@browserlessapi/inferlo 0.5.0 → 0.7.0

package/dist/service-client.js

@@ -0,0 +1,177 @@
+/**
+ * Typed calls from one Inferlo service to another (microservices, part 1).
+ *
+ *   import { getTicket, createTicket } from "../../tickets/src/routes/tickets.ts"; // the other service's routes
+ *   const tickets = serviceClient({ baseUrl: settings.TICKETS_URL, token: settings.TICKETS_TOKEN });
+ *
+ *   // in a route handler: input and answer are typed from the route
+ *   const ticket = await tickets.call(getTicket, { params: { id }, ctx });
+ *
+ * The route definition gives the method, the path and the types; nothing is generated and nothing is global.
+ * Passing ctx forwards the request id (X-Request-Id) and cancels the call when the request is aborted. With
+ * tracing: { api: otel }, every attempt is a client span that sends its W3C traceparent, so the other service's
+ * spans join the caller's trace.
+ */
+import { InferloError } from "./errors.js";
+import { checkTracing, clientTracing } from "./tracing.js";
+/** Raised when a call to another service fails: remoteStatus is its HTTP status (0 when no answer came), remoteCode its error code. */
+export class ServiceCallError extends InferloError {
+    remoteStatus;
+    remoteCode;
+    constructor(message, remoteStatus, remoteCode, fix, details) {
+        super("IL2008", message, { status: 502, expose: false, fix, details });
+        this.remoteStatus = remoteStatus;
+        this.remoteCode = remoteCode;
+    }
+}
+const IDEMPOTENT = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+const RETRY_STATUS = new Set([502, 503, 504]);
+function invalid(message, fix) {
+    return new InferloError("IL2009", message, { status: 500, expose: false, fix });
+}
+function isRouteDef(value) {
+    return typeof value === "object" && value !== null && value.kind === "inferlo.route";
+}
+/** The path with :params filled in, each value URL-encoded. */
+function fillPath(path, params, route) {
+    return path.replace(/:([A-Za-z0-9_]+)/g, (_, name) => {
+        const value = params?.[name];
+        if (value === undefined || value === null || value === "") {
+            throw invalid(`The call to ${route.method} ${route.path} has no value for the path parameter "${name}".`, `Pass it: client.call(route, { params: { ${name}: "..." } }).`);
+        }
+        return encodeURIComponent(String(value));
+    });
+}
+const sleep = (ms, signal) => new Promise((resolve) => {
+    const timer = setTimeout(resolve, ms);
+    signal?.addEventListener("abort", () => (clearTimeout(timer), resolve()), { once: true });
+});
+/** A client for calls to another Inferlo service. See ServiceClientOptions. */
+export function serviceClient(options) {
+    if (typeof options !== "object" || options === null)
+        throw invalid("serviceClient() needs options.", 'Use serviceClient({ baseUrl: "http://tickets.internal" }).');
+    for (const key of Object.keys(options)) {
+        if (!["baseUrl", "token", "headers", "timeoutMs", "retries", "fetch", "tracing"].includes(key)) {
+            throw invalid(`serviceClient() has an unknown option "${key}".`, "The options are baseUrl, token, headers, timeoutMs, retries, fetch and tracing.");
+        }
+    }
+    let base;
+    try {
+        base = new URL(options.baseUrl);
+    }
+    catch {
+        throw invalid(`serviceClient() baseUrl ${JSON.stringify(options.baseUrl)} is not a URL.`, 'Use the address of the other service, such as "http://tickets.internal" or "https://api.example.com/v1".');
+    }
+    if (base.protocol !== "http:" && base.protocol !== "https:")
+        throw invalid(`serviceClient() baseUrl must use http or https, got ${base.protocol}.`, 'Use "http://..." or "https://...".');
+    if (base.search || base.hash)
+        throw invalid("serviceClient() baseUrl must not have a query string or fragment.", "Pass query values per call: client.call(route, { query }).");
+    const timeoutMs = options.timeoutMs ?? 10_000;
+    const retries = options.retries ?? 0;
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+        throw invalid(`serviceClient() timeoutMs must be a positive number of milliseconds, got ${String(options.timeoutMs)}.`, "Use timeoutMs: 5000, or leave it out for 10 s.");
+    if (!Number.isInteger(retries) || retries < 0 || retries > 10)
+        throw invalid(`serviceClient() retries must be a whole number from 0 to 10, got ${String(options.retries)}.`, "Use retries: 2 for idempotent calls that may meet a restarting instance.");
+    const doFetch = options.fetch ?? ((request) => globalThis.fetch(request));
+    const basePath = base.pathname.replace(/\/+$/, "");
+    const tracingConfig = checkTracing(options.tracing, "serviceClient");
+    const tracing = tracingConfig ? clientTracing(tracingConfig, "inferlo") : undefined;
+    return {
+        async call(route, input = {}) {
+            if (!isRouteDef(route))
+                throw invalid("client.call() needs a route made with route.<method>(...).handle(...).", "Import the route from the other service and pass it: client.call(getTicket, { params: { id } }).");
+            const { params, query, body, ctx, signal, headers } = input;
+            const url = new URL(base.origin + basePath + fillPath(route.path, params, route));
