@farm.js/core 0.1.34 → 0.1.36

package/dist/internal/production-runtime.d.mts

@@ -1,23 +1,24 @@
 export { _runWithAfterRequest } from '../after.mjs';
-import { aE as FarmMCPCatalogDetails, aO as APIRequestRuntime, aP as ResolvedFarmMCPConfig, J as FarmConfig, $ as FarmContextFactoryInput } from '../client-plugins-CLObcuCq.mjs';
-export { aY as FarmLlmsTxtUserConfig, aZ as ResolvedFarmLlmsTxtConfig, b2 as applyFarmCspNonceToResponse, aS as collectFarmLlmsTxtPages, aR as createFarmAgentRobots, aT as createFarmDefaultLlmsTxt, aW as createFarmLlmsFullRenderer, aU as createFarmLlmsMarkdownReader, aQ as createFarmMetadataRouteResponse, g as getFarmRedirectError, i as isFarmNotFoundError, b as isFarmRedirectError, a_ as manageFarmDocumentPreloads, a$ as manageFarmHtmlPreloads, b0 as manageFarmLinkHeaderPreloads, aV as renderFarmLlmsFullTxt, b1 as reportFarmPreloadWarnings, aX as resolveFarmLlmsTxtConfig, b3 as resolveFarmSecurityConfig } from '../client-plugins-CLObcuCq.mjs';
-export { m as mergeRouteRenderingDirectiveConfig } from '../route-rendering-BG56SzvJ.mjs';
-import { R as ResolvedFarmServerConfig } from '../workflows-CR9ex-gz.mjs';
-export { a as FarmServerConfig, b as bufferFarmRequestBody, c as cloneFarmRequestWithContext, d as createFarmNodeRequestAbortSignal, e as createFarmRequestBodyErrorResponse, m as matchesFarmIfNoneMatch, r as readFarmRequestBody, f as readNodeRequestBody, g as resolveFarmServerConfig } from '../workflows-CR9ex-gz.mjs';
-export { _ as _getRequestReadCount, a as _runWithCurrentRequest, g as getCurrentRequest, r as resolveFarmWebRequestOrigin } from '../request-Be83WafN.mjs';
+import { aJ as FarmMCPCatalogDetails, fN as APIRequestRuntime, bT as ResolvedFarmMCPConfig, aE as FarmMCPServerRegistration, fO as FarmLlmsTxtLink, I as FarmConfig, _ as FarmContextFactoryInput } from '../client-plugins-C3mK9Pol.mjs';
+export { fY as FarmLlmsTxtUserConfig, fZ as ResolvedFarmLlmsTxtConfig, g2 as applyFarmCspNonceToResponse, fS as collectFarmLlmsTxtPages, fQ as createFarmAgentRobots, fT as createFarmDefaultLlmsTxt, fR as createFarmDefaultSitemap, fW as createFarmLlmsFullRenderer, fU as createFarmLlmsMarkdownReader, fP as createFarmMetadataRouteResponse, g as getFarmRedirectError, i as isFarmNotFoundError, b as isFarmRedirectError, f_ as manageFarmDocumentPreloads, f$ as manageFarmHtmlPreloads, g0 as manageFarmLinkHeaderPreloads, aI as registerFarmMCPServer, fV as renderFarmLlmsFullTxt, g1 as reportFarmPreloadWarnings, fX as resolveFarmLlmsTxtConfig, g3 as resolveFarmSecurityConfig } from '../client-plugins-C3mK9Pol.mjs';
+export { m as mergeRouteRenderingDirectiveConfig } from '../route-rendering-f11yh5dp.mjs';
+import { R as ResolvedFarmServerConfig } from '../workflows-jZ4BcdoZ.mjs';
+export { a as FarmServerConfig, y as bufferFarmRequestBody, z as cloneFarmRequestWithContext, A as createFarmNodeRequestAbortSignal, B as createFarmRequestBodyErrorResponse, C as matchesFarmIfNoneMatch, E as readFarmRequestBody, G as readNodeRequestBody, H as resolveFarmServerConfig } from '../workflows-jZ4BcdoZ.mjs';
+export { _ as _getRequestReadCount, a as _runWithCurrentRequest, g as getCurrentRequest, r as resolveFarmWebRequestOrigin } from '../request-CsGARcAw.mjs';
 export { configureFarmCache, createFarmCacheKey, getFarmDataCache, normalizeRevalidatePath } from '../cache.mjs';
-import { g as FarmI18nUserConfig, R as ResolvedFarmI18nConfig } from '../types-Z0aotQ8w.mjs';
-export { c as createFarmLocaleCookie, g as getFarmLocaleVaryHeaders } from '../resolver-DhW0CqZN.mjs';
-import { F as FarmLocalePathConfig } from '../index-a-8Z5kZU.mjs';
-export { l as localizeFarmHref, a as localizeFarmPathname, s as stripFarmLocaleFromPathname } from '../index-a-8Z5kZU.mjs';
-export { a as addMetadataImageReference, b as addMetadataMarkdownAlternate, m as mergeMetadata, r as renderMetadataHead, c as resolveFarmNotFoundMetadata } from '../metadata-2HSU2i_w.mjs';
-export { _ as _runWithMiddlewareContext, b as _runWithMiddlewareData, a as applyProductionMiddlewareHeaders, c as createProductionMiddlewareRunner } from '../production-runtime-CysZl3EV.mjs';
-export { c as configureFarmObservability, e as emitFarmEvent, r as runWithFarmRequestSpan } from '../observability-BupkiN0m.mjs';
+import { k as FarmI18nUserConfig, R as ResolvedFarmI18nConfig } from '../types-CnH8DOqo.mjs';
+export { c as createFarmLocaleCookie, g as getFarmLocaleVaryHeaders } from '../resolver-khasx3fU.mjs';
+import { F as FarmLocalePathConfig } from '../index-BJJfLxJo.mjs';
+export { l as localizeFarmHref, a as localizeFarmPathname, s as stripFarmLocaleFromPathname } from '../index-BJJfLxJo.mjs';
+import { F as FarmDefaultMCPPage } from '../agent-mcp-BVExL8rZ.mjs';
+export { a as addMetadataImageReference, b as addMetadataMarkdownAlternate, g as collectFarmDefaultMCPPages, m as mergeMetadata, d as mergeModuleViewport, r as renderMetadataHead, e as renderViewportHead, h as resolveFarmDefaultMCPServer, f as resolveFarmNotFoundMetadata } from '../agent-mcp-BVExL8rZ.mjs';
+export { _ as _runWithMiddlewareContext, c as _runWithMiddlewareData, e as applyProductionMiddlewareHeaders, d as createProductionMiddlewareRunner } from '../production-runtime-CCeVZXst.mjs';
+export { L as configureFarmObservability, P as emitFarmEvent, Q as runWithFarmRequestSpan } from '../observability-CoXunYhS.mjs';
 export { f as createFarmInstrumentationLifecycle, r as resolveFarmInstrumentationRuntime } from '../instrumentation-runtime-CE06JLHZ.mjs';
 export { _setDefaultFarmThemeConfig, getTheme } from '../theme/server.mjs';
 import { c as FarmThemeRuntime, d as FarmThemeConfig, R as ResolvedFarmThemeConfig, a as FarmThemePreference } from '../types-DQnyD3VD.mjs';
 export { d as applyFarmBasePath, r as resolveFarmTrailingSlashRedirect, s as searchParamsToObject, b as setFarmBasePath, a as setFarmTrailingSlashPreference, c as stripFarmBasePath } from '../base-path-BU16ETmo.mjs';
-export { m as matchFarmPageRoute, p as parseRoutePath } from '../utils-4wVRcpOw.mjs';
+export { m as matchFarmPageRoute, p as parseRoutePath } from '../utils-B9V0S_yL.mjs';
 import 'node:http';
 import '../lifecycle-DK06VuKP.mjs';
 import '../integration-api-0y4FXJpC.mjs';
@@ -35,7 +36,6 @@ import 'unstorage';
 import '../schema.mjs';
 import 'react';
 import '@farming-labs/orm';
-import '../types-DFbjpjXX.mjs';
 import '@farming-labs/docs';
 import 'vite';
 import '../cron.mjs';
@@ -62,18 +62,6 @@ interface FarmAppManifestWebMCPTool {
     inputSchemaSource: "literal" | "computed" | "none";
 }
 
