@getstrata/core 2.2.39 → 2.2.41

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @getstrata/core changelog
 
+## 2.2.41
+
+Make framework HTML/JSON error responses non-storeable, including configured/fallback renderers and custom-body 404 responses; retain success-response cache policy and add packed header regressions.
+
+Fix packaged error wrappers ignoring the configured application error renderer; preserve API JSON precedence and add packed configured/default rendering regressions.
+
+Fix packaged membership middleware and default service ignoring the configured application lookup. Use the canonical membership context while preserving explicit service injection and request isolation. Add mandatory packed external-app coverage for concurrent users, replacement configuration and propagated lookup failures.
+
+## 2.2.40
+
+Fix shared DNS fixture state in packaged outbound consumers. safeFetch and GitHub OAuth now use the canonical safeUrl resolver while retaining DNS pinning, private-address validation and request deadlines. Add mandatory packed external-app regressions for resolver replacement and private-target refusal; document controlled-provider qualification limits.
+
 ## 2.2.39
 
 Fix published HTTP metrics registry identity: share root/subpath Prometheus state and preserve registry, class and bucket exports. Keep generated middleware/exporter observations consistent and extend installed Postgres/SQLite/MySQL HTTP regressions; no app bridge, schema change or collector-policy change.

package/dist/entries/audit/exportAuditLogs.js

@@ -995,10 +995,141 @@ function sdkClientClassName() {
   return fromName ? `${fromName}Client` : "AppClient";
 }
 
