@c9up/ream 0.1.3

package/dist/security/SignedUrl.js

@@ -0,0 +1,63 @@
+/**
+ * Signed URLs — HMAC-SHA256 with expiration.
+ * Uses Rust NAPI via crypto facade when available.
+ */
+import { constantTimeEq, hmacSign } from './crypto.js';
+export class SignedUrl {
+    #secret;
+    constructor(config) {
+        this.#secret = config.secret;
+    }
+    make(path, options) {
+        const url = new URL(path, 'http://localhost');
+        // Audit 2026-05-22: `expiresIn !== undefined` instead of truthy check.
+        // `expiresIn: 0` previously fell through the falsy branch and produced
+        // an URL with no `expires` param — a never-expiring signed URL when the
+        // caller explicitly asked for "expires immediately". The new check
+        // honours 0 (and any other numeric input) by stamping the expires param;
+        // verify() then rejects it as soon as the wall clock advances.
+        if (options?.expiresIn !== undefined) {
+            url.searchParams.set('expires', String(Math.floor(Date.now() / 1000) + parseExpiry(options.expiresIn)));
+        }
+        if (options?.purpose) {
+            url.searchParams.set('purpose', options.purpose);
+        }
+        url.searchParams.set('signature', hmacSign(url.pathname + url.search, this.#secret));
+        return url.pathname + url.search;
+    }
+    verify(urlString, purpose) {
+        const url = new URL(urlString, 'http://localhost');
+        const providedSig = url.searchParams.get('signature');
+        if (!providedSig)
+            return false;
+        const expires = url.searchParams.get('expires');
+        if (expires && Math.floor(Date.now() / 1000) > parseInt(expires, 10))
+            return false;
+        if (purpose && url.searchParams.get('purpose') !== purpose)
+            return false;
+        url.searchParams.delete('signature');
+        const expectedSig = hmacSign(url.pathname + url.search, this.#secret);
+        return constantTimeEq(providedSig, expectedSig);
+    }
+}
+function parseExpiry(value) {
+    if (typeof value === 'number')
+        return value;
+    const match = value.match(/^(\d+)(s|m|h|d)$/);
+    if (!match)
+        return 3600;
+    const num = parseInt(match[1], 10);
+    switch (match[2]) {
+        case 's':
+            return num;
+        case 'm':
+            return num * 60;
+        case 'h':
+            return num * 3600;
+        case 'd':
+            return num * 86400;
+        default:
+            return 3600;
+    }
+}
+//# sourceMappingURL=SignedUrl.js.map

package/dist/security/SignedUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedUrl.js","sourceRoot":"","sources":["../../src/security/SignedUrl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAMtD,MAAM,OAAO,SAAS;IACpB,OAAO,CAAQ;IAEf,YAAY,MAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAA;IAC9B,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,OAA2D;QAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAA;QAC7C,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,mEAAmE;QACnE,yEAAyE;QACzE,+DAA+D;QAC/D,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;YACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAClB,SAAS,EACT,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACvE,CAAA;QACH,CAAC;QACD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACrB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QAClD,CAAC;QACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACpF,OAAO,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAA;IAClC,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,OAAgB;QACxC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAA;QAClD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACrD,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAA;QAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC/C,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAAE,OAAO,KAAK,CAAA;QAClF,IAAI,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO;YAAE,OAAO,KAAK,CAAA;QAExE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACpC,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACrE,OAAO,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IACjD,CAAC;CACF;AAED,SAAS,WAAW,CAAC,KAAsB;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAClC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,KAAK,GAAG;YACN,OAAO,GAAG,CAAA;QACZ,KAAK,GAAG;YACN,OAAO,GAAG,GAAG,EAAE,CAAA;QACjB,KAAK,GAAG;YACN,OAAO,GAAG,GAAG,IAAI,CAAA;QACnB,KAAK,GAAG;YACN,OAAO,GAAG,GAAG,KAAK,CAAA;QACpB;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC"}

