stitchkit 0.68.0 → 0.68.1

package/dist/react.js

@@ -104,20 +104,29 @@ function insertAt(items, item, at, compare) {
 function mutateItemArrays(arrays, mutation, config, getId) {
   const present = arrays.some((items) => items.some((item) => getId(item) === mutation.id));
   if (mutation.type === "created" && present)
-    return arrays;
+    return { arrays, present };
   if (mutation.type === "updated" && !present && config.updateMissing === "skip") {
-    return arrays;
+    return { arrays, present };
   }
   if (mutation.type !== "deleted" && (!present || mutation.type === "created")) {
     if (arrays.length === 0)
-      return arrays;
+      return { arrays, present };
     const target = config.createAt === "start" ? 0 : arrays.length - 1;
-    return arrays.map((items, index) => index === target ? insertAt(items, mutation.item, config.createAt, config.compare) : items);
+    return {
+      arrays: arrays.map((items, index) => index === target ? insertAt(items, mutation.item, config.createAt, config.compare) : items),
+      present
+    };
   }
   if (mutation.type === "deleted") {
-    return arrays.map((items) => items.filter((item) => getId(item) !== mutation.id));
+    return {
+      arrays: arrays.map((items) => items.filter((item) => getId(item) !== mutation.id)),
+      present
+    };
   }
-  return arrays.map((items) => ordered(items.map((item) => getId(item) === mutation.id ? mutation.item : item), config.compare));
+  return {
+    arrays: arrays.map((items) => ordered(items.map((item) => getId(item) === mutation.id ? mutation.item : item), config.compare)),
+    present
+  };
 }
 function firstArray(arrays) {
   const first = arrays[0];
@@ -125,51 +134,140 @@ function firstArray(arrays) {
     throw new Error("Entity cache list adapter lost its only item array");
   return first;
 }
+function totalDelta(mutation, present, membership) {
+  if (mutation.type === "deleted") {
+    if (present)
+      return -1;
+    return "unknown";
+  }
+  if (membership === "unknown")
+    return "unknown";
+  if (mutation.type === "created") {
+    if (present)
+      return 0;
+    return membership === "include" ? 1 : 0;
+  }
+  if (present)
+    return membership === "exclude" ? -1 : 0;
+  return "unknown";
+}
+function reconcileTotal(value, delta) {
+  if (delta === "unknown")
+    return value;
+  if (!Number.isSafeInteger(delta)) {
+    throw new Error('Entity cache total delta must be a safe integer or "unknown"');
+  }
+  const current = Reflect.get(value, "total");
+  if (typeof current !== "number" || !Number.isSafeInteger(current) || current < 0) {
+    return value;
+  }
+  return { ...value, total: Math.max(0, current + delta) };
+}
 function unsupportedListShape(shape) {
   throw new Error(`Unsupported entity cache list shape: ${String(shape)}`);
 }
-function patchList(context, key, config, mutation, getId) {
-  const mutate = (arrays) => mutateItemArrays(arrays, mutation, config, getId);
-  switch (config.shape) {
-    case "array":
-      context.queryClient.setQueriesData({ queryKey: key }, (old) => Array.isArray(old) ? firstArray(mutate([old])) : old);
-      return;
-    case "paginated":
-      context.queryClient.setQueriesData({ queryKey: key }, (old) => isRecord(old) && Array.isArray(old.items) ? { ...old, items: firstArray(mutate([old.items])) } : old);
-      return;
-    case "infinite-array":
-      context.queryClient.setQueriesData({ queryKey: key }, (old) => isRecord(old) && Array.isArray(old.pages) && old.pages.every((page) => Array.isArray(page)) ? { ...old, pages: mutate(old.pages) } : old);
-      return;
-    case "infinite-paginated":
-      context.queryClient.setQueriesData({ queryKey: key }, (old) => {
-        if (!isRecord(old) || !Array.isArray(old.pages) || !old.pages.every((page) => isRecord(page) && Array.isArray(page.items))) {
-          return old;
-        }
-        const items = mutate(old.pages.map((page) => page.items));
-        return {
-          ...old,
-          pages: old.pages.map((page, index) => {
-            const pageItems = items[index];
-            if (!pageItems) {
-              throw new Error("Entity cache list adapter changed the page count");
-            }
-            return { ...page, items: pageItems };
-          })
-        };
-      });
+function patchList(context, key, config, event, mutation, getId) {
+  const queries = context.queryClient.getQueryCache().findAll({ queryKey: key });
+  const patchExact = (exactKey, membership) => {
