@stacksjs/server 0.72.76 → 0.72.77

package/dist/maintenance.d.ts

@@ -52,6 +52,7 @@ export declare function siteModeResponse(payload: MaintenancePayload): Response;
  * Create bypass cookie
  */
 export declare function bypassCookieValue(secret: string, mode?: SiteMode): string;
+export declare function isAlwaysAllowed(path: string): boolean;
 /**
  * Single source of truth for the maintenance / coming-soon gate.
  *

package/dist/maintenance.js

@@ -129,4 +129,4 @@ import{log}from"@stacksjs/logging";import*as p from"@stacksjs/path";const DEFAUL
     ${payload.retry?`<p class="retry">Estimated reopening: ${Math.ceil(payload.retry/60)} minutes.</p>`:""}
   </div>
 </body>
-</html>`}function escapeHtml(value){return value.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#039;")}export function maintenanceResponse(payload){return siteModeResponse(payload)}export function siteModeResponse(payload){const headers={"Content-Type":"text/html; charset=utf-8"};if(payload.retry)headers["Retry-After"]=String(payload.retry);if(payload.redirect)return new Response(null,{status:302,headers:{Location:payload.redirect}});return new Response(maintenanceHtml(payload),{status:payload.status||(payload.mode==="coming-soon"?200:503),headers})}export function bypassCookieValue(secret,mode="maintenance"){return`${bypassCookieName(mode)}=${secret}; Path=/; HttpOnly; SameSite=Lax`}const ALWAYS_ALLOWED_PATHS=new Set(["/coming-soon","/api/email/subscribe","/favicon.ico"]),ALWAYS_ALLOWED_PREFIXES=["/css/","/js/","/images/","/fonts/","/assets/","/_modules/","/@vite/","/@fs/","/__deps/"];function isAlwaysAllowed(path){if(ALWAYS_ALLOWED_PATHS.has(path))return!0;return ALWAYS_ALLOWED_PREFIXES.some((p)=>path.startsWith(p))}function parseCookieHeader(header){const out={};if(!header)return out;for(const part of header.split(";")){const trimmed=part.trim(),eq=trimmed.indexOf("=");if(eq===-1)continue;const k=trimmed.slice(0,eq).trim(),v=trimmed.slice(eq+1).trim();if(k)out[k]=v}return out}function clientIp(req){const fwd=req.headers.get("x-forwarded-for");if(fwd)return fwd.split(",")[0]?.trim()??"127.0.0.1";const real=req.headers.get("x-real-ip");if(real)return real;return"127.0.0.1"}export async function maintenanceGate(req){const payload=await activeSiteModePayload();if(!payload)return null;const mode=payload.mode??"maintenance",path=new URL(req.url).pathname;if(isAlwaysAllowed(path))return null;if(payload.secret&&isSecretPath(path,payload.secret)){const location=mode==="coming-soon"?`/?preview=${encodeURIComponent(payload.secret)}`:"/";return new Response(null,{status:302,headers:{Location:location,"Set-Cookie":bypassCookieValue(payload.secret,mode)}})}const cookies=parseCookieHeader(req.headers.get("cookie")),hasCookie=!!payload.secret&&hasValidBypassCookie(cookies,payload.secret,mode),appEnv=(process.env.APP_ENV||"development").toLowerCase(),trustLocalhost=!["production","staging"].includes(appEnv),ipAllowed=isAllowedIp(clientIp(req),payload.allowed,trustLocalhost);if(hasCookie||ipAllowed)return null;return siteModeResponse(payload)}
+</html>`}function escapeHtml(value){return value.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#039;")}export function maintenanceResponse(payload){return siteModeResponse(payload)}export function siteModeResponse(payload){const headers={"Content-Type":"text/html; charset=utf-8"};if(payload.retry)headers["Retry-After"]=String(payload.retry);if(payload.redirect)return new Response(null,{status:302,headers:{Location:payload.redirect}});return new Response(maintenanceHtml(payload),{status:payload.status||(payload.mode==="coming-soon"?200:503),headers})}export function bypassCookieValue(secret,mode="maintenance"){return`${bypassCookieName(mode)}=${secret}; Path=/; HttpOnly; SameSite=Lax`}const ALWAYS_ALLOWED_PATHS=new Set(["/coming-soon","/api/email/subscribe","/favicon.ico"]),ALWAYS_ALLOWED_PREFIXES=["/css/","/js/","/images/","/fonts/","/assets/","/_stx/","/_modules/","/@vite/","/@fs/","/__deps/"],ALWAYS_ALLOWED_EXTENSIONS=[".css",".js",".mjs",".map",".woff",".woff2",".ttf",".otf",".eot",".svg",".png",".jpg",".jpeg",".gif",".webp",".avif",".ico"];export function isAlwaysAllowed(path){if(ALWAYS_ALLOWED_PATHS.has(path))return!0;if(ALWAYS_ALLOWED_PREFIXES.some((p)=>path.startsWith(p)))return!0;const lower=path.toLowerCase();return ALWAYS_ALLOWED_EXTENSIONS.some((ext)=>lower.endsWith(ext))}function parseCookieHeader(header){const out={};if(!header)return out;for(const part of header.split(";")){const trimmed=part.trim(),eq=trimmed.indexOf("=");if(eq===-1)continue;const k=trimmed.slice(0,eq).trim(),v=trimmed.slice(eq+1).trim();if(k)out[k]=v}return out}function clientIp(req){const fwd=req.headers.get("x-forwarded-for");if(fwd)return fwd.split(",")[0]?.trim()??"127.0.0.1";const real=req.headers.get("x-real-ip");if(real)return real;return"127.0.0.1"}export async function maintenanceGate(req){const payload=await activeSiteModePayload();if(!payload)return null;const mode=payload.mode??"maintenance",path=new URL(req.url).pathname;if(isAlwaysAllowed(path))return null;if(payload.secret&&isSecretPath(path,payload.secret)){const location=mode==="coming-soon"?`/?preview=${encodeURIComponent(payload.secret)}`:"/";return new Response(null,{status:302,headers:{Location:location,"Set-Cookie":bypassCookieValue(payload.secret,mode)}})}const cookies=parseCookieHeader(req.headers.get("cookie")),hasCookie=!!payload.secret&&hasValidBypassCookie(cookies,payload.secret,mode),appEnv=(process.env.APP_ENV||"development").toLowerCase(),trustLocalhost=!["production","staging"].includes(appEnv),ipAllowed=isAllowedIp(clientIp(req),payload.allowed,trustLocalhost);if(hasCookie||ipAllowed)return null;return siteModeResponse(payload)}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/server",
   "type": "module",
   "sideEffects": false,
-  "version": "0.72.76",
+  "version": "0.72.77",
   "description": "Local development and production-ready.",
   "author": "Chris Breuer",
   "contributors": [
@@ -58,11 +58,11 @@
     "prepublishOnly": "bun run build"
   },
   "devDependencies": {
-    "@stacksjs/config": "0.72.76",
+    "@stacksjs/config": "0.72.77",
     "better-dx": "^0.2.24",
-    "@stacksjs/path": "0.72.76",
-    "@stacksjs/router": "0.72.76",
-    "@stacksjs/validation": "0.72.76"
+    "@stacksjs/path": "0.72.77",
+    "@stacksjs/router": "0.72.77",
+    "@stacksjs/validation": "0.72.77"
   },
   "dependencies": {
     "bun-plugin-auto-imports": "^0.4.0"