kizlo 0.26.2 → 0.27.0

package/dist/adapters/geo.cloudflare.d.ts

@@ -0,0 +1,7 @@
+import { GeoAdapter } from "./geo.js";
+
+//#region src/adapters/geo.cloudflare.d.ts
+/** Read trusted Cloudflare connection headers in Next.js/vinext. Only use behind Cloudflare ingress. */
+declare function geoCloudflareNext(): GeoAdapter;
+//#endregion
+export { geoCloudflareNext };

package/dist/adapters/geo.cloudflare.js

@@ -0,0 +1,23 @@
+//#region src/adapters/geo.cloudflare.ts
+/** Read trusted Cloudflare connection headers in Next.js/vinext. Only use behind Cloudflare ingress. */
+function geoCloudflareNext() {
+	return { getConnInfo: async (request) => {
+		let headers = request?.headers;
+		if (!headers) try {
+			headers = await (await import("next/headers")).headers();
+		} catch {}
+		const country = headers?.get("cf-ipcountry") || null;
+		return {
+			ip: headers?.get("cf-connecting-ip") || null,
+			country: country === "XX" || country === "T1" ? null : country,
+			city: null,
+			state: null,
+			postcode: null,
+			timezone: null,
+			userAgent: headers?.get("user-agent") || null
+		};
+	} };
+}
+
+//#endregion
+export { geoCloudflareNext };

package/dist/adapters/geo.d.ts

@@ -2,7 +2,7 @@ import { Promisify } from "@kizlo/shared";
 
 //#region src/adapters/geo.d.ts
 interface ConnInfo {
-  /** Client IP address, or `null` if unavailable. */
+  /** Trusted client IP forwarded to WordPress as x-real-ip, or `null` if unavailable. */
   ip: string | null;
   /** ISO country code, or `null`. */
   country: string | null;

package/dist/adapters/geo.vercel.js

@@ -5,8 +5,8 @@ function geoVercelNext() {
 		let nextHeaders;
 		try {
 			nextHeaders = await (await import("next/headers")).headers();
-		} catch (err) {
-			throw new Error("geoVercelNext: no Request was provided and `next/headers` could not be loaded. Install `next` as a peer dependency, or pass a Request to the SDK.", { cause: err });
+		} catch {
+			return readVercelHeaders(new Headers());
 		}
 		return readVercelHeaders(nextHeaders);
 	} };

package/dist/context.d.ts

@@ -66,6 +66,7 @@ declare class Context {
   private readonly settings;
   private readonly email;
   constructor(config: ContextConfig);
+  private createServices;
   /**
    * Report a request that did not reach Kizlo WordPress, or a WordPress side older than the client
    * needs. The transport supplies the URL and status even when fetch itself failed; a Kizlo response
@@ -77,34 +78,34 @@ declare class Context {
   /** Bold yellow, boxed in dashes so it stands out in a busy dev console. */
   private warn;
   createRestContext(request: Request): {
-    headers: Headers;
-    request: Request;
-    config: ContextConfig;
-    logger: Logger;
-    wordpress: WordPressTransport;
-    settings: SettingsService;
-    email: EmailService;
     getConnInfo: ConnInfoFn;
     verifyCaptcha: VerifyCaptchaFn;
     getSession: SessionFn;
     verifyPreviewToken: VerifyPreviewTokenFn;
     cookies: CookiesStorage;
     invokedBy: "client";
-  };
-  createServerContext(): {
-    cookies: CookiesStorage;
-    headers: null;
-    request: null;
-    config: ContextConfig;
-    logger: Logger;
     wordpress: WordPressTransport;
     settings: SettingsService;
     email: EmailService;
+    headers: Headers;
+    request: Request;
+    config: ContextConfig;
+    logger: Logger;
+  };
+  createServerContext(): {
     getSession: SessionFn;
     getConnInfo: ConnInfoFn;
     verifyCaptcha: VerifyCaptchaFn;
     verifyPreviewToken: VerifyPreviewTokenFn;
     invokedBy: "server";
+    wordpress: WordPressTransport;
+    settings: SettingsService;
+    email: EmailService;
+    cookies: CookiesStorage;
+    headers: null;
+    request: null;
+    config: ContextConfig;
+    logger: Logger;
   };
   private createRestCookieStorage;
   private createVerifyCaptchaFn;

