@stacksjs/server 0.74.50 → 0.74.51

package/dist/maintenance.d.ts

@@ -77,7 +77,7 @@ export declare function isAlwaysAllowed(path: string): boolean;
  *      coming-soon when a redirect URL is configured; HTML page for
  *      maintenance).
  */
-export declare function maintenanceGate(req: Request): Promise<Response | null>;
+export declare function maintenanceGate(req: Request): Response | null | Promise<Response | null>;
 export declare interface MaintenancePayload {
   mode?: SiteMode
   time: number

package/dist/maintenance.js

@@ -129,4 +129,4 @@ import{log}from"@stacksjs/logging";import*as p from"@stacksjs/path";import{exist
     ${payload.retry?`<p class="retry">Estimated reopening: ${Math.ceil(payload.retry/60)} minutes.</p>`:""}
   </div>
 </body>
-</html>`}function escapeHtml(value){return value.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#039;")}export function maintenanceResponse(payload){return siteModeResponse(payload)}export function siteModeResponse(payload){const headers={"Content-Type":"text/html; charset=utf-8"};if(payload.retry)headers["Retry-After"]=String(payload.retry);if(payload.redirect)return new Response(null,{status:302,headers:{Location:payload.redirect}});return new Response(maintenanceHtml(payload),{status:payload.status||(payload.mode==="coming-soon"?200:503),headers})}export function bypassCookieValue(secret,mode="maintenance"){return`${bypassCookieName(mode)}=${secret}; Path=/; HttpOnly; SameSite=Lax`}const ALWAYS_ALLOWED_PATHS=new Set(["/coming-soon","/api/email/subscribe","/favicon.ico"]),ALWAYS_ALLOWED_PREFIXES=["/css/","/js/","/images/","/fonts/","/assets/","/_stx/","/_modules/","/@vite/","/@fs/","/__deps/"],ALWAYS_ALLOWED_EXTENSIONS=[".css",".js",".mjs",".map",".woff",".woff2",".ttf",".otf",".eot",".svg",".png",".jpg",".jpeg",".gif",".webp",".avif",".ico"];function configuredAllowList(){return(process.env.APP_MAINTENANCE_ALLOW??process.env.APP_COMING_SOON_ALLOW??"").split(",").map((entry)=>entry.trim()).filter(Boolean)}function isConfiguredAllowed(path){for(const entry of configuredAllowList()){if(entry.endsWith("*")){if(path.startsWith(entry.slice(0,-1)))return!0;continue}if(entry.endsWith("/")){if(path.startsWith(entry))return!0;continue}if(path===entry)return!0}return!1}export function isAlwaysAllowed(path){if(ALWAYS_ALLOWED_PATHS.has(path))return!0;if(isConfiguredAllowed(path))return!0;if(ALWAYS_ALLOWED_PREFIXES.some((p)=>path.startsWith(p)))return!0;const lower=path.toLowerCase();return ALWAYS_ALLOWED_EXTENSIONS.some((ext)=>lower.endsWith(ext))}function parseCookieHeader(header){const out={};if(!header)return out;for(const part of header.split(";")){const trimmed=part.trim(),eq=trimmed.indexOf("=");if(eq===-1)continue;const k=trimmed.slice(0,eq).trim(),v=trimmed.slice(eq+1).trim();if(k)out[k]=v}return out}function clientIp(req){const fwd=req.headers.get("x-forwarded-for");if(fwd)return fwd.split(",")[0]?.trim()??"127.0.0.1";const real=req.headers.get("x-real-ip");if(real)return real;return"127.0.0.1"}export async function maintenanceGate(req){const payloadResult=activeSiteModePayloadResult(),payload=payloadResult instanceof Promise?await payloadResult:payloadResult;if(!payload)return null;const mode=payload.mode??"maintenance",path=new URL(req.url).pathname;if(isAlwaysAllowed(path))return null;if(payload.secret&&isSecretPath(path,payload.secret)){const location=mode==="coming-soon"?`/?preview=${encodeURIComponent(payload.secret)}`:"/";return new Response(null,{status:302,headers:{Location:location,"Set-Cookie":bypassCookieValue(payload.secret,mode)}})}const cookies=parseCookieHeader(req.headers.get("cookie")),hasCookie=!!payload.secret&&hasValidBypassCookie(cookies,payload.secret,mode),appEnv=(process.env.APP_ENV||"development").toLowerCase(),trustLocalhost=!["production","staging"].includes(appEnv),ipAllowed=isAllowedIp(clientIp(req),payload.allowed,trustLocalhost);if(hasCookie||ipAllowed)return null;return siteModeResponse(payload)}
