akanjs 3.0.0-alpha.21 → 3.0.0-alpha.23

package/base/baseEnv.ts

@@ -15,7 +15,7 @@ export interface BaseEnv {
   operationMode: "local" | "edge" | "cloud" | "module";
   databaseMode?: DatabaseMode;
 }
-export type BackendEnv = BaseEnv & {
+export type BackendEnv = {
   hostname?: string | null;
   port?: number;
   database?: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akanjs",
-  "version": "3.0.0-alpha.21",
+  "version": "3.0.0-alpha.23",
   "sourceType": "module",
   "type": "module",
   "publishConfig": {

package/server/akanOption.ts

@@ -14,7 +14,7 @@ export interface AdaptorOverride {
  * App/library server option builder: use objects, signal middleware, adaptor overrides, web proxies, and the
  * server settings an app owns — MCP, the agent relay's access policy, and the LLM the relay speaks to.
  */
-export class AkanOption<Env = unknown> {
+export class AkanOption<Env extends BackendEnv = BackendEnv> {
   readonly #getUses: ((env: Env) => Record<string, PromiseOrObject<unknown>>)[];
   readonly #middlewares: MiddlewareCls[] = [];
   readonly #adaptorOverrides: AdaptorOverride[] = [];
@@ -25,11 +25,7 @@ export class AkanOption<Env = unknown> {
   constructor() {
     this.#getUses = [];
   }
-  use(
-    fnOrObject:
-      | ((env: Env & BackendEnv) => Record<string, PromiseOrObject<unknown>>)
-      | Record<string, PromiseOrObject<unknown>>,
-  ) {
+  use(fnOrObject: ((env: Env) => Record<string, PromiseOrObject<unknown>>) | Record<string, PromiseOrObject<unknown>>) {
     if (typeof fnOrObject === "function")
       this.#getUses.push(fnOrObject as (env: Env) => Record<string, PromiseOrObject<unknown>>);
     else this.#getUses.push(() => fnOrObject);
@@ -58,8 +54,8 @@ export class AkanOption<Env = unknown> {
     return this;
   }
   /**
-   * Who may spend the LLM key through the `runAgentTurn` relay — the `AgentRelayAccess` policy, which defaults to
-   * allowing everyone because the framework has no account model to gate on. `null` reopens it.
+   * Who may spend the LLM key through the `runAgentTurn` relay. With no policy the call is refused — the same
+   * answer `None` gives — because the framework has no account model to gate on. `null` clears the policy.
    */
   setAgentAccess(policy: AgentRelayPolicy | null) {
     this.#agentAccess = policy;
@@ -71,7 +67,7 @@ export class AkanOption<Env = unknown> {
     else this.#getLlms.push(() => llmOrFn);
     return this;
   }
-  getUses(env: Env & BackendEnv): Record<string, PromiseOrObject<unknown>> {
+  getUses(env: Env): Record<string, PromiseOrObject<unknown>> {
     const uses = this.#getUses.map((fn) => fn(env));
     return Object.assign({}, ...uses);
   }
@@ -90,7 +86,7 @@ export class AkanOption<Env = unknown> {
   getAgentAccess(): AgentRelayPolicy | null | undefined {
     return this.#agentAccess;
   }
-  getLlm(env: Env & BackendEnv): LlmOption {
+  getLlm(env: Env): LlmOption {
     return Object.assign({}, ...this.#getLlms.map((fn) => fn(env)));
   }
 }

package/server/akanServer.ts

@@ -1,4 +1,4 @@
-import { type BaseEnv, getEnv } from "akanjs/base";
+import { type BackendEnv, type BaseEnv, getEnv } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import { DictionaryLookup } from "akanjs/dictionary";
 import type {
@@ -31,7 +31,7 @@ import type { HttpRoutes, SignalRoutes, WebsocketRoutes } from "./types";
 import type { WebRouter } from "./webRouter";
 
 export interface AkanServerProps extends AkanLibProps {
-  env?: BaseEnv;
+  env?: BackendEnv;
   prefix?: string;
   websocketPrefix?: string;
   openapi?: boolean;
@@ -113,7 +113,7 @@ export class AkanServer {
   readonly logger: Logger;
   readonly name: string;
   readonly libs: AkanLib[];
-  readonly env: BaseEnv & { database?: DatabaseConfig; solid?: SolidConfig };
+  readonly env: BackendEnv;
   prefix = "/api";
   websocketPrefix = "/ws";
   openapi = AkanServer.#isOpenApiEnvEnabled();
@@ -129,7 +129,7 @@ export class AkanServer {
   #metricsTimer: Timer | null = null;
   constructor(
     name = "AkanServer",
-    env = {},
+    env: BackendEnv = {},
     serverMode: "federation" | "batch" | "all" = (process.env.SERVER_MODE as
       | "federation"
       | "batch"
@@ -141,7 +141,7 @@ export class AkanServer {
     this.name = name;
     this.logger = new Logger(name);
     this.libs = libs;
-    this.env = Object.assign(getEnv(), env);
+    this.env = { ...env };
     this.openapi = options?.openapi ?? this.openapi;
     
     libs.forEach((lib) => {
@@ -217,17 +217,18 @@ export class AkanServer {
 
   inspectConsole(): AkanServerConsoleInfo {
     this.#assertCanGet();
+    const env = getEnv();
     return {
       name: this.name,
       status: this.status,
       serverMode: this.serverMode,
       env: {
-        appName: this.env.appName,
-        environment: this.env.environment,
-        operationMode: this.env.operationMode,
-        repoName: this.env.repoName,
-        serveDomain: this.env.serveDomain,
-        databaseMode: this.env.databaseMode,
+        appName: env.appName,
+        environment: env.environment,
+        operationMode: env.operationMode,
+        repoName: env.repoName,
+        serveDomain: env.serveDomain,
+        databaseMode: env.databaseMode,
       },
       services: [...this.#di.registry.serviceCls.keys()].sort((a, b) => a.localeCompare(b)),
       signals: [...this.#di.registry.serverSignalCls.keys()].sort((a, b) => a.localeCompare(b)),
@@ -514,13 +515,14 @@ export class AkanServer {
   }
 
