@farm.js/core 0.1.35 → 0.1.36

package/dist/{chunk-IPXLADVO.cjs → chunk-ADEA7PN3.cjs}

@@ -1,9 +1,12 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
+var _chunkPTZ2TVNEcjs = require('./chunk-PTZ2TVNE.cjs');
+
+
 var _chunkOWOUTKIJcjs = require('./chunk-OWOUTKIJ.cjs');
 
 
-var _chunkRU3M2FIKcjs = require('./chunk-RU3M2FIK.cjs');
+var _chunk4WQ6PGSJcjs = require('./chunk-4WQ6PGSJ.cjs');
 
 
 var _chunkJ63ZH5OQcjs = require('./chunk-J63ZH5OQ.cjs');
@@ -19,14 +22,15 @@ var _chunkTKJZFIMLcjs = require('./chunk-TKJZFIML.cjs');
 var _chunk75RZHGLScjs = require('./chunk-75RZHGLS.cjs');
 
 
-var _chunkOMVAU7NTcjs = require('./chunk-OMVAU7NT.cjs');
+
+var _chunkKIIMAWOJcjs = require('./chunk-KIIMAWOJ.cjs');
 
 
 
 var _chunkKNBBQHO2cjs = require('./chunk-KNBBQHO2.cjs');
 
 
-var _chunkYC6V7PWEcjs = require('./chunk-YC6V7PWE.cjs');
+var _chunkDZ5ZVB2Kcjs = require('./chunk-DZ5ZVB2K.cjs');
 
 
 var _chunkBIDYX3SLcjs = require('./chunk-BIDYX3SL.cjs');
@@ -153,7 +157,7 @@ function ensureFarmDocumentHead(markup) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, ensureFarmDocumentHead, "ensureFarmDocumentHead");
 function ensureFarmDocumentRoot(markup) {
-  if (/\sid=["']root["']/i.test(markup)) return markup;
+  if (/<body\b[^>]*>\s*<div\b[^>]*\sid=["']root["']/i.test(markup)) return markup;
   return markup.replace(
     /<body\b([^>]*)>/i,
     (_match, attributes) => `<body${attributes}><div id="root">`
@@ -398,7 +402,7 @@ function createFarmMetadataRouteResponse(kind, value, routeModule = {}, options
   if (isResponse(value)) {
     return method === "HEAD" ? _chunkTKJZFIMLcjs.omitFarmResponseBody.call(void 0, value) : value;
   }
-  const body = kind === "sitemap" ? serializeSitemap(value) : kind === "robots" ? serializeRobots(value) : kind === "llms" || kind === "llms-full" ? _chunkRU3M2FIKcjs.serializeFarmLlmsTxt.call(void 0, value) : serializeManifest(value);
+  const body = kind === "sitemap" ? serializeSitemap(value) : kind === "robots" ? serializeRobots(value) : kind === "llms" || kind === "llms-full" ? _chunk4WQ6PGSJcjs.serializeFarmLlmsTxt.call(void 0, value) : serializeManifest(value);
   const contentType = kind === "sitemap" ? "application/xml; charset=utf-8" : kind === "robots" || kind === "llms" || kind === "llms-full" ? "text/plain; charset=utf-8" : "application/manifest+json; charset=utf-8";
   return new Response(method === "HEAD" ? null : body, {
     headers: {
@@ -436,6 +440,13 @@ function listFarmMCPServerSources(input) {
     if (sources.has(endpoint)) continue;
     sources.set(endpoint, { ...server, endpoint, local: Boolean(server.path) });
   }
+  if (sources.size === 0 && input.defaultMCP) {
+    const server = input.defaultMCP();
+    if (server) {
+      const endpoint = _chunkI57LW5VZcjs.applyFarmBasePath.call(void 0, server.path, input.basePath);
+      sources.set(endpoint, { ...server, endpoint, local: true });
+    }
+  }
   return [...sources.values()];
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, listFarmMCPServerSources, "listFarmMCPServerSources");
@@ -526,7 +537,7 @@ function createFarmAiCatalogResponse(request, input = {}, requestUrl) {
   const body = JSON.stringify(
     card ? card.card : { specVersion: "1.0", entries: servers.map(({ entry }) => entry) }
   );
-  const etag = `W/"${fnv1a(body)}"`;
+  const etag = _chunkKIIMAWOJcjs.createFarmWeakETag.call(void 0, body);
   const headers = {
     ...corsHeaders(),
     "Content-Type": card ? `${SERVER_CARD_TYPE}; charset=utf-8` : ard ? "application/json; charset=utf-8" : `${AI_CATALOG_TYPE}; charset=utf-8`,
@@ -535,7 +546,7 @@ function createFarmAiCatalogResponse(request, input = {}, requestUrl) {
     ETag: etag,
     "X-Content-Type-Options": "nosniff"
   };
-  if (_chunkOMVAU7NTcjs.matchesFarmIfNoneMatch.call(void 0, request.headers.get("if-none-match"), etag)) {
+  if (_chunkKIIMAWOJcjs.matchesFarmIfNoneMatch.call(void 0, request.headers.get("if-none-match"), etag)) {
     return new Response(null, { status: 304, headers });
   }
   _chunkJ63ZH5OQcjs.emitFarmAgentRead.call(void 0, request, card ? "mcp-server-card" : "ai-catalog", 200);
@@ -565,15 +576,6 @@ function truncate(text) {
   return text.length <= CARD_DESCRIPTION_MAX ? text : `${text.slice(0, CARD_DESCRIPTION_MAX - 1).trimEnd()}\u2026`;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, truncate, "truncate");
-function fnv1a(value) {
-  let hash = 2166136261;
-  for (let index = 0; index < value.length; index++) {
-    hash ^= value.charCodeAt(index);
-    hash = Math.imul(hash, 16777619);
-  }
-  return (hash >>> 0).toString(16).padStart(8, "0");
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, fnv1a, "fnv1a");
 
