@heavybit/shared-lib 1.1.0 → 1.2.0

package/dist/cjs/express/index.js

@@ -17,4 +17,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./auth.js"), exports);
 __exportStar(require("./middleware.js"), exports);
 __exportStar(require("./health.js"), exports);
+__exportStar(require("./security.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/express/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/express/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,kDAAgC;AAChC,8CAA4B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/express/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,kDAAgC;AAChC,8CAA4B;AAC5B,gDAA8B"}

package/dist/cjs/express/security.js

@@ -0,0 +1,18 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.securityHeaders = securityHeaders;
+exports.corsMiddleware = corsMiddleware;
+const cors_1 = __importDefault(require("cors"));
+const helmet_1 = __importDefault(require("helmet"));
+/** Standard security headers (helmet). Pass options only to relax a header a service genuinely needs. */
+function securityHeaders(options) {
+    return (0, helmet_1.default)(options);
+}
+/** CORS for browser-facing services. An empty origin list disables CORS (no `Access-Control-*` headers). */
+function corsMiddleware(origins, options = {}) {
+    return (0, cors_1.default)({ ...options, origin: origins.length ? origins : false });
+}
+//# sourceMappingURL=security.js.map

package/dist/cjs/express/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/express/security.ts"],"names":[],"mappings":";;;;;AAOA,0CAEC;AAGD,wCAEC;AAdD,gDAA8C;AAC9C,oDAAoD;AAKpD,yGAAyG;AACzG,SAAgB,eAAe,CAAC,OAAuB;IACrD,OAAO,IAAA,gBAAM,EAAC,OAAO,CAA8B,CAAC;AACtD,CAAC;AAED,4GAA4G;AAC5G,SAAgB,cAAc,CAAC,OAAiB,EAAE,UAAuC,EAAE;IACzF,OAAO,IAAA,cAAI,EAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAA8B,CAAC;AACrG,CAAC"}

package/dist/cjs/metrics/index.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectDefaultMetrics = exports.Summary = exports.Registry = exports.Histogram = exports.Gauge = exports.Counter = void 0;
+/**
+ * Prometheus metrics. Re-exports prom-client so every service runs one version of it;
+ * services keep their own metric definitions behind a narrow interface.
+ */
+var prom_client_1 = require("prom-client");
+Object.defineProperty(exports, "Counter", { enumerable: true, get: function () { return prom_client_1.Counter; } });
+Object.defineProperty(exports, "Gauge", { enumerable: true, get: function () { return prom_client_1.Gauge; } });
+Object.defineProperty(exports, "Histogram", { enumerable: true, get: function () { return prom_client_1.Histogram; } });
+Object.defineProperty(exports, "Registry", { enumerable: true, get: function () { return prom_client_1.Registry; } });
+Object.defineProperty(exports, "Summary", { enumerable: true, get: function () { return prom_client_1.Summary; } });
+Object.defineProperty(exports, "collectDefaultMetrics", { enumerable: true, get: function () { return prom_client_1.collectDefaultMetrics; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/metrics/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/metrics/index.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,2CAAkG;AAAzF,sGAAA,OAAO,OAAA;AAAE,oGAAA,KAAK,OAAA;AAAE,wGAAA,SAAS,OAAA;AAAE,uGAAA,QAAQ,OAAA;AAAE,sGAAA,OAAO,OAAA;AAAE,oHAAA,qBAAqB,OAAA"}

package/dist/esm/express/index.js

@@ -1,4 +1,5 @@
 export * from './auth.js';
 export * from './middleware.js';
 export * from './health.js';
+export * from './security.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/express/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/express/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/express/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC"}

package/dist/esm/express/security.js

@@ -0,0 +1,11 @@
+import cors from 'cors';
+import helmet from 'helmet';
+/** Standard security headers (helmet). Pass options only to relax a header a service genuinely needs. */
+export function securityHeaders(options) {
+    return helmet(options);
+}
+/** CORS for browser-facing services. An empty origin list disables CORS (no `Access-Control-*` headers). */
+export function corsMiddleware(origins, options = {}) {
+    return cors({ ...options, origin: origins.length ? origins : false });
+}
+//# sourceMappingURL=security.js.map

package/dist/esm/express/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/express/security.ts"],"names":[],"mappings":"AAAA,OAAO,IAA0B,MAAM,MAAM,CAAC;AAC9C,OAAO,MAA8B,MAAM,QAAQ,CAAC;AAKpD,yGAAyG;AACzG,MAAM,UAAU,eAAe,CAAC,OAAuB;IACrD,OAAO,MAAM,CAAC,OAAO,CAA8B,CAAC;AACtD,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,cAAc,CAAC,OAAiB,EAAE,UAAuC,EAAE;IACzF,OAAO,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAA8B,CAAC;AACrG,CAAC"}

package/dist/esm/metrics/index.js

@@ -0,0 +1,6 @@
+/**
+ * Prometheus metrics. Re-exports prom-client so every service runs one version of it;
+ * services keep their own metric definitions behind a narrow interface.
+ */
+export { Counter, Gauge, Histogram, Registry, Summary, collectDefaultMetrics } from 'prom-client';
+//# sourceMappingURL=index.js.map

