@farm.js/core 0.1.37 → 0.1.39

package/dist/{chunk-CI6E3UOH.cjs → chunk-RG4A6LB2.cjs}

@@ -2,7 +2,7 @@
 
 
 
-var _chunkPTZ2TVNEcjs = require('./chunk-PTZ2TVNE.cjs');
+var _chunkH5CLOUZScjs = require('./chunk-H5CLOUZS.cjs');
 
 
 var _chunkI57LW5VZcjs = require('./chunk-I57LW5VZ.cjs');
@@ -41,10 +41,10 @@ async function handleFarmDefaultMCPRequest(request, context) {
     return transportError(403, "Cross-origin requests are not allowed.");
   }
   const protocolHeader = request.headers.get("mcp-protocol-version");
-  if (protocolHeader && !_chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_PROTOCOL_VERSIONS.includes(protocolHeader.trim())) {
+  if (protocolHeader && !_chunkH5CLOUZScjs.FARM_DEFAULT_MCP_PROTOCOL_VERSIONS.includes(protocolHeader.trim())) {
     return transportError(
       400,
-      `Unsupported MCP-Protocol-Version: ${protocolHeader.slice(0, 32)}. Supported: ${_chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_PROTOCOL_VERSIONS.join(", ")}.`
+      `Unsupported MCP-Protocol-Version: ${protocolHeader.slice(0, 32)}. Supported: ${_chunkH5CLOUZScjs.FARM_DEFAULT_MCP_PROTOCOL_VERSIONS.join(", ")}.`
     );
   }
   const contentType = _nullishCoalesce(request.headers.get("content-type"), () => ( ""));
@@ -102,7 +102,7 @@ async function dispatch(method, params, request, context) {
   switch (method) {
     case "initialize": {
       const requested = isRecord(params) ? params.protocolVersion : void 0;
-      const protocolVersion = typeof requested === "string" && _chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_PROTOCOL_VERSIONS.includes(requested) ? requested : _chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_PROTOCOL_VERSIONS[0];
+      const protocolVersion = typeof requested === "string" && _chunkH5CLOUZScjs.FARM_DEFAULT_MCP_PROTOCOL_VERSIONS.includes(requested) ? requested : _chunkH5CLOUZScjs.FARM_DEFAULT_MCP_PROTOCOL_VERSIONS[0];
       return {
         protocolVersion,
         capabilities: { tools: { listChanged: false } },
@@ -110,7 +110,7 @@ async function dispatch(method, params, request, context) {
           name: context.server.name,
           version: context.server.version,
           ...context.server.title ? { title: context.server.title } : {},
-          description: _chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_DESCRIPTION
+          description: _chunkH5CLOUZScjs.FARM_DEFAULT_MCP_DESCRIPTION
         },
         instructions: INSTRUCTIONS
       };
@@ -118,7 +118,7 @@ async function dispatch(method, params, request, context) {
     case "ping":
       return {};
     case "tools/list":
-      return { tools: _chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_TOOLS };
+      return { tools: _chunkH5CLOUZScjs.FARM_DEFAULT_MCP_TOOLS };
     case "tools/call":
       return callTool(params, request, context);
     default:
@@ -130,7 +130,7 @@ async function callTool(params, request, context) {
   if (!isRecord(params) || typeof params.name !== "string") {
     throw new FarmMCPRequestError(INVALID_PARAMS, "tools/call needs a tool name.");
   }
-  const tool = _chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_TOOLS.find(({ name }) => name === params.name);
+  const tool = _chunkH5CLOUZScjs.FARM_DEFAULT_MCP_TOOLS.find(({ name }) => name === params.name);
   if (!tool) {
     throw new FarmMCPRequestError(INVALID_PARAMS, `Unknown tool: ${params.name.slice(0, 64)}`);
   }

package/dist/{chunk-LOFKRKO7.cjs → chunk-RVXFINNS.cjs}

@@ -1,12 +1,15 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkPTZ2TVNEcjs = require('./chunk-PTZ2TVNE.cjs');
+var _chunkH5CLOUZScjs = require('./chunk-H5CLOUZS.cjs');
 
 
 var _chunkOWOUTKIJcjs = require('./chunk-OWOUTKIJ.cjs');
 
 
-var _chunk4WQ6PGSJcjs = require('./chunk-4WQ6PGSJ.cjs');
+var _chunkWEW2JVA4cjs = require('./chunk-WEW2JVA4.cjs');
+
+
+var _chunk2ZYGC6SScjs = require('./chunk-2ZYGC6SS.cjs');
 
 
 var _chunkJ63ZH5OQcjs = require('./chunk-J63ZH5OQ.cjs');
@@ -15,6 +18,14 @@ var _chunkJ63ZH5OQcjs = require('./chunk-J63ZH5OQ.cjs');
 var _chunkOI6CMLWXcjs = require('./chunk-OI6CMLWX.cjs');
 
