stitchkit 0.74.1 → 0.75.0

package/dist/live.js

@@ -0,0 +1,284 @@
+import {
+  LiveStatePhaseSchema,
+  LiveStateStopReasonSchema
+} from "./index-35z5h2ty.js";
+import {
+  bytesToBase64Url
+} from "./index-rxfy4cq7.js";
+
+// src/live/events.ts
+import { z } from "zod";
+function assertName(kind, value) {
+  if (value.length === 0) {
+    throw new Error(`[stitchkit] defineEvents: ${kind} name cannot be empty.`);
+  }
+  if (/\s/.test(value)) {
+    throw new Error(`[stitchkit] defineEvents: ${kind} name "${value}" cannot contain whitespace.`);
+  }
+}
+function defineEvents(config, topics) {
+  const prefix = config.prefix;
+  if (prefix !== undefined)
+    assertName("prefix", prefix);
+  const declared = {};
+  for (const [name, topic] of Object.entries(topics)) {
+    assertName("topic", name);
+    if (topic.mode === "emit") {
+      if (topic.whenAllDefer !== undefined) {
+        throw new Error(`[stitchkit] defineEvents: topic "${name}" declares whenAllDefer, which only a 'decision' topic has. Its mode is 'emit'.`);
+      }
+      if (topic.listenerTimeoutMs !== undefined) {
+        throw new Error(`[stitchkit] defineEvents: topic "${name}" declares listenerTimeoutMs, but mode 'emit' never waits for a listener.`);
+      }
+    } else {
+      if (topic.listenerTimeoutMs === undefined) {
+        throw new Error(`[stitchkit] defineEvents: topic "${name}" has mode '${topic.mode}', which waits for listeners, so it must declare listenerTimeoutMs.`);
+      }
+      if (!Number.isFinite(topic.listenerTimeoutMs) || topic.listenerTimeoutMs <= 0) {
+        throw new Error(`[stitchkit] defineEvents: topic "${name}" declares listenerTimeoutMs ${String(topic.listenerTimeoutMs)}; it must be finite and greater than zero.`);
+      }
+      if (topic.mode === "decision" && topic.whenAllDefer === undefined) {
+        throw new Error(`[stitchkit] defineEvents: topic "${name}" has mode 'decision', so it must declare whenAllDefer: 'allow' or 'deny' — the outcome when every listener defers. There is no default, because a default would decide it silently.`);
+      }
+      if (topic.mode === "serial" && topic.whenAllDefer !== undefined) {
+        throw new Error(`[stitchkit] defineEvents: topic "${name}" declares whenAllDefer, which only a 'decision' topic has. Its mode is 'serial'.`);
+      }
+    }
+    declared[prefix === undefined ? name : `${prefix}.${name}`] = topic;
+  }
+  return { prefix, topics: declared };
+}
+function toRealtimeContract(declaration) {
+  const serverToClient = {};
+  for (const [topic, definition] of Object.entries(declaration.topics)) {
+    const schema = definition.schema;
+    serverToClient[topic] = { args: z.tuple([schema]) };
+  }
+  return { serverToClient, clientToServer: {} };
+}
+// src/internal/stable-digest.ts
+function stableValue(value) {
+  if (Array.isArray(value))
+    return value.map(stableValue);
+  if (value === null || typeof value !== "object")
+    return value;
+  const result = {};
+  for (const key of Object.keys(value).sort()) {
+    result[key] = stableValue(Reflect.get(value, key));
+  }
+  return result;
+}
+async function argumentsDigest(args) {
+  const bytes = new TextEncoder().encode(JSON.stringify(stableValue(args)));
