@orpc/server 2.0.0-beta.24 → 2.0.0-beta.26

package/dist/index.d.ts

@@ -55,67 +55,327 @@ type UnlaziedRouter<T extends AnyRouter> = T extends AnyProcedure ? T : {
  */
 declare function unlazyRouter<T extends AnyRouter>(router: T): Promise<UnlaziedRouter<T>>;
 
+/**
+ * The builder variant returned after `.use` is called.
+ * `.$context` and `.$config` are no longer available once middleware is applied.
+ *
+ * @see {@link https://orpc.dev/docs/procedure | Procedure}
+ */
 interface BuilderWithMiddlewares<TInitialContext extends Context, TInjectedContext extends Context, TErrorMap extends ErrorMap> {
     '~orpc': BuilderDefinition<InitialInputSchema, InitialOutputSchema, TErrorMap>;
+    /**
+     * Applies metadata plugins to procedures built from this builder.
+     *
+     * @see {@link https://orpc.dev/docs/metadata | Metadata}
+     */
     'meta'(...plugins: MetaPlugin<InitialInputSchema, InitialOutputSchema, TErrorMap>[]): BuilderWithMiddlewares<TInitialContext, TInjectedContext, TErrorMap>;
+    /**
+     * Defines typesafe errors that procedures built from this builder can throw
+     * via the `errors` utility in handlers and middleware.
+     *
+     * @see {@link https://orpc.dev/docs/error-handling#typesafe-errors | Error Handling - Typesafe Errors}
+     */
     'errors'<T extends ErrorMap>(errors: T): BuilderWithMiddlewares<TInitialContext, TInjectedContext, MergedErrorMap<TErrorMap, T>>;
+    /**
+     * Applies a middleware that runs before the handler of every procedure
+     * built from this builder.
+     *
+     * @see {@link https://orpc.dev/docs/middleware | Middleware}
+     */
     'use'<$OutContext extends IntersectPick<MergedContext<TInitialContext, TInjectedContext>, $OutContext>, $InContext extends Context = MergedContext<TInitialContext, TInjectedContext>, $ErrorMap extends ErrorMap = TErrorMap>(middleware: Middleware<$InContext | MergedContext<TInitialContext, TInjectedContext>, $OutContext, InferSchemaOutput<InitialInputSchema>, InferSchemaInput<InitialOutputSchema>, $ErrorMap>): BuilderWithMiddlewares<MergedInitialContext<TInitialContext, TInjectedContext, $InContext>, MergedContext<TInjectedContext, $OutContext>, MergedErrorMap<$ErrorMap, TErrorMap>>;
+    /**
+     * Creates a standalone middleware that can be composed and applied to any
+     * compatible builder or procedure with `.use`.
+     *
+     * @see {@link https://orpc.dev/docs/middleware | Middleware}
+     */
     'middleware'<$OutContext extends IntersectPick<MergedContext<TInitialContext, TInjectedContext>, $OutContext>, $Input, $InContext extends Context = MergedContext<TInitialContext, TInjectedContext>, $Output = any>(middleware: Middleware<$InContext | MergedContext<TInitialContext, TInjectedContext>, $OutContext, $Input, $Output, TErrorMap>): DecoratedMiddleware<MergedInitialContext<TInitialContext, TInjectedContext, $InContext>, MergedContext<TInjectedContext, $OutContext>, $Input, $Output, TErrorMap>;
+    /**
+     * Defines the input schema used to validate and type the procedure input.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#inputoutput-validation | Procedure - Input/Output Validation}
+     */
     'input'<T extends AnySchema>(schema: T): BuilderWithInput<TInitialContext, TInjectedContext, T, TErrorMap>;
+    /**
+     * Defines the output schema used to validate and type the procedure output.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#inputoutput-validation | Procedure - Input/Output Validation}
+     */
     'output'<T extends AnySchema>(schema: T): BuilderWithOutput<TInitialContext, TInjectedContext, T, TErrorMap>;
+    /**
+     * Defines the function that implements the procedure and completes the
+     * chain, returning a callable procedure.
+     *
+     * @see {@link https://orpc.dev/docs/procedure | Procedure}
+     */
     'handler'<T>(handler: ProcedureHandler<MergedContext<TInitialContext, TInjectedContext>, InferSchemaOutput<InitialInputSchema>, T, ORPCErrorConstructorMap<TErrorMap>>): DecoratedProcedure<TInitialContext, TInjectedContext, InitialInputSchema, Schema<Exclude<T, AnyORPCError>>, TErrorMap, Extract<T, AnyORPCError>>;
+    /**
+     * Applies the builder's middleware, errors, and metadata to every procedure
+     * in the given router.
+     *
+     * @see {@link https://orpc.dev/docs/router#extending-router | Router - Extending Router}
+     */
     'router'<T extends Router<MergedContext<TInitialContext, TInjectedContext>>>(router: T): AugmentedRouterWithMiddlewares<T, TInitialContext, TInjectedContext, TErrorMap>;
+    /**
+     * Like `.router`, but loads the router lazily on first access, which helps
+     * reduce startup time for large applications.
+     *
+     * @see {@link https://orpc.dev/docs/router#lazy-router | Router - Lazy Router}
+     */
     'lazy'<T extends Router<MergedContext<TInitialContext, TInjectedContext>>>(loader: () => Promise<{
         default: T;
