@stopnetic/js 0.0.6-pilot → 0.1.0

package/dist/setup.js

@@ -1,125 +1,126 @@
-import { existsSync, readFileSync, writeFileSync, mkdirSync, lstatSync, realpathSync } from 'node:fs';
-import { resolve, relative, dirname, isAbsolute } from 'node:path';
-import { createHash, randomBytes } from 'node:crypto';
-import { parseEnv } from 'node:util';
-import { createStopneticAccessHandler, optionsFromEnv } from './server.js';
-
-export class SetupError extends Error {}
-const digest = value => createHash('sha256').update(value).digest('hex');
-const manifestName = 'stopnetic.setup.json';
-function destination(root, name) {
-  const file = resolve(root, name);
-  const inside = relative(root, file);
-  if (!inside || inside.startsWith('..') || isAbsolute(inside) || /[\x00-\x1f]/.test(name)) throw new SetupError('Setup paths must stay inside the project.');
-  for (let cursor = file; cursor !== root; cursor = dirname(cursor)) {
-    if (lstatSync(cursor, { throwIfNoEntry: false })?.isSymbolicLink()) throw new SetupError('Setup refuses symbolic links.');
-  }
-  return file;
-}
-function text(file) { return existsSync(file) ? readFileSync(file, 'utf8') : ''; }
-function environment(root) {
-  try {
-    return { ...parseEnv(text(destination(root, '.env'))), ...parseEnv(text(destination(root, '.env.local'))), ...process.env };
-  } catch { throw new SetupError('Check server environment file formatting.'); }
-}
-function project(root) {
-  try { return JSON.parse(readFileSync(destination(root, 'package.json'), 'utf8')); }
-  catch { throw new SetupError('Run setup from a project with a valid package.json.'); }
-}
-function platformFor(root, supplied) {
-  if (supplied && !['netlify', 'vercel', 'node'].includes(supplied)) throw new SetupError('Choose netlify, vercel or node.');
-  if (supplied) return supplied;
-  const netlify = existsSync(destination(root, 'netlify.toml'));
-  const vercel = existsSync(destination(root, 'vercel.json'));
-  if (netlify && !vercel) return 'netlify';
-  if (vercel && !netlify) return 'vercel';
-  throw new SetupError('Choose your hosting explicitly: --platform netlify, vercel or node.');
-}
-const legacyGuideDigests = new Set([
-  'b1f149af44f9ceb08fb80c18cb5d4b521620196f536d8ad422ab94d15d1d125d', // 0.0.2
-  '55e36295b6aa87ad9558cde29786998483095adeae74e149ff5c7fe78507fad7', // published 0.0.3
-  '08f919257d8c85af4e56e842705825832ae2810ed68d5c1dfc8405c8f7be7610', // published 0.0.4
-  '45bd696f196c3d1447a978987a787755b239f75e9e6a3697f4efbb210ce75597', // published 0.0.5
-]);
-const clientGuide = readFileSync(new URL('./client-guide.md', import.meta.url), 'utf8');
-
-function filesFor(root, platform) {
-  const files = {
-    'stopnetic-client-guide.md': clientGuide,
-    '.env.stopnetic.example': `# SERVER settings; copy actual values from Stopnetic Integration.\nSTOPNETIC_WEBSITE_ORIGIN=https://www.example.com\nSTOPNETIC_SITE_ID=\nSTOPNETIC_API_URL=https://your-stopnetic-service/api/integration/decision\nSTOPNETIC_API_TOKEN=\nSTOPNETIC_DECISION_PUBLIC_KEY=\nSTOPNETIC_COOKIE_SECRET=\n`,
-  };
-  if (platform === 'netlify') {
-    const toml = text(destination(root, 'netlify.toml'));
-    const build = toml.match(/\[build\]([^]*?)(?=\n\[|$)/)?.[1] || '';
-    if (/^\s*base\s*=/m.test(build)) throw new SetupError('Run from the Netlify base directory and review custom base configuration before using setup.');
-    const section = toml.match(/\[functions\]([^]*?)(?=\n\[|$)/)?.[1] || '';
-    const match = section.match(/^\s*directory\s*=\s*["']([^"']+)["']\s*(?:#.*)?$/m);
-    if (/^\s*directory\s*=/m.test(section) && !match) throw new SetupError('Review your custom Netlify functions directory.');
-    const directory = match?.[1] || 'netlify/functions';
-    destination(root, directory);
-    files[`${directory}/stopnetic.mjs`] = `import { createStopneticAccessHandler } from '@stopnetic/js/server';\nlet access;\nexport default request => (access ??= createStopneticAccessHandler())(request);\nexport const config = { path: ['/api/stopnetic/access', '/api/stopnetic/verify'], preferStatic: false };\n`;
-  } else if (platform === 'vercel') {
-    files['api/stopnetic/[operation].mjs'] = `import { createStopneticAccessHandler } from '@stopnetic/js/server';\nlet access;\nexport default { fetch: request => (access ??= createStopneticAccessHandler())(request) };\n`;
-  } else {
