@stacksjs/rpx 0.11.19 → 0.11.21

package/dist/start.d.ts

@@ -1,13 +1,36 @@
-import * as http from 'node:http';
-import * as http2 from 'node:http2';
-import * as https from 'node:https';
-import type { CleanupOptions, ProxyOption, ProxyOptions, ProxySetupOptions, SingleProxyConfig } from './types';
+import { createOriginGuard } from './origin-guard';
+import * as path from 'node:path';
+import type { CleanupOptions, ProxyOption, ProxyOptions, ProxySetupOptions, SingleProxyConfig, SSLConfig } from './types';
+import type { ProxyRoute } from './proxy-handler';
+import type { SniTlsEntry } from './sni';
 export declare function cleanup(options?: CleanupOptions): Promise<void>;
 export declare function startServer(options: SingleProxyConfig): Promise<void>;
 export declare function setupProxy(options: ProxySetupOptions): Promise<void>;
-export declare function startHttpRedirectServer(verbose?: boolean): void;
+export declare function startHttpRedirectServer(verbose?: boolean, httpPort?: number, httpsPort?: number, acmeChallengeWebroot?: string): void;
 export declare function startProxy(options: ProxyOption): void;
 export declare function startProxies(options?: ProxyOptions): Promise<void>;
-declare type AnyServerType = http.Server | https.Server | http2.Http2SecureServer;
-declare type AnyIncomingMessage = http.IncomingMessage | http2.Http2ServerRequest;
-declare type AnyServerResponse = http.ServerResponse | http2.Http2ServerResponse;
+/**
+ * Build the `(host, path, route)` entries for a shared single-port listener from
+ * the resolved per-proxy options, and ensure an `/etc/hosts` entry exists for
+ * each non-localhost domain (once per domain). Several proxies can share one
+ * domain on different paths (e.g. `/api` → app, `/docs` → static dir, `/` →
+ * public) — `buildHostRoutes` groups + longest-prefix-sorts them later. Shared
+ * by the single-port HTTPS and HTTP paths so routing is identical regardless of
+ * whether TLS is terminated.
+ */
+export declare function collectRouteEntries(proxyOptions: ProxyOption[], hostsEnabled: boolean, verbose: boolean): Promise<Array<{ host: string, path?: string, route: ProxyRoute }>>;
+/**
+ * Create a single shared `Bun.serve` listener that routes every request by
+ * `Host` header (and path) to the right upstream. When `sslConfig` is provided
+ * the listener terminates TLS; otherwise it serves plain HTTP (single-port HTTP
+ * mode). Registers the server for cleanup and returns it, or `null` if
+ * `Bun.serve` threw (e.g. the port could not be bound).
+ */
+export declare function createSharedProxyServer(opts: {
+  routeEntries: Array<{ host: string, path?: string, route: ProxyRoute }>
+  listenPort: number
+  sslConfig: SharedTlsConfig | null
+  originGuard: ReturnType<typeof createOriginGuard> | null
+  verbose: boolean
+}): ReturnType<typeof Bun.serve> | null;
+declare type SharedTlsConfig = SSLConfig | SniTlsEntry[];

