@farm.js/core 0.1.37 → 0.1.39

package/dist/{chunk-B5PFZLKV.cjs → chunk-EKN7NSZO.cjs}

@@ -1,7 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
-var _chunkEUV4YR3Vcjs = require('./chunk-EUV4YR3V.cjs');
+
+
+var _chunkSGBJ247Qcjs = require('./chunk-SGBJ247Q.cjs');
 
 
 var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
@@ -159,6 +161,7 @@ var PAGE_CHECK_DROPPED_HEADERS = /* @__PURE__ */ new Set([
   "if-unmodified-since",
   "range"
 ]);
+var PAGE_SEGMENT_MARKER = /<div\s[^>]*\bid=["']?__farm_page__["'\s>]/i;
 async function anonymousVisitorOpensPage(options, url, targetPathname) {
   const pageUrl = new URL(url);
   pageUrl.pathname = targetPathname;
@@ -167,6 +170,7 @@ async function anonymousVisitorOpensPage(options, url, targetPathname) {
     if (!PAGE_CHECK_DROPPED_HEADERS.has(name.toLowerCase())) headers.append(name, value);
   }
   headers.set("accept", "text/html");
+  headers.set(_chunkSGBJ247Qcjs.FARM_MARKDOWN_PAGE_CHECK_HEADER, _chunkSGBJ247Qcjs._getFarmMarkdownPageCheckToken.call(void 0, ));
   const response = await options.renderPage(
     new Request(pageUrl, {
       method: "GET",
@@ -175,9 +179,12 @@ async function anonymousVisitorOpensPage(options, url, targetPathname) {
       signal: options.request.signal
     })
   );
-  void _optionalChain([response, 'access', _9 => _9.body, 'optionalAccess', _10 => _10.cancel, 'call', _11 => _11(), 'access', _12 => _12.catch, 'call', _13 => _13(() => {
-  })]);
-  return response.status >= 200 && response.status < 300 && Boolean(_optionalChain([response, 'access', _14 => _14.headers, 'access', _15 => _15.get, 'call', _16 => _16("content-type"), 'optionalAccess', _17 => _17.toLowerCase, 'call', _18 => _18(), 'access', _19 => _19.includes, 'call', _20 => _20("text/html")]));
+  if (response.status < 200 || response.status >= 300 || !_optionalChain([response, 'access', _9 => _9.headers, 'access', _10 => _10.get, 'call', _11 => _11("content-type"), 'optionalAccess', _12 => _12.toLowerCase, 'call', _13 => _13(), 'access', _14 => _14.includes, 'call', _15 => _15("text/html")])) {
+    void _optionalChain([response, 'access', _16 => _16.body, 'optionalAccess', _17 => _17.cancel, 'call', _18 => _18(), 'access', _19 => _19.catch, 'call', _20 => _20(() => {
+    })]);
+    return false;
+  }
+  return PAGE_SEGMENT_MARKER.test(await response.text());
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, anonymousVisitorOpensPage, "anonymousVisitorOpensPage");
 function hasOnlyAnonymousHeaders(headers) {
@@ -197,7 +204,7 @@ async function createFarmMarkdownSourceResponse(options) {
   }
   const url = new URL(options.request.url);
   const hasMarkdownExtension = url.pathname.toLowerCase().endsWith(".md");
-  if (!hasMarkdownExtension && !_chunkEUV4YR3Vcjs.requestAcceptsMarkdown.call(void 0, options.request.headers.get("accept"))) {
+  if (!hasMarkdownExtension && !_chunkSGBJ247Qcjs.requestAcceptsMarkdown.call(void 0, options.request.headers.get("accept"))) {
     return null;
   }
   const targetPathname = normalizeFarmMarkdownRoutePath(url.pathname);
@@ -222,8 +229,18 @@ async function createFarmMarkdownSourceResponse(options) {
       })
     );
     if (publicResponse.headers.get("X-Farm-Markdown-Route") === targetPathname && publicResponse.headers.has("X-Farm-Markdown-Source")) {
-      publicSourceResponses.add(publicResponse);
-      return publicResponse;
+      let response = publicResponse;
+      if (options.request.headers.has("cookie") || options.request.headers.has("authorization")) {
+        const headers2 = new Headers(publicResponse.headers);
+        headers2.set("Cache-Control", "private, no-store");
+        response = new Response(publicResponse.body, {
+          status: publicResponse.status,
+          statusText: publicResponse.statusText,
+          headers: headers2
+        });
+      }
+      publicSourceResponses.add(response);
+      return response;
     }
     await _optionalChain([publicResponse, 'access', _23 => _23.body, 'optionalAccess', _24 => _24.cancel, 'call', _25 => _25()]);
     if (!hasMarkdownExtension) return null;
@@ -249,7 +266,7 @@ async function createFarmMarkdownSourceResponse(options) {
   if (!hasMarkdownExtension) {
     headers.set("Vary", "Accept");
   }
-  return _chunkEUV4YR3Vcjs.createFarmMarkdownViewResponse.call(void 0, {
+  return _chunkSGBJ247Qcjs.createFarmMarkdownViewResponse.call(void 0, {
     request: options.request,
     requestUrl: url,
     markdown: source.source,

