@selvajs/server 1.0.0-beta.8 → 1.0.0

package/dist/ops/semver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"semver.d.ts","sourceRoot":"","sources":["../../src/ops/semver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,gDAAgD;AAChD,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE/C;;;;;GAKG;AACH,wBAAgB,WAAW,CAC1B,CAAC,EAAE,MAAM,GACP;IAAE,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAOhE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CASxD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAsE7E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,OAAO,CACtB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,cAAyB,GAChC,OAAO,CAaT"}
+{"version":3,"file":"semver.d.ts","sourceRoot":"","sources":["../../src/ops/semver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,gDAAgD;AAChD,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,WAAW,CAC1B,CAAC,EAAE,MAAM,GACP;IAAE,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAOhE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CASxD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAsE7E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,OAAO,CACtB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,cAAyB,GAChC,OAAO,CAYT"}

package/dist/ops/semver.js

@@ -1,15 +1,13 @@
 /**
  * Channel-aware semver comparison for update checks. Understands exactly the
- * two-channel model Selva-engine deployments publish under: a stable line
- * (`x.y.z`, npm `latest`) and a beta line (`x.y.z-beta.N`, npm `beta`).
- * Deliberately not a general semver implementation — no build metadata, no
- * arbitrary pre-release identifiers.
+ * two lines Selva publishes under: stable (`x.y.z`, npm `latest`) and beta
+ * (`x.y.z-beta.N`, npm `beta`). Deliberately not general semver — no build
+ * metadata, no arbitrary pre-release identifiers.
  */
 /**
- * Parse `x.y.z` plus an optional `-beta.N` pre-release counter. The
- * pre-release number is returned separately so beta-channel comparisons can
- * order successive betas of the same x.y.z core. Returns null for anything
- * that doesn't lead with a numeric core.
+ * Parse `x.y.z` plus an optional `-beta.N` counter. `beta` comes back separate
+ * from the core so beta-channel comparisons can order successive betas of one
+ * core. Null when the string doesn't lead with a numeric core.
  */
 export function parseSemver(v) {
     const m = /^(\d+)\.(\d+)\.(\d+)(?:-beta\.(\d+))?/.exec(v.trim());
@@ -21,8 +19,8 @@ export function parseSemver(v) {
     };
 }
 /**
- * Compare two `x.y.z` cores. Pre-release tails are ignored — callers that care
- * about them use `isNewer`, which layers channel rules on top.
+ * Compare two `x.y.z` cores, ignoring pre-release tails. Callers that care
+ * about those want `isNewer`, which layers the channel rules on top.
  */
 export function compareCore(a, b) {
     const pa = parseSemver(a);
@@ -40,14 +38,14 @@ export function compareCore(a, b) {
 /**
  * Does `version` satisfy an `engines.node` range?
  *
- * Deliberately narrow: handles the `>=X`, `>X`, `^X`, `~X`, `=X` and bare-version
- * forms Selva and its dependencies actually publish, plus `||` alternatives and
- * space-separated conjunctions (`>=18 <21`). Anything it cannot parse returns
- * `null` — "unknown", never a false "incompatible", because a wrong block would
- * strand an operator who has no way to override a bad parse.
+ * Deliberately narrow: handles the `>=`, `>`, `<=`, `<`, `^`, `~`, `=` and
+ * bare-version forms Selva and its dependencies publish, plus `||` alternatives
+ * and space-separated conjunctions (`>=18 <21`). Anything it can't parse
+ * returns `null` for "unknown", never a false "incompatible" — a wrong block
+ * would strand an operator with no way to override the bad parse.
  *
- * A full `semver` dependency would subsume this; it isn't warranted for the
- * handful of range forms in play (issue #176).
+ * A full `semver` dependency would subsume this, but isn't warranted for the
+ * handful of range forms in play.
  */
 export function satisfiesRange(version, range) {
     const v = parseSemver(version);
@@ -122,18 +120,18 @@ export function satisfiesRange(version, range) {
     return anyParsed ? false : null;
 }
 /**
- * True when `latest` is strictly newer than `current` by semver.
+ * True when `latest` is strictly newer than `current`.
  *
- * Stable channel (default): pre-release suffixes are ignored — only stable
+ * Stable channel (default): pre-release suffixes are ignored, so only stable
  * core bumps surface.
  *
- * Beta channel: pre-releases participate. A higher core wins; on an equal
- * core, a higher `-beta.N` wins, and a stable (no suffix) outranks any -beta
- * of the same core (4.6.0 > 4.6.0-beta.9). This lets an update UI show
- * "beta.1 → beta.2" and "beta → stable promotion of the same line".
+ * Beta channel: pre-releases participate. A higher core wins; on an equal core
+ * a higher `-beta.N` wins, and a stable (no suffix) outranks any -beta of that
+ * core (4.6.0 > 4.6.0-beta.9). An update UI can then show both "beta.1 →
+ * beta.2" and the promotion of a beta line to stable.
  *
  * Unparseable versions fall back to inequality: different strings count as
- * "newer" so a weird published version still surfaces, identical ones don't.
+ * newer, so an odd published version still surfaces; identical ones don't.
  */
 export function isNewer(latest, current, channel = 'stable') {
     const a = parseSemver(latest);
@@ -146,7 +144,6 @@ export function isNewer(latest, current, channel = 'stable') {
         if (a.core[i] < b.core[i])
             return false;
     }
-    // Equal core. On the stable channel we don't compare pre-release tails.
     if (channel !== 'beta')
         return false;
     // Stable (beta == null) ranks above any pre-release of the same core.