+            for (const [k, v] of Object.entries(query ?? {})) {
+                if (v === undefined || v === null)
+                    continue;
+                for (const item of Array.isArray(v) ? v : [v])
+                    url.searchParams.append(k, String(item));
+            }
+            const method = route.method.toUpperCase();
+            const sent = { accept: "application/json", ...options.headers, ...headers };
+            if (options.token)
+                sent.authorization = `Bearer ${options.token}`;
+            if (ctx?.requestId)
+                sent["x-request-id"] = ctx.requestId;
+            const hasBody = body !== undefined && method !== "GET" && method !== "HEAD";
+            if (hasBody)
+                sent["content-type"] = "application/json";
+            const payload = hasBody ? JSON.stringify(body) : undefined;
+            const callerSignals = [ctx?.signal, signal].filter((s) => s !== undefined);
+            const callerSignal = callerSignals.length ? AbortSignal.any(callerSignals) : undefined;
+            const attempts = IDEMPOTENT.has(method) ? retries + 1 : 1;
+            const where = `${method} ${url.origin}${url.pathname}`;
+            const details = (extra) => ({ method, url: `${url.origin}${url.pathname}`, requestId: ctx?.requestId, ...extra });
+            for (let attempt = 1;; attempt++) {
+                const timeout = AbortSignal.timeout(timeoutMs);
+                const combined = callerSignal ? AbortSignal.any([timeout, callerSignal]) : timeout;
+                let span;
+                let headersSent = sent;
+                if (tracing) {
+                    const attributes = { "http.request.method": method, "url.full": `${url.origin}${url.pathname}`, "url.template": route.path, "server.address": url.hostname };
+                    if (url.port)
+                        attributes["server.port"] = Number(url.port);
+                    if (attempt > 1)
+                        attributes["http.request.resend_count"] = attempt - 1;
+                    span = tracing.start(`${method} ${route.path}`, attributes);
+                    headersSent = { ...sent };
+                    tracing.inject(span, headersSent);
+                }
+                let response;
+                try {
+                    const request = new Request(url, { method, headers: headersSent, body: payload, signal: combined });
+                    response = await (span ? tracing.within(span, () => doFetch(request)) : doFetch(request));
+                }
+                catch (error) {
+                    const timedOut = timeout.aborted;
+                    if (span)
+                        tracing.fail(span, error, callerSignal?.aborted ? "cancelled" : timedOut ? "timeout" : undefined);
+                    if (callerSignal?.aborted)
+                        throw callerSignal.reason ?? error;
+                    if (attempt < attempts) {
+                        await sleep(100 * 2 ** (attempt - 1), callerSignal);
+                        continue;
+                    }
+                    const failure = new ServiceCallError(timedOut ? `${where} did not answer within ${timeoutMs} ms.` : `${where} could not be reached: ${error instanceof Error ? error.message : String(error)}.`, 0, undefined, timedOut ? "Check that the service is healthy, or raise serviceClient({ timeoutMs })." : "Check serviceClient({ baseUrl }) and that the service is running and reachable.", details({ attempts: attempt }));
+                    failure.cause = error;
+                    throw failure;
+                }
+                span?.setAttribute("http.response.status_code", response.status);
+                if (response.ok) {
+                    span?.end();
+                    if (response.status === 204 || method === "HEAD")
+                        return undefined;
+                    const type = response.headers.get("content-type") ?? "";
+                    if (/^application\/(.+\+)?json\b/i.test(type))
+                        return (await response.json());
+                    return response;
+                }
+                if (RETRY_STATUS.has(response.status) && attempt < attempts) {
+                    if (span)
+                        tracing.fail(span, new Error(`${where} answered ${response.status}.`), String(response.status));
+                    await response.body?.cancel();
+                    await sleep(100 * 2 ** (attempt - 1), callerSignal);
+                    continue;
+                }
+                let remote;
+                try {
+                    remote = (await response.json()).error;
+                }
+                catch {
+                    remote = undefined;
+                }
+                const code = typeof remote?.code === "string" ? remote.code : undefined;
+                const failure = new ServiceCallError(`${where} answered ${response.status}${code ? ` ${code}` : ""}${remote?.message ? `: ${remote.message}` : ""}.`, response.status, code, response.status === 401 || response.status === 403
+                    ? "Check serviceClient({ token }) and the other service's auth."
+                    : response.status >= 500
+                        ? "See the other service's logs for this request id."