package/dist/{chunk-6SJ2KJTA.mjs → chunk-EPYU2EBL.mjs}

@@ -2,7 +2,7 @@ import {
   FARM_DEFAULT_MCP_DESCRIPTION,
   FARM_DEFAULT_MCP_PROTOCOL_VERSIONS,
   FARM_DEFAULT_MCP_TOOLS
-} from "./chunk-UH6QN5NL.mjs";
+} from "./chunk-P664ZVTV.mjs";
 import {
   stripFarmBasePath
 } from "./chunk-4RB44K6Z.mjs";

package/dist/{chunk-LBGILORX.mjs → chunk-GKBWWRBG.mjs}

@@ -1,18 +1,29 @@
 import {
   FARM_DEFAULT_MCP_TOOLS
-} from "./chunk-UH6QN5NL.mjs";
+} from "./chunk-P664ZVTV.mjs";
 import {
   DEFAULT_ERROR_STYLES
 } from "./chunk-XAXTTBUT.mjs";
 import {
   serializeFarmLlmsTxt
-} from "./chunk-DTSROJ5J.mjs";
+} from "./chunk-HD5CF3OE.mjs";
+import {
+  stampFarmCspNonce
+} from "./chunk-U6QLDL3G.mjs";
 import {
   emitFarmAgentRead
 } from "./chunk-MVL2RAJW.mjs";
 import {
   resolveFarmThemeConfig
 } from "./chunk-AELACLOB.mjs";
+import {
+  integrationMiddlewareMayHandlePath
+} from "./chunk-ATSDUUFK.mjs";
+import {
+  compileMiddlewareConfig,
+  matchesCompiledMiddlewareConfig,
+  matchesMiddlewareRoute
+} from "./chunk-P3PLW4FR.mjs";
 import {
   omitFarmResponseBody
 } from "./chunk-5WI2S4CO.mjs";
@@ -25,12 +36,13 @@ import {
   matchesFarmIfNoneMatch
 } from "./chunk-ZMMBIVQM.mjs";
 import {
+  createFarmAPIMiddlewarePathnames,
   resolveFarmAPIServerBasePath,
   resolveFarmAPIServerRoutePath
 } from "./chunk-BTHHUD7Q.mjs";
 import {
   FARM_VERSION
-} from "./chunk-YCKO6FRS.mjs";
+} from "./chunk-SOP2EAA6.mjs";
 import {
   localizeFarmPathname
 } from "./chunk-L3KT7IXV.mjs";
@@ -219,6 +231,71 @@ ${html}`;
 }
 __name(composeFarmFullDocument, "composeFarmFullDocument");
 