package/dist/ops/semver.js.map

@@ -1 +1 @@
-{"version":3,"file":"semver.js","sourceRoot":"","sources":["../../src/ops/semver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAC1B,CAAS;IAET,MAAM,CAAC,GAAG,uCAAuC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO;QACN,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;KACxC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,CAAS;IAC/C,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,KAAa;IAC5D,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpB,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,kEAAkE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1F,IAAI,CAAC,CAAC,EAAE,CAAC;gBACR,SAAS,GAAG,KAAK,CAAC;gBAClB,MAAM;YACP,CAAC;YACD,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,MAAM,MAAM,GAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;gBACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;wBAAE,OAAO,CAAC,CAAC;oBACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;wBAAE,OAAO,CAAC,CAAC,CAAC;gBACtC,CAAC;gBACD,OAAO,CAAC,CAAC;YACV,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,EAAW,CAAC;YAChB,QAAQ,EAAE,EAAE,CAAC;gBACZ,KAAK,IAAI;oBACR,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;oBACd,MAAM;gBACP,KAAK,GAAG;oBACP,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;oBACb,MAAM;gBACP,KAAK,IAAI;oBACR,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;oBACd,MAAM;gBACP,KAAK,GAAG;oBACP,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;oBACb,MAAM;gBACP,4EAA4E;gBAC5E,KAAK,GAAG;oBACP,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;oBACzC,MAAM;gBACP,KAAK,GAAG;oBACP,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;oBACpE,MAAM;gBACP;oBACC,sEAAsE;oBACtE,oDAAoD;oBACpD,EAAE;wBACD,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;4BACvB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;4BACzE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACT,GAAG,GAAG,KAAK,CAAC;gBACZ,MAAM;YACP,CAAC;QACF,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,SAAS,GAAG,IAAI,CAAC;QACjB,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;IACtB,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,OAAO,CACtB,MAAc,EACd,OAAe,EACf,UAA0B,QAAQ;IAElC,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,MAAM,KAAK,OAAO,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACzC,CAAC;IACD,wEAAwE;IACxE,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACrC,sEAAsE;IACtE,MAAM,IAAI,GAAG,CAAC,IAAmB,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"semver.js","sourceRoot":"","sources":["../../src/ops/semver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAC1B,CAAS;IAET,MAAM,CAAC,GAAG,uCAAuC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO;QACN,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;KACxC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,CAAS;IAC/C,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,KAAa;IAC5D,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpB,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,kEAAkE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1F,IAAI,CAAC,CAAC,EAAE,CAAC;gBACR,SAAS,GAAG,KAAK,CAAC;gBAClB,MAAM;YACP,CAAC;YACD,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,MAAM,MAAM,GAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;gBACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;wBAAE,OAAO,CAAC,CAAC;oBACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;wBAAE,OAAO,CAAC,CAAC,CAAC;gBACtC,CAAC;gBACD,OAAO,CAAC,CAAC;YACV,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,EAAW,CAAC;YAChB,QAAQ,EAAE,EAAE,CAAC;gBACZ,KAAK,IAAI;oBACR,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;oBACd,MAAM;gBACP,KAAK,GAAG;oBACP,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;oBACb,MAAM;gBACP,KAAK,IAAI;oBACR,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;oBACd,MAAM;gBACP,KAAK,GAAG;oBACP,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;oBACb,MAAM;gBACP,4EAA4E;gBAC5E,KAAK,GAAG;oBACP,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;oBACzC,MAAM;gBACP,KAAK,GAAG;oBACP,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;oBACpE,MAAM;gBACP;oBACC,sEAAsE;oBACtE,oDAAoD;oBACpD,EAAE;wBACD,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;4BACvB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;4BACzE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACT,GAAG,GAAG,KAAK,CAAC;gBACZ,MAAM;YACP,CAAC;QACF,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,SAAS,GAAG,IAAI,CAAC;QACjB,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;IACtB,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,OAAO,CACtB,MAAc,EACd,OAAe,EACf,UAA0B,QAAQ;IAElC,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,MAAM,KAAK,OAAO,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACrC,sEAAsE;IACtE,MAAM,IAAI,GAAG,CAAC,IAAmB,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/providers/create-selva-providers.d.ts

