@farm.js/core 0.1.60 → 0.1.62

package/dist/{chunk-VPTWKOCY.mjs → chunk-VWW4Q3BJ.mjs}

@@ -59,19 +59,21 @@ import {
 } from "./chunk-VFXE6NWR.mjs";
 import {
   resolveWorkflowsConfig
-} from "./chunk-JPIUGDK4.mjs";
+} from "./chunk-TZVUF5JJ.mjs";
 import {
+  FARM_CRON_NAME_SEGMENT_PATTERN,
+  normalizeCronExpression,
   resolveCronConfig
-} from "./chunk-3PX4AIXO.mjs";
+} from "./chunk-DQF3QLOH.mjs";
 import {
   resolveServerActionsConfig
-} from "./chunk-FSQMN2MQ.mjs";
+} from "./chunk-E46NXBNJ.mjs";
 import {
   resolveFarmThemeConfig
 } from "./chunk-YWPNIYUP.mjs";
 import {
   resolveIntegrationPlugins
-} from "./chunk-IFHPDLIS.mjs";
+} from "./chunk-TGULJSHD.mjs";
 import {
   compileMiddlewareConfig
 } from "./chunk-EDPENAVO.mjs";
@@ -83,7 +85,7 @@ import {
 } from "./chunk-JSDV2NUN.mjs";
 import {
   resolveFarmServerConfig
-} from "./chunk-GFT5AHAT.mjs";
+} from "./chunk-QDWMCFTH.mjs";
 import {
   resolveFarmAPIConfig
 } from "./chunk-W6QLRQ3V.mjs";
@@ -135,6 +137,274 @@ async function resolveFarmMCPPlugin(config, options) {
   return runtime.createFarmMCPPlugin(config);
 }
 
