@fiyuu/runtime 0.5.0 → 0.5.1

package/dist/server-loader.js

@@ -0,0 +1,255 @@
+/**
+ * Module loading, layout stacking, meta merging, query caching,
+ * and GEA component rendering for the Fiyuu runtime server.
+ */
+import { existsSync, mkdirSync, statSync } from "node:fs";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+import { buildSync } from "esbuild";
+import { QUERY_CACHE_MAX_ENTRIES, QUERY_CACHE_SWEEP_INTERVAL_MS } from "./server-router.js";
+// ── TypeScript compilation cache ──────────────────────────────────────────────
+const tsxCacheDir = path.join(process.cwd(), ".fiyuu", "dev", "tsx-cache");
+const tsxCache = new Map();
+function getCompiledPath(originalPath) {
+    const hash = Buffer.from(originalPath).toString("base64").replace(/[^a-zA-Z0-9]/g, "").slice(0, 16);
+    return path.join(tsxCacheDir, `${hash}.js`);
+}
+function compileTsxFile(tsxPath) {
+    const compiledPath = getCompiledPath(tsxPath);
+    // Check cache
+    const cached = tsxCache.get(tsxPath);
+    if (cached && cached === compiledPath) {
+        try {
+            const tsxStat = statSync(tsxPath);
+            const jsStat = statSync(compiledPath);
+            if (jsStat.mtimeMs >= tsxStat.mtimeMs) {
+                return compiledPath;
+            }
+        }
+        catch {
+            // Cache miss, recompile
+        }
+    }
+    // Ensure cache directory exists
+    mkdirSync(tsxCacheDir, { recursive: true });
+    // Compile with esbuild
+    const result = buildSync({
+        entryPoints: [tsxPath],
+        bundle: false,
+        format: "esm",
+        platform: "node",
+        target: "node18",
+        jsx: "automatic",
+        jsxImportSource: "@geajs/core",
+        outfile: compiledPath,
+        sourcemap: false,
+    });
+    if (result.errors.length > 0) {
+        throw new Error(`Failed to compile ${tsxPath}: ${result.errors.map(e => e.text).join(", ")}`);
+    }
+    tsxCache.set(tsxPath, compiledPath);
+    return compiledPath;
+}
+// ── Dynamic module import ─────────────────────────────────────────────────────
+export async function importModule(modulePath, mode, serverDirectory) {
+    // In production mode, use compiled .js files from server directory
+    let resolvedPath = modulePath;
+    if (mode === "start" && serverDirectory) {
+        // Convert .ts/.tsx to .js and map to server directory
+        const relativePath = path.relative(process.cwd(), modulePath);
+        if (relativePath.startsWith("app/")) {
+            const jsPath = relativePath.replace(/\.tsx?$/, ".js");
+            resolvedPath = path.join(serverDirectory, jsPath.replace(/^app\//, ""));
+        }
+    }
+    else if (mode === "dev" && (modulePath.endsWith(".tsx") || modulePath.endsWith(".ts"))) {
+        // In dev mode, compile .tsx/.ts files on the fly
+        resolvedPath = compileTsxFile(modulePath);
+    }
+    const fileUrl = pathToFileURL(resolvedPath).href;
+    try {
+        return await import(mode === "dev" ? `${fileUrl}?t=${Date.now()}` : fileUrl);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const shortPath = modulePath.replace(process.cwd(), ".");
+        let hint = "";
+        if (message.includes("Cannot find package") || message.includes("ERR_MODULE_NOT_FOUND")) {
+            const match = message.match(/Cannot find (?:package|module) '([^']+)'/);
+            const missing = match ? match[1] : "a dependency";
+            hint = `\n  → Missing package: "${missing}". Run \`npm install\` in the project root.`;
+        }
+        else if (message.includes("SyntaxError") || message.includes("Unexpected token")) {
+            hint = `\n  → Syntax error in ${shortPath}. Check for typos or invalid TypeScript.`;
+        }
+        else if (message.includes("ERR_INVALID_URL")) {
+            hint = `\n  → Invalid file path: ${shortPath}`;
+        }
+        const enhanced = new Error(`Failed to load module: ${shortPath}\n  ${message}${hint}`);
+        enhanced.stack = err instanceof Error ? err.stack : undefined;
+        throw enhanced;
+    }
+}
+// ── API route resolution ──────────────────────────────────────────────────────
+export function resolveApiRouteModule(appDirectory, pathname) {
+    const relativePath = pathname.replace(/^\//, "");
