@stopnetic/js 0.0.6-pilot → 0.1.0

package/examples/frontend/solid/App.tsx

@@ -1,54 +1,54 @@
-import { createEffect, createSignal, onCleanup, Show, type ParentComponent } from 'solid-js';
-import { A, Route, Router, useLocation } from '@solidjs/router';
-import { checkAccess } from '@stopnetic/js/browser';
-import { loadPrivateData } from '../load-private-data.js';
-
-const GuardedLayout: ParentComponent = props => {
-  const location = useLocation();
-  const path = () => location.pathname + location.search;
-  const [result, setResult] = createSignal({ path: '', allowed: false, pending: true });
-  createEffect(() => {
-    const target = path();
-    const controller = new AbortController();
-    setResult({ path: target, allowed: false, pending: true });
-    checkAccess(target, { signal: controller.signal }).then(value => {
-      if (controller.signal.aborted) return;
-      if (!value.allowed && value.reason === 'verification_required' && value.verificationUrl) locationRedirect(value.verificationUrl);
-      setResult({ path: target, allowed: value.allowed, pending: false });
-    }).catch(() => {
-      if (!controller.signal.aborted) setResult({ path: target, allowed: false, pending: false });
-    });
-    onCleanup(() => controller.abort());
-  });
-  return <Show when={result().allowed && result().path === path() ? result() : undefined}
-    fallback={<Show when={!result().pending && result().path === path()}>
-      <p role="alert">Access unavailable.</p></Show>}>
-    {_checked => <>
-      <header><nav><A href="/">Home</A>{' '}<A href="/members">Members</A>{' '}
-        <A href="/slow">Slow</A>{' '}<A href="/blocked">Blocked</A>{' '}<A href="/offline">Offline</A>
-      </nav></header>
-      {props.children}
-      <footer>Example site</footer>
-    </>}
-  </Show>;
-};
-const locationRedirect = (url: string) => window.location.assign(url);
-
-function Members() {
-  const [data, setData] = createSignal('Loading data...');
-  const controller = new AbortController();
-  loadPrivateData(controller.signal)
-    .then(value => { if (!controller.signal.aborted) setData(JSON.stringify(value) ?? 'No data.'); })
-    .catch(() => { if (!controller.signal.aborted) setData('API access unavailable.'); });
-  onCleanup(() => controller.abort());
-  return <main><h1>Members</h1><p>{data()}</p></main>;
-}
-export default function App() {
-  return <Router root={GuardedLayout}>
-    <Route path="/" component={() => <main><h1>Home</h1></main>}/>
-    <Route path="/members" component={Members}/>
-    <Route path="/slow" component={() => <main><h1>Slow</h1></main>}/>
-    <Route path="/blocked" component={() => <main><h1>Blocked</h1></main>}/>
-    <Route path="/offline" component={() => <main><h1>Offline</h1></main>}/>
