raffel 1.0.6 → 1.0.7

package/dist/types/context.d.ts

@@ -4,6 +4,119 @@
  * The Context carries cross-cutting information that flows through the request.
  * It is immutable - to modify, create a new derived context.
  */
+import type { ContractContext } from './policies.js';
+export type ProtocolKind = 'http' | 'websocket' | 'jsonrpc' | 'graphql' | 'grpc' | 'tcp' | 'udp' | 'stream' | 'internal';
+export interface Principal {
+    /** Principal category (user, service, api-key, etc.) */
+    type: string;
+    /** Stable principal identifier */
+    id: string;
+    /** Authorization roles */
+    roles?: readonly string[];
+    /** Authorization scopes */
+    scopes?: readonly string[];
+    /** Optional tenant identifier */
+    tenantId?: string;
+    /** Optional readonly claims */
+    claims?: Readonly<Record<string, unknown>>;
+}
+export type AuthPrincipal = string | Principal;
+export interface AuthRequirement {
+    authenticated?: boolean;
+    roles?: readonly string[];
+    scopes?: readonly string[];
+}
+export interface ContextLogger {
+    trace(...args: unknown[]): void;
+    debug(...args: unknown[]): void;
+    info(...args: unknown[]): void;
+    warn(...args: unknown[]): void;
+    error(...args: unknown[]): void;
+    fatal(...args: unknown[]): void;
+    child(bindings: Record<string, unknown>): ContextLogger;
+}
+export interface ContextInput {
+    /** Request payload / args / message body */
+    readonly body?: unknown;
+    /** Path or route parameters */
+    readonly params: Readonly<Record<string, string>>;
+    /** Query params or equivalent transport-specific query bag */
+    readonly query: Readonly<Record<string, unknown>>;
+    /** Transport metadata normalized to string values */
+    readonly metadata: Readonly<Record<string, string>>;
+}
+export interface HttpContextCapability {
+    readonly kind: 'http';
+    readonly method: string;
+    readonly path: string;
+    readonly url: string;
+    readonly headers: Readonly<Record<string, string>>;
+}
+export interface WebSocketContextCapability {
+    readonly kind: 'websocket';
+    readonly connectionId?: string;
+    readonly path?: string;
+    readonly subprotocol?: string;
+}
+export interface JsonRpcContextCapability {
+    readonly kind: 'jsonrpc';
+    readonly method?: string;
+    readonly requestId?: string | number | null;
+    readonly notification?: boolean;
+}
+export interface GraphQLContextCapability {
+    readonly kind: 'graphql';
+    readonly operationType?: 'query' | 'mutation' | 'subscription';
+    readonly operationName?: string;
+}
+export interface GrpcContextCapability {
+    readonly kind: 'grpc';
+    readonly service?: string;
+    readonly method?: string;
+    readonly peer?: string;
+    readonly metadata: Readonly<Record<string, string>>;
+}
+export interface TcpContextCapability {
+    readonly kind: 'tcp';
+    readonly remoteAddress?: string;
+    readonly remotePort?: number;
+}
+export interface UdpContextCapability {
+    readonly kind: 'udp';
+    readonly remoteAddress?: string;
+    readonly remotePort?: number;
+    readonly remoteFamily?: string;
+}
+export interface StreamContextCapability {
+    readonly kind: 'stream';
+    readonly mode?: string;
+    readonly id?: string;
+}
+export interface ContextSeed {
+    auth?: Partial<AuthContext> | null;
+    tracing?: TracingContext;
+    signal?: AbortSignal;
+    deadline?: number;
+    contract?: ContractContext;
+    input?: Partial<ContextInput>;
+    services?: Record<string, unknown>;
+    logger?: ContextLogger;
+    protocol?: ProtocolKind;
+    http?: HttpContextCapability;
+    ws?: WebSocketContextCapability;
+    rpc?: JsonRpcContextCapability;
+    graphql?: GraphQLContextCapability;
+    grpc?: GrpcContextCapability;
+    tcp?: TcpContextCapability;
+    udp?: UdpContextCapability;
+    stream?: StreamContextCapability;
+}
+export declare class ContextAuthError extends Error {
+    code: 'UNAUTHENTICATED' | 'PERMISSION_DENIED';
+    status: 401 | 403;
+    details?: unknown;
