@lovrozagar/honey 0.6.5 → 0.7.0

package/dist/telemetry/otel.js

@@ -0,0 +1,135 @@
+/**
+ * The request URL without its query string or fragment: queries carry tokens and session ids,
+ * and attribute values are exported to whatever backend the tracer feeds.
+ */
+function urlWithoutQuery(url) {
+    const q = url.indexOf("?");
+    const h = url.indexOf("#");
+    const end = q === -1 ? h : h === -1 ? q : Math.min(q, h);
+    return end === -1 ? url : url.slice(0, end);
+}
+/** Path part of an absolute URL, without the query. */
+function pathOf(url) {
+    const bare = urlWithoutQuery(url);
+    const scheme = bare.indexOf("//");
+    const start = scheme === -1 ? 0 : bare.indexOf("/", scheme + 2);
+    return start === -1 ? "/" : bare.slice(start);
+}
+export function otelAdapter(options) {
+    const spans = new WeakMap();
+    return {
+        onError(ctx) {
+            try {
+                /*
+                 * onError doesn't receive req — error details are best captured
+                 * via a standalone span. Per-request root span is in onResponse.
+                 */
+                const span = options.tracer.startSpan("http.error");
+                span.setAttribute("error.key", ctx.error.errorKey);
+                span.setAttribute("error.status", ctx.error.status);
+                span.setAttribute("http.duration_ms", ctx.duration);
+                span.end();
+            }
+            catch {
+                /* swallow */
+            }
+        },
+        onHandler(ctx) {
+            try {
+                const span = options.tracer.startSpan("http.handler");
+                span.setAttribute("http.method", ctx.method);
+                /* the pattern, never the request path: one series per route, not per id */
+                if (ctx.route !== undefined && ctx.route !== "")
+                    span.setAttribute("http.route", ctx.route);
+                span.setAttribute("http.status_code", ctx.status);
+                span.setAttribute("http.duration_ms", ctx.duration);
+                span.end();
+            }
+            catch {
+                /* swallow */
+            }
+        },
+        onMethodNotAllowed(ctx) {
+            try {
+                const span = spans.get(ctx.req);
+                if (span) {
+                    span.addEvent("method_not_allowed", {
+                        "http.allowed_methods": ctx.allowed.join(", "),
+                        "http.method": ctx.method,
+                        "url.path": ctx.path,
+                    });
+                }
+            }
+            catch {
+                /* swallow */
+            }
+        },
+        onMiddleware(ctx) {
+            try {
+                const span = options.tracer.startSpan(`middleware.${ctx.name}`);
+                span.setAttribute("middleware.name", ctx.name);
+                span.setAttribute("middleware.duration_ms", ctx.duration);
+                if (ctx.error)
+                    span.addEvent("error");
+                span.end();
+            }
+            catch {
+                /* swallow */
+            }
+        },
+        onNotFound(ctx) {
+            try {
+                const span = spans.get(ctx.req);
+                if (span) {
+                    span.addEvent("not_found", {
+                        "http.method": ctx.method,
+                        "url.path": ctx.path,
+                    });
+                }
+            }
+            catch {
+                /* swallow */
+            }
+        },
+        onRequest(ctx) {
+            try {
+                const span = options.tracer.startSpan("http.request");
+                span.setAttribute("http.method", ctx.req.method);
+                span.setAttribute("http.url", urlWithoutQuery(ctx.req.url));
+                span.setAttribute("url.path", pathOf(ctx.req.url));
+                spans.set(ctx.req, span);
+            }
+            catch {
+                /* swallow */
+            }
+        },
+        onResponse(ctx) {
+            try {
+                const span = spans.get(ctx.req);
+                if (span) {
+                    span.setAttribute("http.status_code", ctx.status);
+                    span.setAttribute("http.duration_ms", ctx.duration);
+                    span.end();
+                    spans.delete(ctx.req);
+                }
+            }
+            catch {
+                /* swallow */
+            }
+        },
+        onRoute(ctx) {
+            try {
+                const span = spans.get(ctx.req);
+                if (span) {
+                    span.setAttribute("http.method", ctx.method);
+                    if (ctx.route !== undefined && ctx.route !== "")
+                        span.setAttribute("http.route", ctx.route);
+                }
+            }
+            catch {
+                /* swallow */
+            }
+        },
+    };
+}
+//# sourceMappingURL=otel.js.map