+// src/middleware/may-handle.ts
+function hasFarmMiddlewareConfig(config) {
+  if (!config) return false;
+  if (Array.isArray(config)) return config.length > 0;
+  const configRecord = config;
+  return Boolean(
+    configRecord.matcher || configRecord.exclude || configRecord.runtime || configRecord.handler || Array.isArray(configRecord.handlers) && configRecord.handlers.length > 0
+  );
+}
+__name(hasFarmMiddlewareConfig, "hasFarmMiddlewareConfig");
+function configMiddlewareMayHandlePath(config, pathname) {
+  if (!hasFarmMiddlewareConfig(config)) return false;
+  const entries = Array.isArray(config) ? config : [config];
+  return entries.some((entry) => {
+    if (!entry.matcher && !entry.exclude) return true;
+    const matchers = entry.matcher ? (Array.isArray(entry.matcher) ? entry.matcher : [entry.matcher]).map(
+      (matcher) => (
+        // A request-aware matcher cannot be proven safe at build time.
+        typeof matcher === "function" ? () => true : matcher
+      )
+    ) : void 0;
+    const compiled = compileMiddlewareConfig({ matcher: matchers, exclude: entry.exclude });
+    return matchesCompiledMiddlewareConfig(pathname, compiled, {}).matched;
+  });
+}
+__name(configMiddlewareMayHandlePath, "configMiddlewareMayHandlePath");
+function appMiddlewareMayHandlePath(middlewareRoutes, pathname) {
+  return middlewareRoutes.some((route) => matchesMiddlewareRoute(pathname, route).matched);
+}
+__name(appMiddlewareMayHandlePath, "appMiddlewareMayHandlePath");
+var CATCH_ALL_PROBE = "/__farm-listing-probe__/0";
+function isPathSpecificMatcher(matcher) {
+  if (typeof matcher === "function") return false;
+  const compiled = compileMiddlewareConfig({ matcher });
+  return !matchesCompiledMiddlewareConfig(CATCH_ALL_PROBE, compiled, {}).matched;
+}
+__name(isPathSpecificMatcher, "isPathSpecificMatcher");
+function pathSpecificConfigMiddlewareCovers(config, pathname) {
+  if (!hasFarmMiddlewareConfig(config)) return false;
+  const entries = Array.isArray(config) ? config : [config];
+  return entries.some((entry) => {
+    if (!entry.matcher) return false;
+    const matchers = (Array.isArray(entry.matcher) ? entry.matcher : [entry.matcher]).filter(
+      isPathSpecificMatcher
+    );
+    if (matchers.length === 0) return false;
+    const compiled = compileMiddlewareConfig({ matcher: matchers, exclude: entry.exclude });
+    return matchesCompiledMiddlewareConfig(pathname, compiled, {}).matched;
+  });
+}
+__name(pathSpecificConfigMiddlewareCovers, "pathSpecificConfigMiddlewareCovers");
+function farmPathGuardCoversPage(options, pathname) {
+  return appMiddlewareMayHandlePath(
+    options.middlewareRoutes.filter((route) => route.path !== "/"),
+    pathname
+  ) || pathSpecificConfigMiddlewareCovers(options.config.middleware, pathname) || integrationMiddlewareMayHandlePath(options.config.integrations, pathname, CATCH_ALL_PROBE);
+}
+__name(farmPathGuardCoversPage, "farmPathGuardCoversPage");
+function farmPathGuardCoversEndpoint(options, path, apiServerBasePath) {
+  return createFarmAPIMiddlewarePathnames(apiServerBasePath)(path).some(
+    (pathname) => farmPathGuardCoversPage(options, pathname)
+  );
+}
+__name(farmPathGuardCoversEndpoint, "farmPathGuardCoversEndpoint");
+
 // src/i18n/alternates.ts
 function renderFarmLocaleAlternateLinks(pathname, config, options = {}) {
   if (config.routing === "none") return "";
@@ -269,13 +346,19 @@ function isLateRedirectTarget(url) {
   }
 }
 __name(isLateRedirectTarget, "isLateRedirectTarget");
-function createLateRedirectRecovery(url) {
+function createLateRedirectRecovery(url, nonce) {
   if (!isLateRedirectTarget(url)) return "";
-  return `<script>window.location.replace(${serializeForInlineScript(url)})</script>`;
+  return stampFarmCspNonce(
+    `<script>window.location.replace(${serializeForInlineScript(url)})</script>`,
+    nonce
+  );
 }
 __name(createLateRedirectRecovery, "createLateRedirectRecovery");
-function createLateNotFoundRecovery(content) {
-  return `<template id="${TEMPLATE_ID}">${content}</template><script>(function(){var t=document.getElementById("${TEMPLATE_ID}");var p=document.getElementById("${PAGE_CONTAINER_ID}");if(t&&p){p.replaceChildren(t.content.cloneNode(true));}if(t)t.remove();document.documentElement.dataset.farmLateNotFound="true";var m=document.createElement("meta");m.name="robots";m.content="noindex";document.head.appendChild(m);})();</script>`;
+function createLateNotFoundRecovery(content, nonce) {
+  return `<template id="${TEMPLATE_ID}">${content}</template>` + stampFarmCspNonce(
+    `<script>(function(){var t=document.getElementById("${TEMPLATE_ID}");var p=document.getElementById("${PAGE_CONTAINER_ID}");if(t&&p){p.replaceChildren(t.content.cloneNode(true));}if(t)t.remove();document.documentElement.dataset.farmLateNotFound="true";var m=document.createElement("meta");m.name="robots";m.content="noindex";document.head.appendChild(m);})();</script>`,
+    nonce
+  );
 }
 __name(createLateNotFoundRecovery, "createLateNotFoundRecovery");
 
