@orpc/server 0.0.0-next.32a6de9 → 0.0.0-next.32bf331

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (74) hide show
  1. package/README.md +31 -31
  2. package/dist/adapters/aws-lambda/index.d.mts +46 -0
  3. package/dist/adapters/aws-lambda/index.d.ts +46 -0
  4. package/dist/adapters/aws-lambda/index.mjs +42 -0
  5. package/dist/adapters/bun-ws/index.d.mts +36 -0
  6. package/dist/adapters/bun-ws/index.d.ts +36 -0
  7. package/dist/adapters/bun-ws/index.mjs +47 -0
  8. package/dist/adapters/crossws/index.d.mts +33 -0
  9. package/dist/adapters/crossws/index.d.ts +33 -0
  10. package/dist/adapters/crossws/index.mjs +45 -0
  11. package/dist/adapters/fastify/index.d.mts +53 -0
  12. package/dist/adapters/fastify/index.d.ts +53 -0
  13. package/dist/adapters/fastify/index.mjs +54 -0
  14. package/dist/adapters/fetch/index.d.mts +81 -11
  15. package/dist/adapters/fetch/index.d.ts +81 -11
  16. package/dist/adapters/fetch/index.mjs +179 -8
  17. package/dist/adapters/message-port/index.d.mts +57 -0
  18. package/dist/adapters/message-port/index.d.ts +57 -0
  19. package/dist/adapters/message-port/index.mjs +55 -0
  20. package/dist/adapters/node/index.d.mts +58 -12
  21. package/dist/adapters/node/index.d.ts +58 -12
  22. package/dist/adapters/node/index.mjs +89 -22
  23. package/dist/adapters/standard/index.d.mts +8 -13
  24. package/dist/adapters/standard/index.d.ts +8 -13
  25. package/dist/adapters/standard/index.mjs +5 -3
  26. package/dist/adapters/standard-peer/index.d.mts +18 -0
  27. package/dist/adapters/standard-peer/index.d.ts +18 -0
  28. package/dist/adapters/standard-peer/index.mjs +7 -0
  29. package/dist/adapters/websocket/index.d.mts +56 -0
  30. package/dist/adapters/websocket/index.d.ts +56 -0
  31. package/dist/adapters/websocket/index.mjs +67 -0
  32. package/dist/adapters/ws/index.d.mts +31 -0
  33. package/dist/adapters/ws/index.d.ts +31 -0
  34. package/dist/adapters/ws/index.mjs +37 -0
  35. package/dist/helpers/index.d.mts +149 -0
  36. package/dist/helpers/index.d.ts +149 -0
  37. package/dist/helpers/index.mjs +198 -0
  38. package/dist/hibernation/index.d.mts +44 -0
  39. package/dist/hibernation/index.d.ts +44 -0
  40. package/dist/hibernation/index.mjs +65 -0
  41. package/dist/index.d.mts +564 -52
  42. package/dist/index.d.ts +564 -52
  43. package/dist/index.mjs +143 -14
  44. package/dist/plugins/index.d.mts +149 -11
  45. package/dist/plugins/index.d.ts +149 -11
  46. package/dist/plugins/index.mjs +189 -57
  47. package/dist/shared/{server.BlxK0o8R.d.mts → server.7cEtMB30.d.ts} +18 -10
  48. package/dist/shared/server.B8gYOD5g.d.mts +12 -0
  49. package/dist/shared/{server.DuTpqr2w.d.ts → server.BqadksTP.d.mts} +18 -10
  50. package/dist/shared/server.Bxx6tqNe.mjs +219 -0
  51. package/dist/shared/server.C8_sRzQB.d.mts +42 -0
  52. package/dist/shared/server.ChUyt5-i.d.mts +32 -0
  53. package/dist/shared/server.ChyoA9XY.d.ts +42 -0
  54. package/dist/shared/{server.BVwwTHyO.mjs → server.DZ5BIITo.mjs} +1 -1
  55. package/dist/shared/{server.C37gDhSZ.mjs → server.Ds4HPpvH.mjs} +119 -74
  56. package/dist/shared/server.EfTOZ2Q7.d.ts +12 -0
  57. package/dist/shared/server.TEVCLCFC.mjs +39 -0
  58. package/dist/shared/server.UVMTOWrk.mjs +26 -0
  59. package/dist/shared/{server.DLt5njUb.d.mts → server.qKsRrdxW.d.mts} +60 -10
  60. package/dist/shared/{server.DLt5njUb.d.ts → server.qKsRrdxW.d.ts} +60 -10
  61. package/dist/shared/server.yoEB3Fx4.d.ts +32 -0
  62. package/package.json +82 -23
  63. package/dist/adapters/hono/index.d.mts +0 -22
  64. package/dist/adapters/hono/index.d.ts +0 -22
  65. package/dist/adapters/hono/index.mjs +0 -32
  66. package/dist/adapters/next/index.d.mts +0 -29
  67. package/dist/adapters/next/index.d.ts +0 -29
  68. package/dist/adapters/next/index.mjs +0 -29
  69. package/dist/shared/server.BFt8M4Cr.d.ts +0 -8
  70. package/dist/shared/server.Bc6jnvPE.d.ts +0 -10
