@c15t/backend 2.0.0-rc.0 → 2.0.0-rc.10

package/{dist → dist-types}/middleware/cors/process-cors.d.ts

@@ -28,4 +28,3 @@ import type { C15TContext } from '../../types';
  * @see {@link isOriginTrusted} for origin validation details
  */
 export declare const processCors: (request: Request, context: C15TContext, trustedOrigins?: string[]) => C15TContext;
-//# sourceMappingURL=process-cors.d.ts.map

package/{dist → dist-types}/middleware/openapi/config.d.ts

@@ -39,4 +39,3 @@ export declare const createDefaultOpenAPIOptions: (options: C15TOptions) => {
         bearerAuth: never[];
     }[];
 };
-//# sourceMappingURL=config.d.ts.map

package/{dist → dist-types}/middleware/openapi/handlers.d.ts

@@ -3,4 +3,3 @@ import type { C15TOptions } from '../../types';
  * Generate the default UI for API documentation
  */
 export declare const createDocsUI: (options: C15TOptions) => string;
-//# sourceMappingURL=handlers.d.ts.map

package/{src/middleware/openapi/index.ts → dist-types/middleware/openapi/index.d.ts}

@@ -7,6 +7,5 @@
  *
  * Note: OpenAPI spec generation is now handled by hono-openapi middleware.
  */
-
 export { createDefaultOpenAPIOptions, createOpenAPIConfig } from './config';
 export { createDocsUI } from './handlers';

package/{dist → dist-types}/middleware/process-ip/index.d.ts

@@ -9,4 +9,3 @@ import type { C15TOptions } from '../../types';
  */
 export declare function maskIpAddress(ip: string | null): string | null;
 export declare function getIpAddress(req: Request | Headers, options: C15TOptions): string | null;
-//# sourceMappingURL=index.d.ts.map

