@c15t/backend 1.2.0-canary.13 → 1.2.0-canary.2

package/dist/middleware/cors/cors.d.ts

@@ -1,37 +0,0 @@
-/**
- * CORS middleware utility for c15t that handles origin validation and CORS headers
- *
- * @packageDocumentation
- */
-/**
- * CORS configuration options type
- */
-export interface CORSConfig {
-    /** Origin validation function */
-    origin: (origin: string) => Promise<string | null>;
-    /** Whether to allow credentials */
-    credentials: boolean;
-    /** Allowed headers */
-    allowHeaders: readonly string[];
-    /** Max age for preflight requests */
-    maxAge: number;
-    /** Allowed HTTP methods */
-    methods: readonly string[];
-}
-/**
- * Creates CORS options configuration for the c15t middleware
- *
- * @param trustedOrigins - Array of allowed origin patterns or single string. Can include wildcards ('*').
- * If undefined, defaults to allowing all origins without credentials.
- *
- * @returns CORS configuration object with origin validation function and header settings
- *
- * @example
- * ```ts
- * const corsOptions = createCORSOptions(['http://localhost:3000', 'https://example.com']);
- * ```
- *
- * @throws {TypeError} When URL parsing fails in origin validation
- */
-export declare function createCORSOptions(trustedOrigins?: string[] | string): CORSConfig;
-//# sourceMappingURL=cors.d.ts.map

package/dist/middleware/cors/cors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/cors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6BH;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,iCAAiC;IACjC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnD,mCAAmC;IACnC,WAAW,EAAE,OAAO,CAAC;IACrB,sBAAsB;IACtB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAgBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAChC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,GAChC,UAAU,CA+GZ"}

package/dist/middleware/cors/cors.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=cors.test.d.ts.map

package/dist/middleware/cors/cors.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.test.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/cors.test.ts"],"names":[],"mappings":""}

package/dist/middleware/cors/index.d.ts

@@ -1,30 +0,0 @@
-/**
- * CORS middleware for c15t
- *
- * This module provides comprehensive CORS (Cross-Origin Resource Sharing) functionality including:
- * - Origin validation with support for wildcards and subdomains
- * - Flexible CORS options configuration
- * - Context processing and enrichment
- * - Protocol-agnostic matching
- * - Support for www and non-www variants
- *
- * @example
- * ```ts
- * import { createCORSOptions, isOriginTrusted, processCors } from '@c15t/backend/middleware/cors';
- *
- * // Create CORS options with trusted origins
- * const corsOptions = createCORSOptions(['https://example.com', '*.trusted-domain.com']);
- *
- * // Process CORS for a request
- * const enrichedContext = processCors(request, context, trustedOrigins);
- *
- * // Validate an origin directly
- * const isTrusted = isOriginTrusted('https://api.trusted-domain.com', trustedOrigins);
- * ```
- *
- * @packageDocumentation
- */
-export { createCORSOptions } from './cors';
-export { isOriginTrusted } from './is-origin-trusted';
-export { processCors } from './process-cors';
-//# sourceMappingURL=index.d.ts.map

package/dist/middleware/cors/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/middleware/cors/is-origin-trusted.d.ts

@@ -1,49 +0,0 @@
-/**
- * Origin validation utilities for CORS security
- *
- * @packageDocumentation
- */
-import type { Logger } from '@doubletie/logger';
-/**
- * Regular expression to strip protocol, trailing slashes, and port numbers from URLs
- * Matches:
- * - http:// or https:// protocol
- * - ws:// or wss:// protocol
- * - trailing slashes
- * - port numbers with colon
- *
- * @internal
- */
-export declare const STRIP_REGEX: RegExp;
-/**
- * Validates if a given origin matches any of the trusted domain patterns
- *
- * Supports:
- * - Exact domain matches
- * - Wildcard subdomains (e.g. *.example.com)
- * - Protocol-agnostic matching
- * - Case-insensitive comparison
- *
- * @param origin - The origin URL to validate (e.g. https://example.com)
- * @param trustedDomains - Array of trusted domain patterns. Can include wildcards (e.g. *.example.com)
- * @param logger - Optional logger for debugging validation process
- *
- * @returns `true` if the origin matches any trusted domain pattern, `false` otherwise
- *
- * @throws {Error} When trustedDomains array is empty
- * @throws {TypeError} When origin URL is invalid
- *
- * @example
- * ```ts
- * // Simple domain matching
- * isOriginTrusted('https://example.com', ['example.com']); // true
- *
- * // Wildcard subdomain matching
- * isOriginTrusted('https://api.example.com', ['*.example.com']); // true
- *
- * // Allow all origins
- * isOriginTrusted('https://any-domain.com', ['*']); // true
- * ```
- */
-export declare function isOriginTrusted(origin: string, trustedDomains: string[], logger?: Logger): boolean;
-//# sourceMappingURL=is-origin-trusted.d.ts.map

