@nodefony/http 10.0.0-alpha.9 → 10.0.0-beta.1

package/README.md

@@ -34,6 +34,13 @@ serveur → http-kernel.handle() → rate-limit IP → createContext()
 Chaque contexte (HTTP + WS) porte un `requestId` (UUID v4, ou `X-Request-Id` client),
 réinjecté dans la réponse et corrélé dans les logs via AsyncLocalStorage.
 
+Chaque requête HTTP — et chaque connexion WebSocket — reçoit aussi **son propre conteneur de
+services** : un scope ouvert à l'entrée (`enterScope`), dont le prototype est le conteneur du kernel,
+refermé après les hooks `onAfterResponse`/`onFinish` (`leaveScope`), y compris quand un hook lève.
+Le serveur le pose dans le contexte asynchrone de la requête : `RequestContext.getScope()` le rend
+depuis n'importe quel code, et les services `@injectable({ scope: "request" })` y vivent. Détail :
+[Injection & portées](https://github.com/nodefony/nodefony-core/blob/main/docs/architecture/injection-portees.md).
+
 ## Rate-limit général par IP
 
 Plafond de trafic **par IP cliente** sur toutes les routes HTTP — protège la capacité du serveur

package/dist/index.js

@@ -1,4 +1,4 @@
-import config, { httpConfigSchema } from "./nodefony/config/config.js";
+import config, { httpConfigSchema, httpOverlaySchema } from "./nodefony/config/config.js";
 import { defineHttpConfig, httpConfigJsonSchema } from "./nodefony/config/defineModuleConfig.js";
 import { createHttpAdminApi } from "./nodefony/service/HttpAdminApi.js";
 import { createProfilerAdminApi } from "./nodefony/service/ProfilerAdminApi.js";
@@ -42,6 +42,7 @@ import { PrebuiltUi, resolveUiDelivery } from "./nodefony/src/assets/prebuiltUi.
 import { Kernel, Module, services } from "nodefony";
 //#region index.ts
 let Http = class Http extends Module {
+	overlaySchema = httpOverlaySchema;
 	constructor(kernel) {
 		super("http", kernel, import.meta.url, config);
 		this.addCommand(Network);
@@ -68,7 +69,8 @@ let Http = class Http extends Module {
 	* certificats `serialNumber`) — cf `defineHttpConfig`.
 	*/
 	async onKernelRegister() {
-		this.options = defineHttpConfig(this.options ?? {}, this.kernel);
+		const input = this.options;
+		this.options = defineHttpConfig(input ?? {}, this.kernel);
 		return this;
 	}
 	/**

package/dist/nodefony/command/assetsPublishCommand.js

@@ -80,7 +80,7 @@ var AssetsPublish = class extends Command {
 	}
 	/** Sources = mounts natifs (`server-static`) + bundles `@nodefony/frontend`. */
 	collectSources() {
-		const modules = this.kernel?.getModules?.() ?? {};
+		const modules = this.kernel?.getModules() ?? {};
 		const sources = [];
 		const staticSvc = modules["http"]?.get("server-static");
 		staticSvc?.mountModulePublics?.();

package/dist/nodefony/command/certificatesCommand.js

@@ -21,7 +21,7 @@ var Certificates = class extends Command {
 		this.addOption("-j, --json", "output the certificate summary as JSON");
 	}
 	async generate(opts) {
-		const service = (this.kernel?.getModules()?.["http"])?.get("certificates") ?? null;
+		const service = (this.kernel?.getModules()["http"])?.get("certificates") ?? null;
 		if (!service) {
 			this.log("Service 'certificates' introuvable (module @nodefony/http non chargé).", "ERROR");
 			return this;

package/dist/nodefony/command/networkCommand.js

@@ -16,7 +16,7 @@ var Network = class extends Command {
 		let network = this.kernel?.getNetwork();
 		let result = {};
 		if (arg) {
-			if (network?.interfaces[arg]) result = network?.interfaces[arg];
+			if (network?.interfaces[arg]) result = network.interfaces[arg];
 		} else result = network?.interfaces;
 		if (opts.json) process.stdout.write(`${JSON.stringify(result, void 0, " ")}\n`);
 		else process.stdout.write(`${inspect(result, { colors: process.stdout.isTTY })}\n`);

