@farm.js/core 0.1.37 → 0.1.39

package/dist/{chunk-XOPOIFTJ.mjs → chunk-YKZRDB5Z.mjs}

@@ -1,20 +1,21 @@
 import {
   discoverFarmDocsPages,
+  getFarmDocsMarkdownPath,
   loadFarmDocsPage,
   resolveFarmDocsContentDir,
   toFarmDocsMarkdownPage
-} from "./chunk-O6WAEAX3.mjs";
+} from "./chunk-5BWWFHR2.mjs";
 import {
   docsEngine,
   loadFarmDocsEngine
 } from "./chunk-2VQKKQ6D.mjs";
 import {
   resolveDocsConfig
-} from "./chunk-EXG5LD6B.mjs";
+} from "./chunk-75HN5IZ3.mjs";
 import {
   getFarmDocsAdapterConfigModule,
   isSecretDocsConfigKey
-} from "./chunk-ENLZ4R3Y.mjs";
+} from "./chunk-J7K2NZD6.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";
@@ -27,6 +28,15 @@ function hasFarmDocsRuntimeAdapter(docs) {
   return Boolean(docs?.enabled && docs.adapter?.server && docs.adapter.react);
 }
 __name(hasFarmDocsRuntimeAdapter, "hasFarmDocsRuntimeAdapter");
+function assertFarmDocsAdapterServesNoGuardedPages(docs, options, isPathGuarded) {
+  if (!isPathGuarded || !hasFarmDocsRuntimeAdapter(docs)) return;
+  const guarded = discoverFarmDocsPages(resolveFarmDocsContentDir(docs, options), docs).filter((page) => isPathGuarded(page.href) || isPathGuarded(getFarmDocsMarkdownPath(page.href))).map((page) => page.href);
+  if (guarded.length === 0) return;
+  throw new Error(
+    `Docs pages behind a path guard (${guarded.join(", ")}) would be public: the docs adapter ${JSON.stringify(docs.adapter.id)} serves their content in llms-full.txt, search, Markdown, and MCP without running the app's guards. Move those pages out of the docs content directory, or set docs.adapter = false to use Farm's built-in docs runtime, which keeps guarded pages off anonymous surfaces.`
+  );
+}
+__name(assertFarmDocsAdapterServesNoGuardedPages, "assertFarmDocsAdapterServesNoGuardedPages");
 async function loadFarmDocsConfigModule(docs, loadModule) {
   const configModule = getFarmDocsAdapterConfigModule(docs);
   if (!configModule) return void 0;
@@ -99,6 +109,7 @@ async function createFarmDocsAdapterHandler(docs, options) {
   if (!hasFarmDocsRuntimeAdapter(docs)) {
     throw new Error("Farm docs adapter requires server and react runtime entrypoints.");
   }
+  assertFarmDocsAdapterServesNoGuardedPages(docs, options, options.isPathGuarded);
   const serverModule = await options.loadModule(
     docs.adapter.server
   );
@@ -277,7 +288,7 @@ function getDocsDescription(docs) {
 }
 __name(getDocsDescription, "getDocsDescription");
 function getLoadedDocsPages(context) {
-  return discoverFarmDocsPages(context.contentDir, context.docs).map((page) => loadFarmDocsPage(context.contentDir, context.docs, page.slug)).filter((page) => Boolean(page));
+  return discoverFarmDocsPages(context.contentDir, context.docs).filter((page) => !context.isPathGuarded(page.href)).map((page) => loadFarmDocsPage(context.contentDir, context.docs, page.slug)).filter((page) => Boolean(page));
 }
 __name(getLoadedDocsPages, "getLoadedDocsPages");
 function toDocsSourcePage(page) {
@@ -389,7 +400,9 @@ __name(renderAgentsDocument, "renderAgentsDocument");
 function buildAgentSpec(context, request) {
   const url = new URL(request.url);
   const origin = url.origin;
-  const pages = discoverFarmDocsPages(context.contentDir, context.docs);
+  const pages = discoverFarmDocsPages(context.contentDir, context.docs).filter(
+    (page) => !context.isPathGuarded(page.href)
+  );
   const spec = docsEngine().buildDocsAgentDiscoverySpec(getDocsDiscoveryOptions(context, request));
   const title = getDocsTitle(context.docs);
   return {
@@ -552,12 +565,14 @@ async function resolveAPIContext(options) {
     configPath: options.configPath
   };
   const docs = isResolvedDocsConfig(docsInput) ? docsInput : await resolveDocsConfig(docsInput, { root, srcDir });
+  const guardedPaths = new Set(runtimeConfig?.guardedPaths ?? []);
   return {
     root,
     srcDir,
     docs,
     contentDir: resolveFarmDocsContentDir(docs, { root, srcDir }),
-    diagnostics: options.diagnostics === true
+    diagnostics: options.diagnostics === true,
+    isPathGuarded: options.isPathGuarded ?? ((pathname) => guardedPaths.has(pathname))
   };
 }
 __name(resolveAPIContext, "resolveAPIContext");
@@ -616,7 +631,9 @@ async function handleDocsAPIGet(request, context) {
     const pathParam = url.searchParams.get("path") || url.searchParams.get("slug");
     const slug = normalizeDocsApiSlug(pathParam ?? pathTarget.slug ?? "", context.docs);
     const page = loadFarmDocsPage(context.contentDir, context.docs, slug);
-    if (!page) return text("Docs page not found\n", "text/plain; charset=utf-8", { status: 404 });
+    if (!page || context.isPathGuarded(page.href)) {
+      return text("Docs page not found\n", "text/plain; charset=utf-8", { status: 404 });
+    }
     return text(
       docsEngine().renderDocsMarkdownDocument(toFarmDocsMarkdownPage(page), {
         origin: new URL(request.url).origin,
@@ -688,6 +705,7 @@ __name(createFarmDocsAPIHandler, "createFarmDocsAPIHandler");
 
 export {
   hasFarmDocsRuntimeAdapter,
+  assertFarmDocsAdapterServesNoGuardedPages,
   compileFarmDocsAdapterEdgeManifest,
   createFarmDocsAdapterHandler,
   isFarmDocsAPIRequest,