 // src/components/error-page.ts
 var ERROR_STATUS_TEXT = {
@@ -868,7 +870,12 @@ function createFarmApiCatalogResponse(method, input, request) {
 _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmApiCatalogResponse, "createFarmApiCatalogResponse");
 
 // src/app-manifest.ts
-var FARM_APP_MANIFEST_PATH = "/.well-known/farmjs";
+var FARM_APP_MANIFEST_PATH = "/.well-known/farmjs.json";
+var FARM_APP_MANIFEST_LEGACY_PATH = "/.well-known/farmjs";
+function isFarmAppManifestPath(pathname) {
+  return pathname === FARM_APP_MANIFEST_PATH || pathname === FARM_APP_MANIFEST_LEGACY_PATH;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, isFarmAppManifestPath, "isFarmAppManifestPath");
 var FARM_INFRA_SIGNATURE_HEADER = "farmjs-infra-signature";
 var SIGNED_PURPOSE = "farmjs-manifest-v1";
 var SIGNATURE_WINDOW_SECONDS = 300;
@@ -901,48 +908,80 @@ var SOURCES = {
   standalone: "defineTool",
   serverFunction: "serverFunction"
 };
-function createFarmAppManifest(input) {
-  return {
+function createFarmAppManifest(input, { full = false } = {}) {
+  const manifest = {
     schemaVersion: 1,
     app: {
-      farm: _chunkYC6V7PWEcjs.FARM_VERSION,
+      farm: _chunkDZ5ZVB2Kcjs.FARM_VERSION,
       renderer: input.renderer,
       basePath: input.basePath,
       build: input.build
     },
     packages: input.packages,
     mcp: {
-      servers: _chunk75RZHGLScjs._listFarmMCPCatalogs.call(void 0, ).map(({ server, tools, details }) => ({
-        name: server.name,
-        version: server.version,
-        path: server.path,
-        resources: [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _37 => _37.resources]), () => ( []))],
-        prompts: [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _38 => _38.prompts]), () => ( []))],
-        tools: tools.map((tool) => {
-          const schemas = _optionalChain([details, 'optionalAccess', _39 => _39.schemas, 'optionalAccess', _40 => _40[tool.name]]);
-          const hints = Object.fromEntries(
-            ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
-          );
-          return {
-            name: tool.name,
-            ...tool.title ? { title: tool.title } : {},
-            ...tool.description ? { description: tool.description } : {},
-            source: SOURCES[tool.kind],
-            ...tool.kind === "endpoint" ? { method: tool.method, path: tool.path } : {},
-            ...hints,
-            ...schemas ? { inputSchema: schemas.input } : {},
-            ..._optionalChain([schemas, 'optionalAccess', _41 => _41.output]) ? { outputSchema: schemas.output } : {}
-          };
-        })
-      }))
+      servers: _chunk75RZHGLScjs._listFarmMCPCatalogs.call(void 0, ).map(({ server, tools, details }) => {
+        const listed = full || _optionalChain([details, 'optionalAccess', _37 => _37.public]) === true;
+        return {
+          name: server.name,
+          version: server.version,
+          path: server.path,
+          authorization: _optionalChain([details, 'optionalAccess', _38 => _38.public]) === true ? "none" : "required",
+          resources: listed ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _39 => _39.resources]), () => ( []))] : [],
+          prompts: listed ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _40 => _40.prompts]), () => ( []))] : [],
+          tools: (listed ? tools : []).map((tool) => {
+            const schemas = _optionalChain([details, 'optionalAccess', _41 => _41.schemas, 'optionalAccess', _42 => _42[tool.name]]);
+            const hints = Object.fromEntries(
+              ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
+            );
+            return {
+              name: tool.name,
+              ...tool.title ? { title: tool.title } : {},
+              ...tool.description ? { description: tool.description } : {},
+              source: SOURCES[tool.kind],
+              // MCP clients never see the route behind a tool; only Infra's view names it.
+              ...full && tool.kind === "endpoint" ? { method: tool.method, path: tool.path } : {},
+              ...hints,
+              ...schemas ? { inputSchema: schemas.input } : {},
+              ..._optionalChain([schemas, 'optionalAccess', _43 => _43.output]) ? { outputSchema: schemas.output } : {}
+            };
+          })
+        };
+      })
     },
     webmcp: input.webmcp,
     integrations: input.integrations,
     agent: input.agent,
     plugins: input.plugins
   };
+  manifest.mcp.servers.push(...listDefaultServer(input));
+  return manifest;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmAppManifest, "createFarmAppManifest");
+function listDefaultServer(input) {
+  const server = _optionalChain([input, 'access', _44 => _44.defaultMCP, 'optionalCall', _45 => _45()]);
+  if (!server) return [];
+  return [
+    {
+      name: server.name,
+      version: server.version,
+      path: server.path,
+      authorization: "none",
+      resources: [],
+      prompts: [],