@@ -763,7 +846,9 @@ function createFarmThemeDocumentParts(input, basePath = "/", serverTheme) {
   const script = createFarmThemeBootstrapScript(config, hydrationTheme);
   return {
     attributes: ` data-theme="${initialTheme}"`,
-    head: `<style id="${THEME_STYLE_ID}">:root[data-theme="light"]{color-scheme:light}:root[data-theme="dark"]{color-scheme:dark}</style><script id="${THEME_SCRIPT_ID}">${script}</script>`
+    head: stampFarmCspNonce(
+      `<style id="${THEME_STYLE_ID}">:root[data-theme="light"]{color-scheme:light}:root[data-theme="dark"]{color-scheme:dark}</style><script id="${THEME_SCRIPT_ID}">${script}</script>`
+    )
   };
 }
 __name(createFarmThemeDocumentParts, "createFarmThemeDocumentParts");
@@ -920,12 +1005,13 @@ function createFarmAppManifest(input, { full = false } = {}) {
     packages: input.packages,
     mcp: {
       servers: _listFarmMCPCatalogs().map(({ server, tools, details }) => {
-        const listed = full || details?.public === true;
+        const open = details?.public === true && !input.guardCoversPath?.(server.path);
+        const listed = full || open;
         return {
           name: server.name,
           version: server.version,
           path: server.path,
-          authorization: details?.public === true ? "none" : "required",
+          authorization: open ? "none" : "required",
           resources: listed ? [...details?.resources ?? []] : [],
           prompts: listed ? [...details?.prompts ?? []] : [],
           tools: (listed ? tools : []).map((tool) => {
@@ -1078,6 +1164,11 @@ export {
   removeFarmDocumentTitles,
   ensureFarmDocumentMeta,
   composeFarmFullDocument,
+  hasFarmMiddlewareConfig,
+  configMiddlewareMayHandlePath,
+  appMiddlewareMayHandlePath,
+  farmPathGuardCoversPage,
+  farmPathGuardCoversEndpoint,
   renderFarmLocaleAlternateLinks,
   createLateRedirectRecovery,
   createLateNotFoundRecovery,

package/dist/{chunk-PTZ2TVNE.cjs → chunk-H5CLOUZS.cjs}

@@ -1,10 +1,10 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunk4WQ6PGSJcjs = require('./chunk-4WQ6PGSJ.cjs');
+var _chunkWEW2JVA4cjs = require('./chunk-WEW2JVA4.cjs');
 