package/dist/telemetry/otel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.js","sourceRoot":"","sources":["../../src/telemetry/otel.ts"],"names":[],"mappings":"AAuBA;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1B,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxD,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC5C,CAAC;AAED,uDAAuD;AACvD,SAAS,MAAM,CAAC,GAAW;IAC1B,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/D,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAA2B;IACtD,MAAM,KAAK,GAAG,IAAI,OAAO,EAAiB,CAAA;IAE1C,OAAO;QACN,OAAO,CAAC,GAAG;YACV,IAAI,CAAC;gBACJ;;;mBAGG;gBACH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;gBACnD,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBAClD,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBACnD,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACnD,IAAI,CAAC,GAAG,EAAE,CAAA;YACX,CAAC;YAAC,MAAM,CAAC;gBACR,aAAa;YACd,CAAC;QACF,CAAC;QAED,SAAS,CAAC,GAAG;YACZ,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;gBACrD,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC5C,2EAA2E;gBAC3E,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE;oBAAE,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;gBAC3F,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACnD,IAAI,CAAC,GAAG,EAAE,CAAA;YACX,CAAC;YAAC,MAAM,CAAC;gBACR,aAAa;YACd,CAAC;QACF,CAAC;QAED,kBAAkB,CAAC,GAAG;YACrB,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC/B,IAAI,IAAI,EAAE,CAAC;oBACV,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE;wBACnC,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC9C,aAAa,EAAE,GAAG,CAAC,MAAM;wBACzB,UAAU,EAAE,GAAG,CAAC,IAAI;qBACpB,CAAC,CAAA;gBACH,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,aAAa;YACd,CAAC;QACF,CAAC;QAED,YAAY,CAAC,GAAG;YACf,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC/D,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;gBAC9C,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACzD,IAAI,GAAG,CAAC,KAAK;oBAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACrC,IAAI,CAAC,GAAG,EAAE,CAAA;YACX,CAAC;YAAC,MAAM,CAAC;gBACR,aAAa;YACd,CAAC;QACF,CAAC;QAED,UAAU,CAAC,GAAG;YACb,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC/B,IAAI,IAAI,EAAE,CAAC;oBACV,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;wBAC1B,aAAa,EAAE,GAAG,CAAC,MAAM;wBACzB,UAAU,EAAE,GAAG,CAAC,IAAI;qBACpB,CAAC,CAAA;gBACH,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,aAAa;YACd,CAAC;QACF,CAAC;QAED,SAAS,CAAC,GAAG;YACZ,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;gBACrD,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAChD,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC3D,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;gBAClD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACzB,CAAC;YAAC,MAAM,CAAC;gBACR,aAAa;YACd,CAAC;QACF,CAAC;QAED,UAAU,CAAC,GAAG;YACb,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC/B,IAAI,IAAI,EAAE,CAAC;oBACV,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;oBACjD,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;oBACnD,IAAI,CAAC,GAAG,EAAE,CAAA;oBACV,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACtB,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,aAAa;YACd,CAAC;QACF,CAAC;QAED,OAAO,CAAC,GAAG;YACV,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC/B,IAAI,IAAI,EAAE,CAAC;oBACV,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;oBAC5C,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE;wBAAE,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;gBAC5F,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,aAAa;YACd,CAAC;QACF,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/testing.d.ts

