@farm.js/core 0.1.40 → 0.1.42

package/dist/{chunk-EW4MEVLE.cjs → chunk-7YHSD3Z6.cjs}

@@ -6,10 +6,13 @@ var _chunkBMOBTMDRcjs = require('./chunk-BMOBTMDR.cjs');
 var _chunkOWOUTKIJcjs = require('./chunk-OWOUTKIJ.cjs');
 
 
+var _chunkJAXDRRRCcjs = require('./chunk-JAXDRRRC.cjs');
+
+
 var _chunkD5IHNDHIcjs = require('./chunk-D5IHNDHI.cjs');
 
 
-var _chunkB6IMBBOScjs = require('./chunk-B6IMBBOS.cjs');
+var _chunk25LPIZSXcjs = require('./chunk-25LPIZSX.cjs');
 
 
 var _chunkX3GMHKO3cjs = require('./chunk-X3GMHKO3.cjs');
@@ -42,7 +45,7 @@ var _chunkKNBBQHO2cjs = require('./chunk-KNBBQHO2.cjs');
 var _chunk5NAVKJCZcjs = require('./chunk-5NAVKJCZ.cjs');
 
 
-var _chunkDKU6NXRKcjs = require('./chunk-DKU6NXRK.cjs');
+var _chunkAHFRQMRXcjs = require('./chunk-AHFRQMRX.cjs');
 
 
 var _chunkBIDYX3SLcjs = require('./chunk-BIDYX3SL.cjs');
@@ -112,7 +115,7 @@ function routeBoundaryCoversDirectory(boundaryPattern, directory) {
 _chunkS3JO3N4Hcjs.__name.call(void 0, routeBoundaryCoversDirectory, "routeBoundaryCoversDirectory");
 