+    constructor(code: 'UNAUTHENTICATED' | 'PERMISSION_DENIED', message: string, status: 401 | 403);
+}
 /**
  * Authentication context
  */
@@ -11,9 +124,23 @@ export interface AuthContext {
     /** Whether the request is authenticated */
     authenticated: boolean;
     /** User/service identifier */
-    principal?: string;
+    principal?: AuthPrincipal;
+    /** Stable principal identifier independent of principal shape */
+    principalId?: string;
+    /** Authorization roles */
+    roles?: readonly string[];
+    /** Authorization scopes */
+    scopes?: readonly string[];
+    /** Optional tenant identifier */
+    tenantId?: string;
     /** Authentication claims (JWT payload, etc.) */
     claims?: Record<string, unknown>;
+    /** Require a principal, optionally enforcing roles/scopes */
+    require(requirement?: AuthRequirement): AuthPrincipal;
+    /** Check whether the auth context carries the given role */
+    hasRole(role: string): boolean;
+    /** Check whether the auth context carries the given scope */
+    hasScope(scope: string): boolean;
 }
 /**
  * Distributed tracing context
@@ -43,14 +170,43 @@ export interface Context {
     /** Request correlation ID */
     requestId: string;
     /** Authentication (set by auth middleware) */
-    auth?: AuthContext;
+    auth: AuthContext;
     /** Tracing information */
     tracing: TracingContext;
     /** Cancellation signal (native AbortSignal) */
     signal: AbortSignal;
     /** Request deadline (ms since epoch) */
     deadline?: number;
-    /** Custom extensions storage */
+    /** Normalized request input */
+    input: ContextInput;
+    /** Readonly service capabilities */
+    services: Readonly<Record<string, unknown>>;
+    /** Request-scoped logger */
+    logger: ContextLogger;
+    /** Origin protocol for the context */
+    protocol?: ProtocolKind;
+    /** Current contract binding and propagated policy context */
+    contract?: ContractContext;
+    /** HTTP-specific request metadata */
+    http?: HttpContextCapability;
+    /** WebSocket-specific request metadata */
+    ws?: WebSocketContextCapability;
+    /** JSON-RPC-specific request metadata */
+    rpc?: JsonRpcContextCapability;
+    /** GraphQL-specific request metadata */
+    graphql?: GraphQLContextCapability;
+    /** gRPC-specific request metadata */
+    grpc?: GrpcContextCapability;
+    /** TCP-specific request metadata */
+    tcp?: TcpContextCapability;
+    /** UDP-specific request metadata */
+    udp?: UdpContextCapability;
+    /** Stream-specific request metadata */
+    stream?: StreamContextCapability;
+    /**
+     * Custom extensions storage for framework internals and legacy integrations.
+     * @deprecated Prefer canonical capabilities such as `auth`, `input`, `services`, and protocol facades.
+     */
     readonly extensions: Map<symbol, unknown>;
     /**
      * Call another procedure internally, propagating context.
@@ -69,10 +225,17 @@ export interface Context {
      */
     callingLevel?: number;
 }
+export declare function isTypedPrincipal(principal: AuthPrincipal | undefined): principal is Principal;
+export declare function getPrincipalId(principal: AuthPrincipal | undefined): string | undefined;
+export declare function getAuthRoles(auth: Pick<AuthContext, 'roles' | 'claims' | 'principal'> | undefined): readonly string[];
+export declare function getAuthScopes(auth: Pick<AuthContext, 'scopes' | 'claims' | 'principal'> | undefined): readonly string[];
+export declare function createAuthContext(input?: Partial<AuthContext> | null): AuthContext;
+export declare function stripTransportCapabilities(ctx: Context): Context;
+export declare function mergeContextSeeds(base: ContextSeed, override?: ContextSeed | null): ContextSeed;
 /**
  * Create a new context with defaults
  */
-export declare function createContext(requestId: string, options?: Partial<Omit<Context, 'requestId' | 'extensions'>>): Context;
+export declare function createContext(requestId: string, options?: ContextSeed): Context;
 /**
  * Create a derived context with a new deadline
  */