+    const effectiveMutation = membership === "exclude" && mutation.type !== "deleted" ? { type: "deleted", id: mutation.id } : mutation;
+    const unknown = membership === "unknown";
+    if (unknown && mutation.type !== "deleted") {
+      if (config.membership?.unknown === "invalidate" || config.total?.unknown === "invalidate") {
+        context.queryClient.invalidateQueries({ queryKey: exactKey, exact: true });
+      }
       return;
-    default:
-      unsupportedListShape(config.shape);
+    }
+    let invalidateMembership = false;
+    const mutate = (arrays) => {
+      const result = mutateItemArrays(arrays, effectiveMutation, config, getId);
+      if (membership === "unknown" && mutation.type === "deleted" && !result.present && config.membership?.unknown === "invalidate") {
+        invalidateMembership = true;
+      }
+      return result;
+    };
+    let invalidateTotal = false;
+    const reconcile = (value, delta) => {
+      if (delta === "unknown" && config.total?.unknown === "invalidate") {
+        invalidateTotal = true;
+      }
+      return reconcileTotal(value, delta);
+    };
+    const invalidateIfNeeded = () => {
+      if (invalidateMembership || invalidateTotal) {
+        context.queryClient.invalidateQueries({ queryKey: exactKey, exact: true });
+      }
+    };
+    switch (config.shape) {
+      case "array":
+        context.queryClient.setQueryData(exactKey, (old) => Array.isArray(old) ? firstArray(mutate([old]).arrays) : old);
+        invalidateIfNeeded();
+        return;
+      case "paginated":
+        context.queryClient.setQueryData(exactKey, (old) => {
+          if (!isRecord(old) || !Array.isArray(old.items))
+            return old;
+          const result = mutate([old.items]);
+          const patched = { ...old, items: firstArray(result.arrays) };
+          const delta = config.total?.delta?.({
+            event,
+            queryKey: exactKey,
+            present: result.present,
+            membership
+          }) ?? totalDelta(mutation, result.present, membership);
+          return config.total ? reconcile(patched, delta) : patched;
+        });
+        invalidateIfNeeded();
+        return;
+      case "infinite-array":
+        context.queryClient.setQueryData(exactKey, (old) => isRecord(old) && Array.isArray(old.pages) && old.pages.every((page) => Array.isArray(page)) ? { ...old, pages: mutate(old.pages).arrays } : old);
+        invalidateIfNeeded();
+        return;
+      case "infinite-paginated":
+        context.queryClient.setQueryData(exactKey, (old) => {
+          if (!isRecord(old) || !Array.isArray(old.pages) || !old.pages.every((page) => isRecord(page) && Array.isArray(page.items))) {
+            return old;
+          }
+          const result = mutate(old.pages.map((page) => page.items));
+          const delta = config.total?.delta?.({
+            event,
+            queryKey: exactKey,
+            present: result.present,
+            membership
+          }) ?? totalDelta(mutation, result.present, membership);
+          return {
+            ...old,
+            pages: old.pages.map((page, index) => {
+              const pageItems = result.arrays[index];
+              if (!pageItems) {
+                throw new Error("Entity cache list adapter changed the page count");
+              }
+              const patched = { ...page, items: pageItems };
+              return config.total ? reconcile(patched, delta) : patched;
+            })
+          };
+        });
+        invalidateIfNeeded();
+        return;
+      default:
+        unsupportedListShape(config.shape);
+    }
+  };
+  for (const query of queries) {
+    const exactKey = query.queryKey;
+    patchExact(exactKey, config.membership?.evaluate(event, exactKey) ?? "include");
   }
 }
 function createEntityCacheHandlers(config) {
+  if (config.list.total && config.list.shape !== "paginated" && config.list.shape !== "infinite-paginated") {
+    throw new Error("Entity cache total policy requires a paginated list shape");
+  }
   const deletedId = config.getDeletedId ?? ((payload) => idOf(payload, config.getId));
   const apply = (event, mutation, context) => {
     const listKey = resolveKey(config.list.key, event);
     const detailKey = config.detailKey ? resolveKey(config.detailKey, event) : undefined;
     if (context.isFresh(detailKey ?? listKey))
       return false;
-    patchList(context, listKey, config.list, mutation, config.getListItemId);
+    patchList(context, listKey, config.list, event, mutation, config.getListItemId);
     return true;
   };
   return {

