@farm.js/core 0.1.30 → 0.1.34

package/dist/{chunk-S4K74WI4.mjs → chunk-XV5DJTBX.mjs}

@@ -1,12 +1,10 @@
 import {
   collectSSGPages,
-  createRouteSlotContainerId,
   generateFarmTypeArtifacts,
   matchSSGPage,
-  parseRouteSlotFile,
   resolveRouteRenderingConfig,
   resolveRouteRenderingConfigFromFile
-} from "./chunk-O3DTUAX2.mjs";
+} from "./chunk-AQZFOP7S.mjs";
 import {
   collectSchemaExtensions,
   declareSchemaTables,
@@ -17,8 +15,10 @@ import {
 } from "./chunk-ZMSZZXOR.mjs";
 import {
   FARM_API_CATALOG_PATH,
+  FARM_APP_MANIFEST_PATH,
   createDefaultErrorMarkup,
   createFarmApiCatalogResponse,
+  createFarmAppManifestResponse,
   createFarmMetadataRouteResponse,
   createFarmThemeDocumentParts,
   createLateNotFoundRecovery,
@@ -26,8 +26,9 @@ import {
   getDefaultErrorStatusText,
   renderFarmLocaleAlternateLinks,
   resolveDefaultErrorStatus,
-  resolveFarmApiCatalogInput
-} from "./chunk-D234YWNA.mjs";
+  resolveFarmApiCatalogInput,
+  resolveFarmAppManifestInput
+} from "./chunk-GOABMOX3.mjs";
 import {
   isFarmPreviewDeploymentEnvironment
 } from "./chunk-BOYNDCZL.mjs";
@@ -36,7 +37,7 @@ import {
 } from "./chunk-YQVSHTMR.mjs";
 import {
   createFarmImageHandler
-} from "./chunk-F6XEGFHO.mjs";
+} from "./chunk-PXKIEXZD.mjs";
 import {
   FARM_ISLAND_REPLAYABLE_SELECTOR,
   isFarmIslandStrategy
@@ -46,11 +47,11 @@ import {
 } from "./chunk-PNGWZFUQ.mjs";
 import {
   farmEnvironmentFunctionsPlugin
-} from "./chunk-ZSH2Y4LN.mjs";
+} from "./chunk-E5GNDG5F.mjs";
 import {
   _setDefaultFarmThemeConfig,
   getTheme
-} from "./chunk-WBIH66JK.mjs";
+} from "./chunk-2ELDTQRN.mjs";
 import {
   generateFarmDocsAdapterClientRuntime,
   getFarmDocsAdapterConfigModule
@@ -108,7 +109,7 @@ import {
   resolveFarmLlmsTxtConfig,
   resolveFarmPerformanceConfig,
   resolveFarmSecurityConfig
-} from "./chunk-YMUE7L3D.mjs";
+} from "./chunk-NGVORZVZ.mjs";
 import {
   getPublicFarmImageConfig,
   resolveFarmImageConfig
@@ -126,12 +127,12 @@ import {
 import {
   createFarmMarkdownRouteModuleFromFile,
   loadFarmMdxComponents
-} from "./chunk-6G3ZZ2IE.mjs";
+} from "./chunk-3VSKDFAT.mjs";
 import {
   createFarmMarkdownSourceResponse,
   isFarmMarkdownPageFile,
   normalizeFarmMarkdownRoutePath
-} from "./chunk-BZ3CHOFX.mjs";
+} from "./chunk-AGC75XAE.mjs";
 import {
   resolveFarmMdxComponentsModulePath,
   resolveMdxConfig
@@ -145,7 +146,7 @@ import {
   getFarmMarkdownMirrorPath,
   resolveMarkdownConfig,
   resolveMarkdownMirrorTarget
-} from "./chunk-ATXI6LGT.mjs";
+} from "./chunk-ZUSJDQ2Q.mjs";
 import {
   resolveWorkflowsConfig
 } from "./chunk-3ATMYLLJ.mjs";
@@ -168,16 +169,20 @@ import {
   getRegisteredIntegrationAPIManifest,
   isFarmIntegrationProviderComponentReference,
   matchIntegrationRoute
-} from "./chunk-JLCQGPXE.mjs";
+} from "./chunk-GNSDTTWZ.mjs";
 import {
   MiddlewareManager
-} from "./chunk-VUMAE7NC.mjs";
+} from "./chunk-7Y6ZNFPX.mjs";
+import {
+  createRouteSlotContainerId,
+  parseRouteSlotFile
+} from "./chunk-UBO4SGH4.mjs";
 import {
   _clearCurrentMiddlewareContext,
   _clearCurrentMiddlewareData,
   _runWithMiddlewareContext,
   _runWithMiddlewareData
-} from "./chunk-NRVGEI5I.mjs";
+} from "./chunk-2NNMOPDN.mjs";
 import {
   _runWithAPIRequestRuntime
 } from "./chunk-R3DS7A2T.mjs";
@@ -186,17 +191,17 @@ import {
 } from "./chunk-IOEH4VWN.mjs";
 import {
   APIRouteManager
-} from "./chunk-BXFWA23T.mjs";
+} from "./chunk-LMJ7VRHZ.mjs";
 import {
   findProgrammaticRouteFiles,
   loadProgrammaticRouteManifests
-} from "./chunk-LNZ7JZUS.mjs";
+} from "./chunk-UDNPLXW7.mjs";
 import {
   _runWithFarmI18nRequest,
   _setDefaultFarmI18nRuntime,
   createFarmI18nRuntime,
   getFarmI18nClientSnapshot
-} from "./chunk-JNGIWIY6.mjs";
+} from "./chunk-NPC7VWJE.mjs";
 import {
   VERCEL_OG_INSTALL_HINT,
   formatOptionalPeerInstallHint,
@@ -205,10 +210,7 @@ import {
 } from "./chunk-YOZYCI6Z.mjs";
 import {
   isFarmAPIPathname
-} from "./chunk-X7WVQMIB.mjs";
-import {
-  resolveFarmAPIServerBasePath
-} from "./chunk-I6XDAKWQ.mjs";
+} from "./chunk-657WJNRY.mjs";
 import {
   createProgrammaticRouteModuleId,
   getProgrammaticRouteSearchClientOptions,
@@ -228,7 +230,7 @@ import {
   configureFarmCache,
   getFarmDataCache,
   normalizeRevalidatePath
-} from "./chunk-IV6CQY7O.mjs";
+} from "./chunk-MSSFIQGM.mjs";
 import {
   clearRequestContext,
   copyRequestContext,
@@ -255,7 +257,7 @@ import {
   isFarmI18nCatalogFile,
   resolveFarmI18nConfig,
   resolveFarmI18nMessagePath
-} from "./chunk-YMCXWPWK.mjs";
+} from "./chunk-BCMSYSN2.mjs";
 import {
   fileExists,
   globFiles,
@@ -274,6 +276,9 @@ import {
 import {
   searchParamsToObject
 } from "./chunk-QVKYGNVM.mjs";
+import {
+  resolveFarmAPIServerBasePath
+} from "./chunk-BTHHUD7Q.mjs";
 import {
   configureFarmObservability,
   emitFarmEvent,
@@ -285,7 +290,7 @@ import {
 } from "./chunk-Z2RZJZIZ.mjs";
 import {
   FARM_VERSION
-} from "./chunk-K6V52QMI.mjs";
+} from "./chunk-X242HVD5.mjs";
 import {
   resolveFarmTrailingSlashRedirect,
   setFarmTrailingSlashPreference
@@ -297,7 +302,7 @@ import {
 import {
   createFarmLocaleCookie,
   getFarmLocaleVaryHeaders
-} from "./chunk-IXUY2F5U.mjs";
+} from "./chunk-GCXWJJKH.mjs";
 import {
   addMetadataImageReference,
   addMetadataMarkdownAlternate,
@@ -321,7 +326,7 @@ import {
 } from "./chunk-CNOQY6Z7.mjs";
 import {
   FARM_CONFIG_REWRITES_PLUGIN_NAME
-} from "./chunk-2AKFKCHA.mjs";
+} from "./chunk-W7LF2J2S.mjs";
 import {
   appendFarmRedirectQuery
 } from "./chunk-BRYHOB4X.mjs";
@@ -331,10 +336,14 @@ import {
   isFarmRedirectError
 } from "./chunk-CBBLJMR5.mjs";
 import {
+  _getRequestReadCount,
   _runWithCurrentRequest,
   createWebRequestFromFarmRequest,
   resolveFarmRequestURL
-} from "./chunk-BSPQVJ4A.mjs";
+} from "./chunk-FDR64H6B.mjs";
+import {
+  _resolveCurrentRequest
+} from "./chunk-IZY3V5XW.mjs";
 import {
   localizeFarmHref,
   localizeFarmPathname,
@@ -1771,14 +1780,14 @@ function createFarmRouteRenderPlan(input = {}) {
   const layoutShouldHydrate = input.layoutShouldHydrate === true;
   const hydration = pageShouldHydrate ? layoutShouldHydrate ? "route-and-layout-islands" : "route-island" : layoutShouldHydrate ? "layout-island" : "none";
   const rendering = input.rendering;
-  const cache = rendering?.ssg ? typeof rendering.revalidate === "number" && rendering.revalidate > 0 ? { mode: "revalidate", revalidate: rendering.revalidate } : { mode: "static" } : { mode: "dynamic" };
+  const cache2 = rendering?.ssg ? typeof rendering.revalidate === "number" && rendering.revalidate > 0 ? { mode: "revalidate", revalidate: rendering.revalidate } : { mode: "static" } : { mode: "dynamic" };
   return {
     version: 1,
     output: "html",