   #createBuiltinRoutes(): HttpRoutes {
+    const { appName } = getEnv();
     const openapiRoutes: HttpRoutes = this.openapi
       ? {
           "/openapi.json": {
             GET: () =>
               Response.json(
                 createOpenApiDocument(FetchSerializer.serializeRegistry(this.#di.live).signal, {
-                  title: `${this.env.appName} API`,
+                  title: `${appName} API`,
                   version: "0.0.0",
                   servers: this.#getOpenApiServers(),
                   resolveDescription: AkanServer.#createDescriptionResolver(),
@@ -537,7 +539,7 @@ export class AkanServer {
             env: this.env,
             live: this.#di.live,
             middleware: new Map(this.#di.modules.middleware),
-            instructions: `Domain tools for the ${this.env.appName} app.`,
+            instructions: `Domain tools for the ${appName} app.`,
             ...this.mcpOption,
             readOnly: this.mcpReadOnly,
             auth: this.mcpAuth,
@@ -549,7 +551,7 @@ export class AkanServer {
 
     const devtoolsRoutes = new DevtoolsRouter({
       di: this.#di,
-      env: this.env,
+      env: getEnv(),
       name: this.name,
       serverMode: this.serverMode,
       prefix: this.prefix,

package/server/di/diLifecycle.ts

@@ -1,4 +1,4 @@
-import type { BaseEnv } from "akanjs/base";
+import { type BackendEnv, getEnv } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import {
   type Adaptor,
@@ -53,7 +53,7 @@ export class DiLifecycle {
     adaptorStages: [] as string[][],
     serviceStages: [] as string[][],
   };
-  readonly #env: BaseEnv;
+  readonly #env: BackendEnv;
   readonly #libs: AkanLib[];
   readonly #database = new Map<string, DatabaseModule>();
   readonly #service = new Map<string, ServiceModule>();
@@ -88,10 +88,10 @@ export class DiLifecycle {
     return !names.some((name) => process.env[name] === "false" || process.env[name] === "0");
   }
 
-  constructor(env: BaseEnv, serverMode: "federation" | "batch" | "all", ...libs: AkanLib[]) {
+  constructor(env: BackendEnv, serverMode: "federation" | "batch" | "all", ...libs: AkanLib[]) {
     this.#env = env;
     
-    this.#predefinedAdaptor = { ...getPredefinedAdaptor(env.databaseMode ?? "single") };
+    this.#predefinedAdaptor = { ...getPredefinedAdaptor(getEnv().databaseMode ?? "single") };
     this.#libs = libs;
     this.#service.set("base", {
       service: srv.base,

package/server/mcp/McpDispatcher.ts

@@ -1,4 +1,4 @@
-import { type BaseEnv, ENDPOINT_META } from "akanjs/base";
+import { type BackendEnv, ENDPOINT_META } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import { DictionaryLookup } from "akanjs/dictionary";
 import { NoDocumentError } from "akanjs/document";
@@ -37,7 +37,7 @@ export class McpPromptError extends Error {
 
 interface McpDispatcherProps {
   registry: InjectRegistry;
-  env: BaseEnv;
+  env: BackendEnv;
   live: LiveRegistry;
   middleware: Map<string, MiddlewareCls>;
   /** The one language error text is resolved in, matching the catalogue the client was handed. */

package/server/mcp/McpRouter.ts

@@ -1,4 +1,4 @@
-import type { BaseEnv } from "akanjs/base";
+import { type BackendEnv, getEnv } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import { DictionaryLookup } from "akanjs/dictionary";
 import type { InjectRegistry, LiveRegistry } from "akanjs/service";
@@ -25,7 +25,8 @@ import { McpEventStream } from "./McpEventStream";
 
 export interface McpRouterProps {
   registry: InjectRegistry;
-  env: BaseEnv;
+  /** Spread into every `SignalContext` this router's dispatcher builds; middleware reads it. */
+  env: BackendEnv;
   live: LiveRegistry;
   middleware: Map<string, MiddlewareCls>;
   path?: string;
@@ -143,7 +144,7 @@ export class McpRouter {
         McpRouter.logger.warn(
           "MCP is enabled but published nothing. Every candidate was refused; see the reasons below.",
         );
-      for (const { key, reason } of refusals) McpRouter.logger.warn(`MCP did not expose "${key}": ${reason}`);
+      for (const { key, reason } of refusals) McpRouter.logger.verbose(`MCP did not expose "${key}": ${reason}`);
       for (const { key, reason } of undescribed)
         McpRouter.logger.warn(`MCP exposed "${key}" with no description: ${reason}`);
     } catch (error) {
@@ -461,7 +462,8 @@ export class McpRouter {
   }
 
   #serverInfo() {
-    return { name: `${this.#props.env.appName}-mcp`, version: this.#props.version ?? "0.0.0" };
+    const env = getEnv();
+    return { name: `${env.appName}-mcp`, version: this.#props.version ?? "0.0.0" };
   }
 
   #result(call: McpCall, result: object, cache?: McpCacheHint) {

package/server/resolver/signal.resolver.ts

@@ -1,5 +1,5 @@
 import {
-  type BaseEnv,
+  type BackendEnv,
   type Cls,
   ENDPOINT_META,
   FIELD_META,
@@ -316,7 +316,7 @@ export class SignalResolver {
       env,
       live,
       middleware,
-    }: { registry: InjectRegistry; env: BaseEnv; live: LiveRegistry; middleware: Map<string, MiddlewareCls> },
+    }: { registry: InjectRegistry; env: BackendEnv; live: LiveRegistry; middleware: Map<string, MiddlewareCls> },
   ): SignalRoutes {
     const endpointMeta = endpointCls[ENDPOINT_META] as { [key: string]: EndpointInfo };
     const routes: HttpRoutes = {};

package/service/injectInfo.ts

@@ -1,4 +1,4 @@
-import { type BaseEnv, type Cls, INJECT_META } from "akanjs/base";
+import { type BackendEnv, type Cls, INJECT_META } from "akanjs/base";
 import {
   type ConstantFieldTypeInput,
   ConstantRegistry,
@@ -119,7 +119,7 @@ export class InjectInfo<
     instance: Adaptor | Service,
     applyCls: AdaptorCls | ServiceCls,
     registry: InjectRegistry,
-    env: BaseEnv,
+    env: BackendEnv,
   ) {
     const injectMap = applyCls[INJECT_META] as Record<string, InjectInfo>;
     await Promise.all(
@@ -240,7 +240,12 @@ export class InjectInfo<
     const value = await injectInfo.generateFactory(depInstance);
     Object.defineProperty(instance, propKey, { value, writable: false, enumerable: true });
   }
-  static async #injectEnv(instance: Adaptor | Service, propKey: string, injectInfo: InjectInfo<"env">, env: BaseEnv) {
+  static async #injectEnv(
+    instance: Adaptor | Service,
+    propKey: string,
+    injectInfo: InjectInfo<"env">,
+    env: BackendEnv,
+  ) {
     const value = await injectInfo.generateFactory(env);
     Object.defineProperty(instance, propKey, { value, writable: false, enumerable: true });
   }

package/service/predefinedAdaptor/database.adaptor.ts

@@ -3,7 +3,7 @@ import { AsyncLocalStorage } from "node:async_hooks";
 import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import type { InArgs, InValue, Client as LibsqlClient } from "@libsql/client";
-import { type BaseEnv, DEFAULT_VALUE, dayjs, FIELD_META, type PromiseOrObject } from "akanjs/base";
+import { DEFAULT_VALUE, dayjs, FIELD_META, getEnv, type PromiseOrObject } from "akanjs/base";
 import { type ConstantModel, getDefault } from "akanjs/constant";
 import {
   createDocumentId,
@@ -147,7 +147,7 @@ export interface DatabaseAdaptor {
   getSearchIndex(): SearchIndex | null;
 }
 