+      tools: _chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_TOOLS.map((tool) => ({
+        name: tool.name,
+        title: tool.title,
+        description: tool.description,
+        // Standalone tools with no endpoint behind them, like defineTool's.
+        source: "defineTool",
+        ...tool.annotations,
+        inputSchema: tool.inputSchema,
+        ..."outputSchema" in tool ? { outputSchema: tool.outputSchema } : {}
+      }))
+    }
+  ];
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, listDefaultServer, "listDefaultServer");
 var encoder = new TextEncoder();
 var hex = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (bytes) => [...new Uint8Array(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join(""), "hex");
 async function sha256Hex(value) {
@@ -972,7 +1011,7 @@ async function verifyFarmInfraManifestSignature(header, key, now = Date.now()) {
   if (!header || header.length > 2048) return false;
   const parts = header.split(",").map((part) => part.trim());
   const timestamp = Number(
-    _optionalChain([/^t=(\d{1,12})$/, 'access', _42 => _42.exec, 'call', _43 => _43(_nullishCoalesce(parts.find((part) => part.startsWith("t=")), () => ( ""))), 'optionalAccess', _44 => _44[1]])
+    _optionalChain([/^t=(\d{1,12})$/, 'access', _46 => _46.exec, 'call', _47 => _47(_nullishCoalesce(parts.find((part) => part.startsWith("t=")), () => ( ""))), 'optionalAccess', _48 => _48[1]])
   );
   if (!Number.isSafeInteger(timestamp)) return false;
   if (Math.abs(now / 1e3 - timestamp) > SIGNATURE_WINDOW_SECONDS) return false;
@@ -984,25 +1023,44 @@ ${timestamp}`);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, verifyFarmInfraManifestSignature, "verifyFarmInfraManifestSignature");
 function processEnv() {
-  return _nullishCoalesce(_optionalChain([globalThis, 'access', _45 => _45.process, 'optionalAccess', _46 => _46.env]), () => ( {}));
+  return _nullishCoalesce(_optionalChain([globalThis, 'access', _49 => _49.process, 'optionalAccess', _50 => _50.env]), () => ( {}));
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, processEnv, "processEnv");
-async function createFarmAppManifestResponse(request, input, options) {
-  if (request.method !== "GET" && request.method !== "HEAD") return null;
-  if (!options.development) {
-    const key = _optionalChain([(_nullishCoalesce(options.env, () => ( processEnv()))), 'access', _47 => _47.FARMJS_API_KEY, 'optionalAccess', _48 => _48.trim, 'call', _49 => _49()]);
-    if (!input.analytics || !key) return null;
-    const signed = await verifyFarmInfraManifestSignature(
-      request.headers.get(FARM_INFRA_SIGNATURE_HEADER),
-      key
-    );
-    if (!signed)
-      return new Response(null, { status: 404, headers: { "cache-control": "no-store" } });
+var CORS_HEADERS = {
+  "access-control-allow-origin": "*",
+  "access-control-allow-methods": "GET, HEAD, OPTIONS",
+  "access-control-allow-headers": `If-None-Match, ${FARM_INFRA_SIGNATURE_HEADER}`,
+  "access-control-expose-headers": "ETag"
+};
+async function createFarmAppManifestResponse(request, input, options = {}) {
+  const method = request.method.toUpperCase();
+  if (method === "OPTIONS") return new Response(null, { status: 204, headers: CORS_HEADERS });
+  if (method !== "GET" && method !== "HEAD") {
+    return new Response("Method Not Allowed", {
+      status: 405,
+      headers: { ...CORS_HEADERS, allow: "GET, HEAD, OPTIONS", "content-type": "text/plain" }
+    });
   }
-  const body = JSON.stringify(createFarmAppManifest(input));
-  return new Response(request.method === "HEAD" ? null : body, {
-    headers: { "content-type": "application/json", "cache-control": "private, no-store" }
-  });
+  const signature = request.headers.get(FARM_INFRA_SIGNATURE_HEADER);
+  const key = input.analytics ? _optionalChain([(_nullishCoalesce(options.env, () => ( processEnv()))), 'access', _51 => _51.FARMJS_API_KEY, 'optionalAccess', _52 => _52.trim, 'call', _53 => _53()]) : void 0;
+  const full = Boolean(
+    signature && key && await verifyFarmInfraManifestSignature(signature, key)
+  );
+  const body = JSON.stringify(createFarmAppManifest(input, { full }));
+  const etag = _chunkKIIMAWOJcjs.createFarmWeakETag.call(void 0, body);
+  const headers = {
+    ...CORS_HEADERS,
+    "content-type": "application/json; charset=utf-8",
+    // The full view is for Infra alone; shared caches keep the two views apart.
+    "cache-control": full ? "private, no-store" : "public, max-age=0, must-revalidate",
+    vary: FARM_INFRA_SIGNATURE_HEADER,
+    etag,
+    "x-content-type-options": "nosniff"
+  };
+  if (!full && _chunkKIIMAWOJcjs.matchesFarmIfNoneMatch.call(void 0, request.headers.get("if-none-match"), etag)) {
+    return new Response(null, { status: 304, headers });
+  }
+  return new Response(method === "HEAD" ? null : body, { status: 200, headers });
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmAppManifestResponse, "createFarmAppManifestResponse");
 