 // src/server/full-document.ts
-var CONTENTS_WRAPPER = /^<div\b[^>]*style="display\s*:\s*contents"[^>]*>/i;
+var CONTENTS_WRAPPER = /^<div\b[^>]*style="display\s*:\s*contents;?\s*"[^>]*>/i;
 var HOISTED_HEAD_ELEMENT = /^(?:<(?:meta|link|base)\b[^>]*>|<title\b[^>]*>[\s\S]*?<\/title>|<script\b[^>]*\basync\b[^>]*><\/script>|<style\b[^>]*\bdata-precedence\b[^>]*>[\s\S]*?<\/style>)/i;
 function peelDocumentPrefix(markup) {
   let inner = markup.replace(/^\s+/, "");
@@ -348,14 +351,14 @@ function isLateRedirectTarget(url) {
 _chunkS3JO3N4Hcjs.__name.call(void 0, isLateRedirectTarget, "isLateRedirectTarget");
 function createLateRedirectRecovery(url, nonce) {
   if (!isLateRedirectTarget(url)) return "";
-  return _chunkB6IMBBOScjs.stampFarmCspNonce.call(void 0, 
+  return _chunk25LPIZSXcjs.stampFarmCspNonce.call(void 0, 
     `<script>window.location.replace(${serializeForInlineScript(url)})</script>`,
     nonce
   );
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createLateRedirectRecovery, "createLateRedirectRecovery");
 function createLateNotFoundRecovery(content, nonce) {
-  return `<template id="${TEMPLATE_ID}">${content}</template>` + _chunkB6IMBBOScjs.stampFarmCspNonce.call(void 0, 
+  return `<template id="${TEMPLATE_ID}">${content}</template>` + _chunk25LPIZSXcjs.stampFarmCspNonce.call(void 0, 
     `<script>(function(){var t=document.getElementById("${TEMPLATE_ID}");var p=document.getElementById("${PAGE_CONTAINER_ID}");if(t&&p){p.replaceChildren(t.content.cloneNode(true));}if(t)t.remove();document.documentElement.dataset.farmLateNotFound="true";var m=document.createElement("meta");m.name="robots";m.content="noindex";document.head.appendChild(m);})();</script>`,
     nonce
   );
@@ -846,7 +849,7 @@ function createFarmThemeDocumentParts(input, basePath = "/", serverTheme) {
   const script = createFarmThemeBootstrapScript(config, hydrationTheme);
   return {
     attributes: ` data-theme="${initialTheme}"`,
-    head: _chunkB6IMBBOScjs.stampFarmCspNonce.call(void 0, 
+    head: _chunk25LPIZSXcjs.stampFarmCspNonce.call(void 0, 
       `<style id="${THEME_STYLE_ID}">:root[data-theme="light"]{color-scheme:light}:root[data-theme="dark"]{color-scheme:dark}</style><script id="${THEME_SCRIPT_ID}">${script}</script>`
     )
   };
@@ -961,30 +964,28 @@ function isFarmAppManifestPath(pathname) {
   return pathname === FARM_APP_MANIFEST_PATH || pathname === FARM_APP_MANIFEST_LEGACY_PATH;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, isFarmAppManifestPath, "isFarmAppManifestPath");
-var FARM_INFRA_SIGNATURE_HEADER = "farmjs-infra-signature";
-var SIGNED_PURPOSE = "farmjs-manifest-v1";
-var SIGNATURE_WINDOW_SECONDS = 300;
 function resolveFarmAppManifestInput(config, extra) {
   const llms = _optionalChain([config, 'access', _27 => _27.agent, 'optionalAccess', _28 => _28.llmsTxt]);
   const plugins = (_nullishCoalesce(config.plugins, () => ( []))).map(({ name }) => name);
   const webmcp = plugins.includes("farm:webmcp");
+  const sections = _chunkJAXDRRRCcjs.resolveFarmAppManifestConfig.call(void 0, _optionalChain([config, 'access', _29 => _29.agent, 'optionalAccess', _30 => _30.manifest]));
   return {
-    renderer: _nullishCoalesce(_optionalChain([config, 'access', _29 => _29.renderer, 'optionalAccess', _30 => _30.name]), () => ( "react")),
+    renderer: _nullishCoalesce(_optionalChain([config, 'access', _31 => _31.renderer, 'optionalAccess', _32 => _32.name]), () => ( "react")),
     basePath: config.basePath || "/",
     build: extra.build,
     packages: extra.packages,
     webmcp: { enabled: webmcp, tools: webmcp ? _nullishCoalesce(extra.webmcpTools, () => ( [])) : [] },
     integrations: Object.entries(_nullishCoalesce(config.integrations, () => ( {}))).flatMap(([key, integration]) => {
-      const category = _nullishCoalesce(_optionalChain([integration, 'optionalAccess', _31 => _31.category]), () => ( _optionalChain([integration, 'optionalAccess', _32 => _32.slot])));
+      const category = _nullishCoalesce(_optionalChain([integration, 'optionalAccess', _33 => _33.category]), () => ( _optionalChain([integration, 'optionalAccess', _34 => _34.slot])));
       return integration && category && integration.type ? [{ key, category, type: integration.type }] : [];
     }),
     agent: {
-      apiCatalog: _optionalChain([config, 'access', _33 => _33.agent, 'optionalAccess', _34 => _34.apiCatalog]) ? "/.well-known/api-catalog" : null,
+      apiCatalog: _optionalChain([config, 'access', _35 => _35.agent, 'optionalAccess', _36 => _36.apiCatalog]) ? "/.well-known/api-catalog" : null,
       llmsTxt: llms === true || typeof llms === "object" && llms !== null && llms.enabled !== false,
-      openapi: _optionalChain([config, 'access', _35 => _35.openapi, 'optionalAccess', _36 => _36.enabled]) && config.openapi.specRoute ? config.openapi.specRoute : null
+      openapi: _optionalChain([config, 'access', _37 => _37.openapi, 'optionalAccess', _38 => _38.enabled]) && config.openapi.specRoute ? config.openapi.specRoute : null
     },
     plugins,
-    analytics: config.analytics !== false
+    ...sections ? { sections } : {}
   };
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, resolveFarmAppManifestInput, "resolveFarmAppManifestInput");
@@ -993,58 +994,73 @@ var SOURCES = {
   standalone: "defineTool",
   serverFunction: "serverFunction"
 };
-function createFarmAppManifest(input, { full = false } = {}) {
-  const manifest = {
+var DEFAULT_SECTIONS = _chunkJAXDRRRCcjs.resolveFarmAppManifestConfig.call(void 0, void 0);
+function createFarmAppManifest(input) {
+  const sections = _nullishCoalesce(input.sections, () => ( DEFAULT_SECTIONS));
+  const { app, mcp, webmcp } = sections;
+  return {
     schemaVersion: 1,
-    app: {
-      farm: _chunkDKU6NXRKcjs.FARM_VERSION,
-      renderer: input.renderer,
+    app: app ? {
+      ...app.version ? { farm: _chunkAHFRQMRXcjs.FARM_VERSION } : {},
+      ...app.renderer ? { renderer: input.renderer } : {},
       basePath: input.basePath,
-      build: input.build
-    },
-    packages: input.packages,
-    mcp: {
-      servers: _chunk75RZHGLScjs._listFarmMCPCatalogs.call(void 0, ).map(({ server, tools, details }) => {
-        const open = _optionalChain([details, 'optionalAccess', _37 => _37.public]) === true && !_optionalChain([input, 'access', _38 => _38.guardCoversPath, 'optionalCall', _39 => _39(server.path)]);
-        const listed = full || open;
-        return {
-          name: server.name,
-          version: server.version,
-          path: server.path,
-          authorization: open ? "none" : "required",
-          resources: listed ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _40 => _40.resources]), () => ( []))] : [],
-          prompts: listed ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _41 => _41.prompts]), () => ( []))] : [],
-          tools: (listed ? tools : []).map((tool) => {
-            const schemas = _optionalChain([details, 'optionalAccess', _42 => _42.schemas, 'optionalAccess', _43 => _43[tool.name]]);
-            const hints = Object.fromEntries(
-              ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
-            );
-            return {
-              name: tool.name,
-              ...tool.title ? { title: tool.title } : {},
-              ...tool.description ? { description: tool.description } : {},
-              source: SOURCES[tool.kind],
-              // MCP clients never see the route behind a tool; only Infra's view names it.
-              ...full && tool.kind === "endpoint" ? { method: tool.method, path: tool.path } : {},
-              ...hints,
-              ...schemas ? { inputSchema: schemas.input } : {},
-              ..._optionalChain([schemas, 'optionalAccess', _44 => _44.output]) ? { outputSchema: schemas.output } : {}
-            };
-          })
-        };
-      })
-    },
-    webmcp: input.webmcp,
-    integrations: input.integrations,
-    agent: input.agent,
-    plugins: input.plugins
