@browserlessapi/inferlo 0.6.0 → 0.8.0

package/dist/files.js

@@ -0,0 +1,168 @@
+/**
+ * File uploads: t.file() fields in multipart/form-data route bodies.
+ *
+ *   route.post("/avatar", { body: t.object({ avatar: t.file({ maxBytes: 2_000_000, types: ["image/png", "image/jpeg"] }) }) })
+ *     .handle(async ({ body }) => ({ name: body.avatar.name, size: body.avatar.size }))
+ *
+ * The body is read with a byte limit (maxBodySize plus every file field's maxBytes), so a too large upload is cut off
+ * while it streams in, and every size, type and content check runs before the handler.
+ */
+import { InferloError } from "./errors.js";
+import { containsFile } from "./schema.js";
+/** Where a t.file() is allowed in a route, checked once by createApp. */
+export function checkFileFields(route) {
+    const options = route.options;
+    const where = `${route.method} ${route.path}`;
+    for (const key of ["query", "params", "response", "message"]) {
+        const schema = options[key];
+        if (schema && containsFile(schema)) {
+            throw new InferloError("IL1004", `Route ${where} uses t.file() in its ${key} schema; files can only be sent in a request body.`, {
+                fix: "Move the t.file() field to body: t.object({ file: t.file() }); the client sends it as multipart/form-data.",
+            });
+        }
+    }
+    const body = options.body;
+    if (!body || !containsFile(body))
+        return;
+    if (body.def.kind !== "object") {
+        throw new InferloError("IL1004", `Route ${where}: a body with files must be t.object({ ... }) with t.file() fields.`, {
+            fix: "Use body: t.object({ file: t.file(), title: t.string() }).",
+        });
+    }
+    for (const [name, field] of Object.entries(body.def.shape ?? {})) {
+        if (!containsFile(field))
+            continue;
+        const d = field.def;
+        if (d.kind === "file")
+            continue;
+        if (d.kind === "array" && d.item.def.kind === "file") {
+            if (d.max === undefined) {
+                throw new InferloError("IL1004", `Route ${where}: the file list "${name}" has no .max(n), so the size of an upload would have no limit.`, {
+                    fix: `Limit the number of files: ${name}: t.array(t.file({ maxBytes: 5_000_000 })).max(10).`,
+                });
+            }
+            continue;
+        }
+        throw new InferloError("IL1004", `Route ${where}: "${name}" nests t.file() inside another schema; multipart form fields are flat.`, {
+            fix: `Make it a top-level field of the body: ${name}: t.file(), or ${name}: t.array(t.file()).max(10) for several files.`,
+        });
+    }
+    if (options.tool) {
+        throw new InferloError("IL1004", `Route ${where} takes files, so it cannot be an MCP or AI tool (tools send JSON).`, {
+            fix: "Remove tool from this route, or add a route that takes a URL or text instead of the file for agents.",
+        });
+    }
+}
+/** Bytes the file fields of a body may add on top of maxBodySize (0 without files). */
+export function fileBudget(body) {
+    if (!body || body.def.kind !== "object")
+        return 0;
+    let total = 0;
+    for (const field of Object.values(body.def.shape ?? {})) {
+        const d = field.def;
+        if (d.kind === "file")
+            total += d.max ?? 0;
+        else if (d.kind === "array" && d.item.def.kind === "file")
+            total += (d.item.def.max ?? 0) * (d.max ?? 0);
+    }
+    return total;
+}
+export function isMultipart(contentType) {
+    return contentType.toLowerCase().startsWith("multipart/form-data");
+}
+/**
+ * The fields of a multipart/form-data body as an object for the body schema. Repeated fields become lists, a single
+ * value of a list field becomes a one-item list, empty file inputs (no file chosen) count as left out, and the
+ * sessions() CSRF field _csrf is dropped.
+ */
+export async function readMultipart(bytes, contentType, body) {
+    const invalid = () => new InferloError("IL2015", "Request body is not valid multipart/form-data.", {
+        status: 400,
+        fix: "Send a FormData body without setting Content-Type yourself (fetch adds the boundary), or a form with enctype=\"multipart/form-data\".",
+    });
+    if (bytes.byteLength === 0)
+        return {};
+    // Runtimes differ on bodies that are not multipart at all (some read them as an empty form), so the
+    // boundary is checked here: the body starts with it (after an optional preamble) and ends with its close.
