@zhin.js/middleware 1.1.16 → 1.1.17

package/README.md

@@ -33,4 +33,4 @@ Middleware 不直接持有 Root 或运行时 registry；每次执行使用同一
 
 验证：`pnpm --filter @zhin.js/middleware test && pnpm --filter @zhin.js/middleware build`。
 
-生命周期与 HMR 说明见 [目标架构](../../docs/target-architecture.md)。
+生命周期与 HMR 说明见 [目标架构](../../../docs/target-architecture.md)。

package/lib/definition.d.ts

@@ -31,6 +31,14 @@ export interface MiddlewareDefinitionBase<TAdapter extends string | undefined =
     readonly phase: MiddlewarePhase;
     readonly order: number;
     readonly adapter?: TAdapter;
+    /**
+     * Inbound only (ADR 0056 §5): built-in permit expressions, the same evaluator as commands and
+     * Agent tools (sender zhin role, sender platform standing, `bot:*` Bot standing). When the
+     * message does not satisfy them the middleware is skipped for that message and the chain
+     * continues; no reply is sent. The Bot's own standing is read from the cache only (no platform
+     * lookup per message): unknown means `bot:*` is unmet.
+     */
+    readonly permit?: readonly string[];
 }
 export type MiddlewareDefinition<TInput = unknown, TConfig = unknown, TAdapter extends string | undefined = string | undefined> = MiddlewareDefinitionBase<TAdapter> & ({
     readonly target: 'inbound';

package/lib/definition.js

@@ -1,3 +1,4 @@
+import { assertPermitSyntax } from '@zhin.js/permission';
 const middlewareBrand = 'zhin.middleware/1';
 export function defineMiddleware(definition) {
     if (typeof definition.handle !== 'function') {
@@ -19,7 +20,16 @@ export function defineMiddleware(definition) {
     const order = definition.order ?? 0;
     if (!Number.isSafeInteger(order))
         throw new TypeError('Middleware order must be a safe integer');
-    return Object.freeze({ ...definition, $feature: middlewareBrand, phase, target, order });
+    const permit = definition.permit;
+    if (permit !== undefined) {
+        if (!Array.isArray(permit) || !permit.every(item => typeof item === 'string'))
+            throw new TypeError('Middleware permit must be a string array');
+        if (target !== 'inbound' && permit.length)
+            throw new TypeError('Middleware permit applies to inbound middleware only');
+        assertPermitSyntax(permit, 'Middleware');
+    }
+    return Object.freeze({ ...definition, ...(permit !== undefined ? { permit: Object.freeze([...permit]) } : {}),
+        $feature: middlewareBrand, phase, target, order });
 }
 /**
  * Fix the plugin config type first, then define the middleware.

package/lib/middleware-index.d.ts

@@ -25,6 +25,8 @@ export interface MiddlewareDescriptor {
     readonly order: number;
     readonly adapter?: string;
     readonly incremental?: true;
+    /** Inbound permit (ADR 0056 §5); unmet = skipped for that message. */
+    readonly permit?: readonly string[];
 }
 /** @internal Runtime middleware executor. */
 export declare class MiddlewareIndex {