+                        : "Check the input against the other service's route, or handle the answer: catch the error and read error.remoteStatus.", details({ status: response.status, code, attempts: attempt }));
+                if (span)
+                    tracing.fail(span, failure, String(response.status));
+                throw failure;
+            }
+        },
+    };
+}
+//# sourceMappingURL=service-client.js.map

package/dist/service-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-client.js","sourceRoot":"","sources":["../src/service-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAyD,MAAM,cAAc,CAAC;AA0DlH,uIAAuI;AACvI,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IACvC,YAAY,CAAS;IACrB,UAAU,CAAqB;IACxC,YAAY,OAAe,EAAE,YAAoB,EAAE,UAA8B,EAAE,GAAW,EAAE,OAAgC;QAC9H,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AACxE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE9C,SAAS,OAAO,CAAC,OAAe,EAAE,GAAW;IAC3C,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAkB,CAAC,IAAI,KAAK,eAAe,CAAC;AACrG,CAAC;AAED,+DAA+D;AAC/D,SAAS,QAAQ,CAAC,IAAY,EAAE,MAA2C,EAAE,KAAe;IAC1F,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QAC3D,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,OAAO,CAAC,eAAe,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,yCAAyC,IAAI,IAAI,EAAE,2CAA2C,IAAI,eAAe,CAAC,CAAC;QAC5K,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,MAA+B,EAAE,EAAE,CAC5D,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5F,CAAC,CAAC,CAAC;AAEL,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,OAA6B;IACzD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,OAAO,CAAC,gCAAgC,EAAE,4DAA4D,CAAC,CAAC;IACnK,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/F,MAAM,OAAO,CAAC,0CAA0C,GAAG,IAAI,EAAE,iFAAiF,CAAC,CAAC;QACtJ,CAAC;IACH,CAAC;IACD,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,0GAA0G,CAAC,CAAC;IACxM,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,OAAO,CAAC,uDAAuD,IAAI,CAAC,QAAQ,GAAG,EAAE,oCAAoC,CAAC,CAAC;IAC1L,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI;QAAE,MAAM,OAAO,CAAC,mEAAmE,EAAE,4DAA4D,CAAC,CAAC;IAC/K,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,4EAA4E,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,gDAAgD,CAAC,CAAC;IAC7N,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;QAAE,MAAM,OAAO,CAAC,oEAAoE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,0EAA0E,CAAC,CAAC;IACzP,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,OAAgB,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACrE,MAAM,OAAO,GAA8B,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE/G,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAiB,EAAE,QAA+B,EAA2B;YACtF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,MAAM,OAAO,CAAC,wEAAwE,EAAE,kGAAkG,CAAC,CAAC;YACpN,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAyK,CAAC;YAChO,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAClF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;oBAAE,SAAS;gBAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,IAAI,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;YACpG,IAAI,OAAO,CAAC,KAAK;gBAAE,IAAI,CAAC,aAAa,GAAG,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC;YAClE,IAAI,GAAG,EAAE,SAAS;gBAAE,IAAI,CAAC,cAAc,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;YAC5E,IAAI,OAAO;gBAAE,IAAI,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACvD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3D,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;YAC7F,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,CAAC,KAA8B,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAE3I,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC/C,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;gBACnF,IAAI,IAA0B,CAAC;gBAC/B,IAAI,WAAW,GAAG,IAAI,CAAC;gBACvB,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,UAAU,GAAoC,EAAE,qBAAqB,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAC9L,IAAI,GAAG,CAAC,IAAI;wBAAE,UAAU,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC3D,IAAI,OAAO,GAAG,CAAC;wBAAE,UAAU,CAAC,2BAA2B,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;oBACvE,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;oBAC5D,WAAW,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;oBAC1B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;gBACpC,CAAC;gBACD,IAAI,QAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACpG,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7F,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;oBACjC,IAAI,IAAI;wBAAE,OAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBAC7G,IAAI,YAAY,EAAE,OAAO;wBAAE,MAAM,YAAY,CAAC,MAAM,IAAI,KAAK,CAAC;oBAC9D,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC;wBACvB,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;wBACpD,SAAS;oBACX,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAClC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,0BAA0B,SAAS,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAC1J,CAAC,EACD,SAAS,EACT,QAAQ,CAAC,CAAC,CAAC,2EAA2E,CAAC,CAAC,CAAC,iFAAiF,EAC1K,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAC/B,CAAC;oBACD,OAA+B,CAAC,KAAK,GAAG,KAAK,CAAC;oBAC/C,MAAM,OAAO,CAAC;gBAChB,CAAC;gBACD,IAAI,EAAE,YAAY,CAAC,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjE,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,IAAI,EAAE,GAAG,EAAE,CAAC;oBACZ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM;wBAAE,OAAO,SAAkB,CAAC;oBAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;oBACxD,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAU,CAAC;oBACvF,OAAO,QAAiB,CAAC;gBAC3B,CAAC;gBACD,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC;oBAC5D,IAAI,IAAI;wBAAE,OAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC3G,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC9B,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;oBACpD,SAAS;gBACX,CAAC;gBACD,IAAI,MAAuD,CAAC;gBAC5D,IAAI,CAAC;oBACH,MAAM,GAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqD,CAAC,KAAK,CAAC;gBAC9F,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,SAAS,CAAC;gBACrB,CAAC;gBACD,MAAM,IAAI,GAAG,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxE,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAClC,GAAG,KAAK,aAAa,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAC/G,QAAQ,CAAC,MAAM,EACf,IAAI,EACJ,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;oBAChD,CAAC,CAAC,8DAA8D;oBAChE,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG;wBACtB,CAAC,CAAC,mDAAmD;wBACrD,CAAC,CAAC,uHAAuH,EAC7H,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAC9D,CAAC;gBACF,IAAI,IAAI;oBAAE,OAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChE,MAAM,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;KACe,CAAC;AACrB,CAAC"}

package/dist/sessions.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Cookie sessions for browser apps: signed, HttpOnly cookies and CSRF protection, with no session table.
