@farm.js/core 0.1.35 → 0.1.36

package/dist/{chunk-UAORZ7QA.mjs → chunk-35GKZR22.mjs}

@@ -4,13 +4,13 @@ import {
   _runServerFunctionForCaller,
   createServerFn,
   createServerFunctionDescriptor
-} from "./chunk-Q3VLETLE.mjs";
+} from "./chunk-EWET4D2Y.mjs";
 import {
   createFarmServerQueryResult
 } from "./chunk-KGB5UXJJ.mjs";
 import {
   getServerActionExecutionContext
-} from "./chunk-SMHH4VDG.mjs";
+} from "./chunk-4WVJLURN.mjs";
 import {
   createRouteDataCacheTag,
   getFarmDataCache

package/dist/{chunk-QAU5JD57.mjs → chunk-35WV46VL.mjs}

@@ -10,7 +10,7 @@ import {
 import {
   compileFarmDocsAdapterEdgeManifest,
   createFarmDocsAPIHandler
-} from "./chunk-SOMHP6GF.mjs";
+} from "./chunk-4E5AEDKY.mjs";
 import {
   FARM_DOCS_LAST_MODIFIED_MANIFEST,
   createFarmDocsHandler,
@@ -20,7 +20,7 @@ import {
   loadFarmDocsPage,
   resolveFarmDocsContentDir,
   toFarmDocsMarkdownPage
-} from "./chunk-PDOCJ6RY.mjs";
+} from "./chunk-O6WAEAX3.mjs";
 import {
   generateFarmDocsSearchClientRuntime,
   isFarmDocsSearchEnabled,
@@ -37,7 +37,7 @@ import {
   getDeployTargetForPreset,
   hasCustomFarmRouteContext,
   resolveDeployOutputPath
-} from "./chunk-6DU6UFUE.mjs";
+} from "./chunk-OHLSEQ57.mjs";
 import {
   resolveFarmInstrumentationFile
 } from "./chunk-ZZSRYEYU.mjs";
@@ -76,15 +76,16 @@ import {
   resolveFarmIsolatedClientHydrationMode,
   resolveFarmNotFoundComponentPath,
   usesFarmServerTree
-} from "./chunk-4KU5Q7C2.mjs";
+} from "./chunk-276VJSM6.mjs";
 import {
   findRequestBoundSourceBlockers,
   generateFarmTypeArtifacts,
   parseRouteRenderingDirective,
   resolveRouteRenderingConfigFromFile
-} from "./chunk-2G2NNLE2.mjs";
+} from "./chunk-4GLOOWKE.mjs";
 import {
   FARM_API_CATALOG_PATH,
+  FARM_APP_MANIFEST_LEGACY_PATH,
   FARM_APP_MANIFEST_PATH,
   HOISTED_HEAD_ELEMENT,
   getRouteDirectoryDepth,
@@ -93,7 +94,12 @@ import {
   resolveFarmAppManifestInput,
   routeBoundaryCoversDirectory,
   stripRouteGroups
-} from "./chunk-6ETPZTJI.mjs";
+} from "./chunk-LSZAVSGY.mjs";
+import {
+  FARM_DEFAULT_MCP_PATH,
+  createFarmDefaultMCPServer,
+  farmConfigMountsMCP
+} from "./chunk-UH6QN5NL.mjs";
 import {
   isFarmPreviewDeploymentEnvironment
 } from "./chunk-BOYNDCZL.mjs";
@@ -113,7 +119,7 @@ import {
 } from "./chunk-GHFS7RUB.mjs";
 import {
   getFarmAppDirectories
-} from "./chunk-JHWOVJ3M.mjs";
+} from "./chunk-BUGNQIHC.mjs";
 import {
   REACT_RENDERER,
   getFarmRendererCapabilities,
@@ -125,7 +131,7 @@ import {
 } from "./chunk-DAATZTKJ.mjs";
 import {
   applyFarmCspHashesToHtml
-} from "./chunk-UJD4PHYB.mjs";
+} from "./chunk-4E5WBPEG.mjs";
 import {
   applyFarmCronVercelCrons,
   createFarmCronCloudflareConfig,
@@ -137,7 +143,7 @@ import {
 } from "./chunk-4OOBRCJX.mjs";
 import {
   isFarmMarkdownPageFile
-} from "./chunk-4JHOT46A.mjs";
+} from "./chunk-4WCZJQUO.mjs";
 import {
   resolveFarmMdxComponentsModulePath,
   resolveMdxConfig
@@ -148,16 +154,17 @@ import {
 import {
   applyFarmWorkflowVercelCrons,
   prepareFarmWorkflowsForNitro
-} from "./chunk-6WCPV6G2.mjs";
+} from "./chunk-Q2KB32T4.mjs";
 import {
+  FARM_INTEGRATION_API_BASE_PATH_KEY,
   getFarmIntegrationPluginServerRuntime,
   getIntegrationProviders
-} from "./chunk-HMIJDL7S.mjs";
+} from "./chunk-MKYBIIAQ.mjs";
 import {
   appendMiddlewareDirectory,
   appendMiddlewareRoutePath,
   compareMiddlewareRouteLocations
-} from "./chunk-6TJOML4E.mjs";
+} from "./chunk-BPOF5U4N.mjs";
 import {
   compileMiddlewareConfig,
   matchesCompiledMiddlewareConfig,
@@ -165,7 +172,7 @@ import {
 } from "./chunk-JG6DJF5A.mjs";
 import {
   APIRouteManager
-} from "./chunk-22LTEMGQ.mjs";
+} from "./chunk-T4OGRVNS.mjs";
 import {
   readFarmI18nCatalogs
 } from "./chunk-QCFBDFRS.mjs";
@@ -190,6 +197,9 @@ import {
   resolveFarmAPIServerBasePath,
   resolveFarmAPIServerRoutePath
 } from "./chunk-BTHHUD7Q.mjs";
+import {
+  FARM_VERSION
+} from "./chunk-OO7GXVSR.mjs";
 import {
   getFarmPresetRuntime
 } from "./chunk-2A3EQHXX.mjs";
@@ -257,7 +267,7 @@ __name(resolveHashedClientJsSrc, "resolveHashedClientJsSrc");
 // src/nitro/universal-build.ts
 import os from "os";
 import path6 from "path";
-import { constants as fsConstants, existsSync as existsSync2, readFileSync, realpathSync } from "fs";
+import { constants as fsConstants, existsSync as existsSync2, readFileSync, realpathSync, statSync } from "fs";
 import { fileURLToPath } from "url";
 import { builtinModules, createRequire } from "module";
 import { isDeepStrictEqual } from "util";
@@ -766,10 +776,14 @@ export default async function farmNetlifyHandler(request, context) {
 __name(createFarmNetlifyEntry, "createFarmNetlifyEntry");
 