package/dist/realtime/contract.d.ts

@@ -1,5 +1,5 @@
 import type { z } from 'zod';
-import type { AppError } from '../contract/errors';
+import type { AppError } from '../contract/errors.js';
 export interface RealtimeEventDefinition<TArgs extends z.ZodType<unknown[]> = z.ZodType<unknown[]>, TAck extends z.ZodType | undefined = z.ZodType | undefined> {
     args: TArgs;
     ack?: TAck;

package/dist/realtime/index.d.ts

@@ -1,5 +1,5 @@
-export { defineRealtimeContract, type InferRealtimeEventMap, type RealtimeAcknowledgedEvent, type RealtimeAcknowledgement, type RealtimeContract, type RealtimeEmitArguments, type RealtimeEventArguments, type RealtimeEventDefinition, type RealtimeEventHandler, type RealtimeEventRegistry, type RealtimeRejectDirection, type RealtimeRejectedEvent, type RealtimeRejectedEventHook, type RealtimeRequestArguments, } from './contract';
-export { asRealtimeRejection, REALTIME_REJECTION_KEY, type RealtimeRejectionEnvelope, type RealtimeRejectionIssue, type RealtimeRejectionReport, } from './rejected-frame';
-export { RealtimeRequestDisconnectedError, RealtimeRequestInvalidAcknowledgementError, type RealtimeRequestOptions, RealtimeRequestRejectedError, RealtimeRequestTimeoutError, } from './request';
-export type { ValidatedRealtimeSocket } from './socket';
+export { defineRealtimeContract, type InferRealtimeEventMap, type RealtimeAcknowledgedEvent, type RealtimeAcknowledgement, type RealtimeContract, type RealtimeEmitArguments, type RealtimeEventArguments, type RealtimeEventDefinition, type RealtimeEventHandler, type RealtimeEventRegistry, type RealtimeRejectDirection, type RealtimeRejectedEvent, type RealtimeRejectedEventHook, type RealtimeRequestArguments, } from './contract.js';
+export { asRealtimeRejection, REALTIME_REJECTION_KEY, type RealtimeRejectionEnvelope, type RealtimeRejectionIssue, type RealtimeRejectionReport, } from './rejected-frame.js';
+export { RealtimeRequestDisconnectedError, RealtimeRequestInvalidAcknowledgementError, type RealtimeRequestOptions, RealtimeRequestRejectedError, RealtimeRequestTimeoutError, } from './request.js';
+export type { ValidatedRealtimeSocket } from './socket.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/realtime/rejection.d.ts

@@ -1,4 +1,4 @@
-import type { RealtimeRejectDirection, RealtimeRejectedEvent } from './contract';
+import type { RealtimeRejectDirection, RealtimeRejectedEvent } from './contract.js';
 export declare function realtimeContractViolation(options: {
     event: string;
     direction: RealtimeRejectDirection;

package/dist/realtime/request.d.ts

@@ -1,4 +1,4 @@
-import type { RealtimeRejectionIssue } from './rejected-frame';
+import type { RealtimeRejectionIssue } from './rejected-frame.js';
 export interface RealtimeRequestOptions {
     /** Maximum acknowledgement wait in milliseconds. Must be finite and > 0. */
     timeoutMs: number;

package/dist/realtime/socket.d.ts

@@ -1,6 +1,6 @@
 import type { z } from 'zod';
-import type { StitchLogger } from '../logger';
-import type { RealtimeEmitArguments, RealtimeEventHandler, RealtimeEventRegistry, RealtimeRejectDirection, RealtimeRejectedEventHook } from './contract';
+import type { StitchLogger } from '../logger.js';
+import type { RealtimeEmitArguments, RealtimeEventHandler, RealtimeEventRegistry, RealtimeRejectDirection, RealtimeRejectedEventHook } from './contract.js';
 interface ValidatedRealtimeSocketOptions<TInbound extends RealtimeEventRegistry, TOutbound extends RealtimeEventRegistry> {
     target: object;
     inbound: TInbound;

package/dist/remote.d.ts

@@ -5,5 +5,5 @@
  * own entrypoint lets CLI and other thin processes proxy a deployed API without
  * importing the MCP SDK or the AI SDK through the broad tools barrel.
  */
-export { type ImplementRemoteOptions, implementRemote } from './tools/remote';
+export { type ImplementRemoteOptions, implementRemote } from './tools/remote.js';
 //# sourceMappingURL=remote.d.ts.map

package/dist/remote.js

@@ -1,7 +1,7 @@
 import {
   ApiError,
   createClient
-} from "./index-zd4v31v2.js";
+} from "./index-2ve29dzn.js";
 import"./index-v5bayx1z.js";
 import {
   mergeMeta

package/dist/server/bun.d.ts

@@ -1,6 +1,6 @@
-import { type ManagedServerHandle } from './shutdown';
-import type { SocketIOServerLifecycle } from './socket-io';
-import type { FetchComposition, FetchHandler, HandlerConfig, RawRoute, RawRouteContext } from './types';
+import { type ManagedServerHandle } from './shutdown.js';
+import type { SocketIOServerLifecycle } from './socket-io.js';
+import type { FetchComposition, FetchHandler, HandlerConfig, RawRoute, RawRouteContext } from './types.js';
 /** The concrete `Bun.serve` server instance passed to Bun raw routes. */
 export type BunServer = ReturnType<typeof Bun.serve>;
 export type BunRawRoute = RawRoute<BunServer>;