+      ...app.build ? { build: input.build } : {}
+    } : null,
+    packages: sections.packages === "names" ? Object.fromEntries(Object.keys(input.packages).map((name) => [name, null])) : sections.packages ? input.packages : null,
+    mcp: mcp ? { servers: listServers(input, mcp) } : null,
+    webmcp: webmcp ? {
+      enabled: input.webmcp.enabled,
+      tools: input.webmcp.tools.filter((tool) => !webmcp.hide.includes(tool.name))
+    } : null,
+    integrations: sections.integrations ? input.integrations : null,
+    agent: sections.agent ? input.agent : null,
+    plugins: sections.plugins ? input.plugins : null
   };
-  manifest.mcp.servers.push(...listDefaultServer(input));
-  return manifest;
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmAppManifest, "createFarmAppManifest");
+function listServers(input, mcp) {
+  const servers = _chunk75RZHGLScjs._listFarmMCPCatalogs.call(void 0, ).map(({ server, tools, details }) => {
+    const open = _optionalChain([details, 'optionalAccess', _39 => _39.public]) === true && !_optionalChain([input, 'access', _40 => _40.guardCoversPath, 'optionalCall', _41 => _41(server.path)]);
+    return {
+      name: server.name,
+      version: server.version,
+      path: server.path,
+      authorization: open ? "none" : "required",
+      resources: open ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _42 => _42.resources]), () => ( []))] : [],
+      prompts: open ? [..._nullishCoalesce(_optionalChain([details, 'optionalAccess', _43 => _43.prompts]), () => ( []))] : [],
+      tools: (open ? tools : []).map((tool) => {
+        const schemas = _optionalChain([details, 'optionalAccess', _44 => _44.schemas, 'optionalAccess', _45 => _45[tool.name]]);
+        const hints = Object.fromEntries(
+          ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
+        );
+        return {
+          name: tool.name,
+          ...tool.title ? { title: tool.title } : {},
+          ...tool.description ? { description: tool.description } : {},
+          source: SOURCES[tool.kind],
+          ...hints,
+          ...schemas ? { inputSchema: schemas.input } : {},
+          ..._optionalChain([schemas, 'optionalAccess', _46 => _46.output]) ? { outputSchema: schemas.output } : {}
+        };
+      })
+    };
+  });
+  return [...servers, ...listDefaultServer(input)].filter((server) => !mcp.hide.includes(server.name)).map((server) => ({
+    ...server,
+    tools: server.tools.filter((tool) => !mcp.hide.includes(`${server.name}/${tool.name}`)).map((tool) => mcp.schemas ? tool : withoutSchemas(tool))
+  }));
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, listServers, "listServers");
+function withoutSchemas({
+  inputSchema: _input,
+  outputSchema: _output,
+  ...tool
+}) {
+  return tool;
+}
+_chunkS3JO3N4Hcjs.__name.call(void 0, withoutSchemas, "withoutSchemas");
 function listDefaultServer(input) {
-  const server = _optionalChain([input, 'access', _45 => _45.defaultMCP, 'optionalCall', _46 => _46()]);
+  const server = _optionalChain([input, 'access', _47 => _47.defaultMCP, 'optionalCall', _48 => _48()]);
   if (!server) return [];
   return [
     {
@@ -1068,57 +1084,13 @@ function listDefaultServer(input) {
   ];
 }
 _chunkS3JO3N4Hcjs.__name.call(void 0, listDefaultServer, "listDefaultServer");
-var encoder = new TextEncoder();
-var hex = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, (bytes) => [...new Uint8Array(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join(""), "hex");
-async function sha256Hex(value) {
-  return hex(await crypto.subtle.digest("SHA-256", encoder.encode(value)));
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, sha256Hex, "sha256Hex");
-async function hmacHex(secret, message) {
-  const key = await crypto.subtle.importKey(
-    "raw",
-    encoder.encode(secret),
-    { name: "HMAC", hash: "SHA-256" },
-    false,
-    ["sign"]
-  );
-  return hex(await crypto.subtle.sign("HMAC", key, encoder.encode(message)));
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, hmacHex, "hmacHex");
-function sameHex(a, b) {
-  if (a.length !== b.length) return false;
-  let difference = 0;
-  for (let index = 0; index < a.length; index++)
-    difference |= a.charCodeAt(index) ^ b.charCodeAt(index);
-  return difference === 0;
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, sameHex, "sameHex");
-async function verifyFarmInfraManifestSignature(header, key, now = Date.now()) {
-  if (!header || header.length > 2048) return false;
-  const parts = header.split(",").map((part) => part.trim());
-  const timestamp = Number(
-    _optionalChain([/^t=(\d{1,12})$/, 'access', _47 => _47.exec, 'call', _48 => _48(_nullishCoalesce(parts.find((part) => part.startsWith("t=")), () => ( ""))), 'optionalAccess', _49 => _49[1]])
-  );
-  if (!Number.isSafeInteger(timestamp)) return false;
-  if (Math.abs(now / 1e3 - timestamp) > SIGNATURE_WINDOW_SECONDS) return false;
-  const signatures = parts.filter((part) => part.startsWith("v1=")).map((part) => part.slice(3)).filter((value) => /^[0-9a-f]{64}$/.test(value));
-  if (!signatures.length || signatures.length > 8) return false;
-  const expected = await hmacHex(await sha256Hex(key), `${SIGNED_PURPOSE}
-${timestamp}`);
-  return signatures.some((signature) => sameHex(signature, expected));
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, verifyFarmInfraManifestSignature, "verifyFarmInfraManifestSignature");
-function processEnv() {
-  return _nullishCoalesce(_optionalChain([globalThis, 'access', _50 => _50.process, 'optionalAccess', _51 => _51.env]), () => ( {}));
-}
-_chunkS3JO3N4Hcjs.__name.call(void 0, processEnv, "processEnv");
 var CORS_HEADERS = {
   "access-control-allow-origin": "*",
   "access-control-allow-methods": "GET, HEAD, OPTIONS",
-  "access-control-allow-headers": `If-None-Match, ${FARM_INFRA_SIGNATURE_HEADER}`,
+  "access-control-allow-headers": "If-None-Match",
   "access-control-expose-headers": "ETag"
 };
-async function createFarmAppManifestResponse(request, input, options = {}) {
+async function createFarmAppManifestResponse(request, input) {
   const method = request.method.toUpperCase();
   if (method === "OPTIONS") return new Response(null, { status: 204, headers: CORS_HEADERS });
   if (method !== "GET" && method !== "HEAD") {
@@ -1127,23 +1099,16 @@ async function createFarmAppManifestResponse(request, input, options = {}) {
       headers: { ...CORS_HEADERS, allow: "GET, HEAD, OPTIONS", "content-type": "text/plain" }
     });
   }
-  const signature = request.headers.get(FARM_INFRA_SIGNATURE_HEADER);
-  const key = input.analytics ? _optionalChain([(_nullishCoalesce(options.env, () => ( processEnv()))), 'access', _52 => _52.FARMJS_API_KEY, 'optionalAccess', _53 => _53.trim, 'call', _54 => _54()]) : void 0;
-  const full = Boolean(
-    signature && key && await verifyFarmInfraManifestSignature(signature, key)
-  );
-  const body = JSON.stringify(createFarmAppManifest(input, { full }));
+  const body = JSON.stringify(createFarmAppManifest(input));
   const etag = _chunk5NAVKJCZcjs.createFarmWeakETag.call(void 0, body);
   const headers = {
     ...CORS_HEADERS,
     "content-type": "application/json; charset=utf-8",
-    // The full view is for Infra alone; shared caches keep the two views apart.
-    "cache-control": full ? "private, no-store" : "public, max-age=0, must-revalidate",
-    vary: FARM_INFRA_SIGNATURE_HEADER,
+    "cache-control": "public, max-age=0, must-revalidate",
     etag,
     "x-content-type-options": "nosniff"
   };
-  if (!full && _chunk5NAVKJCZcjs.matchesFarmIfNoneMatch.call(void 0, request.headers.get("if-none-match"), etag)) {
+  if (_chunk5NAVKJCZcjs.matchesFarmIfNoneMatch.call(void 0, request.headers.get("if-none-match"), etag)) {
     return new Response(null, { status: 304, headers });
   }
   return new Response(method === "HEAD" ? null : body, { status: 200, headers });
@@ -1188,5 +1153,4 @@ _chunkS3JO3N4Hcjs.__name.call(void 0, createFarmAppManifestResponse, "createFarm
 
