kizlo 0.26.1 → 0.27.0

package/dist/adapters/auth.d.ts

@@ -15,7 +15,7 @@ interface AuthUser {
 }
 type AuthGetSession = (request: Request | null) => Promisify<AuthUser | null>;
 interface AuthAdapter {
-  /** Resolve the authenticated session from the request, or `null` when there is no session. Receives `null` for server-side (non-HTTP) invocations. */
+  /** Resolve the session from an HTTP request, a cookie-derived server request, or `null` when neither is available. */
   getSession: AuthGetSession;
 }
 /** Author a custom auth adapter, typed against the {@link AuthAdapter} contract. */

package/dist/adapters/geo.cloudflare.d.ts

@@ -0,0 +1,7 @@
+import { GeoAdapter } from "./geo.js";
+
+//#region src/adapters/geo.cloudflare.d.ts
+/** Read trusted Cloudflare connection headers in Next.js/vinext. Only use behind Cloudflare ingress. */
+declare function geoCloudflareNext(): GeoAdapter;
+//#endregion
+export { geoCloudflareNext };

package/dist/adapters/geo.cloudflare.js

@@ -0,0 +1,23 @@
+//#region src/adapters/geo.cloudflare.ts
+/** Read trusted Cloudflare connection headers in Next.js/vinext. Only use behind Cloudflare ingress. */
+function geoCloudflareNext() {
+	return { getConnInfo: async (request) => {
+		let headers = request?.headers;
+		if (!headers) try {
+			headers = await (await import("next/headers")).headers();
+		} catch {}
+		const country = headers?.get("cf-ipcountry") || null;
+		return {
+			ip: headers?.get("cf-connecting-ip") || null,
+			country: country === "XX" || country === "T1" ? null : country,
+			city: null,
+			state: null,
+			postcode: null,
+			timezone: null,
+			userAgent: headers?.get("user-agent") || null
+		};
+	} };
+}
+
+//#endregion
+export { geoCloudflareNext };

package/dist/adapters/geo.d.ts

@@ -2,7 +2,7 @@ import { Promisify } from "@kizlo/shared";
 
 //#region src/adapters/geo.d.ts
 interface ConnInfo {
-  /** Client IP address, or `null` if unavailable. */
+  /** Trusted client IP forwarded to WordPress as x-real-ip, or `null` if unavailable. */
   ip: string | null;
   /** ISO country code, or `null`. */
   country: string | null;

package/dist/adapters/geo.vercel.js

@@ -5,8 +5,8 @@ function geoVercelNext() {
 		let nextHeaders;
 		try {
 			nextHeaders = await (await import("next/headers")).headers();
-		} catch (err) {
-			throw new Error("geoVercelNext: no Request was provided and `next/headers` could not be loaded. Install `next` as a peer dependency, or pass a Request to the SDK.", { cause: err });
+		} catch {
+			return readVercelHeaders(new Headers());
 		}
 		return readVercelHeaders(nextHeaders);
 	} };

package/dist/context.d.ts

@@ -13,6 +13,8 @@ import { IntegrationPluginRequirement } from "@kizlo/shared";
 
