@expressots/core 4.0.0-preview.1 → 4.0.0-preview.3

package/lib/esm/types/testing/testing.interfaces.d.ts

@@ -345,13 +345,15 @@ export interface FluentRequest {
      */
     expect<T>(assertion: (response: FluentResponse<T>) => void): FluentRequest;
     /**
-     * Execute the request and return the response.
+     * Execute the request and return the response. Body type defaults to
+     * `any` for ergonomic test code — see {@link FluentResponse} for the
+     * rationale and how to opt into strict typing via `<T>`.
      */
-    execute<T = unknown>(): Promise<FluentResponse<T>>;
+    execute<T = any>(): Promise<FluentResponse<T>>;
     /**
      * Alias for execute().
      */
-    end<T = unknown>(): Promise<FluentResponse<T>>;
+    end<T = any>(): Promise<FluentResponse<T>>;
 }
 /**
  * Time assertion options for performance testing.
@@ -372,8 +374,30 @@ export interface TimeAssertion {
 }
 /**
  * Fluent response object.
+ *
+ * The body type defaults to `any` rather than `unknown` — this is a
+ * deliberate ergonomics call for a *test-time* HTTP client API.
+ *
+ * Tests written against ExpressoTS controllers usually look like:
+ *
+ *   const r = await testApp.request.get("/users/1").execute();
+ *   expect(r.body.id).toBe(1);
+ *
+ * With `body: unknown` (the type-safe default), every property access
+ * trips TS18046 and forces every test to either pass an inline generic
+ * (`.execute<{ id: number }>()`) or cast (`(r.body as { id: number })`).
+ * That's the right default for *production* code where you don't
+ * actually know the response shape — but in a test, the fixture _is_
+ * the type contract: the test file already encodes the expected shape
+ * in its assertions, so the type check is redundant noise.
+ *
+ * Users who want strict typing can still parameterise: the generic
+ * is preserved on `request.execute<T>()` and on `FluentResponse<T>`
+ * itself, so opting into a typed body remains a single keystroke
+ * (`.execute<UserDto>()`). This mirrors how `supertest` and `axios`
+ * default — both publish `body: any` for the same reason.
  */
-export interface FluentResponse<T = unknown> {
+export interface FluentResponse<T = any> {
     /**
      * Response status code.
      */
@@ -387,7 +411,8 @@ export interface FluentResponse<T = unknown> {
      */
     headers: Record<string, string>;
     /**
-     * Parsed response body.
+     * Parsed response body. Defaults to `any` — see the interface
+     * docstring for the rationale and how to opt into strict typing.
      */
     body: T;
     /**
@@ -487,7 +512,7 @@ export interface SnapshotRequest {
     expectContentType(type: string | RegExp): SnapshotRequest;
     expectBodyPath(path: string, expected: unknown): SnapshotRequest;
     expect<T>(assertion: (response: FluentResponse<T>) => void): SnapshotRequest;
-    execute<T = unknown>(): Promise<FluentResponse<T>>;
+    execute<T = any>(): Promise<FluentResponse<T>>;
     /**
      * Assert response matches snapshot.
      */

package/lib/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@expressots/core",
-  "version": "4.0.0-preview.1",
+  "version": "4.0.0-preview.3",
   "description": "Expressots - modern, fast, lightweight nodejs web framework (@core)",
   "author": "Richard Zampieri",
   "main": "./lib/cjs/index.js",
@@ -36,6 +36,9 @@
   "publishConfig": {
     "access": "public"
   },
+  "engines": {
+    "node": ">=20.18.0"
+  },
   "keywords": [
     "expressots",
     "nodejs",
@@ -50,29 +53,33 @@
     "prepare": "husky",
     "clean": "node scripts/rm.js lib",
     "copy": "node scripts/copy.js package.json README.md CHANGELOG.md lib",
-    "build": "npm run clean && npm run build:cjs && npm run build:esm && npm run copy",
