@grest-ts/http 0.0.48 → 0.0.49

package/dist/src/schema/cookieMiddleware.js

@@ -1,126 +0,0 @@
-import { GGContextKey } from "@grest-ts/context";
-import { IsAny, IsString, SERVER_ERROR } from "@grest-ts/schema";
-/**
- * Per-request set of context-key names the current route is permitted to write a cookie
- * for (declared via GGRpc.*(...).updatesCookie(key)). Populated by the server route
- * handler; read by setCookie() to reject undeclared cookie writes.
- */
-export const GG_COOKIE_WRITES = new GGContextKey("cookie:writes", IsAny);
-const SAFE_DEFAULTS = { httpOnly: true, secure: true, sameSite: "lax", path: "/" };
-/**
- * Per-request Set-Cookie writes scheduled via setCookie()/clearCookie(), keyed by the
- * context key's name. Flushed onto the response by the matching cookie() binding.
- */
-const GG_COOKIE_PENDING = new GGContextKey("cookie:pending", IsAny);
-// Reject anything that could break out of the Set-Cookie line / inject attributes.
-function assertCookieSafe(label, value) {
-    if (/[\x00-\x1f;]/.test(value)) {
-        throw new Error(`Cookie ${label} contains illegal characters (control chars or ';'): ${JSON.stringify(value)}`);
-    }
-}
-/**
- * Read a single named cookie out of a raw `Cookie` header value. Shared by the HTTP
- * binding (parseRequest) and the WebSocket binding (parseHandshake). A malformed
- * percent-encoding (e.g. "sid=%") must not crash — fall back to the raw value.
- */
-export function readCookie(rawCookieHeader, name) {
-    if (typeof rawCookieHeader !== "string")
-        return undefined;
-    for (const part of rawCookieHeader.split(";")) {
-        const eq = part.indexOf("=");
-        if (eq === -1)
-            continue;
-        if (part.slice(0, eq).trim() === name) {
-            const rawValue = part.slice(eq + 1).trim();
-            try {
-                return decodeURIComponent(rawValue);
-            }
-            catch {
-                return rawValue;
-            }
-        }
-    }
-    return undefined;
-}
-function serializeSetCookie(name, value, options) {
-    const o = { ...SAFE_DEFAULTS, ...options };
-    const secure = o.sameSite === "none" ? true : o.secure;
-    const sameSite = `${o.sameSite.charAt(0).toUpperCase()}${o.sameSite.slice(1)}`;
-    const attrs = `; Path=${o.path}${o.domain ? `; Domain=${o.domain}` : ""}; SameSite=${sameSite}${secure ? "; Secure" : ""}${o.httpOnly ? "; HttpOnly" : ""}`;
-    return value
-        ? `${name}=${encodeURIComponent(value)}${o.maxAgeSec !== undefined ? `; Max-Age=${Math.trunc(o.maxAgeSec)}` : ""}${attrs}`
-        : `${name}=; Max-Age=0${attrs}`;
-}
-/**
- * Bind a context key to a cookie, read-only on the wire. Reads ONLY the named cookie —
- * never a header — from the incoming HTTP Cookie (parseRequest) or the real WS upgrade
- * Cookie (parseHandshake), into key.get(). The cookie's wire name defaults to the key's
- * name. To write the cookie, call setCookie(key, …) from a route that declared
- * .updatesCookie(key); the matching binding flushes it as Set-Cookie (HTTP only — a
- * WebSocket has no response to set a cookie on).
- */
-export function cookie(key, opts) {
-    const cookieName = opts?.name ?? key.name;
-    assertCookieSafe("name", cookieName);
-    return {
-        headers: {},
-        responseHeaders: {},
-        cookieParams: { [cookieName]: opts?.schema ?? IsString.orUndefined },
-        parseRequest(req) {
-            const raw = req.headers?.["cookie"];
-            const value = readCookie(typeof raw === "string" ? raw : undefined, cookieName);
-            if (value !== undefined)
-                key.set(value);
-        },
-        updateResponse(res) {
-            const pending = GG_COOKIE_PENDING.get()?.get(key.name);
-            if (pending === undefined)
-                return;
-            const line = serializeSetCookie(cookieName, pending.value, pending.options);
-            const existing = res.headers["set-cookie"];
-            const arr = existing === undefined ? [] : Array.isArray(existing) ? existing : [existing];
-            arr.push(line);
-            res.headers["set-cookie"] = arr;
-        },
-        parseHandshake(ctx) {
-            const value = readCookie(ctx.upgradeHeaders?.["cookie"], cookieName);
-            if (value !== undefined)
-                key.set(value);
-        },
-    };
-}
-/**
- * Schedule a Set-Cookie on the response (HTTP only). The value never touches key.get() —
- * inbound reads stay set-once. The route must declare .updatesCookie(key); an undeclared
- * call is invalid usage and throws SERVER_ERROR. The matching cookie() binding serializes
- * the pending write with these options (HttpOnly/Secure/SameSite/Path/Domain/Max-Age).
- */
-export function setCookie(key, value, options) {
-    if (options) {
-        if (options.maxAgeSec !== undefined && !Number.isFinite(options.maxAgeSec)) {
-            throw new Error(`setCookie("${key.name}"): maxAgeSec must be a finite number, got ${options.maxAgeSec}.`);
-        }
-        if (options.path !== undefined)
-            assertCookieSafe("path", options.path);
-        if (options.domain !== undefined)
-            assertCookieSafe("domain", options.domain);
-    }
-    if (!GG_COOKIE_WRITES.get()?.has(key.name)) {
-        throw new SERVER_ERROR({ debugMessage: `setCookie("${key.name}") was called, but this route did not declare .updatesCookie(<key>). Only routes that declare it may set or clear the cookie.` });
-    }
-    let pending = GG_COOKIE_PENDING.get();
-    if (pending === undefined) {
-        pending = new Map();
-        GG_COOKIE_PENDING.set(pending);
-    }
-    pending.set(key.name, { value, options });
-}
-/**
- * Clear the cookie — schedules a Set-Cookie with Max-Age=0. Pass path/domain to match a
- * scoped cookie (deletion only works when path+domain match what was set). Equivalent to
- * setCookie(key, undefined, options), but reads clearer at logout-style call sites.
- */
-export function clearCookie(key, options) {
-    setCookie(key, undefined, options);
-}
-//# sourceMappingURL=cookieMiddleware.js.map