@@ -2,6 +2,8 @@ import type { Honey } from "./index.ts";
 type TestRequestOptions = {
     form?: Record<string, string>;
     headers?: Record<string, string>;
+    /** Peer address the request comes from, as a server adapter would report it (`ctx.ip`). */
+    ip?: string;
     json?: unknown;
     search?: Record<string, string>;
 };
@@ -14,10 +16,20 @@ type TestClient = {
     post(path: string, opts?: TestRequestOptions): Promise<Response>;
     put(path: string, opts?: TestRequestOptions): Promise<Response>;
     request(method: string, path: string, opts?: TestRequestOptions): Promise<Response>;
+    /** Stop the server a `transport: "node"` client started (a no-op otherwise). */
+    close(): Promise<void>;
 };
 type TestClientOptions<TEnv> = {
     cookies?: boolean;
     env: TEnv;
+    /** Default peer address for every request; a per-request `ip` wins. Ignored by `transport: "node"`. */
+    ip?: string;
+    /**
+     * `"fetch"` (default) calls `app.fetch()` directly. `"node"` serves the app with honey's Node
+     * adapter on a random local port and sends real HTTP, so requests go through the Node
+     * `Request` view and response writer. Call `close()` when done.
+     */
+    transport?: "fetch" | "node";
 };
 export declare function testClient<TEnv>(app: Honey<TEnv, unknown, unknown, unknown, unknown, string, string>, options: TestClientOptions<TEnv>): TestClient;
 export {};

package/dist/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAEvC,KAAK,kBAAkB,GAAG;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC/B,CAAA;AAED,KAAK,UAAU,GAAG;IACjB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/D,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACnF,CAAA;AA4BD,KAAK,iBAAiB,CAAC,IAAI,IAAI;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,GAAG,EAAE,IAAI,CAAA;CACT,CAAA;AAWD,wBAAgB,UAAU,CAAC,IAAI,EAC9B,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EACpE,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAC9B,UAAU,CAyCZ"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAGvC,KAAK,kBAAkB,GAAG;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,2FAA2F;IAC3F,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC/B,CAAA;AAED,KAAK,UAAU,GAAG;IACjB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/D,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnF,gFAAgF;IAChF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB,CAAA;AA4BD,KAAK,iBAAiB,CAAC,IAAI,IAAI;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,GAAG,EAAE,IAAI,CAAA;IACT,uGAAuG;IACvG,EAAE,CAAC,EAAE,MAAM,CAAA;IACX;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;CAC5B,CAAA;AA8BD,wBAAgB,UAAU,CAAC,IAAI,EAC9B,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EACpE,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,GAC9B,UAAU,CAuEZ"}