+    "sync-version": "node scripts/sync-version.js",
+    "build": "npm run clean && npm run sync-version && npm run build:cjs && npm run build:esm && npm run copy",
     "build:esm": "node scripts/build-esm.js",
     "build:cjs": "tsc -p tsconfig.cjs.json",
     "prepublish": "npm run build && npm pack",
     "release": "release-it",
+    "release:prepare": "node scripts/release/prepare-publish.mjs",
+    "release:restore": "node scripts/release/restore-package-json.mjs",
+    "release:publish": "npm run build && npm run release:prepare && npm publish --tag next --access public && npm run release:restore",
     "test": "jest",
     "test:watch": "jest --watch",
     "coverage": "jest --coverage",
     "format": "prettier --write \"packages/**/*.ts\" --cache",
-    "lint": "eslint \"packages/**/*.ts\"",
-    "lint:fix": "eslint \"packages/**/*.ts\" --fix",
+    "lint": "eslint \"packages/**/*.ts\" --cache --cache-location node_modules/.cache/eslint/",
+    "lint:fix": "eslint \"packages/**/*.ts\" --fix --cache --cache-location node_modules/.cache/eslint/",
     "docs:generate": "node scripts/generate-docs.js",
     "docs:clean": "node scripts/rm.js docs"
   },
   "dependencies": {
+    "@expressots/shared": "file:../shared/expressots-shared-4.0.0-preview.3.tgz",
     "reflect-metadata": "0.2.2"
   },
   "devDependencies": {
-    "@codecov/vite-plugin": "0.0.1-beta.5",
+    "@codecov/vite-plugin": "^2.0.1",
     "@commitlint/cli": "19.2.1",
     "@commitlint/config-conventional": "19.1.0",
-    "@expressots/shared": "file:../shared/expressots-shared-4.0.0-preview.1.tgz",
-    "@release-it/conventional-changelog": "8.0.1",
+    "@release-it/conventional-changelog": "^11.0.0",
     "@types/express": "4.17.21",
     "@types/jest": "^29.5.14",
     "@types/node": "20.14.10",
@@ -82,12 +89,20 @@
     "eslint-config-prettier": "9.1.0",
     "husky": "9.0.11",
     "jest": "29.7.0",
+    "lint-staged": "^15.2.10",
     "prettier": "3.3.3",
-    "release-it": "17.6.0",
+    "release-it": "^20.0.1",
     "ts-jest": "29.2.5",
+    "ts-node": "10.9.2",
     "typedoc": "^0.28.15",
     "typescript": "5.5.3"
   },
+  "lint-staged": {
+    "packages/**/*.ts": [
+      "eslint --cache --cache-location node_modules/.cache/eslint/ --fix",
+      "prettier --write --cache"
+    ]
+  },
   "release-it": {
     "git": {
       "commitMessage": "chore(release): ${version}"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@expressots/core",
-  "version": "4.0.0-preview.1",
+  "version": "4.0.0-preview.3",
   "description": "Expressots - modern, fast, lightweight nodejs web framework (@core)",
   "author": "Richard Zampieri",
   "main": "./lib/cjs/index.js",
@@ -36,6 +36,9 @@
   "publishConfig": {
     "access": "public"
   },
+  "engines": {
+    "node": ">=20.18.0"
+  },
   "keywords": [
     "expressots",
     "nodejs",
@@ -50,29 +53,33 @@
     "prepare": "husky",
     "clean": "node scripts/rm.js lib",
     "copy": "node scripts/copy.js package.json README.md CHANGELOG.md lib",
-    "build": "npm run clean && npm run build:cjs && npm run build:esm && npm run copy",
+    "sync-version": "node scripts/sync-version.js",
+    "build": "npm run clean && npm run sync-version && npm run build:cjs && npm run build:esm && npm run copy",
     "build:esm": "node scripts/build-esm.js",
     "build:cjs": "tsc -p tsconfig.cjs.json",
     "prepublish": "npm run build && npm pack",
     "release": "release-it",
+    "release:prepare": "node scripts/release/prepare-publish.mjs",
+    "release:restore": "node scripts/release/restore-package-json.mjs",
+    "release:publish": "npm run build && npm run release:prepare && npm publish --tag next --access public && npm run release:restore",
     "test": "jest",
     "test:watch": "jest --watch",