+    const normalizedRoot = path.resolve(appDirectory) + path.sep;
+    const directModule = path.resolve(appDirectory, relativePath, "route.ts");
+    if (!directModule.startsWith(normalizedRoot))
+        return null; // path traversal guard
+    if (existsSync(directModule))
+        return directModule;
+    const rootModule = path.resolve(appDirectory, relativePath + ".ts");
+    if (!rootModule.startsWith(normalizedRoot))
+        return null; // path traversal guard
+    return existsSync(rootModule) ? rootModule : null;
+}
+// ── Meta loading & merging ────────────────────────────────────────────────────
+export async function loadMetaFile(filePath, mode, serverDirectory) {
+    if (!existsSync(filePath)) {
+        return { intent: "" };
+    }
+    const module = (await importModule(filePath, mode, serverDirectory));
+    return module.default ?? { intent: "" };
+}
+export async function loadLayoutMeta(directory, mode, serverDirectory) {
+    return loadMetaFile(path.join(directory, "layout.meta.ts"), mode, serverDirectory);
+}
+export function mergeMetaDefinitions(...definitions) {
+    return definitions.reduce((current, item) => ({
+        ...current,
+        ...item,
+        seo: {
+            ...current.seo,
+            ...item.seo,
+        },
+    }), { intent: "" });
+}
+export async function loadLayoutStack(appDirectory, feature, mode, serverDirectory, providers) {
+    const parts = feature.feature ? feature.feature.split("/") : [];
+    const directories = [appDirectory];
+    for (let index = 0; index < parts.length; index += 1) {
+        directories.push(path.join(appDirectory, ...parts.slice(0, index + 1)));
+    }
+    const stack = [];
+    // First, load global providers (if any)
+    if (providers && providers.length > 0) {
+        for (const provider of providers.filter((p) => p.target === "global" || p.target === "layout")) {
+            try {
+                const module = (await importModule(provider.filePath, mode, serverDirectory));
+                const component = module.default ?? module.Provider;
+                if (component) {
+                    stack.push({
+                        component,
+                        meta: { intent: provider.intent ?? `${provider.name} provider` },
+                        isProvider: true,
+                    });
+                }
+            }
+            catch (err) {
+                console.warn(`[fiyuu] Failed to load provider ${provider.name}:`, err);
+            }
+        }
+    }
+    // Then load layouts
+    for (const directory of directories) {
+        const layoutFile = path.join(directory, "layout.tsx");
+        const metaFile = path.join(directory, "layout.meta.ts");
+        if (existsSync(layoutFile)) {
+            const module = (await importModule(layoutFile, mode, serverDirectory));
+            if (module.default) {
+                stack.push({ component: module.default, meta: await loadMetaFile(metaFile, mode, serverDirectory) });
+            }
+        }
+    }
+    // Finally, load page-specific providers
+    if (providers && providers.length > 0) {
+        for (const provider of providers.filter((p) => p.target === "page")) {
+            try {
+                const module = (await importModule(provider.filePath, mode, serverDirectory));
+                const component = module.default ?? module.Provider;
+                if (component) {
+                    stack.push({
+                        component,
+                        meta: { intent: provider.intent ?? `${provider.name} provider` },
+                        isProvider: true,
+                    });
+                }
+            }
+            catch (err) {
+                console.warn(`[fiyuu] Failed to load provider ${provider.name}:`, err);
+            }
+        }
+    }
+    return stack;
+}
+export async function loadFeatureMeta(feature, mode, serverDirectory) {
+    return feature.files["meta.ts"]
+        ? loadMetaFile(feature.files["meta.ts"], mode, serverDirectory)
+        : { intent: feature.intent ?? "" };
+}
+// ── Cached layout stack (production only) ────────────────────────────────────
+export async function getCachedLayoutStack(state, appDirectory, feature, mode, providers) {
