@selvajs/server 0.2.1 → 1.0.0-beta.1

package/README.md

@@ -1,9 +1,13 @@
 # @selvajs/server
 
-Transport-agnostic compute/solve/definitions server building blocks for apps built on the
-Selva engine: limits, rate limiting, SSRF guard, input transform, solve pipeline, definition
-service, render loader, and structured logging. Consumed by `@selvajs/selva`; not tied to
-SvelteKit or any specific HTTP framework.
+Transport-agnostic server building blocks for apps built on the Selva engine: limits, rate
+limiting, SSRF guard, definition service, render loader, and structured logging. Consumed by
+`@selvajs/selva`; not tied to SvelteKit or any specific HTTP framework.
+
+**The solve core lives in [`@selvajs/solve/server`](../solve/README.md)** — pipeline, L2 result
+cache, single-flight, client and definition-byte caches. This package does not re-export it and does
+not depend on it. What stays here is HTTP _request policy_, which is a different job from running a
+solve.
 
 Logging follows the same rule as the rest of the package: nothing here logs unless you wire
 it. Modules that emit diagnostics take an optional `logger?: ILogger` and default to
@@ -20,18 +24,21 @@ pnpm add @selvajs/server
 
 ## Subpath exports
 
-| Export                        | Contents                                                |
-| ----------------------------- | ------------------------------------------------------- |
-| `@selvajs/server`             | Root — package entry point                              |
-| `@selvajs/server/compute`     | Solve pipeline, SSRF guard, Rhino.Compute client wiring |
-| `@selvajs/server/definitions` | Definition service + render loader                      |
-| `@selvajs/server/providers`   | Provider composition helpers                            |
-| `@selvajs/server/tokens`      | API token (PAT) codec                                   |
-| `@selvajs/server/errors`      | Shared error types                                      |
-| `@selvajs/server/logging`     | pino-backed `ILogger` + request-id correlation          |
-| `@selvajs/server/http`        | Rate limiting, security headers, request limits         |
-| `@selvajs/server/access`      | Access/permission checks                                |
-| `@selvajs/server/ops`         | Operational utilities                                   |
+**There is no root export.** Import from a subpath — `import … from '@selvajs/server'` fails to
+resolve, on purpose. A root barrel re-exporting all nine subpaths put 41 symbols in one namespace and
+hid which slice a consumer actually depended on; nothing in this repo used it.
+
+| Export                        | Contents                                                           |
+| ----------------------------- | ------------------------------------------------------------------ |
+| `@selvajs/server/compute`     | Compute limits, rate limiting, SSRF guard, remote-definition fetch |
+| `@selvajs/server/definitions` | Definition service + render loader                                 |
+| `@selvajs/server/providers`   | Provider composition helpers                                       |
+| `@selvajs/server/tokens`      | API token (PAT) codec                                              |
+| `@selvajs/server/errors`      | Shared error types                                                 |
+| `@selvajs/server/logging`     | pino-backed `ILogger` + request-id correlation                     |
+| `@selvajs/server/http`        | Security headers, request limits, route classification             |
+| `@selvajs/server/access`      | Access/permission checks                                           |
+| `@selvajs/server/ops`         | Operational utilities                                              |
 
 Requires a `@selvajs/platform` provider (e.g. `@selvajs/local-provider` or
 `@selvajs/supabase-provider`) for data/storage/auth.

package/dist/compute/index.d.ts

@@ -1,13 +1,5 @@
 export { resolveComputeLimits, readPositiveInt, readNonNegativeInt, readBool, type ComputeLimits, type EnvRecord } from './limits.js';
-export { createDefinitionByteCache, type DefinitionByteCache, type ByteCacheRef, type ByteCacheStats } from './definition-byte-cache.js';
-export { createMemorySolveResultCache, type MemorySolveResultCache, type SolveCacheStats } from './memory-solve-cache.js';
-export { deriveSolveCacheInputKey, type SolveCacheConfigSubset, type SolveCacheInputKey } from './solve-cache-key.js';
-export { encodeSolveCacheEntry, decodeSolveCacheEntry, gunzipEntryBody, type EnvelopeHeader, type DecodedSolveCacheEntry } from './solve-cache-envelope.js';
-export { createSolveCacheSingleFlight, type SolveCacheSingleFlight } from './solve-cache-single-flight.js';
 export { createComputeRateLimiter, DEFAULT_MAX_KEYS, type ComputeRateLimiter, type ComputeRateLimiterConfig, type RateLimitResult } from './rate-limit.js';
 export { isSafeRemoteDefinitionUrl, assertSafeRemoteDefinitionUrl } from './safe-url.js';
-export { transformInputParameter } from './transform-input.js';
-export { createClientCache, serverIdentity, type ClientCache, type ClientCacheConfig, type CachedClient, type ResolvedServer, type ServerIdentity } from './client-cache.js';
 export { createRemoteDefinitionFetcher, readBodyWithCap, type RemoteDefinitionFetcher, type RemoteDefinitionConfig } from './remote-definition.js';
-export { runSolvePipeline, adaptEnvelopeToEncoding, COMPUTE_CONTRACT_VERSION, COMPUTE_VERSION_HEADER, type SolvePipelineArgs, type SolvePipelineCacheHook, type SolveOutcome, type SolveEnvelope, type SolvePhaseMetrics, type PipelineInput } from './solve-pipeline.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/compute/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/compute/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACN,4BAA4B,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACN,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACN,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACN,4BAA4B,EAC5B,KAAK,sBAAsB,EAC3B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACN,wBAAwB,EACxB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,eAAe,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACN,6BAA6B,EAC7B,eAAe,EACf,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACN,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/compute/index.ts"],"names":[],"mappings":"AAaA,OAAO,EACN,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,wBAAwB,EACxB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,eAAe,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAEzF,OAAO,EACN,6BAA6B,EAC7B,eAAe,EACf,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,MAAM,wBAAwB,CAAC"}

