@timber-js/app 0.2.0-alpha.1 → 0.2.0-alpha.100

package/src/server/index.ts

@@ -1,129 +1,43 @@
 // @timber-js/app/server — Server-side primitives
 // These are the primary imports for server components, middleware, and access files.
+//
+// Framework-internal pipeline plumbing is in #server-internal (Node package import).
+// Design doc: design/triage/api-naming-spike.md §8.5
 
 export type { AccessContext } from './types';
 export type { MiddlewareContext } from './types';
 export type { RouteContext } from './types';
-export type { Metadata, MetadataRoute } from './types';
+export type { Metadata, MetadataRoute, MetadataHandler, MetadataResult } from './types';
 
-// Request Context — ALS-backed headers(), cookies(), and searchParams()
+// Request Context — ALS-backed accessors (all sync)
+// Prefer defineSearchParams().get() and defineSegmentParams().get() for typed access.
 // Design doc: design/04-authorization.md §"AccessContext does not include cookies or headers"
-// Design doc: design/23-search-params.md §"Server Integration"
-export {
-  headers,
-  cookies,
-  searchParams,
-  setParsedSearchParams,
-  runWithRequestContext,
-  setMutableCookieContext,
-  markResponseFlushed,
-  getSetCookieHeaders,
-  setCookieSecrets,
-} from './request-context';
-export type { ReadonlyHeaders, RequestCookies, CookieOptions } from './request-context';
+export { getHeaders, getSegmentParams } from './request-context';
+export type { ReadonlyHeaders } from './request-context';
+
+// Cookie Context — ALS-backed getCookieJar() escape hatch
+// Design doc: design/29-cookies.md
+export { getCookieJar } from './cookie-context';
+export type { RequestCookies, CookieOptions, SetCookieOptions } from './cookie-context';
 
 // Runtime primitives
 export {
   deny,
-  notFound,
   redirect,
-  permanentRedirect,
   redirectExternal,
   RedirectType,
-  RenderError,
   waitUntil,
-  DenySignal,
-  RedirectSignal,
+  type DenyOptions,
+  type RedirectOptions,
 } from './primitives';
+// RenderError removed from public exports per TIM-724.
+// Use deny({ status: 500, data: ... }) instead. RenderError stays in
+// #server-internal for pipeline catch logic.
 export type { RenderErrorDigest, WaitUntilAdapter } from './primitives';
-export type { JsonSerializable } from './types';
-
-// Pipeline
-export { createPipeline } from './pipeline';
-export type {
-  PipelineConfig,
-  RouteMatch,
-  RouteMatcher,
-  RouteRenderer,
-  EarlyHintsEmitter,
-} from './pipeline';
-
-// Early Hints
-export { collectEarlyHintHeaders, formatLinkHeader } from './early-hints';
-export type { EarlyHint } from './early-hints';
-
-// Early Hints 103 Sender — ALS bridge for platform adapters
-export { runWithEarlyHintsSender, sendEarlyHints103 } from './early-hints-sender';
-export type { EarlyHintsSenderFn } from './early-hints-sender';
-
-// Canonicalization
-export { canonicalize } from './canonicalize';
-export type { CanonicalizeResult } from './canonicalize';
-
-// Proxy
-export { runProxy } from './proxy';
-export type { ProxyFn, ProxyExport } from './proxy';
-
-// Middleware
-export { runMiddleware } from './middleware-runner';
-export type { MiddlewareFn } from './middleware-runner';
-
-// Tree Builder
-export { buildElementTree } from './tree-builder';
-export type {
-  TreeBuilderConfig,
-  TreeBuildResult,
-  LoadedModule,
-  ModuleLoader,
-  AccessGateProps,
-  SlotAccessGateProps,
-  ErrorBoundaryProps,
-} from './tree-builder';
-
-// Access Gates
-export { AccessGate, SlotAccessGate } from './access-gate';
-
-// Status-Code Resolver
-export { resolveStatusFile, resolveSlotDenied } from './status-code-resolver';
-export type {
-  StatusFileResolution,
-  StatusFileKind,
-  StatusFileFormat,
-  SlotDeniedResolution,
-  SlotDeniedKind,
-} from './status-code-resolver';
-
-// Flush Controller
-export { flushResponse } from './flush';
-export type { FlushOptions, FlushResult, RenderFn, RenderResult } from './flush';
+// JsonSerializable moved to @timber-js/app/codec as the single canonical path.
+// Re-export removed per TIM-721.
 