package/dist/security/crypto.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Crypto facade — resolves Rust NAPI bindings at load time.
+ * If the binary isn't available, falls back to Node.js crypto.
+ *
+ * Usage:
+ *   import { hmacSign, hmacVerify, randomHex, constantTimeEq } from './crypto.js'
+ */
+interface NapiCrypto {
+    hmacSign(data: string, secret: string): string;
+    hmacVerify(data: string, signature: string, secret: string): boolean;
+    randomBytesBase64(len: number): string;
+    randomHex(len: number): string;
+    constantTimeEq(a: string, b: string): boolean;
+}
+/** @internal Set the NAPI bindings (called once by the NAPI loader). */
+export declare function setNapi(bindings: NapiCrypto): void;
+/** Check if Rust NAPI crypto is available. */
+export declare function hasNativeCrypto(): boolean;
+export declare function hmacSign(data: string, secret: string): string;
+export declare function hmacVerify(data: string, signature: string, secret: string): boolean;
+export declare function randomBytesBase64(len: number): string;
+export declare function randomHex(len: number): string;
+export declare function constantTimeEq(a: string, b: string): boolean;
+export {};
+//# sourceMappingURL=crypto.d.ts.map

package/dist/security/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/security/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,UAAU,UAAU;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IAC9C,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;IACpE,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;IACtC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;IAC9B,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAC9C;AAcD,wEAAwE;AACxE,wBAAgB,OAAO,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,CAElD;AAED,8CAA8C;AAC9C,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAID,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOnF;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG7C;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAM5D"}

package/dist/security/crypto.js

@@ -0,0 +1,82 @@
+/**
+ * Crypto facade — resolves Rust NAPI bindings at load time.
+ * If the binary isn't available, falls back to Node.js crypto.
+ *
+ * Usage:
+ *   import { hmacSign, hmacVerify, randomHex, constantTimeEq } from './crypto.js'
+ */
+import { createHmac, randomBytes as nodeRandomBytes, timingSafeEqual } from 'node:crypto';
+let napi = null;
+try {
+    // Optional pre-install path: a NAPI loader may set `globalThis.__reamNapi`
+    // before this module loads. We validate the shape rather than declare a
+    // global `var`, so the loader contract stays runtime-only.
+    const preinstalled = readPreinstalledNapi();
+    if (preinstalled)
+        napi = preinstalled;
+}
+catch {
+    /* binary not available */
+}
+/** @internal Set the NAPI bindings (called once by the NAPI loader). */
+export function setNapi(bindings) {
+    napi = bindings;
+}
+/** Check if Rust NAPI crypto is available. */
+export function hasNativeCrypto() {
+    return napi !== null;
+}
+// ─── Exports ────────────────────────────────────────────────
+export function hmacSign(data, secret) {
+    if (napi)
+        return napi.hmacSign(data, secret);
+    return createHmac('sha256', secret).update(data).digest('base64url');
+}
+export function hmacVerify(data, signature, secret) {
+    if (napi)
+        return napi.hmacVerify(data, signature, secret);
+    const expected = createHmac('sha256', secret).update(data).digest('base64url');
+    const a = Buffer.from(signature);
+    const b = Buffer.from(expected);
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+export function randomBytesBase64(len) {
+    if (napi)
+        return napi.randomBytesBase64(len);
+    return nodeRandomBytes(len).toString('base64url');
+}
+export function randomHex(len) {
+    if (napi)
+        return napi.randomHex(len);
+    return nodeRandomBytes(len).toString('hex');
+}
+export function constantTimeEq(a, b) {
+    if (napi)
+        return napi.constantTimeEq(a, b);
+    const bufA = Buffer.from(a);
+    const bufB = Buffer.from(b);
+    if (bufA.length !== bufB.length)
+        return false;
+    return timingSafeEqual(bufA, bufB);
+}
+function readPreinstalledNapi() {
+    // `globalThis` is typed without an index signature, so we go through Reflect
+    // and validate the shape downstream — no global `var` declaration needed.
+    const candidate = Reflect.get(globalThis, '__reamNapi');
+    return isNapiCrypto(candidate) ? candidate : null;
+}
+function isNapiCrypto(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    return (hasFn(value, 'hmacSign') &&
+        hasFn(value, 'hmacVerify') &&
+        hasFn(value, 'randomBytesBase64') &&
+        hasFn(value, 'randomHex') &&
+        hasFn(value, 'constantTimeEq'));
+}
+function hasFn(value, key) {
+    return key in value && typeof Reflect.get(value, key) === 'function';
+}
+//# sourceMappingURL=crypto.js.map