package/dist/nodefony/command/proxyGenerateCommand.js

@@ -43,7 +43,7 @@ var ProxyGenerate = class extends Command {
 	}
 	/** Construit le modèle d'introspection depuis le kernel + le service statique. */
 	buildIntrospection(opts) {
-		const module = this.kernel?.getModules()?.["http"];
+		const module = this.kernel?.getModules()["http"];
 		const httpOpts = module?.options ?? {};
 		const servers = (this.kernel?.options)?.servers;
 		const staticSvc = module?.get("server-static");

package/dist/nodefony/config/config.js

@@ -1,3 +1,4 @@
+import { overlayField } from "nodefony";
 import { z } from "zod";
 //#region nodefony/config/config.ts
 /**
@@ -327,9 +328,29 @@ const httpConfigSchema = z.strictObject({
 	})
 }).describe("Configuration de @nodefony/http.");
 /**
+* LISTE BLANCHE des clés qu'une requête peut surcharger pour elle seule
+* (`overlayConfig("@nodefony/http", …)`, #494) : les quotas de corps et
+* d'envoi, lus au MOMENT de lire le corps (`Request.readBodyLimits`) — un
+* calque posé avant la lecture du corps (écouteur `onRequestScope`, organisation
+* reconnue à son nom d'hôte) les voit. Tout le reste est refusé : en-têtes de
+* sécurité, pare-feu, `trustProxy`, sessions, limites de débit, certificats —
+* et `queryString`, lu au constructeur de la requête, avant tout calque.
+* Chaque champ réutilise celui du schéma (mêmes bornes) sans son défaut.
+*/
+const httpOverlaySchema = z.strictObject({
+	maxBodySize: overlayField(httpConfigSchema.shape.maxBodySize),
+	upload: z.strictObject({
+		maxFileSize: overlayField(uploadSchema.shape.maxFileSize),
+		maxTotalFileSize: overlayField(uploadSchema.shape.maxTotalFileSize),
+		maxFiles: overlayField(uploadSchema.shape.maxFiles),
+		maxFields: overlayField(uploadSchema.shape.maxFields),
+		maxFieldsSize: overlayField(uploadSchema.shape.maxFieldsSize)
+	}).partial()
+}).partial().describe("Clés de @nodefony/http surchargeables par requête.");
+/**
 * Défauts du module, matérialisés depuis le schéma (source unique). Toujours
 * valides par construction ; passés au `super(..., config)` du Module class.
 */
 const config = httpConfigSchema.parse({});
 //#endregion
-export { config as default, httpConfigSchema };
+export { config as default, httpConfigSchema, httpOverlaySchema };

package/dist/nodefony/interfaces/IRouting.js

@@ -0,0 +1 @@
+export {};

package/dist/nodefony/interfaces/ISecurity.js

@@ -0,0 +1 @@
+export {};

package/dist/nodefony/service/ProfilerAdminApi.js

@@ -51,7 +51,8 @@ function createProfilerAdminApi(profiler) {
 			path: "{id}",
 			summary: "Full profile (phase timeline) for a requestId",
 			handler: ({ params }) => {
-				const entry = profiler.get(params.id);
+				const { id = "" } = params;
+				const entry = profiler.get(id);
 				if (!entry) return {
 					status: 404,
 					body: {

