@blamejs/core 0.5.9 → 0.5.11

package/CHANGELOG.md

@@ -8,6 +8,8 @@ upgrading across more than a few patches at a time.
 
 ## v0.5.x
 
+- **0.5.10** (2026-04-30) — b.middleware.sse: Server-Sent Events
+- **0.5.9** (2026-04-30) — b.csv: RFC 4180 parser + serializer
 - **0.5.8** (2026-04-30) — b.uuid: RFC 4122 v4 + RFC 9562 v7
 - **0.5.7** (2026-04-30) — defensive validation + queue closure capture + audit context
 - **0.5.6** (2026-04-30) — break-glass: trustProxy honored, cache require hoisted

package/index.js

@@ -106,6 +106,7 @@ var forms = require("./lib/forms");
 var app = require("./lib/app");
 var jobs = require("./lib/jobs");
 var breakGlass = require("./lib/break-glass");
+var config = require("./lib/config");
 var csv = require("./lib/csv");
 var uuid = require("./lib/uuid");
 var mail = require("./lib/mail");
@@ -210,6 +211,7 @@ module.exports = {
   createApp:        app.createApp,
   jobs:             jobs,
   breakGlass:       breakGlass,
+  config:           config,
   csv:              csv,
   uuid:             uuid,
   mail:             mail,

package/lib/config.js

@@ -0,0 +1,127 @@
+"use strict";
+/**
+ * config — schema-validated environment configuration.
+ *
+ * Operators read process.env throughout their app code. A typo in the
+ * key name OR a value in the wrong shape (port="abc", flag="yas")
+ * surfaces three days later as a mysterious 500. This primitive validates
+ * env at boot via b.safeSchema so the app refuses to start with broken
+ * config.
+ *
+ *   var config = b.config.create({
+ *     schema: b.safeSchema.object({
+ *       NODE_ENV:        b.safeSchema.enum_(["development", "test", "production"]),
+ *       PORT:            b.config.coerce.number().default(3000),
+ *       LOG_LEVEL:       b.safeSchema.enum_(["debug", "info", "warn", "error"]).default("info"),
+ *       SESSION_SECRET:  b.safeSchema.string().min(32),
+ *       DATABASE_URL:    b.safeSchema.string().url(),
+ *       REDIS_URL:       b.safeSchema.string().url().optional(),
+ *       FEATURE_X:       b.config.coerce.boolean().default(false),
+ *     }),
+ *     // env: process.env (default) — operators in tests pass a fake object
+ *     // redactKeys: ["SESSION_SECRET", "DATABASE_URL"] — never log these
+ *   });
+ *
+ *   config.value          → the validated, typed value object
+ *   config.value.PORT     → 3000 (Number, not "3000")
+ *   config.boot()         → throws ConfigError on validation failure;
+ *                           returns the validated value otherwise
+ *
+ * The factory immediately runs validation — the throw at create() time
+ * is intentional. Operators want config errors at app boot, not at
+ * the first request that touches the broken value.
+ */
+var safeSchema = require("./safe-schema");
+var validateOpts = require("./validate-opts");
+var { defineClass } = require("./framework-error");
+
+var REDACT_MASK = "[REDACTED]";
+
+var ConfigError = defineClass("ConfigError", { alwaysPermanent: true });
+
+// Coercion shapes most operators want for env values: number, integer,
+// boolean — env is always a string at the source so coerce. Operators
+// who want stricter parsing chain .refine() or use raw schemas.
+var coerce = {
+  number: function () {
+    return safeSchema.preprocess(function (v) {
+      if (v === undefined || v === null || v === "") return v;
+      var n = Number(v);
+      return isNaN(n) ? v : n;
+    }, safeSchema.number());
+  },
+  boolean: function () {
+    return safeSchema.preprocess(function (v) {
+      if (typeof v === "boolean") return v;
+      if (v === "1" || v === "true"  || v === "yes") return true;
+      if (v === "0" || v === "false" || v === "no")  return false;
+      return v;  // pass through — schema rejects non-boolean
+    }, safeSchema.boolean());
+  },
+};
+
+function create(opts) {
+  if (!opts || typeof opts !== "object") {
+    throw new ConfigError("config/bad-opts",
+      "create: opts is required (must include opts.schema)");
+  }
+  validateOpts(opts, ["schema", "env", "redactKeys"], "config.create");
+  if (!opts.schema || typeof opts.schema.parse !== "function") {
+    throw new ConfigError("config/bad-schema",
+      "create: opts.schema must be a b.safeSchema instance (built via b.safeSchema.object({...}))");
+  }
+  var env = opts.env || process.env;
+  if (env !== process.env && (typeof env !== "object" || env === null)) {
+    throw new ConfigError("config/bad-env",
+      "create: opts.env must be an object (default process.env)");
+  }
+  var redactKeys = Array.isArray(opts.redactKeys) ? opts.redactKeys.slice() : [];
+  for (var i = 0; i < redactKeys.length; i++) {
+    if (typeof redactKeys[i] !== "string" || redactKeys[i].length === 0) {
+      throw new ConfigError("config/bad-redact-keys",
+        "create: redactKeys[" + i + "] must be a non-empty string");
+    }
+  }
+  // Filter env to a plain object — process.env's prototype chain
+  // includes inherited Object.prototype keys we don't want to validate.
+  var input = {};
+  for (var k in env) {
+    if (Object.prototype.hasOwnProperty.call(env, k)) input[k] = env[k];
+  }
+
+  var result = opts.schema.safeParse(input);
+  if (!result.ok) {
+    var msg = "config validation failed:\n";
+    for (var ei = 0; ei < result.errors.length; ei++) {
+      var err = result.errors[ei];
+      msg += "  - " + err.path.join(".") + ": " + err.message + "\n";
+    }
+    throw new ConfigError("config/validation-failed", msg);
+  }
+
+  var value = result.value;
+
+  function redactedView() {
+    // For logging the validated config without leaking secrets — useful
+    // at boot ("loaded config: { NODE_ENV: 'production', PORT: 3000, ... }").
+    var out = {};
+    for (var k in value) {
+      if (!Object.prototype.hasOwnProperty.call(value, k)) continue;
+      out[k] = redactKeys.indexOf(k) !== -1 ? REDACT_MASK : value[k];
+    }
+    return out;
+  }
+
+  return {
+    value:    value,
+    get:      function (key) { return value[key]; },
+    has:      function (key) { return Object.prototype.hasOwnProperty.call(value, key); },
+    redacted: redactedView,
+  };
+}
+
+module.exports = {
+  create:      create,
+  ConfigError: ConfigError,
+  coerce:      coerce,
+};