 
 
-
-exports.formatRouteSegment = formatRouteSegment; exports.createRouteDirectoryPattern = createRouteDirectoryPattern; exports.stripRouteGroups = stripRouteGroups; exports.getRouteGroupScope = getRouteGroupScope; exports.isInRouteGroupScope = isInRouteGroupScope; exports.getRouteDirectoryDepth = getRouteDirectoryDepth; exports.routeBoundaryCoversDirectory = routeBoundaryCoversDirectory; exports.HOISTED_HEAD_ELEMENT = HOISTED_HEAD_ELEMENT; exports.extractFarmFullDocument = extractFarmFullDocument; exports.classifyFarmDocumentPrefix = classifyFarmDocumentPrefix; exports.removeFarmDocumentTitles = removeFarmDocumentTitles; exports.ensureFarmDocumentMeta = ensureFarmDocumentMeta; exports.composeFarmFullDocument = composeFarmFullDocument; exports.hasFarmMiddlewareConfig = hasFarmMiddlewareConfig; exports.configMiddlewareMayHandlePath = configMiddlewareMayHandlePath; exports.appMiddlewareMayHandlePath = appMiddlewareMayHandlePath; exports.farmPathGuardCoversPage = farmPathGuardCoversPage; exports.farmPathGuardCoversEndpoint = farmPathGuardCoversEndpoint; exports.renderFarmLocaleAlternateLinks = renderFarmLocaleAlternateLinks; exports.createLateRedirectRecovery = createLateRedirectRecovery; exports.createLateNotFoundRecovery = createLateNotFoundRecovery; exports.createFarmMetadataRouteResponse = createFarmMetadataRouteResponse; exports.listFarmMCPLlmsTxtLinks = listFarmMCPLlmsTxtLinks; exports.createFarmAiCatalogResponse = createFarmAiCatalogResponse; exports.resolveDefaultErrorStatus = resolveDefaultErrorStatus; exports.getDefaultErrorStatusText = getDefaultErrorStatusText; exports.createDefaultErrorMarkup = createDefaultErrorMarkup; exports.createFarmThemeDocumentParts = createFarmThemeDocumentParts; exports.applyFarmThemeDocument = applyFarmThemeDocument; exports.FARM_API_CATALOG_PATH = FARM_API_CATALOG_PATH; exports.resolveFarmApiCatalogInput = resolveFarmApiCatalogInput; exports.createFarmApiCatalogResponse = createFarmApiCatalogResponse; exports.FARM_APP_MANIFEST_PATH = FARM_APP_MANIFEST_PATH; exports.FARM_APP_MANIFEST_LEGACY_PATH = FARM_APP_MANIFEST_LEGACY_PATH; exports.isFarmAppManifestPath = isFarmAppManifestPath; exports.FARM_INFRA_SIGNATURE_HEADER = FARM_INFRA_SIGNATURE_HEADER; exports.resolveFarmAppManifestInput = resolveFarmAppManifestInput; exports.createFarmAppManifestResponse = createFarmAppManifestResponse;
+exports.formatRouteSegment = formatRouteSegment; exports.createRouteDirectoryPattern = createRouteDirectoryPattern; exports.stripRouteGroups = stripRouteGroups; exports.getRouteGroupScope = getRouteGroupScope; exports.isInRouteGroupScope = isInRouteGroupScope; exports.getRouteDirectoryDepth = getRouteDirectoryDepth; exports.routeBoundaryCoversDirectory = routeBoundaryCoversDirectory; exports.HOISTED_HEAD_ELEMENT = HOISTED_HEAD_ELEMENT; exports.extractFarmFullDocument = extractFarmFullDocument; exports.classifyFarmDocumentPrefix = classifyFarmDocumentPrefix; exports.removeFarmDocumentTitles = removeFarmDocumentTitles; exports.ensureFarmDocumentMeta = ensureFarmDocumentMeta; exports.composeFarmFullDocument = composeFarmFullDocument; exports.hasFarmMiddlewareConfig = hasFarmMiddlewareConfig; exports.configMiddlewareMayHandlePath = configMiddlewareMayHandlePath; exports.appMiddlewareMayHandlePath = appMiddlewareMayHandlePath; exports.farmPathGuardCoversPage = farmPathGuardCoversPage; exports.farmPathGuardCoversEndpoint = farmPathGuardCoversEndpoint; exports.renderFarmLocaleAlternateLinks = renderFarmLocaleAlternateLinks; exports.createLateRedirectRecovery = createLateRedirectRecovery; exports.createLateNotFoundRecovery = createLateNotFoundRecovery; exports.createFarmMetadataRouteResponse = createFarmMetadataRouteResponse; exports.listFarmMCPLlmsTxtLinks = listFarmMCPLlmsTxtLinks; exports.createFarmAiCatalogResponse = createFarmAiCatalogResponse; exports.resolveDefaultErrorStatus = resolveDefaultErrorStatus; exports.getDefaultErrorStatusText = getDefaultErrorStatusText; exports.createDefaultErrorMarkup = createDefaultErrorMarkup; exports.createFarmThemeDocumentParts = createFarmThemeDocumentParts; exports.applyFarmThemeDocument = applyFarmThemeDocument; exports.FARM_API_CATALOG_PATH = FARM_API_CATALOG_PATH; exports.resolveFarmApiCatalogInput = resolveFarmApiCatalogInput; exports.createFarmApiCatalogResponse = createFarmApiCatalogResponse; exports.FARM_APP_MANIFEST_PATH = FARM_APP_MANIFEST_PATH; exports.FARM_APP_MANIFEST_LEGACY_PATH = FARM_APP_MANIFEST_LEGACY_PATH; exports.isFarmAppManifestPath = isFarmAppManifestPath; exports.resolveFarmAppManifestInput = resolveFarmAppManifestInput; exports.createFarmAppManifestResponse = createFarmAppManifestResponse;

