@luckystack/server 0.2.7 → 0.3.1

package/README.md

@@ -153,7 +153,7 @@ Top-level `handleHttpRequest` + `dispatchRoutes(handlers, ctx)` are the only orc
 | Export | Purpose |
 | --- | --- |
 | `bootstrapLuckyStack(options)` | High-level entry: verifies config, auto-imports overlay, then calls `createLuckyStackServer`. |
-| `createLuckyStackServer(options)` | Lower-level factory that returns `{ httpServer, ioServer, listen }`. |
+| `createLuckyStackServer(options)` | Lower-level factory that returns `{ httpServer, ioServer, listen, stop, close }` (`stop`/`close` = graceful MIS-016 shutdown). |
 | `verifyBootstrap(requirements?)` | Pre-flight check for project/deploy/services config and required env keys. |
 | `registerCustomRoute(handler)` / `getCustomRoutes()` / `clearCustomRoutes()` | Global custom-route registry composed by `bootstrapLuckyStack`. |
 | Hook payload types: `OnSocketConnectPayload`, `OnSocketDisconnectPayload`, `PreRoomJoinPayload`, `PostRoomJoinPayload`, `PreRoomLeavePayload`, `PostRoomLeavePayload`, `OnLocationUpdatePayload` | For socket-lifecycle hook handlers. |

package/dist/index.d.ts

@@ -82,10 +82,20 @@ interface CreateLuckyStackServerOptions {
      *   1. This option (`options.port`)
      *   2. Second positional argv (`npm run server -- <bundles> <port>`), parsed
      *      by `@luckystack/server/parseArgv`
-     *   3. `process.env.SERVER_PORT` (back-compat for boots that skip `parseArgv`)
-     *   4. `80`
+     *   3. `options.defaultPort` (the project's single-instance default, e.g. the
+     *      `backend` port from `config.ports.ts`)
+     *   4. `process.env.SERVER_PORT` (back-compat for boots that skip `parseArgv`)
+     *   5. `80`
      */
     port?: number | string;
+    /**
+     * Project's single-instance default backend port. Sits BELOW positional argv
+     * so a multi-instance boot (`npm run server -- <preset> <port>`) still wins,
+     * but ABOVE the legacy `SERVER_PORT` env. The scaffold passes the `backend`
+     * value from `config.ports.ts` here, so the listen port has ONE source of
+     * truth without re-introducing `SERVER_PORT` to `.env`.
+     */
+    defaultPort?: number;
     /** Bind address. Defaults to process.env.SERVER_IP or '127.0.0.1'. */
     ip?: string;
     /** Project-side static file handler (Vite output, etc.). Used as the catch-all. */
@@ -100,7 +110,7 @@ interface CreateLuckyStackServerOptions {
     customRoutes?: CustomRouteHandler;
     /**
      * Enable dev-mode tooling (devkit hot reload, REPL, console init).
-     * Defaults to `process.env.NODE_ENV !== 'production'`.
+     * Defaults to `resolveEnvKey() !== 'production'`.
      */
     enableDevTools?: boolean;
     /**

package/dist/index.js

@@ -7,7 +7,7 @@ import {
 
 // src/createServer.ts
 import http from "http";
-import { registerBindAddress, writeBootUuid, getLogger as getLogger13, getProjectConfig as getProjectConfig13, tryCatch as tryCatch10, isProduction as isProduction2 } from "@luckystack/core";
+import { registerBindAddress, writeBootUuid, getLogger as getLogger13, getProjectConfig as getProjectConfig13, tryCatch as tryCatch10, isProduction as isProduction2, resolveEnvKey as resolveEnvKey4 } from "@luckystack/core";
 
 // src/httpHandler.ts
 import { randomUUID } from "crypto";
@@ -19,6 +19,7 @@ import {
   getParams,
   getProjectConfig as getProjectConfig10,
   hasCookie,
+  normalizeOrigin,
   readSession as readSession3,
   tryCatch as tryCatch7,
   tryCatchSync
@@ -228,7 +229,11 @@ var handleCsrfRoute = async ({ res, routePath, token }) => {
   if (!capabilities.login) {
     const doubleSubmit = randomBytes(csrfConfig.tokenLength).toString("hex");
     res.statusCode = 200;
-    res.setHeader("Set-Cookie", serializeCsrfCookie(csrfConfig.cookieName, doubleSubmit, csrfConfig.cookieOptions));
+    const cookieOptions = {
+      ...csrfConfig.cookieOptions,
