@farm.js/core 0.1.31 → 0.1.34

package/dist/{chunk-YVGAEAA5.cjs → chunk-P64MIF5B.cjs}

@@ -3,7 +3,7 @@
 var _chunkOWOUTKIJcjs = require('./chunk-OWOUTKIJ.cjs');
 
 
-var _chunkCUMINO7Zcjs = require('./chunk-CUMINO7Z.cjs');
+var _chunkZHPHJPQPcjs = require('./chunk-ZHPHJPQP.cjs');
 
 
 var _chunkJ63ZH5OQcjs = require('./chunk-J63ZH5OQ.cjs');
@@ -15,8 +15,14 @@ var _chunkOI6CMLWXcjs = require('./chunk-OI6CMLWX.cjs');
 var _chunkTKJZFIMLcjs = require('./chunk-TKJZFIML.cjs');
 
 
+var _chunkM64YUMA4cjs = require('./chunk-M64YUMA4.cjs');
 
-var _chunkWPYFSQKKcjs = require('./chunk-WPYFSQKK.cjs');
+
+
+var _chunkKNBBQHO2cjs = require('./chunk-KNBBQHO2.cjs');
+
+
+var _chunkODBZYBABcjs = require('./chunk-ODBZYBAB.cjs');
 
 
 var _chunkBIDYX3SLcjs = require('./chunk-BIDYX3SL.cjs');
@@ -210,7 +216,7 @@ function createFarmMetadataRouteResponse(kind, value, routeModule = {}, options
   if (isResponse(value)) {
     return method === "HEAD" ? _chunkTKJZFIMLcjs.omitFarmResponseBody.call(void 0, value) : value;
   }
-  const body = kind === "sitemap" ? serializeSitemap(value) : kind === "robots" ? serializeRobots(value) : kind === "llms" || kind === "llms-full" ? _chunkCUMINO7Zcjs.serializeFarmLlmsTxt.call(void 0, value) : serializeManifest(value);
+  const body = kind === "sitemap" ? serializeSitemap(value) : kind === "robots" ? serializeRobots(value) : kind === "llms" || kind === "llms-full" ? _chunkZHPHJPQPcjs.serializeFarmLlmsTxt.call(void 0, value) : serializeManifest(value);
   const contentType = kind === "sitemap" ? "application/xml; charset=utf-8" : kind === "robots" || kind === "llms" || kind === "llms-full" ? "text/plain; charset=utf-8" : "application/manifest+json; charset=utf-8";
   return new Response(method === "HEAD" ? null : body, {
     headers: {
@@ -462,9 +468,9 @@ function resolveFarmApiCatalogInput(config) {
     basePath: config.basePath,
     apiBaseURL: _nullishCoalesce(_optionalChain([config, 'access', _5 => _5.openapi, 'optionalAccess', _6 => _6.servers, 'optionalAccess', _7 => _7[0], 'optionalAccess', _8 => _8.url]), () => ( config.api.baseURL)),
     openapi: _optionalChain([config, 'access', _9 => _9.openapi, 'optionalAccess', _10 => _10.enabled]) ? { specRoute: config.openapi.specRoute, route: config.openapi.route } : void 0,
-    mcpPath: mcp ? _chunkWPYFSQKKcjs.resolveFarmAPIServerRoutePath.call(void 0, 
+    mcpPath: mcp ? _chunkKNBBQHO2cjs.resolveFarmAPIServerRoutePath.call(void 0, 
       _nullishCoalesce(mcp.path, () => ( "/api/mcp")),
-      _chunkWPYFSQKKcjs.resolveFarmAPIServerBasePath.call(void 0, config.api)
+      _chunkKNBBQHO2cjs.resolveFarmAPIServerBasePath.call(void 0, config.api)
     ) : void 0
   };
 }
@@ -514,6 +520,148 @@ function createFarmApiCatalogResponse(method, input, request) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmApiCatalogResponse, "createFarmApiCatalogResponse");
 