 // src/nitro/node-server-entry.ts
+var FARM_NODE_ENV_MODULE_FILE = "farm-node-env.mjs";
+var FARM_NODE_ENV_MODULE_SOURCE = `if (!process.env.NODE_ENV) process.env.NODE_ENV = "production";
+`;
 function createFarmNodeServerEntry(options) {
   const serverConfig = JSON.stringify(options.server);
   const nitroEntryImport = `./${options.nitroEntryFile.replace(/^\.\//, "")}`;
   return `
+import "./${FARM_NODE_ENV_MODULE_FILE}";
 import "#nitro/virtual/polyfills";
 import { NodeRequest, serve } from ${JSON.stringify(options.nodeAdapterModule)};
 import wsAdapter from ${JSON.stringify(options.websocketAdapterModule)};
@@ -4998,6 +5012,28 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
   };
 }
 __name(buildSSRInMemory, "buildSSRInMemory");
+function readFarmAppPackageIdentity(root) {
+  try {
+    return JSON.parse(readFileSync(path6.join(root, "package.json"), "utf8"));
+  } catch {
+    return {};
+  }
+}
+__name(readFarmAppPackageIdentity, "readFarmAppPackageIdentity");
+function readFarmPageLastModified(pageRoutes) {
+  const lastModified = {};
+  for (const route of pageRoutes) {
+    if (route.pattern.includes("[")) continue;
+    try {
+      lastModified[route.pattern] = statSync(
+        route.markdownSourcePath ?? route.modulePath
+      ).mtime.toISOString();
+    } catch {
+    }
+  }
+  return lastModified;
+}
+__name(readFarmPageLastModified, "readFarmPageLastModified");
 function getFarmAppOwnedDocsEnginePaths(agent, applicationMetadataRoutes) {
   const llmsTxt = agent?.llmsTxt;
   const ownedByFile = /* @__PURE__ */ __name((kind) => applicationMetadataRoutes.some(
@@ -5006,7 +5042,7 @@ function getFarmAppOwnedDocsEnginePaths(agent, applicationMetadataRoutes) {
   return [
     ...llmsTxt?.enabled || ownedByFile("llms") ? ["/llms.txt"] : [],
     ...llmsTxt?.enabled && llmsTxt.full || ownedByFile("llms-full") ? ["/llms-full.txt"] : [],
-    ...ownedByFile("sitemap") ? ["/sitemap.xml"] : [],
+    ...agent?.sitemap?.enabled || ownedByFile("sitemap") ? ["/sitemap.xml"] : [],
     ...agent?.crawlers?.enabled || ownedByFile("robots") ? ["/robots.txt"] : []
   ];
 }
@@ -5072,7 +5108,7 @@ function matchLocalIntegrationRequest(request) {
   });` : "return null;"}
 }
 