+      secure: csrfConfig.cookieOptions.secure ?? process.env.SECURE === "true"
+    };
+    res.setHeader("Set-Cookie", serializeCsrfCookie(csrfConfig.cookieName, doubleSubmit, cookieOptions));
     res.setHeader("Content-Type", "application/json");
     res.end(JSON.stringify({ status: "success", csrfToken: doubleSubmit }));
     return true;
@@ -351,6 +356,13 @@ var handleTestResetRoute = async ({ req, res, routePath }) => {
     res.end(JSON.stringify({ status: "error", errorCode: "notFound" }));
     return true;
   }
+  if (req.method !== "POST") {
+    res.statusCode = 405;
+    res.setHeader("Allow", "POST");
+    res.setHeader("Content-Type", "application/json");
+    res.end(JSON.stringify({ status: "error", errorCode: "api.methodNotAllowed" }));
+    return true;
+  }
   const requiredToken = process.env.TEST_RESET_TOKEN;
   const providedToken = req.headers["x-test-reset-token"];
   const tokenValue = Array.isArray(providedToken) ? providedToken[0] : providedToken;
@@ -425,6 +437,15 @@ var parseSessionBasedTokenHeader = (headerValue) => {
   if (value === "0" || value === "false") return false;
   return null;
 };
+var RESERVED_OAUTH_PARAMS = /* @__PURE__ */ new Set([
+  "client_id",
+  "redirect_uri",
+  "scope",
+  "response_type",
+  "state",
+  "code_challenge",
+  "code_challenge_method"
+]);
 var handleAuthApiRoute = async ({
   req,
   res,
@@ -459,19 +480,30 @@ var handleAuthApiRoute = async ({
       res.end(JSON.stringify({ status: false, reason: "login.oauthStateInitFailed" }));
       return true;
     }
-    const clientId = encodeURIComponent(provider.clientID);
-    const callbackUrl = encodeURIComponent(provider.callbackURL);
-    const scope = encodeURIComponent(provider.scope.join(" "));
-    const state = encodeURIComponent(oauthState.state);
     const stateTtl = config.auth.oauthStateTtlSeconds;
     const secureFlag = resolveCookieSecure(config.http.sessionCookieSecure, process.env.SECURE) ? " Secure;" : "";
     res.setHeader(
       "Set-Cookie",
       `${login.OAUTH_STATE_COOKIE_NAME}=${oauthState.stateCookie}; Path=/; HttpOnly;${secureFlag} SameSite=Lax; Max-Age=${stateTtl}`
     );
-    const pkceParams = oauthState.codeChallenge ? `&code_challenge=${encodeURIComponent(oauthState.codeChallenge)}&code_challenge_method=S256` : "";
+    const authParams = new URLSearchParams({
+      client_id: provider.clientID,
+      redirect_uri: provider.callbackURL,
+      scope: provider.scope.join(" "),
+      response_type: "code",
+      prompt: "select_account"
+    });
+    for (const [key, value] of Object.entries(provider.extraAuthorizationParams ?? {})) {
+      if (RESERVED_OAUTH_PARAMS.has(key)) continue;
+      authParams.set(key, value);
+    }
+    authParams.set("state", oauthState.state);
+    if (oauthState.codeChallenge) {
+      authParams.set("code_challenge", oauthState.codeChallenge);
+      authParams.set("code_challenge_method", "S256");
+    }
     res.writeHead(302, {
-      Location: `${provider.authorizationURL}?client_id=${clientId}&redirect_uri=${callbackUrl}&scope=${scope}&response_type=code&prompt=select_account&state=${state}${pkceParams}`
+      Location: `${provider.authorizationURL}?${authParams.toString()}`
     });
     res.end();
     return true;
@@ -528,6 +560,7 @@ var handleAuthApiRoute = async ({
       res.setHeader("Set-Cookie", `${sessionCookieName}=${result.newToken}; ${sessionCookieOptions}`);
     }
   }
+  res.setHeader("content-type", "application/json; charset=utf-8");
   res.end(JSON.stringify({
     status: result.status,
     reason: result.reason,
@@ -613,6 +646,7 @@ var handleAuthCallbackRoute = async ({
     supersedeToken: token ?? void 0
   });
   if (!callbackResult) {
+    res.setHeader("Set-Cookie", `${login.OAUTH_STATE_COOKIE_NAME}=; Path=/; HttpOnly; Max-Age=0; SameSite=Lax`);
     res.writeHead(401, { "Content-Type": "text/plain" });