+// src/cron-scan.ts
+var LANGS = {
+  ts: "ts",
+  tsx: "tsx",
+  js: "jsx",
+  jsx: "jsx"
+};
+var parseAst;
+async function loadParseAst() {
+  if (!parseAst) {
+    const { createRequire: createRequire3 } = await import("module");
+    parseAst = createRequire3(typeof __filename === "string" ? __filename : import.meta.url)(
+      "rolldown/parseAst"
+    ).parseAst;
+  }
+  return parseAst;
+}
+function unwrap(node) {
+  while (node.type === "TSAsExpression" || node.type === "TSSatisfiesExpression" || node.type === "TSNonNullExpression" || node.type === "ParenthesizedExpression") {
+    node = node.expression;
+  }
+  return node;
+}
+function* walkNodes(value) {
+  if (!value || typeof value !== "object") return;
+  if (Array.isArray(value)) {
+    for (const item of value) yield* walkNodes(item);
+    return;
+  }
+  const node = value;
+  if (typeof node.type === "string") yield node;
+  for (const key of Object.keys(node)) {
+    if (key === "type" || key === "start" || key === "end" || key === "loc" || key === "range") {
+      continue;
+    }
+    yield* walkNodes(node[key]);
+  }
+}
+function notLiteral(file, key) {
+  throw new TypeError(
+    `The \`${key}\` option of cronRoute() in ${file} is not a literal. The build reads scheduling options from the source without running the module, so write \`${key}\` out literally or move the job to the \`cron\` config in farm.config.ts.`
+  );
+}
+function literalValue(node, file, key) {
+  if (!node) notLiteral(file, key);
+  switch (node.type) {
+    case "Literal":
+      if (node.regex || typeof node.value === "bigint") notLiteral(file, key);
+      return node.value;
+    case "TemplateLiteral":
+      if (node.expressions.length > 0) notLiteral(file, key);
+      return node.quasis[0]?.value?.cooked ?? notLiteral(file, key);
+    case "UnaryExpression":
+      if (node.operator === "-" && node.argument.type === "Literal" && typeof node.argument.value === "number") {
+        return -node.argument.value;
+      }
+      notLiteral(file, key);
+      break;
+    case "ArrayExpression": {
+      const items = [];
+      for (const element of node.elements) {
+        if (!element || element.type === "SpreadElement") notLiteral(file, key);
+        items.push(literalValue(unwrap(element), file, key));
+      }
+      return items;
+    }
+    case "ObjectExpression": {
+      const object = {};
+      for (const property of node.properties) {
+        if (property.type !== "Property" || property.computed || property.kind !== "init") {
+          notLiteral(file, key);
+        }
+        const propertyKey = property.key.type === "Identifier" ? property.key.name : property.key.value;
+        if (typeof propertyKey !== "string" || propertyKey === "__proto__") notLiteral(file, key);
+        object[propertyKey] = literalValue(unwrap(property.value), file, key);
+      }
+      return object;
+    }
+    case "TSAsExpression":
+    case "TSSatisfiesExpression":
+    case "TSNonNullExpression":
+    case "ParenthesizedExpression":
+      return literalValue(node.expression, file, key);
+  }
+  notLiteral(file, key);
+}
+function optionProperty(object, name) {
+  return object.properties.find(
+    (entry) => entry.type === "Property" && !entry.computed && (entry.key.name === name || entry.key.value === name)
+  )?.value;
+}
+function cronRouteLocalNames(program) {
+  const locals = /* @__PURE__ */ new Set();
+  for (const statement of program.body) {
+    if (statement.type !== "ImportDeclaration") continue;
+    for (const specifier of statement.specifiers) {
+      if (specifier.type !== "ImportSpecifier") continue;
+      const imported = specifier.imported?.name ?? specifier.imported?.value;
+      if (imported === "cronRoute") locals.add(specifier.local.name);
+    }
+  }
+  return locals;
+}
+function scannedJobFromOptions(optionsNode, file, routePath) {
+  const scheduleNode = optionProperty(optionsNode, "schedule");
+  if (!scheduleNode) return null;
+  if (optionsNode.properties.some((entry) => entry.type === "SpreadElement")) {
+    throw new TypeError(
+      `The cronRoute() options in ${file} spread another object next to \`schedule\`, so the build cannot read the job statically. Write every scheduling option literally in the call.`
+    );
+  }
+  const read = (key) => {
+    const node = optionProperty(optionsNode, key);
+    return node === void 0 ? void 0 : literalValue(unwrap(node), file, key);
+  };
+  const name = readScannedName(read("name"), file, routePath);
+  const schedule = readScannedSchedule(read("schedule"), file, name);
+  const description = read("description");
+  if (description !== void 0 && typeof description !== "string") {
+    throw new TypeError(
+      `The \`description\` option of cronRoute() in ${file} must be a string literal.`
+    );
+  }
+  const timeoutMs = read("timeoutMs");
+  if (timeoutMs !== void 0 && (typeof timeoutMs !== "number" || !Number.isFinite(timeoutMs) || timeoutMs <= 0)) {
+    throw new TypeError(
+      `The \`timeoutMs\` option of cronRoute() in ${file} must be a positive number literal in milliseconds.`
+    );
+  }
+  const enabled = read("enabled");
+  if (enabled !== void 0 && typeof enabled !== "boolean") {
+    throw new TypeError(
+      `The \`enabled\` option of cronRoute() in ${file} must be \`true\` or \`false\`.`
+    );
+  }
+  const input = read("input");