 //#region src/context.d.ts
 interface ContextConfig {
+  /** Public Kizlo URL used to resolve cookie-based authentication for direct server calls. */
+  baseUrl?: string;
   siteSecret: string;
   adapters?: ServiceAdapters;
   credentials: WordPressCredentials;
@@ -64,6 +66,7 @@ declare class Context {
   private readonly settings;
   private readonly email;
   constructor(config: ContextConfig);
+  private createServices;
   /**
    * Report a request that did not reach Kizlo WordPress, or a WordPress side older than the client
    * needs. The transport supplies the URL and status even when fetch itself failed; a Kizlo response
@@ -75,34 +78,34 @@ declare class Context {
   /** Bold yellow, boxed in dashes so it stands out in a busy dev console. */
   private warn;
   createRestContext(request: Request): {
-    headers: Headers;
-    request: Request;
-    config: ContextConfig;
-    logger: Logger;
-    wordpress: WordPressTransport;
-    settings: SettingsService;
-    email: EmailService;
     getConnInfo: ConnInfoFn;
     verifyCaptcha: VerifyCaptchaFn;
     getSession: SessionFn;
     verifyPreviewToken: VerifyPreviewTokenFn;
     cookies: CookiesStorage;
     invokedBy: "client";
-  };
-  createServerContext(): {
-    cookies: CookiesStorage;
-    headers: null;
-    request: null;
-    config: ContextConfig;
-    logger: Logger;
     wordpress: WordPressTransport;
     settings: SettingsService;
     email: EmailService;
+    headers: Headers;
+    request: Request;
+    config: ContextConfig;
+    logger: Logger;
+  };
+  createServerContext(): {
     getSession: SessionFn;
     getConnInfo: ConnInfoFn;
     verifyCaptcha: VerifyCaptchaFn;
     verifyPreviewToken: VerifyPreviewTokenFn;
     invokedBy: "server";
+    wordpress: WordPressTransport;
+    settings: SettingsService;
+    email: EmailService;
+    cookies: CookiesStorage;
+    headers: null;
+    request: null;
+    config: ContextConfig;
+    logger: Logger;
   };
   private createRestCookieStorage;
   private createVerifyCaptchaFn;

package/dist/context.js

@@ -52,13 +52,25 @@ var Context = class {
 	email;
 	constructor(config) {
 		this.config = config;
-		this.wordpress = createWordPressClient(new WordPressTransport({
+		this.logger = this.createLogger();
+		const services = this.createServices(null);
+		this.wordpress = services.wordpress;
+		this.settings = services.settings;
+		this.email = services.email;
+	}
+	createServices(request) {
+		const config = this.config;
+		const geo = config.adapters?.geo;
+		const wordpress = createWordPressClient(new WordPressTransport({
 			credentials: config.credentials,
-			onResult: (result) => this.warnIfOutdated(result)