     }>): Lazy<AugmentedRouterWithMiddlewares<T, TInitialContext, TInjectedContext, TErrorMap>>;
 }
+/**
+ * The builder variant returned after `.input` is called.
+ * Only procedure-level methods remain available once an input schema is defined.
+ *
+ * @see {@link https://orpc.dev/docs/procedure | Procedure}
+ */
 interface BuilderWithInput<TInitialContext extends Context, TInjectedContext extends Context, TInputSchema extends AnySchema, TErrorMap extends ErrorMap> {
     '~orpc': BuilderDefinition<TInputSchema, InitialOutputSchema, TErrorMap>;
+    /**
+     * Applies metadata plugins to procedures built from this builder.
+     *
+     * @see {@link https://orpc.dev/docs/metadata | Metadata}
+     */
     'meta'(...plugins: MetaPlugin<TInputSchema, InitialOutputSchema, TErrorMap>[]): BuilderWithInput<TInitialContext, TInjectedContext, TInputSchema, TErrorMap>;
+    /**
+     * Defines typesafe errors that procedures built from this builder can throw
+     * via the `errors` utility in handlers and middleware.
+     *
+     * @see {@link https://orpc.dev/docs/error-handling#typesafe-errors | Error Handling - Typesafe Errors}
+     */
     'errors'<T extends ErrorMap>(errors: T): BuilderWithInput<TInitialContext, TInjectedContext, TInputSchema, MergedErrorMap<TErrorMap, T>>;
+    /**
+     * Applies a middleware that runs before the handler and can access the
+     * validated input.
+     *
+     * @see {@link https://orpc.dev/docs/middleware | Middleware}
+     */
     'use'<$OutContext extends IntersectPick<MergedContext<TInitialContext, TInjectedContext>, $OutContext>, $InContext extends Context = MergedContext<TInitialContext, TInjectedContext>, $ErrorMap extends ErrorMap = TErrorMap>(middleware: Middleware<$InContext | MergedContext<TInitialContext, TInjectedContext>, $OutContext, InferSchemaOutput<TInputSchema>, InferSchemaInput<InitialOutputSchema>, $ErrorMap>): BuilderWithInput<MergedInitialContext<TInitialContext, TInjectedContext, $InContext>, MergedContext<TInjectedContext, $OutContext>, TInputSchema, MergedErrorMap<$ErrorMap, TErrorMap>>;
+    /**
+     * Adds an additional input schema, merged with the previously defined one.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#multiple-schemas | Procedure - Multiple Schemas}
+     */
     'input'<T extends AnySchema>(schema: T): BuilderWithInput<TInitialContext, TInjectedContext, MergedSchema<T, TInputSchema>, TErrorMap>;
+    /**
+     * Defines the output schema used to validate and type the procedure output.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#inputoutput-validation | Procedure - Input/Output Validation}
+     */
     'output'<T extends AnySchema>(schema: T): BuilderWithInputOutput<TInitialContext, TInjectedContext, TInputSchema, T, TErrorMap>;
+    /**
+     * Defines the function that implements the procedure and completes the
+     * chain, returning a callable procedure.
+     *
+     * @see {@link https://orpc.dev/docs/procedure | Procedure}
+     */
     'handler'<T>(handler: ProcedureHandler<MergedContext<TInitialContext, TInjectedContext>, InferSchemaOutput<TInputSchema>, T, ORPCErrorConstructorMap<TErrorMap>>): DecoratedProcedure<TInitialContext, TInjectedContext, TInputSchema, Schema<Exclude<T, AnyORPCError>>, TErrorMap, Extract<T, AnyORPCError>>;
 }
+/**
+ * The builder variant returned after `.output` is called.
+ * Only procedure-level methods remain available once an output schema is defined.
+ *
+ * @see {@link https://orpc.dev/docs/procedure | Procedure}
+ */
 interface BuilderWithOutput<TInitialContext extends Context, TInjectedContext extends Context, TOutputSchema extends AnySchema, TErrorMap extends ErrorMap> {
     '~orpc': BuilderDefinition<InitialInputSchema, TOutputSchema, TErrorMap>;
+    /**
+     * Applies metadata plugins to procedures built from this builder.
+     *
+     * @see {@link https://orpc.dev/docs/metadata | Metadata}
+     */
     'meta'(...plugins: MetaPlugin<InitialInputSchema, TOutputSchema, TErrorMap>[]): BuilderWithOutput<TInitialContext, TInjectedContext, TOutputSchema, TErrorMap>;
+    /**
+     * Defines typesafe errors that procedures built from this builder can throw
+     * via the `errors` utility in handlers and middleware.
+     *
+     * @see {@link https://orpc.dev/docs/error-handling#typesafe-errors | Error Handling - Typesafe Errors}
+     */
     'errors'<T extends ErrorMap>(errors: T): BuilderWithOutput<TInitialContext, TInjectedContext, TOutputSchema, MergedErrorMap<TErrorMap, T>>;
+    /**
+     * Applies a middleware that runs before the handler and can access the
+     * typed output.
+     *
+     * @see {@link https://orpc.dev/docs/middleware | Middleware}
+     */