@@ -1037,4 +1095,7 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmAppManifestResponse, "createFarm
 
 
 
-exports.formatRouteSegment = formatRouteSegment; exports.createRouteDirectoryPattern = createRouteDirectoryPattern; exports.stripRouteGroups = stripRouteGroups; exports.getRouteGroupScope = getRouteGroupScope; exports.isInRouteGroupScope = isInRouteGroupScope; exports.getRouteDirectoryDepth = getRouteDirectoryDepth; exports.routeBoundaryCoversDirectory = routeBoundaryCoversDirectory; exports.HOISTED_HEAD_ELEMENT = HOISTED_HEAD_ELEMENT; exports.extractFarmFullDocument = extractFarmFullDocument; exports.classifyFarmDocumentPrefix = classifyFarmDocumentPrefix; exports.removeFarmDocumentTitles = removeFarmDocumentTitles; exports.ensureFarmDocumentMeta = ensureFarmDocumentMeta; exports.composeFarmFullDocument = composeFarmFullDocument; exports.renderFarmLocaleAlternateLinks = renderFarmLocaleAlternateLinks; exports.createLateRedirectRecovery = createLateRedirectRecovery; exports.createLateNotFoundRecovery = createLateNotFoundRecovery; exports.createFarmMetadataRouteResponse = createFarmMetadataRouteResponse; exports.listFarmMCPLlmsTxtLinks = listFarmMCPLlmsTxtLinks; exports.createFarmAiCatalogResponse = createFarmAiCatalogResponse; exports.resolveDefaultErrorStatus = resolveDefaultErrorStatus; exports.getDefaultErrorStatusText = getDefaultErrorStatusText; exports.createDefaultErrorMarkup = createDefaultErrorMarkup; exports.createFarmThemeDocumentParts = createFarmThemeDocumentParts; exports.applyFarmThemeDocument = applyFarmThemeDocument; exports.FARM_API_CATALOG_PATH = FARM_API_CATALOG_PATH; exports.resolveFarmApiCatalogInput = resolveFarmApiCatalogInput; exports.createFarmApiCatalogResponse = createFarmApiCatalogResponse; exports.FARM_APP_MANIFEST_PATH = FARM_APP_MANIFEST_PATH; exports.resolveFarmAppManifestInput = resolveFarmAppManifestInput; exports.createFarmAppManifestResponse = createFarmAppManifestResponse;
+
+
+
+exports.formatRouteSegment = formatRouteSegment; exports.createRouteDirectoryPattern = createRouteDirectoryPattern; exports.stripRouteGroups = stripRouteGroups; exports.getRouteGroupScope = getRouteGroupScope; exports.isInRouteGroupScope = isInRouteGroupScope; exports.getRouteDirectoryDepth = getRouteDirectoryDepth; exports.routeBoundaryCoversDirectory = routeBoundaryCoversDirectory; exports.HOISTED_HEAD_ELEMENT = HOISTED_HEAD_ELEMENT; exports.extractFarmFullDocument = extractFarmFullDocument; exports.classifyFarmDocumentPrefix = classifyFarmDocumentPrefix; exports.removeFarmDocumentTitles = removeFarmDocumentTitles; exports.ensureFarmDocumentMeta = ensureFarmDocumentMeta; exports.composeFarmFullDocument = composeFarmFullDocument; exports.renderFarmLocaleAlternateLinks = renderFarmLocaleAlternateLinks; exports.createLateRedirectRecovery = createLateRedirectRecovery; exports.createLateNotFoundRecovery = createLateNotFoundRecovery; exports.createFarmMetadataRouteResponse = createFarmMetadataRouteResponse; exports.listFarmMCPLlmsTxtLinks = listFarmMCPLlmsTxtLinks; exports.createFarmAiCatalogResponse = createFarmAiCatalogResponse; exports.resolveDefaultErrorStatus = resolveDefaultErrorStatus; exports.getDefaultErrorStatusText = getDefaultErrorStatusText; exports.createDefaultErrorMarkup = createDefaultErrorMarkup; exports.createFarmThemeDocumentParts = createFarmThemeDocumentParts; exports.applyFarmThemeDocument = applyFarmThemeDocument; exports.FARM_API_CATALOG_PATH = FARM_API_CATALOG_PATH; exports.resolveFarmApiCatalogInput = resolveFarmApiCatalogInput; exports.createFarmApiCatalogResponse = createFarmApiCatalogResponse; exports.FARM_APP_MANIFEST_PATH = FARM_APP_MANIFEST_PATH; exports.FARM_APP_MANIFEST_LEGACY_PATH = FARM_APP_MANIFEST_LEGACY_PATH; exports.isFarmAppManifestPath = isFarmAppManifestPath; exports.FARM_INFRA_SIGNATURE_HEADER = FARM_INFRA_SIGNATURE_HEADER; exports.resolveFarmAppManifestInput = resolveFarmAppManifestInput; exports.createFarmAppManifestResponse = createFarmAppManifestResponse;

