@faapi/faapi 3.2.1 → 3.3.0

package/dist/index.js

@@ -67,6 +67,45 @@ function createProgram(filePath) {
   if (cached) {
     return cached;
   }
+  const program = buildProgram([filePath], findTsConfig(filePath));
+  programCache.set(filePath, program);
+  return program;
+}
+function createPrograms(filePaths) {
+  const unique = [...new Set(filePaths)];
+  const result = /* @__PURE__ */ new Map();
+  const groups = /* @__PURE__ */ new Map();
+  const noTsconfigFiles = [];
+  for (const filePath of unique) {
+    const tsconfigPath = findTsConfig(filePath);
+    if (!tsconfigPath) {
+      noTsconfigFiles.push(filePath);
+      continue;
+    }
+    const group = groups.get(tsconfigPath);
+    if (group) {
+      group.files.push(filePath);
+    } else {
+      groups.set(tsconfigPath, { tsconfigPath, files: [filePath] });
+    }
+  }
+  for (const { tsconfigPath, files } of groups.values()) {
+    const cacheKey = `shared::${tsconfigPath}::${[...files].sort().join("|")}`;
+    let program = programCache.get(cacheKey);
+    if (!program) {
+      program = buildProgram(files, tsconfigPath);
+      programCache.set(cacheKey, program);
+    }
+    for (const filePath of files) {
+      result.set(filePath, program);
+    }
+  }
+  for (const filePath of noTsconfigFiles) {
+    result.set(filePath, createProgram(filePath));
+  }
+  return result;
+}
+function buildProgram(entryFiles, tsconfigPath) {
   const options = {
     strict: true,
     target: ts.ScriptTarget.ES2022,
@@ -75,8 +114,7 @@ function createProgram(filePath) {
     skipLibCheck: true,
     noEmit: true
   };
-  let rootNames = [filePath];
-  const tsconfigPath = findTsConfig(filePath);
+  const rootNames = [...entryFiles];
   if (tsconfigPath) {
     const tsOptions = parseTsConfig(tsconfigPath);
     if (tsOptions.module !== void 0) {
@@ -86,16 +124,14 @@ function createProgram(filePath) {
       options.moduleResolution = tsOptions.moduleResolution;
     }
     if (tsOptions.fileNames.length > 0) {
-      if (!tsOptions.fileNames.includes(filePath)) {
-        rootNames = [filePath, ...tsOptions.fileNames];
-      } else {
-        rootNames = tsOptions.fileNames;
+      for (const fileName of tsOptions.fileNames) {
+        if (!rootNames.includes(fileName)) {
+          rootNames.push(fileName);
+        }
       }
     }
   }
-  const program = ts.createProgram(rootNames, options);
-  programCache.set(filePath, program);
-  return program;
+  return ts.createProgram(rootNames, options);
 }
 var programCache, tsConfigCache;
 var init_createProgram = __esm({
@@ -1004,12 +1040,11 @@ function collectRouteSchemaSources(routes, rootDir) {
     }
     entry.methods.add(route.method);
   }
-  const programByFile = /* @__PURE__ */ new Map();
+  const programByFile = createPrograms([...methodsByFile.keys()]);
   const allTypesByFile = /* @__PURE__ */ new Map();
   const mergedAllTypes = /* @__PURE__ */ new Map();
   for (const filePath of methodsByFile.keys()) {
-    const program = createProgram(filePath);
-    programByFile.set(filePath, program);
+    const program = programByFile.get(filePath);
     const allTypes = extractAllTypes(program, filePath);
     allTypesByFile.set(filePath, allTypes);
     for (const [name, info] of allTypes) {
@@ -1877,6 +1912,7 @@ var state = createDevOnDemandState();
 function clearCompiledFiles() {
   state.compiledFiles.clear();
