@farm.js/core 0.1.35 → 0.1.37

package/dist/{chunk-QAU5JD57.mjs → chunk-K4I4O5TS.mjs}

@@ -5,12 +5,13 @@ import {
   withProductionNodeEnv
 } from "./chunk-655RLQQL.mjs";
 import {
-  generateNativeMCPPluginSource
-} from "./chunk-FXEF4PPL.mjs";
+  generateNativeMCPPluginSource,
+  layoutsCanCoverSamePage
+} from "./chunk-WRPHYQVY.mjs";
 import {
   compileFarmDocsAdapterEdgeManifest,
   createFarmDocsAPIHandler
-} from "./chunk-SOMHP6GF.mjs";
+} from "./chunk-XOPOIFTJ.mjs";
 import {
   FARM_DOCS_LAST_MODIFIED_MANIFEST,
   createFarmDocsHandler,
@@ -20,7 +21,7 @@ import {
   loadFarmDocsPage,
   resolveFarmDocsContentDir,
   toFarmDocsMarkdownPage
-} from "./chunk-PDOCJ6RY.mjs";
+} from "./chunk-O6WAEAX3.mjs";
 import {
   generateFarmDocsSearchClientRuntime,
   isFarmDocsSearchEnabled,
@@ -28,7 +29,7 @@ import {
 } from "./chunk-UP4CW6WP.mjs";
 import {
   FARM_PRERENDER_ENV
-} from "./chunk-3KZS4SUS.mjs";
+} from "./chunk-MCIZVNOQ.mjs";
 import {
   loadFarmDocsEngine
 } from "./chunk-2VQKKQ6D.mjs";
@@ -37,7 +38,7 @@ import {
   getDeployTargetForPreset,
   hasCustomFarmRouteContext,
   resolveDeployOutputPath
-} from "./chunk-6DU6UFUE.mjs";
+} from "./chunk-EXG5LD6B.mjs";
 import {
   resolveFarmInstrumentationFile
 } from "./chunk-ZZSRYEYU.mjs";
@@ -76,15 +77,16 @@ import {
   resolveFarmIsolatedClientHydrationMode,
   resolveFarmNotFoundComponentPath,
   usesFarmServerTree
-} from "./chunk-4KU5Q7C2.mjs";
+} from "./chunk-4P6ULFMD.mjs";
 import {
   findRequestBoundSourceBlockers,
   generateFarmTypeArtifacts,
   parseRouteRenderingDirective,
   resolveRouteRenderingConfigFromFile
-} from "./chunk-2G2NNLE2.mjs";
+} from "./chunk-CQMVIOYP.mjs";
 import {
   FARM_API_CATALOG_PATH,
+  FARM_APP_MANIFEST_LEGACY_PATH,
   FARM_APP_MANIFEST_PATH,
   HOISTED_HEAD_ELEMENT,
   getRouteDirectoryDepth,
@@ -93,7 +95,12 @@ import {
   resolveFarmAppManifestInput,
   routeBoundaryCoversDirectory,
   stripRouteGroups
-} from "./chunk-6ETPZTJI.mjs";
+} from "./chunk-LBGILORX.mjs";
+import {
+  FARM_DEFAULT_MCP_PATH,
+  createFarmDefaultMCPServer,
+  farmConfigMountsMCP
+} from "./chunk-UH6QN5NL.mjs";
 import {
   isFarmPreviewDeploymentEnvironment
 } from "./chunk-BOYNDCZL.mjs";
@@ -113,7 +120,7 @@ import {
 } from "./chunk-GHFS7RUB.mjs";
 import {
   getFarmAppDirectories
-} from "./chunk-JHWOVJ3M.mjs";
+} from "./chunk-BUGNQIHC.mjs";
 import {
   REACT_RENDERER,
   getFarmRendererCapabilities,
@@ -125,7 +132,7 @@ import {
 } from "./chunk-DAATZTKJ.mjs";
 import {
   applyFarmCspHashesToHtml
-} from "./chunk-UJD4PHYB.mjs";
+} from "./chunk-4E5WBPEG.mjs";
 import {
   applyFarmCronVercelCrons,
   createFarmCronCloudflareConfig,
@@ -137,7 +144,7 @@ import {
 } from "./chunk-4OOBRCJX.mjs";
 import {
   isFarmMarkdownPageFile
-} from "./chunk-4JHOT46A.mjs";
+} from "./chunk-TPLJVC7E.mjs";
 import {
   resolveFarmMdxComponentsModulePath,
   resolveMdxConfig
@@ -148,24 +155,25 @@ import {
 import {
   applyFarmWorkflowVercelCrons,
   prepareFarmWorkflowsForNitro
-} from "./chunk-6WCPV6G2.mjs";
+} from "./chunk-Q2KB32T4.mjs";
 import {
+  FARM_INTEGRATION_API_BASE_PATH_KEY,
   getFarmIntegrationPluginServerRuntime,
   getIntegrationProviders
-} from "./chunk-HMIJDL7S.mjs";
+} from "./chunk-Z5BEWYVO.mjs";
 import {
   appendMiddlewareDirectory,
   appendMiddlewareRoutePath,
   compareMiddlewareRouteLocations
-} from "./chunk-6TJOML4E.mjs";
+} from "./chunk-NFMDCAOS.mjs";
 import {
   compileMiddlewareConfig,
   matchesCompiledMiddlewareConfig,
   matchesMiddlewareRoute
-} from "./chunk-JG6DJF5A.mjs";
+} from "./chunk-HZFM2LWQ.mjs";
 import {
   APIRouteManager
-} from "./chunk-22LTEMGQ.mjs";
+} from "./chunk-VXAWRDK7.mjs";
 import {