+    const cached = state.layoutStackCache.get(feature.route);
+    if (cached)
+        return cached;
+    const layoutStack = await loadLayoutStack(appDirectory, feature, mode, state.serverDirectory, providers);
+    state.layoutStackCache.set(feature.route, layoutStack);
+    return layoutStack;
+}
+export async function getCachedMergedMeta(state, feature, layoutStack, mode) {
+    const cached = state.mergedMetaCache.get(feature.route);
+    if (cached)
+        return cached;
+    let featureMeta = state.featureMetaCache.get(feature.route);
+    if (!featureMeta) {
+        featureMeta = await loadFeatureMeta(feature, mode, state.serverDirectory);
+        state.featureMetaCache.set(feature.route, featureMeta);
+    }
+    const merged = mergeMetaDefinitions(...layoutStack.map((item) => item.meta), featureMeta);
+    state.mergedMetaCache.set(feature.route, merged);
+    return merged;
+}
+// ── Query cache ───────────────────────────────────────────────────────────────
+export function pruneQueryCache(state, now) {
+    if (now - state.queryCacheLastPruneAt < QUERY_CACHE_SWEEP_INTERVAL_MS &&
+        state.queryCache.size < QUERY_CACHE_MAX_ENTRIES) {
+        return;
+    }
+    state.queryCacheLastPruneAt = now;
+    for (const [key, entry] of state.queryCache) {
+        if (entry.expiresAt <= now) {
+            state.queryCache.delete(key);
+        }
+    }
+    if (state.queryCache.size <= QUERY_CACHE_MAX_ENTRIES)
+        return;
+    const survivors = [...state.queryCache.entries()].sort((left, right) => left[1].expiresAt - right[1].expiresAt);
+    const overflowCount = survivors.length - QUERY_CACHE_MAX_ENTRIES;
+    for (let index = 0; index < overflowCount; index += 1) {
+        state.queryCache.delete(survivors[index][0]);
+    }
+}
+// ── GEA component rendering ───────────────────────────────────────────────────
+const geaComponentModeCache = new WeakMap();
+export function renderGeaComponent(component, props) {
+    if (typeof component !== "function") {
+        throw new Error("Route module default export must be a Gea component class or function.");
+    }
+    const candidate = component;
+    const componentKey = candidate;
+    const cachedMode = geaComponentModeCache.get(componentKey);
+    const mode = cachedMode ?? (typeof candidate.prototype?.template === "function" ? "class" : "function");
+    if (!cachedMode) {
+        geaComponentModeCache.set(componentKey, mode);
+    }
+    if (mode === "class") {
+        const instance = new candidate(props);
+        if (typeof instance.template === "function") {
+            return String(instance.template(instance.props ?? props));
+        }
+        return String(instance.toString());
+    }
+    return String(candidate(props));
+}
+//# sourceMappingURL=server-loader.js.map

package/dist/server-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-loader.js","sourceRoot":"","sources":["../src/server-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAA+B,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AAE5F,iFAAiF;AAEjF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;AAC3E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE3C,SAAS,eAAe,CAAC,YAAoB;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpG,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE9C,cAAc;IACd,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACtC,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,uBAAuB;IACvB,MAAM,MAAM,GAAG,SAAS,CAAC;QACvB,WAAW,EAAE,CAAC,OAAO,CAAC;QACtB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,GAAG,EAAE,WAAW;QAChB,eAAe,EAAE,aAAa;QAC9B,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACpC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,IAAqB,EACrB,eAAwB;IAExB,mEAAmE;IACnE,IAAI,YAAY,GAAG,UAAU,CAAC;IAC9B,IAAI,IAAI,KAAK,OAAO,IAAI,eAAe,EAAE,CAAC;QACxC,sDAAsD;QACtD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACtD,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzF,iDAAiD;QACjD,YAAY,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAEzD,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;YAClD,IAAI,GAAG,2BAA2B,OAAO,6CAA6C,CAAC;QACzF,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnF,IAAI,GAAG,yBAAyB,SAAS,0CAA0C,CAAC;QACtF,