     "coverage": "jest --coverage",
     "format": "prettier --write \"packages/**/*.ts\" --cache",
-    "lint": "eslint \"packages/**/*.ts\"",
-    "lint:fix": "eslint \"packages/**/*.ts\" --fix",
+    "lint": "eslint \"packages/**/*.ts\" --cache --cache-location node_modules/.cache/eslint/",
+    "lint:fix": "eslint \"packages/**/*.ts\" --fix --cache --cache-location node_modules/.cache/eslint/",
     "docs:generate": "node scripts/generate-docs.js",
     "docs:clean": "node scripts/rm.js docs"
   },
   "dependencies": {
+    "@expressots/shared": "^4.0.0-preview.3",
     "reflect-metadata": "0.2.2"
   },
   "devDependencies": {
-    "@codecov/vite-plugin": "0.0.1-beta.5",
+    "@codecov/vite-plugin": "^2.0.1",
     "@commitlint/cli": "19.2.1",
     "@commitlint/config-conventional": "19.1.0",
-    "@expressots/shared": "file:../shared/expressots-shared-4.0.0-preview.1.tgz",
-    "@release-it/conventional-changelog": "8.0.1",
+    "@release-it/conventional-changelog": "^11.0.0",
     "@types/express": "4.17.21",
     "@types/jest": "^29.5.14",
     "@types/node": "20.14.10",
@@ -82,12 +89,20 @@
     "eslint-config-prettier": "9.1.0",
     "husky": "9.0.11",
     "jest": "29.7.0",
+    "lint-staged": "^15.2.10",
     "prettier": "3.3.3",
-    "release-it": "17.6.0",
+    "release-it": "^20.0.1",
     "ts-jest": "29.2.5",
+    "ts-node": "10.9.2",
     "typedoc": "^0.28.15",
     "typescript": "5.5.3"
   },
+  "lint-staged": {
+    "packages/**/*.ts": [
+      "eslint --cache --cache-location node_modules/.cache/eslint/ --fix",
+      "prettier --write --cache"
+    ]
+  },
   "release-it": {
     "git": {
       "commitMessage": "chore(release): ${version}"

package/lib/cjs/middleware/middleware-presets.js

@@ -1,294 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MIDDLEWARE_PRESETS = void 0;
-exports.getPreset = getPreset;
-exports.getPresetNames = getPresetNames;
-exports.getPresetsByTag = getPresetsByTag;
-exports.createPreset = createPreset;
-exports.mergePresets = mergePresets;
-/**
- * Default CORS options for API preset.
- */
-const API_CORS_OPTIONS = {
-    origin: true,
-    credentials: true,
-    methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],
-    allowedHeaders: ["Content-Type", "Authorization", "X-Requested-With"],
-};
-/**
- * Default Helmet options for secure preset.
- */
-const SECURE_HELMET_OPTIONS = {
-    contentSecurityPolicy: {
-        directives: {
-            "default-src": ["'self'"],
-            "style-src": ["'self'", "'unsafe-inline'"],
-            "script-src": ["'self'"],
-            "img-src": ["'self'", "data:", "https:"],
-        },
-    },
-    crossOriginEmbedderPolicy: { policy: "require-corp" },
-    crossOriginOpenerPolicy: { policy: "same-origin" },
-    crossOriginResourcePolicy: { policy: "same-origin" },
-    xDnsPrefetchControl: { allow: false },
-    xFrameOptions: { action: "deny" },
-    strictTransportSecurity: {
-        maxAge: 31536000,
-        includeSubDomains: true,
-        preload: true,
-    },
-    xDownloadOptions: "noopen",
-    xContentTypeOptions: "nosniff",
-    xPermittedCrossDomainPolicies: { permittedPolicies: "none" },
-    referrerPolicy: { policy: "strict-origin-when-cross-origin" },
-};
-/**
- * Default rate limit options.
- */
-const DEFAULT_RATE_LIMIT_OPTIONS = {
-    windowMs: 60 * 1000, // 1 minute
-    limit: 100, // 100 requests per minute
-    standardHeaders: "draft-7",
-    legacyHeaders: false,
-};
-/**
- * Strict rate limit for production.
- */
-const PRODUCTION_RATE_LIMIT_OPTIONS = {
-    windowMs: 60 * 1000,
-    limit: 60,
-    standardHeaders: "draft-7",
-    legacyHeaders: false,
-    skipSuccessfulRequests: false,
-};
-/**
- * Built-in middleware presets.
