@finesoft/front 0.5.3 → 0.5.5

package/docs/zh/09-server-and-deployment.md

@@ -77,6 +77,19 @@ Node 主机需要 `@hono/node-server`。可移植 Worker 图无需 Node 兼容
 
 当 `setup` 是模块路径时，该模块必须通过 `export default` 导出 setup 函数。开发、预览与生成的部署主机统一使用这个导出，不再自动猜测命名函数。
 
+`setup` 先于声明式代理运行，先注册的 `app.use(...)` 鉴权中间件因此也保护代理请求。请先注册鉴权，再注册终止请求的处理器；setup 中同路径的终止路由会覆盖代理。配置的 setup 加载失败时，预览启动失败。代理的 `auth` 仅提供上游凭据，不认证调用者；未安装应用鉴权的代理仍公开可用。
+
+Cloudflare 适配器没有连接时 DNS 校验能力，因此 `SAFE_FETCH` 默认拒绝任意域名。访问已知可信 API 时，显式配置完整来源：
+
+```ts
+import { cloudflareAdapter, finesoftFrontViteConfig } from "@finesoft/front";
+finesoftFrontViteConfig({
+    adapter: cloudflareAdapter({ trustedOrigins: ["https://api.example.com"] }),
+});
+```
+
+这是对该来源的显式信任例外，不是 DNS 地址固定。来源包含协议和端口，不支持路径、通配符或前缀匹配；重定向逐跳重查，私有 IP 字面量仍被拒绝。相对路径的进程内 API 调用保持可用。`"cloudflare"` 字符串快捷方式使用空的可信来源列表。
+
 ## 静态托管边界
 
 `staticAdapter` 默认读取构建产物的 `render.routes`，通过同一 SSR host 生成 HTML 并等待释放；`dynamicRoutes` 提供具体动态路径，`routesExport` 仅作显式扩展。发现路由或渲染失败会令构建失败。纯 HTML 不能表达重定向、错误状态、Set-Cookie 或自定义 HTTP 响应头，因此适配器拒绝这些响应；需要它们时选择 Node/Worker 等请求主机。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finesoft/front",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "description": "Application runtime, routing, native UI and platform hosts through one public API",
   "license": "MIT",
   "repository": {
@@ -12,15 +12,15 @@
     "finesoft-types": "./dist/typegen-cli.mjs"
   },
   "files": [
-    "dist/browser-CR5vhgXg.mjs",
-    "dist/browser-kFMjlLGT.d.mts",
+    "dist/browser-CrZcKSpr.d.mts",
+    "dist/browser-D6If-9VF.mjs",
     "dist/browser.d.mts",
     "dist/browser.mjs",
     "dist/controller-types-CgmJ6-le.d.mts",
-    "dist/cookies-BiRlUanX.d.mts",
-    "dist/fetch-policy-BHT8RtrL.mjs",
-    "dist/host-guard-DDWxLpFL.mjs",
-    "dist/http-B6CJqDyf.d.mts",
+    "dist/cookies-BXCwZoS_.d.mts",
+    "dist/fetch-policy-Cxk7F-Cu.mjs",
+    "dist/host-guard-DX4e3-45.mjs",
+    "dist/http-B8r7MWao.d.mts",
     "dist/http-CaxrMD1A.d.mts",
     "dist/http-D70PL72H.mjs",
     "dist/http.d.mts",
@@ -35,36 +35,36 @@
     "dist/load-portable.mjs",
     "dist/lru-map-BKoUAySU.mjs",
     "dist/messages-CAt2QdGr.mjs",
-    "dist/native-contract-DuR25hYB.d.mts",
+    "dist/native-contract-B_2pn5ST.d.mts",
     "dist/native-contract.d.mts",
     "dist/native-contract.mjs",
-    "dist/node-D9hB4dsz.d.mts",
+    "dist/node-DbGzbatF.d.mts",
     "dist/node.d.mts",
     "dist/node.mjs",
     "dist/Outlet.svelte",
     "dist/Outlet.svelte.d.ts",
+    "dist/path-C-b1ChKq.d.mts",
     "dist/path-CGFl2w7D.mjs",
-    "dist/path-CXT6xGPO.d.mts",
     "dist/portable-CaxrMD1A.d.mts",
     "dist/portable.d.mts",
     "dist/portable.mjs",
     "dist/proxy-2dSWO-Xw.d.mts",
-    "dist/proxy-z02VvGIj.mjs",
+    "dist/proxy-BkKVP3Ha.mjs",
     "dist/public-types-BcJM-AYc.mjs",
-    "dist/react-DhwBRw01.d.mts",
+    "dist/react-C8AnI9sx.d.mts",
     "dist/react.d.mts",
     "dist/react.mjs",
     "dist/rolldown-runtime-B4iAMlE-.mjs",
-    "dist/secure-fetch-Xlht2jd7.d.mts",
-    "dist/server-controller-proxy-BkVuVWVD.d.mts",
-    "dist/session-DnB4ZC3x.d.mts",
-    "dist/src-BQBfaaPO.mjs",
+    "dist/secure-fetch--QwYr5uJ.d.mts",
+    "dist/server-controller-proxy-CFdU_nGs.d.mts",
+    "dist/session-BR1vd3yY.d.mts",
+    "dist/src-D_Bzbr80.mjs",
     "dist/src-Ftl_0rhu.mjs",
-    "dist/ssr-BLzYP4wU.d.mts",
-    "dist/ssr-Tn4YkuxM.mjs",
+    "dist/ssr-DqwPGqOd.mjs",
+    "dist/ssr-lzuGJ2ux.d.mts",
     "dist/ssr.d.mts",
     "dist/ssr.mjs",
-    "dist/svelte-Dr5to3SE.d.mts",
+    "dist/svelte-CMFFDLBi.d.mts",
     "dist/svelte.d.mts",
     "dist/svelte.mjs",
     "dist/typegen-C-WeJCtf.d.mts",
@@ -72,12 +72,12 @@
     "dist/typegen-cli.mjs",
     "dist/typegen.d.mts",
     "dist/typegen.mjs",
-    "dist/types-B1BT0N3t.mjs",
+    "dist/types-DD09OkGZ.mjs",
     "dist/undici-CPfL25Hr.mjs",
-    "dist/vite-Cj4SPA8D.d.mts",
+    "dist/vite-BjWtbemg.d.mts",
     "dist/vite.d.mts",
     "dist/vite.mjs",
-    "dist/vue-DGmzuKho.d.mts",
+    "dist/vue-DsZIYP1c.d.mts",
     "dist/vue.d.mts",
     "dist/vue.mjs",
     "dist/web.d.mts",
@@ -113,7 +113,7 @@
   "dependencies": {},
   "peerDependencies": {
     "@hono/node-server": "^1.0.0 || ^2.0.0",
-    "hono": "^4.0.0",
+    "hono": "^4.13.5",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "svelte": "^5.0.0",