package/lib/middleware-index.js

@@ -1,5 +1,6 @@
 import { createCapabilityContext, bindOperationInput, operationClientAdapter, readOperationClient, readOperationSession, } from '@zhin.js/feature-kit';
 import { continuationBrand } from './continuation.js';
+import { permissionHostToken, toPermissionSubject } from '@zhin.js/permission';
 /** @internal Runtime middleware executor. */
 export class MiddlewareIndex {
     snapshot;
@@ -17,6 +18,7 @@ export class MiddlewareIndex {
             order: slot.definition.order,
             ...(slot.definition.adapter ? { adapter: slot.definition.adapter } : {}),
             ...(slot.definition.target === 'outbound' && slot.definition.incremental === true ? { incremental: true } : {}),
+            ...(slot.definition.target === 'inbound' && slot.definition.permit?.length ? { permit: slot.definition.permit } : {}),
             slot,
         })).sort((left, right) => compareMiddleware(left, right, topology)));
     }
@@ -93,6 +95,8 @@ export class MiddlewareIndex {
             const definition = record.slot.definition;
             if (definition.target !== 'inbound')
                 throw new Error('Invalid inbound Middleware');
+            if (record.permit && !(await permitAllows(record.permit, input, operationSnapshot)))
+                return dispatch(index + 1);
             const authorInput = bindOperationInput(input, record.owner, operationSnapshot);
             const context = {
                 ...createCapabilityContext({ snapshot: operationSnapshot, ownerId: record.owner, admission: undefined, signal: readOperationSession(authorInput, record.adapter)?.signal }), input: authorInput,
@@ -160,6 +164,28 @@ export class MiddlewareIndex {
         return dispatch(0);
     }
 }
+/**
+ * ADR 0056 §5: the shared evaluator; the Bot's own standing comes from the cache only, so a gate
+ * never adds a platform request to a message. No Permission host = unmet (fail closed).
+ */
+async function permitAllows(permits, input, snapshot) {
+    let host;
+    try {
+        const value = snapshot.resources.get(snapshot.root)?.get(permissionHostToken.id);
+        host = value && typeof value.checkAll === 'function' ? value : undefined;
+    }
+    catch {
+        host = undefined;
+    }
+    if (!host)
+        return false;
+    try {
+        return await host.checkAll(permits, toPermissionSubject(input), { source: input, cachedOnly: true });
+    }
+    catch {
+        return false;
+    }
+}
 /** @internal Runtime projection guard. */
 export function isMiddlewareIndex(value) {
     return !!value && typeof value === 'object'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/middleware",
-  "version": "1.1.16",
+  "version": "1.1.17",
   "description": "Convention-based Middleware Feature for Zhin Plugin Runtime",
   "type": "module",
   "main": "./lib/index.js",
@@ -12,12 +12,12 @@
     }
   },
   "files": [
-    "lib",
-    "src"
+    "lib"
   ],
   "dependencies": {
-    "@zhin.js/plugin-runtime": "1.1.23",
-    "@zhin.js/feature-kit": "1.1.15"
+    "@zhin.js/feature-kit": "1.1.16",
+    "@zhin.js/permission": "1.2.0",
+    "@zhin.js/plugin-runtime": "1.2.0"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",

package/src/continuation.ts

@@ -1,7 +0,0 @@
-/** Internal marker only; each frame additionally checks its exact carrier identity. */
-export const continuationBrand: unique symbol = Symbol('zhin.middleware-continuation');
-
-/** Opaque result of `next()`. Return it to preserve the downstream author. */
-export interface MiddlewareContinuation {
-  readonly [continuationBrand]: never;
-}

