@feasibleone/blong 1.23.0 → 1.25.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## [1.25.0](https://github.com/feasibleone/blong/compare/blong-v1.24.0...blong-v1.25.0) (2026-08-21)
+
+
+### Features
+
+* access sessions and audit ([694349f](https://github.com/feasibleone/blong/commit/694349f7e70973b984a30f696d2b6e892b55ec02))
+
+
+### Bug Fixes
+
+* blong-access-mock, silent error, expected error ([dc00429](https://github.com/feasibleone/blong/commit/dc00429a63a973996d6e94359830cc52d149b995))
+
+## [1.24.0](https://github.com/feasibleone/blong/compare/blong-v1.23.0...blong-v1.24.0) (2026-08-19)
+
+
+### Features
+
+* master-detail handling ([03c5bbd](https://github.com/feasibleone/blong/commit/03c5bbd9401a82a9427577e7611f2622aadee4e5))
+* redis adapter and blong-gateway ([c28a68f](https://github.com/feasibleone/blong/commit/c28a68f5f9cfc2398771cca05c4366efc147eb6e))
+* resolve some AI agent frictions ([13ca27f](https://github.com/feasibleone/blong/commit/13ca27f09f0271a25ea7ad45a2ce3f73bf6710e0))
+* resolve some AI agent frictions and improve the framework features ([23b6986](https://github.com/feasibleone/blong/commit/23b69863b458e97f1dad249fcdeec5e182a69b74))
+
 ## [1.23.0](https://github.com/feasibleone/blong/compare/blong-v1.22.0...blong-v1.23.0) (2026-07-14)
 
 

package/dist/types.d.ts

@@ -18756,7 +18756,7 @@ export type IAction = string | {
 	invalidates?: string[];
 };
 /** All supported widget types */
-export type WidgetType = "input" | "mask" | "text" | "textArea" | "password" | "number" | "integer" | "currency" | "percent" | "boolean" | "checkbox" | "switch" | "date" | "time" | "dateTime" | "dateRange" | "dropdown" | "dropdownTree" | "select" | "selectTable" | "multiSelect" | "multiSelectTree" | "multiSelectPanel" | "multiSelectTreeTable" | "chips" | "file" | "image" | "imageUpload" | "autocomplete" | "table" | "navigator" | "json" | "code" | "divider" | "label" | "link" | "component" | "custom";
+export type WidgetType = "input" | "mask" | "text" | "textArea" | "password" | "number" | "integer" | "bigint" | "currency" | "percent" | "boolean" | "checkbox" | "switch" | "date" | "time" | "dateTime" | "dateRange" | "dropdown" | "dropdownTree" | "select" | "selectTable" | "multiSelect" | "multiSelectTree" | "multiSelectPanel" | "multiSelectTreeTable" | "chips" | "file" | "image" | "imageUpload" | "autocomplete" | "table" | "navigator" | "json" | "code" | "divider" | "label" | "link" | "component" | "custom";
 /** Base widget configuration (stored in schema x-widget) */
 export interface IWidgetConfig {
 	type: WidgetType;
@@ -19251,6 +19251,30 @@ export interface IMethodsConfig {
 	remove?: string;
 	report?: string;
 }
+/**
+ * Master-detail detail entity. A master model (e.g. `invoice`) declares its
+ * detail entities (e.g. `line`, `payment`) here. Each detail is an **array
+ * property at the SAME level as the master record** — the model schema has a
+ * dedicated key for the master object (`schema.properties[object]`) and one
+ * sibling array key per detail (`schema.properties[detail.object]`), whose
+ * `items` hold the detail-row schema (declared right there by the realm).
+ * Each detail produces:
+ * - a sibling array in the auto `add`/`edit` validation schemas, so a public
+ *   invoice `add` accepts `{invoice: {...}, line: [...], payment: [...]}`,
+ * - an editable table + a tab in the browser New/Open forms (one per detail).
+ */
+export interface IModelDetail {
+	/**
+	 * Detail entity name, e.g. 'line'. The framework looks it up as a sibling
+	 * array property of the master object schema
+	 * (`schema.properties[detail.object]`) whose `items` hold the detail-row
+	 * schema; it fills in `type: 'array'`, the editable table widget, a
+	 * `details-<object>` card and an edit-layout tab.
+	 */
+	object: string;
+	/** Primary key field of the detail rows, e.g. 'lineId'. Defaults to `${object}Id`. */
+	keyField?: string;
+}
 /**
  * ModelSpec — the browser-side description of one "subject.object" domain entity.