-/**
- * `/.well-known/farmjs`: one document describing a Farm app, so tools can discover it
- * instead of each rebuilding the picture: Farm's version, renderer and packages, the app's
- * MCP servers with every tool (however it was defined) and its schemas, their resources and
- * prompts, its WebMCP browser tools, its integrations, its agent surfaces and its plugins.
- * Never environment values, settings or secrets.
- *
- * Development serves it to anyone on the dev server. Production answers only a request
- * signed for the app's Farm Infra key, so the public never reads the app's internals; any
- * other request gets a 404. Kept free of Node built-ins: Web Crypto only.
- */
-
 type FarmAppManifestToolSource = "endpoint" | "defineTool" | "serverFunction";
 interface FarmAppManifestTool {
     name: string;
@@ -81,7 +69,7 @@ interface FarmAppManifestTool {
     description?: string;
     /** How the app defined it: an API endpoint, `defineTool`, or a server function. */
     source: FarmAppManifestToolSource;
-    /** The endpoint's method and route, for `source: "endpoint"`. */
+    /** The endpoint's method and route, for `source: "endpoint"`. Only in Farm Infra's view. */
     method?: string;
     path?: string;
     readOnlyHint?: boolean;
@@ -108,6 +96,11 @@ interface FarmAppManifest {
             name: string;
             version: string;
             path: string;
+            /**
+             * `"required"` when the server runs `authorize`: an anonymous client lists nothing,
+             * so the public view leaves `tools`, `resources` and `prompts` empty.
+             */
+            authorization: "none" | "required";
             tools: FarmAppManifestTool[];
             resources: NonNullable<ServerDetails["resources"]>;
             prompts: NonNullable<ServerDetails["prompts"]>;
@@ -142,18 +135,30 @@ interface FarmAppManifestInput {
     integrations: FarmAppManifest["integrations"];
     agent: FarmAppManifest["agent"];
     plugins: string[];
-    /** `analytics: false` keeps the production manifest off: the app talks to no Farm Infra. */
+    /**
+     * `analytics: false` turns off Farm Infra's signed view: the app talks to no Farm Infra.
+     * The public manifest is still served; `agent.manifest: false` turns that off.
+     */
     analytics: boolean;
+    /**
+     * The default read-only MCP server (`agent.mcp`) while the app would serve it. Set by the
+     * server at runtime, not serialized: it answers only while no other MCP server is listed.
+     */
+    defaultMCP?: () => {
+        name: string;
+        version: string;
+        path: string;
+    } | undefined;
 }
 type Env = Record<string, string | undefined>;
 /**
- * Answers `/.well-known/farmjs`, or `null` to let the request go on as if Farm served nothing
- * there: methods other than GET and HEAD, and production apps not linked to Farm Infra.
+ * Answers `/.well-known/farmjs.json` for anyone. A request Farm Infra signed for the app's
+ * `FARMJS_API_KEY` gets the full view, unless `analytics` is off; any other read gets the
+ * public one.
  */
-declare function createFarmAppManifestResponse(request: Request, input: FarmAppManifestInput, options: {
-    development: boolean;
+declare function createFarmAppManifestResponse(request: Request, input: FarmAppManifestInput, options?: {
     env?: Env;
-}): Promise<Response | null>;
+}): Promise<Response>;
 