+			onResult: (result) => this.warnIfOutdated(result),
+			getClientIp: geo ? async () => (await geo.getConnInfo(request)).ip : void 0
 		}), config.introspection ?? {});
-		this.settings = new SettingsService(this.wordpress);
-		this.email = new EmailService(this.wordpress);
-		this.logger = this.createLogger();
+		return {
+			wordpress,
+			settings: new SettingsService(wordpress),
+			email: new EmailService(wordpress)
+		};
 	}
 	/**
 	* Report a request that did not reach Kizlo WordPress, or a WordPress side older than the client
@@ -97,9 +109,11 @@ var Context = class {
 			request: request.clone(),
 			config: this.config,
 			logger: this.logger,
-			wordpress: this.wordpress,
-			settings: this.settings,
-			email: this.email,
+			...this.config.adapters?.geo ? this.createServices(request) : {
+				wordpress: this.wordpress,
+				settings: this.settings,
+				email: this.email
+			},
 			getConnInfo: this.createConnInfoFn(request),
 			verifyCaptcha: this.createVerifyCaptchaFn(request),
 			getSession: this.createGetSessionFn(request),
@@ -109,16 +123,19 @@ var Context = class {
 		};
 	}
 	createServerContext() {
+		const cookies = new CookiesStorage(this.config.adapters?.cookies);
 		return {
-			cookies: new CookiesStorage(this.config.adapters?.cookies),
+			cookies,
 			headers: null,
 			request: null,
 			config: this.config,
 			logger: this.logger,
-			wordpress: this.wordpress,
-			settings: this.settings,
-			email: this.email,
-			getSession: this.createGetSessionFn(null),
+			...this.config.adapters?.geo ? this.createServices(null) : {
+				wordpress: this.wordpress,
+				settings: this.settings,
+				email: this.email
+			},
+			getSession: this.createGetSessionFn(null, cookies),
 			getConnInfo: this.createConnInfoFn(null),
 			verifyCaptcha: this.createVerifyCaptchaFn(null),
 			verifyPreviewToken: this.createVerifyPreviewTokenFn(),
@@ -176,9 +193,19 @@ var Context = class {
 			return await this.config.adapters?.geo?.getConnInfo?.(request) ?? null;
 		};
 	}
-	createGetSessionFn(request) {
+	createGetSessionFn(request, cookies) {
 		return async () => {
-			return await Promise.resolve(this.config.adapters?.auth?.getSession?.(request)) ?? null;
+			const auth = this.config.adapters?.auth;
+			if (!auth) return null;
+			let authRequest = request;
+			if (!authRequest && this.config.baseUrl && cookies) {
+				const cookieHeader = (await cookies.get()).map(({ name, value }) => stringifySetCookie({
+					name,
+					value
+				})).join("; ");
+				if (cookieHeader) authRequest = new Request(this.config.baseUrl, { headers: { cookie: cookieHeader } });
+			}
+			return await auth.getSession(authRequest) ?? null;
 		};
 	}
 	createVerifyPreviewTokenFn() {

