@cedvict/http-guardian 0.0.1-next.8 → 0.0.1-next.9

package/dist/index.d.ts

@@ -5,6 +5,10 @@ export * from "./auth/authConfig.js";
 export * from "./guards/types.js";
 export * from "./guards/retryGuard.js";
 export * from "./guards/cookieSafeRefreshGuard.js";
+export * from "./guards/bearerRefreshGuard.js";
+export * from "./guards/csrfGuard.js";
+export * from "./guards/correlationIdGuard.js";
+export * from "./guards/idempotencyGuard.js";
 export * from "./guards/unauthorizedGuard.js";
 export * from "./guards/instrumentGuard.js";
 export * from "./cache/types.js";
@@ -12,11 +16,12 @@ export * from "./cache/memoryCache.js";
 export * from "./parsing/shapeParser.js";
 export * from "./parsing/schemaAdapter.js";
 export * from "./parsing/presets.js";
+export * from "./parsing/apiParserStructured.js";
 export * from "./notify/types.js";
 export * from "./notify/defaults.js";
 export * from "./presets/presetBuilder.js";
 export * from "./plugins/types.js";
 export * from "./aliases.js";
-export type { RequestContext } from "./internal/context.js";
+export type { RequestContext, RequestContextMeta } from "./internal/context.js";
 export type * from "./publicTypes.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,sBAAsB,CAAC;AAErC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAE5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AAEvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AAErC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AAErC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AAGnC,cAAc,cAAc,CAAC;AAG7B,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,mBAAmB,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,sBAAsB,CAAC;AAErC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oCAAoC,CAAC;AACnD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAE5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AAEvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AAEjD,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AAErC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AAGnC,cAAc,cAAc,CAAC;AAG7B,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChF,mBAAmB,kBAAkB,CAAC"}

