@arkyn/server 3.0.10 → 3.0.12

package/AGENTS.md

@@ -152,6 +152,11 @@ All `(value: string) => boolean`, never throw:
 - Signature: `decodeRequestErrorMessage(data: any, response: Response): string`
 - Extracts a human message from an API error payload, checking in order: `data.message`, `data.operator_erro_message`, `data.error`, `data.error.message`, `response.statusText`, falling back to `"Missing error message"`.
 
+#### withSecurityHeaders
+- Import: `import { withSecurityHeaders } from "@arkyn/server/withSecurityHeaders";`
+- Signature: `withSecurityHeaders(response: Response, overrides?: Record<string, string | null>): Response`
+- Sets `X-Content-Type-Options: nosniff`, `X-Frame-Options: DENY`, `Referrer-Policy: strict-origin-when-cross-origin` on `response` (mutated in place, same instance returned). Opt-in — never called automatically by any response class. Not included by default: `Content-Security-Policy`, `Strict-Transport-Security` (too app-specific). `overrides`: a string replaces/adds a header, `null` removes a default.
+
 #### errorHandler
 - Import: `import { errorHandler } from "@arkyn/server/errorHandler";`
 - Signature: `errorHandler(error: any): Response`
@@ -190,8 +195,8 @@ Every method returns whatever the underlying request helper resolves (an object
 
 #### LogService (static)
 - Import: `import { LogService } from "@arkyn/server/logService";`
-- `LogService.setConfig(config: { trafficSourceId: string; userToken: string; logBaseApiUrl?: string }): void` — only applies on the **first** call; later calls are silently ignored until `resetConfig()`.
-- `LogService.getConfig(): { trafficSourceId; userToken; apiUrl } | undefined`
+- `LogService.setConfig(config: { trafficSourceId: string; serviceToken: string; logBaseApiUrl?: string }): void` — only applies on the **first** call; later calls are ignored (logs a dev-mode warning) until `resetConfig()`. `serviceToken` must be a static, application-level credential (e.g. an env var) — never a per-request/session value, since only the first call's value is ever kept. Call once at app boot, not inside a request handler. `userToken` is accepted as a deprecated alias.
+- `LogService.getConfig(): { trafficSourceId; serviceToken; apiUrl } | undefined`
 - `LogService.resetConfig(): void`
 
 ## Related packages

package/README.md

@@ -204,17 +204,21 @@ DebugService.setIgnoreFile("httpAdapter.ts");
 
 #### LogService
 
-Static service for log endpoint configuration. Stores a singleton configuration containing the traffic source identifier, user token, and log ingestion URL; `setConfig` only applies on the first call, `getConfig` reads it back, and `resetConfig` clears it.
+Static service for log endpoint configuration. Stores a singleton configuration containing the traffic source identifier, service token, and log ingestion URL; `setConfig` only applies on the first call, `getConfig` reads it back, and `resetConfig` clears it.
+
+`serviceToken` authenticates *this application* to the Arkyn log ingestion API. It must be a static, application-level credential (e.g. an environment variable) — the same value for every request. Call `setConfig` once at application boot, **not** inside a request handler/loader: because it's a singleton that only applies on its first call, passing a per-request value (like a session token) would leak whichever request got there first to every other request's outbound telemetry for the lifetime of the process.
 
 ```typescript
 LogService.setConfig({
   trafficSourceId: "my-app",
-  userToken: session.token,
+  serviceToken: process.env.ARKYN_LOG_SERVICE_TOKEN,
 });
 
-LogService.getConfig(); // { trafficSourceId, userToken, apiUrl }
+LogService.getConfig(); // { trafficSourceId, serviceToken, apiUrl }
 ```
 
+> `userToken` is still accepted as a deprecated alias for `serviceToken` for backward compatibility, but a warning is logged in development. Migrate to `serviceToken`.
+
 ### Utilities
 
