@timber-js/app 0.1.44 → 0.1.46

package/dist/server/logger.d.ts

@@ -30,6 +30,8 @@ export declare function logRequestCompleted(data: {
     path: string;
     status: number;
     durationMs: number;
+    /** Number of concurrent in-flight requests (including this one) at completion time. */
+    concurrency?: number;
 }): void;
 /** Log request received. Level: debug. */
 export declare function logRequestReceived(data: {
@@ -42,6 +44,8 @@ export declare function logSlowRequest(data: {
     path: string;
     durationMs: number;
     threshold: number;
+    /** Number of concurrent in-flight requests at the time the slow request completed. */
+    concurrency?: number;
 }): void;
 /** Log middleware short-circuit. Level: debug. */
 export declare function logMiddlewareShortCircuit(data: {

package/dist/server/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/server/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,6FAA6F;AAC7F,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1D;AAMD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAEpD;AAED;;;GAGG;AACH,wBAAgB,SAAS,IAAI,YAAY,GAAG,IAAI,CAE/C;AAsBD,4CAA4C;AAC5C,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAEP;AAED,0CAA0C;AAC1C,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAE/E;AAED,+CAA+C;AAC/C,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CAEP;AAED,kDAAkD;AAClD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,IAAI,CAEP;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAM/F;AAED,sDAAsD;AACtD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAQ3F;AAED,iDAAiD;AACjD,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAM5D;AAED,sEAAsE;AACtE,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED,sDAAsD;AACtD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEnE;AAED,6DAA6D;AAC7D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEpF;AAED,oCAAoC;AACpC,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAE7D"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/server/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,6FAA6F;AAC7F,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1D;AAMD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAEpD;AAED;;;GAGG;AACH,wBAAgB,SAAS,IAAI,YAAY,GAAG,IAAI,CAE/C;AAsBD,4CAA4C;AAC5C,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,IAAI,CAEP;AAED,0CAA0C;AAC1C,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAE/E;AAED,+CAA+C;AAC/C,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,IAAI,CAEP;AAED,kDAAkD;AAClD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,IAAI,CAEP;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAM/F;AAED,sDAAsD;AACtD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAQ3F;AAED,iDAAiD;AACjD,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAM5D;AAED,sEAAsE;AACtE,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED,sDAAsD;AACtD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEnE;AAED,6DAA6D;AAC7D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEpF;AAED,oCAAoC;AACpC,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAE7D"}

package/dist/server/pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/server/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAY,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAoC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAItD,sEAAsE;AACtE,MAAM,WAAW,UAAU;IACzB,mDAAmD;IACnD,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,uDAAuD;IACvD,UAAU,CAAC,EAAE,YAAY,CAAC;CAC3B;AAED,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;AAEnE,sEAAsE;AACtE,MAAM,MAAM,oBAAoB,GAAG,CACjC,QAAQ,EAAE,MAAM,KACb,OAAO,oBAAoB,EAAE,kBAAkB,GAAG,IAAI,CAAC;AAE5D,iEAAiE;AACjE,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,6DAA6D;AAC7D,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,UAAU,EACjB,eAAe,EAAE,OAAO,EACxB,oBAAoB,EAAE,OAAO,EAC7B,YAAY,CAAC,EAAE,mBAAmB,KAC/B,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,+DAA+D;AAC/D,MAAM,MAAM,iBAAiB,GAAG,CAC9B,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,OAAO,EACZ,eAAe,EAAE,OAAO,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAI1B,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,OAAO,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IACtD,qEAAqE;IACrE,UAAU,EAAE,YAAY,CAAC;IACzB,iGAAiG;IACjG,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;IAC1C,kEAAkE;IAClE,MAAM,EAAE,aAAa,CAAC;IACtB,kEAAkE;IAClE,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzF,kFAAkF;IAClF,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,yGAAyG;IACzG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,2BAA2B,EAAE,mBAAmB,EAAE,CAAC;IACjF;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,CACpB,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,OAAO,EACZ,eAAe,EAAE,OAAO,KACrB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACnC;AAID;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAuU1F"}
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/server/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAY,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAoC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAItD,sEAAsE;AACtE,MAAM,WAAW,UAAU;IACzB,mDAAmD;IACnD,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,uDAAuD;IACvD,UAAU,CAAC,EAAE,YAAY,CAAC;CAC3B;AAED,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;AAEnE,sEAAsE;AACtE,MAAM,MAAM,oBAAoB,GAAG,CACjC,QAAQ,EAAE,MAAM,KACb,OAAO,oBAAoB,EAAE,kBAAkB,GAAG,IAAI,CAAC;AAE5D,iEAAiE;AACjE,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,6DAA6D;AAC7D,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,UAAU,EACjB,eAAe,EAAE,OAAO,EACxB,oBAAoB,EAAE,OAAO,EAC7B,YAAY,CAAC,EAAE,mBAAmB,KAC/B,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,+DAA+D;AAC/D,MAAM,MAAM,iBAAiB,GAAG,CAC9B,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,OAAO,EACZ,eAAe,EAAE,OAAO,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAI1B,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,OAAO,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IACtD,qEAAqE;IACrE,UAAU,EAAE,YAAY,CAAC;IACzB,iGAAiG;IACjG,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;IAC1C,kEAAkE;IAClE,MAAM,EAAE,aAAa,CAAC;IACtB,kEAAkE;IAClE,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzF,kFAAkF;IAClF,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,yGAAyG;IACzG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,2BAA2B,EAAE,mBAAmB,EAAE,CAAC;IACjF;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,CACpB,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,OAAO,EACZ,eAAe,EAAE,OAAO,KACrB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACnC;AAID;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA+V1F"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timber-js/app",
-  "version": "0.1.44",
+  "version": "0.1.46",
   "description": "Vite-native React framework for Cloudflare Workers — correct HTTP semantics, real status codes, pages that work without JavaScript",
   "keywords": [
     "cloudflare-workers",