+  return {
+    name,
+    schedule,
+    path: routePath,
+    ...typeof description === "string" && description.trim() ? { description: description.trim() } : {},
+    ...input !== void 0 ? { input } : {},
+    ...timeoutMs !== void 0 ? { timeoutMs } : {},
+    filePath: file,
+    enabled: enabled !== false
+  };
+}
+function readScannedName(value, file, routePath) {
+  if (value === void 0) {
+    const defaultName = routePath === "/api" ? "" : routePath.slice("/api/".length);
+    if (!defaultName) {
+      throw new TypeError(
+        `The scheduled cronRoute() in ${file} sits at the \`/api\` root, which has no default job name. Set the \`name\` option.`
+      );
+    }
+    return defaultName;
+  }
+  if (typeof value !== "string" || value.length === 0) {
+    throw new TypeError(
+      `The \`name\` option of cronRoute() in ${file} must be a non-empty string literal.`
+    );
+  }
+  if (!value.split("/").every((segment) => FARM_CRON_NAME_SEGMENT_PATTERN.test(segment))) {
+    throw new TypeError(
+      `The \`name\` option ${JSON.stringify(value)} of cronRoute() in ${file} is invalid. Each "/"-separated segment must start with a letter or number and contain only letters, numbers, dots, underscores, or hyphens.`
+    );
+  }
+  return value;
+}
+function readScannedSchedule(value, file, name) {
+  const raw = Array.isArray(value) ? value : [value];
+  if (raw.length === 0) {
+    throw new TypeError(
+      `The \`schedule\` option of cronRoute() in ${file} must list at least one cron expression.`
+    );
+  }
+  try {
+    return [...new Set(raw.map((entry) => normalizeCronExpression(name, entry)))];
+  } catch (error) {
+    throw new TypeError(`${error.message} (from the cronRoute() options in ${file})`);
+  }
+}
+async function scanFarmCronRouteJobs(options) {
+  const [path4, fs] = await Promise.all([import("path"), import("fs/promises")]);
+  const apiDir = path4.join(options.root, options.srcDir || "src", "app", "api");
+  try {
+    if (!(await fs.stat(apiDir)).isDirectory()) return [];
+  } catch {
+    return [];
+  }
+  const { glob } = await import("tinyglobby");
+  const files = (await glob("**/route.{ts,tsx,js,jsx}", {
+    cwd: apiDir,
+    absolute: true,
+    expandDirectories: false
+  })).sort();
+  const jobs = [];
+  const byName = /* @__PURE__ */ new Map();
+  for (const file of files) {
+    const code = await fs.readFile(file, "utf8");
+    if (!code.includes("cronRoute")) continue;
+    const parse = await loadParseAst();
+    const lang = LANGS[path4.extname(file).slice(1)] ?? "tsx";
+    let program;
+    try {
+      program = parse(code, { lang });
+    } catch (error) {
+      throw new TypeError(
+        `The route file ${file} could not be parsed while reading its cronRoute() schedule: ${error.message}`
+      );
+    }
+    const locals = cronRouteLocalNames(program);
+    if (locals.size === 0) continue;
+    const relativeDir = path4.relative(apiDir, path4.dirname(file)).split(path4.sep).join("/");
+    const routePath = relativeDir === "" || relativeDir === "." ? "/api" : `/api/${relativeDir}`;
+    for (const node of walkNodes(program)) {
+      if (node.type !== "CallExpression" || node.callee?.type !== "Identifier" || !locals.has(node.callee.name)) {
+        continue;
+      }
+      const optionsArgument = node.arguments?.[1];
+      if (!optionsArgument || optionsArgument.type === "SpreadElement") continue;
+      const optionsNode = unwrap(optionsArgument);
+      if (optionsNode.type !== "ObjectExpression") continue;
+      const job = scannedJobFromOptions(optionsNode, file, routePath);
+      if (!job) continue;
+      if (/[[\]]/.test(routePath)) {
+        throw new TypeError(
+          `The scheduled cronRoute() in ${file} sits under a dynamic segment, and a scheduler cannot fill route params. Move the schedule to a static route.`
+        );
+      }
+      const existing = byName.get(job.name);
+      if (existing !== void 0) {
+        throw new TypeError(
+          `Farm cron job ${JSON.stringify(job.name)} is defined twice: in ${existing} and in ${file}. Rename or remove one of them.`
+        );
+      }
+      byName.set(job.name, file);
+      jobs.push(job);
+    }
+  }
+  return jobs;
+}
+function mergeFarmCronJobs(config, scanned) {
+  const configNames = new Set(config.jobs.map((job) => job.name));
+  const jobs = [...config.jobs];
+  for (const scannedJob of scanned) {
+    if (configNames.has(scannedJob.name)) {
+      throw new TypeError(
+        `Farm cron job ${JSON.stringify(scannedJob.name)} is defined twice: in the \`cron\` config in farm.config.ts and in ${scannedJob.filePath}. Rename or remove one of them.`
+      );
+    }
+    if (!scannedJob.enabled) continue;
+    const { filePath: _filePath, enabled: _enabled, ...job } = scannedJob;
+    jobs.push(job);
+  }
+  if (jobs.length === config.jobs.length) return config;
+  return { ...config, enabled: jobs.length > 0, jobs };
+}
+async function resolveProjectCronJobs(options) {
+  const resolved = resolveCronConfig(options.cron);
+  if (resolved === options.cron || options.cron === false) return resolved;
+  const scanned = await scanFarmCronRouteJobs({
+    root: options.root || process.cwd(),
+    srcDir: options.srcDir
+  });
+  return mergeFarmCronJobs(resolved, scanned);
+}
+
 // src/config.ts
 import path3 from "path";
 