package/dist/compute/index.js

@@ -1,14 +1,17 @@
-// Compute/solve server building blocks — transport-agnostic, env-injected.
+// HTTP request policy for the compute path — transport-agnostic, env-injected.
+//
+// Admission control (rate limiting), an SSRF guard on operator-supplied URLs, env-derived limits,
+// and the remote-definition fetcher. This is the policy *around* a solve, which is a different job
+// from running one.
+//
+// **The solve core is not here.** Pipeline, L2 result cache, single-flight, and the client /
+// definition-byte caches live in `@selvajs/solve/server`, which owns the solve flow on both sides of
+// the wire. This sub-path deliberately does NOT re-export them: a compat shim was built during the
+// extraction and removed before release, because it left this barrel at 24 exports of which 14 were
+// borrowed — a surface that no longer described what the package does. `@selvajs/server` does not
+// depend on `@selvajs/solve`.
 export { resolveComputeLimits, readPositiveInt, readNonNegativeInt, readBool } from './limits.js';
-export { createDefinitionByteCache } from './definition-byte-cache.js';
-export { createMemorySolveResultCache } from './memory-solve-cache.js';
-export { deriveSolveCacheInputKey } from './solve-cache-key.js';
-export { encodeSolveCacheEntry, decodeSolveCacheEntry, gunzipEntryBody } from './solve-cache-envelope.js';
-export { createSolveCacheSingleFlight } from './solve-cache-single-flight.js';
 export { createComputeRateLimiter, DEFAULT_MAX_KEYS } from './rate-limit.js';
 export { isSafeRemoteDefinitionUrl, assertSafeRemoteDefinitionUrl } from './safe-url.js';
-export { transformInputParameter } from './transform-input.js';
-export { createClientCache, serverIdentity } from './client-cache.js';
 export { createRemoteDefinitionFetcher, readBodyWithCap } from './remote-definition.js';
-export { runSolvePipeline, adaptEnvelopeToEncoding, COMPUTE_CONTRACT_VERSION, COMPUTE_VERSION_HEADER } from './solve-pipeline.js';
 //# sourceMappingURL=index.js.map

package/dist/compute/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/compute/index.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EACN,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EAGR,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,yBAAyB,EAIzB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACN,4BAA4B,EAG5B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACN,wBAAwB,EAGxB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACN,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EAGf,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACN,4BAA4B,EAE5B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACN,wBAAwB,EACxB,gBAAgB,EAIhB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,EACN,iBAAiB,EACjB,cAAc,EAMd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACN,6BAA6B,EAC7B,eAAe,EAGf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACN,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EAOtB,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/compute/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,kGAAkG;AAClG,mGAAmG;AACnG,oBAAoB;AACpB,EAAE;AACF,6FAA6F;AAC7F,qGAAqG;AACrG,mGAAmG;AACnG,oGAAoG;AACpG,kGAAkG;AAClG,8BAA8B;AAE9B,OAAO,EACN,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EAGR,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,wBAAwB,EACxB,gBAAgB,EAIhB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAEzF,OAAO,EACN,6BAA6B,EAC7B,eAAe,EAGf,MAAM,wBAAwB,CAAC"}

