return prerender_js_1.prerender; } });
-const assert_js_1 = require("../../utils/assert.js");
+const utils_js_1 = require("./utils.js");
 const picocolors_1 = __importDefault(require("@brillout/picocolors"));
-(0, assert_js_1.assertWarning)(false, `${picocolors_1.default.cyan("import { prerender } from 'vike/cli'")} is deprecated in favor of ${picocolors_1.default.cyan("import { prerender } from 'vike/api'")}`, { onlyOnce: true });
+(0, utils_js_1.assertWarning)(false, `${picocolors_1.default.cyan("import { prerender } from 'vike/cli'")} is deprecated in favor of ${picocolors_1.default.cyan("import { prerender } from 'vike/api'")}`, { onlyOnce: true });

package/dist/cjs/node/cli/onLoad.js

@@ -2,8 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.onLoad = onLoad;
 const assertIsNotBrowser_js_1 = require("../../utils/assertIsNotBrowser.js");
-const utils_js_1 = require("../runtime/utils.js");
+const assertSetup_js_1 = require("../../utils/assertSetup.js");
 function onLoad() {
     (0, assertIsNotBrowser_js_1.assertIsNotBrowser)();
-    (0, utils_js_1.assertIsNotProductionRuntime)();
+    (0, assertSetup_js_1.assertIsNotProductionRuntime)();
 }

package/dist/cjs/node/prerender/runPrerender.js

@@ -43,7 +43,7 @@ exports.runPrerender = runPrerender;
 const node_path_1 = __importDefault(require("node:path"));
 const index_js_1 = require("../../shared/route/index.js");
 const utils_js_1 = require("./utils.js");
-const renderPageAlreadyRouted_js_1 = require("../runtime/renderPage/renderPageAlreadyRouted.js");
+const renderPageAfterRoute_js_1 = require("../runtime/renderPage/renderPageAfterRoute.js");
 const createPageContextServerSide_js_1 = require("../runtime/renderPage/createPageContextServerSide.js");
 const picocolors_1 = __importDefault(require("@brillout/picocolors"));
 const node_os_1 = require("node:os");
@@ -53,7 +53,7 @@ const getPageFiles_js_1 = require("../../shared/getPageFiles.js");
 const getPageContextRequestUrl_js_1 = require("../../shared/getPageContextRequestUrl.js");
 const resolveRouteString_js_1 = require("../../shared/route/resolveRouteString.js");
 const getConfigValueRuntime_js_1 = require("../../shared/page-configs/getConfigValueRuntime.js");
-const loadConfigValues_js_1 = require("../../shared/page-configs/loadConfigValues.js");
+const loadAndParseVirtualFilePageEntry_js_1 = require("../../shared/page-configs/loadAndParseVirtualFilePageEntry.js");
 const error_page_js_1 = require("../../shared/error-page.js");
 const abort_js_1 = require("../../shared/route/abort.js");
 const loadPageConfigsLazyServerSide_js_1 = require("../runtime/renderPage/loadPageConfigsLazyServerSide.js");
@@ -82,7 +82,7 @@ async function runPrerender(options = {}, trigger) {
     await disableReactStreaming();
     const viteConfig = await (0, vite_1.resolveConfig)(options.viteConfig || {}, 'build', 'production');
     const vikeConfig = await (0, resolveVikeConfigInternal_js_1.getVikeConfigInternal)();
-    const { outDirServer } = (0, getOutDirs_js_1.getOutDirs)(viteConfig);
+    const { outDirServer } = (0, getOutDirs_js_1.getOutDirs)(viteConfig, undefined);
     const prerenderConfigGlobal = (0, resolvePrerenderConfig_js_1.resolvePrerenderConfigGlobal)(vikeConfig);
     const { partial, noExtraDir, parallel, defaultLocalValue, isPrerenderingEnabled } = prerenderConfigGlobal;
     if (!isPrerenderingEnabled) {
@@ -212,7 +212,7 @@ async function callOnBeforePrerenderStartHooks(prerenderContext, globalContext,
     // V1 design
     await Promise.all(globalContext._pageConfigs.map((pageConfig) => concurrencyLimit(async () => {
         const hookName = 'onBeforePrerenderStart';
-        const pageConfigLoaded = await (0, loadConfigValues_js_1.loadConfigValues)(pageConfig, false);
+        const pageConfigLoaded = await (0, loadAndParseVirtualFilePageEntry_js_1.loadAndParseVirtualFilePageEntry)(pageConfig, false);
         const hook = (0, getHook_js_1.getHookFromPageConfig)(pageConfigLoaded, hookName);
         if (!hook)
             return;
@@ -357,11 +357,10 @@ async function createPageContextPrerendering(urlOriginal, prerenderContext, glob
         (0, utils_js_1.assert)(pageId);
         (0, utils_js_1.objectAssign)(pageContext, {
             pageId,
-            _debugRouteMatches: [],
             routeParams: {},
         });
     }
-    (0, utils_js_2.augmentType)(pageContext, await (0, loadPageConfigsLazyServerSide_js_1.loadPageConfigsLazyServerSideAndExecHook)(pageContext));
+    (0, utils_js_2.updateType)(pageContext, await (0, loadPageConfigsLazyServerSide_js_1.loadPageConfigsLazyServerSide)(pageContext));
     let usesClientRouter;
     {
         const { pageId } = pageContext;
@@ -541,7 +540,7 @@ async function prerenderPages(prerenderContext, concurrencyLimit, onComplete) {
     await Promise.all(prerenderContext.pageContexts.map((pageContextBeforeRender) => concurrencyLimit(async () => {
         let res;
         try {
-            res = await (0, renderPageAlreadyRouted_js_1.prerenderPage)(pageContextBeforeRender);
+            res = await (0, renderPageAfterRoute_js_1.prerenderPage)(pageContextBeforeRender);
         }
         catch (err) {
             assertIsNotAbort(err, picocolors_1.default.cyan(pageContextBeforeRender.urlOriginal));
@@ -590,7 +589,7 @@ async function writeFiles({ pageContext, htmlString, pageContextSerialized }, vi
 async function write(pageContext, fileType, fileContent, viteConfig, onPagePrerender, prerenderContext, logLevel) {
     const { urlOriginal } = pageContext;
     (0, utils_js_1.assert)(urlOriginal.startsWith('/'));
-    const { outDirClient } = (0, getOutDirs_js_1.getOutDirs)(viteConfig);
+    const { outDirClient } = (0, getOutDirs_js_1.getOutDirs)(viteConfig, undefined);
     const { root } = viteConfig;
     let fileUrl;
     if (fileType === 'HTML') {