   readFarmI18nCatalogs
 } from "./chunk-QCFBDFRS.mjs";
@@ -190,6 +198,9 @@ import {
   resolveFarmAPIServerBasePath,
   resolveFarmAPIServerRoutePath
 } from "./chunk-BTHHUD7Q.mjs";
+import {
+  FARM_VERSION
+} from "./chunk-YCKO6FRS.mjs";
 import {
   getFarmPresetRuntime
 } from "./chunk-2A3EQHXX.mjs";
@@ -257,7 +268,7 @@ __name(resolveHashedClientJsSrc, "resolveHashedClientJsSrc");
 // src/nitro/universal-build.ts
 import os from "os";
 import path6 from "path";
-import { constants as fsConstants, existsSync as existsSync2, readFileSync, realpathSync } from "fs";
+import { constants as fsConstants, existsSync as existsSync2, readFileSync, realpathSync, statSync } from "fs";
 import { fileURLToPath } from "url";
 import { builtinModules, createRequire } from "module";
 import { isDeepStrictEqual } from "util";
@@ -749,15 +760,32 @@ function createFarmNetlifyEntry(options) {
 import nitroNetlifyHandler from ${JSON.stringify(options.nitroNetlifyEntry)};
 
 const PRIVATE_CACHE_DIRECTIVE = /(?:^|,)\\s*(?:private|no-store)\\s*(?:[,=]|$)/i;
+const CREDENTIAL_VARY = /(?:^|,)\\s*(?:\\*|cookie|authorization)\\s*(?:,|$)/i;
+// What Nitro's entry sets when the response has no Cache-Control of its own.
+const NITRO_DEFAULT_CACHE_CONTROL = "public, max-age=0, must-revalidate";
+
+function isSharedCacheable(request, response) {
+  return (
+    response.status === 200 &&
+    !request.headers.has("cookie") &&
+    !request.headers.has("authorization") &&
+    !response.headers.has("set-cookie") &&
+    !PRIVATE_CACHE_DIRECTIVE.test(response.headers.get("cache-control") || "") &&
+    !CREDENTIAL_VARY.test(response.headers.get("vary") || "")
+  );
+}
 
 export default async function farmNetlifyHandler(request, context) {
   const response = await nitroNetlifyHandler(request, context);
   if (
     response &&
     response.headers.has("netlify-cdn-cache-control") &&
-    PRIVATE_CACHE_DIRECTIVE.test(response.headers.get("cache-control") || "")
+    !isSharedCacheable(request, response)
   ) {
     response.headers.delete("netlify-cdn-cache-control");
+    if (response.headers.get("cache-control") === NITRO_DEFAULT_CACHE_CONTROL) {
+      response.headers.set("cache-control", "private, no-store");
+    }
   }
   return response;
 }
@@ -766,10 +794,14 @@ export default async function farmNetlifyHandler(request, context) {
 __name(createFarmNetlifyEntry, "createFarmNetlifyEntry");
 
 // src/nitro/node-server-entry.ts
+var FARM_NODE_ENV_MODULE_FILE = "farm-node-env.mjs";
+var FARM_NODE_ENV_MODULE_SOURCE = `if (!process.env.NODE_ENV) process.env.NODE_ENV = "production";
+`;
 function createFarmNodeServerEntry(options) {
   const serverConfig = JSON.stringify(options.server);
   const nitroEntryImport = `./${options.nitroEntryFile.replace(/^\.\//, "")}`;
   return `
+import "./${FARM_NODE_ENV_MODULE_FILE}";
 import "#nitro/virtual/polyfills";
 import { NodeRequest, serve } from ${JSON.stringify(options.nodeAdapterModule)};
 import wsAdapter from ${JSON.stringify(options.websocketAdapterModule)};
@@ -3160,15 +3192,17 @@ __farmConfigureApp(__farmAppSetup);` : `import React, { createRoot, hydrateRoot
   const cssImport = existsSync2(globalsCssPath) ? `import ${JSON.stringify(toImportPath(globalsCssPath))};` : "";
   const layoutImportStatements = [];
   const layoutRegistrations = [];
+  const hydratingLayoutPatterns = layoutRoutes.filter((layout) => layout.shouldHydrate).map((layout) => layout.pattern);
   layoutRoutes.forEach((layout, index) => {
     const relativePath = toImportPath(layout.modulePath);
-    if (!layout.hasIsolatedClientBoundaries) {
+    const rendersOnClient = !layout.hasIsolatedClientBoundaries && hydratingLayoutPatterns.some((pattern) => layoutsCanCoverSamePage(layout.pattern, pattern));