package/src/adapters/compress-module.ts

@@ -4,7 +4,9 @@
 // written to the build output during adapter buildOutput(). It's imported
 // by the Nitro entry and preview server at runtime.
 //
-// Uses CompressionStream (Web API) for gzip and node:zlib for brotli.
+// Uses CompressionStream (Web API) for gzip. Brotli is left to CDNs/reverse
+// proxies — at streaming quality levels its ratio advantage is marginal and
+// node:zlib buffers output internally, breaking streaming.
 // Cloudflare Workers don't need this — the edge auto-compresses.
 //
 // See design/25-production-deployments.md.
@@ -20,10 +22,9 @@
 export function generateCompressModule(): string {
   return `// Generated by @timber-js/app — response compression for self-hosted deployments.
 // Do not edit — this file is regenerated on each build.
-// Uses CompressionStream (Web API) for gzip, node:zlib for brotli.
-
-import { createBrotliCompress, constants as zlibConstants } from 'node:zlib';
-import { Readable } from 'node:stream';
+// Uses CompressionStream (Web API) for gzip. Brotli is left to CDNs/reverse
+// proxies — at streaming quality levels its ratio advantage is marginal and
+// node:zlib buffers output internally, breaking streaming.
 
 const COMPRESSIBLE_TYPES = new Set([
   'text/html', 'text/css', 'text/plain', 'text/xml', 'text/javascript',
@@ -37,7 +38,10 @@ const NO_COMPRESS_STATUSES = new Set([204, 304]);
 function negotiateEncoding(acceptEncoding) {
   if (!acceptEncoding) return null;
   const tokens = acceptEncoding.split(',').map(s => s.split(';')[0].trim().toLowerCase());
-  if (tokens.includes('br')) return 'br';
+  // Brotli (br) is intentionally not handled at the application level.
+  // At streaming-friendly quality levels (0-4), brotli's ratio advantage over
+  // gzip is marginal, and node:zlib's brotli transform buffers output internally.
+  // CDNs/reverse proxies apply brotli at higher quality levels on cached responses.
   if (tokens.includes('gzip')) return 'gzip';
   return null;
 }
@@ -57,36 +61,12 @@ function compressWithGzip(body) {
   return body.pipeThrough(new CompressionStream('gzip'));
 }
 
-function compressWithBrotli(body) {
-  const brotli = createBrotliCompress({
-    params: { [zlibConstants.BROTLI_PARAM_QUALITY]: 4 },
-  });
-  const reader = body.getReader();
-  const pump = async () => {
-    try {
-      while (true) {
-        const { done, value } = await reader.read();
-        if (done) { brotli.end(); return; }
-        if (!brotli.write(value)) {
-          await new Promise(resolve => brotli.once('drain', resolve));
-        }
-      }
-    } catch (err) {
-      brotli.destroy(err instanceof Error ? err : new Error(String(err)));
-    }
-  };
-  pump();
-  return Readable.toWeb(brotli);
-}
-
 export function compressResponse(request, response) {
   if (!shouldCompress(response)) return response;
   const acceptEncoding = request.headers.get('Accept-Encoding') || '';
   const encoding = negotiateEncoding(acceptEncoding);
   if (!encoding) return response;
-  const compressedBody = encoding === 'br'
-    ? compressWithBrotli(response.body)
-    : compressWithGzip(response.body);
+  const compressedBody = compressWithGzip(response.body);
   const headers = new Headers(response.headers);
   headers.set('Content-Encoding', encoding);
   headers.delete('Content-Length');

