@critical-path/server 0.13.5 → 0.15.0

package/CHANGELOG.md

@@ -1,5 +1,68 @@
 # @critical-path/server
 
+## 0.15.0
+
+### Minor Changes
+
+- 6dd5529: Add request context, authentication hooks and actor attribution.
+  
+  **@critical-path/core**
+  - New `engine.withActor(actor)` returns a per-request view that attributes every mutation (activity log, comment authors, reactions, time entries, attachment uploaders, task reporters) to the actor and ignores identity fields supplied in payloads. New exported `Actor` type.
+  
+  **@critical-path/server**
+  - New router options, accepted by all adapters as a second argument: `getContext` (resolve the caller per request), `requireAuth` (401 without a user), `basePath` (exact mount path), and `cors` (origin allow-list, credentials, or `false`).
+  - With a resolved user, identity fields in request bodies (`actorId`, `authorId`, `userId`, `uploaderId`) are ignored. Reaction routes no longer require `userId` in the body when a user is resolved.
+  - `createSvelteKitHandler` options take `getContext(event)` so `event.locals` is available; `configOrRouter` is now optional.
+  - New `createUniversalHandler(config, options)` for Workers, Deno, Bun and Hono.
+  - `handleRequest(request, { getContext })` lets custom adapters supply a per-request resolver.
+  
+  **@critical-path/mcp**
+  - CLI `--api` mode reads `CRITICAL_PATH_API_TOKEN` (sent as a Bearer token) and accepts repeatable `--header "Name: value"`, warning when credentials would go over plain http to a remote host.
+
+### Patch Changes
+
+- Updated dependencies [6dd5529]
+  - @critical-path/core@0.23.0
+
+## 0.14.0
+
+### Minor Changes
+
+- b243a37: Fix correctness and safety issues found in a code audit.
+  
+  **@critical-path/core**
+  - `SQLiteStore` now loads `node:sqlite` via `process.getBuiltinModule`, fixing `require is not defined` when constructed from a filename in plain Node ESM.
+  - Removed the unused `better-sqlite3` runtime dependency.
+  - `engine.addDependency` now detects indirect cycles (e.g. A → B → C → D → A), not just cycles between direct neighbours.
+  - Fixed `generateKeyBetween` returning out-of-range, duplicate keys after repeated inserts after the same item. It now throws a `RangeError` when `a >= b`.
+  - Added `engine.deleteProject(id)`, which deletes a project's tasks through `deleteTask` and publishes a new `project.deleted` event and webhook.
+  - Added exported `ValidationError` and `NotFoundError` classes. `logTime` now rejects non-numeric hours.
+  
+  **@critical-path/server**
+  - `DELETE /projects/:id`, `POST /tasks/:id/dependencies` and `POST /time-entries` now go through the engine, so cycle checks, hour validation, roll-ups, events and webhooks apply.
+  - Added `PATCH /projects/:id`.
+  - `DELETE` on a resource that does not exist now returns `404` instead of `200 { success: false }`.
+  - Malformed JSON returns `400`, validation errors `400`, `NotFoundError` `404`, and dependency cycles `409`. Unexpected errors return a generic `500` message outside development.
+  - `OPTIONS` preflight requests return `204` with CORS headers.
+  - New router/adapter options: `onError(error, request)` to report unexpected errors or return a custom response, and `exposeErrors` to include real messages in 500 responses (defaults to on only when `NODE_ENV === 'development'`).
+  - `createNextHandler` returns a callable handler that also exposes per-method properties, so `export { handler as GET }` works as documented.
+  
+  **@critical-path/mcp**
+  - Tools excluded via the `tools` option can no longer be called by name.
+  - Tool arguments are validated with each tool's zod schema; undeclared fields are stripped.
+  - Tool listings include `title` and MCP `readOnlyHint` / `destructiveHint` annotations.
+  
+  **@critical-path/svelte**
+  - Rebuilt with the bundled `@critical-path/mcp` WebMCP argument validation.
+  
+  **@critical-path/client**
+  - Delete methods resolve to `false` when the server returns `404`, keeping their boolean contract with the new server behaviour.