@@ -2,11 +2,7 @@ import type { IAuthProvider, IDataProvider, IStorageProvider, ISolveMetricSink,
 import { type ILogger } from '@selvajs/platform';
 import { type EnvRecord } from '../compute/limits.js';
 export type ProviderFactory<T> = (env: EnvRecord) => T;
-/**
- * The provider implementations available to this deployment, keyed by the
- * (lowercase) choice name used in `SELVA_AUTH_PROVIDER` / `SELVA_DATA_PROVIDER`
- * / `SELVA_STORAGE_PROVIDER`.
- */
+/** Keyed by the lowercased `SELVA_{AUTH,DATA,STORAGE}_PROVIDER` value. */
 export interface ProviderRegistry {
     auth: Record<string, ProviderFactory<IAuthProvider>>;
     data: Record<string, ProviderFactory<IDataProvider>>;
@@ -17,47 +13,43 @@ export interface CreateSelvaProvidersOptions {
     /** Fallback choice per slot when the env var is unset. Default: `'local'`. */
     defaults?: Partial<Record<'auth' | 'data' | 'storage', string>>;
     /**
-     * Path to an external `selva.config.js` override (absolute or CWD-relative).
-     * Pass `env.SELVA_CONFIG_PATH` through; when set, the module's default
-     * export (a `SelvaConfig` or factory) replaces the env-driven wiring.
+     * Override module (absolute or CWD-relative); its default export is a
+     * `SelvaConfig` or a factory.
      */
     configPath?: string;
     /**
-     * Boot-summary sink, called once on first `resolve()`. Kept for callers that
-     * want the rendered one-line string. Default: none — the summary goes to
-     * `logger` instead, so this library never writes to stdout unbidden.
+     * Boot-summary sink, called once on first `resolve()` — for callers that want
+     * the rendered string. Default: none, and the summary goes to `logger`
+     * instead, so this library never writes to stdout unbidden.
      */
     onBoot?: (summary: string) => void;
     /**
-     * Structured logger. Receives the boot summary as fields on first `resolve()`
-     * when `onBoot` is not supplied. Defaults to `NoopLogger`.
+     * Receives the boot summary as fields when `onBoot` is unset. Defaults to
+     * `NoopLogger`.
      */
     logger?: ILogger;
 }
 export interface SelvaProviderRuntime {
     /**
-     * Memoized provider wiring. The first call instantiates providers from env
-     * (and may throw if required secrets are missing); subsequent calls return
-     * the cached config. Never call at build time — provider `fromEnv`
-     * factories validate required secrets.
+     * Memoized wiring. The first call instantiates providers from env and throws
+     * if a required secret is missing — never call it at build time.
      */
     resolve(): SelvaConfig;
+    /** Defaults to `'single'` when the config omits it. */
     tenancy(): TenancyMode;
-    /** Resolved branding — every field defaulted so the UI never null-checks. */
+    /** Every field defaulted, so the UI never null-checks. */
     branding(): Required<SelvaBranding>;
-    /** Safe flag accessor — omitted flags resolve to false. */
+    /** Omitted flags resolve to false. */
     flag(name: keyof SelvaFlags): boolean;
-    /** Per-solve timing sink; `NoopSolveMetricSink` when the config omits one. */
+    /** `NoopSolveMetricSink` when the config omits one. */
     solveMetricSink(): ISolveMetricSink;
 }
 /**
- * Build the provider runtime. Loading the *config source* (default factory,
- * or the `configPath` override module) happens here and is cheap and
- * secret-free — a factory is just a function. The factory is NOT invoked:
- * that runs the registry's `fromEnv` factories, which validate required
- * secrets, and doing it at import/build time would make merely building the
- * app require a full runtime env. Provider instantiation is deferred to the
- * first `resolve()`.
+ * Loading the config source (default factory, or the `configPath` module) is
+ * cheap and secret-free. The factory is deliberately NOT invoked here: that
+ * runs the registry's `fromEnv` factories, which validate required secrets, so
+ * calling it at import time would make merely building the app require a full
+ * runtime env. Providers are instantiated on the first `resolve()`.
  */
 export declare function createSelvaProviders(env: EnvRecord, options: CreateSelvaProvidersOptions): Promise<SelvaProviderRuntime>;
 //# sourceMappingURL=create-selva-providers.d.ts.map