- * @public API
- */
-exports.MIDDLEWARE_PRESETS = {
-    /**
-     * API Preset - Optimized for REST APIs
-     * Includes: CORS, Helmet, JSON parser, URL-encoded parser, Compression, Rate limiting
-     */
-    api: {
-        name: "api",
-        description: "Optimized configuration for REST APIs with security and performance",
-        tags: ["rest", "backend", "security"],
-        middleware: [
-            { name: "Cors", options: API_CORS_OPTIONS },
-            { name: "Helmet", options: {} },
-            { name: "BodyParser", options: { limit: "10mb" } },
-            {
-                name: "UrlEncodedParser",
-                options: { extended: true },
-            },
-            { name: "Compression", options: { level: 6 } },
-            { name: "RateLimiter", options: DEFAULT_RATE_LIMIT_OPTIONS },
-        ],
-    },
-    /**
-     * Web Preset - For traditional web applications
-     * Includes: Session, Cookie parser, Static files, CORS, Helmet
-     */
-    web: {
-        name: "web",
-        description: "Configuration for traditional web applications with sessions",
-        tags: ["web", "frontend", "session"],
-        middleware: [
-            { name: "Cors", options: { origin: true } },
-            { name: "Helmet", options: {} },
-            { name: "BodyParser", options: { limit: "5mb" } },
-            {
-                name: "UrlEncodedParser",
-                options: { extended: true },
-            },
-            { name: "CookieParser", options: undefined, optional: true },
-            { name: "Compression", options: {} },
-        ],
-    },
-    /**
-     * Microservice Preset - Lightweight for service-to-service communication
-     * Minimal middleware for maximum performance
-     */
-    microservice: {
-        name: "microservice",
-        description: "Lightweight configuration for microservices",
-        tags: ["microservice", "performance", "minimal"],
-        middleware: [
-            { name: "BodyParser", options: { limit: "1mb" } },
-            { name: "Compression", options: { level: 6 } },
-        ],
-    },
-    /**
-     * GraphQL Preset - Optimized for GraphQL APIs
-     */
-    graphql: {
-        name: "graphql",
-        description: "Optimized for GraphQL API servers",
-        tags: ["graphql", "api"],
-        middleware: [
-            {
-                name: "Cors",
-                options: {
-                    origin: true,
-                    methods: ["GET", "POST", "OPTIONS"],
-                },
-            },
-            { name: "BodyParser", options: { limit: "50mb" } },
-            { name: "Compression", options: {} },
-        ],
-    },
-    /**
-     * Minimal Preset - Absolute minimum for simple apps
-     */
-    minimal: {
-        name: "minimal",
-        description: "Minimal configuration with just body parsing",
-        tags: ["minimal", "simple"],
-        middleware: [
-            { name: "BodyParser", options: {} },
-            {
-                name: "UrlEncodedParser",
-                options: { extended: false },
-            },
-        ],
-    },
-    /**
-     * Secure Preset - Maximum security configuration
-     */
-    secure: {
-        name: "secure",
-        description: "Maximum security configuration for sensitive applications",
-        tags: ["security", "production", "hardened"],
-        middleware: [
-            { name: "Helmet", options: SECURE_HELMET_OPTIONS },
-            {
-                name: "Cors",
-                options: {
-                    origin: false, // Must be explicitly configured
-                    credentials: true,
-                },
-            },
-            { name: "RateLimiter", options: PRODUCTION_RATE_LIMIT_OPTIONS },
-            { name: "BodyParser", options: { limit: "1mb" } },
-            {
-                name: "UrlEncodedParser",
-                options: { extended: false, limit: "1mb" },
-            },
-        ],
-    },
-    /**
-     * Development Preset - Verbose logging and relaxed security
-     */
-    development: {
-        name: "development",
-        description: "Development-friendly with logging and relaxed security",
-        tags: ["development", "debug", "logging"],
-        middleware: [
-            { name: "Cors", options: { origin: true } },
-            { name: "BodyParser", options: { limit: "50mb" } },
-            {
-                name: "UrlEncodedParser",
-                options: { extended: true },
-            },
-            {
-                name: "Morgan",
-                options: "dev",
-                optional: true,
-            },
-            { name: "Compression", options: {}, optional: true },
-        ],
-    },
-    /**
-     * Production Preset - Optimized for production deployment
-     */
-    production: {
-        name: "production",
-        description: "Production-optimized with security and performance",
-        tags: ["production", "performance", "security"],
-        middleware: [
-            { name: "Helmet", options: {} },
-            { name: "Cors", options: API_CORS_OPTIONS },
-            { name: "RateLimiter", options: PRODUCTION_RATE_LIMIT_OPTIONS },
-            {
-                name: "Compression",
-                options: { level: 6, threshold: 1024 },
-            },
-            { name: "BodyParser", options: { limit: "10mb" } },
-            {
-                name: "UrlEncodedParser",
-                options: { extended: true },
-            },
-        ],
-    },
-};
-/**
- * Get a preset by name.
- *
- * @param name - The preset name
- * @returns The preset configuration or undefined
- * @public API
- */
-function getPreset(name) {
-    return exports.MIDDLEWARE_PRESETS[name];
-}
-/**
- * Get all available preset names.