package/dist/security/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/security/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,IAAI,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAUzF,IAAI,IAAI,GAAsB,IAAI,CAAA;AAElC,IAAI,CAAC;IACH,2EAA2E;IAC3E,wEAAwE;IACxE,2DAA2D;IAC3D,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;IAC3C,IAAI,YAAY;QAAE,IAAI,GAAG,YAAY,CAAA;AACvC,CAAC;AAAC,MAAM,CAAC;IACP,0BAA0B;AAC5B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,OAAO,CAAC,QAAoB;IAC1C,IAAI,GAAG,QAAQ,CAAA;AACjB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,KAAK,IAAI,CAAA;AACtB,CAAC;AAED,+DAA+D;AAE/D,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,MAAc;IACnD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC5C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AACtE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,SAAiB,EAAE,MAAc;IACxE,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC9E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;IAC5C,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACnD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAS,EAAE,CAAS;IACjD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC7C,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,oBAAoB;IAC3B,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,SAAS,GAAY,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;IAChE,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,OAAO,CACL,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC;QACxB,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC;QACjC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC;QACzB,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAC/B,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CACZ,KAAa,EACb,GAAM;IAEN,OAAO,GAAG,IAAI,KAAK,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,UAAU,CAAA;AACtE,CAAC"}

package/dist/server/HyperServer.d.ts

@@ -0,0 +1,64 @@
+import type { HttpKernelRequest, HttpKernelResponse } from '../HttpKernel.js';
+/**
+ * Wire-level shield configuration handed off to the Rust filter at boot.
+ * Each flag toggles one rule on/off; they all default to true on the Rust
+ * side, so omitting `configureShield()` entirely leaves the server with no
+ * filter installed.
+ */
+export interface RustShieldConfig {
+    pathTraversal: boolean;
+    paramPollution: boolean;
+}
+export interface RustRateLimitConfig {
+    max: number;
+    windowSecs: number;
+}
+export interface HyperServerLike {
+    onRequest(callback: (request: HttpKernelRequest) => Promise<HttpKernelResponse>): void;
+    configureShield(config: RustShieldConfig): void;
+    configureTrustedProxies(cidrs: string[]): void;
+    configureRateLimit(config: RustRateLimitConfig | null): void;
+    listen(): Promise<void>;
+    port(): Promise<number>;
+    close(): Promise<void>;
+    /**
+     * Reserve a streaming-response slot. The handler must call this and
+     * pass the returned id back inside `HttpKernelResponse.streamId`
+     * BEFORE returning, so the hyper-side response builder can feed the
+     * body from the matching registry entry.
+     */
+    registerStream(streamId: string): Promise<boolean>;
+    /**
+     * Push a UTF-8 chunk onto a registered stream. Returns `false` once
+     * the client has disconnected — callers stop pushing.
+     */
+    writeStream(streamId: string, chunk: string): Promise<boolean>;
+    /**
+     * End a stream from the server side. Idempotent.
+     */
+    closeStream(streamId: string): Promise<boolean>;
+    /**
+     * Install a one-shot callback fired the moment the matching stream
+     * receiver is dropped — i.e. the client disconnected OR
+     * `closeStream` was called. Used by the JS SDK to drop bookkeeping
+     * for subscriptions and SSE viewers.
+     */
+    onStreamDisconnect(streamId: string, callback: () => void): void;
+}
+/** HyperServer — Rust-powered HTTP server. */
+export declare class HyperServer implements HyperServerLike {
+    #private;
+    constructor(port: number);
+    onRequest(callback: (request: HttpKernelRequest) => Promise<HttpKernelResponse>): void;
+    configureShield(config: RustShieldConfig): void;
+    configureTrustedProxies(cidrs: string[]): void;
+    configureRateLimit(config: RustRateLimitConfig | null): void;
+    listen(): Promise<void>;
+    port(): Promise<number>;
+    close(): Promise<void>;
+    registerStream(streamId: string): Promise<boolean>;
+    writeStream(streamId: string, chunk: string): Promise<boolean>;
+    closeStream(streamId: string): Promise<boolean>;
+    onStreamDisconnect(streamId: string, callback: () => void): void;
+}
+//# sourceMappingURL=HyperServer.d.ts.map

