@owlmeans/server-context 0.1.18-rc.8 → 0.1.18

package/README.md

@@ -12,7 +12,7 @@ Server-side context factory with file-based config, trusted keys, and Ed25519 gu
 ## Installation
 
 ```bash
-bun add @owlmeans/server-context
+bun add @owlmeans/server-context@^0.1.18
 ```
 
 ## Usage
@@ -70,7 +70,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills
+npx @owlmeans/agent-skills@^0.1.18
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
-  "schemaVersion": 2,
+  "schemaVersion": 3,
   "package": "@owlmeans/server-context",
-  "version": "0.1.18-rc.7",
-  "generatedAt": "2026-08-24T21:14:00.122Z",
+  "version": "0.1.18",
+  "generatedAt": "2026-10-28T00:31:34.732Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-context/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: server-context
-description: How to use @owlmeans/server-context — server-side context factory (makeServerContext / makeBackendContext) used as the base in your server makeContext(). Auto-invoked when building a server context.
+description: How to use @owlmeans/server-context — makeServerContext() as the base of a server makeContext(), the ServerConfig shape, config() to build one, and the fileConfigReader middleware. Auto-invoked when building a server context or asking what a bare server context already carries.
 user-invocable: false
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
@@ -8,35 +8,78 @@ user-invocable: false
 # @owlmeans/server-context
 
 **Layer:** Server
-**Install:** `"@owlmeans/server-context": "^0.1.18-rc.7"` in `dependencies`
+**Install:** `"@owlmeans/server-context": "^0.1.18"` in `dependencies`
 
 ## Key Exports
 
 | Export | Description |
 |--------|-------------|
-| `makeServerContext` / `makeBackendContext` | Server context factory — base for your `makeContext` |
-| `Context` (server) types | Server-side Context interface |
-| Server config types | Server-specific config shape |
+| `makeServerContext(cfg)` | Server context factory — the base your `makeContext` builds on |
+| `config(service, cfg?)` | Build a `ServerConfig` for `service` — app type `Backend`, `trusted` defaulted to an empty list |
+| `ServerContext<C>` | Server-side context interface — a basic context plus the config-resource accessors |
+| `ServerConfig` | Server config shape — the server and client config bases plus `services: Record<string, ServiceRoute>` |
 
 ## Subpath Exports
 
-- `./utils` — server context utilities
+- `./utils` — `fileConfigReader`, the config-reading middleware
+
+## What a bare server context already carries
+
+`makeServerContext` is not an empty container. Before it returns it registers:
+
+- `fileConfigReader` — a `Config`/`Configuration`-stage middleware that walks the whole config tree
+  and replaces every writable string starting with `/` by that file's trimmed contents (through
+  `readConfigValue` from `@owlmeans/server-config`, so mount secrets at absolute paths). This is how
+  a mounted secret becomes a plain config value.
+
+  **Read converted values after `init()`, never straight after `configure()`.** `configure()` is not
+  an async function: it starts the `Config`/`Configuration` middlewares in a detached promise and
+  returns the context immediately, so nothing in the tree is converted yet when it returns. The
+  ordering guarantee comes from `waitForConfigured()`, and from `init()`, which awaits it first.
+
+  That detachment also decides how a bad path fails. `readConfigValue` is synchronous and unguarded,
+  and the middleware runner is a bare `Promise.all` with no catch, so a config string that looks
+  like a path but names no file does **not** throw out of `configure()` — the `ENOENT` escapes as an
+  unhandled rejection. The stage is never advanced past `Configuration` either, so the promise
+  `init()` awaits never resolves and the boot hangs instead of failing. Read an unhandled `ENOENT`
+  at boot as a missing mount, and install an `unhandledRejection` handler that exits non-zero if the
+  boot has to be loud.
+- Three config resources — the default record store, one keyed on `trusted`, and one keyed on
+  `plugins` — reachable through `getConfigResource(alias?)`.
+- The basic Ed25519 guard over the `trusted` list, which is what authenticates service-to-service
+  calls.
+- `authMiddleware`, which wraps the `invoke` of every guarded backend entrypoint so outbound calls
+  carry an authentication header.
+
+So a downstream factory adds its own services on top rather than assembling these again.
 