package/dist/nodefony/service/audit-logger.js

@@ -2,6 +2,19 @@ import { RequestContext } from "nodefony";
 import { performance } from "node:perf_hooks";
 //#region nodefony/service/audit-logger.ts
 /**
+* Durée totale de la requête, de la première phase (`startMs`) à maintenant.
+* `null` si le chronométrage est coupé (aucune phase enregistrée). Partagée
+* par le journal d'audit et le journal lisible — une seule définition.
+*
+* @param phases - phases chronométrées du contexte
+* @returns durée en millisecondes, ou `null`
+*/
+function computeDurationMs(phases) {
+	const first = phases.at(0);
+	if (first === void 0 || typeof first.startMs !== "number") return null;
+	return performance.now() - first.startMs;
+}
+/**
 * Severity derived from HTTP status code — RFC 9110 categories.
 * 1xx/2xx/3xx → INFO ; 4xx → WARNING ; 5xx → ERROR.
 * Unknown/missing status → INFO.
@@ -77,7 +90,7 @@ var JsonAuditLogger = class {
 			method: ctx.method,
 			url: ctx.url,
 			status,
-			durationMs: this.computeDurationMs(ctx.phases),
+			durationMs: computeDurationMs(ctx.phases),
 			remoteAddress: ctx.remoteAddress ?? null,
 			host: ctx.getHost?.() ?? null,
 			userAgent: ctx.getUserAgent?.() ?? null,
@@ -108,7 +121,7 @@ var JsonAuditLogger = class {
 			method: ctx.method,
 			url: ctx.url,
 			status,
-			durationMs: this.computeDurationMs(ctx.phases),
+			durationMs: computeDurationMs(ctx.phases),
 			remoteAddress: ctx.remoteAddress ?? null,
 			host: ctx.getHost?.() ?? null,
 			userAgent: ctx.getUserAgent?.() ?? null,
@@ -128,16 +141,6 @@ var JsonAuditLogger = class {
 		};
 	}
 	/**
-	* Total request duration computed from the first phase startMs to now.
-	* Returns null if timing is disabled (no phases recorded).
-	*/
-	computeDurationMs(phases) {
-		if (!phases.length) return null;
-		const first = phases[0];
-		if (typeof first.startMs !== "number") return null;
-		return performance.now() - first.startMs;
-	}
-	/**
 	* Serialise an Error (recursively for `cause` chain) into an AuditErrorEntry.
 	* Stack is included only when `includeStack === true` (dev default).
 	* Cause chain is capped at `maxCauseDepth`.
@@ -156,4 +159,4 @@ var JsonAuditLogger = class {
 	}
 };
 //#endregion
-export { JsonAuditLogger as default, severityFromStatus };
+export { computeDurationMs, JsonAuditLogger as default, severityFromStatus };