+// src/app-manifest.ts
+var FARM_APP_MANIFEST_PATH = "/.well-known/farmjs";
+var FARM_INFRA_SIGNATURE_HEADER = "farmjs-infra-signature";
+var SIGNED_PURPOSE = "farmjs-manifest-v1";
+var SIGNATURE_WINDOW_SECONDS = 300;
+function resolveFarmAppManifestInput(config, extra) {
+  const llms = _optionalChain([config, 'access', _15 => _15.agent, 'optionalAccess', _16 => _16.llmsTxt]);
+  const plugins = (_nullishCoalesce(config.plugins, () => ( []))).map(({ name }) => name);
+  const webmcp = plugins.includes("farm:webmcp");
+  return {
+    renderer: _nullishCoalesce(_optionalChain([config, 'access', _17 => _17.renderer, 'optionalAccess', _18 => _18.name]), () => ( "react")),
+    basePath: config.basePath || "/",
+    build: extra.build,
+    packages: extra.packages,
+    webmcp: { enabled: webmcp, tools: webmcp ? _nullishCoalesce(extra.webmcpTools, () => ( [])) : [] },
+    integrations: Object.entries(_nullishCoalesce(config.integrations, () => ( {}))).flatMap(([key, integration]) => {
+      const category = _nullishCoalesce(_optionalChain([integration, 'optionalAccess', _19 => _19.category]), () => ( _optionalChain([integration, 'optionalAccess', _20 => _20.slot])));
+      return integration && category && integration.type ? [{ key, category, type: integration.type }] : [];
+    }),
+    agent: {
+      apiCatalog: _optionalChain([config, 'access', _21 => _21.agent, 'optionalAccess', _22 => _22.apiCatalog]) ? "/.well-known/api-catalog" : null,
+      llmsTxt: llms === true || typeof llms === "object" && llms !== null && llms.enabled !== false,
+      openapi: _optionalChain([config, 'access', _23 => _23.openapi, 'optionalAccess', _24 => _24.enabled]) && config.openapi.specRoute ? config.openapi.specRoute : null
+    },
+    plugins,
+    analytics: config.analytics !== false
+  };
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, resolveFarmAppManifestInput, "resolveFarmAppManifestInput");
+var SOURCES = {
+  endpoint: "endpoint",
+  standalone: "defineTool",
+  serverFunction: "serverFunction"
+};
+function createFarmAppManifest(input) {
+  return {
+    schemaVersion: 1,
+    app: {
+      farm: _chunkODBZYBABcjs.FARM_VERSION,
+      renderer: input.renderer,
+      basePath: input.basePath,
+      build: input.build
+    },
+    packages: input.packages,
+    mcp: {
+      servers: _chunkM64YUMA4cjs._listFarmMCPCatalogs.call(void 0, ).map(({ server, tools, details }) => ({
+        name: server.name,
+        version: server.version,
+        path: server.path,
+        resources: [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _25 => _25.resources]), () => ( []))],
+        prompts: [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _26 => _26.prompts]), () => ( []))],
+        tools: tools.map((tool) => {
+          const schemas = _optionalChain([details, 'optionalAccess', _27 => _27.schemas, 'optionalAccess', _28 => _28[tool.name]]);
+          const hints = Object.fromEntries(
+            ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
+          );
+          return {
+            name: tool.name,
+            ...tool.title ? { title: tool.title } : {},
+            ...tool.description ? { description: tool.description } : {},
+            source: SOURCES[tool.kind],
+            ...tool.kind === "endpoint" ? { method: tool.method, path: tool.path } : {},
+            ...hints,
+            ...schemas ? { inputSchema: schemas.input } : {},
+            ..._optionalChain([schemas, 'optionalAccess', _29 => _29.output]) ? { outputSchema: schemas.output } : {}
+          };
+        })
+      }))
+    },
+    webmcp: input.webmcp,
+    integrations: input.integrations,
+    agent: input.agent,
+    plugins: input.plugins
+  };
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, createFarmAppManifest, "createFarmAppManifest");
+var encoder = new TextEncoder();
+var hex = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (bytes) => [...new Uint8Array(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join(""), "hex");
+async function sha256Hex(value) {
+  return hex(await crypto.subtle.digest("SHA-256", encoder.encode(value)));
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, sha256Hex, "sha256Hex");
+async function hmacHex(secret, message) {
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  return hex(await crypto.subtle.sign("HMAC", key, encoder.encode(message)));
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, hmacHex, "hmacHex");
+function sameHex(a, b) {
+  if (a.length !== b.length) return false;
+  let difference = 0;
+  for (let index = 0; index < a.length; index++)
+    difference |= a.charCodeAt(index) ^ b.charCodeAt(index);
+  return difference === 0;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, sameHex, "sameHex");
+async function verifyFarmInfraManifestSignature(header, key, now = Date.now()) {
+  if (!header || header.length > 2048) return false;
+  const parts = header.split(",").map((part) => part.trim());
+  const timestamp = Number(
+    _optionalChain([/^t=(\d{1,12})$/, 'access', _30 => _30.exec, 'call', _31 => _31(_nullishCoalesce(parts.find((part) => part.startsWith("t=")), () => ( ""))), 'optionalAccess', _32 => _32[1]])
+  );
+  if (!Number.isSafeInteger(timestamp)) return false;
+  if (Math.abs(now / 1e3 - timestamp) > SIGNATURE_WINDOW_SECONDS) return false;
+  const signatures = parts.filter((part) => part.startsWith("v1=")).map((part) => part.slice(3)).filter((value) => /^[0-9a-f]{64}$/.test(value));
+  if (!signatures.length || signatures.length > 8) return false;
+  const expected = await hmacHex(await sha256Hex(key), `${SIGNED_PURPOSE}
+${timestamp}`);
+  return signatures.some((signature) => sameHex(signature, expected));
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, verifyFarmInfraManifestSignature, "verifyFarmInfraManifestSignature");
+function processEnv() {
+  return _nullishCoalesce(_optionalChain([globalThis, 'access', _33 => _33.process, 'optionalAccess', _34 => _34.env]), () => ( {}));
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, processEnv, "processEnv");
+async function createFarmAppManifestResponse(request, input, options) {
+  if (request.method !== "GET" && request.method !== "HEAD") return null;
+  if (!options.development) {
+    const key = _optionalChain([(_nullishCoalesce(options.env, () => ( processEnv()))), 'access', _35 => _35.FARMJS_API_KEY, 'optionalAccess', _36 => _36.trim, 'call', _37 => _37()]);
+    if (!input.analytics || !key) return null;
+    const signed = await verifyFarmInfraManifestSignature(
+      request.headers.get(FARM_INFRA_SIGNATURE_HEADER),
+      key
+    );
+    if (!signed)
+      return new Response(null, { status: 404, headers: { "cache-control": "no-store" } });
+  }
+  const body = JSON.stringify(createFarmAppManifest(input));
+  return new Response(request.method === "HEAD" ? null : body, {
+    headers: { "content-type": "application/json", "cache-control": "private, no-store" }
+  });
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, createFarmAppManifestResponse, "createFarmAppManifestResponse");
+
+
+
+
 