 
+var _chunkBWIQR4DHcjs = require('./chunk-BWIQR4DH.cjs');
+
+
+
+
+var _chunkUPJLHLJUcjs = require('./chunk-UPJLHLJU.cjs');
+
+
 var _chunkTKJZFIMLcjs = require('./chunk-TKJZFIML.cjs');
 
 
@@ -27,10 +38,11 @@ var _chunkKIIMAWOJcjs = require('./chunk-KIIMAWOJ.cjs');
 
 
 
+
 var _chunkKNBBQHO2cjs = require('./chunk-KNBBQHO2.cjs');
 
 
-var _chunkNQ6QFZWDcjs = require('./chunk-NQ6QFZWD.cjs');
+var _chunkQUCXCDE2cjs = require('./chunk-QUCXCDE2.cjs');
 
 
 var _chunkBIDYX3SLcjs = require('./chunk-BIDYX3SL.cjs');
@@ -219,6 +231,71 @@ ${html}`;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, composeFarmFullDocument, "composeFarmFullDocument");
 
+// src/middleware/may-handle.ts
+function hasFarmMiddlewareConfig(config) {
+  if (!config) return false;
+  if (Array.isArray(config)) return config.length > 0;
+  const configRecord = config;
+  return Boolean(
+    configRecord.matcher || configRecord.exclude || configRecord.runtime || configRecord.handler || Array.isArray(configRecord.handlers) && configRecord.handlers.length > 0
+  );
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, hasFarmMiddlewareConfig, "hasFarmMiddlewareConfig");
+function configMiddlewareMayHandlePath(config, pathname) {
+  if (!hasFarmMiddlewareConfig(config)) return false;
+  const entries = Array.isArray(config) ? config : [config];
+  return entries.some((entry) => {
+    if (!entry.matcher && !entry.exclude) return true;
+    const matchers = entry.matcher ? (Array.isArray(entry.matcher) ? entry.matcher : [entry.matcher]).map(
+      (matcher) => (
+        // A request-aware matcher cannot be proven safe at build time.
+        typeof matcher === "function" ? () => true : matcher
+      )
+    ) : void 0;
+    const compiled = _chunkUPJLHLJUcjs.compileMiddlewareConfig.call(void 0, { matcher: matchers, exclude: entry.exclude });
+    return _chunkUPJLHLJUcjs.matchesCompiledMiddlewareConfig.call(void 0, pathname, compiled, {}).matched;
+  });
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, configMiddlewareMayHandlePath, "configMiddlewareMayHandlePath");
+function appMiddlewareMayHandlePath(middlewareRoutes, pathname) {
+  return middlewareRoutes.some((route) => _chunkUPJLHLJUcjs.matchesMiddlewareRoute.call(void 0, pathname, route).matched);
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, appMiddlewareMayHandlePath, "appMiddlewareMayHandlePath");
+var CATCH_ALL_PROBE = "/__farm-listing-probe__/0";
+function isPathSpecificMatcher(matcher) {
+  if (typeof matcher === "function") return false;
+  const compiled = _chunkUPJLHLJUcjs.compileMiddlewareConfig.call(void 0, { matcher });
+  return !_chunkUPJLHLJUcjs.matchesCompiledMiddlewareConfig.call(void 0, CATCH_ALL_PROBE, compiled, {}).matched;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, isPathSpecificMatcher, "isPathSpecificMatcher");
+function pathSpecificConfigMiddlewareCovers(config, pathname) {
+  if (!hasFarmMiddlewareConfig(config)) return false;
+  const entries = Array.isArray(config) ? config : [config];
+  return entries.some((entry) => {
+    if (!entry.matcher) return false;
+    const matchers = (Array.isArray(entry.matcher) ? entry.matcher : [entry.matcher]).filter(
+      isPathSpecificMatcher
+    );
+    if (matchers.length === 0) return false;
+    const compiled = _chunkUPJLHLJUcjs.compileMiddlewareConfig.call(void 0, { matcher: matchers, exclude: entry.exclude });
+    return _chunkUPJLHLJUcjs.matchesCompiledMiddlewareConfig.call(void 0, pathname, compiled, {}).matched;
+  });
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, pathSpecificConfigMiddlewareCovers, "pathSpecificConfigMiddlewareCovers");
+function farmPathGuardCoversPage(options, pathname) {
+  return appMiddlewareMayHandlePath(
+    options.middlewareRoutes.filter((route) => route.path !== "/"),
+    pathname
+  ) || pathSpecificConfigMiddlewareCovers(options.config.middleware, pathname) || _chunkBWIQR4DHcjs.integrationMiddlewareMayHandlePath.call(void 0, options.config.integrations, pathname, CATCH_ALL_PROBE);
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, farmPathGuardCoversPage, "farmPathGuardCoversPage");
+function farmPathGuardCoversEndpoint(options, path, apiServerBasePath) {
+  return _chunkKNBBQHO2cjs.createFarmAPIMiddlewarePathnames.call(void 0, apiServerBasePath)(path).some(
+    (pathname) => farmPathGuardCoversPage(options, pathname)
+  );
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, farmPathGuardCoversEndpoint, "farmPathGuardCoversEndpoint");
+
 // src/i18n/alternates.ts
 function renderFarmLocaleAlternateLinks(pathname, config, options = {}) {
   if (config.routing === "none") return "";
@@ -269,13 +346,19 @@ function isLateRedirectTarget(url) {
   }
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, isLateRedirectTarget, "isLateRedirectTarget");
-function createLateRedirectRecovery(url) {
+function createLateRedirectRecovery(url, nonce) {
   if (!isLateRedirectTarget(url)) return "";
-  return `<script>window.location.replace(${serializeForInlineScript(url)})</script>`;
+  return _chunk2ZYGC6SScjs.stampFarmCspNonce.call(void 0, 
+    `<script>window.location.replace(${serializeForInlineScript(url)})</script>`,
+    nonce
+  );
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createLateRedirectRecovery, "createLateRedirectRecovery");
-function createLateNotFoundRecovery(content) {
-  return `<template id="${TEMPLATE_ID}">${content}</template><script>(function(){var t=document.getElementById("${TEMPLATE_ID}");var p=document.getElementById("${PAGE_CONTAINER_ID}");if(t&&p){p.replaceChildren(t.content.cloneNode(true));}if(t)t.remove();document.documentElement.dataset.farmLateNotFound="true";var m=document.createElement("meta");m.name="robots";m.content="noindex";document.head.appendChild(m);})();</script>`;
+function createLateNotFoundRecovery(content, nonce) {
+  return `<template id="${TEMPLATE_ID}">${content}</template>` + _chunk2ZYGC6SScjs.stampFarmCspNonce.call(void 0, 
+    `<script>(function(){var t=document.getElementById("${TEMPLATE_ID}");var p=document.getElementById("${PAGE_CONTAINER_ID}");if(t&&p){p.replaceChildren(t.content.cloneNode(true));}if(t)t.remove();document.documentElement.dataset.farmLateNotFound="true";var m=document.createElement("meta");m.name="robots";m.content="noindex";document.head.appendChild(m);})();</script>`,
+    nonce
+  );
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createLateNotFoundRecovery, "createLateNotFoundRecovery");
 