 
 
-var _chunkEUV4YR3Vcjs = require('./chunk-EUV4YR3V.cjs');
+var _chunkSGBJ247Qcjs = require('./chunk-SGBJ247Q.cjs');
 
 
 
@@ -108,10 +108,10 @@ function collectFarmDefaultMCPPages(sources, options) {
   for (const source of sources) {
     const module = isRecord(source.module) ? source.module : void 0;
     if (_optionalChain([module, 'optionalAccess', _ => _.__farmRouteGuard])) continue;
-    if (!_chunkEUV4YR3Vcjs.isFarmMarkdownMirrorExposed.call(void 0, options.markdown, source.pattern)) continue;
+    if (!_chunkSGBJ247Qcjs.isFarmMarkdownMirrorExposed.call(void 0, options.markdown, source.pattern)) continue;
     readable.push({ pattern: source.pattern, metadata: _optionalChain([module, 'optionalAccess', _2 => _2.metadata]) });
   }
-  return _chunk4WQ6PGSJcjs.collectFarmLlmsTxtPages.call(void 0, readable, {
+  return _chunkWEW2JVA4cjs.collectFarmLlmsTxtPages.call(void 0, readable, {
     origin: options.origin,
     basePath: options.basePath,
     markdown: options.markdown
@@ -121,7 +121,7 @@ function collectFarmDefaultMCPPages(sources, options) {
     url: `${options.origin}${_chunkI57LW5VZcjs.applyFarmBasePath.call(void 0, page.path, options.basePath)}`,
     ...page.description ? { description: page.description } : {},
     markdownUrl: `${options.origin}${_chunkI57LW5VZcjs.applyFarmBasePath.call(void 0, 
-      _chunkEUV4YR3Vcjs.getFarmMarkdownMirrorPath.call(void 0, page.path),
+      _chunkSGBJ247Qcjs.getFarmMarkdownMirrorPath.call(void 0, page.path),
       options.basePath
     )}`
   }));

package/dist/{chunk-DTSROJ5J.mjs → chunk-HD5CF3OE.mjs}

@@ -2,7 +2,7 @@ import {
   getFarmMarkdownMirrorPath,
   isFarmMarkdownMirrorExposed,
   matchesFarmMarkdownRoutePattern
-} from "./chunk-WWIKMBRN.mjs";
+} from "./chunk-VNGH5MLF.mjs";
 import {
   FARM_INTERNAL_READ_HEADER
 } from "./chunk-MVL2RAJW.mjs";

package/dist/{chunk-3A4KGQYI.cjs → chunk-HRETEZ2Z.cjs}

@@ -26,13 +26,15 @@ var _chunkPSV6XKPOcjs = require('./chunk-PSV6XKPO.cjs');
 
 
 
+var _chunkQTXBII4Zcjs = require('./chunk-QTXBII4Z.cjs');
 
 
+var _chunkWEW2JVA4cjs = require('./chunk-WEW2JVA4.cjs');
 
-var _chunkMRMI32SNcjs = require('./chunk-MRMI32SN.cjs');
 
 
-var _chunk4WQ6PGSJcjs = require('./chunk-4WQ6PGSJ.cjs');
+
+var _chunk2ZYGC6SScjs = require('./chunk-2ZYGC6SS.cjs');
 
 
 var _chunkYFPGHF5Fcjs = require('./chunk-YFPGHF5F.cjs');
@@ -51,7 +53,7 @@ var _chunkVEKFLAQMcjs = require('./chunk-VEKFLAQM.cjs');
 var _chunkOHY2ZWUGcjs = require('./chunk-OHY2ZWUG.cjs');
 