-interface SqliteEnv extends BaseEnv {
+interface SqliteEnv {
   workspaceRoot?: string;
   database?: DatabaseConfig;
 }
@@ -1759,22 +1759,23 @@ export class SqliteDatabase
   extends adapt("sqliteDatabase", ({ env, plug }) => ({
     scheduler: plug(ScheduleAdaptorRole),
     config: env((env: SqliteEnv) => {
-      const appName = env.appName ?? "akan";
-      const environment = env.environment ?? "local";
-      const defaultFile = resolveDefaultSqliteFile({
-        appName,
-        fileName: `${appName}-${environment}.db`,
-        isProduction: process.env.NODE_ENV === "production",
-        operationMode: env.operationMode,
-        workspaceRoot: env.workspaceRoot,
-      });
+      const defaultFile = () => {
+        const { appName, environment, operationMode } = getEnv();
+        return resolveDefaultSqliteFile({
+          appName,
+          fileName: `${appName}-${environment}.db`,
+          isProduction: process.env.NODE_ENV === "production",
+          operationMode,
+          workspaceRoot: env.workspaceRoot,
+        });
+      };
       return {
         journalMode: "WAL",
         busyTimeoutMs: 5000,
         synchronous: "NORMAL",
         foreignKeys: true,
         ...env.database?.sqlite,
-        filePath: env.database?.sqlite?.filePath ?? process.env.SQLITE_DATABASE_PATH ?? defaultFile,
+        filePath: env.database?.sqlite?.filePath ?? process.env.SQLITE_DATABASE_PATH ?? defaultFile(),
         search: {
           enabled: env.database?.search?.enabled ?? parseSearchEnabled(process.env.AKAN_SEARCH_ENABLED),
           tokenizer: env.database?.search?.tokenizer ?? process.env.AKAN_SEARCH_TOKENIZER ?? DEFAULT_TOKENIZER,
@@ -1892,21 +1893,22 @@ export class LibsqlDatabase
   extends adapt("libsqlDatabase", ({ env, plug }) => ({
     scheduler: plug(ScheduleAdaptorRole),
     config: env((env: SqliteEnv) => {
-      const appName = env.appName ?? "akan";
-      const environment = env.environment ?? "local";
-      const defaultFile = resolveDefaultSqliteFile({
-        appName,
-        fileName: `${appName}-${environment}.db`,
-        isProduction: process.env.NODE_ENV === "production",
-        operationMode: env.operationMode,
-        workspaceRoot: env.workspaceRoot,
-      });
+      const defaultFile = () => {
+        const { appName, environment, operationMode } = getEnv();
+        return resolveDefaultSqliteFile({
+          appName,
+          fileName: `${appName}-${environment}.db`,
+          isProduction: process.env.NODE_ENV === "production",
+          operationMode,
+          workspaceRoot: env.workspaceRoot,
+        });
+      };
       return {
         url:
           env.database?.libsql?.url ??
           process.env.LIBSQL_URL ??
           process.env.LIBSQL_URI ??
-          `file:${env.database?.sqlite?.filePath ?? process.env.SQLITE_DATABASE_PATH ?? defaultFile}`,
+          `file:${env.database?.sqlite?.filePath ?? process.env.SQLITE_DATABASE_PATH ?? defaultFile()}`,
         authToken: env.database?.libsql?.authToken ?? process.env.LIBSQL_AUTH_TOKEN,
         search: {
           enabled: env.database?.search?.enabled ?? parseSearchEnabled(process.env.AKAN_SEARCH_ENABLED),

package/service/predefinedAdaptor/queue.adaptor.ts

@@ -1,4 +1,4 @@
-import type { BaseEnv } from "akanjs/base";
+import { getEnv } from "akanjs/base";
 import { adapt } from "../adapt";
 import type { AkanJob, AkanJobOptions, AkanWorker } from "../ipcTypes";
 import { RedisCache } from "./cache.adaptor";
@@ -30,7 +30,10 @@ export interface QueueAdaptor {
 export class BullQueue
   extends adapt("bullQueue", ({ plug, env }) => ({
     redis: plug(RedisCache, (redisCache) => redisCache.getClient()),
-    prefix: env((env: BaseEnv) => `queue-${env.repoName}-${env.appName}-${env.environment}-${env.operationMode}`),
+    prefix: env(() => {
+      const { repoName, appName, environment, operationMode } = getEnv();
+      return `queue-${repoName}-${appName}-${environment}-${operationMode}`;
+    }),
   }))
   implements QueueAdaptor
 {

package/service/predefinedAdaptor/solidQueue.adaptor.ts

@@ -1,4 +1,5 @@
 import type { Database, Statement } from "bun:sqlite";
+import { getEnv } from "akanjs/base";
 import { adapt } from "../adapt";
 import { type AkanJob, type AkanJobOptions, type AkanWorker, sendAkanIpc } from "../ipcTypes";
 import type { QueueAdaptor } from "./queue.adaptor";
@@ -56,8 +57,11 @@ class SolidWorker implements AkanWorker {
 export class SolidQueue
   extends adapt("solidQueue", ({ env }) => ({
     config: env((env: SolidEnv) => getSolidConfig(env)),
-    queueName: env((env: SolidEnv) => `queue-${env.repoName}-${env.appName}-${env.environment}-${env.operationMode}`),
-    workerId: env((env: SolidEnv) => `${env.appName}-${process.env.AKAN_REPLICA_IDX ?? "0"}-${process.pid}`),
+    queueName: env(() => {
+      const { repoName, appName, environment, operationMode } = getEnv();
+      return `queue-${repoName}-${appName}-${environment}-${operationMode}`;
+    }),
+    workerId: env(() => `${getEnv().appName}-${process.env.AKAN_REPLICA_IDX ?? "0"}-${process.pid}`),
   }))
   implements QueueAdaptor
 {

package/service/predefinedAdaptor/solidSqlite.ts

@@ -1,7 +1,7 @@
 import { Database } from "bun:sqlite";
 import { mkdir } from "node:fs/promises";
 import path from "node:path";
-import type { BaseEnv, Dayjs } from "akanjs/base";
+import { type Dayjs, getEnv } from "akanjs/base";
 import { resolveDefaultSqliteFile } from "./sqlitePath";
 
 export interface SolidConfig {
@@ -14,7 +14,7 @@ export interface SolidConfig {
   queueLeaseMs?: number;
 }
 