 
 
@@ -527,4 +675,4 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmApiCatalogResponse, "createFarmA
 
 
 
-exports.renderFarmLocaleAlternateLinks = renderFarmLocaleAlternateLinks; exports.createLateRedirectRecovery = createLateRedirectRecovery; exports.createLateNotFoundRecovery = createLateNotFoundRecovery; exports.createFarmMetadataRouteResponse = createFarmMetadataRouteResponse; exports.resolveDefaultErrorStatus = resolveDefaultErrorStatus; exports.getDefaultErrorStatusText = getDefaultErrorStatusText; exports.createDefaultErrorMarkup = createDefaultErrorMarkup; exports.createFarmThemeDocumentParts = createFarmThemeDocumentParts; exports.applyFarmThemeDocument = applyFarmThemeDocument; exports.FARM_API_CATALOG_PATH = FARM_API_CATALOG_PATH; exports.resolveFarmApiCatalogInput = resolveFarmApiCatalogInput; exports.createFarmApiCatalogResponse = createFarmApiCatalogResponse;
+exports.renderFarmLocaleAlternateLinks = renderFarmLocaleAlternateLinks; exports.createLateRedirectRecovery = createLateRedirectRecovery; exports.createLateNotFoundRecovery = createLateNotFoundRecovery; exports.createFarmMetadataRouteResponse = createFarmMetadataRouteResponse; exports.resolveDefaultErrorStatus = resolveDefaultErrorStatus; exports.getDefaultErrorStatusText = getDefaultErrorStatusText; exports.createDefaultErrorMarkup = createDefaultErrorMarkup; exports.createFarmThemeDocumentParts = createFarmThemeDocumentParts; exports.applyFarmThemeDocument = applyFarmThemeDocument; exports.FARM_API_CATALOG_PATH = FARM_API_CATALOG_PATH; exports.resolveFarmApiCatalogInput = resolveFarmApiCatalogInput; exports.createFarmApiCatalogResponse = createFarmApiCatalogResponse; exports.FARM_APP_MANIFEST_PATH = FARM_APP_MANIFEST_PATH; exports.resolveFarmAppManifestInput = resolveFarmAppManifestInput; exports.createFarmAppManifestResponse = createFarmAppManifestResponse;