package/dist/context.js

@@ -52,13 +52,25 @@ var Context = class {
 	email;
 	constructor(config) {
 		this.config = config;
-		this.wordpress = createWordPressClient(new WordPressTransport({
+		this.logger = this.createLogger();
+		const services = this.createServices(null);
+		this.wordpress = services.wordpress;
+		this.settings = services.settings;
+		this.email = services.email;
+	}
+	createServices(request) {
+		const config = this.config;
+		const geo = config.adapters?.geo;
+		const wordpress = createWordPressClient(new WordPressTransport({
 			credentials: config.credentials,
-			onResult: (result) => this.warnIfOutdated(result)
+			onResult: (result) => this.warnIfOutdated(result),
+			getClientIp: geo ? async () => (await geo.getConnInfo(request)).ip : void 0
 		}), config.introspection ?? {});
-		this.settings = new SettingsService(this.wordpress);
-		this.email = new EmailService(this.wordpress);
-		this.logger = this.createLogger();
+		return {
+			wordpress,
+			settings: new SettingsService(wordpress),
+			email: new EmailService(wordpress)
+		};
 	}
 	/**
 	* Report a request that did not reach Kizlo WordPress, or a WordPress side older than the client
@@ -97,9 +109,11 @@ var Context = class {
 			request: request.clone(),
 			config: this.config,
 			logger: this.logger,
-			wordpress: this.wordpress,
-			settings: this.settings,
-			email: this.email,
+			...this.config.adapters?.geo ? this.createServices(request) : {
+				wordpress: this.wordpress,
+				settings: this.settings,
+				email: this.email
+			},
 			getConnInfo: this.createConnInfoFn(request),
 			verifyCaptcha: this.createVerifyCaptchaFn(request),
 			getSession: this.createGetSessionFn(request),
@@ -116,9 +130,11 @@ var Context = class {
 			request: null,
 			config: this.config,
 			logger: this.logger,
-			wordpress: this.wordpress,
-			settings: this.settings,
-			email: this.email,
+			...this.config.adapters?.geo ? this.createServices(null) : {
+				wordpress: this.wordpress,
+				settings: this.settings,
+				email: this.email
+			},
 			getSession: this.createGetSessionFn(null, cookies),
 			getConnInfo: this.createConnInfoFn(null),
 			verifyCaptcha: this.createVerifyCaptchaFn(null),