package/dist/server/HyperServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HyperServer.d.ts","sourceRoot":"","sources":["../../src/server/HyperServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAG7E;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,OAAO,CAAA;IACtB,cAAc,EAAE,OAAO,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAA;IACtF,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC/C,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IAC9C,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAA;IAC5D,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAClD;;;OAGG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9D;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C;;;;;OAKG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI,CAAA;CACjE;AAkBD,8CAA8C;AAC9C,qBAAa,WAAY,YAAW,eAAe;;gBAGrC,IAAI,EAAE,MAAM;IAKxB,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI;IAItF,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAI/C,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAI9C,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,GAAG,IAAI;IAI5D,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIlD,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI9D,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI/C,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI;CAGjE"}

package/dist/server/HyperServer.js

@@ -0,0 +1,54 @@
+import { loadNapi } from '../helpers/napi-loader.js';
+let native;
+function loadNative() {
+    if (native)
+        return native;
+    native = loadNapi({
+        binaryName: 'index',
+        callerMetaUrl: import.meta.url,
+        errorCodePrefix: 'HYPER_SERVER',
+    });
+    return native;
+}
+/** HyperServer — Rust-powered HTTP server. */
+export class HyperServer {
+    #inner;
+    constructor(port) {
+        const mod = loadNative();
+        this.#inner = new mod.HyperServer(port);
+    }
+    onRequest(callback) {
+        this.#inner.onRequest(callback);
+    }
+    configureShield(config) {
+        this.#inner.configureShield(config);
+    }
+    configureTrustedProxies(cidrs) {
+        this.#inner.configureTrustedProxies(cidrs);
+    }
+    configureRateLimit(config) {
+        this.#inner.configureRateLimit(config);
+    }
+    listen() {
+        return this.#inner.listen();
+    }
+    port() {
+        return this.#inner.port();
+    }
+    close() {
+        return this.#inner.close();
+    }
+    registerStream(streamId) {
+        return this.#inner.registerStream(streamId);
+    }
+    writeStream(streamId, chunk) {
+        return this.#inner.writeStream(streamId, chunk);
+    }
+    closeStream(streamId) {
+        return this.#inner.closeStream(streamId);
+    }
+    onStreamDisconnect(streamId, callback) {
+        this.#inner.onStreamDisconnect(streamId, callback);
+    }
+}
+//# sourceMappingURL=HyperServer.js.map

package/dist/server/HyperServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HyperServer.js","sourceRoot":"","sources":["../../src/server/HyperServer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAuDpD,IAAI,MAAgC,CAAA;AAEpC,SAAS,UAAU;IACjB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,GAAG,QAAQ,CAAe;QAC9B,UAAU,EAAE,OAAO;QACnB,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;QAC9B,eAAe,EAAE,cAAc;KAChC,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,8CAA8C;AAC9C,MAAM,OAAO,WAAW;IACtB,MAAM,CAAiB;IAEvB,YAAY,IAAY;QACtB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IACzC,CAAC;IAED,SAAS,CAAC,QAAqE;QAC7E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACjC,CAAC;IAED,eAAe,CAAC,MAAwB;QACtC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC;IAED,uBAAuB,CAAC,KAAe;QACrC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAA;IAC5C,CAAC;IAED,kBAAkB,CAAC,MAAkC;QACnD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IAC7B,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAC3B,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IAC5B,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC7C,CAAC;IAED,WAAW,CAAC,QAAgB,EAAE,KAAa;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACjD,CAAC;IAED,WAAW,CAAC,QAAgB;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IAC1C,CAAC;IAED,kBAAkB,CAAC,QAAgB,EAAE,QAAoB;QACvD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACpD,CAAC;CACF"}