+// ../../src/core/security/safeFetch.ts
+import { pinUrlToAddress, resolveSafeOutboundTarget } from "@getstrata/core/security/safeUrl";
+var DEFAULT_FETCH_TIMEOUT_MS = 1e4;
+function untilAborted(work, signal) {
+  signal.throwIfAborted();
+  return new Promise((resolve, reject) => {
+    const onAbort = () => reject(signal.reason);
+    signal.addEventListener("abort", onAbort, { once: true });
+    work.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
+  });
+}
+function preserveResponseMetadata(response, original) {
+  Object.defineProperties(response, {
+    url: { value: original.url },
+    redirected: { value: original.redirected },
+    type: { value: original.type }
+  });
+  const clone = response.clone.bind(response);
+  response.clone = () => preserveResponseMetadata(clone(), original);
+  return response;
+}
+function withBodyDeadline(response, signal, release) {
+  if (!response.body) {
+    release();
+    return response;
+  }
+  const reader = response.body.getReader();
+  let stopped = false;
+  let bodyController;
+  const stop = (reason, errorBody) => {
+    if (stopped)
+      return;
+    stopped = true;
+    release();
+    signal.removeEventListener("abort", onAbort);
+    if (errorBody)
+      bodyController.error(reason);
+    reader.cancel(reason).catch(() => {}).finally(() => reader.releaseLock());
+  };
+  const onAbort = () => stop(signal.reason, true);
+  const body = new ReadableStream({
+    start(controller) {
+      bodyController = controller;
+      signal.addEventListener("abort", onAbort, { once: true });
+      if (signal.aborted)
+        onAbort();
+    },
+    async pull(controller) {
+      try {
+        const result = await untilAborted(reader.read(), signal);
+        if (stopped)
+          return;
+        if (result.done) {
+          stopped = true;
+          release();
+          signal.removeEventListener("abort", onAbort);
+          reader.releaseLock();
+          controller.close();
+        } else {
+          controller.enqueue(result.value);
+        }
+      } catch (error) {
+        stop(error, true);
+      }
+    },
+    cancel(reason) {
+      stop(reason, false);
+    }
+  }, { highWaterMark: 0 });
+  return preserveResponseMetadata(new Response(body, {
+    status: response.status,
+    statusText: response.statusText,
+    headers: response.headers
+  }), response);
+}
+async function safeFetch(input, init = {}, options = {}) {
+  init.signal?.throwIfAborted();
+  const timeoutMs = options.timeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS;
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+    throw new RangeError("safeFetch timeoutMs must be a positive finite number.");
+  }
+  const maxRedirects = options.maxRedirects ?? 0;
+  const urlOptions = {
+    allowHttp: options.allowHttp,
+    resolveDns: options.resolveDns ?? true,
+    allowPrivate: options.allowPrivate
+  };
+  const controller = new AbortController;
+  const forwardAbort = () => controller.abort(init.signal?.reason);
+  init.signal?.addEventListener("abort", forwardAbort, { once: true });
+  const timeout = setTimeout(() => controller.abort(new DOMException("The operation timed out.", "TimeoutError")), timeoutMs);
+  const release = () => {
+    clearTimeout(timeout);
+    init.signal?.removeEventListener("abort", forwardAbort);
+  };
+  try {
+    let current = await untilAborted(resolveSafeOutboundTarget(input, urlOptions), controller.signal);
+    let redirectCount = 0;
+    while (true) {
+      controller.signal.throwIfAborted();
+      const address = current.addresses[0];
+      const fetchUrl = address ? pinUrlToAddress(current.url, address).toString() : current.url.toString();
+      const headers = new Headers(init.headers);
+      if (address && !headers.has("host"))
+        headers.set("Host", current.url.host);
+      const fetchInit = {
+        ...init,
+        headers,
+        signal: controller.signal,
+        redirect: "manual"
+      };
+      if (address)
+        fetchInit.tls = { serverName: current.url.hostname };
+      const response = await untilAborted(fetch(fetchUrl, fetchInit), controller.signal);
+      if (response.status >= 300 && response.status < 400) {
+        const location = response.headers.get("location");
+        if (location && redirectCount < maxRedirects) {
+          if (response.body)
+            await untilAborted(response.body.cancel(), controller.signal);
+          current = await untilAborted(resolveSafeOutboundTarget(new URL(location, current.url).toString(), urlOptions), controller.signal);
+          redirectCount++;
+          continue;
+        }
+      }
+      return withBodyDeadline(response, controller.signal, release);
+    }
+  } catch (error) {
+    controller.abort(error);
+    release();
+    throw error;
+  }
+}
+
 // ../../src/core/security/safeUrl.ts
-import { lookup as dnsLookupImpl } from "dns/promises";
 import { BadRequestError } from "@getstrata/core/errors/http";
-var dnsLookup = dnsLookupImpl;
 var BLOCKED_HOSTNAMES = new Set([
   "localhost",
   "127.0.0.1",
@@ -1199,171 +1330,6 @@ function assertSafeOutboundUrl(rawUrl, options = {}) {
   }
   return parsed;
 }
-function isBlockedIpAddress(address) {
-  return isBlockedHostname(address.trim().toLowerCase());
-}
-function isLiteralIpHostname(hostname) {
-  return parseCanonicalDottedDecimal(hostname) !== null || expandIpv6(hostname) !== null;
-}
-function pinUrlToAddress(url, address) {
-  const pinned = new URL(url.toString());
-  const ipv6 = expandIpv6(address.replace(/^\[|\]$/gu, ""));
-  pinned.hostname = ipv6 ? `[${address.replace(/^\[|\]$/gu, "")}]` : address;
-  return pinned;
