@dunx/http 3.3.1 → 3.4.0

package/dist/{chunk-8939brh2.js → chunk-p9hdmkm6.js}

@@ -89,6 +89,20 @@ var discoverRoutes2 = (instance) => {
   }));
 };
 
+// src/route/prefix.ts
+class RoutePrefix2 {
+  #value = "";
+  get value() {
+    return this.#value;
+  }
+  attach(prefix) {
+    this.#value = prefix;
+  }
+  apply(path) {
+    return this.#value === "" ? path : joinPath2(this.#value, path);
+  }
+}
+
 // src/ws/marker.ts
 var HANDLER = Symbol.for("dunx.ws.handler");
 var GATEWAY = Symbol.for("dunx.ws.gateway");
@@ -171,4 +185,4 @@ var discoverGateways = (modules, resolve) => {
   return discovered;
 };
 
-export { defaultStatusFor2, markRoute, markController, metaKey2, meta2, ROLES2, PUBLIC2, HIDDEN2, UNMATCHED2, Roles2, Public2, ApiHidden2, UseGuards2, metaOf2, mergeMeta2, joinPath2, discoverRoutes2, HandlerKind, markHandler, markGateway, isGateway2, discoverGateway, discoverGateways, buildContext2 };
+export { defaultStatusFor2, markRoute, markController, metaKey2, meta2, ROLES2, PUBLIC2, HIDDEN2, UNMATCHED2, Roles2, Public2, ApiHidden2, UseGuards2, metaOf2, mergeMeta2, joinPath2, discoverRoutes2, RoutePrefix2, HandlerKind, markHandler, markGateway, isGateway2, discoverGateway, discoverGateways, buildContext2 };

package/dist/health/controller.d.ts

@@ -3,8 +3,13 @@
  * finishes every `onInit` before `listen()` binds, so a connection refused *is* "not
  * started yet" and a third endpoint would restate it.
  *
- * `@Public()` because a probe has no credentials. Both routes are documented, under
- * the `Health` tag; `HealthModule.forRoot({ documented: false })` mounts
+ * `@Public()` because a probe has no credentials, and `@SkipThrottle()` for the same
+ * reason: a probe is not a caller with a budget. `app.use(ThrottleGuard)` covers
+ * every route, so without the exemption an orchestrator polling a pod that is
+ * already shedding load reads 429, calls the process unhealthy and restarts it.
+ *
+ * Both routes are documented, under the `Health` tag;
+ * `HealthModule.forRoot({ documented: false })` mounts
  * {@link HiddenHealthController} instead.
  */
 export declare class HealthController {

package/dist/index.js

@@ -18,14 +18,14 @@ import {
   UseGuards2,
   metaOf2,
   mergeMeta2,
-  joinPath2,
   discoverRoutes2,
+  RoutePrefix2,
   HandlerKind,
   markHandler,
   markGateway,
   discoverGateways,
   buildContext2
-} from "./chunk-8939brh2.js";
+} from "./chunk-p9hdmkm6.js";
 import {
   TRACEPARENT_HEADER2,
   TRACESTATE_HEADER2,
@@ -1468,6 +1468,15 @@ var buildRoutes = (discovered, middleware = [], onError = defaultErrorMapper, co
   }
   return routes;
 };
+var withTrailingSlashAliases = (routes) => {
+  const aliased = { ...routes };
+  for (const [path, byMethod] of Object.entries(routes)) {
+    if (path.endsWith("/") || path.includes("*"))
+      continue;
+    aliased[`${path}/`] ??= byMethod;
+  }
+  return aliased;
+};
 