-export interface SolidEnv extends BaseEnv {
+export interface SolidEnv {
   workspaceRoot?: string;
   solid?: SolidConfig;
 }
@@ -23,18 +23,20 @@ export type SolidValueType = "string" | "number" | "buffer" | "json";
 
 const wait = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
 
-export const getSolidConfig = (env: SolidEnv): Required<SolidConfig> => {
-  const appName = env.appName ?? "akan";
-  const environment = env.environment ?? "local";
-  const defaultFile = resolveDefaultSqliteFile({
+const defaultSolidFile = (workspaceRoot?: string) => {
+  const { appName, environment, operationMode } = getEnv();
+  return resolveDefaultSqliteFile({
     appName,
     fileName: `${appName}-${environment}_solid.db`,
     isProduction: process.env.NODE_ENV === "production",
-    operationMode: env.operationMode,
-    workspaceRoot: env.workspaceRoot,
+    operationMode,
+    workspaceRoot,
   });
+};
+
+export const getSolidConfig = (env: SolidEnv): Required<SolidConfig> => {
   return {
-    filePath: env.solid?.filePath ?? process.env.AKAN_SOLID_DB_PATH ?? defaultFile,
+    filePath: env.solid?.filePath ?? process.env.AKAN_SOLID_DB_PATH ?? defaultSolidFile(env.workspaceRoot),
     journalMode: env.solid?.journalMode ?? "WAL",
     busyTimeoutMs: env.solid?.busyTimeoutMs ?? 5000,
     synchronous: env.solid?.synchronous ?? "NORMAL",

package/signal/agent.signal.ts

@@ -10,11 +10,7 @@ import { Req } from "./internalArg";
 import { serverSignal } from "./serverSignal";
 import { SignalRegistry } from "./signalRegistry";
 
-export class AgentInternal extends internal(srv.agent, ({ initialize }) => ({
-  warnOpenRelay: initialize().exec(() => {
-    AgentRelayAccess.warnIfOpen();
-  }),
-})) {}
+export class AgentInternal extends internal(srv.agent, () => ({})) {}
 
 export class AgentEndpoint extends endpoint(srv.agent, ({ mutation }) => ({
 

package/signal/guards.ts

@@ -24,8 +24,8 @@ export type AgentRelayPolicy = (context: SignalContext) => boolean | Promise<boo
  * Gate for the `runAgentTurn` relay. Every tool runs in the caller's own browser session, so the LLM key is the
  * one thing this endpoint spends — ungated, any visitor can bill the app's provider through fetch alone.
  *
- * The framework has no account model to gate on, so with no policy registered it allows everyone — what `Public`
- * said before, but with a seam: a product hardens it at boot, e.g.
+ * The framework has no account model to gate on, so with no policy registered it refuses every call — the same
+ * answer `None` gives. An app opens it at boot, e.g.
  * `AgentRelayAccess.use((context) => !!context.get("account"))`. The policy is the app's; the framework cannot know it.
  */
 export class AgentRelayAccess implements Guard {
@@ -44,17 +44,9 @@ export class AgentRelayAccess implements Guard {
     return !!AgentRelayAccess.#policy;
   }
 
-  /** Runs at boot, after the app entry has evaluated — a module-scope check would fire before `use()` could. */
-  static warnIfOpen() {
-    if (AgentRelayAccess.#policy) return;
-    AgentRelayAccess.#logger.warn(
-      'runAgentTurn is open to every caller — anyone can spend the LLM key. Register a policy at boot: AgentRelayAccess.use((context) => !!context.get("account")), or set AKAN_AGENT=false.',
-    );
-  }
-
   async canPass(context: SignalContext): Promise<boolean> {
     const policy = AgentRelayAccess.#policy;
-    if (!policy) return true;
+    if (!policy) return false;
     try {
       return await policy(context);
     } catch (error) {

package/signal/middleware.ts

@@ -1,11 +1,11 @@
-import type { BaseEnv, Cls, PromiseOrObject } from "akanjs/base";
+import type { BackendEnv, Cls, PromiseOrObject } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import { type CacheAdaptor, CacheAdaptorRole } from "akanjs/service";
 import dayjs from "dayjs";
 import type { SignalContext } from "./signalContext";
 import { traceCache } from "./trace";
 
-export interface Middleware<Env extends BaseEnv = BaseEnv> {
+export interface Middleware<Env extends BackendEnv = BackendEnv> {
   use(env: Env): PromiseOrObject<(context: SignalContext, next: () => Promise<unknown>) => PromiseOrObject<unknown>>;
 }
 
@@ -14,7 +14,7 @@ export type MiddlewareCls = Cls<Middleware, { readonly refName: string }>;
 export const middleware = (refName: string) => {
   return class Middleware {
     static refName = refName;
-    async use(env: BaseEnv) {
+    async use(env: BackendEnv) {
       return async (context: SignalContext, next: () => Promise<unknown>) => {
         return await next();
       };

package/signal/signalContext.ts

@@ -1,5 +1,5 @@
 import {
-  type BaseEnv,
+  type BackendEnv,
   type Cls,
   FIELD_META,
   INTERNAL_META,
@@ -52,7 +52,7 @@ const isExceptionLike = (error: unknown): error is ExceptionLike => {
 