package/dist/middleware/cors/is-origin-trusted.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"is-origin-trusted.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/is-origin-trusted.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,QAA4C,CAAC;AA4BrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EAAE,EACxB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CA6CT"}

package/dist/middleware/cors/is-origin-trusted.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=is-origin-trusted.test.d.ts.map

package/dist/middleware/cors/is-origin-trusted.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"is-origin-trusted.test.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/is-origin-trusted.test.ts"],"names":[],"mappings":""}

package/dist/middleware/cors/process-cors.d.ts

@@ -1,31 +0,0 @@
-/**
- * CORS processing middleware for c15t
- * Handles origin validation and context enrichment
- *
- * @packageDocumentation
- */
-import type { C15TContext } from '../../types/context';
-/**
- * Processes CORS validation for an incoming request and enriches the context
- * with origin information. This middleware function validates the origin against
- * trusted patterns and updates the context with the validation results.
- *
- * @param request - The incoming HTTP request to process
- * @param context - The c15t middleware context to enrich
- * @param trustedOrigins - Array of trusted origin patterns. Can include wildcards ('*')
- *
- * @returns The enriched context with origin validation results
- *
- * @example
- * ```ts
- * const enrichedContext = processCors(
- *   request,
- *   context,
- *   ['https://example.com', '*.trusted-domain.com']
- * );
- * ```
- *
- * @see {@link isOriginTrusted} for origin validation details
- */
-export declare const processCors: (request: Request, context: C15TContext, trustedOrigins?: string[]) => C15TContext;
-//# sourceMappingURL=process-cors.d.ts.map

package/dist/middleware/cors/process-cors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-cors.d.ts","sourceRoot":"","sources":["../../../src/middleware/cors/process-cors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA4CnD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,WAAW,GACvB,SAAS,OAAO,EAChB,SAAS,WAAW,EACpB,iBAAiB,MAAM,EAAE,KACvB,WAaF,CAAC"}

package/dist/middleware/openapi/config.d.ts

@@ -1,28 +0,0 @@
-import type { C15TOptions } from '../../types';
-/**
- * Default OpenAPI configuration
- */
-export declare const createOpenAPIConfig: (options: C15TOptions) => {
-    enabled: boolean;
-    specPath: string;
-    docsPath: string;
-    options?: Partial<import("@orpc/openapi").OpenAPIGeneratorOptions>;
-    customUiTemplate?: string;
-};
-/**
- * Default OpenAPI options
- */
-export declare const createDefaultOpenAPIOptions: (options: C15TOptions) => {
-    info: {
-        title: string;
-        version: string;
-        description: string;
-    };
-    servers: {
-        url: {};
-    }[];
-    security: {
-        bearerAuth: never[];
-    }[];
-};
-//# sourceMappingURL=config.d.ts.map

package/dist/middleware/openapi/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/middleware/openapi/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAG3C;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAS,WAAW;;;;;;CAQvD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,2BAA2B,GAAI,SAAS,WAAW;;;;;;;;;;;;CAQ9D,CAAC"}

package/dist/middleware/openapi/handlers.d.ts

@@ -1,29 +0,0 @@
-import type { C15TContext, C15TOptions } from '../../types';
-/**
- * Type for the memoized OpenAPI spec function
- */
-type MemoizedSpecFunction = {
-    (): Promise<Record<string, unknown>>;
-    cached?: Record<string, unknown>;
-};
-/**
- * Generate the OpenAPI specification document
- *
- * @param options - Configuration options for the OpenAPI spec generation
- * @returns A memoized function that generates and caches the OpenAPI spec
- *
- * @throws {Error} When the OpenAPI generator fails to create a valid spec
- *
- * @example
- * ```ts
- * const getSpec = createOpenAPISpec(options);
- * const spec = await getSpec();
- * ```
- */
-export declare const createOpenAPISpec: (context: C15TContext, options: C15TOptions) => MemoizedSpecFunction;
-/**
- * Generate the default UI for API documentation
- */
-export declare const createDocsUI: (options: C15TOptions) => string;
-export {};
-//# sourceMappingURL=handlers.d.ts.map