     res.end("Login failed");
     return true;
@@ -620,12 +654,14 @@ var handleAuthCallbackRoute = async ({
   if (token) await login.deleteSession(token, { skipSocketLogout: true });
   if (shouldLogDev) getLogger3().debug("http: setting cookie or redirect with new token");
   const { token: newToken, redirectUrl } = callbackResult;
+  const clearStateCookie = `${login.OAUTH_STATE_COOKIE_NAME}=; Path=/; HttpOnly; Max-Age=0; SameSite=Lax`;
   if (config.session.basedToken) {
     const hashIndex = redirectUrl.indexOf("#");
     const baseUrl = hashIndex === -1 ? redirectUrl : redirectUrl.slice(0, hashIndex);
+    res.setHeader("Set-Cookie", clearStateCookie);
     res.writeHead(302, { Location: `${baseUrl}#token=${newToken}` });
   } else {
-    res.setHeader("Set-Cookie", `${sessionCookieName}=${newToken}; ${sessionCookieOptions}`);
+    res.setHeader("Set-Cookie", [clearStateCookie, `${sessionCookieName}=${newToken}; ${sessionCookieOptions}`]);
     res.writeHead(302, { Location: redirectUrl });
   }
   res.end();
@@ -711,16 +747,21 @@ var handleApiRoute = async ({
   if (!routePath.startsWith("/api/")) return false;
   const useHttpStream = shouldUseHttpStream({ acceptHeader: req.headers.accept, queryString });
   let streamClosed = false;
-  if (useHttpStream) {
+  let sseInitialized = false;
+  const ensureSseOpen = () => {
+    if (sseInitialized || res.writableEnded) return;
     initSseResponse(res);
-    const markClosed = () => {
-      streamClosed = true;
-    };
-    req.on("close", markClosed);
-    req.on("error", markClosed);
-    req.on("aborted", markClosed);
-    res.on("error", markClosed);
-  }
+    sseInitialized = true;
+  };
+  const abortController = new AbortController();
+  const markClosed = () => {
+    streamClosed = true;
+    if (!abortController.signal.aborted) abortController.abort();
+  };
+  req.on("close", markClosed);
+  req.on("error", markClosed);
+  req.on("aborted", markClosed);
+  res.on("error", markClosed);
   const [error, handled] = await tryCatch4(async () => {
     const httpToken = extractTokenFromRequest(req);
     const apiName = routePath.slice(5);
@@ -731,11 +772,6 @@ var handleApiRoute = async ({
         message: "api.invalidName",
         errorCode: "api.invalidName"
       };
-      if (useHttpStream) {
-        if (!streamClosed) sendSseEvent({ res, event: "final", data: response });
-        res.end();
-        return true;
-      }
       res.setHeader("Content-Type", "application/json");
       res.writeHead(400);
       res.end(JSON.stringify(response));
@@ -752,12 +788,15 @@ var handleApiRoute = async ({
       xLanguageHeader: req.headers["x-language"],
       acceptLanguageHeader: req.headers["accept-language"],
       method,
+      abortSignal: abortController.signal,
       stream: useHttpStream ? (payload) => {
         if (streamClosed || res.writableEnded) return;
+        ensureSseOpen();
         sendSseEvent({ res, event: "stream", data: payload });
       } : void 0
     });
-    if (useHttpStream) {
+    if (useHttpStream && (sseInitialized || result.status === "success")) {
+      ensureSseOpen();
       if (!streamClosed) sendSseEvent({ res, event: "final", data: result });
       res.end();
       return true;
@@ -784,7 +823,7 @@ var handleApiRoute = async ({
     message: "api.invalidRequestFormat",
     errorCode: "api.invalidRequestFormat"
   };
-  if (useHttpStream) {
+  if (useHttpStream && res.headersSent) {
     if (!res.writableEnded) sendSseEvent({ res, event: "error", data: errResponse });
     res.end();
     return true;
@@ -832,16 +871,21 @@ var handleSyncRoute = async ({
   }
   const useHttpStream = shouldUseHttpStream({ acceptHeader: req.headers.accept, queryString });
   let streamClosed = false;
-  if (useHttpStream) {
+  let sseInitialized = false;
+  const ensureSseOpen = () => {