package/dist/cjs/node/prerender/runPrerenderEntry.js

@@ -35,7 +35,7 @@ async function runPrerenderFromAutoRun(viteConfig) {
         await (0, runPrerender_js_1.runPrerender)({ viteConfig }, 'auto-run');
     }
     catch (err) {
-        // Avoid Rollup prefixing the error with [vike:build:pluginAutoFullBuild], see for example https://github.com/vikejs/vike/issues/472#issuecomment-1276274203
+        // Avoid Rollup prefixing the error with [vike:build:pluginBuildApp], see for example https://github.com/vikejs/vike/issues/472#issuecomment-1276274203
         console.error(err);
         (0, logErrorHint_js_1.logErrorHint)(err);
         process.exit(1);

package/dist/cjs/node/runtime/csp.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePageContextCspNone = resolvePageContextCspNone;
+exports.inferNonceAttr = inferNonceAttr;
+exports.addCspHeader = addCspHeader;
+const import_1 = require("@brillout/import");
+async function resolvePageContextCspNone(pageContext) {
+    if (pageContext.cspNonce)
+        return; // already set by user e.g. `renderPage({ cspNonce: '123456789' })`
+    const { csp } = pageContext.config;
+    if (!csp?.nonce)
+        return;
+    let cspNonce;
+    if (csp.nonce === true) {
+        cspNonce = await generateNonce();
+    }
+    else {
+        cspNonce = await csp.nonce(pageContext);
+    }
+    const pageContextAddendum = { cspNonce };
+    return pageContextAddendum;
+}
+// Generate a cryptographically secure nonce for Content Security Policy (CSP).
+// Returns a base64url-encoded nonce string (URL-safe, no padding).
+// https://github.com/vikejs/vike/issues/1554#issuecomment-3181128304
+async function generateNonce() {
+    let cryptoModule;
+    try {
+        cryptoModule = (await (0, import_1.import_)('crypto')).default;
+    }
+    catch {
+        return Math.random().toString(36).substring(2, 18);
+    }
+    return cryptoModule.randomBytes(16).toString('base64url');
+}
+function inferNonceAttr(pageContext) {
+    const nonceAttr = pageContext.cspNonce ? ` nonce="${pageContext.cspNonce}"` : '';
+    return nonceAttr;
+}
+function addCspHeader(pageContext, headersResponse) {
+    if (!pageContext.cspNonce)
+        return;
+    if (headersResponse.get('Content-Security-Policy'))
+        return;
+    headersResponse.set('Content-Security-Policy', `script-src 'self' 'nonce-${pageContext.cspNonce}'`);
+}