+    if (rendersOnClient) {
       layoutImportStatements.push(`import Layout${index} from "${relativePath}";`);
     }
     const groupScope = getRouteGroupScope(layout.pattern);
     const groupFields = groupScope ? `, urlPattern: ${JSON.stringify(stripRouteGroups(layout.pattern))}, groupScope: ${JSON.stringify(groupScope)}` : "";
     layoutRegistrations.push(
-      `  { pattern: ${JSON.stringify(layout.pattern)}${groupFields}, Component: ${layout.hasIsolatedClientBoundaries ? "null" : `Layout${index}`}, shouldHydrate: ${JSON.stringify(layout.shouldHydrate)}, islandStrategy: ${JSON.stringify(layout.islandStrategy)} }`
+      `  { pattern: ${JSON.stringify(layout.pattern)}${groupFields}, Component: ${rendersOnClient ? `Layout${index}` : "null"}, shouldHydrate: ${JSON.stringify(layout.shouldHydrate)}, islandStrategy: ${JSON.stringify(layout.islandStrategy)} }`
     );
   });
   const layoutImports = layoutImportStatements.join("\n");
@@ -4998,6 +5032,28 @@ async function buildSSRInMemory(productionVite, config, root, routeManager, apiR
   };
 }
 __name(buildSSRInMemory, "buildSSRInMemory");
+function readFarmAppPackageIdentity(root) {
+  try {
+    return JSON.parse(readFileSync(path6.join(root, "package.json"), "utf8"));
+  } catch {
+    return {};
+  }
+}
+__name(readFarmAppPackageIdentity, "readFarmAppPackageIdentity");
+function readFarmPageLastModified(pageRoutes) {
+  const lastModified = {};
+  for (const route of pageRoutes) {
+    if (route.pattern.includes("[")) continue;
+    try {
+      lastModified[route.pattern] = statSync(
+        route.markdownSourcePath ?? route.modulePath
+      ).mtime.toISOString();
+    } catch {
+    }
+  }
+  return lastModified;
+}
+__name(readFarmPageLastModified, "readFarmPageLastModified");
 function getFarmAppOwnedDocsEnginePaths(agent, applicationMetadataRoutes) {
   const llmsTxt = agent?.llmsTxt;
   const ownedByFile = /* @__PURE__ */ __name((kind) => applicationMetadataRoutes.some(
@@ -5006,7 +5062,7 @@ function getFarmAppOwnedDocsEnginePaths(agent, applicationMetadataRoutes) {
   return [
     ...llmsTxt?.enabled || ownedByFile("llms") ? ["/llms.txt"] : [],
     ...llmsTxt?.enabled && llmsTxt.full || ownedByFile("llms-full") ? ["/llms-full.txt"] : [],
-    ...ownedByFile("sitemap") ? ["/sitemap.xml"] : [],
+    ...agent?.sitemap?.enabled || ownedByFile("sitemap") ? ["/sitemap.xml"] : [],
     ...agent?.crawlers?.enabled || ownedByFile("robots") ? ["/robots.txt"] : []
   ];
 }
@@ -5072,7 +5128,7 @@ function matchLocalIntegrationRequest(request) {
   });` : "return null;"}
 }
 
-async function handleIntegrationRequest(request) {
+async function handleIntegrationRequest(request, ranMiddleware) {
   ${options.hasServerRuntimeIntegrations ? `return dispatchIntegrationRequests(
     serverRuntimeIntegrations,
     {
@@ -5081,6 +5137,7 @@ async function handleIntegrationRequest(request) {
       isProd: true,
     },
     request,
+    { ranMiddleware },
   );` : `return { response: null, setCookies: [] };`}
 }
 
@@ -5361,6 +5418,10 @@ function generateVirtualEntryCode(apiRoutes, pageRoutes, layoutRoutes, routeSlot
   const servesAgentRobotsTxt = Boolean(config.agent?.crawlers?.enabled) && !applicationMetadataRoutes.some(
     (metadata) => metadata.kind === "robots" && metadata.pattern === "/"
   );
+  const servesAgentSitemap = Boolean(config.agent?.sitemap?.enabled) && !applicationMetadataRoutes.some(
+    (metadata) => metadata.kind === "sitemap" && metadata.pattern === "/"
+  );
+  const servesDefaultMCP = config.agent?.mcp === true && !farmConfigMountsMCP(config) && !apiRoutes.some((route) => route.path === "/api/mcp");