 #### decodeRequestBody
@@ -314,6 +318,24 @@ const validator = new SchemaValidator(z.object({ email: z.string().email() }));
 const body = validator.formValidate(await decodeRequestBody(request));
 ```
 
+#### withSecurityHeaders
+
+Adds a small set of standard security headers to a `Response` (`X-Content-Type-Options: nosniff`, `X-Frame-Options: DENY`, `Referrer-Policy: strict-origin-when-cross-origin`), mutating and returning the same instance. Opt-in only — nothing in `@arkyn/server` calls this automatically. `Content-Security-Policy` and `Strict-Transport-Security` are intentionally not included by default (too app-specific to guess safely); pass them yourself via the second argument, which also lets you replace or remove (`null`) any default.
+
+```typescript
+import { Success, withSecurityHeaders } from "@arkyn/server";
+
+export async function loader() {
+  return withSecurityHeaders(new Success("OK", { data }).toResponse());
+}
+
+// Disable one default, add a CSP
+withSecurityHeaders(response, {
+  "X-Frame-Options": null,
+  "Content-Security-Policy": "default-src 'self'",
+});
+```
+
 ### Validators
 
 #### validateCep

package/dist/http/api/_deleteRequest.d.ts

@@ -4,6 +4,7 @@ type InputProps = {
     urlParams?: Record<string, string>;
     headers?: HeadersInit;
     body?: any;
+    timeoutMs?: number;
 };
 /**
  * Sends a DELETE request to the specified URL with optional headers and body.

package/dist/http/api/_deleteRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_deleteRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_deleteRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;CACX,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,aAAa,CAAC,CAAC,GAAG,GAAG,EACnC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAQ5B;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"_deleteRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_deleteRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,aAAa,CAAC,CAAC,GAAG,GAAG,EACnC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAS5B;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/http/api/_getRequest.d.ts

@@ -3,6 +3,7 @@ type InputProps = {
     url: string;
     urlParams?: Record<string, string>;
     headers?: HeadersInit;
+    timeoutMs?: number;
 };
 /**
  * Sends a GET request to the specified URL with optional headers.

package/dist/http/api/_getRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_getRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_getRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,UAAU,CAAC,CAAC,GAAG,GAAG,EAChC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAO5B;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}
+{"version":3,"file":"_getRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_getRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,UAAU,CAAC,CAAC,GAAG,GAAG,EAChC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAQ5B;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/http/api/_makeRequest.d.ts

@@ -4,6 +4,8 @@ type InputProps = {
     urlParams?: Record<string, string>;
     headers?: HeadersInit;
     body?: any;
+    /** Aborts the request after this many milliseconds. Defaults to 10,000ms. */
+    timeoutMs?: number;
 };
 type ApiSuccessResponse<T = any> = {
     success: true;

package/dist/http/api/_makeRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_makeRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_makeRequest.ts"],"names":[],"mappings":"AAIA,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;CACX,CAAC;AAGF,KAAK,kBAAkB,CAAC,CAAC,GAAG,GAAG,IAAI;IAClC,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,CAAC,CAAC;IACZ,KAAK,EAAE,IAAI,CAAC;CACZ,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACxB,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAEhB,QAAQ,EAAE,GAAG,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC;CAC7B,CAAC;AAGF,KAAK,cAAc,CAAC,CAAC,GAAG,GAAG,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,iBAAe,WAAW,CAAC,CAAC,GAAG,GAAG,EACjC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAqF5B;AAED,OAAO,EAAE,KAAK,cAAc,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"_makeRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_makeRequest.ts"],"names":[],"mappings":"AAMA,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAGF,KAAK,kBAAkB,CAAC,CAAC,GAAG,GAAG,IAAI;IAClC,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,CAAC,CAAC;IACZ,KAAK,EAAE,IAAI,CAAC;CACZ,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACxB,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAEhB,QAAQ,EAAE,GAAG,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC;CAC7B,CAAC;AAGF,KAAK,cAAc,CAAC,CAAC,GAAG,GAAG,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,iBAAe,WAAW,CAAC,CAAC,GAAG,GAAG,EACjC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAqH5B;AAED,OAAO,EAAE,KAAK,cAAc,EAAE,WAAW,EAAE,CAAC"}