+ *
+ *   export const session = sessions({
+ *     secret: config.SESSION_SECRET,
+ *     user: ({ userId }, { db }) => db.users.find(userId),
+ *   });
+ *   createApp({ auth: session, ... });
+ *
+ *   // in a login route (auth: "public"), after checking the password:
+ *   const { csrfToken } = await session.signIn(ctx, user.id);
+ *   // in a logout route:
+ *   session.signOut(ctx);
+ *
+ * Requests that change data (POST, PUT, PATCH, DELETE) with a session cookie must send the CSRF token in an
+ * X-CSRF-Token header or a _csrf form field, or they are rejected with IL3005.
+ */
+import type { AuthConfig } from "./app.ts";
+import type { AppDb, AppUser } from "./route.ts";
+export interface SessionData {
+    /** The id passed to session.signIn(ctx, userId). */
+    userId: string;
+    /** When the session was created (milliseconds since 1970). Compare it to a "signed out everywhere" time to revoke older sessions. */
+    issuedAt: number;
+}
+export interface SessionCookieOptions {
+    /** Cookie name. Default "inferlo_session"; the CSRF cookie is the same name with "_csrf" added. */
+    name?: string;
+    /** SameSite attribute. Default "lax" (links from other sites keep the session, cross-site form posts do not send it). */
+    sameSite?: "lax" | "strict";
+    /** Secure attribute. Default true, except for plain http on localhost, 127.0.0.1 and ::1 during development. */
+    secure?: boolean;
+    /** Domain attribute, to share the session with subdomains. Default: none (only the host that set it). */
+    domain?: string;
+    /** Path attribute. Default "/". */
+    path?: string;
+}
+export interface SessionsOptions {
+    /**
+     * The signing secret, at least 32 characters: keep it in config({ secrets }). To rotate it, pass
+     * [newSecret, oldSecret]: new sessions are signed with the first, and sessions signed with any of them stay valid.
+     */
+    secret: string | readonly string[];
+    /** Load the signed-in user for a session, or return null to end it (deleted or disabled users, revoked sessions). */
+    user: (session: SessionData, ctx: {
+        db: AppDb;
+        req: Request;
+    }) => AppUser | null | undefined | Promise<AppUser | null | undefined>;
+    /** How long a session lasts after sign-in, in milliseconds. Default 7 days; 1 minute to 400 days. */
+    maxAgeMs?: number;
+    cookie?: SessionCookieOptions;
+    /** Roles of a user, checked when a route uses auth: "<role>". Default: user.roles ?? []. */
+    roles?: (user: AppUser) => string[];
+    /** The tenant of a user, for tenant-scoped models. Default: user.tenantId. */
+    tenant?: (user: AppUser) => string | null | undefined;
+}
+/** What session.signIn and session.signOut need from the route context. */
+export interface SessionResponseContext {
+    url: URL;
+    header(name: string, value: string): void;
+}
+/** createApp({ auth: session }) with sign-in, sign-out and the CSRF token of the current session. */
+export interface Sessions extends AuthConfig {
+    /** Start a session for this user: sets the session and CSRF cookies. Returns the CSRF token to send with changes. */
+    signIn(ctx: SessionResponseContext, userId: string): Promise<{
+        csrfToken: string;
+    }>;
+    /** End the session: clears both cookies. */
+    signOut(ctx: SessionResponseContext): void;
+    /** The CSRF token of the request's session (to put in a form's _csrf field), or null without a valid session. */
+    csrfToken(req: Request): Promise<string | null>;
+}
+/** Signed cookie sessions with CSRF protection: createApp({ auth: sessions({ secret, user }) }). */
+export declare function sessions(options: SessionsOptions): Sessions;

package/dist/sessions.js

@@ -0,0 +1,172 @@
+import { safeEqual } from "./auth.js";
+import { InferloError } from "./errors.js";
+const DAY = 86_400_000;
+const SAFE_METHODS = new Set(["GET", "HEAD", "OPTIONS"]);
+const MAX_FORM_BYTES = 64 * 1024;
+const fix = 'Pass sessions({ secret: config.SESSION_SECRET, user: ({ userId }, { db }) => db.users.find(userId) }) with a secret of at least 32 random characters (openssl rand -base64 32).';
+/** Signed cookie sessions with CSRF protection: createApp({ auth: sessions({ secret, user }) }). */
+export function sessions(options) {
+    if (!options || typeof options !== "object")
+        throw new InferloError("IL6029", "sessions() needs { secret, user }.", { fix });
+    const secrets = typeof options.secret === "string" ? [options.secret] : Array.isArray(options.secret) ? [...options.secret] : [];
+    if (!secrets.length || secrets.some((s) => typeof s !== "string" || s.length < 32)) {
+        throw new InferloError("IL6029", "sessions() secret must be a string of at least 32 characters (or a list of them, newest first).", { fix });
+    }
+    if (typeof options.user !== "function")
+        throw new InferloError("IL6029", "sessions() needs a user({ userId }, { db }) function that loads the signed-in user.", { fix });
+    const maxAgeMs = options.maxAgeMs ?? 7 * DAY;
+    if (!Number.isInteger(maxAgeMs) || maxAgeMs < 60_000 || maxAgeMs > 400 * DAY) {
+        throw new InferloError("IL6029", "sessions() maxAgeMs must be a whole number of milliseconds from 60000 (1 minute) to 34560000000 (400 days).", { fix });