package/dist/index.js

@@ -855,6 +855,250 @@ function cookieSafeRefreshGuard(opts) {
   }
 }
 
+// src/guards/bearerRefreshGuard.ts
+var REFRESH_FLAG2 = "__hg_bearer_refresh_in_flight__";
+var RETRY_FLAG2 = "__hg_bearer_refresh_retry__";
+function isReplayableBody2(body) {
+  if (body == null) return true;
+  if (typeof body === "string") return true;
+  if (typeof Blob !== "undefined" && body instanceof Blob) return true;
+  if (typeof FormData !== "undefined" && body instanceof FormData) return true;
+  if (typeof URLSearchParams !== "undefined" && body instanceof URLSearchParams) return true;
+  if (typeof ArrayBuffer !== "undefined" && body instanceof ArrayBuffer) return true;
+  if (typeof Uint8Array !== "undefined" && body instanceof Uint8Array) return true;
+  return false;
+}
+function bearerRefreshGuard(opts) {
+  const trigger = new Set(opts.triggerStatuses ?? [401]);
+  const queueTimeoutMs = opts.queueTimeoutMs ?? 3e4;
+  let refreshPromise = null;
+  return async (ctx, next) => {
+    const anyCtx = ctx;
+    if (ctx.noAuth) return next(ctx);
+    if (ctx.auth.mode !== "bearer") return next(ctx);
+    if (opts.skipRefreshFor?.(ctx)) return next(ctx);
+    if (anyCtx[RETRY_FLAG2]) return next(ctx);
+    if (anyCtx[REFRESH_FLAG2]) return next(ctx);
+    const res = await next(ctx);
+    if (!trigger.has(res.status)) return res;
+    if (!isReplayableBody2(ctx.body)) return res;
+    try {
+      await withTimeout(
+        refreshPromise ??= runRefresh(opts).finally(() => {
+          refreshPromise = null;
+        }),
+        queueTimeoutMs
+      );
+    } catch {
+      return res;
+    }
+    const retryCtx = cloneCtxForReplay(ctx);
+    retryCtx[RETRY_FLAG2] = true;
+    await applyBearerAuth(retryCtx, ctx.auth);
+    return next(retryCtx);
+  };
+  async function runRefresh(o) {
+    try {
+      const tokens = await o.refreshFn();
+      if (o.onTokenRefreshed) await o.onTokenRefreshed(tokens);
+      return tokens;
+    } catch (e) {
+      if (o.onAuthFailed) {
+        try {
+          await o.onAuthFailed(e);
+        } catch {
+        }
+      }
+      throw e;
+    }
+  }
+}
+function cloneCtxForReplay(ctx) {
+  return Object.assign({}, ctx, { attempt: ctx.attempt + 1 });
+}
+async function applyBearerAuth(ctx, auth) {
+  const headerName = auth.headerName ?? "Authorization";
+  const prefix = auth.prefix ?? "Bearer";
+  const token = await auth.getToken();
+  if (token == null || token === "") {
+    ctx.headers.delete(headerName);
+    return;
+  }
+  ctx.headers.set(headerName, prefix ? `${prefix} ${token}` : String(token));
+}
+function withTimeout(p, ms) {
+  if (!Number.isFinite(ms) || ms <= 0) return p;
+  return new Promise((resolve, reject) => {
+    const t = setTimeout(() => reject(new Error(`bearerRefreshGuard: queue timeout after ${ms}ms`)), ms);
+    p.then(
+      (v) => {
+        clearTimeout(t);
+        resolve(v);
+      },
+      (e) => {
+        clearTimeout(t);
+        reject(e);
+      }
+    );
+  });
+}
+
+// src/guards/csrfGuard.ts
+var DEFAULT_METHODS = ["POST", "PUT", "PATCH", "DELETE"];
+function readCookie(name) {
+  if (typeof document === "undefined") return null;
+  const cookieStr = document.cookie;
+  if (typeof cookieStr !== "string" || cookieStr.length === 0) return null;
+  const target = encodeURIComponent(name);
+  const parts = cookieStr.split(";");
+  for (const part of parts) {
+    const eq = part.indexOf("=");
+    if (eq === -1) continue;
+    const k = part.slice(0, eq).trim();
+    if (k === name || k === target) {
+      return decodeURIComponent(part.slice(eq + 1).trim());
+    }
+  }
+  return null;
+}
+function csrfGuard(opts = {}) {
+  const headerName = opts.headerName ?? "X-CSRF-Token";
+  const methods = new Set((opts.applyTo ?? DEFAULT_METHODS).map((m) => m.toUpperCase()));
+  let cachedHeaderToken = null;
+  return async (ctx, next) => {
+    if (!methods.has(ctx.method)) return next(ctx);
+    if (ctx.headers.has(headerName)) {
+      const res2 = await next(ctx);
+      maybeReadResponseHeader(res2);
+      return res2;
+    }
+    const token = await resolveToken();
+    if (token != null && token !== "") {
+      ctx.headers.set(headerName, token);