package/dist/http/api/_patchRequest.d.ts

@@ -4,6 +4,7 @@ type InputProps = {
     urlParams?: Record<string, string>;
     headers?: HeadersInit;
     body?: any;
+    timeoutMs?: number;
 };
 /**
  * Sends a PATCH request to the specified URL with optional headers and body.

package/dist/http/api/_patchRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_patchRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_patchRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;CACX,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,YAAY,CAAC,CAAC,GAAG,GAAG,EAClC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAQ5B;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"_patchRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_patchRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,YAAY,CAAC,CAAC,GAAG,GAAG,EAClC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAS5B;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/http/api/_postRequest.d.ts

@@ -4,6 +4,7 @@ type InputProps = {
     urlParams?: Record<string, string>;
     headers?: HeadersInit;
     body?: any;
+    timeoutMs?: number;
 };
 /**
  * Sends a POST request to the specified URL with optional headers and body.

package/dist/http/api/_postRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_postRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_postRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;CACX,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,WAAW,CAAC,CAAC,GAAG,GAAG,EACjC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAQ5B;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"_postRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_postRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,WAAW,CAAC,CAAC,GAAG,GAAG,EACjC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAS5B;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/http/api/_putRequest.d.ts

@@ -4,6 +4,7 @@ type InputProps = {
     urlParams?: Record<string, string>;
     headers?: HeadersInit;
     body?: any;
+    timeoutMs?: number;
 };
 /**
  * Sends a PUT request to the specified URL with optional headers and body.

package/dist/http/api/_putRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_putRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_putRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;CACX,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,UAAU,CAAC,CAAC,GAAG,GAAG,EAChC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAQ5B;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}
+{"version":3,"file":"_putRequest.d.ts","sourceRoot":"","sources":["../../../src/http/api/_putRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAe,MAAM,gBAAgB,CAAC;AAElE,KAAK,UAAU,GAAG;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;GAMG;AAGH,iBAAe,UAAU,CAAC,CAAC,GAAG,GAAG,EAChC,KAAK,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAS5B;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/http/badResponses/_badResponse.d.ts

@@ -1,4 +1,4 @@
-declare class BadResponse {
+declare class BadResponse extends Error {
     private _cause?;
     private _name;
     private _status;
@@ -11,6 +11,7 @@ declare class BadResponse {
      * set this to `true`.
      */
     protected exposeCauseInProduction: boolean;
+    constructor(message?: string);
     get cause(): any;
     set cause(value: any);
     get name(): string;

package/dist/http/badResponses/_badResponse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_badResponse.d.ts","sourceRoot":"","sources":["../../../src/http/badResponses/_badResponse.ts"],"names":[],"mappings":"AAKA,cAAM,WAAW;IAEhB,OAAO,CAAC,MAAM,CAAC,CAAM;IACrB,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,WAAW,CAA8C;IACjE;;;;;OAKG;IACH,SAAS,CAAC,uBAAuB,UAAS;IAG1C,IAAI,KAAK,IAAI,GAAG,CAEf;IAGD,IAAI,KAAK,CAAC,KAAK,EAAE,GAAG,EAEnB;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,EAErB;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,EAEvB;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,EAE3B;IAED,IAAI,UAAU,IAAI,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAEpD;IAED,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,EAGxD;IAED,OAAO;IAeP,QAAQ;;;;;CAUR;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"_badResponse.d.ts","sourceRoot":"","sources":["../../../src/http/badResponses/_badResponse.ts"],"names":[],"mappings":"AAKA,cAAM,WAAY,SAAQ,KAAK;IAE9B,OAAO,CAAC,MAAM,CAAC,CAAM;IACrB,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,WAAW,CAA8C;IACjE;;;;;OAKG;IACH,SAAS,CAAC,uBAAuB,UAAS;gBAE9B,OAAO,CAAC,EAAE,MAAM;IAU5B,IAAI,KAAK,IAAI,GAAG,CAEf;IAGD,IAAI,KAAK,CAAC,KAAK,EAAE,GAAG,EAEnB;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,EAErB;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,EAEvB;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,EAE3B;IAED,IAAI,UAAU,IAAI,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAEpD;IAED,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,EAGxD;IAED,OAAO;IAeP,QAAQ;;;;;CAUR;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/http/badResponses/badGateway.d.ts