package/dist-types/policies/builder.d.ts

@@ -0,0 +1,127 @@
+import type { PolicyConfig, PolicyModel, PolicyScopeMode, PolicyUiMode, PolicyUiSurfaceConfig } from '../types';
+/**
+ * High-level builder input for creating a backend policy config.
+ *
+ * @remarks
+ * This shape is intentionally flatter than {@link PolicyConfig} so backend
+ * configuration stays readable in `c15tInstance({ policyPacks })` setup files.
+ * Use the builder helpers to normalize this input into runtime-ready policy
+ * configs.
+ *
+ * @see {@link https://v2.c15t.com/docs/self-host/guides/policy-packs}
+ * @see {@link https://v2.c15t.com/docs/frameworks/react/concepts/policy-packs}
+ */
+export interface PolicyBuilderInput {
+    id: string;
+    /**
+     * @deprecated Metadata-only label. Not used at runtime, not sent to clients,
+     * and not fingerprinted. Will be removed in a future version.
+     */
+    name?: string;
+    countries?: string[];
+    regions?: Array<{
+        country: string;
+        region: string;
+    }>;
+    isDefault?: boolean;
+    model?: PolicyModel;
+    expiryDays?: number;
+    scopeMode?: PolicyScopeMode;
+    /**
+     * Consent categories scoped by the policy.
+     */
+    categories?: string[];
+    preselectedCategories?: string[];
+    /**
+     * Whether the policy should respect the Global Privacy Control signal.
+     */
+    gpc?: boolean;
+    uiMode?: PolicyUiMode;
+    banner?: PolicyUiSurfaceConfig;
+    dialog?: PolicyUiSurfaceConfig;
+    i18n?: {
+        language?: string;
+        messageProfile?: string;
+    };
+    proof?: {
+        storeIp?: boolean;
+        storeUserAgent?: boolean;
+        storeLanguage?: boolean;
+    };
+}
+/**
+ * Converts a single {@link PolicyBuilderInput} into a normalized
+ * backend-compatible {@link PolicyConfig}.
+ *
+ * @remarks
+ * Empty optional fields are removed from the final output, matcher input is
+ * merged into `match`, and duplicate string arrays are deduplicated.
+ *
+ * @see {@link https://v2.c15t.com/docs/self-host/guides/policy-packs}
+ */
+export declare function buildPolicyConfig(input: PolicyBuilderInput): PolicyConfig;
+/**
+ * Converts an ordered list of builder inputs into a policy pack.
+ *
+ * @remarks
+ * The resulting array preserves input order. That order matters because
+ * duplicate region/country matchers use first-match-wins semantics within the
+ * same matcher type.
+ *
+ * @see {@link https://v2.c15t.com/docs/self-host/guides/policy-packs}
+ */
+export declare function buildPolicyPack(inputs: PolicyBuilderInput[]): PolicyConfig[];
+/**
+ * Creates a policy pack and guarantees that it ends with a default policy.
+ *
+ * @remarks
+ * If the provided inputs already contain a default matcher, the pack is
+ * returned unchanged. Otherwise c15t appends either:
+ *
+ * - the supplied `defaultPolicy`, coerced to `match.isDefault = true`
+ * - or the built-in "World No Banner" fallback
+ *
+ * When `defaultPolicy` is provided, its `countries` and `regions` fields are
+ * stripped and replaced with `match.isDefault = true`.
+ *
+ * @see {@link https://v2.c15t.com/docs/self-host/guides/policy-packs}
+ */
+export declare function buildPolicyPackWithDefault(inputs: PolicyBuilderInput[], defaultPolicy?: PolicyBuilderInput): PolicyConfig[];
+/**
+ * Merges multiple policy packs or individual policies into a single pack.
+ *
+ * @remarks
+ * Useful for combining preset packs with custom policies without manual
+ * spread and deduplication. Policies are deduplicated by `id` — the first
+ * occurrence wins.
+ *
+ * @example
+ * ```ts
+ * import { composePacks, policyPackPresets, policyBuilder } from '@c15t/backend';
+ *
+ * const pack = composePacks(
+ *   [policyPackPresets.europeOptIn()],
+ *   [policyPackPresets.californiaOptOut()],
+ *   [policyBuilder.create({ id: 'custom', countries: ['JP'], model: 'opt-in' })],
+ *   [policyPackPresets.worldNoBanner()],
+ * );
+ * ```
+ *
+ * @see {@link https://v2.c15t.com/docs/self-host/guides/policy-packs}
+ */
+export declare function composePacks(...packs: PolicyConfig[][]): PolicyConfig[];
+/**
+ * Convenience namespace for the policy builder helpers.
+ *
+ * @remarks
+ * Useful when you prefer a grouped API such as `policyBuilder.createPack()`
+ * inside backend config files.
+ *
+ * @see {@link https://v2.c15t.com/docs/self-host/guides/policy-packs}
+ */
+export declare const policyBuilder: {
+    create: typeof buildPolicyConfig;
+    createPack: typeof buildPolicyPack;
+    createPackWithDefault: typeof buildPolicyPackWithDefault;
+    composePacks: typeof composePacks;
+};

package/dist-types/policies/defaults.d.ts

@@ -0,0 +1,2 @@
+export { policyPackPresets } from '@c15t/schema';
+export type { EuropePolicyMode, PolicyPackPresets } from '@c15t/schema/types';

package/dist-types/policies/matchers.d.ts

@@ -0,0 +1,3 @@
+import type { PolicyMatch } from '@c15t/schema/types';
+export { EEA_COUNTRY_CODES, EU_COUNTRY_CODES, POLICY_MATCH_DATASET_VERSION, policyMatchers, UK_COUNTRY_CODES, } from '@c15t/schema/types';
+export type { PolicyMatch };

package/{dist → dist-types}/router.d.ts

@@ -7,4 +7,3 @@
  * @packageDocumentation
  */
 export { createConsentRoutes, createInitRoute, createStatusRoute, createSubjectRoutes, } from './routes';
-//# sourceMappingURL=router.d.ts.map

package/{dist → dist-types}/routes/consent.d.ts

@@ -13,4 +13,3 @@ export declare const createConsentRoutes: () => Hono<{
         c15tContext: C15TContext;
     };
 }, import("hono/types").BlankSchema, "/">;
-//# sourceMappingURL=consent.d.ts.map

package/{dist → dist-types}/routes/index.d.ts

@@ -5,6 +5,6 @@
  */
 export { createConsentRoutes } from './consent';
 export { createInitRoute } from './init';
+export { createLegalDocumentRoutes } from './legal-document';
 export { createStatusRoute } from './status';
 export { createSubjectRoutes } from './subject';
-//# sourceMappingURL=index.d.ts.map

package/{dist → dist-types}/routes/init.d.ts

@@ -13,4 +13,3 @@ export declare const createInitRoute: (options: C15TOptions) => Hono<{
         c15tContext: C15TContext;
     };
 }, import("hono/types").BlankSchema, "/">;
-//# sourceMappingURL=init.d.ts.map