-    files['stopnetic.server.mjs'] = `import { createStopneticServer } from '@stopnetic/js/server';\nexport function installStopnetic(app) {\n  const { access, guard } = createStopneticServer();\n  app.use(access);\n  app.use(guard);\n}\n`;
-  }
-  return files;
-}
-
-export function setup(input, { platform: supplied, dryRun = false } = {}) {
-  const root = realpathSync(resolve(input));
-  const pkg = project(root);
-  if (pkg.dependencies?.next || pkg.devDependencies?.next) throw new SetupError('Use @stopnetic/next for a Next.js project.');
-  const platform = platformFor(root, supplied);
-  const files = filesFor(root, platform);
-  const manifestPath = destination(root, manifestName);
-  let manifest;
-  if (existsSync(manifestPath)) {
-    try { manifest = JSON.parse(text(manifestPath)); } catch { throw new SetupError('Check the existing Stopnetic setup manifest.'); }
-    if (manifest.platform !== platform) throw new SetupError('A different hosting setup already exists. Review it before changing platform.');
-  }
-  const upgraded = new Set();
-  // Validate every destination before making any change. Only an unchanged
-  // older generated guide can be replaced; customer modifications are refused.
-  for (const [name, content] of Object.entries(files)) {
-    const file = destination(root, name);
-    if (existsSync(file) && text(file) !== content) {
-      const recorded = manifest?.files?.[name];
-      if (name === 'stopnetic-client-guide.md' && legacyGuideDigests.has(recorded)
-        && digest(text(file)) === recorded) upgraded.add(name);
-      else throw new SetupError(`Existing file needs manual merging: ${name}`);
-    }
-  }
-  const local = destination(root, '.env.local');
-  const ignore = destination(root, '.gitignore');
-  const env = environment(root);
-  if (dryRun) return `Dry run: ${platform}; would prepare ${Object.keys(files).join(', ')} and private cookie configuration. No files changed.`;
-  for (const [name, content] of Object.entries(files)) {
-    const file = destination(root, name);
-    mkdirSync(dirname(file), { recursive: true });
-    if (upgraded.has(name)) writeFileSync(file, content);
-    else if (!existsSync(file)) writeFileSync(file, content, { flag: 'wx' });
-  }
-  if (!env.STOPNETIC_COOKIE_SECRET) writeFileSync(local, `${text(local).replace(/\n?$/, '\n')}STOPNETIC_COOKIE_SECRET=${randomBytes(32).toString('base64url')}\n`, { mode: 0o600 });
-  if (!/(^|\n)\.env\.local$/.test(text(ignore).trimEnd())) writeFileSync(ignore, `${text(ignore).replace(/\n?$/, '\n')}.env.local\n`);
-  writeFileSync(manifestPath, JSON.stringify({ v: 1, platform, files: Object.fromEntries(Object.entries(files).map(([name, content]) => [name, digest(content)])) }, null, 2) + '\n');
-  return `Prepared ${platform} setup. Follow stopnetic-client-guide.md, configure server env, wrap protected APIs, build and deploy. Then run stopnetic-js check. No service requests or trial activation occurred.`;
-}
-
-export function checkSetup(input, { localHttp = false } = {}) {
-  const root = realpathSync(resolve(input));
-  let manifest;
-  try { manifest = JSON.parse(text(destination(root, manifestName))); } catch { throw new SetupError('Run stopnetic-js init first.'); }
-  if (manifest.v !== 1 || !['netlify', 'vercel', 'node'].includes(manifest.platform)) throw new SetupError('Invalid setup manifest.');
-  const expected = filesFor(root, manifest.platform);
-  for (const [name, content] of Object.entries(expected)) {
-    if (manifest.files?.[name] !== digest(content) || text(destination(root, name)) !== content) throw new SetupError(`Generated file changed or missing: ${name}`);
-  }
-  try {
-    const options = optionsFromEnv(environment(root));
-    if (!localHttp && !options.origin?.startsWith('https:')) throw new Error();
-    if (!localHttp && !options.apiUrl?.startsWith('https:')) throw new Error();
-    createStopneticAccessHandler(options);
-  } catch { throw new SetupError('Check server settings, HTTPS URLs, installation/signing keys and the separate cookie secret. No secret values are displayed.'); }
-  return `Checked ${manifest.platform} generated files and server configuration offline. Confirm server page enforcement, your chosen navigation mode, API wrappers and hosting routing with a deployed test. Preserve existing SSR; browser gates are optional. This does not prove coverage or start a trial.`;
-}