 /**
  * Compare a caller-supplied secret against the configured one without leaking
@@ -170,10 +175,23 @@ declare function createFarmAppManifestResponse(request: Request, input: FarmAppM
  */
 declare function farmSecretsMatch(provided: string, expected: string): boolean;
 
-/** Internal: the production builder owns these immutable, depth-ordered descriptors. */
+/**
+ * Internal: the production builder owns these immutable, depth-ordered descriptors.
+ *
+ * A layout's pattern is its directory, so a route group stays in it (`/(auth)`).
+ * The URL decides whether a layout covers a pathname; a layout inside a group also
+ * needs the selected page to sit in that group. `resolveRouteDirectory` finds that
+ * page's directory, and runs only when such a layout's URL matches.
+ */
 declare function createFarmLayoutSelector<T extends {
     pattern: string;
-}>(layouts: readonly T[]): (pathname: string) => T[];
+}>(layouts: readonly T[], resolveRouteDirectory?: (pathname: string) => string | null | undefined): (pathname: string, routeDirectory?: string | null) => T[];
+
+/**
+ * Whether a page directory sits inside a group scope. A null scope covers every page;
+ * a missing directory (no page matched) is inside no group.
+ */
+declare function isInRouteGroupScope(directory: string | null | undefined, scope: string | null): boolean;
 
 type FarmProductionLifecycleState = "starting" | "ready" | "draining" | "failed" | "closed";
 interface FarmProductionLifecycleOptions {
@@ -259,6 +277,14 @@ interface FarmLocaleAlternateLinkOptions {
  */
 declare function renderFarmLocaleAlternateLinks(pathname: string, config: FarmLocalePathConfig, options?: FarmLocaleAlternateLinkOptions): string;
 
+/**
+ * Start the head with `<meta charset>` and the viewport tags, as Next.js always renders both,
+ * skipping each one the layout's document already writes (a viewport, theme-color, or
+ * color-scheme tag of its own). The charset comes first because browsers only look for it in the
+ * document's first 1024 bytes. The production server uses this same function.
+ */
+declare function ensureFarmDocumentMeta(markup: string, viewport?: string): string;
+
 /**
  * Runtime source that remounts the top-level `mcp` configuration in a built server.
  *
@@ -286,6 +312,60 @@ declare function _isFarmOwnedResponse(response: Response): boolean;
  */
 declare function _withFarmResponseHeaders(response: Response, edit: (headers: Headers) => void): Response;
 