   const servesAiCatalog = config.agent?.aiCatalog !== false;
   const hasPluginRuntime = hasRuntimeIntegrationConfig || hasServerRuntimePlugins;
   const hasInfraAnalyticsRuntime = config.analytics !== false && resolveFarmInstrumentationRuntime(preset) === "nodejs";
@@ -5686,6 +5747,10 @@ function renderFarmRouteServerTree(element) { return element; }`;
   createFarmCacheKey,
   createFarmMetadataRouteResponse,
   createFarmAgentRobots,
+  createFarmDefaultSitemap,
+  collectFarmDefaultMCPPages,
+  resolveFarmDefaultMCPServer,
+  handleFarmDefaultMCPRequest,
   createFarmAiCatalogResponse,
   createFarmApiCatalogResponse,
   createFarmAppManifestResponse,
@@ -5762,7 +5827,7 @@ import * as farmDocsConfigModule from ${toVirtualEntryImportSpecifier(docsConfig
 import { dirname as farmDocsDirname, join as farmDocsJoin } from "node:path";
 import { fileURLToPath as farmDocsFileURLToPath } from "node:url";` : "";
   const markdownHandlerImport = config.md?.enabled ? `import { applyMarkdownNegotiationHeaders, createMarkdownMirrorResponse, getFarmMarkdownAlternatePath } from "@farm.js/core/markdown";` : "";
-  const appMarkdownImport = hasMarkdownPages ? `import { createFarmMarkdownRouteModule, createFarmMarkdownSourceResponse, isFarmMarkdownPublicSourceResponse } from "@farm.js/core/internal/app-markdown-runtime";` : "const createFarmMarkdownSourceResponse = null;\nconst isFarmMarkdownPublicSourceResponse = null;";
+  const appMarkdownImport = hasMarkdownPages ? `import { FARM_MARKDOWN_ANONYMOUS_CLIENT_ADDRESS, createFarmMarkdownRouteModule, createFarmMarkdownSourceResponse, isFarmMarkdownPublicSourceResponse } from "@farm.js/core/internal/app-markdown-runtime";` : "const createFarmMarkdownSourceResponse = null;\nconst isFarmMarkdownPublicSourceResponse = null;";
   const markdownErrorImport = `import { FARM_MARKDOWN_CONTENT_TYPE, createFarmMarkdownErrorBody, farmRequestWantsMarkdown } from "@farm.js/core/markdown";`;
   const mdxComponentsPath = typeof config.mdx?.components === "string" ? path6.isAbsolute(config.mdx.components) ? config.mdx.components : path6.join(config.root, config.mdx.components) : null;
   const mdxComponentsImport = mdxComponentsPath ? `import * as FarmMdxComponentsModule from ${toVirtualEntryImportSpecifier(mdxComponentsPath)};` : "";
@@ -6062,6 +6127,7 @@ const serverRuntimeIntegrations = Object.fromEntries(
 );
 const integrationRuntimeConfig = Object.assign({}, ...farmRuntimeConfigs, {
   integrations: configuredIntegrations,
+  ${JSON.stringify(FARM_INTEGRATION_API_BASE_PATH_KEY)}: ${JSON.stringify(resolveFarmAPIServerBasePath(config.api))},
 });
 const farmInfraAnalytics = ${hasInfraAnalyticsRuntime ? hasPluginRuntime ? "createFarmInfraAnalyticsPlugin()" : "createFarmInfraAnalyticsRecorder()" : "null"};
 const configuredPlugins = [
@@ -6210,18 +6276,36 @@ const farmDocsAPIHandler = ${config.docs?.enabled ? hasPrecompiledDocs ? "farmDo
 
 // API routes bundled at build time
 const apiRoutes = ${apiRoutes.length > 0 ? "mergePluginAPIRoutes(" : ""}[${apiRegistrations.join(",")}
-]${apiRoutes.length > 0 ? `, configuredPlugins, ${JSON.stringify(apiRoutes.map(({ path: path8, methods }) => ({ path: path8, methods })))}, { bodySizeLimit: ${JSON.stringify(config.server.bodySizeLimit)} })` : ""};
+]${apiRoutes.length > 0 ? `, configuredPlugins, ${JSON.stringify(apiRoutes.map(({ path: path8, methods }) => ({ path: path8, methods })))}, { bodySizeLimit: ${JSON.stringify(config.server.bodySizeLimit)}, dispatch: dispatchFarmPluginAPIRequest })` : ""};
+// A plugin calling an app endpoint (an MCP tool, say) goes through the whole
+// pipeline, so the endpoint's middleware and integration guards run for it.