+import { existsSync, readFileSync, writeFileSync, mkdirSync, lstatSync, realpathSync } from 'node:fs';
+import { resolve, relative, dirname, isAbsolute } from 'node:path';
+import { createHash, randomBytes } from 'node:crypto';
+import { parseEnv } from 'node:util';
+import { createStopneticAccessHandler, optionsFromEnv } from './server.js';
+
+export class SetupError extends Error {}
+const digest = value => createHash('sha256').update(value).digest('hex');
+const manifestName = 'stopnetic.setup.json';
+function destination(root, name) {
+  const file = resolve(root, name);
+  const inside = relative(root, file);
+  if (!inside || inside.startsWith('..') || isAbsolute(inside) || /[\x00-\x1f]/.test(name)) throw new SetupError('Setup paths must stay inside the project.');
+  for (let cursor = file; cursor !== root; cursor = dirname(cursor)) {
+    if (lstatSync(cursor, { throwIfNoEntry: false })?.isSymbolicLink()) throw new SetupError('Setup refuses symbolic links.');
+  }
+  return file;
+}
+function text(file) { return existsSync(file) ? readFileSync(file, 'utf8') : ''; }
+function environment(root) {
+  try {
+    return { ...parseEnv(text(destination(root, '.env'))), ...parseEnv(text(destination(root, '.env.local'))), ...process.env };
+  } catch { throw new SetupError('Check server environment file formatting.'); }
+}
+function project(root) {
+  try { return JSON.parse(readFileSync(destination(root, 'package.json'), 'utf8')); }
+  catch { throw new SetupError('Run setup from a project with a valid package.json.'); }
+}
+function platformFor(root, supplied) {
+  if (supplied && !['netlify', 'vercel', 'node'].includes(supplied)) throw new SetupError('Choose netlify, vercel or node.');
+  if (supplied) return supplied;
+  const netlify = existsSync(destination(root, 'netlify.toml'));
+  const vercel = existsSync(destination(root, 'vercel.json'));
+  if (netlify && !vercel) return 'netlify';
+  if (vercel && !netlify) return 'vercel';
+  throw new SetupError('Choose your hosting explicitly: --platform netlify, vercel or node.');
+}
+const legacyGuideDigests = new Set([
+  'b1f149af44f9ceb08fb80c18cb5d4b521620196f536d8ad422ab94d15d1d125d', // 0.0.2
+  '55e36295b6aa87ad9558cde29786998483095adeae74e149ff5c7fe78507fad7', // published 0.0.3
+  '08f919257d8c85af4e56e842705825832ae2810ed68d5c1dfc8405c8f7be7610', // published 0.0.4
+  '45bd696f196c3d1447a978987a787755b239f75e9e6a3697f4efbb210ce75597', // published 0.0.5
+  'a5b2c1100ff704c2675feb6fecb50cf7371dda446b33d4655d43089bfba14a2e', // published 0.0.6
+]);
+const clientGuide = readFileSync(new URL('./client-guide.md', import.meta.url), 'utf8');
+
+function filesFor(root, platform) {
+  const files = {
+    'stopnetic-client-guide.md': clientGuide,
+    '.env.stopnetic.example': `# SERVER settings; copy actual values from Stopnetic Integration.\nSTOPNETIC_WEBSITE_ORIGIN=https://www.example.com\nSTOPNETIC_SITE_ID=\nSTOPNETIC_API_URL=https://your-stopnetic-service/api/integration/decision\nSTOPNETIC_API_TOKEN=\nSTOPNETIC_DECISION_PUBLIC_KEY=\nSTOPNETIC_COOKIE_SECRET=\n`,
+  };
+  if (platform === 'netlify') {
+    const toml = text(destination(root, 'netlify.toml'));
+    const build = toml.match(/\[build\]([^]*?)(?=\n\[|$)/)?.[1] || '';
+    if (/^\s*base\s*=/m.test(build)) throw new SetupError('Run from the Netlify base directory and review custom base configuration before using setup.');
+    const section = toml.match(/\[functions\]([^]*?)(?=\n\[|$)/)?.[1] || '';
+    const match = section.match(/^\s*directory\s*=\s*["']([^"']+)["']\s*(?:#.*)?$/m);
+    if (/^\s*directory\s*=/m.test(section) && !match) throw new SetupError('Review your custom Netlify functions directory.');
+    const directory = match?.[1] || 'netlify/functions';
+    destination(root, directory);
+    files[`${directory}/stopnetic.mjs`] = `import { createStopneticAccessHandler } from '@stopnetic/js/server';\nlet access;\nexport default request => (access ??= createStopneticAccessHandler())(request);\nexport const config = { path: ['/api/stopnetic/access', '/api/stopnetic/verify'], preferStatic: false };\n`;
+  } else if (platform === 'vercel') {
+    files['api/stopnetic/[operation].mjs'] = `import { createStopneticAccessHandler } from '@stopnetic/js/server';\nlet access;\nexport default { fetch: request => (access ??= createStopneticAccessHandler())(request) };\n`;
+  } else {