  71. package/dist/shared/server.CCPFkKqC.mjs +0 -98
  72. package/dist/shared/server.CCgy73tk.d.mts +0 -10
  73. package/dist/shared/server.DJrRF9vD.mjs +0 -162
  74. package/dist/shared/server.JgWzFqlo.d.mts +0 -8
@@ -1,10 +1,10 @@
1
- import { Value } from '@orpc/shared';
1
+ import { Value, Promisable, ThrowableError } from '@orpc/shared';
2
2
  import { StandardRequest, StandardHeaders } from '@orpc/standard-server';
3
3
  import { BatchResponseBodyItem } from '@orpc/standard-server/batch';
4
- import { h as StandardHandlerInterceptorOptions, g as StandardHandlerPlugin, a as StandardHandlerOptions } from '../shared/server.DuTpqr2w.js';
5
- import { C as Context } from '../shared/server.DLt5njUb.js';
6
- import '@orpc/client';
7
- import '@orpc/contract';
4
+ import { d as StandardHandlerInterceptorOptions, g as StandardHandlerPlugin, e as StandardHandlerOptions } from '../shared/server.7cEtMB30.js';
5
+ import { C as Context, d as ProcedureClientInterceptorOptions } from '../shared/server.qKsRrdxW.js';
6
+ import { Meta, ORPCError as ORPCError$1 } from '@orpc/contract';
7
+ import { ORPCError } from '@orpc/client';
8
8
 
9
9
  interface BatchHandlerOptions<T extends Context> {
10
10
  /**
@@ -12,7 +12,7 @@ interface BatchHandlerOptions<T extends Context> {
12
12
  *
13
13
  * @default 10
14
14
  */
15
- maxSize?: Value<number, [StandardHandlerInterceptorOptions<T>]>;
15
+ maxSize?: Value<Promisable<number>, [StandardHandlerInterceptorOptions<T>]>;
16
16
  /**
17
17
  * Map the request before processing it.
18
18
  *
@@ -24,43 +24,181 @@ interface BatchHandlerOptions<T extends Context> {
24
24
  *
25
25
  * @default 207
26
26
  */
27
- successStatus?: Value<number, [responses: Promise<BatchResponseBodyItem>[], batchOptions: StandardHandlerInterceptorOptions<T>]>;
27
+ successStatus?: Value<Promisable<number>, [responses: Promise<BatchResponseBodyItem>[], batchOptions: StandardHandlerInterceptorOptions<T>]>;
28
28
  /**
29
29
  * success batch response headers.
30
30
  *
31
31
  * @default {}
32
32
  */
33
- headers?: Value<StandardHeaders, [responses: Promise<BatchResponseBodyItem>[], batchOptions: StandardHandlerInterceptorOptions<T>]>;
33
+ headers?: Value<Promisable<StandardHeaders>, [responses: Promise<BatchResponseBodyItem>[], batchOptions: StandardHandlerInterceptorOptions<T>]>;
34
34
  }
35
+ /**
36
+ * The Batch Requests Plugin allows you to combine multiple requests and responses into a single batch,
37
+ * reducing the overhead of sending each one separately.
38
+ *
39
+ * @see {@link https://orpc.dev/docs/plugins/batch-requests Batch Requests Plugin Docs}
40
+ */
35
41
  declare class BatchHandlerPlugin<T extends Context> implements StandardHandlerPlugin<T> {
36
42
  private readonly maxSize;
37
43
  private readonly mapRequestItem;
38
44
  private readonly successStatus;
39
45
  private readonly headers;
46
+ order: number;
40
47
  constructor(options?: BatchHandlerOptions<T>);
41
48
  init(options: StandardHandlerOptions<T>): void;
42
49
  }
43
50
 
44
51
  interface CORSOptions<T extends Context> {
45
- origin?: Value<string | readonly string[] | null | undefined, [origin: string, options: StandardHandlerInterceptorOptions<T>]>;
46
- timingOrigin?: Value<string | readonly string[] | null | undefined, [origin: string, options: StandardHandlerInterceptorOptions<T>]>;
52
+ origin?: Value<Promisable<string | readonly string[] | null | undefined>, [origin: string, options: StandardHandlerInterceptorOptions<T>]>;
53
+ timingOrigin?: Value<Promisable<string | readonly string[] | null | undefined>, [origin: string, options: StandardHandlerInterceptorOptions<T>]>;
47
54
  allowMethods?: readonly string[];
48
55
  allowHeaders?: readonly string[];
49
56
  maxAge?: number;
50
57
  credentials?: boolean;
51
58
  exposeHeaders?: readonly string[];
52
59
  }
60
+ /**
61
+ * CORSPlugin is a plugin for oRPC that allows you to configure CORS for your API.