-// CSRF Protection
-export { validateCsrf } from './csrf';
-export type { CsrfConfig, CsrfResult } from './csrf';
-
-// Body Limits
-export { parseBodySize, enforceBodyLimits, DEFAULT_LIMITS } from './body-limits';
-export type { BodyLimitsConfig, BodyLimitResult, BodyKind } from './body-limits';
-
-// Metadata
-export {
-  resolveMetadata,
-  resolveTitle,
-  resolveMetadataUrls,
-  renderMetadataToElements,
-} from './metadata';
-export type { SegmentMetadataEntry, ResolveMetadataOptions, HeadElement } from './metadata';
-
-// Metadata Routes
-export {
-  classifyMetadataRoute,
-  getMetadataRouteServePath,
-  getMetadataRouteAutoLink,
-  METADATA_ROUTE_CONVENTIONS,
-} from './metadata-routes';
-export type { MetadataRouteInfo, MetadataRouteType } from './metadata-routes';
-
-// Server Actions
+// Server Actions — user-facing action client and validation
 export { createActionClient, ActionError, validated } from './action-client';
 export type {
   ActionResult,
@@ -136,88 +50,21 @@ export type {
   ValidationErrors,
 } from './action-client';
 
-// FormData Preprocessing
-export { parseFormData, coerce } from './form-data';
+// FormData Preprocessing — internal only, not part of public API.
+// Schema libraries (Zod z.coerce.*, Valibot v.transform(), ArkType morphs)
+// handle form coercion. Kept for action-client/action-handler internals.
 
 // Form Flash (no-JS error round-trip)
 export { getFormFlash } from './form-flash';
 export type { FormFlashData } from './form-flash';
 
-// Revalidation
-export {
-  revalidatePath,
-  revalidateTag,
-  executeAction,
-  buildNoJsResponse,
-  isRscActionRequest,
-} from './actions';
-export type {
-  RevalidateRenderer,
-  RevalidationState,
-  ActionHandlerConfig,
-  ActionHandlerResult,
-} from './actions';
+// Revalidation — user-facing revalidation APIs
+export { revalidatePath, revalidateTag } from './actions';
 
-// Tracing — per-request trace ID via ALS
+// Tracing — per-request trace ID via ALS (user-facing accessors)
 // Design doc: design/17-logging.md §"trace_id is Always Set"
-export {
-  traceId,
-  spanId,
-  generateTraceId,
-  runWithTraceId,
-  replaceTraceId,
-  withSpan,
-  addSpanEvent,
-} from './tracing';
-export type { TraceStore } from './tracing';
-
-// Logger — structured logging
-// Design doc: design/17-logging.md §"Production Logging"
-export { setLogger, getLogger } from './logger';
-export {
-  logRequestCompleted,
-  logRequestReceived,
-  logSlowRequest,
-  logMiddlewareShortCircuit,
-  logMiddlewareError,
-  logRenderError,
-  logProxyError,
-  logWaitUntilUnsupported,
-  logWaitUntilRejected,
-  logSwrRefetchFailed,
-  logCacheMiss,
-} from './logger';
-export type { TimberLogger } from './logger';
-
-// Instrumentation — instrumentation.ts file convention
-// Design doc: design/17-logging.md §"instrumentation.ts"
-export { loadInstrumentation, callOnRequestError, hasOnRequestError } from './instrumentation';
-export type {
-  InstrumentationOnRequestError,
-  InstrumentationRequestInfo,
-  InstrumentationErrorContext,
-} from './instrumentation';
-
-// Dev Warnings — dev-mode misuse detection
-// Design doc: design/21-dev-server.md §"Dev-Mode Warnings", design/11-platform.md §"Dev Mode"
-export {
-  warnSuspenseWrappingChildren,
-  warnDenyInSuspense,
-  warnRedirectInSuspense,
-  warnRedirectInAccess,
-  warnStaticRequestApi,
-  warnCacheRequestProps,
-  warnSlowSlotWithoutSuspense,
-  setViteServer,
-  WarningId,
-  // Legacy aliases
-  warnDynamicApiInStaticBuild,
-  warnRedirectInSlotAccess,
-  warnDenyAfterFlush,
-} from './dev-warnings';
-export type { DevWarningConfig } from './dev-warnings';
+export { getTraceId, getSpanId, withSpan, addSpanEvent } from './tracing';
 