package/src/definition.ts

@@ -1,181 +0,0 @@
-/**
- * Middleware authoring API consumed from `zhin.js/middleware`.
- * @module zhin.js/middleware
- */
-import type {
-  AdapterClient,
-  OperationSession,
-  CapabilityContext,
-  RegisteredAdapterName,
-} from '@zhin.js/feature-kit';
-import type { MiddlewareContinuation } from './continuation.js';
-export type { MiddlewareContinuation } from './continuation.js';
-
-const middlewareBrand = 'zhin.middleware/1' as const;
-
-export type MiddlewarePhase = 'before-dispatch' | 'after-dispatch';
-export type MiddlewareTarget = 'inbound' | 'outbound';
-export type MiddlewareNext = () => Promise<MiddlewareContinuation>;
-export type OutboundMiddlewareNext = () => Promise<void>;
-
-export interface InboundDispatchSummary {
-  readonly matched: boolean;
-  readonly path: 'button' | 'command' | 'handler' | 'none';
-  readonly handlerId?: string;
-  readonly replied: boolean;
-}
-
-export interface MiddlewareContext<
-  TInput = unknown,
-  TConfig = unknown,
-  TAdapter extends string | undefined = undefined,
->
-  extends CapabilityContext<TConfig> {
-  readonly input: TInput;
-  /** Lazily resolved native Client. Without `adapter`, its static type is `unknown`. */
-  readonly $client: AdapterClient<TAdapter>;
-  readonly session: OperationSession<TAdapter> | undefined;
-  readonly dispatch?: InboundDispatchSummary;
-  onAfterDispatch?(listener: (summary: InboundDispatchSummary) => void | Promise<void>): void;
-}
-
-/** Shared metadata for the public inbound and outbound definition contracts. */
-export interface MiddlewareDefinitionBase<
-  TAdapter extends string | undefined = string | undefined,
-> {
-  /** @internal Runtime feature brand. */
-  readonly $feature: typeof middlewareBrand;
-  readonly phase: MiddlewarePhase;
-  readonly order: number;
-  readonly adapter?: TAdapter;
-}
-
-export type MiddlewareDefinition<
-  TInput = unknown,
-  TConfig = unknown,
-  TAdapter extends string | undefined = string | undefined,
-> = MiddlewareDefinitionBase<TAdapter> & (
-  | { readonly target: 'inbound'; handle(context: MiddlewareContext<TInput, TConfig, TAdapter>, next: MiddlewareNext): unknown }
-  | { readonly target: 'outbound';
-      /** Opt in to cumulative prefixes. Previously published text, format and addressing must stay stable. */
-      readonly incremental?: true;
-      handle(context: MiddlewareContext<TInput, TConfig, TAdapter>, next: OutboundMiddlewareNext): void | Promise<void> }
-);
-
-declare module '@zhin.js/plugin-runtime' {
-  interface PluginSetupContext<TConfig = unknown> {
-    addMiddleware<TInput = unknown>(
-      localName: string,
-      definition: MiddlewareDefinition<TInput, TConfig, string | undefined>,
-    ): void;
-  }
-}
-
-/**
- * Define ordered inbound or outbound middleware.
- * Call `next()` to continue the chain; omit it to stop dispatch deliberately.
- *
- * @public
- */
-type AuthoringForAdapter<TInput, TConfig, TAdapter extends string | undefined> =
-  Omit<MiddlewareDefinitionBase<TAdapter>, '$feature' | 'phase' | 'order'> & {
-    readonly phase?: MiddlewarePhase;
-    readonly stage?: MiddlewarePhase;
-    readonly order?: number;
-  } & (
-    | { readonly target?: 'inbound'; handle(this: MiddlewareContext<TInput, TConfig, TAdapter>, context: MiddlewareContext<TInput, TConfig, TAdapter>, next: MiddlewareNext): unknown }
-    | {
-        readonly target: 'outbound';
-        /** Opt in to cumulative prefixes. Previously published text, format and addressing must stay stable;
-         * do not repeat approvals, external sends or other side effects. */
-        readonly incremental?: true;
-        handle(this: MiddlewareContext<TInput, TConfig, TAdapter>, context: MiddlewareContext<TInput, TConfig, TAdapter>, next: OutboundMiddlewareNext): void | Promise<void>;
-      }
-  );
-
-/** @internal Shape shared with the typed IM facade; not a separate authoring API. */
-export type MiddlewareAuthoringDefinition<TInput, TConfig> =
-  | AuthoringForAdapter<TInput, TConfig, undefined>
-  | {