package/dist/testing.js

@@ -0,0 +1,124 @@
+import { setPeerAddress } from "./peer.js";
+function buildRequest(method, path, baseUrl, opts) {
+    const url = new URL(path, baseUrl);
+    if (opts?.search) {
+        for (const [k, v] of Object.entries(opts.search)) {
+            url.searchParams.set(k, v);
+        }
+    }
+    const headers = new Headers(opts?.headers);
+    let body = null;
+    if (opts?.json !== undefined) {
+        headers.set("content-type", "application/json");
+        body = JSON.stringify(opts.json);
+    }
+    else if (opts?.form) {
+        const formData = new FormData();
+        for (const [k, v] of Object.entries(opts.form)) {
+            formData.append(k, v);
+        }
+        body = formData;
+    }
+    return new Request(url.toString(), { body, headers, method });
+}
+/** Name, value, and whether the cookie is already expired (`Max-Age<=0`, or `Expires` in the past). */
+function parseSetCookie(setCookie, now) {
+    const parts = setCookie.split(";");
+    const pair = parts[0] ?? "";
+    const eq = pair.indexOf("=");
+    if (eq === -1)
+        return null;
+    const name = pair.slice(0, eq).trim();
+    if (name === "")
+        return null;
+    const value = pair.slice(eq + 1).trim();
+    let maxAge = null;
+    let expires = null;
+    for (const attr of parts.slice(1)) {
+        const i = attr.indexOf("=");
+        const key = (i === -1 ? attr : attr.slice(0, i)).trim().toLowerCase();
+        const v = i === -1 ? "" : attr.slice(i + 1).trim();
+        if (key === "max-age" && /^-?\d+$/.test(v))
+            maxAge = Number(v);
+        else if (key === "expires") {
+            const t = Date.parse(v);
+            if (!Number.isNaN(t))
+                expires = t;
+        }
+    }
+    /* Max-Age wins over Expires (RFC 6265 §5.3) */
+    const expired = maxAge !== null ? maxAge <= 0 : expires !== null && expires <= now;
+    return { expired, name, value };
+}
+export function testClient(app, options) {
+    const baseUrl = "http://localhost";
+    const jar = new Map();
+    let node = null;
+    /* a real Node server for `transport: "node"`, started on first use */
+    const nodeServer = () => {
+        if (node === null) {
+            node = (async () => {
+                const { serve } = await import("./node.js");
+                const server = serve(app, { env: options.env, hostname: "127.0.0.1", port: 0 });
+                await new Promise((resolve, reject) => {
+                    server.once("listening", () => resolve());
+                    server.once("error", reject);
+                });
+                const addr = server.address();
+                return { close: () => server.shutdown(1_000), url: `http://127.0.0.1:${addr.port}` };
+            })();
+        }
+        return node;
+    };
+    async function doRequest(method, path, opts) {
+        const mergedHeaders = { ...opts?.headers };
+        if (options.cookies && jar.size > 0) {
+            const existing = mergedHeaders.cookie ?? "";
+            const jarStr = Array.from(jar.entries())
+                .map(([k, v]) => `${k}=${v}`)
+                .join("; ");
+            mergedHeaders.cookie = existing ? `${existing}; ${jarStr}` : jarStr;
+        }
+        let res;
+        if (options.transport === "node") {
+            const { url } = await nodeServer();
+            res = await fetch(buildRequest(method, path, url, { ...opts, headers: mergedHeaders }), { redirect: "manual" });
+        }
+        else {
+            const req = buildRequest(method, path, baseUrl, { ...opts, headers: mergedHeaders });
+            const ip = opts?.ip ?? options.ip;
+            if (ip !== undefined)
+                setPeerAddress(req, ip);
+            res = await app.fetch(req, options.env);
+        }
+        if (options.cookies) {
+            const now = Date.now();
+            for (const sc of res.headers.getSetCookie()) {
+                const parsed = parseSetCookie(sc, now);
+                if (parsed === null)
+                    continue;
+                if (parsed.expired)
+                    jar.delete(parsed.name);
+                else
+                    jar.set(parsed.name, parsed.value);
+            }
+        }
+        return res;
+    }
+    return {
+        async close() {
+            if (node !== null)
+                await (await node).close();
+            node = null;
+        },
+        delete: (path, opts) => doRequest("DELETE", path, opts),
+        get: (path, opts) => doRequest("GET", path, opts),
+        head: (path, opts) => doRequest("HEAD", path, opts),
+        options: (path, opts) => doRequest("OPTIONS", path, opts),
+        patch: (path, opts) => doRequest("PATCH", path, opts),
+        post: (path, opts) => doRequest("POST", path, opts),
+        put: (path, opts) => doRequest("PUT", path, opts),
+        request: (method, path, opts) => doRequest(method, path, opts),
+    };
+}
+//# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAwB1C,SAAS,YAAY,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,IAAyB;IAC7F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAElC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3B,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC1C,IAAI,IAAI,GAAoB,IAAI,CAAA;IAEhC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;QAC/C,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;SAAM,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAA;QAC/B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACtB,CAAC;QACD,IAAI,GAAG,QAAQ,CAAA;IAChB,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;AAC9D,CAAC;AAiBD,uGAAuG;AACvG,SAAS,cAAc,CAAC,SAAiB,EAAE,GAAW;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACrC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,IAAI,MAAM,GAAkB,IAAI,CAAA;IAChC,IAAI,OAAO,GAAkB,IAAI,CAAA;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAClD,IAAI,GAAG,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;aACzD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,CAAA;QAClC,CAAC;IACF,CAAC;IACD,+CAA+C;IAC/C,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,IAAI,GAAG,CAAA;IAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,UAAU,CACzB,GAAoE,EACpE,OAAgC;IAEhC,MAAM,OAAO,GAAG,kBAAkB,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IACrC,IAAI,IAAI,GAA4D,IAAI,CAAA;IAExE,sEAAsE;IACtE,MAAM,UAAU,GAAG,GAAqD,EAAE;QACzE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;gBAClB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;gBAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;gBAC/E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;oBACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBAC7B,CAAC,CAAC,CAAA;gBACF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAsB,CAAA;gBACjD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAA;YACrF,CAAC,CAAC,EAAE,CAAA;QACL,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC,CAAA;IAED,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,IAAyB;QAC/E,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAA;QAE1C,IAAI,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,IAAI,EAAE,CAAA;YAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;iBAC5B,IAAI,CAAC,IAAI,CAAC,CAAA;YACZ,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;QACpE,CAAC;QAED,IAAI,GAAa,CAAA;QACjB,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,EAAE,CAAA;YAClC,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChH,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;YACpF,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,OAAO,CAAC,EAAE,CAAA;YACjC,IAAI,EAAE,KAAK,SAAS;gBAAE,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YAC7C,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QACxC,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;gBACtC,IAAI,MAAM,KAAK,IAAI;oBAAE,SAAQ;gBAC7B,IAAI,MAAM,CAAC,OAAO;oBAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;;oBACtC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YACxC,CAAC;QACF,CAAC;QAED,OAAO,GAAG,CAAA;IACX,CAAC;IAED,OAAO;QACN,KAAK,CAAC,KAAK;YACV,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAA;YAC7C,IAAI,GAAG,IAAI,CAAA;QACZ,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC;QACvD,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;QACjD,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;QACnD,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC;QACzD,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;QACrD,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;QACnD,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;QACjD,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;KAC9D,CAAA;AACF,CAAC"}