package/dist/providers/create-selva-providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-selva-providers.d.ts","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EACX,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,WAAW,EAEX,UAAU,EACV,WAAW,EACX,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAkD,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,KAAK,CAAC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACpC;;;;;OAKG;IACH,OAAO,IAAI,WAAW,CAAC;IACvB,OAAO,IAAI,WAAW,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpC,2DAA2D;IAC3D,IAAI,CAAC,IAAI,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC;IACtC,8EAA8E;IAC9E,eAAe,IAAI,gBAAgB,CAAC;CACpC;AAkGD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACzC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CA+D/B"}
+{"version":3,"file":"create-selva-providers.d.ts","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EACX,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,WAAW,EAEX,UAAU,EACV,WAAW,EACX,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAkD,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,KAAK,CAAC,CAAC;AAEvD,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACpC;;;OAGG;IACH,OAAO,IAAI,WAAW,CAAC;IACvB,uDAAuD;IACvD,OAAO,IAAI,WAAW,CAAC;IACvB,0DAA0D;IAC1D,QAAQ,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpC,sCAAsC;IACtC,IAAI,CAAC,IAAI,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC;IACtC,uDAAuD;IACvD,eAAe,IAAI,gBAAgB,CAAC;CACpC;AAiGD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACzC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CA8D/B"}

package/dist/providers/create-selva-providers.js

@@ -1,29 +1,27 @@
-// Configurable provider wiring (K5) — the reusable core of the app's
-// composition root, extracted so any app built on the engine gets the same
-// env-driven provider selection, `selva.config.js` override hook, and lazy
-// instantiation without copying it.
+// Configurable provider wiring — the reusable core of an app's composition
+// root.
 //
-// The provider IMPLEMENTATIONS are not bundled: the caller passes a
+// Provider IMPLEMENTATIONS are not bundled: the caller passes a
 // `ProviderRegistry` mapping choice names (the `SELVA_*_PROVIDER` env values)
-// to `fromEnv`-style factories. That keeps this package free of dependencies
-// on `@selvajs/local-provider` / `@selvajs/supabase-provider` — a consuming
-// app registers exactly the providers it ships.
+// to `fromEnv`-style factories. That keeps this package free of dependencies on
+// `@selvajs/local-provider` / `@selvajs/supabase-provider` — a consuming app
+// registers exactly the providers it ships.
 //
-// Two wiring modes (unchanged from the app):
+// Two wiring modes:
 //
-//   Default — providers are picked from env vars (SELVA_AUTH_PROVIDER etc.)
-//   via the registry. New deployments need only a .env file.
+//   Default — providers picked from env vars (SELVA_AUTH_PROVIDER etc.) via the
+//   registry. New deployments need only a .env file.
 //
-//   Override — pass `configPath` (e.g. env.SELVA_CONFIG_PATH) pointing at an
-//   external `selva.config.js` (absolute or CWD-relative). It is loaded
-//   dynamically at boot and replaces the env-driven wiring entirely. The path
-//   must resolve to an actual `.js` file — there's no TS compiler at runtime.
+//   Override — `configPath` points at an external `selva.config.js` (absolute
+//   or CWD-relative), loaded dynamically at boot, replacing the env-driven
+//   wiring entirely. It must be an actual `.js` file — there's no TS compiler
+//   at runtime.
 import { pathToFileURL } from 'node:url';
 import { resolve as resolvePath } from 'node:path';
 import { existsSync } from 'node:fs';
 import { isFlagEnabled, NoopSolveMetricSink, NoopLogger } from '@selvajs/platform';
 import { readBool } from '../compute/limits.js';
-// Every SelvaFlags key, mapped from `SELVA_FLAG_<KEY>`. The `satisfies` +
+// Every SelvaFlags key, read from `SELVA_FLAG_<KEY>`. The `satisfies` plus the
 // exhaustiveness check below make adding a platform flag without listing it
 // here a compile error.
 const FLAG_KEYS = [
@@ -50,10 +48,10 @@ function pickTenancy(env) {
     return choice;
 }
 /**
- * Per-solve metric sink. Supabase's data provider carries a `solveMetrics`
- * sink built from its own client bundle — reuse it so timings persist
- * automatically. Backends without a metrics table leave it undefined, which
- * falls back to `NoopSolveMetricSink` in `solveMetricSink()`.
+ * Supabase's data provider carries a `solveMetrics` sink built from its own
+ * client bundle — reuse it so timings persist without a second client. Backends
+ * with no metrics table return undefined, and `solveMetricSink()` falls back to
+ * `NoopSolveMetricSink`.
  */
 function pickSolveMetrics(data) {
     const candidate = data.solveMetrics;
@@ -90,20 +88,17 @@ async function loadConfigSource(options) {
     if (!existsSync(abs)) {
         throw new Error(`Config override path ${options.configPath} resolved to ${abs} which does not exist.`);
     }
-    // Dynamic specifier — a bundler must not pre-resolve this at build time,
-    // hence @vite-ignore. pathToFileURL keeps Windows absolute paths valid as
-    // ESM specifiers.
+    // @vite-ignore: a bundler must not pre-resolve this specifier at build time.
+    // pathToFileURL keeps Windows absolute paths valid as ESM specifiers.
     const mod = (await import(/* @vite-ignore */ pathToFileURL(abs).href));
     return mod.default;
 }
 /**
- * Build the provider runtime. Loading the *config source* (default factory,
- * or the `configPath` override module) happens here and is cheap and
- * secret-free — a factory is just a function. The factory is NOT invoked:
- * that runs the registry's `fromEnv` factories, which validate required
- * secrets, and doing it at import/build time would make merely building the
- * app require a full runtime env. Provider instantiation is deferred to the
- * first `resolve()`.
+ * Loading the config source (default factory, or the `configPath` module) is
+ * cheap and secret-free. The factory is deliberately NOT invoked here: that
+ * runs the registry's `fromEnv` factories, which validate required secrets, so
+ * calling it at import time would make merely building the app require a full
+ * runtime env. Providers are instantiated on the first `resolve()`.
  */
 export async function createSelvaProviders(env, options) {
     const raw = await loadConfigSource(options);
@@ -114,10 +109,9 @@ export async function createSelvaProviders(env, options) {
         if (config)
             return config;
         config = typeof raw === 'function' ? raw(env) : raw;
-        // One-line boot summary so operators can confirm at a glance what got
-        // wired without grepping env vars or reading the config file. Provider
-        // names come from the IAuthProvider.name field; data/storage adapters
-        // don't expose a name, so we infer from the constructor.
+        // Boot summary so operators can confirm what got wired without grepping
+        // env vars. Auth exposes a `name` field; data/storage adapters don't, so
+        // their names come from the constructor.
         const wiring = {
             component: 'selva',
             auth: config.auth.name,