@@ -808,6 +1078,7 @@ async function resolveConfig(userConfig, mode) {
   const env = resolveEnv(userConfig.env, process.env);
   setEnv(env);
   const api = await resolveFarmAPIConfig(userConfig.api, { root, mode, env });
+  const cron = await resolveProjectCronJobs({ root, srcDir, cron: userConfig.cron });
   const auth = resolveFarmAuthConfig(userConfig.auth);
   const mcp = resolveFarmMCPConfig(userConfig.mcp);
   if (auth.enabled && userConfig.integrations?.auth) {
@@ -835,6 +1106,12 @@ async function resolveConfig(userConfig, mode) {
     basePath,
     integrations: () => integrations
   }) : null;
+  let nativeServerFnAppDirs = [];
+  const nativeServerFnPlugin = userConfig.mobile !== void 0 && userConfig.mobile !== null ? (await import("./native-server-fn-handler-GLRHAYWV.mjs")).createFarmNativeServerFnPlugin({
+    resolve: (await import("./internal/native-server-fns.mjs")).createFarmDevNativeServerFnResolver(
+      { root, srcDir, appDirs: () => nativeServerFnAppDirs }
+    )
+  }) : null;
   const openapi = {
     enabled: false,
     route: "/docs/reference",
@@ -861,7 +1138,7 @@ async function resolveConfig(userConfig, mode) {
     md,
     mdx,
     migrations: resolveMigrationsConfig(userConfig.migrations),
-    cron: resolveCronConfig(userConfig.cron),
+    cron,
     workflows: resolveWorkflowsConfig(userConfig.workflows),
     api,
     observability: userConfig.observability ?? false,
@@ -888,6 +1165,7 @@ async function resolveConfig(userConfig, mode) {
     ...userConfig.mobile !== void 0 ? { mobileClient: true } : {},
     plugins: [
       ...mobileSessionPlugin ? [mobileSessionPlugin] : [],
+      ...nativeServerFnPlugin ? [nativeServerFnPlugin] : [],
       ...resolveIntegrationPlugins(integrations),
       ...nativeMCPPlugin ? [nativeMCPPlugin] : [],
       ...userConfig.plugins || []
@@ -925,6 +1203,9 @@ async function resolveConfig(userConfig, mode) {
     vite: typeof userConfig.vite === "function" ? userConfig.vite({}) : userConfig.vite || {}
   };
   assertPluginDependencies(resolved.plugins, resolved.integrations);
+  if (nativeServerFnPlugin) {
+    nativeServerFnAppDirs = (await import("./layers-T55SA47E.mjs")).getFarmAppDirectories(resolved);
+  }
   return resolved;
 }
 function formatConfigLoadError(error) {