package/dist/server/Server.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Server — manages HTTP server middleware, error handler, and router.
+ *
+ * Like AdonisJS Server class:
+ * - server.use([() => import('#middleware/...')]) — lazy class middleware
+ * - server.errorHandler(() => import('#exceptions/handler')) — custom exception handler
+ */
+import type { ExceptionHandler } from '../http/Exception.js';
+import type { HttpContext } from '../http/HttpContext.js';
+import type { MiddlewareFunction } from '../middleware/Pipeline.js';
+import type { Router } from '../router/Router.js';
+/**
+ * A middleware class with a handle method.
+ * This is the pattern used by AdonisJS middleware.
+ */
+export interface MiddlewareClass {
+    handle(ctx: HttpContext, next: () => Promise<void>): Promise<void> | void;
+}
+/** Lazy import returning a module with a default export. */
+export type LazyImport<T> = () => Promise<{
+    default: T;
+}>;
+export type ErrorHandlerClass = new (...args: any[]) => ExceptionHandler;
+type MiddlewareClassConstructor = new (...args: any[]) => MiddlewareClass;
+/** What server.use() and router.use() accept: lazy imports or direct functions. */
+export type MiddlewareEntry = LazyImport<MiddlewareClassConstructor> | MiddlewareFunction;
+export declare class Server {
+    #private;
+    constructor(router: Router);
+    /**
+     * Configure the trusted-proxy CIDR list. The Rust HyperServer uses it to
+     * pre-resolve `request.ip` once per request — JS reads the field, no CIDR
+     * matching in TS.
+     *
+     * Empty list (default, 2026-05+) is **strict fail-closed**: `X-Forwarded-For`
+     * and `X-Real-IP` are ignored entirely; only the socket peer is used.
+     * Apps deployed behind a reverse proxy must list the proxy's CIDR
+     * (`'10.0.0.0/8'`, `'192.0.2.0/24'`, etc.) or pass the `'*'` sentinel
+     * for permissive mode (accepts spoofing as the explicit trade-off when
+     * proxy CIDRs can't be enumerated).
+     */
+    trustedProxies(cidrs: string[]): this;
+    /** Read the current trusted-proxy list (consumed by Ignitor at boot). */
+    getTrustedProxies(): readonly string[];
+    /**
+     * Register global server middleware.
+     * Accepts lazy imports of middleware classes (AdonisJS pattern):
+     *   server.use([() => import('#middleware/log_request_middleware')])
+     */
+    use(middleware: MiddlewareEntry[]): this;
+    /**
+     * Register a custom error handler.
+     *   server.errorHandler(() => import('#exceptions/handler'))
+     */
+    errorHandler(handler: LazyImport<ErrorHandlerClass>): this;
+    /** Boot — resolve the error handler. Called by Ignitor during ready phase. */
+    boot(): Promise<void>;
+    getServerMiddleware(): MiddlewareFunction[];
+    getErrorHandler(): ExceptionHandler | undefined;
+    getRouter(): Router;
+}
+/**
+ * Convert a MiddlewareEntry (lazy import or function) into a MiddlewareFunction.
+ * Lazy imports are resolved on first call and cached.
+ */
+export declare function resolveMiddlewareEntry(entry: MiddlewareEntry): MiddlewareFunction;
+export {};
+//# sourceMappingURL=Server.d.ts.map

package/dist/server/Server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.d.ts","sourceRoot":"","sources":["../../src/server/Server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAEjD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAC1E;AAED,4DAA4D;AAC5D,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC;IAAE,OAAO,EAAE,CAAC,CAAA;CAAE,CAAC,CAAA;AAGzD,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,gBAAgB,CAAA;AAGxE,KAAK,0BAA0B,GAAG,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,eAAe,CAAA;AAEzE,mFAAmF;AACnF,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,0BAA0B,CAAC,GAAG,kBAAkB,CAAA;AAEzF,qBAAa,MAAM;;gBAOL,MAAM,EAAE,MAAM;IAI1B;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAKrC,yEAAyE;IACzE,iBAAiB,IAAI,SAAS,MAAM,EAAE;IAItC;;;;OAIG;IACH,GAAG,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,IAAI;IAOxC;;;OAGG;IACH,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAK1D,8EAA8E;IACxE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,mBAAmB,IAAI,kBAAkB,EAAE;IAI3C,eAAe,IAAI,gBAAgB,GAAG,SAAS;IAI/C,SAAS,IAAI,MAAM;CAGpB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,eAAe,GAAG,kBAAkB,CAiBjF"}