+function dispatchFarmPluginAPIRequest(request) {
+  const url = new URL(request.url);
+  url.pathname = applyFarmBasePath(url.pathname);
+  return fetchFarmInnerRequest(url.href === request.url ? request : new Request(url, request));
+}
+// A request the app makes to itself (a Markdown page check, a plugin's endpoint call) enters
+// through this module's outer \`fetch\`, as a direct request does: plugin runtime hooks run and
+// it gets its own request context, so \`cookies()\` and \`headers()\` are its own, never the
+// caller's. It asks for an identity body: the caller reads it, and the outer response is
+// compressed once.
+function fetchFarmInnerRequest(request, context) {
+  if (!request.headers.has("accept-encoding")) return fetch(request, context);
+  const headers = new Headers(request.headers);
+  headers.delete("accept-encoding");
+  return fetch(new Request(request, { headers }), context);
+}
 const farmLocalAPIBasePath = ${JSON.stringify(resolveFarmAPIServerBasePath(config.api))};
 const farmOpenAPIReference = ${JSON.stringify(openAPIReference)};
 ${config.agent?.apiCatalog ? `const farmApiCatalogInput = ${JSON.stringify(resolveFarmApiCatalogInput(config))};
-` : ""}${config.analytics !== false ? `const farmAppManifestInput = ${JSON.stringify(
+` : ""}${config.agent?.manifest !== false ? `const farmAppManifestInput = ${JSON.stringify(
     resolveFarmAppManifestInput(config, {
       build: config.deploymentId,
       packages: resolveFarmAppPackages(config.root),
       webmcpTools: config.plugins.some(({ name }) => name === "farm:webmcp") ? collectFarmWebMCPTools(config.root, config.srcDir) : []
     })
   )};
-` : ""}
+${servesDefaultMCP ? "farmAppManifestInput.defaultMCP = getFarmDefaultMCPServer;\n" : ""}` : ""}
 function isFarmLocalAPIPathname(pathname) {
   return farmLocalAPIBasePath !== "/" &&
     (pathname === farmLocalAPIBasePath ||
@@ -6728,7 +6812,8 @@ function ensureFarmDocumentHead(markup) {
 }
 
 function ensureFarmDocumentRoot(markup) {
-  if (/\\sid=["']root["']/i.test(markup)) return markup;
+  // Only a #root that opens the body is the container; page content can have id="root" too.
+  if (/<body\\b[^>]*>\\s*<div\\b[^>]*\\sid=["']root["']/i.test(markup)) return markup;
   return markup
     .replace(/<body\\b([^>]*)>/i, function(_match, attributes) {
       return "<body" + attributes + '><div id="root">';
@@ -7107,7 +7192,7 @@ function createFarmAgentRobotsResponse(request) {
     "robots",
     createFarmAgentRobots({
       crawlers: farmAgentCrawlers,
-      sitemapPath: ${applicationMetadataRoutes.some(
+      sitemapPath: ${servesAgentSitemap || applicationMetadataRoutes.some(
     (metadata) => metadata.kind === "sitemap" && metadata.pattern === "/"
   ) ? JSON.stringify("/sitemap.xml") : "undefined"},
       metadataBase: rootLayout && rootLayout.module && rootLayout.module.metadata
@@ -7120,6 +7205,70 @@ function createFarmAgentRobotsResponse(request) {
   );
 }
 ` : ""}
+${servesAgentSitemap ? `// sitemap.xml from agent.sitemap, built the same way as in development. Each page's
+// lastmod is its file's modification time, read at build time.
+const farmAgentSitemapConfig = ${JSON.stringify(config.agent.sitemap)};
+const farmAgentSitemapLastModified = ${JSON.stringify(readFarmPageLastModified(pageRoutes))};
+function createFarmAgentSitemapResponse(request) {
+  const rootLayout = layoutRoutes.find((layout) => layout.pattern === "/");
+  return createFarmMetadataRouteResponse(
+    "sitemap",
+    createFarmDefaultSitemap(
+      pageRoutes.map((route) => ({
+        pattern: route.pattern,
+        module: route.module,
+        lastModified: farmAgentSitemapLastModified[route.pattern],
+      })),
+      {
+        origin: new URL(request.url).origin,
+        config: farmAgentSitemapConfig,
+        metadataBase: rootLayout && rootLayout.module && rootLayout.module.metadata
+          ? rootLayout.module.metadata.metadataBase
+          : undefined,
+        basePath: ${JSON.stringify(config.basePath)},
+      },
+    ),
+    {},
+    { method: request.method },
+  );
+}
+` : ""}
+${servesDefaultMCP ? `// agent.mcp: the default read-only MCP server at /mcp, as in development. It steps
+// aside for a page route that answers /mcp and for any MCP server published or
+// registered at runtime, such as the docs engine's.