package/dist/{chunk-4P23B7DU.cjs → chunk-WKJQ2FJA.cjs}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkDPJ66FSIcjs = require('./chunk-DPJ66FSI.cjs');
+var _chunkXX32BOMMcjs = require('./chunk-XX32BOMM.cjs');
 
 
 var _chunkLT4VAF5Zcjs = require('./chunk-LT4VAF5Z.cjs');
@@ -273,7 +273,7 @@ function requestEvent(metadata, method, status, durationMs) {
     id: uuid(),
     requestId: metadata.id,
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    route: routeTemplate(_chunkDPJ66FSIcjs.getFarmRouteLabel.call(void 0, metadata.route)),
+    route: routeTemplate(_chunkXX32BOMMcjs.getFarmRouteLabel.call(void 0, metadata.route)),
     agent: metadata.agent,
     kind: "request",
     method,
@@ -286,7 +286,7 @@ function toolEvent(metadata, event) {
     id: uuid(),
     requestId: metadata.id,
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    route: routeTemplate(_chunkDPJ66FSIcjs.getFarmRouteLabel.call(void 0, metadata.route)),
+    route: routeTemplate(_chunkXX32BOMMcjs.getFarmRouteLabel.call(void 0, metadata.route)),
     agent: metadata.agent,
     kind: "mcp.tool",
     tool: event.tool,

package/dist/{chunk-HASX6DC7.cjs → chunk-WKPBIT5Q.cjs}

@@ -4,13 +4,13 @@
 
 
 
-var _chunk2IAPKPEBcjs = require('./chunk-2IAPKPEB.cjs');
+var _chunkYN6BHOYYcjs = require('./chunk-YN6BHOYY.cjs');
 
 
 var _chunkMPU5DOXXcjs = require('./chunk-MPU5DOXX.cjs');
 
 
-var _chunkFK25QSVCcjs = require('./chunk-FK25QSVC.cjs');
+var _chunk4P5634G6cjs = require('./chunk-4P5634G6.cjs');
 
 
 
@@ -32,7 +32,7 @@ function createServerQuery(options) {
     throw new TypeError("createServerQuery requires a key function");
   }
   const staleTime = normalizeServerQueryStaleTime(options.staleTime);
-  const execute = _chunk2IAPKPEBcjs.createServerFn.call(void 0, {
+  const execute = _chunkYN6BHOYYcjs.createServerFn.call(void 0, {
     input: options.input,
     middleware: options.middleware,
     handler: async (context) => {
@@ -42,7 +42,7 @@ function createServerQuery(options) {
       const cacheKey = _chunkDXUXQP2Tcjs.createFarmCacheKey.call(void 0, ["route-data", routeKey]);
       const producer = async () => {
         const value = await options.handler(context);
-        return _chunk2IAPKPEBcjs._parseServerFnSchema.call(void 0, options.output, value, "output", "createServerQuery");
+        return _chunkYN6BHOYYcjs._parseServerFnSchema.call(void 0, options.output, value, "output", "createServerQuery");
       };
       let data;
       let updatedAt;
@@ -67,7 +67,7 @@ function createServerQuery(options) {
   });
   const query = async (input) => {
     const result = await execute(input);
-    return _chunkFK25QSVCcjs.getServerActionExecutionContext.call(void 0, ) ? result : result.data;
+    return _chunk4P5634G6cjs.getServerActionExecutionContext.call(void 0, ) ? result : result.data;
   };
   Object.defineProperties(query, {
     [FARM_SERVER_QUERY_SYMBOL]: {
@@ -87,10 +87,10 @@ function createServerQuery(options) {
       enumerable: false
     }
   });
-  _chunk2IAPKPEBcjs._attachServerFunctionDescriptor.call(void 0, 
+  _chunkYN6BHOYYcjs._attachServerFunctionDescriptor.call(void 0, 
     query,
-    _chunk2IAPKPEBcjs.createServerFunctionDescriptor.call(void 0, "query", options, async (value) => {
-      const result = await _chunk2IAPKPEBcjs._runServerFunctionForCaller.call(void 0, 
+    _chunkYN6BHOYYcjs.createServerFunctionDescriptor.call(void 0, "query", options, async (value) => {
+      const result = await _chunkYN6BHOYYcjs._runServerFunctionForCaller.call(void 0, 
         execute,
         value
       );

package/dist/{chunk-RAWWCDCT.cjs → chunk-WYAXRIYP.cjs}

@@ -20,7 +20,7 @@ var _chunkEVIWKPJVcjs = require('./chunk-EVIWKPJV.cjs');
 var _chunk2OF5RPVUcjs = require('./chunk-2OF5RPVU.cjs');
 