@@ -402,7 +485,7 @@ function createFarmMetadataRouteResponse(kind, value, routeModule = {}, options
   if (isResponse(value)) {
     return method === "HEAD" ? _chunkTKJZFIMLcjs.omitFarmResponseBody.call(void 0, value) : value;
   }
-  const body = kind === "sitemap" ? serializeSitemap(value) : kind === "robots" ? serializeRobots(value) : kind === "llms" || kind === "llms-full" ? _chunk4WQ6PGSJcjs.serializeFarmLlmsTxt.call(void 0, value) : serializeManifest(value);
+  const body = kind === "sitemap" ? serializeSitemap(value) : kind === "robots" ? serializeRobots(value) : kind === "llms" || kind === "llms-full" ? _chunkWEW2JVA4cjs.serializeFarmLlmsTxt.call(void 0, value) : serializeManifest(value);
   const contentType = kind === "sitemap" ? "application/xml; charset=utf-8" : kind === "robots" || kind === "llms" || kind === "llms-full" ? "text/plain; charset=utf-8" : "application/manifest+json; charset=utf-8";
   return new Response(method === "HEAD" ? null : body, {
     headers: {
@@ -763,7 +846,9 @@ function createFarmThemeDocumentParts(input, basePath = "/", serverTheme) {
   const script = createFarmThemeBootstrapScript(config, hydrationTheme);
   return {
     attributes: ` data-theme="${initialTheme}"`,
-    head: `<style id="${THEME_STYLE_ID}">:root[data-theme="light"]{color-scheme:light}:root[data-theme="dark"]{color-scheme:dark}</style><script id="${THEME_SCRIPT_ID}">${script}</script>`
+    head: _chunk2ZYGC6SScjs.stampFarmCspNonce.call(void 0, 
+      `<style id="${THEME_STYLE_ID}">:root[data-theme="light"]{color-scheme:light}:root[data-theme="dark"]{color-scheme:dark}</style><script id="${THEME_SCRIPT_ID}">${script}</script>`
+    )
   };
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmThemeDocumentParts, "createFarmThemeDocumentParts");
@@ -912,7 +997,7 @@ function createFarmAppManifest(input, { full = false } = {}) {
   const manifest = {
     schemaVersion: 1,
     app: {
-      farm: _chunkNQ6QFZWDcjs.FARM_VERSION,
+      farm: _chunkQUCXCDE2cjs.FARM_VERSION,
       renderer: input.renderer,
       basePath: input.basePath,
       build: input.build
@@ -920,16 +1005,17 @@ function createFarmAppManifest(input, { full = false } = {}) {
     packages: input.packages,
     mcp: {
       servers: _chunk75RZHGLScjs._listFarmMCPCatalogs.call(void 0, ).map(({ server, tools, details }) => {
-        const listed = full || _optionalChain([details, 'optionalAccess', _37 => _37.public]) === true;
+        const open = _optionalChain([details, 'optionalAccess', _37 => _37.public]) === true && !_optionalChain([input, 'access', _38 => _38.guardCoversPath, 'optionalCall', _39 => _39(server.path)]);
+        const listed = full || open;
         return {
           name: server.name,
           version: server.version,
           path: server.path,
-          authorization: _optionalChain([details, 'optionalAccess', _38 => _38.public]) === true ? "none" : "required",
-          resources: listed ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _39 => _39.resources]), () => ( []))] : [],
-          prompts: listed ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _40 => _40.prompts]), () => ( []))] : [],
+          authorization: open ? "none" : "required",
+          resources: listed ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _40 => _40.resources]), () => ( []))] : [],
+          prompts: listed ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _41 => _41.prompts]), () => ( []))] : [],
           tools: (listed ? tools : []).map((tool) => {
-            const schemas = _optionalChain([details, 'optionalAccess', _41 => _41.schemas, 'optionalAccess', _42 => _42[tool.name]]);
+            const schemas = _optionalChain([details, 'optionalAccess', _42 => _42.schemas, 'optionalAccess', _43 => _43[tool.name]]);