package/dist/types/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/types/context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,aAAa,EAAE,OAAO,CAAA;IAEtB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAA;IAEf,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAA;IAEd,8BAA8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,MAAM,GAAG;IAAE,MAAM,CAAC,EAAE,CAAC,CAAA;CAAE,CAAA;AAErD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EAC7D,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,OAAO,CAAC,CAAA;AAErB;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAA;IAEjB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,WAAW,CAAA;IAElB,0BAA0B;IAC1B,OAAO,EAAE,cAAc,CAAA;IAEvB,+CAA+C;IAC/C,MAAM,EAAE,WAAW,CAAA;IAEnB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,gCAAgC;IAChC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAEzC;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,YAAY,CAAA;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,YAAY,CAAC,CAAM,GAC/D,OAAO,CAYT;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEpE;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAEjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,EACpB,KAAK,EAAE,CAAC,GACP,OAAO,CAIT;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS,CAEjF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAE1E"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/types/context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAGpD,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,WAAW,GACX,SAAS,GACT,SAAS,GACT,MAAM,GACN,KAAK,GACL,KAAK,GACL,QAAQ,GACR,UAAU,CAAA;AAEd,MAAM,WAAW,SAAS;IACxB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAA;IAEZ,kCAAkC;IAClC,EAAE,EAAE,MAAM,CAAA;IAEV,0BAA0B;IAC1B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAEzB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAE1B,iCAAiC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,+BAA+B;IAC/B,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC3C;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,CAAA;AAE9C,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACzB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAC/B,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAC/B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAC9B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAC9B,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAC/B,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAC/B,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa,CAAA;CACxD;AAED,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IAEvB,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAEjD,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAEjD,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACpD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACnD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,cAAc,CAAA;IAC9D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACpD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAA;IAClC,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,CAAC,EAAE,aAAa,CAAA;IACtB,QAAQ,CAAC,EAAE,YAAY,CAAA;IACvB,IAAI,CAAC,EAAE,qBAAqB,CAAA;IAC5B,EAAE,CAAC,EAAE,0BAA0B,CAAA;IAC/B,GAAG,CAAC,EAAE,wBAAwB,CAAA;IAC9B,OAAO,CAAC,EAAE,wBAAwB,CAAA;IAClC,IAAI,CAAC,EAAE,qBAAqB,CAAA;IAC5B,GAAG,CAAC,EAAE,oBAAoB,CAAA;IAC1B,GAAG,CAAC,EAAE,oBAAoB,CAAA;IAC1B,MAAM,CAAC,EAAE,uBAAuB,CAAA;CACjC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,CAAA;IAC7C,MAAM,EAAE,GAAG,GAAG,GAAG,CAAA;IACjB,OAAO,CAAC,EAAE,OAAO,CAAA;gBAGf,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,EAC7C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,GAAG,GAAG,GAAG;CAOpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,aAAa,EAAE,OAAO,CAAA;IAEtB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,aAAa,CAAA;IAEzB,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,0BAA0B;IAC1B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAEzB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAE1B,iCAAiC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAEhC,6DAA6D;IAC7D,OAAO,CAAC,WAAW,CAAC,EAAE,eAAe,GAAG,aAAa,CAAA;IAErD,4DAA4D;IAC5D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IAE9B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAA;IAEf,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAA;IAEd,8BAA8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,MAAM,GAAG;IAAE,MAAM,CAAC,EAAE,CAAC,CAAA;CAAE,CAAA;AAErD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EAC7D,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,OAAO,CAAC,CAAA;AAErB;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAA;IAEjB,8CAA8C;IAC9C,IAAI,EAAE,WAAW,CAAA;IAEjB,0BAA0B;IAC1B,OAAO,EAAE,cAAc,CAAA;IAEvB,+CAA+C;IAC/C,MAAM,EAAE,WAAW,CAAA;IAEnB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,+BAA+B;IAC/B,KAAK,EAAE,YAAY,CAAA;IAEnB,oCAAoC;IACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAE3C,4BAA4B;IAC5B,MAAM,EAAE,aAAa,CAAA;IAErB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,YAAY,CAAA;IAEvB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,eAAe,CAAA;IAE1B,qCAAqC;IACrC,IAAI,CAAC,EAAE,qBAAqB,CAAA;IAE5B,0CAA0C;IAC1C,EAAE,CAAC,EAAE,0BAA0B,CAAA;IAE/B,yCAAyC;IACzC,GAAG,CAAC,EAAE,wBAAwB,CAAA;IAE9B,wCAAwC;IACxC,OAAO,CAAC,EAAE,wBAAwB,CAAA;IAElC,qCAAqC;IACrC,IAAI,CAAC,EAAE,qBAAqB,CAAA;IAE5B,oCAAoC;IACpC,GAAG,CAAC,EAAE,oBAAoB,CAAA;IAE1B,oCAAoC;IACpC,GAAG,CAAC,EAAE,oBAAoB,CAAA;IAE1B,uCAAuC;IACvC,MAAM,CAAC,EAAE,uBAAuB,CAAA;IAEhC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAEzC;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,YAAY,CAAA;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAcD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,aAAa,GAAG,SAAS,GAAG,SAAS,IAAI,SAAS,CAE7F;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGvF;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAWrH;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAWvH;AAED,wBAAgB,iBAAiB,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,GAAG,WAAW,CA2ClF;AAoBD,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAehE;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,WAAW,EACjB,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,GAC5B,WAAW,CA8Bb;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAyBT;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEpE;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAEjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,EACpB,KAAK,EAAE,CAAC,GACP,OAAO,CAIT;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS,CAEjF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAE1E"}

