@getstrata/bootstrap 0.2.28 → 0.2.30

package/dist/entries/web/routing.js

@@ -1,301 +1,15 @@
 // @bun
+var __jsonParse = (a) => JSON.parse(a);
+
 // ../../src/bootstrap/web/routing.ts
 import { withErrorHandling } from "@getstrata/core";
 
-// ../../src/core/runtime/asyncContextStore.ts
-import { AsyncLocalStorage } from "async_hooks";
-function createAsyncContextStore(key) {
-  const symbol = Symbol.for(key);
-  const globalRecord = globalThis;
-  const existing = globalRecord[symbol];
-  if (existing) {
-    return existing;
-  }
-  const store = new AsyncLocalStorage;
-  globalRecord[symbol] = store;
-  return store;
-}
-
-// ../../src/core/auth/authContext.ts
-var authContext = createAsyncContextStore("@getstrata/authContext");
-function currentAuthUser() {
-  return authContext.getStore() ?? null;
-}
-
-// ../../src/core/errors/http.ts
-class HttpError extends Error {
-  status;
-  details;
-  constructor(status, message, details) {
-    super(message);
-    this.name = new.target.name;
-    this.status = status;
-    this.details = details;
-  }
-}
-
-class BadRequestError extends HttpError {
-  constructor(message = "Bad Request", details) {
-    super(400, message, details);
-  }
-}
-class ConflictError extends HttpError {
-  constructor(message = "Conflict", details) {
-    super(409, message, details);
-  }
-}
-
-class UnprocessableEntityError extends HttpError {
-  constructor(message = "Unprocessable Entity", details) {
-    super(422, message, details);
-  }
-}
-class ForbiddenError extends HttpError {
-  constructor(message = "Forbidden", details) {
-    super(403, message, details);
-  }
-}
-
-class UnauthorizedError extends HttpError {
-  constructor(message = "Unauthorized", details) {
-    super(401, message, details);
-  }
-}
-class PreconditionFailedError extends HttpError {
-  constructor(message = "Precondition Failed", details) {
-    super(412, message, details);
-  }
-}
-
-// ../../src/core/contracts/di.ts
-function getRequiredDependency(dependencies, key) {
-  const dependency = dependencies[key];
-  if (dependency === undefined) {
-    throw new Error(`Required dependency "${key}" is not registered.`);
-  }
-  return dependency;
-}
-
-// ../../src/core/contracts/serviceTokens.ts
-var CORE_POLICY_GATE_TOKEN = "core.policyGate";
-var CORE_AUTH_TOKEN = "core.auth";
-
-// ../../src/core/logging/logger.ts
-class Logger {
-  channel;
-  constructor(channel = "app") {
-    this.channel = channel;
-  }
-  write(level, message, context = {}) {
-    const entry = {
-      level,
-      channel: this.channel,
-      message,
-      timestamp: new Date().toISOString(),
-      ...context
-    };
-    const line = JSON.stringify(entry);
-    if (level === "error") {
-      console.error(line);
-      return;
-    }
-    console.log(line);
-  }
-  debug(message, context) {
-    this.write("debug", message, context);
-  }
-  info(message, context) {
-    this.write("info", message, context);
-  }
-  warn(message, context) {
-    this.write("warn", message, context);
-  }
-  error(message, context) {
-    this.write("error", message, context);
-  }
-}
-var appLogger = new Logger("app");
-
-// ../../src/core/runtime/applicationRegistry.ts
-var APPLICATION_CONTEXT_KEY = Symbol.for("@getstrata/applicationContext");
-var activeContext;
-function readStoredApplicationContext() {
-  if (activeContext) {
-    return activeContext;
-  }
-  const globalContext = globalThis[APPLICATION_CONTEXT_KEY];
-  if (globalContext) {
-    activeContext = globalContext;
-  }
-  return activeContext;
-}
-function requireActiveApplicationContext() {
-  const context = readStoredApplicationContext();
-  if (!context) {
-    throw new Error("The application context has not been bootstrapped.");
-  }
-  return context;
-}
-function resolveApplicationCache() {
-  return getRequiredDependency(requireActiveApplicationContext().dependencies, "cache");
-}
-function resolveApplicationAuth() {
-  return requireActiveApplicationContext().container.resolve(CORE_AUTH_TOKEN);
-}
-function resolveApplicationPolicyGate() {
-  return requireActiveApplicationContext().container.resolve(CORE_POLICY_GATE_TOKEN);
-}
-
-// ../../src/core/crypto/nonCryptographicHash.ts
-function nonCryptographicDigest(input) {
-  return Bun.hash(input).toString(16);
-}
-
-// ../../src/core/http/etag.ts
-function isEtagEnabled() {
-  return (process.env.FEATURE_ETAG ?? "true") !== "false";
-}
-function formatWeakEtag(digest) {
-  return `W/"${digest}"`;
-}
-function etagFromResource(resource) {
-  const version = resource.updated_at ?? resource.created_at ?? "";
-  const versionText = version instanceof Date ? version.toISOString() : version ? String(version) : "0";
-  const digest = nonCryptographicDigest(`${String(resource.id ?? "0")}:${versionText}`).slice(0, 32);
-  return formatWeakEtag(digest);
-}
-function normalizeEtag(value) {
-  return value.trim();
-}
-function etagValuesMatch(left, right) {
-  return normalizeEtag(left) === normalizeEtag(right);
-}
-function parseEtagList(header) {
-  if (!header) {
-    return [];
-  }
-  return header.split(",").map((value) => normalizeEtag(value)).filter(Boolean);
-}
-function ifNoneMatchSatisfied(request, etag) {
-  const header = request.headers.get("if-none-match");
-  if (!header) {
-    return false;
-  }
-  if (header.trim() === "*") {
-    return true;
-  }
-  return parseEtagList(header).some((candidate) => etagValuesMatch(candidate, etag));
-}
-function ifMatchSatisfied(request, etag) {
-  const header = request.headers.get("if-match");
-  if (!header) {
-    return false;
-  }
-  if (header.trim() === "*") {
-    return true;
-  }
-  return parseEtagList(header).some((candidate) => etagValuesMatch(candidate, etag));
-}
-function assertIfMatch(request, etag, options = {}) {
-  const header = request.headers.get("if-match");
-  if (!header) {
-    if (options.required) {
-      throw new PreconditionFailedError("If-Match header is required.");
-    }
-    return;
-  }
-  if (!ifMatchSatisfied(request, etag)) {
-    throw new PreconditionFailedError("Resource ETag does not match If-Match.");
-  }
-}
-function applyEtagHeaders(headers, etag) {
-  const next = new Headers(headers);
-  next.set("ETag", etag);
-  next.set("Cache-Control", "private, must-revalidate");
-  next.append("Vary", "Authorization");
-  next.append("Vary", "X-Tenant-Id");
-  return next;
-}
-function notModifiedResponse(etag) {
-  return new Response(null, {
-    status: 304,
-    headers: applyEtagHeaders(new Headers, etag)
-  });
-}
-function applyConditionalGet(request, response, etag) {
-  if (!isEtagEnabled()) {
-    return response;
-  }
-  if (ifNoneMatchSatisfied(request, etag)) {
-    return notModifiedResponse(etag);
-  }
-  const headers = applyEtagHeaders(new Headers(response.headers), etag);
-  return new Response(response.body, {
-    status: response.status,
-    statusText: response.statusText,
-    headers
-  });
-}
-
-// ../../src/core/tenant/tenantContext.ts
-var tenantContext = createAsyncContextStore("@getstrata/tenantContext");
-
-// ../../src/core/http/validation.ts
-function parsePositiveIntParam(value, name = "id") {
-  const parsed = Number.parseInt(value, 10);
-  if (!Number.isInteger(parsed) || parsed <= 0) {
-    throw new BadRequestError(`Invalid ${name}. Expected a positive integer.`);
-  }
-  return parsed;
-}
+// ../../src/bootstrap/http/securedRouteModelBinding.ts
+import {
+  securedBindRouteModel,
+  securedBindRouteModelByKey
+} from "@getstrata/core/http/securedRouteModelBinding";
 