package/dist/index.d.ts

@@ -11,6 +11,7 @@ import { CurrencyFormat, IdentifierInput, LIST_ORDER, ListMetadata, ListOrder, P
 import { AnyContext, AnyNestedClient, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, HTTPMethod, List, MaybeOptionalOptions, RedirectInput, RedirectStatus } from "./shared/types.js";
 import { createCookiesAdapter } from "./adapters/cookies.js";
 import { ConnInfo, GeoAdapter, GeoGetConnInfo, createGeoAdapter, geoMock } from "./adapters/geo.js";
+import { geoCloudflareNext } from "./adapters/geo.cloudflare.js";
 import { geoVercelNext } from "./adapters/geo.vercel.js";
 import { ConsoleLogAdapterOptions, LogLevel, LogPayload, Logger, LoggerAdapter, consoleLog, createLoggerAdapter, noopAdapter } from "./adapters/logger.js";
 import { ServiceAdapters, mergeServiceAdapters } from "./adapters/types.js";
@@ -43,4 +44,4 @@ import { ShaAlgorithm, compare, hash, hmac } from "./shared/crypto.js";
 import { Identifier, parseIdentifier } from "./shared/identifier.js";
 import { createOrpcRouter } from "./shared/router.js";
 import { deserializeCurrencyFormat, deserializeListMetadata, emptyList, serializeCurrencyFormat } from "./shared/serialize.js";
-export { ActiveKizloClient, ActiveWordPressClient, AnyContext, AnyEventSchema, AnyEvents, AnyIntegration, AnyKizloConfig, AnyMiddleware, AnyNestedClient, AnyProcedure, AnyProcedureTree, AuthAdapter, AuthGetSession, AuthUser, AuthorsSettings, AuthorsSettingsInput, BaseHandlerOptions, BrandSettings, BrandSettingsInput, COMMON_ERRORS, CONTENT_TYPES, CORE_PROCEDURES, CaptchaAdapter, type Category, type CategoryCustomFields, CategoryCustomFieldsSchema, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, ConnInfo, ConnInfoFn, ConsoleLogAdapterOptions, ContentType, Context, ContextConfig, Contract, ContractProcedure, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, CookiesStorage, CoreProcedures, CrawlingSettings, CrawlingSettingsInput, CreateKizloOptions, CreateSitemapRouteOptions, CurrencyFormat, DefinedErrorMapLike, DevPluginSource, EnvReader, EnvRecord, EnvSource, ErrorDefinition, EventHandler, EventHandlerFn, ExtractIntegrationProcedures, ExtractMiddlewareContextOutput, ExtractParams, ExtractProcedureByScope, Fixture, FixtureCleanupFn, FixtureSeedFn, FixtureSettleFn, GeoAdapter, GeoGetConnInfo, HTTPMethod, HeadlessSettings, HeadlessSettingsInput, IconDescriptor, Identifier, IdentifierInput, IdentitySettings, IdentitySettingsInput, InferClientData, InferClientError, InferClientInput, InferClientResult, InferEventUnion, InferIntegrationProcedures, InferMiddlewares, InferProcedureData, InferProcedureError, InferProcedureInput, InferProcedureResult, Integration, IntegrationRequirements, InvocationScope, JsonValue, Kizlo, KizloBrowserClient, KizloClient, KizloClientConfig, KizloConfig, KizloEnv, KizloError, KizloErrorOptions, KizloErrorUnion, KizloProcedureRegistry, KizloResult, LIST_ORDER, List, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, LocalPlugin, LogLevel, LogPayload, Logger, LoggerAdapter, ManifestIcon, MaybeCallerOptions, MaybeOptionalOptions, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, OpenapiPart, OrganizationFounder, OrganizationSettings, OrganizationSettingsInput, type Page, type PageCustomFields, PageCustomFieldsSchema, PersonSettings, PersonSettingsInput, PluginSource, type Post, type PostCustomFields, PostCustomFieldsSchema, PostStatusDefinition, PostTypeSettings, PostTypeSettingsInput, PreviewTokenData, PreviewTokenPayload, Procedure, ProcedureContext, ProcedureErrors, ProcedureHandler, ProcedureMethod, ProcedureOptions, ProcedureTreeDepthTuple, RedirectInput, RedirectStatus, ResolveParamsPart, ResolvedIcons, ResolvedSchemaInput, ResolvedSchemaOutput, ResultClient, Robots, RobotsRule, RootProcedures, S2SClient, SITEMAP_BASE, SITEMAP_INDEX_SLUG, SchemaIO, SeedContext, Seo, SeoHead, SeoSchema, ServiceAdapters, SessionFn, Settings, SettingsService, SettleContext, ShaAlgorithm, SiteSettings, SiteSettingsInput, Sitemap, SitemapIndex, SitemapIndexEntry, SitemapList, SitemapRouteExtra, SitemapUrl, SitemapUrlImage, SitemapUrlList, SocialProfile, type