+  return bytesToBase64Url(new Uint8Array(await crypto.subtle.digest("SHA-256", bytes)));
+}
+
+// src/live/watch-contract.ts
+import { z as z2 } from "zod";
+var WatchKeySchema = z2.object({
+  service: z2.string().min(1),
+  action: z2.string().min(1),
+  digest: z2.string().min(1)
+}).strict().readonly();
+var WatchOpenSchema = z2.object({ key: WatchKeySchema, args: z2.unknown() }).readonly();
+var WatchAcceptedSchema = z2.object({
+  accepted: z2.boolean(),
+  reason: z2.string().optional()
+}).strict().readonly();
+var WatchValueSchema = z2.object({
+  key: WatchKeySchema,
+  revision: z2.number().int().nonnegative(),
+  value: z2.unknown()
+}).readonly();
+var WatchStateSchema = z2.object({
+  key: WatchKeySchema,
+  phase: LiveStatePhaseSchema,
+  reason: LiveStateStopReasonSchema.optional(),
+  code: z2.string().optional(),
+  message: z2.string().optional()
+}).readonly();
+var WATCH_OPEN = "stitchkit.watch.open";
+var WATCH_CLOSE = "stitchkit.watch.close";
+var WATCH_VALUE = "stitchkit.watch.value";
+var WATCH_STATE = "stitchkit.watch.state";
+var watchContract = {
+  serverToClient: {
+    [WATCH_VALUE]: { args: z2.tuple([WatchValueSchema]) },
+    [WATCH_STATE]: { args: z2.tuple([WatchStateSchema]) }
+  },
+  clientToServer: {
+    [WATCH_OPEN]: { args: z2.tuple([WatchOpenSchema]), ack: WatchAcceptedSchema },
+    [WATCH_CLOSE]: { args: z2.tuple([z2.object({ key: WatchKeySchema }).readonly()]) }
+  }
+};
+function watchKeyString(key) {
+  return `${key.service}/${key.action}/${key.digest}`;
+}
+
+// src/live/watch-client.ts
+function createWatchClient(contract, config) {
+  const entries = new Map;
+  const digests = new Map;
+  const holdMs = config.holdMs ?? 0;
+  const openTimeoutMs = config.openTimeoutMs ?? 1e4;
+  const service = contract.meta.prefix;
+  config.transport.on(WATCH_VALUE, (frame) => {
+    const entry = entries.get(watchKeyString(frame.key));
+    if (!entry)
+      return;
+    if (entry.hasValue && frame.revision <= entry.revision)
+      return;
+    entry.revision = frame.revision;
+    entry.value = frame.value;
+    entry.hasValue = true;
+    for (const listener of [...entry.listeners])
+      listener.value(frame.value);
+  });
+  config.transport.on(WATCH_STATE, (frame) => {
+    const entry = entries.get(watchKeyString(frame.key));
+    if (!entry)
+      return;
+    entry.state = frame;
+    for (const listener of [...entry.listeners])
+      listener.state?.(frame);
+  });
+  function cachedDigest(action, args) {
+    return digests.get(`${service}/${action}/${JSON.stringify(stableValue(args))}`);
+  }
+  async function resolveDigest(action, args) {
+    const cacheKey = `${service}/${action}/${JSON.stringify(stableValue(args))}`;
+    const cached = digests.get(cacheKey);
+    if (cached !== undefined)
+      return cached;
+    const digest = await argumentsDigest(args);
+    digests.set(cacheKey, digest);
+    return digest;
+  }
+  function entryFor(key) {
+    const id = watchKeyString(key);
+    const existing = entries.get(id);
+    if (existing) {
+      clearTimeout(existing.release);
+      existing.release = undefined;
+      return existing;
+    }
+    const entry = {
+      key,
+      listeners: new Set,
+      revision: 0,
+      hasValue: false,