package/dist/src/schema/cookieMiddleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cookieMiddleware.js","sourceRoot":"","sources":["../../../src/schema/cookieMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAC,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAgB,MAAM,kBAAkB,CAAA;AAG7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,YAAY,CAAc,eAAe,EAAE,KAAyC,CAAC,CAAA;AAezH,MAAM,aAAa,GAAG,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAU,CAAA;AAOzF;;;GAGG;AACH,MAAM,iBAAiB,GAAG,IAAI,YAAY,CAA6B,gBAAgB,EAAE,KAAwD,CAAC,CAAA;AAElJ,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IAClD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,wDAAwD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACnH,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,eAAmC,EAAE,IAAY;IACxE,IAAI,OAAO,eAAe,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzD,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAQ;QACvB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAC1C,IAAI,CAAC;gBACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YACvC,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,QAAQ,CAAA;YACnB,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAA;AACpB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAyB,EAAE,OAAuB;IACxF,MAAM,CAAC,GAAG,EAAC,GAAG,aAAa,EAAE,GAAG,OAAO,EAAC,CAAA;IACxC,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC3J,OAAO,KAAK;QACR,CAAC,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE;QAC1H,CAAC,CAAC,GAAG,IAAI,eAAe,KAAK,EAAE,CAAA;AACvC,CAAC;AAqBD;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,GAAqC,EAAE,IAA6D;IACvH,MAAM,UAAU,GAAG,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,CAAA;IACzC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACpC,OAAO;QACH,OAAO,EAAE,EAAE;QACX,eAAe,EAAE,EAAE;QACnB,YAAY,EAAE,EAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAC;QAClE,YAAY,CAAC,GAAkB;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAA;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;YAC/E,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;QACD,cAAc,CAAC,GAAmB;YAC9B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACtD,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAM;YACjC,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;YAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;YAC1C,MAAM,GAAG,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;YACzF,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACd,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,GAAG,CAAA;QACnC,CAAC;QACD,cAAc,CAAC,GAA2B;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAA;YACpE,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;KACJ,CAAA;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAqC,EAAE,KAAyB,EAAE,OAAuB;IAC/G,IAAI,OAAO,EAAE,CAAC;QACV,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,IAAI,8CAA8C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAA;QAC7G,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QACtE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,YAAY,CAAC,EAAC,YAAY,EAAE,cAAc,GAAG,CAAC,IAAI,+HAA+H,EAAC,CAAC,CAAA;IACjM,CAAC;IACD,IAAI,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,CAAA;IACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,GAAG,IAAI,GAAG,EAAE,CAAA;QACnB,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAC,KAAK,EAAE,OAAO,EAAC,CAAC,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAqC,EAAE,OAAuB;IACtF,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC"}