  *
@@ -19269,6 +19293,12 @@ export interface IModelSpec {
 	nameField?: string;
 	/** JSON Schema overlay merged on top of server OpenAPI schema */
 	schema?: ISchemaOverlay;
+	/**
+	 * Optional master-detail entities. When present, the auto `add`/`edit`
+	 * validations include a nested array per detail and the New/Open forms
+	 * render one editable table + tab per detail.
+	 */
+	details?: IModelDetail[];
 	/** Named card layout definitions */
 	cards?: Record<string, ICardConfig>;
 	/** Browse page configuration */
@@ -19287,6 +19317,13 @@ export interface IModelSpec {
 	layouts?: Record<string, LayoutConfig>;
 	/** Method name overrides */
 	methods?: IMethodsConfig;
+	/**
+	 * Mark this model as part of the "public API" — its standard CRUD operations
+	 * get gateway validations by default (via the `subject.validation`
+	 * orchestrator).  Declarative marker: no suite config is needed; a suite can
+	 * opt out only in rare cases (`validations: false`, or per model).
+	 */
+	public?: boolean;
 }
 /** Model spec as accepted by modelFactory — objectTitle/keyField/nameField are optional */
 export type IPartialModelSpec = IModelSpec;
@@ -19337,6 +19374,12 @@ export type ServerContext = {
 	kafkaStream?: Duplex;
 	mongodb?: MongoClient;
 	slack?: IncomingWebhook;
+	/** Live redis client shared with derived adapters. */
+	redis?: {
+		status: string;
+		connect(): Promise<unknown>;
+		quit(): Promise<unknown>;
+	};
 };
 export type BrowserContext = {
 	/** TanStack Query client instance (injected by the browser platform). */
@@ -19771,6 +19814,7 @@ export interface IMeta {
 		redirect?: string;
 		code?: number;
 		state?: unknown[];
+		unstate?: unknown[];
 		header?: string[] | [
 			string,
 			unknown
@@ -19787,6 +19831,10 @@ export interface IMeta {
 		permissionMap?: Buffer;
 		actorId?: string | number;
 		sessionId?: string;
+		/** Audit record id of the access-check audit recorded for this request. */
+		auditId?: string;
+		/** Allowed action methodIds — populated by the gateway authorize handler. */
+		actions?: string[];
 	};
 	language?: {
 		languageId?: string | number;
@@ -19856,6 +19904,7 @@ export interface ITypedError extends Error {
 	method?: string | string[];
 	params?: object;
 	code?: string;
+	silent?: boolean;
 	req?: {
 		httpVersion: string;
 		url: URL;
@@ -19892,6 +19941,7 @@ export interface IBaseConfig extends TObject<{
 	rpcServer: TBoolean | TObject;
 	restFs: TBoolean | TObject;
 	systemDebug: TBoolean | TObject;
+	apiGateway: TBoolean | TObject;
 }> {
 	additionalProperties: false;
 }
@@ -19920,6 +19970,23 @@ export interface ILogger {
 	warn?: LogFn;
 	error?: LogFn;
 	fatal?: LogFn;
+	/**
+	 * Wrap a long-running promise and report progress on this logger.
+	 *
+	 * Once the operation runs past `thresholdMs`, a snapshot (from `getProgress`)
+	 * is logged every `intervalMs` at the given `level` (default 'warn'), followed
+	 * by a completion line. Delegates to the shared `withProgress` helper from
+	 * `@feasibleone/blong-lib`.
+	 *
+	 * @example
+	 * await runtime.log.progress('schema sync', syncPromise, {getProgress: () => ({done: 1, total: 2})});
+	 */
+	progress?: <T>(label: string, promise: Promise<T>, options?: {
+		getProgress?: () => string | object;
+		thresholdMs?: number;
+		intervalMs?: number;
+		level?: "info" | "warn";
+	}) => Promise<T>;
 }
 export interface IStep {
 	name: string;
@@ -19953,6 +20020,23 @@ export type GatewaySchema = ({
 	subject?: string;
 	destination?: string;
 	operation?: OpenAPIV3_1.OperationObject | OpenAPIV2.OperationObject;
+	/** Metering metadata threaded into the Fastify route config by Gateway.ts. */
+	bundle?: string;
+	creditCost?: number;
+	meter?: boolean;
+	/**
+	 * Opt this route OUT of the gateway access-check audit (`gateway.audit`).