-      [TAdapter in RegisteredAdapterName]: AuthoringForAdapter<TInput, TConfig, TAdapter> & {
-        readonly adapter: TAdapter;
-      }
-    }[RegisteredAdapterName];
-
-/**
- * Returned by `defineMiddleware.withConfig<Config>()`: fixes the plugin config type while
- * keeping inbound/outbound input inference intact.
- *
- * @public
- */
-export interface MiddlewareDefiner<TConfig> {
-  <TInput = unknown>(
-    definition: Extract<MiddlewareAuthoringDefinition<TInput, TConfig>, { readonly target: 'outbound' }>,
-  ): Readonly<Extract<MiddlewareDefinition<TInput, TConfig>, { readonly target: 'outbound' }>>;
-  <TInput = unknown>(
-    definition: Extract<MiddlewareAuthoringDefinition<TInput, TConfig>, { readonly target?: 'inbound' }>,
-  ): Readonly<Extract<MiddlewareDefinition<TInput, TConfig>, { readonly target: 'inbound' }>>;
-}
-
-export function defineMiddleware<TInput = unknown, TConfig = unknown>(
-  definition: Extract<MiddlewareAuthoringDefinition<TInput, TConfig>, { readonly target: 'outbound' }>,
-): Readonly<Extract<MiddlewareDefinition<TInput, TConfig>, { readonly target: 'outbound' }>>;
-export function defineMiddleware<TInput = unknown, TConfig = unknown>(
-  definition: Extract<MiddlewareAuthoringDefinition<TInput, TConfig>, { readonly target?: 'inbound' }>,
-): Readonly<Extract<MiddlewareDefinition<TInput, TConfig>, { readonly target: 'inbound' }>>;
-export function defineMiddleware<TInput = unknown, TConfig = unknown>(
-  definition: MiddlewareAuthoringDefinition<TInput, TConfig>,
-): Readonly<MiddlewareDefinition<TInput, TConfig, string | undefined>> {
-  if (typeof definition.handle !== 'function') {
-    throw new TypeError('Middleware handle must be a function');
-  }
-  const adapter = (definition as { readonly adapter?: unknown }).adapter;
-  if (adapter !== undefined
-    && (typeof adapter !== 'string' || adapter.trim() === '')) {
-    throw new TypeError('Middleware adapter must be a non-empty string');
-  }
-  const phase = definition.phase ?? (definition as { readonly stage?: MiddlewarePhase }).stage ?? 'before-dispatch';
-  if (phase !== 'before-dispatch' && phase !== 'after-dispatch') {
-    throw new TypeError(`Invalid Middleware phase: ${String(phase)}`);
-  }
-  const target = definition.target ?? 'inbound';
-  if (target !== 'inbound' && target !== 'outbound') {
-    throw new TypeError(`Invalid Middleware target: ${String(target)}`);
-  }
-  const order = definition.order ?? 0;
-  if (!Number.isSafeInteger(order)) throw new TypeError('Middleware order must be a safe integer');
-  return Object.freeze({ ...definition, $feature: middlewareBrand, phase, target, order }) as Readonly<
-    MiddlewareDefinition<TInput, TConfig, string | undefined>
-  >;
-}
-
-/**
- * Fix the plugin config type first, then define the middleware.
- */
-defineMiddleware.withConfig = function withConfig<TConfig = unknown>(): MiddlewareDefiner<TConfig> {
-  return ((definition: MiddlewareAuthoringDefinition<unknown, TConfig>) =>
-    defineMiddleware(definition as never)) as MiddlewareDefiner<TConfig>;
-};
-
-/** @internal Runtime validation for convention-discovered modules. */
-export function parseMiddlewareDefinition(value: unknown): MiddlewareDefinition {
-  if (!value || typeof value !== 'object') throw invalidMiddleware();
-  const definition = value as Partial<MiddlewareDefinition>;
-  if (
-    definition.$feature !== middlewareBrand
-    || typeof definition.handle !== 'function'
-    || (definition.phase !== 'before-dispatch' && definition.phase !== 'after-dispatch')
-    || (definition.target !== 'inbound' && definition.target !== 'outbound')
-    || !Number.isSafeInteger(definition.order)
-    || !validAdapterName((definition as { readonly adapter?: unknown }).adapter)
-  ) throw invalidMiddleware();
-  return definition as MiddlewareDefinition;
-}
-
-function invalidMiddleware(): TypeError {
-  return new TypeError('Middleware module must default-export defineMiddleware(...)');
-}
-
-function validAdapterName(adapter: unknown): boolean {
-  return adapter === undefined || (typeof adapter === 'string' && adapter.trim() !== '');
-}