     'use'<$OutContext extends IntersectPick<MergedContext<TInitialContext, TInjectedContext>, $OutContext>, $InContext extends Context = MergedContext<TInitialContext, TInjectedContext>, $ErrorMap extends ErrorMap = TErrorMap>(middleware: Middleware<$InContext | MergedContext<TInitialContext, TInjectedContext>, $OutContext, InferSchemaOutput<InitialInputSchema>, InferSchemaInput<TOutputSchema>, $ErrorMap>): BuilderWithOutput<MergedInitialContext<TInitialContext, TInjectedContext, $InContext>, MergedContext<TInjectedContext, $OutContext>, TOutputSchema, MergedErrorMap<$ErrorMap, TErrorMap>>;
+    /**
+     * Defines the input schema used to validate and type the procedure input.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#inputoutput-validation | Procedure - Input/Output Validation}
+     */
     'input'<T extends AnySchema>(schema: T): BuilderWithInputOutput<TInitialContext, TInjectedContext, T, TOutputSchema, TErrorMap>;
+    /**
+     * Adds an additional output schema, merged with the previously defined one.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#multiple-schemas | Procedure - Multiple Schemas}
+     */
     'output'<T extends AnySchema>(schema: T): BuilderWithOutput<TInitialContext, TInjectedContext, MergedSchema<T, TOutputSchema>, TErrorMap>;
+    /**
+     * Defines the function that implements the procedure and completes the
+     * chain, returning a callable procedure.
+     *
+     * @see {@link https://orpc.dev/docs/procedure | Procedure}
+     */
     'handler'<T extends InferSchemaInput<TOutputSchema> | AnyORPCError>(handler: ProcedureHandler<MergedContext<TInitialContext, TInjectedContext>, InferSchemaOutput<InitialInputSchema>, T, ORPCErrorConstructorMap<TErrorMap>>): DecoratedProcedure<TInitialContext, TInjectedContext, InitialInputSchema, TOutputSchema, TErrorMap, Extract<T, AnyORPCError>>;
 }
+/**
+ * The builder variant returned after both `.input` and `.output` are called.
+ * Only procedure-level methods remain available.
+ *
+ * @see {@link https://orpc.dev/docs/procedure | Procedure}
+ */
 interface BuilderWithInputOutput<TInitialContext extends Context, TInjectedContext extends Context, TInputSchema extends AnySchema, TOutputSchema extends AnySchema, TErrorMap extends ErrorMap> {
     '~orpc': BuilderDefinition<TInputSchema, TOutputSchema, TErrorMap>;
+    /**
+     * Applies metadata plugins to procedures built from this builder.
+     *
+     * @see {@link https://orpc.dev/docs/metadata | Metadata}
+     */
     'meta'(...plugins: MetaPlugin<TInputSchema, TOutputSchema, TErrorMap>[]): BuilderWithInputOutput<TInitialContext, TInjectedContext, TInputSchema, TOutputSchema, TErrorMap>;
+    /**
+     * Defines typesafe errors that procedures built from this builder can throw
+     * via the `errors` utility in handlers and middleware.
+     *
+     * @see {@link https://orpc.dev/docs/error-handling#typesafe-errors | Error Handling - Typesafe Errors}
+     */
     'errors'<T extends ErrorMap>(errors: T): BuilderWithInputOutput<TInitialContext, TInjectedContext, TInputSchema, TOutputSchema, MergedErrorMap<TErrorMap, T>>;
+    /**
+     * Applies a middleware that runs before the handler and can access the
+     * validated input and typed output.
+     *
+     * @see {@link https://orpc.dev/docs/middleware | Middleware}
+     */
     'use'<$OutContext extends IntersectPick<MergedContext<TInitialContext, TInjectedContext>, $OutContext>, $InContext extends Context = MergedContext<TInitialContext, TInjectedContext>, $ErrorMap extends ErrorMap = TErrorMap>(middleware: Middleware<$InContext | MergedContext<TInitialContext, TInjectedContext>, $OutContext, InferSchemaOutput<TInputSchema>, InferSchemaInput<TOutputSchema>, $ErrorMap>): BuilderWithInputOutput<MergedInitialContext<TInitialContext, TInjectedContext, $InContext>, MergedContext<TInjectedContext, $OutContext>, TInputSchema, TOutputSchema, MergedErrorMap<$ErrorMap, TErrorMap>>;
+    /**
+     * Adds an additional input schema, merged with the previously defined one.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#multiple-schemas | Procedure - Multiple Schemas}
+     */
     'input'<T extends AnySchema>(schema: T): BuilderWithInputOutput<TInitialContext, TInjectedContext, MergedSchema<T, TInputSchema>, TOutputSchema, TErrorMap>;
+    /**
+     * Adds an additional output schema, merged with the previously defined one.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#multiple-schemas | Procedure - Multiple Schemas}
+     */
     'output'<T extends AnySchema>(schema: T): BuilderWithInputOutput<TInitialContext, TInjectedContext, TInputSchema, MergedSchema<T, TOutputSchema>, TErrorMap>;
+    /**
+     * Defines the function that implements the procedure and completes the
+     * chain, returning a callable procedure.
+     *
+     * @see {@link https://orpc.dev/docs/procedure | Procedure}
+     */
     'handler'<T extends InferSchemaInput<TOutputSchema> | AnyORPCError>(handler: ProcedureHandler<MergedContext<TInitialContext, TInjectedContext>, InferSchemaOutput<TInputSchema>, T, ORPCErrorConstructorMap<TErrorMap>>): DecoratedProcedure<TInitialContext, TInjectedContext, TInputSchema, TOutputSchema, TErrorMap, Extract<T, AnyORPCError>>;
 }
 