-async function handleIntegrationRequest(request) {
+async function handleIntegrationRequest(request, ranMiddleware) {
   ${options.hasServerRuntimeIntegrations ? `return dispatchIntegrationRequests(
     serverRuntimeIntegrations,
     {
@@ -5081,6 +5117,7 @@ async function handleIntegrationRequest(request) {
       isProd: true,
     },
     request,
+    { ranMiddleware },
   );` : `return { response: null, setCookies: [] };`}
 }
 
@@ -5361,6 +5398,10 @@ function generateVirtualEntryCode(apiRoutes, pageRoutes, layoutRoutes, routeSlot
   const servesAgentRobotsTxt = Boolean(config.agent?.crawlers?.enabled) && !applicationMetadataRoutes.some(
     (metadata) => metadata.kind === "robots" && metadata.pattern === "/"
   );
+  const servesAgentSitemap = Boolean(config.agent?.sitemap?.enabled) && !applicationMetadataRoutes.some(
+    (metadata) => metadata.kind === "sitemap" && metadata.pattern === "/"
+  );
+  const servesDefaultMCP = config.agent?.mcp === true && !farmConfigMountsMCP(config) && !apiRoutes.some((route) => route.path === "/api/mcp");
   const servesAiCatalog = config.agent?.aiCatalog !== false;
   const hasPluginRuntime = hasRuntimeIntegrationConfig || hasServerRuntimePlugins;
   const hasInfraAnalyticsRuntime = config.analytics !== false && resolveFarmInstrumentationRuntime(preset) === "nodejs";
@@ -5686,6 +5727,10 @@ function renderFarmRouteServerTree(element) { return element; }`;
   createFarmCacheKey,
   createFarmMetadataRouteResponse,
   createFarmAgentRobots,
+  createFarmDefaultSitemap,
+  collectFarmDefaultMCPPages,
+  resolveFarmDefaultMCPServer,
+  handleFarmDefaultMCPRequest,
   createFarmAiCatalogResponse,
   createFarmApiCatalogResponse,
   createFarmAppManifestResponse,
@@ -6062,6 +6107,7 @@ const serverRuntimeIntegrations = Object.fromEntries(
 );
 const integrationRuntimeConfig = Object.assign({}, ...farmRuntimeConfigs, {
   integrations: configuredIntegrations,
+  ${JSON.stringify(FARM_INTEGRATION_API_BASE_PATH_KEY)}: ${JSON.stringify(resolveFarmAPIServerBasePath(config.api))},
 });
 const farmInfraAnalytics = ${hasInfraAnalyticsRuntime ? hasPluginRuntime ? "createFarmInfraAnalyticsPlugin()" : "createFarmInfraAnalyticsRecorder()" : "null"};
 const configuredPlugins = [
@@ -6210,18 +6256,25 @@ const farmDocsAPIHandler = ${config.docs?.enabled ? hasPrecompiledDocs ? "farmDo
 