+    files['stopnetic.server.mjs'] = `import { createStopneticServer } from '@stopnetic/js/server';\nexport function installStopnetic(app) {\n  const { access, guard } = createStopneticServer();\n  app.use(access);\n  app.use(guard);\n}\n`;
+  }
+  return files;
+}
+
+export function setup(input, { platform: supplied, dryRun = false } = {}) {
+  const root = realpathSync(resolve(input));
+  const pkg = project(root);
+  if (pkg.dependencies?.next || pkg.devDependencies?.next) throw new SetupError('Use @stopnetic/next for a Next.js project.');
+  const platform = platformFor(root, supplied);
+  const files = filesFor(root, platform);
+  const manifestPath = destination(root, manifestName);
+  let manifest;
+  if (existsSync(manifestPath)) {
+    try { manifest = JSON.parse(text(manifestPath)); } catch { throw new SetupError('Check the existing Stopnetic setup manifest.'); }
+    if (manifest.platform !== platform) throw new SetupError('A different hosting setup already exists. Review it before changing platform.');
+  }
+  const upgraded = new Set();
+  // Validate every destination before making any change. Only an unchanged
+  // older generated guide can be replaced; customer modifications are refused.
+  for (const [name, content] of Object.entries(files)) {
+    const file = destination(root, name);
+    if (existsSync(file) && text(file) !== content) {
+      const recorded = manifest?.files?.[name];
+      if (name === 'stopnetic-client-guide.md' && legacyGuideDigests.has(recorded)
+        && digest(text(file)) === recorded) upgraded.add(name);
+      else throw new SetupError(`Existing file needs manual merging: ${name}`);
+    }
+  }
+  const local = destination(root, '.env.local');
+  const ignore = destination(root, '.gitignore');
+  const env = environment(root);
+  if (dryRun) return `Dry run: ${platform}; would prepare ${Object.keys(files).join(', ')} and private cookie configuration. No files changed.`;
+  for (const [name, content] of Object.entries(files)) {
+    const file = destination(root, name);
+    mkdirSync(dirname(file), { recursive: true });
+    if (upgraded.has(name)) writeFileSync(file, content);
+    else if (!existsSync(file)) writeFileSync(file, content, { flag: 'wx' });
+  }
+  if (!env.STOPNETIC_COOKIE_SECRET) writeFileSync(local, `${text(local).replace(/\n?$/, '\n')}STOPNETIC_COOKIE_SECRET=${randomBytes(32).toString('base64url')}\n`, { mode: 0o600 });
+  if (!/(^|\n)\.env\.local$/.test(text(ignore).trimEnd())) writeFileSync(ignore, `${text(ignore).replace(/\n?$/, '\n')}.env.local\n`);
+  writeFileSync(manifestPath, JSON.stringify({ v: 1, platform, files: Object.fromEntries(Object.entries(files).map(([name, content]) => [name, digest(content)])) }, null, 2) + '\n');
+  return `Prepared ${platform} setup. Follow stopnetic-client-guide.md, configure server env, wrap protected APIs, build and deploy. Then run stopnetic-js check. No service requests or trial activation occurred.`;
+}
+
+export function checkSetup(input, { localHttp = false } = {}) {
+  const root = realpathSync(resolve(input));
+  let manifest;
+  try { manifest = JSON.parse(text(destination(root, manifestName))); } catch { throw new SetupError('Run stopnetic-js init first.'); }
+  if (manifest.v !== 1 || !['netlify', 'vercel', 'node'].includes(manifest.platform)) throw new SetupError('Invalid setup manifest.');
+  const expected = filesFor(root, manifest.platform);
+  for (const [name, content] of Object.entries(expected)) {
+    if (manifest.files?.[name] !== digest(content) || text(destination(root, name)) !== content) throw new SetupError(`Generated file changed or missing: ${name}`);
+  }
+  try {
+    const options = optionsFromEnv(environment(root));
+    if (!localHttp && !options.origin?.startsWith('https:')) throw new Error();
+    if (!localHttp && !options.apiUrl?.startsWith('https:')) throw new Error();
+    createStopneticAccessHandler(options);
+  } catch { throw new SetupError('Check server settings, HTTPS URLs, installation/signing keys and the separate cookie secret. No secret values are displayed.'); }
+  return `Checked ${manifest.platform} generated files and server configuration offline. Confirm server page enforcement, your chosen navigation mode, API wrappers and hosting routing with a deployed test. Preserve existing SSR; browser gates are optional. This does not prove coverage or start a trial.`;
+}