+
+### Patch Changes
+
+- Updated dependencies [b243a37]
+  - @critical-path/core@0.22.0
+
 ## 0.13.5
 
 ### Patch Changes

package/README.md

@@ -30,6 +30,9 @@ const handler = createNextHandler({
 });
 
 export { handler as GET, handler as POST, handler as PUT, handler as PATCH, handler as DELETE, handler as OPTIONS };
+
+// Equivalent: the handler also exposes one property per method
+// export const { GET, POST, PUT, PATCH, DELETE, OPTIONS } = createNextHandler({ ... });
 ```
 
 ---
@@ -53,6 +56,71 @@ export const OPTIONS = handler.OPTIONS;
 
 ---
 
+## 🔐 Authentication, CORS & Mount Path
+
+Router options are the second argument to `createNextHandler`, `createSvelteKitHandler`, `createUniversalHandler` and `new CriticalPathRouter(config, options)`:
+
+| Option | Default | Description |
+| :--- | :--- | :--- |
+| `getContext(request)` | none | Resolve the caller (`{ userId, userName?, actorType?, ...extra }`). With a `userId`, every mutation is attributed to that user and identity fields in bodies (`actorId`, `authorId`, `userId`, `uploaderId`) are ignored. For SvelteKit it receives the `RequestEvent`, so `event.locals` is available. |
+| `requireAuth` | `false` | Return `401` unless `getContext` yields a `userId`. `OPTIONS` preflight is always allowed. |
+| `basePath` | strip up to first `/critical-path` | Exact mount path, e.g. `/api/pm`. Requests outside it return `404`. |
+| `cors` | `{ origins: '*' }` | `{ origins: string[] \| '*', credentials?, allowHeaders?, maxAge? }`, or `false` for no CORS headers. `credentials` cannot be combined with `'*'`. |
+| `onError`, `exposeErrors` | see below | Unexpected error reporting. |
+
+```ts
+export const { GET, POST, PUT, PATCH, DELETE, OPTIONS } = createNextHandler(
+  { store },
+  {
+    getContext: async () => {
+      const session = await auth();
+      return session?.user ? { userId: session.user.id } : null;
+    },
+    requireAuth: true,
+    cors: { origins: ['https://app.example.com'], credentials: true }
+  }
+);
+```
+
+For other Fetch runtimes (Workers, Deno, Bun, Hono), use `createUniversalHandler(config, options)`, which returns `(request) => Promise<Response>`.
+
+---
+
+## ⚠️ Error Responses
+
+| Status | When |
+| :--- | :--- |
+| `400` | Malformed JSON, `ValidationError`, workflow transition or custom field validation failures |
+| `401` | `requireAuth` is set and no user was resolved |
+| `404` | Unknown route, `NotFoundError`, or `DELETE` of a resource that does not exist (successful deletes return `{ "success": true }`) |
+| `409` | `CircularDependencyError` (body includes `cyclePath`) |
+| `500` | Unexpected errors. The body is always `{ "error": "Internal Server Error" }`; the real error is logged with `console.error`. |
+
+`OPTIONS` preflight requests return `204` with CORS headers.
+
+### Reporting & Exposing Unexpected Errors
+
+Both adapters (and `new CriticalPathRouter(config, options)`) accept router options as a second argument:
+
+```ts
+export const { GET, POST, PUT, PATCH, DELETE, OPTIONS } = createNextHandler(
+  { store },
+  {
+    // Called only for unexpected (500) errors. Return a Response to replace the default.
+    onError: (error, request) => {
+      Sentry.captureException(error, { extra: { url: request.url } });
+    },
+    // Include real error messages in 500 responses.
+    // Defaults to true only when NODE_ENV === 'development'.
+    exposeErrors: false
+  }
+);
+```
+
+Without `onError`, unexpected errors are logged with `console.error`. Expected errors (400, 404, 409) always include their message and never reach `onError`.