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC/C,IAAI,GAAG,4BAA4B,SAAS,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,KAAK,CACxB,0BAA0B,SAAS,OAAO,OAAO,GAAG,IAAI,EAAE,CAC3D,CAAC;QACF,QAAQ,CAAC,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,MAAM,QAAQ,CAAC;IACjB,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,qBAAqB,CAAC,YAAoB,EAAE,QAAgB;IAC1E,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;IAE7D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAC1E,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,uBAAuB;IAClF,IAAI,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IAElD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,GAAG,KAAK,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,uBAAuB;IAChF,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAqB,EAAE,eAAwB;IAClG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,CAAiC,CAAC;IACrG,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,IAAqB,EAAE,eAAwB;IACrG,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAG,WAA6B;IACnE,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAClB,GAAG,OAAO;QACV,GAAG,IAAI;QACP,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,IAAI,CAAC,GAAG;SACZ;KACF,CAAC,EACF,EAAE,MAAM,EAAE,EAAE,EAAE,CACf,CAAC;AACJ,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,OAAsB,EACtB,IAAqB,EACrB,eAAwB,EACxB,SAA4B;IAE5B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAA8E,EAAE,CAAC;IAE5F,wCAAwC;IACxC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC/F,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,CAAmB,CAAC;gBAChG,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC;gBACpD,IAAI,SAAS,EAAE,CAAC;oBACd,KAAK,CAAC,IAAI,CAAC;wBACT,SAAS;wBACT,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,WAAW,EAAE;wBAChE,UAAU,EAAE,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,mCAAmC,QAAQ,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,eAAe,CAAC,CAAiB,CAAC;YACvF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,CAAmB,CAAC;gBAChG,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC;gBACpD,IAAI,SAAS,EAAE,CAAC;oBACd,KAAK,CAAC,IAAI,CAAC;wBACT,SAAS;wBACT,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,WAAW,EAAE;wBAChE,UAAU,EAAE,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,mCAAmC,QAAQ,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAsB,EAAE,IAAqB,EAAE,eAAwB;IAC3G,OAAO,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7B,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC;QAC/D,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AACvC,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAmB,EACnB,YAAoB,EACpB,OAAsB,EACtB,IAAqB,EACrB,SAA4B;IAE5B,MAAM,MAAM,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACzG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACvD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAmB,EACnB,OAAsB,EACtB,WAAgE,EAChE,IAAqB;IAErB,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,WAAW,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1E,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1F,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,GAAW;IAC9D,IACE,GAAG,GAAG,KAAK,CAAC,qBAAqB,GAAG,6BAA6B;QACjE,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,uBAAuB,EAC/C,CAAC;QACD,OAAO;IACT,CAAC;IAED,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAC3B,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,uBAAuB;QAAE,OAAO;IAE7D,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CACpD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;IACF,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,GAAG,uBAAuB,CAAC;IACjE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,aAAa,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAAkC,CAAC;AAE5E,MAAM,UAAU,kBAAkB,CAAC,SAAkB,EAAE,KAA8B;IACnF,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,SAAS,GAAG,SAIjB,CAAC;IACF,MAAM,YAAY,GAAG,SAAgC,CAAC;IAEtD,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,UAAU,IAAI,CAAC,OAAO,SAAS,CAAC,SAAS,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACxG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,qBAAqB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC"}

package/dist/server-middleware.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Middleware runner for the Fiyuu runtime server.