package/dist/compute/limits.d.ts

@@ -49,7 +49,7 @@ export interface ComputeLimits {
      * serverless platform cap may shoot the request sooner; bumping past those
      * caps produces 502s, not longer solves.
      */
-    maxSolveDurationMs: number;
+    solveDeadlineMs: number;
     /** Fixed-window cap on /api/compute: window length + max requests per window. */
     rateLimitWindowMs: number;
     rateLimitMaxRequests: number;
@@ -86,8 +86,15 @@ export interface ComputeLimits {
     remoteDefinitionMaxBytes: number;
     /** Deadline on fetching a remote definition (slow-loris protection). */
     remoteDefinitionFetchTimeoutMs: number;
-    /** In-process cache TTL for remote-fetched .gh bytes. */
-    definitionCacheTtlMs: number;
+    /**
+     * TTL for the in-process cache of .gh bytes fetched from a REMOTE URL.
+     *
+     * Only the remote path is TTL'd, and the name says so deliberately: the other
+     * definition cache is keyed on an immutable version id, where expiry would be a
+     * bug (it can only ever throw away valid work). A URL's owner can swap the file
+     * underneath us, so that one needs a freshness bound and this is it.
+     */
+    remoteDefinitionCacheTtlMs: number;
     /**
      * Reuse the server's cached definition via a pointer instead of re-uploading
      * the binary each solve. SAFE only on a compute server that signals a
@@ -109,72 +116,49 @@ export interface ComputeLimits {
      * honoring the flag. Conservative default off.
      */
     computeCacheErroredSolves: boolean;
-    /**
-     * Max in-flight solves this app instance sends to ONE compute server
-     * (forwarded as the SolveScheduler's `maxConcurrent`; excess solves FIFO-queue).
-     * Size it to the server's `compute.geometry` child count — Rhino.Compute
-     * spawns N children per VM precisely to run N solves concurrently, and a
-     * lower value idles that capacity while users queue (audit B6: the scheduler's
-     * queue-mode default is 1, which serialized ALL solves per server). Multiple
-     * app instances each apply their own cap.
-     */
-    computeMaxConcurrentSolves: number;
     /**
      * Backpressure — max solves allowed to WAIT in the per-server FIFO queue (i.e.
-     * excluding the `computeMaxConcurrentSolves` already in flight). A solve that
-     * arrives to a full queue is shed immediately (scheduler `QUEUE_FULL`, mapped
-     * to HTTP 503 + `Retry-After`) instead of piling up unbounded. `0` = unbounded
-     * (the pre-shedding default): the queue grows without limit, matching prior
-     * behavior. Size it to roughly 2–3× `computeMaxConcurrentSolves` once the
-     * Rhino pool's real capacity is known — shedding fast beats a hung request.
+     * excluding the in-flight solves, capped at the scheduler's `maxConcurrent`,
+     * itself auto-detected from the compute server's active child count). A solve
+     * that arrives to a full queue is rejected immediately (scheduler `QUEUE_FULL`,
+     * mapped to HTTP 503 + `Retry-After`) instead of piling up unbounded. `0` =
+     * unbounded (the pre-backpressure default): the queue grows without limit,
+     * matching prior behavior. Size it to roughly 2–3× the compute server's
+     * child count once the Rhino pool's real capacity is known — rejecting fast
+     * beats a hung request.
      */
     computeMaxQueueDepth: number;
     /**
      * Backpressure — longest (ms) a solve may sit QUEUED before it starts
-     * executing; still-waiting past this it's shed (scheduler `QUEUE_TIMEOUT` →
+     * executing; still-waiting past this it's rejected (scheduler `QUEUE_TIMEOUT` →
      * HTTP 503 + `Retry-After`) rather than burning compute on a stale request.
      * Bounds tail latency: the scheduler's `timeoutMs` clock starts at execution,
      * so without this a solve's total wait is unbounded and invisible. `0` = no
-     * queue deadline (the default). A sensible tuned value is ≈ `maxSolveDurationMs`.
+     * queue deadline (the default). A sensible tuned value is ≈ `solveDeadlineMs`.
      */
     computeQueueWaitMs: number;
     /**
-     * Total-byte budget (bytes) for the in-process definition-byte cache keyed on
-     * immutable version id. A warm entry lets a solve skip `storage.get` entirely,
-     * and a pointer-known solve never loads bytes at all. `0` disables the cache
-     * (every solve re-reads storage). Sized as a total-byte LRU because definitions
-     * span KB→hundreds of MB; env value is MB, converted here.
+     * **Definition cache** — total-byte budget (bytes) for the in-process cache of
+     * .gh bytes keyed on immutable version id. A warm entry lets a solve skip
+     * `storage.get` entirely, and a pointer-known solve never loads bytes at all.
+     * `0` disables it (every solve re-reads storage). A total-byte LRU rather than
+     * an entry count because definitions span KB→hundreds of MB. Env value is MB.
      */
-    computeDefinitionByteCacheBytes: number;
+    computeDefinitionCacheBytes: number;
     /**
-     * Total-byte budget (bytes) for EACH warm client's in-process solve-response
-     * cache (the scheduler L1 — the `fromCache` layer in front of Rhino.Compute).
-     * Responses range KB→100s of MB (`computeResponseMaxBytes` allows 300 MB), so
-     * the L1's entry-count cap alone can't bound heap; this adds a byte LRU on
-     * top. Applies PER warm client — worst-case heap is this × the number of
-     * distinct compute servers kept warm (`maxCachedClients`, default 16), though
-     * real deployments run 1–2 servers. `0` disables the L1 response cache
-     * entirely (every solve goes to compute or the L2). Env value is MB.
-     */
-    computeResponseCacheBytes: number;
-    /**
-     * Default per-definition entry quota for the durable L2 solve cache (H1), used
-     * when a definition's `solveCacheLimit` is absent (inherit). A definition may
-     * override this; `0` on the definition turns caching off for it. This global
-     * default `0` means the L2 is effectively off until an operator sets a quota —
-     * safe because the memory backend also ships only under
-     * `SOLVE_CACHE_PROVIDER=memory`. Counts, not bytes: authors think in "how many
-     * solves to remember"; the byte backstop below is the operator's memory guard.
-     */
-    solveCacheDefaultMaxEntries: number;
-    /**
-     * Global byte backstop (bytes) across ALL definitions' L2 entries, evicted
-     * global-LRU regardless of per-definition counts. Entries range KB→100s of MB,
-     * so a count quota alone can't bound memory. `0` disables the backstop (rely on
-     * per-definition counts only — not recommended in the memory backend). Env value
-     * is MB, converted here. On Redis this moves to `maxmemory allkeys-lru`.
+     * **Solve cache** — total-byte budget (bytes) for EACH warm client's in-process
+     * cache of solve results (the `fromCache` layer in front of Rhino.Compute).
+     * Results range KB→100s of MB (`computeResponseMaxBytes` allows 300 MB), so an
+     * entry-count cap alone can't bound heap; this adds a byte LRU on top. `0`
+     * disables it (every solve goes to compute). Env value is MB.
+     *
+     * **This is per warm client, so the worst case multiplies.** Selva keeps up to
+     * `maxWarmComputeServers` (default 16) distinct compute servers warm, so the true
+     * ceiling is this × 16 — 4 GB at the default. Real deployments run 1–2 servers,
+     * which is why the default is comfortable, but a deployment that fans out
+     * across many servers on a small VPS is exactly the case this knob exists for.
      */
-    solveCacheMaxTotalBytes: number;
+    computeSolveCacheBytes: number;
 }
 /**
  * Resolve every server-side compute limit from an env map. Pure: the same env

