@getstrata/bootstrap 2.0.4 → 2.0.6

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @getstrata/bootstrap changelog
 
+## 2.0.6
+
+- Dispatch registered Bun route preflights through CORS
+
+## 2.0.5
+
+- Allow explicitly approved application headers in CORS
+
 ## 2.0.4
 
 - Place cache rollout guidance beside outbox docs without overlapping API additions

package/dist/bootstrap/web/server.d.ts

@@ -1,3 +1,4 @@
+import { type CorsOptions } from "@getstrata/core/http/corsMiddleware";
 import type { BunRequest, Server } from "bun";
 import type { AppRouteMap } from "../contracts.ts";
 export interface WebServerOptions {
@@ -5,9 +6,11 @@ export interface WebServerOptions {
     handle?: (request: Request) => Promise<Response | null> | Response | null;
     routes?: AppRouteMap;
     publicDir?: string;
+    /** Additional approved headers for synthesized route preflights; origins still use framework policy. */
+    cors?: CorsOptions;
     onRequest?: (request: Request) => Promise<void> | void;
 }
 type BunRouteHandler = (request: BunRequest, server: Server<unknown>) => Response | Promise<Response>;
-declare function convertAppRoutesToBunRoutes(routes: AppRouteMap): Record<string, Record<string, BunRouteHandler>>;
+declare function convertAppRoutesToBunRoutes(routes: AppRouteMap, cors?: CorsOptions): Record<string, Record<string, BunRouteHandler>>;
 export declare function createWebServer(options: WebServerOptions): Server<undefined>;
 export { convertAppRoutesToBunRoutes };

package/dist/entries/context.js

@@ -285,6 +285,9 @@ var appEnvSchema = defineEnvSchema({
   API_PREFIX: {
     default: "/api/v1"
   },
+  CORS_ADDITIONAL_ALLOWED_HEADERS: {
+    default: ""
+  },
   CORS_ALLOWED_ORIGINS: {
     default: "*"
   },

package/dist/entries/dependencies.js

@@ -285,6 +285,9 @@ var appEnvSchema = defineEnvSchema({
   API_PREFIX: {
     default: "/api/v1"
   },
+  CORS_ADDITIONAL_ALLOWED_HEADERS: {
+    default: ""
+  },
   CORS_ALLOWED_ORIGINS: {
     default: "*"
   },

package/dist/entries/providers.js

@@ -191,6 +191,9 @@ var appEnvSchema = defineEnvSchema({
   API_PREFIX: {
     default: "/api/v1"
   },
+  CORS_ADDITIONAL_ALLOWED_HEADERS: {
+    default: ""
+  },
   CORS_ALLOWED_ORIGINS: {
     default: "*"
   },

package/dist/entries/web/server.js

@@ -1,5 +1,6 @@
 // @bun
 // ../../src/bootstrap/web/server.ts
+import { createCorsMiddleware } from "@getstrata/core/http/corsMiddleware";
 import { currentRequestMeta, runWithRequestMeta } from "@getstrata/core/http/requestMetaContext";
 import { assertUrlPathUnderRoot } from "@getstrata/core/security/safePath";
 import { notFoundHtmlResponse } from "@getstrata/core/view";
@@ -24,11 +25,16 @@ function wrapRouteHandler(handler, path) {
     });
   };
 }
-function convertAppRoutesToBunRoutes(routes) {
+function convertAppRoutesToBunRoutes(routes, cors = {}) {
   const bunRoutes = {};
+  const middleware = createCorsMiddleware(cors);
+  const preflight = (request) => middleware(request, async () => new Response(null, { status: 405 }));
   for (const [path, handler] of Object.entries(routes)) {
     if (typeof handler === "function") {
-      bunRoutes[path] = { GET: wrapRouteHandler(handler, path) };
+      bunRoutes[path] = {
+        GET: wrapRouteHandler(handler, path),
+        OPTIONS: wrapRouteHandler(preflight, path)
+      };
       continue;
     }
     if (handler && typeof handler === "object" && !Array.isArray(handler)) {
@@ -40,6 +46,7 @@ function convertAppRoutesToBunRoutes(routes) {
         methods[method.toUpperCase()] = wrapRouteHandler(methodHandler, path);
       }
       if (Object.keys(methods).length > 0) {
+        methods.OPTIONS ??= wrapRouteHandler(preflight, path);
         bunRoutes[path] = methods;
       }
     }
@@ -48,7 +55,7 @@ function convertAppRoutesToBunRoutes(routes) {
 }
 function createWebServer(options) {
   const publicDir = options.publicDir ?? "./public";
-  const bunRoutes = options.routes ? convertAppRoutesToBunRoutes(options.routes) : undefined;
+  const bunRoutes = options.routes ? convertAppRoutesToBunRoutes(options.routes, options.cors) : undefined;
   return Bun.serve({
     port: options.port,
     ...bunRoutes ? { routes: bunRoutes } : {},

