@farm.js/core 0.1.41 → 0.1.43

package/dist/{chunk-SVPGWJZF.mjs → chunk-TESO7EFU.mjs}

@@ -4,6 +4,9 @@ import {
 import {
   DEFAULT_ERROR_STYLES
 } from "./chunk-XAXTTBUT.mjs";
+import {
+  resolveFarmAppManifestConfig
+} from "./chunk-DMRPN25V.mjs";
 import {
   serializeFarmLlmsTxt
 } from "./chunk-ETPEZLS3.mjs";
@@ -42,7 +45,7 @@ import {
 } from "./chunk-ZZGQD7A4.mjs";
 import {
   FARM_VERSION
-} from "./chunk-VLPII2JJ.mjs";
+} from "./chunk-YGZH4T2X.mjs";
 import {
   localizeFarmPathname
 } from "./chunk-L3KT7IXV.mjs";
@@ -53,6 +56,56 @@ import {
   __name
 } from "./chunk-LPEX4YW6.mjs";
 
+// src/navigation/render-plan.ts
+function createFarmRouteRenderPlan(input = {}) {
+  const pageShouldHydrate = input.pageShouldHydrate === true;
+  const layoutShouldHydrate = input.layoutShouldHydrate === true;
+  const hydration = pageShouldHydrate ? layoutShouldHydrate ? "route-and-layout-islands" : "route-island" : layoutShouldHydrate ? "layout-island" : "none";
+  const rendering = input.rendering;
+  const cache = rendering?.ssg ? typeof rendering.revalidate === "number" && rendering.revalidate > 0 ? { mode: "revalidate", revalidate: rendering.revalidate } : { mode: "static" } : { mode: "dynamic" };
+  return {
+    version: 1,
+    output: "html",
+    navigation: "html-fragment",
+    hydration,
+    islandStrategy: hydration === "none" ? null : input.islandStrategy ?? "load",
+    cache
+  };
+}
+__name(createFarmRouteRenderPlan, "createFarmRouteRenderPlan");
+function getFarmFragmentCacheControl(plan) {
+  if (plan.cache.mode === "static") {
+    return "public, max-age=0, s-maxage=31536000, immutable";
+  }
+  if (plan.cache.mode === "revalidate") {
+    const seconds = Math.max(1, plan.cache.revalidate ?? 1);
+    return `public, max-age=0, s-maxage=${seconds}, stale-while-revalidate=${seconds}`;
+  }
+  return "private, max-age=0";
+}
+__name(getFarmFragmentCacheControl, "getFarmFragmentCacheControl");
+function parseFarmLayoutChainHeader(value) {
+  if (!value || value.length > 8192) return [];
+  try {
+    const parsed = JSON.parse(value);
+    if (!Array.isArray(parsed) || parsed.length > 64) return [];
+    return parsed.filter(
+      (pattern) => typeof pattern === "string" && pattern.startsWith("/") && pattern.length <= 512
+    );
+  } catch {
+    return [];
+  }
+}
+__name(parseFarmLayoutChainHeader, "parseFarmLayoutChainHeader");
+function getSharedLayoutPrefixLength(current, next) {
+  let index = 0;
+  while (index < current.length && index < next.length && current[index] === next[index]) {
+    index++;
+  }
+  return index;
+}
+__name(getSharedLayoutPrefixLength, "getSharedLayoutPrefixLength");
+
 // src/routing/route-groups.ts
 function isRouteGroupSegment(part) {
   return part.startsWith("(") && part.endsWith(")");
@@ -961,13 +1014,11 @@ function isFarmAppManifestPath(pathname) {
   return pathname === FARM_APP_MANIFEST_PATH || pathname === FARM_APP_MANIFEST_LEGACY_PATH;
 }
 __name(isFarmAppManifestPath, "isFarmAppManifestPath");
-var FARM_INFRA_SIGNATURE_HEADER = "farmjs-infra-signature";
-var SIGNED_PURPOSE = "farmjs-manifest-v1";
-var SIGNATURE_WINDOW_SECONDS = 300;
 function resolveFarmAppManifestInput(config, extra) {
   const llms = config.agent?.llmsTxt;
   const plugins = (config.plugins ?? []).map(({ name }) => name);
   const webmcp = plugins.includes("farm:webmcp");
+  const sections = resolveFarmAppManifestConfig(config.agent?.manifest);
   return {
     renderer: config.renderer?.name ?? "react",
     basePath: config.basePath || "/",
@@ -984,7 +1035,7 @@ function resolveFarmAppManifestInput(config, extra) {
       openapi: config.openapi?.enabled && config.openapi.specRoute ? config.openapi.specRoute : null
     },
     plugins,
-    analytics: config.analytics !== false
+    ...sections ? { sections } : {}
   };
 }
 __name(resolveFarmAppManifestInput, "resolveFarmAppManifestInput");
@@ -993,56 +1044,71 @@ var SOURCES = {
   standalone: "defineTool",
   serverFunction: "serverFunction"
 };
-function createFarmAppManifest(input, { full = false } = {}) {
-  const manifest = {
+var DEFAULT_SECTIONS = resolveFarmAppManifestConfig(void 0);
+function createFarmAppManifest(input) {
+  const sections = input.sections ?? DEFAULT_SECTIONS;
+  const { app, mcp, webmcp } = sections;
+  return {
     schemaVersion: 1,
-    app: {
-      farm: FARM_VERSION,
-      renderer: input.renderer,
+    app: app ? {
+      ...app.version ? { farm: FARM_VERSION } : {},