+/**
+ * The protocol side of the default MCP server (`agent.mcp`, see `agent-mcp.ts`): stateless
+ * Streamable HTTP with JSON responses, and three read-only tools over the app's public pages.
+ * A small JSON-RPC implementation rather than the MCP SDK, so apps that never receive an
+ * MCP request carry no SDK.
+ *
+ * Kept free of Node built-ins: the production server runs on edge runtimes too.
+ */
+
+interface FarmDefaultMCPContext {
+    server: {
+        name: string;
+        version: string;
+        title?: string;
+    };
+    /** The app's public pages for this request's origin. */
+    listPages: () => FarmDefaultMCPPage[] | Promise<FarmDefaultMCPPage[]>;
+    /** Reads a Markdown URL anonymously; null when the page does not answer with Markdown. */
+    readMarkdown: (url: string) => Promise<string | null>;
+    basePath?: string;
+}
+/**
+ * Answers one request to the default MCP endpoint: stateless Streamable HTTP, JSON
+ * responses, no sessions, and no server-initiated stream (GET answers 405).
+ */
+declare function handleFarmDefaultMCPRequest(request: Request, context: FarmDefaultMCPContext): Promise<Response>;
+
+interface FarmAiCatalogInput {
+    /** The app's basePath; the catalog lives beneath it, like the API catalog. */
+    basePath?: string;
+    /** The app's public API path, which maps to Farm's canonical `/api`. */
+    apiServerBasePath?: string;
+    /**
+     * The default read-only server (`agent.mcp`), when this app would serve it. It is
+     * listed only while no other MCP server is, the same rule that decides whether it answers.
+     */
+    defaultMCP?: () => (FarmMCPServerRegistration & {
+        path: `/${string}`;
+    }) | undefined;
+}
+/**
+ * The llms.txt links for the app's MCP servers: each endpoint, then the catalog
+ * that lists their cards. Empty when the app mounts no MCP server.
+ */
+declare function listFarmMCPLlmsTxtLinks(origin: string, input?: FarmAiCatalogInput): FarmLlmsTxtLink[];
+/**
+ * Answers `/.well-known/ai-catalog.json`, `/.well-known/ard.json`, and each
+ * `<endpoint>/server-card`, or returns `null` for any other request and when
+ * the app mounts no MCP server, so the request goes on as if Farm served nothing.
+ * Every request passes through here; `requestUrl`, the caller's parse of
+ * `request.url`, saves parsing it again.
+ */
+declare function createFarmAiCatalogResponse(request: Request, input?: FarmAiCatalogInput, requestUrl?: URL): Response | null;
+
 /**
  * `/.well-known/api-catalog` (RFC 9727): a Linkset listing the APIs an app
  * publishes, so an agent that knows only the origin can find the OpenAPI
@@ -384,4 +464,4 @@ declare function appendFarmRedirectQuery(destination: string, search: string): s
 
 declare function appendFarmLinkHeader(headers: Headers, value: string): void;
 
-export { _isFarmOwnedResponse, _markFarmOwnedResponse, _runWithAPIRequestRuntime, _withFarmResponseHeaders, appendFarmLinkHeader, appendFarmRedirectQuery, applyFarmPreviewRobotsTag, applyFarmThemeDocument, compareRouteSpecificity, createDefaultErrorMarkup, createFarmApiCatalogResponse, createFarmAppManifestResponse, createFarmLayoutSelector, createFarmLegacyRequest, createFarmProductionLifecycle, createFarmThemeDocumentParts, createLateNotFoundRecovery, createLateRedirectRecovery, farmSecretsMatch, generateNativeMCPPluginSource, getDefaultErrorStatusText, getRoutePatternSpecificity, renderFarmLegacyErrorHtml, renderFarmLegacyHtml, renderFarmLocaleAlternateLinks, resolveDefaultErrorStatus, resolveFarmI18nConfig, resolveFarmPreviewDeployment, resolveFarmRouteContext, serializeFarmInlineValue, withFarmRouteContext };
+export { _isFarmOwnedResponse, _markFarmOwnedResponse, _runWithAPIRequestRuntime, _withFarmResponseHeaders, appendFarmLinkHeader, appendFarmRedirectQuery, applyFarmPreviewRobotsTag, applyFarmThemeDocument, compareRouteSpecificity, createDefaultErrorMarkup, createFarmAiCatalogResponse, createFarmApiCatalogResponse, createFarmAppManifestResponse, createFarmLayoutSelector, createFarmLegacyRequest, createFarmProductionLifecycle, createFarmThemeDocumentParts, createLateNotFoundRecovery, createLateRedirectRecovery, ensureFarmDocumentMeta, farmSecretsMatch, generateNativeMCPPluginSource, getDefaultErrorStatusText, getRoutePatternSpecificity, handleFarmDefaultMCPRequest, isInRouteGroupScope as isInFarmRouteGroupScope, listFarmMCPLlmsTxtLinks, renderFarmLegacyErrorHtml, renderFarmLegacyHtml, renderFarmLocaleAlternateLinks, resolveDefaultErrorStatus, resolveFarmI18nConfig, resolveFarmPreviewDeployment, resolveFarmRouteContext, serializeFarmInlineValue, withFarmRouteContext };