62
+ *
63
+ * @see {@link https://orpc.dev/docs/plugins/cors CORS Plugin Docs}
64
+ */
53
65
  declare class CORSPlugin<T extends Context> implements StandardHandlerPlugin<T> {
54
66
  private readonly options;
67
+ order: number;
55
68
  constructor(options?: CORSOptions<T>);
56
69
  init(options: StandardHandlerOptions<T>): void;
57
70
  }
58
71
 
72
+ interface RequestHeadersPluginContext {
73
+ reqHeaders?: Headers;
74
+ }
75
+ /**
76
+ * The Request Headers Plugin injects a `reqHeaders` instance into the context,
77
+ * allowing access to request headers in oRPC.
78
+ *
79
+ * @see {@link https://orpc.dev/docs/plugins/request-headers Request Headers Plugin Docs}
80
+ */
81
+ declare class RequestHeadersPlugin<T extends RequestHeadersPluginContext> implements StandardHandlerPlugin<T> {
82
+ init(options: StandardHandlerOptions<T>): void;
83
+ }
84
+
59
85
  interface ResponseHeadersPluginContext {
60
86
  resHeaders?: Headers;
61
87
  }
88
+ /**
89
+ * The Response Headers Plugin allows you to set response headers in oRPC.
90
+ * It injects a resHeaders instance into the context, enabling you to modify response headers easily.
91
+ *
92
+ * @see {@link https://orpc.dev/docs/plugins/response-headers Response Headers Plugin Docs}
93
+ */
62
94
  declare class ResponseHeadersPlugin<T extends ResponseHeadersPluginContext> implements StandardHandlerPlugin<T> {
63
95
  init(options: StandardHandlerOptions<T>): void;
64
96
  }
65
97
 
66
- export { type BatchHandlerOptions, BatchHandlerPlugin, type CORSOptions, CORSPlugin, ResponseHeadersPlugin, type ResponseHeadersPluginContext };
98
+ interface experimental_RethrowHandlerPluginOptions<T extends Context> {
99
+ /**
100
+ * Decide which errors should be rethrown.
101
+ *
102
+ * @example
103
+ * ```ts
104
+ * const rethrowPlugin = new RethrowHandlerPlugin({
105
+ * filter: (error) => {
106
+ * // Rethrow all non-ORPCError errors
107
+ * return !(error instanceof ORPCError)
108
+ * }
109
+ * })
110
+ * ```
111
+ */
112
+ filter: Value<boolean, [error: ThrowableError, options: StandardHandlerInterceptorOptions<T>]>;
113
+ }
114
+ /**
115
+ * The plugin allows you to catch and rethrow specific errors that occur during request handling.
116
+ * This is particularly useful when your framework has its own error handling mechanism
117
+ * (e.g., global exception filters in NestJS, error middleware in Express)
118
+ * and you want certain errors to be processed by that mechanism instead of being handled by the
119
+ * oRPC error handling flow.
120
+ *
121
+ * @see {@link https://orpc.dev/docs/plugins/rethrow-handler Rethrow Handler Plugin Docs}
122
+ */
123
+ declare class experimental_RethrowHandlerPlugin<T extends Context> implements StandardHandlerPlugin<T> {
124
+ private readonly filter;
125
+ CONTEXT_SYMBOL: symbol;
126
+ constructor(options: experimental_RethrowHandlerPluginOptions<T>);
127
+ init(options: StandardHandlerOptions<T>): void;
128
+ }
129
+
130
+ interface SimpleCsrfProtectionHandlerPluginOptions<T extends Context> {
131
+ /**
132
+ * The name of the header to check.
133
+ *
134
+ * @default 'x-csrf-token'
135
+ */
136
+ headerName?: Value<Promisable<string>, [options: StandardHandlerInterceptorOptions<T>]>;
137
+ /**
138
+ * The value of the header to check.
139
+ *
140
+ * @default 'orpc'
141
+ *
142
+ */
143
+ headerValue?: Value<Promisable<string>, [options: StandardHandlerInterceptorOptions<T>]>;
144
+ /**
145
+ * Exclude a procedure from the plugin.
146
+ *
147
+ * @default false
148
+ *
149
+ */
150
+ exclude?: Value<Promisable<boolean>, [options: ProcedureClientInterceptorOptions<T, Record<never, never>, Meta>]>;
151
+ /**
152
+ * The error thrown when the CSRF token is invalid.
153
+ *
154
+ * @default new ORPCError('CSRF_TOKEN_MISMATCH', {
155
+ * status: 403,
156
+ * message: 'Invalid CSRF token',
157
+ * })
158
+ */
159
+ error?: InstanceType<typeof ORPCError>;
160
+ }
161
+ /**
162
+ * This plugin adds basic Cross-Site Request Forgery (CSRF) protection to your oRPC application.
163
+ * It helps ensure that requests to your procedures originate from JavaScript code,
164
+ * not from other sources like standard HTML forms or direct browser navigation.
165
+ *
166
+ * @see {@link https://orpc.dev/docs/plugins/simple-csrf-protection Simple CSRF Protection Plugin Docs}
167
+ */
168
+ declare class SimpleCsrfProtectionHandlerPlugin<T extends Context> implements StandardHandlerPlugin<T> {
169
+ private readonly headerName;
170
+ private readonly headerValue;
171
+ private readonly exclude;
172
+ private readonly error;
173
+ constructor(options?: SimpleCsrfProtectionHandlerPluginOptions<T>);
174
+ order: number;
175
+ init(options: StandardHandlerOptions<T>): void;
176
+ }
177
+
178
+ interface StrictGetMethodPluginOptions {
179
+ /**
180
+ * The error thrown when a GET request is made to a procedure that doesn't allow GET.