+/**
+ * The initial context type used when `.$context` is not called.
+ * Augment this interface with `declare module '@orpc/server'` to define
+ * a default initial context type globally.
+ *
+ * @see {@link https://orpc.dev/docs/context#default-initial-context | Context - Default Initial Context}
+ */
 interface DefaultInitialContext {
 }
 interface BuilderDefinition<TInputSchema extends AnySchema, TInjectedContext extends AnySchema, TErrorMap extends ErrorMap> extends ProcedureContractDefinition<TInputSchema, TInjectedContext, TErrorMap>, ProcedureConfig {
     orderedMiddlewares: OrderedMiddleware[];
 }
+/**
+ * The procedure builder behind `os`. Chain its methods to gradually define
+ * context, middleware, errors, schemas, and finally a handler or router.
+ *
+ * @see {@link https://orpc.dev/docs/procedure | Procedure}
+ */
 declare class Builder<TInitialContext extends Context, TErrorMap extends ErrorMap> {
     '~orpc': BuilderDefinition<InitialInputSchema, InitialOutputSchema, TErrorMap>;
+    /**
+     * Private constructor to prevent direct instantiation.
+     * Use the static `create` method to initialize a new instance with a safe initial definition.
+     */
     private constructor();
+    /**
+     * Creates a fresh builder with an empty definition.
+     * Prefer the exported `os` instance over calling this directly.
+     *
+     * @see {@link https://orpc.dev/docs/procedure | Procedure}
+     */
     static create<T extends Context = DefaultInitialContext>(): Builder<T & object, Record<never, never>>;
+    /**
+     * Declares the initial context type that must be provided when executing
+     * procedures built from this builder.
+     *
+     * @see {@link https://orpc.dev/docs/context#initial-context | Context - Initial Context}
+     */
     $context<T extends Context = DefaultInitialContext>(): Builder<T & object, TErrorMap>;
+    /**
+     * Overrides the procedure configuration, such as disabling runtime
+     * input/output validation.
+     *
+     * @see {@link https://orpc.dev/docs/advanced/validation-customization | Validation Customization}
+     */
     $config(config: ProcedureConfig): Builder<TInitialContext, TErrorMap>;
+    /**
+     * Applies metadata plugins to procedures built from this builder.
+     *
+     * @see {@link https://orpc.dev/docs/metadata | Metadata}
+     */
     meta(...plugins: MetaPlugin<InitialInputSchema, InitialOutputSchema, TErrorMap>[]): Builder<TInitialContext, TErrorMap>;
+    /**
+     * Defines typesafe errors that procedures built from this builder can throw
+     * via the `errors` utility in handlers and middleware.
+     *
+     * @see {@link https://orpc.dev/docs/error-handling#typesafe-errors | Error Handling - Typesafe Errors}
+     */
     errors<U extends ErrorMap>(errors: U): Builder<TInitialContext, MergedErrorMap<TErrorMap, U>>;
+    /**
+     * Applies a middleware that runs before the handler of every procedure
+     * built from this builder.
+     *
+     * @see {@link https://orpc.dev/docs/middleware | Middleware}
+     */
     use<$OutContext extends IntersectPick<TInitialContext, $OutContext>, $InContext extends Context = TInitialContext, $ErrorMap extends ErrorMap = TErrorMap>(middleware: Middleware<$InContext | TInitialContext, $OutContext, InferSchemaOutput<InitialInputSchema>, InferSchemaInput<InitialOutputSchema>, $ErrorMap>): BuilderWithMiddlewares<MergedInitialContext<TInitialContext, object, $InContext>, $OutContext, MergedErrorMap<$ErrorMap, TErrorMap>>;
+    /**
+     * Creates a standalone middleware that can be composed and applied to any
+     * compatible builder or procedure with `.use`.
+     *
+     * @see {@link https://orpc.dev/docs/middleware | Middleware}
+     */
     middleware<$OutContext extends IntersectPick<TInitialContext, $OutContext>, $Input, $Output = any>(middleware: Middleware<TInitialContext, $OutContext, $Input, $Output, TErrorMap>): DecoratedMiddleware<TInitialContext, $OutContext, $Input, $Output, TErrorMap>;
+    /**
+     * Defines the input schema used to validate and type the procedure input.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#inputoutput-validation | Procedure - Input/Output Validation}
+     */
     input<$ extends AnySchema>(schema: $): BuilderWithInput<TInitialContext, object, $, TErrorMap>;
+    /**
+     * Defines the output schema used to validate and type the procedure output.
+     *
+     * @see {@link https://orpc.dev/docs/procedure#inputoutput-validation | Procedure - Input/Output Validation}
+     */
     output<$ extends AnySchema>(schema: $): BuilderWithOutput<TInitialContext, object, $, TErrorMap>;
+    /**
+     * Defines the function that implements the procedure and completes the
+     * chain, returning a callable procedure.
+     *
+     * @see {@link https://orpc.dev/docs/procedure | Procedure}
+     */
     handler<T>(handler: ProcedureHandler<TInitialContext, InferSchemaOutput<InitialInputSchema>, T, ORPCErrorConstructorMap<TErrorMap>>): DecoratedProcedure<TInitialContext, object, InitialInputSchema, Schema<Exclude<T, AnyORPCError>>, TErrorMap, Extract<T, AnyORPCError>>;
+    /**
+     * Applies the builder's middleware, errors, and metadata to every procedure
+     * in the given router.
+     *
+     * @see {@link https://orpc.dev/docs/router#extending-router | Router - Extending Router}
+     */
     router<T extends AnyRouter>(router: T): AugmentedRouter<T, TErrorMap>;
+    /**
+     * Like `.router`, but loads the router lazily on first access, which helps
+     * reduce startup time for large applications.
+     *
+     * @see {@link https://orpc.dev/docs/router#lazy-router | Router - Lazy Router}
+     */
     lazy<T extends AnyRouter>(loader: () => Promise<{
         default: T;
     }>): Lazy<AugmentedRouter<T, TErrorMap>>;