+    const boundary = /boundary=(?:"([^"]+)"|([^;\s]+))/i.exec(contentType);
+    const delimiter = boundary ? `--${boundary[1] ?? boundary[2]}` : undefined;
+    const latin1 = new TextDecoder("latin1");
+    const head = latin1.decode(bytes.subarray(0, 1024));
+    const tail = latin1.decode(bytes.subarray(Math.max(0, bytes.byteLength - 1024)));
+    if (!delimiter || !head.includes(delimiter) || !tail.trimEnd().endsWith(`${delimiter}--`))
+        throw invalid();
+    let form;
+    try {
+        form = await new Response(bytes, { headers: { "content-type": contentType } }).formData();
+    }
+    catch {
+        throw invalid();
+    }
+    const shape = body.def.kind === "object" ? (body.def.shape ?? {}) : {};
+    const out = {};
+    for (const [key, value] of form.entries()) {
+        if (key === "_csrf")
+            continue;
+        // A file input with no file chosen is sent as an empty part with an empty filename, which some runtimes read
+        // as an empty file and others as an empty string.
+        if (typeof value !== "string" ? value.size === 0 && !value.name : value === "" && shape[key] && containsFile(shape[key]))
+            continue;
+        const current = out[key];
+        if (current === undefined)
+            out[key] = value;
+        else if (Array.isArray(current))
+            current.push(value);
+        else
+            out[key] = [current, value];
+    }
+    for (const [key, value] of Object.entries(out)) {
+        if (shape[key]?.def.kind === "array" && !Array.isArray(value))
+            out[key] = [value];
+    }
+    return out;
+}
+// The first bytes of the types whose content is checked against the declared type.
+const SIGNATURES = {
+    "image/png": (b) => starts(b, [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]),
+    "image/jpeg": (b) => starts(b, [0xff, 0xd8, 0xff]),
+    "image/gif": (b) => ascii(b, 0, "GIF87a") || ascii(b, 0, "GIF89a"),
+    "image/webp": (b) => ascii(b, 0, "RIFF") && ascii(b, 8, "WEBP"),
+    "application/pdf": (b) => ascii(b, 0, "%PDF-"),
+    "application/zip": (b) => starts(b, [0x50, 0x4b, 0x03, 0x04]) || starts(b, [0x50, 0x4b, 0x05, 0x06]),
+};
+function starts(bytes, prefix) {
+    return prefix.every((b, i) => bytes[i] === b);
+}
+function ascii(bytes, offset, text) {
+    for (let i = 0; i < text.length; i++)
+        if (bytes[offset + i] !== text.charCodeAt(i))
+            return false;
+    return true;
+}
+/** Media types whose first bytes Inferlo checks when a t.file() field limits its types. */
+export const CHECKED_FILE_TYPES = Object.keys(SIGNATURES);
+/**
+ * Checks that files of a field with types declare a type whose content matches (a PNG is a PNG), so a client cannot
+ * pass a script off as an image by naming its type. Returns validation issues; empty when every file passes.