Tag, type TagCustomFields, TagCustomFieldsSchema, TaxonomySettings, TaxonomySettingsInput, TestAdminUser, TestCredentials, TestUser, ThrowableErrorFn, ThrowableErrorMap, UploadsSettings, UploadsSettingsInput, VerifyCaptchaFn, VerifyPreviewTokenFn, WEB_MANIFEST_ROUTE, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapUrl, WPK_SitemapUrlImage, WP_CallOptions, WP_Client, WP_CommonErrorCode, WP_CurrencyFormat, WP_CustomFields, WP_CustomFieldsPath, WP_Endpoint, WP_EndpointData, WP_EndpointDefinition, WP_EndpointError, WP_EndpointInput, WP_EndpointPath, WP_EndpointResult, WP_Error, WP_ErrorData, WP_Failure, WP_List, WP_ListMetadata, WP_RequestBuild, WP_RequestContentType, WP_RequestInput, WP_RequestMethod, WP_RequestParts, WP_ResponseContentType, WP_Result, WP_Schema, WP_Success, WP_TransportFailure, WP_TypedHeaders, WebManifest, WebhookOptions, WebhookSettings, WebhookSettingsInput, WithCommonErrorMap, WordPressClientRegistry, WordPressCredentials, WordPressCustomFieldsRegistry, WordPressEndpointRegistry, WordPressEnv, WordPressSchemaRegistry, WordPressTransport, WordPressTransportOptions, WordPressTransportResult, altcha, arkose, assertIntegrationEndpoints, assertIntegrationEnv, authMock, buildProcedure, buildWebManifest, buildWordPressRequest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createGeoAdapter, createIntegration, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createResultClient, createSitemapRedirectRoute, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, createWordPressClient, customFieldsSchema, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, integrationEnv, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, mergeServiceAdapters, missingEndpoints, missingEnv, noopAdapter, parseIdentifier, parseSitemapSlug, readEnv, recaptcha, renderJsonLd, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, resolveWordPressConnection, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, sortIntegrations, toKizloError, turnstile, wordPressConnectionComplete, wpEndpoint, xmlResponse };
+export { ActiveKizloClient, ActiveWordPressClient, AnyContext, AnyEventSchema, AnyEvents, AnyIntegration, AnyKizloConfig, AnyMiddleware, AnyNestedClient, AnyProcedure, AnyProcedureTree, AuthAdapter, AuthGetSession, AuthUser, AuthorsSettings, AuthorsSettingsInput, BaseHandlerOptions, BrandSettings, BrandSettingsInput, COMMON_ERRORS, CONTENT_TYPES, CORE_PROCEDURES, CaptchaAdapter, type Category, type CategoryCustomFields, CategoryCustomFieldsSchema, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, ConnInfo, ConnInfoFn, ConsoleLogAdapterOptions, ContentType, Context, ContextConfig, Contract, ContractProcedure, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, CookiesStorage, CoreProcedures, CrawlingSettings, CrawlingSettingsInput, CreateKizloOptions, CreateSitemapRouteOptions, CurrencyFormat, DefinedErrorMapLike, DevPluginSource, EnvReader, EnvRecord, EnvSource, ErrorDefinition, EventHandler, EventHandlerFn, ExtractIntegrationProcedures, ExtractMiddlewareContextOutput, ExtractParams, ExtractProcedureByScope, Fixture, FixtureCleanupFn, FixtureSeedFn, FixtureSettleFn, GeoAdapter, GeoGetConnInfo, HTTPMethod, HeadlessSettings, HeadlessSettingsInput, IconDescriptor, Identifier, IdentifierInput, IdentitySettings, IdentitySettingsInput, InferClientData, InferClientError, InferClientInput, InferClientResult, InferEventUnion, InferIntegrationProcedures, InferMiddlewares, InferProcedureData, InferProcedureError, InferProcedureInput, InferProcedureResult, Integration, IntegrationRequirements, InvocationScope, JsonValue, Kizlo, KizloBrowserClient, KizloClient, KizloClientConfig, KizloConfig, KizloEnv, KizloError, KizloErrorOptions, KizloErrorUnion, KizloProcedureRegistry, KizloResult, LIST_ORDER, List, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, LocalPlugin, LogLevel, LogPayload, Logger, LoggerAdapter, ManifestIcon, MaybeCallerOptions, MaybeOptionalOptions, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, OpenapiPart, OrganizationFounder, OrganizationSettings, OrganizationSettingsInput, type Page, type PageCustomFields, PageCustomFieldsSchema, PersonSettings, PersonSettingsInput, PluginSource, type Post, type PostCustomFields, PostCustomFieldsSchema, PostStatusDefinition, PostTypeSettings, PostTypeSettingsInput, PreviewTokenData, PreviewTokenPayload, Procedure, ProcedureContext, ProcedureErrors, ProcedureHandler, ProcedureMethod, ProcedureOptions, ProcedureTreeDepthTuple, RedirectInput, RedirectStatus, ResolveParamsPart, ResolvedIcons, ResolvedSchemaInput, ResolvedSchemaOutput, ResultClient, Robots, RobotsRule, RootProcedures, S2SClient, SITEMAP_BASE, SITEMAP_INDEX_SLUG, SchemaIO, SeedContext, Seo, SeoHead, SeoSchema, ServiceAdapters, SessionFn, Settings, SettingsService, SettleContext, ShaAlgorithm, SiteSettings, SiteSettingsInput, Sitemap, SitemapIndex, SitemapIndexEntry, SitemapList, SitemapRouteExtra, SitemapUrl, SitemapUrlImage, SitemapUrlList, SocialProfile, type Tag, type TagCustomFields, TagCustomFieldsSchema, TaxonomySettings, TaxonomySettingsInput, TestAdminUser, TestCredentials, TestUser, ThrowableErrorFn, ThrowableErrorMap, UploadsSettings, UploadsSettingsInput, VerifyCaptchaFn, VerifyPreviewTokenFn, WEB_MANIFEST_ROUTE, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapUrl, WPK_SitemapUrlImage, WP_CallOptions, WP_Client, WP_CommonErrorCode, WP_CurrencyFormat, WP_CustomFields, WP_CustomFieldsPath, WP_Endpoint, WP_EndpointData, WP_EndpointDefinition, WP_EndpointError, WP_EndpointInput, WP_EndpointPath, WP_EndpointResult, WP_Error, WP_ErrorData, WP_Failure, WP_List, WP_ListMetadata, WP_RequestBuild, WP_RequestContentType, WP_RequestInput, WP_RequestMethod, WP_RequestParts, WP_ResponseContentType, WP_Result, WP_Schema, WP_Success, WP_TransportFailure, WP_TypedHeaders, WebManifest, WebhookOptions, WebhookSettings, WebhookSettingsInput, WithCommonErrorMap, WordPressClientRegistry, WordPressCredentials, WordPressCustomFieldsRegistry, WordPressEndpointRegistry, WordPressEnv, WordPressSchemaRegistry, WordPressTransport, WordPressTransportOptions, WordPressTransportResult, altcha, arkose, assertIntegrationEndpoints, assertIntegrationEnv, authMock, buildProcedure, buildWebManifest, buildWordPressRequest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createGeoAdapter, createIntegration, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createResultClient, createSitemapRedirectRoute, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, createWordPressClient, customFieldsSchema, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoCloudflareNext, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, integrationEnv, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, mergeServiceAdapters, missingEndpoints, missingEnv, noopAdapter, parseIdentifier, parseSitemapSlug, readEnv, recaptcha, renderJsonLd, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, resolveWordPressConnection, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, sortIntegrations, toKizloError, turnstile, wordPressConnectionComplete, wpEndpoint, xmlResponse };