-// ../../src/core/http/securedRouteModelBinding.ts
-function isMutatingPolicyAction(action) {
-  return action === "update" || action === "delete";
-}
-function securedBindRouteModel(param, resolver, authorization, handler) {
-  return async (request) => {
-    const id = parsePositiveIntParam(String(request.params[param]), String(param));
-    const model = await resolver(id, request);
-    const gate = resolveApplicationPolicyGate();
-    const auth = resolveApplicationAuth();
-    const user = currentAuthUser() ?? await auth.resolve(request);
-    gate.authorize(authorization.resource, authorization.action, user, model);
-    if (isEtagEnabled() && isMutatingPolicyAction(authorization.action)) {
-      assertIfMatch(request, etagFromResource(model), {
-        required: authorization.requireIfMatch ?? true
-      });
-    }
-    const response = await handler(request, model);
-    if (isEtagEnabled() && authorization.action === "view") {
-      return applyConditionalGet(request, response, etagFromResource(model));
-    }
-    return response;
-  };
-}
-function securedBindRouteModelByKey(param, resolver, authorization, handler) {
-  return async (request) => {
-    const key = String(request.params[param] ?? "").trim();
-    if (!key) {
-      throw new BadRequestError(`Missing route parameter "${String(param)}".`);
-    }
-    const model = await resolver(key, request);
-    const gate = resolveApplicationPolicyGate();
-    const auth = resolveApplicationAuth();
-    const user = currentAuthUser() ?? await auth.resolve(request);
-    gate.authorize(authorization.resource, authorization.action, user, model);
-    if (isEtagEnabled() && isMutatingPolicyAction(authorization.action)) {
-      assertIfMatch(request, etagFromResource(model), {
-        required: authorization.requireIfMatch ?? true
-      });
-    }
-    const response = await handler(request, model);
-    if (isEtagEnabled() && authorization.action === "view") {
-      return applyConditionalGet(request, response, etagFromResource(model));
-    }
-    return response;
-  };
-}
 // ../../src/bootstrap/httpKernel.ts
 import {
   createAuthMiddleware,
@@ -376,12 +90,12 @@ function resolveRegisterRateLimit() {
 