             const hints = Object.fromEntries(
               ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
             );
@@ -942,7 +1028,7 @@ function createFarmAppManifest(input, { full = false } = {}) {
               ...full && tool.kind === "endpoint" ? { method: tool.method, path: tool.path } : {},
               ...hints,
               ...schemas ? { inputSchema: schemas.input } : {},
-              ..._optionalChain([schemas, 'optionalAccess', _43 => _43.output]) ? { outputSchema: schemas.output } : {}
+              ..._optionalChain([schemas, 'optionalAccess', _44 => _44.output]) ? { outputSchema: schemas.output } : {}
             };
           })
         };
@@ -958,7 +1044,7 @@ function createFarmAppManifest(input, { full = false } = {}) {
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmAppManifest, "createFarmAppManifest");
 function listDefaultServer(input) {
-  const server = _optionalChain([input, 'access', _44 => _44.defaultMCP, 'optionalCall', _45 => _45()]);
+  const server = _optionalChain([input, 'access', _45 => _45.defaultMCP, 'optionalCall', _46 => _46()]);
   if (!server) return [];
   return [
     {
@@ -968,7 +1054,7 @@ function listDefaultServer(input) {
       authorization: "none",
       resources: [],
       prompts: [],
-      tools: _chunkPTZ2TVNEcjs.FARM_DEFAULT_MCP_TOOLS.map((tool) => ({
+      tools: _chunkH5CLOUZScjs.FARM_DEFAULT_MCP_TOOLS.map((tool) => ({
         name: tool.name,
         title: tool.title,
         description: tool.description,
@@ -1011,7 +1097,7 @@ async function verifyFarmInfraManifestSignature(header, key, now = Date.now()) {
   if (!header || header.length > 2048) return false;
   const parts = header.split(",").map((part) => part.trim());
   const timestamp = Number(
-    _optionalChain([/^t=(\d{1,12})$/, 'access', _46 => _46.exec, 'call', _47 => _47(_nullishCoalesce(parts.find((part) => part.startsWith("t=")), () => ( ""))), 'optionalAccess', _48 => _48[1]])
+    _optionalChain([/^t=(\d{1,12})$/, 'access', _47 => _47.exec, 'call', _48 => _48(_nullishCoalesce(parts.find((part) => part.startsWith("t=")), () => ( ""))), 'optionalAccess', _49 => _49[1]])
   );
   if (!Number.isSafeInteger(timestamp)) return false;
   if (Math.abs(now / 1e3 - timestamp) > SIGNATURE_WINDOW_SECONDS) return false;
@@ -1023,7 +1109,7 @@ ${timestamp}`);
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, verifyFarmInfraManifestSignature, "verifyFarmInfraManifestSignature");
 function processEnv() {
-  return _nullishCoalesce(_optionalChain([globalThis, 'access', _49 => _49.process, 'optionalAccess', _50 => _50.env]), () => ( {}));
+  return _nullishCoalesce(_optionalChain([globalThis, 'access', _50 => _50.process, 'optionalAccess', _51 => _51.env]), () => ( {}));
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, processEnv, "processEnv");
 var CORS_HEADERS = {
@@ -1042,7 +1128,7 @@ async function createFarmAppManifestResponse(request, input, options = {}) {
     });
   }
   const signature = request.headers.get(FARM_INFRA_SIGNATURE_HEADER);
-  const key = input.analytics ? _optionalChain([(_nullishCoalesce(options.env, () => ( processEnv()))), 'access', _51 => _51.FARMJS_API_KEY, 'optionalAccess', _52 => _52.trim, 'call', _53 => _53()]) : void 0;
+  const key = input.analytics ? _optionalChain([(_nullishCoalesce(options.env, () => ( processEnv()))), 'access', _52 => _52.FARMJS_API_KEY, 'optionalAccess', _53 => _53.trim, 'call', _54 => _54()]) : void 0;
   const full = Boolean(
     signature && key && await verifyFarmInfraManifestSignature(signature, key)
   );
@@ -1098,4 +1184,9 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmAppManifestResponse, "createFarm
 