package/dist/types/context.js

@@ -4,6 +4,159 @@
  * The Context carries cross-cutting information that flows through the request.
  * It is immutable - to modify, create a new derived context.
  */
+import { getLogger } from '../utils/logger.js';
+export class ContextAuthError extends Error {
+    code;
+    status;
+    details;
+    constructor(code, message, status) {
+        super(message);
+        this.name = 'ContextAuthError';
+        this.code = code;
+        this.status = status;
+    }
+}
+function normalizeStringList(value) {
+    if (Array.isArray(value)) {
+        return Object.freeze(value.filter((item) => typeof item === 'string'));
+    }
+    if (typeof value === 'string' && value.length > 0) {
+        return Object.freeze(value.split(/\s+/).filter(Boolean));
+    }
+    return undefined;
+}
+export function isTypedPrincipal(principal) {
+    return principal !== undefined && typeof principal === 'object' && principal !== null;
+}
+export function getPrincipalId(principal) {
+    if (!principal)
+        return undefined;
+    return typeof principal === 'string' ? principal : principal.id;
+}
+export function getAuthRoles(auth) {
+    if (!auth)
+        return [];
+    if (auth.roles && auth.roles.length > 0) {
+        return auth.roles;
+    }
+    if (isTypedPrincipal(auth.principal) && auth.principal.roles && auth.principal.roles.length > 0) {
+        return auth.principal.roles;
+    }
+    return normalizeStringList(auth.claims?.roles) ?? [];
+}
+export function getAuthScopes(auth) {
+    if (!auth)
+        return [];
+    if (auth.scopes && auth.scopes.length > 0) {
+        return auth.scopes;
+    }
+    if (isTypedPrincipal(auth.principal) && auth.principal.scopes && auth.principal.scopes.length > 0) {
+        return auth.principal.scopes;
+    }
+    return normalizeStringList(auth.claims?.scopes ?? auth.claims?.scope) ?? [];
+}
+export function createAuthContext(input) {
+    const principal = input?.principal;
+    const principalId = input?.principalId ?? getPrincipalId(principal);
+    const claims = input?.claims ? { ...input.claims } : undefined;
+    const roles = input?.roles ?? getAuthRoles({ roles: undefined, claims, principal });
+    const scopes = input?.scopes ?? getAuthScopes({ scopes: undefined, claims, principal });
+    const tenantId = input?.tenantId
+        ?? (isTypedPrincipal(principal) ? principal.tenantId : undefined)
+        ?? (typeof claims?.tenantId === 'string' ? claims.tenantId : undefined);
+    const authenticated = input?.authenticated ?? Boolean(principalId);
+    const authContext = {
+        authenticated,
+        principal,
+        principalId,
+        claims,
+        roles,
+        scopes,
+        tenantId,
+        require(requirement) {
+            if (!authContext.authenticated || !authContext.principal) {
+                throw new ContextAuthError('UNAUTHENTICATED', 'Authentication required', 401);
+            }
+            if (requirement?.roles && requirement.roles.some((role) => !authContext.hasRole(role))) {
+                throw new ContextAuthError('PERMISSION_DENIED', 'Missing required role', 403);
+            }
+            if (requirement?.scopes && requirement.scopes.some((scope) => !authContext.hasScope(scope))) {
+                throw new ContextAuthError('PERMISSION_DENIED', 'Missing required scope', 403);
+            }
+            return authContext.principal;
+        },
+        hasRole(role) {
+            return getAuthRoles(authContext).includes(role);
+        },
+        hasScope(scope) {
+            return getAuthScopes(authContext).includes(scope);
+        },
+    };
+    return authContext;
+}
+function normalizeInput(input) {
+    return {
+        body: input?.body,
+        params: Object.freeze({ ...(input?.params ?? {}) }),
+        query: Object.freeze({ ...(input?.query ?? {}) }),
+        metadata: Object.freeze({ ...(input?.metadata ?? {}) }),
+    };
+}
+function cloneProtocolFacet(facet) {
+    if (!facet)
+        return facet;
+    return Object.freeze({ ...facet });
+}
+function defaultLoggerForRequest(requestId) {
+    return getLogger().child({ requestId });
+}
+export function stripTransportCapabilities(ctx) {
+    return {
+        ...ctx,
+        protocol: 'internal',
+        input: normalizeInput(),
+        http: undefined,
+        ws: undefined,
+        rpc: undefined,
+        graphql: undefined,
+        grpc: undefined,
+        tcp: undefined,
+        udp: undefined,
+        stream: undefined,
+        extensions: new Map(ctx.extensions),
+    };
+}
+export function mergeContextSeeds(base, override) {
+    if (!override)
+        return { ...base };
+    return {
+        ...base,
+        ...override,
+        auth: override.auth ?? base.auth,
+        tracing: override.tracing ?? base.tracing,
+        signal: override.signal ?? base.signal,
+        deadline: override.deadline ?? base.deadline,
+        contract: override.contract ?? base.contract,
+        input: {
+            ...(base.input ?? {}),
+            ...(override.input ?? {}),
+        },
+        services: {
+            ...(base.services ?? {}),
+            ...(override.services ?? {}),
+        },
+        logger: override.logger ?? base.logger,
+        protocol: override.protocol ?? base.protocol,
+        http: override.http ?? base.http,
+        ws: override.ws ?? base.ws,
+        rpc: override.rpc ?? base.rpc,
+        graphql: override.graphql ?? base.graphql,
+        grpc: override.grpc ?? base.grpc,
+        tcp: override.tcp ?? base.tcp,
+        udp: override.udp ?? base.udp,
+        stream: override.stream ?? base.stream,
+    };
+}
 /**
  * Create a new context with defaults
  */
@@ -16,8 +169,21 @@ export function createContext(requestId, options = {}) {
         },
         signal: options.signal ?? new AbortController().signal,
         deadline: options.deadline,
-        auth: options.auth,
+        auth: createAuthContext(options.auth),
+        input: normalizeInput(options.input),
+        services: Object.freeze({ ...(options.services ?? {}) }),
+        logger: options.logger ?? defaultLoggerForRequest(requestId),
+        protocol: options.protocol,
         extensions: new Map(),
+        contract: options.contract,
+        http: cloneProtocolFacet(options.http),
+        ws: cloneProtocolFacet(options.ws),
+        rpc: cloneProtocolFacet(options.rpc),
+        graphql: cloneProtocolFacet(options.graphql),
+        grpc: cloneProtocolFacet(options.grpc),
+        tcp: cloneProtocolFacet(options.tcp),
+        udp: cloneProtocolFacet(options.udp),
+        stream: cloneProtocolFacet(options.stream),
     };
 }
 /**
@@ -30,7 +196,7 @@ export function withDeadline(ctx, deadline) {
  * Create a derived context with auth
  */
 export function withAuth(ctx, auth) {
-    return { ...ctx, auth, extensions: new Map(ctx.extensions) };
+    return { ...ctx, auth: createAuthContext(auth), extensions: new Map(ctx.extensions) };
 }
 /**
  * Create a derived context with an extension value