+      state: { key, phase: "opening" }
+    };
+    entries.set(id, entry);
+    return entry;
+  }
+  function releaseEntry(entry) {
+    if (entry.listeners.size > 0)
+      return;
+    const drop = () => {
+      if (entry.listeners.size > 0)
+        return;
+      entries.delete(watchKeyString(entry.key));
+      config.transport.emit(WATCH_CLOSE, { key: entry.key });
+    };
+    if (holdMs === 0) {
+      drop();
+      return;
+    }
+    entry.release = setTimeout(drop, holdMs);
+    entry.release.unref?.();
+  }
+  function handleFor(action, args) {
+    const mine = new Set;
+    let entry;
+    let opened = false;
+    const known = cachedDigest(action, args);
+    if (known !== undefined)
+      entry = entryFor({ service, action, digest: known });
+    const ready = (async () => {
+      if (entry)
+        return entry;
+      const digest = await resolveDigest(action, args);
+      entry = entryFor({ service, action, digest });
+      return entry;
+    })();
+    async function open(target) {
+      if (opened)
+        return;
+      opened = true;
+      const acknowledgement = await config.transport.request(WATCH_OPEN, { key: target.key, args }, { timeoutMs: openTimeoutMs });
+      if (!acknowledgement.accepted) {
+        const reason = acknowledgement.reason ?? "the server refused this watch";
+        config.onRefused?.(target.key, reason);
+        const refusal = {
+          key: target.key,
+          phase: "unavailable",
+          reason: "source-unavailable",
+          message: reason
+        };
+        target.state = refusal;
+        for (const listener of [...target.listeners])
+          listener.state?.(refusal);
+      }
+    }
+    return {
+      subscribe(listeners) {
+        const registered = listeners;
+        mine.add(registered);
+        if (entry) {
+          entry.listeners.add(registered);
+          if (entry.hasValue)
+            registered.value(entry.value);
+          registered.state?.(entry.state);
+        }
+        ready.then((target) => {
+          if (!mine.has(registered))
+            return;
+          if (!target.listeners.has(registered)) {
+            target.listeners.add(registered);
+            if (target.hasValue)
+              registered.value(target.value);
+            registered.state?.(target.state);
+          }
+          open(target);
+        });
+        return () => {
+          mine.delete(registered);
+          const target = entry;
+          if (!target)
+            return;
+          target.listeners.delete(registered);
+          releaseEntry(target);
+        };
+      },
+      close() {
+        const target = entry;
+        if (!target)
+          return;
+        for (const listener of mine)
+          target.listeners.delete(listener);
+        mine.clear();
+        releaseEntry(target);
+      }
+    };
+  }
+  const client = {};
+  for (const action of Object.keys(contract.endpoints)) {
+    client[action] = (args = {}) => handleFor(action, args);
+  }
+  return client;
+}
+export {
+  watchKeyString,
+  watchContract,
+  toRealtimeContract,
+  defineEvents,
+  createWatchClient,
+  WatchValueSchema,
+  WatchStateSchema,
+  WatchKeySchema,
+  WATCH_VALUE,
+  WATCH_STATE,
+  WATCH_OPEN,
+  WATCH_CLOSE
+};