+      ...app.renderer ? { renderer: input.renderer } : {},
       basePath: input.basePath,
-      build: input.build
-    },
-    packages: input.packages,
-    mcp: {
-      servers: _listFarmMCPCatalogs().map(({ server, tools, details }) => {
-        const open = details?.public === true && !input.guardCoversPath?.(server.path);
-        const listed = full || open;
-        return {
-          name: server.name,
-          version: server.version,
-          path: server.path,
-          authorization: open ? "none" : "required",
-          resources: listed ? [...details?.resources ?? []] : [],
-          prompts: listed ? [...details?.prompts ?? []] : [],
-          tools: (listed ? tools : []).map((tool) => {
-            const schemas = details?.schemas?.[tool.name];
-            const hints = Object.fromEntries(
-              ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
-            );
-            return {
-              name: tool.name,
-              ...tool.title ? { title: tool.title } : {},
-              ...tool.description ? { description: tool.description } : {},
-              source: SOURCES[tool.kind],
-              // MCP clients never see the route behind a tool; only Infra's view names it.
-              ...full && tool.kind === "endpoint" ? { method: tool.method, path: tool.path } : {},
-              ...hints,
-              ...schemas ? { inputSchema: schemas.input } : {},
-              ...schemas?.output ? { outputSchema: schemas.output } : {}
-            };
-          })
-        };
-      })
-    },
-    webmcp: input.webmcp,
-    integrations: input.integrations,
-    agent: input.agent,
-    plugins: input.plugins
+      ...app.build ? { build: input.build } : {}
+    } : null,
+    packages: sections.packages === "names" ? Object.fromEntries(Object.keys(input.packages).map((name) => [name, null])) : sections.packages ? input.packages : null,
+    mcp: mcp ? { servers: listServers(input, mcp) } : null,
+    webmcp: webmcp ? {
+      enabled: input.webmcp.enabled,
+      tools: input.webmcp.tools.filter((tool) => !webmcp.hide.includes(tool.name))
+    } : null,
+    integrations: sections.integrations ? input.integrations : null,
+    agent: sections.agent ? input.agent : null,
+    plugins: sections.plugins ? input.plugins : null
   };
-  manifest.mcp.servers.push(...listDefaultServer(input));
-  return manifest;
 }
 __name(createFarmAppManifest, "createFarmAppManifest");
+function listServers(input, mcp) {
+  const servers = _listFarmMCPCatalogs().map(({ server, tools, details }) => {
+    const open = details?.public === true && !input.guardCoversPath?.(server.path);
+    return {
+      name: server.name,
+      version: server.version,
+      path: server.path,
+      authorization: open ? "none" : "required",
+      resources: open ? [...details?.resources ?? []] : [],
+      prompts: open ? [...details?.prompts ?? []] : [],
+      tools: (open ? tools : []).map((tool) => {
+        const schemas = details?.schemas?.[tool.name];
+        const hints = Object.fromEntries(
+          ["readOnlyHint", "destructiveHint", "idempotentHint", "openWorldHint"].filter((hint) => typeof tool[hint] === "boolean").map((hint) => [hint, tool[hint]])
+        );
+        return {
+          name: tool.name,
+          ...tool.title ? { title: tool.title } : {},
+          ...tool.description ? { description: tool.description } : {},
+          source: SOURCES[tool.kind],
+          ...hints,
+          ...schemas ? { inputSchema: schemas.input } : {},
+          ...schemas?.output ? { outputSchema: schemas.output } : {}
+        };
+      })
+    };
+  });
+  return [...servers, ...listDefaultServer(input)].filter((server) => !mcp.hide.includes(server.name)).map((server) => ({
+    ...server,
+    tools: server.tools.filter((tool) => !mcp.hide.includes(`${server.name}/${tool.name}`)).map((tool) => mcp.schemas ? tool : withoutSchemas(tool))
+  }));
+}
+__name(listServers, "listServers");
+function withoutSchemas({
+  inputSchema: _input,
+  outputSchema: _output,
+  ...tool
+}) {
+  return tool;
+}
+__name(withoutSchemas, "withoutSchemas");
 function listDefaultServer(input) {
   const server = input.defaultMCP?.();
   if (!server) return [];
@@ -1068,57 +1134,13 @@ function listDefaultServer(input) {
   ];
 }
 __name(listDefaultServer, "listDefaultServer");
-var encoder = new TextEncoder();