package/dist/server/context-contribution.d.ts

@@ -1,4 +1,4 @@
-import type { RuntimeContext } from '../contract';
+import type { RuntimeContext } from '../contract/index.js';
 /** Keys whose value is owned by a transport/runtime boundary, never by application enrichment. */
 export declare const RUNTIME_CONTEXT_RESERVED_KEYS: Set<string>;
 /**

package/dist/server/context.d.ts

@@ -2,10 +2,10 @@
  * `RuntimeContext` assembly — parses params / body / multipart against the
  * endpoint schemas and gathers request metadata (trace id, client info).
  */
-import { type RuntimeContext } from '../contract';
-import { type MultipartLifecycle } from './multipart';
-import { type ClientIpOptions } from './request';
-import type { AuthorizationContext, MethodDef } from './types';
+import { type RuntimeContext } from '../contract/index.js';
+import { type MultipartLifecycle } from './multipart.js';
+import { type ClientIpOptions } from './request.js';
+import type { AuthorizationContext, MethodDef } from './types.js';
 /**
  * Assemble everything knowable from the URL alone — path params, the request,
  * trace id and client info — **before** any schema parsing. Bound first so a

package/dist/server/contract-stream.d.ts

@@ -1,5 +1,5 @@
-import { type EndpointStreamDescriptor } from '../contract';
-import type { RawRouteContext } from './types';
+import { type EndpointStreamDescriptor } from '../contract/index.js';
+import type { RawRouteContext } from './types.js';
 /** Build the HTTP response for one contract-declared stream. */
 export declare function contractStreamResponse(request: Request, context: RawRouteContext, source: AsyncIterable<unknown>, descriptor: EndpointStreamDescriptor, operationAbort: AbortController): Promise<Response>;
 //# sourceMappingURL=contract-stream.d.ts.map

package/dist/server/create.d.ts

@@ -1,3 +1,3 @@
-import type { FetchHandler, HandlerConfig } from './types';
+import type { FetchHandler, HandlerConfig } from './types.js';
 export declare function createHandler<TServer = unknown>(config: HandlerConfig<TServer>): FetchHandler<TServer>;
 //# sourceMappingURL=create.d.ts.map