+ */
+export async function checkFileContents(body, value) {
+    const issues = [];
+    for (const [key, field] of Object.entries(body.def.shape ?? {})) {
+        const fileDef = field.def.kind === "file" ? field.def : field.def.kind === "array" && field.def.item.def.kind === "file" ? field.def.item.def : undefined;
+        if (!fileDef?.fileTypes?.length)
+            continue;
+        const files = Array.isArray(value[key]) ? value[key] : value[key] === undefined || value[key] === null ? [] : [value[key]];
+        for (const [i, file] of files.entries()) {
+            const declared = file.type.split(";")[0].trim().toLowerCase();
+            const matches = SIGNATURES[declared];
+            if (!matches)
+                continue;
+            const head = new Uint8Array(await file.slice(0, 16).arrayBuffer());
+            if (!matches(head)) {
+                issues.push({ path: Array.isArray(value[key]) ? [key, i] : [key], code: "file_content", message: `File content does not match its type ${declared}.` });
+            }
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=files.js.map

package/dist/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAA8B,MAAM,aAAa,CAAC;AAEvE,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,KAAwD;IACtF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;IACzD,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAA0B,CAAC;QACrD,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,SAAS,KAAK,yBAAyB,GAAG,oDAAoD,EAAE;gBAC/H,GAAG,EAAE,4GAA4G;aAClH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAA6B,CAAC;IACnD,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO;IACzC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,SAAS,KAAK,qEAAqE,EAAE;YACpH,GAAG,EAAE,4DAA4D;SAClE,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAChC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAK,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,SAAS,KAAK,oBAAoB,IAAI,iEAAiE,EAAE;oBACxI,GAAG,EAAE,8BAA8B,IAAI,qDAAqD;iBAC7F,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,SAAS,KAAK,MAAM,IAAI,yEAAyE,EAAE;YAClI,GAAG,EAAE,0CAA0C,IAAI,kBAAkB,IAAI,gDAAgD;SAC1H,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,SAAS,KAAK,oEAAoE,EAAE;YACnH,GAAG,EAAE,sGAAsG;SAC5G,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,IAA2B;IACpD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;aACtC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAK,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,WAAW,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAiB,EAAE,WAAmB,EAAE,IAAe;IACzF,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,IAAI,YAAY,CAAC,QAAQ,EAAE,gDAAgD,EAAE;QAC3E,MAAM,EAAE,GAAG;QACX,GAAG,EAAE,uIAAuI;KAC7I,CAAC,CAAC;IACL,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,oGAAoG;IACpG,0GAA0G;IAC1G,MAAM,QAAQ,GAAG,mCAAmC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,SAAS,IAAI,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAC3G,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,QAAQ,CAAC,KAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,IAAI,GAAG,KAAK,OAAO;YAAE,SAAS;QAC9B,6GAA6G;QAC7G,kDAAkD;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QACnI,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;aACvC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAChD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,GAA+C;IAC7D,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/E,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;IAClE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAC/D,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;IAC9C,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;CACrG,CAAC;AAEF,SAAS,MAAM,CAAC,KAAiB,EAAE,MAAgB;IACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB,EAAE,MAAc,EAAE,IAAY;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,kBAAkB,GAAsB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAE7E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAe,EAAE,KAA8B;IACrF,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,IAAK,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5J,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM;YAAE,SAAS;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAS,CAAC,CAAC;QAC/I,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,wCAAwC,QAAQ,GAAG,EAAE,CAAC,CAAC;YAC1J,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -13,41 +13,59 @@ export type { Module, ModuleOptions, AnyModule, ModuleModels } from "./module.ts
 export { apiVersion } from "./api-version.ts";
 export type { ApiVersionOptions } from "./api-version.ts";
 export { route, isRoute } from "./route.ts";
-export type { Register, Context, RouteDef, RouteOptions, Auth, Method, ToolOptions, AppUser, AppDb, AppPermission } from "./route.ts";
+export type { Register, Context, RouteDef, RouteInput, RouteOptions, Auth, Method, ToolOptions, AppUser, AppDb, AppPermission, Socket, SocketContext, SocketRouteOptions } from "./route.ts";
 export { t, Schema, ObjectSchema, ArraySchema, RefSchema, ValidationError, toJSONSchema } from "./schema.ts";