package/dist/node.js

@@ -5,7 +5,7 @@ import {
   createHandler,
   createSocketIOServer,
   createUnixClientTransport
-} from "./index-118v0z41.js";
+} from "./index-52400rdd.js";
 import {
   createImplement,
   createImplementRegistry,
@@ -14,8 +14,8 @@ import {
   createScopedImplementRegistry,
   implement,
   implementRegistry
-} from "./index-vbf2p6me.js";
-import"./index-nemjkxjp.js";
+} from "./index-endzd8sj.js";
+import"./index-e0a57ymn.js";
 import"./index-7b188kmz.js";
 import {
   ShutdownOptionsSchema,
@@ -25,7 +25,8 @@ import {
   createServerLifecycle
 } from "./index-3z73fh2c.js";
 import"./index-nt1mp8km.js";
-import"./index-vj3vvpaa.js";
+import"./index-hsz2mmk0.js";
+import"./index-rxfy4cq7.js";
 import {
   AppError,
   appError,

package/dist/observability/index.js

@@ -10,7 +10,7 @@ import {
   redact,
   sanitizePayload,
   truncatePreview
-} from "../index-aczggrty.js";
+} from "../index-28jsdwt1.js";
 import {
   getRequestContext,
   getTraceId,
@@ -21,7 +21,7 @@ import {
   setRequestError,
   setRequestUser,
   wrapInRequestContext
-} from "../index-nemjkxjp.js";
+} from "../index-e0a57ymn.js";
 import {
   childSpan,
   createTraceContext,
@@ -31,7 +31,8 @@ import {
   resolvePropagationContext,
   resolveTraceContext
 } from "../index-nt1mp8km.js";
-import"../index-vj3vvpaa.js";
+import"../index-hsz2mmk0.js";
+import"../index-rxfy4cq7.js";
 import"../index-0w9abg87.js";
 import {
   isRecord

package/dist/primitives.js

@@ -1,6 +1,7 @@
 import {
   ManagedFileRefSchema
-} from "./index-f6n5n7nz.js";
+} from "./index-4kp4fxvp.js";
+import"./index-rxfy4cq7.js";
 import"./index-ksp6e2ye.js";
 
 // src/primitives/audit.ts

package/dist/remote.js

@@ -1,12 +1,13 @@
 import {
   ApiError,
   createClient
-} from "./index-58jzmnn4.js";
+} from "./index-v5dm4bwq.js";
 import"./index-1rxswfbv.js";
 import"./index-nt1mp8km.js";
 import {
   mergeMeta
-} from "./index-vj3vvpaa.js";
+} from "./index-hsz2mmk0.js";
+import"./index-rxfy4cq7.js";
 import {
   AppError
 } from "./index-0w9abg87.js";

package/dist/server/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/server/create.ts"],"names":[],"mappings":"AAuDA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EAId,MAAM,SAAS,CAAC;AAkCjB,wBAAgB,aAAa,CAAC,OAAO,GAAG,OAAO,EAC7C,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,GAC7B,YAAY,CAAC,OAAO,CAAC,CA4iBvB"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/server/create.ts"],"names":[],"mappings":"AAuDA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EAId,MAAM,SAAS,CAAC;AAkCjB,wBAAgB,aAAa,CAAC,OAAO,GAAG,OAAO,EAC7C,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,GAC7B,YAAY,CAAC,OAAO,CAAC,CAujBvB"}