package/dist/server/error-hook.d.ts

@@ -35,9 +35,9 @@
  * createServer({ services, hooks: { onError } });
  * ```
  */
-import type { RuntimeContext } from '../contract';
-import { type StitchErrorCode } from '../contract';
-import type { LifecycleHooks, MethodDef } from './types';
+import type { RuntimeContext } from '../contract/index.js';
+import { type StitchErrorCode } from '../contract/index.js';
+import type { LifecycleHooks, MethodDef } from './types.js';
 /** The normalised error handed to `render` — code already remapped. */
 export interface ResolvedError {
     /** Wire code — the app code from `codeMap` for a stitch error, else the thrown code. */

package/dist/server/file.d.ts

@@ -1,4 +1,4 @@
-import type { RawRoute } from './types';
+import type { RawRoute } from './types.js';
 /**
  * Build a basic static-file route. URL-derived paths pass both lexical and
  * realpath containment checks, so an in-root symlink cannot escape `dir`.

package/dist/server/implement.d.ts

@@ -1,6 +1,6 @@
 import type { ZodType } from 'zod';
-import type { ContractDef, EndpointDef, MultipartDescriptor, RuntimeContext } from '../contract';
-import type { EndpointHandlerContext, Handlers, MultipartReceiver, ScopeContexts, ScopedHandlers, ServiceDef, StreamingMultipartImplementation } from './types';
+import type { ContractDef, EndpointDef, MultipartDescriptor, RuntimeContext } from '../contract/index.js';
+import type { EndpointHandlerContext, Handlers, MultipartReceiver, ScopeContexts, ScopedHandlers, ServiceDef, StreamingMultipartImplementation } from './types.js';
 type StreamingEndpoint = EndpointDef & {
     multipart: MultipartDescriptor & {
         delivery: 'stream';

package/dist/server/index.d.ts

@@ -1,32 +1,32 @@
-export { AppError, appError, badRequest, conflict, forbidden, isStitchErrorCode, notFound, rateLimited, STITCH_ERROR_STATUS, type StitchErrorCode, unauthorized, } from '../contract';
-export { errorCode, formatZodError, normalizeError, type ZodIssueSummary, zodIssues, } from '../internal/errors';
-export { isWithinDir } from '../internal/within-dir';
-export { type BunFetchComposition as FetchComposition, type BunFetchHandler as FetchHandler, type BunHandlerConfig as HandlerConfig, type BunRawRoute as RawRoute, type BunRawRouteContext as RawRouteContext, type BunServer, type BunServerConfig, type BunServerHandle, createServer, type ServerPassthrough, type UnixListenConfig, } from './bun';
-export { type CacheOptions, cacheHeaders, createCache } from './cache';
-export { createHandler } from './create';
-export { createErrorHook, type ErrorHookConfig, type ResolvedError, } from './error-hook';
-export { createEventBus, type DefaultEventMap, type EventBus, type EventBusOptions, type EventHandler, } from './event-bus';
-export { type ByteRange, parseByteRange, type ServeFileOptions, serveFile, staticRoute, weakETag, } from './file';
-export { createImplement, createImplementRegistry, createMultipartStream, createScopedImplement, createScopedImplementRegistry, defineMultipartStream, type ExactRegistryHandlers, type ExactScopedRegistryHandlers, type ImplementationRegistry, implement, implementRegistry, type KeyedServices, type MultipartStreamConfig, type RegistryHandlers, type ScopedImplementationRegistry, type ScopedRegistryHandlers, type StreamScope, } from './implement';
-export { composeLifecycleHooks } from './lifecycle';
-export type { LogFormat } from './logger';
-export { type AuthHook, type AuthHookConfig, type AuthRule, type AuthRuleContribution, type AuthRules, type AuthScopes, type BearerResolverConfig, type ComposeAuthHooksConfig, type ComposedAuthScopes, composeAuthHooks, createAuthHook, createBearerResolver, extractToken, type JwtPayload, type RuleScopes, type ScopedAuthHook, type ScopedAuthRule, type SignJwtOptions, signJwt, type VerifyJwtOptions, verifyJwt, } from './middleware/auth';
-export { type CookieDef, type CookieOptions, defineCookie, parseCookies, serializeCookie, } from './middleware/cookies';
-export { type CorsConfig, corsHeaders, corsPreflightResponse, DEFAULT_CORS_ALLOW_HEADERS, DEFAULT_CORS_EXPOSE_HEADERS, } from './middleware/cors';
-export { deriveCodeChallenge, type PkceMethod, verifyPkce } from './middleware/pkce';
-export { type MultipartLifecycle, type MultipartResult, parseMultipart } from './multipart';
-export { generateOpenApiDocument, type OpenApiConfig, type OpenApiDocument, type OpenApiInfo, type OpenApiServer, openApiRoute, } from './openapi';
-export { bindProcessSignals, type ProcessSignalName, type ProcessSignalsBinding, type ProcessSignalsErrorPhase, type ProcessSignalsOptions, type ShutdownTarget, type SignalSource, } from './process-signals';
-export { createRateLimiter, type RateLimitConfig } from './rate-limit';
-export { errorResponse, parseBody, respondJson } from './raw';
-export { bindRealtimeServer, type RealtimeServer, type RealtimeServerConnection, type RealtimeServerHandle, } from './realtime';
-export { type ClientIpOptions, extractIp, generateTraceId, getClientInfo, resolveSocketIp, resolveTraceId, } from './request';