181
+ *
182
+ * @default new ORPCError('METHOD_NOT_SUPPORTED')
183
+ */
184
+ error?: InstanceType<typeof ORPCError$1>;
185
+ }
186
+ /**
187
+ * This plugin enhances security by ensuring only procedures explicitly marked to accept GET requests
188
+ * can be called using the HTTP GET method for RPC Protocol. This helps prevent certain types of
189
+ * Cross-Site Request Forgery (CSRF) attacks.
190
+ *
191
+ * @see {@link https://orpc.dev/docs/plugins/strict-get-method Strict Get Method Plugin Docs}
192
+ */
193
+ declare class StrictGetMethodPlugin<T extends Context> implements StandardHandlerPlugin<T> {
194
+ private readonly error;
195
+ /**
196
+ * make sure execute before batch plugin to get real method
197
+ */
198
+ order: number;
199
+ constructor(options?: StrictGetMethodPluginOptions);
200
+ init(options: StandardHandlerOptions<T>): void;
201
+ }
202
+
203
+ export { BatchHandlerPlugin, CORSPlugin, RequestHeadersPlugin, ResponseHeadersPlugin, SimpleCsrfProtectionHandlerPlugin, StrictGetMethodPlugin, experimental_RethrowHandlerPlugin };
204
+ export type { BatchHandlerOptions, CORSOptions, RequestHeadersPluginContext, ResponseHeadersPluginContext, SimpleCsrfProtectionHandlerPluginOptions, StrictGetMethodPluginOptions, experimental_RethrowHandlerPluginOptions };
@@ -1,11 +1,17 @@
1
- import { value } from '@orpc/shared';
1
+ import { runWithSpan, value, setSpanError, isAsyncIteratorObject, AsyncIteratorClass, clone } from '@orpc/shared';
2
+ import { flattenHeader } from '@orpc/standard-server';
2
3
  import { parseBatchRequest, toBatchResponse } from '@orpc/standard-server/batch';
4
+ import { toFetchHeaders } from '@orpc/standard-server-fetch';
5
+ import { ORPCError } from '@orpc/client';
6
+ export { S as StrictGetMethodPlugin } from '../shared/server.TEVCLCFC.mjs';
7
+ import '@orpc/contract';
3
8
 
4
9
  class BatchHandlerPlugin {
5
10
  maxSize;
6
11
  mapRequestItem;
7
12
  successStatus;
8
13
  headers;
14
+ order = 5e6;
9
15
  constructor(options = {}) {
10
16
  this.maxSize = options.maxSize ?? 10;
11
17
  this.mapRequestItem = options.mapRequestItem ?? ((request, { request: batchRequest }) => ({
@@ -21,61 +27,82 @@ class BatchHandlerPlugin {
21
27
  init(options) {
22
28
  options.rootInterceptors ??= [];
23
29
  options.rootInterceptors.unshift(async (options2) => {
24
- if (options2.request.headers["x-orpc-batch"] !== "1") {
30
+ const xHeader = flattenHeader(options2.request.headers["x-orpc-batch"]);
31
+ if (xHeader === void 0) {
25
32
  return options2.next();
26
33
  }
27
34
  let isParsing = false;
28
35
  try {
29
- isParsing = true;
30
- const parsed = parseBatchRequest({ ...options2.request, body: await options2.request.body() });
31
- isParsing = false;
32
- const maxSize = await value(this.maxSize, options2);
33
- if (parsed.length > maxSize) {
34
- return {
35
- matched: true,
36
- response: {
37
- status: 413,
38
- headers: {},
39
- body: "Batch request size exceeds the maximum allowed size"
40
- }
41
- };
42
- }
43
- const responses = parsed.map(
44
- (request, index) => {
45
- const mapped = this.mapRequestItem(request, options2);
46
- return options2.next({ ...options2, request: { ...mapped, body: () => Promise.resolve(mapped.body) } }).then(({ response: response2, matched }) => {
47
- if (matched) {
48
- return { ...response2, index };
36
+ return await runWithSpan({ name: "handle_batch_request" }, async (span) => {
37
+ const mode = xHeader === "buffered" ? "buffered" : "streaming";
38
+ isParsing = true;
39
+ const parsed = parseBatchRequest({ ...options2.request, body: await options2.request.body() });
40
+ isParsing = false;
41
+ span?.setAttribute("batch.mode", mode);
42
+ span?.setAttribute("batch.size", parsed.length);
43
+ const maxSize = await value(this.maxSize, options2);
44
+ if (parsed.length > maxSize) {
45
+ const message = "Batch request size exceeds the maximum allowed size";
46
+ setSpanError(span, message);
47
+ return {
48
+ matched: true,
49
+ response: {
50
+ status: 413,
51
+ headers: {},
52
+ body: message
49
53
  }
50
- return { index, status: 404, headers: {}, body: "No procedure matched" };
51
- }).catch(() => {
52
- return { index, status: 500, headers: {}, body: "Internal server error" };
53
- });
54
+ };
54
55
  }
55
- );
56
- await Promise.race(responses);
57
- const status = await value(this.successStatus, responses, options2);
58
- const headers = await value(this.headers, responses, options2);
59
- const response = toBatchResponse({
60
- status,
61
- headers,
62
- body: async function* () {
63
- const promises = [...responses];
64
- while (true) {
65
- const handling = promises.filter((p) => p !== void 0);
66
- if (handling.length === 0) {
67
- return;
68
- }
69
- const result = await Promise.race(handling);
70
- promises[result.index] = void 0;
71
- yield result;
56
+ const responses = parsed.map(
57
+ (request, index) => {
58
+ const mapped = this.mapRequestItem(request, options2);
59
+ return options2.next({ ...options2, request: { ...mapped, body: () => Promise.resolve(mapped.body) } }).then(({ response: response2, matched }) => {
60
+ span?.addEvent(`response.${index}.${matched ? "success" : "not_matched"}`);
61
+ if (matched) {
62
+ if (response2.body instanceof Blob || response2.body instanceof FormData || isAsyncIteratorObject(response2.body)) {
63
+ return {
64
+ index,
65
+ status: 500,
66
+ headers: {},
67
+ body: "Batch responses do not support file/blob, or event-iterator. Please call this procedure separately outside of the batch request."