+    if (sseInitialized || res.writableEnded) return;
     initSseResponse(res);
-    const markClosed = () => {
-      streamClosed = true;
-    };
-    req.on("close", markClosed);
-    req.on("error", markClosed);
-    req.on("aborted", markClosed);
-    res.on("error", markClosed);
-  }
+    sseInitialized = true;
+  };
+  const abortController = new AbortController();
+  const markClosed = () => {
+    streamClosed = true;
+    if (!abortController.signal.aborted) abortController.abort();
+  };
+  req.on("close", markClosed);
+  req.on("error", markClosed);
+  req.on("aborted", markClosed);
+  res.on("error", markClosed);
   const [error, handled] = await tryCatch5(async () => {
     if (method !== "POST") {
       const response = {
@@ -849,11 +893,6 @@ var handleSyncRoute = async ({
         message: "sync.methodNotAllowed",
         errorCode: "sync.methodNotAllowed"
       };
-      if (useHttpStream) {
-        if (!streamClosed) sendSseEvent({ res, event: "final", data: response });
-        res.end();
-        return true;
-      }
       res.setHeader("Content-Type", "application/json");
       res.writeHead(405);
       res.end(JSON.stringify(response));
@@ -867,11 +906,6 @@ var handleSyncRoute = async ({
         message: "sync.invalidName",
         errorCode: "sync.invalidName"
       };
-      if (useHttpStream) {
-        if (!streamClosed) sendSseEvent({ res, event: "final", data: response });
-        res.end();
-        return true;
-      }
       res.setHeader("Content-Type", "application/json");
       res.writeHead(400);
       res.end(JSON.stringify(response));
@@ -889,12 +923,15 @@ var handleSyncRoute = async ({
       requesterIp,
       xLanguageHeader: req.headers["x-language"],
       acceptLanguageHeader: req.headers["accept-language"],
+      abortSignal: abortController.signal,
       stream: useHttpStream ? (payload) => {
         if (streamClosed || res.writableEnded) return;
+        ensureSseOpen();
         sendSseEvent({ res, event: "stream", data: payload });
       } : void 0
     });
-    if (useHttpStream) {
+    if (useHttpStream && (sseInitialized || result.status === "success")) {
+      ensureSseOpen();
       if (!streamClosed) sendSseEvent({ res, event: "final", data: result });
       res.end();
       return true;
@@ -920,7 +957,7 @@ var handleSyncRoute = async ({
     message: "sync.invalidRequestFormat",
     errorCode: "sync.invalidRequestFormat"
   };
-  if (useHttpStream) {
+  if (useHttpStream && res.headersSent) {
     if (!res.writableEnded) sendSseEvent({ res, event: "error", data: errResponse });
     res.end();
     return true;
@@ -1026,6 +1063,11 @@ var handleStaticAndSpaFallback = async ({
     return true;
   }
   if (routePath.startsWith("/assets/")) {
+    if (routePath.includes("..")) {
+      res.writeHead(404, { "Content-Type": "text/plain" });
+      res.end("Not Found");
+      return true;
+    }
     if (!options.serveFile) {
       res.writeHead(404);
       res.end("Not Found");
@@ -1115,7 +1157,10 @@ var dispatchRoutes = async (handlers2, ctx) => {
   return false;
 };
 var enforceOriginPolicy = (req, res, routePath) => {
-  const origin = req.headers.origin ?? req.headers.referer ?? "";
+  const origin = normalizeOrigin({
+    value: req.headers.origin ?? req.headers.referer ?? "",
+    secure: process.env.SECURE === "true"
+  });
   const isStateChangingMethod = req.method !== "GET" && req.method !== "HEAD" && req.method !== "OPTIONS";
   if (isOriginExemptPath(routePath)) {
     return { origin, rejected: false };
@@ -1206,7 +1251,7 @@ var handleHttpRequestInner = async (req, res, options) => {
   res.setHeader("X-Request-Id", requestId);
   const safeHeaders = {};
   for (const [k, v] of Object.entries(req.headers)) {
-    if (k === "authorization" || k === "cookie" || k === "set-cookie" || k === "x-csrf-token") continue;
