@north-light/crouter-api 0.3.283 → 0.3.285

package/dist/api/client.d.ts

@@ -28,7 +28,9 @@ export interface CrtrClientOptions {
     socketPath?: string;
     /** `http(s)://host:port` for TCP/remote transport. */
     baseUrl?: string;
-    /** Extra headers (e.g. an edge auth token on TCP; crtrd ignores it). */
+    /** Extra headers, e.g. `{ authorization: 'Bearer <token>' }` when the target
+     *  crtrd's TCP listener has `CRTRD_TOKEN` set (unix-socket transport is
+     *  never checked, and a TCP daemon with no token set ignores this too). */
     headers?: Record<string, string>;
     /** Autostart on a cold socket (default true for socketPath, false for baseUrl). */
     autostart?: boolean;

package/dist/shared/env.d.ts

@@ -56,6 +56,11 @@ export declare function envNoDaemonAutostart(): boolean;
 /** The `--tcp` fallback for crtrd's opt-in TCP listener (`CRTRD_TCP`), raw
  *  (`host:port` or undefined — absent means unix socket only). */
 export declare function envCrtrdTcp(): string | undefined;
+/** The opt-in bearer token guarding crtrd's TCP listener (`CRTRD_TOKEN`).
+ *  Unset (or blank) → undefined, and the TCP listener performs NO auth check
+ *  at all — exactly today's behavior. The unix socket never checks this,
+ *  set or not. */
+export declare function envCrtrdToken(): string | undefined;
 /** Kill switch for the host-exports writer/pruner (`CRTR_NO_EXPORTS=1`). */
 export declare function envNoExports(): boolean;
 /** Verbose-diagnostics gate for otherwise-silent best-effort catches

package/dist/shared/env.js

@@ -137,6 +137,14 @@ export function envNoDaemonAutostart() {
 export function envCrtrdTcp() {
     return process.env['CRTRD_TCP'];
 }
+/** The opt-in bearer token guarding crtrd's TCP listener (`CRTRD_TOKEN`).
+ *  Unset (or blank) → undefined, and the TCP listener performs NO auth check
+ *  at all — exactly today's behavior. The unix socket never checks this,
+ *  set or not. */
+export function envCrtrdToken() {
+    const raw = process.env['CRTRD_TOKEN'];
+    return raw !== undefined && raw !== '' ? raw : undefined;
+}
 /** Kill switch for the host-exports writer/pruner (`CRTR_NO_EXPORTS=1`). */
 export function envNoExports() {
     return process.env['CRTR_NO_EXPORTS'] === '1';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/crouter-api",
-  "version": "0.3.283",
+  "version": "0.3.285",
   "description": "Typed crtrd /v1 API contract — DTOs, route builders, the error contract, the CrtrClient, and the command-plugin manifest format. Zero runtime dependencies.",
   "type": "module",
   "main": "./dist/api/index.js",