+    }
+    const cookie = options.cookie ?? {};
+    const name = cookie.name ?? "inferlo_session";
+    if (!/^[A-Za-z0-9!#$%&'*+\-.^_`|~]+$/.test(name))
+        throw new InferloError("IL6029", `sessions() cookie name "${name}" is not a valid cookie name.`, { fix: 'Use letters, digits, "-" and "_", such as "app_session".' });
+    if (cookie.sameSite !== undefined && cookie.sameSite !== "lax" && cookie.sameSite !== "strict") {
+        throw new InferloError("IL6029", 'sessions() cookie.sameSite must be "lax" or "strict".', { fix: 'Use sameSite: "lax" (the default) or "strict".' });
+    }
+    for (const key of ["domain", "path"]) {
+        const value = cookie[key];
+        if (value !== undefined && (typeof value !== "string" || !value || /[;,\s]/.test(value))) {
+            throw new InferloError("IL6029", `sessions() cookie.${key} must be a non-empty string without spaces, commas or semicolons.`, { fix });
+        }
+    }
+    const csrfName = `${name}_csrf`;
+    const sameSite = cookie.sameSite === "strict" ? "Strict" : "Lax";
+    const path = cookie.path ?? "/";
+    const keys = secrets.map((secret) => crypto.subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]));
+    const sign = async (key, text) => base64url(new Uint8Array(await crypto.subtle.sign("HMAC", await key, new TextEncoder().encode(text))));
+    const csrfFor = (sessionId) => sign(keys[0], `csrf.${sessionId}`);
+    const attributes = (url, httpOnly, maxAge) => {
+        const local = url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+        const secure = cookie.secure ?? !local;
+        return [`Path=${path}`, cookie.domain ? `Domain=${cookie.domain}` : "", `Max-Age=${maxAge}`, httpOnly ? "HttpOnly" : "", secure ? "Secure" : "", `SameSite=${sameSite}`].filter(Boolean).join("; ");
+    };
+    /** The verified session of a request, or null. */
+    const read = async (req) => {
+        const value = readCookie(req.headers.get("cookie"), name);
+        if (!value)
+            return null;
+        const [version, payload, signature, extra] = value.split(".");
+        if (version !== "v1" || !payload || !signature || extra !== undefined)
+            return null;
+        let valid = false;
+        for (const key of keys)
+            if (safeEqual(await sign(key, `v1.${payload}`), signature))
+                valid = true;
+        if (!valid)
+            return null;
+        try {
+            const parsed = JSON.parse(new TextDecoder().decode(unbase64url(payload)));
+            if (typeof parsed.u !== "string" || typeof parsed.s !== "string" || typeof parsed.i !== "number" || typeof parsed.e !== "number")
+                return null;
+            if (parsed.e <= Date.now())
+                return null;
+            return { data: { userId: parsed.u, issuedAt: parsed.i }, sessionId: parsed.s };
+        }
+        catch {
+            return null;
+        }
+    };
+    const session = {
+        async resolve(req, { db }) {
+            const current = await read(req);
+            if (!current)
+                return null;
+            if (!SAFE_METHODS.has(req.method.toUpperCase())) {
+                const sent = req.headers.get("x-csrf-token") ?? (await formField(req, "_csrf"));
+                if (!sent || !safeEqual(sent, await csrfFor(current.sessionId))) {
+                    throw new InferloError("IL3005", "Missing or invalid CSRF token.", {
+                        status: 403,
+                        fix: "Send the session's CSRF token in an X-CSRF-Token header (from session.signIn or the " + csrfName + " cookie) or a _csrf form field (from session.csrfToken(req)).",
+                    });
+                }
+            }
+            return (await options.user(current.data, { db, req })) ?? null;
+        },
+        roles: options.roles,
+        tenant: options.tenant,
+        async signIn(ctx, userId) {
+            if (typeof userId !== "string" || !userId)
+                throw new InferloError("IL6029", "session.signIn(ctx, userId) needs the user's id as a non-empty string.", { fix: "Call it after checking the password: await session.signIn(ctx, user.id)." });
+            if (!ctx || typeof ctx.header !== "function" || !(ctx.url instanceof URL))
+                throw new InferloError("IL6029", "session.signIn(ctx, userId) needs the route context.", { fix: "Pass the handler's context: route.post(\"/login\", ...).handle(async (ctx) => { await session.signIn(ctx, user.id) })." });
+            const now = Date.now();
+            const sessionId = base64url(crypto.getRandomValues(new Uint8Array(18)));
+            const payload = base64url(new TextEncoder().encode(JSON.stringify({ u: userId, s: sessionId, i: now, e: now + maxAgeMs })));
+            const value = `v1.${payload}.${await sign(keys[0], `v1.${payload}`)}`;
+            const csrfToken = await csrfFor(sessionId);
+            const seconds = Math.floor(maxAgeMs / 1000);
+            ctx.header("set-cookie", `${name}=${value}; ${attributes(ctx.url, true, seconds)}`);
+            ctx.header("set-cookie", `${csrfName}=${csrfToken}; ${attributes(ctx.url, false, seconds)}`);