+const farmDefaultMCPServer = ${JSON.stringify(
+    createFarmDefaultMCPServer(readFarmAppPackageIdentity(config.root), FARM_VERSION)
+  )};
+let farmDefaultMCPRouteFree;
+function getFarmDefaultMCPServer() {
+  if (farmDefaultMCPRouteFree === undefined) {
+    farmDefaultMCPRouteFree = !matchPageRoute(${JSON.stringify(FARM_DEFAULT_MCP_PATH)});
+  }
+  return farmDefaultMCPRouteFree ? resolveFarmDefaultMCPServer(farmDefaultMCPServer) : undefined;
+}
+async function handleFarmDefaultMCP(request) {
+  const origin = new URL(request.url).origin;
+  return handleFarmDefaultMCPRequest(request, {
+    server: getFarmDefaultMCPServer(),
+    basePath: ${JSON.stringify(config.basePath)},
+    listPages: () =>
+      collectFarmDefaultMCPPages(
+        pageRoutes.map((route) => ({ pattern: route.pattern, module: route.module })),
+        { origin, basePath: ${JSON.stringify(config.basePath)}, markdown: farmMarkdownConfig },
+      ),
+    // A fresh request through this handler, so the caller's cookies never shape a page.
+    // The handler sees paths below the base path, as the server passes them in.
+    readMarkdown: (url) => {
+      const page = new URL(url);
+      page.pathname = stripFarmBasePath(page.pathname);
+      return farmDefaultMCPReadMarkdown(page.href);
+    },
+  });
+}
+// \`fetch\` is this module's outer request entry: plugin runtime hooks run and the page
+// gets its own request context, as for a direct request.
+const farmDefaultMCPReadMarkdown = createFarmLlmsMarkdownReader((page) => fetch(page));
+` : ""}
 // Static pages and root metadata for llms.txt, built the same way as in development.
 function createFarmLlmsTxtContext(request, full) {
   const origin = new URL(request.url).origin;
@@ -7142,17 +7291,18 @@ function createFarmLlmsTxtContext(request, full) {
       rootMetadata: rootLayout && rootLayout.module && rootLayout.module.metadata,
       ${servesAiCatalog ? `mcp: listFarmMCPLlmsTxtLinks(origin, {
         basePath: ${JSON.stringify(config.basePath)},
-        apiServerBasePath: farmLocalAPIBasePath,
+        apiServerBasePath: farmLocalAPIBasePath,${servesDefaultMCP ? "\n        defaultMCP: getFarmDefaultMCPServer," : ""}
       }),` : ""}
     }),
-    // llms-full.txt reads each page's .md mirror through this same handler,
-    // with a fresh request so the caller's cookies never shape its content.
-    // HEAD discards the body, so it reads nothing.
+    // llms-full.txt reads each page's .md mirror through this module's outer
+    // request entry, so plugin runtime hooks run and each read has a fresh request
+    // context: the caller's cookies never shape its content. HEAD discards the
+    // body, so it reads nothing.
     ...(full
       ? {
           markdown: request.method.toUpperCase() === "HEAD"
             ? async () => null
-            : createFarmLlmsMarkdownReader((page) => handleFarmRequest(page)),
+            : createFarmLlmsMarkdownReader((page) => fetch(page)),
         }
       : {}),
   };
@@ -7823,7 +7973,11 @@ async function handleFarmRequestInContext(
   }
 
   ${hasServerRuntimeIntegrations ? `
-  const integrationDispatch = await handleIntegrationRequest(cloneFarmRequestWithContext(request));
+  const farmIntegrationRanMiddleware = new Set();
+  const integrationDispatch = await handleIntegrationRequest(
+    cloneFarmRequestWithContext(request),
+    farmIntegrationRanMiddleware,
+  );
   if (integrationDispatch.response) {
     return integrationDispatch.response;
   }
@@ -7831,7 +7985,7 @@ async function handleFarmRequestInContext(
   // its rotated Set-Cookie values back here. They belong on whatever response
   // the page or API handler produces, so they ride the same deferred-header
   // channel the file middleware runner already uses.