 
 
-exports.formatRouteSegment = formatRouteSegment; exports.createRouteDirectoryPattern = createRouteDirectoryPattern; exports.stripRouteGroups = stripRouteGroups; exports.getRouteGroupScope = getRouteGroupScope; exports.isInRouteGroupScope = isInRouteGroupScope; exports.getRouteDirectoryDepth = getRouteDirectoryDepth; exports.routeBoundaryCoversDirectory = routeBoundaryCoversDirectory; exports.HOISTED_HEAD_ELEMENT = HOISTED_HEAD_ELEMENT; exports.extractFarmFullDocument = extractFarmFullDocument; exports.classifyFarmDocumentPrefix = classifyFarmDocumentPrefix; exports.removeFarmDocumentTitles = removeFarmDocumentTitles; exports.ensureFarmDocumentMeta = ensureFarmDocumentMeta; exports.composeFarmFullDocument = composeFarmFullDocument; exports.renderFarmLocaleAlternateLinks = renderFarmLocaleAlternateLinks; exports.createLateRedirectRecovery = createLateRedirectRecovery; exports.createLateNotFoundRecovery = createLateNotFoundRecovery; exports.createFarmMetadataRouteResponse = createFarmMetadataRouteResponse; exports.listFarmMCPLlmsTxtLinks = listFarmMCPLlmsTxtLinks; exports.createFarmAiCatalogResponse = createFarmAiCatalogResponse; exports.resolveDefaultErrorStatus = resolveDefaultErrorStatus; exports.getDefaultErrorStatusText = getDefaultErrorStatusText; exports.createDefaultErrorMarkup = createDefaultErrorMarkup; exports.createFarmThemeDocumentParts = createFarmThemeDocumentParts; exports.applyFarmThemeDocument = applyFarmThemeDocument; exports.FARM_API_CATALOG_PATH = FARM_API_CATALOG_PATH; exports.resolveFarmApiCatalogInput = resolveFarmApiCatalogInput; exports.createFarmApiCatalogResponse = createFarmApiCatalogResponse; exports.FARM_APP_MANIFEST_PATH = FARM_APP_MANIFEST_PATH; exports.FARM_APP_MANIFEST_LEGACY_PATH = FARM_APP_MANIFEST_LEGACY_PATH; exports.isFarmAppManifestPath = isFarmAppManifestPath; exports.FARM_INFRA_SIGNATURE_HEADER = FARM_INFRA_SIGNATURE_HEADER; exports.resolveFarmAppManifestInput = resolveFarmAppManifestInput; exports.createFarmAppManifestResponse = createFarmAppManifestResponse;
+
+
+
+
+
+exports.formatRouteSegment = formatRouteSegment; exports.createRouteDirectoryPattern = createRouteDirectoryPattern; exports.stripRouteGroups = stripRouteGroups; exports.getRouteGroupScope = getRouteGroupScope; exports.isInRouteGroupScope = isInRouteGroupScope; exports.getRouteDirectoryDepth = getRouteDirectoryDepth; exports.routeBoundaryCoversDirectory = routeBoundaryCoversDirectory; exports.HOISTED_HEAD_ELEMENT = HOISTED_HEAD_ELEMENT; exports.extractFarmFullDocument = extractFarmFullDocument; exports.classifyFarmDocumentPrefix = classifyFarmDocumentPrefix; exports.removeFarmDocumentTitles = removeFarmDocumentTitles; exports.ensureFarmDocumentMeta = ensureFarmDocumentMeta; exports.composeFarmFullDocument = composeFarmFullDocument; exports.hasFarmMiddlewareConfig = hasFarmMiddlewareConfig; exports.configMiddlewareMayHandlePath = configMiddlewareMayHandlePath; exports.appMiddlewareMayHandlePath = appMiddlewareMayHandlePath; exports.farmPathGuardCoversPage = farmPathGuardCoversPage; exports.farmPathGuardCoversEndpoint = farmPathGuardCoversEndpoint; exports.renderFarmLocaleAlternateLinks = renderFarmLocaleAlternateLinks; exports.createLateRedirectRecovery = createLateRedirectRecovery; exports.createLateNotFoundRecovery = createLateNotFoundRecovery; exports.createFarmMetadataRouteResponse = createFarmMetadataRouteResponse; exports.listFarmMCPLlmsTxtLinks = listFarmMCPLlmsTxtLinks; exports.createFarmAiCatalogResponse = createFarmAiCatalogResponse; exports.resolveDefaultErrorStatus = resolveDefaultErrorStatus; exports.getDefaultErrorStatusText = getDefaultErrorStatusText; exports.createDefaultErrorMarkup = createDefaultErrorMarkup; exports.createFarmThemeDocumentParts = createFarmThemeDocumentParts; exports.applyFarmThemeDocument = applyFarmThemeDocument; exports.FARM_API_CATALOG_PATH = FARM_API_CATALOG_PATH; exports.resolveFarmApiCatalogInput = resolveFarmApiCatalogInput; exports.createFarmApiCatalogResponse = createFarmApiCatalogResponse; exports.FARM_APP_MANIFEST_PATH = FARM_APP_MANIFEST_PATH; exports.FARM_APP_MANIFEST_LEGACY_PATH = FARM_APP_MANIFEST_LEGACY_PATH; exports.isFarmAppManifestPath = isFarmAppManifestPath; exports.FARM_INFRA_SIGNATURE_HEADER = FARM_INFRA_SIGNATURE_HEADER; exports.resolveFarmAppManifestInput = resolveFarmAppManifestInput; exports.createFarmAppManifestResponse = createFarmAppManifestResponse;

