@feasibleone/blong 1.24.0 → 1.25.1

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [1.25.1](https://github.com/feasibleone/blong/compare/blong-v1.25.0...blong-v1.25.1) (2026-09-10)
+
+
+### Bug Fixes
+
+* split core to folders ([3900de8](https://github.com/feasibleone/blong/commit/3900de88defe8a3e9c492c5cf9388ac4ee81d781))
+
+## [1.25.0](https://github.com/feasibleone/blong/compare/blong-v1.24.0...blong-v1.25.0) (2026-08-21)
+
+
+### Features
+
+* access sessions and audit ([694349f](https://github.com/feasibleone/blong/commit/694349f7e70973b984a30f696d2b6e892b55ec02))
+
+
+### Bug Fixes
+
+* blong-access-mock, silent error, expected error ([dc00429](https://github.com/feasibleone/blong/commit/dc00429a63a973996d6e94359830cc52d149b995))
+
 ## [1.24.0](https://github.com/feasibleone/blong/compare/blong-v1.23.0...blong-v1.24.0) (2026-08-19)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feasibleone/blong",
-  "version": "1.24.0",
+  "version": "1.25.1",
   "description": "API and DRY focused RAD framework https://feasibleone.github.io/blong-docs",
   "keywords": [
     "blong",
@@ -47,7 +47,7 @@
     "react": "^19.1.0",
     "tarn": "^3.0.2",
     "typescript": "^6.0.3",
-    "@feasibleone/blong-dev": "1.2.0"
+    "@feasibleone/blong-dev": "1.2.2"
   },
   "scripts": {
     "build": "heft build --clean;dts-bundle-generator --config dts-gen.config.json",

package/types.ts

@@ -586,6 +586,7 @@ export interface IMeta {
         redirect?: string;
         code?: number;
         state?: unknown[];
+        unstate?: unknown[];
         header?: string[] | [string, unknown][];
     };
     httpRequest?: {
@@ -599,6 +600,10 @@ export interface IMeta {
         permissionMap?: Buffer;
         actorId?: string | number;
         sessionId?: string;
+        /** Audit record id of the access-check audit recorded for this request. */
+        auditId?: string;
+        /** Allowed action methodIds — populated by the gateway authorize handler. */
+        actions?: string[];
     };
     language?: {
         languageId?: string | number;
@@ -667,6 +672,7 @@ export interface ITypedError extends Error {
     method?: string | string[];
     params?: object;
     code?: string;
+    silent?: boolean;
     req?: {
         httpVersion: string;
         url: URL;
@@ -806,6 +812,19 @@ export type GatewaySchema = (
     bundle?: string;
     creditCost?: number;
     meter?: boolean;
+    /**
+     * Opt this route OUT of the gateway access-check audit (`gateway.audit`).
+     * Use for operations that record their own audit trail (e.g. payments)
+     * or that must not generate audit noise (e.g. integration-test probes).
+     */
+    audit?: boolean;
+    /**
+     * Authenticate the route (bearer) but skip the RBAC action-list check.
+     * Use ONLY for self-service methods that operate on the caller's own
+     * session (e.g. `login.token.revoke`) — the action is scoped by the
+     * token's own `ses` claim, so no cross-user action is possible.
+     */
+    skipAuthorize?: boolean;
 };
 
 export type SchemaObject = OpenAPIV3_1.SchemaObject | OpenAPIV2.SchemaObject;
@@ -919,6 +938,16 @@ export interface ILib {
             level?: 'info' | 'warn';
         },
     ) => Promise<T>;
+    /**
+     * Optional map of configurable method/handler bindings that a library may
+     * expose under the conventional `methods` member — the idiomatic way to
+     * bundle soft dependencies (e.g. the access-realm methods that blong-login's
+     * `sessionLib` resolves from config).  Handlers read the resolved handlers
+     * through `lib.methods.<name>`; each value is a bound handler or `undefined`
+     * when the binding is disabled.  See the blong-handler skill →
+     * "Library as a configurable-bindings bundle (soft dependencies)".
+     */
+    methods?: LibMethods;
 }
 
 export type ValidationFn = () => GatewaySchema;
@@ -968,6 +997,15 @@ export type PortHandlerBound = (<T>(
     [name: string]: PortHandlerBound;
 };
 export type LibFn = <T>(...params: unknown[]) => T;
+/**
+ * A map of configurable handler/method bindings exposed by a library under the
+ * conventional `methods` member (see the blong-handler skill).  Values are
+ * bound handlers (usually resolved from config against the `handler` proxy);
+ * `undefined` when the binding is disabled.
+ */
+export type LibMethods = {
+    [method: string]: LibFn | undefined;
+};
 export interface IRemoteHandler {
     [name: string]: PortHandlerBound;
 }