-export { type ManagedServerHandle, type ShutdownOptions, ShutdownOptionsSchema, type ShutdownResult, ShutdownResultSchema, type ShutdownState, ShutdownStateSchema, type ShutdownStatus, ShutdownStatusSchema, } from './shutdown';
-export type { SocketIOHandshakeConfig, SocketIOPeerLoaders, SocketIORequestPolicy, SocketIOServerConfig, SocketIOServerHandle, SocketIOServerLifecycle, } from './socket-io';
-export { createSocketIOServer, socketIoLane } from './socket-io';
-export { type ParseSSEOptions, parseSSE, streamSSE } from './stream';
-export { DEFAULT_STREAM_HEARTBEAT_MS, ndjsonRoute, type StreamingFormat, type StreamingRouteOptions, type StreamingSourceContext, sseRoute, streamingRoute, } from './streaming-route';
-export type { AuthorizationContext, EffectiveScope, EndpointHandlerContext, Handlers, LifecycleHooks, LoggingConfig, LogOutcome, MethodDef, MultipartFileMetadata, MultipartReceiver, MultipartReceiverResult, OperationIdentity, RouteGroup, ScopeContexts, ScopedHandlers, ServiceDef, StitchLogger, StreamingMultipartImplementation, } from './types';
-export { createUnixClientTransport, type UnixClientDeliveryState, type UnixClientTransport, type UnixClientTransportConfig, UnixClientTransportError, type UnixClientTransportErrorCode, } from './unix-client';
-export { type ComposedLane, composeWebSocketHandlers, type WebSocketComposeConfig, type WebSocketLane, webSocketLane, } from './websocket';
+export { AppError, appError, badRequest, conflict, forbidden, isStitchErrorCode, notFound, rateLimited, STITCH_ERROR_STATUS, type StitchErrorCode, unauthorized, } from '../contract/index.js';
+export { errorCode, formatZodError, normalizeError, type ZodIssueSummary, zodIssues, } from '../internal/errors.js';
+export { isWithinDir } from '../internal/within-dir.js';
+export { type BunFetchComposition as FetchComposition, type BunFetchHandler as FetchHandler, type BunHandlerConfig as HandlerConfig, type BunRawRoute as RawRoute, type BunRawRouteContext as RawRouteContext, type BunServer, type BunServerConfig, type BunServerHandle, createServer, type ServerPassthrough, type UnixListenConfig, } from './bun.js';
+export { type CacheOptions, cacheHeaders, createCache } from './cache.js';
+export { createHandler } from './create.js';
+export { createErrorHook, type ErrorHookConfig, type ResolvedError, } from './error-hook.js';
+export { createEventBus, type DefaultEventMap, type EventBus, type EventBusOptions, type EventHandler, } from './event-bus.js';
+export { type ByteRange, parseByteRange, type ServeFileOptions, serveFile, staticRoute, weakETag, } from './file.js';
+export { createImplement, createImplementRegistry, createMultipartStream, createScopedImplement, createScopedImplementRegistry, defineMultipartStream, type ExactRegistryHandlers, type ExactScopedRegistryHandlers, type ImplementationRegistry, implement, implementRegistry, type KeyedServices, type MultipartStreamConfig, type RegistryHandlers, type ScopedImplementationRegistry, type ScopedRegistryHandlers, type StreamScope, } from './implement.js';
+export { composeLifecycleHooks } from './lifecycle.js';
+export type { LogFormat } from './logger.js';
+export { type AuthHook, type AuthHookConfig, type AuthRule, type AuthRuleContribution, type AuthRules, type AuthScopes, type BearerResolverConfig, type ComposeAuthHooksConfig, type ComposedAuthScopes, composeAuthHooks, createAuthHook, createBearerResolver, extractToken, type JwtPayload, type RuleScopes, type ScopedAuthHook, type ScopedAuthRule, type SignJwtOptions, signJwt, type VerifyJwtOptions, verifyJwt, } from './middleware/auth.js';
+export { type CookieDef, type CookieOptions, defineCookie, parseCookies, serializeCookie, } from './middleware/cookies.js';
+export { type CorsConfig, corsHeaders, corsPreflightResponse, DEFAULT_CORS_ALLOW_HEADERS, DEFAULT_CORS_EXPOSE_HEADERS, } from './middleware/cors.js';
+export { deriveCodeChallenge, type PkceMethod, verifyPkce } from './middleware/pkce.js';
+export { type MultipartLifecycle, type MultipartResult, parseMultipart } from './multipart.js';
+export { generateOpenApiDocument, type OpenApiConfig, type OpenApiDocument, type OpenApiInfo, type OpenApiServer, openApiRoute, } from './openapi.js';
+export { bindProcessSignals, type ProcessSignalName, type ProcessSignalsBinding, type ProcessSignalsErrorPhase, type ProcessSignalsOptions, type ShutdownTarget, type SignalSource, } from './process-signals.js';
+export { createRateLimiter, type RateLimitConfig } from './rate-limit.js';
+export { errorResponse, parseBody, respondJson } from './raw.js';
+export { bindRealtimeServer, type RealtimeServer, type RealtimeServerConnection, type RealtimeServerHandle, } from './realtime.js';
+export { type ClientIpOptions, extractIp, generateTraceId, getClientInfo, resolveSocketIp, resolveTraceId, } from './request.js';
+export { type ManagedServerHandle, type ShutdownOptions, ShutdownOptionsSchema, type ShutdownResult, ShutdownResultSchema, type ShutdownState, ShutdownStateSchema, type ShutdownStatus, ShutdownStatusSchema, } from './shutdown.js';