+
+---
+
 ## 📄 License
 
 MIT © [Critical Path](https://github.com/Pixerate/Critical-Path)

package/dist/adapters/next.d.ts

@@ -1,11 +1,21 @@
-import { CriticalPathRouter } from '../router.js';
+import { CriticalPathRouter, type CriticalPathRouterOptions } from '../router.js';
 import type { CriticalPathConfig } from '@critical-path/core';
-export declare function createNextHandler(configOrRouter: CriticalPathConfig | CriticalPathRouter): {
-    GET: (request: Request) => Promise<Response>;
-    POST: (request: Request) => Promise<Response>;
-    PUT: (request: Request) => Promise<Response>;
-    PATCH: (request: Request) => Promise<Response>;
-    DELETE: (request: Request) => Promise<Response>;
-    OPTIONS: (request: Request) => Promise<Response>;
+type NextRouteHandler = (request: Request) => Promise<Response>;
+export type CriticalPathNextHandler = NextRouteHandler & {
+    GET: NextRouteHandler;
+    POST: NextRouteHandler;
+    PUT: NextRouteHandler;
+    PATCH: NextRouteHandler;
+    DELETE: NextRouteHandler;
+    OPTIONS: NextRouteHandler;
 };
+/**
+ * Creates a Next.js App Router route handler. The result is callable and also exposes one
+ * property per HTTP method, so both export styles work:
+ *
+ *   export const { GET, POST, PUT, PATCH, DELETE, OPTIONS } = createNextHandler(config);
+ *   export { handler as GET, handler as POST, ... };
+ */
+export declare function createNextHandler(configOrRouter: CriticalPathConfig | CriticalPathRouter, options?: CriticalPathRouterOptions): CriticalPathNextHandler;
+export {};
 //# sourceMappingURL=next.d.ts.map

package/dist/adapters/next.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"next.d.ts","sourceRoot":"","sources":["../../src/adapters/next.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,kBAAkB,GAAG,kBAAkB;mBAKvD,OAAO;oBAAP,OAAO;mBAAP,OAAO;qBAAP,OAAO;sBAAP,OAAO;uBAAP,OAAO;EAYxC"}
+{"version":3,"file":"next.d.ts","sourceRoot":"","sources":["../../src/adapters/next.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,KAAK,gBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,GAAG;IACvD,GAAG,EAAE,gBAAgB,CAAC;IACtB,IAAI,EAAE,gBAAgB,CAAC;IACvB,GAAG,EAAE,gBAAgB,CAAC;IACtB,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,gBAAgB,CAAC;CAC3B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,cAAc,EAAE,kBAAkB,GAAG,kBAAkB,EACvD,OAAO,CAAC,EAAE,yBAAyB,GAClC,uBAAuB,CAiBzB"}

package/dist/adapters/next.js

@@ -1,18 +1,25 @@
 import { CriticalPathRouter } from '../router.js';
-export function createNextHandler(configOrRouter) {
+/**
+ * Creates a Next.js App Router route handler. The result is callable and also exposes one
+ * property per HTTP method, so both export styles work:
+ *
+ *   export const { GET, POST, PUT, PATCH, DELETE, OPTIONS } = createNextHandler(config);
+ *   export { handler as GET, handler as POST, ... };
+ */
+export function createNextHandler(configOrRouter, options) {
     const router = configOrRouter instanceof CriticalPathRouter
         ? configOrRouter
-        : new CriticalPathRouter(configOrRouter);
+        : new CriticalPathRouter(configOrRouter, options);
     const handler = async (request) => {
         return router.handleRequest(request);
     };
-    return {
+    return Object.assign(handler, {
         GET: handler,
         POST: handler,
         PUT: handler,
         PATCH: handler,
         DELETE: handler,
         OPTIONS: handler
-    };
+    });
 }
 //# sourceMappingURL=next.js.map

package/dist/adapters/next.js.map

@@ -1 +1 @@