 // ../../src/bootstrap/config.ts
 import {
-  CORE_AUTH_TOKEN as CORE_AUTH_TOKEN2,
+  CORE_AUTH_TOKEN,
   CORE_CACHE_TOKEN,
   CORE_CONFIG_TOKEN,
-  CORE_EVENT_BUS_TOKEN as CORE_EVENT_BUS_TOKEN2,
-  CORE_POLICY_GATE_TOKEN as CORE_POLICY_GATE_TOKEN2,
-  CORE_QUEUE_TOKEN as CORE_QUEUE_TOKEN2,
+  CORE_EVENT_BUS_TOKEN,
+  CORE_POLICY_GATE_TOKEN,
+  CORE_QUEUE_TOKEN,
   CORE_TOKEN_SERVICE_TOKEN
 } from "@getstrata/core/contracts/serviceTokens";
 var APP_PORT_CONFIG_KEY = "app.port";
@@ -405,7 +119,7 @@ class HttpKernel {
     this.dependencies = dependencies;
   }
   globalMiddleware() {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN2);
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     return [
       createCorsMiddleware(),
       createSecurityHeadersMiddleware(),
@@ -420,7 +134,7 @@ class HttpKernel {
     ];
   }
   group(name) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN2);
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     switch (name) {
       case "authenticated":
         return [createRequireAuthMiddleware(auth)];
@@ -475,18 +189,18 @@ class HttpKernel {
     return this.wrapWebAuthenticated(handler);
   }
   wrapWebAuthenticated(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN2);
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     return withMiddleware(createRequireWebAuthMiddleware(auth))(handler);
   }
   wrapWebAbility(ability, handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN2);
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     const abilityChecker = this.dependencies.container.resolve(CORE_TOKEN_SERVICE_TOKEN);
     const requireAbility = createRequireAbilityMiddleware(abilityChecker);
     const middleware = [createRequireWebAuthMiddleware(auth), requireAbility(ability)];
     return withMiddleware(...middleware)(handler);
   }
   wrapWebGlobalAdmin(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN2);
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     const middleware = [createRequireWebAuthMiddleware(auth), createRequireGlobalAdminMiddleware()];
     return withMiddleware(...middleware)(handler);
   }
@@ -510,8 +224,8 @@ class HttpKernel {
     return withMiddleware(...middleware)(handler);
   }
   wrapPolicy(resource, action, handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN2);
-    const gate = this.dependencies.container.resolve(CORE_POLICY_GATE_TOKEN2);
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    const gate = this.dependencies.container.resolve(CORE_POLICY_GATE_TOKEN);
     return withMiddleware(createAuthorizeMiddleware(gate, auth, resource, action))(handler);
   }
   wrapLogin(handler) {

package/dist/entries/web/server.js

@@ -1,4 +1,6 @@
 // @bun
+var __jsonParse = (a) => JSON.parse(a);
+
 // ../../src/bootstrap/web/server.ts
 function wrapRouteHandler(handler) {
   return async (request) => {

package/dist/entries/web/session.js

@@ -1,33 +1,10 @@
 // @bun
+var __jsonParse = (a) => JSON.parse(a);
+
 // ../../src/bootstrap/web/session.ts
 import { createHash, randomBytes } from "crypto";
+import { readRequestCookie } from "@getstrata/core/http/cookies";
 
-// ../../src/core/http/cookies.ts
-function readRequestCookie(request, name) {
-  const cookies = request.cookies;
-  if (cookies && typeof cookies.get === "function") {
-    const value = cookies.get(name);
-    if (value) {
-      return value;
-    }
-  }
-  const header = request.headers.get("cookie");
-  if (!header) {
-    return null;
-  }
-  for (const part of header.split(";")) {
-    const idx = part.indexOf("=");
-    if (idx === -1)
-      continue;
-    const cookieName = part.slice(0, idx).trim();
-    if (cookieName !== name)
-      continue;
-    return decodeURIComponent(part.slice(idx + 1).trim());
-  }
-  return null;
-}
-
-// ../../src/bootstrap/web/session.ts
 class CookieSessionStore {
   sql;
   secret;

package/dist/entries/web/slug.js

@@ -1,4 +1,6 @@
 // @bun
+var __jsonParse = (a) => JSON.parse(a);
+
 // ../../src/bootstrap/web/slug.ts
 function slugify(value) {
   return value.toLowerCase().trim().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80);