68
+ };
69
+ }
70
+ return { ...response2, index };
71
+ }
72
+ return { index, status: 404, headers: {}, body: "No procedure matched" };
73
+ }).catch((err) => {
74
+ Promise.reject(err);
75
+ return { index, status: 500, headers: {}, body: "Internal server error" };
76
+ });
72
77
  }
73
- }()
78
+ );
79
+ await Promise.race(responses);
80
+ const status = await value(this.successStatus, responses, options2);
81
+ const headers = await value(this.headers, responses, options2);
82
+ const promises = [...responses];
83
+ const response = await toBatchResponse({
84
+ status,
85
+ headers,
86
+ mode,
87
+ body: new AsyncIteratorClass(
88
+ async () => {
89
+ const handling = promises.filter((p) => p !== void 0);
90
+ if (handling.length <= 0) {
91
+ return { done: true, value: void 0 };
92
+ }
93
+ const value2 = await Promise.race(handling);
94
+ promises[value2.index] = void 0;
95
+ return { done: false, value: value2 };
96
+ },
97
+ async () => {
98
+ }
99
+ )
100
+ });
101
+ return {
102
+ matched: true,
103
+ response
104
+ };
74
105
  });
75
- return {
76
- matched: true,
77
- response
78
- };
79
106
  } catch (cause) {
80
107
  if (isParsing) {
81
108
  return {
@@ -91,6 +118,7 @@ class BatchHandlerPlugin {
91
118
 
92
119
  class CORSPlugin {
93
120
  options;
121
+ order = 9e6;
94
122
  constructor(options = {}) {
95
123
  const defaults = {
96
124
  origin: (origin) => origin,
@@ -110,13 +138,11 @@ class CORSPlugin {
110
138
  resHeaders["access-control-max-age"] = this.options.maxAge.toString();
111
139
  }
112
140
  if (this.options.allowMethods?.length) {
113
- resHeaders["access-control-allow-methods"] = this.options.allowMethods.join(",");
141
+ resHeaders["access-control-allow-methods"] = flattenHeader(this.options.allowMethods);
114
142
  }
115
143
  const allowHeaders = this.options.allowHeaders ?? interceptorOptions.request.headers["access-control-request-headers"];
116
- if (Array.isArray(allowHeaders) && allowHeaders.length) {
117
- resHeaders["access-control-allow-headers"] = allowHeaders.join(",");
118
- } else if (typeof allowHeaders === "string") {
119
- resHeaders["access-control-allow-headers"] = allowHeaders;
144
+ if (typeof allowHeaders === "string" || allowHeaders?.length) {
145
+ resHeaders["access-control-allow-headers"] = flattenHeader(allowHeaders);
120
146
  }
121
147
  return {
122
148
  matched: true,
@@ -134,7 +160,7 @@ class CORSPlugin {
134
160
  if (!result.matched) {
135
161
  return result;
136
162
  }
137
- const origin = Array.isArray(interceptorOptions.request.headers.origin) ? interceptorOptions.request.headers.origin.join(",") : interceptorOptions.request.headers.origin || "";
163
+ const origin = flattenHeader(interceptorOptions.request.headers.origin) ?? "";
138
164
  const allowedOrigin = await value(this.options.origin, origin, interceptorOptions);
139
165
  const allowedOriginArr = Array.isArray(allowedOrigin) ? allowedOrigin : [allowedOrigin];
140
166
  if (allowedOriginArr.includes("*")) {
@@ -156,13 +182,29 @@ class CORSPlugin {
156
182
  result.response.headers["access-control-allow-credentials"] = "true";
157
183
  }
158
184
  if (this.options.exposeHeaders?.length) {
159
- result.response.headers["access-control-expose-headers"] = this.options.exposeHeaders.join(",");
185
+ result.response.headers["access-control-expose-headers"] = flattenHeader(this.options.exposeHeaders);
160
186
  }
161
187
  return result;
162
188
  });
163
189
  }
164
190
  }
165
191
 
192
+ class RequestHeadersPlugin {
193
+ init(options) {
194
+ options.rootInterceptors ??= [];
195
+ options.rootInterceptors.push((interceptorOptions) => {
196
+ const reqHeaders = interceptorOptions.context.reqHeaders ?? toFetchHeaders(interceptorOptions.request.headers);
197
+ return interceptorOptions.next({
198
+ ...interceptorOptions,
199
+ context: {
200
+ ...interceptorOptions.context,
201
+ reqHeaders
202
+ }
203
+ });
204
+ });
205
+ }
206
+ }
207
+
166
208
  class ResponseHeadersPlugin {
167
209
  init(options) {
168
210