-{"version":3,"file":"next.js","sourceRoot":"","sources":["../../src/adapters/next.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGlD,MAAM,UAAU,iBAAiB,CAAC,cAAuD;IACvF,MAAM,MAAM,GAAG,cAAc,YAAY,kBAAkB;QACzD,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,KAAK,EAAE,OAAgB,EAAE,EAAE;QACzC,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"next.js","sourceRoot":"","sources":["../../src/adapters/next.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAkC,MAAM,cAAc,CAAC;AAclF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,cAAuD,EACvD,OAAmC;IAEnC,MAAM,MAAM,GAAG,cAAc,YAAY,kBAAkB;QACzD,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,IAAI,kBAAkB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAqB,KAAK,EAAE,OAAgB,EAAE,EAAE;QAC3D,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QAC5B,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/sveltekit.d.ts

@@ -1,23 +1,21 @@
-import { CriticalPathRouter } from '../router.js';
+import { CriticalPathRouter, type CriticalPathRouterOptions, type RequestContext } from '../router.js';
 import type { CriticalPathConfig } from '@critical-path/core';
-export declare function createSvelteKitHandler(configOrRouter: CriticalPathConfig | CriticalPathRouter): {
-    GET: ({ request }: {
-        request: Request;
-    }) => Promise<Response>;
-    POST: ({ request }: {
-        request: Request;
-    }) => Promise<Response>;
-    PUT: ({ request }: {
-        request: Request;
-    }) => Promise<Response>;
-    PATCH: ({ request }: {
-        request: Request;
-    }) => Promise<Response>;
-    DELETE: ({ request }: {
-        request: Request;
-    }) => Promise<Response>;
-    OPTIONS: ({ request }: {
-        request: Request;
-    }) => Promise<Response>;
+/** The subset of a SvelteKit `RequestEvent` the adapter uses. */
+export interface SvelteKitRequestEvent {
+    request: Request;
+    locals?: Record<string, any>;
+    [key: string]: unknown;
+}
+export interface SvelteKitHandlerOptions<TEvent extends SvelteKitRequestEvent = SvelteKitRequestEvent> extends Omit<CriticalPathRouterOptions, 'getContext'> {
+    /** Resolves the caller from the SvelteKit event, e.g. `event.locals.user` set by a hook. */
+    getContext?: (event: TEvent) => RequestContext | null | undefined | Promise<RequestContext | null | undefined>;
+}
+export declare function createSvelteKitHandler<TEvent extends SvelteKitRequestEvent = SvelteKitRequestEvent>(configOrRouter?: CriticalPathConfig | CriticalPathRouter, options?: SvelteKitHandlerOptions<TEvent>): {
+    GET: (event: TEvent) => Promise<Response>;
+    POST: (event: TEvent) => Promise<Response>;
+    PUT: (event: TEvent) => Promise<Response>;
+    PATCH: (event: TEvent) => Promise<Response>;
+    DELETE: (event: TEvent) => Promise<Response>;
+    OPTIONS: (event: TEvent) => Promise<Response>;
 };
 //# sourceMappingURL=sveltekit.d.ts.map

package/dist/adapters/sveltekit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sveltekit.d.ts","sourceRoot":"","sources":["../../src/adapters/sveltekit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,wBAAgB,sBAAsB,CAAC,cAAc,EAAE,kBAAkB,GAAG,kBAAkB;uBAKxD;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;wBAApB;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;uBAApB;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;yBAApB;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;0BAApB;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;2BAApB;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;EAYzD"}
+{"version":3,"file":"sveltekit.d.ts","sourceRoot":"","sources":["../../src/adapters/sveltekit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB,CAAC,MAAM,SAAS,qBAAqB,GAAG,qBAAqB,CACnG,SAAQ,IAAI,CAAC,yBAAyB,EAAE,YAAY,CAAC;IACrD,4FAA4F;IAC5F,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CAChH;AAED,wBAAgB,sBAAsB,CAAC,MAAM,SAAS,qBAAqB,GAAG,qBAAqB,EACjG,cAAc,GAAE,kBAAkB,GAAG,kBAAuB,EAC5D,OAAO,GAAE,uBAAuB,CAAC,MAAM,CAAM;iBAOf,MAAM;kBAAN,MAAM;iBAAN,MAAM;mBAAN,MAAM;oBAAN,MAAM;qBAAN,MAAM;EAYrC"}

package/dist/adapters/sveltekit.js

@@ -1,10 +1,11 @@
 import { CriticalPathRouter } from '../router.js';
-export function createSvelteKitHandler(configOrRouter) {
+export function createSvelteKitHandler(configOrRouter = {}, options = {}) {
+    const { getContext, ...routerOptions } = options;