package/dist/index.js

@@ -3,6 +3,7 @@ import { compare, hash, hmac } from "./shared/crypto.js";
 import { altcha, arkose, createCaptchaAdapter, friendlyCaptcha, hcaptcha, recaptcha, turnstile } from "./adapters/captcha.js";
 import { createCookiesAdapter } from "./adapters/cookies.js";
 import { createGeoAdapter, geoMock } from "./adapters/geo.js";
+import { geoCloudflareNext } from "./adapters/geo.cloudflare.js";
 import { geoVercelNext } from "./adapters/geo.vercel.js";
 import { consoleLog, createLoggerAdapter, noopAdapter } from "./adapters/logger.js";
 import { mergeServiceAdapters } from "./adapters/types.js";
@@ -38,4 +39,4 @@ import { Kizlo, createKizlo, integrationEnv, resolveKizloConfig, resolveWordPres
 import { SITEMAP_BASE, SITEMAP_INDEX_SLUG, createSitemapRedirectRoute, createSitemapRoute } from "./seo/sitemap.js";
 import { createMiddleware } from "./shared/middleware.js";
 
-export { COMMON_ERRORS, CONTENT_TYPES, CORE_PROCEDURES, CategoryCustomFieldsSchema, ContentType, Context, CookiesStorage, CurrencyFormat, IdentifierInput, Kizlo, KizloClient, KizloError, LIST_ORDER, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, PageCustomFieldsSchema, PostCustomFieldsSchema, PreviewTokenData, PreviewTokenPayload, Robots, RobotsRule, SITEMAP_BASE, SITEMAP_INDEX_SLUG, Seo, SeoHead, SeoSchema, SettingsService, Sitemap, SitemapIndex, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, TagCustomFieldsSchema, WEB_MANIFEST_ROUTE, WP_Error, WordPressTransport, altcha, arkose, assertIntegrationEndpoints, assertIntegrationEnv, authMock, buildProcedure, buildWebManifest, buildWordPressRequest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createGeoAdapter, createIntegration, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createResultClient, createSitemapRedirectRoute, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, createWordPressClient, customFieldsSchema, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, integrationEnv, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, mergeServiceAdapters, missingEndpoints, missingEnv, noopAdapter, parseIdentifier, parseSitemapSlug, readEnv, recaptcha, renderJsonLd, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, resolveWordPressConnection, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, sortIntegrations, toKizloError, turnstile, wordPressConnectionComplete, wpEndpoint, xmlResponse };
+export { COMMON_ERRORS, CONTENT_TYPES, CORE_PROCEDURES, CategoryCustomFieldsSchema, ContentType, Context, CookiesStorage, CurrencyFormat, IdentifierInput, Kizlo, KizloClient, KizloError, LIST_ORDER, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, PageCustomFieldsSchema, PostCustomFieldsSchema, PreviewTokenData, PreviewTokenPayload, Robots, RobotsRule, SITEMAP_BASE, SITEMAP_INDEX_SLUG, Seo, SeoHead, SeoSchema, SettingsService, Sitemap, SitemapIndex, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, TagCustomFieldsSchema, WEB_MANIFEST_ROUTE, WP_Error, WordPressTransport, altcha, arkose, assertIntegrationEndpoints, assertIntegrationEnv, authMock, buildProcedure, buildWebManifest, buildWordPressRequest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createGeoAdapter, createIntegration, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createResultClient, createSitemapRedirectRoute, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, createWordPressClient, customFieldsSchema, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoCloudflareNext, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, integrationEnv, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, mergeServiceAdapters, missingEndpoints, missingEnv, noopAdapter, parseIdentifier, parseSitemapSlug, readEnv, recaptcha, renderJsonLd, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, resolveWordPressConnection, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, sortIntegrations, toKizloError, turnstile, wordPressConnectionComplete, wpEndpoint, xmlResponse };

package/dist/integrations/nextjs/integration.js

@@ -1,6 +1,7 @@
 import { FRAMEWORK_INTEGRATION_ORDER } from "../../shared/constants.js";
 import { createIntegration } from "../../shared/integration.js";
 import { runtimeEnv } from "../runtime-env.js";
+import { createNextCookiesInterface } from "./utils.js";
 import { nextRevalidation } from "./revalidate.js";
 
 //#region src/integrations/nextjs/integration.ts
@@ -11,6 +12,7 @@ function nextjs(options = {}) {
 	return createIntegration({
 		id: "nextjs",
 		order: FRAMEWORK_INTEGRATION_ORDER,
+		adapters: { cookies: createNextCookiesInterface() },
 		env: runtimeEnv(source, "NEXT_PUBLIC_KIZLO_BASE_URL"),
 		events: revalidation === false ? void 0 : nextRevalidation(typeof revalidation === "object" ? revalidation : void 0).events
 	});

package/dist/kizlo.js

@@ -27,6 +27,7 @@ var Kizlo = class {
 		this.config = config;
 		const integrations = this.registerIntegrations();
 		this.context = new Context({
+			baseUrl: config.baseUrl,
 			adapters: integrations.adapters,
 			siteSecret: config.siteSecret,
 			credentials: config.credentials,

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.26.1";
+var version = "0.27.0";
 
 //#endregion
 export { version };

package/dist/webhook/index.js

@@ -3,7 +3,7 @@ import { createProcedure } from "../shared/procedure.js";
 import { AnyEvent } from "./schema.js";
 import { validateEvent } from "./utils.js";
 import { tryCatchSync, verifyWebhook } from "@kizlo/shared";
-import z from "zod";
+import z$1 from "zod";
 