package/dist/types.d.ts

@@ -1,4 +1,5 @@
 import type { OriginGuardOptions } from './origin-guard';
+import type { RedirectRouteConfig } from './redirect';
 import type { TlsConfig, TlsOption } from '@stacksjs/tlsx';
 export type { TlsConfig, TlsOption };
 export declare interface StartOptions {
@@ -17,13 +18,28 @@ export declare interface StaticRouteConfig {
   pathRewriteStyle?: PathRewriteStyle
   maxAge?: number
 }
+/**
+ * HTTP Basic auth for a single route. When set, rpx challenges every request to
+ * the route with `401`/`WWW-Authenticate` until valid credentials are supplied
+ * (proxy, static, and WebSocket transports are all gated). Credentials may be
+ * given inline, as a `users[]` list, and/or via an Apache `htpasswd` file.
+ */
+export declare interface BasicAuthConfig {
+  realm?: string
+  username?: string
+  password?: string
+  users?: Array<{ username: string, password: string }>
+  htpasswdFile?: string
+}
 export declare interface BaseProxyConfig {
   from?: string
   to: string
+  auth?: BasicAuthConfig
   path?: string
   start?: StartOptions
   pathRewrites?: PathRewrite[]
   static?: string | StaticRouteConfig
+  redirect?: string | RedirectRouteConfig
   id?: string
 }
 export declare interface CleanupConfig {
@@ -79,6 +95,49 @@ export declare interface OnDemandTlsConfig {
   staging?: boolean
   certsDir?: string
 }
+/**
+ * One backend a site exposes, mapped to a request path. rpx picks a free port,
+ * exports it to the dev command via {@link portEnv}, and proxies {@link path}
+ * (under the site host) to `localhost:<port>`.
+ *
+ * A Stacks app, for example, has three: the frontend at `/` (env `PORT`), the
+ * API at `/api` (env `PORT_API`), and the docs at `/docs` (env `PORT_DOCS`).
+ */
+export declare interface SiteRouteTemplate {
+  path?: string
+  portEnv: string
+  defaultPort?: number
+  stripPrefix?: boolean
+  readyGate?: boolean
+}
+/**
+ * A lazily-booted project. The first request to {@link to} starts {@link command}
+ * in {@link dir}; rpx holds the request behind a "starting…" splash until the
+ * site's ready gate passes, then proxies it. After {@link idleTimeoutMs} with no
+ * traffic the process is stopped again — so a machine can "have" dozens of sites
+ * but only run the ones in active use.
+ */
+export declare interface SiteConfig {
+  to: string
+  dir: string
+  command: string
+  env?: Record<string, string>
+  routes?: SiteRouteTemplate[]
+  selfRegisters?: boolean
+  idleTimeoutMs?: number
+}
+/**
+ * On-demand sites: lazily boot a project's dev server the first time its host is
+ * visited, then proxy to it (Valet/puma-dev style). Opt-in via {@link enabled}.
+ */
+export declare interface OnDemandSitesConfig {
+  enabled?: boolean
+  sites?: SiteConfig[]
+  roots?: string[]
+  tlds?: string[]
+  idleTimeoutMs?: number
+  startupTimeoutMs?: number
+}
 export declare interface SharedProxyConfig {
   https: boolean | TlsOption
   cleanup: boolean | CleanupOptions
@@ -89,10 +148,15 @@ export declare interface SharedProxyConfig {
   cleanUrls: boolean
   changeOrigin?: boolean
   regenerateUntrustedCerts?: boolean
+  singlePortMode?: boolean
+  httpPort?: number
+  httpsPort?: number
+  acmeChallengeWebroot?: string
   viaDaemon?: boolean
   hostsManagement?: boolean
   productionCerts?: ProductionTlsConfig
   onDemandTls?: OnDemandTlsConfig
+  onDemand?: OnDemandSitesConfig
   originGuard?: OriginGuardOptions
 }
 export declare interface SingleProxyConfig extends BaseProxyConfig, SharedProxyConfig {}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stacksjs/rpx",
   "type": "module",
-  "version": "0.11.19",
+  "version": "0.11.21",
   "description": "A modern and smart reverse proxy.",
   "author": "Chris Breuer <chris@stacksjs.org>",
   "license": "MIT",
@@ -27,11 +27,11 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "bun": "./src/index.ts",
-      "import": "./dist/src/index.js"
+      "bun": "./dist/index.js",
+      "import": "./dist/index.js"
     }
   },
-  "module": "./dist/src/index.js",
+  "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "bin": {
     "rpx": "./dist/bin/cli.js",
@@ -39,8 +39,7 @@
   },
   "files": [
     "README.md",
-    "dist",
-    "src"
+    "dist"
   ],
   "scripts": {
     "build": "bun build.ts && bun build ./bin/cli.ts --compile --minify --outfile bin/rpx",
@@ -73,7 +72,7 @@
   },
   "dependencies": {
     "@stacksjs/clapp": "^0.2.10",
-    "@stacksjs/tlsx": "^0.13.7"
+    "@stacksjs/tlsx": "^0.13.9"
   },
   "devDependencies": {
     "bunfig": "^0.15.6",