+    }
+    const res = await next(ctx);
+    maybeReadResponseHeader(res);
+    return res;
+  };
+  async function resolveToken(_ctx) {
+    if (opts.tokenFromCookie) {
+      const t = readCookie(opts.tokenFromCookie);
+      if (t != null && t !== "") return t;
+    }
+    if (opts.tokenFromHeader && cachedHeaderToken != null) {
+      return cachedHeaderToken;
+    }
+    if (opts.tokenFromStorage) {
+      try {
+        const t = await opts.tokenFromStorage();
+        if (t != null && t !== "") return t;
+      } catch {
+        return null;
+      }
+    }
+    return null;
+  }
+  function maybeReadResponseHeader(res) {
+    if (!opts.tokenFromHeader) return;
+    try {
+      const v = res.headers?.get?.(opts.tokenFromHeader);
+      if (v != null && v !== "") cachedHeaderToken = v;
+    } catch {
+    }
+  }
+}
+
+// src/guards/correlationIdGuard.ts
+var CORRELATION_FLAG = "__hg_correlation_id__";
+function defaultGenerator() {
+  const c = globalThis.crypto;
+  if (c && typeof c.randomUUID === "function") {
+    try {
+      return c.randomUUID();
+    } catch {
+    }
+  }
+  const ts = Date.now().toString(36);
+  const r1 = Math.floor(Math.random() * 4294967295).toString(36);
+  const r2 = Math.floor(Math.random() * 4294967295).toString(36);
+  return `${ts}-${r1}${r2}`;
+}
+function correlationIdGuard(opts = {}) {
+  const headerName = opts.headerName ?? "X-Correlation-Id";
+  const generator = opts.generator ?? defaultGenerator;
+  const readResponseHeader = opts.readResponseHeader ?? true;
+  return async (ctx, next) => {
+    const anyCtx = ctx;
+    let id = anyCtx[CORRELATION_FLAG] ?? void 0;
+    if (id == null) {
+      const existing = ctx.headers.get(headerName);
+      id = existing != null && existing !== "" ? existing : generator();
+      anyCtx[CORRELATION_FLAG] = id;
+    }
+    if (!ctx.headers.has(headerName)) {
+      ctx.headers.set(headerName, id);
+    }
+    if (!ctx.meta) ctx.meta = {};
+    if (!ctx.meta.correlationId) ctx.meta.correlationId = id;
+    const res = await next(ctx);
+    if (readResponseHeader) {
+      try {
+        const v = res.headers?.get?.(headerName);
+        if (v != null && v !== "") {
+          if (!ctx.meta) ctx.meta = {};
+          ctx.meta.correlationId = v;
+        }
+      } catch {
+      }
+    }
+    return res;
+  };
+}
+
+// src/guards/idempotencyGuard.ts
+var DEFAULT_METHODS2 = ["POST", "PUT", "PATCH"];
+var IDEMPOTENCY_FLAG = "__hg_idempotency_key__";
+function defaultGenerator2() {
+  const c = globalThis.crypto;
+  if (c && typeof c.randomUUID === "function") {
+    try {
+      return c.randomUUID();
+    } catch {
+    }
+  }
+  const ts = Date.now().toString(36);
+  const r1 = Math.floor(Math.random() * 4294967295).toString(36);
+  const r2 = Math.floor(Math.random() * 4294967295).toString(36);
+  return `${ts}-${r1}${r2}`;
+}
+function idempotencyGuard(opts = {}) {
+  const headerName = opts.headerName ?? "X-Idempotency-Key";
+  const methods = new Set((opts.applyTo ?? DEFAULT_METHODS2).map((m) => m.toUpperCase()));
+  const generator = opts.generator ?? defaultGenerator2;
+  const respectExisting = opts.respectExisting ?? true;
+  return async (ctx, next) => {
+    if (!methods.has(ctx.method)) return next(ctx);
+    const anyCtx = ctx;
+    let key = anyCtx[IDEMPOTENCY_FLAG] ?? void 0;
+    if (key == null && respectExisting) {
+      const fromHeader = ctx.headers.get(headerName);
+      if (fromHeader != null && fromHeader !== "") {
+        key = fromHeader;
+      } else if (ctx.idempotencyKey != null && ctx.idempotencyKey !== "") {
+        key = ctx.idempotencyKey;
+      } else if (ctx.meta?.idempotencyKey != null && ctx.meta.idempotencyKey !== "") {
+        key = ctx.meta.idempotencyKey;
+      }
+    }
+    if (key == null) key = generator();
+    anyCtx[IDEMPOTENCY_FLAG] = key;
+    if (!ctx.headers.has(headerName)) ctx.headers.set(headerName, key);
+    if (!ctx.meta) ctx.meta = {};
+    if (!ctx.meta.idempotencyKey) ctx.meta.idempotencyKey = key;
+    return next(ctx);
+  };
+}
+
 // src/guards/unauthorizedGuard.ts
 function normalizePath2(url) {
   try {
@@ -902,8 +1146,8 @@ function unauthorizedGuard(opts) {
 }
 