package/dist/middleware/openapi/handlers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../../src/middleware/openapi/handlers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGxD;;GAEG;AACH,KAAK,oBAAoB,GAAG;IAC3B,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AA6BF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,GAC7B,SAAS,WAAW,EACpB,SAAS,WAAW,yBA0CpB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,GAAI,SAAS,WAAW,WA2BhD,CAAC"}

package/dist/middleware/openapi/index.d.ts

@@ -1,11 +0,0 @@
-/**
- * OpenAPI middleware for c15t
- *
- * This module provides OpenAPI functionality including:
- * - Configuration management
- * - Specification generation
- * - Documentation UI
- */
-export { createOpenAPIConfig, createDefaultOpenAPIOptions } from './config';
-export { createOpenAPISpec, createDocsUI } from './handlers';
-//# sourceMappingURL=index.d.ts.map

package/dist/middleware/openapi/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/openapi/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/src/__tests__/server.test.ts

@@ -1,96 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { type C15TOptions, c15tInstance } from '../core';
-
-const mockOptions: C15TOptions = {
-	appName: 'Consent.io Dashboard',
-	basePath: '/api/c15t',
-	trustedOrigins: [
-		'localhost',
-		'vercel.app',
-		'consent.io',
-		'https://test.consent.io',
-	],
-	cors: true,
-	advanced: {
-		cors: {
-			allowHeaders: ['content-type', 'x-request-id'],
-		},
-	},
-	logger: {
-		level: 'debug',
-	},
-};
-
-const createTestRequest = (
-	path = '/api/c15t/status',
-	method = 'GET',
-	headers?: Record<string, string>
-) => {
-	return new Request(`http://localhost${path}`, {
-		method,
-		headers: {
-			'content-type': 'application/json',
-			...(headers || {}),
-		},
-	});
-};
-
-describe('C15T /status endpoint', () => {
-	it('GET /api/c15t/status returns 200 and status payload', async () => {
-		const c15t = c15tInstance(mockOptions);
-		const request = createTestRequest();
-		const response = await c15t.handler(request);
-		expect(response.status).toBe(200);
-		const data = await response.json();
-		expect(data).toHaveProperty('status');
-	});
-
-	it('responds correctly to requests from allowed origins', async () => {
-		const c15t = c15tInstance(mockOptions);
-		const request = createTestRequest(undefined, undefined, {
-			origin: 'https://test.consent.io',
-		});
-		const response = await c15t.handler(request);
-		expect(response.status).toBe(200);
-		expect(response.headers.get('access-control-allow-origin')).toBe(
-			'https://test.consent.io'
-		);
-	});
-
-	it('rejects requests from disallowed origins', async () => {
-		const c15t = c15tInstance(mockOptions);
-		const request = createTestRequest(undefined, undefined, {
-			origin: 'https://malicious-site.com',
-		});
-		const response = await c15t.handler(request);
-		expect(response.headers.get('access-control-allow-origin')).toBeNull();
-	});
-
-	it('handles preflight requests correctly', async () => {
-		const c15t = c15tInstance(mockOptions);
-		const request = createTestRequest(undefined, 'OPTIONS', {
-			origin: 'https://test.consent.io',
-			'access-control-request-method': 'GET',
-		});
-		const response = await c15t.handler(request);
-		expect(response.status).toBe(204);
-		expect(response.headers.get('access-control-allow-origin')).toBe(
-			'https://test.consent.io'
-		);
-		expect(response.headers.get('access-control-allow-headers')).toContain(
-			'Content-Type, Authorization, x-request-id'
-		);
-	});
-});
-
-describe('C15T /docs endpoint', () => {
-	it('GET /api/c15t/docs returns 200 and HTML', async () => {
-		const c15t = c15tInstance(mockOptions);
-		const request = createTestRequest('/api/c15t/docs');
-		const response = await c15t.handler(request);
-		expect(response.status).toBe(200);
-		const text = await response.text();
-		expect(text).toContain('<!doctype html>');
-		expect(response.headers.get('content-type')).toContain('text/html');
-	});
-});