package/dist/timeout.d.ts

@@ -2,6 +2,12 @@ import type { MiddlewareFn } from "./middleware.ts";
 type TimeoutOptions = {
     duration: number;
 };
+/**
+ * Answer 504 when the rest of the chain has not produced a response within `duration` ms, and
+ * abort `ctx.signal` so the handler's work stops: a `fetch()`, query or stream that takes the
+ * signal ends instead of running on after the 504. Work that ignores the signal still runs to
+ * completion; its response is discarded.
+ */
 export declare function timeout(opts: TimeoutOptions): MiddlewareFn<{}, {}>;
 export {};
 //# sourceMappingURL=timeout.d.ts.map

package/dist/timeout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"timeout.d.ts","sourceRoot":"","sources":["../src/timeout.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAGnD,KAAK,cAAc,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CA2BlE"}
+{"version":3,"file":"timeout.d.ts","sourceRoot":"","sources":["../src/timeout.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAGnD,KAAK,cAAc,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CA2BlE"}

package/dist/timeout.js

@@ -0,0 +1,36 @@
+import { abortRequest } from "./context.js";
+import { namedMiddleware } from "./middleware.js";
+import { HoneyError } from "./error.js";
+import { EK, SK } from "./types.js";
+/**
+ * Answer 504 when the rest of the chain has not produced a response within `duration` ms, and
+ * abort `ctx.signal` so the handler's work stops: a `fetch()`, query or stream that takes the
+ * signal ends instead of running on after the 504. Work that ignores the signal still runs to
+ * completion; its response is discarded.
+ */
+export function timeout(opts) {
+    const { duration } = opts;
+    const mw = (ctx, next) => {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                const error = new HoneyError({
+                    errorKey: EK.request_timeout,
+                    status: SK.gateway_timeout,
+                });
+                reject(error);
+                abortRequest(ctx, new DOMException("request timed out", "TimeoutError"));
+            }, duration);
+            Promise.resolve(next())
+                .then((res) => {
+                clearTimeout(timer);
+                resolve(res);
+            })
+                .catch((err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+    };
+    return namedMiddleware("timeout", mw);
+}
+//# sourceMappingURL=timeout.js.map