package/dist/providers/create-selva-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-selva-providers.js","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,2EAA2E;AAC3E,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,oEAAoE;AACpE,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,gDAAgD;AAChD,EAAE;AACF,6CAA6C;AAC7C,EAAE;AACF,4EAA4E;AAC5E,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAYrC,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAgB,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,QAAQ,EAAkB,MAAM,sBAAsB,CAAC;AAuDhE,0EAA0E;AAC1E,4EAA4E;AAC5E,wBAAwB;AACxB,MAAM,SAAS,GAAG;IACjB,wBAAwB;IACxB,4BAA4B;IAC5B,oBAAoB;IACpB,0BAA0B;IAC1B,gBAAgB;CACiC,CAAC;AAKnD,MAAM,eAAe,GAAmB,IAAI,CAAC;AAE7C,SAAS,IAAI,CACZ,GAAc,EACd,MAAc,EACd,IAAwC,EACxC,QAAgB;IAEhB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,KAAK,MAAM,gBAAgB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,GAAc;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,8BAA8B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAmB;IAC5C,MAAM,SAAS,GAAI,IAAmC,CAAC,YAAY,CAAC;IACpE,IAAI,SAAS,IAAI,OAAQ,SAAkC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnF,OAAO,SAA6B,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAoC;IAChE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACvC,OAAO,CAAC,GAAG,EAAE,EAAE;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC;QACxF,OAAO;YACN,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,WAAW,CACxB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CACxE;YACD,QAAQ,EAAE;gBACT,IAAI,EAAE,GAAG,CAAC,gBAAgB;gBAC1B,aAAa,EAAE,GAAG,CAAC,0BAA0B;gBAC7C,OAAO,EAAE,GAAG,CAAC,mBAAmB;gBAChC,WAAW,EAAE,GAAG,CAAC,uBAAuB;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC;YAChF,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,wBAAwB,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,OAAO,CAAC;YAC5F,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC;SACpC,CAAC;IACH,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,wBAAwB,OAAO,CAAC,UAAU,gBAAgB,GAAG,wBAAwB,CACrF,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAEpE,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,GAAc,EACd,OAAoC;IAEpC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;IAElD,IAAI,MAA+B,CAAC;IACpC,IAAI,eAA6C,CAAC;IAElD,SAAS,OAAO;QACf,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAEpD,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,MAAM,GAAG;YACd,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;YAClC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI;YACxC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,QAAQ;YACnC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CACb,2BAA2B;gBAC1B,QAAQ,MAAM,CAAC,IAAI,GAAG;gBACtB,QAAQ,MAAM,CAAC,IAAI,GAAG;gBACtB,WAAW,MAAM,CAAC,OAAO,GAAG;gBAC5B,WAAW,MAAM,CAAC,OAAO,EAAE;gBAC3B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5D,CAAC;QACH,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO;QACN,OAAO;QACP,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,IAAI,QAAQ;QAC5C,QAAQ,EAAE,GAAG,EAAE;YACd,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;YAC3C,OAAO;gBACN,IAAI;gBACJ,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI;gBAClD,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,yDAAyD;gBAC3F,WAAW,EACV,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;oBACzB,yFAAyF,IAAI,GAAG;aACjG,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC;QAC9C,eAAe,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,eAAe,EAAE,CAAC;gBACtB,eAAe,GAAG,OAAO,EAAE,CAAC,YAAY,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvE,CAAC;YACD,OAAO,eAAe,CAAC;QACxB,CAAC;KACD,CAAC;AACH,CAAC"}