-// Route Handler — route.ts API endpoints
-// Design doc: design/07-routing.md §"route.ts — API Endpoints"
-export { handleRouteRequest, resolveAllowedMethods } from './route-handler';
-export type { RouteModule, RouteHandler, HttpMethod } from './route-handler';
+// Segment params types — re-exported for convenience.
+// defineSegmentParams itself lives at @timber-js/app/segment-params.
+export type { ParamsDefinition, InferParamField, ParamField } from '../segment-params/define.js';

package/src/server/internal.ts

@@ -0,0 +1,176 @@
+// #server-internal — Framework-internal server exports
+//
+// This module is a Node package import (#server-internal in package.json
+// "imports" field). It is only resolvable from within @timber-js/app —
+// external consumers cannot import it.
+//
+// These exports are consumed by entry modules (rsc-entry, ssr-entry),
+// adapters, dev server plugins, and build plugins. They are NOT part of
+// the user-facing API and should not appear in documentation or autocomplete
+// for application developers.
+//
+// Design doc: design/triage/api-naming-spike.md §8.5
+
+// ── Request Context internals ────────────────────────────────────────────
+export {
+  getSearchParams,
+  getSegmentParams,
+  getHeader,
+  setSegmentParams,
+  runWithRequestContext,
+  setMutableCookieContext,
+  markResponseFlushed,
+} from './request-context.js';
+export { getCookie, getSetCookieHeaders } from './cookie-context.js';
+
+// ── Form-data coercion (internal) ────────────────────────────────────────
+export { coerce } from './form-data.js';
+
+// ── Signal classes (instanceof targets for pipeline catch logic) ──────────
+export { DenySignal, RedirectSignal, RenderError } from './primitives.js';
+export type { RenderErrorDigest } from './primitives.js';
+
+// ── Pipeline ─────────────────────────────────────────────────────────────
+export { createPipeline } from './pipeline.js';
+export type {
+  PipelineConfig,
+  RouteMatch,
+  RouteMatcher,
+  RouteRenderer,
+  EarlyHintsEmitter,
+} from './pipeline.js';
+
+// ── Early Hints ──────────────────────────────────────────────────────────
+export { collectEarlyHintHeaders, formatLinkHeader } from './early-hints.js';
+export type { EarlyHint } from './early-hints.js';
+
+// ── Early Hints 103 Sender — ALS bridge for platform adapters ────────────
+export { runWithEarlyHintsSender, sendEarlyHints103 } from './early-hints-sender.js';
+export type { EarlyHintsSenderFn } from './early-hints-sender.js';
+
+// ── Canonicalization ─────────────────────────────────────────────────────
+export { canonicalize } from './canonicalize.js';
+export type { CanonicalizeResult } from './canonicalize.js';
+
+// ── Proxy ────────────────────────────────────────────────────────────────
+export { runProxy } from './proxy.js';
+export type { ProxyFn, ProxyExport } from './proxy.js';
+
+// ── Middleware ────────────────────────────────────────────────────────────
+export { runMiddleware } from './middleware-runner.js';
+export type { MiddlewareFn } from './middleware-runner.js';
+
+// ── Tree Builder ─────────────────────────────────────────────────────────
+export { buildElementTree } from './tree-builder.js';
+export type {
+  TreeBuilderConfig,
+  TreeBuildResult,
+  LoadedModule,
+  LoadedComponent,
+  ModuleLoader,
+  AccessGateProps,
+  SlotAccessGateProps,
+  ErrorBoundaryProps,
+} from './tree-builder.js';
+
+// ── Access Gates ─────────────────────────────────────────────────────────
+export { AccessGate, SlotAccessGate } from './access-gate.js';
+
+// ── Status-Code Resolver ─────────────────────────────────────────────────