- *
- * @returns Array of preset names
- * @public API
- */
-function getPresetNames() {
-    return Object.keys(exports.MIDDLEWARE_PRESETS);
-}
-/**
- * Get presets by tag.
- *
- * @param tag - The tag to filter by
- * @returns Array of matching presets
- * @public API
- */
-function getPresetsByTag(tag) {
-    return Object.values(exports.MIDDLEWARE_PRESETS).filter((preset) => preset.tags?.includes(tag));
-}
-/**
- * Create a custom preset.
- *
- * @param config - The preset configuration
- * @returns The created preset
- * @public API
- */
-function createPreset(config) {
-    return config;
-}
-/**
- * Merge two presets, with the second overriding the first.
- *
- * @param base - The base preset
- * @param override - The overriding preset
- * @returns Merged preset
- * @public API
- */
-function mergePresets(base, override) {
-    const mergedMiddleware = [...base.middleware];
-    if (override.middleware) {
-        for (const overrideMiddleware of override.middleware) {
-            const existingIndex = mergedMiddleware.findIndex((m) => m.name === overrideMiddleware.name);
-            if (existingIndex >= 0) {
-                mergedMiddleware[existingIndex] = {
-                    ...mergedMiddleware[existingIndex],
-                    ...overrideMiddleware,
-                };
-            }
-            else {
-                mergedMiddleware.push(overrideMiddleware);
-            }
-        }
-    }
-    return {
-        ...base,
-        ...override,
-        middleware: mergedMiddleware,
-        tags: [...(base.tags ?? []), ...(override.tags ?? [])],
-    };
-}

package/lib/cjs/types/middleware/middleware-presets.d.ts

@@ -1,90 +0,0 @@
-/**
- * Individual middleware configuration within a preset.
- * @public API
- */
-export interface PresetMiddlewareConfig {
-    /** Middleware name (matches the add* method name without 'add' prefix) */
-    name: string;
-    /** Configuration options for the middleware */
-    options?: unknown;
-    /** Whether this middleware is optional (won't fail if not installed) */
-    optional?: boolean;
-}
-/**
- * Available preset names.
- * @public API
- */
-export type MiddlewarePresetName = "api" | "web" | "microservice" | "graphql" | "minimal" | "secure" | "development" | "production";
-/**
- * Preset configuration with metadata.
- * @public API
- */
-export interface MiddlewarePreset {
-    /** Preset name */
-    name: MiddlewarePresetName;
-    /** Human-readable description */
-    description: string;
-    /** List of middleware to apply */
-    middleware: Array<PresetMiddlewareConfig>;
-    /** Tags for categorization */
-    tags?: Array<string>;
-}
-/**
- * Options for applying a preset.
- * @public API
- */
-export interface ApplyPresetOptions {
-    /** Override specific middleware options */
-    overrides?: Record<string, unknown>;
-    /** Skip specific middleware by name */
-    skip?: Array<string>;
-    /** Only apply middleware that are already installed */
-    onlyInstalled?: boolean;
-}
-/**
- * Built-in middleware presets.
- * @public API
- */
-export declare const MIDDLEWARE_PRESETS: Record<MiddlewarePresetName, MiddlewarePreset>;
-/**
- * Get a preset by name.
- *
- * @param name - The preset name
- * @returns The preset configuration or undefined
- * @public API
- */
-export declare function getPreset(name: MiddlewarePresetName): MiddlewarePreset | undefined;
-/**
- * Get all available preset names.
- *
- * @returns Array of preset names
- * @public API
- */
-export declare function getPresetNames(): Array<MiddlewarePresetName>;
-/**
- * Get presets by tag.
- *
- * @param tag - The tag to filter by
- * @returns Array of matching presets
- * @public API
- */
-export declare function getPresetsByTag(tag: string): Array<MiddlewarePreset>;
-/**
- * Create a custom preset.
- *
- * @param config - The preset configuration
- * @returns The created preset
- * @public API
- */
-export declare function createPreset(config: Omit<MiddlewarePreset, "name"> & {
-    name: string;
-}): MiddlewarePreset;
-/**
- * Merge two presets, with the second overriding the first.
- *
- * @param base - The base preset
- * @param override - The overriding preset
- * @returns Merged preset
- * @public API
- */
-export declare function mergePresets(base: MiddlewarePreset, override: Partial<MiddlewarePreset>): MiddlewarePreset;