package/dist/nodefony/service/certificates.js

@@ -1,3 +1,4 @@
+import { asServersConfig } from "../src/servers/kernelServers.js";
 import { Service, extend } from "nodefony";
 import { randomBytes } from "node:crypto";
 import fsp from "node:fs/promises";
@@ -31,6 +32,15 @@ const defaultOptions = {
 	}
 };
 /**
+* Valeur texte d'un champ de certificat node-forge (`getField` rend `any`),
+* ou `null` si le champ est absent.
+*/
+function certFieldValue(field) {
+	if (field === null || typeof field !== "object") return null;
+	const value = field.value;
+	return typeof value === "string" ? value : String(value);
+}
+/**
 * Service de fourniture du certificat TLS du serveur HTTPS/WSS.
 *
 * Trois stratégies : `explicit` (certificat fourni en config — le cas de
@@ -90,7 +100,7 @@ var Certificate = class Certificate extends Service {
 	* ne l'appelle jamais.
 	*/
 	async loadForge() {
-		if (!this.forge) this.forge = (await import("node-forge")).default;
+		this.forge ??= (await import("node-forge")).default;
 		return this.forge;
 	}
 	/** Accès au backend forge déjà chargé (lève si `loadForge` n'a pas été appelé). */
@@ -120,7 +130,7 @@ var Certificate = class Certificate extends Service {
 	* exemplaire. La promesse était écrite ; rien ne la tenait.
 	*/
 	get tlsWanted() {
-		return !!this.module.kernel?.options?.servers?.https;
+		return !!asServersConfig(this.module.kernel?.options.servers)?.https;
 	}
 	async init() {
 		if (!this.tlsWanted) return this;
@@ -138,8 +148,8 @@ var Certificate = class Certificate extends Service {
 	*/
 	static generateSerialHex() {
 		const bytes = randomBytes(16);
-		bytes[0] &= 127;
-		if (bytes[0] === 0) bytes[0] = 1;
+		const head = bytes.readUInt8(0) & 127;
+		bytes[0] = head === 0 ? 1 : head;
 		return bytes.toString("hex");
 	}
 	setFiles() {
@@ -179,7 +189,7 @@ var Certificate = class Certificate extends Service {
 			path.dirname(this.certPath),
 			path.dirname(this.fullchainPath)
 		];
-		for await (const directory of directories) try {
+		for (const directory of directories) try {
 			await fsp.access(directory);
 		} catch {
 			await fsp.mkdir(directory, { recursive: true });
@@ -237,7 +247,7 @@ var Certificate = class Certificate extends Service {
 		}
 		if (requested === "auto" && this.hasExplicitCert()) return "explicit";
 		if (requested === "mkcert" || requested === "auto") {
-			if (this.isDev() && this.certOptions.dev?.useMkcert !== false) {
+			if (this.isDev() && this.certOptions.dev.useMkcert !== false) {
 				const caRoot = await this.detectMkcert();
 				if (caRoot) {
 					this.mkcertCaRoot = caRoot;
@@ -345,8 +355,8 @@ var Certificate = class Certificate extends Service {
 			const ext = cert.getExtension("subjectAltName");
 			if (!ext || !this.sanCovers(ext.altNames ?? [])) return false;
 			if (strategy === "mkcert") {
-				const org = cert.issuer.getField("O");
-				return Boolean(org && /mkcert/i.test(String(org.value)));
+				const org = certFieldValue(cert.issuer.getField("O"));
+				return org !== null && /mkcert/i.test(org);
 			}
 			return cert.signatureOid !== pki.oids.sha1WithRSAEncryption;
 		} catch {
@@ -401,7 +411,7 @@ var Certificate = class Certificate extends Service {
 	}
 	async writeCertificates(force = false) {
 		await this.ensureDirectoriesExist();
-		for await (const file of this.files) try {
+		for (const file of this.files) try {
 			if (file.variable) {
 				const mode = file.path === this.privateKeyPath ? this.certOptions.privateKeyMode ?? 384 : 420;
 				if (force) await fsp.rm(file.path, { force: true });
@@ -542,8 +552,8 @@ var Certificate = class Certificate extends Service {
 			info.validFrom = cert.validity.notBefore.toISOString();
 			info.validTo = cert.validity.notAfter.toISOString();
 			info.signatureAlgorithm = this.oidName(cert.signatureOid, pki);
-			const cn = cert.subject.getField("CN");
-			if (cn) info.commonName = String(cn.value);
+			const cn = certFieldValue(cert.subject.getField("CN"));
+			if (cn !== null) info.commonName = cn;
 			const ext = cert.getExtension("subjectAltName");
 			if (ext?.altNames) info.san = ext.altNames.map((a) => a.type === 7 ? a.ip ?? "" : a.value ?? "");
 		} catch {}
@@ -560,9 +570,11 @@ var Certificate = class Certificate extends Service {
 			case "sha512": return md.sha512.create();
 			case "sha384": return md.sha384.create();
 			case "sha256": return md.sha256.create();
-			default:
-				this.log(`Hachage '${hash}' refusé (SHA-1 interdit) → SHA-256.`, "WARNING");
+			default: {
+				const refused = hash;
+				this.log(`Hachage '${refused}' refusé (SHA-1 interdit) → SHA-256.`, "WARNING");
 				return md.sha256.create();
+			}
 		}
 	}
 };