     navigation: "html-fragment",
     hydration,
     islandStrategy: hydration === "none" ? null : input.islandStrategy ?? "load",
-    cache
+    cache: cache2
   };
 }
 __name(createFarmRouteRenderPlan, "createFarmRouteRenderPlan");
@@ -3784,15 +3793,15 @@ __name(readFontOptions, "readFontOptions");
 function evaluateStaticObject(code, id, node) {
   const result = {};
   const properties = Array.isArray(node.properties) ? node.properties : [];
-  for (const property of properties) {
-    if (!isAstNode(property) || property.type !== "Property" || property.computed === true) {
+  for (const property2 of properties) {
+    if (!isAstNode(property2) || property2.type !== "Property" || property2.computed === true) {
       throw fontError(id, "font options do not support spreads or computed properties");
     }
-    const key = readPropertyName(property.key);
-    if (!key || !isAstNode(property.value)) {
+    const key = readPropertyName(property2.key);
+    if (!key || !isAstNode(property2.value)) {
       throw fontError(id, "font options must use static property names and values");
     }
-    result[key] = evaluateStaticValue(code, id, property.value);
+    result[key] = evaluateStaticValue(code, id, property2.value);
   }
   return result;
 }
@@ -4058,8 +4067,8 @@ function normalizePublicFontPath(source, moduleId) {
 }
 __name(normalizePublicFontPath, "normalizePublicFontPath");
 function isPathInside(parent, child) {
-  const relative3 = path6.relative(parent, child);
-  return relative3 === "" || !relative3.startsWith("..") && !path6.isAbsolute(relative3);
+  const relative4 = path6.relative(parent, child);
+  return relative4 === "" || !relative4.startsWith("..") && !path6.isAbsolute(relative4);
 }
 __name(isPathInside, "isPathInside");
 function normalizeBasePath(value) {
@@ -4513,8 +4522,8 @@ function redactErrorText(value) {
 }
 __name(redactErrorText, "redactErrorText");
 function isPathInsideRoot(root, filePath) {
-  const relative3 = path8.relative(root, filePath);
-  return relative3 === "" || !relative3.startsWith("..") && !path8.isAbsolute(relative3);
+  const relative4 = path8.relative(root, filePath);
+  return relative4 === "" || !relative4.startsWith("..") && !path8.isAbsolute(relative4);
 }
 __name(isPathInsideRoot, "isPathInsideRoot");
 function normalizeStackPath(value) {
@@ -4733,7 +4742,7 @@ __name(toMiddlewareMap, "toMiddlewareMap");
 function requestOwnHttpsServer(request2, address) {
   const url = new URL(request2.url);
   const hostname = url.hostname.replace(/^\[|\]$/g, "");
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const outgoing = https.request(
       {
         host: address.host,
@@ -4755,7 +4764,7 @@ function requestOwnHttpsServer(request2, address) {
         const status = incoming.statusCode ?? 502;
         const hasBody = ![204, 205, 304].includes(status);
         if (!hasBody) incoming.resume();
-        resolve5(
+        resolve6(
           new Response(hasBody ? Readable.toWeb(incoming) : null, {
             status,
             headers
@@ -4951,7 +4960,7 @@ var _ServerRenderer = class _ServerRenderer {
     const streaming = getFarmRendererStreamingCapabilitiesForRuntime(this.config.renderer, "node");
     const renderToPipeableStream = streaming.node ? this.rendererRuntime.renderToPipeableStream : void 0;
     if (renderToPipeableStream) {
-      return await new Promise((resolve5, reject) => {
+      return await new Promise((resolve6, reject) => {
         const chunks = [];
         let started = false;
         const writable = new Writable({
@@ -4960,7 +4969,7 @@ var _ServerRenderer = class _ServerRenderer {
             callback();
           }
         });
-        writable.once("finish", () => resolve5(Buffer.concat(chunks).toString("utf8")));
+        writable.once("finish", () => resolve6(Buffer.concat(chunks).toString("utf8")));
         writable.once("error", reject);
         const stream = renderToPipeableStream(element, {
           onShellReady() {
@@ -5485,6 +5494,7 @@ var _ServerRenderer = class _ServerRenderer {
       const programmaticRouteComponents = routeModule.__farmRouteComponents;
       let PageComponent = routeModule.default;
       let pageProps;
+      let routeStateRejected = false;
       try {
         pageProps = await parseRouteModuleProps(routeModule, {
           props: rawPageProps,
@@ -5493,6 +5503,7 @@ var _ServerRenderer = class _ServerRenderer {
         });
       } catch (error) {
         if (isFarmRedirectError(error)) throw error;
+        routeStateRejected = true;
         const routeStateProps = {
           ...rawPageProps,
           search: searchParamsObject,
@@ -5571,6 +5582,9 @@ var _ServerRenderer = class _ServerRenderer {
           key: pprCacheKey
         });
       }
+      const outerRequest = _resolveCurrentRequest();
+      const countRequestReads = /* @__PURE__ */ __name(() => (outerRequest ? _getRequestReadCount(outerRequest) : 0) + _getRequestReadCount(currentRequest), "countRequestReads");
+      const requestReadsBeforeRender = countRequestReads();
       let LoadingFallbackComponent = null;
       if (loadingBoundaryEntry) {
         const loadingModule = await this.routeManager.loadRouteModule(
@@ -5746,7 +5760,8 @@ var _ServerRenderer = class _ServerRenderer {
         layoutModules,
         routeModule,
         pageProps,
-        pathname
+        pathname,
+        skipGeneratedRouteMetadata: routeStateRejected
       });
       req.__FARM_METADATA__ = mergedMetadata;
       const middlewareDataForContext = middlewareMap;
@@ -5851,7 +5866,22 @@ var _ServerRenderer = class _ServerRenderer {
                   type: "ppr.suspense.holeDetected",
                   route: pathname
                 }) : void 0,
-                onComplete: pprShellOptions && req.method !== "HEAD" ? (html) => this.cachePPRShell(pprShellOptions, html) : void 0
+                onComplete: pprShellOptions && req.method !== "HEAD" ? (html) => {
+                  if (countRequestReads() !== requestReadsBeforeRender) {
+                    emitFarmEvent({
+                      type: "ppr.shell.bypass",
+                      route: pathname,
+                      reason: "request-read"
+                    });
+                    emitFarmEvent({
+                      type: "cache.bypass",
+                      route: pathname,
+                      reason: "request-read"
+                    });
+                    return;
+                  }
+                  return this.cachePPRShell(pprShellOptions, html);
+                } : void 0
               }
             );
             if (pprRefreshRoute) {
@@ -6025,7 +6055,7 @@ var _ServerRenderer = class _ServerRenderer {
       }
     }