 //#region src/webhook/index.ts
 function createEventHandler(eventsOrHandler, maybeHandler) {
@@ -21,7 +21,7 @@ function createWebhookRouter(options) {
 		method: "POST",
 		body: AnyEvent,
 		path: "/webhooks",
-		output: z.void()
+		output: z$1.void()
 	}, async ({ context, input }) => {
 		const payload = await context.request?.text() ?? "";
 		const headers = Object.fromEntries(context.request?.headers.entries() ?? []);

package/dist/wordpress/transport.d.ts

@@ -1,8 +1,10 @@
 import { WP_List, WP_ListMetadata, WP_RequestInput, WP_Result, WordPressCredentials } from "./types.js";
-import { Duration, SearchParamsLike } from "@kizlo/shared";
+import { Duration, Promisify, SearchParamsLike } from "@kizlo/shared";
 
 //#region src/wordpress/transport.d.ts
 interface WordPressTransportOptions {
+  /** Resolve a trusted IP for this invocation. Missing or invalid IPs are omitted. */
+  getClientIp?: () => Promisify<string | null>;
   credentials: WordPressCredentials;
   timeout?: Duration;
   onResponse?: (headers: Headers) => void;
@@ -15,6 +17,7 @@ interface WordPressTransportResult {
 }
 declare class WordPressTransport {
   #private;
+  private readonly getClientIp?;
   private readonly siteBase;
   private readonly authHeader;
   private readonly defaultTimeout;

package/dist/wordpress/transport.js

@@ -2,9 +2,12 @@ import { WP_Error } from "./error.js";
 import { SAFE_REQUEST_TIMEOUT, UNEXPECTED_BODY_SNIPPET_LENGTH, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE } from "./constants.js";
 import { isWordPressResourceError } from "./utils.js";
 import { milliseconds, stringifyQueryString, trimLeadingTrailingSlashes, tryCatch, tryCatchSync } from "@kizlo/shared";
+import { z } from "zod";
 
 //#region src/wordpress/transport.ts
+const clientIpSchema = z.union([z.ipv4(), z.ipv6()]);
 var WordPressTransport = class {
+	getClientIp;
 	siteBase;
 	authHeader;
 	defaultTimeout;
@@ -22,6 +25,7 @@ var WordPressTransport = class {
 		this.defaultTimeout = context.timeout ?? SAFE_REQUEST_TIMEOUT;
 		this.onResponse = context.onResponse;
 		this.onResult = context.onResult;
+		this.getClientIp = context.getClientIp;
 	}
 	async post(path, input) {
 		return this.request({
@@ -206,6 +210,24 @@ var WordPressTransport = class {
 			...input.headers,
 			[WP_AUTH_HEADER_KEY]: this.authHeader
 		};
+		const signal = this.#resolveSignal(input);
+		let clientIp;
+		if (this.getClientIp && url.origin === new URL(this.siteBase).origin) {
+			for (const name of Object.keys(headers)) if (name.toLowerCase() === "x-real-ip") delete headers[name];
+			let onAbort = () => {};
+			try {
+				signal.throwIfAborted();
+				const value = await Promise.race([Promise.resolve().then(() => this.getClientIp?.()), new Promise((_, reject) => {
+					onAbort = () => reject(signal.reason);
+					signal.addEventListener("abort", onAbort, { once: true });
+				})]);
+				const parsed = clientIpSchema.safeParse(value);
+				if (parsed.success) clientIp = parsed.data;
+			} finally {
+				signal.removeEventListener("abort", onAbort);
+			}
+			if (clientIp) headers["x-real-ip"] = clientIp;
+		}
 		const hasBody = ![
 			"GET",
 			"DELETE",
@@ -215,7 +237,8 @@ var WordPressTransport = class {
 		return fetch(url.toString(), {
 			headers,
 			method: input.method,
-			signal: this.#resolveSignal(input),
+			signal,
+			...clientIp ? { redirect: "error" } : {},
 			...hasBody && body !== void 0 ? { body } : {}
 		});
 	}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kizlo",
-  "version": "0.26.1",
+  "version": "0.27.0",
   "type": "module",
   "description": "A headless WordPress framework for TypeScript.",
   "keywords": [