+{"version":3,"file":"create-selva-providers.js","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,QAAQ;AACR,EAAE;AACF,gEAAgE;AAChE,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,4CAA4C;AAC5C,EAAE;AACF,oBAAoB;AACpB,EAAE;AACF,gFAAgF;AAChF,qDAAqD;AACrD,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,gBAAgB;AAEhB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAYrC,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAgB,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,QAAQ,EAAkB,MAAM,sBAAsB,CAAC;AAiDhE,+EAA+E;AAC/E,4EAA4E;AAC5E,wBAAwB;AACxB,MAAM,SAAS,GAAG;IACjB,wBAAwB;IACxB,4BAA4B;IAC5B,oBAAoB;IACpB,0BAA0B;IAC1B,gBAAgB;CACiC,CAAC;AAKnD,MAAM,eAAe,GAAmB,IAAI,CAAC;AAE7C,SAAS,IAAI,CACZ,GAAc,EACd,MAAc,EACd,IAAwC,EACxC,QAAgB;IAEhB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,KAAK,MAAM,gBAAgB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,GAAc;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,8BAA8B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAmB;IAC5C,MAAM,SAAS,GAAI,IAAmC,CAAC,YAAY,CAAC;IACpE,IAAI,SAAS,IAAI,OAAQ,SAAkC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnF,OAAO,SAA6B,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAoC;IAChE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACvC,OAAO,CAAC,GAAG,EAAE,EAAE;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC;QACxF,OAAO;YACN,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,WAAW,CACxB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CACxE;YACD,QAAQ,EAAE;gBACT,IAAI,EAAE,GAAG,CAAC,gBAAgB;gBAC1B,aAAa,EAAE,GAAG,CAAC,0BAA0B;gBAC7C,OAAO,EAAE,GAAG,CAAC,mBAAmB;gBAChC,WAAW,EAAE,GAAG,CAAC,uBAAuB;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC;YAChF,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,wBAAwB,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,OAAO,CAAC;YAC5F,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC;SACpC,CAAC;IACH,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,wBAAwB,OAAO,CAAC,UAAU,gBAAgB,GAAG,wBAAwB,CACrF,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAEpE,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,GAAc,EACd,OAAoC;IAEpC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;IAElD,IAAI,MAA+B,CAAC;IACpC,IAAI,eAA6C,CAAC;IAElD,SAAS,OAAO;QACf,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAEpD,wEAAwE;QACxE,yEAAyE;QACzE,yCAAyC;QACzC,MAAM,MAAM,GAAG;YACd,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;YAClC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI;YACxC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,QAAQ;YACnC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CACb,2BAA2B;gBAC1B,QAAQ,MAAM,CAAC,IAAI,GAAG;gBACtB,QAAQ,MAAM,CAAC,IAAI,GAAG;gBACtB,WAAW,MAAM,CAAC,OAAO,GAAG;gBAC5B,WAAW,MAAM,CAAC,OAAO,EAAE;gBAC3B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5D,CAAC;QACH,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO;QACN,OAAO;QACP,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,IAAI,QAAQ;QAC5C,QAAQ,EAAE,GAAG,EAAE;YACd,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;YAC3C,OAAO;gBACN,IAAI;gBACJ,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI;gBAClD,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,yDAAyD;gBAC3F,WAAW,EACV,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;oBACzB,yFAAyF,IAAI,GAAG;aACjG,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC;QAC9C,eAAe,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,eAAe,EAAE,CAAC;gBACtB,eAAe,GAAG,OAAO,EAAE,CAAC,YAAY,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvE,CAAC;YACD,OAAO,eAAe,CAAC;QACxB,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/providers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACN,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,MAAM,6BAA6B,CAAC"}