package/dist/{chunk-DFLLARUK.cjs → chunk-PQDFUSXD.cjs}

@@ -29,7 +29,7 @@ var _chunkPSV6XKPOcjs = require('./chunk-PSV6XKPO.cjs');
 
 
 
-var _chunkCUMINO7Zcjs = require('./chunk-CUMINO7Z.cjs');
+var _chunkZHPHJPQPcjs = require('./chunk-ZHPHJPQP.cjs');
 
 
 var _chunkYFPGHF5Fcjs = require('./chunk-YFPGHF5F.cjs');
@@ -48,7 +48,7 @@ var _chunkVEKFLAQMcjs = require('./chunk-VEKFLAQM.cjs');
 var _chunkOHY2ZWUGcjs = require('./chunk-OHY2ZWUG.cjs');
 
 
-var _chunkKJ2TIHZZcjs = require('./chunk-KJ2TIHZZ.cjs');
+var _chunkXXJU7FCCcjs = require('./chunk-XXJU7FCC.cjs');
 
 
 var _chunkUYIHRDE4cjs = require('./chunk-UYIHRDE4.cjs');
@@ -60,13 +60,13 @@ var _chunkMPEYMSCFcjs = require('./chunk-MPEYMSCF.cjs');
 var _chunkOI6CMLWXcjs = require('./chunk-OI6CMLWX.cjs');
 
 
-var _chunkZ5HIWVDPcjs = require('./chunk-Z5HIWVDP.cjs');
+var _chunkTDFPACVXcjs = require('./chunk-TDFPACVX.cjs');
 
 
 var _chunkEM6SBQKMcjs = require('./chunk-EM6SBQKM.cjs');
 
 
-var _chunkHBTUGXHScjs = require('./chunk-HBTUGXHS.cjs');
+var _chunkHLJ6MBUZcjs = require('./chunk-HLJ6MBUZ.cjs');
 