 // API routes bundled at build time
 const apiRoutes = ${apiRoutes.length > 0 ? "mergePluginAPIRoutes(" : ""}[${apiRegistrations.join(",")}
-]${apiRoutes.length > 0 ? `, configuredPlugins, ${JSON.stringify(apiRoutes.map(({ path: path8, methods }) => ({ path: path8, methods })))}, { bodySizeLimit: ${JSON.stringify(config.server.bodySizeLimit)} })` : ""};
+]${apiRoutes.length > 0 ? `, configuredPlugins, ${JSON.stringify(apiRoutes.map(({ path: path8, methods }) => ({ path: path8, methods })))}, { bodySizeLimit: ${JSON.stringify(config.server.bodySizeLimit)}, dispatch: dispatchFarmPluginAPIRequest })` : ""};
+// A plugin calling an app endpoint (an MCP tool, say) goes through the whole
+// pipeline, so the endpoint's middleware and integration guards run for it.
+function dispatchFarmPluginAPIRequest(request) {
+  const url = new URL(request.url);
+  url.pathname = applyFarmBasePath(url.pathname);
+  return handleFarmRequest(url.href === request.url ? request : new Request(url, request));
+}
 const farmLocalAPIBasePath = ${JSON.stringify(resolveFarmAPIServerBasePath(config.api))};
 const farmOpenAPIReference = ${JSON.stringify(openAPIReference)};
 ${config.agent?.apiCatalog ? `const farmApiCatalogInput = ${JSON.stringify(resolveFarmApiCatalogInput(config))};
-` : ""}${config.analytics !== false ? `const farmAppManifestInput = ${JSON.stringify(
+` : ""}${config.agent?.manifest !== false ? `const farmAppManifestInput = ${JSON.stringify(
     resolveFarmAppManifestInput(config, {
       build: config.deploymentId,
       packages: resolveFarmAppPackages(config.root),
       webmcpTools: config.plugins.some(({ name }) => name === "farm:webmcp") ? collectFarmWebMCPTools(config.root, config.srcDir) : []
     })
   )};
-` : ""}
+${servesDefaultMCP ? "farmAppManifestInput.defaultMCP = getFarmDefaultMCPServer;\n" : ""}` : ""}
 function isFarmLocalAPIPathname(pathname) {
   return farmLocalAPIBasePath !== "/" &&
     (pathname === farmLocalAPIBasePath ||
@@ -6728,7 +6781,8 @@ function ensureFarmDocumentHead(markup) {
 }
 