 
-var _chunkLIFUPCXWcjs = require('./chunk-LIFUPCXW.cjs');
+var _chunkCFG4QERRcjs = require('./chunk-CFG4QERR.cjs');
 
 
 var _chunkA25FXJ7Dcjs = require('./chunk-A25FXJ7D.cjs');
@@ -240,7 +240,7 @@ function createHandledResponse(body, init, headers) {
   return new Response(body, { ...init, headers: responseHeaders });
 }
 function createWebMiddlewareContext(request, parent, trustProxy = false, clientAddress, toRoutePathname) {
-  let currentRequest = _chunkLIFUPCXWcjs.withFarmRequestClientAddress.call(void 0, request, trustProxy, clientAddress);
+  let currentRequest = _chunkCFG4QERRcjs.withFarmRequestClientAddress.call(void 0, request, trustProxy, clientAddress);
   let handledResponse = null;
   const url = new URL(currentRequest.url);
   const data = _optionalChain([parent, 'optionalAccess', _3 => _3.data]) ? new Map(parent.data) : /* @__PURE__ */ new Map();
@@ -295,7 +295,7 @@ function createWebMiddlewareContext(request, parent, trustProxy = false, clientA
     rewrite(rewriteUrl) {
       ctx._rewriteUrl = rewriteUrl;
       const nextUrl = new URL(rewriteUrl, currentRequest.url);
-      currentRequest = _chunkLIFUPCXWcjs.withFarmRequestClientAddress.call(void 0, 
+      currentRequest = _chunkCFG4QERRcjs.withFarmRequestClientAddress.call(void 0, 
         new Request(nextUrl, currentRequest),
         trustProxy,
         clientAddress

package/dist/{chunk-3TL3AH25.cjs → chunk-X4K7TYN6.cjs}

@@ -1,7 +1,7 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
-var _chunkU4BJKNIRcjs = require('./chunk-U4BJKNIR.cjs');
+var _chunk752XUZIMcjs = require('./chunk-752XUZIM.cjs');
 
 
 var _chunkSYW346ZNcjs = require('./chunk-SYW346ZN.cjs');
@@ -19,6 +19,9 @@ var _chunkGBMWLDCCcjs = require('./chunk-GBMWLDCC.cjs');
 var _chunkEZTKXD6Pcjs = require('./chunk-EZTKXD6P.cjs');
 
 
+var _chunk4EBC7EMWcjs = require('./chunk-4EBC7EMW.cjs');
+
+
 
 var _chunkGSVJ3IIFcjs = require('./chunk-GSVJ3IIF.cjs');
 