package/dist/internal/production-runtime.d.ts

@@ -1,23 +1,24 @@
 export { _runWithAfterRequest } from '../after.js';
-import { aE as FarmMCPCatalogDetails, aO as APIRequestRuntime, aP as ResolvedFarmMCPConfig, J as FarmConfig, $ as FarmContextFactoryInput } from '../client-plugins-DZjHC4Mi.js';
-export { aY as FarmLlmsTxtUserConfig, aZ as ResolvedFarmLlmsTxtConfig, b2 as applyFarmCspNonceToResponse, aS as collectFarmLlmsTxtPages, aR as createFarmAgentRobots, aT as createFarmDefaultLlmsTxt, aW as createFarmLlmsFullRenderer, aU as createFarmLlmsMarkdownReader, aQ as createFarmMetadataRouteResponse, g as getFarmRedirectError, i as isFarmNotFoundError, b as isFarmRedirectError, a_ as manageFarmDocumentPreloads, a$ as manageFarmHtmlPreloads, b0 as manageFarmLinkHeaderPreloads, aV as renderFarmLlmsFullTxt, b1 as reportFarmPreloadWarnings, aX as resolveFarmLlmsTxtConfig, b3 as resolveFarmSecurityConfig } from '../client-plugins-DZjHC4Mi.js';
-export { m as mergeRouteRenderingDirectiveConfig } from '../route-rendering-CtVMpV-k.js';
-import { R as ResolvedFarmServerConfig } from '../workflows-CR9ex-gz.js';
-export { a as FarmServerConfig, b as bufferFarmRequestBody, c as cloneFarmRequestWithContext, d as createFarmNodeRequestAbortSignal, e as createFarmRequestBodyErrorResponse, m as matchesFarmIfNoneMatch, r as readFarmRequestBody, f as readNodeRequestBody, g as resolveFarmServerConfig } from '../workflows-CR9ex-gz.js';
-export { _ as _getRequestReadCount, a as _runWithCurrentRequest, g as getCurrentRequest, r as resolveFarmWebRequestOrigin } from '../request-DbyOYI2j.js';
+import { aJ as FarmMCPCatalogDetails, fN as APIRequestRuntime, bT as ResolvedFarmMCPConfig, aE as FarmMCPServerRegistration, fO as FarmLlmsTxtLink, I as FarmConfig, _ as FarmContextFactoryInput } from '../client-plugins-r1mOtSC1.js';
+export { fY as FarmLlmsTxtUserConfig, fZ as ResolvedFarmLlmsTxtConfig, g2 as applyFarmCspNonceToResponse, fS as collectFarmLlmsTxtPages, fQ as createFarmAgentRobots, fT as createFarmDefaultLlmsTxt, fR as createFarmDefaultSitemap, fW as createFarmLlmsFullRenderer, fU as createFarmLlmsMarkdownReader, fP as createFarmMetadataRouteResponse, g as getFarmRedirectError, i as isFarmNotFoundError, b as isFarmRedirectError, f_ as manageFarmDocumentPreloads, f$ as manageFarmHtmlPreloads, g0 as manageFarmLinkHeaderPreloads, aI as registerFarmMCPServer, fV as renderFarmLlmsFullTxt, g1 as reportFarmPreloadWarnings, fX as resolveFarmLlmsTxtConfig, g3 as resolveFarmSecurityConfig } from '../client-plugins-r1mOtSC1.js';
+export { m as mergeRouteRenderingDirectiveConfig } from '../route-rendering-BUZMH_64.js';
+import { R as ResolvedFarmServerConfig } from '../workflows-jZ4BcdoZ.js';
+export { a as FarmServerConfig, y as bufferFarmRequestBody, z as cloneFarmRequestWithContext, A as createFarmNodeRequestAbortSignal, B as createFarmRequestBodyErrorResponse, C as matchesFarmIfNoneMatch, E as readFarmRequestBody, G as readNodeRequestBody, H as resolveFarmServerConfig } from '../workflows-jZ4BcdoZ.js';
+export { _ as _getRequestReadCount, a as _runWithCurrentRequest, g as getCurrentRequest, r as resolveFarmWebRequestOrigin } from '../request-Bkg-hERy.js';
 export { configureFarmCache, createFarmCacheKey, getFarmDataCache, normalizeRevalidatePath } from '../cache.js';
-import { g as FarmI18nUserConfig, R as ResolvedFarmI18nConfig } from '../types-Z0aotQ8w.js';
-export { c as createFarmLocaleCookie, g as getFarmLocaleVaryHeaders } from '../resolver-PPEeiJ6M.js';
-import { F as FarmLocalePathConfig } from '../index-BWVfxIsO.js';
-export { l as localizeFarmHref, a as localizeFarmPathname, s as stripFarmLocaleFromPathname } from '../index-BWVfxIsO.js';
-export { a as addMetadataImageReference, b as addMetadataMarkdownAlternate, m as mergeMetadata, r as renderMetadataHead, c as resolveFarmNotFoundMetadata } from '../metadata-Cjs8JMRM.js';
-export { _ as _runWithMiddlewareContext, b as _runWithMiddlewareData, a as applyProductionMiddlewareHeaders, c as createProductionMiddlewareRunner } from '../production-runtime-BU5ETAK9.js';
-export { c as configureFarmObservability, e as emitFarmEvent, r as runWithFarmRequestSpan } from '../observability-BupkiN0m.js';
+import { k as FarmI18nUserConfig, R as ResolvedFarmI18nConfig } from '../types-CnH8DOqo.js';
+export { c as createFarmLocaleCookie, g as getFarmLocaleVaryHeaders } from '../resolver-DadfRL6F.js';
+import { F as FarmLocalePathConfig } from '../index-CwoOP-MW.js';
+export { l as localizeFarmHref, a as localizeFarmPathname, s as stripFarmLocaleFromPathname } from '../index-CwoOP-MW.js';
+import { F as FarmDefaultMCPPage } from '../agent-mcp-luzfXK-P.js';
+export { a as addMetadataImageReference, b as addMetadataMarkdownAlternate, g as collectFarmDefaultMCPPages, m as mergeMetadata, d as mergeModuleViewport, r as renderMetadataHead, e as renderViewportHead, h as resolveFarmDefaultMCPServer, f as resolveFarmNotFoundMetadata } from '../agent-mcp-luzfXK-P.js';
+export { _ as _runWithMiddlewareContext, c as _runWithMiddlewareData, e as applyProductionMiddlewareHeaders, d as createProductionMiddlewareRunner } from '../production-runtime-DPnsggY3.js';
+export { L as configureFarmObservability, P as emitFarmEvent, Q as runWithFarmRequestSpan } from '../observability-CoXunYhS.js';
 export { f as createFarmInstrumentationLifecycle, r as resolveFarmInstrumentationRuntime } from '../instrumentation-runtime-CE06JLHZ.js';
 export { _setDefaultFarmThemeConfig, getTheme } from '../theme/server.js';
 import { c as FarmThemeRuntime, d as FarmThemeConfig, R as ResolvedFarmThemeConfig, a as FarmThemePreference } from '../types-DQnyD3VD.js';
 export { d as applyFarmBasePath, r as resolveFarmTrailingSlashRedirect, s as searchParamsToObject, b as setFarmBasePath, a as setFarmTrailingSlashPreference, c as stripFarmBasePath } from '../base-path-BU16ETmo.js';
-export { m as matchFarmPageRoute, p as parseRoutePath } from '../utils-311Y8eoK.js';
+export { m as matchFarmPageRoute, p as parseRoutePath } from '../utils-CaoWKtYM.js';
 import 'node:http';
 import '../lifecycle-DK06VuKP.js';
 import '../integration-api-BPJo5oXb.js';
@@ -35,7 +36,6 @@ import 'unstorage';
 import '../schema.js';
 import 'react';
 import '@farming-labs/orm';
-import '../types-DFbjpjXX.js';
 import '@farming-labs/docs';
 import 'vite';
 import '../cron.js';
@@ -62,18 +62,6 @@ interface FarmAppManifestWebMCPTool {
     inputSchemaSource: "literal" | "computed" | "none";
 }
 