  options.rootInterceptors ??= [];
@@ -178,7 +220,7 @@ class ResponseHeadersPlugin {
178
220
  if (!result.matched) {
179
221
  return result;
180
222
  }
181
- const responseHeaders = result.response.headers;
223
+ const responseHeaders = clone(result.response.headers);
182
224
  for (const [key, value] of resHeaders) {
183
225
  if (Array.isArray(responseHeaders[key])) {
184
226
  responseHeaders[key].push(value);
@@ -188,9 +230,99 @@ class ResponseHeadersPlugin {
188
230
  responseHeaders[key] = value;
189
231
  }
190
232
  }
233
+ return {
234
+ ...result,
235
+ response: {
236
+ ...result.response,
237
+ headers: responseHeaders
238
+ }
239
+ };
240
+ });
241
+ }
242
+ }
243
+
244
+ class experimental_RethrowHandlerPlugin {
245
+ filter;
246
+ CONTEXT_SYMBOL = Symbol("ORPC_RETHROW_HANDLER_PLUGIN_CONTEXT");
247
+ constructor(options) {
248
+ this.filter = options.filter;
249
+ }
250
+ init(options) {
251
+ options.rootInterceptors ??= [];
252
+ options.interceptors ??= [];
253
+ options.rootInterceptors.push(async (options2) => {
254
+ const pluginContext = {};
255
+ const result = await options2.next({
256
+ ...options2,
257
+ context: {
258
+ ...options2.context,
259
+ [this.CONTEXT_SYMBOL]: pluginContext
260
+ }
261
+ });
262
+ if (pluginContext.error) {
263
+ throw pluginContext.error.value;
264
+ }
191
265
  return result;
192
266
  });
267
+ options.interceptors.unshift(async (options2) => {
268
+ const pluginContext = options2.context[this.CONTEXT_SYMBOL];
269
+ if (!pluginContext) {
270
+ throw new TypeError("[RethrowHandlerPlugin] Rethrow handler context has been corrupted or modified by another plugin or interceptor");
271
+ }
272
+ try {
273
+ return await options2.next();
274
+ } catch (error) {
275
+ if (value(this.filter, error, options2)) {
276
+ pluginContext.error = { value: error };
277
+ return { matched: false, response: void 0 };
278
+ }
279
+ throw error;
280
+ }
281
+ });
282
+ }
283
+ }
284
+
285
+ const SIMPLE_CSRF_PROTECTION_CONTEXT_SYMBOL = Symbol("SIMPLE_CSRF_PROTECTION_CONTEXT");
286
+ class SimpleCsrfProtectionHandlerPlugin {
287
+ headerName;
288
+ headerValue;
289
+ exclude;
290
+ error;
291
+ constructor(options = {}) {
292
+ this.headerName = options.headerName ?? "x-csrf-token";
293
+ this.headerValue = options.headerValue ?? "orpc";
294
+ this.exclude = options.exclude ?? false;
295
+ this.error = options.error ?? new ORPCError("CSRF_TOKEN_MISMATCH", {
296
+ status: 403,
297
+ message: "Invalid CSRF token"
298
+ });
299
+ }
300
+ order = 8e6;
301
+ init(options) {
302
+ options.rootInterceptors ??= [];
303
+ options.clientInterceptors ??= [];
304
+ options.rootInterceptors.unshift(async (options2) => {
305
+ const headerName = await value(this.headerName, options2);
306
+ const headerValue = await value(this.headerValue, options2);
307
+ return options2.next({
308
+ ...options2,
309
+ context: {
310
+ ...options2.context,
311
+ [SIMPLE_CSRF_PROTECTION_CONTEXT_SYMBOL]: options2.request.headers[headerName] === headerValue
312
+ }
313
+ });
314
+ });
315
+ options.clientInterceptors.unshift(async (options2) => {
316
+ if (typeof options2.context[SIMPLE_CSRF_PROTECTION_CONTEXT_SYMBOL] !== "boolean") {
317
+ throw new TypeError("[SimpleCsrfProtectionHandlerPlugin] CSRF protection context has been corrupted or modified by another plugin or interceptor");
318
+ }
319
+ const excluded = await value(this.exclude, options2);
320
+ if (!excluded && !options2.context[SIMPLE_CSRF_PROTECTION_CONTEXT_SYMBOL]) {
321
+ throw this.error;
322
+ }
323
+ return options2.next();
324
+ });
193
325
  }
194
326
  }
195
327
 
196
- export { BatchHandlerPlugin, CORSPlugin, ResponseHeadersPlugin };
328
+ export { BatchHandlerPlugin, CORSPlugin, RequestHeadersPlugin, ResponseHeadersPlugin, SimpleCsrfProtectionHandlerPlugin, experimental_RethrowHandlerPlugin };
@@ -1,8 +1,18 @@
1
1
  import { HTTPPath, ORPCError } from '@orpc/client';
2
- import { Meta, InferSchemaOutput, AnySchema, ErrorFromErrorMap } from '@orpc/contract';
3