-  </Router>;
-}
+import { createEffect, createSignal, onCleanup, Show, type ParentComponent } from 'solid-js';
+import { A, Route, Router, useLocation } from '@solidjs/router';
+import { checkAccess } from '@stopnetic/js/browser';
+import { loadPrivateData } from '../load-private-data.js';
+
+const GuardedLayout: ParentComponent = props => {
+  const location = useLocation();
+  const path = () => location.pathname + location.search;
+  const [result, setResult] = createSignal({ path: '', allowed: false, pending: true });
+  createEffect(() => {
+    const target = path();
+    const controller = new AbortController();
+    setResult({ path: target, allowed: false, pending: true });
+    checkAccess(target, { signal: controller.signal }).then(value => {
+      if (controller.signal.aborted) return;
+      if (!value.allowed && value.reason === 'verification_required' && value.verificationUrl) locationRedirect(value.verificationUrl);
+      setResult({ path: target, allowed: value.allowed, pending: false });
+    }).catch(() => {
+      if (!controller.signal.aborted) setResult({ path: target, allowed: false, pending: false });
+    });
+    onCleanup(() => controller.abort());
+  });
+  return <Show when={result().allowed && result().path === path() ? result() : undefined}
+    fallback={<Show when={!result().pending && result().path === path()}>
+      <p role="alert">Access unavailable.</p></Show>}>
+    {_checked => <>
+      <header><nav><A href="/">Home</A>{' '}<A href="/members">Members</A>{' '}
+        <A href="/slow">Slow</A>{' '}<A href="/blocked">Blocked</A>{' '}<A href="/offline">Offline</A>
+      </nav></header>
+      {props.children}
+      <footer>Example site</footer>
+    </>}
+  </Show>;
+};
+const locationRedirect = (url: string) => window.location.assign(url);
+
+function Members() {
+  const [data, setData] = createSignal('Loading data...');
+  const controller = new AbortController();
+  loadPrivateData(controller.signal)
+    .then(value => { if (!controller.signal.aborted) setData(JSON.stringify(value) ?? 'No data.'); })
+    .catch(() => { if (!controller.signal.aborted) setData('API access unavailable.'); });
+  onCleanup(() => controller.abort());
+  return <main><h1>Members</h1><p>{data()}</p></main>;
+}
+export default function App() {
+  return <Router root={GuardedLayout}>
+    <Route path="/" component={() => <main><h1>Home</h1></main>}/>
+    <Route path="/members" component={Members}/>
+    <Route path="/slow" component={() => <main><h1>Slow</h1></main>}/>
+    <Route path="/blocked" component={() => <main><h1>Blocked</h1></main>}/>
+    <Route path="/offline" component={() => <main><h1>Offline</h1></main>}/>
+  </Router>;
+}