package/dist/server/Server.js

@@ -0,0 +1,113 @@
+/**
+ * Server — manages HTTP server middleware, error handler, and router.
+ *
+ * Like AdonisJS Server class:
+ * - server.use([() => import('#middleware/...')]) — lazy class middleware
+ * - server.errorHandler(() => import('#exceptions/handler')) — custom exception handler
+ */
+export class Server {
+    #router;
+    #serverMiddleware = [];
+    #errorHandlerImporter;
+    #resolvedErrorHandler;
+    #trustedProxies = [];
+    constructor(router) {
+        this.#router = router;
+    }
+    /**
+     * Configure the trusted-proxy CIDR list. The Rust HyperServer uses it to
+     * pre-resolve `request.ip` once per request — JS reads the field, no CIDR
+     * matching in TS.
+     *
+     * Empty list (default, 2026-05+) is **strict fail-closed**: `X-Forwarded-For`
+     * and `X-Real-IP` are ignored entirely; only the socket peer is used.
+     * Apps deployed behind a reverse proxy must list the proxy's CIDR
+     * (`'10.0.0.0/8'`, `'192.0.2.0/24'`, etc.) or pass the `'*'` sentinel
+     * for permissive mode (accepts spoofing as the explicit trade-off when
+     * proxy CIDRs can't be enumerated).
+     */
+    trustedProxies(cidrs) {
+        this.#trustedProxies = [...cidrs];
+        return this;
+    }
+    /** Read the current trusted-proxy list (consumed by Ignitor at boot). */
+    getTrustedProxies() {
+        return this.#trustedProxies;
+    }
+    /**
+     * Register global server middleware.
+     * Accepts lazy imports of middleware classes (AdonisJS pattern):
+     *   server.use([() => import('#middleware/log_request_middleware')])
+     */
+    use(middleware) {
+        for (const mw of middleware) {
+            this.#serverMiddleware.push(resolveMiddlewareEntry(mw));
+        }
+        return this;
+    }
+    /**
+     * Register a custom error handler.
+     *   server.errorHandler(() => import('#exceptions/handler'))
+     */
+    errorHandler(handler) {
+        this.#errorHandlerImporter = handler;
+        return this;
+    }
+    /** Boot — resolve the error handler. Called by Ignitor during ready phase. */
+    async boot() {
+        if (this.#errorHandlerImporter) {
+            const mod = await this.#errorHandlerImporter();
+            const HandlerClass = mod.default;
+            this.#resolvedErrorHandler = new HandlerClass();
+        }
+    }
+    getServerMiddleware() {
+        return [...this.#serverMiddleware];
+    }
+    getErrorHandler() {
+        return this.#resolvedErrorHandler;
+    }
+    getRouter() {
+        return this.#router;
+    }
+}
+/**
+ * Convert a MiddlewareEntry (lazy import or function) into a MiddlewareFunction.
+ * Lazy imports are resolved on first call and cached.
+ */
+export function resolveMiddlewareEntry(entry) {
+    // Direct middleware function (2 params: ctx, next)
+    if (isMiddlewareFunction(entry)) {
+        return entry;
+    }
+    // Lazy import of a middleware class — resolve + cache on first invocation
+    // After isMiddlewareFunction returns false, entry is narrowed to LazyImport<MiddlewareClassConstructor>
+    const lazyImport = entry;
+    let cached;
+    return async (ctx, next) => {
+        if (!cached) {
+            const mod = await lazyImport();
+            cached = new mod.default();
+        }
+        await cached.handle(ctx, next);
+    };
+}
+/** Check if an entry is a direct middleware function (not a lazy import). */
+function isMiddlewareFunction(entry) {
+    // A lazy import factory returns a promise (dynamic import). Middleware functions don't.
+    // We check: if calling it with no args returns a thenable, it's a lazy import.
+    // Better heuristic: lazy imports are () => import(...) which have .length === 0
+    // and middleware functions have .length >= 2 (ctx, next).
+    // Edge case: arrow with defaults has length 1. But lazy import() always has length 0.
+    if (typeof entry !== 'function')
+        return false;
+    // Functions with 2+ params are definitely middleware
+    if (entry.length >= 2)
+        return true;
+    // Functions with 0 params are likely lazy imports
+    if (entry.length === 0)
+        return false;
+    // 1 param is ambiguous — treat as middleware (ctx only, no next)
+    return true;
+}
+//# sourceMappingURL=Server.js.map