package/dist/src/schema/headerBinding.d.ts

@@ -1,35 +0,0 @@
-import { GGContextKey } from "@grest-ts/context";
-import { type GGSchema } from "@grest-ts/schema";
-import type { GGHttpTransportMiddleware } from "./GGHttpSchema";
-/**
- * Local structural copy of GGWebSocketHandshakeContext (defined in @grest-ts/websocket).
- * http must not import websocket; header()'s WS half is typed against this shape and
- * matches GGWebSocketMiddleware structurally at the webSocketSchema.use() call site.
- * `headers` is the in-band handshake bag (client-set, spoofable — same trust level as an
- * HTTP request header).
- */
-interface WsHandshakeContextLike {
-    headers: Record<string, string>;
-    upgradeHeaders?: Record<string, string>;
-    queryArgs: Record<string, string>;
-}
-export interface GGHeaderBinding extends GGHttpTransportMiddleware {
-    parseHandshake(ctx: WsHandshakeContextLike): void;
-    updateHandshake(ctx: WsHandshakeContextLike): void;
-}
-/**
- * Bind a context key to a single named header, on both transports. Reads ONLY that header
- * — never a cookie — from the HTTP request (parseRequest) or the in-band WS handshake
- * (parseHandshake) into key.get(), and writes it from key.get() on the client (HTTP
- * updateRequest / WS updateHandshake). `scheme: "bearer"` strips/adds the `Bearer ` prefix;
- * default is verbatim. The wire name defaults to the key's name (lowercased — HTTP headers
- * are case-insensitive). Client-attachable, so it is the service-to-service variant (a
- * Node client can carry it; a browser cookie cannot).
- */
-export declare function header(key: GGContextKey<string | undefined>, opts?: {
-    name?: string;
-    scheme?: "bearer";
-    schema?: GGSchema<string | undefined>;
-}): GGHeaderBinding;
-export {};
-//# sourceMappingURL=headerBinding.d.ts.map

package/dist/src/schema/headerBinding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"headerBinding.d.ts","sourceRoot":"","sources":["../../../src/schema/headerBinding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAC,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAW,KAAK,QAAQ,EAAC,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAgB,yBAAyB,EAAC,MAAM,gBAAgB,CAAA;AAE5E;;;;;;GAMG;AACH,UAAU,sBAAsB;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACvC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,eAAgB,SAAQ,yBAAyB;IAC9D,cAAc,CAAC,GAAG,EAAE,sBAAsB,GAAG,IAAI,CAAA;IACjD,eAAe,CAAC,GAAG,EAAE,sBAAsB,GAAG,IAAI,CAAA;CACrD;AAID;;;;;;;;GAQG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,IAAI,CAAC,EAAE;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CAAC,GAAG,eAAe,CA+B/J"}