+export { resolveStatusFile, resolveSlotDenied } from './status-code-resolver.js';
+export type {
+  StatusFileResolution,
+  StatusFileKind,
+  StatusFileFormat,
+  SlotDeniedResolution,
+  SlotDeniedKind,
+} from './status-code-resolver.js';
+
+// ── Flush Controller ─────────────────────────────────────────────────────
+export { flushResponse } from './flush.js';
+export type { FlushOptions, FlushResult, RenderFn, RenderResult } from './flush.js';
+
+// ── CSRF Protection ──────────────────────────────────────────────────────
+export { validateCsrf } from './csrf.js';
+export type { CsrfConfig, CsrfResult } from './csrf.js';
+
+// ── Body Limits ──────────────────────────────────────────────────────────
+export { parseBodySize, enforceBodyLimits, DEFAULT_LIMITS } from './body-limits.js';
+export type { BodyLimitsConfig, BodyLimitResult, BodyKind } from './body-limits.js';
+
+// ── Metadata ─────────────────────────────────────────────────────────────
+export {
+  resolveMetadata,
+  resolveTitle,
+  resolveMetadataUrls,
+  renderMetadataToElements,
+} from './metadata.js';
+export type { SegmentMetadataEntry, ResolveMetadataOptions, HeadElement } from './metadata.js';
+
+// ── Metadata Routes ──────────────────────────────────────────────────────
+export {
+  classifyMetadataRoute,
+  getMetadataRouteServePath,
+  getMetadataRouteAutoLink,
+  METADATA_ROUTE_CONVENTIONS,
+} from './metadata-routes.js';
+export type { MetadataRouteInfo, MetadataRouteType } from './metadata-routes.js';
+
+// ── Server Actions (pipeline internals) ──────────────────────────────────
+export { executeAction, buildNoJsResponse, isRscActionRequest } from './actions.js';
+export type {
+  RevalidateRenderer,
+  RevalidationState,
+  ActionHandlerConfig,
+  ActionHandlerResult,
+} from './actions.js';
+
+// ── Tracing internals ────────────────────────────────────────────────────
+export { runWithTraceId, replaceTraceId, generateTraceId } from './tracing.js';
+export type { TraceStore } from './tracing.js';
+
+// ── Logger ───────────────────────────────────────────────────────────────
+export { setLogger, getLogger } from './logger.js';
+export {
+  logRequestCompleted,
+  logRequestReceived,
+  logSlowRequest,
+  logMiddlewareShortCircuit,
+  logMiddlewareError,
+  logRenderError,
+  logProxyError,
+  logWaitUntilUnsupported,
+  logWaitUntilRejected,
+  logSwrRefetchFailed,
+  logCacheMiss,
+} from './logger.js';
+export type { TimberLogger } from './logger.js';
+
+// ── Instrumentation ──────────────────────────────────────────────────────
+export { loadInstrumentation, callOnRequestError, hasOnRequestError } from './instrumentation.js';
+export type {
+  InstrumentationOnRequestError,
+  InstrumentationRequestInfo,
+  InstrumentationErrorContext,
+} from './instrumentation.js';
+
+// ── Dev Warnings ─────────────────────────────────────────────────────────
+export {
+  warnSuspenseWrappingChildren,
+  warnDenyInSuspense,
+  warnRedirectInSuspense,
+  warnRedirectInAccess,
+  warnStaticRequestApi,
+  warnSlowSlotWithoutSuspense,
+  setViteServer,
+  WarningId,
+} from '../dev-tools/warnings.js';
+export type { DevWarningConfig } from '../dev-tools/warnings.js';
+
+// ── Route Handler ────────────────────────────────────────────────────────
+export { handleRouteRequest, resolveAllowedMethods } from './route-handler.js';
+export type { RouteModule, RouteHandler, HttpMethod } from './route-handler.js';
+
+// ── Render Timeout ───────────────────────────────────────────────────────
+export { RenderTimeoutError } from './render-timeout.js';
+export type { RenderTimeout } from './render-timeout.js';