package/dist/types/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/types/context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoFH;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,UAA8D,EAAE;IAEhE,OAAO;QACL,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI;YAC1B,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,SAAS;SAClB;QACD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM;QACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,IAAI,GAAG,EAAE;KACtB,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,QAAgB;IACzD,OAAO,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAA;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAY,EAAE,IAAiB;IACtD,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAA;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAY,EACZ,GAAoB,EACpB,KAAQ;IAER,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC1C,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC1B,OAAO,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,CAAA;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAI,GAAY,EAAE,GAAoB;IAChE,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAkB,CAAA;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAI,WAAmB;IACvD,OAAO,MAAM,CAAC,WAAW,CAAoB,CAAA;AAC/C,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/types/context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AA4I9C,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,IAAI,CAAyC;IAC7C,MAAM,CAAW;IACjB,OAAO,CAAU;IAEjB,YACE,IAA6C,EAC7C,OAAe,EACf,MAAiB;QAEjB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAmJD,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAA;IACxF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAC1D,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAoC;IACnE,OAAO,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,CAAA;AACvF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAoC;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAA;IAChC,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAqE;IAChG,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChG,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAA;IAC7B,CAAC;IAED,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAsE;IAClG,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClG,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAA;IAC9B,CAAC;IAED,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAmC;IACnE,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,CAAA;IAClC,MAAM,WAAW,GAAG,KAAK,EAAE,WAAW,IAAI,cAAc,CAAC,SAAS,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IACnF,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IACvF,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ;WAC3B,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;WAC9D,CAAC,OAAO,MAAM,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACzE,MAAM,aAAa,GAAG,KAAK,EAAE,aAAa,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;IAElE,MAAM,WAAW,GAAgB;QAC/B,aAAa;QACb,SAAS;QACT,WAAW;QACX,MAAM;QACN,KAAK;QACL,MAAM;QACN,QAAQ;QACR,OAAO,CAAC,WAA6B;YACnC,IAAI,CAAC,WAAW,CAAC,aAAa,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;gBACzD,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,GAAG,CAAC,CAAA;YAC/E,CAAC;YAED,IAAI,WAAW,EAAE,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACvF,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAA;YAC/E,CAAC;YAED,IAAI,WAAW,EAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAA;YAChF,CAAC;YAED,OAAO,WAAW,CAAC,SAAS,CAAA;QAC9B,CAAC;QACD,OAAO,CAAC,IAAY;YAClB,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACjD,CAAC;QACD,QAAQ,CAAC,KAAa;YACpB,OAAO,aAAa,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACnD,CAAC;KACF,CAAA;IAED,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IACnD,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACjD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;KACxD,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CAA+B,KAAQ;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAM,CAAA;AACzC,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAiB;IAChD,OAAO,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAkB,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,OAAO;QACL,GAAG,GAAG;QACN,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,cAAc,EAAE;QACvB,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,SAAS;QACb,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;QACf,GAAG,EAAE,SAAS;QACd,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;KACpC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAiB,EACjB,QAA6B;IAE7B,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAA;IAEjC,OAAO;QACL,GAAG,IAAI;QACP,GAAG,QAAQ;QACX,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI;QAChC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;QACzC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;QACtC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAC5C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAC5C,KAAK,EAAE;YACL,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;SAC1B;QACD,QAAQ,EAAE;YACR,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;SAC7B;QACD,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;QACtC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAC5C,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI;QAChC,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE;QAC1B,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;QAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;QACzC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI;QAChC,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;QAC7B,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;QAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;KACvC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,UAAuB,EAAE;IAEzB,OAAO;QACL,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI;YAC1B,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,SAAS;SAClB;QACD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM;QACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC;QACrC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,uBAAuB,CAAC,SAAS,CAAC;QAC5D,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC;QACtC,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5C,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC;QACtC,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3C,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,QAAgB;IACzD,OAAO,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAA;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAY,EAAE,IAAiB;IACtD,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAA;AACvF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAY,EACZ,GAAoB,EACpB,KAAQ;IAER,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC1C,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC1B,OAAO,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,CAAA;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAI,GAAY,EAAE,GAAoB;IAChE,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAkB,CAAA;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAI,WAAmB;IACvD,OAAO,MAAM,CAAC,WAAW,CAAoB,CAAA;AAC/C,CAAC"}