package/dist/compute/limits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/compute/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAI7D,gFAAgF;AAChF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAS3D;;;GAGG;AACH,wBAAgB,eAAe,CAC9B,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,OAAc,GACpB,MAAM,CAcR;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,OAAc,GACpB,MAAM,CAcR;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CACvB,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,EACjB,MAAM,GAAE,OAAc,GACpB,OAAO,CAaT;AAED,iDAAiD;AACjD,MAAM,WAAW,aAAa;IAC7B;;;;;;;;;OASG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,sBAAsB,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;OASG;IACH,uBAAuB,EAAE,MAAM,CAAC;IAChC,yEAAyE;IACzE,wBAAwB,EAAE,MAAM,CAAC;IACjC,wEAAwE;IACxE,8BAA8B,EAAE,MAAM,CAAC;IACvC,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,2BAA2B,EAAE,OAAO,CAAC;IACrC;;;;OAIG;IACH,uBAAuB,EAAE,OAAO,CAAC;IACjC;;;;;OAKG;IACH,yBAAyB,EAAE,OAAO,CAAC;IACnC;;;;;;;;OAQG;IACH,0BAA0B,EAAE,MAAM,CAAC;IACnC;;;;;;;;OAQG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;;;OAOG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,+BAA+B,EAAE,MAAM,CAAC;IACxC;;;;;;;;;OASG;IACH,yBAAyB,EAAE,MAAM,CAAC;IAClC;;;;;;;;OAQG;IACH,2BAA2B,EAAE,MAAM,CAAC;IACpC;;;;;;OAMG;IACH,uBAAuB,EAAE,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,GAAE,OAAc,GAAG,aAAa,CAmD1F"}
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/compute/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAI7D,gFAAgF;AAChF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAS3D;;;GAGG;AACH,wBAAgB,eAAe,CAC9B,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,OAAc,GACpB,MAAM,CAcR;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,OAAc,GACpB,MAAM,CAcR;AAwBD;;;GAGG;AACH,wBAAgB,QAAQ,CACvB,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,EACjB,MAAM,GAAE,OAAc,GACpB,OAAO,CAaT;AAED,iDAAiD;AACjD,MAAM,WAAW,aAAa;IAC7B;;;;;;;;;OASG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,sBAAsB,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;OASG;IACH,uBAAuB,EAAE,MAAM,CAAC;IAChC,yEAAyE;IACzE,wBAAwB,EAAE,MAAM,CAAC;IACjC,wEAAwE;IACxE,8BAA8B,EAAE,MAAM,CAAC;IACvC;;;;;;;OAOG;IACH,0BAA0B,EAAE,MAAM,CAAC;IACnC;;;;;;OAMG;IACH,2BAA2B,EAAE,OAAO,CAAC;IACrC;;;;OAIG;IACH,uBAAuB,EAAE,OAAO,CAAC;IACjC;;;;;OAKG;IACH,yBAAyB,EAAE,OAAO,CAAC;IACnC;;;;;;;;;;OAUG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;;;OAOG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,2BAA2B,EAAE,MAAM,CAAC;IACpC;;;;;;;;;;;;OAYG;IACH,sBAAsB,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,GAAE,OAAc,GAAG,aAAa,CAoD1F"}