   state.inFlightCompilations.clear();
+  sourcePathCache.clear();
 }
 async function ensureCompiled(sourceAbsPath, rootDir, dist) {
   const inFlight = state.inFlightCompilations.get(sourceAbsPath);
@@ -1973,7 +2009,10 @@ async function deleteSchemaFiles(routes, rootDir, dist) {
     }
   }
 }
+var sourcePathCache = /* @__PURE__ */ new Map();
 function prodPathToSourcePath(prodAbsPath, rootDir, dist) {
+  const cached = sourcePathCache.get(prodAbsPath);
+  if (cached) return cached;
   const rel = path7.relative(rootDir, prodAbsPath).replace(/\\/g, "/");
   let relWithoutDist = rel;
   if (relWithoutDist.startsWith(`${dist}/`)) {
@@ -1982,8 +2021,14 @@ function prodPathToSourcePath(prodAbsPath, rootDir, dist) {
   const srcRel = `src/${relWithoutDist}`;
   const tsRel = srcRel.replace(/\.js$/, ".ts");
   const tsAbs = path7.resolve(rootDir, tsRel);
-  if (fs6.existsSync(tsAbs)) return tsAbs;
-  return path7.resolve(rootDir, srcRel);
+  let result;
+  if (fs6.existsSync(tsAbs)) {
+    result = tsAbs;
+  } else {
+    result = path7.resolve(rootDir, srcRel);
+  }
+  sourcePathCache.set(prodAbsPath, result);
+  return result;
 }
 function isDevOnDemandEnabled() {
   return state.enabled;
@@ -2224,15 +2269,16 @@ function collectToolSchemaSources(tools, rootDir) {
     }
     list.push(tool);
   }
+  const programByFile = createPrograms([...toolsByFile.keys()]);
   const allTypesByFile = /* @__PURE__ */ new Map();
   for (const filePath of toolsByFile.keys()) {
-    const program = createProgram(filePath);
+    const program = programByFile.get(filePath);
     const allTypes = extractAllTypes(program, filePath);
     allTypesByFile.set(filePath, allTypes);
   }
   const sources = [];
   for (const [filePath, fileTools] of toolsByFile) {
-    const program = createProgram(filePath);
+    const program = programByFile.get(filePath);
     for (const tool of fileTools) {
       const inputTypeName = tool.inputTypeName;
       const typeInfo = extractTypeInfo(program, filePath, inputTypeName);
@@ -2285,9 +2331,10 @@ async function maybeGenerateHelpers(allSourceCode, distDir) {
 }
 async function generateToolArtifacts(tools, rootDir, dist, options) {
   const metadata = [];
+  const programByFile = createPrograms(tools.map((m) => path8.resolve(rootDir, m.filePath)));
   for (const manifest of tools) {
     const absPath = path8.resolve(rootDir, manifest.filePath);
-    const program = createProgram(absPath);
+    const program = programByFile.get(absPath);
     const result = extractToolMetadata(program, absPath, manifest.functionName, {
       name: manifest.name,
       filePath: manifest.filePath
@@ -2353,11 +2400,14 @@ function getDist() {
   }
   return process.env.FAAPI_DIST ?? "dist";
 }
+function getToolSchemaPath(tool, rootDir) {
+  const dist = getDist();
+  return getRuntimeToolSchemaPath(tool.filePath, dist, rootDir ?? process.cwd());
+}
 async function loadToolSchema(tool, rootDir) {
   if (!tool.inputTypeName) return void 0;
   const schemaName = `${tool.inputTypeName}Schema`;
-  const dist = getDist();
-  const zodPath = getRuntimeToolSchemaPath(tool.filePath, dist, rootDir ?? process.cwd());
+  const zodPath = getToolSchemaPath(tool, rootDir);
   if (!existsSync2(zodPath)) return void 0;
   try {
     const mod = await importWithCacheBust(zodPath, isDevOnDemandEnabled());
@@ -2701,7 +2751,7 @@ var PayloadTooLargeError = class extends FaapiError {
 };
 