 
 var _chunk5QIKR7RRcjs = require('./chunk-5QIKR7RR.cjs');
@@ -135,11 +135,11 @@ function resolveFarmAgentConfig(input, context = {}) {
   const jsonLd = _optionalChain([input, 'optionalAccess', _ => _.jsonLd]);
   return {
     jsonLd: jsonLd === void 0 ? { ...DEFAULT_JSON_LD } : !jsonLd ? false : jsonLd === true ? {} : jsonLd,
-    noindexPreviews: _chunkCUMINO7Zcjs.resolveFarmNoindexPreviews.call(void 0, _optionalChain([input, 'optionalAccess', _2 => _2.noindexPreviews])),
+    noindexPreviews: _chunkZHPHJPQPcjs.resolveFarmNoindexPreviews.call(void 0, _optionalChain([input, 'optionalAccess', _2 => _2.noindexPreviews])),
     // The docs engine answers /llms.txt with its own pages; a default here would replace it.
     // llms-full.txt renders every listed page, so it stays opt-in.
-    llmsTxt: _chunkCUMINO7Zcjs.resolveFarmLlmsTxtConfig.call(void 0, _nullishCoalesce(_optionalChain([input, 'optionalAccess', _3 => _3.llmsTxt]), () => ( (context.docs ? false : { full: false })))),
-    crawlers: _chunkCUMINO7Zcjs.resolveFarmAgentCrawlers.call(void 0, _optionalChain([input, 'optionalAccess', _4 => _4.crawlers])),
+    llmsTxt: _chunkZHPHJPQPcjs.resolveFarmLlmsTxtConfig.call(void 0, _nullishCoalesce(_optionalChain([input, 'optionalAccess', _3 => _3.llmsTxt]), () => ( (context.docs ? false : { full: false })))),
+    crawlers: _chunkZHPHJPQPcjs.resolveFarmAgentCrawlers.call(void 0, _optionalChain([input, 'optionalAccess', _4 => _4.crawlers])),
     apiCatalog: resolveFarmApiCatalogEnabled(_optionalChain([input, 'optionalAccess', _5 => _5.apiCatalog]))
   };
 }
@@ -688,9 +688,9 @@ async function resolveConfig(userConfig, mode) {
   const routeRules = _chunkQ5B3KJBPcjs.normalizeRouteRules.call(void 0, userConfig.routeRules);
   const routeRuleRedirects = _chunkQ5B3KJBPcjs.routeRulesToRedirects.call(void 0, routeRules);
   const routeRuleHeaders = _chunkQ5B3KJBPcjs.routeRulesToHeaders.call(void 0, routeRules);
-  const security = _chunkCUMINO7Zcjs.resolveFarmSecurityConfig.call(void 0, userConfig.security);
-  const securityHeader = _chunkCUMINO7Zcjs.getFarmSecurityHeader.call(void 0, security);
-  if (_chunkCUMINO7Zcjs.farmCspBlocksFrameworkInlineScripts.call(void 0, security)) {
+  const security = _chunkZHPHJPQPcjs.resolveFarmSecurityConfig.call(void 0, userConfig.security);
+  const securityHeader = _chunkZHPHJPQPcjs.getFarmSecurityHeader.call(void 0, security);
+  if (_chunkZHPHJPQPcjs.farmCspBlocksFrameworkInlineScripts.call(void 0, security)) {
     _chunk5QIKR7RRcjs.logger.warn(
       "security.csp blocks the inline scripts Farm injects for theming and hydration. Set security.csp.nonce to true for managed dynamic nonces and prerendered hashes, or make the governing script directive allow 'unsafe-inline' without a nonce, hash, or 'strict-dynamic' source."
     );
@@ -700,7 +700,7 @@ async function resolveConfig(userConfig, mode) {
   const srcDir = userConfig.srcDir || "src";
   _chunk6MVFL3R5cjs.setFarmProjectSourceDir.call(void 0, root, srcDir);
   const docs = await resolveDocsConfig(userConfig.docs, { root, srcDir });
-  const md = _chunkKJ2TIHZZcjs.resolveMarkdownConfig.call(void 0, userConfig.md);
+  const md = _chunkXXJU7FCCcjs.resolveMarkdownConfig.call(void 0, userConfig.md);
   const mdx = _chunkOHY2ZWUGcjs.resolveMdxConfig.call(void 0, userConfig.mdx);
   const env = _chunkVEKFLAQMcjs.resolveEnv.call(void 0, userConfig.env, process.env);
   _chunkVEKFLAQMcjs.setEnv.call(void 0, env);
@@ -776,7 +776,7 @@ async function resolveConfig(userConfig, mode) {
     },
     agent: resolveFarmAgentConfig(userConfig.agent, { docs: docs.enabled }),
     plugins: [
-      ..._chunkZ5HIWVDPcjs.resolveIntegrationPlugins.call(void 0, integrations),
+      ..._chunkTDFPACVXcjs.resolveIntegrationPlugins.call(void 0, integrations),
       ...nativeMCPPlugin ? [nativeMCPPlugin] : [],
       ...userConfig.plugins || []
     ],
@@ -791,10 +791,10 @@ async function resolveConfig(userConfig, mode) {
     ], "headers"),
     routeRules,
     images: _chunkYFPGHF5Fcjs.resolveFarmImageConfig.call(void 0, userConfig.images),
-    performance: _chunkCUMINO7Zcjs.resolveFarmPerformanceConfig.call(void 0, userConfig.performance),
+    performance: _chunkZHPHJPQPcjs.resolveFarmPerformanceConfig.call(void 0, userConfig.performance),
     theme: _chunkOI6CMLWXcjs.resolveFarmThemeConfig.call(void 0, userConfig.theme, basePath),
     publicDir: userConfig.publicDir || "public",
-    i18n: _chunkHBTUGXHScjs.resolveFarmI18nConfig.call(void 0, userConfig.i18n, { root, mode, basePath }),
+    i18n: _chunkHLJ6MBUZcjs.resolveFarmI18nConfig.call(void 0, userConfig.i18n, { root, mode, basePath }),
     openapi,
     middleware: userConfig.middleware || {},
     notFound: userConfig.notFound || {},