 function ensureFarmDocumentRoot(markup) {
-  if (/\\sid=["']root["']/i.test(markup)) return markup;
+  // Only a #root that opens the body is the container; page content can have id="root" too.
+  if (/<body\\b[^>]*>\\s*<div\\b[^>]*\\sid=["']root["']/i.test(markup)) return markup;
   return markup
     .replace(/<body\\b([^>]*)>/i, function(_match, attributes) {
       return "<body" + attributes + '><div id="root">';
@@ -7107,7 +7161,7 @@ function createFarmAgentRobotsResponse(request) {
     "robots",
     createFarmAgentRobots({
       crawlers: farmAgentCrawlers,
-      sitemapPath: ${applicationMetadataRoutes.some(
+      sitemapPath: ${servesAgentSitemap || applicationMetadataRoutes.some(
     (metadata) => metadata.kind === "sitemap" && metadata.pattern === "/"
   ) ? JSON.stringify("/sitemap.xml") : "undefined"},
       metadataBase: rootLayout && rootLayout.module && rootLayout.module.metadata
@@ -7120,6 +7174,68 @@ function createFarmAgentRobotsResponse(request) {
   );
 }
 ` : ""}
+${servesAgentSitemap ? `// sitemap.xml from agent.sitemap, built the same way as in development. Each page's
+// lastmod is its file's modification time, read at build time.
+const farmAgentSitemapConfig = ${JSON.stringify(config.agent.sitemap)};
+const farmAgentSitemapLastModified = ${JSON.stringify(readFarmPageLastModified(pageRoutes))};
+function createFarmAgentSitemapResponse(request) {
+  const rootLayout = layoutRoutes.find((layout) => layout.pattern === "/");
+  return createFarmMetadataRouteResponse(
+    "sitemap",
+    createFarmDefaultSitemap(
+      pageRoutes.map((route) => ({
+        pattern: route.pattern,
+        module: route.module,
+        lastModified: farmAgentSitemapLastModified[route.pattern],
+      })),
+      {
+        origin: new URL(request.url).origin,
+        config: farmAgentSitemapConfig,
+        metadataBase: rootLayout && rootLayout.module && rootLayout.module.metadata
+          ? rootLayout.module.metadata.metadataBase
+          : undefined,
+        basePath: ${JSON.stringify(config.basePath)},
+      },
+    ),
+    {},
+    { method: request.method },
+  );
+}
+` : ""}
+${servesDefaultMCP ? `// agent.mcp: the default read-only MCP server at /mcp, as in development. It steps
+// aside for a page route that answers /mcp and for any MCP server published or
+// registered at runtime, such as the docs engine's.
+const farmDefaultMCPServer = ${JSON.stringify(
+    createFarmDefaultMCPServer(readFarmAppPackageIdentity(config.root), FARM_VERSION)
+  )};
+let farmDefaultMCPRouteFree;
+function getFarmDefaultMCPServer() {
+  if (farmDefaultMCPRouteFree === undefined) {
+    farmDefaultMCPRouteFree = !matchPageRoute(${JSON.stringify(FARM_DEFAULT_MCP_PATH)});
+  }
+  return farmDefaultMCPRouteFree ? resolveFarmDefaultMCPServer(farmDefaultMCPServer) : undefined;
+}
+async function handleFarmDefaultMCP(request) {
+  const origin = new URL(request.url).origin;
+  return handleFarmDefaultMCPRequest(request, {
+    server: getFarmDefaultMCPServer(),
+    basePath: ${JSON.stringify(config.basePath)},
+    listPages: () =>
+      collectFarmDefaultMCPPages(
+        pageRoutes.map((route) => ({ pattern: route.pattern, module: route.module })),
+        { origin, basePath: ${JSON.stringify(config.basePath)}, markdown: farmMarkdownConfig },
+      ),
+    // A fresh request through this handler, so the caller's cookies never shape a page.
+    // The handler sees paths below the base path, as the server passes them in.
+    readMarkdown: (url) => {
+      const page = new URL(url);
+      page.pathname = stripFarmBasePath(page.pathname);
+      return farmDefaultMCPReadMarkdown(page.href);
+    },
+  });
+}
+const farmDefaultMCPReadMarkdown = createFarmLlmsMarkdownReader((page) => handleFarmRequest(page));
+` : ""}
 // Static pages and root metadata for llms.txt, built the same way as in development.
 function createFarmLlmsTxtContext(request, full) {
   const origin = new URL(request.url).origin;
@@ -7142,7 +7258,7 @@ function createFarmLlmsTxtContext(request, full) {
       rootMetadata: rootLayout && rootLayout.module && rootLayout.module.metadata,
       ${servesAiCatalog ? `mcp: listFarmMCPLlmsTxtLinks(origin, {
         basePath: ${JSON.stringify(config.basePath)},
-        apiServerBasePath: farmLocalAPIBasePath,
+        apiServerBasePath: farmLocalAPIBasePath,${servesDefaultMCP ? "\n        defaultMCP: getFarmDefaultMCPServer," : ""}
       }),` : ""}
     }),
     // llms-full.txt reads each page's .md mirror through this same handler,
@@ -7823,7 +7939,11 @@ async function handleFarmRequestInContext(
   }
 