 // src/cli/createAppCore.ts
-import fs16 from "fs";
+import fs15 from "fs";
 import path15 from "path";
 import { PassThrough, Readable as Readable3 } from "stream";
 
@@ -2758,15 +2808,50 @@ import { Readable as Readable2 } from "stream";
 import path12 from "path";
 
 // src/router/matchRoute.ts
-function matchRoute(routes, method, path19) {
+var httpIndexCache = /* @__PURE__ */ new WeakMap();
+var wsIndexCache = /* @__PURE__ */ new WeakMap();
+function getHttpIndex(routes) {
+  let index = httpIndexCache.get(routes);
+  if (index) return index;
+  index = { static: /* @__PURE__ */ new Map(), methodsByStaticPath: /* @__PURE__ */ new Map(), dynamics: [] };
   for (const route of routes) {
-    if (route.method !== method) {
-      continue;
-    }
-    if (!route.isDynamic) {
-      if (route.urlPath === path19) {
-        return { route, params: {} };
+    if (route.isDynamic) {
+      index.dynamics.push(route);
+    } else {
+      index.static.set(`${route.method}|${route.urlPath}`, route);
+      let methods = index.methodsByStaticPath.get(route.urlPath);
+      if (!methods) {
+        methods = /* @__PURE__ */ new Set();
+        index.methodsByStaticPath.set(route.urlPath, methods);
       }
+      methods.add(route.method);
+    }
+  }
+  httpIndexCache.set(routes, index);
+  return index;
+}
+function getWsIndex(routes) {
+  let index = wsIndexCache.get(routes);
+  if (index) return index;
+  index = { static: /* @__PURE__ */ new Map(), dynamics: [] };
+  for (const route of routes) {
+    if (route.isDynamic) {
+      index.dynamics.push(route);
+    } else {
+      index.static.set(route.urlPath, route);
+    }
+  }
+  wsIndexCache.set(routes, index);
+  return index;
+}
+function matchRoute(routes, method, path19) {
+  const index = getHttpIndex(routes);
+  const staticHit = index.static.get(`${method}|${path19}`);
+  if (staticHit) {
+    return { route: staticHit, params: {} };
+  }
+  for (const route of index.dynamics) {
+    if (route.method !== method) {
       continue;
     }
     const params = matchDynamicPath(route.urlPath, path19, route.paramNames, route.isCatchAll);
@@ -2777,13 +2862,12 @@ function matchRoute(routes, method, path19) {
   return null;
 }
 function matchWsRoute(wsRoutes, path19) {
-  for (const route of wsRoutes) {
-    if (!route.isDynamic) {
-      if (route.urlPath === path19) {
-        return { route, params: {} };
-      }
-      continue;
-    }
+  const index = getWsIndex(wsRoutes);
+  const staticHit = index.static.get(path19);
+  if (staticHit) {
+    return { route: staticHit, params: {} };
+  }
+  for (const route of index.dynamics) {
     const params = matchDynamicPath(route.urlPath, path19, route.paramNames, route.isCatchAll);
     if (params !== null) {
       return { route, params };
@@ -2791,6 +2875,23 @@ function matchWsRoute(wsRoutes, path19) {
   }
   return null;
 }
+function findAllowedMethods(routes, path19) {
+  const index = getHttpIndex(routes);
+  const methods = /* @__PURE__ */ new Set();
+  const staticMethods = index.methodsByStaticPath.get(path19);
+  if (staticMethods) {
+    for (const method of staticMethods) {
+      methods.add(method);
+    }
+  }
+  for (const route of index.dynamics) {
+    const params = matchDynamicPath(route.urlPath, path19, route.paramNames, route.isCatchAll);
+    if (params !== null) {
+      methods.add(route.method);
+    }
+  }
+  return Array.from(methods);
+}
 function matchDynamicPath(pattern, path19, paramNames, isCatchAll) {
   const patternSegments = pattern.split("/").filter(Boolean);
   const pathSegments = path19.split("/").filter(Boolean);
@@ -2838,9 +2939,6 @@ function matchDynamicPath(pattern, path19, paramNames, isCatchAll) {
   return params;
 }
 