+export type { SocketIOHandshakeConfig, SocketIOPeerLoaders, SocketIORequestPolicy, SocketIOServerConfig, SocketIOServerHandle, SocketIOServerLifecycle, } from './socket-io.js';
+export { createSocketIOServer, socketIoLane } from './socket-io.js';
+export { type ParseSSEOptions, parseSSE, streamSSE } from './stream.js';
+export { DEFAULT_STREAM_HEARTBEAT_MS, ndjsonRoute, type StreamingFormat, type StreamingRouteOptions, type StreamingSourceContext, sseRoute, streamingRoute, } from './streaming-route.js';
+export type { AuthorizationContext, EffectiveScope, EndpointHandlerContext, Handlers, LifecycleHooks, LoggingConfig, LogOutcome, MethodDef, MultipartFileMetadata, MultipartReceiver, MultipartReceiverResult, OperationIdentity, RouteGroup, ScopeContexts, ScopedHandlers, ServiceDef, StitchLogger, StreamingMultipartImplementation, } from './types.js';
+export { createUnixClientTransport, type UnixClientDeliveryState, type UnixClientTransport, type UnixClientTransportConfig, UnixClientTransportError, type UnixClientTransportErrorCode, } from './unix-client.js';
+export { type ComposedLane, composeWebSocketHandlers, type WebSocketComposeConfig, type WebSocketLane, webSocketLane, } from './websocket.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.js

@@ -13,7 +13,7 @@ import {
   sseRoute,
   streamingRoute,
   webSocketLane
-} from "../index-nymn7wbg.js";
+} from "../index-nck3yx3y.js";
 import {
   composeAuthHooks,
   createAuthHook,
@@ -41,6 +41,14 @@ import {
   implement,
   implementRegistry
 } from "../index-pr0qsmjy.js";
+import {
+  extractIp,
+  generateTraceId,
+  getClientInfo,
+  getTraceId,
+  resolveSocketIp,
+  resolveTraceId
+} from "../index-69m2278y.js";
 import {
   isWithinDir,
   realPathWithinDir
@@ -62,14 +70,6 @@ import {
   parseSSE,
   streamSSE
 } from "../index-v5bayx1z.js";
-import {
-  extractIp,
-  generateTraceId,
-  getClientInfo,
-  getTraceId,
-  resolveSocketIp,
-  resolveTraceId
-} from "../index-69m2278y.js";
 import {
   DEFAULT_CONTRACT_STREAM_FRAME_BYTES,
   errorCode,

package/dist/server/lifecycle.d.ts

@@ -1,4 +1,4 @@
-import type { LifecycleHooks } from './types';
+import type { LifecycleHooks } from './types.js';
 /** Compose ordinary HTTP lifecycle hooks inside each existing phase slot. */
 export declare function composeLifecycleHooks(...hooks: readonly (LifecycleHooks | undefined)[]): LifecycleHooks;
 //# sourceMappingURL=lifecycle.d.ts.map

package/dist/server/logging.d.ts

@@ -1,4 +1,4 @@
-import type { LoggingConfig, LogOutcome } from './types';
+import type { LoggingConfig, LogOutcome } from './types.js';
 /**
  * Normalise `logging` into either a config or `null` (off). `true` is shorthand
  * for `{}`: any object turns logging on, and `logger` decides which sink writes.

package/dist/server/middleware/auth.d.ts

@@ -1,5 +1,5 @@
-import type { RuntimeContext } from '../../contract';
-import type { AuthorizationContext, OperationIdentity } from '../types';
+import type { RuntimeContext } from '../../contract/index.js';
+import type { AuthorizationContext, OperationIdentity } from '../types.js';
 export interface JwtPayload {
     [key: string]: unknown;
 }

package/dist/server/multipart.d.ts

@@ -1,5 +1,5 @@
-import type { MultipartDescriptor } from '../contract';
-import type { MultipartReceiver } from './types';
+import type { MultipartDescriptor } from '../contract/index.js';
+import type { MultipartReceiver } from './types.js';
 export interface MultipartLifecycle {
     rollback(): Promise<void>;
 }

package/dist/server/node.d.ts

@@ -1,7 +1,7 @@
 import type { Server as HttpServer } from 'node:http';
 import { serve } from 'srvx/node';
-import { type ManagedServerHandle } from './shutdown';
-import type { FetchComposition, HandlerConfig } from './types';
+import { type ManagedServerHandle } from './shutdown.js';
+import type { FetchComposition, HandlerConfig } from './types.js';
 export interface NodeSocketLifecycle {
     attach(server: HttpServer): void;
     beginShutdown(): void;

package/dist/server/openapi.d.ts

@@ -10,7 +10,7 @@
  * emits — not a divergent code path. Schemas are inlined (valid OpenAPI);
  * `$ref` de-duplication can come later if a spec grows unwieldy.
  */
-import type { MethodDef, RawRoute, ServiceDef } from './types';
+import type { MethodDef, RawRoute, ServiceDef } from './types.js';
 export interface OpenApiInfo {
     title: string;
     version: string;

package/dist/server/process-signal-common.d.ts

@@ -1,4 +1,4 @@
-import type { ProcessSignalName, SignalSource } from './process-signals';
+import type { ProcessSignalName, SignalSource } from './process-signals.js';
 export declare const DEFAULT_PROCESS_SIGNALS: readonly ProcessSignalName[];
 export declare const defaultSignalSource: SignalSource;
 export declare function reportSignalError<TPhase extends string>(phase: TPhase, error: unknown, onError: ((phase: TPhase, error: unknown) => void) | undefined): void;

package/dist/server/process-signals.d.ts

@@ -9,7 +9,7 @@