package/dist/types/handlers.d.ts

@@ -4,6 +4,7 @@
  * Defines the signatures for procedures, streams, and events.
  */
 import type { Context } from './context.js';
+import type { ContractPolicies } from './policies.js';
 import type { RaffelStream } from './stream.js';
 /**
  * Procedure handler - unary RPC (request → response)
@@ -128,6 +129,8 @@ export interface HandlerMeta {
     jsonrpc?: JsonRpcMeta;
     /** gRPC metadata */
     grpc?: GrpcMeta;
+    /** Contract-bound runtime policies */
+    policies?: ContractPolicies;
 }
 /**
  * Registered handler entry

package/dist/types/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/types/handlers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/C;;GAEG;AACH,MAAM,MAAM,gBAAgB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CAClE,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,OAAO,KACT,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;AAE/B;;GAEG;AACH,MAAM,MAAM,mBAAmB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CACrE,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,OAAO,KACT,YAAY,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAEnD;;GAEG;AACH,MAAM,MAAM,mBAAmB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CACrE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,EACnD,GAAG,EAAE,OAAO,KACT,OAAO,CAAC,OAAO,CAAC,CAAA;AAErB;;GAEG;AACH,MAAM,MAAM,iBAAiB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CACnE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,EACnD,GAAG,EAAE,OAAO,KACT,YAAY,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAEnD;;GAEG;AACH,MAAM,MAAM,aAAa,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IACzD,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEtC;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAA;AAEpC;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,QAAQ,GAAG,OAAO,IAAI,CAC7C,OAAO,EAAE,QAAQ,EACjB,GAAG,EAAE,OAAO,EACZ,GAAG,CAAC,EAAE,WAAW,KACd,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAEzB;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE1D;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE1D;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,eAAe,GAAG,cAAc,CAAA;AAEhF;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,yBAAyB;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,yBAAyB;IACzB,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,GAAG,UAAU,CAAA;CAC3B;AAED,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;AAEzF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,mBAAmB;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,OAAO,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,eAAe,CAAA;IAC1E,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,IAAI,EAAE,WAAW,CAAA;IAEjB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IAEZ,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IAEf,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,kDAAkD;IAClD,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAE/B,6CAA6C;IAC7C,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAE5B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,WAAW,CAAA;IAEzB,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAE5B,iDAAiD;IACjD,OAAO,CAAC,EAAE,WAAW,CAAA;IAErB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,UAAU,CAAA;IAEvB,wBAAwB;IACxB,OAAO,CAAC,EAAE,WAAW,CAAA;IAErB,oBAAoB;IACpB,IAAI,CAAC,EAAE,QAAQ,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,GAAG,OAAO;IAC5C,uBAAuB;IACvB,OAAO,EAAE,CAAC,CAAA;IAEV,uBAAuB;IACvB,IAAI,EAAE,WAAW,CAAA;IAEjB,+BAA+B;IAC/B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAA;CAC7B;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,QAAQ,EAAE,OAAO,eAAe,EAAE,QAAQ,EAC1C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,KACzB,OAAO,CAAC,OAAO,CAAC,CAAA"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/types/handlers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/C;;GAEG;AACH,MAAM,MAAM,gBAAgB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CAClE,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,OAAO,KACT,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;AAE/B;;GAEG;AACH,MAAM,MAAM,mBAAmB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CACrE,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,OAAO,KACT,YAAY,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAEnD;;GAEG;AACH,MAAM,MAAM,mBAAmB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CACrE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,EACnD,GAAG,EAAE,OAAO,KACT,OAAO,CAAC,OAAO,CAAC,CAAA;AAErB;;GAEG;AACH,MAAM,MAAM,iBAAiB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,CACnE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,EACnD,GAAG,EAAE,OAAO,KACT,YAAY,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAEnD;;GAEG;AACH,MAAM,MAAM,aAAa,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IACzD,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEtC;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAA;AAEpC;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,QAAQ,GAAG,OAAO,IAAI,CAC7C,OAAO,EAAE,QAAQ,EACjB,GAAG,EAAE,OAAO,EACZ,GAAG,CAAC,EAAE,WAAW,KACd,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAEzB;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE1D;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE1D;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,eAAe,GAAG,cAAc,CAAA;AAEhF;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,yBAAyB;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,yBAAyB;IACzB,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,GAAG,UAAU,CAAA;CAC3B;AAED,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;AAEzF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,mBAAmB;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,OAAO,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,eAAe,CAAA;IAC1E,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,IAAI,EAAE,WAAW,CAAA;IAEjB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IAEZ,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IAEf,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,kDAAkD;IAClD,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAE/B,6CAA6C;IAC7C,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAE5B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,WAAW,CAAA;IAEzB,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAE5B,iDAAiD;IACjD,OAAO,CAAC,EAAE,WAAW,CAAA;IAErB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,UAAU,CAAA;IAEvB,wBAAwB;IACxB,OAAO,CAAC,EAAE,WAAW,CAAA;IAErB,oBAAoB;IACpB,IAAI,CAAC,EAAE,QAAQ,CAAA;IAEf,sCAAsC;IACtC,QAAQ,CAAC,EAAE,gBAAgB,CAAA;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,GAAG,OAAO;IAC5C,uBAAuB;IACvB,OAAO,EAAE,CAAC,CAAA;IAEV,uBAAuB;IACvB,IAAI,EAAE,WAAW,CAAA;IAEjB,+BAA+B;IAC/B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAA;CAC7B;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,QAAQ,EAAE,OAAO,eAAe,EAAE,QAAQ,EAC1C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,KACzB,OAAO,CAAC,OAAO,CAAC,CAAA"}