package/examples/frontend/angular/app/app.config.ts

@@ -1,8 +1,8 @@
-import { ApplicationConfig } from '@angular/core';
-import { provideHttpClient } from '@angular/common/http';
-import { provideRouter } from '@angular/router';
-import { routes } from './app.routes';
-export const appConfig: ApplicationConfig = {
-  providers: [provideRouter(routes), provideHttpClient()],
-};
-// Merge these providers into your existing appConfig; retain its other settings.
+import { ApplicationConfig } from '@angular/core';
+import { provideHttpClient } from '@angular/common/http';
+import { provideRouter } from '@angular/router';
+import { routes } from './app.routes';
+export const appConfig: ApplicationConfig = {
+  providers: [provideRouter(routes), provideHttpClient()],
+};
+// Merge these providers into your existing appConfig; retain its other settings.

package/examples/frontend/angular/app/app.routes.ts

@@ -1,20 +1,20 @@
-import { Component } from '@angular/core';
-import { Routes } from '@angular/router';
-import { MembersPage } from './members.page';
-import { stopneticRouteGuard } from './stopnetic-access.service';
-
-@Component({ template: '<main><h1>Home</h1></main>' })
-class HomePage {}
-@Component({ template: '<main><h1>Slow</h1></main>' })
-class OtherPage {}
-
-const pages: Routes = [
-  { path: '', pathMatch: 'full', component: HomePage },
-  { path: 'members', component: MembersPage },
-  { path: 'slow', component: OtherPage },
-  { path: 'blocked', component: OtherPage },
-  { path: 'offline', component: OtherPage },
-];
-export const routes: Routes = pages.map(route => ({
-  ...route, canActivate: [stopneticRouteGuard], runGuardsAndResolvers: 'always' as const,
-}));
+import { Component } from '@angular/core';
+import { Routes } from '@angular/router';
+import { MembersPage } from './members.page';
+import { stopneticRouteGuard } from './stopnetic-access.service';
+
+@Component({ template: '<main><h1>Home</h1></main>' })
+class HomePage {}
+@Component({ template: '<main><h1>Slow</h1></main>' })
+class OtherPage {}
+
+const pages: Routes = [
+  { path: '', pathMatch: 'full', component: HomePage },
+  { path: 'members', component: MembersPage },
+  { path: 'slow', component: OtherPage },
+  { path: 'blocked', component: OtherPage },
+  { path: 'offline', component: OtherPage },
+];
+export const routes: Routes = pages.map(route => ({
+  ...route, canActivate: [stopneticRouteGuard], runGuardsAndResolvers: 'always' as const,
+}));