+    if (k === "authorization" || k === "cookie" || k === "set-cookie" || k === "x-csrf-token" || k === "x-test-reset-token" || k === "x-session-based-token") continue;
     safeHeaders[k] = Array.isArray(v) ? v.join(", ") : v ?? "";
   }
   const preHttpResult = await dispatchHook5("preHttpRequest", {
@@ -1376,7 +1421,7 @@ var executeRoomMutation = async (opts) => {
   const existingRoomCodes = getSessionRoomCodes(session);
   const roomPurpose = preHook === "preRoomJoin" ? "join" : "leave";
   const physicalRoom = formatRoomName(group, { purpose: roomPurpose, userId: session.id });
-  const nextRoomCodes = await mutate(socket, physicalRoom, group, existingRoomCodes);
+  const nextRoomCodes = await mutate(socket, physicalRoom, group, existingRoomCodes, session.id);
   const sanitizedSession = sanitizeSessionRoomKeys(session);
   await writeSession(token, { ...sanitizedSession, roomCodes: nextRoomCodes });
   const visibleRooms = getVisibleSocketRooms(socket, token);
@@ -1433,10 +1478,19 @@ var registerRoomEvents = (ctx) => {
         postHook: "postRoomJoin",
         blockedErrorCode: "room.joinBlocked",
         logVerb: "joined",
-        mutate: async (sock, physicalRoom, rawGroup, existingCodes) => {
-          const nextCodes = [.../* @__PURE__ */ new Set([...existingCodes, rawGroup])];
+        mutate: async (sock, physicalRoom, rawGroup, existingCodes, userId) => {
+          const maxRooms = getProjectConfig11().socket.maxRoomsPerSession;
+          let kept = existingCodes;
+          if (maxRooms !== false && maxRooms > 0 && !existingCodes.includes(rawGroup)) {
+            while (kept.length >= maxRooms) {
+              const oldest = kept[0];
+              if (oldest === void 0) break;
+              kept = kept.slice(1);
+              await sock.leave(formatRoomName(oldest, { purpose: "join", userId }));
+            }
+          }
           await sock.join(physicalRoom);
-          return nextCodes;
+          return [.../* @__PURE__ */ new Set([...kept, rawGroup])];
         }
       });
     });
@@ -1459,7 +1513,7 @@ var registerRoomEvents = (ctx) => {
         postHook: "postRoomLeave",
         blockedErrorCode: "room.leaveBlocked",
         logVerb: "left",
-        mutate: async (sock, physicalRoom, rawGroup, existingCodes) => {
+        mutate: async (sock, physicalRoom, rawGroup, existingCodes, _userId) => {
           const nextCodes = existingCodes.filter((c) => c !== rawGroup);
           await sock.leave(physicalRoom);
           return nextCodes;
@@ -1492,7 +1546,7 @@ var registerDisconnectEvent = (ctx) => {
     void dispatchHook6("onSocketDisconnect", { socketId: socket.id, token, reason });
     if (activityBroadcasterEnabled) {
       void getPresence().then((presence) => {
-        presence?.clearActivity(socket.id);
+        presence?.clearActivity(socket.id, token ?? void 0);
       });
     }
     if (activityBroadcasterEnabled && token) {
@@ -1672,7 +1726,8 @@ import {
   isDeployConfigRegistered,
   isLocalizedNormalizerRegistered,
   isProjectConfigRegistered,
-  isRuntimeMapsProviderRegistered
+  isRuntimeMapsProviderRegistered,
+  resolveEnvKey as resolveEnvKey2
 } from "@luckystack/core";
 var verifyBootstrap = async (requirements = {}) => {
   const missing = [];
@@ -1696,18 +1751,22 @@ var verifyBootstrap = async (requirements = {}) => {
   }
   if (requirements.requireOAuthProviders) {
     const login = await getLogin();
-    if (!login) {
+    if (login) {
+      const providers = login.getOAuthProviders();
+      const onlyDefaultCredentials = providers.length === 0 || providers.length === 1 && providers[0]?.name === "credentials";
+      if (onlyDefaultCredentials) {
+        missing.push(
+          "OAuth providers \u2014 call `registerOAuthProviders([...])` from `luckystack/login/oauthProviders.ts` (or skip this check if your app uses credentials only)."