package/src/server/compress.ts

@@ -1,14 +1,13 @@
 // Response compression for self-hosted deployments (dev server, Nitro preview).
 //
-// Uses CompressionStream (Web Platform API) for gzip and node:zlib for
-// brotli (CompressionStream doesn't support brotli). Cloudflare Workers
-// auto-compress at the edge — this module is only used on Node.js/Bun.
+// Uses CompressionStream (Web Platform API) for gzip. Brotli is intentionally
+// left to CDNs and reverse proxies — at streaming-friendly quality levels its
+// ratio advantage is marginal, and node:zlib's brotli transform buffers output
+// internally, breaking streaming. Cloudflare Workers auto-compress at the edge —
+// this module is only used on Node.js/Bun.
 //
 // See design/25-production-deployments.md.
 
-import { createBrotliCompress, constants as zlibConstants } from 'node:zlib';
-import { Readable } from 'node:stream';
-
 // ─── Constants ────────────────────────────────────────────────────────────
 
 /**
@@ -41,21 +40,25 @@ const NO_COMPRESS_STATUSES = new Set([204, 304]);
 
 /**
  * Parse Accept-Encoding and return the best supported encoding.
- * Prefers brotli (br) over gzip. Returns null if no supported encoding.
+ * Returns 'gzip' if the client accepts it, null otherwise.
+ *
+ * Brotli (br) is intentionally not handled at the application level.
+ * At the streaming-friendly quality levels (0–4), brotli's compression
+ * ratio advantage over gzip is marginal, and node:zlib's brotli transform
+ * buffers output internally — turning smooth streaming responses into
+ * large infrequent bursts. Brotli's real wins come from offline/static
+ * compression at higher quality levels (5–11), which CDNs and reverse
+ * proxies (Cloudflare, nginx, Caddy) apply on cached responses.
  *
- * We always prefer brotli regardless of quality values because:
- * 1. Brotli achieves better compression ratios than gzip
- * 2. All modern browsers that send br in Accept-Encoding support it well
- * 3. Respecting q-values for br vs gzip adds complexity with no real benefit
+ * See design/25-production-deployments.md.
  */
-export function negotiateEncoding(acceptEncoding: string): 'br' | 'gzip' | null {
+export function negotiateEncoding(acceptEncoding: string): 'gzip' | null {
   if (!acceptEncoding) return null;
 
   // Parse tokens from the Accept-Encoding header (ignore quality values).
   // e.g. "gzip;q=1.0, br;q=0.8, deflate" → ['gzip', 'br', 'deflate']
   const tokens = acceptEncoding.split(',').map((s) => s.split(';')[0].trim().toLowerCase());
 
-  if (tokens.includes('br')) return 'br';
   if (tokens.includes('gzip')) return 'gzip';
   return null;
 }
@@ -112,10 +115,8 @@ export function compressResponse(request: Request, response: Response): Response
   const encoding = negotiateEncoding(acceptEncoding);
   if (!encoding) return response;
 
-  // Compress the body stream
-  const compressedBody = encoding === 'br'
-    ? compressWithBrotli(response.body!)
-    : compressWithGzip(response.body!);
+  // Compress the body stream with gzip via the Web Platform CompressionStream API.
+  const compressedBody = compressWithGzip(response.body!);
 
   // Build new headers: copy originals, add compression headers, remove Content-Length
   // (compressed size is unknown until streaming completes).
@@ -153,48 +154,3 @@ function compressWithGzip(body: ReadableStream<Uint8Array>): ReadableStream<Uint
   return body.pipeThrough(compressionStream as unknown as TransformStream<Uint8Array, Uint8Array>);
 }
 
-// ─── Brotli (node:zlib) ──────────────────────────────────────────────────
-
-/**
- * Compress a ReadableStream with brotli using node:zlib.
- *
- * CompressionStream doesn't support brotli — it only handles gzip and deflate.
- * We use node:zlib's createBrotliCompress() and bridge between Web streams
- * and Node streams.
- */
-function compressWithBrotli(body: ReadableStream<Uint8Array>): ReadableStream<Uint8Array> {
-  const brotli = createBrotliCompress({
-    params: {
-      // Quality 4 balances compression ratio and CPU time for streaming.
-      // Default (11) is too slow for real-time responses.
-      [zlibConstants.BROTLI_PARAM_QUALITY]: 4,
-    },
-  });
-
-  // Pipe the Web ReadableStream into the Node brotli transform.
-  const reader = body.getReader();
-
-  // Pump chunks from the Web ReadableStream into the Node transform.
-  const pump = async (): Promise<void> => {
-    try {
-      while (true) {
-        const { done, value } = await reader.read();
-        if (done) {
-          brotli.end();
-          return;
-        }
-        // Write to brotli, wait for drain if buffer is full
-        if (!brotli.write(value)) {
-          await new Promise<void>((resolve) => brotli.once('drain', resolve));
-        }
-      }
-    } catch (err) {
-      brotli.destroy(err instanceof Error ? err : new Error(String(err)));
-    }
-  };
-  // Start pumping (fire and forget — errors propagate via brotli stream)
-  pump();
-
-  // Convert the Node readable (brotli output) to a Web ReadableStream.
-  return Readable.toWeb(brotli) as ReadableStream<Uint8Array>;
-}