-export type { Infer, InferInput, Issue, JSONSchema, ParseResult, Shape, AnySchema } from "./schema.ts";
+export type { Infer, InferInput, Issue, JSONSchema, ParseResult, Shape, AnySchema, FileOptions } from "./schema.ts";
 export { model, Model, columnName } from "./model.ts";
-export type { Row, CreateInput, UpdateInput, AnyModel } from "./model.ts";
+export type { Row, CreateInput, UpdateInput, AnyModel, ModelOptions } from "./model.ts";
 export { memory } from "./db/memory.ts";
 export { createDb, Table } from "./db/table.ts";
-export type { Db, Where, OrderBy, FindManyOptions, FindOptions, PaginateOptions, Page, Include, Relations, ReverseRelations, WithInclude } from "./db/table.ts";
+export type { Db, PgClient, Where, OrderBy, FindManyOptions, FindOptions, PaginateOptions, Page, Include, Relations, ReverseRelations, WithInclude } from "./db/table.ts";
 export type { Adapter, Condition, Query, DbRecord } from "./db/types.ts";
 export { planMigration, applyMigrations } from "./db/migrate.ts";
 export type { ApplyMigrationsOptions, Migration, MigrationPlan, MigrationSnapshot, MigrationSnapshotColumn, MigrationSnapshotV1, PlanMigrationOptions, } from "./db/migrate.ts";
-export { createAI, cosineSimilarity, extractJson, openai, openaiCompatible, anthropic, gemini, ollama, mockProvider, ProviderError } from "./ai/index.ts";
+export { createAI, cosineSimilarity, extractJson, openai, openaiCompatible, anthropic, gemini, ollama, mockProvider, ProviderError, uiChatBody, fromUIMessages } from "./ai/index.ts";
 export { tool, isTool, ToolBuilder } from "./ai/tool.ts";
+export { aiSdk } from "./ai/ai-sdk.ts";
+export type { AISdkProvider, AISdkLanguageModel, AISdkEmbeddingModel, AISdkOptions } from "./ai/ai-sdk.ts";
 export type { ToolDef, FunctionToolOptions, ToolContext } from "./ai/tool.ts";
-export type { AI, AIConfig, GenerateOptions, GenerateResult, StreamResult, Usage, Pricing, Provider, ProviderRequest, ProviderResponse, Image, ImageMediaType, Message, MockReply, Step, ToolCall, ToolCallResult, ToolSpec, } from "./ai/index.ts";
+export type { AI, AIConfig, GenerateOptions, GenerateResult, StreamResult, StreamResponseInit, UIChatMessage, Usage, Pricing, Provider, ProviderRequest, ProviderResponse, Image, ImageMediaType, Message, MockReply, Step, ToolCall, ToolCallResult, ToolSpec, } from "./ai/index.ts";
 export type { RateLimit, RateLimitConfig } from "./rate-limit.ts";
+export type { RedisClient } from "./redis.ts";
 export { job, isJob, retryDelayMs } from "./jobs.ts";
 export { cron, isCron } from "./cron.ts";
+export { event, isEvent, on } from "./events.ts";
+export type { AppEvents, EventDef, EventMessage, EventOptions, EventPayload, Events, EventsConfig, EventTransport, OnDef, PublishedEvent, PublishOptions } from "./events.ts";
 export type { CronDef } from "./cron.ts";
 export type { JobTraceContext } from "./tracing.ts";
 export type { JobDef, JobOptions, JobContext, JobInput, JobRecord, JobStatus, JobSource, JobQueueConfig, Jobs, AppJobs, EnqueueOptions, RunResult, Worker } from "./jobs.ts";
 export { AuditLog, auditChanges } from "./audit.ts";
 export type { Audit, AuditEntry, AuditChange } from "./audit.ts";
 export type { Cache, CacheConfig, CacheSetOptions, RouteCache } from "./cache.ts";
+export { memoryStorage } from "./storage.ts";
+export type { Storage, StorageStore, StoredFile, StoragePutOptions } from "./storage.ts";
+export { diskStorage } from "./disk-storage.ts";
+export type { DiskStorageOptions } from "./disk-storage.ts";
 export { permissions, isPermissions } from "./permissions.ts";
 export type { Permissions, PermissionRule, PermissionInput } from "./permissions.ts";
 export { bearer, hashToken, createToken, hashPassword, verifyPassword, safeEqual } from "./auth.ts";
 export { sessions } from "./sessions.ts";
+export { jwt } from "./jwt.ts";
+export { oidc } from "./oidc.ts";
+export type { Oidc, OidcOptions, OidcClaims, OidcTokens } from "./oidc.ts";
+export type { JwtOptions, JwtClaims, JwtAlgorithm } from "./jwt.ts";
 export type { TracingConfig, OtelApi, OtelSpan } from "./tracing.ts";
 export type { Sessions, SessionsOptions, SessionData, SessionCookieOptions, SessionResponseContext } from "./sessions.ts";
 export { env, setEnv } from "./env.ts";
 export { config } from "./config.ts";
 export type { Config, ConfigOptions } from "./config.ts";
 export { InferloError, httpError, notFound, forbidden, badRequest, docsUrl } from "./errors.ts";
-export { serve, toNodeHandler, fromNodeRequest } from "./serve.ts";
-export type { ServeOptions, Server, NodeRequest, NodeResponse, NodeHandler, NodeHandlerOptions, FromNodeRequestOptions } from "./serve.ts";
+export { serviceClient, ServiceCallError } from "./service-client.ts";
+export type { ServiceClient, ServiceClientOptions, CallInput, CallOptions, CallContext, CallResult, TypedRoute } from "./service-client.ts";
+export { serve, toNodeHandler, toNodeUpgradeHandler, fromNodeRequest } from "./serve.ts";
+export { bunWebSocket } from "./websocket.ts";
+export type { Sockets, AppSockets, BroadcastOptions } from "./sockets.ts";