package/dist/index.js

@@ -704,6 +704,9 @@ var appEnvSchema = defineEnvSchema({
   API_PREFIX: {
     default: "/api/v1"
   },
+  CORS_ADDITIONAL_ALLOWED_HEADERS: {
+    default: ""
+  },
   CORS_ALLOWED_ORIGINS: {
     default: "*"
   },
@@ -1576,6 +1579,7 @@ function createRouteKernel(dependencies) {
   return createHttpKernel(dependencies);
 }
 // ../../src/bootstrap/web/server.ts
+import { createCorsMiddleware as createCorsMiddleware2 } from "@getstrata/core/http/corsMiddleware";
 import { currentRequestMeta as currentRequestMeta2, runWithRequestMeta } from "@getstrata/core/http/requestMetaContext";
 import { assertUrlPathUnderRoot as assertUrlPathUnderRoot2 } from "@getstrata/core/security/safePath";
 import { notFoundHtmlResponse as notFoundHtmlResponse2 } from "@getstrata/core/view";
@@ -1600,11 +1604,16 @@ function wrapRouteHandler(handler, path) {
     });
   };
 }
-function convertAppRoutesToBunRoutes(routes) {
+function convertAppRoutesToBunRoutes(routes, cors = {}) {
   const bunRoutes = {};
+  const middleware = createCorsMiddleware2(cors);
+  const preflight = (request) => middleware(request, async () => new Response(null, { status: 405 }));
   for (const [path, handler] of Object.entries(routes)) {
     if (typeof handler === "function") {
-      bunRoutes[path] = { GET: wrapRouteHandler(handler, path) };
+      bunRoutes[path] = {
+        GET: wrapRouteHandler(handler, path),
+        OPTIONS: wrapRouteHandler(preflight, path)
+      };
       continue;
     }
     if (handler && typeof handler === "object" && !Array.isArray(handler)) {
@@ -1616,6 +1625,7 @@ function convertAppRoutesToBunRoutes(routes) {
         methods[method.toUpperCase()] = wrapRouteHandler(methodHandler, path);
       }
       if (Object.keys(methods).length > 0) {
+        methods.OPTIONS ??= wrapRouteHandler(preflight, path);
         bunRoutes[path] = methods;
       }
     }
@@ -1624,7 +1634,7 @@ function convertAppRoutesToBunRoutes(routes) {
 }
 function createWebServer(options) {
   const publicDir = options.publicDir ?? "./public";
-  const bunRoutes = options.routes ? convertAppRoutesToBunRoutes(options.routes) : undefined;
+  const bunRoutes = options.routes ? convertAppRoutesToBunRoutes(options.routes, options.cors) : undefined;
   return Bun.serve({
     port: options.port,
     ...bunRoutes ? { routes: bunRoutes } : {},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/bootstrap",
-  "version": "2.0.4",
+  "version": "2.0.6",
   "description": "Strata application bootstrap: HttpKernel, DI, web session helpers",
   "type": "module",
   "license": "MIT",
@@ -185,7 +185,7 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@getstrata/core": "^2.0.4",
+    "@getstrata/core": "^2.0.6",
     "typescript": "^5.9.0 || ^6.0.0 || ^7.0.0"
   },
   "engines": {