package/examples/frontend/angular/app/app.ts

@@ -1,21 +1,21 @@
-import { Component, inject } from '@angular/core';
-import { RouterLink, RouterOutlet } from '@angular/router';
-import { StopneticAccess } from './stopnetic-access.service';
-
-@Component({
-  selector: 'app-root', imports: [RouterLink, RouterOutlet],
-  template: `
-    @if (access.state() === 'allowed') {
-      <header><nav>
-        <a routerLink="/">Home</a> <a routerLink="/members">Members</a>
-        <a routerLink="/slow">Slow</a> <a routerLink="/blocked">Blocked</a>
-        <a routerLink="/offline">Offline</a>
-      </nav></header>
-      <router-outlet/>
-      <footer>Example site</footer>
-    } @else if (access.state() === 'denied') {
-      <p role="alert">Access unavailable.</p>
-    }
-  `,
-})
-export class App { readonly access = inject(StopneticAccess); }
+import { Component, inject } from '@angular/core';
+import { RouterLink, RouterOutlet } from '@angular/router';
+import { StopneticAccess } from './stopnetic-access.service';
+
+@Component({
+  selector: 'app-root', imports: [RouterLink, RouterOutlet],
+  template: `
+    @if (access.state() === 'allowed') {
+      <header><nav>
+        <a routerLink="/">Home</a> <a routerLink="/members">Members</a>
+        <a routerLink="/slow">Slow</a> <a routerLink="/blocked">Blocked</a>
+        <a routerLink="/offline">Offline</a>
+      </nav></header>
+      <router-outlet/>
+      <footer>Example site</footer>
+    } @else if (access.state() === 'denied') {
+      <p role="alert">Access unavailable.</p>
+    }
+  `,
+})
+export class App { readonly access = inject(StopneticAccess); }

package/examples/frontend/angular/app/members.page.ts

@@ -1,21 +1,21 @@
-import { isPlatformBrowser } from '@angular/common';
-import { Component, DestroyRef, inject, OnInit, PLATFORM_ID, signal } from '@angular/core';
-import { HttpClient } from '@angular/common/http';
-import { takeUntilDestroyed } from '@angular/core/rxjs-interop';
-
-@Component({ template: '<main><h1>Members</h1><p>{{ data() }}</p></main>' })
-export class MembersPage implements OnInit {
-  readonly data = signal('Loading data...');
-  private readonly http = inject(HttpClient);
-  private readonly destroyRef = inject(DestroyRef);
-  private readonly platform = inject(PLATFORM_ID);
-  ngOnInit() {
-    // This example loads data in the browser. SSR fetches need request cookies
-    // forwarded explicitly, plus server authorization; do not bypass the guard.
-    if (!isPlatformBrowser(this.platform)) return;
-    this.http.get('/api/private', { withCredentials: true })
-      .pipe(takeUntilDestroyed(this.destroyRef))
-      .subscribe({ next: value => this.data.set(JSON.stringify(value)),
-        error: () => this.data.set('API access unavailable.') });
-  }
-}
+import { isPlatformBrowser } from '@angular/common';
+import { Component, DestroyRef, inject, OnInit, PLATFORM_ID, signal } from '@angular/core';
+import { HttpClient } from '@angular/common/http';
+import { takeUntilDestroyed } from '@angular/core/rxjs-interop';
+
+@Component({ template: '<main><h1>Members</h1><p>{{ data() }}</p></main>' })
+export class MembersPage implements OnInit {
+  readonly data = signal('Loading data...');
+  private readonly http = inject(HttpClient);
+  private readonly destroyRef = inject(DestroyRef);
+  private readonly platform = inject(PLATFORM_ID);
+  ngOnInit() {
+    // This example loads data in the browser. SSR fetches need request cookies
+    // forwarded explicitly, plus server authorization; do not bypass the guard.
+    if (!isPlatformBrowser(this.platform)) return;
+    this.http.get('/api/private', { withCredentials: true })
+      .pipe(takeUntilDestroyed(this.destroyRef))
+      .subscribe({ next: value => this.data.set(JSON.stringify(value)),
+        error: () => this.data.set('API access unavailable.') });
+  }
+}