     metadata = mergeMetadata(metadata, options.routeModule.metadata);
-    if (typeof options.routeModule.generateMetadata === "function") {
+    if (!options.skipGeneratedRouteMetadata && typeof options.routeModule.generateMetadata === "function") {
       metadata = mergeMetadata(
         metadata,
         await options.routeModule.generateMetadata(options.pageProps)
@@ -6642,7 +6672,7 @@ window.__FARM_I18N__ = ${getFarmI18nClientSnapshot() ? serializeInlineValue(getF
     if (!renderToPipeableStream || fullDocumentRoutes.has(fullDocumentRouteKey) || await this.rootLayoutRendersDocument()) {
       return this.renderBufferedSSR(element, req, res, clearMiddlewareData, options);
     }
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve6, reject) => {
       const streamStartTime = Date.now();
       const observabilityRoute = options.observabilityRoute || req.__FARM_ROUTE__ || req.url || "/";
       const deploymentId = this.getDeploymentId();
@@ -6922,7 +6952,7 @@ window.__FARM_I18N__ = ${getFarmI18nClientSnapshot() ? serializeInlineValue(getF
               route: observabilityRoute,
               durationMs: Date.now() - streamStartTime
             });
-            resolve5();
+            resolve6();
           }, "finishStream");
           res.write(securedShell);
           if (typeof res.flush === "function") {
@@ -7470,9 +7500,9 @@ __name(isVitePluginHook, "isVitePluginHook");
 function withVite5TransformContext(handler) {
   return function(...args) {
     const context = new Proxy(this, {
-      get(target, property, receiver) {
-        if (property === "environment") return void 0;
-        return Reflect.get(target, property, receiver);
+      get(target, property2, receiver) {
+        if (property2 === "environment") return void 0;
+        return Reflect.get(target, property2, receiver);
       }
     });
     return handler.apply(context, args);
@@ -7632,8 +7662,8 @@ __name(validateSchemaSteps, "validateSchemaSteps");
 var _FarmPluginOptionsError = class _FarmPluginOptionsError extends TypeError {
   constructor(issues) {
     const lines = issues.map((issue) => {
-      const path18 = formatIssuePath(issue.path);
-      return `  - ${path18 ? `${path18}: ` : ""}${issue.message}`;
+      const path21 = formatIssuePath(issue.path);
+      return `  - ${path21 ? `${path21}: ` : ""}${issue.message}`;
     });
     super(`Invalid plugin options:
 ${lines.join("\n")}`);
@@ -7643,9 +7673,9 @@ ${lines.join("\n")}`);
 };
 __name(_FarmPluginOptionsError, "FarmPluginOptionsError");
 var FarmPluginOptionsError = _FarmPluginOptionsError;
-function formatIssuePath(path18) {
-  if (!path18?.length) return "";
-  return path18.map((segment) => {
+function formatIssuePath(path21) {
+  if (!path21?.length) return "";
+  return path21.map((segment) => {
     const key = typeof segment === "object" && segment !== null ? segment.key : segment;
     return typeof key === "symbol" ? key.toString() : String(key);
   }).join(".");
@@ -7881,23 +7911,23 @@ var _PluginManager = class _PluginManager {
             `Farm plugin "${plugin.name}" runtime.endpoints must contain endpoint objects`
           );
         }
-        const path18 = normalizeFarmPluginRuntimeEndpointPath(
+        const path21 = normalizeFarmPluginRuntimeEndpointPath(
           endpoint.path,
           `Farm plugin "${plugin.name}" runtime endpoint`
         );
         if (typeof endpoint.handler !== "function") {
           throw new TypeError(
-            `Farm plugin "${plugin.name}" runtime endpoint ${path18} requires a handler`
+            `Farm plugin "${plugin.name}" runtime endpoint ${path21} requires a handler`
           );
         }
-        const owner = owners.get(path18);
+        const owner = owners.get(path21);
         if (owner) {
           throw new Error(
-            `Farm plugin runtime endpoint ${path18} from "${plugin.name}" conflicts with "${owner}"`
+            `Farm plugin runtime endpoint ${path21} from "${plugin.name}" conflicts with "${owner}"`
           );
         }
-        owners.set(path18, plugin.name);
-        endpoints.push({ plugin, endpoint, path: path18 });
+        owners.set(path21, plugin.name);
+        endpoints.push({ plugin, endpoint, path: path21 });
       }
     }
     this.runtimeEndpoints = endpoints;
@@ -8870,8 +8900,8 @@ __name(isArrayIndex, "isArrayIndex");
 import fs7 from "fs";
 import path13 from "path";
 var ADAPTER_EXTENSIONS = ["ts", "tsx", "js", "jsx", "mts", "mjs"];
-function resolveFarmClientCacheAdapterEntry(root, cache) {
-  const client = cache?.client;
+function resolveFarmClientCacheAdapterEntry(root, cache2) {
+  const client = cache2?.client;
   const adapter = client?.adapter;
   if (adapter === void 0) return void 0;
   if (typeof adapter !== "string" || adapter.trim().length === 0) {
@@ -8913,6 +8943,233 @@ function generateClientCachePersistenceCode(entry) {
 }
 __name(generateClientCachePersistenceCode, "generateClientCachePersistenceCode");
 
+// src/app-manifest-packages.ts
+import fs8 from "fs";
+import path14 from "path";
+var FARM_PACKAGE = /^@(?:farm\.js|farming-labs)\/[a-z0-9._-]+$/;
+function resolveFarmAppPackages(root) {
+  let manifest;
+  try {
+    manifest = JSON.parse(fs8.readFileSync(path14.join(root, "package.json"), "utf8"));
+  } catch {
+    return {};
+  }
+  const names = new Set(
+    [
+      ...Object.keys(manifest.dependencies ?? {}),
+      ...Object.keys(manifest.devDependencies ?? {})
+    ].filter((name) => FARM_PACKAGE.test(name))
+  );
+  const versions = {};
+  for (const name of [...names].sort()) {
+    for (let dir = root; ; ) {
+      try {
+        const { version } = JSON.parse(
+          fs8.readFileSync(path14.join(dir, "node_modules", name, "package.json"), "utf8")
+        );
+        if (typeof version === "string" && /^[0-9A-Za-z.+-]{1,64}$/.test(version))
+          versions[name] = version;
+        break;
+      } catch {
+        const parent = path14.dirname(dir);
+        if (parent === dir) break;
+        dir = parent;
+      }
+    }
+  }
+  return versions;
+}
+__name(resolveFarmAppPackages, "resolveFarmAppPackages");
+
+// src/app-manifest-webmcp.ts
+import fs9 from "fs";
+import { createRequire as createRequire2 } from "module";
+import path15 from "path";
+import fg from "fast-glob";
+var WEBMCP_CLIENT = "@farm.js/webmcp/client";
+var DEFINERS = /* @__PURE__ */ new Set(["defineWebMCPTool", "registerWebMCPTool", "registerWebMCPTools"]);
+var HINTS = ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"];
+var MAX_TOOLS = 500;
+var MAX_SCHEMA_BYTES = 64 * 1024;
+var NOT_STATIC = /* @__PURE__ */ Symbol("not static");
+var LANGS = {
+  ts: "ts",
+  mts: "ts",
+  cts: "ts",
+  tsx: "tsx",