 // src/server/binding.ts
 class ServerBinding {
@@ -1557,6 +1566,7 @@ class HttpApplication extends ShutdownAware {
   #relayChannel;
   #relayResubscribe;
   #notFound;
+  #strict;
   #bootLogging;
   #binding;
   #split;
@@ -1583,6 +1593,7 @@ class HttpApplication extends ShutdownAware {
     this.#relayChannel = options.relayChannel;
     this.#relayResubscribe = options.relayResubscribe;
     this.#notFound = options.notFound ?? "public";
+    this.#strict = options.strict ?? true;
     this.#bootLogging = options.bootLogging ?? true;
     this.#binding = new ServerBinding({
       http2: options.http2,
@@ -1645,8 +1656,11 @@ class HttpApplication extends ShutdownAware {
     this.#assertNotStarted("listen()");
     this.#started = true;
     const middleware = this.#middleware.map((entry) => this.#app.get(entry, this.#root));
-    const prefixed = this.#prefixed();
-    const routes = buildRoutes(prefixed, middleware, this.#onError, this.#cors, (guard, from) => from === undefined ? this.#app.get(guard) : this.#app.get(guard, from));
+    const prefix = this.#app.get(RoutePrefix2);
+    prefix.attach(this.#globalPrefix);
+    const prefixed = this.#prefixed(prefix);
+    const built = buildRoutes(prefixed, middleware, this.#onError, this.#cors, (guard, from) => from === undefined ? this.#app.get(guard) : this.#app.get(guard, from));
+    const routes = this.#strict ? built : withTrailingSlashAliases(built);
     const ws = this.#websocket;
     if (ws && !this.#split)
       assertNoGatewayCollisions(prefixed, ws.paths);
@@ -1726,12 +1740,12 @@ class HttpApplication extends ShutdownAware {
     })();
     return this.#shuttingDown;
   }
-  #prefixed() {
-    if (this.#globalPrefix === "")
+  #prefixed(prefix) {
+    if (prefix.value === "")
       return this.#discovered;
     return this.#discovered.map((route) => ({
       ...route,
-      path: joinPath2(this.#globalPrefix, route.path)
+      path: prefix.apply(route.path)
     }));
   }
   #assertNotStarted(hook) {
@@ -1749,6 +1763,7 @@ class HttpOptionsProvider {
   notFound = "public";
   bootLogging = true;
   trustProxy = false;
+  strict = true;
   shutdownHooks = false;
   relayChannel = "dunx:ws";
   get prefix() {
@@ -1801,6 +1816,7 @@ function resolveHttpOptions(settings, given) {
     notFound: settings.notFound,
     bootLogging: settings.bootLogging,
     trustProxy: settings.trustProxy,
+    strict: settings.strict,
     shutdownHooks: settings.shutdownHooks,
     relayChannel: settings.relayChannel,
     prefix: settings.prefix,
@@ -1850,7 +1866,7 @@ class HttpFactory {
       useFactory: (logger, context, settings) => new SocketLoggingMiddleware(logger, context, pick(options.socketLogging, settings.socketLogging)),
       inject: [Logger4, RequestContext3, HttpOptionsProvider]
     });
-    const services = [PubSub, ClientAddress, RequestMetrics];
+    const services = [PubSub, ClientAddress, RequestMetrics, RoutePrefix2];
     const providers = [...services, logging, metricsMiddleware, socketLogging];
     const scope = {
       module: HttpModule,
@@ -2307,7 +2323,7 @@ class ThrottleOptions {
   subject;
   store;
   constructor(init) {
-    if (init.prefix.trim() === "") {
+    if (typeof init.prefix !== "string" || init.prefix.trim() === "") {
       throw new AppError9("ThrottleModule needs a prefix naming this application, and it has no " + "default: two apps sharing one Redis with one throttle namespace each " + "spend the other's budget. Pass something like { prefix: 'orders-api' }.");
     }
     if (!Number.isInteger(init.limit) || init.limit < 1) {
@@ -2957,10 +2973,12 @@ var _dec = [
 ];
 var _dec2 = [
   Public2(),
+  SkipThrottle(),
   Get("/live", probeResponses)
 ];
 var _dec3 = [
   Public2(),
+  SkipThrottle(),
   Get("/ready", probeResponses)
 ];
 var _health = new WeakMap;

package/dist/internal.d.ts

@@ -12,6 +12,7 @@
  * No stability promise attaches to this subpath.
  */
 export { discoverRoutes, joinPath, type DiscoveredRoute, } from './route/discover.js';
+export { RoutePrefix } from './route/prefix.js';
 export { defaultStatusFor } from './route/marker.js';
 export { gatewaysOf, routesOf, type GatewayHandler, type GatewayNode, type RouteInputs, type RouteNode, } from './inspect.js';
 export { buildContext } from './server/context.js';

package/dist/internal.js

@@ -7,10 +7,11 @@ import {
   HIDDEN2,
   joinPath2,
   discoverRoutes2,
+  RoutePrefix2,
   isGateway2,
   discoverGateway,
   buildContext2
-} from "./chunk-8939brh2.js";
+} from "./chunk-p9hdmkm6.js";
 // src/inspect.ts
 import {
   classOf,
@@ -71,6 +72,7 @@ var gatewaysOf = (root) => collectModules(root).flatMap((module) => (module.opti
 // src/server/html.ts
 var embedJson = (value) => JSON.stringify(value).replaceAll("<", "\\u003c");
 export {
+  RoutePrefix2 as RoutePrefix,
   buildContext2 as buildContext,
   defaultStatusFor2 as defaultStatusFor,
   discoverRoutes2 as discoverRoutes,