package/dist/server/event-bus.d.ts

@@ -1,4 +1,12 @@
-export type EventHandler<T = unknown> = (data: T) => void | Promise<void>;
+import type { EventDecision, EventTopicDeclaration } from '../live/events.js';
+/**
+ * A listener's return value.
+ *
+ * `emit` ignores it, `emitSerial` awaits it, and `decide` reads it as a vote.
+ * One registry serves all three, so a listener is registered once no matter how
+ * its topic is delivered — a second registration path per mode is a second bus.
+ */
+export type EventHandler<T = unknown> = (data: T) => unknown;
 /** Default event map — untyped string-keyed events (ad-hoc buses). */
 export type DefaultEventMap = Record<string, unknown>;
 /**
@@ -11,9 +19,38 @@ export type DefaultEventMap = Record<string, unknown>;
  * const bus = createEventBus<{ 'user:created': { id: string } }>();
  * bus.emit('user:created', { id: '1' }); // typed
  * ```
+ *
+ * Pass `topics` from `defineEvents` as well and the bus becomes a **closed**
+ * registry that enforces each topic's declared delivery mode: an unknown topic
+ * is refused, and so is delivering a topic by a verb its declaration did not
+ * choose.
  */
 export interface EventBus<M extends Record<string, unknown> = DefaultEventMap> {
+    /**
+     * Announce and continue. Listeners run concurrently, a failing one is
+     * isolated, and nothing is awaited. Declared topics: `emit` mode only.
+     */
     emit<K extends keyof M & string>(event: K, data: M[K]): void;
+    /**
+     * Run listeners one at a time in registration order and wait for all of them.
+     * A listener that throws, rejects or outruns its declared
+     * `listenerTimeoutMs` is reported to `onListenerError` and the next listener
+     * still runs — the caller waits for the sequence, not for every listener to
+     * succeed. Requires a declared `serial` topic.
+     */
+    emitSerial<K extends keyof M & string>(event: K, data: M[K]): Promise<void>;
+    /**
+     * Collect listeners' votes in registration order and stop at the first
+     * `deny`. Requires a declared `decision` topic.
+     *
+     * Every way a listener can fail to produce a vote resolves to `deny`, and the
+     * reason says which: a throw, a rejection, a timeout, or a return value that
+     * is not a decision at all. This is the one asymmetry worth stating out loud
+     * — for `emit` an isolated failure means "the others carry on", and for a vote
+     * the same isolation would mean "counted as consent". A listener that was
+     * asked and did not answer has not agreed.
+     */
+    decide<K extends keyof M & string>(event: K, data: M[K]): Promise<EventDecision>;
     on<K extends keyof M & string>(event: K, handler: EventHandler<M[K]>): () => void;
     once<K extends keyof M & string>(event: K, handler: EventHandler<M[K]>): () => void;
     off<K extends keyof M & string>(event: K, handler: EventHandler<M[K]>): void;
@@ -27,6 +64,17 @@ export interface EventBusOptions {
      * invisible. Wire it to a logger to surface listener bugs.
      */
     onListenerError?: (error: unknown, event: string) => void;
+    /**
+     * The declared topics, from `defineEvents(...).topics`.
+     *
+     * Supplying them closes the registry: an event not declared is refused rather
+     * than delivered to nobody, which is the failure a string-keyed bus cannot
+     * report — a publisher with a typo and a subscriber with the right name look
+     * exactly like a quiet system. It also supplies `listenerTimeoutMs` and
+     * `whenAllDefer`, so those are read from the declaration instead of repeated
+     * at every call site where they could disagree.
+     */
+    topics?: Readonly<Record<string, EventTopicDeclaration>>;
 }
 export declare function createEventBus<M extends Record<string, unknown> = DefaultEventMap>(options?: EventBusOptions): EventBus<M>;
 //# sourceMappingURL=event-bus.d.ts.map

package/dist/server/event-bus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-bus.d.ts","sourceRoot":"","sources":["../../src/server/event-bus.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1E,sEAAsE;AACtE,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe;IAC3E,IAAI,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7D,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC;IAClF,IAAI,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC;IACpF,GAAG,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7E,KAAK,IAAI,IAAI,CAAC;CACf;AAYD,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3D;AAED,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,EAChF,OAAO,GAAE,eAAoB,GAC5B,QAAQ,CAAC,CAAC,CAAC,CA0Db"}