package/lib/middleware/index.js

@@ -30,6 +30,7 @@ module.exports = {
   health:          require("./health").create,
   compression:     require("./compression").create,
   cspNonce:        require("./csp-nonce").create,
+  sse:             require("./sse").create,
   apiEncrypt:      require("./api-encrypt"),
 
   // Module exports for advanced use (constants, raw factory access)
@@ -47,6 +48,7 @@ module.exports = {
     health:          require("./health"),
     compression:     require("./compression"),
     cspNonce:        require("./csp-nonce"),
+    sse:             require("./sse"),
     apiEncrypt:      require("./api-encrypt"),
   },
 };

package/lib/middleware/sse.js

@@ -0,0 +1,165 @@
+"use strict";
+/**
+ * sse — Server-Sent Events middleware. One-way streaming from server
+ * to browser over a single HTTP response with `Content-Type:
+ * text/event-stream`. Browsers reconnect automatically with the
+ * `Last-Event-ID` header so the operator's handler can resume from
+ * the last delivered event.
+ *
+ * Use case: live dashboards, log tailing, progress updates, real-time
+ * counters. SSE is the right tool when the server pushes and the
+ * client doesn't need to send anything back. For bidirectional, use
+ * `b.websocket`.
+ *
+ *   router.get("/events", b.middleware.sse(async function (channel, req) {
+ *     channel.send({ id: 1, event: "tick", data: { count: 1 } });
+ *     channel.send({ id: 2, event: "tick", data: { count: 2 } });
+ *     // resume support — read req.headers["last-event-id"] and
+ *     // resume from that point.
+ *   }));
+ *
+ * `channel`:
+ *   send({ id?, event?, data, retry? })  — emit one SSE message
+ *   ping(comment?)                       — emit a comment line (keeps
+ *                                          intermediate proxies happy)
+ *   close()                              — end the stream
+ *   onAbort(fn)                          — register cleanup when the
+ *                                          client disconnects (browser
+ *                                          tab close, network drop)
+ *
+ * Heartbeat: the middleware sends a comment line every `heartbeatMs`
+ * (default 15s) automatically so corporate proxies / Heroku-style
+ * idle-timeouts don't kill the stream. Operators with strict
+ * deployments override `heartbeatMs: false` to disable.
+ *
+ * Compression: SSE streams typically should NOT be compressed —
+ * `b.middleware.compression` skips `text/event-stream` by default.
+ */
+var C = require("../constants");
+var requestHelpers = require("../request-helpers");
+var validateOpts = require("../validate-opts");
+
+var DEFAULT_HEARTBEAT_MS = C.TIME.seconds(15);
+
+function _formatEvent(msg) {
+  // RFC 6455... wait, that's WebSocket. SSE: WHATWG HTML §9.2.5.
+  // Lines: "id: <n>\n", "event: <name>\n", "data: <line>\n" (multi-line
+  // data is multiple "data: " lines), "retry: <ms>\n", blank line ends.
+  var out = "";
+  if (msg.id !== undefined && msg.id !== null) out += "id: " + String(msg.id).replace(/[\r\n]/g, "") + "\n";
+  if (msg.event)                                out += "event: " + String(msg.event).replace(/[\r\n]/g, "") + "\n";
+  if (msg.retry !== undefined && msg.retry !== null) {
+    if (typeof msg.retry !== "number" || !isFinite(msg.retry) || msg.retry < 0) {
+      throw new Error("sse: retry must be a non-negative finite number of milliseconds");
+    }
+    out += "retry: " + Math.floor(msg.retry) + "\n";
+  }
+  var dataStr;
+  if (msg.data === undefined || msg.data === null) dataStr = "";
+  else if (typeof msg.data === "string")           dataStr = msg.data;
+  else                                              dataStr = JSON.stringify(msg.data);
+  // Multi-line data → one `data:` line per source line (per spec).
+  var lines = dataStr.split(/\r?\n/);
+  for (var i = 0; i < lines.length; i++) out += "data: " + lines[i] + "\n";
+  out += "\n";  // dispatch
+  return out;
+}
+