package/dist/server/Server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.js","sourceRoot":"","sources":["../../src/server/Server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA2BH,MAAM,OAAO,MAAM;IACjB,OAAO,CAAQ;IACf,iBAAiB,GAAyB,EAAE,CAAA;IAC5C,qBAAqB,CAAgC;IACrD,qBAAqB,CAAmB;IACxC,eAAe,GAAa,EAAE,CAAA;IAE9B,YAAY,MAAc;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;IACvB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,KAAe;QAC5B,IAAI,CAAC,eAAe,GAAG,CAAC,GAAG,KAAK,CAAC,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,yEAAyE;IACzE,iBAAiB;QACf,OAAO,IAAI,CAAC,eAAe,CAAA;IAC7B,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,UAA6B;QAC/B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAA;QACzD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,OAAsC;QACjD,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAA;QACpC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAA;YAC9C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAA;YAChC,IAAI,CAAC,qBAAqB,GAAG,IAAI,YAAY,EAAE,CAAA;QACjD,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,qBAAqB,CAAA;IACnC,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,mDAAmD;IACnD,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,0EAA0E;IAC1E,wGAAwG;IACxG,MAAM,UAAU,GAAG,KAAK,CAAA;IACxB,IAAI,MAAmC,CAAA;IACvC,OAAO,KAAK,EAAE,GAAgB,EAAE,IAAyB,EAAE,EAAE;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAA;YAC9B,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAA;QAC5B,CAAC;QACD,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAChC,CAAC,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,oBAAoB,CAAC,KAAsB;IAClD,wFAAwF;IACxF,+EAA+E;IAC/E,gFAAgF;IAChF,0DAA0D;IAC1D,sFAAsF;IACtF,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAC7C,qDAAqD;IACrD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,kDAAkD;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,iEAAiE;IACjE,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/services/app.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Application singleton service.
+ *
+ * Usage:
+ *   import app from '@c9up/ream/services/app'
+ *   const logger = app.container.make('logger')
+ *   if (app.inProduction) { ... }
+ */
+import type { Application } from '../Application.js';
+/** @internal Set the app instance (called by Ignitor). */
+export declare function setApp(app: Application): void;
+declare const app: Application;
+export default app;
+//# sourceMappingURL=app.d.ts.map

package/dist/services/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/services/app.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAIpD,0DAA0D;AAC1D,wBAAgB,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAE7C;AAED,QAAA,MAAM,GAAG,EAAE,WAaT,CAAA;AAEF,eAAe,GAAG,CAAA"}

package/dist/services/app.js

@@ -0,0 +1,27 @@
+/**
+ * Application singleton service.
+ *
+ * Usage:
+ *   import app from '@c9up/ream/services/app'
+ *   const logger = app.container.make('logger')
+ *   if (app.inProduction) { ... }
+ */
+let instance;
+/** @internal Set the app instance (called by Ignitor). */
+export function setApp(app) {
+    instance = app;
+}
+const app = new Proxy({}, {
+    get(_target, prop) {
+        if (!instance) {
+            throw new Error('Application accessed before initialization. ' +
+                'Ensure this code runs during or after the boot phase.');
+        }
+        // Bind methods so private-field writes inside the class resolve
+        // against the real instance brand instead of the Proxy.
+        const value = Reflect.get(instance, prop, instance);
+        return typeof value === 'function' ? value.bind(instance) : value;
+    },
+});
+export default app;
+//# sourceMappingURL=app.js.map

package/dist/services/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/services/app.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,IAAI,QAAiC,CAAA;AAErC,0DAA0D;AAC1D,MAAM,UAAU,MAAM,CAAC,GAAgB;IACrC,QAAQ,GAAG,GAAG,CAAA;AAChB,CAAC;AAED,MAAM,GAAG,GAAgB,IAAI,KAAK,CAAC,EAAiB,EAAE;IACpD,GAAG,CAAC,OAAO,EAAE,IAAI;QACf,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,8CAA8C;gBAC5C,uDAAuD,CAC1D,CAAA;QACH,CAAC;QACD,gEAAgE;QAChE,wDAAwD;QACxD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QACnD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACnE,CAAC;CACF,CAAC,CAAA;AAEF,eAAe,GAAG,CAAA"}