package/dist/{chunk-CP6X4AEU.mjs → chunk-AJQTP4OO.mjs}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-5WI2S4CO.mjs";
 import {
   matchesFarmIfNoneMatch
-} from "./chunk-Y7RKTKYI.mjs";
+} from "./chunk-ZMMBIVQM.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";

package/dist/{chunk-4MMGO7YW.cjs → chunk-AO6RYU5N.cjs}

@@ -6,7 +6,7 @@ var _chunk4PPEPOZZcjs = require('./chunk-4PPEPOZZ.cjs');
 var _chunkMQ3H6LT5cjs = require('./chunk-MQ3H6LT5.cjs');
 
 
-var _chunkXBML5KMGcjs = require('./chunk-XBML5KMG.cjs');
+var _chunkFO427P6Icjs = require('./chunk-FO427P6I.cjs');
 
 
 var _chunkSJNMVDDFcjs = require('./chunk-SJNMVDDF.cjs');
@@ -20,7 +20,7 @@ var _chunk2CQ74SP6cjs = require('./chunk-2CQ74SP6.cjs');
 
 
 
-var _chunkXCACDAZZcjs = require('./chunk-XCACDAZZ.cjs');
+var _chunkS6VYG6XUcjs = require('./chunk-S6VYG6XU.cjs');
 
 
 var _chunk6V4TDWECcjs = require('./chunk-6V4TDWEC.cjs');
@@ -28,13 +28,13 @@ var _chunk6V4TDWECcjs = require('./chunk-6V4TDWEC.cjs');
 
 
 
-var _chunkOMVAU7NTcjs = require('./chunk-OMVAU7NT.cjs');
+var _chunkKIIMAWOJcjs = require('./chunk-KIIMAWOJ.cjs');
 
 
 var _chunkM2L4MYDQcjs = require('./chunk-M2L4MYDQ.cjs');
 
 
-var _chunkBMWDEBXOcjs = require('./chunk-BMWDEBXO.cjs');
+var _chunkSHLXACIOcjs = require('./chunk-SHLXACIO.cjs');
 
 
 