package/dist/index.mjs

@@ -86,9 +86,19 @@ function decorateMiddleware(middleware) {
 
 class Builder {
   "~orpc";
+  /**
+   * Private constructor to prevent direct instantiation.
+   * Use the static `create` method to initialize a new instance with a safe initial definition.
+   */
   constructor(definition) {
     this["~orpc"] = definition;
   }
+  /**
+   * Creates a fresh builder with an empty definition.
+   * Prefer the exported `os` instance over calling this directly.
+   *
+   * @see {@link https://orpc.dev/docs/procedure | Procedure}
+   */
   static create() {
     return new Builder({
       errorMap: {},
@@ -96,15 +106,32 @@ class Builder {
       orderedMiddlewares: []
     });
   }
+  /**
+   * Declares the initial context type that must be provided when executing
+   * procedures built from this builder.
+   *
+   * @see {@link https://orpc.dev/docs/context#initial-context | Context - Initial Context}
+   */
   $context() {
     return this;
   }
+  /**
+   * Overrides the procedure configuration, such as disabling runtime
+   * input/output validation.
+   *
+   * @see {@link https://orpc.dev/docs/advanced/validation-customization | Validation Customization}
+   */
   $config(config) {
     return new Builder({
       ...this["~orpc"],
       ...config
     });
   }
+  /**
+   * Applies metadata plugins to procedures built from this builder.
+   *
+   * @see {@link https://orpc.dev/docs/metadata | Metadata}
+   */
   meta(...plugins) {
     const [meta, metaPlugins] = resolveMetaPlugins(
       this["~orpc"].meta,
@@ -117,6 +144,12 @@ class Builder {
       metaPlugins
     });
   }
+  /**
+   * Defines typesafe errors that procedures built from this builder can throw
+   * via the `errors` utility in handlers and middleware.
+   *
+   * @see {@link https://orpc.dev/docs/error-handling#typesafe-errors | Error Handling - Typesafe Errors}
+   */
   errors(errors) {
     let builder = new Builder({
       ...this["~orpc"],
@@ -128,6 +161,12 @@ class Builder {
     }
     return builder;
   }
+  /**
+   * Applies a middleware that runs before the handler of every procedure
+   * built from this builder.
+   *
+   * @see {@link https://orpc.dev/docs/middleware | Middleware}
+   */
   use(middleware) {
     let builder = new Builder({
       ...this["~orpc"],
@@ -143,6 +182,12 @@ class Builder {
     }
     return builder;
   }
+  /**
+   * Creates a standalone middleware that can be composed and applied to any
+   * compatible builder or procedure with `.use`.
+   *
+   * @see {@link https://orpc.dev/docs/middleware | Middleware}
+   */
   middleware(middleware) {
     const allMiddlewares = [
       ...this["~orpc"].orderedMiddlewares.map(({ middleware: middleware2 }) => middleware2),
@@ -162,6 +207,11 @@ class Builder {
     };
     return current;
   }
+  /**
+   * Defines the input schema used to validate and type the procedure input.
+   *
+   * @see {@link https://orpc.dev/docs/procedure#inputoutput-validation | Procedure - Input/Output Validation}
+   */
   input(schema) {
     let builder = new Builder({
       ...this["~orpc"],
@@ -173,6 +223,11 @@ class Builder {
     }
     return builder;
   }
+  /**
+   * Defines the output schema used to validate and type the procedure output.
+   *
+   * @see {@link https://orpc.dev/docs/procedure#inputoutput-validation | Procedure - Input/Output Validation}
+   */
   output(schema) {
     let builder = new Builder({
       ...this["~orpc"],
@@ -184,6 +239,12 @@ class Builder {
     }
     return builder;
   }
+  /**
+   * Defines the function that implements the procedure and completes the