-}
-async function resolveSafeOutboundTarget(rawUrl, options = {}) {
-  const resolvedOptions = productionSafeOutboundOptions(options);
-  const parsed = assertSafeOutboundUrl(rawUrl, resolvedOptions);
-  if (resolvedOptions.resolveDns === false || resolvedOptions.allowPrivate) {
-    return { url: parsed, addresses: [] };
-  }
-  const hostname = parsed.hostname.trim().toLowerCase();
-  if (isLiteralIpHostname(hostname)) {
-    return { url: parsed, addresses: [hostname] };
-  }
-  let results;
-  try {
-    results = await dnsLookup(hostname, { all: true, verbatim: true });
-  } catch {
-    throw new BadRequestError("Webhook URL targets a blocked host.");
-  }
-  if (results.length === 0 || results.some((result) => isBlockedIpAddress(result.address))) {
-    throw new BadRequestError("Webhook URL targets a blocked host.");
-  }
-  return { url: parsed, addresses: results.map((result) => result.address) };
-}
-
-// ../../src/core/security/safeFetch.ts
-var DEFAULT_FETCH_TIMEOUT_MS = 1e4;
-function untilAborted(work, signal) {
-  signal.throwIfAborted();
-  return new Promise((resolve, reject) => {
-    const onAbort = () => reject(signal.reason);
-    signal.addEventListener("abort", onAbort, { once: true });
-    work.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
-  });
-}
-function preserveResponseMetadata(response, original) {
-  Object.defineProperties(response, {
-    url: { value: original.url },
-    redirected: { value: original.redirected },
-    type: { value: original.type }
-  });
-  const clone = response.clone.bind(response);
-  response.clone = () => preserveResponseMetadata(clone(), original);
-  return response;
-}
-function withBodyDeadline(response, signal, release) {
-  if (!response.body) {
-    release();
-    return response;
-  }
-  const reader = response.body.getReader();
-  let stopped = false;
-  let bodyController;
-  const stop = (reason, errorBody) => {
-    if (stopped)
-      return;
-    stopped = true;
-    release();
-    signal.removeEventListener("abort", onAbort);
-    if (errorBody)
-      bodyController.error(reason);
-    reader.cancel(reason).catch(() => {}).finally(() => reader.releaseLock());
-  };
-  const onAbort = () => stop(signal.reason, true);
-  const body = new ReadableStream({
-    start(controller) {
-      bodyController = controller;
-      signal.addEventListener("abort", onAbort, { once: true });
-      if (signal.aborted)
-        onAbort();
-    },
-    async pull(controller) {
-      try {
-        const result = await untilAborted(reader.read(), signal);
-        if (stopped)
-          return;
-        if (result.done) {
-          stopped = true;
-          release();
-          signal.removeEventListener("abort", onAbort);
-          reader.releaseLock();
-          controller.close();
-        } else {
-          controller.enqueue(result.value);
-        }
-      } catch (error) {
-        stop(error, true);
-      }
-    },
-    cancel(reason) {
-      stop(reason, false);
-    }
-  }, { highWaterMark: 0 });
-  return preserveResponseMetadata(new Response(body, {
-    status: response.status,
-    statusText: response.statusText,
-    headers: response.headers
-  }), response);
-}
-async function safeFetch(input, init = {}, options = {}) {
-  init.signal?.throwIfAborted();
-  const timeoutMs = options.timeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS;
-  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
-    throw new RangeError("safeFetch timeoutMs must be a positive finite number.");
-  }
-  const maxRedirects = options.maxRedirects ?? 0;
-  const urlOptions = {
-    allowHttp: options.allowHttp,
-    resolveDns: options.resolveDns ?? true,
-    allowPrivate: options.allowPrivate
-  };
-  const controller = new AbortController;
-  const forwardAbort = () => controller.abort(init.signal?.reason);
-  init.signal?.addEventListener("abort", forwardAbort, { once: true });
-  const timeout = setTimeout(() => controller.abort(new DOMException("The operation timed out.", "TimeoutError")), timeoutMs);
-  const release = () => {
-    clearTimeout(timeout);
-    init.signal?.removeEventListener("abort", forwardAbort);
-  };
-  try {
-    let current = await untilAborted(resolveSafeOutboundTarget(input, urlOptions), controller.signal);
-    let redirectCount = 0;
-    while (true) {
-      controller.signal.throwIfAborted();
-      const address = current.addresses[0];
-      const fetchUrl = address ? pinUrlToAddress(current.url, address).toString() : current.url.toString();
-      const headers = new Headers(init.headers);
-      if (address && !headers.has("host"))
-        headers.set("Host", current.url.host);
-      const fetchInit = {
-        ...init,
-        headers,
-        signal: controller.signal,
-        redirect: "manual"
-      };
-      if (address)
-        fetchInit.tls = { serverName: current.url.hostname };
-      const response = await untilAborted(fetch(fetchUrl, fetchInit), controller.signal);
-      if (response.status >= 300 && response.status < 400) {
-        const location = response.headers.get("location");
-        if (location && redirectCount < maxRedirects) {
-          if (response.body)
-            await untilAborted(response.body.cancel(), controller.signal);
-          current = await untilAborted(resolveSafeOutboundTarget(new URL(location, current.url).toString(), urlOptions), controller.signal);
-          redirectCount++;
-          continue;
-        }
-      }
-      return withBodyDeadline(response, controller.signal, release);
-    }
-  } catch (error) {
-    controller.abort(error);
-    release();
-    throw error;
-  }
-}
 