package/examples/frontend/solid/main.tsx

@@ -1,3 +1,3 @@
-import { render } from 'solid-js/web';
-import App from './App';
-render(() => <App/>, document.getElementById('app')!);
+import { render } from 'solid-js/web';
+import App from './App';
+render(() => <App/>, document.getElementById('app')!);

package/examples/frontend/svelte/App.svelte

@@ -1,56 +1,56 @@
-<script>
-  import { onMount } from 'svelte';
-  import { checkAccess } from '@stopnetic/js/browser';
-  import { loadPrivateData } from '../load-private-data.js';
-
-  let path = '';
-  let state = 'checking';
-  let data = '';
-  let current;
-  async function showPage() {
-    current?.abort();
-    const controller = new AbortController();
-    current = controller;
-    path = location.pathname;
-    state = 'checking'; data = '';
-    try {
-      const result = await checkAccess(path + location.search, { signal: controller.signal });
-      if (controller.signal.aborted) return;
-      if (!result.allowed) {
-        if (result.reason === 'verification_required' && result.verificationUrl) location.assign(result.verificationUrl);
-        state = 'denied'; return;
-      }
-      state = 'allowed';
-      if (path === '/members') {
-        data = 'Loading data...';
-        try {
-          const value = await loadPrivateData(controller.signal);
-          if (!controller.signal.aborted) data = JSON.stringify(value);
-        } catch { if (!controller.signal.aborted) data = 'API access unavailable.'; }
-      }
-    } catch { if (!controller.signal.aborted) state = 'denied'; }
-  }
-  function navigate(event) {
-    if (event.button !== 0 || event.metaKey || event.ctrlKey || event.shiftKey || event.altKey) return;
-    event.preventDefault();
-    history.pushState(null, '', event.currentTarget.href);
-    void showPage();
-  }
-  onMount(() => {
-    void showPage();
-    addEventListener('popstate', showPage);
-    return () => { current?.abort(); removeEventListener('popstate', showPage); };
-  });
-</script>
-
-{#if state === 'allowed'}
-  <header><nav>
-    <a href="/" onclick={navigate}>Home</a> <a href="/members" onclick={navigate}>Members</a>
-    <a href="/slow" onclick={navigate}>Slow</a> <a href="/blocked" onclick={navigate}>Blocked</a>
-    <a href="/offline" onclick={navigate}>Offline</a>
-  </nav></header>
-  <main><h1>{path === '/members' ? 'Members' : path === '/' ? 'Home' : path === '/slow' ? 'Slow' : 'Not found'}</h1><p>{data}</p></main>
-  <footer>Example site</footer>
-{:else if state === 'denied'}
-  <p role="alert">Access unavailable.</p>
-{/if}
+<script>
+  import { onMount } from 'svelte';
+  import { checkAccess } from '@stopnetic/js/browser';
+  import { loadPrivateData } from '../load-private-data.js';
+
+  let path = '';
+  let state = 'checking';
+  let data = '';
+  let current;
+  async function showPage() {
+    current?.abort();
+    const controller = new AbortController();
+    current = controller;
+    path = location.pathname;
+    state = 'checking'; data = '';
+    try {
+      const result = await checkAccess(path + location.search, { signal: controller.signal });
+      if (controller.signal.aborted) return;
+      if (!result.allowed) {
+        if (result.reason === 'verification_required' && result.verificationUrl) location.assign(result.verificationUrl);
+        state = 'denied'; return;
+      }
+      state = 'allowed';
+      if (path === '/members') {
+        data = 'Loading data...';
+        try {
+          const value = await loadPrivateData(controller.signal);
+          if (!controller.signal.aborted) data = JSON.stringify(value);
+        } catch { if (!controller.signal.aborted) data = 'API access unavailable.'; }
+      }
+    } catch { if (!controller.signal.aborted) state = 'denied'; }
+  }
+  function navigate(event) {
+    if (event.button !== 0 || event.metaKey || event.ctrlKey || event.shiftKey || event.altKey) return;
+    event.preventDefault();
+    history.pushState(null, '', event.currentTarget.href);
+    void showPage();
+  }
+  onMount(() => {
+    void showPage();
+    addEventListener('popstate', showPage);
+    return () => { current?.abort(); removeEventListener('popstate', showPage); };
+  });
+</script>
+
+{#if state === 'allowed'}
+  <header><nav>
+    <a href="/" onclick={navigate}>Home</a> <a href="/members" onclick={navigate}>Members</a>
+    <a href="/slow" onclick={navigate}>Slow</a> <a href="/blocked" onclick={navigate}>Blocked</a>
+    <a href="/offline" onclick={navigate}>Offline</a>
+  </nav></header>
+  <main><h1>{path === '/members' ? 'Members' : path === '/' ? 'Home' : path === '/slow' ? 'Slow' : 'Not found'}</h1><p>{data}</p></main>
+  <footer>Example site</footer>
+{:else if state === 'denied'}
+  <p role="alert">Access unavailable.</p>
+{/if}

package/examples/frontend/svelte/main.js

@@ -1,4 +1,4 @@
-// Svelte 5 entry. Svelte 4 apps retain their existing `new App(...)` entry.
-import { mount } from 'svelte';
-import App from './App.svelte';
-mount(App, { target: document.getElementById('app') });
+// Svelte 5 entry. Svelte 4 apps retain their existing `new App(...)` entry.
+import { mount } from 'svelte';
+import App from './App.svelte';
+mount(App, { target: document.getElementById('app') });