 
-var _chunkEUV4YR3Vcjs = require('./chunk-EUV4YR3V.cjs');
+var _chunkSGBJ247Qcjs = require('./chunk-SGBJ247Q.cjs');
 
 
 var _chunkUYIHRDE4cjs = require('./chunk-UYIHRDE4.cjs');
@@ -63,7 +65,10 @@ var _chunkSDOTRX3Vcjs = require('./chunk-SDOTRX3V.cjs');
 var _chunkOI6CMLWXcjs = require('./chunk-OI6CMLWX.cjs');
 
 
-var _chunkUJZLSXUBcjs = require('./chunk-UJZLSXUB.cjs');
+var _chunkBWIQR4DHcjs = require('./chunk-BWIQR4DH.cjs');
+
+
+var _chunkUPJLHLJUcjs = require('./chunk-UPJLHLJU.cjs');
 
 
 var _chunkKIIMAWOJcjs = require('./chunk-KIIMAWOJ.cjs');
@@ -138,13 +143,13 @@ function resolveFarmAgentConfig(input, context = {}) {
   const jsonLd = _optionalChain([input, 'optionalAccess', _ => _.jsonLd]);
   return {
     jsonLd: jsonLd === void 0 ? { ...DEFAULT_JSON_LD } : !jsonLd ? false : jsonLd === true ? {} : jsonLd,
-    noindexPreviews: _chunkMRMI32SNcjs.resolveFarmNoindexPreviews.call(void 0, _optionalChain([input, 'optionalAccess', _2 => _2.noindexPreviews])),
+    noindexPreviews: _chunkQTXBII4Zcjs.resolveFarmNoindexPreviews.call(void 0, _optionalChain([input, 'optionalAccess', _2 => _2.noindexPreviews])),
     // The docs engine answers /llms.txt with its own pages; a default here would replace it.
     // llms-full.txt renders every listed page, so it stays opt-in.
-    llmsTxt: _chunk4WQ6PGSJcjs.resolveFarmLlmsTxtConfig.call(void 0, _nullishCoalesce(_optionalChain([input, 'optionalAccess', _3 => _3.llmsTxt]), () => ( (context.docs ? false : { full: false })))),
+    llmsTxt: _chunkWEW2JVA4cjs.resolveFarmLlmsTxtConfig.call(void 0, _nullishCoalesce(_optionalChain([input, 'optionalAccess', _3 => _3.llmsTxt]), () => ( (context.docs ? false : { full: false })))),
     // Same rule as llms.txt: the docs engine answers /sitemap.xml with its own pages.
-    sitemap: _chunkMRMI32SNcjs.resolveFarmAgentSitemap.call(void 0, _nullishCoalesce(_optionalChain([input, 'optionalAccess', _4 => _4.sitemap]), () => ( !context.docs))),
-    crawlers: _chunkMRMI32SNcjs.resolveFarmAgentCrawlers.call(void 0, _optionalChain([input, 'optionalAccess', _5 => _5.crawlers])),
+    sitemap: _chunkQTXBII4Zcjs.resolveFarmAgentSitemap.call(void 0, _nullishCoalesce(_optionalChain([input, 'optionalAccess', _4 => _4.sitemap]), () => ( !context.docs))),
+    crawlers: _chunkQTXBII4Zcjs.resolveFarmAgentCrawlers.call(void 0, _optionalChain([input, 'optionalAccess', _5 => _5.crawlers])),
     apiCatalog: resolveFarmAgentBoolean(_optionalChain([input, 'optionalAccess', _6 => _6.apiCatalog]), "apiCatalog", false),
     aiCatalog: resolveFarmAgentBoolean(_optionalChain([input, 'optionalAccess', _7 => _7.aiCatalog]), "aiCatalog", true),
     manifest: resolveFarmAgentBoolean(_optionalChain([input, 'optionalAccess', _8 => _8.manifest]), "manifest", true),
@@ -657,6 +662,13 @@ function validateRedirectConfigs(redirects, field) {
   return redirects;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, validateRedirectConfigs, "validateRedirectConfigs");
+function validateMiddlewareConfig(middleware) {
+  for (const entry of Array.isArray(middleware) ? middleware : middleware ? [middleware] : []) {
+    _chunkUPJLHLJUcjs.compileMiddlewareConfig.call(void 0, { matcher: entry.matcher, exclude: entry.exclude });
+  }
+  return middleware;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, validateMiddlewareConfig, "validateMiddlewareConfig");
 function validateConfigRouteSources(routes, field) {