+	 * Use for operations that record their own audit trail (e.g. payments)
+	 * or that must not generate audit noise (e.g. integration-test probes).
+	 */
+	audit?: boolean;
+	/**
+	 * Authenticate the route (bearer) but skip the RBAC action-list check.
+	 * Use ONLY for self-service methods that operate on the caller's own
+	 * session (e.g. `login.token.revoke`) — the action is scoped by the
+	 * token's own `ses` claim, so no cross-user action is possible.
+	 */
+	skipAuthorize?: boolean;
 };
 export type SchemaObject = OpenAPIV3_1.SchemaObject | OpenAPIV2.SchemaObject;
 export type PathItemObject = OpenAPIV3_1.PathItemObject | OpenAPIV2.PathItemObject;
@@ -20054,6 +20138,25 @@ export interface ILib {
 	render: (what: object[] | object) => object;
 	crockfordEncode: (data: Uint8Array) => string;
 	crockfordDecode: (data: string) => Uint8Array;
+	withProgress: <T>(log: {
+		info?: LogFn;
+		warn?: LogFn;
+	} | undefined, label: string, promise: Promise<T>, options?: {
+		getProgress?: () => string | object;
+		thresholdMs?: number;
+		intervalMs?: number;
+		level?: "info" | "warn";
+	}) => Promise<T>;
+	/**
+	 * Optional map of configurable method/handler bindings that a library may
+	 * expose under the conventional `methods` member — the idiomatic way to
+	 * bundle soft dependencies (e.g. the access-realm methods that blong-login's
+	 * `sessionLib` resolves from config).  Handlers read the resolved handlers
+	 * through `lib.methods.<name>`; each value is a bound handler or `undefined`
+	 * when the binding is disabled.  See the blong-handler skill →
+	 * "Library as a configurable-bindings bundle (soft dependencies)".
+	 */
+	methods?: LibMethods;
 }
 export type ValidationFn = () => GatewaySchema;
 export interface IValidationProxy<T> {
@@ -20084,6 +20187,15 @@ export type PortHandlerBound = (<T>(params: object, $meta: IMeta, context?: ICon
 	[name: string]: PortHandlerBound;
 };
 export type LibFn = <T>(...params: unknown[]) => T;
+/**
+ * A map of configurable handler/method bindings exposed by a library under the
+ * conventional `methods` member (see the blong-handler skill).  Values are
+ * bound handlers (usually resolved from config against the `handler` proxy);
+ * `undefined` when the binding is disabled.
+ */
+export type LibMethods = {
+	[method: string]: LibFn | undefined;
+};
 export interface IRemoteHandler {
 	[name: string]: PortHandlerBound;
 }

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAYA,OAAO,EACH,IAAI,GAeP,MAAM,SAAS,CAAC;AAQjB,OAAO,KAAK,MAAM,mBAAmB,CAAC;AAy7BtC,MAAM,IAAI,GAAW,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAG9C,MAAM,OAAgB,QAAQ;IAC1B,IAAI,CAAoB;IACd,GAAG,CAA8B;IAC3C,YAAmB,GAAkB;QACjC,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,GAAG,CAAC;IACzB,CAAC;IACS,KAAK,GAAkB,CAAC,GAAG,IAA+B,EAAE,EAAE;QACpE,MAAM,MAAM,GAAG,KAAK,CAAqB,GAAG,IAAI,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI;YAC5B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAC,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;IACK,KAAK,CAAC,IAAI;QACb,OAAO,IAAI,CAAC;IAChB,CAAC;IACM,KAAK,CAAC,KAAK,CAAC,GAAG,KAAgB;QAClC,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,CACnB,UAA4B,EACZ,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,SAAS,EAAC,CAAC,CAAC;AAkBnF,MAAM,CAAC,MAAM,OAAO,GAAG,CAA8B,UAAkB,EAAU,EAAE,CAC/E,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,UAAU,GAAG,CACtB,UAAmC,EACZ,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,YAAY,EAAC,CAAC,CAAC;AAC7F,MAAM,CAAC,MAAM,MAAM,GAAG,CAClB,MAA+B,EACR,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,QAAQ,EAAC,