+export type { SocketsConfig, RedisSubscriber } from "./redis-sockets.ts";
+export type { ServeOptions, Server, NodeRequest, NodeResponse, NodeHandler, NodeHandlerOptions, FromNodeRequestOptions, NodeUpgradeHandler, NodeSocket } from "./serve.ts";
 export { INFERLO_VERSION } from "./describe.ts";
 export type { AppDescription } from "./describe.ts";

package/dist/index.js

@@ -11,17 +11,25 @@ export { model, Model, columnName } from "./model.js";
 export { memory } from "./db/memory.js";
 export { createDb, Table } from "./db/table.js";
 export { planMigration, applyMigrations } from "./db/migrate.js";
-export { createAI, cosineSimilarity, extractJson, openai, openaiCompatible, anthropic, gemini, ollama, mockProvider, ProviderError } from "./ai/index.js";
+export { createAI, cosineSimilarity, extractJson, openai, openaiCompatible, anthropic, gemini, ollama, mockProvider, ProviderError, uiChatBody, fromUIMessages } from "./ai/index.js";
 export { tool, isTool, ToolBuilder } from "./ai/tool.js";
+export { aiSdk } from "./ai/ai-sdk.js";
 export { job, isJob, retryDelayMs } from "./jobs.js";
 export { cron, isCron } from "./cron.js";
+export { event, isEvent, on } from "./events.js";
 export { AuditLog, auditChanges } from "./audit.js";
+export { memoryStorage } from "./storage.js";
+export { diskStorage } from "./disk-storage.js";
 export { permissions, isPermissions } from "./permissions.js";
 export { bearer, hashToken, createToken, hashPassword, verifyPassword, safeEqual } from "./auth.js";
 export { sessions } from "./sessions.js";
+export { jwt } from "./jwt.js";
+export { oidc } from "./oidc.js";
 export { env, setEnv } from "./env.js";
 export { config } from "./config.js";
 export { InferloError, httpError, notFound, forbidden, badRequest, docsUrl } from "./errors.js";
-export { serve, toNodeHandler, fromNodeRequest } from "./serve.js";
+export { serviceClient, ServiceCallError } from "./service-client.js";
+export { serve, toNodeHandler, toNodeUpgradeHandler, fromNodeRequest } from "./serve.js";
+export { bunWebSocket } from "./websocket.js";
 export { INFERLO_VERSION } from "./describe.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAOrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG5C,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG7G,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGtD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAWjE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC1J,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAwBzD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAIzC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAGpD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACpG,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAOrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG5C,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG7G,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGtD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAWjE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACtL,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AA4BvC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAKjD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAGpD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACpG,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAKjC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEtE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAI9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/dist/jobs.d.ts

@@ -13,9 +13,12 @@
 import type { AI } from "./ai/index.ts";
 import type { Audit } from "./audit.ts";
 import type { Cache } from "./cache.ts";
+import { type Storage } from "./storage.ts";
 import { type CronDef } from "./cron.ts";
 import type { Adapter } from "./db/types.ts";
+import { type AppEvents, type EventTransport, type Events, type OnDef } from "./events.ts";
 import type { AppDb } from "./route.ts";
+import { type SocketHub, type Sockets } from "./sockets.ts";
 import { type AnySchema, type Infer, type InferInput } from "./schema.ts";
 import type { JobTraceContext, JobTracing } from "./tracing.ts";
 export interface JobOptions<I extends AnySchema> {
@@ -33,12 +36,23 @@ export interface JobContext<Input> {
     ai: AI;
     /** Enqueue follow-up jobs. */
     jobs: Jobs;
+    /** Publish events: await events.publish(orderPaid, { orderId }) queues the jobs subscribed with on(event, job). */
+    events: Events;
     /** The app cache, the same as ctx.cache in routes and app.cache. */
     cache: Cache;
+    /** Files (createApp({ storage })), the same as ctx.storage in routes and app.storage. */
+    storage: Storage;
+    /** Send to WebSocket rooms of this process (the job's tenant's rooms with a tenant): await sockets.broadcast(room, data). */
+    sockets: Sockets;
     /** Job id. */
     id: string;
     /** 1 on the first run, 2 on the first retry, and so on. */
     attempt: number;
+    /**
+     * The tenant the job works for (the tenant of the request or job that queued it, or enqueue's tenantId), or null.