package/examples/frontend/angular/app/stopnetic-access.service.ts

@@ -1,27 +1,27 @@
-import { isPlatformBrowser } from '@angular/common';
-import { inject, Injectable, PLATFORM_ID, signal } from '@angular/core';
-import { CanActivateFn } from '@angular/router';
-import { checkAccess } from '@stopnetic/js/browser';
-
-@Injectable({ providedIn: 'root' })
-export class StopneticAccess {
-  readonly state = signal<'checking' | 'allowed' | 'denied'>('checking');
-  private readonly platform = inject(PLATFORM_ID);
-  private current?: AbortController;
-  async check(path: string): Promise<boolean> {
-    // Node SSR must be authorized by the SERVER guard before Angular renders.
-    if (!isPlatformBrowser(this.platform)) { this.state.set('allowed'); return true; }
-    this.current?.abort();
-    const controller = new AbortController(); this.current = controller;
-    this.state.set('checking');
-    try {
-      const result = await checkAccess(path.split('#')[0], { signal: controller.signal });
-      if (controller.signal.aborted) return false;
-      if (result.allowed) { this.state.set('allowed'); return true; }
-      if (result.reason === 'verification_required' && result.verificationUrl) location.assign(result.verificationUrl);
-    } catch { if (controller.signal.aborted) return false; }
-    this.state.set('denied'); return false;
-  }
-}
-export const stopneticRouteGuard: CanActivateFn = (_route, state) =>
-  inject(StopneticAccess).check(state.url);
+import { isPlatformBrowser } from '@angular/common';
+import { inject, Injectable, PLATFORM_ID, signal } from '@angular/core';
+import { CanActivateFn } from '@angular/router';
+import { checkAccess } from '@stopnetic/js/browser';
+
+@Injectable({ providedIn: 'root' })
+export class StopneticAccess {
+  readonly state = signal<'checking' | 'allowed' | 'denied'>('checking');
+  private readonly platform = inject(PLATFORM_ID);
+  private current?: AbortController;
+  async check(path: string): Promise<boolean> {
+    // Node SSR must be authorized by the SERVER guard before Angular renders.
+    if (!isPlatformBrowser(this.platform)) { this.state.set('allowed'); return true; }
+    this.current?.abort();
+    const controller = new AbortController(); this.current = controller;
+    this.state.set('checking');
+    try {
+      const result = await checkAccess(path.split('#')[0], { signal: controller.signal });
+      if (controller.signal.aborted) return false;
+      if (result.allowed) { this.state.set('allowed'); return true; }
+      if (result.reason === 'verification_required' && result.verificationUrl) location.assign(result.verificationUrl);
+    } catch { if (controller.signal.aborted) return false; }
+    this.state.set('denied'); return false;
+  }
+}
+export const stopneticRouteGuard: CanActivateFn = (_route, state) =>
+  inject(StopneticAccess).check(state.url);

package/examples/frontend/angular/main.ts

@@ -1,4 +1,4 @@
-import { bootstrapApplication } from '@angular/platform-browser';
-import { App } from './app/app';
-import { appConfig } from './app/app.config';
-bootstrapApplication(App, appConfig).catch(error => console.error(error));
+import { bootstrapApplication } from '@angular/platform-browser';
+import { App } from './app/app';
+import { appConfig } from './app/app.config';
+bootstrapApplication(App, appConfig).catch(error => console.error(error));

package/examples/frontend/load-private-data.d.ts

@@ -1 +1 @@
-export function loadPrivateData(signal?: AbortSignal): Promise<unknown>;
+export function loadPrivateData(signal?: AbortSignal): Promise<unknown>;

package/examples/frontend/load-private-data.js

@@ -1,9 +1,9 @@
-// Browser example. The /api/private SERVER handler must also be guarded.
-export async function loadPrivateData(signal) {
-  const response = await fetch('/api/private', {
-    credentials: 'same-origin', cache: 'no-store', signal,
-    headers: { Accept: 'application/json' },
-  });
-  if (!response.ok) throw new Error(`Request failed (HTTP ${response.status}).`);
-  return response.json();
-}
+// Browser example. The /api/private SERVER handler must also be guarded.
+export async function loadPrivateData(signal) {
+  const response = await fetch('/api/private', {
+    credentials: 'same-origin', cache: 'no-store', signal,
+    headers: { Accept: 'application/json' },
+  });
+  if (!response.ok) throw new Error(`Request failed (HTTP ${response.status}).`);
+  return response.json();
+}