package/dist/index.d.ts

@@ -11,6 +11,7 @@ import { CurrencyFormat, IdentifierInput, LIST_ORDER, ListMetadata, ListOrder, P
 import { AnyContext, AnyNestedClient, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, HTTPMethod, List, MaybeOptionalOptions, RedirectInput, RedirectStatus } from "./shared/types.js";
 import { createCookiesAdapter } from "./adapters/cookies.js";
 import { ConnInfo, GeoAdapter, GeoGetConnInfo, createGeoAdapter, geoMock } from "./adapters/geo.js";
+import { geoCloudflareNext } from "./adapters/geo.cloudflare.js";
 import { geoVercelNext } from "./adapters/geo.vercel.js";
 import { ConsoleLogAdapterOptions, LogLevel, LogPayload, Logger, LoggerAdapter, consoleLog, createLoggerAdapter, noopAdapter } from "./adapters/logger.js";
 import { ServiceAdapters, mergeServiceAdapters } from "./adapters/types.js";
@@ -43,4 +44,4 @@ import { ShaAlgorithm, compare, hash, hmac } from "./shared/crypto.js";
 import { Identifier, parseIdentifier } from "./shared/identifier.js";
 import { createOrpcRouter } from "./shared/router.js";
 import { deserializeCurrencyFormat, deserializeListMetadata, emptyList, serializeCurrencyFormat } from "./shared/serialize.js";
-export { ActiveKizloClient, ActiveWordPressClient, AnyContext, AnyEventSchema, AnyEvents, AnyIntegration, AnyKizloConfig, AnyMiddleware, AnyNestedClient, AnyProcedure, AnyProcedureTree, AuthAdapter, AuthGetSession, AuthUser, AuthorsSettings, AuthorsSettingsInput, BaseHandlerOptions, BrandSettings, BrandSettingsInput, COMMON_ERRORS, CONTENT_TYPES, CORE_PROCEDURES, CaptchaAdapter, type Category, type CategoryCustomFields, CategoryCustomFieldsSchema, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, ConnInfo, ConnInfoFn, ConsoleLogAdapterOptions, ContentType, Context, ContextConfig, Contract, ContractProcedure, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, CookiesStorage, CoreProcedures, CrawlingSettings, CrawlingSettingsInput, CreateKizloOptions, CreateSitemapRouteOptions, CurrencyFormat, DefinedErrorMapLike, DevPluginSource, EnvReader, EnvRecord, EnvSource, ErrorDefinition, EventHandler, EventHandlerFn, ExtractIntegrationProcedures, ExtractMiddlewareContextOutput, ExtractParams, ExtractProcedureByScope, Fixture, FixtureCleanupFn, FixtureSeedFn, FixtureSettleFn, GeoAdapter, GeoGetConnInfo, HTTPMethod, HeadlessSettings, HeadlessSettingsInput, IconDescriptor, Identifier, IdentifierInput, IdentitySettings, IdentitySettingsInput, InferClientData, InferClientError, InferClientInput, InferClientResult, InferEventUnion, InferIntegrationProcedures, InferMiddlewares, InferProcedureData, InferProcedureError, InferProcedureInput, InferProcedureResult, Integration, IntegrationRequirements, InvocationScope, JsonValue, Kizlo, KizloBrowserClient, KizloClient, KizloClientConfig, KizloConfig, KizloEnv, KizloError, KizloErrorOptions, KizloErrorUnion, KizloProcedureRegistry, KizloResult, LIST_ORDER, List, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, LocalPlugin, LogLevel, LogPayload, Logger, LoggerAdapter, ManifestIcon, MaybeCallerOptions, MaybeOptionalOptions, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, OpenapiPart, OrganizationFounder, OrganizationSettings, OrganizationSettingsInput, type Page, type PageCustomFields, PageCustomFieldsSchema, PersonSettings, PersonSettingsInput, PluginSource, type Post, type PostCustomFields, PostCustomFieldsSchema, PostStatusDefinition, PostTypeSettings, PostTypeSettingsInput, PreviewTokenData, PreviewTokenPayload, Procedure, ProcedureContext, ProcedureErrors, ProcedureHandler, ProcedureMethod, ProcedureOptions, ProcedureTreeDepthTuple, RedirectInput, RedirectStatus, ResolveParamsPart, ResolvedIcons, ResolvedSchemaInput, ResolvedSchemaOutput, ResultClient, Robots, RobotsRule, RootProcedures, S2SClient, SITEMAP_BASE, SITEMAP_INDEX_SLUG, SchemaIO, SeedContext, Seo, SeoHead, SeoSchema, ServiceAdapters, SessionFn, Settings, SettingsService, SettleContext, ShaAlgorithm, SiteSettings, SiteSettingsInput, Sitemap, SitemapIndex, SitemapIndexEntry, SitemapList, SitemapRouteExtra, SitemapUrl, SitemapUrlImage, SitemapUrlList, SocialProfile, type