package/dist-types/routes/legal-document.d.ts

@@ -0,0 +1,7 @@
+import { Hono } from 'hono';
+import type { C15TContext } from '../types';
+export declare const createLegalDocumentRoutes: () => Hono<{
+    Variables: {
+        c15tContext: C15TContext;
+    };
+}, import("hono/types").BlankSchema, "/">;

package/{dist → dist-types}/routes/status.d.ts

@@ -13,4 +13,3 @@ export declare const createStatusRoute: () => Hono<{
         c15tContext: C15TContext;
     };
 }, import("hono/types").BlankSchema, "/">;
-//# sourceMappingURL=status.d.ts.map

package/{dist → dist-types}/routes/subject.d.ts

@@ -13,4 +13,3 @@ export declare const createSubjectRoutes: () => Hono<{
         c15tContext: C15TContext;
     };
 }, import("hono/types").BlankSchema, "/">;
-//# sourceMappingURL=subject.d.ts.map

package/{dist → dist-types}/types/api.d.ts

@@ -28,4 +28,3 @@ export type ApiPathBase = `/api/c15t`;
  * ```
  */
 export type ApiPath = `${ApiPathBase}` | `${ApiPathBase}/consent` | `${ApiPathBase}/consent/:id` | `${ApiPathBase}/jurisdictions` | `${ApiPathBase}/jurisdictions/:code`;
-//# sourceMappingURL=api.d.ts.map

package/dist-types/types/index.d.ts

@@ -0,0 +1,464 @@
+import type { createLogger, LoggerOptions } from '@c15t/logger';
+import { type Branding, type GlobalVendorList, type NonIABVendor, type PolicyConfig } from '@c15t/schema/types';
+import type { Translations } from '@c15t/translations';
+import type { Meter, Tracer } from '@opentelemetry/api';
+import type { FumaDB, InferFumaDB } from 'fumadb';
+import type { CacheAdapter } from '../cache/types';
+import type { createRegistry } from '../db/registry';
+import type { DB, LatestDB } from '../db/schema';
+export * from './api';
+export declare const branding: readonly ["c15t", "inth", "consent", "none"];
+export type { Branding };
+export interface DatabaseOptions {
+    /**
+     * The database adapter to use.
+     *
+     * @see {@link https://v2.c15t.com/docs/self-host/guides/database-setup}
+     */
+    adapter: FumaDB<FumaDBSchema>['adapter'];
+    /**
+     * Tenant ID for multi-tenant deployments.
+     * When set, all database queries are automatically scoped to this tenant.
+     */
+    tenantId?: string;
+    /**
+     * Optional prefix for all database table names.
+     * Useful when sharing a database with other applications to avoid naming conflicts.
+     *
+     * @example 'c15t_' // tables become: c15t_subject, c15t_consent, etc.
+     * @see {@link https://v2.c15t.com/docs/self-host/guides/database-setup}
+     */
+    tablePrefix?: string;
+}
+/**
+ * OpenAPI spec generation and documentation UI options.
+ */
+export interface OpenAPIOptions {
+    /**
+     * Enable/disable OpenAPI spec generation
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Path to serve the OpenAPI JSON spec
+     * @default "/spec.json"
+     */
+    specPath?: string;
+    /**
+     * Path to serve the API documentation UI
+     * @default "/docs"
+     */
+    docsPath?: string;
+    /**
+     * OpenAPI specification options
+     */
+    options?: {
+        info?: {
+            title?: string;
+            version?: string;
+            description?: string;
+        };
+        servers?: Array<{
+            url: string;
+            description?: string;
+        }>;
+        security?: Array<Record<string, string[]>>;
+    };
+    /**
+     * Custom template for rendering the API documentation UI
+     * If provided, this will be used instead of the default Scalar UI
+     */
+    customUiTemplate?: string;
+}
+/**
+ * OpenTelemetry configuration for tracing and metrics.
+ * Telemetry is opt-in and disabled by default.
+ * Users must provide their own SDK setup (Node, Bun, edge, etc.).
+ */
+export interface TelemetryOptions {
+    /**
+     * Enable telemetry (tracing and metrics).
+     * Must be explicitly set to true to activate.
+     * @default false
+     */
+    enabled?: boolean;
+    /**
+     * User-provided tracer instance.
+     * Users should set up their own OpenTelemetry SDK and pass the tracer here.
+     * @example trace.getTracer('my-app')
+     */