package/examples/frontend/vanilla/main.js

@@ -1,46 +1,46 @@
-import { checkAccess } from '@stopnetic/js/browser';
-import { loadPrivateData } from '../load-private-data.js';
-const root = document.getElementById('app');
-let current;
-async function showPage() {
-  current?.abort();
-  const controller = new AbortController(); current = controller;
-  root.replaceChildren();
-  try {
-    const path = location.pathname;
-    const result = await checkAccess(path + location.search, { signal: controller.signal });
-    if (controller.signal.aborted) return;
-    if (!result.allowed) {
-      if (result.reason === 'verification_required' && result.verificationUrl) location.assign(result.verificationUrl);
-      const alert = document.createElement('p'); alert.setAttribute('role', 'alert');
-      alert.textContent = 'Access unavailable.'; root.replaceChildren(alert); return;
-    }
-    const header = document.createElement('header');
-    const nav = document.createElement('nav'); header.append(nav);
-    for (const [url, name] of [['/', 'Home'], ['/members', 'Members'], ['/slow', 'Slow'], ['/blocked', 'Blocked'], ['/offline', 'Offline']]) {
-      const link = document.createElement('a'); link.href = url; link.textContent = name;
-      link.addEventListener('click', event => {
-        if (event.button !== 0 || event.metaKey || event.ctrlKey || event.shiftKey || event.altKey) return;
-        event.preventDefault(); history.pushState(null, '', url); void showPage();
-      });
-      nav.append(link, document.createTextNode(' '));
-    }
-    const main = document.createElement('main'); const heading = document.createElement('h1');
-    heading.textContent = path === '/members' ? 'Members' : path === '/' ? 'Home' : path === '/slow' ? 'Slow' : 'Not found';
-    const data = document.createElement('p'); main.append(heading, data);
-    const footer = document.createElement('footer'); footer.textContent = 'Example site';
-    root.replaceChildren(header, main, footer);
-    if (path === '/members') {
-      data.textContent = 'Loading data...';
-      try {
-        const value = await loadPrivateData(controller.signal);
-        if (!controller.signal.aborted) data.textContent = JSON.stringify(value);
-      } catch { if (!controller.signal.aborted) data.textContent = 'API access unavailable.'; }
-    }
-  } catch {
-    if (!controller.signal.aborted) root.replaceChildren(document.createTextNode('Access unavailable.'));
-  }
-}
-addEventListener('popstate', showPage);
-addEventListener('pagehide', () => current?.abort());
-void showPage();
+import { checkAccess } from '@stopnetic/js/browser';
+import { loadPrivateData } from '../load-private-data.js';
+const root = document.getElementById('app');
+let current;
+async function showPage() {
+  current?.abort();
+  const controller = new AbortController(); current = controller;
+  root.replaceChildren();
+  try {
+    const path = location.pathname;
+    const result = await checkAccess(path + location.search, { signal: controller.signal });
+    if (controller.signal.aborted) return;
+    if (!result.allowed) {
+      if (result.reason === 'verification_required' && result.verificationUrl) location.assign(result.verificationUrl);
+      const alert = document.createElement('p'); alert.setAttribute('role', 'alert');
+      alert.textContent = 'Access unavailable.'; root.replaceChildren(alert); return;
+    }
+    const header = document.createElement('header');
+    const nav = document.createElement('nav'); header.append(nav);
+    for (const [url, name] of [['/', 'Home'], ['/members', 'Members'], ['/slow', 'Slow'], ['/blocked', 'Blocked'], ['/offline', 'Offline']]) {
+      const link = document.createElement('a'); link.href = url; link.textContent = name;
+      link.addEventListener('click', event => {
+        if (event.button !== 0 || event.metaKey || event.ctrlKey || event.shiftKey || event.altKey) return;
+        event.preventDefault(); history.pushState(null, '', url); void showPage();
+      });
+      nav.append(link, document.createTextNode(' '));
+    }
+    const main = document.createElement('main'); const heading = document.createElement('h1');
+    heading.textContent = path === '/members' ? 'Members' : path === '/' ? 'Home' : path === '/slow' ? 'Slow' : 'Not found';
+    const data = document.createElement('p'); main.append(heading, data);
+    const footer = document.createElement('footer'); footer.textContent = 'Example site';
+    root.replaceChildren(header, main, footer);
+    if (path === '/members') {
+      data.textContent = 'Loading data...';
+      try {
+        const value = await loadPrivateData(controller.signal);
+        if (!controller.signal.aborted) data.textContent = JSON.stringify(value);
+      } catch { if (!controller.signal.aborted) data.textContent = 'API access unavailable.'; }
+    }
+  } catch {
+    if (!controller.signal.aborted) root.replaceChildren(document.createTextNode('Access unavailable.'));
+  }
+}
+addEventListener('popstate', showPage);
+addEventListener('pagehide', () => current?.abort());
+void showPage();