package/dist/{chunk-F6XEGFHO.mjs → chunk-PXKIEXZD.mjs}

@@ -217,6 +217,7 @@ function parseIpv6Hextets(value) {
     if (!octets) return null;
     tail = [octets[0] << 8 | octets[1], octets[2] << 8 | octets[3]];
     text = text.slice(0, lastColon);
+    if (text.endsWith(":")) text += ":";
     if (text === "") return null;
   }
   const compressionParts = text.split("::");
@@ -264,6 +265,15 @@ function isPrivateImageAddress(address) {
     if (embedsIpv4 && (h6 !== 0 || h7 !== 0)) {
       return isPrivateIpv4([h6 >> 8, h6 & 255, h7 >> 8, h7 & 255]);
     }
+    if (h0 === 100 && h1 === 65435) {
+      if (h2 === 1) return true;
+      if (h2 === 0 && h3 === 0 && h4 === 0 && h5 === 0) {
+        return isPrivateIpv4([h6 >> 8, h6 & 255, h7 >> 8, h7 & 255]);
+      }
+    }
+    if (h0 === 8194) {
+      return isPrivateIpv4([h1 >> 8, h1 & 255, h2 >> 8, h2 & 255]);
+    }
     if (zeroPrefix && h4 === 0 && h5 === 0 && h6 === 0 && (h7 === 0 || h7 === 1)) return true;
     if ((h0 & 65024) === 64512) return true;
     if ((h0 & 65472) === 65152) return true;

