@coreframe/config 0.1.11 → 0.1.13

package/dist/index.d.ts

@@ -56,18 +56,35 @@ type DevConfig = {
   /** Platforms started by the development command. */platforms?: DevPlatform[];
 };
 type PreviewTunnelConfig = {
-  /** Whether Coreframe or an external provider manages the tunnel hostname's DNS. */dns: "external" | "managed"; /** Public hostname assigned to the preview tunnel. */
-  hostname: string; /** Cloudflare tunnel name. */
+  /** Whether Coreframe or an external provider manages the preview hostname's DNS. */dns: "external" | "managed"; /** Cloudflare tunnel name. */
   name: string; /** Credential profile used to manage the tunnel. */
   profile: string;
 };
+type PreviewAccessIpContext = {
+  /** Exact HTTPS origin configured for the preview application. */appOrigin: string; /** Public hostname derived from the preview application origin. */
+  hostname: string; /** Identity of the Coreframe-managed preview tunnel. */
+  tunnel: {
+    name: string;
+    profile: string;
+  };
+};
+type PreviewAccessIpResolver = (context: PreviewAccessIpContext) => string | readonly string[] | Promise<string | readonly string[]>;
+type PreviewAccessBypassConfig = {
+  /** Name of the application policy Coreframe creates or updates. */policyName?: string; /** One or more IPv4/IPv6 addresses or CIDR ranges, or a resolver evaluated at preview startup. */
+  ips: string | readonly string[] | PreviewAccessIpResolver;
+};
+type PreviewAccessConfig = {
+  /** Existing self-hosted Cloudflare Access application UUID. */applicationId?: string; /** Access policy used to bypass authentication for the resolved client IP ranges. */
+  bypass: PreviewAccessBypassConfig;
+};
 type PreviewConfig = {
   /** Exact HTTPS origin used by browser-facing application URLs. */appOrigin?: string; /** Network interface on which the local preview server listens. */
   host?: string; /** TCP port on which the local preview server listens. */
   port?: number; /** Whether startup fails when the configured port is unavailable. */
   strictPort?: boolean;
   /**
-   * Public tunnel settings for the local preview server.
+   * Public tunnel settings for the local preview server. The tunnel hostname is derived from
+   * `appOrigin`.
    *
    * @example
    *   defineConfig({
@@ -75,14 +92,14 @@ type PreviewConfig = {
    *       appOrigin: "https://preview.example.com",
    *       tunnel: {
    *         dns: "managed",
-   *         hostname: "preview.example.com",
    *         name: "coreframe-preview",
    *         profile: "company",
    *       },
    *     },
    *   })
    */
-  tunnel?: PreviewTunnelConfig; /** Worker bindings supplied during preview. */
+  tunnel?: PreviewTunnelConfig; /** Optional Cloudflare Access policy for a public preview tunnel. */
+  access?: PreviewAccessConfig; /** Worker bindings supplied during preview. */
   worker?: PreviewWorkerConfig;
 };
 type PreviewWorkerConfig = {
@@ -188,4 +205,4 @@ declare function readProjectConfig({
 declare function importProjectModule<T>(path: string, cwd?: string): Promise<T>;
 declare function importProjectDependency<T>(specifier: string, cwd?: string): Promise<T>;
 //#endregion
-export { AssetsConfig, BreakpointsConfig, CoreframeConfig, DatabaseConfig, DatabaseDialect, DeployConfig, DeployContext, DeployEnvironment, DeployEnvironmentConfig, DeployMode, DeploySmokeCheck, DevConfig, DevPlatform, FlutterConfig, FlutterDeepLinkConfig, I18nConfig, JsonObject, JsonValue, PreviewConfig, PreviewTunnelConfig, PreviewWorkerConfig, PrimaryWorkerContributions, PrimaryWorkerEnvironment, StagingHostnameConfig, WorkerConfig, WorkerDeployEnvironment, WorkerEnvironmentDeclaration, WorkerEnvironmentKind, WorkerEnvironmentVariableConfig, WranglerConfig, breakpointNames, coreframeGeneratedWorkerVariables, coreframeLocalWorkerVariables, coreframeManagedWorkerSecrets, defineConfig, derivePrimaryWorkerConfig, importProjectDependency, importProjectModule, normalizeWorkerEnvironment, primaryWorkerConfigPath, primaryWorkerEnvironments, readProjectBreakpoints, readProjectConfig, validateBreakpoints, validateWorkerInventoryOwnership, workerBindingNames, wranglerEnvironmentNames };
+export { AssetsConfig, BreakpointsConfig, CoreframeConfig, DatabaseConfig, DatabaseDialect, DeployConfig, DeployContext, DeployEnvironment, DeployEnvironmentConfig, DeployMode, DeploySmokeCheck, DevConfig, DevPlatform, FlutterConfig, FlutterDeepLinkConfig, I18nConfig, JsonObject, JsonValue, PreviewAccessBypassConfig, PreviewAccessConfig, PreviewAccessIpContext, PreviewAccessIpResolver, PreviewConfig, PreviewTunnelConfig, PreviewWorkerConfig, PrimaryWorkerContributions, PrimaryWorkerEnvironment, StagingHostnameConfig, WorkerConfig, WorkerDeployEnvironment, WorkerEnvironmentDeclaration, WorkerEnvironmentKind, WorkerEnvironmentVariableConfig, WranglerConfig, breakpointNames, coreframeGeneratedWorkerVariables, coreframeLocalWorkerVariables, coreframeManagedWorkerSecrets, defineConfig, derivePrimaryWorkerConfig, importProjectDependency, importProjectModule, normalizeWorkerEnvironment, primaryWorkerConfigPath, primaryWorkerEnvironments, readProjectBreakpoints, readProjectConfig, validateBreakpoints, validateWorkerInventoryOwnership, workerBindingNames, wranglerEnvironmentNames };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coreframe/config",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "Environment and project configuration utilities for Coreframe apps",
   "repository": {
     "type": "git",