@effectstream/utils 0.104.0 → 0.104.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@effectstream/utils",
-  "version": "0.104.0",
+  "version": "0.104.3",
   "license": "(MIT OR Apache-2.0)",
   "homepage": "https://effectstream.github.io/docs/",
   "repository": {
@@ -17,7 +17,8 @@
     "./node-env": "./src/config.ts",
     "./runtime": "./src/runtime.ts",
     "./runtime-spawn": "./src/runtime-spawn.ts",
-    "./fs": "./src/fs.ts"
+    "./fs": "./src/fs.ts",
+    "./polkadot-esm-cjs-warning": "./src/polkadot-esm-cjs-warning.ts"
   },
   "dependencies": {
     "@coderspirit/nominal": "^4.1.1",

package/src/config.ts

@@ -207,6 +207,13 @@ const definitions: Record<string, ConfigDefinition> = {
     description:
       "Main Paima API Port. Used by developers custom endpoints and RPC endpoints. Example: '9999'",
   },
+  EFFECTSTREAM_TRUST_PROXY: {
+    key: "EFFECTSTREAM_TRUST_PROXY",
+    type: "string",
+    defaultValue: "true",
+    description:
+      "Whether the HTTP server trusts X-Forwarded-For / X-Forwarded-Proto from a reverse proxy in front of it, so request.ip is the client and not the proxy. 'true' (default, trust every hop), 'false' (never), or a comma-separated list of proxy IPs/CIDRs such as '127.0.0.1,10.0.0.0/8'. Mirrors Fastify's trustProxy option.",
+  },
   EFFECTSTREAM_EXPLORER_PORT: {
     key: "EFFECTSTREAM_EXPLORER_PORT",
     type: "number",
@@ -412,6 +419,9 @@ export class ENV {
   static get EFFECTSTREAM_API_PORT(): number {
     return ENV.getConfig(definitions.EFFECTSTREAM_API_PORT);
   }
+  static get EFFECTSTREAM_TRUST_PROXY(): string {
+    return ENV.getConfig(definitions.EFFECTSTREAM_TRUST_PROXY);
+  }
   static get RECAPTCHA_V3_FRONTEND(): string {
     return ENV.getConfig(definitions.RECAPTCHA_V3_FRONTEND);
   }

package/src/polkadot-esm-cjs-warning.ts

@@ -0,0 +1,39 @@
+/**
+ * Side-effect-only module. Import it as the FIRST statement of any module that
+ * imports a `@polkadot/*` package (directly, or via a wrapper such as
+ * `avail-js-sdk`), and never import it lazily.
+ *
+ * Why: every `@polkadot/*` package registers itself in `globalThis.__polkadotjs`
+ * at load time and warns when it sees more than one entry for the same package.
+ * We load two entries — but of the same version, in two module formats:
+ *
+ *   esm  `@effectstream/crypto` ships raw TS, so Bun loads it as ESM, and
+ *        `chains/polkadot.ts` pulls the ESM build of `@polkadot/util-crypto`.
+ *   cjs  `avail-js-sdk` is CommonJS-only, so its `require("@polkadot/api")`
+ *        can only ever resolve the `cjs/` build.
+ *
+ * The result is six warnings ("@polkadot/util has multiple versions...") on
+ * every start, telling the user to pin or dedupe. There is nothing to dedupe:
+ * only one version of each package is installed. Setting the flag below is the
+ * escape hatch `@polkadot/util` provides for exactly this case — it suppresses
+ * the message only when every registered entry has the same version, so a
+ * genuine multi-version conflict still warns.
+ *
+ * To see the warnings again, set POLKADOTJS_DISABLE_ESM_CJS_WARNING=0 — an
+ * explicit value in the environment always wins over the default set here.
+ *
+ * Ordering matters: `@polkadot/util` reads this variable while it is being
+ * evaluated, i.e. during the first `@polkadot/*` import in the process. Setting
+ * it afterwards has no effect.
+ *
+ * See spec/00009-polkadot-package-conflicts.md in the organizer workspace for
+ * the captured stack traces behind the two loads.
+ */
+const FLAG = "POLKADOTJS_DISABLE_ESM_CJS_WARNING";
+
+// `process` is absent in browser/bundler builds; there is nothing to set there.
+const env = globalThis.process?.env;
+
+if (env && env[FLAG] === undefined) {
+  env[FLAG] = "1";
+}