-var hex = /* @__PURE__ */ __name((bytes) => [...new Uint8Array(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join(""), "hex");
-async function sha256Hex(value) {
-  return hex(await crypto.subtle.digest("SHA-256", encoder.encode(value)));
-}
-__name(sha256Hex, "sha256Hex");
-async function hmacHex(secret, message) {
-  const key = await crypto.subtle.importKey(
-    "raw",
-    encoder.encode(secret),
-    { name: "HMAC", hash: "SHA-256" },
-    false,
-    ["sign"]
-  );
-  return hex(await crypto.subtle.sign("HMAC", key, encoder.encode(message)));
-}
-__name(hmacHex, "hmacHex");
-function sameHex(a, b) {
-  if (a.length !== b.length) return false;
-  let difference = 0;
-  for (let index = 0; index < a.length; index++)
-    difference |= a.charCodeAt(index) ^ b.charCodeAt(index);
-  return difference === 0;
-}
-__name(sameHex, "sameHex");
-async function verifyFarmInfraManifestSignature(header, key, now = Date.now()) {
-  if (!header || header.length > 2048) return false;
-  const parts = header.split(",").map((part) => part.trim());
-  const timestamp = Number(
-    /^t=(\d{1,12})$/.exec(parts.find((part) => part.startsWith("t=")) ?? "")?.[1]
-  );
-  if (!Number.isSafeInteger(timestamp)) return false;
-  if (Math.abs(now / 1e3 - timestamp) > SIGNATURE_WINDOW_SECONDS) return false;
-  const signatures = parts.filter((part) => part.startsWith("v1=")).map((part) => part.slice(3)).filter((value) => /^[0-9a-f]{64}$/.test(value));
-  if (!signatures.length || signatures.length > 8) return false;
-  const expected = await hmacHex(await sha256Hex(key), `${SIGNED_PURPOSE}
-${timestamp}`);
-  return signatures.some((signature) => sameHex(signature, expected));
-}
-__name(verifyFarmInfraManifestSignature, "verifyFarmInfraManifestSignature");
-function processEnv() {
-  return globalThis.process?.env ?? {};
-}
-__name(processEnv, "processEnv");
 var CORS_HEADERS = {
   "access-control-allow-origin": "*",
   "access-control-allow-methods": "GET, HEAD, OPTIONS",
-  "access-control-allow-headers": `If-None-Match, ${FARM_INFRA_SIGNATURE_HEADER}`,
+  "access-control-allow-headers": "If-None-Match",
   "access-control-expose-headers": "ETag"
 };
-async function createFarmAppManifestResponse(request, input, options = {}) {
+async function createFarmAppManifestResponse(request, input) {
   const method = request.method.toUpperCase();
   if (method === "OPTIONS") return new Response(null, { status: 204, headers: CORS_HEADERS });
   if (method !== "GET" && method !== "HEAD") {
@@ -1127,23 +1149,16 @@ async function createFarmAppManifestResponse(request, input, options = {}) {
       headers: { ...CORS_HEADERS, allow: "GET, HEAD, OPTIONS", "content-type": "text/plain" }
     });
   }
-  const signature = request.headers.get(FARM_INFRA_SIGNATURE_HEADER);
-  const key = input.analytics ? (options.env ?? processEnv()).FARMJS_API_KEY?.trim() : void 0;
-  const full = Boolean(
-    signature && key && await verifyFarmInfraManifestSignature(signature, key)
-  );
-  const body = JSON.stringify(createFarmAppManifest(input, { full }));
+  const body = JSON.stringify(createFarmAppManifest(input));
   const etag = createFarmWeakETag(body);
   const headers = {
     ...CORS_HEADERS,
     "content-type": "application/json; charset=utf-8",
-    // The full view is for Infra alone; shared caches keep the two views apart.
-    "cache-control": full ? "private, no-store" : "public, max-age=0, must-revalidate",
-    vary: FARM_INFRA_SIGNATURE_HEADER,
+    "cache-control": "public, max-age=0, must-revalidate",
     etag,
     "x-content-type-options": "nosniff"
   };
-  if (!full && matchesFarmIfNoneMatch(request.headers.get("if-none-match"), etag)) {
+  if (matchesFarmIfNoneMatch(request.headers.get("if-none-match"), etag)) {
     return new Response(null, { status: 304, headers });
   }
   return new Response(method === "HEAD" ? null : body, { status: 200, headers });
@@ -1151,6 +1166,10 @@ async function createFarmAppManifestResponse(request, input, options = {}) {
 __name(createFarmAppManifestResponse, "createFarmAppManifestResponse");
 
 export {
+  createFarmRouteRenderPlan,
+  getFarmFragmentCacheControl,
+  parseFarmLayoutChainHeader,
+  getSharedLayoutPrefixLength,
   formatRouteSegment,
   createRouteDirectoryPattern,
   stripRouteGroups,
@@ -1186,7 +1205,6 @@ export {
   FARM_APP_MANIFEST_PATH,
   FARM_APP_MANIFEST_LEGACY_PATH,
   isFarmAppManifestPath,
-  FARM_INFRA_SIGNATURE_HEADER,
   resolveFarmAppManifestInput,
   createFarmAppManifestResponse
 };