 export class SignalContext<
   Ctx extends HttpExecutionContext | WebSocketExecutionContext = HttpExecutionContext | WebSocketExecutionContext,
-  Env extends BaseEnv = BaseEnv,
+  Env extends BackendEnv = BackendEnv,
 > {
   key: string;
   transport: SignalTransportType;
@@ -215,7 +215,7 @@ export class SignalContext<
    * call for every registered middleware — and `Logging` is registered by default.
    */
   static #middlewareHandlers = new WeakMap<MiddlewareCls, WeakMap<object, Promise<MiddlewareHandler>>>();
-  static #getMiddlewareHandler(MiddlewareCls: MiddlewareCls, env: BaseEnv): Promise<MiddlewareHandler> {
+  static #getMiddlewareHandler(MiddlewareCls: MiddlewareCls, env: BackendEnv): Promise<MiddlewareHandler> {
     const byEnv =
       SignalContext.#middlewareHandlers.get(MiddlewareCls) ?? new WeakMap<object, Promise<MiddlewareHandler>>();
     SignalContext.#middlewareHandlers.set(MiddlewareCls, byEnv);

package/test/index.ts

@@ -13,4 +13,4 @@ export {
   setupSignalTestTarget,
   terminateSignalTestContext,
 } from "./signalTestRuntime";
-export { TestServer, type TestServerOptions } from "./testServer";
+export { type TestEnv, TestServer, type TestServerOptions } from "./testServer";

package/test/signalTestRuntime.ts

@@ -1,12 +1,12 @@
-import type { BackendEnv } from "akanjs/base";
+import type { BackendEnv, BaseEnv } from "akanjs/base";
 import type { FetchProxy } from "akanjs/fetch";
 import type { AkanLib } from "akanjs/server";
-import { TestServer, type TestServerOptions } from "./testServer";
+import { type TestEnv, TestServer, type TestServerOptions } from "./testServer";
 
 export interface SignalTestTarget {
   type: "app" | "lib";
   name: string;
-  env: BackendEnv;
+  env: TestEnv;
   fetch: FetchProxy;
   libs: AkanLib[];
 }
@@ -87,7 +87,7 @@ export const setupSignalTestTarget = async <Fetch = FetchProxy>(
   pendingContext = (async () => {
     terminatingContext = undefined;
     const resolvedOptions = { ...configuredOptions, ...options };
-    const env: BackendEnv = {
+    const env: BaseEnv = {
       repoName: process.env.AKAN_PUBLIC_REPO_NAME ?? "akanjs",
       serveDomain: process.env.AKAN_PUBLIC_SERVE_DOMAIN ?? "akanjs.com",
       appName: name,
@@ -103,7 +103,7 @@ export const setupSignalTestTarget = async <Fetch = FetchProxy>(
     const target: SignalTestTarget = {
       type,
       name,
-      env: targetModule.env,
+      env: { ...env, ...targetModule.env },
       fetch: targetModule.fetch,
       libs: [...dependencyModules.map((mod) => mod.lib), targetModule.lib],
     };

package/test/testServer.ts

@@ -1,7 +1,7 @@
 import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import type { BackendEnv } from "akanjs/base";
+import type { BackendEnv, BaseEnv } from "akanjs/base";
 import { Logger, sleep } from "akanjs/common";
 import { type AkanLib, AkanServer } from "akanjs/server";
 
@@ -12,6 +12,9 @@ const MAX_ACTIVATION_TIME = 30000;
 
 type TestDatabaseMode = "memory" | "tempFile";
 
+/** `BackendEnv` carries server options only, so a harness that also stamps `process.env` needs the identity beside it. */
+export type TestEnv = BaseEnv & BackendEnv;
+
 export interface TestServerOptions {
   workerId?: number;
   port?: number;
@@ -44,7 +47,7 @@ const resolveWorkerId = (workerId?: number) => {
 export class TestServer {
   readonly #logger = new Logger("TestServer");
   readonly #libs: AkanLib[];
-  readonly #env: BackendEnv;
+  readonly #env: TestEnv;
   readonly #databaseMode: TestDatabaseMode;
   readonly #serverMode: "federation" | "batch" | "all";
   readonly #listen: boolean;
@@ -55,7 +58,7 @@ export class TestServer {
   #startAt = Date.now();
   #server?: AkanServer;
   #tempDir?: string;
-  static initClient(env: BackendEnv, workerId?: number) {
+  static initClient(env: BaseEnv, workerId?: number) {
     TestServer.applyProcessEnv(env, {
       workerId,
       port: TEST_LISTEN_PORT_BASE + resolveWorkerId(workerId),
@@ -63,7 +66,7 @@ export class TestServer {
     });
   }
   static applyProcessEnv(
-    env: BackendEnv,
+    env: BaseEnv,
     {
       workerId,
       port,
@@ -82,7 +85,7 @@ export class TestServer {
     process.env.AKAN_PUBLIC_SERVER_PORT = String(resolvedPort);
     process.env.SERVER_HTTP_PROTOCOL = "http:";
   }
-  constructor(env: BackendEnv, libs: AkanLib | AkanLib[], options: TestServerOptions = {}) {
+  constructor(env: TestEnv, libs: AkanLib | AkanLib[], options: TestServerOptions = {}) {
     this.workerId = resolveWorkerId(options.workerId);
     this.#port = options.port ?? TEST_LISTEN_PORT_BASE + this.workerId;
     this.#env = { ...env };

package/types/base/baseEnv.d.ts

@@ -8,7 +8,7 @@ export interface BaseEnv {
     operationMode: "local" | "edge" | "cloud" | "module";
     databaseMode?: DatabaseMode;
 }
-export type BackendEnv = BaseEnv & {
+export type BackendEnv = {
     hostname?: string | null;
     port?: number;
     database?: {