package/dist/{chunk-DKU6NXRK.cjs → chunk-AHFRQMRX.cjs}

@@ -1,5 +1,5 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});// package.json
-var version = "0.1.40";
+var version = "0.1.42";
 
 // src/version.ts
 var FARM_VERSION = version;

package/dist/{chunk-7VAJSSPG.mjs → chunk-B2GSRB3P.mjs}

@@ -17,7 +17,7 @@ import {
 } from "./chunk-4SIYUGRY.mjs";
 import {
   _runInSharedCacheScope
-} from "./chunk-Y6LRPO2K.mjs";
+} from "./chunk-6LVRDOAW.mjs";
 import {
   __name
 } from "./chunk-LPEX4YW6.mjs";

package/dist/{chunk-JXB6DVCO.mjs → chunk-BPNRQ5BA.mjs}

@@ -446,7 +446,7 @@ export default defineTask({
 __name(createNitroTaskWrapper, "createNitroTaskWrapper");
 function createNitroWorkflowHTTPHandler(config, workflows, server) {
   return `
-import { H3 } from "h3";
+import { H3 } from "nitro/h3";
 import { runTask } from "nitro/task";
 import {
   createFarmRequestBodyErrorResponse,

package/dist/{chunk-FLZ4H25A.cjs → chunk-BXJ5HJTJ.cjs}

@@ -24,7 +24,8 @@ var _chunkPSV6XKPOcjs = require('./chunk-PSV6XKPO.cjs');
 
 
 
-var _chunk3TB5QGUWcjs = require('./chunk-3TB5QGUW.cjs');
+
+var _chunkJAXDRRRCcjs = require('./chunk-JAXDRRRC.cjs');
 
 
 var _chunkD5IHNDHIcjs = require('./chunk-D5IHNDHI.cjs');
@@ -32,7 +33,7 @@ var _chunkD5IHNDHIcjs = require('./chunk-D5IHNDHI.cjs');
 
 
 
-var _chunkB6IMBBOScjs = require('./chunk-B6IMBBOS.cjs');
+var _chunk25LPIZSXcjs = require('./chunk-25LPIZSX.cjs');
 
 
 
@@ -61,7 +62,7 @@ var _chunkD4ROBNTKcjs = require('./chunk-D4ROBNTK.cjs');
 var _chunkUYIHRDE4cjs = require('./chunk-UYIHRDE4.cjs');
 