package/dist/timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.js","sourceRoot":"","sources":["../src/timeout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvC,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,YAAY,CAAA;AAMnC;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,IAAoB;IAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;IAEzB,MAAM,EAAE,GAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9C,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC;oBAC5B,QAAQ,EAAE,EAAE,CAAC,eAAe;oBAC5B,MAAM,EAAE,EAAE,CAAC,eAAe;iBAC1B,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,CAAA;gBACb,YAAY,CAAC,GAA8B,EAAE,IAAI,YAAY,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC,CAAA;YACpG,CAAC,EAAE,QAAQ,CAAC,CAAA;YAEZ,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;iBACrB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,OAAO,CAAC,GAAG,CAAC,CAAA;YACb,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACd,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAA;YACZ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACH,CAAC,CAAA;IAED,OAAO,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;AACtC,CAAC"}

package/dist/tree.d.ts

@@ -1,96 +1,193 @@
+import type { RouteId, Segment } from "./pattern.ts";
 import type { HttpMethod, InputSchemasDef, OutputSchemaDef } from "./types.ts";
 import type { WSHandler } from "./ws/cloudflare.ts";
-export type { HttpMethod };
+import type { WSOriginPolicy } from "./ws-origin.ts";
+export type { HttpMethod, RouteId };
 export type OutputValidator = (statusKey: string, data: unknown) => Promise<void>;
-export type RouteHandler = {
-    /** cached compiled middleware chain (set lazily at first request) */
-    _compiled?: (ctx: object) => Response | Promise<Response>;
-    /** internal route — excluded from codegen output */
+type ChainMiddleware = (ctx: Record<string, unknown>, next: (additions?: Record<string, unknown>) => Promise<Response>) => Promise<Response>;
+/**
+ * What a route was registered with, before the app resolves it. Finalize derives the
+ * resolved fields (`ek`, `mt`, `mw`, `bek`, `ef`) from these, so they never depend on the
+ * order of registration and are recomputed whenever the route graph changes.
+ */
+type RecordSource = {
+    /** chain middleware captured at registration (plus any mounting chain) */
+    cm?: ChainMiddleware[];
+    /** `.context()` values of the registering handle (merged with the mounting handle's) */
+    cv?: Record<string, unknown> | null;
+    /** error keys the route declared itself (`.errors()`, `.boundary()`) */
+    dk?: Set<string>;
+    /** the settings of the app the route was registered on — opaque here */
+    own?: unknown;
+    /** route-level boundary key (`.boundary()`) */
+    rb?: string | null;
+    /** route-level middleware (`.get(...).use(mw)`) */
+    rm?: ChainMiddleware[];
+    /** explicit meta: chain `.meta()` overlaid by route `.meta()` */
+    xm?: Record<string, unknown> | null;
+};
+/**
+ * A route record — everything one registered route runs. Records live in a per-app table
+ * keyed by `RouteId`; the tree only holds ids, so two apps that load the same tree never
+ * share a record.
+ */
+export type RouteHandler = RecordSource & {
+    /** internal route (spec, docs, manifest) — excluded from codegen output, never mounted into a parent */
     _skip?: boolean;
     /** boundary error key — wraps undeclared/unexpected errors (null = use default or internal_server_error) */
     bek: string | null;
-    /** pre-computed error factory subset (omit/`null` = use global factory) */
+    /** gateway catch-all: dispatches delegated routes, never matched for a path of its own */
+    ca?: boolean;
+    /** delegated route: a tree leaf with no local handler, served by the gateway catch-all */
+    dl?: boolean;
+    /** resolved error factory subset exposed as `ctx.errors` (omit/`null` = none) */
     ef?: Record<string, (...args: never[]) => unknown> | null;
-    /** declared error keys for this route — used for runtime enforcement */
+    /** declared error keys — resolved at finalize from the route, its middleware and the app defaults */
     ek: Set<string>;
+    /** resolved error factory — the route's own app's, or the serving app's */