 ## Usage
 
-A downstream `backend` package typically wraps `makeBackendContext` and re-exports its own `makeContext`:
+A downstream `backend` package wraps `makeServerContext` and exports its own `makeContext`. It calls
+the factory below it, applies its own idempotent `append*(context)` mixins and service
+registrations, and returns that same context — the process gets one context, built once:
 
 ```typescript
-// viable-backend/src/context.ts
-import { makeBackendContext as makeBaseBackendContext } from '@owlmeans/server-context'
+// src/context.ts
+import { makeServerContext } from '@owlmeans/server-context'
+import type { ServerConfig, ServerContext } from '@owlmeans/server-context'
 
-export const makeBackendContext = <C extends Config, T extends Context<C>>(cfg: C): T => {
-  const context = makeBaseBackendContext<C, T>(cfg)
+export const makeBackendContext = <C extends ServerConfig, T extends ServerContext<C>>(cfg: C): T => {
+  const context = makeServerContext<C, T>(cfg)
   // ... register shared services
   return context
 }
 ```
 
+An application server usually starts from `@owlmeans/server-app#makeContext` instead, which builds on
+this and adds the API server, API client, sockets, the static resource and auth.
+
 ## Depends On
 
-- `@owlmeans/context`, `@owlmeans/server-config`, `@owlmeans/server-entrypoint`, `@owlmeans/server-route`
+Declared: `@owlmeans/context`, `@owlmeans/config`, `@owlmeans/client-config`,
+`@owlmeans/server-config`, `@owlmeans/route`.
+
+Imported but **not** declared in this package's manifest: `@owlmeans/auth-common` (the Ed25519
+guard and the outbound-auth middleware registered above) and `@owlmeans/server-route` (the
+`ServiceRoute` type `ServerConfig` is built from). A workspace resolves them anyway; a standalone
+install has to name them in its own dependencies.

package/build/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAMxD,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAG,CAc9F,CAAA"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAOxD,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAG,CAc9F,CAAA"}

package/build/context.js

@@ -3,10 +3,12 @@ import { fileConfigReader } from './utils/context.js';
 import { makeBasicContext } from '@owlmeans/context';
 import { PLUGINS, TRUSTED } from '@owlmeans/config';
 import { authMiddleware, makeBasicEd25519Guard } from '@owlmeans/auth-common';
+import { appendLog } from '@owlmeans/log';
 export const makeServerContext = (cfg) => {
     const context = makeBasicContext(cfg);
     context.registerMiddleware(fileConfigReader);
-    context.makeContext = makeServerContext;
+    // After the file reader, so a level given as `/etc/app-config/log-level` is applied resolved.
+    appendLog(context);
     appendConfigResource(context);
     appendConfigResource(context, TRUSTED, TRUSTED);
     appendConfigResource(context, PLUGINS, PLUGIN_RECORD);

package/build/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAE7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAqD,GAAM,EAAK,EAAE;IACjG,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAM,CAAA;IAE1C,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAE5C,OAAO,CAAC,WAAW,GAAG,iBAA+C,CAAA;IAErE,oBAAoB,CAAO,OAAO,CAAC,CAAA;IACnC,oBAAoB,CAAO,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACrD,oBAAoB,CAAO,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IAC3D,OAAO,CAAC,eAAe,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;IACvD,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAE1C,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAqD,GAAM,EAAK,EAAE;IACjG,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAM,CAAA;IAE1C,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC5C,8FAA8F;IAC9F,SAAS,CAAC,OAAO,CAAC,CAAA;IAElB,oBAAoB,CAAO,OAAO,CAAC,CAAA;IACnC,oBAAoB,CAAO,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACrD,oBAAoB,CAAO,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IAC3D,OAAO,CAAC,eAAe,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;IACvD,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAE1C,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/utils/context.d.ts

@@ -1,3 +1,3 @@
-import type { Middleware } from '@owlmeans/context';
+import { type Middleware } from '@owlmeans/context';
 export declare const fileConfigReader: Middleware;
 //# sourceMappingURL=context.d.ts.map

package/build/utils/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAGnD,eAAO,MAAM,gBAAgB,EAAE,UAO9B,CAAA"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAmC,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAIpF,eAAO,MAAM,gBAAgB,EAAE,UAO9B,CAAA"}