package/src/index.ts

@@ -1,11 +0,0 @@
-/**
- * Ordered inbound and outbound middleware authoring contracts.
- * @module @zhin.js/middleware
- */
-/** @public Middleware authoring contract and `defineMiddleware`. */
-export * from './definition.js';
-/** @internal Runtime middleware projection. */
-export * from './middleware-index.js';
-/** @internal Feature provider installed by the Runtime composition root. */
-export * from './provider.js';
-export { default } from './provider.js';

package/src/middleware-index.ts

@@ -1,251 +0,0 @@
-import type { CapabilitySlot, PluginId, RuntimeSnapshot } from '@zhin.js/plugin-runtime';
-import {
-  createCapabilityContext,
-  bindOperationInput,
-  operationClientAdapter,
-  readOperationClient,
-  readOperationSession,
-} from '@zhin.js/feature-kit';
-import type {
-  InboundDispatchSummary,
-  MiddlewareContext,
-  MiddlewareDefinition,
-  MiddlewarePhase,
-  MiddlewareTarget,
-  OutboundMiddlewareNext,
-} from './definition.js';
-import { continuationBrand, type MiddlewareContinuation } from './continuation.js';
-
-/** @internal Terminal control passed to inbound terminal callbacks to publish dispatch summary before after-dispatch unwinds. */
-export interface InboundTerminalControl {
-  reportDispatch(summary: InboundDispatchSummary): Promise<void>;
-}
-
-/** @internal Transmission-neutral result policy supplied by the composition layer. */
-export interface MiddlewareResultPolicy<TResult> {
-  stop(owner: PluginId): TResult;
-  replace(owner: PluginId, value: unknown, downstream: TResult | undefined): TResult;
-  summarize?(result: TResult): InboundDispatchSummary | undefined;
-}
-
-/** @internal Runtime continuation result. */
-export interface MiddlewareRunResult {
-  readonly owner?: PluginId;
-  readonly value?: unknown;
-}
-
-/** @internal Runtime inventory projection. */
-export interface MiddlewareDescriptor {
-  readonly owner: PluginId;
-  readonly name: string;
-  readonly source: string;
-  readonly phase: MiddlewarePhase;
-  readonly target: MiddlewareTarget;
-  readonly order: number;
-  readonly adapter?: string;
-  readonly incremental?: true;
-}
-
-interface MiddlewareRecord extends MiddlewareDescriptor {
-  readonly slot: Readonly<CapabilitySlot<MiddlewareDefinition>>;
-}
-
-/** @internal Runtime middleware executor. */
-export class MiddlewareIndex {
-  readonly $projection = 'zhin.middleware-index/1' as const;
-  readonly #records: readonly MiddlewareRecord[];
-
-  constructor(
-    slots: readonly Readonly<CapabilitySlot<MiddlewareDefinition>>[],
-    private readonly snapshot: RuntimeSnapshot,
-  ) {
-    const topology = topologyOrder(snapshot);
-    this.#records = Object.freeze(slots.map((slot) => Object.freeze({
-      owner: slot.owner,
-      name: slot.localName,
-      source: slot.source,
-      phase: slot.definition.phase,
-      target: slot.definition.target,
-      order: slot.definition.order,
-      ...(slot.definition.adapter ? { adapter: slot.definition.adapter } : {}),
-      ...(slot.definition.target === 'outbound' && slot.definition.incremental === true ? { incremental: true as const } : {}),
-      slot,
-    })).sort((left, right) => compareMiddleware(left, right, topology)));
-  }
-
-  list(): readonly MiddlewareDescriptor[] {
-    return this.#records.map(({ slot: _slot, ...descriptor }) => descriptor);
-  }
-
-  run<TInput>(input: TInput, terminal?: OutboundMiddlewareNext, target?: 'inbound', operationSnapshot?: RuntimeSnapshot): Promise<MiddlewareRunResult>;
-  run<TInput>(input: TInput, terminal: OutboundMiddlewareNext | undefined, target: 'outbound', operationSnapshot?: RuntimeSnapshot): Promise<void>;
-  run<TInput>(input: TInput, terminal: OutboundMiddlewareNext | undefined, target: MiddlewareTarget, operationSnapshot?: RuntimeSnapshot): Promise<MiddlewareRunResult | void>;
-  async run<TInput>(
-    input: TInput,
-    terminal: OutboundMiddlewareNext = async () => undefined,
-    target: MiddlewareTarget = 'inbound',
-    operationSnapshot: RuntimeSnapshot = this.snapshot,
-  ): Promise<MiddlewareRunResult | void> {
-    if (target === 'inbound') {
-      return this.runInbound(input, async () => { await terminal(); return {}; }, {
-        stop: (owner) => ({ owner }),