package/dist/compute/limits.js

@@ -67,6 +67,28 @@ export function readNonNegativeInt(env, name, fallback, logger = noop) {
     }
     return Math.floor(parsed);
 }
+/**
+ * Read a renamed variable, honouring its previous name for one minor version.
+ *
+ * Returns the env map's value under `name`, or — when that is unset and the old
+ * name is present — the old value plus a warning naming both. Setting both is not
+ * an error: the new name wins silently, which is what an operator mid-migration
+ * expects.
+ *
+ * This exists so a rename is never a silent behaviour change. A var that quietly
+ * stops being read looks exactly like a var that is working, and the failure only
+ * surfaces as a memory number nobody is watching.
+ */
+function readRenamed(env, name, oldName, logger) {
+    if (env[name] !== undefined || env[oldName] === undefined)
+        return env;
+    logger.warn('Deprecated env var: rename it', {
+        component: 'selva',
+        envVar: oldName,
+        renamedTo: name
+    });
+    return { ...env, [name]: env[oldName] };
+}
 /**
  * Parse a boolean env flag. Accepts `true/1/yes/on` (case-insensitive) as true
  * and `false/0/no/off` as false; any other / absent value falls back.
@@ -94,9 +116,17 @@ export function readBool(env, name, fallback, logger = noop) {
  * this once at its composition root with `$env/dynamic/private`.
  */
 export function resolveComputeLimits(env, logger = noop) {
+    // Renamed 2026-07 so each cache var says what it HOLDS. Old names still read,
+    // with a boot warning; drop this shim one minor version on.
+    env = readRenamed(env, 'COMPUTE_DEFINITION_CACHE_MB', 'COMPUTE_DEFINITION_BYTE_CACHE_MB', logger);
+    env = readRenamed(env, 'COMPUTE_SOLVE_CACHE_MB', 'COMPUTE_RESPONSE_CACHE_MB', logger);
+    env = readRenamed(env, 'REMOTE_DEFINITION_CACHE_TTL_MS', 'DEFINITION_CACHE_TTL_MS', logger);
+    // Renamed 2026-08 into the COMPUTE_* namespace it belongs to, and to say what it
+    // bounds — one solve — rather than a vague "duration".
+    env = readRenamed(env, 'COMPUTE_SOLVE_DEADLINE_MS', 'MAX_SOLVE_DURATION_MS', logger);
     const maxGhFileSize = readPositiveInt(env, 'MAX_GH_FILE_SIZE_BYTES', 50 * MB, logger);
     return {
-        maxSolveDurationMs: readPositiveInt(env, 'MAX_SOLVE_DURATION_MS', 100_000, logger),
+        solveDeadlineMs: readPositiveInt(env, 'COMPUTE_SOLVE_DEADLINE_MS', 100_000, logger),
         rateLimitWindowMs: readPositiveInt(env, 'COMPUTE_RATE_LIMIT_WINDOW_MS', 100_000, logger),
         rateLimitMaxRequests: readPositiveInt(env, 'COMPUTE_RATE_LIMIT_MAX', 120, logger),
         maxGhFileSize,
@@ -106,13 +136,11 @@ export function resolveComputeLimits(env, logger = noop) {
         // Tracks the upload cap so a remote URL can't smuggle a larger file.
         remoteDefinitionMaxBytes: maxGhFileSize,
         remoteDefinitionFetchTimeoutMs: readPositiveInt(env, 'REMOTE_DEFINITION_FETCH_TIMEOUT_MS', 30_000, logger),
-        definitionCacheTtlMs: readPositiveInt(env, 'DEFINITION_CACHE_TTL_MS', 5 * 60 * 1000, logger),
+        remoteDefinitionCacheTtlMs: readPositiveInt(env, 'REMOTE_DEFINITION_CACHE_TTL_MS', 5 * 60 * 1000, logger),
         computeReuseDefinitionCache: readBool(env, 'COMPUTE_REUSE_DEFINITION_CACHE', true, logger),
         computeServerCachesolve: readBool(env, 'COMPUTE_SERVER_CACHESOLVE', true, logger),
         computeCacheErroredSolves: readBool(env, 'COMPUTE_CACHE_ERRORED_SOLVES', false, logger),
-        // 4 matches rhino.compute's default --childcount; tune to the actual VM.
-        computeMaxConcurrentSolves: readPositiveInt(env, 'COMPUTE_MAX_CONCURRENT', 4, logger),
-        // Both 0 (unbounded / no deadline) by default — nothing sheds until an
+        // Both 0 (unbounded / no deadline) by default — nothing is rejected until an
         // operator who's measured their pool opts in. readNonNegativeInt so `0` is a
         // valid "disabled" value, not treated as invalid.
         computeMaxQueueDepth: readNonNegativeInt(env, 'COMPUTE_MAX_QUEUE_DEPTH', 0, logger),
@@ -120,17 +148,12 @@ export function resolveComputeLimits(env, logger = noop) {
         // Env is MB; 0 disables. Default 256 MB holds a handful of typical
         // definitions warm without pinning gigabytes. readNonNegativeInt so `0`
         // (disable) is honored rather than treated as invalid.
-        computeDefinitionByteCacheBytes: readNonNegativeInt(env, 'COMPUTE_DEFINITION_BYTE_CACHE_MB', 256, logger) * MB,
-        // Per-warm-client L1 response cache budget. Env is MB; 0 disables the L1.
-        // Default 256 MB: enough to keep a scrub session's recent responses warm
-        // without letting 20 × 300 MB worst-case entries pin gigabytes (audit C2).
-        computeResponseCacheBytes: readNonNegativeInt(env, 'COMPUTE_RESPONSE_CACHE_MB', 256, logger) * MB,
-        // L2 durable solve cache (H1). Default per-definition quota 0 = inherit-to-off
-        // until an operator opts in; the memory backend also only mounts under
-        // SOLVE_CACHE_PROVIDER=memory, so nothing caches by accident. Byte backstop
-        // 512 MB caps total heap use across all definitions (env is MB).
-        solveCacheDefaultMaxEntries: readNonNegativeInt(env, 'SOLVE_CACHE_DEFAULT_MAX_ENTRIES', 0, logger),
-        solveCacheMaxTotalBytes: readNonNegativeInt(env, 'SOLVE_CACHE_MAX_TOTAL_MB', 512, logger) * MB
+        computeDefinitionCacheBytes: readNonNegativeInt(env, 'COMPUTE_DEFINITION_CACHE_MB', 256, logger) * MB,
+        // Per-warm-client solve cache budget. Env is MB; 0 disables it. Default
+        // 256 MB: enough to keep a scrub session's recent solves warm without
+        // letting worst-case entries pin gigabytes (audit C2). PER warm client —
+        // see the field doc for the ×16 worst case.
+        computeSolveCacheBytes: readNonNegativeInt(env, 'COMPUTE_SOLVE_CACHE_MB', 256, logger) * MB
     };
 }
 //# sourceMappingURL=limits.js.map