package/dist/nodefony/service/error-renderer.js

@@ -111,7 +111,7 @@ function toValidationFields(error) {
 function toValidationError(error, fields) {
 	const summary = fields.map((f) => f.field ? `${f.field}: ${f.message}` : f.message).join(" · ");
 	const validation = new nodefonyError(`Validation failed — ${summary}`, VALIDATION_STATUS);
-	validation.stack = error.stack;
+	if (error.stack !== void 0) validation.stack = error.stack;
 	validation.fields = fields;
 	return validation;
 }
@@ -206,8 +206,11 @@ function malformedIdentifierOf(error) {
 		const candidate = current;
 		if (candidate.name === "CastError" && (candidate.kind === "ObjectId" || candidate.kind === "UUID") && (typeof candidate.value === "string" || typeof candidate.value === "number")) return String(candidate.value);
 		if (String(candidate.code) === "22P02") {
-			const match = PG_INVALID_INPUT.exec(candidate.message ?? "");
-			if (match && IDENTIFIER_COLUMN_TYPES.has(match[1])) return match[2];
+			const match = PG_INVALID_INPUT.exec(candidate.message);
+			if (match) {
+				const [, type = "", value = null] = match;
+				if (IDENTIFIER_COLUMN_TYPES.has(type)) return value;
+			}
 		}
 		current = candidate.cause;
 	}
@@ -307,7 +310,7 @@ function schemaMismatchOf(error) {
 	for (let depth = 0; depth < 5 && current instanceof Error; depth += 1) {
 		const candidate = current;
 		if (candidate.code !== void 0 && SCHEMA_MISMATCH_CODES.has(String(candidate.code)) || candidate.errno !== void 0 && SCHEMA_MISMATCH_CODES.has(String(candidate.errno))) return "certain";
-		if (String(candidate.code) === "SQLITE_ERROR" && SQLITE_SCHEMA_PREFIXES.some((p) => candidate.message?.startsWith(p))) return "probable";
+		if (String(candidate.code) === "SQLITE_ERROR" && SQLITE_SCHEMA_PREFIXES.some((p) => candidate.message.startsWith(p))) return "probable";
 		current = candidate.cause;
 	}
 	return null;
@@ -373,7 +376,7 @@ var DefaultErrorRenderer = class {
 		const httpError = this.toHttpError(error, context);
 		const rawCode = httpError.code;
 		let code = typeof rawCode === "number" && Number.isInteger(rawCode) ? rawCode : 500;
-		if (context && context.rejected === false) code = toWsCloseCode(code);
+		if (context.rejected === false) code = toWsCloseCode(code);
 		else if (code > 599) code = 500;
 		const internal = code === 1011 || code >= 500 && code <= 599;
 		const reason = isProduction() && internal ? OPAQUE_SERVER_ERROR : httpError.message;
@@ -392,20 +395,20 @@ var DefaultErrorRenderer = class {
 		}
 		if (isUniqueViolation(error)) {
 			const conflict = new nodefonyError(UNIQUE_VIOLATION_MESSAGE, CONFLICT_STATUS);
-			conflict.stack = error.stack;
+			if (error.stack !== void 0) conflict.stack = error.stack;
 			return new HttpError(conflict, CONFLICT_STATUS, context);
 		}
 		const referencedBy = referencedByOf(error);
 		if (referencedBy !== null) {
 			const conflict = new nodefonyError(`Conflict — this resource is still referenced by ${referencedBy}`, CONFLICT_STATUS);
-			conflict.stack = error.stack;
+			if (error.stack !== void 0) conflict.stack = error.stack;
 			return new HttpError(conflict, CONFLICT_STATUS, context);
 		}
 		const malformed = malformedIdentifierOf(error);
 		if (malformed !== null) {
 			const status = malformedIdentifierStatus(malformed, context?.url);
 			const refused = new nodefonyError(status === 404 ? "Not Found — this identifier cannot designate any resource" : "Bad Request — malformed identifier", status);
-			refused.stack = error.stack;
+			if (error.stack !== void 0) refused.stack = error.stack;
 			return new HttpError(refused, status, context);
 		}
 		const code = error.code;