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,GAAG,GAAG,CAA8B,GAAqB,EAAoB,EAAE,CACxF,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,KAAK,GAAG,CACjB,UAAkC,EACV,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,OAAO,EAAC,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAkB,UAAmB,EAAa,EAAE,CACvE,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,SAAS,EAAC,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,kBAAkB,GAEA,QAAQ,CAAC,EAAE,CACtC,UAAU,CAAC,KAAK,IAAI,EAAE,CAClB,MAAM,CAAC,WAAW,CACd,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IAC9C,IAAI;IACJ,MAAM,CAAC,cAAc,CACjB,GAAG,EAAE,CAAC,CAAC;QACH,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC9C,WAAW,EAAE,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC,EACF,MAAM,EACN,EAAC,KAAK,EAAE,IAAI,EAAC,CAChB;CACJ,CAAC,CACL,CACJ,CAAC;AAEN,MAAM,CAAC,MAAM,KAAK,GAAG,CACjB,UAA8B,EACW,EAAE,CAC3C,MAAM,CAAC,cAAc,CAAC,UAAuD,EAAE,IAAI,EAAE;IACjF,KAAK,EAAE,UAAU;CACpB,CAAC,CAAC;AACP,MAAM,CAAC,MAAM,MAAM,GAAG,CAClB,UAA8B,EACS,EAAE,CACzC,MAAM,CAAC,cAAc,CAAC,UAAqD,EAAE,IAAI,EAAE;IAC/E,KAAK,EAAE,QAAQ;CAClB,CAAC,CAAC;AACP,MAAM,CAAC,MAAM,OAAO,GAAG,CACnB,UAA8B,EACU,EAAE,CAC1C,MAAM,CAAC,cAAc,CAAC,UAAsD,EAAE,IAAI,EAAE;IAChF,KAAK,EAAE,SAAS;CACnB,CAAC,CAAC;AACP,MAAM,CAAC,MAAM,KAAK,GAAG,CACjB,UAA4C,EACQ,EAAE,CACtD,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,OAAO,EAAC,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,OAAO,GAAG,CACnB,UAAiC,EACU,EAAE,CAC7C,MAAM,CAAC,cAAc,CAAC,UAAyD,EAAE,IAAI,EAAE;IACnF,KAAK,EAAE,SAAS;CACnB,CAAC,CAAC;AACP,MAAM,CAAC,MAAM,YAAY,GAAG,CACxB,UAAiC,EACe,EAAE,CAClD,MAAM,CAAC,cAAc,CAAC,UAA8D,EAAE,IAAI,EAAE;IACxF,KAAK,EAAE,cAAc;CACxB,CAAC,CAAC;AAgBP,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAiC,EAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAEnF,eAAe;IACX,OAAO;IACP,OAAO;IACP,UAAU;IACV,GAAG;IACH,KAAK;IACL,MAAM;IACN,OAAO;IACP,OAAO;IACP,YAAY;IACZ,OAAO;IACP,IAAI;CACP,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAYA,OAAO,EACH,IAAI,GAeP,MAAM,SAAS,CAAC;AAQjB,OAAO,KAAK,MAAM,mBAAmB,CAAC;AA0gCtC,MAAM,IAAI,GAAW,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAG9C,MAAM,OAAgB,QAAQ;IAC1B,IAAI,CAAoB;IACd,GAAG,CAA8B;IAC3C,YAAmB,GAAkB;QACjC,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,GAAG,CAAC;IACzB,CAAC;IACS,KAAK,GAAkB,CAAC,GAAG,IAA+B,EAAE,EAAE;QACpE,MAAM,MAAM,GAAG,KAAK,CAAqB,GAAG,IAAI,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI;YAC5B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAC,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;IACK,KAAK,CAAC,IAAI;QACb,OAAO,IAAI,CAAC;IAChB,CAAC;IACM,KAAK,CAAC,KAAK,CAAC,GAAG,KAAgB;QAClC,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,CACnB,UAA4B,EACZ,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,SAAS,EAAC,CAAC,CAAC;AAkBnF,MAAM,CAAC,MAAM,OAAO,GAAG,CAA8B,UAAkB,EAAU,EAAE,CAC/E,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,UAAU,GAAG,CACtB,UAAmC,EACZ,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,YAAY,EAAC,CAAC,CAAC;AAC7F,MAAM,CAAC,MAAM,MAAM,GAAG,CAClB,MAA+B,EACR,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,QAAQ,EAAC,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,GAAG,GAAG,CAA8B,GAAqB,EAAoB,EAAE,CACxF,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,KAAK,GAAG,CACjB,UAAkC,EACV,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,OAAO,EAAC,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAkB,UAAmB,EAAa,EAAE,CACvE,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,SAAS,EAAC,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,kBAAkB,GAEA,QAAQ,CAAC,EAAE,CACtC,UAAU,CAAC,KAAK,IAAI,EAAE,CAClB,MAAM,CAAC,WAAW,CACd,