package/dist/services/router.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Router singleton service — proxy to the Ignitor's router instance.
+ *
+ * Usage in module route files:
+ *   import router from '@c9up/ream/services/router'
+ *   router.get('/tasks', [TasksController, 'index'])
+ *
+ * The proxy is initialized by Ignitor before preload files are imported.
+ */
+import type { Router } from '../router/Router.js';
+/** @internal Set the router instance (called by Ignitor). */
+export declare function setRouter(router: Router): void;
+/** @internal Get the router instance directly. */
+export declare function getRouter(): Router | undefined;
+/**
+ * Router proxy — defers all property access to the underlying instance.
+ * Throws if accessed before Ignitor initializes it.
+ */
+declare const router: Router;
+export default router;
+//# sourceMappingURL=router.d.ts.map

package/dist/services/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/services/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAIjD,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED,kDAAkD;AAClD,wBAAgB,SAAS,IAAI,MAAM,GAAG,SAAS,CAE9C;AAED;;;GAGG;AACH,QAAA,MAAM,MAAM,EAAE,MAaZ,CAAA;AAEF,eAAe,MAAM,CAAA"}

package/dist/services/router.js

@@ -0,0 +1,36 @@
+/**
+ * Router singleton service — proxy to the Ignitor's router instance.
+ *
+ * Usage in module route files:
+ *   import router from '@c9up/ream/services/router'
+ *   router.get('/tasks', [TasksController, 'index'])
+ *
+ * The proxy is initialized by Ignitor before preload files are imported.
+ */
+let instance;
+/** @internal Set the router instance (called by Ignitor). */
+export function setRouter(router) {
+    instance = router;
+}
+/** @internal Get the router instance directly. */
+export function getRouter() {
+    return instance;
+}
+/**
+ * Router proxy — defers all property access to the underlying instance.
+ * Throws if accessed before Ignitor initializes it.
+ */
+const router = new Proxy({}, {
+    get(_target, prop) {
+        if (!instance) {
+            throw new Error('Router accessed before initialization. ' +
+                'Ensure your route files are loaded as preloads in reamrc.ts, not at import time.');
+        }
+        // Bind methods so private-field writes inside the class resolve
+        // against the real instance brand instead of the Proxy.
+        const value = Reflect.get(instance, prop, instance);
+        return typeof value === 'function' ? value.bind(instance) : value;
+    },
+});
+export default router;
+//# sourceMappingURL=router.js.map

package/dist/services/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/services/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,IAAI,QAA4B,CAAA;AAEhC,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,QAAQ,GAAG,MAAM,CAAA;AACnB,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,SAAS;IACvB,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,MAAM,GAAW,IAAI,KAAK,CAAC,EAAY,EAAE;IAC7C,GAAG,CAAC,OAAO,EAAE,IAAI;QACf,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,yCAAyC;gBACvC,kFAAkF,CACrF,CAAA;QACH,CAAC;QACD,gEAAgE;QAChE,wDAAwD;QACxD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QACnD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACnE,CAAC;CACF,CAAC,CAAA;AAEF,eAAe,MAAM,CAAA"}

package/dist/services/server.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Server singleton service — proxy to the Ignitor's Server instance.
+ *
+ * Usage in start/kernel.ts:
+ *   import server from '@c9up/ream/services/server'
+ *   server.errorHandler(() => import('#exceptions/handler'))
+ *   server.use([() => import('#middleware/logging')])
+ */
+import type { Server } from '../server/Server.js';
+/** @internal Set the server instance (called by Ignitor). */
+export declare function setServer(server: Server): void;
+/** @internal Get the server instance directly. */
+export declare function getServer(): Server | undefined;
+declare const server: Server;
+export default server;
+//# sourceMappingURL=server.d.ts.map

package/dist/services/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/services/server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAIjD,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED,kDAAkD;AAClD,wBAAgB,SAAS,IAAI,MAAM,GAAG,SAAS,CAE9C;AAED,QAAA,MAAM,MAAM,EAAE,MAcZ,CAAA;AAEF,eAAe,MAAM,CAAA"}