Tag, type TagCustomFields, TagCustomFieldsSchema, TaxonomySettings, TaxonomySettingsInput, TestAdminUser, TestCredentials, TestUser, ThrowableErrorFn, ThrowableErrorMap, UploadsSettings, UploadsSettingsInput, VerifyCaptchaFn, VerifyPreviewTokenFn, WEB_MANIFEST_ROUTE, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapUrl, WPK_SitemapUrlImage, WP_CallOptions, WP_Client, WP_CommonErrorCode, WP_CurrencyFormat, WP_CustomFields, WP_CustomFieldsPath, WP_Endpoint, WP_EndpointData, WP_EndpointDefinition, WP_EndpointError, WP_EndpointInput, WP_EndpointPath, WP_EndpointResult, WP_Error, WP_ErrorData, WP_Failure, WP_List, WP_ListMetadata, WP_RequestBuild, WP_RequestContentType, WP_RequestInput, WP_RequestMethod, WP_RequestParts, WP_ResponseContentType, WP_Result, WP_Schema, WP_Success, WP_TransportFailure, WP_TypedHeaders, WebManifest, WebhookOptions, WebhookSettings, WebhookSettingsInput, WithCommonErrorMap, WordPressClientRegistry, WordPressCredentials, WordPressCustomFieldsRegistry, WordPressEndpointRegistry, WordPressEnv, WordPressSchemaRegistry, WordPressTransport, WordPressTransportOptions, WordPressTransportResult, altcha, arkose, assertIntegrationEndpoints, assertIntegrationEnv, authMock, buildProcedure, buildWebManifest, buildWordPressRequest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createGeoAdapter, createIntegration, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createResultClient, createSitemapRedirectRoute, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, createWordPressClient, customFieldsSchema, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, integrationEnv, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, mergeServiceAdapters, missingEndpoints, missingEnv, noopAdapter, parseIdentifier, parseSitemapSlug, readEnv, recaptcha, renderJsonLd, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, resolveWordPressConnection, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, sortIntegrations, toKizloError, turnstile, wordPressConnectionComplete, wpEndpoint, xmlResponse };
+export { ActiveKizloClient, ActiveWordPressClient, AnyContext, AnyEventSchema, AnyEvents, AnyIntegration, AnyKizloConfig, AnyMiddleware, AnyNestedClient, AnyProcedure, AnyProcedureTree, AuthAdapter, AuthGetSession, AuthUser, AuthorsSettings, AuthorsSettingsInput, BaseHandlerOptions, BrandSettings, BrandSettingsInput, COMMON_ERRORS, CONTENT_TYPES, CORE_PROCEDURES, CaptchaAdapter, type Category, type CategoryCustomFields, CategoryCustomFieldsSchema, CommonErrorCode, CommonErrorLiteral, CommonErrorMap, ConnInfo, ConnInfoFn, ConsoleLogAdapterOptions, ContentType, Context, ContextConfig, Contract, ContractProcedure, CookiesAdapter, CookiesDeleteAll, CookiesGetAll, CookiesSetAll, CookiesStorage, CoreProcedures, CrawlingSettings, CrawlingSettingsInput, CreateKizloOptions, CreateSitemapRouteOptions, CurrencyFormat, DefinedErrorMapLike, DevPluginSource, EnvReader, EnvRecord, EnvSource, ErrorDefinition, EventHandler, EventHandlerFn, ExtractIntegrationProcedures, ExtractMiddlewareContextOutput, ExtractParams, ExtractProcedureByScope, Fixture, FixtureCleanupFn, FixtureSeedFn, FixtureSettleFn, GeoAdapter, GeoGetConnInfo, HTTPMethod, HeadlessSettings, HeadlessSettingsInput, IconDescriptor, Identifier, IdentifierInput, IdentitySettings, IdentitySettingsInput, InferClientData, InferClientError, InferClientInput, InferClientResult, InferEventUnion, InferIntegrationProcedures, InferMiddlewares, InferProcedureData, InferProcedureError, InferProcedureInput, InferProcedureResult, Integration, IntegrationRequirements, InvocationScope, JsonValue, Kizlo, KizloBrowserClient, KizloClient, KizloClientConfig, KizloConfig, KizloEnv, KizloError, KizloErrorOptions, KizloErrorUnion, KizloProcedureRegistry, KizloResult, LIST_ORDER, List, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, LocalPlugin, LogLevel, LogPayload, Logger, LoggerAdapter, ManifestIcon, MaybeCallerOptions, MaybeOptionalOptions, Middleware, MiddlewareHandler, MiddlewareNextFn, MiddlewareOptions, MiddlewareResult, OpenapiPart, OrganizationFounder, OrganizationSettings, OrganizationSettingsInput, type Page, type PageCustomFields, PageCustomFieldsSchema, PersonSettings, PersonSettingsInput, PluginSource, type Post, type PostCustomFields, PostCustomFieldsSchema, PostStatusDefinition, PostTypeSettings, PostTypeSettingsInput, PreviewTokenData, PreviewTokenPayload, Procedure, ProcedureContext, ProcedureErrors, ProcedureHandler, ProcedureMethod, ProcedureOptions, ProcedureTreeDepthTuple, RedirectInput, RedirectStatus, ResolveParamsPart, ResolvedIcons, ResolvedSchemaInput, ResolvedSchemaOutput, ResultClient, Robots, RobotsRule, RootProcedures, S2SClient, SITEMAP_BASE, SITEMAP_INDEX_SLUG, SchemaIO, SeedContext, Seo, SeoHead, SeoSchema, ServiceAdapters, SessionFn, Settings, SettingsService, SettleContext, ShaAlgorithm, SiteSettings, SiteSettingsInput, Sitemap, SitemapIndex, SitemapIndexEntry, SitemapList, SitemapRouteExtra, SitemapUrl, SitemapUrlImage, SitemapUrlList, SocialProfile, type Tag, type TagCustomFields, TagCustomFieldsSchema, TaxonomySettings, TaxonomySettingsInput, TestAdminUser, TestCredentials, TestUser, ThrowableErrorFn, ThrowableErrorMap, UploadsSettings, UploadsSettingsInput, VerifyCaptchaFn, VerifyPreviewTokenFn, WEB_MANIFEST_ROUTE, WPK_RobotRule, WPK_Robots, WPK_Seo, WPK_Sitemap, WPK_SitemapUrl, WPK_SitemapUrlImage, WP_CallOptions, WP_Client, WP_CommonErrorCode, WP_CurrencyFormat, WP_CustomFields, WP_CustomFieldsPath, WP_Endpoint, WP_EndpointData, WP_EndpointDefinition, WP_EndpointError, WP_EndpointInput, WP_EndpointPath, WP_EndpointResult, WP_Error, WP_ErrorData, WP_Failure, WP_List, WP_ListMetadata, WP_RequestBuild, WP_RequestContentType, WP_RequestInput, WP_RequestMethod, WP_RequestParts, WP_ResponseContentType, WP_Result, WP_Schema, WP_Success, WP_TransportFailure, WP_TypedHeaders, WebManifest, WebhookOptions, WebhookSettings, WebhookSettingsInput, WithCommonErrorMap, WordPressClientRegistry, WordPressCredentials, WordPressCustomFieldsRegistry, WordPressEndpointRegistry, WordPressEnv, WordPressSchemaRegistry, WordPressTransport, WordPressTransportOptions, WordPressTransportResult, altcha, arkose, assertIntegrationEndpoints, assertIntegrationEnv, authMock, buildProcedure, buildWebManifest, buildWordPressRequest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createGeoAdapter, createIntegration, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createResultClient, createSitemapRedirectRoute, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, createWordPressClient, customFieldsSchema, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoCloudflareNext, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, integrationEnv, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, mergeServiceAdapters, missingEndpoints, missingEnv, noopAdapter, parseIdentifier, parseSitemapSlug, readEnv, recaptcha, renderJsonLd, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, resolveWordPressConnection, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, sortIntegrations, toKizloError, turnstile, wordPressConnectionComplete, wpEndpoint, xmlResponse };