package/dist/{chunk-7SQ5SGYZ.cjs → chunk-RW63BOV7.cjs}

@@ -34,7 +34,7 @@ var _chunkS3A45T7Fcjs = require('./chunk-S3A45T7F.cjs');
 var _chunkZEG3OPIBcjs = require('./chunk-ZEG3OPIB.cjs');
 
 
-var _chunkOW67PDDScjs = require('./chunk-OW67PDDS.cjs');
+var _chunkULASELLAcjs = require('./chunk-ULASELLA.cjs');
 
 
 var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
@@ -1119,7 +1119,7 @@ function createApiClients(options = {}) {
           "api is server-only. Use apiClient from createApiClients() in the browser."
         );
       }
-      const currentRequest = _chunkOW67PDDScjs._resolveCurrentRequest.call(void 0, );
+      const currentRequest = _chunkULASELLAcjs._resolveCurrentRequest.call(void 0, );
       const runtime = _chunk72ADZ6GQcjs.resolveAPIRequestRuntime.call(void 0, );
       if (!currentRequest || !runtime) {
         throw new Error(

package/dist/{chunk-U6MPZ35Q.cjs → chunk-RWFLWR5J.cjs}

@@ -17,7 +17,7 @@ var _chunkLYLEZIG3cjs = require('./chunk-LYLEZIG3.cjs');
 
 
 
-var _chunkNDILNQ4Lcjs = require('./chunk-NDILNQ4L.cjs');
+var _chunkXKG2BLFNcjs = require('./chunk-XKG2BLFN.cjs');
 