package/build/utils/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEnE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAEzD,MAAM,CAAC,MAAM,gBAAgB,GAAe;IAC1C,IAAI,EAAE,cAAc,CAAC,MAAM;IAC3B,KAAK,EAAE,eAAe,CAAC,aAAa;IACpC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,IAAI,GAAS,OAAO,CAAC,GAAsB,CAAA;QACjD,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;CACF,CAAA;AAED,8BAA8B;AAC9B,MAAM,gBAAgB,GAAG,CAAC,IAAU,EAAE,EAAE,CACtC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC7D,IAAI,UAAU,EAAE,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC,IAAY,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IAC3D,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,gBAAgB,CAAC,KAAa,CAAC,CAAA;IACjC,CAAC;AACH,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/utils/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAmB,MAAM,mBAAmB,CAAA;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAGzD,MAAM,CAAC,MAAM,gBAAgB,GAAe;IAC1C,IAAI,EAAE,cAAc,CAAC,MAAM;IAC3B,KAAK,EAAE,eAAe,CAAC,aAAa;IACpC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,IAAI,GAAS,OAAO,CAAC,GAAsB,CAAA;QACjD,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;CACF,CAAA;AAED,8BAA8B;AAC9B,MAAM,gBAAgB,GAAG,CAAC,IAAU,EAAE,EAAE,CACtC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC7D,IAAI,UAAU,EAAE,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC,IAAY,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IAC3D,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,gBAAgB,CAAC,KAAa,CAAC,CAAA;IACjC,CAAC;AACH,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA"}

package/build/utils/types.local.d.ts

@@ -0,0 +1,5 @@
+export type TreeKey = string | number | symbol;
+export type TreeValue = unknown | Array<unknown> | string;
+export interface Tree extends Record<TreeKey, TreeValue | Tree> {
+}
+//# sourceMappingURL=types.local.d.ts.map

package/build/utils/types.local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.local.d.ts","sourceRoot":"","sources":["../../src/utils/types.local.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;AAE9C,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM,CAAA;AAEzD,MAAM,WAAW,IAAK,SAAQ,MAAM,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC;CAAI"}

package/build/utils/types.local.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.local.js.map

package/build/utils/types.local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.local.js","sourceRoot":"","sources":["../../src/utils/types.local.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/server-context",
-  "version": "0.1.18-rc.8",
+  "version": "0.1.18",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -28,15 +28,16 @@
     }
   },
   "dependencies": {
-    "@owlmeans/client-config": "^0.1.18-rc.8",
-    "@owlmeans/config": "^0.1.18-rc.8",
-    "@owlmeans/context": "^0.1.18-rc.6",
-    "@owlmeans/route": "^0.1.18-rc.6",
-    "@owlmeans/server-config": "^0.1.18-rc.8"
+    "@owlmeans/client-config": "^0.1.18",
+    "@owlmeans/config": "^0.1.18",
+    "@owlmeans/context": "^0.1.18",
+    "@owlmeans/log": "^0.1.18",
+    "@owlmeans/route": "^0.1.18",
+    "@owlmeans/server-config": "^0.1.18"
   },
   "devDependencies": {
-    "@owlmeans/dep-config": "workspace:*",
-    "@types/node": "^26.1.0",
+    "@owlmeans/dep-config": "^0.1.18",
+    "@types/node": "^26.6.4",
     "nodemon": "^3.1.14",
     "typescript": "^7.0.2"
   },

package/src/context.ts

@@ -4,13 +4,14 @@ import { fileConfigReader } from './utils/context.js'
 import { makeBasicContext } from '@owlmeans/context'
 import { PLUGINS, TRUSTED } from '@owlmeans/config'
 import { authMiddleware, makeBasicEd25519Guard } from '@owlmeans/auth-common'
+import { appendLog } from '@owlmeans/log'
 
 export const makeServerContext = <C extends ServerConfig, T extends ServerContext<C>>(cfg: C): T => {
   const context = makeBasicContext(cfg) as T
 
   context.registerMiddleware(fileConfigReader)
-
-  context.makeContext = makeServerContext as typeof context.makeContext
+  // After the file reader, so a level given as `/etc/app-config/log-level` is applied resolved.
+  appendLog(context)
 
   appendConfigResource<C, T>(context)
   appendConfigResource<C, T>(context, TRUSTED, TRUSTED)

package/src/utils/context.ts

@@ -1,7 +1,7 @@
 
-import { MiddlewareStage, MiddlewareType } from '@owlmeans/context'
-import type { Middleware } from '@owlmeans/context'
+import { MiddlewareStage, MiddlewareType, type Middleware } from '@owlmeans/context'
 import { readConfigValue } from '@owlmeans/server-config'
+import type { Tree } from './types.local.js'
 
 export const fileConfigReader: Middleware = {
   type: MiddlewareType.Config,
@@ -27,6 +27,3 @@ const visitConfigLeafs = (tree: Tree) =>
     }
   }) : tree
 
-type TreeKey = string | number | symbol
-type TreeValue = unknown | Array<unknown> | string
-interface Tree extends Record<TreeKey, TreeValue | Tree> { }

package/src/utils/types.local.ts

@@ -0,0 +1,5 @@
+export type TreeKey = string | number | symbol
+
+export type TreeValue = unknown | Array<unknown> | string
+
+export interface Tree extends Record<TreeKey, TreeValue | Tree> { }