-        replace: (owner, value) => ({ owner, value }),
-      }, operationSnapshot);
-    }
-    const clientAdapter = operationClientAdapter(input);
-    const records = this.#records.filter((record) =>
-      record.target === target && (!record.adapter || record.adapter === clientAdapter));
-    let cursor = -1;
-    const dispatch = async (index: number): Promise<void> => {
-      if (index <= cursor) throw new Error('Middleware next() called more than once');
-      cursor = index;
-      const record = records[index];
-      if (!record) return terminal();
-      const authorInput = bindOperationInput(input, record.owner, operationSnapshot);
-      const context = {
-        ...createCapabilityContext({ snapshot: operationSnapshot, ownerId: record.owner, admission: undefined, signal: readOperationSession(authorInput, record.adapter)?.signal }),
-        input: authorInput,
-      } as MiddlewareContext<TInput>;
-      Object.defineProperty(context, 'session', {
-        enumerable: true, get: () => readOperationSession(authorInput, record.adapter),
-      });
-      Object.defineProperty(context, '$client', {
-        enumerable: true,
-        get: () => readOperationClient(authorInput, record.adapter),
-      });
-      Object.freeze(context);
-      const definition = record.slot.definition;
-      if (definition.target !== 'outbound') throw new Error('Invalid outbound Middleware');
-      const result = await definition.handle.call(context, context, () => dispatch(index + 1));
-      if (result !== undefined) throw new TypeError('Outbound Middleware must use input.replace(), not return content');
-    };
-    await dispatch(0);
-  }
-
-  /** Unwinds one inbound operation before its caller performs any automatic reply. */
-  async runInbound<TInput, TResult>(
-    input: TInput,
-    terminal: (control: InboundTerminalControl) => Promise<TResult>,
-    results: MiddlewareResultPolicy<TResult>,
-    operationSnapshot: RuntimeSnapshot = this.snapshot,
-  ): Promise<TResult> {
-    const clientAdapter = operationClientAdapter(input);
-    const records = this.#records.filter((record) => record.target === 'inbound'
-      && (!record.adapter || record.adapter === clientAdapter));
-    let dispatchSummary: InboundDispatchSummary | undefined;
-    let reported = false;
-    const afterDispatchListeners: Array<(summary: InboundDispatchSummary) => void | Promise<void>> = [];
-    const reportDispatch = async (summary: InboundDispatchSummary): Promise<void> => {
-      dispatchSummary = Object.freeze({ ...summary });
-      if (reported) return;
-      reported = true;
-      for (const listener of afterDispatchListeners.splice(0)) {
-        await listener(dispatchSummary);
-      }
-    };
-    const dispatch = async (index: number): Promise<TResult> => {
-      const record = records[index];
-      if (!record) {
-        const terminalResult = await terminal({ reportDispatch });
-        if (!reported) {
-          const inferred = results.summarize?.(terminalResult)
-            ?? { matched: false, path: 'none' as const, replied: false };
-          await reportDispatch(inferred);
-        }
-        return terminalResult;
-      }
-      const definition = record.slot.definition;
-      if (definition.target !== 'inbound') throw new Error('Invalid inbound Middleware');
-      const authorInput = bindOperationInput(input, record.owner, operationSnapshot);
-      const context = {
-        ...createCapabilityContext({ snapshot: operationSnapshot, ownerId: record.owner, admission: undefined, signal: readOperationSession(authorInput, record.adapter)?.signal }), input: authorInput,
-        onAfterDispatch(listener: (summary: InboundDispatchSummary) => void | Promise<void>) {
-          if (typeof listener !== 'function') {
-            throw new TypeError('Middleware onAfterDispatch listener must be a function');
-          }
-          afterDispatchListeners.push(listener);
-        },
-      } as MiddlewareContext<TInput>;
-      Object.defineProperty(context, 'session', {
-        enumerable: true, get: () => readOperationSession(authorInput, record.adapter),
-      });
-      Object.defineProperty(context, '$client', {
-        enumerable: true, get: () => readOperationClient(authorInput, record.adapter),