+ * Loads the app-level middleware.ts module and chains handlers.
+ */
+import type { IncomingMessage } from "node:http";
+import type { MiddlewareResult, StartServerOptions } from "./server-types.js";
+export declare function runMiddleware(options: StartServerOptions, url: URL, request: IncomingMessage, mode: "dev" | "start", stateWarnings?: string[], requestId?: string, serverDirectory?: string): Promise<MiddlewareResult | undefined>;
+//# sourceMappingURL=server-middleware.d.ts.map

package/dist/server-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-middleware.d.ts","sourceRoot":"","sources":["../src/server-middleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAIV,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAG3B,wBAAsB,aAAa,CACjC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,KAAK,GAAG,OAAO,EACrB,aAAa,GAAE,MAAM,EAAO,EAC5B,SAAS,SAAK,EACd,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CA8CvC"}

package/dist/server-middleware.js

@@ -0,0 +1,50 @@
+/**
+ * Middleware runner for the Fiyuu runtime server.
+ * Loads the app-level middleware.ts module and chains handlers.
+ */
+import { existsSync } from "node:fs";
+import path from "node:path";
+import { importModule } from "./server-loader.js";
+export async function runMiddleware(options, url, request, mode, stateWarnings = [], requestId = "", serverDirectory) {
+    if (options.config?.middleware?.enabled === false) {
+        return undefined;
+    }
+    const middlewarePath = path.join(options.appDirectory, "middleware.ts");
+    if (!existsSync(middlewarePath)) {
+        return undefined;
+    }
+    const module = (await importModule(middlewarePath, mode, serverDirectory));
+    const handlers = Array.isArray(module.middleware)
+        ? module.middleware
+        : module.middleware
+            ? [module.middleware]
+            : [];
+    const context = {
+        request,
+        url,
+        responseHeaders: {},
+        requestId,
+        warnings: stateWarnings,
+    };
+    let shortCircuit;
+    let index = -1;
+    async function dispatch(position) {
+        if (position <= index) {
+            throw new Error("Middleware next() called multiple times.");
+        }
+        index = position;
+        const handler = handlers[position];
+        if (!handler)
+            return;
+        const result = await handler(context, async () => dispatch(position + 1));
+        if (result?.headers) {
+            Object.assign(context.responseHeaders, result.headers);
+        }
+        if (result?.response) {
+            shortCircuit = result.response;
+        }
+    }
+    await dispatch(0);
+    return { headers: context.responseHeaders, response: shortCircuit };
+}
+//# sourceMappingURL=server-middleware.js.map

package/dist/server-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-middleware.js","sourceRoot":"","sources":["../src/server-middleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA2B,EAC3B,GAAQ,EACR,OAAwB,EACxB,IAAqB,EACrB,gBAA0B,EAAE,EAC5B,SAAS,GAAG,EAAE,EACd,eAAwB;IAExB,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,cAAc,EAAE,IAAI,EAAE,eAAe,CAAC,CAAqB,CAAC;IAC/F,MAAM,QAAQ,GAAwB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QACpE,CAAC,CAAC,MAAM,CAAC,UAAU;QACnB,CAAC,CAAC,MAAM,CAAC,UAAU;YACjB,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,OAAO,GAAsB;QACjC,OAAO;QACP,GAAG;QACH,eAAe,EAAE,EAAE;QACnB,SAAS;QACT,QAAQ,EAAE,aAAa;KACxB,CAAC;IACF,IAAI,YAA0C,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IAEf,KAAK,UAAU,QAAQ,CAAC,QAAgB;QACtC,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,GAAG,QAAQ,CAAC;QACjB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrB,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClB,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACtE,CAAC"}

package/dist/server-private.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Private assets management for Fiyuu.
+ *
+ * The private/ directory contains files that should only be accessible
+ * server-side. These files are NEVER served to the client via HTTP.
+ * They can only be accessed through server-side code (actions, queries, services).