+    fac?: Record<string, (...args: never[]) => unknown> | null;
     /** handler function */
     fn: (ctx: unknown) => Response | Promise<Response>;
-    /** input validation schemas — intern trees omit; missing/`null` = no validation */
+    /** route identity: `METHOD /canonical/pattern` */
+    id?: RouteId;
+    /** input validation schemas — missing/`null` = no validation */
     iv?: InputSchemasDef | null;
     /** route metadata — frozen object, accessible via ctx.meta */
     mt: Record<string, unknown> | null;
-    /** middleware chain — same as RuntimeMiddleware, inlined to avoid circular dep */
-    mw: Array<(ctx: Record<string, unknown>, next: (additions?: Record<string, unknown>) => Promise<Response>) => Promise<Response>>;
-    /** output schemas by content-type — intern trees omit; missing/`null` = no validation */
+    /** resolved middleware chain, in run order: chain, scoped, route */
+    mw: ChainMiddleware[];
+    /** output schemas by content-type — missing/`null` = no validation */
     os?: OutputSchemaDef | null;
     /** output validator function — validates response body against schema */
     ov?: OutputValidator | null;
-    /** registered path pattern (e.g. "/users/:id"); intern trees omit this */
+    /** canonical route pattern (e.g. "/users/:id") */
     rp?: string;
 };
 export type { OutputSchemaDef };
-export type WSRouteHandler = {
+export type WSRouteHandler = RecordSource & {
     bek: string | null;
     ek: Set<string>;
+    ef?: Record<string, (...args: never[]) => unknown> | null;
+    fac?: Record<string, (...args: never[]) => unknown> | null;
     fn: WSHandler<unknown>;
+    id?: RouteId;
     iv: InputSchemasDef | null;
     mt: Record<string, unknown> | null;
-    mw: Array<(ctx: Record<string, unknown>, next: (additions?: Record<string, unknown>) => Promise<Response>) => Promise<Response>>;
-    /** registered ws path pattern — used by scoped-mw prefix filter */
+    mw: ChainMiddleware[];
+    /** browser origins allowed to open the socket (`.origins()`); `null` = same-origin when credentialed */
+    og?: WSOriginPolicy | null;
+    /** canonical ws path pattern */
     rp: string;
 };
+/**
+ * Router topology. Leaves are `RouteId`s, never handler objects: what a leaf runs is looked
+ * up in the serving app's own route table.
+ */
 export type TreeNode = {
     /** dynamic param child — { n: param name, c: child subtree } */
     d: {
         c: TreeNode;
         n: string;
     } | null;
-    /** route-graph generation — bumped on insert/merge so served specs can invalidate */
-    g?: number;
-    /** method handlers — maps HTTP method (or ALL) to route handler */
-    m: Record<HttpMethod | "ALL", RouteHandler> | null;
-    /** static children — maps literal path segment to child subtree */
+    /** method → route id at this exact path */
+    m: Record<string, RouteId> | null;
+    /** static children — maps literal path segment to child subtree (null-prototype) */
     s: Record<string, TreeNode>;
-    /** wildcard handler — { n: wildcard name, m: method→handler map } */
+    /** wildcard — { n: wildcard name, m: method → route id } */
     w: {
-        m: Record<HttpMethod | "ALL", RouteHandler>;
+        m: Record<string, RouteId>;
         n: string;
     } | null;
-    /** websocket handler for this path */
-    ws: WSRouteHandler | null;
+    /** websocket route id for this path */
+    ws: RouteId | null;
+};
+/** Descriptive data for one route in a tree. Generated files carry only this. */
+export type RouteEntry = {
+    /** boundary error key */
+    bek?: string | null;
+    /** declared error keys */
+    ek?: readonly string[];
+    /** live record — only in `app.toRouteTree()` snapshots, never in generated files */
+    h?: RouteHandler | WSRouteHandler;
+    /** internal route (spec, docs, manifest) */
+    i?: 1 | true;
+    /** input schemas — only in live snapshots */
+    iv?: InputSchemasDef | null;
+    /** route meta */
+    mt?: Record<string, unknown> | null;
+    /** output schemas — only in live snapshots */
+    os?: OutputSchemaDef | null;
 };
-export declare function bumpGeneration(root: TreeNode): number;
 export type MatchResult = {
     allowed: HttpMethod[];
     matched: false;
 } | {
-    handler: RouteHandler;
+    id: RouteId;
     matched: true;