   ${hasServerRuntimeIntegrations ? `
-  const integrationDispatch = await handleIntegrationRequest(cloneFarmRequestWithContext(request));
+  const farmIntegrationRanMiddleware = new Set();
+  const integrationDispatch = await handleIntegrationRequest(
+    cloneFarmRequestWithContext(request),
+    farmIntegrationRanMiddleware,
+  );
   if (integrationDispatch.response) {
     return integrationDispatch.response;
   }
@@ -7831,7 +7951,7 @@ async function handleFarmRequestInContext(
   // its rotated Set-Cookie values back here. They belong on whatever response
   // the page or API handler produces, so they ride the same deferred-header
   // channel the file middleware runner already uses.
-  const farmIntegrationSetCookies = integrationDispatch.setCookies;
+  let farmIntegrationSetCookies = integrationDispatch.setCookies;
   ` : ""}
 
   ${hasMiddlewareRuntime ? `
@@ -7842,7 +7962,23 @@ async function handleFarmRequestInContext(
   if (middlewareResult.response) {
     return middlewareResult.response;
   }
-  request = middlewareResult.request;
+  request = middlewareResult.request;${hasServerRuntimeIntegrations ? `
+  // A ctx.rewrite() target is guarded as a direct request for it is: integration
+  // guards (protectedRoutes) and routes see the rewritten URL, as in dev. Guards
+  // that already ran for the original URL are skipped, so each runs once.
+  if (request.url !== url.href) {
+    const rewrittenDispatch = await handleIntegrationRequest(
+      cloneFarmRequestWithContext(request),
+      farmIntegrationRanMiddleware,
+    );
+    farmIntegrationSetCookies = [...farmIntegrationSetCookies, ...rewrittenDispatch.setCookies];
+    if (rewrittenDispatch.response) {
+      return applyProductionMiddlewareHeaders(
+        rewrittenDispatch.response,
+        withFarmIntegrationSetCookies(middlewareResult.headers, integrationDispatch.setCookies),
+      );
+    }
+  }` : ""}
   const middlewareData = middlewareResult.data;
   const middlewareContext = middlewareResult.context;
   const middlewareHeaders = ${hasServerRuntimeIntegrations ? "withFarmIntegrationSetCookies(middlewareResult.headers, farmIntegrationSetCookies)" : "middlewareResult.headers"};
@@ -7871,7 +8007,10 @@ async function handleFarmRequestInContext(
   // API routes, as in dev.
   const farmAiCatalogResponse = createFarmAiCatalogResponse(
     request,
-    { basePath: ${JSON.stringify(config.basePath)}, apiServerBasePath: farmLocalAPIBasePath },
+    {
+      basePath: ${JSON.stringify(config.basePath)},
+      apiServerBasePath: farmLocalAPIBasePath,${servesDefaultMCP ? "\n      defaultMCP: getFarmDefaultMCPServer," : ""}
+    },
     url,
   );
   if (farmAiCatalogResponse) {
@@ -8027,15 +8166,18 @@ async function handleFarmRequestInContext(
     return applyProductionMiddlewareHeaders(applicationMetadataResponse, middlewareHeaders);
   }
   ` : ""}
-  ${config.analytics !== false ? `
-  // /.well-known/farmjs: the app's manifest, only for a request Farm Infra signed.
-  if (normalizeRuntimePath(routePathname) === ${JSON.stringify(FARM_APP_MANIFEST_PATH)}) {