+ */
+import type { ServerResponse } from "node:http";
+export interface PrivateAsset {
+    /** Asset name/path relative to private directory */
+    name: string;
+    /** Full file path */
+    filePath: string;
+    /** File size in bytes */
+    size: number;
+    /** MIME type */
+    mimeType: string;
+    /** Last modified timestamp */
+    modifiedAt: Date;
+}
+export interface PrivateDirectoryConfig {
+    /** Root directory for private assets */
+    rootPath: string;
+    /** Allowed MIME types (undefined = allow all) */
+    allowedMimeTypes?: string[];
+    /** Maximum file size in bytes (default: 100MB) */
+    maxFileSize?: number;
+    /** Whether to enable server-side caching */
+    enableCache?: boolean;
+}
+/**
+ * Get MIME type for a file based on extension.
+ */
+export declare function getPrivateAssetMimeType(filePath: string): string;
+/**
+ * Check if a file is allowed to be accessed from private directory.
+ * Blocks access to sensitive paths.
+ */
+export declare function isAllowedPrivatePath(filePath: string, rootPath: string): boolean;
+/**
+ * Read a private asset as string (for text files).
+ * This can only be called from server-side code.
+ */
+export declare function readPrivateAsset(rootPath: string, assetName: string, encoding?: BufferEncoding): Promise<string>;
+/**
+ * Read a private asset as Buffer (for binary files).
+ * This can only be called from server-side code.
+ */
+export declare function readPrivateAssetBuffer(rootPath: string, assetName: string): Promise<Buffer>;
+/**
+ * Get metadata about a private asset without reading content.
+ */
+export declare function getPrivateAssetInfo(rootPath: string, assetName: string): Promise<PrivateAsset | null>;
+/**
+ * List all assets in the private directory.
+ */
+export declare function listPrivateAssets(rootPath: string, subDirectory?: string): Promise<PrivateAsset[]>;
+/**
+ * Check if a request is trying to access private assets via HTTP.
+ * This should be blocked - private assets are server-side only.
+ */
+export declare function isPrivatePathRequest(pathname: string): boolean;
+/**
+ * Block a request trying to access private assets.
+ * Returns true if request was blocked.
+ */
+export declare function blockPrivateAccess(response: ServerResponse, pathname: string): boolean;
+/**
+ * Helper to safely access private assets in server code.
+ * Returns null if asset doesn't exist or access is denied.
+ */
+export declare function safeReadPrivateAsset<T = string>(rootPath: string, assetName: string, parser?: (content: string) => T): Promise<T | null>;
+/**
+ * Parse a JSON private asset.
+ */
+export declare function readPrivateJson<T = unknown>(rootPath: string, assetName: string): Promise<T | null>;
+/**
+ * Parse a CSV private asset into array of objects.
+ */
+export declare function readPrivateCsv(rootPath: string, assetName: string): Promise<Record<string, string>[] | null>;
+//# sourceMappingURL=server-private.d.ts.map

package/dist/server-private.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-private.d.ts","sourceRoot":"","sources":["../src/server-private.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGhD,MAAM,WAAW,YAAY;IAC3B,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AA4BD;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGhE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CA2BhF;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,cAAuB,GAChC,OAAO,CAAC,MAAM,CAAC,CAYjB;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAYjB;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAoB9B;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,GAAE,MAAW,GACxB,OAAO,CAAC,YAAY,EAAE,CAAC,CAczB;AAiCD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAS9D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,MAAM,GACf,OAAO,CAeT;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,GAAG,MAAM,EACnD,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAC9B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAOnB;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,CAAC,GAAG,OAAO,EAC/C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAEnB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,CAc1C"}

package/dist/server-private.js

@@ -0,0 +1,225 @@
+/**
+ * Private assets management for Fiyuu.
+ *
+ * The private/ directory contains files that should only be accessible
+ * server-side. These files are NEVER served to the client via HTTP.
+ * They can only be accessed through server-side code (actions, queries, services).