@@ -58,7 +58,7 @@ var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
 function farmApiPlugin(options = {}) {
   const srcDir = _nullishCoalesce(options.srcDir, () => ( "src"));
   const debug = _nullishCoalesce(options.debug, () => ( false));
-  const bodySizeLimit = _chunkOMVAU7NTcjs.resolveFarmServerConfig.call(void 0, {
+  const bodySizeLimit = _chunkKIIMAWOJcjs.resolveFarmServerConfig.call(void 0, {
     bodySizeLimit: options.bodySizeLimit
   }).bodySizeLimit;
   const basePath = options.basePath;
@@ -110,7 +110,7 @@ function farmApiPlugin(options = {}) {
     const existing = apiRoutesCache.get(routePath);
     const existingFile = _optionalChain([endpointSources, 'access', _ => _.get, 'call', _2 => _2(routePath), 'optionalAccess', _3 => _3.get, 'call', _4 => _4(normalizedMethod)]);
     if (existingFile) {
-      throw new (0, _chunkXBML5KMGcjs.APIRouteConflictError)(routePath, normalizedMethod, existingFile, filePath);
+      throw new (0, _chunkFO427P6Icjs.APIRouteConflictError)(routePath, normalizedMethod, existingFile, filePath);
     }
     if (existing) {
       if (!existing.methods.includes(normalizedMethod)) {
@@ -186,8 +186,11 @@ function farmApiPlugin(options = {}) {
   const createRouter = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, async () => {
     const plugins = options.plugins ? await (_nullishCoalesce(routePlugins, () => ( (routePlugins = Promise.resolve(options.plugins({ root: projectRoot })))))) : [];
     pluginMergedRoutes = plugins.length ? new Map(
-      _chunkXCACDAZZcjs.mergePluginAPIRoutes.call(void 0, [...apiRoutesCache.values()], plugins, void 0, {
-        bodySizeLimit
+      _chunkS6VYG6XUcjs.mergePluginAPIRoutes.call(void 0, [...apiRoutesCache.values()], plugins, void 0, {
+        bodySizeLimit,
+        // A plugin calling an app endpoint (an MCP tool, say) goes back through this server,
+        // so the middleware that guards the endpoint's path runs for it.
+        dispatch: /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (request) => fetch(request, { redirect: "manual" }), "dispatch")
       }).map((route) => [route.path, route])
     ) : null;
     const totalEndpoints = Array.from(servedRoutes().values()).reduce(
@@ -200,7 +203,7 @@ function farmApiPlugin(options = {}) {
         const url = new URL(request.url);
         const method = request.method.toUpperCase();
         const pathname = url.pathname;
-        const match = _chunkXCACDAZZcjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), pathname, basePath);
+        const match = _chunkS6VYG6XUcjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), pathname, basePath);
         if (!match) {
           return new Response(JSON.stringify({ error: "Not Found" }), {
             status: 404,
@@ -208,18 +211,18 @@ function farmApiPlugin(options = {}) {
           });
         }
         const { route, params } = match;
-        const endpoint = _chunkXCACDAZZcjs.resolveAPIRouteEndpoint.call(void 0, route, method);
+        const endpoint = _chunkS6VYG6XUcjs.resolveAPIRouteEndpoint.call(void 0, route, method);
         if (!endpoint) {
           return new Response(JSON.stringify({ error: "Method Not Allowed" }), {
             status: 405,
             headers: {
-              Allow: _chunkXCACDAZZcjs.getAllowedAPIRouteMethods.call(void 0, route).join(", "),
+              Allow: _chunkS6VYG6XUcjs.getAllowedAPIRouteMethods.call(void 0, route).join(", "),
               "Content-Type": "application/json"
             }
           });
         }
         try {
-          return await _chunkXCACDAZZcjs.invokeAPIRouteEndpoint.call(void 0, endpoint, request, params, bodySizeLimit);
+          return await _chunkS6VYG6XUcjs.invokeAPIRouteEndpoint.call(void 0, endpoint, request, params, bodySizeLimit);
         } catch (error) {
           return new Response(JSON.stringify({ error: error.message || "Internal Server Error" }), {
             status: 500,
@@ -264,10 +267,10 @@ function farmApiPlugin(options = {}) {
           try {
             const relativePath = path.relative(apiDir, path.dirname(filePath));
             const routePath = "/api/" + (relativePath === "." ? "" : relativePath.replace(/\\/g, "/"));
-            const routeModule = await _chunkBMWDEBXOcjs.loadFarmDevModule.call(void 0, server, filePath);
+            const routeModule = await _chunkSHLXACIOcjs.loadFarmDevModule.call(void 0, server, filePath);
             const endpoints = {};
             const availableMethods = [];
-            for (const method of _chunkXCACDAZZcjs.API_ROUTE_METHODS) {
+            for (const method of _chunkS6VYG6XUcjs.API_ROUTE_METHODS) {
               if (routeModule[method]) {
                 availableMethods.push(method);
                 endpoints[method] = routeModule[method];
@@ -280,7 +283,7 @@ function farmApiPlugin(options = {}) {
               log(`API route discovered: ${availableMethods.join(", ")} ${routePath}`);
             }
           } catch (e) {
-            if (e instanceof _chunkXBML5KMGcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+            if (e instanceof _chunkFO427P6Icjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
             log(`API route load failed at ${filePath}: ${e.message}`);
           }
         }
@@ -296,7 +299,7 @@ function farmApiPlugin(options = {}) {
         for (const routesFile of routesFiles) {
           if (fs.existsSync(routesFile)) {
             try {
-              const routesModule = await _chunkBMWDEBXOcjs.loadFarmDevModule.call(void 0, server, routesFile);
+              const routesModule = await _chunkSHLXACIOcjs.loadFarmDevModule.call(void 0, server, routesFile);
               for (const [exportName, exportValue] of Object.entries(routesModule)) {
                 const endpoint = exportValue;