package/dist/compute/limits.js.map

@@ -1 +1 @@
-{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/compute/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAgB,MAAM,mBAAmB,CAAC;AAE7D,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAKvB;;;;GAIG;AACH,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;AAE9B;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC9B,GAAc,EACd,IAAY,EACZ,QAAgB,EAChB,SAAkB,IAAI;IAEtB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;YACzD,SAAS,EAAE,OAAO;YAClB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,GAAG;YACV,QAAQ;SACR,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,GAAc,EACd,IAAY,EACZ,QAAgB,EAChB,SAAkB,IAAI;IAEtB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;YACzD,SAAS,EAAE,OAAO;YAClB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,GAAG;YACV,QAAQ;SACR,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACvB,GAAc,EACd,IAAY,EACZ,QAAiB,EACjB,SAAkB,IAAI;IAEtB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1E,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;QACzD,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,GAAG;QACV,QAAQ;KACR,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AACjB,CAAC;AA8ID;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAc,EAAE,SAAkB,IAAI;IAC1E,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,EAAE,wBAAwB,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IACtF,OAAO;QACN,kBAAkB,EAAE,eAAe,CAAC,GAAG,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,CAAC;QAClF,iBAAiB,EAAE,eAAe,CAAC,GAAG,EAAE,8BAA8B,EAAE,OAAO,EAAE,MAAM,CAAC;QACxF,oBAAoB,EAAE,eAAe,CAAC,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,MAAM,CAAC;QACjF,aAAa;QACb,gBAAgB,EAAE,eAAe,CAAC,GAAG,EAAE,2BAA2B,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC;QACpF,sBAAsB,EAAE,eAAe,CAAC,GAAG,EAAE,2BAA2B,EAAE,GAAG,GAAG,EAAE,EAAE,MAAM,CAAC;QAC3F,uBAAuB,EAAE,eAAe,CAAC,GAAG,EAAE,4BAA4B,EAAE,GAAG,GAAG,EAAE,EAAE,MAAM,CAAC;QAC7F,qEAAqE;QACrE,wBAAwB,EAAE,aAAa;QACvC,8BAA8B,EAAE,eAAe,CAC9C,GAAG,EACH,oCAAoC,EACpC,MAAM,EACN,MAAM,CACN;QACD,oBAAoB,EAAE,eAAe,CAAC,GAAG,EAAE,yBAAyB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,CAAC;QAC5F,2BAA2B,EAAE,QAAQ,CAAC,GAAG,EAAE,gCAAgC,EAAE,IAAI,EAAE,MAAM,CAAC;QAC1F,uBAAuB,EAAE,QAAQ,CAAC,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,CAAC;QACjF,yBAAyB,EAAE,QAAQ,CAAC,GAAG,EAAE,8BAA8B,EAAE,KAAK,EAAE,MAAM,CAAC;QACvF,yEAAyE;QACzE,0BAA0B,EAAE,eAAe,CAAC,GAAG,EAAE,wBAAwB,EAAE,CAAC,EAAE,MAAM,CAAC;QACrF,uEAAuE;QACvE,6EAA6E;QAC7E,kDAAkD;QAClD,oBAAoB,EAAE,kBAAkB,CAAC,GAAG,EAAE,yBAAyB,EAAE,CAAC,EAAE,MAAM,CAAC;QACnF,kBAAkB,EAAE,kBAAkB,CAAC,GAAG,EAAE,uBAAuB,EAAE,CAAC,EAAE,MAAM,CAAC;QAC/E,mEAAmE;QACnE,wEAAwE;QACxE,uDAAuD;QACvD,+BAA+B,EAC9B,kBAAkB,CAAC,GAAG,EAAE,kCAAkC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;QAC9E,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,yBAAyB,EACxB,kBAAkB,CAAC,GAAG,EAAE,2BAA2B,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;QACvE,+EAA+E;QAC/E,uEAAuE;QACvE,4EAA4E;QAC5E,iEAAiE;QACjE,2BAA2B,EAAE,kBAAkB,CAC9C,GAAG,EACH,iCAAiC,EACjC,CAAC,EACD,MAAM,CACN;QACD,uBAAuB,EAAE,kBAAkB,CAAC,GAAG,EAAE,0BAA0B,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;KAC9F,CAAC;AACH,CAAC"}
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/compute/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAgB,MAAM,mBAAmB,CAAC;AAE7D,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAKvB;;;;GAIG;AACH,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;AAE9B;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC9B,GAAc,EACd,IAAY,EACZ,QAAgB,EAChB,SAAkB,IAAI;IAEtB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;YACzD,SAAS,EAAE,OAAO;YAClB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,GAAG;YACV,QAAQ;SACR,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,GAAc,EACd,IAAY,EACZ,QAAgB,EAChB,SAAkB,IAAI;IAEtB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;YACzD,SAAS,EAAE,OAAO;YAClB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,GAAG;YACV,QAAQ;SACR,