+  js: "jsx",
+  mjs: "jsx",
+  cjs: "jsx",
+  jsx: "jsx"
+};
+var parseAst;
+function staticValue(node) {
+  if (!node) return NOT_STATIC;
+  switch (node.type) {
+    case "Literal":
+      return node.regex || typeof node.value === "bigint" ? NOT_STATIC : node.value;
+    case "TemplateLiteral":
+      return node.expressions.length ? NOT_STATIC : node.quasis[0].value.cooked;
+    case "UnaryExpression":
+      if (node.operator === "-" && node.argument.type === "Literal" && typeof node.argument.value === "number")
+        return -node.argument.value;
+      return NOT_STATIC;
+    case "ArrayExpression": {
+      const items = [];
+      for (const element of node.elements) {
+        const value = staticValue(element);
+        if (value === NOT_STATIC) return NOT_STATIC;
+        items.push(value);
+      }
+      return items;
+    }
+    case "ObjectExpression": {
+      const object = {};
+      for (const property2 of node.properties) {
+        if (property2.type !== "Property" || property2.computed || property2.kind !== "init")
+          return NOT_STATIC;
+        const key = property2.key.type === "Identifier" ? property2.key.name : staticValue(property2.key);
+        if (typeof key !== "string" || key === "__proto__") return NOT_STATIC;
+        const value = staticValue(property2.value);
+        if (value === NOT_STATIC) return NOT_STATIC;
+        object[key] = value;
+      }
+      return object;
+    }
+    case "TSAsExpression":
+    case "TSSatisfiesExpression":
+    case "TSNonNullExpression":
+    case "ParenthesizedExpression":
+      return staticValue(node.expression);
+    default:
+      return NOT_STATIC;
+  }
+}
+__name(staticValue, "staticValue");
+function property(object, name) {
+  return object.properties.find(
+    (entry) => entry.type === "Property" && !entry.computed && (entry.key.name === name || entry.key.value === name)
+  )?.value;
+}
+__name(property, "property");
+function toolFromObject(object) {
+  const name = staticValue(property(object, "name"));
+  if (typeof name !== "string" || !/^[A-Za-z0-9_.-]{1,128}$/.test(name)) return null;
+  const text = /* @__PURE__ */ __name((key) => {
+    const value = staticValue(property(object, key));
+    return typeof value === "string" && value.length <= 2e3 ? value : void 0;
+  }, "text");
+  const annotations = staticValue(property(object, "annotations"));
+  const hints = annotations && typeof annotations === "object" && !Array.isArray(annotations) ? Object.fromEntries(
+    HINTS.filter(
+      (hint) => typeof annotations[hint] === "boolean"
+    ).map((hint) => [hint, annotations[hint]])
+  ) : {};
+  const schemaNode = property(object, "inputSchema");
+  const schema = staticValue(schemaNode);
+  const literal = schema !== NOT_STATIC && schema !== null && typeof schema === "object" && !Array.isArray(schema) && Buffer.byteLength(JSON.stringify(schema)) <= MAX_SCHEMA_BYTES;
+  const title = text("title");
+  const description = text("description");
+  return {
+    name,
+    ...title ? { title } : {},
+    ...description ? { description } : {},
+    ...hints,
+    ...literal ? { inputSchema: schema } : {},
+    inputSchemaSource: literal ? "literal" : schemaNode ? "computed" : "none"
+  };
+}
+__name(toolFromObject, "toolFromObject");
+function findFarmWebMCPTools(code, filename = "module.tsx") {
+  if (!code.includes(WEBMCP_CLIENT)) return [];
+  const lang = LANGS[path15.extname(filename).slice(1)] ?? "tsx";
+  parseAst ?? (parseAst = createRequire2(typeof __filename === "string" ? __filename : import.meta.url)(
+    "rolldown/parseAst"
+  ).parseAst);
+  let program;
+  try {
+    program = parseAst(code, { lang });
+  } catch {
+    return [];
+  }
+  const locals = /* @__PURE__ */ new Map();
+  for (const statement of program.body) {
+    if (statement.type !== "ImportDeclaration" || statement.source.value !== WEBMCP_CLIENT)
+      continue;
+    for (const specifier of statement.specifiers) {
+      const imported = specifier.imported?.name ?? specifier.imported?.value;
+      if (specifier.type === "ImportSpecifier" && DEFINERS.has(imported))
+        locals.set(specifier.local.name, imported);
+    }
+  }
+  if (!locals.size) return [];
+  const found = [];
+  const visit = /* @__PURE__ */ __name((node) => {
+    if (!node || typeof node !== "object") return;
+    if (Array.isArray(node)) return node.forEach(visit);
+    const current = node;
+    if (current.type === "CallExpression" && current.callee.type === "Identifier") {
+      const definer = locals.get(current.callee.name);
+      const [argument] = current.arguments;
+      if (definer && argument) {
+        const objects = definer === "registerWebMCPTools" ? argument.type === "ArrayExpression" ? argument.elements.filter(
+          (element) => element?.type === "ObjectExpression"
+        ) : [] : argument.type === "ObjectExpression" ? [argument] : [];
+        for (const object of objects) {
+          const tool = toolFromObject(object);
+          if (tool) found.push({ start: object.start, tool });
+        }
+      }
+    }
+    for (const [key, value] of Object.entries(current))
+      if (key !== "type" && value && typeof value === "object") visit(value);
+  }, "visit");
+  visit(program.body);
+  return found.sort((a, b) => a.start - b.start).map(({ tool }) => tool);
+}
+__name(findFarmWebMCPTools, "findFarmWebMCPTools");
+var cache = /* @__PURE__ */ new Map();
+function collectFarmWebMCPTools(root, srcDir = "src") {
+  const base = path15.resolve(root, srcDir);
+  let files;
+  try {
+    files = fg.sync("**/*.{ts,tsx,js,jsx,mts,mjs,cts,cjs}", {
+      cwd: base,
+      absolute: true,
+      ignore: ["**/node_modules/**", "**/*.d.ts", "**/*.{test,spec}.*", "**/__tests__/**"]
+    });
+  } catch {
+    return [];
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const tools = [];
+  for (const file of files.sort()) {
+    let mtimeMs;
+    try {
+      mtimeMs = fs9.statSync(file).mtimeMs;
+    } catch {
+      continue;
+    }
+    let entry = cache.get(file);
+    if (!entry || entry.mtimeMs !== mtimeMs) {
+      let code = "";
+      try {
+        code = fs9.readFileSync(file, "utf8");
+      } catch {
+      }
+      entry = { mtimeMs, tools: findFarmWebMCPTools(code, file) };
+      cache.set(file, entry);
+    }
+    for (const tool of entry.tools) {
+      if (seen.has(tool.name) || tools.length >= MAX_TOOLS) continue;
+      seen.add(tool.name);
+      tools.push(tool);
+    }
+  }
+  return tools;
+}
+__name(collectFarmWebMCPTools, "collectFarmWebMCPTools");
+
 // src/document-layout-client.ts
 var FARM_LAYOUT_ELEMENT_CLIENT_SOURCE = String.raw`
 const farmLayoutComponentKeys = new WeakMap();