package/dist/src/schema/headerBinding.js

@@ -1,49 +0,0 @@
-import { IsString } from "@grest-ts/schema";
-const BEARER = "Bearer ";
-/**
- * Bind a context key to a single named header, on both transports. Reads ONLY that header
- * — never a cookie — from the HTTP request (parseRequest) or the in-band WS handshake
- * (parseHandshake) into key.get(), and writes it from key.get() on the client (HTTP
- * updateRequest / WS updateHandshake). `scheme: "bearer"` strips/adds the `Bearer ` prefix;
- * default is verbatim. The wire name defaults to the key's name (lowercased — HTTP headers
- * are case-insensitive). Client-attachable, so it is the service-to-service variant (a
- * Node client can carry it; a browser cookie cannot).
- */
-export function header(key, opts) {
-    const name = (opts?.name ?? key.name).toLowerCase();
-    const bearer = opts?.scheme === "bearer";
-    const unwrap = (raw) => {
-        if (raw === undefined)
-            return undefined;
-        return bearer && raw.startsWith(BEARER) ? raw.slice(BEARER.length) : raw;
-    };
-    const wrap = (value) => bearer ? `${BEARER}${value}` : value;
-    return {
-        headers: { [name]: opts?.schema ?? IsString.orUndefined },
-        responseHeaders: {},
-        parseRequest(req) {
-            const raw = req.headers?.[name];
-            const value = unwrap(typeof raw === "string" ? raw : Array.isArray(raw) ? raw[0] : undefined);
-            if (value !== undefined)
-                key.set(value);
-        },
-        updateRequest(req) {
-            const value = key.get();
-            if (value === undefined)
-                return;
-            req.headers = req.headers ?? {};
-            req.headers[name] = wrap(value);
-        },
-        parseHandshake(ctx) {
-            const value = unwrap(ctx.headers?.[name]);
-            if (value !== undefined)
-                key.set(value);
-        },
-        updateHandshake(ctx) {
-            const value = key.get();
-            if (value !== undefined)
-                ctx.headers[name] = wrap(value);
-        },
-    };
-}
-//# sourceMappingURL=headerBinding.js.map

package/dist/src/schema/headerBinding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"headerBinding.js","sourceRoot":"","sources":["../../../src/schema/headerBinding.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,QAAQ,EAAgB,MAAM,kBAAkB,CAAA;AAqBxD,MAAM,MAAM,GAAG,SAAS,CAAA;AAExB;;;;;;;;GAQG;AACH,MAAM,UAAU,MAAM,CAAC,GAAqC,EAAE,IAAgF;IAC1I,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;IACnD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAA;IACxC,MAAM,MAAM,GAAG,CAAC,GAAuB,EAAsB,EAAE;QAC3D,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACvC,OAAO,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAC5E,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;IAC5E,OAAO;QACH,OAAO,EAAE,EAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAC;QACvD,eAAe,EAAE,EAAE;QACnB,YAAY,CAAC,GAAkB;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAA;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAC7F,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;QACD,aAAa,CAAC,GAAkB;YAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,CAAA;YACvB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAM;YAC/B,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAA;YAC/B,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QACnC,CAAC;QACD,cAAc,CAAC,GAA2B;YACtC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;YACzC,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;QACD,eAAe,CAAC,GAA2B;YACvC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,CAAA;YACvB,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5D,CAAC;KACJ,CAAA;AACL,CAAC"}

package/dist/src/server/GG_PERMISSIONS.d.ts

@@ -1,15 +0,0 @@
-import { GGContextKey } from "@grest-ts/context";
-import { GGPermissionChecker } from "@grest-ts/schema";
-/**
- * Per-request permission context populated by the gate when a scope resolver
- * is wired via GGHttp.usePermissions(...). Handler code can read it to make
- * sub-decisions inside an authorized method:
- *
- *     const perm = GG_PERMISSIONS.get();
- *     if (perm.has(AppPermission.Admin)) { ... }
- *
- * The checker uses the same satisfies() the framework gate uses — no parallel
- * implementations.
- */
-export declare const GG_PERMISSIONS: GGContextKey<GGPermissionChecker>;
-//# sourceMappingURL=GG_PERMISSIONS.d.ts.map

package/dist/src/server/GG_PERMISSIONS.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"GG_PERMISSIONS.d.ts","sourceRoot":"","sources":["../../../src/server/GG_PERMISSIONS.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAC,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAC,mBAAmB,EAAQ,MAAM,kBAAkB,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,mCAAqE,CAAC"}

package/dist/src/server/GG_PERMISSIONS.js

@@ -1,15 +0,0 @@
-import { GGContextKey } from "@grest-ts/context";
-import { IsAny } from "@grest-ts/schema";
-/**
- * Per-request permission context populated by the gate when a scope resolver
- * is wired via GGHttp.usePermissions(...). Handler code can read it to make
- * sub-decisions inside an authorized method:
- *
- *     const perm = GG_PERMISSIONS.get();
- *     if (perm.has(AppPermission.Admin)) { ... }
- *
- * The checker uses the same satisfies() the framework gate uses — no parallel
- * implementations.
- */
-export const GG_PERMISSIONS = new GGContextKey("permissions", IsAny);
-//# sourceMappingURL=GG_PERMISSIONS.js.map