                 if (endpoint && endpoint.__path) {
@@ -307,7 +310,7 @@ function farmApiPlugin(options = {}) {
                 }
               }
             } catch (e) {
-              if (e instanceof _chunkXBML5KMGcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+              if (e instanceof _chunkFO427P6Icjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
               log(`Root routes.ts load failed: ${e.message}`);
             }
             break;
@@ -322,7 +325,7 @@ function farmApiPlugin(options = {}) {
         const { getProgrammaticRouteManifest } = await import("./routes.cjs");
         for (const routeFile of routeFiles) {
           try {
-            const routesModule = await _chunkBMWDEBXOcjs.loadFarmDevModule.call(void 0, 
+            const routesModule = await _chunkSHLXACIOcjs.loadFarmDevModule.call(void 0, 
               server,
               _chunk5QIKR7RRcjs.toViteModuleId.call(void 0, routeFile, server.config.root)
             );
@@ -338,7 +341,7 @@ function farmApiPlugin(options = {}) {
               }
             }
           } catch (e) {
-            if (e instanceof _chunkXBML5KMGcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+            if (e instanceof _chunkFO427P6Icjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
             log(`Programmatic routes file load failed at ${routeFile}: ${e.message}`);
           }
         }
@@ -390,7 +393,7 @@ function farmApiPlugin(options = {}) {
           const pathname = url.split("?")[0];
           const method = req.method || "GET";
           if (discoveryPromise) await waitForDiscovery();
-          if (!_chunkXCACDAZZcjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), pathname, basePath)) {
+          if (!_chunkS6VYG6XUcjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), pathname, basePath)) {
             return next();
           }
           if (!apiRouterHandler) {
@@ -411,7 +414,7 @@ function farmApiPlugin(options = {}) {
             }
             const currentUrl = req.url || url;
             const currentPathname = currentUrl.split("?")[0];
-            if (currentPathname !== pathname && !_chunkXCACDAZZcjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), currentPathname, basePath)) {
+            if (currentPathname !== pathname && !_chunkS6VYG6XUcjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), currentPathname, basePath)) {
               return next();
             }
             const fullUrl = _chunkUXFQ3UDAcjs.resolveFarmRequestURL.call(void 0, req);
@@ -423,7 +426,7 @@ function farmApiPlugin(options = {}) {
             }
             let body;
             if (method !== "GET" && method !== "HEAD") {
-              body = await _chunkOMVAU7NTcjs.readNodeRequestBody.call(void 0, req, bodySizeLimit);
+              body = await _chunkKIIMAWOJcjs.readNodeRequestBody.call(void 0, req, bodySizeLimit);
             }
             const request = new Request(fullUrl, {
               method,
@@ -438,7 +441,7 @@ function farmApiPlugin(options = {}) {
             logResponse(method, currentPathname, response.status, duration);
             await _chunkUQZ4AYTHcjs.sendWebResponse.call(void 0, res, response);
           } catch (error) {
-            const bodyErrorResponse = _chunkOMVAU7NTcjs.createFarmRequestBodyErrorResponse.call(void 0, error);
+            const bodyErrorResponse = _chunkKIIMAWOJcjs.createFarmRequestBodyErrorResponse.call(void 0, error);
             if (bodyErrorResponse) {
               await _chunkUQZ4AYTHcjs.sendWebResponse.call(void 0, res, bodyErrorResponse);
               return;
@@ -487,7 +490,7 @@ function farmApiPlugin(options = {}) {
         if (await _optionalChain([recoverFailedDiscovery, 'optionalCall', _9 => _9()])) return [];
         const previousState = snapshotRouteState();
         try {
-          const routesModule = await _chunkBMWDEBXOcjs.loadFarmDevModule.call(void 0, server, file);
+          const routesModule = await _chunkSHLXACIOcjs.loadFarmDevModule.call(void 0, server, file);
           removeEndpointsFromFile(file);
           for (const [exportName, exportValue] of Object.entries(routesModule)) {
             const endpoint = exportValue;
@@ -515,7 +518,7 @@ function farmApiPlugin(options = {}) {
           log(`API router recreated`);
         } catch (e) {
           restoreRouteState(previousState);
-          if (e instanceof _chunkXBML5KMGcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+          if (e instanceof _chunkFO427P6Icjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
           log(`Root routes.ts HMR failed: ${e.message}`);
         }
         return [];
@@ -540,10 +543,10 @@ function farmApiPlugin(options = {}) {
             log(`API route file removed: ${routePath}`);
             return [];
           }
-          const routeModule = await _chunkBMWDEBXOcjs.loadFarmDevModule.call(void 0, server, file);
+          const routeModule = await _chunkSHLXACIOcjs.loadFarmDevModule.call(void 0, server, file);
           removeEndpointsFromFile(file);
           const availableMethods = [];
-          for (const method of _chunkXCACDAZZcjs.API_ROUTE_METHODS) {
+          for (const method of _chunkS6VYG6XUcjs.API_ROUTE_METHODS) {
             if (!routeModule[method]) continue;
             availableMethods.push(method);
             addEndpoint(routePath, file, method, routeModule[method]);
@@ -553,7 +556,7 @@ function farmApiPlugin(options = {}) {
           log(`API router recreated`);
         } catch (e) {
           restoreRouteState(previousState);
-          if (e instanceof _chunkXBML5KMGcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+          if (e instanceof _chunkFO427P6Icjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
           log(`API route HMR failed: ${e.message}`);
         }
         return [];