+            return { csrfToken };
+        },
+        signOut(ctx) {
+            if (!ctx || typeof ctx.header !== "function" || !(ctx.url instanceof URL))
+                throw new InferloError("IL6029", "session.signOut(ctx) needs the route context.", { fix: "Pass the handler's context: session.signOut(ctx)." });
+            ctx.header("set-cookie", `${name}=; ${attributes(ctx.url, true, 0)}`);
+            ctx.header("set-cookie", `${csrfName}=; ${attributes(ctx.url, false, 0)}`);
+        },
+        async csrfToken(req) {
+            const current = await read(req);
+            return current ? csrfFor(current.sessionId) : null;
+        },
+    };
+    return Object.freeze(session);
+}
+function readCookie(header, name) {
+    if (!header)
+        return undefined;
+    for (const part of header.split(";")) {
+        const i = part.indexOf("=");
+        if (i > 0 && part.slice(0, i).trim() === name)
+            return part.slice(i + 1).trim();
+    }
+    return undefined;
+}
+/** A field of a URL-encoded form body, read from a copy of the request (at most 64 KiB) so the route can still read it. */
+async function formField(req, field) {
+    if (!(req.headers.get("content-type") ?? "").toLowerCase().includes("application/x-www-form-urlencoded"))
+        return null;
+    if (Number(req.headers.get("content-length") ?? "0") > MAX_FORM_BYTES)
+        return null;
+    // Cloned before req.body is touched: on Bun 1.3, a body stream read before clone() comes back empty.
+    const body = req.clone().body;
+    if (!body)
+        return null;
+    const reader = body.getReader();
+    const chunks = [];
+    let size = 0;
+    try {
+        while (size <= MAX_FORM_BYTES) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            chunks.push(value);
+            size += value.byteLength;
+        }
+    }
+    finally {
+        void reader.cancel().catch(() => { });
+    }
+    if (size > MAX_FORM_BYTES)
+        return null;
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return new URLSearchParams(new TextDecoder().decode(bytes)).get(field);
+}
+function base64url(bytes) {
+    let text = "";
+    for (const b of bytes)
+        text += String.fromCharCode(b);
+    return btoa(text).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function unbase64url(text) {
+    const padded = text.replace(/-/g, "+").replace(/_/g, "/") + "=".repeat((4 - (text.length % 4)) % 4);
+    return Uint8Array.from(atob(padded), (c) => c.charCodeAt(0));
+}
+//# sourceMappingURL=sessions.js.map

package/dist/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwD3C,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACzD,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AACjC,MAAM,GAAG,GAAG,iLAAiL,CAAC;AAE9L,oGAAoG;AACpG,MAAM,UAAU,QAAQ,CAAC,OAAwB;IAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,oCAAoC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7H,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,iGAAiG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/I,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,qFAAqF,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACzK,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,GAAG,GAAG,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,MAAM,IAAI,QAAQ,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;QAC7E,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,6GAA6G,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3J,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,iBAAiB,CAAC;IAC9C,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,2BAA2B,IAAI,+BAA+B,EAAE,EAAE,GAAG,EAAE,0DAA0D,EAAE,CAAC,CAAC;IACxN,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/F,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,uDAAuD,EAAE,EAAE,GAAG,EAAE,gDAAgD,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAU,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,qBAAqB,GAAG,mEAAmE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzI,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAE3J,MAAM,IAAI,GAAG,KAAK,EAAE,GAAuB,EAAE,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrK,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,QAAQ,SAAS,EAAE,CAAC,CAAC;IAE3E,MAAM,UAAU,GAAG,CAAC,GAAQ,EAAE,QAAiB,EAAE,MAAc,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC;QACvC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtM,CAAC,CAAC;IAEF,kDAAkD;IAClD,MAAM,IAAI,GAAG,KAAK,EAAE,GAAY,EAA4D,EAAE;QAC5F,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnF,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,MAAM,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC;QACjG,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAA2D,CAAC;YACpI,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC9I,IAAI,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YACxC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAa;QACxB,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;gBAChF,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;oBAChE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,gCAAgC,EAAE;wBACjE,MAAM,EAAE,GAAG;wBACX,GAAG,EAAE,sFAAsF,GAAG,QAAQ,GAAG,+DAA+D;qBACzK,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;QACjE,CAAC;QACD,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM;YACtB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,wEAAwE,EAAE,EAAE,GAAG,EAAE,0EAA0E,EAAE,CAAC,CAAC;YAC3O,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,YAAY,GAAG,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,sDAAsD,EAAE,EAAE,GAAG,EAAE,wHAAwH,EAAE,CAAC,CAAC;YACvS,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5H,MAAM,KAAK,GAAG,MAAM,OAAO,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,OAAO,EAAE,CAAC,EAAE,CAAC;YACvE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,IAAI,IAAI,KAAK,KAAK,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACpF,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,QAAQ,IAAI,SAAS,KAAK,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7F,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,GAAG;YACT,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,YAAY,GAAG,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,+CAA+C,EAAE,EAAE,GAAG,EAAE,mDAAmD,EAAE,CAAC,CAAC;YAC3N,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,IAAI,MAAM,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,QAAQ,MAAM,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG;YACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB,EAAE,IAAY;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2HAA2H;AAC3H,KAAK,UAAU,SAAS,CAAC,GAAY,EAAE,KAAa;IAClD,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtH,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,GAAG,cAAc;QAAE,OAAO,IAAI,CAAC;IACnF,qGAAqG;IACrG,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,cAAc,EAAE,CAAC;YAC9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QAC3B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,GAAG,cAAc;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpG,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/sveltekit.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Inferlo inside SvelteKit (2 and 3) server routes, without a runtime dependency on SvelteKit:
+ *
+ *   // src/routes/api/[...path]/+server.ts
+ *   import { toSvelteKitHandlers } from "@browserlessapi/inferlo/sveltekit";
+ *   import { app } from "$lib/server/inferlo";
+ *
+ *   export const { GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS, fallback } = toSvelteKitHandlers(app, { prefix: "/api" });
+ *
+ *   // src/hooks.server.ts: event.locals.ai in load functions, form actions and +server.ts files
+ *   import { inferloAI } from "@browserlessapi/inferlo/sveltekit";
+ *   export const handle = inferloAI(ai);
+ *
+ * It never loads the router, database or jobs code.
+ */
+import type { AI } from "./ai/index.ts";
+import type { App as InferloApp } from "./app.ts";
+declare global {
+    namespace App {
+        interface Locals {
+            /** The AI client from the inferloAI() handle hook of @browserlessapi/inferlo/sveltekit. */
+            ai: AI;
+        }
+    }
+}
+/** The parts of a SvelteKit RequestEvent Inferlo uses. */
+export interface SvelteKitEventLike {
+    /** The incoming Web request. */
+    request: Request;
+    /** The client IP from the adapter; called once per request, and errors (some adapters have none) are ignored. */
+    getClientAddress?: () => string;
+    /** event.locals, where the inferloAI() hook puts ai. */
+    locals: object;
+}
+/** A SvelteKit request handler, to export from a +server.ts file. */
+export type SvelteKitRequestHandler = (event: SvelteKitEventLike) => Promise<Response>;
+/** One request handler per HTTP method and a fallback for every other method, to export from +server.ts. */
+export interface SvelteKitHandlers {
+    GET: SvelteKitRequestHandler;
+    POST: SvelteKitRequestHandler;
+    PUT: SvelteKitRequestHandler;
+    PATCH: SvelteKitRequestHandler;
+    DELETE: SvelteKitRequestHandler;
+    HEAD: SvelteKitRequestHandler;
+    OPTIONS: SvelteKitRequestHandler;
+    fallback: SvelteKitRequestHandler;
+}
+export interface SvelteKitHandlersOptions {
+    /**
+     * The URL path of the route folder, removed before the app routes the request: "/api" for
+     * src/routes/api/[...path]/+server.ts. Requests outside it keep their path. Include SvelteKit's paths.base if set.
+     */
+    prefix?: string;
+}
+/** A SvelteKit handle hook: export const handle = inferloAI(ai), or sequence(inferloAI(ai), ...) to combine it. */
+export type SvelteKitHandle = (input: {
+    event: {
+        locals: object;
+    };
+    resolve: (event: any, opts?: any) => Response | Promise<Response>;
+}) => Response | Promise<Response>;
+/**
+ * Request handlers that run a whole Inferlo app (routes, auth, validation, rate limits, OpenAPI and MCP) from a
+ * SvelteKit rest route: export const { GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS, fallback } = toSvelteKitHandlers(app).
+ */
+export declare function toSvelteKitHandlers(app: Pick<InferloApp<any>, "fetch">, options?: SvelteKitHandlersOptions): SvelteKitHandlers;
+/**
+ * A SvelteKit handle hook that puts an AI client (createAI(...) or an Inferlo app's app.ai) on every request as
+ * event.locals.ai, for load functions, form actions and +server.ts files: export const handle = inferloAI(ai) in
+ * src/hooks.server.ts, or sequence(inferloAI(ai), yourHandle).