package/types/server/akanOption.d.ts

@@ -11,10 +11,10 @@ export interface AdaptorOverride {
  * App/library server option builder: use objects, signal middleware, adaptor overrides, web proxies, and the
  * server settings an app owns — MCP, the agent relay's access policy, and the LLM the relay speaks to.
  */
-export declare class AkanOption<Env = unknown> {
+export declare class AkanOption<Env extends BackendEnv = BackendEnv> {
     #private;
     constructor();
-    use(fnOrObject: ((env: Env & BackendEnv) => Record<string, PromiseOrObject<unknown>>) | Record<string, PromiseOrObject<unknown>>): this;
+    use(fnOrObject: ((env: Env) => Record<string, PromiseOrObject<unknown>>) | Record<string, PromiseOrObject<unknown>>): this;
     applyMiddleware(...middlewares: MiddlewareCls[]): this;
     /** Rebinds a predefined adaptor role (e.g. `LlmAdaptorRole`) to the app's own implementation. Last writer wins. */
     applyAdaptor<T extends Adaptor>(role: AdaptorCls<T>, adaptor: AdaptorCls<T>): this;
@@ -26,18 +26,18 @@ export declare class AkanOption<Env = unknown> {
      */
     setMcp(mcp?: boolean | McpServerOption): this;
     /**
-     * Who may spend the LLM key through the `runAgentTurn` relay — the `AgentRelayAccess` policy, which defaults to
-     * allowing everyone because the framework has no account model to gate on. `null` reopens it.
+     * Who may spend the LLM key through the `runAgentTurn` relay. With no policy the call is refused — the same
+     * answer `None` gives — because the framework has no account model to gate on. `null` clears the policy.
      */
     setAgentAccess(policy: AgentRelayPolicy | null): this;
     /** Settings for whichever adaptor fills `LlmAdaptorRole`, injected into it as the `llmOption` use. */
     setLlm(llmOrFn: LlmOption | ((env: Env) => LlmOption)): this;
-    getUses(env: Env & BackendEnv): Record<string, PromiseOrObject<unknown>>;
+    getUses(env: Env): Record<string, PromiseOrObject<unknown>>;
     getMiddlewares(): MiddlewareCls[];
     getAdaptorOverrides(): AdaptorOverride[];
     getWebProxies(): WebProxyRegistration[];
     getMcp(): boolean | McpServerOption | undefined;
     getAgentAccess(): AgentRelayPolicy | null | undefined;
-    getLlm(env: Env & BackendEnv): LlmOption;
+    getLlm(env: Env): LlmOption;
 }
-export declare function createDefaultAkanOption(): AkanOption<unknown>;
+export declare function createDefaultAkanOption(): AkanOption<BackendEnv>;

package/types/server/akanServer.d.ts

@@ -1,11 +1,11 @@
-import { type BaseEnv } from "akanjs/base";
+import { type BackendEnv, type BaseEnv } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import type { Adaptor, AdaptorCls, DatabaseConfig, Service, ServiceCls, SolidConfig } from "akanjs/service";
 import type { ServerSignal, ServerSignalCls } from "akanjs/signal";
 import type { AkanLib, AkanLibProps } from "./akanLib.d.ts";
 import { type McpAuthOption } from "./mcp.d.ts";
 export interface AkanServerProps extends AkanLibProps {
-    env?: BaseEnv;
+    env?: BackendEnv;
     prefix?: string;
     websocketPrefix?: string;
     openapi?: boolean;
@@ -68,10 +68,7 @@ export declare class AkanServer {
     readonly logger: Logger;
     readonly name: string;
     readonly libs: AkanLib[];
-    readonly env: BaseEnv & {
-        database?: DatabaseConfig;
-        solid?: SolidConfig;
-    };
+    readonly env: BackendEnv;
     prefix: string;
     websocketPrefix: string;
     openapi: boolean;
@@ -81,7 +78,7 @@ export declare class AkanServer {
     mcpOption: Omit<McpServerOption, "enabled" | "readOnly" | "auth">;
     serverMode: "federation" | "batch" | "all";
     shutdownTimeoutMs: number;
-    constructor(name?: string, env?: {}, serverMode?: "federation" | "batch" | "all", ...libsOrOptions: (AkanLib | AkanServerOptions)[]);
+    constructor(name?: string, env?: BackendEnv, serverMode?: "federation" | "batch" | "all", ...libsOrOptions: (AkanLib | AkanServerOptions)[]);
     setPrefix(prefix: string): this;
     setWebsocketPrefix(websocketPrefix: string): this;
     setOpenApi(openapi?: boolean): this;

package/types/server/di/diLifecycle.d.ts

@@ -1,4 +1,4 @@
-import type { BaseEnv } from "akanjs/base";
+import { type BackendEnv } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import { type Adaptor, type AdaptorCls, type Service, type ServiceCls, type WebsocketAdaptor } from "akanjs/service";
 import { type MiddlewareCls } from "../../signal/middleware.d.ts";
@@ -31,7 +31,7 @@ export declare class DiLifecycle {
         adaptor: ReadonlyMap<string, AdaptorCls>;
         middleware: ReadonlyMap<string, MiddlewareCls>;
     };
-    constructor(env: BaseEnv, serverMode: "federation" | "batch" | "all", ...libs: AkanLib[]);
+    constructor(env: BackendEnv, serverMode: "federation" | "batch" | "all", ...libs: AkanLib[]);
     /** Run every init stage in dependency order and collect the generated routes. */
     initializeAll(): Promise<SignalRoutes>;
     destroyAll(): Promise<void>;

package/types/server/mcp/McpDispatcher.d.ts

@@ -1,4 +1,4 @@
-import { type BaseEnv } from "akanjs/base";
+import { type BackendEnv } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import type { InjectRegistry, LiveRegistry } from "akanjs/service";
 import { type McpExposedEndpoint, type McpToolResult, type PromptMessage } from "../../signal/mcp.d.ts";
@@ -19,7 +19,7 @@ export declare class McpPromptError extends Error {
 }
 interface McpDispatcherProps {
     registry: InjectRegistry;
-    env: BaseEnv;
+    env: BackendEnv;
     live: LiveRegistry;
     middleware: Map<string, MiddlewareCls>;
     /** The one language error text is resolved in, matching the catalogue the client was handed. */

package/types/server/mcp/McpRouter.d.ts

@@ -1,4 +1,4 @@
-import type { BaseEnv } from "akanjs/base";
+import { type BackendEnv } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import type { InjectRegistry, LiveRegistry } from "akanjs/service";
 import type { MiddlewareCls } from "../../signal/middleware.d.ts";
@@ -6,7 +6,8 @@ import type { HttpRoutes } from "../types.d.ts";
 import { type McpAuthOption } from "./McpAuth.d.ts";
 export interface McpRouterProps {
     registry: InjectRegistry;
-    env: BaseEnv;
+    /** Spread into every `SignalContext` this router's dispatcher builds; middleware reads it. */
+    env: BackendEnv;
     live: LiveRegistry;
     middleware: Map<string, MiddlewareCls>;
     path?: string;

package/types/server/resolver/signal.resolver.d.ts

@@ -1,4 +1,4 @@
-import { type BaseEnv } from "akanjs/base";
+import { type BackendEnv } from "akanjs/base";
 import { Logger } from "akanjs/common";
 import { type InjectRegistry, type LiveRegistry, type WebsocketAdaptor } from "akanjs/service";
 import { type Endpoint, type EndpointCls } from "../../signal/endpoint.d.ts";
@@ -26,7 +26,7 @@ export declare class SignalResolver {
     static resolveSlice(sliceCls: SliceCls): EndpointCls;
     static resolveEndpoint(endpointCls: EndpointCls, endpoint: Endpoint, { registry, env, live, middleware, }: {
         registry: InjectRegistry;
-        env: BaseEnv;
+        env: BackendEnv;
         live: LiveRegistry;
         middleware: Map<string, MiddlewareCls>;
     }): SignalRoutes;