     const router = configOrRouter instanceof CriticalPathRouter
         ? configOrRouter
-        : new CriticalPathRouter(configOrRouter);
-    const handler = async ({ request }) => {
-        return router.handleRequest(request);
+        : new CriticalPathRouter(configOrRouter, routerOptions);
+    const handler = async (event) => {
+        return router.handleRequest(event.request, getContext ? { getContext: () => getContext(event) } : {});
     };
     return {
         GET: handler,

package/dist/adapters/sveltekit.js.map

@@ -1 +1 @@
-{"version":3,"file":"sveltekit.js","sourceRoot":"","sources":["../../src/adapters/sveltekit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGlD,MAAM,UAAU,sBAAsB,CAAC,cAAuD;IAC5F,MAAM,MAAM,GAAG,cAAc,YAAY,kBAAkB;QACzD,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,KAAK,EAAE,EAAE,OAAO,EAAwB,EAAE,EAAE;QAC1D,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sveltekit.js","sourceRoot":"","sources":["../../src/adapters/sveltekit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAuD,MAAM,cAAc,CAAC;AAgBvG,MAAM,UAAU,sBAAsB,CACpC,iBAA0D,EAAE,EAC5D,UAA2C,EAAE;IAE7C,MAAM,EAAE,UAAU,EAAE,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IACjD,MAAM,MAAM,GAAG,cAAc,YAAY,kBAAkB;QACzD,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,IAAI,kBAAkB,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QACtC,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC"}

package/dist/adapters/universal.d.ts

@@ -0,0 +1,8 @@
+import { CriticalPathRouter, type CriticalPathRouterOptions } from '../router.js';
+import type { CriticalPathConfig } from '@critical-path/core';
+/**
+ * Creates a plain `(request: Request) => Promise<Response>` handler for any Fetch-compatible
+ * runtime (Cloudflare Workers, Deno, Bun, Hono, or Node frameworks with a Request bridge).
+ */
+export declare function createUniversalHandler(configOrRouter?: CriticalPathConfig | CriticalPathRouter, options?: CriticalPathRouterOptions): (request: Request) => Promise<Response>;
+//# sourceMappingURL=universal.d.ts.map

package/dist/adapters/universal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"universal.d.ts","sourceRoot":"","sources":["../../src/adapters/universal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,cAAc,GAAE,kBAAkB,GAAG,kBAAuB,EAC5D,OAAO,CAAC,EAAE,yBAAyB,GAClC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAKzC"}

package/dist/adapters/universal.js

@@ -0,0 +1,12 @@
+import { CriticalPathRouter } from '../router.js';
+/**
+ * Creates a plain `(request: Request) => Promise<Response>` handler for any Fetch-compatible
+ * runtime (Cloudflare Workers, Deno, Bun, Hono, or Node frameworks with a Request bridge).
+ */
+export function createUniversalHandler(configOrRouter = {}, options) {
+    const router = configOrRouter instanceof CriticalPathRouter
+        ? configOrRouter
+        : new CriticalPathRouter(configOrRouter, options);
+    return (request) => router.handleRequest(request);
+}
+//# sourceMappingURL=universal.js.map

package/dist/adapters/universal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"universal.js","sourceRoot":"","sources":["../../src/adapters/universal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAkC,MAAM,cAAc,CAAC;AAGlF;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,iBAA0D,EAAE,EAC5D,OAAmC;IAEnC,MAAM,MAAM,GAAG,cAAc,YAAY,kBAAkB;QACzD,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,IAAI,kBAAkB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,CAAC,OAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from './router.js';
 export * from './adapters/next.js';
 export * from './adapters/sveltekit.js';
+export * from './adapters/universal.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -1,4 +1,5 @@
 export * from './router.js';
 export * from './adapters/next.js';
 export * from './adapters/sveltekit.js';
+export * from './adapters/universal.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}