-// src/loader/loadRouteModule.ts
-import fs12 from "fs";
-
 // src/loader/validateRouteModule.ts
 function validateRouteModule(value, method, filePath) {
   if (typeof value !== "function") {
@@ -2856,7 +2954,7 @@ async function loadRouteModule(filePath, method, rootDir) {
     const dist = getDevDist();
     if (dist) {
       const sourcePath = prodPathToSourcePath(filePath, rootDir, dist);
-      if (sourcePath && fs12.existsSync(sourcePath)) {
+      if (sourcePath) {
         try {
           await ensureCompiled(sourcePath, rootDir, dist);
         } catch (compileErr) {
@@ -3096,7 +3194,9 @@ function formatSetCookie(name, value, options) {
   return cookie;
 }
 function createContext(request, params, config = {}, ip = "") {
-  const url = new URL(request.url);
+  return createContextFromUrl(request, new URL(request.url), params, config, ip);
+}
+function createContextFromUrl(request, url, params, config = {}, ip = "") {
   const meta = { headers: {}, setCookies: [] };
   const parsedCookies = parseCookies(request.headers.get("cookie") ?? "");
   const cookiesObj = {};
@@ -3251,7 +3351,7 @@ async function parseMultipart(request) {
 
 // src/runtime/resolveInput.ts
 init_inputType();
-async function resolveInput(method, request) {
+async function resolveInputFromUrl(method, request, url) {
   const inputType = getInputTypeForMethod(method);
   if (inputType === "body") {
     const contentType = request.headers.get("content-type") ?? "";
@@ -3286,7 +3386,6 @@ async function resolveInput(method, request) {
     }
     return result.data;
   }
-  const url = new URL(request.url);
   return queryToObject(url.searchParams);
 }
 
@@ -3658,11 +3757,13 @@ function mapReceivedFromMessage(message) {
 init_inputType();
 
 // src/utils/getClientIp.ts
-function getClientIp(req) {
-  const xff = req.headers["x-forwarded-for"];
-  if (typeof xff === "string" && xff.length > 0) {
-    const first = xff.split(",")[0]?.trim();
-    if (first) return first;
+function getClientIp(req, trustedProxy = false) {
+  if (trustedProxy) {
+    const xff = req.headers["x-forwarded-for"];
+    if (typeof xff === "string" && xff.length > 0) {
+      const first = xff.split(",")[0]?.trim();
+      if (first) return first;
+    }
   }
   const remote = req.socket?.remoteAddress;
   if (remote) {
@@ -3675,7 +3776,7 @@ function getClientIp(req) {
 }
 
 // src/server/handleWsUpgrade.ts
-import fs13 from "fs";
+import fs12 from "fs";
 import { WebSocketServer, WebSocket } from "ws";
 import path11 from "path";
 