-  const farmIntegrationSetCookies = integrationDispatch.setCookies;
+  let farmIntegrationSetCookies = integrationDispatch.setCookies;
   ` : ""}
 
   ${hasMiddlewareRuntime ? `
@@ -7842,7 +7996,23 @@ async function handleFarmRequestInContext(
   if (middlewareResult.response) {
     return middlewareResult.response;
   }
-  request = middlewareResult.request;
+  request = middlewareResult.request;${hasServerRuntimeIntegrations ? `
+  // A ctx.rewrite() target is guarded as a direct request for it is: integration
+  // guards (protectedRoutes) and routes see the rewritten URL, as in dev. Guards
+  // that already ran for the original URL are skipped, so each runs once.
+  if (request.url !== url.href) {
+    const rewrittenDispatch = await handleIntegrationRequest(
+      cloneFarmRequestWithContext(request),
+      farmIntegrationRanMiddleware,
+    );
+    farmIntegrationSetCookies = [...farmIntegrationSetCookies, ...rewrittenDispatch.setCookies];
+    if (rewrittenDispatch.response) {
+      return applyProductionMiddlewareHeaders(
+        rewrittenDispatch.response,
+        withFarmIntegrationSetCookies(middlewareResult.headers, integrationDispatch.setCookies),
+      );
+    }
+  }` : ""}
   const middlewareData = middlewareResult.data;
   const middlewareContext = middlewareResult.context;
   const middlewareHeaders = ${hasServerRuntimeIntegrations ? "withFarmIntegrationSetCookies(middlewareResult.headers, farmIntegrationSetCookies)" : "middlewareResult.headers"};
@@ -7871,7 +8041,10 @@ async function handleFarmRequestInContext(
   // API routes, as in dev.
   const farmAiCatalogResponse = createFarmAiCatalogResponse(
     request,
-    { basePath: ${JSON.stringify(config.basePath)}, apiServerBasePath: farmLocalAPIBasePath },
+    {
+      basePath: ${JSON.stringify(config.basePath)},
+      apiServerBasePath: farmLocalAPIBasePath,${servesDefaultMCP ? "\n      defaultMCP: getFarmDefaultMCPServer," : ""}
+    },
     url,
   );
   if (farmAiCatalogResponse) {
@@ -7919,7 +8092,13 @@ async function handleFarmRequestInContext(
       const match = matchPageRoute(getFarmRoutePathname(targetPathname));
       return match?.route?.markdownSource || null;
     },
-    renderPage: (targetRequest) => handleFarmRequest(targetRequest, adapterContext),
+    clientAddress: adapterContext?.clientAddress,
+    // An anonymous visitor's request: guards never see the caller's address.
+    renderPage: (targetRequest) =>
+      fetchFarmInnerRequest(targetRequest, {
+        ...adapterContext,
+        clientAddress: FARM_MARKDOWN_ANONYMOUS_CLIENT_ADDRESS,
+      }),
   });
   if (markdownSourceResponse) {
     return isFarmMarkdownPublicSourceResponse(markdownSourceResponse)
@@ -7939,7 +8118,7 @@ async function handleFarmRequestInContext(
       config: farmMarkdownConfig,
       routeExists: (targetPathname) =>
         Boolean(matchPageRoute(getFarmRoutePathname(targetPathname))),
-      renderPage: (targetRequest) => handleFarmRequest(targetRequest, adapterContext),
+      renderPage: (targetRequest) => fetchFarmInnerRequest(targetRequest, adapterContext),
       apiServerBasePath: farmLocalAPIBasePath,
     });
     if (markdownResponse) {
@@ -8027,15 +8206,18 @@ async function handleFarmRequestInContext(
     return applyProductionMiddlewareHeaders(applicationMetadataResponse, middlewareHeaders);
   }
   ` : ""}
-  ${config.analytics !== false ? `
-  // /.well-known/farmjs: the app's manifest, only for a request Farm Infra signed.
-  if (normalizeRuntimePath(routePathname) === ${JSON.stringify(FARM_APP_MANIFEST_PATH)}) {
-    const farmAppManifest = await createFarmAppManifestResponse(request, farmAppManifestInput, {
-      development: false,
-    });
-    if (farmAppManifest) {
-      return applyProductionMiddlewareHeaders(farmAppManifest, middlewareHeaders);
-    }
+  ${config.agent?.manifest !== false ? `
+  // agent.manifest: /.well-known/farmjs.json (and 0.1.34's /.well-known/farmjs), the app's
+  // public manifest; Farm Infra's signed request gets the full view.