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IAC9C,IAAI;IACJ,MAAM,CAAC,cAAc,CACjB,GAAG,EAAE,CAAC,CAAC;QACH,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC9C,WAAW,EAAE,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC,EACF,MAAM,EACN,EAAC,KAAK,EAAE,IAAI,EAAC,CAChB;CACJ,CAAC,CACL,CACJ,CAAC;AAEN,MAAM,CAAC,MAAM,KAAK,GAAG,CACjB,UAA8B,EACW,EAAE,CAC3C,MAAM,CAAC,cAAc,CAAC,UAAuD,EAAE,IAAI,EAAE;IACjF,KAAK,EAAE,UAAU;CACpB,CAAC,CAAC;AACP,MAAM,CAAC,MAAM,MAAM,GAAG,CAClB,UAA8B,EACS,EAAE,CACzC,MAAM,CAAC,cAAc,CAAC,UAAqD,EAAE,IAAI,EAAE;IAC/E,KAAK,EAAE,QAAQ;CAClB,CAAC,CAAC;AACP,MAAM,CAAC,MAAM,OAAO,GAAG,CACnB,UAA8B,EACU,EAAE,CAC1C,MAAM,CAAC,cAAc,CAAC,UAAsD,EAAE,IAAI,EAAE;IAChF,KAAK,EAAE,SAAS;CACnB,CAAC,CAAC;AACP,MAAM,CAAC,MAAM,KAAK,GAAG,CACjB,UAA4C,EACQ,EAAE,CACtD,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,OAAO,EAAC,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,OAAO,GAAG,CACnB,UAAiC,EACU,EAAE,CAC7C,MAAM,CAAC,cAAc,CAAC,UAAyD,EAAE,IAAI,EAAE;IACnF,KAAK,EAAE,SAAS;CACnB,CAAC,CAAC;AACP,MAAM,CAAC,MAAM,YAAY,GAAG,CACxB,UAAiC,EACe,EAAE,CAClD,MAAM,CAAC,cAAc,CAAC,UAA8D,EAAE,IAAI,EAAE;IACxF,KAAK,EAAE,cAAc;CACxB,CAAC,CAAC;AAgBP,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAiC,EAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAEnF,eAAe;IACX,OAAO;IACP,OAAO;IACP,UAAU;IACV,GAAG;IACH,KAAK;IACL,MAAM;IACN,OAAO;IACP,OAAO;IACP,YAAY;IACZ,OAAO;IACP,IAAI;CACP,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feasibleone/blong",
-  "version": "1.23.0",
+  "version": "1.25.0",
   "description": "API and DRY focused RAD framework https://feasibleone.github.io/blong-docs",
   "keywords": [
     "blong",
@@ -47,7 +47,7 @@
     "react": "^19.1.0",
     "tarn": "^3.0.2",
     "typescript": "^6.0.3",
-    "@feasibleone/blong-dev": "1.1.0"
+    "@feasibleone/blong-dev": "1.2.0"
   },
   "scripts": {
     "build": "heft build --clean;dts-bundle-generator --config dts-gen.config.json",

package/types.ts

@@ -68,6 +68,12 @@ export type ServerContext = {
     // s3?: S3Client;
     slack?: IncomingWebhook;
     // vault?: client;
+    /** Live redis client shared with derived adapters. */
+    redis?: {
+        status: string;
+        connect(): Promise<unknown>;
+        quit(): Promise<unknown>;
+    };
 };
 
 export type BrowserContext = {
@@ -580,6 +586,7 @@ export interface IMeta {
         redirect?: string;
         code?: number;
         state?: unknown[];
+        unstate?: unknown[];
         header?: string[] | [string, unknown][];
     };
     httpRequest?: {
@@ -593,6 +600,10 @@ export interface IMeta {
         permissionMap?: Buffer;
         actorId?: string | number;
         sessionId?: string;
+        /** Audit record id of the access-check audit recorded for this request. */
+        auditId?: string;
+        /** Allowed action methodIds — populated by the gateway authorize handler. */
+        actions?: string[];
     };
     language?: {
         languageId?: string | number;
@@ -661,6 +672,7 @@ export interface ITypedError extends Error {
     method?: string | string[];
     params?: object;
     code?: string;
+    silent?: boolean;
     req?: {
         httpVersion: string;
         url: URL;
@@ -699,6 +711,7 @@ export interface IBaseConfig extends TObject<{
     rpcServer: TBoolean | TObject;
     restFs: TBoolean | TObject;
     systemDebug: TBoolean | TObject;
+    apiGateway: TBoolean | TObject;
 }> {
     additionalProperties: false;
 }
@@ -732,6 +745,27 @@ export interface ILogger {
     warn?: LogFn;
     error?: LogFn;
     fatal?: LogFn;
+    /**
+     * Wrap a long-running promise and report progress on this logger.