+    tracer?: Tracer;
+    /**
+     * User-provided meter instance for metrics.
+     * Users should set up their own OpenTelemetry SDK and pass the meter here.
+     * @example metrics.getMeter('my-app')
+     */
+    meter?: Meter;
+    /**
+     * Default attributes to include on all spans and metrics.
+     */
+    defaultAttributes?: Record<string, string | number | boolean>;
+}
+/**
+ * IP address tracking and masking options.
+ */
+export interface IPAddressOptions {
+    /**
+     * Enable/disable IP address tracking.
+     * When disabled, all IP addresses will be stored as null.
+     * @default true
+     */
+    tracking?: boolean;
+    /**
+     * Enable/disable IP address masking to reduce PII collection.
+     * - IPv4: Last octet is replaced with 0 (e.g., 192.168.1.100 -> 192.168.1.0)
+     * - IPv6: Last 80 bits are masked (e.g., 2001:db8:85a3::1 -> 2001:db8:85a3::)
+     * @default true
+     */
+    masking?: boolean;
+    /**
+     * Override the default IP address headers used to extract client IP.
+     * Headers are checked in order, first match wins.
+     */
+    ipAddressHeaders?: string[];
+}
+/**
+ * Cache configuration for external persistent storage.
+ * Used for caching GVL and other data.
+ */
+export interface CacheOptions {
+    /**
+     * External cache adapter (Redis, KV, etc.).
+     * If not provided, only in-memory cache is used.
+     */
+    adapter?: CacheAdapter;
+}
+/**
+ * IAB TCF configuration including GVL, CMP registration, and custom vendors.
+ * Disabled by default - most users don't need IAB TCF.
+ * Set enabled: true to activate IAB support.
+ */
+export interface IABOptions {
+    /**
+     * Enable IAB TCF support.
+     * When false or not provided, /init does not include IAB payload fields.
+     * When true, /init includes IAB payload only when IAB is active for the
+     * resolved request policy (or when no policies are configured).
+     */
+    enabled: true;
+    /**
+     * CMP ID registered with IAB Europe.
+     * This is returned to clients via the /init endpoint so they
+     * can use the correct CMP identity in TC Strings.
+     *
+     * @see https://iabeurope.eu/cmp-list/ - List of registered CMPs
+     */
+    cmpId?: number;
+    /**
+     * Bundled GVL translations by language code.
+     * These are checked first before any cache or fetch.
+     *
+     * @example
+     * ```ts
+     * import enGVL from './gvl/en.json';
+     * import deGVL from './gvl/de.json';
+     *
+     * iab: {
+     *   enabled: true,
+     *   bundled: { en: enGVL, de: deGVL }
+     * }
+     * ```
+     */
+    bundled?: Record<string, GlobalVendorList>;
+    /**
+     * Vendor IDs to filter when fetching non-bundled languages.
+     * Reduces payload size.
+     */
+    vendorIds?: number[];
+    /**
+     * Override the default GVL endpoint.
+     * @default 'https://gvl.consent.io'
+     */
+    endpoint?: string;
+    /**
+     * Custom vendors not registered with IAB.
+     * These are synced to the frontend via the /init endpoint.
+     *
+     * @example
+     * ```ts
+     * customVendors: [
+     *   {
+     *     id: 'internal-analytics',
+     *     name: 'Our Analytics',
+     *     privacyPolicyUrl: 'https://example.com/privacy',
+     *     purposes: [1, 8],
+     *   }
+     * ]
+     * ```
+     */
+    customVendors?: NonIABVendor[];
+}
+type FumaDBSchema = InferFumaDB<typeof DB>['schemas'];
+export interface I18nMessageProfile {
+    /**
+     * Fallback language used when the requested language is not configured in
+     * this profile.
+     *
+     * @remarks
+     * This does not expand the profile's allowed languages. If the configured
+     * fallback is not present in the profile, c15t falls back to English when
+     * available, otherwise to the first configured language in the profile.
+     *
+     * @default "en"
+     */
+    fallbackLanguage?: string;
+    /**
+     * Translation overrides keyed by language code.
+     */
+    translations: Record<string, Partial<Translations>>;
+}
+export type I18nMessageProfiles = Record<string, I18nMessageProfile>;