+{"version":3,"file":"event-bus.d.ts","sourceRoot":"","sources":["../../src/server/event-bus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,qBAAqB,EAAkB,MAAM,gBAAgB,CAAC;AAE3F;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC;AAE7D,sEAAsE;AACtE,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEtD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe;IAC3E;;;OAGG;IACH,IAAI,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7D;;;;;;OAMG;IACH,UAAU,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E;;;;;;;;;;OAUG;IACH,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACjF,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC;IAClF,IAAI,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC;IACpF,GAAG,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7E,KAAK,IAAI,IAAI,CAAC;CACf;AAYD,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;CAC1D;AAkCD,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,EAChF,OAAO,GAAE,eAAoB,GAC5B,QAAQ,CAAC,CAAC,CAAC,CAwKb"}

package/dist/server/index.d.ts

@@ -14,6 +14,7 @@ export { type AuthHook, type AuthHookConfig, type AuthRule, type AuthRuleContrib
 export { type CookieDef, type CookieOptions, defineCookie, parseCookies, serializeCookie, } from './middleware/cookies.js';
 export { type CorsConfig, corsHeaders, corsPreflightResponse, DEFAULT_CORS_ALLOW_HEADERS, DEFAULT_CORS_EXPOSE_HEADERS, } from './middleware/cors.js';
 export { deriveCodeChallenge, type PkceMethod, verifyPkce } from './middleware/pkce.js';
+export { createTrustFence, isLoopbackAddress, type TrustFence, type TrustFenceConfig, type TrustLane, type TrustRefusal, type TrustRefusalReason, } from './middleware/trust-fence.js';
 export { type MultipartLifecycle, type MultipartResult, parseMultipart } from './multipart.js';
 export { generateOpenApiDocument, type OpenApiConfig, type OpenApiDocument, type OpenApiInfo, type OpenApiServer, openApiRoute, } from './openapi.js';
 export { bindProcessSignals, type ProcessSignalName, type ProcessSignalsBinding, type ProcessSignalsErrorPhase, type ProcessSignalsOptions, type ShutdownTarget, type SignalSource, } from './process-signals.js';
@@ -26,7 +27,7 @@ export type { SocketIOHandshakeConfig, SocketIOPeerLoaders, SocketIORequestPolic
 export { createSocketIOServer, socketIoLane } from './socket-io.js';
 export { type ParseSSEOptions, parseSSE, streamSSE } from './stream.js';
 export { DEFAULT_STREAM_HEARTBEAT_MS, ndjsonRoute, type StreamingFormat, type StreamingRouteOptions, type StreamingSourceContext, sseRoute, streamingRoute, } from './streaming-route.js';
-export type { AuthorizationContext, EffectiveScope, EndpointHandlerContext, Handlers, LifecycleHooks, LoggingConfig, LogOutcome, MethodDef, MultipartFileMetadata, MultipartReceiver, MultipartReceiverResult, OperationIdentity, RouteGroup, ScopeContexts, ScopedHandlers, ServiceDef, StitchLogger, StreamingMultipartImplementation, } from './types.js';
+export type { AuthorizationContext, EffectiveScope, EndpointHandlerContext, Handlers, LifecycleHooks, LoggingConfig, LogOutcome, MethodDef, MultipartFileMetadata, MultipartReceiver, MultipartReceiverResult, OperationIdentity, RouteGroup, RouteGroupHooks, ScopeContexts, ScopedHandlers, ServiceDef, StitchLogger, StreamingMultipartImplementation, } from './types.js';
 export { createUnixClientTransport, type UnixClientDeliveryState, type UnixClientTransport, type UnixClientTransportConfig, UnixClientTransportError, type UnixClientTransportErrorCode, type UnixResponseBodyMode, } from './unix-client.js';
 export { type ComposedLane, composeWebSocketHandlers, type WebSocketComposeConfig, type WebSocketLane, webSocketLane, } from './websocket.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,SAAS,EACT,cAAc,EACd,cAAc,EACd,KAAK,eAAe,EACpB,SAAS,GACV,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,KAAK,mBAAmB,IAAI,gBAAgB,EAC5C,KAAK,eAAe,IAAI,YAAY,EACpC,KAAK,gBAAgB,IAAI,aAAa,EACtC,KAAK,WAAW,IAAI,QAAQ,EAC5B,KAAK,kBAAkB,IAAI,eAAe,EAC1C,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,WAAW,EACX,QAAQ,GACT,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,EAC7B,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,SAAS,EACT,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,EAC3B,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,OAAO,EACP,KAAK,gBAAgB,EACrB,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,UAAU,EACV,eAAe,EACf,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,QAAQ,EACR,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gCAAgC,GACjC,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,SAAS,EACT,cAAc,EACd,cAAc,EACd,KAAK,eAAe,EACpB,SAAS,GACV,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,KAAK,mBAAmB,IAAI,gBAAgB,EAC5C,KAAK,eAAe,IAAI,YAAY,EACpC,KAAK,gBAAgB,IAAI,aAAa,EACtC,KAAK,WAAW,IAAI,QAAQ,EAC5B,KAAK,kBAAkB,IAAI,eAAe,EAC1C,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,WAAW,EACX,QAAQ,GACT,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,EAC7B,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,SAAS,EACT,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,EAC3B,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,OAAO,EACP,KAAK,gBAAgB,EACrB,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,UAAU,EACV,eAAe,EACf,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,QAAQ,EACR,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gCAAgC,GACjC,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,aAAa,CAAC"}