package/types/service/injectInfo.d.ts

@@ -1,4 +1,4 @@
-import { type BaseEnv } from "akanjs/base";
+import { type BackendEnv } from "akanjs/base";
 import { type ConstantFieldTypeInput, type FieldToValue, type PlainTypeToFieldType } from "akanjs/constant";
 import type { DatabaseModel } from "akanjs/document";
 import type { Endpoint, EndpointCls, Internal, InternalCls, ServerSignal, ServerSignalCls, SliceCls } from "akanjs/signal";
@@ -60,7 +60,7 @@ export declare class InjectInfo<Type extends InjectType = any, ReturnType = any,
     readonly cacheOption?: CacheSetOptions;
     readonly parentRefName: string;
     constructor(type: Type, options: InjectBuilderOptions<ReturnType>);
-    static resolveInjection(instance: Adaptor | Service, applyCls: AdaptorCls | ServiceCls, registry: InjectRegistry, env: BaseEnv): Promise<void>;
+    static resolveInjection(instance: Adaptor | Service, applyCls: AdaptorCls | ServiceCls, registry: InjectRegistry, env: BackendEnv): Promise<void>;
 }
 type GetFieldValue<ValueRef, ExplicitType, MapValue = never> = unknown extends ExplicitType ? FieldToValue<ValueRef, MapValue> : ExplicitType;
 export declare const injectionBuilder: (parentRefName: string) => {

package/types/service/predefinedAdaptor/database.adaptor.d.ts

@@ -1,6 +1,6 @@
 import { Database } from "bun:sqlite";
 import type { Client as LibsqlClient } from "@libsql/client";
-import { type BaseEnv, type PromiseOrObject } from "akanjs/base";
+import { type PromiseOrObject } from "akanjs/base";
 import { type ConstantModel } from "akanjs/constant";
 import { type DatabaseModel, type DocumentQuery, type DocumentSchema, type DocumentUpdate, type DocumentUpdateInput, type DocumentUpdateOperator, type DocumentUpdateOptions, type SchemaOf } from "akanjs/document";
 import type { Sql } from "postgres";
@@ -120,7 +120,7 @@ export interface DatabaseAdaptor {
     transaction<T>(fn: () => PromiseOrObject<T>): Promise<T>;
     getSearchIndex(): SearchIndex | null;
 }
-interface SqliteEnv extends BaseEnv {
+interface SqliteEnv {
     workspaceRoot?: string;
     database?: DatabaseConfig;
 }

package/types/service/predefinedAdaptor/queue.adaptor.d.ts

@@ -1,4 +1,3 @@
-import type { BaseEnv } from "akanjs/base";
 import type { AkanJob, AkanJobOptions, AkanWorker } from "../ipcTypes.d.ts";
 type QueueLike = {
     add(name: string, args: unknown[], options?: AkanJobOptions): Promise<unknown>;
@@ -10,7 +9,9 @@ export interface QueueAdaptor {
 }
 declare const BullQueue_base: import("..").AdaptorCls<{}, {
     redis: import("..").InjectInfo<"plug", import("ioredis").default, never, never>;
-    prefix: import("..").InjectInfo<"env", string, BaseEnv, never>;
+    prefix: import("..").InjectInfo<"env", string, {
+        [key: string]: any;
+    }, never>;
 }>;
 export declare class BullQueue extends BullQueue_base implements QueueAdaptor {
     #private;

package/types/service/predefinedAdaptor/solidQueue.adaptor.d.ts

@@ -3,8 +3,12 @@ import type { QueueAdaptor } from "./queue.adaptor";
 import { type SolidConfig, type SolidEnv } from "./solidSqlite.d.ts";
 declare const SolidQueue_base: import("..").AdaptorCls<{}, {
     config: import("..").InjectInfo<"env", Required<SolidConfig>, SolidEnv, never>;
-    queueName: import("..").InjectInfo<"env", string, SolidEnv, never>;
-    workerId: import("..").InjectInfo<"env", string, SolidEnv, never>;
+    queueName: import("..").InjectInfo<"env", string, {
+        [key: string]: any;
+    }, never>;
+    workerId: import("..").InjectInfo<"env", string, {
+        [key: string]: any;
+    }, never>;
 }>;
 export declare class SolidQueue extends SolidQueue_base implements QueueAdaptor {
     #private;

package/types/service/predefinedAdaptor/solidSqlite.d.ts

@@ -1,5 +1,5 @@
 import { Database } from "bun:sqlite";
-import type { BaseEnv, Dayjs } from "akanjs/base";
+import { type Dayjs } from "akanjs/base";
 export interface SolidConfig {
     filePath?: string;
     journalMode?: "WAL" | "DELETE" | "TRUNCATE" | "PERSIST" | "MEMORY" | "OFF";
@@ -9,7 +9,7 @@ export interface SolidConfig {
     queuePollIntervalMs?: number;
     queueLeaseMs?: number;
 }
-export interface SolidEnv extends BaseEnv {
+export interface SolidEnv {
     workspaceRoot?: string;
     solid?: SolidConfig;
 }

package/types/signal/agent.signal.d.ts

@@ -1,12 +1,7 @@
-import { Any } from "akanjs/base";
 import { AgentTurn } from "./agentTurn.d.ts";
 declare const AgentInternal_base: import("./internal.d.ts").InternalCls<import("akanjs/service").ServiceModel<typeof import("akanjs/service").AgentService, any, any, {
     agentService: import("akanjs/service").AgentService;
-}>, {
-    warnOpenRelay: import("./internalInfo.d.ts").InternalInfo<"init", {
-        agentService: import("akanjs/service").AgentService;
-    }, [], [], [], typeof Any, void, false>;
-}>;
+}>, {}>;
 export declare class AgentInternal extends AgentInternal_base {
 }
 declare const AgentEndpoint_base: import("./endpoint.d.ts").EndpointCls<import("akanjs/service").ServiceModel<typeof import("akanjs/service").AgentService, any, any, {