package/dist/{chunk-S5GDHOE4.mjs → chunk-PZNL3WEG.mjs}

@@ -11,7 +11,7 @@ import {
 import {
   createRouteDataCacheTag,
   getFarmDataCache
-} from "./chunk-IV6CQY7O.mjs";
+} from "./chunk-MSSFIQGM.mjs";
 import {
   createFarmCacheKey
 } from "./chunk-CNOQY6Z7.mjs";
@@ -282,7 +282,7 @@ function createRouteModuleFromProgrammaticPage(route, rendererRuntime) {
     default: createProgrammaticPageComponent(route, rendererRuntime),
     ...normalizeFarmRouteRuntimeConfig(route, `Route "${route.path}"`)
   };
-  if (route.params || route.search || route.guard || route.data) {
+  if (route.params || route.search || hasProgrammaticServerProps(route)) {
     mod.__farmRouteSchemas = {
       params: route.params,
       search: getProgrammaticRouteSearchSchema(route.search)
@@ -346,7 +346,7 @@ function scanProgrammaticPagePaths(source) {
 }
 __name(scanProgrammaticPagePaths, "scanProgrammaticPagePaths");
 function createProgrammaticPageComponent(route, rendererRuntime) {
-  if (!route.params && !route.search && !route.guard && !route.data && !route.pending && !route.error && !route.notFound) {
+  if (!route.params && !route.search && !hasProgrammaticServerProps(route) && !route.pending && !route.error && !route.notFound) {
     return route.component;
   }
   const createElement = /* @__PURE__ */ __name((...args) => {
@@ -391,7 +391,22 @@ function createProgrammaticPageComponent(route, rendererRuntime) {
         createElement(PageContent, props)
       );
     }, "FarmProgrammaticPage");
-    return markFunctionComponent(FarmProgrammaticPage);
+    return markClientStrippedPage(
+      route,
+      markFunctionComponent(FarmProgrammaticPage)
+    );
+  }
+  if (getClientStrippedServerHooks(route)) {
+    const FarmProgrammaticClientPage = /* @__PURE__ */ __name(function FarmProgrammaticClientPage2(props) {
+      if (!isProgrammaticRoutePropsResolved(props)) {
+        throw createClientStrippedRouteError(route);
+      }
+      return createElement(Component, stripProgrammaticRoutePropsMarker(props));
+    }, "FarmProgrammaticClientPage");
+    return markClientStrippedPage(
+      route,
+      markFunctionComponent(FarmProgrammaticClientPage)
+    );
   }
   const FarmProgrammaticPageContent = /* @__PURE__ */ __name(async function FarmProgrammaticPageContent2(props) {
     try {
@@ -410,9 +425,34 @@ function createProgrammaticPageComponent(route, rendererRuntime) {
       throw error;
     }
   }, "FarmProgrammaticPageContent");
-  return markFunctionComponent(FarmProgrammaticPageContent);
+  return markClientStrippedPage(
+    route,
+    markFunctionComponent(FarmProgrammaticPageContent)
+  );
 }
 __name(createProgrammaticPageComponent, "createProgrammaticPageComponent");
+function getClientStrippedServerHooks(route) {
+  const hooks = route.__farmServerHooks;
+  return Array.isArray(hooks) && hooks.length > 0 ? hooks : void 0;
+}
+__name(getClientStrippedServerHooks, "getClientStrippedServerHooks");
+function createClientStrippedRouteError(route) {
+  return new Error(
+    `Route "${route.path}" resolves its ${getClientStrippedServerHooks(route).join(" and ")} on the server; the browser can only render it with server-resolved props.`
+  );
+}
+__name(createClientStrippedRouteError, "createClientStrippedRouteError");
+function hasProgrammaticServerProps(route) {
+  return Boolean(route.guard || route.data || getClientStrippedServerHooks(route));
+}
+__name(hasProgrammaticServerProps, "hasProgrammaticServerProps");
+function markClientStrippedPage(route, component) {
+  if (getClientStrippedServerHooks(route) && typeof component === "function") {
+    Object.defineProperty(component, "__farmServerProps", { value: true });
+  }
+  return component;
+}
+__name(markClientStrippedPage, "markClientStrippedPage");
 function readProgrammaticRouteProps(route, props, resources) {
   if (isProgrammaticRoutePropsResolved(props)) {
     return props;
@@ -479,6 +519,9 @@ async function resolveProgrammaticRouteProps(route, props) {
     props.path,
     route.path
   );
+  if (getClientStrippedServerHooks(route)) {
+    throw createClientStrippedRouteError(route);
+  }
   const routeContextValue = getFarmRouteContext(props);
   const pluginContext = props.context;
   const baseProps = {

package/dist/{chunk-FV45CKBC.mjs → chunk-QCFBDFRS.mjs}

@@ -1,6 +1,6 @@
 import {
   resolveFarmI18nMessagePath
-} from "./chunk-YMCXWPWK.mjs";
+} from "./chunk-BCMSYSN2.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";

package/dist/{chunk-75BRBIFP.cjs → chunk-QCVE2OCI.cjs}

@@ -1,5 +1,8 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
+var _chunkAI7QMY7Ocjs = require('./chunk-AI7QMY7O.cjs');
+
+
 
 var _chunkBIDYX3SLcjs = require('./chunk-BIDYX3SL.cjs');
 
@@ -139,16 +142,10 @@ function readCookie(header, name) {
   for (const part of header.split(";")) {
     const separator = part.indexOf("=");
     if (separator < 0) continue;
-    let key;
-    try {
-      key = decodeURIComponent(part.slice(0, separator).trim());
-    } catch (e2) {
-      continue;
-    }
-    if (key !== name) continue;
+    if (_chunkAI7QMY7Ocjs.decodeCookieName.call(void 0, part.slice(0, separator).trim()) !== name) continue;
     try {
       return decodeURIComponent(part.slice(separator + 1).trim());
-    } catch (e3) {
+    } catch (e2) {
       return part.slice(separator + 1).trim();
     }
   }