package/dist/types/index.d.ts

@@ -1,7 +1,9 @@
 export type { RaffelStream, StreamChunk, StreamOptions, StreamState, CreateStreamFn, } from './stream.js';
 export type { Envelope, EnvelopeType, ErrorEnvelope, ErrorPayload, } from './envelope.js';
 export { createResponseEnvelope, createErrorEnvelope, } from './envelope.js';
-export type { Context, AuthContext, TracingContext, ExtensionKey, CallFunction, } from './context.js';
-export { createContext, withDeadline, withAuth, withExtension, getExtension, createExtensionKey, } from './context.js';
+export type { Context, AuthContext, AuthPrincipal, AuthRequirement, Principal, TracingContext, ContextSeed, ContextInput, ContextLogger, ProtocolKind, HttpContextCapability, WebSocketContextCapability, JsonRpcContextCapability, GraphQLContextCapability, GrpcContextCapability, TcpContextCapability, UdpContextCapability, StreamContextCapability, ExtensionKey, CallFunction, } from './context.js';
+export { ContextAuthError, createAuthContext, createContext, getAuthRoles, getAuthScopes, getPrincipalId, isTypedPrincipal, mergeContextSeeds, stripTransportCapabilities, withDeadline, withAuth, withExtension, getExtension, createExtensionKey, } from './context.js';
+export type { ContractAuthPolicy, ContractTimeoutPolicy, ContractRateLimitPolicy, ContractPolicies, ContractContext, } from './policies.js';
+export { CONTRACT_POLICY_METADATA_KEY, normalizeContractPolicies, mergeContractPolicies, serializeContractPolicies, parseContractPolicies, } from './policies.js';
 export type { ProcedureHandler, ServerStreamHandler, ClientStreamHandler, BidiStreamHandler, StreamHandler, EventHandler, AckFunction, HandlerKind, JsonRpcErrorMeta, JsonRpcMeta, GrpcMeta, HttpMethod, StreamDirection, DeliveryGuarantee, RetryPolicy, HandlerMeta, RegisteredHandler, Interceptor, } from './handlers.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,WAAW,EACX,cAAc,GACf,MAAM,aAAa,CAAA;AAGpB,YAAY,EACV,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,eAAe,CAAA;AAGtB,YAAY,EACV,OAAO,EACP,WAAW,EACX,cAAc,EACd,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,cAAc,CAAA;AAGrB,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,WAAW,GACZ,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,WAAW,EACX,cAAc,GACf,MAAM,aAAa,CAAA;AAGpB,YAAY,EACV,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,eAAe,CAAA;AAGtB,YAAY,EACV,OAAO,EACP,WAAW,EACX,aAAa,EACb,eAAe,EACf,SAAS,EACT,cAAc,EACd,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,cAAc,CAAA;AAErB,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,GAChB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,eAAe,CAAA;AAGtB,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,WAAW,GACZ,MAAM,eAAe,CAAA"}