+function create(handler, opts) {
+  if (typeof handler !== "function") {
+    throw new Error("middleware.sse: handler must be a function (channel, req) => ...");
+  }
+  opts = opts || {};
+  validateOpts(opts, ["heartbeatMs", "headers"], "middleware.sse");
+  var heartbeatMs = opts.heartbeatMs === false ? 0
+    : (opts.heartbeatMs != null ? opts.heartbeatMs : DEFAULT_HEARTBEAT_MS);
+  if (heartbeatMs !== 0 && (typeof heartbeatMs !== "number" || !isFinite(heartbeatMs) || heartbeatMs <= 0)) {
+    throw new Error("middleware.sse: heartbeatMs must be a positive finite number or false");
+  }
+  var extraHeaders = opts.headers || {};
+
+  return async function sseMiddleware(req, res) {
+    if (typeof res.writeHead !== "function" || typeof res.write !== "function") {
+      // Not an http.ServerResponse — operator wired this onto something
+      // unusual. Fail closed rather than silently dropping the handler.
+      throw new Error("middleware.sse: res does not support writeHead/write — wire SSE only on HTTP routes");
+    }
+    var headers = Object.assign({
+      "Content-Type":     "text/event-stream; charset=utf-8",
+      "Cache-Control":    "no-cache, no-transform",
+      "Connection":       "keep-alive",
+      // Disable nginx response buffering when terminating behind it.
+      "X-Accel-Buffering": "no",
+    }, extraHeaders);
+    // Append Vary: Accept so a proxy doesn't serve a cached non-SSE
+    // response on the same URL to a future client.
+    res.writeHead(200, headers);
+    requestHelpers.appendVary(res, "Accept");
+    // Initial flush — some proxies hold the headers until first byte.
+    res.write(":\n\n");
+
+    var closed = false;
+    var heartbeatTimer = null;
+    var abortHandlers = [];
+
+    function _scheduleHeartbeat() {
+      if (heartbeatMs === 0) return;
+      heartbeatTimer = setTimeout(function () {
+        if (closed) return;
+        try { res.write(": heartbeat\n\n"); } catch (_e) { /* socket closed */ }
+        _scheduleHeartbeat();
+      }, heartbeatMs);
+      if (typeof heartbeatTimer.unref === "function") heartbeatTimer.unref();
+    }
+    _scheduleHeartbeat();
+
+    var channel = {
+      send: function (msg) {
+        if (closed) return false;
+        try { res.write(_formatEvent(msg || {})); return true; }
+        catch (_e) { return false; }
+      },
+      ping: function (comment) {
+        if (closed) return false;
+        var safe = comment ? String(comment).replace(/[\r\n]/g, " ") : "ping";
+        try { res.write(": " + safe + "\n\n"); return true; }
+        catch (_e) { return false; }
+      },
+      close: function () {
+        if (closed) return;
+        closed = true;
+        if (heartbeatTimer) { clearTimeout(heartbeatTimer); heartbeatTimer = null; }
+        try { res.end(); } catch (_e) { /* already ended */ }
+      },
+      onAbort: function (fn) {
+        if (typeof fn === "function") abortHandlers.push(fn);
+      },
+      get closed() { return closed; },
+    };
+
+    function _onClose() {
+      if (closed) return;
+      closed = true;
+      if (heartbeatTimer) { clearTimeout(heartbeatTimer); heartbeatTimer = null; }
+      for (var i = 0; i < abortHandlers.length; i++) {
+        try { abortHandlers[i](); } catch (_e) { /* operator handler error — drop */ }
+      }
+    }
+    res.once("close", _onClose);
+    res.once("error", _onClose);
+    if (req && typeof req.once === "function") req.once("aborted", _onClose);
+
+    try {
+      await handler(channel, req);
+    } catch (e) {
+      _onClose();
+      try { res.end(); } catch (_ignored) { /* */ }
+      throw e;
+    }
+  };
+}
+
+module.exports = {
+  create:        create,
+  _formatEvent:  _formatEvent,   // test-only export
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/core",
-  "version": "0.5.9",
+  "version": "0.5.11",
   "description": "The Node framework that owns its stack.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",