@@ -12,7 +12,7 @@ import { BadResponse } from "./_badResponse";
 declare class BadGateway extends BadResponse {
     /**
      * @param message - Error description sent in the response body and logged for debugging.
-     * @param cause - Optional extra context (serialized to JSON in the response).
+     * @param cause - Optional extra context.
      */
     constructor(message: string, cause?: any);
     /** Converts to a `Response` with `Content-Type: application/json` header. */

package/dist/http/badResponses/badRequest.d.ts

@@ -10,7 +10,7 @@ import { BadResponse } from "./_badResponse";
 declare class BadRequest extends BadResponse {
     /**
      * @param message - Error description.
-     * @param cause - Optional extra context (serialized to JSON).
+     * @param cause - Optional extra context.
      */
     constructor(message: string, cause?: any);
     /** Converts to a `Response` with `Content-Type: application/json` header. */

package/dist/http/badResponses/conflict.d.ts

@@ -10,7 +10,7 @@ import { BadResponse } from "./_badResponse";
 declare class Conflict extends BadResponse {
     /**
      * @param message - Error description.
-     * @param cause - Optional extra context (serialized to JSON).
+     * @param cause - Optional extra context.
      */
     constructor(message: string, cause?: any);
     /** Converts to a `Response` with `Content-Type: application/json` header. */

package/dist/http/badResponses/forbidden.d.ts

@@ -10,7 +10,7 @@ import { BadResponse } from "./_badResponse";
 declare class Forbidden extends BadResponse {
     /**
      * @param message - Error description.
-     * @param cause - Optional extra context (serialized to JSON).
+     * @param cause - Optional extra context.
      */
     constructor(message: string, cause?: any);
     /** Converts to a `Response` with `Content-Type: application/json` header. */

package/dist/http/badResponses/notFound.d.ts

@@ -10,7 +10,7 @@ import { BadResponse } from "./_badResponse";
 declare class NotFound extends BadResponse {
     /**
      * @param message - Error description.
-     * @param cause - Optional extra context (serialized to JSON).
+     * @param cause - Optional extra context.
      */
     constructor(message: string, cause?: any);
     /** Converts to a `Response` with `Content-Type: application/json` header. */

package/dist/http/badResponses/notImplemented.d.ts

@@ -10,7 +10,7 @@ import { BadResponse } from "./_badResponse";
 declare class NotImplemented extends BadResponse {
     /**
      * @param message - Error description.
-     * @param cause - Optional extra context (serialized to JSON).
+     * @param cause - Optional extra context.
      */
     constructor(message: string, cause?: any);
     /** Converts to a `Response` with `Content-Type: application/json` header. */

package/dist/http/badResponses/serverError.d.ts

@@ -10,7 +10,7 @@ import { BadResponse } from "./_badResponse";
 declare class ServerError extends BadResponse {
     /**
      * @param message - Error description.
-     * @param cause - Optional extra context (serialized to JSON).
+     * @param cause - Optional extra context.
      */
     constructor(message: string, cause?: any);
     /** Converts to a `Response` with `Content-Type: application/json` header. */

package/dist/http/badResponses/unauthorized.d.ts

@@ -10,7 +10,7 @@ import { BadResponse } from "./_badResponse";
 declare class Unauthorized extends BadResponse {
     /**
      * @param message - Error description.
-     * @param cause - Optional extra context (serialized to JSON).
+     * @param cause - Optional extra context.
      */
     constructor(message: string, cause?: any);
     /** Converts to a `Response` with `Content-Type: application/json` header. */

package/dist/index.d.ts

@@ -23,6 +23,7 @@ export { formAsyncParse } from "./utilities/formAsyncParse";
 export { formParse } from "./utilities/formParse";
 export { getScopedParams } from "./utilities/getScopedParams";
 export { SchemaValidator } from "./utilities/schemaValidator";
+export { withSecurityHeaders } from "./utilities/withSecurityHeaders";
 export { validateCep } from "./validations/validateCep";
 export { validateCnpj } from "./validations/validateCnpj";
 export { validateCpf } from "./validations/validateCpf";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAG1D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAG9D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAG1D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAGtE,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC"}