 
 var _chunkWMAPPDMMcjs = require('./chunk-WMAPPDMM.cjs');
@@ -102,7 +102,7 @@ var _APIRouteManager = class _APIRouteManager {
         await this.loadProgrammaticApiRoutes(appDir);
       }
       this.routes = new Map(
-        _chunkNDILNQ4Lcjs.mergePluginAPIRoutes.call(void 0, [...this.routes.values()], this.plugins, void 0, {
+        _chunkXKG2BLFNcjs.mergePluginAPIRoutes.call(void 0, [...this.routes.values()], this.plugins, void 0, {
           bodySizeLimit: this.bodySizeLimit,
           dispatch: this.dispatch
         }).map((route) => [route.path, route])
@@ -150,7 +150,7 @@ var _APIRouteManager = class _APIRouteManager {
       const routeModule = await this.loadModule(filePath);
       const endpoints = {};
       const availableMethods = [];
-      for (const method of _chunkNDILNQ4Lcjs.API_ROUTE_METHODS) {
+      for (const method of _chunkXKG2BLFNcjs.API_ROUTE_METHODS) {
         if (routeModule[method]) {
           endpoints[method] = routeModule[method];
           availableMethods.push(method);
@@ -332,7 +332,7 @@ var _APIRouteManager = class _APIRouteManager {
       const url = new URL(request.url);
       const pathname = url.pathname;
       const method = request.method.toUpperCase();
-      const match = _chunkNDILNQ4Lcjs.matchAPIRouteAtBasePath.call(void 0, this.routes, pathname, this.basePath);
+      const match = _chunkXKG2BLFNcjs.matchAPIRouteAtBasePath.call(void 0, this.routes, pathname, this.basePath);
       if (!match) {
         return new Response(JSON.stringify({ error: "Not Found" }), {
           status: 404,
@@ -340,19 +340,19 @@ var _APIRouteManager = class _APIRouteManager {
         });
       }
       const { route, params } = match;
-      const endpoint = _chunkNDILNQ4Lcjs.resolveAPIRouteEndpoint.call(void 0, route, method);
+      const endpoint = _chunkXKG2BLFNcjs.resolveAPIRouteEndpoint.call(void 0, route, method);
       if (!endpoint) {
         return new Response(JSON.stringify({ error: "Method Not Allowed" }), {
           status: 405,
           headers: {
-            Allow: _chunkNDILNQ4Lcjs.getAllowedAPIRouteMethods.call(void 0, route).join(", "),
+            Allow: _chunkXKG2BLFNcjs.getAllowedAPIRouteMethods.call(void 0, route).join(", "),
             "Content-Type": "application/json"
           }
         });
       }
       const invoke = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, async () => {
         try {
-          return await _chunkNDILNQ4Lcjs.invokeAPIRouteEndpoint.call(void 0, endpoint, request, params, this.bodySizeLimit);
+          return await _chunkXKG2BLFNcjs.invokeAPIRouteEndpoint.call(void 0, endpoint, request, params, this.bodySizeLimit);
         } catch (error) {
           if (options.throwOnError) throw error;
           console.error(`[API Error] ${pathname}:`, error);
@@ -374,7 +374,7 @@ var _APIRouteManager = class _APIRouteManager {
     return Boolean(this.matchRoute(pathname));
   }
   matchRoute(pathname) {
-    return _chunkNDILNQ4Lcjs.matchAPIRouteAtBasePath.call(void 0, this.routes, pathname, this.basePath);
+    return _chunkXKG2BLFNcjs.matchAPIRouteAtBasePath.call(void 0, this.routes, pathname, this.basePath);
   }
   /**
    * Get all routes for client type generation

package/dist/{chunk-EUV4YR3V.cjs → chunk-SGBJ247Q.cjs}

@@ -321,6 +321,19 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmMarkdownViewResponse, "createFar
 
 // src/markdown.ts
 var FARM_MARKDOWN_CONTENT_TYPE = "text/markdown; charset=utf-8";
+var FARM_MARKDOWN_PAGE_CHECK_HEADER = "x-farm-markdown-page-check";
+var MARKDOWN_PAGE_CHECK_TOKEN = /* @__PURE__ */ Symbol.for("farm.markdownPageCheckToken");
+function _getFarmMarkdownPageCheckToken() {
+  const state = globalThis;
+  return _nullishCoalesce(state[MARKDOWN_PAGE_CHECK_TOKEN], () => ( (state[MARKDOWN_PAGE_CHECK_TOKEN] = globalThis.crypto.randomUUID())));
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, _getFarmMarkdownPageCheckToken, "_getFarmMarkdownPageCheckToken");
+function _isFarmMarkdownPageCheck(value) {
+  const state = globalThis;
+  const token = state[MARKDOWN_PAGE_CHECK_TOKEN];
+  return Boolean(token) && typeof value === "string" && value === token;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, _isFarmMarkdownPageCheck, "_isFarmMarkdownPageCheck");
 function farmRequestWantsMarkdown(pathname, accept) {
   return pathname.toLowerCase().endsWith(".md") || requestAcceptsMarkdown(accept);
 }
@@ -471,7 +484,7 @@ async function createMarkdownMirrorResponse(options) {
   const cache = _nullishCoalesce(_nullishCoalesce(_optionalChain([target, 'access', _28 => _28.route, 'optionalAccess', _29 => _29.cache]), () => ( _optionalChain([options, 'access', _30 => _30.config, 'optionalAccess', _31 => _31.cache]))), () => ( false));
   headersOut.set(
     "Cache-Control",
-    pageCacheControl && isPrivateCacheControl(pageCacheControl) ? pageCacheControl : createMarkdownCacheHeader(cache)
+    pageCacheControl && isPrivateCacheControl(pageCacheControl) ? pageCacheControl : headers.has("cookie") || headers.has("authorization") ? "private, no-store" : createMarkdownCacheHeader(cache)
   );
   preserveMarkdownResponseCookies(pageResponse.headers, headersOut);
   if (pageResponse.status >= 400) {
@@ -1359,4 +1372,7 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, decodeHtml, "decodeHtml");
 