package/examples/frontend/vue/App.vue

@@ -1,17 +1,17 @@
-<script setup>
-import { RouterLink, RouterView } from 'vue-router';
-import { accessState } from './router.js';
-</script>
-
-<template>
-  <template v-if="accessState === 'allowed'">
-    <header><nav>
-      <RouterLink to="/">Home</RouterLink> <RouterLink to="/members">Members</RouterLink>
-      <RouterLink to="/slow">Slow</RouterLink> <RouterLink to="/blocked">Blocked</RouterLink>
-      <RouterLink to="/offline">Offline</RouterLink>
-    </nav></header>
-    <RouterView/>
-    <footer>Example site</footer>
-  </template>
-  <p v-else-if="accessState === 'denied'" role="alert">Access unavailable.</p>
-</template>
+<script setup>
+import { RouterLink, RouterView } from 'vue-router';
+import { accessState } from './router.js';
+</script>
+
+<template>
+  <template v-if="accessState === 'allowed'">
+    <header><nav>
+      <RouterLink to="/">Home</RouterLink> <RouterLink to="/members">Members</RouterLink>
+      <RouterLink to="/slow">Slow</RouterLink> <RouterLink to="/blocked">Blocked</RouterLink>
+      <RouterLink to="/offline">Offline</RouterLink>
+    </nav></header>
+    <RouterView/>
+    <footer>Example site</footer>
+  </template>
+  <p v-else-if="accessState === 'denied'" role="alert">Access unavailable.</p>
+</template>

package/examples/frontend/vue/Members.vue

@@ -1,14 +1,14 @@
-<script setup>
-import { onMounted, onUnmounted, ref } from 'vue';
-import { loadPrivateData } from '../load-private-data.js';
-const data = ref('Loading data...');
-const controller = new AbortController();
-onMounted(() => {
-  loadPrivateData(controller.signal)
-    .then(value => { if (!controller.signal.aborted) data.value = JSON.stringify(value); })
-    .catch(() => { if (!controller.signal.aborted) data.value = 'API access unavailable.'; });
-});
-onUnmounted(() => controller.abort());
-</script>
-
-<template><main><h1>Members</h1><p>{{ data }}</p></main></template>
+<script setup>
+import { onMounted, onUnmounted, ref } from 'vue';
+import { loadPrivateData } from '../load-private-data.js';
+const data = ref('Loading data...');
+const controller = new AbortController();
+onMounted(() => {
+  loadPrivateData(controller.signal)
+    .then(value => { if (!controller.signal.aborted) data.value = JSON.stringify(value); })
+    .catch(() => { if (!controller.signal.aborted) data.value = 'API access unavailable.'; });
+});
+onUnmounted(() => controller.abort());
+</script>
+
+<template><main><h1>Members</h1><p>{{ data }}</p></main></template>

package/examples/frontend/vue/main.js

@@ -1,4 +1,4 @@
-import { createApp } from 'vue';
-import App from './App.vue';
-import { router } from './router.js';
-createApp(App).use(router).mount('#app');
+import { createApp } from 'vue';
+import App from './App.vue';
+import { router } from './router.js';
+createApp(App).use(router).mount('#app');