@@ -8979,14 +9236,136 @@ function createFarmLayoutElement(Component, pattern, children, params) {
 }
 `;
 
+// src/dev-preview-guard.ts
+import { promises as fsp } from "fs";
+import * as path16 from "path";
+var FARM_PREVIEW_REQUEST_HEADER = "x-farm-preview";
+function isFarmPreviewTunnelRequest(headers) {
+  return headers[FARM_PREVIEW_REQUEST_HEADER] !== void 0;
+}
+__name(isFarmPreviewTunnelRequest, "isFarmPreviewTunnelRequest");
+var VITE_DEFAULT_FS_DENY = [
+  ".env",
+  ".env.*",
+  "*.{crt,pem,key,p12,pfx,cer,der}",
+  ".npmrc",
+  ".yarnrc.yml",
+  "**/.git/**"
+];
+function getFarmDevFsDeny(userDeny, options) {
+  const deny = ["**/.farm/**"];
+  const root = path16.resolve(options.root || process.cwd());
+  const distDir = options.distDir ? path16.resolve(root, options.distDir) : void 0;
+  const relativeDistDir = distDir ? path16.relative(root, distDir) : "";
+  if (distDir && relativeDistDir && relativeDistDir !== ".farm" && relativeDistDir !== ".." && !relativeDistDir.startsWith(`..${path16.sep}`) && !/[*?[\]{}()!+@]/.test(distDir)) {
+    deny.push(`${distDir.replace(/\\/g, "/")}/**`);
+  }
+  return userDeny ? deny : [...VITE_DEFAULT_FS_DENY, ...deny];
+}
+__name(getFarmDevFsDeny, "getFarmDevFsDeny");
+var SOURCE_QUERY_FLAGS = ["raw", "inline", "url"];
+var MODULE_EXTENSION = /\.(?:[cm]?[jt]sx?|vue|svelte|astro|mdx?|css|scss|sass|less|styl|stylus|pcss|postcss|sss)$/i;
+var ASSET_EXTENSION = /\.(?:apng|bmp|png|jpe?g|jfif|pjpeg|pjp|gif|svg|ico|webp|avif|cur|jxl|mp4|webm|ogg|mp3|wav|flac|aac|opus|mov|m4a|vtt|woff2?|eot|ttf|otf|webmanifest|pdf|txt|wasm)$/i;
+var INTERNAL_PREFIXES = ["/@vite/", "/@farm/", "/@react-refresh", "/__vite_ping"];
+var DEVELOPER_ONLY_PREFIXES = ["/__farm/devtools", "/__open-in-editor"];
+function createFarmDevPreviewGuard(server, options) {
+  return /* @__PURE__ */ __name(async function farmDevPreviewGuard(req, res, next) {
+    if (!isFarmPreviewTunnelRequest(req.headers)) return next();
+    try {
+      if (await isAllowedPreviewRequest(server, options, req)) return next();
+    } catch {
+    }
+    res.statusCode = 403;
+    res.setHeader("Content-Type", "text/plain; charset=utf-8");
+    res.setHeader("Cache-Control", "no-store");
+    res.end("This development file is not available through farm preview.");
+  }, "farmDevPreviewGuard");
+}
+__name(createFarmDevPreviewGuard, "createFarmDevPreviewGuard");
+async function isAllowedPreviewRequest(server, options, req) {
+  const rawUrl = req.url || "/";
+  const queryIndex = rawUrl.indexOf("?");
+  const rawPath = queryIndex === -1 ? rawUrl : rawUrl.slice(0, queryIndex);
+  const query = new URLSearchParams(queryIndex === -1 ? "" : rawUrl.slice(queryIndex + 1));
+  let pathname = decodeURI(rawPath);
+  const base = (server.config.base || "/").replace(/\/$/, "");
+  if (base.startsWith("/") && (pathname === base || pathname.startsWith(`${base}/`))) {
+    pathname = pathname.slice(base.length) || "/";
+  }
+  const url = `${pathname}${queryIndex === -1 ? "" : rawUrl.slice(queryIndex)}`;
+  if (DEVELOPER_ONLY_PREFIXES.some((prefix) => pathname.startsWith(prefix))) return false;
+  if (INTERNAL_PREFIXES.some((prefix) => pathname.startsWith(prefix))) return true;
+  const method = (req.method || "GET").toUpperCase();
+  if (method !== "GET" && method !== "HEAD") return true;
+  const file = await resolveRequestedFile(server, pathname);
+  if (!file) return true;
+  const client = server.environments?.client;
+  const inClientGraph = /* @__PURE__ */ __name(async () => Boolean(await client?.moduleGraph.getModuleByUrl(url)), "inClientGraph");
+  if (SOURCE_QUERY_FLAGS.some((flag) => query.has(flag))) return inClientGraph();
+  if (await inClientGraph()) return true;
+  if (file.split(path16.sep).includes("node_modules")) return true;
+  if (server.config.publicDir && isInside(await realpathOr(server.config.publicDir), file)) {
+    return true;
+  }
+  const isModuleOrAsset = MODULE_EXTENSION.test(file) || ASSET_EXTENSION.test(file) || query.has("import");
+  if (!isModuleOrAsset) return false;
+  for (const source of options.getSourceRoots()) {
+    const sourceRoot = await realpathOr(source.root);
+    const sourceDir = await realpathOr(path16.resolve(source.root, source.srcDir));
+    if (sourceRoot === sourceDir && path16.dirname(file) === sourceDir) continue;
+    if (isInside(sourceDir, file)) return true;
+  }
+  return false;
+}
+__name(isAllowedPreviewRequest, "isAllowedPreviewRequest");
+async function resolveRequestedFile(server, pathname) {
+  let candidate;
+  if (pathname.startsWith("/@fs/")) {
+    candidate = pathname.slice("/@fs".length);
+    if (/^\/[A-Za-z]:/.test(candidate)) candidate = candidate.slice(1);
+  } else {
+    let id = pathname;
+    if (id.startsWith("/@id/")) {
+      id = id.slice("/@id/".length).replace(/^__x00__/, "\0");
+      if (id.startsWith("\0")) return void 0;
+    }
+    const resolved = await server.environments?.client?.pluginContainer.resolveId(id, void 0);
+    const resolvedId = resolved?.id.replace(/[?#].*$/, "");
+    if (resolvedId && path16.isAbsolute(resolvedId)) candidate = resolvedId;
+    else if (resolvedId?.startsWith("\0")) return void 0;
+    else if (id.startsWith("/")) candidate = path16.join(server.config.root, id);
+  }
+  if (!candidate) return void 0;
+  try {
+    const real = await fsp.realpath(candidate);
+    return (await fsp.stat(real)).isFile() ? real : void 0;
+  } catch {
+    return void 0;
+  }
+}
+__name(resolveRequestedFile, "resolveRequestedFile");
+async function realpathOr(directory) {
+  try {
+    return await fsp.realpath(directory);
+  } catch {
+    return path16.resolve(directory);
+  }
+}
+__name(realpathOr, "realpathOr");
+function isInside(directory, file) {
+  const relative4 = path16.relative(directory, file);
+  return relative4 !== "" && relative4 !== ".." && !relative4.startsWith(`..${path16.sep}`) && !path16.isAbsolute(relative4);
+}
+__name(isInside, "isInside");
+
 // src/vite.ts
-import * as fs9 from "fs";
-import * as path17 from "path";
+import * as fs11 from "fs";
+import * as path20 from "path";
 import { pathToFileURL as pathToFileURL3 } from "url";
 
 // src/dev-static.ts
-import * as fs8 from "fs";
-import * as path14 from "path";
+import * as fs10 from "fs";
+import * as path17 from "path";
 function shouldBypassFarmRouterForDottedPath(pathname, routeManager, baseDirs, generatedPaths = []) {
   if (!pathname.includes(".") || pathname.endsWith(".html")) return false;
   const matchesAppRoute = Boolean(
@@ -9033,11 +9412,11 @@ function devServableFileExists(pathname, baseDirs) {
   if (!relativePathname) return false;
   for (const baseDir of baseDirs) {
     if (typeof baseDir !== "string" || baseDir.length === 0) continue;