@@ -3803,7 +3904,7 @@ async function loadWsHandler(filePath, ctx, rootDir) {
     const dist = getDevDist();
     if (dist) {
       const sourcePath = prodPathToSourcePath(filePath, rootDir, dist);
-      if (sourcePath && fs13.existsSync(sourcePath)) {
+      if (sourcePath && fs12.existsSync(sourcePath)) {
         await ensureCompiled(sourcePath, rootDir, dist);
       }
     }
@@ -3861,7 +3962,7 @@ async function sendResponseToSocket(socket, response) {
   socket.destroy();
 }
 function attachWebSocket(options) {
-  const { server, routesRef, rootDir, config, globalMiddlewares } = options;
+  const { server, routesRef, rootDir, config, globalMiddlewares, trustedProxy = false } = options;
   const wss = new WebSocketServer({ noServer: true });
   server.on("upgrade", async (req, socket, head) => {
     const currentWsRoutes = routesRef.wsCurrent;
@@ -3877,7 +3978,7 @@ function attachWebSocket(options) {
     const host = req.headers.host ?? "localhost";
     const url = `http://${host}${req.url ?? "/"}`;
     const request = new Request(url, { method: "GET", headers });
-    const ctx = createContext(request, params, config, getClientIp(req));
+    const ctx = createContext(request, params, config, getClientIp(req, trustedProxy));
     const meta = ctx.meta;
     let upgraded = false;
     const finalHandler = async () => {
@@ -3947,16 +4048,26 @@ function toWebRequest(req, bodyLimit = DEFAULT_BODY_LIMIT) {
   const headers = nodeHttpToWebHeaders(req);
   const method = req.method ?? "GET";
   if (method === "GET" || method === "HEAD") {
-    return new Request(url.toString(), { method, headers });
+    return { request: new Request(url.toString(), { method, headers }), url };
+  }
+  const contentLength = req.headers["content-length"];
+  if (contentLength !== void 0) {
+    const declared = Number(Array.isArray(contentLength) ? contentLength[0] : contentLength);
+    if (Number.isFinite(declared) && declared > bodyLimit) {
+      throw new PayloadTooLargeError(bodyLimit);
+    }
   }
   const stream = Readable2.toWeb(req);
   const limitedStream = limitStreamSize(stream, bodyLimit);
-  return new Request(url.toString(), {
-    method,
-    headers,
-    body: limitedStream,
-    duplex: "half"
-  });
+  return {
+    request: new Request(url.toString(), {
+      method,
+      headers,
+      body: limitedStream,
+      duplex: "half"
+    }),
+    url
+  };
 }
 function limitStreamSize(stream, maxSize) {
   let totalSize = 0;
@@ -4008,22 +4119,6 @@ function limitStreamSize(stream, maxSize) {
     }
   });
 }
-function findAllowedMethods(routes, path19) {
-  const methods = /* @__PURE__ */ new Set();
-  for (const route of routes) {
-    if (route.urlPath === path19) {
-      methods.add(route.method);
-      continue;
-    }
-    if (route.isDynamic) {
-      const params = matchDynamicPath(route.urlPath, path19, route.paramNames, route.isCatchAll);
-      if (params !== null) {
-        methods.add(route.method);
-      }
-    }
-  }
-  return Array.from(methods);
-}
 function createServer(options) {
   const {
     routes,
@@ -4038,7 +4133,8 @@ function createServer(options) {
     helmet: helmetOption,
     logger: loggerOption,
     bodyLimit = DEFAULT_BODY_LIMIT,
-    http2: http2Option
+    http2: http2Option,
+    trustedProxy = false
   } = options;
   const routesRef = { current: routes, wsCurrent: wsRoutes ?? [] };
   const configMiddlewares = [];
@@ -4050,6 +4146,10 @@ function createServer(options) {
   }
   const loggerMiddlewareInst = loggerOption === false ? null : loggerOption === true || loggerOption === void 0 ? logger() : logger(loggerOption);
   if (loggerMiddlewareInst) configMiddlewares.push(loggerMiddlewareInst);
+  const outerMiddlewares = [...configMiddlewares];
+  if (globalMiddlewares && globalMiddlewares.length > 0) {
+    outerMiddlewares.push(...globalMiddlewares);
+  }
   const server = (() => {
     if (http2Option) {
       const h2Opts = typeof http2Option === "object" ? http2Option : {};
@@ -4069,29 +4169,29 @@ function createServer(options) {
       dist,
       req,
       res,
-      configMiddlewares,
+      outerMiddlewares,
       onError,
       config,