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,WAAW,CAAC,GAAc,EAAE,IAAY,EAAE,OAAe,EAAE,MAAe;IAClF,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACtE,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;QAC5C,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,IAAI;KACf,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACvB,GAAc,EACd,IAAY,EACZ,QAAiB,EACjB,SAAkB,IAAI;IAEtB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1E,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;QACzD,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,GAAG;QACV,QAAQ;KACR,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AACjB,CAAC;AA8HD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAc,EAAE,SAAkB,IAAI;IAC1E,8EAA8E;IAC9E,4DAA4D;IAC5D,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,6BAA6B,EAAE,kCAAkC,EAAE,MAAM,CAAC,CAAC;IAClG,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;IACtF,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,CAAC,CAAC;IAC5F,iFAAiF;IACjF,uDAAuD;IACvD,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAErF,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,EAAE,wBAAwB,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IACtF,OAAO;QACN,eAAe,EAAE,eAAe,CAAC,GAAG,EAAE,2BAA2B,EAAE,OAAO,EAAE,MAAM,CAAC;QACnF,iBAAiB,EAAE,eAAe,CAAC,GAAG,EAAE,8BAA8B,EAAE,OAAO,EAAE,MAAM,CAAC;QACxF,oBAAoB,EAAE,eAAe,CAAC,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,MAAM,CAAC;QACjF,aAAa;QACb,gBAAgB,EAAE,eAAe,CAAC,GAAG,EAAE,2BAA2B,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC;QACpF,sBAAsB,EAAE,eAAe,CAAC,GAAG,EAAE,2BAA2B,EAAE,GAAG,GAAG,EAAE,EAAE,MAAM,CAAC;QAC3F,uBAAuB,EAAE,eAAe,CAAC,GAAG,EAAE,4BAA4B,EAAE,GAAG,GAAG,EAAE,EAAE,MAAM,CAAC;QAC7F,qEAAqE;QACrE,wBAAwB,EAAE,aAAa;QACvC,8BAA8B,EAAE,eAAe,CAC9C,GAAG,EACH,oCAAoC,EACpC,MAAM,EACN,MAAM,CACN;QACD,0BAA0B,EAAE,eAAe,CAC1C,GAAG,EACH,gCAAgC,EAChC,CAAC,GAAG,EAAE,GAAG,IAAI,EACb,MAAM,CACN;QACD,2BAA2B,EAAE,QAAQ,CAAC,GAAG,EAAE,gCAAgC,EAAE,IAAI,EAAE,MAAM,CAAC;QAC1F,uBAAuB,EAAE,QAAQ,CAAC,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,CAAC;QACjF,yBAAyB,EAAE,QAAQ,CAAC,GAAG,EAAE,8BAA8B,EAAE,KAAK,EAAE,MAAM,CAAC;QACvF,6EAA6E;QAC7E,6EAA6E;QAC7E,kDAAkD;QAClD,oBAAoB,EAAE,kBAAkB,CAAC,GAAG,EAAE,yBAAyB,EAAE,CAAC,EAAE,MAAM,CAAC;QACnF,kBAAkB,EAAE,kBAAkB,CAAC,GAAG,EAAE,uBAAuB,EAAE,CAAC,EAAE,MAAM,CAAC;QAC/E,mEAAmE;QACnE,wEAAwE;QACxE,uDAAuD;QACvD,2BAA2B,EAC1B,kBAAkB,CAAC,GAAG,EAAE,6BAA6B,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,4CAA4C;QAC5C,sBAAsB,EAAE,kBAAkB,CAAC,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;KAC3F,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@selvajs/server",
-  "version": "0.2.1",
-  "description": "Transport-agnostic compute/solve/definitions server building blocks for apps built on the Selva engine (limits, rate limiting, SSRF guard, input transform, solve pipeline, definition service + render loader)",
+  "version": "1.0.0-beta.1",
+  "description": "Transport-agnostic server building blocks for apps built on the Selva engine (limits, rate limiting, SSRF guard, remote-definition fetch, definition service + render loader); the solve core lives in @selvajs/solve/server",
   "license": "MIT",
   "author": "VektorNode",
   "homepage": "https://github.com/VektorNode/selva#readme",
@@ -25,13 +25,7 @@
     "node": ">=22.0.0"
   },
   "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
   "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
     "./compute": {
       "types": "./dist/compute/index.d.ts",
       "import": "./dist/compute/index.js"
@@ -76,7 +70,7 @@
     "!**/*.spec.*"
   ],
   "dependencies": {
-    "@selvajs/compute": "^3.1.0",
+    "@selvajs/compute": "^4.0.0-beta.1",
     "@selvajs/platform": "^0.16.0",
     "@selvajs/schemas": "^4.7.0"
   },
@@ -93,9 +87,9 @@
     }
   },
   "devDependencies": {
-    "@types/node": "^22.20.1",
-    "typescript": "^6.0.3",
-    "vitest": "^3.2.7"
+    "@types/node": "^26.1.2",
+    "typescript": "~6.0.3",
+    "vitest": "^4.1.10"
   },
   "scripts": {
     "build": "tsc",