-/**
- * `/.well-known/farmjs`: one document describing a Farm app, so tools can discover it
- * instead of each rebuilding the picture: Farm's version, renderer and packages, the app's
- * MCP servers with every tool (however it was defined) and its schemas, their resources and
- * prompts, its WebMCP browser tools, its integrations, its agent surfaces and its plugins.
- * Never environment values, settings or secrets.
- *
- * Development serves it to anyone on the dev server. Production answers only a request
- * signed for the app's Farm Infra key, so the public never reads the app's internals; any
- * other request gets a 404. Kept free of Node built-ins: Web Crypto only.
- */
-
 type FarmAppManifestToolSource = "endpoint" | "defineTool" | "serverFunction";
 interface FarmAppManifestTool {
     name: string;
@@ -81,7 +69,7 @@ interface FarmAppManifestTool {
     description?: string;
     /** How the app defined it: an API endpoint, `defineTool`, or a server function. */
     source: FarmAppManifestToolSource;
-    /** The endpoint's method and route, for `source: "endpoint"`. */
+    /** The endpoint's method and route, for `source: "endpoint"`. Only in Farm Infra's view. */
     method?: string;
     path?: string;
     readOnlyHint?: boolean;
@@ -108,6 +96,11 @@ interface FarmAppManifest {
             name: string;
             version: string;
             path: string;
+            /**
+             * `"required"` when the server runs `authorize`: an anonymous client lists nothing,
+             * so the public view leaves `tools`, `resources` and `prompts` empty.
+             */
+            authorization: "none" | "required";
             tools: FarmAppManifestTool[];
             resources: NonNullable<ServerDetails["resources"]>;
             prompts: NonNullable<ServerDetails["prompts"]>;
@@ -142,18 +135,30 @@ interface FarmAppManifestInput {
     integrations: FarmAppManifest["integrations"];
     agent: FarmAppManifest["agent"];
     plugins: string[];
-    /** `analytics: false` keeps the production manifest off: the app talks to no Farm Infra. */
+    /**
+     * `analytics: false` turns off Farm Infra's signed view: the app talks to no Farm Infra.
+     * The public manifest is still served; `agent.manifest: false` turns that off.
+     */
     analytics: boolean;
+    /**
+     * The default read-only MCP server (`agent.mcp`) while the app would serve it. Set by the
+     * server at runtime, not serialized: it answers only while no other MCP server is listed.
+     */
+    defaultMCP?: () => {
+        name: string;
+        version: string;
+        path: string;
+    } | undefined;
 }
 type Env = Record<string, string | undefined>;
 /**
- * Answers `/.well-known/farmjs`, or `null` to let the request go on as if Farm served nothing
- * there: methods other than GET and HEAD, and production apps not linked to Farm Infra.
+ * Answers `/.well-known/farmjs.json` for anyone. A request Farm Infra signed for the app's
+ * `FARMJS_API_KEY` gets the full view, unless `analytics` is off; any other read gets the
+ * public one.
  */
-declare function createFarmAppManifestResponse(request: Request, input: FarmAppManifestInput, options: {
-    development: boolean;
+declare function createFarmAppManifestResponse(request: Request, input: FarmAppManifestInput, options?: {
     env?: Env;
-}): Promise<Response | null>;
+}): Promise<Response>;
 