+  if (
+    [${JSON.stringify(FARM_APP_MANIFEST_PATH)}, ${JSON.stringify(FARM_APP_MANIFEST_LEGACY_PATH)}].includes(
+      normalizeRuntimePath(routePathname),
+    )
+  ) {
+    return applyProductionMiddlewareHeaders(
+      await createFarmAppManifestResponse(request, farmAppManifestInput),
+      middlewareHeaders,
+    );
   }
   ` : ""}
   ${config.agent?.apiCatalog ? `
@@ -8056,6 +8238,15 @@ async function handleFarmRequestInContext(
     );
   }
   ` : ""}
+  ${servesAgentSitemap ? `
+  // agent.sitemap with no sitemap.ts: serve the generated file.
+  if (normalizeRuntimePath(routePathname) === "/sitemap.xml") {
+    return applyProductionMiddlewareHeaders(
+      createFarmAgentSitemapResponse(request),
+      middlewareHeaders,
+    );
+  }
+  ` : ""}
   ${config.agent?.llmsTxt?.enabled ? `
   // agent.llmsTxt with no llms.ts or llms-full.ts: serve the generated files.
   const farmGeneratedLlmsKind = normalizeRuntimePath(routePathname) === "/llms.txt"
@@ -8989,6 +9180,18 @@ async function handleFarmRequestInContext(
     }
   }
 
+${servesDefaultMCP ? `
+  // agent.mcp: no app route answered /mcp, so the default read-only server may.
+  if (
+    normalizeRuntimePath(routePathname) === ${JSON.stringify(FARM_DEFAULT_MCP_PATH)} &&
+    getFarmDefaultMCPServer()
+  ) {
+    return applyProductionMiddlewareHeaders(
+      await handleFarmDefaultMCP(request),
+      middlewareHeaders,
+    );
+  }
+` : ""}
   // 404 fallback - render proper HTML page
   return renderFarmNotFoundResponse();
 
@@ -9665,6 +9868,10 @@ function toFarmNodeResponse(request, response) {
   await fs.writeFile(nitroEntryPath, nitroEntryCode);
   const farmNodeServerEntryPath = preset === "node-server" ? path6.join(ssrOutputDir, "farm-node-server-entry.mjs") : null;
   if (farmNodeServerEntryPath && nodeAdapterModule) {
+    await fs.writeFile(
+      path6.join(ssrOutputDir, FARM_NODE_ENV_MODULE_FILE),
+      FARM_NODE_ENV_MODULE_SOURCE
+    );
     await fs.writeFile(
       farmNodeServerEntryPath,
       createFarmNodeServerEntry({
@@ -10409,6 +10616,30 @@ async function copyPrismaClientForVercel(root, nitroFuncDir, fs) {
 }
 __name(copyPrismaClientForVercel, "copyPrismaClientForVercel");
 
+// src/build/project-module-runner.ts
+async function createFarmProjectModuleSsrEnvironment() {
+  const vite = await import("vite");
+  const { ModuleRunner, createNodeImportMeta } = await import("vite/module-runner");
+  return {
+    dev: {
+      createEnvironment(name, config) {
+        return vite.createRunnableDevEnvironment(name, config, {
+          runner: /* @__PURE__ */ __name((environment) => new ModuleRunner({
+            transport: {
+              ...vite.createServerModuleRunnerTransport({ channel: environment.hot }),
+              timeout: 0
+            },
+            hmr: false,
+            createImportMeta: createNodeImportMeta,
+            sourcemapInterceptor: "node"
+          }), "runner")
+        });
+      }
+    }
+  };
+}
+__name(createFarmProjectModuleSsrEnvironment, "createFarmProjectModuleSsrEnvironment");
+
 // src/build/index.ts
 async function build(config, options = {}) {
   return withProductionNodeEnv(() => buildWithProductionNodeEnv(config, options));
@@ -10669,6 +10900,14 @@ async function createProjectModuleServer(createViteServer, config, root, buildLi
     optimizeDeps: {
       ...viteConfig.optimizeDeps,
       noDiscovery: true
+    },
+    // An app or plugin that brings its own SSR environment keeps it.
+    environments: viteConfig.environments?.ssr?.dev?.createEnvironment ? viteConfig.environments : {
+      ...viteConfig.environments,
+      ssr: {
+        ...viteConfig.environments?.ssr,
+        ...await createFarmProjectModuleSsrEnvironment()
+      }
     }
   });
 }
@@ -10746,7 +10985,7 @@ function resolveLegacyPageEntry(config, root, srcDir) {
 __name(resolveLegacyPageEntry, "resolveLegacyPageEntry");
 async function buildNitro(config, routeManager, apiRouteManager, serverRenderer, preset, root, distDir, pluginManager) {
   const [{ createNitroConfig }, { createNitro, build: nitroBuild }] = await Promise.all([
-    import("./nitro-MXRDCXWZ.mjs"),
+    import("./nitro-MPZJGPXK.mjs"),
     import("nitro/builder")
   ]);
   let nitroConfig = await createNitroConfig(