+ */
+import { existsSync } from "node:fs";
+import { promises as fs } from "node:fs";
+import path from "node:path";
+const DEFAULT_MAX_FILE_SIZE = 100 * 1024 * 1024; // 100MB
+const MIME_TYPES = {
+    ".json": "application/json",
+    ".csv": "text/csv",
+    ".xml": "application/xml",
+    ".pdf": "application/pdf",
+    ".txt": "text/plain",
+    ".md": "text/markdown",
+    ".yaml": "application/yaml",
+    ".yml": "application/yaml",
+    ".env": "text/plain",
+    ".key": "text/plain",
+    ".pem": "text/plain",
+    ".crt": "text/plain",
+    ".p12": "application/x-pkcs12",
+    ".pfx": "application/x-pkcs12",
+    ".sqlite": "application/x-sqlite3",
+    ".db": "application/x-sqlite3",
+    ".zip": "application/zip",
+    ".tar": "application/x-tar",
+    ".gz": "application/gzip",
+    ".sql": "text/plain",
+    ".log": "text/plain",
+};
+/**
+ * Get MIME type for a file based on extension.
+ */
+export function getPrivateAssetMimeType(filePath) {
+    const ext = path.extname(filePath).toLowerCase();
+    return MIME_TYPES[ext] ?? "application/octet-stream";
+}
+/**
+ * Check if a file is allowed to be accessed from private directory.
+ * Blocks access to sensitive paths.
+ */
+export function isAllowedPrivatePath(filePath, rootPath) {
+    const resolvedPath = path.resolve(filePath);
+    const resolvedRoot = path.resolve(rootPath);
+    // Path traversal protection
+    if (!resolvedPath.startsWith(resolvedRoot)) {
+        return false;
+    }
+    // Block access to node_modules
+    if (resolvedPath.includes("node_modules")) {
+        return false;
+    }
+    // Block access to .git
+    if (resolvedPath.includes(".git")) {
+        return false;
+    }
+    // Block access to .env files directly (should use config instead)
+    const basename = path.basename(resolvedPath);
+    if (basename.startsWith(".env") && !basename.endsWith(".example")) {
+        // Allow reading but log warning - actual env should be in .fiyuu/
+        console.warn(`[fiyuu] Warning: Accessing .env file from private/: ${basename}`);
+    }
+    return true;
+}
+/**
+ * Read a private asset as string (for text files).
+ * This can only be called from server-side code.
+ */
+export async function readPrivateAsset(rootPath, assetName, encoding = "utf8") {
+    const filePath = path.join(rootPath, assetName);
+    if (!isAllowedPrivatePath(filePath, rootPath)) {
+        throw new Error(`Access denied to private asset: ${assetName}`);
+    }
+    if (!existsSync(filePath)) {
+        throw new Error(`Private asset not found: ${assetName}`);
+    }
+    return fs.readFile(filePath, encoding);
+}
+/**
+ * Read a private asset as Buffer (for binary files).
+ * This can only be called from server-side code.
+ */
+export async function readPrivateAssetBuffer(rootPath, assetName) {
+    const filePath = path.join(rootPath, assetName);
+    if (!isAllowedPrivatePath(filePath, rootPath)) {
+        throw new Error(`Access denied to private asset: ${assetName}`);
+    }
+    if (!existsSync(filePath)) {
+        throw new Error(`Private asset not found: ${assetName}`);
+    }
+    return fs.readFile(filePath);
+}
+/**
+ * Get metadata about a private asset without reading content.
+ */
+export async function getPrivateAssetInfo(rootPath, assetName) {
+    const filePath = path.join(rootPath, assetName);
+    if (!isAllowedPrivatePath(filePath, rootPath)) {
+        return null;
+    }
+    if (!existsSync(filePath)) {
+        return null;
+    }
+    const stats = await fs.stat(filePath);
+    return {
+        name: assetName,
+        filePath: normalizePath(filePath),
+        size: stats.size,
+        mimeType: getPrivateAssetMimeType(filePath),
+        modifiedAt: stats.mtime,
+    };
+}
+/**
+ * List all assets in the private directory.