package/dist/providers/index.js

@@ -1,6 +1,4 @@
-// Configurable provider wiring — env-driven provider selection over a
-// caller-supplied registry, `selva.config.js` override hook, lazy memoized
-// instantiation. The app keeps its own getters (services, error reporting) as
-// its composition root; this is the reusable core underneath.
+// Configurable provider wiring — env-driven selection over a caller-supplied
+// registry, with a `selva.config.js` override hook.
 export { createSelvaProviders } from './create-selva-providers.js';
 //# sourceMappingURL=index.js.map

package/dist/providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,2EAA2E;AAC3E,8EAA8E;AAC9E,8DAA8D;AAE9D,OAAO,EACN,oBAAoB,EAKpB,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,oDAAoD;AAEpD,OAAO,EACN,oBAAoB,EAKpB,MAAM,6BAA6B,CAAC"}

package/dist/tokens/token-codec.d.ts

@@ -2,52 +2,49 @@
  * HMAC token codec — the primitive behind capability-URL tokens (share links,
  * invites, and anything shaped like them).
  *
- * ## Two-part design
- *
- * Each minted token involves TWO secrets:
+ * ## Format
+ *   raw  = `<prefix><base64url(32 random bytes)>`
+ *   hash = base64url( HMAC-SHA256(secret, raw) )
  *
- *   1. **Per-token secret** — generated in `mintRawToken()` from 32 random
- *      bytes, returned to the caller exactly once at mint time. Different
- *      every token. This is what end-users carry in `?token=…`.
+ * ## Two secrets per token
  *
- *   2. **Instance-wide HMAC secret** (`config.secret`) — used to hash tokens
- *      for storage. The store sees only `HMAC-SHA256(secret, token)`. A
- *      DB-only leak therefore can't be replayed: the attacker would need the
- *      secret too, and it lives in env, not the database.
+ *   1. **Per-token entropy** — the 32 random bytes in `mintRawToken()`, handed
+ *      back exactly once at mint time and never stored. This is what end-users
+ *      carry in `?token=…`.
  *
- * ## Format
- *   raw    = `<prefix><base64url(32 random bytes)>`
- *   hash   = base64url( HMAC-SHA256(secret, raw) )
+ *   2. **Instance-wide HMAC secret** (`config.secret`) — hashes tokens for
+ *      storage, so the store holds only `HMAC-SHA256(secret, raw)`. A DB-only
+ *      leak can't be replayed: the attacker also needs the secret, and it lives
+ *      in env, not the database.
  *
- * The resolution path hashes the supplied token with the same secret and looks
- * up by exact match against the stored hash.
+ * Resolution hashes the supplied token with the same secret and looks up an
+ * exact match against the stored hash.
  *
- * Rotating the secret invalidates every token minted under it — give each
- * token family (each prefix) its own secret so they rotate independently.
+ * Rotating the secret invalidates every token minted under it — give each token
+ * family (each prefix) its own secret so they rotate independently.
  */
 /**
- * Minimum accepted secret length. Matches the "random ≥32-byte string"
- * guidance everywhere these secrets are documented; enforced here so a
- * short dev secret can't reach production silently (presence-only checks
- * let a 4-char secret through).
+ * Minimum accepted secret length, matching the "random ≥32-byte string"
+ * guidance these secrets are documented under. Enforced here because a
+ * presence-only check lets a 4-char dev secret reach production silently.
  */
 export declare const MIN_TOKEN_SECRET_LENGTH = 32;
 export interface TokenCodecConfig {
     /** Token-family marker prepended to every raw token, e.g. `share_`. */
     prefix: string;
-    /** Instance-wide HMAC secret. Must be at least 32 characters. */
+    /** Instance-wide HMAC secret; one per token family so they rotate apart. */
     secret: string;
 }
 export interface TokenCodec {
-    /** Mint: generate a fresh raw token. Show to the caller exactly once. */
+    /** Fresh raw token. Never persisted — show it to the user exactly once. */
     mintRawToken(): string;
-    /** Hash a raw token to its store-side representation. */
+    /** Raw token to the hash stored in its place. */
     hashToken(raw: string): string;
-    /** Constant-time equality for two stored hashes. */
+    /** Constant-time compare, so a mismatch leaks no position information. */
     hashesEqual(a: string, b: string): boolean;
-    /** Recognize this codec's token format on inbound requests. */
+    /** Prefix check — recognizes this family's tokens on inbound requests. */
     looksLikeToken(value: string): boolean;
-    /** The configured prefix, for callers that build URLs or error copy. */
+    /** For callers building URLs or error copy. */
     readonly prefix: string;
 }
 export declare function createTokenCodec(config: TokenCodecConfig): TokenCodec;

package/dist/tokens/token-codec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-codec.d.ts","sourceRoot":"","sources":["../../src/tokens/token-codec.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C,MAAM,WAAW,gBAAgB;IAChC,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IAC1B,yEAAyE;IACzE,YAAY,IAAI,MAAM,CAAC;IACvB,yDAAyD;IACzD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,oDAAoD;IACpD,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3C,+DAA+D;IAC/D,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CA2BrE"}
+{"version":3,"file":"token-codec.d.ts","sourceRoot":"","sources":["../../src/tokens/token-codec.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C,MAAM,WAAW,gBAAgB;IAChC,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IAC1B,2EAA2E;IAC3E,YAAY,IAAI,MAAM,CAAC;IACvB,iDAAiD;IACjD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,0EAA0E;IAC1E,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3C,0EAA0E;IAC1E,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CA2BrE"}