package/dist/src/server/GG_PERMISSIONS.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"GG_PERMISSIONS.js","sourceRoot":"","sources":["../../../src/server/GG_PERMISSIONS.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAC,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAsB,KAAK,EAAC,MAAM,kBAAkB,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,YAAY,CAAsB,aAAa,EAAE,KAAY,CAAC,CAAC"}

package/src/schema/cookieMiddleware.ts

@@ -1,164 +0,0 @@
-import {GGContextKey} from "@grest-ts/context"
-import {IsAny, IsString, SERVER_ERROR, type GGSchema} from "@grest-ts/schema"
-import type {GGHttpRequest, GGHttpResponse, GGHttpTransportMiddleware} from "./GGHttpSchema"
-
-/**
- * Per-request set of context-key names the current route is permitted to write a cookie
- * for (declared via GGRpc.*(...).updatesCookie(key)). Populated by the server route
- * handler; read by setCookie() to reject undeclared cookie writes.
- */
-export const GG_COOKIE_WRITES = new GGContextKey<Set<string>>("cookie:writes", IsAny as unknown as GGSchema<Set<string>>)
-
-/**
- * Cookie write rules — passed to setCookie(key, value, options). They live at the write
- * call site (the handler that mints the cookie), never in the shared API.
- */
-export interface CookieOptions {
-    httpOnly?: boolean
-    secure?: boolean
-    sameSite?: "lax" | "strict" | "none"
-    path?: string
-    domain?: string
-    maxAgeSec?: number
-}
-
-const SAFE_DEFAULTS = {httpOnly: true, secure: true, sameSite: "lax", path: "/"} as const
-
-interface PendingCookie {
-    value: string | undefined
-    options?: CookieOptions
-}
-
-/**
- * Per-request Set-Cookie writes scheduled via setCookie()/clearCookie(), keyed by the
- * context key's name. Flushed onto the response by the matching cookie() binding.
- */
-const GG_COOKIE_PENDING = new GGContextKey<Map<string, PendingCookie>>("cookie:pending", IsAny as unknown as GGSchema<Map<string, PendingCookie>>)
-
-// Reject anything that could break out of the Set-Cookie line / inject attributes.
-function assertCookieSafe(label: string, value: string): void {
-    if (/[\x00-\x1f;]/.test(value)) {
-        throw new Error(`Cookie ${label} contains illegal characters (control chars or ';'): ${JSON.stringify(value)}`)
-    }
-}
-
-/**
- * Read a single named cookie out of a raw `Cookie` header value. Shared by the HTTP
- * binding (parseRequest) and the WebSocket binding (parseHandshake). A malformed
- * percent-encoding (e.g. "sid=%") must not crash — fall back to the raw value.
- */
-export function readCookie(rawCookieHeader: string | undefined, name: string): string | undefined {
-    if (typeof rawCookieHeader !== "string") return undefined
-    for (const part of rawCookieHeader.split(";")) {
-        const eq = part.indexOf("=")
-        if (eq === -1) continue
-        if (part.slice(0, eq).trim() === name) {
-            const rawValue = part.slice(eq + 1).trim()
-            try {
-                return decodeURIComponent(rawValue)
-            } catch {
-                return rawValue
-            }
-        }
-    }
-    return undefined
-}
-
-function serializeSetCookie(name: string, value: string | undefined, options?: CookieOptions): string {
-    const o = {...SAFE_DEFAULTS, ...options}
-    const secure = o.sameSite === "none" ? true : o.secure
-    const sameSite = `${o.sameSite.charAt(0).toUpperCase()}${o.sameSite.slice(1)}`
-    const attrs = `; Path=${o.path}${o.domain ? `; Domain=${o.domain}` : ""}; SameSite=${sameSite}${secure ? "; Secure" : ""}${o.httpOnly ? "; HttpOnly" : ""}`
-    return value
-        ? `${name}=${encodeURIComponent(value)}${o.maxAgeSec !== undefined ? `; Max-Age=${Math.trunc(o.maxAgeSec)}` : ""}${attrs}`
-        : `${name}=; Max-Age=0${attrs}`
-}
-
-/**
- * Local structural copy of GGWebSocketHandshakeContext (defined in @grest-ts/websocket).
- * http must not import websocket; cookie()'s WS half is typed against this shape and
- * matches GGWebSocketMiddleware structurally at the webSocketSchema.use() call site.
- * `upgradeHeaders` is the real browser upgrade request (carries httpOnly cookies); the