+</html>`}function escapeHtml(value){return value.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#039;")}export function maintenanceResponse(payload){return siteModeResponse(payload)}export function siteModeResponse(payload){const headers={"Content-Type":"text/html; charset=utf-8"};if(payload.retry)headers["Retry-After"]=String(payload.retry);if(payload.redirect)return new Response(null,{status:302,headers:{Location:payload.redirect}});return new Response(maintenanceHtml(payload),{status:payload.status||(payload.mode==="coming-soon"?200:503),headers})}export function bypassCookieValue(secret,mode="maintenance"){return`${bypassCookieName(mode)}=${secret}; Path=/; HttpOnly; SameSite=Lax`}const ALWAYS_ALLOWED_PATHS=new Set(["/coming-soon","/api/email/subscribe","/favicon.ico"]),ALWAYS_ALLOWED_PREFIXES=["/css/","/js/","/images/","/fonts/","/assets/","/_stx/","/_modules/","/@vite/","/@fs/","/__deps/"],ALWAYS_ALLOWED_EXTENSIONS=[".css",".js",".mjs",".map",".woff",".woff2",".ttf",".otf",".eot",".svg",".png",".jpg",".jpeg",".gif",".webp",".avif",".ico"];function configuredAllowList(){return(process.env.APP_MAINTENANCE_ALLOW??process.env.APP_COMING_SOON_ALLOW??"").split(",").map((entry)=>entry.trim()).filter(Boolean)}function isConfiguredAllowed(path){for(const entry of configuredAllowList()){if(entry.endsWith("*")){if(path.startsWith(entry.slice(0,-1)))return!0;continue}if(entry.endsWith("/")){if(path.startsWith(entry))return!0;continue}if(path===entry)return!0}return!1}export function isAlwaysAllowed(path){if(ALWAYS_ALLOWED_PATHS.has(path))return!0;if(isConfiguredAllowed(path))return!0;if(ALWAYS_ALLOWED_PREFIXES.some((p)=>path.startsWith(p)))return!0;const lower=path.toLowerCase();return ALWAYS_ALLOWED_EXTENSIONS.some((ext)=>lower.endsWith(ext))}function parseCookieHeader(header){const out={};if(!header)return out;for(const part of header.split(";")){const trimmed=part.trim(),eq=trimmed.indexOf("=");if(eq===-1)continue;const k=trimmed.slice(0,eq).trim(),v=trimmed.slice(eq+1).trim();if(k)out[k]=v}return out}function clientIp(req){const fwd=req.headers.get("x-forwarded-for");if(fwd)return fwd.split(",")[0]?.trim()??"127.0.0.1";const real=req.headers.get("x-real-ip");if(real)return real;return"127.0.0.1"}export function maintenanceGate(req){const payloadResult=activeSiteModePayloadResult();return payloadResult instanceof Promise?payloadResult.then((payload)=>applyMaintenanceGate(req,payload)):applyMaintenanceGate(req,payloadResult)}function applyMaintenanceGate(req,payload){if(!payload)return null;const mode=payload.mode??"maintenance",path=new URL(req.url).pathname;if(isAlwaysAllowed(path))return null;if(payload.secret&&isSecretPath(path,payload.secret)){const location=mode==="coming-soon"?`/?preview=${encodeURIComponent(payload.secret)}`:"/";return new Response(null,{status:302,headers:{Location:location,"Set-Cookie":bypassCookieValue(payload.secret,mode)}})}const cookies=parseCookieHeader(req.headers.get("cookie")),hasCookie=!!payload.secret&&hasValidBypassCookie(cookies,payload.secret,mode),appEnv=(process.env.APP_ENV||"development").toLowerCase(),trustLocalhost=!["production","staging"].includes(appEnv),ipAllowed=isAllowedIp(clientIp(req),payload.allowed,trustLocalhost);if(hasCookie||ipAllowed)return null;return siteModeResponse(payload)}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/server",
   "type": "module",
   "sideEffects": false,
-  "version": "0.74.50",
+  "version": "0.74.51",
   "description": "Local development and production-ready.",
   "author": "Chris Breuer",
   "contributors": [
@@ -58,19 +58,19 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@stacksjs/auth": "0.74.50",
-    "@stacksjs/config": "0.74.50",
-    "@stacksjs/events": "0.74.50",
-    "@stacksjs/i18n": "0.74.50",
-    "@stacksjs/logging": "0.74.50",
-    "@stacksjs/orm": "0.74.50",
-    "@stacksjs/path": "0.74.50",
-    "@stacksjs/router": "0.74.50",
-    "@stacksjs/storage": "0.74.50",
+    "@stacksjs/auth": "0.74.51",
+    "@stacksjs/config": "0.74.51",
+    "@stacksjs/events": "0.74.51",
+    "@stacksjs/i18n": "0.74.51",
+    "@stacksjs/logging": "0.74.51",
+    "@stacksjs/orm": "0.74.51",
+    "@stacksjs/path": "0.74.51",
+    "@stacksjs/router": "0.74.51",
+    "@stacksjs/storage": "0.74.51",
     "bun-plugin-auto-imports": "^0.4.2"
   },
   "devDependencies": {
-    "@stacksjs/validation": "0.74.50",
+    "@stacksjs/validation": "0.74.51",
     "better-dx": "^0.2.24"
   }
 }