-      globalMiddlewares,
       globalInjectors,
-      bodyLimit
+      bodyLimit,
+      trustedProxy
     ).catch(() => {
       res.statusCode = 500;
       res.end();
     });
   });
   if (routesRef.wsCurrent.length > 0) {
-    attachWebSocket({ server, routesRef, rootDir, config, globalMiddlewares });
+    attachWebSocket({ server, routesRef, rootDir, config, globalMiddlewares, trustedProxy });
   }
   return { server, routesRef };
 }
-function prepareRequest(req, config, bodyLimit) {
-  const request = toWebRequest(req, bodyLimit);
+function prepareRequest(req, config, bodyLimit, trustedProxy) {
+  const { request, url } = toWebRequest(req, bodyLimit);
   const method = request.method.toUpperCase();
-  const urlPath = new URL(request.url).pathname;
-  const ctx = createContext(request, {}, config, getClientIp(req));
+  const urlPath = url.pathname;
+  const ctx = createContextFromUrl(request, url, {}, config, getClientIp(req, trustedProxy));
   const meta = ctx.meta;
-  return { request, ctx, meta, method, urlPath };
+  return { request, url, ctx, meta, method, urlPath };
 }
 function resolveRouteOrThrow(routes, method, urlPath) {
   const match = matchRoute(routes, method, urlPath);
@@ -4103,14 +4203,14 @@ function resolveRouteOrThrow(routes, method, urlPath) {
   throw new RouteNotFoundError(urlPath);
 }
 function createRoutePipeline(opts) {
-  const { routes, method, urlPath, ctx, request, rootDir, dist, globalInjectors } = opts;
+  const { routes, method, urlPath, url, ctx, request, rootDir, dist, globalInjectors } = opts;
   return async () => {
     const match = resolveRouteOrThrow(routes, method, urlPath);
     ctx.params = match.params;
     const { route } = match;
     const absoluteFilePath = path12.resolve(rootDir, route.filePath);
     const routeModule = await loadRouteModule(absoluteFilePath, route.method, rootDir);
-    const input = await resolveInput(route.method, request);
+    const input = await resolveInputFromUrl(route.method, request, url);
     const inputType = getInputTypeForMethod(route.method);
     const schemaPath = getRuntimeSchemaPath(route.filePath, dist, rootDir);
     if (isDevOnDemandEnabled()) {
@@ -4142,33 +4242,33 @@ async function sendSuccessResponse(response, res) {
   await sendNodeResponse(response, res);
 }
 async function sendErrorResponse(err, meta, res, onError, ctx) {
-  await sendNodeResponse(mergeMeta(buildErrorResponse(err, ctx.config), meta), res);
-  if (onError) {
+  await sendNodeResponse(mergeMeta(buildErrorResponse(err, ctx?.config), meta), res);
+  if (onError && ctx) {
     try {
       await onError(err, ctx);
     } catch {
     }
   }
 }
-async function handleRequest(routes, rootDir, dist, req, res, configMiddlewares, onError, config, globalMiddlewares, globalInjectors, bodyLimit) {
-  const { request, ctx, meta, method, urlPath } = prepareRequest(req, config, bodyLimit);
-  const routePipeline = createRoutePipeline({
-    routes,
-    method,
-    urlPath,
-    ctx,
-    request,
-    rootDir,
-    dist,
-    globalMiddlewares,
-    globalInjectors
-  });
-  const outerMiddlewares = [];
-  if (configMiddlewares.length > 0) outerMiddlewares.push(...configMiddlewares);
-  if (globalMiddlewares && globalMiddlewares.length > 0) {
-    outerMiddlewares.push(...globalMiddlewares);
-  }
+async function handleRequest(routes, rootDir, dist, req, res, outerMiddlewares, onError, config, globalInjectors, bodyLimit, trustedProxy) {
+  let meta = { headers: {}, setCookies: [] };
+  let ctx;
   try {
+    const prepared = prepareRequest(req, config, bodyLimit, trustedProxy);
+    ctx = prepared.ctx;
+    meta = prepared.meta;
+    const { request, url, method, urlPath } = prepared;
+    const routePipeline = createRoutePipeline({
+      routes,
+      method,
+      urlPath,
+      url,
+      ctx,
+      request,
+      rootDir,
+      dist,
+      globalInjectors
+    });
     const response = outerMiddlewares.length > 0 ? await compose(outerMiddlewares, ctx, routePipeline) : await routePipeline();
     await sendSuccessResponse(response, res);
   } catch (err) {
@@ -4205,7 +4305,7 @@ function applyPluginWrappers(server, handlerWrappers, upgradeWrappers) {
 }
 