package/src/server/logger.ts

@@ -1,15 +1,16 @@
 /**
  * Logger — structured logging with environment-aware formatting.
  *
- * timber.js does not ship a logger. Users export any object with
- * info/warn/error/debug methods from instrumentation.ts and the framework
- * picks it up. Silent if no logger export is present.
+ * timber.js ships a DefaultLogger that writes human-readable lines to stderr
+ * in production. Users can export a custom logger from instrumentation.ts to
+ * replace it with pino, winston, or any TimberLogger-compatible object.
  *
  * See design/17-logging.md §"Production Logging"
  */
 
 import { getTraceStore } from './tracing.js';
-import { formatSsrError } from './error-formatter.js';
+import { createDefaultLogger } from './default-logger.js';
+import { isDevMode } from './debug.js';
 
 // ─── Logger Interface ─────────────────────────────────────────────────────
 
@@ -23,21 +24,24 @@ export interface TimberLogger {
 
 // ─── Logger Registry ──────────────────────────────────────────────────────
 
-let _logger: TimberLogger | null = null;
+// Initialize with DefaultLogger so production errors are never silent.
+// Replaced when setLogger() is called from instrumentation.ts.
+let _logger: TimberLogger = createDefaultLogger();
 
 /**
  * Set the user-provided logger. Called by the instrumentation loader
- * when it finds a `logger` export in instrumentation.ts.
+ * when it finds a `logger` export in instrumentation.ts. Replaces
+ * the DefaultLogger entirely.
  */
 export function setLogger(logger: TimberLogger): void {
   _logger = logger;
 }
 
 /**
- * Get the current logger, or null if none configured.
- * Framework-internal — used at framework event points to emit structured logs.
+ * Get the current logger. Always non-null — returns DefaultLogger when
+ * no custom logger is configured.
  */
-export function getLogger(): TimberLogger | null {
+export function getLogger(): TimberLogger {
   return _logger;
 }
 
@@ -70,12 +74,12 @@ export function logRequestCompleted(data: {
   /** Number of concurrent in-flight requests (including this one) at completion time. */
   concurrency?: number;
 }): void {
-  _logger?.info('request completed', withTraceContext(data));
+  _logger.info('request completed', withTraceContext(data));
 }
 
 /** Log request received. Level: debug. */
 export function logRequestReceived(data: { method: string; path: string }): void {
-  _logger?.debug('request received', withTraceContext(data));
+  _logger.debug('request received', withTraceContext(data));
 }
 
 /** Log a slow request warning. Level: warn. */
@@ -87,7 +91,7 @@ export function logSlowRequest(data: {
   /** Number of concurrent in-flight requests at the time the slow request completed. */
   concurrency?: number;
 }): void {
-  _logger?.warn('slow request exceeded threshold', withTraceContext(data));
+  _logger.warn('slow request exceeded threshold', withTraceContext(data));
 }
 
 /** Log middleware short-circuit. Level: debug. */
@@ -96,54 +100,82 @@ export function logMiddlewareShortCircuit(data: {
   path: string;
   status: number;
 }): void {
-  _logger?.debug('middleware short-circuited', withTraceContext(data));
+  _logger.debug('middleware short-circuited', withTraceContext(data));
 }
 
 /** Log unhandled error in middleware phase. Level: error. */
 export function logMiddlewareError(data: { method: string; path: string; error: unknown }): void {
-  if (_logger) {
-    _logger.error('unhandled error in middleware phase', withTraceContext(data));
-  } else if (process.env.NODE_ENV !== 'production') {
-    console.error('[timber] middleware error', data.error);
-  }
+  _logger.error('unhandled error in middleware phase', withTraceContext(data));
 }
 