   for (const [index, route] of routes.entries()) {
     _chunkDVM4FKZLcjs.validateConfigRouteSource.call(void 0, route.source, `${field}[${index}].source`);
@@ -697,9 +709,9 @@ async function resolveConfig(userConfig, mode) {
   const routeRules = _chunkQ5B3KJBPcjs.normalizeRouteRules.call(void 0, userConfig.routeRules);
   const routeRuleRedirects = _chunkQ5B3KJBPcjs.routeRulesToRedirects.call(void 0, routeRules);
   const routeRuleHeaders = _chunkQ5B3KJBPcjs.routeRulesToHeaders.call(void 0, routeRules);
-  const security = _chunkMRMI32SNcjs.resolveFarmSecurityConfig.call(void 0, userConfig.security);
-  const securityHeader = _chunkMRMI32SNcjs.getFarmSecurityHeader.call(void 0, security);
-  if (_chunkMRMI32SNcjs.farmCspBlocksFrameworkInlineScripts.call(void 0, security)) {
+  const security = _chunk2ZYGC6SScjs.resolveFarmSecurityConfig.call(void 0, userConfig.security);
+  const securityHeader = _chunk2ZYGC6SScjs.getFarmSecurityHeader.call(void 0, security);
+  if (_chunk2ZYGC6SScjs.farmCspBlocksFrameworkInlineScripts.call(void 0, security)) {
     _chunk5QIKR7RRcjs.logger.warn(
       "security.csp blocks the inline scripts Farm injects for theming and hydration. Set security.csp.nonce to true for managed dynamic nonces and prerendered hashes, or make the governing script directive allow 'unsafe-inline' without a nonce, hash, or 'strict-dynamic' source."
     );
@@ -709,7 +721,7 @@ async function resolveConfig(userConfig, mode) {
   const srcDir = userConfig.srcDir || "src";
   _chunk6MVFL3R5cjs.setFarmProjectSourceDir.call(void 0, root, srcDir);
   const docs = await resolveDocsConfig(userConfig.docs, { root, srcDir });
-  const md = _chunkEUV4YR3Vcjs.resolveMarkdownConfig.call(void 0, userConfig.md);
+  const md = _chunkSGBJ247Qcjs.resolveMarkdownConfig.call(void 0, userConfig.md);
   const mdx = _chunkOHY2ZWUGcjs.resolveMdxConfig.call(void 0, userConfig.mdx);
   const env = _chunkVEKFLAQMcjs.resolveEnv.call(void 0, userConfig.env, process.env);
   _chunkVEKFLAQMcjs.setEnv.call(void 0, env);
@@ -785,7 +797,7 @@ async function resolveConfig(userConfig, mode) {
     },
     agent: resolveFarmAgentConfig(userConfig.agent, { docs: docs.enabled }),
     plugins: [
-      ..._chunkUJZLSXUBcjs.resolveIntegrationPlugins.call(void 0, integrations),
+      ..._chunkBWIQR4DHcjs.resolveIntegrationPlugins.call(void 0, integrations),
       ...nativeMCPPlugin ? [nativeMCPPlugin] : [],
       ...userConfig.plugins || []
     ],
@@ -800,12 +812,12 @@ async function resolveConfig(userConfig, mode) {
     ], "headers"),
     routeRules,
     images: _chunkYFPGHF5Fcjs.resolveFarmImageConfig.call(void 0, userConfig.images),
-    performance: _chunkMRMI32SNcjs.resolveFarmPerformanceConfig.call(void 0, userConfig.performance),
+    performance: _chunkQTXBII4Zcjs.resolveFarmPerformanceConfig.call(void 0, userConfig.performance),
     theme: _chunkOI6CMLWXcjs.resolveFarmThemeConfig.call(void 0, userConfig.theme, basePath),
     publicDir: userConfig.publicDir || "public",
     i18n: _chunkHLJ6MBUZcjs.resolveFarmI18nConfig.call(void 0, userConfig.i18n, { root, mode, basePath }),
     openapi,
-    middleware: userConfig.middleware || {},
+    middleware: validateMiddlewareConfig(userConfig.middleware) || {},
     notFound: userConfig.notFound || {},
     context: userConfig.context || (() => void 0),
     server: _chunkKIIMAWOJcjs.resolveFarmServerConfig.call(void 0, userConfig.server),