-      });
-      Object.defineProperty(context, 'dispatch', {
-        enumerable: true, get: () => dispatchSummary,
-      });
-      Object.freeze(context);
-      let active = true;
-      let nextCalled = false;
-      let nextTask: Promise<TResult> | undefined;
-      let carrier: MiddlewareContinuation | undefined;
-      const next = (): Promise<MiddlewareContinuation> => {
-        if (!active) throw new Error('Middleware next() scope has ended');
-        if (nextCalled) throw new Error('Middleware next() called more than once');
-        nextCalled = true;
-        nextTask = dispatch(index + 1);
-        // Attach a rejection observer immediately even when an author forgets await.
-        void nextTask.catch(() => undefined);
-        const continuation = nextTask.then(() => {
-          carrier = Object.freeze({ [continuationBrand]: undefined as never });
-          return carrier;
-        });
-        void continuation.catch(() => undefined);
-        return continuation;
-      };
-      let returned: unknown;
-      try {
-        returned = await definition.handle.call(context, context, next);
-      } catch (error) {
-        // Drain an admitted child before the owning generation lease can close.
-        await nextTask?.catch(() => undefined);
-        throw error;
-      } finally {
-        active = false;
-      }
-      const downstream = nextTask ? await nextTask : undefined;
-      if (returned === undefined) return nextTask ?? results.stop(record.owner);
-      if (returned && typeof returned === 'object' && continuationBrand in returned) {
-        if (returned !== carrier) throw new Error('Middleware continuation belongs to another frame or operation');
-        if (!nextTask) throw new Error('Middleware continuation has no downstream operation');
-        return nextTask;
-      }
-      return results.replace(record.owner, returned, downstream);
-    };
-    return dispatch(0);
-  }
-}
-
-/** @internal Runtime projection guard. */
-export function isMiddlewareIndex(value: unknown): value is MiddlewareIndex {
-  return !!value && typeof value === 'object'
-    && (value as { readonly $projection?: unknown }).$projection === 'zhin.middleware-index/1';
-}
-
-function compareMiddleware(
-  left: MiddlewareRecord,
-  right: MiddlewareRecord,
-  topology: ReadonlyMap<PluginId, number>,
-): number {
-  return phaseOrder(left.phase) - phaseOrder(right.phase)
-    || left.order - right.order
-    || (topology.get(left.owner) ?? Number.MAX_SAFE_INTEGER)
-      - (topology.get(right.owner) ?? Number.MAX_SAFE_INTEGER)
-    || left.slot.id.localeCompare(right.slot.id);
-}
-
-function phaseOrder(phase: MiddlewarePhase): number {
-  return phase === 'before-dispatch' ? 0 : 1;
-}
-
-function topologyOrder(snapshot: RuntimeSnapshot): ReadonlyMap<PluginId, number> {
-  const result = new Map<PluginId, number>();
-  const visit = (owner: PluginId): void => {
-    if (result.has(owner)) return;
-    result.set(owner, result.size);
-    for (const child of snapshot.tree.get(owner)?.children ?? []) visit(child);
-  };
-  visit(snapshot.root);
-  return result;
-}

package/src/provider.ts

@@ -1,30 +0,0 @@
-import { featureId } from '@zhin.js/plugin-runtime';
-import { capture, captured, defineFeatureProvider, directoryModules } from '@zhin.js/feature-kit';
-import { parseMiddlewareDefinition } from './definition.js';
-import { MiddlewareIndex } from './middleware-index.js';
-
-/** @internal Runtime Feature identity. */
-export const middlewareFeatureId = featureId('zhin.middleware');
-
-/** @internal Runtime Feature provider. */
-const middlewareFeature = defineFeatureProvider({
-  protocol: 1,
-  id: middlewareFeatureId,
-  authoring: {
-    setupMethod: 'addMiddleware',
-    conventions: [directoryModules({
-      id: 'middlewares-index',
-      extensions: ['ts', 'tsx', 'js', 'mjs', 'cjs'],
-      layouts: [{ segments: ['middlewares', capture('name')], localName: (values) => captured(values, 'name') }],
-    })],
-    validate: parseMiddlewareDefinition,
-  },
-  runtime: {
-    project(slots, context) {
-      return { value: new MiddlewareIndex(slots, context.snapshot) };
-    },
-  },
-});
-
-export { middlewareFeature };
-export default middlewareFeature;