+   * chain, returning a callable procedure.
+   *
+   * @see {@link https://orpc.dev/docs/procedure | Procedure}
+   */
   handler(handler) {
     let procedure = new DecoratedProcedure({
       ...this["~orpc"],
@@ -195,12 +256,24 @@ class Builder {
     }
     return procedure;
   }
+  /**
+   * Applies the builder's middleware, errors, and metadata to every procedure
+   * in the given router.
+   *
+   * @see {@link https://orpc.dev/docs/router#extending-router | Router - Extending Router}
+   */
   router(router) {
     return augmentRouter(router, {
       ...this["~orpc"],
       middlewares: this["~orpc"].orderedMiddlewares.map(({ middleware }) => middleware)
     });
   }
+  /**
+   * Like `.router`, but loads the router lazily on first access, which helps
+   * reduce startup time for large applications.
+   *
+   * @see {@link https://orpc.dev/docs/router#lazy-router | Router - Lazy Router}
+   */
   lazy(loader) {
     return new Lazy({
       loader: async () => {

package/dist/plugins/index.d.mts

@@ -1,5 +1,5 @@
 import { Value, Promisable, ThrowableError } from '@orpc/shared';
-import { StandardLazyRequest, StandardHeaders } from '@standardserver/core';
+import { StandardLazyRequest, StandardHeaders, StandardMethod } from '@standardserver/core';
 import { C as Context } from '../shared/server.CwrYlF72.mjs';
 import { S as StandardHandlerPlugin, f as StandardHandlerRoutingInterceptorOptions, a as StandardHandlerOptions, g as StandardHandlerInterceptorOptions } from '../shared/server.JbCIPL4P.mjs';
 export { R as RequestLimitHandlerPlugin, a as RequestLimitHandlerPluginOptions } from '../shared/server.D0Ipbmdv.mjs';
@@ -155,18 +155,39 @@ declare class CORSHandlerPlugin<T extends Context> implements StandardHandlerPlu
     init(options: StandardHandlerOptions<T>): StandardHandlerOptions<T>;
 }
 
+interface MethodOverrideHandlerPluginOptions {
+    /**
+     * The query parameter carrying the override method.
+     *
+     * @default 'method'
+     */
+    param?: string;
+    /**
+     * The methods a POST request may be overridden to.
+     *
+     * GET and HEAD are excluded by default because they switch input decoding
+     * from the request body to the query string and widen the CSRF surface.
+     *
+     * @default ['PUT', 'PATCH', 'DELETE']
+     */
+    methods?: readonly StandardMethod[];
+}
 /**
- * Adds basic Cross-Site Request Forgery (CSRF) protection to your oRPC application.
- * When a request includes cookies, it helps ensure the request originates from JavaScript
- * (for example, fetch/XHR) rather than from standard HTML forms or direct browser navigation.
+ * Overrides the HTTP method of a POST request based on a query parameter,
+ * so HTML forms (which only support GET and POST) can invoke procedures
+ * routed as PUT, PATCH, or DELETE.
  *
- * @remarks
- * **Note**: This plugin is enabled by default for `RPCHandler` over HTTP.
- *
- * @see {@link https://orpc.dev/docs/plugins/csrf-guard | CSRF Guard Plugin}
+ * @see {@link https://orpc.dev/docs/plugins/method-override | Method Override Plugin}
  */
-declare class CSRFGuardHandlerPlugin<T extends Context> implements StandardHandlerPlugin<T> {
+declare class MethodOverrideHandlerPlugin<T extends Context> implements StandardHandlerPlugin<T> {
     name: string;
+    /**
+     * Should override batch sub-request methods, not the original batch request.
+     */
+    before: string[];
+    private readonly param;
+    private readonly methods;
+    constructor(options?: MethodOverrideHandlerPluginOptions);
     init(options: StandardHandlerOptions<T>): StandardHandlerOptions<T>;
 }
 