package/dist/esm/metrics/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/metrics/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC"}

package/dist/types/express/index.d.ts

@@ -1,4 +1,5 @@
 export * from './auth.js';
 export * from './middleware.js';
 export * from './health.js';
+export * from './security.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/express/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/express/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/express/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC"}

package/dist/types/express/security.d.ts

@@ -0,0 +1,9 @@
+import { type CorsOptions } from 'cors';
+import { type HelmetOptions } from 'helmet';
+import type { RequestHandler } from 'express';
+export type { CorsOptions, HelmetOptions };
+/** Standard security headers (helmet). Pass options only to relax a header a service genuinely needs. */
+export declare function securityHeaders(options?: HelmetOptions): RequestHandler;
+/** CORS for browser-facing services. An empty origin list disables CORS (no `Access-Control-*` headers). */
+export declare function corsMiddleware(origins: string[], options?: Omit<CorsOptions, 'origin'>): RequestHandler;
+//# sourceMappingURL=security.d.ts.map

package/dist/types/express/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/express/security.ts"],"names":[],"mappings":"AAAA,OAAa,EAAE,KAAK,WAAW,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAe,EAAE,KAAK,aAAa,EAAE,MAAM,QAAQ,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;AAE3C,yGAAyG;AACzG,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,cAAc,CAEvE;AAED,4GAA4G;AAC5G,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAM,GAAG,cAAc,CAE3G"}

package/dist/types/metrics/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Prometheus metrics. Re-exports prom-client so every service runs one version of it;
+ * services keep their own metric definitions behind a narrow interface.
+ */
+export { Counter, Gauge, Histogram, Registry, Summary, collectDefaultMetrics } from 'prom-client';
+export type { CounterConfiguration, GaugeConfiguration, HistogramConfiguration, SummaryConfiguration } from 'prom-client';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/metrics/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/metrics/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAClG,YAAY,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heavybit/shared-lib",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "App-agnostic building blocks for Express/TypeScript microservices: gateway identity, access scoping, RabbitMQ events/commands/RPC with retries and DLQs, outbox, cache-aside, rate limiting, sockets, signing, logging and config.",
   "license": "MIT",
   "type": "module",
@@ -76,6 +76,11 @@
       "import": "./dist/esm/testing/index.js",
       "require": "./dist/cjs/testing/index.js"
     },
+    "./metrics": {
+      "types": "./dist/types/metrics/index.d.ts",
+      "import": "./dist/esm/metrics/index.js",
+      "require": "./dist/cjs/metrics/index.js"
+    },
     "./package.json": "./package.json"
   },
   "typesVersions": {
@@ -112,6 +117,9 @@
       ],
       "testing": [
         "dist/types/testing/index.d.ts"
+      ],
+      "metrics": [
+        "dist/types/metrics/index.d.ts"
       ]
     }
   },
@@ -124,11 +132,20 @@
   },
   "dependencies": {
     "@types/amqplib": "^0.10.7",
+    "@types/cors": "^2.8.17",
     "amqplib": "^0.10.8",
     "argon2": "^0.44.0",
     "bcryptjs": "^3.0.2",
+    "cors": "^2.8.5",
     "google-libphonenumber": "^3.2.40",
+    "helmet": "^8.1.0",
+    "ioredis": "^5.4.2",
     "jsonwebtoken": "^9.0.2",
+    "knex": "^3.1.0",
+    "mysql2": "^3.11.4",
+    "prom-client": "^15.1.3",
+    "rate-limiter-flexible": "^5.0.5",
+    "socket.io": "^4.8.1",
     "ulid": "^3.0.1",
     "undici": "^7.30.0",
     "winston": "^3.17.0",
@@ -136,12 +153,7 @@
   },
   "peerDependencies": {
     "@socket.io/redis-adapter": ">=8.0.0",
-    "express": ">=4.18.0",
-    "ioredis": ">=5.0.0",
-    "knex": ">=3.0.0",
-    "mysql2": ">=3.0.0",
-    "rate-limiter-flexible": ">=5.0.0",
-    "socket.io": ">=4.7.0"
+    "express": ">=4.18.0"
   },
   "peerDependenciesMeta": {
     "@socket.io/redis-adapter": {
@@ -149,21 +161,6 @@
     },
     "express": {
       "optional": true
-    },
-    "ioredis": {
-      "optional": true
-    },
-    "knex": {
-      "optional": true
-    },
-    "mysql2": {
-      "optional": true
-    },
-    "rate-limiter-flexible": {
-      "optional": true
-    },
-    "socket.io": {
-      "optional": true
     }
   },
   "devDependencies": {
@@ -175,12 +172,7 @@
     "@types/node": "^22.10.0",
     "@types/supertest": "^6.0.2",
     "express": "^5.1.0",
-    "ioredis": "^5.4.2",
     "jest": "^29.7.0",
-    "knex": "^3.1.0",
-    "mysql2": "^3.11.4",
-    "rate-limiter-flexible": "^5.0.5",
-    "socket.io": "^4.8.1",
     "supertest": "^7.0.0",
     "ts-jest": "^29.4.6",
     "typescript": "^5.7.2"