+export interface I18nOptions {
+    /**
+     * Named translation catalogs grouped by profile.
+     *
+     * @example
+     * ```ts
+     * i18n: {
+     *   messages: {
+     *     default: {
+     *       translations: { en: { cookieBanner: { title: '...' } } },
+     *     },
+     *     us_ca: {
+     *       fallbackLanguage: 'en',
+     *       translations: { en: { cookieBanner: { title: '...' } } },
+     *     },
+     *   }
+     * }
+     * ```
+     */
+    messages?: I18nMessageProfiles;
+    /**
+     * Fallback profile used when a policy does not provide `messageProfile`.
+     * @default "default"
+     */
+    defaultProfile?: string;
+}
+export type { LegalDocumentPolicyType, PolicyConfig, PolicyModel, PolicyPack, PolicyScopeMode, PolicyUiAction, PolicyUiActionDirection, PolicyUiActionGroup, PolicyUiMode, PolicyUiProfile, PolicyUiSurfaceConfig, } from '@c15t/schema/types';
+export interface PolicySnapshotOptions {
+    /**
+     * Secret used for signing and verifying policy snapshot tokens.
+     */
+    signingKey: string;
+    /**
+     * How writes should behave when snapshot validation fails.
+     * @default "reject"
+     */
+    onValidationFailure?: 'reject' | 'resolve_current';
+    /**
+     * JWT issuer claim for snapshot tokens.
+     * @default "c15t"
+     */
+    issuer?: string;
+    /**
+     * JWT audience claim for snapshot tokens.
+     * When omitted, c15t derives a default snapshot audience and scopes it per tenant.
+     */
+    audience?: string;
+    /**
+     * Snapshot token lifetime in seconds.
+     * @default 1800 (30 minutes)
+     */
+    ttlSeconds?: number;
+}
+export interface LegalDocumentSnapshotOptions {
+    /**
+     * Secret used for signing and verifying legal-document snapshot tokens.
+     */
+    signingKey: string;
+    /**
+     * JWT issuer claim for legal-document snapshot tokens.
+     * @default "c15t"
+     */
+    issuer?: string;
+    /**
+     * JWT audience claim for legal-document snapshot tokens.
+     * When omitted, c15t derives a default audience and scopes it per tenant.
+     */
+    audience?: string;
+}
+export interface BackgroundOptions {
+    /**
+     * Executes non-critical tasks after the response path has completed.
+     */
+    run: (task: () => Promise<void>) => void;
+}
+export interface C15TOptions {
+    /**
+     * The database adapter to use.
+     *
+     * @see {@link https://v2.c15t.com/docs/self-host/guides/database-setup}
+     */
+    adapter: FumaDB<FumaDBSchema>['adapter'];
+    /**
+     * Tenant ID for multi-tenant deployments.
+     * When set, all database queries are automatically scoped to this tenant.
+     */
+    tenantId?: string;
+    /**
+     * Optional prefix for all database table names.
+     * Useful when sharing a database with other applications to avoid naming conflicts.
+     *
+     * @example 'c15t_' // tables become: c15t_subject, c15t_consent, etc.
+     * @see {@link https://v2.c15t.com/docs/self-host/guides/database-setup}
+     */
+    tablePrefix?: string;
+    /**
+     * Application name used as backend metadata and identity.
+     * Returned by `/init` (`appName`), used in logs, telemetry defaults (`service.name`),
+     * and cache key prefixing.
+     *
+     * @default "c15t"
+     * @see {@link https://v2.c15t.com/docs/self-host/api/configuration}
+     */
+    appName?: string;
+    /**
+     * Base path prefix for all API routes (e.g. `/api/self-host`).
+     *
+     * @see {@link https://v2.c15t.com/docs/self-host/api/endpoints}
+     */
+    basePath?: string;
+    /**
+     * Allowed origins for CORS. Required for browser-based consent collection.
+     * Protocol is optional; matching is protocol-agnostic and normalized.
+     *
+     * @example ['example.com', 'app.example.com', 'localhost:3000']
+     * @see {@link https://v2.c15t.com/docs/self-host/api/configuration}
+     */
+    trustedOrigins: string[];
+    /** Logger configuration. */
+    logger?: LoggerOptions;
+    /**
+     * Disables the use of Geo Location to determine the jurisdiction.
+     *