package/dist/{chunk-ATWHHSY2.cjs → chunk-HRSAQ23K.cjs}

@@ -1,9 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkEMMQ64QWcjs = require('./chunk-EMMQ64QW.cjs');
+var _chunkB5J2YVG7cjs = require('./chunk-B5J2YVG7.cjs');
 
 
-var _chunkFWE7LEQCcjs = require('./chunk-FWE7LEQC.cjs');
+var _chunkBD3D7EZVcjs = require('./chunk-BD3D7EZV.cjs');
 
 
 var _chunkI57LW5VZcjs = require('./chunk-I57LW5VZ.cjs');
@@ -13,7 +13,7 @@ var _chunkS3JO3N4Hcjs = require('./chunk-S3JO3N4H.cjs');
 
 // src/navigation.ts
 function useRouter2() {
-  const router = _chunkEMMQ64QWcjs.useRouter.call(void 0, );
+  const router = _chunkB5J2YVG7cjs.useRouter.call(void 0, );
   return {
     push: router.push,
     replace: router.replace,
@@ -21,21 +21,21 @@ function useRouter2() {
     forward: router.forward,
     refresh() {
       if (typeof window === "undefined") return Promise.resolve();
-      return _chunkFWE7LEQCcjs.getRouter.call(void 0, ).refresh();
+      return _chunkBD3D7EZVcjs.getRouter.call(void 0, ).refresh();
     },
     prefetch(href) {
       if (typeof window === "undefined") return Promise.resolve();
-      return _chunkFWE7LEQCcjs.getRouter.call(void 0, ).prefetch(_chunkI57LW5VZcjs.applyFarmBasePath.call(void 0, href));
+      return _chunkBD3D7EZVcjs.getRouter.call(void 0, ).prefetch(_chunkI57LW5VZcjs.applyFarmBasePath.call(void 0, href));
     }
   };
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, useRouter2, "useRouter");
 function usePathname() {
-  return _chunkEMMQ64QWcjs.useRouter.call(void 0, ).pathname;
+  return _chunkB5J2YVG7cjs.useRouter.call(void 0, ).pathname;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, usePathname, "usePathname");
 function useSearchParams() {
-  return _chunkEMMQ64QWcjs.useRouter.call(void 0, ).searchParams;
+  return _chunkB5J2YVG7cjs.useRouter.call(void 0, ).searchParams;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, useSearchParams, "useSearchParams");
 

package/dist/{chunk-IAIYV4RZ.mjs → chunk-HXRYZWTA.mjs}

@@ -4,7 +4,7 @@ import {
   _runServerFunctionForCaller,
   createServerFn,
   createServerFunctionDescriptor
-} from "./chunk-RRMVL6CJ.mjs";
+} from "./chunk-W36M2BQ4.mjs";
 import {
   createFarmServerQueryResult
 } from "./chunk-KGB5UXJJ.mjs";