-    const resolvedBase = path14.resolve(baseDir);
-    const candidate = path14.resolve(resolvedBase, relativePathname);
-    if (!candidate.startsWith(resolvedBase + path14.sep)) continue;
+    const resolvedBase = path17.resolve(baseDir);
+    const candidate = path17.resolve(resolvedBase, relativePathname);
+    if (!candidate.startsWith(resolvedBase + path17.sep)) continue;
     try {
-      if (fs8.existsSync(candidate) && fs8.statSync(candidate).isFile()) {
+      if (fs10.existsSync(candidate) && fs10.statSync(candidate).isFile()) {
         return true;
       }
     } catch {
@@ -9146,13 +9525,13 @@ function readProcessEnvKey(node) {
   if (!object || object.type !== "MemberExpression" || object.object?.type !== "Identifier" || object.object.name !== "process" || object.property?.name !== "env") {
     return void 0;
   }
-  const property = node.property;
-  if (!property) return void 0;
-  if (!node.computed && property.type === "Identifier") {
-    return property.name;
+  const property2 = node.property;
+  if (!property2) return void 0;
+  if (!node.computed && property2.type === "Identifier") {
+    return property2.name;
   }
-  if (node.computed && property.type === "Literal") {
-    const value = property.value;
+  if (node.computed && property2.type === "Literal") {
+    const value = property2.value;
     return typeof value === "string" ? value : void 0;
   }
   return void 0;
@@ -9182,7 +9561,7 @@ __name(formatClientBoundaryWarning, "formatClientBoundaryWarning");
 
 // src/image-vite.ts
 import { readFile as readFile3 } from "fs/promises";
-import path15 from "path";
+import path18 from "path";
 import { imageSize as imageSize2 } from "image-size";
 var FARM_IMAGE_ID_PREFIX = "\0farm:image:";
 var STATIC_IMAGE_RE = /\.(?:avif|gif|jpe?g|png|webp)$/i;
@@ -9250,7 +9629,7 @@ async function createBlurDataURL(bytes) {
 __name(createBlurDataURL, "createBlurDataURL");
 
 // src/server/vite-config.ts
-import path16 from "path";
+import path19 from "path";
 var FARM_CLIENT_ENTRY_PATTERN = "**/{page,layout,loading,error,not-found,default}.{js,jsx,ts,tsx}";
 var FARM_CLIENT_OPTIMIZE_DEPS_INCLUDE = [
   "react",
@@ -9274,9 +9653,9 @@ function getFarmClientOptimizeDepsInclude(renderer) {
 }
 __name(getFarmClientOptimizeDepsInclude, "getFarmClientOptimizeDepsInclude");
 function createFarmClientOptimizeDepsEntries(projectRoot, appDirectories) {
-  const resolvedProjectRoot = path16.resolve(projectRoot);
+  const resolvedProjectRoot = path19.resolve(projectRoot);
   return appDirectories.map((appDirectory) => {
-    const relativeAppDirectory = path16.relative(resolvedProjectRoot, path16.resolve(appDirectory)).replace(/\\/g, "/");
+    const relativeAppDirectory = path19.relative(resolvedProjectRoot, path19.resolve(appDirectory)).replace(/\\/g, "/");
     const prefix = relativeAppDirectory || ".";
     return `${prefix}/${FARM_CLIENT_ENTRY_PATTERN}`;
   });
@@ -9300,7 +9679,7 @@ function createFarmClientOptimizeDepsConfig(entries, renderer) {
 __name(createFarmClientOptimizeDepsConfig, "createFarmClientOptimizeDepsConfig");
 function createFarmSourceAlias(projectRoot, srcDir = "src") {
   return {
-    "@": path16.resolve(projectRoot, srcDir)
+    "@": path19.resolve(projectRoot, srcDir)
   };
 }
 __name(createFarmSourceAlias, "createFarmSourceAlias");
@@ -9550,7 +9929,7 @@ function loadFarmWorkflowsDevRuntime() {
 }
 __name(loadFarmWorkflowsDevRuntime, "loadFarmWorkflowsDevRuntime");
 function loadFarmDevtoolsSnapshotRuntime() {
-  return import("./devtools-THVNPI2M.mjs");
+  return import("./devtools-RNXCTS4R.mjs");
 }
 __name(loadFarmDevtoolsSnapshotRuntime, "loadFarmDevtoolsSnapshotRuntime");
 function loadFarmDevtoolsUIRuntime() {
@@ -9961,11 +10340,11 @@ function isPotentialProgrammaticRouteSourceFile(normalizedFile, srcDirSlug) {
 }
 __name(isPotentialProgrammaticRouteSourceFile, "isPotentialProgrammaticRouteSourceFile");
 function fileContainsProgrammaticPageRoute(file) {
-  if (!fs9.existsSync(file)) {
+  if (!fs11.existsSync(file)) {
     return false;
   }
   try {
-    return scanProgrammaticPagePaths(fs9.readFileSync(file, "utf8")).length > 0;
+    return scanProgrammaticPagePaths(fs11.readFileSync(file, "utf8")).length > 0;
   } catch {
     return false;
   }
@@ -9973,7 +10352,7 @@ function fileContainsProgrammaticPageRoute(file) {
 __name(fileContainsProgrammaticPageRoute, "fileContainsProgrammaticPageRoute");
 function rewriteEarlySsrRelativeImports(options) {
   const cleanId = options.id.split("?", 1)[0];
-  if (!path17.isAbsolute(cleanId) || cleanId.replace(/\\/g, "/").includes("/node_modules/")) {
+  if (!path20.isAbsolute(cleanId) || cleanId.replace(/\\/g, "/").includes("/node_modules/")) {
     return null;
   }
   const replacements = [];
@@ -9993,7 +10372,7 @@ function rewriteEarlySsrRelativeImports(options) {
     const suffixIndex = source.value.search(/[?#]/);
     const sourcePath = suffixIndex === -1 ? source.value : source.value.slice(0, suffixIndex);
     const suffix = suffixIndex === -1 ? "" : source.value.slice(suffixIndex);
-    const resolvedPath = path17.resolve(path17.dirname(cleanId), sourcePath);
+    const resolvedPath = path20.resolve(path20.dirname(cleanId), sourcePath);
     replacements.push({
       start: source.start,
       end: source.end,
@@ -10111,8 +10490,8 @@ __name(isFarmModuleAstNode, "isFarmModuleAstNode");
 function isFarmConfigFile(file, root) {
   const normalized = file.replace(/\\/g, "/");
   const rootSlug = root.replace(/\\/g, "/").replace(/\/+$/, "");
-  const relative3 = normalized.startsWith(`${rootSlug}/`) ? normalized.slice(rootSlug.length + 1) : normalized;
-  return FARM_CONFIG_FILENAMES.has(relative3);
+  const relative4 = normalized.startsWith(`${rootSlug}/`) ? normalized.slice(rootSlug.length + 1) : normalized;
+  return FARM_CONFIG_FILENAMES.has(relative4);
 }
 __name(isFarmConfigFile, "isFarmConfigFile");
 var warnedClientBoundaryIds = /* @__PURE__ */ new Set();
@@ -10189,13 +10568,12 @@ function farmPlugin(options = {}, initialPluginManager) {
         resolve: {
           alias: { ...layerAliases, ...sourceAlias }
         },
-        ...layerRoots.length ? {
-          server: {
-            fs: {
-              allow: [path17.resolve(options.root || process.cwd()), ...layerRoots]
-            }
+        server: {
+          fs: {
+            ...layerRoots.length ? { allow: [path20.resolve(options.root || process.cwd()), ...layerRoots] } : {},
+            deny: getFarmDevFsDeny(userConfig.server?.fs?.deny, options)
           }
-        } : {}
+        }
       };
     },
     async configResolved(config) {
@@ -10212,6 +10590,11 @@ function farmPlugin(options = {}, initialPluginManager) {
       }
     },