package/examples/frontend/vue/router.js

@@ -1,40 +1,40 @@
-import { h, ref } from 'vue';
-import { createRouter, createWebHistory } from 'vue-router';
-import { checkAccess } from '@stopnetic/js/browser';
-import Members from './Members.vue';
-
-export const accessState = ref('checking');
-const page = title => ({ render: () => h('main', h('h1', title)) });
-export const router = createRouter({
-  history: createWebHistory(),
-  routes: [
-    { path: '/', component: page('Home') },
-    { path: '/members', component: Members },
-    { path: '/slow', component: page('Slow') },
-    { path: '/blocked', component: page('Blocked') },
-    { path: '/offline', component: page('Offline') },
-  ],
-});
-
-let current;
-let approvedPath = '';
-router.beforeEach(async to => {
-  current?.abort();
-  const controller = new AbortController();
-  current = controller;
-  approvedPath = '';
-  accessState.value = 'checking';
-  try {
-    const result = await checkAccess(to.fullPath.split('#')[0], { signal: controller.signal });
-    if (controller.signal.aborted) return false;
-    if (result.allowed) { approvedPath = to.fullPath; return true; }
-    if (result.reason === 'verification_required' && result.verificationUrl) {
-      location.assign(result.verificationUrl);
-    }
-    accessState.value = 'denied';
-  } catch { if (!controller.signal.aborted) accessState.value = 'denied'; }
-  return false;
-});
-router.afterEach((to, _from, failure) => {
-  if (!failure && approvedPath === to.fullPath) accessState.value = 'allowed';
-});
+import { h, ref } from 'vue';
+import { createRouter, createWebHistory } from 'vue-router';
+import { checkAccess } from '@stopnetic/js/browser';
+import Members from './Members.vue';
+
+export const accessState = ref('checking');
+const page = title => ({ render: () => h('main', h('h1', title)) });
+export const router = createRouter({
+  history: createWebHistory(),
+  routes: [
+    { path: '/', component: page('Home') },
+    { path: '/members', component: Members },
+    { path: '/slow', component: page('Slow') },
+    { path: '/blocked', component: page('Blocked') },
+    { path: '/offline', component: page('Offline') },
+  ],
+});
+
+let current;
+let approvedPath = '';
+router.beforeEach(async to => {
+  current?.abort();
+  const controller = new AbortController();
+  current = controller;
+  approvedPath = '';
+  accessState.value = 'checking';
+  try {
+    const result = await checkAccess(to.fullPath.split('#')[0], { signal: controller.signal });
+    if (controller.signal.aborted) return false;
+    if (result.allowed) { approvedPath = to.fullPath; return true; }
+    if (result.reason === 'verification_required' && result.verificationUrl) {
+      location.assign(result.verificationUrl);
+    }
+    accessState.value = 'denied';
+  } catch { if (!controller.signal.aborted) accessState.value = 'denied'; }
+  return false;
+});
+router.afterEach((to, _from, failure) => {
+  if (!failure && approvedPath === to.fullPath) accessState.value = 'allowed';
+});

package/examples/ssr/angular/app.routes.server.ts

@@ -1,5 +1,5 @@
-import { RenderMode, ServerRoute } from '@angular/ssr';
-export const serverRoutes: ServerRoute[] = [
-  // Demo only: merge with existing hybrid modes rather than replacing them.
-  { path: '**', renderMode: RenderMode.Server },
-];
+import { RenderMode, ServerRoute } from '@angular/ssr';
+export const serverRoutes: ServerRoute[] = [
+  // Demo only: merge with existing hybrid modes rather than replacing them.
+  { path: '**', renderMode: RenderMode.Server },
+];

package/examples/ssr/angular/server.ts

@@ -1,12 +1,12 @@
-// Merge into your existing Node SSR entry; retain host settings and context.
-import { AngularAppEngine, createRequestHandler } from '@angular/ssr';
-import { createStopneticAppHandler } from '@stopnetic/js/server';
-
-const engine = new AngularAppEngine();
-let guarded: ReturnType<typeof createStopneticAppHandler> | undefined;
-async function handle(request: Request): Promise<Response> {
-  guarded ??= createStopneticAppHandler(async checked =>
-    await engine.handle(checked) ?? new Response(null, { status: 404 }));
-  return guarded(request);
-}
-export const reqHandler = createRequestHandler(handle);
+// Merge into your existing Node SSR entry; retain host settings and context.
+import { AngularAppEngine, createRequestHandler } from '@angular/ssr';
+import { createStopneticAppHandler } from '@stopnetic/js/server';
+
+const engine = new AngularAppEngine();
+let guarded: ReturnType<typeof createStopneticAppHandler> | undefined;
+async function handle(request: Request): Promise<Response> {
+  guarded ??= createStopneticAppHandler(async checked =>
+    await engine.handle(checked) ?? new Response(null, { status: 404 }));
+  return guarded(request);
+}
+export const reqHandler = createRequestHandler(handle);