package/dist/compute/client-cache.d.ts

@@ -1,135 +0,0 @@
-import { GrasshopperClient, type SolveScheduler } from '@selvajs/compute';
-/**
- * Opaque identity of a compute server. Callers never construct the branded
- * string directly — they pass a resolved server config to `serverIdentity()`.
- * Keeping this opaque from day one (ADR 0004 D1) means "a server is now a pool
- * of URLs behind one id" stays an additive, non-breaking change.
- */
-export type ServerIdentity = string & {
-    readonly __brand: 'ServerIdentity';
-};
-/** Minimal resolved-server shape the cache needs (a subset of the app's `ComputeServerConfig`). */
-export interface ResolvedServer {
-    /** Stable identity — the cache key. */
-    id: string;
-    /** Base URL of the Rhino.Compute instance (a resolution detail of `id`). */
-    serverUrl: string;
-    /** Sent as `RhinoComputeKey`. */
-    apiKey?: string;
-}
-/** Derive the opaque cache identity from a resolved server. Identity is the `id`. */
-export declare function serverIdentity(server: Pick<ResolvedServer, 'id'>): ServerIdentity;
-/**
- * Per-request telemetry holders read by the caller right after a solve resolves
- * to build a Server-Timing header. Populated by the client/scheduler callbacks.
- */
-export interface CachedClient {
-    client: GrasshopperClient;
-    scheduler: SolveScheduler;
-    /**
-     * Last decode/solve/encode reported by the compute server (Server-Timing),
-     * written by onServerTiming. `seq` increments on every write. The scheduler
-     * runs up to `maxConcurrentSolves` solves at once, so `last` alone can't be
-     * trusted per-request: callers snapshot `seq` before their solve and
-     * attribute `last` only when exactly one write happened since (necessarily
-     * theirs — see the guard in `runSolvePipeline`), dropping the segment
-     * otherwise instead of misattributing another request's timing.
-     */
-    rhinoTiming: {
-        last: {
-            decode: number;
-            solve: number;
-            encode: number;
-        } | null;
-        seq: number;
-    };
-    /**
-     * Last solve's cache verdicts from the scheduler's onSettle: whether the
-     * in-process response cache served it (no compute call) and whether the
-     * definition had to be re-uploaded. `seq` increments on EVERY settle
-     * (success or error); `last` is only written on success. Same
-     * snapshot-and-attribute pattern as rhinoTiming — onSettle always fires
-     * before the corresponding `scheduler.solve()` promise resolves, so at the
-     * caller's read point its own settle is included in `seq`.
-     */
-    solveMeta: {
-        last: {
-            fromCache: boolean;
-            definitionReuploaded?: boolean;
-        } | null;
-        seq: number;
-    };
-}
-/**
- * Config injected by the consuming app. Everything that used to be read from
- * `$env` / `computeLimits` in the app module is passed in, so this module stays
- * env-agnostic and testable.
- */
-export interface ClientCacheConfig {
-    /** Per-solve timeout forwarded to the scheduler (`ComputeLimits.maxSolveDurationMs`). */
-    maxSolveDurationMs: number;
-    /** Ask Rhino.Compute to cache solve results and return them on identical repeats. */
-    cachesolve: boolean;
-    /** Also cache solves that reported GH errors (only meaningful with `cachesolve`). */
-    cacheerroredsolves: boolean;
-    /** Reference large definitions by server cache key (pointer) instead of re-uploading. */
-    reuseServerDefinitionCache: boolean;
-    /**
-     * Max in-flight solves per compute server (scheduler `maxConcurrent`; excess
-     * FIFO-queues). Size to the server's `compute.geometry` child count
-     * (`ComputeLimits.computeMaxConcurrentSolves`).
-     */
-    maxConcurrentSolves: number;
-    /**
-     * Backpressure — max solves that may WAIT in the FIFO queue (excludes the
-     * in-flight `maxConcurrentSolves`). `0` = unbounded (`ComputeLimits.
-     * computeMaxQueueDepth`); a full queue sheds new solves with `QUEUE_FULL`.
-     */
-    maxQueueDepth: number;
-    /**
-     * Backpressure — max ms a solve may sit queued before executing; `0` = no
-     * deadline (`ComputeLimits.computeQueueWaitMs`). A too-long wait sheds with
-     * `QUEUE_TIMEOUT`.
-     */
-    queueWaitMs: number;
-    /**
-     * Byte budget for this client's in-process solve-response cache (scheduler
-     * L1), evicted LRU alongside its entry-count cap. Applies per warm client —
-     * total worst-case heap is this × `maxCachedClients`. `0` disables the L1
-     * response cache entirely (`ComputeLimits.computeResponseCacheBytes`).
-     */
-    responseCacheMaxBytes: number;
-    /** Concise cache/timing logs. When false, `onDebugLog` is never invoked. */
-    debug: boolean;
-    /** VERBOSE lib-level logging (full solve request/response incl. geometry). */
-    debugVerbose: boolean;
-    /** Max distinct warm clients before the LRU evicts the oldest. Default 16. */
-    maxCachedClients?: number;
-    /** Sink for the concise debug lines (the app wires `console.log`). */
-    onDebugLog?: (message: string) => void;
-}
-export interface ClientCache {
-    /**
-     * Get (or create) the warm client + scheduler for a resolved compute server,
-     * keyed by its `id`. `definitionGuid`, when present, is stamped as the
-     * `X-Selva-Definition` header on this client's outbound solve/IO requests —
-     * inert routing/telemetry metadata until a pool router exists (ADR 0004 D2).
-     */
-    getClient(server: ResolvedServer, opts?: {
-        definitionGuid?: string;
-    }): Promise<CachedClient>;
-    /**
-     * Dispose and drop the warm client for `id` (or a `ServerIdentity`). Called by
-     * the config-write path when a server's URL/key rotates so the next request
-     * rebuilds against fresh connection details (ADR 0004 Consequences).
-     */
-    evict(id: string | ServerIdentity): void;
-    /** Dispose every warm client. Test seam / shutdown hook. */
-    disposeAll(): void;
-}
-/**
- * Build a per-server warm-client cache. Each cache owns its own LRU `Map` keyed
- * on server `id`.
- */
-export declare function createClientCache(config: ClientCacheConfig): ClientCache;
-//# sourceMappingURL=client-cache.d.ts.map

package/dist/compute/client-cache.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-cache.d.ts","sourceRoot":"","sources":["../../src/compute/client-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,iBAAiB,EAGjB,KAAK,cAAc,EACnB,MAAM,kBAAkB,CAAC;AAyB1B;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAE7E,mGAAmG;AACnG,MAAM,WAAW,cAAc;IAC9B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,cAAc,CAEjF;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,cAAc,CAAC;IAC1B;;;;;;;;OAQG;IACH,WAAW,EAAE;QAAE,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7F;;;;;;;;OAQG;IACH,SAAS,EAAE;QACV,IAAI,EAAE;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,IAAI,CAAC;QACpE,GAAG,EAAE,MAAM,CAAC;KACZ,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IACjC,yFAAyF;IACzF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qFAAqF;IACrF,UAAU,EAAE,OAAO,CAAC;IACpB,qFAAqF;IACrF,kBAAkB,EAAE,OAAO,CAAC;IAC5B,yFAAyF;IACzF,0BAA0B,EAAE,OAAO,CAAC;IACpC;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,YAAY,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC3B;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7F;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;IACzC,4DAA4D;IAC5D,UAAU,IAAI,IAAI,CAAC;CACnB;AAID;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CAuLxE"}