 
 
-exports.createFarmMarkdownViewResponse = createFarmMarkdownViewResponse; exports.FARM_MARKDOWN_CONTENT_TYPE = FARM_MARKDOWN_CONTENT_TYPE; exports.farmRequestWantsMarkdown = farmRequestWantsMarkdown; exports.createFarmMarkdownErrorBody = createFarmMarkdownErrorBody; exports.resolveMarkdownConfig = resolveMarkdownConfig; exports.resolveMarkdownMirrorTarget = resolveMarkdownMirrorTarget; exports.createMarkdownMirrorResponse = createMarkdownMirrorResponse; exports.applyMarkdownNegotiationHeaders = applyMarkdownNegotiationHeaders; exports.htmlToMarkdown = htmlToMarkdown; exports.farmAcceptQuality = farmAcceptQuality; exports.requestAcceptsMarkdown = requestAcceptsMarkdown; exports.getFarmMarkdownMirrorPath = getFarmMarkdownMirrorPath; exports.getFarmMarkdownAlternatePath = getFarmMarkdownAlternatePath; exports.isFarmMarkdownMirrorExposed = isFarmMarkdownMirrorExposed; exports.matchesFarmMarkdownRoutePattern = matchesFarmMarkdownRoutePattern; exports.extractFarmPageActions = extractFarmPageActions;
+
+
+
+exports.createFarmMarkdownViewResponse = createFarmMarkdownViewResponse; exports.FARM_MARKDOWN_CONTENT_TYPE = FARM_MARKDOWN_CONTENT_TYPE; exports.FARM_MARKDOWN_PAGE_CHECK_HEADER = FARM_MARKDOWN_PAGE_CHECK_HEADER; exports._getFarmMarkdownPageCheckToken = _getFarmMarkdownPageCheckToken; exports._isFarmMarkdownPageCheck = _isFarmMarkdownPageCheck; exports.farmRequestWantsMarkdown = farmRequestWantsMarkdown; exports.createFarmMarkdownErrorBody = createFarmMarkdownErrorBody; exports.resolveMarkdownConfig = resolveMarkdownConfig; exports.resolveMarkdownMirrorTarget = resolveMarkdownMirrorTarget; exports.createMarkdownMirrorResponse = createMarkdownMirrorResponse; exports.applyMarkdownNegotiationHeaders = applyMarkdownNegotiationHeaders; exports.htmlToMarkdown = htmlToMarkdown; exports.farmAcceptQuality = farmAcceptQuality; exports.requestAcceptsMarkdown = requestAcceptsMarkdown; exports.getFarmMarkdownMirrorPath = getFarmMarkdownMirrorPath; exports.getFarmMarkdownAlternatePath = getFarmMarkdownAlternatePath; exports.isFarmMarkdownMirrorExposed = isFarmMarkdownMirrorExposed; exports.matchesFarmMarkdownRoutePattern = matchesFarmMarkdownRoutePattern; exports.extractFarmPageActions = extractFarmPageActions;

package/dist/{chunk-J3ANCZKA.mjs → chunk-SKVTP5PR.mjs}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-JM5XPKWH.mjs";
 import {
   createWebRequestFromFarmRequest
-} from "./chunk-3KGDJLJK.mjs";
+} from "./chunk-POSPE3IO.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";

package/dist/{chunk-YCKO6FRS.mjs → chunk-SOP2EAA6.mjs}

@@ -1,5 +1,5 @@
 // package.json
-var version = "0.1.37";
+var version = "0.1.39";
 
 // src/version.ts
 var FARM_VERSION = version;

package/dist/{chunk-ND2CWPOD.mjs → chunk-TS4JHGUJ.mjs}

@@ -17,7 +17,7 @@ import {
   FARM_METADATA_ATTRIBUTE,
   renderMetadataHead,
   resolveMetadataTitle
-} from "./chunk-CXEN47J3.mjs";
+} from "./chunk-73WX6PRY.mjs";
 import {
   createFarmDeploymentMismatchError,
   createFarmDeploymentRequestHeaders,