package/examples/ssr/astro/middleware.js

@@ -1,11 +1,11 @@
-// src/middleware.js. Keep the existing Node deployment adapter.
-import { defineMiddleware } from 'astro:middleware';
-import { createStopneticAppHandler } from '@stopnetic/js/server';
-
-let guarded;
-export const onRequest = defineMiddleware(async (context, next) => {
-  // Public prerender builds only; protected pages must export prerender=false.
-  if (context.isPrerendered) return next();
-  guarded ??= createStopneticAppHandler((_request, run) => run());
-  return guarded(context.request, () => next());
-});
+// src/middleware.js. Keep the existing Node deployment adapter.
+import { defineMiddleware } from 'astro:middleware';
+import { createStopneticAppHandler } from '@stopnetic/js/server';
+
+let guarded;
+export const onRequest = defineMiddleware(async (context, next) => {
+  // Public prerender builds only; protected pages must export prerender=false.
+  if (context.isPrerendered) return next();
+  guarded ??= createStopneticAppHandler((_request, run) => run());
+  return guarded(context.request, () => next());
+});

package/examples/ssr/astro/page.astro

@@ -1,4 +1,4 @@
----
-// Merge this flag into a protected page, preserving its existing content.
-export const prerender = false;
----
+---
+// Merge this flag into a protected page, preserving its existing content.
+export const prerender = false;
+---

package/examples/ssr/node/fetch.mjs

@@ -1,9 +1,9 @@
-// Wrap your existing Node Request -> Response renderer; retain all context.
-import { createStopneticAppHandler } from '@stopnetic/js/server';
-export function protectSSR(renderApplication) {
-  let guarded;
-  return (request, ...context) => {
-    guarded ??= createStopneticAppHandler(renderApplication);
-    return guarded(request, ...context);
-  };
-}
+// Wrap your existing Node Request -> Response renderer; retain all context.
+import { createStopneticAppHandler } from '@stopnetic/js/server';
+export function protectSSR(renderApplication) {
+  let guarded;
+  return (request, ...context) => {
+    guarded ??= createStopneticAppHandler(renderApplication);
+    return guarded(request, ...context);
+  };
+}

package/examples/ssr/node/install.mjs

@@ -1,9 +1,9 @@
-// Call before parsers, static files, APIs and your existing Node SSR renderer.
-import { createStopneticServer } from '@stopnetic/js/server';
-export function installStopneticSSR(app) {
-  let server;
-  app.use((req, res, next) => {
-    server ??= createStopneticServer();
-    return server.access(req, res, () => server.guard(req, res, next));
-  });
-}
+// Call before parsers, static files, APIs and your existing Node SSR renderer.
+import { createStopneticServer } from '@stopnetic/js/server';
+export function installStopneticSSR(app) {
+  let server;
+  app.use((req, res, next) => {
+    server ??= createStopneticServer();
+    return server.access(req, res, () => server.guard(req, res, next));
+  });
+}

package/examples/ssr/nuxt/middleware.mjs

@@ -1,10 +1,10 @@
-// server/middleware/00-stopnetic.mjs. Nuxt 3/4, Nitro 2, H3 1, NODE only.
-// Use server middleware, not app/middleware or defineNuxtRouteMiddleware.
-import { fromNodeMiddleware } from 'h3';
-import { createStopneticServer } from '@stopnetic/js/server';
-
-let server;
-export default fromNodeMiddleware((req, res, next) => {
-  server ??= createStopneticServer();
-  return server.access(req, res, () => server.guard(req, res, next));
-});
+// server/middleware/00-stopnetic.mjs. Nuxt 3/4, Nitro 2, H3 1, NODE only.
+// Use server middleware, not app/middleware or defineNuxtRouteMiddleware.
+import { fromNodeMiddleware } from 'h3';
+import { createStopneticServer } from '@stopnetic/js/server';
+
+let server;
+export default fromNodeMiddleware((req, res, next) => {
+  server ??= createStopneticServer();
+  return server.access(req, res, () => server.guard(req, res, next));
+});