+     * ctx.db is scoped to it, and jobs and events queued from this job keep it.
+     */
+    tenantId: string | null;
     /**
      * Write an audit log entry (needs AuditLog in createApp({ models })). Jobs have no signed-in user: pass the
      * userId of the user who asked for the work, or leave it out for work the system does on its own.
@@ -58,6 +72,11 @@ export type JobInput<J> = J extends JobDef<infer I, any> ? I : never;
 export interface EnqueueOptions {
     /** Run no earlier than this time. Default: now. */
     runAt?: Date;
+    /**
+     * The tenant the job works for: its ctx.db is scoped to it (tenant-scoped models). Default: the tenant of the
+     * request or job that enqueues it, none from app.jobs. Pass null to queue it without a tenant.
+     */
+    tenantId?: string | null;
 }
 export type JobStatus = "pending" | "running" | "done" | "failed";
 export interface JobRecord {
@@ -76,6 +95,8 @@ export interface JobRecord {
     lastError?: string;
     /** With createApp({ tracing }): the trace (W3C traceparent and tracestate) of the request or job that enqueued it, which its runs continue. */
     trace?: JobTraceContext;
+    /** The tenant the job works for (multi-tenancy): its ctx.db is scoped to it. */
+    tenantId?: string;
     createdAt: Date;
     updatedAt: Date;
 }
@@ -87,8 +108,9 @@ export interface JobQueueConfig {
     /**
      * Where queued jobs are kept. "memory" (default): in this process, for development and tests.
      * "database": in the inferlo_jobs table of the app's Postgres database, shared by every instance.
+     * "redis": in the Redis of createApp({ redis }), shared by every instance.
      */
-    store?: "memory" | "database";
+    store?: "memory" | "database" | "redis";
 }
 /** Where queued jobs are kept. */
 export interface JobStore {
@@ -98,7 +120,7 @@ export interface JobStore {
     claim(now: Date, limit: number, names: readonly string[]): Promise<JobRecord[]>;
     update(id: string, patch: Partial<Pick<JobRecord, "status" | "runAt" | "lastError">>): Promise<void>;
     get(id: string): Promise<JobRecord | null>;
-    /** Record that a running job is still alive (database store), so it is not picked up again as stuck. */
+    /** Record that a running job is still alive (database and Redis stores), so it is not picked up again as stuck. */
     touch?(id: string): Promise<void>;
 }
 export interface RunResult {
@@ -120,14 +142,17 @@ export interface AppJobs extends Jobs {
     /** The registered crons: cron(schedule, job) values in createApp({ jobs }). */
     readonly crons: readonly CronDef[];
     /** Where queued jobs are kept (createApp({ jobQueue: { store } })). */
-    readonly queue: "memory" | "database";
+    readonly queue: "memory" | "database" | "redis";
     /** A queued job by id, or null. */
     get(id: string): Promise<JobRecord | null>;
     /** Run every job that is due now (or at options.now), one after another, including follow-ups they enqueue, then return. For tests and scripts. */
     runDue(options?: {
         now?: Date;
     }): Promise<RunResult>;
-    /** Run due jobs in this process every pollMs (default 1000) until stop() is called. Also queues each cron's job at every tick after the start. */
+    /**
+     * Run due jobs in this process every pollMs (default 1000) until stop() is called. Also queues each cron's job at
+     * every tick after the start, and with an events transport, the jobs of the events it receives.