- import { Interceptor, ThrowableError } from '@orpc/shared';
2
+ import { Meta } from '@orpc/contract';
3
+ import { Interceptor } from '@orpc/shared';
4
4
  import { StandardResponse, StandardLazyRequest } from '@orpc/standard-server';
5
- import { a as AnyRouter, A as AnyProcedure, C as Context, P as ProcedureClientInterceptorOptions, R as Router } from './server.DLt5njUb.mjs';
5
+ import { C as Context, R as Router, b as AnyRouter, A as AnyProcedure, d as ProcedureClientInterceptorOptions } from './server.qKsRrdxW.js';
6
+
7
+ interface StandardHandlerPlugin<T extends Context> {
8
+ order?: number;
9
+ init?(options: StandardHandlerOptions<T>, router: Router<any, T>): void;
10
+ }
11
+ declare class CompositeStandardHandlerPlugin<T extends Context, TPlugin extends StandardHandlerPlugin<T>> implements StandardHandlerPlugin<T> {
12
+ protected readonly plugins: TPlugin[];
13
+ constructor(plugins?: readonly TPlugin[]);
14
+ init(options: StandardHandlerOptions<T>, router: Router<any, T>): void;
15
+ }
6
16
 
7
17
  type StandardParams = Record<string, string>;
8
18
  type StandardMatchResult = {
@@ -31,9 +41,6 @@ type StandardHandleResult = {
31
41
  matched: false;
32
42
  response: undefined;
33
43
  };
34
- interface StandardHandlerPlugin<TContext extends Context> {
35
- init?(options: StandardHandlerOptions<TContext>): void;
36
- }
37
44
  interface StandardHandlerInterceptorOptions<T extends Context> extends StandardHandleOptions<T> {
38
45
  request: StandardLazyRequest;
39
46
  }
@@ -42,16 +49,16 @@ interface StandardHandlerOptions<TContext extends Context> {
42
49
  /**
43
50
  * Interceptors at the request level, helpful when you want catch errors
44
51
  */
45
- interceptors?: Interceptor<StandardHandlerInterceptorOptions<TContext>, StandardHandleResult, ThrowableError>[];
52
+ interceptors?: Interceptor<StandardHandlerInterceptorOptions<TContext>, Promise<StandardHandleResult>>[];
46
53
  /**
47
54
  * Interceptors at the root level, helpful when you want override the request/response
48
55
  */
49
- rootInterceptors?: Interceptor<StandardHandlerInterceptorOptions<TContext>, StandardHandleResult, ThrowableError>[];
56
+ rootInterceptors?: Interceptor<StandardHandlerInterceptorOptions<TContext>, Promise<StandardHandleResult>>[];
50
57
  /**
51
58
  *
52
59
  * Interceptors for procedure client.
53
60
  */
54
- clientInterceptors?: Interceptor<ProcedureClientInterceptorOptions<TContext, Record<never, never>, Meta>, InferSchemaOutput<AnySchema>, ErrorFromErrorMap<Record<never, never>>>[];
61
+ clientInterceptors?: Interceptor<ProcedureClientInterceptorOptions<TContext, Record<never, never>, Meta>, Promise<unknown>>[];
55
62
  }
56
63
  declare class StandardHandler<T extends Context> {
57
64
  private readonly matcher;
@@ -63,4 +70,5 @@ declare class StandardHandler<T extends Context> {
63
70
  handle(request: StandardLazyRequest, options: StandardHandleOptions<T>): Promise<StandardHandleResult>;
64
71
  }
65
72
 
66
- export { type StandardHandleOptions as S, type StandardHandlerOptions as a, type StandardCodec as b, type StandardParams as c, type StandardMatcher as d, type StandardMatchResult as e, type StandardHandleResult as f, type StandardHandlerPlugin as g, type StandardHandlerInterceptorOptions as h, StandardHandler as i };
73
+ export { CompositeStandardHandlerPlugin as C, StandardHandler as f };
74
+ export type { StandardCodec as S, StandardParams as a, StandardHandleOptions as b, StandardHandleResult as c, StandardHandlerInterceptorOptions as d, StandardHandlerOptions as e, StandardHandlerPlugin as g, StandardMatchResult as h, StandardMatcher as i };
@@ -0,0 +1,12 @@
1
+ import { C as Context } from './server.qKsRrdxW.mjs';
2
+ import { b as StandardHandleOptions } from './server.BqadksTP.mjs';
3
+
4
+ type FriendlyStandardHandleOptions<T extends Context> = Omit<StandardHandleOptions<T>, 'context'> & (Record<never, never> extends T ? {
5
+ context?: T;
6
+ } : {
7
+ context: T;
8
+ });
9