+        );
+      }
+    } else {
       missing.push(
         "OAuth providers required (`requireOAuthProviders`) but `@luckystack/login` is not installed. Install it, or drop the requirement if this app has no auth."
       );
-    } else if (login.getOAuthProviders().length <= 1) {
-      missing.push(
-        "OAuth providers \u2014 call `registerOAuthProviders([...])` from `luckystack/login/oauthProviders.ts` (or skip this check if your app uses credentials only)."
-      );
     }
   }
   if (!isRuntimeMapsProviderRegistered()) {
-    if (process.env.NODE_ENV === "production") {
+    if (resolveEnvKey2() === "production") {
       missing.push(
         "RuntimeMapsProvider \u2014 call `registerRuntimeMapsProvider({...})` from `server/prod/runtimeMaps.ts`. Without it, every api/sync request returns notFound."
       );
@@ -1718,7 +1777,7 @@ var verifyBootstrap = async (requirements = {}) => {
     }
   }
   if (!isLocalizedNormalizerRegistered()) {
-    if (process.env.NODE_ENV === "production") {
+    if (resolveEnvKey2() === "production") {
       missing.push(
         "LocalizedNormalizer \u2014 call `registerLocalizedNormalizer({...})` from your bootstrap. Without it, error response messages will be the raw errorCode (no i18n)."
       );
@@ -1752,7 +1811,8 @@ var verifyBootstrap = async (requirements = {}) => {
 // src/runtimeMapsLoader.ts
 import {
   getLogger as getLogger10,
-  registerRuntimeMapsProvider
+  registerRuntimeMapsProvider,
+  resolveEnvKey as resolveEnvKey3
 } from "@luckystack/core";
 var emptyRuntimeMaps = {
   apisObject: {},
@@ -1802,7 +1862,7 @@ var mergeInto = (target, source, kind, fromPreset, keyOrigin) => {
     target[key] = source[key];
   }
 };
-var isProduction = () => process.env.NODE_ENV === "production";
+var isProduction = () => resolveEnvKey3() === "production";
 var createProdRuntimeMapsProvider = (options) => {
   let prodMapsPromise = null;
   let devkitModulePromise = null;
@@ -1970,12 +2030,23 @@ var clearDevServerInfo = () => {
 var initDevTools = async () => {
   const { initConsolelog } = await import("@luckystack/core");
   initConsolelog();
-  const devkitModuleId = "@luckystack/devkit";
-  const devkit = await import(devkitModuleId);
-  await devkit.initializeAll();
-  devkit.setupWatchers();
   process.once("SIGINT", () => process.exit(0));
   process.once("SIGTERM", () => process.exit(0));
+  const devkitModuleId = "@luckystack/devkit";
+  if (!canResolve(devkitModuleId)) {
+    getLogger13().warn(
+      "dev tooling unavailable \u2014 @luckystack/devkit is not installed, so hot reload + type-map generation are off. Install it as a devDependency for dev, or set NODE_ENV=production to run in production mode."
+    );
+    return;
+  }
+  const [devkitError] = await tryCatch10(async () => {
+    const devkit = await import(devkitModuleId);
+    await devkit.initializeAll();
+    devkit.setupWatchers();
+  });
+  if (devkitError) {
+    getLogger13().warn("dev tooling failed to initialize \u2014 continuing without hot reload.", { error: devkitError.message });
+  }
 };
 var listenLuckyStackServer = (httpServer, ip, port, callback) => new Promise((resolve, reject) => {
   const startPort = typeof port === "string" ? Number.parseInt(port, 10) : port;
@@ -2031,9 +2102,9 @@ var createLuckyStackServer = async (options = {}) => {
     requireServicesConfig: options.requireServicesConfig,
     requireOAuthProviders: options.requireOAuthProviders
   });
-  const port = options.port ?? getParsedPort() ?? process.env.SERVER_PORT ?? 80;
+  const port = options.port ?? getParsedPort() ?? options.defaultPort ?? process.env.SERVER_PORT ?? 80;
   const ip = options.ip ?? process.env.SERVER_IP ?? "127.0.0.1";
-  const enableDevTools = options.enableDevTools ?? process.env.NODE_ENV !== "production";
+  const enableDevTools = options.enableDevTools ?? resolveEnvKey4() !== "production";
   registerBindAddress({
     ip,
     port: typeof port === "string" ? Number.parseInt(port, 10) : port