  * throws, and a third signal on a process whose default disposition the first
  * `process.on` already suppressed. → ADR 0076
  */
-import type { ShutdownOptions, ShutdownResult } from './shutdown';
+import type { ShutdownOptions, ShutdownResult } from './shutdown.js';
 /**
  * Signal names this binding can listen for.
  *

package/dist/server/realtime.d.ts

@@ -1,8 +1,8 @@
 import type { DefaultEventsMap, Socket, Server as SocketIOServer } from 'socket.io';
-import type { SocketEventMap } from '../browser/socket-io';
-import type { StitchLogger } from '../logger';
-import type { RealtimeContract, RealtimeEventRegistry, RealtimeRejectedEventHook } from '../realtime/contract';
-import { type ValidatedRealtimeSocket } from '../realtime/socket';
+import type { SocketEventMap } from '../browser/socket-io.js';
+import type { StitchLogger } from '../logger.js';
+import type { RealtimeContract, RealtimeEventRegistry, RealtimeRejectedEventHook } from '../realtime/contract.js';
+import { type ValidatedRealtimeSocket } from '../realtime/socket.js';
 export interface RealtimeServerConnection<TServerToClient extends RealtimeEventRegistry, TClientToServer extends RealtimeEventRegistry, TData = any> {
     /**
      * Raw Socket.IO socket for rooms and application-owned delivery policy.

package/dist/server/response-metadata.d.ts

@@ -1,4 +1,4 @@
-import type { ResponseMetadata } from '../contract';
+import type { ResponseMetadata } from '../contract/index.js';
 /** Create one isolated outbound collector for a response-metadata handler. */
 export declare function createResponseMetadata(): ResponseMetadata;
 /**

package/dist/server/router.d.ts

@@ -1,4 +1,4 @@
-import type { LifecycleHooks, MethodDef, RawRoute, ServiceDef } from './types';
+import type { LifecycleHooks, MethodDef, RawRoute, ServiceDef } from './types.js';
 /** A service mounted under a path prefix, carrying optional group hooks. */
 export interface NormalizedGroup {
     prefix: string;

package/dist/server/shutdown.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import type { FetchHandler } from './types';
+import type { FetchHandler } from './types.js';
 export declare const ShutdownStateSchema: z.ZodEnum<{
     clean: "clean";
     "closing-realtime": "closing-realtime";

package/dist/server/socket-io-node.d.ts

@@ -1,9 +1,9 @@
 /** Node-facing Socket.IO surface without Bun engine declarations. */
 import type { Server as HttpServer } from 'node:http';
 import type { DefaultEventsMap, Server as SocketIOServer } from 'socket.io';
-import type { SocketEventMap } from '../browser/socket-io';
-import type { SocketIOServerConfig } from './socket-io-config';
-export type { SocketIOHandshakeConfig, SocketIOPeerLoaders, SocketIORequestPolicy, SocketIOServerConfig, } from './socket-io-config';
+import type { SocketEventMap } from '../browser/socket-io.js';
+import type { SocketIOServerConfig } from './socket-io-config.js';
+export type { SocketIOHandshakeConfig, SocketIOPeerLoaders, SocketIORequestPolicy, SocketIOServerConfig, } from './socket-io-config.js';
 /** The runtime-neutral part of a Socket.IO handle used by `serveNode`. */
 export interface NodeSocketIOServerHandle<TServerEvents extends SocketEventMap, TClientEvents extends SocketEventMap, TData = any> {
     io: SocketIOServer<TClientEvents, TServerEvents, DefaultEventsMap, TData>;

package/dist/server/socket-io.d.ts

@@ -18,12 +18,12 @@
 import type { Server as HttpServer } from 'node:http';
 import type { Server as BunEngine } from '@socket.io/bun-engine';
 import type { DefaultEventsMap, Server as SocketIOServer } from 'socket.io';
-import type { SocketEventMap } from '../browser/socket-io';
-import type { BunServer } from './bun';
-import type { SocketIOServerConfig } from './socket-io-config';
-import type { RawRoute } from './types';
-import { type ComposedLane } from './websocket';
-export type { SocketIOHandshakeConfig, SocketIOPeerLoaders, SocketIORequestPolicy, SocketIOServerConfig, } from './socket-io-config';
+import type { SocketEventMap } from '../browser/socket-io.js';
+import type { BunServer } from './bun.js';
+import type { SocketIOServerConfig } from './socket-io-config.js';
+import type { RawRoute } from './types.js';
+import { type ComposedLane } from './websocket.js';
+export type { SocketIOHandshakeConfig, SocketIOPeerLoaders, SocketIORequestPolicy, SocketIOServerConfig, } from './socket-io-config.js';
 export interface SocketIOServerLifecycle {
     /**
      * WebSocket handler for `Bun.serve({ websocket })`. Real on Bun; on Node it is

package/dist/server/streaming-route.d.ts

@@ -39,8 +39,8 @@
  * iterable is returned, so a departed subscriber does not leave live work
  * running on the server.
  */
-import type { HttpMethod } from '../contract/define';
-import type { RawRoute, RawRouteContext } from './types';
+import type { HttpMethod } from '../contract/define.js';
+import type { RawRoute, RawRouteContext } from './types.js';
 /** How a value becomes bytes on the wire. The only thing the two formats differ in. */
 export type StreamingFormat = 'ndjson' | 'sse';
 /**