package/dist/{chunk-GFHLGIYC.cjs → chunk-BO36SELV.cjs}

@@ -4,7 +4,7 @@
 
 
 
-var _chunkZXGAFZDOcjs = require('./chunk-ZXGAFZDO.cjs');
+var _chunkT5OJPTVNcjs = require('./chunk-T5OJPTVN.cjs');
 
 
 var _chunkYWN746UScjs = require('./chunk-YWN746US.cjs');
@@ -70,13 +70,13 @@ async function _invokeServerFunction(value, input, request) {
     throw new TypeError("Expected a function created with createServerFn or createServerQuery");
   }
   try {
-    const data = await _chunkZXGAFZDOcjs.runWithServerActionRequest.call(void 0, request, () => runner.run(input));
+    const data = await _chunkT5OJPTVNcjs.runWithServerActionRequest.call(void 0, request, () => runner.run(input));
     return { ok: true, data };
   } catch (error) {
     if (error instanceof ServerFnInputError) {
       return { ok: false, reason: "input", error: error.cause };
     }
-    if (_chunkZXGAFZDOcjs.isServerFnFailure.call(void 0, error)) return { ok: false, reason: "failure", failure: error };
+    if (_chunkT5OJPTVNcjs.isServerFnFailure.call(void 0, error)) return { ok: false, reason: "failure", failure: error };
     const redirect = _chunkOX6O6WVAcjs.getFarmRedirectError.call(void 0, error);
     if (redirect) {
       return { ok: false, reason: "redirect", url: redirect.url, status: redirect.status };
@@ -117,9 +117,9 @@ function createServerFn(options) {
     } catch (cause) {
       throw labelInputErrors && isSchemaValidationFailure(cause) ? new ServerFnInputError(cause) : cause;
     }
-    const executionContext = _chunkZXGAFZDOcjs.getServerActionExecutionContext.call(void 0, );
+    const executionContext = _chunkT5OJPTVNcjs.getServerActionExecutionContext.call(void 0, );
     const request = _nullishCoalesce(_optionalChain([executionContext, 'optionalAccess', _ => _.request]), () => ( _chunkU4KT7QP3cjs._resolveCurrentRequest.call(void 0, )));
-    const signal = _nullishCoalesce(_nullishCoalesce(_optionalChain([executionContext, 'optionalAccess', _2 => _2.signal]), () => ( _optionalChain([request, 'optionalAccess', _3 => _3.signal]))), () => ( _chunkZXGAFZDOcjs.getServerActionSignal.call(void 0, )));
+    const signal = _nullishCoalesce(_nullishCoalesce(_optionalChain([executionContext, 'optionalAccess', _2 => _2.signal]), () => ( _optionalChain([request, 'optionalAccess', _3 => _3.signal]))), () => ( _chunkT5OJPTVNcjs.getServerActionSignal.call(void 0, )));
     const handlerContext = {
       input,
       rawInput,
@@ -245,7 +245,7 @@ function createServerFnErrorHandler(definitions) {
       throw new TypeError(`Server function error "${code}" is not declared`);
     }
     const parsed = parseServerFnFailureData(code, definition.data, data);
-    throw new (0, _chunkZXGAFZDOcjs.ServerFnFailure)(code, parsed, {
+    throw new (0, _chunkT5OJPTVNcjs.ServerFnFailure)(code, parsed, {
       status: definition.status,
       message: _nullishCoalesce(definition.message, () => ( "Server function failed"))
     });

package/dist/{chunk-6TJOML4E.mjs → chunk-BPOF5U4N.mjs}

@@ -20,19 +20,19 @@ import {
 import {
   loadFarmDevModule,
   toFileModuleUrl
-} from "./chunk-43FMW62B.mjs";
+} from "./chunk-KMTGADN3.mjs";
 import {
   logger
 } from "./chunk-KI3MESHB.mjs";
-import {
-  createFarmAPIMiddlewarePathnames
-} from "./chunk-BTHHUD7Q.mjs";
 import {
   emitFarmEvent
 } from "./chunk-FUZEBRP3.mjs";
 import {
   sendWebResponse
 } from "./chunk-Z2RZJZIZ.mjs";
+import {
+  createFarmAPIMiddlewarePathnames
+} from "./chunk-BTHHUD7Q.mjs";
 import {
   getFarmRedirectError,
   isFarmNotFoundError,

package/dist/{chunk-JHWOVJ3M.mjs → chunk-BUGNQIHC.mjs}

@@ -190,6 +190,7 @@ function createFarmConfigResolutionPlugin(options) {
   };
 }
 __name(createFarmConfigResolutionPlugin, "createFarmConfigResolutionPlugin");
+var FARM_CONFIG_ROOT = /* @__PURE__ */ Symbol.for("farm.configRoot");
 async function loadFarmConfigFile(configPath, options) {
   const { transform } = await import("rolldown/utils");
   const cacheRoot = path.resolve(options.cacheRoot || options.root);
@@ -207,6 +208,9 @@ async function loadFarmConfigFile(configPath, options) {
     plugins: [createFarmConfigResolutionPlugin({ transform })]
   });
   const moduleUrl = `${pathToFileURL(modulePath).href}?t=${Date.now()}`;
+  const configRootState = globalThis;
+  const previousConfigRoot = configRootState[FARM_CONFIG_ROOT];
+  configRootState[FARM_CONFIG_ROOT] = cacheRoot;
   try {
     const loaded = await import(
       /* @vite-ignore */
@@ -218,6 +222,7 @@ async function loadFarmConfigFile(configPath, options) {
     }
     return config;
   } finally {
+    configRootState[FARM_CONFIG_ROOT] = previousConfigRoot;
     await unlink(modulePath).catch(() => void 0);
   }
 }