@interf/compiler 0.9.4 → 0.13.0

package/dist/packages/local-service/server.d.ts

@@ -1,11 +1,26 @@
 import { type Server } from "node:http";
 import { type LocalServiceRunHandlers, type LocalServiceRuntime } from "./runtime.js";
+/** Generate a fresh per-instance bearer token. */
+export declare function createLocalServiceAuthToken(): string;
 export interface StartLocalServiceOptions {
     rootPath?: string;
     host?: string;
     port?: number;
+    searchFromPort?: number;
     packageVersion?: string;
     handlers?: Partial<LocalServiceRunHandlers>;
+    /**
+     * Per-instance bearer token.
+     *
+     * Default for loopback hosts (127.0.0.1, localhost, ::1): `null` (no
+     * token). The CORS allowlist + loopback bind enforces the security
+     * boundary in 0.13.
+     *
+     * Pass a literal string to pin a token (tests). Pass `"auto"` to
+     * generate a fresh random hex token (used for non-loopback bindings
+     * and any caller that explicitly opts in).
+     */
+    authToken?: string | null | "auto";
 }
 export interface StartedLocalService {
     runtime: LocalServiceRuntime;