 // src/cli/generateRoutes.ts
-import fs14 from "fs";
+import fs13 from "fs";
 import path13 from "path";
 async function hydrateRoutes(manifest) {
   const hydrateRoute = (serialized) => ({
@@ -4232,7 +4332,7 @@ async function hydrateRoutes(manifest) {
 
 // src/cli/generateAgentArtifacts.ts
 import path14 from "path";
-import fs15 from "fs/promises";
+import fs14 from "fs/promises";
 
 // src/ast/extractAgentMetadata.ts
 import ts8 from "typescript";
@@ -4447,11 +4547,11 @@ function serializeAgents(agents, dist = "dist") {
 }
 async function writeAgentsModule(manifest, outputPath) {
   const dir = path14.dirname(outputPath);
-  await fs15.mkdir(dir, { recursive: true });
+  await fs14.mkdir(dir, { recursive: true });
   const content = `// \u81EA\u52A8\u751F\u6210,\u8BF7\u52FF\u624B\u52A8\u7F16\u8F91(faapi build/dev \u4EA7\u7269)
 export const agents = ${JSON.stringify(manifest, null, 2)};
 `;
-  await fs15.writeFile(outputPath, content, "utf-8");
+  await fs14.writeFile(outputPath, content, "utf-8");
 }
 function hydrateAgents(manifest) {
   return manifest.map((a) => ({
@@ -4468,9 +4568,10 @@ function hydrateAgents(manifest) {
 }
 async function generateAgentArtifacts(agents, rootDir, dist) {
   const metadata = [];
+  const programByFile = createPrograms(agents.map((m) => path14.resolve(rootDir, m.filePath)));
   for (const manifest of agents) {
     const absPath = path14.resolve(rootDir, manifest.filePath);
-    const program = createProgram(absPath);
+    const program = programByFile.get(absPath);
     const result = extractAgentMetadata(program, absPath, {
       name: manifest.name,
       filePath: manifest.filePath,
@@ -4554,7 +4655,7 @@ var AGENTS_FILE2 = "faapi-agents.js";
 var PATTERNS = ["src/api/**/*.ts"];
 async function loadAndHydrateTools(rootDir, dist) {
   const toolsPath = path15.resolve(rootDir, dist, TOOLS_FILE2);
-  if (!fs16.existsSync(toolsPath)) {
+  if (!fs15.existsSync(toolsPath)) {
     return [];
   }
   const serialized = await importWithCacheBust(toolsPath);
@@ -4564,7 +4665,7 @@ async function loadAndHydrateTools(rootDir, dist) {
 }
 async function loadAndHydrateAgents(rootDir, dist) {
   const agentsPath = path15.resolve(rootDir, dist, AGENTS_FILE2);
-  if (!fs16.existsSync(agentsPath)) {
+  if (!fs15.existsSync(agentsPath)) {
     return [];
   }
   const serialized = await importWithCacheBust(agentsPath);
@@ -4603,6 +4704,7 @@ var FAAPI_CONFIG_KEYS = /* @__PURE__ */ new Set([
   "bodyLimit",
   "logger",
   "http2",
+  "trustedProxy",
   "response"
 ]);
 function isFaapiConfigKey(key) {
@@ -4612,7 +4714,7 @@ async function createAppBase(options) {
   const rootDir = options?.rootDir ?? process.cwd();
   const dist = options?.dist ?? process.env.FAAPI_DIST ?? DEFAULT_DIST;
   const routesPath = path15.resolve(rootDir, dist, ROUTES_FILE);
-  if (!fs16.existsSync(routesPath)) {
+  if (!fs15.existsSync(routesPath)) {
     throw new Error(
       `[faapi] ${dist}/${ROUTES_FILE} \u4E0D\u5B58\u5728\uFF0C\u8BF7\u5148\u6267\u884C \`faapi build\`\uFF08\u6216 \`faapi dev\`\uFF09\u751F\u6210\u4EA7\u7269\u3002`
     );
@@ -4647,7 +4749,8 @@ async function createAppBase(options) {
     helmet: config?.helmet,
     logger: config?.logger,
     bodyLimit: config?.bodyLimit,
-    http2: config?.http2
+    http2: config?.http2,
+    trustedProxy: config?.trustedProxy
   });
   const { handlerWrappers, upgradeWrappers } = await loadPlugins(config?.plugins, {
     rootDir,
@@ -4834,7 +4937,7 @@ async function createAppBase(options) {
 // src/router/scanRoutes.ts
 import fg2 from "fast-glob";
 import path16 from "path";
-import fs17 from "fs";
+import fs16 from "fs";
 