 // ../../src/core/audit/exportAuditLogs.ts
 init_databaseTenantContext();

package/dist/entries/auth/membershipMiddleware.js

@@ -1,118 +1,6 @@
 // @bun
-var __esm = (fn, res, err) => () => {
-  if (fn)
-    try {
-      res = fn(fn = 0);
-    } catch (e) {
-      err = [e];
-    }
-  if (err)
-    throw err[0];
-  return res;
-};
-
-// ../../src/core/runtime/asyncContextStore.ts
-import { AsyncLocalStorage } from "async_hooks";
-function createAsyncContextStore(key) {
-  const symbol = Symbol.for(key);
-  const globalRecord = globalThis;
-  const existing = globalRecord[symbol];
-  if (existing) {
-    return existing;
-  }
-  const store = new AsyncLocalStorage;
-  globalRecord[symbol] = store;
-  return store;
-}
-var init_asyncContextStore = () => {};
-
-// ../../src/core/auth/membershipContext.ts
-init_asyncContextStore();
-
-// ../../src/core/auth/accessControl.ts
-import { ForbiddenError } from "@getstrata/core/errors/http";
-
-// ../../src/core/auth/authContext.ts
-init_asyncContextStore();
-var authContext = createAsyncContextStore("@getstrata/authContext");
-var credentialSourceContext = createAsyncContextStore("@getstrata/credentialSource");
-function currentAuthUser() {
-  return authContext.getStore() ?? null;
-}
-
-// ../../src/core/auth/accessControl.ts
-var ROLE_RANK = {
-  member: 1,
-  admin: 2,
-  owner: 3
-};
-function isGlobalAdmin(user) {
-  return user?.role === "admin";
-}
-function hasMinimumOrgRole(role, minimum) {
-  if (!role) {
-    return false;
-  }
-  return ROLE_RANK[role] >= ROLE_RANK[minimum];
-}
-function requireAuthenticatedUser() {
-  const user = currentAuthUser();
-  if (!user) {
-    throw new ForbiddenError("Authentication required.");
-  }
-  return user;
-}
-function resolveUserId(user) {
-  const userId = typeof user.id === "number" ? user.id : Number(user.id);
-  if (!Number.isInteger(userId) || userId <= 0) {
-    throw new ForbiddenError("Invalid authenticated user.");
-  }
-  return userId;
-}
-
-// ../../src/core/auth/membershipContext.ts
-var membershipContext = createAsyncContextStore("@getstrata/membershipContext");
-var uninitializedMembershipLookup = {
-  async listForUser() {
-    return [];
-  },
-  async findMembership() {
-    return null;
-  },
-  async listForOrganization() {
-    return [];
-  },
-  async addMember() {
-    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
-  },
-  async removeMember() {
-    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
-  },
-  async updateMemberRole() {
-    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
-  }
-};
-var membershipRepository = uninitializedMembershipLookup;
-function resolveMembershipLookup() {
-  return membershipRepository;
-}
-async function runWithMembershipContext(callback) {
-  const user = currentAuthUser();
-  if (!user || isGlobalAdmin(user)) {
-    return await callback();
-  }
-  const memberships = await membershipRepository.listForUser(resolveUserId(user));
-  const context = {
-    organizationIds: memberships.map((membership) => membership.organization_id),
-    rolesByOrganizationId: new Map(memberships.map((membership) => [membership.organization_id, membership.role]))
-  };
-  return await membershipContext.run(context, callback);
-}
-function currentOrganizationIds() {
-  return membershipContext.getStore()?.organizationIds ?? [];
-}
-
 // ../../src/core/auth/membershipContextMiddleware.ts
+import { runWithMembershipContext } from "@getstrata/core/auth/membershipContext";
 function createMembershipContextMiddleware() {
   return async (_request, next) => {
     return await runWithMembershipContext(async () => await next());