package/src/server/logger.ts

@@ -67,6 +67,8 @@ export function logRequestCompleted(data: {
   path: string;
   status: number;
   durationMs: number;
+  /** Number of concurrent in-flight requests (including this one) at completion time. */
+  concurrency?: number;
 }): void {
   _logger?.info('request completed', withTraceContext(data));
 }
@@ -82,6 +84,8 @@ export function logSlowRequest(data: {
   path: string;
   durationMs: number;
   threshold: number;
+  /** Number of concurrent in-flight requests at the time the slow request completed. */
+  concurrency?: number;
 }): void {
   _logger?.warn('slow request exceeded threshold', withTraceContext(data));
 }

package/src/server/pipeline.ts

@@ -173,11 +173,16 @@ export function createPipeline(config: PipelineConfig): (req: Request) => Promis
     onPipelineError,
   } = config;
 
+  // Concurrent request counter — tracks how many requests are in-flight.
+  // Logged with each request for diagnosing resource contention.
+  let activeRequests = 0;
+
   return async (req: Request): Promise<Response> => {
     const url = new URL(req.url);
     const method = req.method;
     const path = url.pathname;
     const startTime = performance.now();
+    activeRequests++;
 
     // Establish per-request trace ID scope (design/17-logging.md §"trace_id is Always Set").
     // This runs before runWithRequestContext so traceId() is available from the
@@ -215,9 +220,9 @@ export function createPipeline(config: PipelineConfig): (req: Request) => Promis
               // DevSpanProcessor reads this for tree/summary output.
               await setSpanAttribute('http.response.status_code', result.status);
 
-              // Append Server-Timing header in dev mode.
-              // At this point, pre-flush phases (proxy, middleware, render)
-              // have completed and their timing entries are collected.
+              // Append Server-Timing header.
+              // In dev mode: detailed per-phase breakdown (proxy, middleware, render).
+              // In production: single total duration — safe to expose, no phase names.
               // Response.redirect() creates immutable headers, so we must
               // ensure mutability before writing Server-Timing.
               if (enableServerTiming) {
@@ -226,6 +231,13 @@ export function createPipeline(config: PipelineConfig): (req: Request) => Promis
                   result = ensureMutableResponse(result);
                   result.headers.set('Server-Timing', serverTiming);
                 }
+              } else {
+                // Production: emit total request duration only.
+                // No phase breakdown — prevents information disclosure
+                // while giving browser DevTools useful timing data.
+                const totalMs = Math.round(performance.now() - startTime);
+                result = ensureMutableResponse(result);
+                result.headers.set('Server-Timing', `total;dur=${totalMs}`);
               }
 
               return result;
@@ -235,10 +247,12 @@ export function createPipeline(config: PipelineConfig): (req: Request) => Promis
           // Post-span: structured production logging
           const durationMs = Math.round(performance.now() - startTime);
           const status = response.status;
-          logRequestCompleted({ method, path, status, durationMs });
+          const concurrency = activeRequests;
+          activeRequests--;
+          logRequestCompleted({ method, path, status, durationMs, concurrency });
 
           if (slowRequestMs > 0 && durationMs > slowRequestMs) {
-            logSlowRequest({ method, path, durationMs, threshold: slowRequestMs });
+            logSlowRequest({ method, path, durationMs, threshold: slowRequestMs, concurrency });
           }
 
           return response;
@@ -474,6 +488,16 @@ export function createPipeline(config: PipelineConfig): (req: Request) => Promis
       markResponseFlushed();
       return response;
     } catch (error) {
+      // DenySignal leaked from render (e.g. notFound() in metadata()).
+      // Return the deny status code instead of 500.
+      if (error instanceof DenySignal) {
+        return new Response(null, { status: error.status });
+      }
+      // RedirectSignal leaked from render — honour the redirect.
+      if (error instanceof RedirectSignal) {
+        responseHeaders.set('Location', error.location);
+        return new Response(null, { status: error.status, headers: responseHeaders });
+      }
       logRenderError({ method, path, error });
       await fireOnRequestError(error, req, 'render');
       if (onPipelineError && error instanceof Error) onPipelineError(error, 'render');