+     *
+     * Once the operation runs past `thresholdMs`, a snapshot (from `getProgress`)
+     * is logged every `intervalMs` at the given `level` (default 'warn'), followed
+     * by a completion line. Delegates to the shared `withProgress` helper from
+     * `@feasibleone/blong-lib`.
+     *
+     * @example
+     * await runtime.log.progress('schema sync', syncPromise, {getProgress: () => ({done: 1, total: 2})});
+     */
+    progress?: <T>(
+        label: string,
+        promise: Promise<T>,
+        options?: {
+            getProgress?: () => string | object;
+            thresholdMs?: number;
+            intervalMs?: number;
+            level?: 'info' | 'warn';
+        },
+    ) => Promise<T>;
 }
 
 export interface IStep {
@@ -774,6 +808,23 @@ export type GatewaySchema = (
     subject?: string;
     destination?: string;
     operation?: OpenAPIV3_1.OperationObject | OpenAPIV2.OperationObject;
+    /** Metering metadata threaded into the Fastify route config by Gateway.ts. */
+    bundle?: string;
+    creditCost?: number;
+    meter?: boolean;
+    /**
+     * Opt this route OUT of the gateway access-check audit (`gateway.audit`).
+     * Use for operations that record their own audit trail (e.g. payments)
+     * or that must not generate audit noise (e.g. integration-test probes).
+     */
+    audit?: boolean;
+    /**
+     * Authenticate the route (bearer) but skip the RBAC action-list check.
+     * Use ONLY for self-service methods that operate on the caller's own
+     * session (e.g. `login.token.revoke`) — the action is scoped by the
+     * token's own `ses` claim, so no cross-user action is possible.
+     */
+    skipAuthorize?: boolean;
 };
 
 export type SchemaObject = OpenAPIV3_1.SchemaObject | OpenAPIV2.SchemaObject;
@@ -876,6 +927,27 @@ export interface ILib {
     render: (what: object[] | object) => object;
     crockfordEncode: (data: Uint8Array) => string;
     crockfordDecode: (data: string) => Uint8Array;
+    withProgress: <T>(
+        log: {info?: LogFn; warn?: LogFn} | undefined,
+        label: string,
+        promise: Promise<T>,
+        options?: {
+            getProgress?: () => string | object;
+            thresholdMs?: number;
+            intervalMs?: number;
+            level?: 'info' | 'warn';
+        },
+    ) => Promise<T>;
+    /**
+     * Optional map of configurable method/handler bindings that a library may
+     * expose under the conventional `methods` member — the idiomatic way to
+     * bundle soft dependencies (e.g. the access-realm methods that blong-login's
+     * `sessionLib` resolves from config).  Handlers read the resolved handlers
+     * through `lib.methods.<name>`; each value is a bound handler or `undefined`
+     * when the binding is disabled.  See the blong-handler skill →
+     * "Library as a configurable-bindings bundle (soft dependencies)".
+     */
+    methods?: LibMethods;
 }
 
 export type ValidationFn = () => GatewaySchema;
@@ -925,6 +997,15 @@ export type PortHandlerBound = (<T>(
     [name: string]: PortHandlerBound;
 };
 export type LibFn = <T>(...params: unknown[]) => T;
+/**
+ * A map of configurable handler/method bindings exposed by a library under the
+ * conventional `methods` member (see the blong-handler skill).  Values are
+ * bound handlers (usually resolved from config against the `handler` proxy);
+ * `undefined` when the binding is disabled.
+ */
+export type LibMethods = {
+    [method: string]: LibFn | undefined;
+};
 export interface IRemoteHandler {
     [name: string]: PortHandlerBound;
 }