package/dist/types/index.js

@@ -1,3 +1,4 @@
 export { createResponseEnvelope, createErrorEnvelope, } from './envelope.js';
-export { createContext, withDeadline, withAuth, withExtension, getExtension, createExtensionKey, } from './context.js';
+export { ContextAuthError, createAuthContext, createContext, getAuthRoles, getAuthScopes, getPrincipalId, isTypedPrincipal, mergeContextSeeds, stripTransportCapabilities, withDeadline, withAuth, withExtension, getExtension, createExtensionKey, } from './context.js';
+export { CONTRACT_POLICY_METADATA_KEY, normalizeContractPolicies, mergeContractPolicies, serializeContractPolicies, parseContractPolicies, } from './policies.js';
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,eAAe,CAAA;AAUtB,OAAO,EACL,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,eAAe,CAAA;AAyBtB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,cAAc,CAAA;AASrB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,eAAe,CAAA"}

package/dist/types/policies.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Contract-bound policy metadata
+ *
+ * Policies attached here describe runtime guarantees bound to a contract and
+ * can be propagated across transports and internal calls.
+ */
+import type { HandlerKind } from './handlers.js';
+export declare const CONTRACT_POLICY_METADATA_KEY = "x-raffel-policy-context";
+export interface ContractAuthPolicy {
+    /** Authentication mode. Defaults to `required` when auth is configured. */
+    mode?: 'required' | 'optional';
+    /** Optional authentication scheme identifier for docs/tooling. */
+    scheme?: string;
+    /** Require at least one of these roles when authenticated. */
+    roles?: string[];
+    /** Require at least one of these scopes when authenticated. */
+    scopes?: string[];
+}
+export interface ContractTimeoutPolicy {
+    /** Maximum allowed execution time in milliseconds. */
+    timeoutMs: number;
+}
+export interface ContractRateLimitPolicy {
+    /** Sliding window size in milliseconds. */
+    windowMs: number;
+    /** Maximum requests allowed inside the window. */
+    maxRequests: number;
+    /** Optional key strategy for docs/tooling and runtime defaults. */
+    key?: 'user' | 'client' | 'request' | (string & {});
+    /** Optional bucket identifier for docs/tooling. */
+    bucket?: string;
+}
+export interface ContractPolicies {
+    auth?: ContractAuthPolicy;
+    timeout?: ContractTimeoutPolicy;
+    rateLimit?: ContractRateLimitPolicy;
+    /** Reserved escape hatch for future policy families. */
+    custom?: Record<string, Record<string, unknown>>;
+}
+export interface ContractContext {
+    /** Current contract name. */
+    name: string;
+    /** Current contract kind. */
+    kind: HandlerKind;
+    /** Policies directly attached to the current contract. */
+    policies?: ContractPolicies;
+    /** Effective policy context inherited through transports and ctx.call. */
+    policyContext?: ContractPolicies;
+}
+export declare function normalizeContractPolicies(input?: ContractPolicies | null): ContractPolicies | undefined;
+export declare function mergeContractPolicies(...sources: Array<ContractPolicies | undefined | null>): ContractPolicies | undefined;
+export declare function serializeContractPolicies(policies?: ContractPolicies | null): string | undefined;
+export declare function parseContractPolicies(payload?: string | null): ContractPolicies | undefined;
+//# sourceMappingURL=policies.d.ts.map

package/dist/types/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../src/types/policies.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAEhD,eAAO,MAAM,4BAA4B,4BAA4B,CAAA;AAErE,MAAM,WAAW,kBAAkB;IACjC,2EAA2E;IAC3E,IAAI,CAAC,EAAE,UAAU,GAAG,UAAU,CAAA;IAC9B,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAA;IAChB,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAA;IACnB,mEAAmE;IACnE,GAAG,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IACnD,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,kBAAkB,CAAA;IACzB,OAAO,CAAC,EAAE,qBAAqB,CAAA;IAC/B,SAAS,CAAC,EAAE,uBAAuB,CAAA;IACnC,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACjD;AAED,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,6BAA6B;IAC7B,IAAI,EAAE,WAAW,CAAA;IACjB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IAC3B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,gBAAgB,CAAA;CACjC;AAoBD,wBAAgB,yBAAyB,CACvC,KAAK,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAC9B,gBAAgB,GAAG,SAAS,CAuC9B;AAED,wBAAgB,qBAAqB,CACnC,GAAG,OAAO,EAAE,KAAK,CAAC,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC,GACrD,gBAAgB,GAAG,SAAS,CAgC9B;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GACtB,gBAAgB,GAAG,SAAS,CAY9B"}