package/dist/index.js

@@ -3,6 +3,7 @@ import { compare, hash, hmac } from "./shared/crypto.js";
 import { altcha, arkose, createCaptchaAdapter, friendlyCaptcha, hcaptcha, recaptcha, turnstile } from "./adapters/captcha.js";
 import { createCookiesAdapter } from "./adapters/cookies.js";
 import { createGeoAdapter, geoMock } from "./adapters/geo.js";
+import { geoCloudflareNext } from "./adapters/geo.cloudflare.js";
 import { geoVercelNext } from "./adapters/geo.vercel.js";
 import { consoleLog, createLoggerAdapter, noopAdapter } from "./adapters/logger.js";
 import { mergeServiceAdapters } from "./adapters/types.js";
@@ -38,4 +39,4 @@ import { Kizlo, createKizlo, integrationEnv, resolveKizloConfig, resolveWordPres
 import { SITEMAP_BASE, SITEMAP_INDEX_SLUG, createSitemapRedirectRoute, createSitemapRoute } from "./seo/sitemap.js";
 import { createMiddleware } from "./shared/middleware.js";
 
-export { COMMON_ERRORS, CONTENT_TYPES, CORE_PROCEDURES, CategoryCustomFieldsSchema, ContentType, Context, CookiesStorage, CurrencyFormat, IdentifierInput, Kizlo, KizloClient, KizloError, LIST_ORDER, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, PageCustomFieldsSchema, PostCustomFieldsSchema, PreviewTokenData, PreviewTokenPayload, Robots, RobotsRule, SITEMAP_BASE, SITEMAP_INDEX_SLUG, Seo, SeoHead, SeoSchema, SettingsService, Sitemap, SitemapIndex, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, TagCustomFieldsSchema, WEB_MANIFEST_ROUTE, WP_Error, WordPressTransport, altcha, arkose, assertIntegrationEndpoints, assertIntegrationEnv, authMock, buildProcedure, buildWebManifest, buildWordPressRequest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createGeoAdapter, createIntegration, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createResultClient, createSitemapRedirectRoute, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, createWordPressClient, customFieldsSchema, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, integrationEnv, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, mergeServiceAdapters, missingEndpoints, missingEnv, noopAdapter, parseIdentifier, parseSitemapSlug, readEnv, recaptcha, renderJsonLd, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, resolveWordPressConnection, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, sortIntegrations, toKizloError, turnstile, wordPressConnectionComplete, wpEndpoint, xmlResponse };
+export { COMMON_ERRORS, CONTENT_TYPES, CORE_PROCEDURES, CategoryCustomFieldsSchema, ContentType, Context, CookiesStorage, CurrencyFormat, IdentifierInput, Kizlo, KizloClient, KizloError, LIST_ORDER, ListMetadata, ListOrder, ListSitemapUrlInput, ListSitemapUrlInputBase, PageCustomFieldsSchema, PostCustomFieldsSchema, PreviewTokenData, PreviewTokenPayload, Robots, RobotsRule, SITEMAP_BASE, SITEMAP_INDEX_SLUG, Seo, SeoHead, SeoSchema, SettingsService, Sitemap, SitemapIndex, SitemapList, SitemapUrl, SitemapUrlImage, SitemapUrlList, TagCustomFieldsSchema, WEB_MANIFEST_ROUTE, WP_Error, WordPressTransport, altcha, arkose, assertIntegrationEndpoints, assertIntegrationEnv, authMock, buildProcedure, buildWebManifest, buildWordPressRequest, combineDetailed, compare, consoleLog, createAuthAdapter, createCaptchaAdapter, createCookiesAdapter, createEventHandler, createGeoAdapter, createIntegration, createKizlo, createKizloClient, createLoggerAdapter, createManifestRoute, createMiddleware, createOrpcRouter, createProcedure, createResultClient, createSitemapRedirectRoute, createSitemapRoute, createThrowableErrorMap, createWebhookRouter, createWordPressClient, customFieldsSchema, defineErrorMap, defineFixture, deserializeCurrencyFormat, deserializeListMetadata, deserializeSeo, emptyList, friendlyCaptcha, generateContract, geoCloudflareNext, geoMock, geoVercelNext, handleUnexpectedError, hash, hcaptcha, hmac, integrationEnv, isContractProcedure, isKizloError, isLocalPlugin, isWordPressResourceError, mergeServiceAdapters, missingEndpoints, missingEnv, noopAdapter, parseIdentifier, parseSitemapSlug, readEnv, recaptcha, renderJsonLd, renderSitemapIndex, renderUrlSet, resolveIcons, resolveKizloConfig, resolveWordPressConnection, restoreContract, schemaType, serializeCurrencyFormat, sitemapEntryPath, sortIntegrations, toKizloError, turnstile, wordPressConnectionComplete, wpEndpoint, xmlResponse };

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.26.2";
+var version = "0.27.0";
 
 //#endregion
 export { version };

package/dist/webhook/index.js

@@ -3,7 +3,7 @@ import { createProcedure } from "../shared/procedure.js";
 import { AnyEvent } from "./schema.js";
 import { validateEvent } from "./utils.js";
 import { tryCatchSync, verifyWebhook } from "@kizlo/shared";
-import z from "zod";
+import z$1 from "zod";
 