package/dist/{chunk-6ZCMSZ5U.mjs → chunk-QE6VAKLT.mjs}

@@ -2,7 +2,7 @@ import {
   attachRevalidationListeners,
   createServerQueryCallKey,
   fetchServerQuery
-} from "./chunk-2N5PX3LS.mjs";
+} from "./chunk-LYV44OIR.mjs";
 import {
   getFarmClientDataCache
 } from "./chunk-XNPDONUH.mjs";

package/dist/{chunk-75DYEVXI.cjs → chunk-QGYRXFU2.cjs}

@@ -4,7 +4,7 @@
 
 
 
-var _chunkES4B2IXWcjs = require('./chunk-ES4B2IXW.cjs');
+var _chunkMOKLYNHVcjs = require('./chunk-MOKLYNHV.cjs');
 
 
 var _chunkSK35NQKKcjs = require('./chunk-SK35NQKK.cjs');
@@ -14,7 +14,7 @@ var _chunkT5CERMEHcjs = require('./chunk-T5CERMEH.cjs');
 
 
 
-var _chunk2SDO73HKcjs = require('./chunk-2SDO73HK.cjs');
+var _chunkYWN746UScjs = require('./chunk-YWN746US.cjs');
 
 
 
@@ -35,7 +35,7 @@ function createServerQuery(options) {
     throw new TypeError("createServerQuery requires a key function");
   }
   const staleTime = normalizeServerQueryStaleTime(options.staleTime);
-  const execute = _chunkES4B2IXWcjs.createServerFn.call(void 0, {
+  const execute = _chunkMOKLYNHVcjs.createServerFn.call(void 0, {
     input: options.input,
     middleware: options.middleware,
     handler: /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, async (context) => {
@@ -45,7 +45,7 @@ function createServerQuery(options) {
       const cacheKey = _chunkNYJMY3JAcjs.createFarmCacheKey.call(void 0, ["route-data", routeKey]);
       const producer = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, async () => {
         const value = await options.handler(context);
-        return _chunkES4B2IXWcjs._parseServerFnSchema.call(void 0, options.output, value, "output", "createServerQuery");
+        return _chunkMOKLYNHVcjs._parseServerFnSchema.call(void 0, options.output, value, "output", "createServerQuery");
       }, "producer");
       let data;
       let updatedAt;
@@ -53,9 +53,9 @@ function createServerQuery(options) {
         data = await dedupeServerQueryRequest(cacheKey, context.request, producer);
         updatedAt = Date.now();
       } else {
-        const cache = _chunk2SDO73HKcjs.getFarmDataCache.call(void 0, );
+        const cache = _chunkYWN746UScjs.getFarmDataCache.call(void 0, );
         data = await cache.getOrSet(cacheKey, producer, {
-          tags: [_chunk2SDO73HKcjs.createRouteDataCacheTag.call(void 0, routeKey)],
+          tags: [_chunkYWN746UScjs.createRouteDataCacheTag.call(void 0, routeKey)],
           revalidate: staleTime === false ? false : staleTime / 1e3
         });
         updatedAt = await _asyncNullishCoalesce(await _asyncOptionalChain([(await cache.getEntryAsync(cacheKey, { allowStale: true })), 'optionalAccess', async _ => _.createdAt]), async () => ( Date.now()));
@@ -90,10 +90,10 @@ function createServerQuery(options) {
       enumerable: false
     }
   });
-  _chunkES4B2IXWcjs._attachServerFunctionDescriptor.call(void 0, 
+  _chunkMOKLYNHVcjs._attachServerFunctionDescriptor.call(void 0, 
     query,
-    _chunkES4B2IXWcjs.createServerFunctionDescriptor.call(void 0, "query", options, async (value) => {
-      const result = await _chunkES4B2IXWcjs._runServerFunctionForCaller.call(void 0, 
+    _chunkMOKLYNHVcjs.createServerFunctionDescriptor.call(void 0, "query", options, async (value) => {
+      const result = await _chunkMOKLYNHVcjs._runServerFunctionForCaller.call(void 0, 
         execute,
         value
       );