-    const farmAppManifest = await createFarmAppManifestResponse(request, farmAppManifestInput, {
-      development: false,
-    });
-    if (farmAppManifest) {
-      return applyProductionMiddlewareHeaders(farmAppManifest, middlewareHeaders);
-    }
+  ${config.agent?.manifest !== false ? `
+  // agent.manifest: /.well-known/farmjs.json (and 0.1.34's /.well-known/farmjs), the app's
+  // public manifest; Farm Infra's signed request gets the full view.
+  if (
+    [${JSON.stringify(FARM_APP_MANIFEST_PATH)}, ${JSON.stringify(FARM_APP_MANIFEST_LEGACY_PATH)}].includes(
+      normalizeRuntimePath(routePathname),
+    )
+  ) {
+    return applyProductionMiddlewareHeaders(
+      await createFarmAppManifestResponse(request, farmAppManifestInput),
+      middlewareHeaders,
+    );
   }
   ` : ""}
   ${config.agent?.apiCatalog ? `
@@ -8056,6 +8198,15 @@ async function handleFarmRequestInContext(
     );
   }
   ` : ""}
+  ${servesAgentSitemap ? `
+  // agent.sitemap with no sitemap.ts: serve the generated file.
+  if (normalizeRuntimePath(routePathname) === "/sitemap.xml") {
+    return applyProductionMiddlewareHeaders(
+      createFarmAgentSitemapResponse(request),
+      middlewareHeaders,
+    );
+  }
+  ` : ""}
   ${config.agent?.llmsTxt?.enabled ? `
   // agent.llmsTxt with no llms.ts or llms-full.ts: serve the generated files.
   const farmGeneratedLlmsKind = normalizeRuntimePath(routePathname) === "/llms.txt"
@@ -8989,6 +9140,18 @@ async function handleFarmRequestInContext(
     }
   }
 
+${servesDefaultMCP ? `
+  // agent.mcp: no app route answered /mcp, so the default read-only server may.
+  if (
+    normalizeRuntimePath(routePathname) === ${JSON.stringify(FARM_DEFAULT_MCP_PATH)} &&
+    getFarmDefaultMCPServer()
+  ) {
+    return applyProductionMiddlewareHeaders(
+      await handleFarmDefaultMCP(request),
+      middlewareHeaders,
+    );
+  }
+` : ""}
   // 404 fallback - render proper HTML page
   return renderFarmNotFoundResponse();
 
@@ -9665,6 +9828,10 @@ function toFarmNodeResponse(request, response) {
   await fs.writeFile(nitroEntryPath, nitroEntryCode);
   const farmNodeServerEntryPath = preset === "node-server" ? path6.join(ssrOutputDir, "farm-node-server-entry.mjs") : null;
   if (farmNodeServerEntryPath && nodeAdapterModule) {
+    await fs.writeFile(
+      path6.join(ssrOutputDir, FARM_NODE_ENV_MODULE_FILE),
+      FARM_NODE_ENV_MODULE_SOURCE
+    );
     await fs.writeFile(
       farmNodeServerEntryPath,
       createFarmNodeServerEntry({
@@ -10746,7 +10913,7 @@ function resolveLegacyPageEntry(config, root, srcDir) {
 __name(resolveLegacyPageEntry, "resolveLegacyPageEntry");
 async function buildNitro(config, routeManager, apiRouteManager, serverRenderer, preset, root, distDir, pluginManager) {
   const [{ createNitroConfig }, { createNitro, build: nitroBuild }] = await Promise.all([
-    import("./nitro-MXRDCXWZ.mjs"),
+    import("./nitro-MPZJGPXK.mjs"),
     import("nitro/builder")
   ]);
   let nitroConfig = await createNitroConfig(