     params: Record<string, string>;
 } | null;
 export interface RouteMeta {
 }
+/** Format of route trees: topology + per-route data. */
+export declare const ROUTE_TREE_VERSION = 2;
 export type RouteTree = {
-    handlers?: Record<string, RouteHandler>;
     meta: Record<string, RouteMeta>;
     root: TreeNode;
+    routes: Record<RouteId, RouteEntry>;
+    v?: number;
 };
 export declare function createNode(): TreeNode;
-export declare function insertRoute(root: TreeNode, method: HttpMethod | "ALL", path: string, handler: RouteHandler): void;
-export declare function matchRoute(root: TreeNode, method: HttpMethod, path: string): MatchResult;
-export declare function insertWsRoute(root: TreeNode, path: string, handler: WSRouteHandler): void;
+/**
+ * Put `id` at the leaf for `segments` × `method` (`"WS"` for the websocket slot). The same id
+ * already there is a no-op; any other id is a duplicate. Optional params must be expanded by
+ * the caller — every call places exactly one leaf.
+ */
+export declare function insertLeaf(root: TreeNode, segments: readonly Segment[], method: string, id: RouteId): void;
+/**
+ * Place a route's leaves by pattern (an optional last param places two). The leaf holds
+ * `id`, by default the route's `RouteId`, which is returned.
+ */
+export declare function insertRoute(root: TreeNode, method: HttpMethod | "ALL", path: string, id?: RouteId): RouteId;
+/** Place a websocket route's leaf by pattern; returns its `RouteId`. */
+export declare function insertWsRoute(root: TreeNode, path: string, id?: RouteId): RouteId;
+/** Exact lookup: the id at the leaf for `segments` × `method`, without matching params against values. */
+export declare function findLeaf(root: TreeNode, segments: readonly Segment[], method: string): RouteId | undefined;
+export declare function matchRoute(root: TreeNode, method: HttpMethod | string, path: string): MatchResult;
 export declare function matchWsRoute(root: TreeNode, path: string): {
-    handler: WSRouteHandler;
+    id: RouteId;
     params: Record<string, string>;
 } | null;
+/** True when the tree holds at least one websocket leaf. */
+export declare function hasWsLeaf(node: TreeNode): boolean;
+/** Every leaf, with its concrete path pattern (optional params already expanded by insertion). */
+export declare function forEachLeaf(node: TreeNode, cb: (method: string, path: string, id: RouteId) => void, prefix?: string): void;
+/** Deep copy into fresh null-prototype nodes. */
+export declare function cloneTree(node: TreeNode): TreeNode;
+/** Deep-freeze a loaded tree so no app can mutate a module other apps also import. */
+export declare function freezeTree(node: TreeNode): TreeNode;
 /**
- * Copy input/output schemas from `source` onto matching routes in `target` that lack them.
- * Generate-time only: a gateway app serves an intern tree (no schemas) while its merge source
- * (`mergeTree` over downstream `app.toRouteTree()`) still carries them for OpenAPI.
+ * Reject a tree whose leaves are not route ids — a `routes.gen.ts` written by an older honey
+ * holds handler objects there.
  */
-export declare function overlaySchemas(target: TreeNode, source: TreeNode): void;
-/** Merge source tree nodes into target tree (mutates target) */
+export declare function assertTreeFormat(tree: {
+    root?: unknown;
+    routes?: unknown;
+    v?: unknown;
+}): void;
+/** Merge `source` topology into `target` (mutates target; never shares source nodes). */
 export declare function mergeInto(target: TreeNode, source: TreeNode): void;
 type TreeInput = RouteTree | [RouteTree, Record<string, unknown>];
+/**
+ * Merge several trees into a new one. Inputs are never mutated; extra meta given per tree is
+ * applied to copies of its route entries.
+ */
 export declare function mergeTree(...trees: TreeInput[]): RouteTree;
+/**
+ * Copy input/output schemas from `source` onto `target`'s routes that lack them.
+ * Generate-time only: a gateway app serves its generated tree (no schemas) while its merge
+ * source (`mergeTree` over downstream `app.toRouteTree()`) still carries them for OpenAPI.
+ */
+export declare function overlaySchemas(target: {
+    _overlaySchemas(source: RouteTree): void;
+}, source: RouteTree): void;
 //# sourceMappingURL=tree.d.ts.map