+ */
+export async function listPrivateAssets(rootPath, subDirectory = "") {
+    const targetDir = path.join(rootPath, subDirectory);
+    if (!isAllowedPrivatePath(targetDir, rootPath)) {
+        return [];
+    }
+    if (!existsSync(targetDir)) {
+        return [];
+    }
+    const assets = [];
+    await walkPrivateDirectory(rootPath, targetDir, assets);
+    return assets;
+}
+async function walkPrivateDirectory(rootPath, currentDir, assets) {
+    const entries = await fs.readdir(currentDir, { withFileTypes: true });
+    for (const entry of entries) {
+        const fullPath = path.join(currentDir, entry.name);
+        if (entry.isDirectory()) {
+            // Skip hidden directories and node_modules
+            if (entry.name.startsWith(".") || entry.name === "node_modules") {
+                continue;
+            }
+            await walkPrivateDirectory(rootPath, fullPath, assets);
+        }
+        else if (entry.isFile()) {
+            const stats = await fs.stat(fullPath);
+            const relativeName = path.relative(rootPath, fullPath);
+            assets.push({
+                name: normalizePath(relativeName),
+                filePath: normalizePath(fullPath),
+                size: stats.size,
+                mimeType: getPrivateAssetMimeType(fullPath),
+                modifiedAt: stats.mtime,
+            });
+        }
+    }
+}
+/**
+ * Check if a request is trying to access private assets via HTTP.
+ * This should be blocked - private assets are server-side only.
+ */
+export function isPrivatePathRequest(pathname) {
+    // Block any path starting with /private/ or containing /private/
+    const normalizedPath = pathname.replace(/\\/g, "/");
+    return (normalizedPath.startsWith("/private/") ||
+        normalizedPath === "/private" ||
+        normalizedPath.includes("/../private/") ||
+        normalizedPath.includes("/./private/"));
+}
+/**
+ * Block a request trying to access private assets.
+ * Returns true if request was blocked.
+ */
+export function blockPrivateAccess(response, pathname) {
+    if (!isPrivatePathRequest(pathname)) {
+        return false;
+    }
+    response.statusCode = 403;
+    response.setHeader("content-type", "text/plain; charset=utf-8");
+    response.setHeader("x-fiyuu-private-blocked", "true");
+    response.end(`Access denied: Private assets cannot be accessed via HTTP.\n` +
+        `Path: ${pathname}\n\n` +
+        `Private assets are server-side only. ` +
+        `Use server actions, queries, or services to access them.`);
+    return true;
+}
+/**
+ * Helper to safely access private assets in server code.
+ * Returns null if asset doesn't exist or access is denied.
+ */
+export async function safeReadPrivateAsset(rootPath, assetName, parser) {
+    try {
+        const content = await readPrivateAsset(rootPath, assetName);
+        return parser ? parser(content) : content;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Parse a JSON private asset.
+ */
+export async function readPrivateJson(rootPath, assetName) {
+    return safeReadPrivateAsset(rootPath, assetName, (content) => JSON.parse(content));
+}
+/**
+ * Parse a CSV private asset into array of objects.
+ */
+export async function readPrivateCsv(rootPath, assetName) {
+    return safeReadPrivateAsset(rootPath, assetName, (content) => {
+        const lines = content.trim().split("\n");
+        if (lines.length === 0)
+            return [];
+        const headers = lines[0].split(",").map((h) => h.trim());
+        return lines.slice(1).map((line) => {
+            const values = line.split(",").map((v) => v.trim());
+            return headers.reduce((obj, header, i) => {
+                obj[header] = values[i] ?? "";
+                return obj;
+            }, {});
+        });
+    });
+}
+function normalizePath(filePath) {
+    return filePath.split(path.sep).join("/");
+}
+//# sourceMappingURL=server-private.js.map