+ declare function resolveFriendlyStandardHandleOptions<T extends Context>(options: FriendlyStandardHandleOptions<T>): StandardHandleOptions<T>;
10
+
11
+ export { resolveFriendlyStandardHandleOptions as r };
12
+ export type { FriendlyStandardHandleOptions as F };
@@ -1,8 +1,18 @@
1
1
  import { HTTPPath, ORPCError } from '@orpc/client';
2
- import { Meta, InferSchemaOutput, AnySchema, ErrorFromErrorMap } from '@orpc/contract';
3
- import { Interceptor, ThrowableError } from '@orpc/shared';
2
+ import { Meta } from '@orpc/contract';
3
+ import { Interceptor } from '@orpc/shared';
4
4
  import { StandardResponse, StandardLazyRequest } from '@orpc/standard-server';
5
- import { a as AnyRouter, A as AnyProcedure, C as Context, P as ProcedureClientInterceptorOptions, R as Router } from './server.DLt5njUb.js';
5
+ import { C as Context, R as Router, b as AnyRouter, A as AnyProcedure, d as ProcedureClientInterceptorOptions } from './server.qKsRrdxW.mjs';
6
+
7
+ interface StandardHandlerPlugin<T extends Context> {
8
+ order?: number;
9
+ init?(options: StandardHandlerOptions<T>, router: Router<any, T>): void;
10
+ }
11
+ declare class CompositeStandardHandlerPlugin<T extends Context, TPlugin extends StandardHandlerPlugin<T>> implements StandardHandlerPlugin<T> {
12
+ protected readonly plugins: TPlugin[];
13
+ constructor(plugins?: readonly TPlugin[]);
14
+ init(options: StandardHandlerOptions<T>, router: Router<any, T>): void;
15
+ }
6
16
 
7
17
  type StandardParams = Record<string, string>;
8
18
  type StandardMatchResult = {
@@ -31,9 +41,6 @@ type StandardHandleResult = {
31
41
  matched: false;
32
42
  response: undefined;
33
43
  };
34
- interface StandardHandlerPlugin<TContext extends Context> {
35
- init?(options: StandardHandlerOptions<TContext>): void;
36
- }
37
44
  interface StandardHandlerInterceptorOptions<T extends Context> extends StandardHandleOptions<T> {
38
45
  request: StandardLazyRequest;
39
46
  }
@@ -42,16 +49,16 @@ interface StandardHandlerOptions<TContext extends Context> {
42
49
  /**
43
50
  * Interceptors at the request level, helpful when you want catch errors
44
51
  */
45
- interceptors?: Interceptor<StandardHandlerInterceptorOptions<TContext>, StandardHandleResult, ThrowableError>[];
52
+ interceptors?: Interceptor<StandardHandlerInterceptorOptions<TContext>, Promise<StandardHandleResult>>[];
46
53
  /**
47
54
  * Interceptors at the root level, helpful when you want override the request/response
48
55
  */
49
- rootInterceptors?: Interceptor<StandardHandlerInterceptorOptions<TContext>, StandardHandleResult, ThrowableError>[];
56
+ rootInterceptors?: Interceptor<StandardHandlerInterceptorOptions<TContext>, Promise<StandardHandleResult>>[];
50
57
  /**
51
58
  *
52
59
  * Interceptors for procedure client.
53
60
  */
54
- clientInterceptors?: Interceptor<ProcedureClientInterceptorOptions<TContext, Record<never, never>, Meta>, InferSchemaOutput<AnySchema>, ErrorFromErrorMap<Record<never, never>>>[];
61
+ clientInterceptors?: Interceptor<ProcedureClientInterceptorOptions<TContext, Record<never, never>, Meta>, Promise<unknown>>[];
55
62
  }
56
63
  declare class StandardHandler<T extends Context> {
57
64
  private readonly matcher;
@@ -63,4 +70,5 @@ declare class StandardHandler<T extends Context> {
63
70
  handle(request: StandardLazyRequest, options: StandardHandleOptions<T>): Promise<StandardHandleResult>;
64
71
  }
65
72
 
66
- export { type StandardHandleOptions as S, type StandardHandlerOptions as a, type StandardCodec as b, type StandardParams as c, type StandardMatcher as d, type StandardMatchResult as e, type StandardHandleResult as f, type StandardHandlerPlugin as g, type StandardHandlerInterceptorOptions as h, StandardHandler as i };
73
+ export { CompositeStandardHandlerPlugin as C, StandardHandler as f };
74
+ export type { StandardCodec as S, StandardParams as a, StandardHandleOptions as b, StandardHandleResult as c, StandardHandlerInterceptorOptions as d, StandardHandlerOptions as e, StandardHandlerPlugin as g, StandardMatchResult as h, StandardMatcher as i };