 /**
  * Compare a caller-supplied secret against the configured one without leaking
@@ -170,10 +175,23 @@ declare function createFarmAppManifestResponse(request: Request, input: FarmAppM
  */
 declare function farmSecretsMatch(provided: string, expected: string): boolean;
 
-/** Internal: the production builder owns these immutable, depth-ordered descriptors. */
+/**
+ * Internal: the production builder owns these immutable, depth-ordered descriptors.
+ *
+ * A layout's pattern is its directory, so a route group stays in it (`/(auth)`).
+ * The URL decides whether a layout covers a pathname; a layout inside a group also
+ * needs the selected page to sit in that group. `resolveRouteDirectory` finds that
+ * page's directory, and runs only when such a layout's URL matches.
+ */
 declare function createFarmLayoutSelector<T extends {
     pattern: string;
-}>(layouts: readonly T[]): (pathname: string) => T[];
+}>(layouts: readonly T[], resolveRouteDirectory?: (pathname: string) => string | null | undefined): (pathname: string, routeDirectory?: string | null) => T[];
+
+/**
+ * Whether a page directory sits inside a group scope. A null scope covers every page;
+ * a missing directory (no page matched) is inside no group.
+ */
+declare function isInRouteGroupScope(directory: string | null | undefined, scope: string | null): boolean;
 
 type FarmProductionLifecycleState = "starting" | "ready" | "draining" | "failed" | "closed";
 interface FarmProductionLifecycleOptions {
@@ -259,6 +277,14 @@ interface FarmLocaleAlternateLinkOptions {
  */
 declare function renderFarmLocaleAlternateLinks(pathname: string, config: FarmLocalePathConfig, options?: FarmLocaleAlternateLinkOptions): string;
 
+/**
+ * Start the head with `<meta charset>` and the viewport tags, as Next.js always renders both,
+ * skipping each one the layout's document already writes (a viewport, theme-color, or
+ * color-scheme tag of its own). The charset comes first because browsers only look for it in the
+ * document's first 1024 bytes. The production server uses this same function.
+ */
+declare function ensureFarmDocumentMeta(markup: string, viewport?: string): string;
+
 /**
  * Runtime source that remounts the top-level `mcp` configuration in a built server.
  *
@@ -286,6 +312,60 @@ declare function _isFarmOwnedResponse(response: Response): boolean;
  */
 declare function _withFarmResponseHeaders(response: Response, edit: (headers: Headers) => void): Response;
 