 //#region src/webhook/index.ts
 function createEventHandler(eventsOrHandler, maybeHandler) {
@@ -21,7 +21,7 @@ function createWebhookRouter(options) {
 		method: "POST",
 		body: AnyEvent,
 		path: "/webhooks",
-		output: z.void()
+		output: z$1.void()
 	}, async ({ context, input }) => {
 		const payload = await context.request?.text() ?? "";
 		const headers = Object.fromEntries(context.request?.headers.entries() ?? []);

package/dist/wordpress/transport.d.ts

@@ -1,8 +1,10 @@
 import { WP_List, WP_ListMetadata, WP_RequestInput, WP_Result, WordPressCredentials } from "./types.js";
-import { Duration, SearchParamsLike } from "@kizlo/shared";
+import { Duration, Promisify, SearchParamsLike } from "@kizlo/shared";
 
 //#region src/wordpress/transport.d.ts
 interface WordPressTransportOptions {
+  /** Resolve a trusted IP for this invocation. Missing or invalid IPs are omitted. */
+  getClientIp?: () => Promisify<string | null>;
   credentials: WordPressCredentials;
   timeout?: Duration;
   onResponse?: (headers: Headers) => void;
@@ -15,6 +17,7 @@ interface WordPressTransportResult {
 }
 declare class WordPressTransport {
   #private;
+  private readonly getClientIp?;
   private readonly siteBase;
   private readonly authHeader;
   private readonly defaultTimeout;

package/dist/wordpress/transport.js

@@ -2,9 +2,12 @@ import { WP_Error } from "./error.js";
 import { SAFE_REQUEST_TIMEOUT, UNEXPECTED_BODY_SNIPPET_LENGTH, WP_AUTH_HEADER_KEY, WP_AUTH_TYPE } from "./constants.js";
 import { isWordPressResourceError } from "./utils.js";
 import { milliseconds, stringifyQueryString, trimLeadingTrailingSlashes, tryCatch, tryCatchSync } from "@kizlo/shared";
+import { z } from "zod";
 
 //#region src/wordpress/transport.ts
+const clientIpSchema = z.union([z.ipv4(), z.ipv6()]);
 var WordPressTransport = class {
+	getClientIp;
 	siteBase;
 	authHeader;
 	defaultTimeout;
@@ -22,6 +25,7 @@ var WordPressTransport = class {
 		this.defaultTimeout = context.timeout ?? SAFE_REQUEST_TIMEOUT;
 		this.onResponse = context.onResponse;
 		this.onResult = context.onResult;
+		this.getClientIp = context.getClientIp;
 	}
 	async post(path, input) {
 		return this.request({
@@ -206,6 +210,24 @@ var WordPressTransport = class {
 			...input.headers,
 			[WP_AUTH_HEADER_KEY]: this.authHeader
 		};
+		const signal = this.#resolveSignal(input);
+		let clientIp;
+		if (this.getClientIp && url.origin === new URL(this.siteBase).origin) {
+			for (const name of Object.keys(headers)) if (name.toLowerCase() === "x-real-ip") delete headers[name];
+			let onAbort = () => {};
+			try {
+				signal.throwIfAborted();
+				const value = await Promise.race([Promise.resolve().then(() => this.getClientIp?.()), new Promise((_, reject) => {
+					onAbort = () => reject(signal.reason);
+					signal.addEventListener("abort", onAbort, { once: true });
+				})]);
+				const parsed = clientIpSchema.safeParse(value);
+				if (parsed.success) clientIp = parsed.data;
+			} finally {
+				signal.removeEventListener("abort", onAbort);
+			}
+			if (clientIp) headers["x-real-ip"] = clientIp;
+		}
 		const hasBody = ![
 			"GET",
 			"DELETE",
@@ -215,7 +237,8 @@ var WordPressTransport = class {
 		return fetch(url.toString(), {
 			headers,
 			method: input.method,
-			signal: this.#resolveSignal(input),
+			signal,
+			...clientIp ? { redirect: "error" } : {},
 			...hasBody && body !== void 0 ? { body } : {}
 		});
 	}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kizlo",
-  "version": "0.26.2",
+  "version": "0.27.0",
   "type": "module",
   "description": "A headless WordPress framework for TypeScript.",
   "keywords": [