 // src/guards/instrumentGuard.ts
-var REFRESH_FLAG2 = "__hg_is_refresh__";
-var RETRY_FLAG2 = "__hg_refresh_retry__";
+var REFRESH_FLAG3 = "__hg_is_refresh__";
+var RETRY_FLAG3 = "__hg_refresh_retry__";
 function safeUrl(u) {
   try {
     const url = new URL(u);
@@ -947,8 +1191,8 @@ function instrumentGuard(opts, guard) {
     }
     const anyCtx = ctx;
     const attempt = ctx.attempt ?? 0;
-    const isRefresh = Boolean(anyCtx[REFRESH_FLAG2]);
-    const retryCount = Number(anyCtx[RETRY_FLAG2] ?? 0);
+    const isRefresh = Boolean(anyCtx[REFRESH_FLAG3]);
+    const retryCount = Number(anyCtx[RETRY_FLAG3] ?? 0);
     const noAuth2 = Boolean(ctx.noAuth);
     const baseLine = `[HG][#${id}][${opts.name}]`;
     log(`${baseLine} \u25B6 start`, {
@@ -1184,6 +1428,78 @@ function createApiParserGraphQL(opts) {
   });
 }
 
+// src/parsing/apiParserStructured.ts
+function isRecord(v) {
+  return !!v && typeof v === "object" && !Array.isArray(v);
+}
+function pickString(o, key) {
+  const v = o[key];
+  return typeof v === "string" ? v : void 0;
+}
+function createApiParserStructured(opts = {}) {
+  const exposeMeta = opts.exposeMeta ?? true;
+  const honorRetryableHint = opts.honorRetryableHint ?? true;
+  return createShapeParser({
+    isSuccess: (raw, status) => {
+      if (isRecord(raw) && "success" in raw) return raw["success"] === true;
+      return status >= 200 && status < 400;
+    },
+    getData: (raw) => {
+      if (isRecord(raw) && raw["success"] === true && "data" in raw) {
+        return raw["data"];
+      }
+      return raw;
+    },
+    getErrors: (raw, status) => {
+      if (!isRecord(raw)) {
+        return [{ message: status ? `HTTP ${status}` : "Request failed" }];
+      }
+      const env = raw;
+      const meta = isRecord(env["meta"]) ? env["meta"] : void 0;
+      const traceId = meta?.traceId;
+      const spanId = meta?.spanId;
+      const issues = Array.isArray(env["issues"]) ? env["issues"] : [];
+      const topMessage = pickString(env, "message");
+      const topCode = pickString(env, "code");
+      const topI18n = isRecord(env["i18n"]) ? env["i18n"] : void 0;
+      const baseDetails = (extra = {}) => ({
+        ...traceId !== void 0 ? { traceId } : {},
+        ...spanId !== void 0 ? { spanId } : {},
+        ...exposeMeta ? { envelope: env } : {},
+        ...extra
+      });
+      if (issues.length > 0) {
+        return issues.map((iss) => {
+          const message = iss.message ?? topMessage ?? (status ? `HTTP ${status}` : "Request failed");
+          const code = iss.code ?? topCode;
+          const issueDetails = baseDetails({
+            ...iss.category !== void 0 ? { category: iss.category } : {},
+            ...iss.severity !== void 0 ? { severity: iss.severity } : {},
+            ...honorRetryableHint && iss.retryable !== void 0 ? { retryable: iss.retryable } : {},
+            ...iss.i18n !== void 0 ? { i18n: iss.i18n } : topI18n !== void 0 ? { i18n: topI18n } : {}
+          });
+          return {
+            message,
+            ...code !== void 0 ? { code } : {},
+            ...iss.field !== void 0 ? { field: iss.field } : {},
+            details: issueDetails
+          };
+        });
+      }
+      const details = baseDetails({
+        ...topI18n !== void 0 ? { i18n: topI18n } : {}
+      });
+      return [
+        {
+          message: topMessage ?? (status ? `HTTP ${status}` : "Request failed"),
+          ...topCode !== void 0 ? { code: topCode } : {},
+          details
+        }
+      ];
+    }
+  });
+}
+
 // src/presets/presetBuilder.ts
 function createPresetBuilder(init) {
   const state = {
@@ -1374,6 +1690,6 @@ function createClient(opts) {
   return createHttpClient(cfg);
 }
 
-export { ILLEGAL_INVOCATION_HINT, NetworkError, ParseError, RedirectError, TimeoutError, alertNotifier, apiKeyAuth, basicAuth, bearerAuth, consoleNotifier, cookieAuth, cookieSafeRefreshGuard, createApiKeyClient, createApiParserGraphQL, createApiParserLaravel, createApiParserNest, createApiParserRestClassic, createBasicClient, createBearerClient, createClient, createCookieClient, createHttpClient, createPresetBuilder, createShapeParser, createSimpleClient, fromZod, instrumentGuard, memoryCache, noAuth, retryGuard, schema, tailwindAlertRenderer, unauthorizedGuard };
+export { ILLEGAL_INVOCATION_HINT, NetworkError, ParseError, RedirectError, TimeoutError, alertNotifier, apiKeyAuth, basicAuth, bearerAuth, bearerRefreshGuard, consoleNotifier, cookieAuth, cookieSafeRefreshGuard, correlationIdGuard, createApiKeyClient, createApiParserGraphQL, createApiParserLaravel, createApiParserNest, createApiParserRestClassic, createApiParserStructured, createBasicClient, createBearerClient, createClient, createCookieClient, createHttpClient, createPresetBuilder, createShapeParser, createSimpleClient, csrfGuard, fromZod, idempotencyGuard, instrumentGuard, memoryCache, noAuth, retryGuard, schema, tailwindAlertRenderer, unauthorizedGuard };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map