 
-var _chunkEORXKFLRcjs = require('./chunk-EORXKFLR.cjs');
+var _chunkJEIG3EWEcjs = require('./chunk-JEIG3EWE.cjs');
 
 
 var _chunkOI6CMLWXcjs = require('./chunk-OI6CMLWX.cjs');
@@ -145,16 +146,16 @@ function resolveFarmAgentConfig(input, context = {}) {
   const jsonLd = _optionalChain([input, 'optionalAccess', _ => _.jsonLd]);
   return {
     jsonLd: jsonLd === void 0 ? { ...DEFAULT_JSON_LD } : !jsonLd ? false : jsonLd === true ? {} : jsonLd,
-    noindexPreviews: _chunk3TB5QGUWcjs.resolveFarmNoindexPreviews.call(void 0, _optionalChain([input, 'optionalAccess', _2 => _2.noindexPreviews])),
+    noindexPreviews: _chunkJAXDRRRCcjs.resolveFarmNoindexPreviews.call(void 0, _optionalChain([input, 'optionalAccess', _2 => _2.noindexPreviews])),
     // The docs engine answers /llms.txt with its own pages; a default here would replace it.
     // llms-full.txt renders every listed page, so it stays opt-in.
     llmsTxt: _chunkD5IHNDHIcjs.resolveFarmLlmsTxtConfig.call(void 0, _nullishCoalesce(_optionalChain([input, 'optionalAccess', _3 => _3.llmsTxt]), () => ( (context.docs ? false : { full: false })))),
     // Same rule as llms.txt: the docs engine answers /sitemap.xml with its own pages.
-    sitemap: _chunk3TB5QGUWcjs.resolveFarmAgentSitemap.call(void 0, _nullishCoalesce(_optionalChain([input, 'optionalAccess', _4 => _4.sitemap]), () => ( !context.docs))),
-    crawlers: _chunk3TB5QGUWcjs.resolveFarmAgentCrawlers.call(void 0, _optionalChain([input, 'optionalAccess', _5 => _5.crawlers])),
+    sitemap: _chunkJAXDRRRCcjs.resolveFarmAgentSitemap.call(void 0, _nullishCoalesce(_optionalChain([input, 'optionalAccess', _4 => _4.sitemap]), () => ( !context.docs))),
+    crawlers: _chunkJAXDRRRCcjs.resolveFarmAgentCrawlers.call(void 0, _optionalChain([input, 'optionalAccess', _5 => _5.crawlers])),
     apiCatalog: resolveFarmAgentBoolean(_optionalChain([input, 'optionalAccess', _6 => _6.apiCatalog]), "apiCatalog", false),
     aiCatalog: resolveFarmAgentBoolean(_optionalChain([input, 'optionalAccess', _7 => _7.aiCatalog]), "aiCatalog", true),
-    manifest: resolveFarmAgentBoolean(_optionalChain([input, 'optionalAccess', _8 => _8.manifest]), "manifest", true),
+    manifest: _chunkJAXDRRRCcjs.resolveFarmAppManifestConfig.call(void 0, _optionalChain([input, 'optionalAccess', _8 => _8.manifest])),
     // Same rule as llms.txt: the docs engine serves its own MCP server at /mcp.
     mcp: resolveFarmAgentBoolean(_optionalChain([input, 'optionalAccess', _9 => _9.mcp]), "mcp", !context.docs)
   };
@@ -711,9 +712,9 @@ async function resolveConfig(userConfig, mode) {
   const routeRules = _chunkQ5B3KJBPcjs.normalizeRouteRules.call(void 0, userConfig.routeRules);
   const routeRuleRedirects = _chunkQ5B3KJBPcjs.routeRulesToRedirects.call(void 0, routeRules);
   const routeRuleHeaders = _chunkQ5B3KJBPcjs.routeRulesToHeaders.call(void 0, routeRules);
-  const security = _chunkB6IMBBOScjs.resolveFarmSecurityConfig.call(void 0, userConfig.security);
-  const securityHeader = _chunkB6IMBBOScjs.getFarmSecurityHeader.call(void 0, security);
-  if (_chunkB6IMBBOScjs.farmCspBlocksFrameworkInlineScripts.call(void 0, security)) {
+  const security = _chunk25LPIZSXcjs.resolveFarmSecurityConfig.call(void 0, userConfig.security);
+  const securityHeader = _chunk25LPIZSXcjs.getFarmSecurityHeader.call(void 0, security);
+  if (_chunk25LPIZSXcjs.farmCspBlocksFrameworkInlineScripts.call(void 0, security)) {
     _chunk5QIKR7RRcjs.logger.warn(
       "security.csp blocks the inline scripts Farm injects for theming and hydration. Set security.csp.nonce to true for managed dynamic nonces and prerendered hashes, or make the governing script directive allow 'unsafe-inline' without a nonce, hash, or 'strict-dynamic' source."
     );
@@ -778,7 +779,7 @@ async function resolveConfig(userConfig, mode) {
     mdx,
     migrations: resolveMigrationsConfig(userConfig.migrations),
     cron: _chunk6EXBPJ24cjs.resolveCronConfig.call(void 0, userConfig.cron),
-    workflows: _chunkEORXKFLRcjs.resolveWorkflowsConfig.call(void 0, userConfig.workflows),
+    workflows: _chunkJEIG3EWEcjs.resolveWorkflowsConfig.call(void 0, userConfig.workflows),
     api,
     observability: _nullishCoalesce(userConfig.observability, () => ( false)),
     telemetry: userConfig.telemetry !== false,
@@ -814,7 +815,7 @@ async function resolveConfig(userConfig, mode) {
     ], "headers"),
     routeRules,
     images: _chunkYFPGHF5Fcjs.resolveFarmImageConfig.call(void 0, userConfig.images),
-    performance: _chunk3TB5QGUWcjs.resolveFarmPerformanceConfig.call(void 0, userConfig.performance),
+    performance: _chunkJAXDRRRCcjs.resolveFarmPerformanceConfig.call(void 0, userConfig.performance),
     theme: _chunkOI6CMLWXcjs.resolveFarmThemeConfig.call(void 0, userConfig.theme, basePath),
     publicDir: userConfig.publicDir || "public",
     i18n: _chunkHLJ6MBUZcjs.resolveFarmI18nConfig.call(void 0, userConfig.i18n, { root, mode, basePath }),