 /** Log unhandled render-phase error. Level: error. */
-export function logRenderError(data: { method: string; path: string; error: unknown }): void {
-  if (_logger) {
-    _logger.error('unhandled render-phase error', withTraceContext(data));
-  } else if (process.env.NODE_ENV !== 'production') {
-    // No logger configured — fall back to console.error in dev with
-    // cleaned-up error messages (vendor paths rewritten, hints added).
-    console.error('[timber] render error:', formatSsrError(data.error));
-  }
+export function logRenderError(data: {
+  method: string;
+  path: string;
+  error: unknown;
+  errorId?: string;
+}): void {
+  _logger.error('unhandled render-phase error', withTraceContext(data));
 }
 
 /** Log proxy.ts uncaught error. Level: error. */
 export function logProxyError(data: { error: unknown }): void {
-  if (_logger) {
-    _logger.error('proxy.ts threw uncaught error', withTraceContext(data));
-  } else if (process.env.NODE_ENV !== 'production') {
-    console.error('[timber] proxy error', data.error);
-  }
+  _logger.error('proxy.ts threw uncaught error', withTraceContext(data));
+}
+
+/** Log unhandled error in server action. Level: error. */
+export function logActionError(data: { method: string; path: string; error: unknown }): void {
+  _logger.error('unhandled server action error', withTraceContext(data));
+}
+
+/** Log unhandled error in route handler. Level: error. */
+export function logRouteError(data: { method: string; path: string; error: unknown }): void {
+  _logger.error('unhandled route handler error', withTraceContext(data));
+}
+
+/** Log SSR streaming error (post-shell). Level: error. */
+export function logStreamingError(data: { error: unknown }): void {
+  _logger.error('SSR streaming error (post-shell)', withTraceContext(data));
 }
 
 /** Log waitUntil() adapter missing (once at startup). Level: warn. */
 export function logWaitUntilUnsupported(): void {
-  _logger?.warn('adapter does not support waitUntil()');
+  _logger.warn('adapter does not support waitUntil()');
 }
 
 /** Log waitUntil() promise rejection. Level: warn. */
 export function logWaitUntilRejected(data: { error: unknown }): void {
-  _logger?.warn('waitUntil() promise rejected', withTraceContext(data));
+  _logger.warn('waitUntil() promise rejected', withTraceContext(data));
 }
 
 /** Log staleWhileRevalidate refetch failure. Level: warn. */
 export function logSwrRefetchFailed(data: { cacheKey: string; error: unknown }): void {
-  _logger?.warn('staleWhileRevalidate refetch failed', withTraceContext(data));
+  _logger.warn('staleWhileRevalidate refetch failed', withTraceContext(data));
 }
 
 /** Log cache miss. Level: debug. */
 export function logCacheMiss(data: { cacheKey: string }): void {
-  _logger?.debug('timber.cache MISS', withTraceContext(data));
+  _logger.debug('timber.cache MISS', withTraceContext(data));
+}
+
+// ─── Swallow Helper ───────────────────────────────────────────────────────
+
+/**
+ * Log an intentionally swallowed error. Provides observability into catch
+ * blocks that are deliberately empty — the error is consumed, never rethrown.
+ *
+ * Default level: `warn` in dev (so the overlay surfaces patterns), `debug`
+ * in production (low noise unless TIMBER_DEBUG is set). Pass `opts.level`
+ * to override.
+ *
+ * **Infallible** — swallow() itself never throws, even if the logger is
+ * broken. A thrown swallow would turn a benign catch into a crash.
+ */
+export function swallow(err: unknown, reason: string, opts?: { level?: 'debug' | 'warn' }): void {
+  try {
+    const level = opts?.level ?? (isDevMode() ? 'warn' : 'debug');
+    _logger[level](`swallowed: ${reason}`, withTraceContext({ error: err }));
+  } catch {
+    // swallow() must never throw.
+  }
 }