package/dist/{chunk-EFCQPQMG.cjs → chunk-42NHY7HW.cjs}

@@ -112,6 +112,55 @@ function isFarmMarkdownPublicSourceResponse(response) {
   return publicSourceResponses.has(response);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, isFarmMarkdownPublicSourceResponse, "isFarmMarkdownPublicSourceResponse");
+var ANONYMOUS_REQUEST_HEADERS = /* @__PURE__ */ new Set([
+  "accept",
+  "accept-encoding",
+  "accept-language",
+  "cache-control",
+  "connection",
+  "dnt",
+  "forwarded",
+  "host",
+  "if-match",
+  "if-modified-since",
+  "if-none-match",
+  "if-range",
+  "if-unmodified-since",
+  "keep-alive",
+  "origin",
+  "pragma",
+  "priority",
+  "purpose",
+  "range",
+  "referer",
+  "save-data",
+  "sec-gpc",
+  "sec-purpose",
+  "te",
+  "traceparent",
+  "tracestate",
+  "upgrade-insecure-requests",
+  "user-agent",
+  "via",
+  "x-forwarded-for",
+  "x-forwarded-host",
+  "x-forwarded-port",
+  "x-forwarded-proto",
+  "x-real-ip",
+  "x-request-id"
+]);
+function isAnonymousRequestHeader(name) {
+  const lower = name.toLowerCase();
+  return ANONYMOUS_REQUEST_HEADERS.has(lower) || lower.startsWith("sec-fetch-") || lower.startsWith("sec-ch-");
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, isAnonymousRequestHeader, "isAnonymousRequestHeader");
+function hasOnlyAnonymousHeaders(headers) {
+  for (const name of headers.keys()) {
+    if (!isAnonymousRequestHeader(name)) return false;
+  }
+  return true;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, hasOnlyAnonymousHeaders, "hasOnlyAnonymousHeaders");
 async function createFarmMarkdownSourceResponse(options) {
   if (options.request.method !== "GET" && options.request.method !== "HEAD") {
     return null;
@@ -129,13 +178,14 @@ async function createFarmMarkdownSourceResponse(options) {
   if (!source) {
     return null;
   }
-  const anonymous = !options.request.headers.has("cookie") && !options.request.headers.has("authorization");
+  const anonymous = hasOnlyAnonymousHeaders(options.request.headers);
   if (options.renderPage && (hasMarkdownExtension || !anonymous)) {
     const publicUrl = new URL(url);
     publicUrl.pathname = targetPathname;
-    const publicHeaders = new Headers(options.request.headers);
-    publicHeaders.delete("cookie");
-    publicHeaders.delete("authorization");
+    const publicHeaders = new Headers();
+    for (const [name, value] of options.request.headers) {
+      if (isAnonymousRequestHeader(name)) publicHeaders.append(name, value);
+    }
     publicHeaders.set("accept", "text/markdown");
     const publicResponse = await options.renderPage(
       new Request(publicUrl, {

package/dist/{chunk-SOMHP6GF.mjs → chunk-4E5AEDKY.mjs}

@@ -3,14 +3,14 @@ import {
   loadFarmDocsPage,
   resolveFarmDocsContentDir,
   toFarmDocsMarkdownPage
-} from "./chunk-PDOCJ6RY.mjs";
+} from "./chunk-O6WAEAX3.mjs";
 import {
   docsEngine,
   loadFarmDocsEngine
 } from "./chunk-2VQKKQ6D.mjs";
 import {
   resolveDocsConfig
-} from "./chunk-6DU6UFUE.mjs";
+} from "./chunk-OHLSEQ57.mjs";
 import {
   getFarmDocsAdapterConfigModule,
   isSecretDocsConfigKey