package/dist/{chunk-GNVEJUT5.cjs → chunk-C5KVWHIH.cjs}

@@ -9,10 +9,10 @@ var _chunk4PPEPOZZcjs = require('./chunk-4PPEPOZZ.cjs');
 var _chunkMQ3H6LT5cjs = require('./chunk-MQ3H6LT5.cjs');
 
 
-var _chunkQJM7A4CRcjs = require('./chunk-QJM7A4CR.cjs');
+var _chunkS7MTDRYAcjs = require('./chunk-S7MTDRYA.cjs');
 
 
-var _chunk4A3YUB4Dcjs = require('./chunk-4A3YUB4D.cjs');
+var _chunkKF6VDJH7cjs = require('./chunk-KF6VDJH7.cjs');
 
 
 var _chunk2CQ74SP6cjs = require('./chunk-2CQ74SP6.cjs');
@@ -23,7 +23,7 @@ var _chunk2CQ74SP6cjs = require('./chunk-2CQ74SP6.cjs');
 
 
 
-var _chunkUXMIFB44cjs = require('./chunk-UXMIFB44.cjs');
+var _chunkQIBP5EFAcjs = require('./chunk-QIBP5EFA.cjs');
 
 
 var _chunkCGVPXIRNcjs = require('./chunk-CGVPXIRN.cjs');
@@ -47,7 +47,7 @@ var _chunkUQZ4AYTHcjs = require('./chunk-UQZ4AYTH.cjs');
 var _chunk5NAVKJCZcjs = require('./chunk-5NAVKJCZ.cjs');
 
 
-var _chunkXVIEGKTTcjs = require('./chunk-XVIEGKTT.cjs');
+var _chunkZTP3BJG6cjs = require('./chunk-ZTP3BJG6.cjs');
 
 
 