@@ -302,5 +323,22 @@ declare class RethrowHandlerPlugin<T extends Context> implements StandardHandler
     init(options: StandardHandlerOptions<T>): StandardHandlerOptions<T>;
 }
 
-export { BATCH_CONTENT_TYPE, BatchHandlerPlugin, CORSHandlerPlugin, CORSHandlerPlugin as CORSPlugin, CSRFGuardHandlerPlugin, RequestCompressionHandlerPlugin, RequestHeadersHandlerPlugin, RequestHeadersHandlerPlugin as RequestHeadersPlugin, ResponseCompressionHandlerPlugin, ResponseHeadersHandlerPlugin, ResponseHeadersHandlerPlugin as ResponseHeadersPlugin, RethrowHandlerPlugin };
-export type { BatchHandlerPluginOptions, CORSHandlerPluginOptions, RequestHeadersHandlerPluginContext, RequestHeadersHandlerPluginContext as RequestHeadersPluginContext, ResponseCompressionHandlerPluginOptions, ResponseHeadersHandlerPluginContext, ResponseHeadersHandlerPluginContext as ResponseHeadersPluginContext, RethrowHandlerPluginOptions };
+/**
+ * Adds basic Cross-Site Request Forgery (CSRF) protection to your oRPC application.
+ * When a request includes cookies, it helps ensure the request originates from JavaScript
+ * (for example, fetch/XHR) rather than from standard HTML forms or direct browser navigation.
+ *
+ * @remarks
+ * Unlike `SameSite` cookies, this protection also covers cross-site requests that
+ * still carry cookies, so it is the recommended safeguard when you enable the `GET`
+ * method on RPC handlers or rely on cookie-based authentication.
+ *
+ * @see {@link https://orpc.dev/docs/plugins/simple-csrf-protection | Simple CSRF Protection Plugin}
+ */
+declare class SimpleCsrfProtectionHandlerPlugin<T extends Context> implements StandardHandlerPlugin<T> {
+    name: string;
+    init(options: StandardHandlerOptions<T>): StandardHandlerOptions<T>;
+}
+
+export { BATCH_CONTENT_TYPE, BatchHandlerPlugin, CORSHandlerPlugin, CORSHandlerPlugin as CORSPlugin, MethodOverrideHandlerPlugin, RequestCompressionHandlerPlugin, RequestHeadersHandlerPlugin, RequestHeadersHandlerPlugin as RequestHeadersPlugin, ResponseCompressionHandlerPlugin, ResponseHeadersHandlerPlugin, ResponseHeadersHandlerPlugin as ResponseHeadersPlugin, RethrowHandlerPlugin, SimpleCsrfProtectionHandlerPlugin };
+export type { BatchHandlerPluginOptions, CORSHandlerPluginOptions, MethodOverrideHandlerPluginOptions, RequestHeadersHandlerPluginContext, RequestHeadersHandlerPluginContext as RequestHeadersPluginContext, ResponseCompressionHandlerPluginOptions, ResponseHeadersHandlerPluginContext, ResponseHeadersHandlerPluginContext as ResponseHeadersPluginContext, RethrowHandlerPluginOptions };

package/dist/plugins/index.d.ts

@@ -1,5 +1,5 @@
 import { Value, Promisable, ThrowableError } from '@orpc/shared';
-import { StandardLazyRequest, StandardHeaders } from '@standardserver/core';
+import { StandardLazyRequest, StandardHeaders, StandardMethod } from '@standardserver/core';
 import { C as Context } from '../shared/server.CwrYlF72.js';
 import { S as StandardHandlerPlugin, f as StandardHandlerRoutingInterceptorOptions, a as StandardHandlerOptions, g as StandardHandlerInterceptorOptions } from '../shared/server.DrN1Pj1-.js';
 export { R as RequestLimitHandlerPlugin, a as RequestLimitHandlerPluginOptions } from '../shared/server.BhHrioCw.js';
@@ -155,18 +155,39 @@ declare class CORSHandlerPlugin<T extends Context> implements StandardHandlerPlu
     init(options: StandardHandlerOptions<T>): StandardHandlerOptions<T>;
 }
 
