@owlmeans/server-context 0.1.18-rc.11 → 0.1.18-rc.13

package/README.md

@@ -12,7 +12,7 @@ Server-side context factory with file-based config, trusted keys, and Ed25519 gu
 ## Installation
 
 ```bash
-bun add @owlmeans/server-context
+bun add @owlmeans/server-context@^0.1.18-rc.11
 ```
 
 ## Usage
@@ -70,7 +70,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills
+npx @owlmeans/agent-skills@^0.1.18-rc.13
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/server-context",
-  "version": "0.1.18-rc.11",
-  "generatedAt": "2026-09-01T17:39:40.762Z",
+  "version": "0.1.18-rc.13",
+  "generatedAt": "2026-09-10T18:54:42.496Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-context/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: server-context
-description: How to use @owlmeans/server-context — server-side context factory (makeServerContext) used as the base in your server makeContext(). Auto-invoked when building a server context.
+description: How to use @owlmeans/server-context — makeServerContext() as the base of a server makeContext(), the ServerConfig shape, config() to build one, and the fileConfigReader middleware. Auto-invoked when building a server context or asking what a bare server context already carries.
 user-invocable: false
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
@@ -8,19 +8,50 @@ user-invocable: false
 # @owlmeans/server-context
 
 **Layer:** Server
-**Install:** `"@owlmeans/server-context": "^0.1.18-rc.11"` in `dependencies`
+**Install:** `"@owlmeans/server-context": "^0.1.18-rc.13"` in `dependencies`
 
 ## Key Exports
 
 | Export | Description |
 |--------|-------------|
-| `makeServerContext` | Server context factory — the base your `makeContext` builds on |
-| `ServerContext<C>` | Server-side Context interface |
-| `ServerConfig`, `config()` | Server-specific config shape and its factory |
+| `makeServerContext(cfg)` | Server context factory — the base your `makeContext` builds on |
+| `config(service, cfg?)` | Build a `ServerConfig` for `service` — app type `Backend`, `trusted` defaulted to an empty list |
+| `ServerContext<C>` | Server-side context interface — a basic context plus the config-resource accessors |
+| `ServerConfig` | Server config shape — the server and client config bases plus `services: Record<string, ServiceRoute>` |
 
 ## Subpath Exports
 
-- `./utils` — server context utilities (`fileConfigReader`, the config-reading middleware)
+- `./utils` — `fileConfigReader`, the config-reading middleware
+
+## What a bare server context already carries
+
+`makeServerContext` is not an empty container. Before it returns it registers:
+
+- `fileConfigReader` — a `Config`/`Configuration`-stage middleware that walks the whole config tree
+  and replaces every writable string starting with `/` by that file's trimmed contents (through
+  `readConfigValue` from `@owlmeans/server-config`, so mount secrets at absolute paths). This is how
+  a mounted secret becomes a plain config value.
+
+  **Read converted values after `init()`, never straight after `configure()`.** `configure()` is not
+  an async function: it starts the `Config`/`Configuration` middlewares in a detached promise and
+  returns the context immediately, so nothing in the tree is converted yet when it returns. The
+  ordering guarantee comes from `waitForConfigured()`, and from `init()`, which awaits it first.
+
+  That detachment also decides how a bad path fails. `readConfigValue` is synchronous and unguarded,
+  and the middleware runner is a bare `Promise.all` with no catch, so a config string that looks
+  like a path but names no file does **not** throw out of `configure()` — the `ENOENT` escapes as an
+  unhandled rejection. The stage is never advanced past `Configuration` either, so the promise
+  `init()` awaits never resolves and the boot hangs instead of failing. Read an unhandled `ENOENT`
+  at boot as a missing mount, and install an `unhandledRejection` handler that exits non-zero if the
+  boot has to be loud.
+- Three config resources — the default record store, one keyed on `trusted`, and one keyed on
+  `plugins` — reachable through `getConfigResource(alias?)`.
+- The basic Ed25519 guard over the `trusted` list, which is what authenticates service-to-service
+  calls.
+- `authMiddleware`, which wraps the `invoke` of every guarded backend entrypoint so outbound calls
+  carry an authentication header.
+
+So a downstream factory adds its own services on top rather than assembling these again.
 
 ## Usage
 
@@ -29,7 +60,7 @@ the factory below it, applies its own idempotent `append*(context)` mixins and s
 registrations, and returns that same context — the process gets one context, built once:
 
 ```typescript
-// viable-backend/src/context.ts
+// src/context.ts
 import { makeServerContext } from '@owlmeans/server-context'
 import type { ServerConfig, ServerContext } from '@owlmeans/server-context'
 
@@ -40,6 +71,15 @@ export const makeBackendContext = <C extends ServerConfig, T extends ServerConte
 }
 ```
 
+An application server usually starts from `@owlmeans/server-app#makeContext` instead, which builds on
+this and adds the API server, API client, sockets, the static resource and auth.
+
 ## Depends On
 
-- `@owlmeans/context`, `@owlmeans/server-config`, `@owlmeans/server-entrypoint`, `@owlmeans/server-route`
+Declared: `@owlmeans/context`, `@owlmeans/config`, `@owlmeans/client-config`,
+`@owlmeans/server-config`, `@owlmeans/route`.
+
+Imported but **not** declared in this package's manifest: `@owlmeans/auth-common` (the Ed25519
+guard and the outbound-auth middleware registered above) and `@owlmeans/server-route` (the
+`ServiceRoute` type `ServerConfig` is built from). A workspace resolves them anyway; a standalone
+install has to name them in its own dependencies.

package/build/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,eAAO,MAAM,MAAM,GAAI,CAAC,SAAS,YAAY,EAAE,SAAS,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,CAKlF,CAAA"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,eAAO,MAAM,MAAM,GAAI,CAAC,SAAS,YAAY,WAAW,MAAM,QAAQ,OAAO,CAAC,CAAC,CAAC,KAAG,CAKlF,CAAA"}

package/build/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAMxD,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAG,CAY9F,CAAA"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAMxD,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAG,CAY9F,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/server-context",
-  "version": "0.1.18-rc.11",
+  "version": "0.1.18-rc.13",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -28,11 +28,11 @@
     }
   },
   "dependencies": {
-    "@owlmeans/client-config": "^0.1.18-rc.11",
-    "@owlmeans/config": "^0.1.18-rc.11",
-    "@owlmeans/context": "^0.1.18-rc.7",
-    "@owlmeans/route": "^0.1.18-rc.8",
-    "@owlmeans/server-config": "^0.1.18-rc.11"
+    "@owlmeans/client-config": "^0.1.18-rc.13",
+    "@owlmeans/config": "^0.1.18-rc.13",
+    "@owlmeans/context": "^0.1.18-rc.9",
+    "@owlmeans/route": "^0.1.18-rc.10",
+    "@owlmeans/server-config": "^0.1.18-rc.13"
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",