- * in-band `headers` map cannot spoof it.
- */
-interface WsHandshakeContextLike {
-    headers: Record<string, string>
-    upgradeHeaders?: Record<string, string>
-    queryArgs: Record<string, string>
-}
-
-export interface GGCookieBinding extends GGHttpTransportMiddleware {
-    /** The cookie this binding reads, mapped to its value schema — emitted as an `in: cookie` doc param. */
-    readonly cookieParams: Record<string, GGSchema<string | undefined>>
-    parseHandshake(ctx: WsHandshakeContextLike): void
-}
-
-/**
- * Bind a context key to a cookie, read-only on the wire. Reads ONLY the named cookie —
- * never a header — from the incoming HTTP Cookie (parseRequest) or the real WS upgrade
- * Cookie (parseHandshake), into key.get(). The cookie's wire name defaults to the key's
- * name. To write the cookie, call setCookie(key, …) from a route that declared
- * .updatesCookie(key); the matching binding flushes it as Set-Cookie (HTTP only — a
- * WebSocket has no response to set a cookie on).
- */
-export function cookie(key: GGContextKey<string | undefined>, opts?: {name?: string; schema?: GGSchema<string | undefined>}): GGCookieBinding {
-    const cookieName = opts?.name ?? key.name
-    assertCookieSafe("name", cookieName)
-    return {
-        headers: {},
-        responseHeaders: {},
-        cookieParams: {[cookieName]: opts?.schema ?? IsString.orUndefined},
-        parseRequest(req: GGHttpRequest): void {
-            const raw = req.headers?.["cookie"]
-            const value = readCookie(typeof raw === "string" ? raw : undefined, cookieName)
-            if (value !== undefined) key.set(value)
-        },
-        updateResponse(res: GGHttpResponse): void {
-            const pending = GG_COOKIE_PENDING.get()?.get(key.name)
-            if (pending === undefined) return
-            const line = serializeSetCookie(cookieName, pending.value, pending.options)
-            const existing = res.headers["set-cookie"]
-            const arr = existing === undefined ? [] : Array.isArray(existing) ? existing : [existing]
-            arr.push(line)
-            res.headers["set-cookie"] = arr
-        },
-        parseHandshake(ctx: WsHandshakeContextLike): void {
-            const value = readCookie(ctx.upgradeHeaders?.["cookie"], cookieName)
-            if (value !== undefined) key.set(value)
-        },
-    }
-}
-
-/**
- * Schedule a Set-Cookie on the response (HTTP only). The value never touches key.get() —
- * inbound reads stay set-once. The route must declare .updatesCookie(key); an undeclared
- * call is invalid usage and throws SERVER_ERROR. The matching cookie() binding serializes
- * the pending write with these options (HttpOnly/Secure/SameSite/Path/Domain/Max-Age).
- */
-export function setCookie(key: GGContextKey<string | undefined>, value: string | undefined, options?: CookieOptions): void {
-    if (options) {
-        if (options.maxAgeSec !== undefined && !Number.isFinite(options.maxAgeSec)) {
-            throw new Error(`setCookie("${key.name}"): maxAgeSec must be a finite number, got ${options.maxAgeSec}.`)
-        }
-        if (options.path !== undefined) assertCookieSafe("path", options.path)
-        if (options.domain !== undefined) assertCookieSafe("domain", options.domain)
-    }
-    if (!GG_COOKIE_WRITES.get()?.has(key.name)) {
-        throw new SERVER_ERROR({debugMessage: `setCookie("${key.name}") was called, but this route did not declare .updatesCookie(<key>). Only routes that declare it may set or clear the cookie.`})
-    }
-    let pending = GG_COOKIE_PENDING.get()
-    if (pending === undefined) {
-        pending = new Map()
-        GG_COOKIE_PENDING.set(pending)
-    }
-    pending.set(key.name, {value, options})
-}
-
-/**
- * Clear the cookie — schedules a Set-Cookie with Max-Age=0. Pass path/domain to match a
- * scoped cookie (deletion only works when path+domain match what was set). Equivalent to
- * setCookie(key, undefined, options), but reads clearer at logout-style call sites.
- */
-export function clearCookie(key: GGContextKey<string | undefined>, options?: CookieOptions): void {
-    setCookie(key, undefined, options)
-}