     async configureServer(viteServer) {
+      viteServer.middlewares.use(
+        createFarmDevPreviewGuard(viteServer, {
+          getSourceRoots: /* @__PURE__ */ __name(() => getFarmSourceRoots(farmApp?.getConfig() ?? options), "getSourceRoots")
+        })
+      );
       if (typeof fontImports.configureServer === "function") {
         await fontImports.configureServer.call(this, viteServer);
       }
@@ -10233,6 +10616,7 @@ function farmPlugin(options = {}, initialPluginManager) {
       );
       await farmApp.initialize();
       const farmConfig = farmApp.getConfig();
+      let farmAppPackages;
       if (farmConfig.agent?.noindexPreviews) {
         server.middlewares.use((_req, res, next) => {
           if (isFarmPreviewDeploymentEnvironment(process.env)) {
@@ -10262,7 +10646,7 @@ function farmPlugin(options = {}, initialPluginManager) {
         });
       }
       const sourceRoots = getFarmSourceRoots(farmConfig);
-      server.watcher.add(sourceRoots.map((source) => path17.join(source.root, source.srcDir)));
+      server.watcher.add(sourceRoots.map((source) => path20.join(source.root, source.srcDir)));
       if (farmConfig.i18n.enabled) {
         server.watcher.add(
           farmConfig.i18n.locales.map(
@@ -10277,7 +10661,7 @@ function farmPlugin(options = {}, initialPluginManager) {
         ...farmDocsDevRuntime?.getFarmDocsRouteTypeEntries(farmConfig.docs) ?? []
       ], "getExtraRouteTypes");
       const appDirSlugs = sourceRoots.map(
-        (source) => path17.join(source.root, source.srcDir, "app").replace(/\\/g, "/")
+        (source) => path20.join(source.root, source.srcDir, "app").replace(/\\/g, "/")
       );
       const generateTypeArtifacts = /* @__PURE__ */ __name(async (reason, selection = ALL_TYPE_ARTIFACTS, log = false) => {
         try {
@@ -10318,7 +10702,7 @@ function farmPlugin(options = {}, initialPluginManager) {
       }, "generateTypeArtifacts");
       await generateTypeArtifacts("startup");
       const srcDirSlugs = sourceRoots.map(
-        (source) => path17.join(source.root, source.srcDir).replace(/\\/g, "/")
+        (source) => path20.join(source.root, source.srcDir).replace(/\\/g, "/")
       );
       const layerConfigFiles = new Set(
         farmConfig.layers.map((layer) => layer.configFile?.replace(/\\/g, "/")).filter((file) => Boolean(file))
@@ -10457,7 +10841,7 @@ function farmPlugin(options = {}, initialPluginManager) {
       await apiRouteManager.discoverRoutes();
       let discoveredWorkflows = [];
       const hasWorkflowDirectory = workflowConfig.enabled && workflowConfig.dirs.some(
-        (dir) => fs9.existsSync(path17.isAbsolute(dir) ? dir : path17.join(farmConfig.root, dir))
+        (dir) => fs11.existsSync(path20.isAbsolute(dir) ? dir : path20.join(farmConfig.root, dir))
       );
       if (hasWorkflowDirectory) {
         const { createFarmWorkflowRequestHandler, discoverFarmWorkflows } = await loadFarmWorkflowsDevRuntime();
@@ -10491,7 +10875,8 @@ function farmPlugin(options = {}, initialPluginManager) {
         server,
         farmConfig.middleware,
         farmConfig.i18n,
-        farmConfig.server
+        farmConfig.server,
+        apiServerBasePath
       );
       await middlewareManager.discover();
       if (pm) {
@@ -10671,7 +11056,8 @@ window.__FARM_MANIFEST__ = ${inlineValue({
       const farmDocsAPIHandler = farmDocsDevRuntime && !farmDocsDevRuntime.hasFarmDocsRuntimeAdapter(farmConfig.docs) ? farmDocsDevRuntime.createFarmDocsAPIHandler({
         rootDir: farmConfig.root,
         srcDir: farmConfig.srcDir,
-        docs: farmConfig.docs
+        docs: farmConfig.docs,
+        diagnostics: true
       }) : null;
       const farmDocsFontAssets = new Map(
         farmDocsFontAssetList.map(({ url, sourcePath }) => [url, sourcePath])
@@ -10739,12 +11125,12 @@ window.__FARM_MANIFEST__ = ${inlineValue({
             }
           }
           const farmDocsFontPath = farmDocsFontAssets.get(requestPathname);
-          if ((requestMethod === "GET" || requestMethod === "HEAD") && farmDocsFontPath && fs9.existsSync(farmDocsFontPath)) {
+          if ((requestMethod === "GET" || requestMethod === "HEAD") && farmDocsFontPath && fs11.existsSync(farmDocsFontPath)) {
             res.statusCode = 200;
             res.setHeader("Content-Type", "font/woff2");
             res.setHeader("Cache-Control", "public, max-age=31536000, immutable");
             if (requestMethod === "HEAD") res.end();
-            else fs9.createReadStream(farmDocsFontPath).pipe(res);
+            else fs11.createReadStream(farmDocsFontPath).pipe(res);
             return;
           }
           if (requestMethod === "GET" && (requestPathname === FARM_DEVTOOLS_PATH || requestPathname === `${FARM_DEVTOOLS_PATH}.json`)) {
@@ -10846,6 +11232,23 @@ window.__FARM_MANIFEST__ = ${inlineValue({
             const docsHandler = openAPIManager.getDocsRouteHandler(parsedRequestUrl.origin);
             return docsHandler(req, res);
           }
+          if (stripFarmBasePath(requestPathname, farmConfig.basePath) === FARM_APP_MANIFEST_PATH) {
+            farmAppPackages ?? (farmAppPackages = resolveFarmAppPackages(farmConfig.root ?? process.cwd()));
+            const manifest = await createFarmAppManifestResponse(
+              new Request(parsedRequestUrl, { method: requestMethod }),
+              resolveFarmAppManifestInput(farmConfig, {
+                build: "development",
+                packages: farmAppPackages,
+                // Read again on each request; unchanged files come from a cache.
+                webmcpTools: farmConfig.plugins?.some(({ name }) => name === "farm:webmcp") ? collectFarmWebMCPTools(farmConfig.root ?? process.cwd(), farmConfig.srcDir) : []
+              }),
+              { development: true }
+            );
+            if (manifest) {
+              await sendWebResponse(res, manifest);
+              return;
+            }
+          }
           if (options.agent?.apiCatalog && stripFarmBasePath(requestPathname, farmConfig.basePath) === FARM_API_CATALOG_PATH) {
             if (await runAppMiddlewareForContentRoute()) return;
             await sendWebResponse(
@@ -10900,10 +11303,16 @@ window.__FARM_MANIFEST__ = ${inlineValue({
                 return null;
               }
               return {
-                source: await fs9.promises.readFile(sourcePath, "utf8"),
+                source: await fs11.promises.readFile(sourcePath, "utf8"),
                 filePath: sourcePath
               };
-            }, "resolveSource")
+            }, "resolveSource"),
+            // The anonymous check goes through this server, so its guards and
+            // middleware see the page's own path, as in production.