+     */
     start(options?: {
         pollMs?: number;
     }): Worker;
@@ -146,13 +171,15 @@ export declare class JobBuilder<I extends AnySchema> {
 /** Define a background job: job("send-email", { input: t.object({ to: t.email() }) }).handle(fn). */
 export declare function job<I extends AnySchema>(name: string, options: JobOptions<I>): JobBuilder<I>;
 export declare function isJob(value: unknown): value is JobDef;
-/** Anything that contains jobs: a job, a cron, an array, or a module (import * as jobs from "./jobs.ts"). */
-export type JobSource = JobDef | CronDef | readonly JobSource[] | {
+/** Anything that contains jobs: a job, a cron, an event subscription (on), an array, or a module (import * as jobs from "./jobs.ts"). */
+export type JobSource = JobDef | CronDef | OnDef | readonly JobSource[] | {
     readonly [name: string]: unknown;
 };
 /** The jobs and crons in createApp({ jobs }). A cron's job is registered with it. */
 export declare function collectJobs(sources: readonly JobSource[] | undefined): JobDef[];
 export declare function collectCrons(sources: readonly JobSource[] | undefined): CronDef[];
+/** The event subscriptions, on(event, job), in createApp({ jobs }). */
+export declare function collectSubscriptions(sources: readonly JobSource[] | undefined): OnDef[];
 /** Jobs kept in this process. They are lost when it stops, so use it for development and tests. */
 export declare function memoryJobStore(): JobStore;
 /** A running job whose worker has not reported for this long is treated as stuck (its process stopped) and run again. */
@@ -168,20 +195,24 @@ export declare const STOPPED_MESSAGE = "The worker stopped while running this jo
 export declare function databaseJobStore(adapter: Adapter, options?: {
     staleAfterMs?: number;
 }): JobStore;
-/** Pick the job store for createApp({ jobQueue }). Raises IL6011 for an unknown store, IL6012 for "database" without Postgres. */
-export declare function jobStoreFor(config: JobQueueConfig | undefined, adapter: Adapter): JobStore;
+export declare function jobStoreFor(config: JobQueueConfig | undefined, adapter: Adapter, redis?: () => JobStore): JobStore;
 export interface JobRuntime {
     db: AppDb;
     ai: AI;
     cache: Cache;
+    /** Files (app.storage). Default: none (ctx.storage throws IL6037). */
+    storage?: Storage;
+    /** WebSocket rooms (app.sockets). */
+    sockets?: SocketHub;
     /** Builds ctx.audit for one run. */
     audit(job: {
         name: string;
         id: string;
+        tenantId: string | null;
     }): Audit;
     store: JobStore;
     /** Name of the store, shown as app.jobs.queue. Default "memory". */
-    queue?: "memory" | "database";
+    queue?: "memory" | "database" | "redis";
     /** How often a running job is reported alive to stores that support it. Default HEARTBEAT_MS. */
     heartbeatMs?: number;
     logger: {
@@ -192,10 +223,25 @@ export interface JobRuntime {
     onRun?(name: string, outcome: keyof RunResult, durationMs: number): void;
     /** With createApp({ tracing }): a span per attempt that continues the trace the job was enqueued in. */
     tracing?: JobTracing;
+    /** With createApp({ events: { transport } }): carries published events between services. */
+    eventTransport?: EventTransport;
 }
 /** app.jobs plus what the framework tests reach directly. */
 export interface InternalJobs extends AppJobs {
     /** Queue the job of each cron's latest tick in (from, to]. */
     queueCrons(from: Date, to: Date): Promise<void>;
+    /** app.events: publishing queues the jobs subscribed with on(event, job). */
+    readonly events: AppEvents;
 }
-export declare function createJobs(list: readonly JobDef[], runtime: JobRuntime, crons?: readonly CronDef[]): InternalJobs;
+export declare function createJobs(list: readonly JobDef[], runtime: JobRuntime, crons?: readonly CronDef[], subscriptions?: readonly OnDef[]): InternalJobs;
+/**
+ * ctx.jobs and ctx.events for one tenant: jobs and events queued through them carry the tenant unless the call
+ * names another (tenantId) or none (null). Internal: used for requests and jobs with a tenant.
+ */
+export declare function withTenant(base: {
+    jobs: Jobs;
+    events: Events;
+}, tenantId: string): {
+    jobs: Jobs;
+    events: Events;
+};