+interface MethodOverrideHandlerPluginOptions {
+    /**
+     * The query parameter carrying the override method.
+     *
+     * @default 'method'
+     */
+    param?: string;
+    /**
+     * The methods a POST request may be overridden to.
+     *
+     * GET and HEAD are excluded by default because they switch input decoding
+     * from the request body to the query string and widen the CSRF surface.
+     *
+     * @default ['PUT', 'PATCH', 'DELETE']
+     */
+    methods?: readonly StandardMethod[];
+}
 /**
- * Adds basic Cross-Site Request Forgery (CSRF) protection to your oRPC application.
- * When a request includes cookies, it helps ensure the request originates from JavaScript
- * (for example, fetch/XHR) rather than from standard HTML forms or direct browser navigation.
+ * Overrides the HTTP method of a POST request based on a query parameter,
+ * so HTML forms (which only support GET and POST) can invoke procedures
+ * routed as PUT, PATCH, or DELETE.
  *
- * @remarks
- * **Note**: This plugin is enabled by default for `RPCHandler` over HTTP.
- *
- * @see {@link https://orpc.dev/docs/plugins/csrf-guard | CSRF Guard Plugin}
+ * @see {@link https://orpc.dev/docs/plugins/method-override | Method Override Plugin}
  */
-declare class CSRFGuardHandlerPlugin<T extends Context> implements StandardHandlerPlugin<T> {
+declare class MethodOverrideHandlerPlugin<T extends Context> implements StandardHandlerPlugin<T> {
     name: string;
+    /**
+     * Should override batch sub-request methods, not the original batch request.
+     */
+    before: string[];
+    private readonly param;
+    private readonly methods;
+    constructor(options?: MethodOverrideHandlerPluginOptions);
     init(options: StandardHandlerOptions<T>): StandardHandlerOptions<T>;
 }
 
@@ -302,5 +323,22 @@ declare class RethrowHandlerPlugin<T extends Context> implements StandardHandler
     init(options: StandardHandlerOptions<T>): StandardHandlerOptions<T>;
 }
 
-export { BATCH_CONTENT_TYPE, BatchHandlerPlugin, CORSHandlerPlugin, CORSHandlerPlugin as CORSPlugin, CSRFGuardHandlerPlugin, RequestCompressionHandlerPlugin, RequestHeadersHandlerPlugin, RequestHeadersHandlerPlugin as RequestHeadersPlugin, ResponseCompressionHandlerPlugin, ResponseHeadersHandlerPlugin, ResponseHeadersHandlerPlugin as ResponseHeadersPlugin, RethrowHandlerPlugin };
-export type { BatchHandlerPluginOptions, CORSHandlerPluginOptions, RequestHeadersHandlerPluginContext, RequestHeadersHandlerPluginContext as RequestHeadersPluginContext, ResponseCompressionHandlerPluginOptions, ResponseHeadersHandlerPluginContext, ResponseHeadersHandlerPluginContext as ResponseHeadersPluginContext, RethrowHandlerPluginOptions };
+/**
+ * Adds basic Cross-Site Request Forgery (CSRF) protection to your oRPC application.
+ * When a request includes cookies, it helps ensure the request originates from JavaScript
+ * (for example, fetch/XHR) rather than from standard HTML forms or direct browser navigation.
+ *
+ * @remarks
+ * Unlike `SameSite` cookies, this protection also covers cross-site requests that
+ * still carry cookies, so it is the recommended safeguard when you enable the `GET`
+ * method on RPC handlers or rely on cookie-based authentication.
+ *
+ * @see {@link https://orpc.dev/docs/plugins/simple-csrf-protection | Simple CSRF Protection Plugin}
+ */
+declare class SimpleCsrfProtectionHandlerPlugin<T extends Context> implements StandardHandlerPlugin<T> {
+    name: string;
+    init(options: StandardHandlerOptions<T>): StandardHandlerOptions<T>;
+}
+
+export { BATCH_CONTENT_TYPE, BatchHandlerPlugin, CORSHandlerPlugin, CORSHandlerPlugin as CORSPlugin, MethodOverrideHandlerPlugin, RequestCompressionHandlerPlugin, RequestHeadersHandlerPlugin, RequestHeadersHandlerPlugin as RequestHeadersPlugin, ResponseCompressionHandlerPlugin, ResponseHeadersHandlerPlugin, ResponseHeadersHandlerPlugin as ResponseHeadersPlugin, RethrowHandlerPlugin, SimpleCsrfProtectionHandlerPlugin };
+export type { BatchHandlerPluginOptions, CORSHandlerPluginOptions, MethodOverrideHandlerPluginOptions, RequestHeadersHandlerPluginContext, RequestHeadersHandlerPluginContext as RequestHeadersPluginContext, ResponseCompressionHandlerPluginOptions, ResponseHeadersHandlerPluginContext, ResponseHeadersHandlerPluginContext as ResponseHeadersPluginContext, RethrowHandlerPluginOptions };