@@ -114,7 +114,7 @@ function farmApiPlugin(options = {}) {
     const existing = apiRoutesCache.get(routePath);
     const existingFile = _optionalChain([endpointSources, 'access', _ => _.get, 'call', _2 => _2(routePath), 'optionalAccess', _3 => _3.get, 'call', _4 => _4(normalizedMethod)]);
     if (existingFile) {
-      throw new (0, _chunkQJM7A4CRcjs.APIRouteConflictError)(routePath, normalizedMethod, existingFile, filePath);
+      throw new (0, _chunkS7MTDRYAcjs.APIRouteConflictError)(routePath, normalizedMethod, existingFile, filePath);
     }
     if (existing) {
       if (!existing.methods.includes(normalizedMethod)) {
@@ -190,7 +190,7 @@ function farmApiPlugin(options = {}) {
   const createRouter = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, async () => {
     const plugins = options.plugins ? await (_nullishCoalesce(routePlugins, () => ( (routePlugins = Promise.resolve(options.plugins({ root: projectRoot })))))) : [];
     pluginMergedRoutes = plugins.length ? new Map(
-      _chunkUXMIFB44cjs.mergePluginAPIRoutes.call(void 0, [...apiRoutesCache.values()], plugins, void 0, {
+      _chunkQIBP5EFAcjs.mergePluginAPIRoutes.call(void 0, [...apiRoutesCache.values()], plugins, void 0, {
         bodySizeLimit,
         // A plugin calling an app endpoint (an MCP tool, say) goes back through this server,
         // so the middleware that guards the endpoint's path runs for it.
@@ -210,7 +210,7 @@ function farmApiPlugin(options = {}) {
         const url = new URL(request.url);
         const method = request.method.toUpperCase();
         const pathname = url.pathname;
-        const match = _chunkUXMIFB44cjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), pathname, basePath);
+        const match = _chunkQIBP5EFAcjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), pathname, basePath);
         if (!match) {
           return new Response(JSON.stringify({ error: "Not Found" }), {
             status: 404,
@@ -218,18 +218,18 @@ function farmApiPlugin(options = {}) {
           });
         }
         const { route, params } = match;
-        const endpoint = _chunkUXMIFB44cjs.resolveAPIRouteEndpoint.call(void 0, route, method);
+        const endpoint = _chunkQIBP5EFAcjs.resolveAPIRouteEndpoint.call(void 0, route, method);
         if (!endpoint) {
           return new Response(JSON.stringify({ error: "Method Not Allowed" }), {
             status: 405,
             headers: {
-              Allow: _chunkUXMIFB44cjs.getAllowedAPIRouteMethods.call(void 0, route).join(", "),
+              Allow: _chunkQIBP5EFAcjs.getAllowedAPIRouteMethods.call(void 0, route).join(", "),
               "Content-Type": "application/json"
             }
           });
         }
         try {
-          return await _chunkUXMIFB44cjs.invokeAPIRouteEndpoint.call(void 0, endpoint, request, params, bodySizeLimit);
+          return await _chunkQIBP5EFAcjs.invokeAPIRouteEndpoint.call(void 0, endpoint, request, params, bodySizeLimit);
         } catch (error) {
           return new Response(JSON.stringify({ error: error.message || "Internal Server Error" }), {
             status: 500,
@@ -278,7 +278,7 @@ function farmApiPlugin(options = {}) {
             const routeModule = await _chunkPJ42JESYcjs.loadFarmDevModule.call(void 0, server, filePath);
             const endpoints = {};
             const availableMethods = [];
-            for (const method of _chunkUXMIFB44cjs.API_ROUTE_METHODS) {
+            for (const method of _chunkQIBP5EFAcjs.API_ROUTE_METHODS) {
               if (routeModule[method]) {
                 availableMethods.push(method);
                 endpoints[method] = routeModule[method];
@@ -291,7 +291,7 @@ function farmApiPlugin(options = {}) {
               log(`API route discovered: ${availableMethods.join(", ")} ${routePath}`);
             }
           } catch (e) {
-            if (e instanceof _chunkQJM7A4CRcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+            if (e instanceof _chunkS7MTDRYAcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
             log(`API route load failed at ${filePath}: ${e.message}`);
           }
         }
@@ -318,7 +318,7 @@ function farmApiPlugin(options = {}) {
                 }
               }
             } catch (e) {
-              if (e instanceof _chunkQJM7A4CRcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+              if (e instanceof _chunkS7MTDRYAcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
               log(`Root routes.ts load failed: ${e.message}`);
             }
             break;
@@ -328,7 +328,7 @@ function farmApiPlugin(options = {}) {
       const discoverProgrammaticRoutes = /* @__PURE__ */ _chunkS3JO3N4Hcjs.__name.call(void 0, async () => {
         const path = await import("path");
         const srcRoot = path.join(server.config.root, srcDir);
-        const routeFiles = _chunk4A3YUB4Dcjs.findProgrammaticRouteFilesInDir.call(void 0, srcRoot);
+        const routeFiles = _chunkKF6VDJH7cjs.findProgrammaticRouteFilesInDir.call(void 0, srcRoot);
         if (routeFiles.length === 0) return;
         const { getProgrammaticRouteManifest } = await import("./routes.cjs");
         for (const routeFile of routeFiles) {
@@ -349,7 +349,7 @@ function farmApiPlugin(options = {}) {
               }
             }
           } catch (e) {
-            if (e instanceof _chunkQJM7A4CRcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+            if (e instanceof _chunkS7MTDRYAcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
             log(`Programmatic routes file load failed at ${routeFile}: ${e.message}`);
           }
         }
@@ -401,7 +401,7 @@ function farmApiPlugin(options = {}) {
           const pathname = url.split("?")[0];
           const method = req.method || "GET";
           if (discoveryPromise) await waitForDiscovery();
-          if (!_chunkUXMIFB44cjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), pathname, basePath)) {
+          if (!_chunkQIBP5EFAcjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), pathname, basePath)) {
             return next();
           }
           if (!apiRouterHandler) {
@@ -422,10 +422,10 @@ function farmApiPlugin(options = {}) {
             }
             const currentUrl = req.url || url;
             const currentPathname = currentUrl.split("?")[0];
-            if (currentPathname !== pathname && !_chunkUXMIFB44cjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), currentPathname, basePath)) {
+            if (currentPathname !== pathname && !_chunkQIBP5EFAcjs.matchAPIRouteAtBasePath.call(void 0, servedRoutes(), currentPathname, basePath)) {
               return next();
             }
-            const fullUrl = _chunkXVIEGKTTcjs.resolveFarmRequestURL.call(void 0, req);
+            const fullUrl = _chunkZTP3BJG6cjs.resolveFarmRequestURL.call(void 0, req);
             const headers = new Headers();
             for (const [key, value] of Object.entries(req.headers)) {
               if (value) {
@@ -526,7 +526,7 @@ function farmApiPlugin(options = {}) {
           log(`API router recreated`);
         } catch (e) {
           restoreRouteState(previousState);
-          if (e instanceof _chunkQJM7A4CRcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+          if (e instanceof _chunkS7MTDRYAcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
           log(`Root routes.ts HMR failed: ${e.message}`);
         }
         return [];
@@ -554,7 +554,7 @@ function farmApiPlugin(options = {}) {
           const routeModule = await _chunkPJ42JESYcjs.loadFarmDevModule.call(void 0, server, file);
           removeEndpointsFromFile(file);
           const availableMethods = [];
-          for (const method of _chunkUXMIFB44cjs.API_ROUTE_METHODS) {
+          for (const method of _chunkQIBP5EFAcjs.API_ROUTE_METHODS) {
             if (!routeModule[method]) continue;
             availableMethods.push(method);
             addEndpoint(routePath, file, method, routeModule[method]);
@@ -564,7 +564,7 @@ function farmApiPlugin(options = {}) {
           log(`API router recreated`);
         } catch (e) {
           restoreRouteState(previousState);
-          if (e instanceof _chunkQJM7A4CRcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
+          if (e instanceof _chunkS7MTDRYAcjs.APIRouteConflictError || e instanceof _chunkNO3WWW3Ncjs.AmbiguousRouteError) throw e;
           log(`API route HMR failed: ${e.message}`);
         }
         return [];