package/types/signal/guards.d.ts

@@ -15,8 +15,8 @@ export type AgentRelayPolicy = (context: SignalContext) => boolean | Promise<boo
  * Gate for the `runAgentTurn` relay. Every tool runs in the caller's own browser session, so the LLM key is the
  * one thing this endpoint spends — ungated, any visitor can bill the app's provider through fetch alone.
  *
- * The framework has no account model to gate on, so with no policy registered it allows everyone — what `Public`
- * said before, but with a seam: a product hardens it at boot, e.g.
+ * The framework has no account model to gate on, so with no policy registered it refuses every call — the same
+ * answer `None` gives. An app opens it at boot, e.g.
  * `AgentRelayAccess.use((context) => !!context.get("account"))`. The policy is the app's; the framework cannot know it.
  */
 export declare class AgentRelayAccess implements Guard {
@@ -25,7 +25,5 @@ export declare class AgentRelayAccess implements Guard {
     static scope: GuardScope;
     static use(policy: AgentRelayPolicy | null): void;
     static get hasPolicy(): boolean;
-    /** Runs at boot, after the app entry has evaluated — a module-scope check would fire before `use()` could. */
-    static warnIfOpen(): void;
     canPass(context: SignalContext): Promise<boolean>;
 }

package/types/signal/middleware.d.ts

@@ -1,6 +1,6 @@
-import type { BaseEnv, Cls, PromiseOrObject } from "akanjs/base";
+import type { BackendEnv, Cls, PromiseOrObject } from "akanjs/base";
 import type { SignalContext } from "./signalContext.d.ts";
-export interface Middleware<Env extends BaseEnv = BaseEnv> {
+export interface Middleware<Env extends BackendEnv = BackendEnv> {
     use(env: Env): PromiseOrObject<(context: SignalContext, next: () => Promise<unknown>) => PromiseOrObject<unknown>>;
 }
 export type MiddlewareCls = Cls<Middleware, {
@@ -8,13 +8,13 @@ export type MiddlewareCls = Cls<Middleware, {
 }>;
 export declare const middleware: (refName: string) => {
     new (): {
-        use(env: BaseEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
+        use(env: BackendEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
     };
     refName: string;
 };
 declare const Logging_base: {
     new (): {
-        use(env: BaseEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
+        use(env: BackendEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
     };
     refName: string;
 };
@@ -23,7 +23,7 @@ export declare class Logging extends Logging_base {
 }
 declare const Cache_base: {
     new (): {
-        use(env: BaseEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
+        use(env: BackendEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
     };
     refName: string;
 };
@@ -32,7 +32,7 @@ export declare class Cache extends Cache_base {
 }
 declare const Timeout_base: {
     new (): {
-        use(env: BaseEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
+        use(env: BackendEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
     };
     refName: string;
 };
@@ -41,7 +41,7 @@ export declare class Timeout extends Timeout_base {
 }
 declare const Retry_base: {
     new (): {
-        use(env: BaseEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
+        use(env: BackendEnv): Promise<(context: SignalContext, next: () => Promise<unknown>) => Promise<unknown>>;
     };
     refName: string;
 };

package/types/signal/signalContext.d.ts

@@ -1,4 +1,4 @@
-import { type BaseEnv, type PromiseOrObject } from "akanjs/base";
+import { type BackendEnv, type PromiseOrObject } from "akanjs/base";
 import { type ConstantFieldTypeInput } from "akanjs/constant";
 import type { Adaptor, AdaptorCls, DatabaseService, InjectRegistry, LiveRegistry } from "akanjs/service";
 import type { Internal, InternalInfo, MiddlewareCls } from ".";
@@ -11,7 +11,7 @@ interface WebSocketRequest {
     eventType: WebSocketEventType;
 }
 type RuntimeRecord = Record<string, unknown>;
-export declare class SignalContext<Ctx extends HttpExecutionContext | WebSocketExecutionContext = HttpExecutionContext | WebSocketExecutionContext, Env extends BaseEnv = BaseEnv> {
+export declare class SignalContext<Ctx extends HttpExecutionContext | WebSocketExecutionContext = HttpExecutionContext | WebSocketExecutionContext, Env extends BackendEnv = BackendEnv> {
     #private;
     key: string;
     transport: SignalTransportType;

package/types/test/index.d.ts

@@ -1,4 +1,4 @@
 export { sample } from "./sample.d.ts";
 export { sampleOf } from "./sampleOf.d.ts";
 export { configureSignalTest, getOrSetupSignalTestContext, getOrSetupSignalTestFetch, getSignalTestContext, getSignalTestFetch, hasSignalTestContext, type SignalTestContext, type SignalTestOptions, type SignalTestTarget, setupSignalTestTarget, terminateSignalTestContext, } from "./signalTestRuntime.d.ts";
-export { TestServer, type TestServerOptions } from "./testServer.d.ts";
+export { type TestEnv, TestServer, type TestServerOptions } from "./testServer.d.ts";

package/types/test/signalTestRuntime.d.ts

@@ -1,11 +1,10 @@
-import type { BackendEnv } from "akanjs/base";
 import type { FetchProxy } from "akanjs/fetch";
 import type { AkanLib } from "akanjs/server";
-import { type TestServerOptions } from "./testServer.d.ts";
+import { type TestEnv, type TestServerOptions } from "./testServer.d.ts";
 export interface SignalTestTarget {
     type: "app" | "lib";
     name: string;
-    env: BackendEnv;
+    env: TestEnv;
     fetch: FetchProxy;
     libs: AkanLib[];
 }

package/types/test/testServer.d.ts

@@ -1,6 +1,8 @@
-import type { BackendEnv } from "akanjs/base";
+import type { BackendEnv, BaseEnv } from "akanjs/base";
 import { type AkanLib } from "akanjs/server";
 type TestDatabaseMode = "memory" | "tempFile";
+/** `BackendEnv` carries server options only, so a harness that also stamps `process.env` needs the identity beside it. */
+export type TestEnv = BaseEnv & BackendEnv;
 export interface TestServerOptions {
     workerId?: number;
     port?: number;
@@ -12,13 +14,13 @@ export interface TestServerOptions {
 export declare class TestServer {
     #private;
     workerId: number;
-    static initClient(env: BackendEnv, workerId?: number): void;
-    static applyProcessEnv(env: BackendEnv, { workerId, port, serverMode, }?: {
+    static initClient(env: BaseEnv, workerId?: number): void;
+    static applyProcessEnv(env: BaseEnv, { workerId, port, serverMode, }?: {
         workerId?: number;
         port?: number;
         serverMode?: "federation" | "batch" | "all";
     }): void;
-    constructor(env: BackendEnv, libs: AkanLib | AkanLib[], options?: TestServerOptions);
+    constructor(env: TestEnv, libs: AkanLib | AkanLib[], options?: TestServerOptions);
     init(): Promise<void>;
     cleanup(): Promise<void>;
     terminate(): Promise<void>;