package/dist/route/prefix.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The global prefix, as `listen()` resolved it.
+ *
+ * Bound by `HttpFactory`'s global wrapper next to `ClientAddress`, and attached
+ * the same way: a second instance reads an empty prefix, which is a plausible
+ * answer and a wrong one. Routes only, never gateways.
+ * See docs/architecture/http.md, "Who knows the global prefix".
+ */
+export declare class RoutePrefix {
+    #private;
+    /** Empty when the app set none. */
+    get value(): string;
+    attach(prefix: string): void;
+    /** Where a discovered route is served. The one place that answers it. */
+    apply(path: string): string;
+}

package/dist/server/application.d.ts

@@ -1,6 +1,6 @@
 import type { BunRequest } from 'bun';
 import { ShutdownAware, type App, type Ctor, type InjectionToken, type ModuleRef } from '@dunx/core';
-import { type DiscoveredRoute } from '../route/discover.js';
+import type { DiscoveredRoute } from '../route/discover.js';
 import type { WebSocketRuntime } from '../ws/adapter.js';
 import type { CorsOptions } from './cors.js';
 import type { Middleware } from './middleware.js';

package/dist/server/options-provider.d.ts

@@ -54,6 +54,11 @@ export declare abstract class HttpOptionsProvider {
      * nothing lets any caller choose its own address.
      */
     readonly trustProxy: boolean;
+    /**
+     * Match a path exactly as declared, so `/users/1/` is not `/users/1`. On by
+     * default, which is `Bun.serve`'s own behaviour and hono's.
+     */
+    readonly strict: boolean;
     /**
      * Install `SIGTERM`/`SIGINT` handlers that shut the app down. Off by default,
      * because installing a signal handler changes how the process terminates and

package/dist/server/options.d.ts

@@ -33,6 +33,17 @@ export interface HttpOptions extends AppOptions {
     readonly cors?: CorsOptions;
     /** `app.set('trust proxy', ...)` as a field. */
     readonly trustProxy?: boolean;
+    /**
+     * Match a path exactly as declared, so `/users/1/` is not `/users/1`.
+     *
+     * **`true` by default**, which is what `Bun.serve({ routes })` matches on its
+     * own, and hono's name and default for the same switch. `false` serves both
+     * spellings, as Nest, express and elysia do - every route but `/` and a
+     * wildcard mount, which already matches its own trailing slash.
+     *
+     * Not an `app.set()` setting: the route table is built once, at `listen()`.
+     */
+    readonly strict?: boolean;
     /**
      * Calls `enableShutdownHooks` at construction. `true` takes the default signals;
      * an object names them and tunes the force-exit.

package/dist/server/routes.d.ts

@@ -60,3 +60,19 @@ export declare const withUpgradeRoutes: (routes: BunRoutes, gateways: ReadonlyMa
  */
 export declare const buildFallback: (middleware?: readonly Middleware[], onError?: ErrorMapper, cors?: CorsOptions, notFound?: 'guarded' | 'public') => RouteHandler;
 export declare const buildRoutes: (discovered: readonly DiscoveredRoute[], middleware?: readonly Middleware[], onError?: ErrorMapper, cors?: CorsOptions, resolve?: GuardResolver) => BunRoutes;
+/**
+ * A second key per route ending in `/`, holding the handlers the first one has.
+ *
+ * `Bun.serve({ routes })` matches the literal path, so `/users/1/` misses when
+ * `/users/:id` is what was registered. Opt in with `strict: false`. The
+ * measurements, and what the other frameworks do, are in
+ * docs/architecture/http.md.
+ *
+ * A key rather than a copy: one per-method object under two names, so the
+ * pattern `buildContext` froze still labels the metrics series and the log line.
+ * It runs after the CORS preflight is mounted, so the alias carries `OPTIONS`.
+ *
+ * `/` and any `*` path are skipped - `//` is neither, and a wildcard already
+ * matches its own trailing slash.
+ */
+export declare const withTrailingSlashAliases: (routes: BunRoutes) => BunRoutes;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dunx/http",
-  "version": "3.3.1",
+  "version": "3.4.0",
   "description": "Bun.serve adapter for the dunx framework: controllers, middleware and WebSocket gateways",
   "keywords": [
     "bun",
@@ -65,7 +65,7 @@
     "@opentelemetry/sdk-trace-node": "2.11.0"
   },
   "peerDependencies": {
-    "@dunx/core": "^3.3.1",
+    "@dunx/core": "^3.4.0",
     "@types/bun": ">=1.4.1"
   },
   "peerDependenciesMeta": {