package/dist/tokens/token-codec.js

@@ -3,34 +3,31 @@ import { randomBytes, createHmac, timingSafeEqual } from 'node:crypto';
  * HMAC token codec — the primitive behind capability-URL tokens (share links,
  * invites, and anything shaped like them).
  *
- * ## Two-part design
- *
- * Each minted token involves TWO secrets:
+ * ## Format
+ *   raw  = `<prefix><base64url(32 random bytes)>`
+ *   hash = base64url( HMAC-SHA256(secret, raw) )
  *
- *   1. **Per-token secret** — generated in `mintRawToken()` from 32 random
- *      bytes, returned to the caller exactly once at mint time. Different
- *      every token. This is what end-users carry in `?token=…`.
+ * ## Two secrets per token
  *
- *   2. **Instance-wide HMAC secret** (`config.secret`) — used to hash tokens
- *      for storage. The store sees only `HMAC-SHA256(secret, token)`. A
- *      DB-only leak therefore can't be replayed: the attacker would need the
- *      secret too, and it lives in env, not the database.
+ *   1. **Per-token entropy** — the 32 random bytes in `mintRawToken()`, handed
+ *      back exactly once at mint time and never stored. This is what end-users
+ *      carry in `?token=…`.
  *
- * ## Format
- *   raw    = `<prefix><base64url(32 random bytes)>`
- *   hash   = base64url( HMAC-SHA256(secret, raw) )
+ *   2. **Instance-wide HMAC secret** (`config.secret`) — hashes tokens for
+ *      storage, so the store holds only `HMAC-SHA256(secret, raw)`. A DB-only
+ *      leak can't be replayed: the attacker also needs the secret, and it lives
+ *      in env, not the database.
  *
- * The resolution path hashes the supplied token with the same secret and looks
- * up by exact match against the stored hash.
+ * Resolution hashes the supplied token with the same secret and looks up an
+ * exact match against the stored hash.
  *
- * Rotating the secret invalidates every token minted under it — give each
- * token family (each prefix) its own secret so they rotate independently.
+ * Rotating the secret invalidates every token minted under it — give each token
+ * family (each prefix) its own secret so they rotate independently.
  */
 /**
- * Minimum accepted secret length. Matches the "random ≥32-byte string"
- * guidance everywhere these secrets are documented; enforced here so a
- * short dev secret can't reach production silently (presence-only checks
- * let a 4-char secret through).
+ * Minimum accepted secret length, matching the "random ≥32-byte string"
+ * guidance these secrets are documented under. Enforced here because a
+ * presence-only check lets a 4-char dev secret reach production silently.
  */
 export const MIN_TOKEN_SECRET_LENGTH = 32;
 export function createTokenCodec(config) {

package/dist/tokens/token-codec.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-codec.js","sourceRoot":"","sources":["../../src/tokens/token-codec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAsB1C,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACxD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACd,eAAe,MAAM,6BAA6B,uBAAuB,cAAc;YACtF,QAAQ,MAAM,CAAC,MAAM,+CAA+C,CACrE,CAAC;IACH,CAAC;IAED,OAAO;QACN,MAAM;QACN,YAAY;YACX,OAAO,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvD,CAAC;QACD,SAAS,CAAC,GAAW;YACpB,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrE,CAAC;QACD,WAAW,CAAC,CAAS,EAAE,CAAS;YAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1C,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,cAAc,CAAC,KAAa;YAC3B,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;KACD,CAAC;AACH,CAAC"}
+{"version":3,"file":"token-codec.js","sourceRoot":"","sources":["../../src/tokens/token-codec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAsB1C,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACxD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACd,eAAe,MAAM,6BAA6B,uBAAuB,cAAc;YACtF,QAAQ,MAAM,CAAC,MAAM,+CAA+C,CACrE,CAAC;IACH,CAAC;IAED,OAAO;QACN,MAAM;QACN,YAAY;YACX,OAAO,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvD,CAAC;QACD,SAAS,CAAC,GAAW;YACpB,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrE,CAAC;QACD,WAAW,CAAC,CAAS,EAAE,CAAS;YAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1C,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,cAAc,CAAC,KAAa;YAC3B,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;KACD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@selvajs/server",
-  "version": "1.0.0-beta.8",
+  "version": "1.0.0",
   "description": "Transport-agnostic server building blocks for apps built on the Selva engine (limits, rate limiting, SSRF guard, remote-definition fetch, definition service + render loader); the solve core lives in @selvajs/solve/server",
   "license": "MIT",
   "author": "VektorNode",
@@ -22,7 +22,7 @@
     "directory": "packages/server"
   },
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=24.0.0"
   },
   "type": "module",
   "exports": {
@@ -79,9 +79,9 @@
     "!**/*.spec.*"
   ],
   "dependencies": {
-    "@selvajs/compute": "^4.0.0-beta.5",
-    "@selvajs/platform": "^0.16.1-beta.2",
-    "@selvajs/schemas": "^5.0.0-beta.2"
+    "@selvajs/compute": "^4.0.0",
+    "@selvajs/platform": "^0.17.0",
+    "@selvajs/schemas": "^5.0.0"
   },
   "peerDependencies": {
     "@sentry/node": ">=8",
@@ -99,7 +99,7 @@
     "@types/node": "^26.1.2",
     "typescript": "~6.0.3",
     "vitest": "^4.1.10",
-    "@selvajs/config": "0.0.3"
+    "@selvajs/config": "0.0.4"
   },
   "scripts": {
     "build": "tsc",