 // src/router/constants.ts
 var HTTP_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"];
@@ -4914,7 +5017,7 @@ function collectMiddlewarePaths(routeFilePath, rootDir, dist) {
       const mwJsPath = path16.join(currentDir, "middlewares.js");
       const absTsPath = path16.resolve(rootDir, mwTsPath);
       const absJsPath = path16.resolve(rootDir, mwJsPath);
-      const absMwPath = fs17.existsSync(absTsPath) ? absTsPath : fs17.existsSync(absJsPath) ? absJsPath : null;
+      const absMwPath = fs16.existsSync(absTsPath) ? absTsPath : fs16.existsSync(absJsPath) ? absJsPath : null;
       if (absMwPath) {
         const relMwPath = path16.relative(rootDir, absMwPath);
         const prodAbsPath = path16.resolve(rootDir, toProdFilePath3(relMwPath, dist));
@@ -4924,7 +5027,7 @@ function collectMiddlewarePaths(routeFilePath, rootDir, dist) {
       for (const ext of [".ts", ".js"]) {
         const mwPath = path16.join(currentDir, `middlewares${ext}`);
         const absMwPath = path16.resolve(rootDir, mwPath);
-        if (fs17.existsSync(absMwPath)) {
+        if (fs16.existsSync(absMwPath)) {
           paths.push(absMwPath);
           break;
         }
@@ -4971,7 +5074,7 @@ async function scanRoutes(rootDir, patterns, dist) {
         const mwPaths = collectMiddlewarePaths(normalizedFile, rootDir);
         middlewareBundle = await loadMergedMiddlewares(mwPaths);
       }
-      const source = await fs17.promises.readFile(absPath, "utf8").catch(() => "");
+      const source = await fs16.promises.readFile(absPath, "utf8").catch(() => "");
       const exportNames = extractExportsFromSource(source);
       const methods = HTTP_METHODS.filter((m) => exportNames.has(m));
       for (const method of methods) {
@@ -5008,7 +5111,7 @@ async function scanRoutes(rootDir, patterns, dist) {
 // src/tools/scanTools.ts
 import fg3 from "fast-glob";
 import path17 from "path";
-import fs18 from "fs";
+import fs17 from "fs";
 var TOOL_PATTERNS = ["src/tools/**/*.ts"];
 var TOOL_EXPORT_RE = new RegExp(
   String.raw`export\s+(?:async\s+)?(?:function\s+|const\s+)([A-Za-z_$][\w$]*)\s*(?:\(|=)`,
@@ -5059,7 +5162,7 @@ async function scanTools(rootDir, patterns) {
       continue;
     }
     const absPath = path17.resolve(rootDir, normalizedFile);
-    const source = await fs18.promises.readFile(absPath, "utf8").catch(() => "");
+    const source = await fs17.promises.readFile(absPath, "utf8").catch(() => "");
     const exportNames = extractToolExportsFromSource(source);
     const namespace = filePathToToolNamespace(normalizedFile);
     for (const fnName of exportNames) {
@@ -5084,7 +5187,7 @@ async function scanTools(rootDir, patterns) {
 // src/agents/scanAgents.ts
 import fg4 from "fast-glob";
 import path18 from "path";
-import fs19 from "fs";
+import fs18 from "fs";
 var DEFAULT_AGENT_PATTERNS = ["src/agents/*/handler.ts"];
 var RUN_EXPORT_RE = /export\s+(?:async\s+)?(?:function\s+|const\s+)run\b/;
 function extractAgentNameFromPath(filePath) {
@@ -5117,7 +5220,7 @@ async function scanAgents(rootDir, patterns) {
       continue;
     }
     const absPath = path18.resolve(rootDir, normalizedFile);
-    const source = await fs19.promises.readFile(absPath, "utf8").catch(() => "");
+    const source = await fs18.promises.readFile(absPath, "utf8").catch(() => "");
     const { hasRun } = detectAgentExports(source);
     const name = extractAgentNameFromPath(normalizedFile);
     const prevFile = seen.get(name);
@@ -5197,6 +5300,7 @@ export {
   createDevApp,
   createProdApp,
   createProgram,
+  createPrograms,
   extractTypeInfo,
   getAgent,
   getAgentEntry,
@@ -5204,6 +5308,7 @@ export {
   getInputTypeForMethod,
   getSkill,
   getTool,
+  getToolSchemaPath,
   helmet,
   hydrateSkillRegistry,
   invalidateProgramCache,