+/**
+ * The protocol side of the default MCP server (`agent.mcp`, see `agent-mcp.ts`): stateless
+ * Streamable HTTP with JSON responses, and three read-only tools over the app's public pages.
+ * A small JSON-RPC implementation rather than the MCP SDK, so apps that never receive an
+ * MCP request carry no SDK.
+ *
+ * Kept free of Node built-ins: the production server runs on edge runtimes too.
+ */
+
+interface FarmDefaultMCPContext {
+    server: {
+        name: string;
+        version: string;
+        title?: string;
+    };
+    /** The app's public pages for this request's origin. */
+    listPages: () => FarmDefaultMCPPage[] | Promise<FarmDefaultMCPPage[]>;
+    /** Reads a Markdown URL anonymously; null when the page does not answer with Markdown. */
+    readMarkdown: (url: string) => Promise<string | null>;
+    basePath?: string;
+}
+/**
+ * Answers one request to the default MCP endpoint: stateless Streamable HTTP, JSON
+ * responses, no sessions, and no server-initiated stream (GET answers 405).
+ */
+declare function handleFarmDefaultMCPRequest(request: Request, context: FarmDefaultMCPContext): Promise<Response>;
+
+interface FarmAiCatalogInput {
+    /** The app's basePath; the catalog lives beneath it, like the API catalog. */
+    basePath?: string;
+    /** The app's public API path, which maps to Farm's canonical `/api`. */
+    apiServerBasePath?: string;
+    /**
+     * The default read-only server (`agent.mcp`), when this app would serve it. It is
+     * listed only while no other MCP server is, the same rule that decides whether it answers.
+     */
+    defaultMCP?: () => (FarmMCPServerRegistration & {
+        path: `/${string}`;
+    }) | undefined;
+}
+/**
+ * The llms.txt links for the app's MCP servers: each endpoint, then the catalog
+ * that lists their cards. Empty when the app mounts no MCP server.
+ */
+declare function listFarmMCPLlmsTxtLinks(origin: string, input?: FarmAiCatalogInput): FarmLlmsTxtLink[];
+/**
+ * Answers `/.well-known/ai-catalog.json`, `/.well-known/ard.json`, and each
+ * `<endpoint>/server-card`, or returns `null` for any other request and when
+ * the app mounts no MCP server, so the request goes on as if Farm served nothing.
+ * Every request passes through here; `requestUrl`, the caller's parse of
+ * `request.url`, saves parsing it again.
+ */
+declare function createFarmAiCatalogResponse(request: Request, input?: FarmAiCatalogInput, requestUrl?: URL): Response | null;
+
 /**
  * `/.well-known/api-catalog` (RFC 9727): a Linkset listing the APIs an app
  * publishes, so an agent that knows only the origin can find the OpenAPI
@@ -384,4 +464,4 @@ declare function appendFarmRedirectQuery(destination: string, search: string): s
 
 declare function appendFarmLinkHeader(headers: Headers, value: string): void;
 
-export { _isFarmOwnedResponse, _markFarmOwnedResponse, _runWithAPIRequestRuntime, _withFarmResponseHeaders, appendFarmLinkHeader, appendFarmRedirectQuery, applyFarmPreviewRobotsTag, applyFarmThemeDocument, compareRouteSpecificity, createDefaultErrorMarkup, createFarmApiCatalogResponse, createFarmAppManifestResponse, createFarmLayoutSelector, createFarmLegacyRequest, createFarmProductionLifecycle, createFarmThemeDocumentParts, createLateNotFoundRecovery, createLateRedirectRecovery, farmSecretsMatch, generateNativeMCPPluginSource, getDefaultErrorStatusText, getRoutePatternSpecificity, renderFarmLegacyErrorHtml, renderFarmLegacyHtml, renderFarmLocaleAlternateLinks, resolveDefaultErrorStatus, resolveFarmI18nConfig, resolveFarmPreviewDeployment, resolveFarmRouteContext, serializeFarmInlineValue, withFarmRouteContext };
+export { _isFarmOwnedResponse, _markFarmOwnedResponse, _runWithAPIRequestRuntime, _withFarmResponseHeaders, appendFarmLinkHeader, appendFarmRedirectQuery, applyFarmPreviewRobotsTag, applyFarmThemeDocument, compareRouteSpecificity, createDefaultErrorMarkup, createFarmAiCatalogResponse, createFarmApiCatalogResponse, createFarmAppManifestResponse, createFarmLayoutSelector, createFarmLegacyRequest, createFarmProductionLifecycle, createFarmThemeDocumentParts, createLateNotFoundRecovery, createLateRedirectRecovery, ensureFarmDocumentMeta, farmSecretsMatch, generateNativeMCPPluginSource, getDefaultErrorStatusText, getRoutePatternSpecificity, handleFarmDefaultMCPRequest, isInRouteGroupScope as isInFarmRouteGroupScope, listFarmMCPLlmsTxtLinks, renderFarmLegacyErrorHtml, renderFarmLegacyHtml, renderFarmLocaleAlternateLinks, resolveDefaultErrorStatus, resolveFarmI18nConfig, resolveFarmPreviewDeployment, resolveFarmRouteContext, serializeFarmInlineValue, withFarmRouteContext };