@@ -799,7 +802,7 @@ async function generateFarmTypeArtifacts(options) {
       componentExtensions: options.componentExtensions,
       sourceRoots
     };
-    unifiedSections.push(await _chunkU4BJKNIRcjs.createRouteTypeDeclarations.call(void 0, routeOptions, unifiedTypesPath));
+    unifiedSections.push(await _chunk752XUZIMcjs.createRouteTypeDeclarations.call(void 0, routeOptions, unifiedTypesPath));
     result.routeTypesPath = unifiedTypesPath;
   } else if (shouldGenerateRoutes) {
     const routeOptions = {
@@ -813,18 +816,20 @@ async function generateFarmTypeArtifacts(options) {
     };
     if (options.check) {
       const routeTypesPath = resolveGeneratedPath(root, srcDir, options.routeTypesOutFile);
-      const content = await _chunkU4BJKNIRcjs.createRouteTypeDeclarations.call(void 0, routeOptions, routeTypesPath);
+      const content = await _chunk752XUZIMcjs.createRouteTypeDeclarations.call(void 0, routeOptions, routeTypesPath);
       checkGeneratedFile(routeTypesPath, content, result.stalePaths);
       result.routeTypesPath = routeTypesPath;
     } else {
-      result.routeTypesPath = await _chunkU4BJKNIRcjs.generateRouteTypes.call(void 0, routeOptions);
+      result.routeTypesPath = await _chunk752XUZIMcjs.generateRouteTypes.call(void 0, routeOptions);
     }
   }
   if (shouldGenerateApi) {
     const generator = new (0, _chunkQISW423Scjs.APITypeGenerator)(appDirs);
     const apiRoutes = generator.scanAPIRoutes();
     const apiTypesPath = options.apiTypesOutFile ? _path.resolve.call(void 0, root, options.apiTypesOutFile) : _path.join.call(void 0, root, srcDir, "lib", "api.generated.ts");
-    const pluginRoutes = _chunk5C7XMKQ4cjs.resolvePluginRoutes.call(void 0, options.plugins);
+    const pluginRoutes = _chunk5C7XMKQ4cjs.resolvePluginRoutes.call(void 0, 
+      _optionalChain([options, 'access', _50 => _50.plugins, 'optionalAccess', _51 => _51.filter, 'call', _52 => _52((plugin) => plugin.name !== _chunk4EBC7EMWcjs.FARM_NATIVE_SERVER_FN_PLUGIN)])
+    );
     const configFiles = [
       ...(_nullishCoalesce(options.layers, () => ( []))).map((layer) => layer.configFile).filter((file) => Boolean(file)),
       options.configPath ? _path.resolve.call(void 0, root, options.configPath) : [
@@ -900,7 +905,7 @@ async function generateFarmTypeArtifacts(options) {
       });
     }
   }
-  if (shouldRefreshUnifiedTypes && _optionalChain([options, 'access', _50 => _50.i18nConfig, 'optionalAccess', _51 => _51.enabled]) && !options.i18nTypesOutFile) {
+  if (shouldRefreshUnifiedTypes && _optionalChain([options, 'access', _53 => _53.i18nConfig, 'optionalAccess', _54 => _54.enabled]) && !options.i18nTypesOutFile) {
     const { signatures } = await _chunkBBPDJGCUcjs.readFarmI18nCatalogs.call(void 0, options.i18nConfig);
     unifiedSections.push(renderFarmI18nTypes(options.i18nConfig.locales, signatures));
     result.i18nTypesPath = unifiedTypesPath;
@@ -928,7 +933,7 @@ async function generateFarmTypeArtifacts(options) {
     if (syncModelTypes) unifiedSections.push(syncModelTypes);
   }
   if (shouldRefreshUnifiedTypes && _fs.existsSync.call(void 0, _path.join.call(void 0, root, srcDir, "native"))) {
-    const [{ scanFarmMobileAppModules }, { createFarmNativeModuleTypeDeclarations }] = await Promise.all([import("./modules-WT5D3AWY.cjs"), import("./native-specs-IQQRJOOW.cjs")]);
+    const [{ scanFarmMobileAppModules }, { createFarmNativeModuleTypeDeclarations }] = await Promise.all([import("./modules-QTP7WJPD.cjs"), import("./native-specs-5OLED4MM.cjs")]);
     const appModules = scanFarmMobileAppModules({ root, srcDir });
     const nativeTypes = appModules && createFarmNativeModuleTypeDeclarations(appModules.specs, { root });
     if (nativeTypes) unifiedSections.push(nativeTypes);