package/dist/entries/auth/membershipScope.js

@@ -74,42 +74,6 @@ function resolveUserId(user) {
 // ../../src/core/auth/membershipContext.ts
 init_asyncContextStore();
 var membershipContext = createAsyncContextStore("@getstrata/membershipContext");
-var uninitializedMembershipLookup = {
-  async listForUser() {
-    return [];
-  },
-  async findMembership() {
-    return null;
-  },
-  async listForOrganization() {
-    return [];
-  },
-  async addMember() {
-    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
-  },
-  async removeMember() {
-    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
-  },
-  async updateMemberRole() {
-    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
-  }
-};
-var membershipRepository = uninitializedMembershipLookup;
-function resolveMembershipLookup() {
-  return membershipRepository;
-}
-async function runWithMembershipContext(callback) {
-  const user = currentAuthUser();
-  if (!user || isGlobalAdmin(user)) {
-    return await callback();
-  }
-  const memberships = await membershipRepository.listForUser(resolveUserId(user));
-  const context = {
-    organizationIds: memberships.map((membership) => membership.organization_id),
-    rolesByOrganizationId: new Map(memberships.map((membership) => [membership.organization_id, membership.role]))
-  };
-  return await membershipContext.run(context, callback);
-}
 function currentOrganizationIds() {
   return membershipContext.getStore()?.organizationIds ?? [];
 }

package/dist/entries/auth/membershipService.js

@@ -27,6 +27,7 @@ function createAsyncContextStore(key) {
 var init_asyncContextStore = () => {};
 
 // ../../src/core/auth/membershipService.ts
+import { resolveMembershipLookup } from "@getstrata/core/auth/membershipContext";
 import { ForbiddenError as ForbiddenError2 } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/accessControl.ts
@@ -70,49 +71,6 @@ function resolveUserId(user) {
   return userId;
 }
 
-// ../../src/core/auth/membershipContext.ts
-init_asyncContextStore();
-var membershipContext = createAsyncContextStore("@getstrata/membershipContext");
-var uninitializedMembershipLookup = {
-  async listForUser() {
-    return [];
-  },
-  async findMembership() {
-    return null;
-  },
-  async listForOrganization() {
-    return [];
-  },
-  async addMember() {
-    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
-  },
-  async removeMember() {
-    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
-  },
-  async updateMemberRole() {
-    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
-  }
-};
-var membershipRepository = uninitializedMembershipLookup;
-function resolveMembershipLookup() {
-  return membershipRepository;
-}
-async function runWithMembershipContext(callback) {
-  const user = currentAuthUser();
-  if (!user || isGlobalAdmin(user)) {
-    return await callback();
-  }
-  const memberships = await membershipRepository.listForUser(resolveUserId(user));
-  const context = {
-    organizationIds: memberships.map((membership) => membership.organization_id),
-    rolesByOrganizationId: new Map(memberships.map((membership) => [membership.organization_id, membership.role]))
-  };
-  return await membershipContext.run(context, callback);
-}
-function currentOrganizationIds() {
-  return membershipContext.getStore()?.organizationIds ?? [];
-}
-
 // ../../src/core/auth/resolveMembershipService.ts
 import { resolveApplicationDependencies } from "@getstrata/core/runtime/applicationRegistry";
 function resolveMembershipService() {