package/src/schema/headerBinding.ts

@@ -1,65 +0,0 @@
-import {GGContextKey} from "@grest-ts/context"
-import {IsString, type GGSchema} from "@grest-ts/schema"
-import type {GGHttpRequest, GGHttpTransportMiddleware} from "./GGHttpSchema"
-
-/**
- * Local structural copy of GGWebSocketHandshakeContext (defined in @grest-ts/websocket).
- * http must not import websocket; header()'s WS half is typed against this shape and
- * matches GGWebSocketMiddleware structurally at the webSocketSchema.use() call site.
- * `headers` is the in-band handshake bag (client-set, spoofable — same trust level as an
- * HTTP request header).
- */
-interface WsHandshakeContextLike {
-    headers: Record<string, string>
-    upgradeHeaders?: Record<string, string>
-    queryArgs: Record<string, string>
-}
-
-export interface GGHeaderBinding extends GGHttpTransportMiddleware {
-    parseHandshake(ctx: WsHandshakeContextLike): void
-    updateHandshake(ctx: WsHandshakeContextLike): void
-}
-
-const BEARER = "Bearer "
-
-/**
- * Bind a context key to a single named header, on both transports. Reads ONLY that header
- * — never a cookie — from the HTTP request (parseRequest) or the in-band WS handshake
- * (parseHandshake) into key.get(), and writes it from key.get() on the client (HTTP
- * updateRequest / WS updateHandshake). `scheme: "bearer"` strips/adds the `Bearer ` prefix;
- * default is verbatim. The wire name defaults to the key's name (lowercased — HTTP headers
- * are case-insensitive). Client-attachable, so it is the service-to-service variant (a
- * Node client can carry it; a browser cookie cannot).
- */
-export function header(key: GGContextKey<string | undefined>, opts?: {name?: string; scheme?: "bearer"; schema?: GGSchema<string | undefined>}): GGHeaderBinding {
-    const name = (opts?.name ?? key.name).toLowerCase()
-    const bearer = opts?.scheme === "bearer"
-    const unwrap = (raw: string | undefined): string | undefined => {
-        if (raw === undefined) return undefined
-        return bearer && raw.startsWith(BEARER) ? raw.slice(BEARER.length) : raw
-    }
-    const wrap = (value: string): string => bearer ? `${BEARER}${value}` : value
-    return {
-        headers: {[name]: opts?.schema ?? IsString.orUndefined},
-        responseHeaders: {},
-        parseRequest(req: GGHttpRequest): void {
-            const raw = req.headers?.[name]
-            const value = unwrap(typeof raw === "string" ? raw : Array.isArray(raw) ? raw[0] : undefined)
-            if (value !== undefined) key.set(value)
-        },
-        updateRequest(req: GGHttpRequest): void {
-            const value = key.get()
-            if (value === undefined) return
-            req.headers = req.headers ?? {}
-            req.headers[name] = wrap(value)
-        },
-        parseHandshake(ctx: WsHandshakeContextLike): void {
-            const value = unwrap(ctx.headers?.[name])
-            if (value !== undefined) key.set(value)
-        },
-        updateHandshake(ctx: WsHandshakeContextLike): void {
-            const value = key.get()
-            if (value !== undefined) ctx.headers[name] = wrap(value)
-        },
-    }
-}

package/src/server/GG_PERMISSIONS.ts

@@ -1,15 +0,0 @@
-import {GGContextKey} from "@grest-ts/context";
-import {GGPermissionChecker, IsAny} from "@grest-ts/schema";
-
-/**
- * Per-request permission context populated by the gate when a scope resolver
- * is wired via GGHttp.usePermissions(...). Handler code can read it to make
- * sub-decisions inside an authorized method:
- *
- *     const perm = GG_PERMISSIONS.get();
- *     if (perm.has(AppPermission.Admin)) { ... }
- *
- * The checker uses the same satisfies() the framework gate uses — no parallel
- * implementations.
- */
-export const GG_PERMISSIONS = new GGContextKey<GGPermissionChecker>("permissions", IsAny as any);