package/dist/chunk-XCXHQBMM.mjs

@@ -0,0 +1,115 @@
+import {
+  _describeServerFunction,
+  _invokeServerFunction
+} from "./chunk-QTD6EMN2.mjs";
+import {
+  FARM_NATIVE_SERVER_FN_PATH,
+  FARM_NATIVE_SERVER_FN_PLUGIN
+} from "./chunk-L4RTTTVE.mjs";
+import {
+  DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT
+} from "./chunk-E46NXBNJ.mjs";
+
+// src/mobile/native-server-fn-handler.ts
+var MOBILE_APP_HEADER = "x-farm-mobile";
+var FETCH_METADATA = ["sec-fetch-site", "sec-fetch-mode", "sec-fetch-dest", "sec-fetch-user"];
+var ID = /^[\w-]{1,64}$/;
+var UNSAFE_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+function hasUnsafeKey(value, depth = 0) {
+  if (depth > 64) return true;
+  if (Array.isArray(value)) return value.some((item) => hasUnsafeKey(item, depth + 1));
+  if (!value || typeof value !== "object") return false;
+  return Object.keys(value).some(
+    (key) => UNSAFE_KEYS.has(key) || hasUnsafeKey(value[key], depth + 1)
+  );
+}
+function json(status, body) {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json", "cache-control": "private, no-store" }
+  });
+}
+function refuse(status, code, message) {
+  return json(status, { error: { code, message } });
+}
+async function handleFarmNativeServerFnRequest(request, options, parsed) {
+  if (request.method !== "POST") {
+    return refuse(405, "method_not_allowed", "Call server functions with POST.");
+  }
+  const origin = request.headers.get("origin");
+  if (!request.headers.get(MOBILE_APP_HEADER) || FETCH_METADATA.some((name) => request.headers.has(name)) || origin !== null && origin !== new URL(request.url).origin) {
+    return refuse(403, "not_native", "Only the app's native screens call server functions here.");
+  }
+  const length = Number(request.headers.get("content-length") ?? "0");
+  if (length > DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT) {
+    return refuse(413, "body_too_large", "The call's input is too large.");
+  }
+  let call;
+  if (parsed !== void 0) call = parsed;
+  else {
+    const text = await request.text();
+    if (text.length > DEFAULT_SERVER_ACTION_BODY_SIZE_LIMIT) {
+      return refuse(413, "body_too_large", "The call's input is too large.");
+    }
+    try {
+      call = JSON.parse(text);
+    } catch {
+      return refuse(400, "invalid_body", 'Send { "id", "input" } as JSON.');
+    }
+  }
+  if (typeof call?.id !== "string" || !ID.test(call.id)) {
+    return refuse(400, "invalid_body", 'Send { "id", "input" } as JSON.');
+  }
+  if (hasUnsafeKey(call.input)) {
+    return refuse(400, "invalid_body", "The input has a key that is not allowed.");
+  }
+  const fn = await options.resolve(call.id);
+  if (fn === void 0 || _describeServerFunction(fn) === void 0) {
+    return refuse(
+      404,
+      "unknown_function",
+      "No server function with this id is open to native screens."
+    );
+  }
+  const outcome = await _invokeServerFunction(fn, call.input, request);
+  if (outcome.ok) {
+    try {
+      return json(200, { data: outcome.data ?? null });
+    } catch (error) {
+      console.error("[Farm] A server function's result for a native screen is not JSON:", error);
+      return refuse(500, "server_error", "Server function failed");
+    }
+  }
+  switch (outcome.reason) {
+    case "input":
+      return refuse(
+        400,
+        "invalid_input",
+        outcome.error instanceof Error ? outcome.error.message : "The input is invalid."
+      );
+    case "failure": {
+      const { code, status, message, data } = outcome.failure;
+      return json(status, { error: { code, status, message, data } });
+    }
+    case "redirect":
+      return json(200, { redirect: { url: outcome.url, status: outcome.status } });
+    default:
+      console.error("[Farm] A server function called from a native screen failed:", outcome.error);
+      return refuse(500, "server_error", "Server function failed");
+  }
+}
+function createFarmNativeServerFnPlugin(options) {
+  return {
+    name: FARM_NATIVE_SERVER_FN_PLUGIN,
+    routes: ({ route }) => [
+      route.post(FARM_NATIVE_SERVER_FN_PATH, {
+        handler: (request, { input }) => handleFarmNativeServerFnRequest(request, options, input.body)
+      })
+    ]
+  };
+}
+
+export {
+  handleFarmNativeServerFnRequest,
+  createFarmNativeServerFnPlugin
+};