+     * When enabled, the jurisdiction will be set to "GDPR" to show the strictest
+     * version of the banner as we don't know the jurisdiction in this case.
+     *
+     * @default false
+     */
+    disableGeoLocation?: boolean;
+    /**
+     * Override base translations.
+     *
+     * @deprecated Use `i18n.messages` instead. This alias is kept for compatibility.
+     *
+     * @example
+     * ```ts
+     * {
+     *   en: enTranslations,
+     *   de: deTranslations,
+     * }
+     * ```
+     */
+    customTranslations?: Record<string, Partial<Translations>>;
+    /**
+     * Internationalization message profiles used by runtime policies.
+     */
+    i18n?: I18nOptions;
+    /**
+     * Runtime regional policy pack resolved per request.
+     *
+     * @remarks
+     * Omit this field to keep legacy non-policy behavior. Pass `[]` to force
+     * explicit no-banner mode. In production, prefer including a default policy
+     * so unmatched traffic still resolves deterministically.
+     *
+     * @see {@link https://v2.c15t.com/docs/self-host/guides/policy-packs}
+     */
+    policyPacks?: PolicyConfig[];
+    /**
+     * Select which branding to show in the consent banner.
+     * Use "inth" for the INTH brand. "consent" is a deprecated alias for "inth".
+     * Use "none" to hide branding.
+     * @default "c15t"
+     */
+    branding?: Branding;
+    /**
+     * OpenAPI spec generation and documentation UI options.
+     *
+     * @see {@link https://v2.c15t.com/docs/self-host/api/endpoints}
+     */
+    openapi?: OpenAPIOptions;
+    /**
+     * OpenTelemetry configuration for tracing and metrics.
+     * Telemetry is opt-in and disabled by default.
+     * Users must provide their own SDK setup (Node, Bun, edge, etc.).
+     *
+     * @see {@link https://v2.c15t.com/docs/self-host/guides/observability}
+     */
+    telemetry?: TelemetryOptions;
+    /**
+     * IP address tracking and masking options.
+     *
+     * @see {@link https://v2.c15t.com/docs/self-host/api/configuration}
+     */
+    ipAddress?: IPAddressOptions;
+    /**
+     * Cache configuration for external persistent storage.
+     * Used for caching GVL and other data.
+     *
+     * @see {@link https://v2.c15t.com/docs/self-host/guides/caching}
+     */
+    cache?: CacheOptions;
+    /**
+     * API keys for authenticated endpoints.
+     * Used for server-side endpoints like GET /subjects.
+     *
+     * @example
+     * ```ts
+     * apiKeys: ['sk_live_abc123', 'sk_live_def456']
+     * ```
+     */
+    apiKeys?: string[];
+    /**
+     * IAB TCF configuration including GVL, CMP registration, and custom vendors.
+     * Disabled by default - most users don't need IAB TCF.
+     * Set enabled: true to activate IAB support.
+     *
+     * @see {@link https://v2.c15t.com/docs/self-host/guides/iab-tcf}
+     */
+    iab?: IABOptions;
+    /**
+     * Optional signed policy snapshots used to keep /init and /subjects consistent.
+     */
+    policySnapshot?: PolicySnapshotOptions;
+    /**
+     * Optional signed legal-document snapshots issued by external document renderers.
+     */
+    legalDocumentSnapshot?: LegalDocumentSnapshotOptions;
+    /**
+     * Optional background task runner for non-critical side effects.
+     */
+    background?: BackgroundOptions;
+}
+export interface C15TContext extends Omit<C15TOptions, 'ipAddress' | 'adapter' | 'logger' | 'tablePrefix'> {
+    appName: string;
+    logger: ReturnType<typeof createLogger>;
+    registry: ReturnType<typeof createRegistry>;
+    db: ReturnType<InferFumaDB<typeof LatestDB>['orm']>;
+    ipAddress?: string | null;
+    userAgent?: string;
+    origin?: string;
+    trustedOrigin?: boolean;
+    path?: string;
+    method?: string;
+    headers?: Headers;
+    /**
+     * Whether the request was authenticated with a valid API key.
+     * Set to true when a valid Bearer token is provided in the Authorization header.
+     */
+    apiKeyAuthenticated?: boolean;
+}
+export type DeepPartial<T> = T extends (...args: unknown[]) => unknown ? T : T extends object ? {
+    [K in keyof T]?: DeepPartial<T[K]>;
+} : T;