+ */
+export declare function inferloAI(ai: AI): SvelteKitHandle;

package/dist/sveltekit.js

@@ -0,0 +1,68 @@
+import { assertAIClient } from "./ai-client.js";
+import { clientIps } from "./client-ip.js";
+import { InferloError } from "./errors.js";
+import { normalizePrefix, stripPrefix } from "./serve.js";
+const fix = 'Pass the app from createApp and the route folder\'s path: export const { GET, POST, fallback } = toSvelteKitHandlers(app, { prefix: "/api" }).';
+/**
+ * Request handlers that run a whole Inferlo app (routes, auth, validation, rate limits, OpenAPI and MCP) from a
+ * SvelteKit rest route: export const { GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS, fallback } = toSvelteKitHandlers(app).
+ */
+export function toSvelteKitHandlers(app, options = {}) {
+    if (!app || typeof app.fetch !== "function") {
+        throw new InferloError("IL5022", "toSvelteKitHandlers() needs an Inferlo app (the value returned by createApp).", { fix });
+    }
+    if (options === null || typeof options !== "object" || (options.prefix !== undefined && (typeof options.prefix !== "string" || !options.prefix.startsWith("/")))) {
+        throw new InferloError("IL5022", 'toSvelteKitHandlers() prefix must be a path that starts with /, such as "/api".', { fix });
+    }
+    const prefix = normalizePrefix(options.prefix);
+    const handle = async (event) => {
+        const incoming = event?.request;
+        if (!(incoming instanceof Request)) {
+            throw new InferloError("IL5022", "toSvelteKitHandlers()'s handlers were called with something that is not a SvelteKit request event.", {
+                fix: "Export them from a +server.ts file so SvelteKit calls them: export const { GET, POST, fallback } = toSvelteKitHandlers(app, { prefix: \"/api\" }).",
+            });
+        }
+        let request = incoming;
+        if (prefix) {
+            const url = new URL(incoming.url);
+            const stripped = stripPrefix(url.pathname, prefix);
+            if (stripped !== null) {
+                url.pathname = stripped;
+                const hasBody = incoming.body !== null && incoming.method !== "GET" && incoming.method !== "HEAD";
+                const init = {
+                    method: incoming.method,
+                    headers: incoming.headers,
+                    body: hasBody ? incoming.body : undefined,
+                    signal: incoming.signal,
+                    redirect: incoming.redirect,
+                };
+                if (hasBody)
+                    init.duplex = "half";
+                request = new Request(url, init);
+            }
+        }
+        try {
+            const ip = event.getClientAddress?.();
+            if (typeof ip === "string" && ip)
+                clientIps.set(request, ip);
+        }
+        catch {
+            // The adapter cannot tell the client address (for example while prerendering).
+        }
+        return app.fetch(request);
+    };
+    return Object.freeze({ GET: handle, POST: handle, PUT: handle, PATCH: handle, DELETE: handle, HEAD: handle, OPTIONS: handle, fallback: handle });
+}
+/**
+ * A SvelteKit handle hook that puts an AI client (createAI(...) or an Inferlo app's app.ai) on every request as
+ * event.locals.ai, for load functions, form actions and +server.ts files: export const handle = inferloAI(ai) in
+ * src/hooks.server.ts, or sequence(inferloAI(ai), yourHandle).
+ */
+export function inferloAI(ai) {
+    assertAIClient(ai, 'Pass createAI({ providers, models }) from "@browserlessapi/inferlo/ai", or an Inferlo app\'s app.ai: export const handle = inferloAI(ai).');
+    return ({ event, resolve }) => {
+        event.locals.ai = ai;
+        return resolve(event);
+    };
+}
+//# sourceMappingURL=sveltekit.js.map

package/dist/sveltekit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sveltekit.js","sourceRoot":"","sources":["../src/sveltekit.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAmD1D,MAAM,GAAG,GAAG,gJAAgJ,CAAC;AAE7J;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAmC,EAAE,UAAoC,EAAE;IAC7G,IAAI,CAAC,GAAG,IAAI,OAAQ,GAA2B,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,+EAA+E,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACjK,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,iFAAiF,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/H,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/C,MAAM,MAAM,GAA4B,KAAK,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAI,KAAwC,EAAE,OAAO,CAAC;QACpE,IAAI,CAAC,CAAC,QAAQ,YAAY,OAAO,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,oGAAoG,EAAE;gBACrI,GAAG,EAAE,oJAAoJ;aAC1J,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,GAAG,QAAQ,CAAC;QACvB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC;gBAClG,MAAM,IAAI,GAAsC;oBAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;iBAC5B,CAAC;gBACF,IAAI,OAAO;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBAClC,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACtC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE;gBAAE,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;QACjF,CAAC;QACD,OAAQ,GAAsC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AACnJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,EAAM;IAC9B,cAAc,CAAC,EAAE,EAAE,2IAA2I,CAAC,CAAC;IAChK,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;QAC3B,KAAK,CAAC,MAAsB,CAAC,EAAE,GAAG,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC;AACJ,CAAC"}