package/examples/frontend/react/App.tsx

@@ -1,48 +1,48 @@
-import { useEffect, useState, type ReactNode } from 'react';
-import { BrowserRouter, Link, Route, Routes, useLocation } from 'react-router-dom';
-import { StopneticBoundary } from '@stopnetic/js/react';
-import { loadPrivateData } from '../load-private-data.js';
-
-function RouteGuard({ children }: { children: ReactNode }) {
-  const location = useLocation();
-  return <StopneticBoundary path={location.pathname + location.search}
-    pending={null}
-    blocked={<p>Access unavailable.</p>}>
-    {children}
-  </StopneticBoundary>;
-}
-
-function Members() {
-  const [data, setData] = useState('Loading data...');
-  useEffect(() => {
-    const controller = new AbortController();
-    loadPrivateData(controller.signal)
-      .then(value => { if (!controller.signal.aborted) setData(JSON.stringify(value) ?? 'No data.'); })
-      .catch(() => { if (!controller.signal.aborted) setData('API access unavailable.'); });
-    return () => controller.abort();
-  }, []);
-  return <main><h1>Members</h1><p>{data}</p></main>;
-}
-
-function Layout() {
-  return <>
-    <header><nav>
-      <Link to="/">Home</Link>{' '}<Link to="/members">Members</Link>{' '}
-      <Link to="/slow">Slow</Link>{' '}<Link to="/blocked">Blocked</Link>{' '}
-      <Link to="/offline">Offline</Link>
-    </nav></header>
-    <Routes>
-      <Route caseSensitive path="/" element={<main><h1>Home</h1></main>}/>
-      <Route caseSensitive path="/members" element={<Members/>}/>
-      <Route caseSensitive path="/slow" element={<main><h1>Slow</h1></main>}/>
-      <Route caseSensitive path="/blocked" element={<main><h1>Blocked</h1></main>}/>
-      <Route caseSensitive path="/offline" element={<main><h1>Offline</h1></main>}/>
-      <Route path="*" element={<main><h1>Not found</h1></main>}/>
-    </Routes>
-    <footer>Example site</footer>
-  </>;
-}
-
-export default function App() {
-  return <BrowserRouter><RouteGuard><Layout/></RouteGuard></BrowserRouter>;
-}
+import { useEffect, useState, type ReactNode } from 'react';
+import { BrowserRouter, Link, Route, Routes, useLocation } from 'react-router-dom';
+import { StopneticBoundary } from '@stopnetic/js/react';
+import { loadPrivateData } from '../load-private-data.js';
+
+function RouteGuard({ children }: { children: ReactNode }) {
+  const location = useLocation();
+  return <StopneticBoundary path={location.pathname + location.search}
+    pending={null}
+    blocked={<p>Access unavailable.</p>}>
+    {children}
+  </StopneticBoundary>;
+}
+
+function Members() {
+  const [data, setData] = useState('Loading data...');
+  useEffect(() => {
+    const controller = new AbortController();
+    loadPrivateData(controller.signal)
+      .then(value => { if (!controller.signal.aborted) setData(JSON.stringify(value) ?? 'No data.'); })
+      .catch(() => { if (!controller.signal.aborted) setData('API access unavailable.'); });
+    return () => controller.abort();
+  }, []);
+  return <main><h1>Members</h1><p>{data}</p></main>;
+}
+
+function Layout() {
+  return <>
+    <header><nav>
+      <Link to="/">Home</Link>{' '}<Link to="/members">Members</Link>{' '}
+      <Link to="/slow">Slow</Link>{' '}<Link to="/blocked">Blocked</Link>{' '}
+      <Link to="/offline">Offline</Link>
+    </nav></header>
+    <Routes>
+      <Route caseSensitive path="/" element={<main><h1>Home</h1></main>}/>
+      <Route caseSensitive path="/members" element={<Members/>}/>
+      <Route caseSensitive path="/slow" element={<main><h1>Slow</h1></main>}/>
+      <Route caseSensitive path="/blocked" element={<main><h1>Blocked</h1></main>}/>
+      <Route caseSensitive path="/offline" element={<main><h1>Offline</h1></main>}/>
+      <Route path="*" element={<main><h1>Not found</h1></main>}/>
+    </Routes>
+    <footer>Example site</footer>
+  </>;
+}
+
+export default function App() {
+  return <BrowserRouter><RouteGuard><Layout/></RouteGuard></BrowserRouter>;
+}

package/examples/frontend/react/main.tsx

@@ -1,3 +1,3 @@
-import { createRoot } from 'react-dom/client';
-import App from './App';
-createRoot(document.getElementById('app')!).render(<App/>);
+import { createRoot } from 'react-dom/client';
+import App from './App';
+createRoot(document.getElementById('app')!).render(<App/>);