+            renderPage: /* @__PURE__ */ __name(async (request2) => fetch(request2, {
+              redirect: "manual",
+              signal: res.destroyed ? AbortSignal.abort() : createFarmNodeRequestAbortSignal(req, res)
+            }), "renderPage")
           });
           if (markdownSourceResponse) {
             if (await runAppMiddlewareForContentRoute()) return;
@@ -11987,7 +12396,7 @@ export const manifest = getManifest();
         const root = currentConfig.root || server?.config.root || process.cwd();
         const cleanId = id.split("?", 1)[0];
         const selectedIsolatedModules = options.isolatedClientBoundaryModules ?? farmApp?.getRouteManager().getIsolatedClientBoundaryModules(root);
-        const selectedForIsolatedHydration = selectedIsolatedModules?.has(path17.resolve(cleanId)) === true;
+        const selectedForIsolatedHydration = selectedIsolatedModules?.has(path20.resolve(cleanId)) === true;
         if (isReactRenderer(resolveFarmRenderer(currentConfig.renderer)) && selectedForIsolatedHydration && isIsolatableClientBoundarySource(clientBoundarySource)) {
           isolatedModuleReference = toViteModuleId(cleanId, root);
           const transformedBoundary = transformIsolatedClientBoundaryModule({
@@ -12078,8 +12487,8 @@ if (import.meta.hot) {
         }
         logger.info(`Found ${ssgPages.length} SSG pages, ${ssrRoutes.length} SSR routes`);
         logger.info("Pre-rendering SSG pages...");
-        const outDir = path17.join(server?.config.root || process.cwd(), options.outDir || "dist");
-        const clientDir = path17.join(outDir, "client");
+        const outDir = path20.join(server?.config.root || process.cwd(), options.outDir || "dist");
+        const clientDir = path20.join(outDir, "client");
         for (const page of ssgPages) {
           try {
             const staticRequest = new Request(new URL(page.urlPath, "http://farm.static"));
@@ -12131,9 +12540,9 @@ if (import.meta.hot) {
   <script type="module" src="/assets/client.js"></script>
 </body>
 </html>`;
-              const outputPath = page.urlPath === "/" ? path17.join(clientDir, "index.html") : path17.join(clientDir, page.urlPath + ".html");
-              fs9.mkdirSync(path17.dirname(outputPath), { recursive: true });
-              fs9.writeFileSync(outputPath, fullHtml);
+              const outputPath = page.urlPath === "/" ? path20.join(clientDir, "index.html") : path20.join(clientDir, page.urlPath + ".html");
+              fs11.mkdirSync(path20.dirname(outputPath), { recursive: true });
+              fs11.writeFileSync(outputPath, fullHtml);
               const revalidateInfo = page.revalidate ? ` (revalidate: ${page.revalidate}s)` : "";
               logger.success(`  \u2713 ${page.urlPath}${revalidateInfo}`);
             });
@@ -12141,8 +12550,8 @@ if (import.meta.hot) {
             logger.error(`  \u2717 ${page.urlPath}: ${error}`);
           }
         }
-        const manifestPath = path17.join(outDir, "__ssg_manifest.json");
-        fs9.writeFileSync(
+        const manifestPath = path20.join(outDir, "__ssg_manifest.json");
+        fs11.writeFileSync(
           manifestPath,
           JSON.stringify(
             ssgPages.map((p) => ({
@@ -12185,9 +12594,9 @@ if (import.meta.hot) {
         server2.ws.send({ type: "full-reload", path: "*" });
         return [];
       }
-      const currentSrcRoot = currentFarmConfig ? getFarmSourceRoots(currentFarmConfig).map((source) => path17.join(source.root, source.srcDir).replace(/\\/g, "/")).find((sourceRoot) => normalizedFile.startsWith(`${sourceRoot}/`)) || null : null;
+      const currentSrcRoot = currentFarmConfig ? getFarmSourceRoots(currentFarmConfig).map((source) => path20.join(source.root, source.srcDir).replace(/\\/g, "/")).find((sourceRoot) => normalizedFile.startsWith(`${sourceRoot}/`)) || null : null;
       if (currentSrcRoot && normalizedFile.startsWith(`${currentSrcRoot}/`) && isProgrammaticRoutesFileName(normalizedFile)) {
-        logUpdate("PAGE", `updated ${path17.basename(file)}`);
+        logUpdate("PAGE", `updated ${path20.basename(file)}`);
         for (const mod of modules) {
           server2.moduleGraph.invalidateModule(mod);
         }
@@ -12318,10 +12727,10 @@ function createPageDataMiddlewareRequest(req, target) {
 __name(createPageDataMiddlewareRequest, "createPageDataMiddlewareRequest");
 function resolveDevelopmentRoot(farmRoot, viteRoot) {
   if (!farmRoot) return viteRoot;
-  if (path17.resolve(farmRoot) === path17.resolve(viteRoot)) return farmRoot;
+  if (path20.resolve(farmRoot) === path20.resolve(viteRoot)) return farmRoot;
   try {
-    if (fs9.realpathSync(farmRoot) === fs9.realpathSync(viteRoot)) {
-      return path17.resolve(viteRoot);
+    if (fs11.realpathSync(farmRoot) === fs11.realpathSync(viteRoot)) {
+      return path20.resolve(viteRoot);
     }
   } catch {
   }
@@ -12715,7 +13124,7 @@ ${isolatedHydrationImport}
 import { installChunkErrorRecovery, SPARouter } from '@farm.js/core/client'
 import { createClientPluginManager } from '@farm.js/core/plugin/client'
 import { isFarmRouteActive } from '@farm.js/core/router'
-import { replayFarmQueuedInteraction, scheduleFarmIslandHydration, searchParamsToObject, setFarmBasePath, setFarmTrailingSlashPreference, stripFarmBasePath } from '@farm.js/core/internal/client-runtime'
+import { isFarmBlockedNavigationURL, replayFarmQueuedInteraction, scheduleFarmIslandHydration, searchParamsToObject, setFarmBasePath, setFarmTrailingSlashPreference, stripFarmBasePath } from '@farm.js/core/internal/client-runtime'
 import { reviveDeferredData } from '@farm.js/core/deferred'
 import {
   createFarmDeploymentMismatchError,
@@ -12886,6 +13295,7 @@ class LegacyManifestSPARouter {
   async navigate(href, options = {}) {
     const { replace = false, scroll = true } = options;
     const url = new URL(href, window.location.origin);
+    if (isFarmBlockedNavigationURL(url)) return;
     const pathname = url.pathname;
     const search = url.search;
     const fullPath = pathname + search;
@@ -13615,6 +14025,12 @@ async function tryHydrateImportedPage(
       return false;
     }
 
+    if (PageComponent.__farmServerProps === true && existingProps?.__farmRoutePropsResolved !== true) {
+      // This route's guard and data run only on the server, and it did not
+      // resolve them (it rendered error or notFound UI): keep its HTML.
+      return false;
+    }
+
     currentPageComponent = PageComponent;
     currentPageProps = await buildRouteComponentProps(
       pageModule,
@@ -14243,7 +14659,7 @@ function generateClientManifest(bundle) {
 __name(generateClientManifest, "generateClientManifest");
 async function defineConfig(config = {}) {
   const tailwindVitePlugin = await loadTailwindVitePlugin();
-  const appRoot = path17.resolve(config.root || process.cwd());
+  const appRoot = path20.resolve(config.root || process.cwd());
   if (config.extends?.length) {
     const { config: layeredConfig } = await import("./layers-BRQF5ETU.mjs").then(
       ({ resolveFarmLayers }) => resolveFarmLayers(config, {
@@ -14487,6 +14903,8 @@ export {
   generateFarmClientPluginEntryCode,
   resolveFarmClientCacheAdapterEntry,
   generateClientCachePersistenceCode,
+  resolveFarmAppPackages,
+  collectFarmWebMCPTools,
   FARM_LAYOUT_ELEMENT_CLIENT_SOURCE,
   createFarmClientOptimizeDepsEntries,
   createFarmClientOptimizeDepsConfig,