@stopnetic/js 0.0.6-pilot → 0.1.0

package/examples/ssr/react/install.mjs

@@ -1,10 +1,10 @@
-// Existing custom React SSR server: call before assets, APIs and React rendering.
-// Keep renderToPipeableStream/renderToReadableStream and hydration unchanged.
-import { createStopneticServer } from '@stopnetic/js/server';
-export function installStopneticReactSSR(app) {
-  let server;
-  app.use((req, res, next) => {
-    server ??= createStopneticServer();
-    return server.access(req, res, () => server.guard(req, res, next));
-  });
-}
+// Existing custom React SSR server: call before assets, APIs and React rendering.
+// Keep renderToPipeableStream/renderToReadableStream and hydration unchanged.
+import { createStopneticServer } from '@stopnetic/js/server';
+export function installStopneticReactSSR(app) {
+  let server;
+  app.use((req, res, next) => {
+    server ??= createStopneticServer();
+    return server.access(req, res, () => server.guard(req, res, next));
+  });
+}

package/examples/ssr/react-router/install.mjs

@@ -1,22 +1,22 @@
-// Call installStopneticReactRouter(app) before parsers, assets and the existing
-// @react-router/express createRequestHandler. Keep that handler/context intact.
-import { createStopneticServer } from '@stopnetic/js/server';
-
-export function installStopneticReactRouter(app) {
-  let server;
-  app.use((req, res, next) => {
-    server ??= createStopneticServer();
-    return server.access(req, res, () => {
-      // React Router 7 single-fetch data URLs must use the page's policy.
-      // The renderer still receives the original request and unread body.
-      const url = new URL(req.originalUrl || req.url, 'https://example.invalid');
-      let checked = req;
-      if (url.pathname.endsWith('.data')) {
-        url.pathname = url.pathname === '/_root.data' ? '/' : url.pathname.slice(0, -5);
-        checked = Object.create(req);
-        checked.originalUrl = url.pathname + url.search;
-      }
-      return server.guard(checked, res, next);
-    });
-  });
-}
+// Call installStopneticReactRouter(app) before parsers, assets and the existing
+// @react-router/express createRequestHandler. Keep that handler/context intact.
+import { createStopneticServer } from '@stopnetic/js/server';
+
+export function installStopneticReactRouter(app) {
+  let server;
+  app.use((req, res, next) => {
+    server ??= createStopneticServer();
+    return server.access(req, res, () => {
+      // React Router 7 single-fetch data URLs must use the page's policy.
+      // The renderer still receives the original request and unread body.
+      const url = new URL(req.originalUrl || req.url, 'https://example.invalid');
+      let checked = req;
+      if (url.pathname.endsWith('.data')) {
+        url.pathname = url.pathname === '/_root.data' ? '/' : url.pathname.slice(0, -5);
+        checked = Object.create(req);
+        checked.originalUrl = url.pathname + url.search;
+      }
+      return server.guard(checked, res, next);
+    });
+  });
+}

package/examples/ssr/solidstart/middleware-v1.js

@@ -1,19 +1,19 @@
-// SolidStart 1: register using defineConfig({ middleware: './src/middleware.js' }).
-// Keep the existing entry-server.tsx renderer. This is NOT SolidStart 2 config.
-import { createMiddleware } from '@solidjs/start/middleware';
-import { createStopneticAppHandler } from '@stopnetic/js/server';
-
-let check;
-export default createMiddleware({
-  onRequest: async event => {
-    check ??= createStopneticAppHandler((_request, state) => {
-      state.allowed = true;
-      return new Response(null, { status: 204 });
-    });
-    const state = { allowed: false };
-    const response = await check(event.request, state);
-    if (!state.allowed) return response;
-    event.response.headers.set('cache-control', 'private, no-store');
-    // undefined continues to SolidStart; preserve its rendering and API handling.
-  },
-});
+// SolidStart 1: register using defineConfig({ middleware: './src/middleware.js' }).
+// Keep the existing entry-server.tsx renderer. This is NOT SolidStart 2 config.
+import { createMiddleware } from '@solidjs/start/middleware';
+import { createStopneticAppHandler } from '@stopnetic/js/server';
+
+let check;
+export default createMiddleware({
+  onRequest: async event => {
+    check ??= createStopneticAppHandler((_request, state) => {
+      state.allowed = true;
+      return new Response(null, { status: 204 });
+    });
+    const state = { allowed: false };
+    const response = await check(event.request, state);
+    if (!state.allowed) return response;
+    event.response.headers.set('cache-control', 'private, no-store');
+    // undefined continues to SolidStart; preserve its rendering and API handling.
+  },
+});

package/examples/ssr/solidstart/middleware-v2.js

@@ -1,25 +1,25 @@
-// SolidStart 2: register this module using solidStart({ middleware: ... }).
-import { createMiddleware } from '@solidjs/start/middleware';
-import { createStopneticAppHandler } from '@stopnetic/js/server';
-
-let check;
-export default createMiddleware([
-  async (event, next) => {
-    check ??= createStopneticAppHandler((_request, state) => {
-      state.allowed = true;
-      return new Response(null, { status: 204 });
-    });
-    // Per-request state: a verification 204 must NEVER be mistaken for permission.
-    const state = { allowed: false };
-    const response = await check(event.req, state);
-    if (!state.allowed) return response;
-    event.res.headers.set('cache-control', 'private, no-store');
-    const result = await next(); // Preserve H3/SolidStart context and raw results.
-    if (!(result instanceof Response)) return result;
-    const headers = new Headers(result.headers);
-    headers.set('cache-control', 'private, no-store');
-    return new Response(result.body, {
-      status: result.status, statusText: result.statusText, headers,
-    });
-  },
-]);
+// SolidStart 2: register this module using solidStart({ middleware: ... }).
+import { createMiddleware } from '@solidjs/start/middleware';
+import { createStopneticAppHandler } from '@stopnetic/js/server';
+
+let check;
+export default createMiddleware([
+  async (event, next) => {
+    check ??= createStopneticAppHandler((_request, state) => {
+      state.allowed = true;
+      return new Response(null, { status: 204 });
+    });
+    // Per-request state: a verification 204 must NEVER be mistaken for permission.
+    const state = { allowed: false };
+    const response = await check(event.req, state);
+    if (!state.allowed) return response;
+    event.res.headers.set('cache-control', 'private, no-store');
+    const result = await next(); // Preserve H3/SolidStart context and raw results.
+    if (!(result instanceof Response)) return result;
+    const headers = new Headers(result.headers);
+    headers.set('cache-control', 'private, no-store');
+    return new Response(result.body, {
+      status: result.status, statusText: result.statusText, headers,
+    });
+  },
+]);

package/examples/ssr/sveltekit/hooks.server.js

@@ -1,16 +1,16 @@
-import { building } from '$app/environment';
-import { createStopneticAppHandler } from '@stopnetic/js/server';
-
-let guarded;
-// When merging existing hooks, run this first and put them in the continuation.
-export async function handle({ event, resolve }) {
-  // Build-time public prerendering only. Protected routes must have prerender=false.
-  if (building) return resolve(event);
-  guarded ??= createStopneticAppHandler((_request, run) => run());
-  // SvelteKit exposes the canonical page URL on data requests. Check that page
-  // rather than allowing an unmatched /members/__data.json alias through.
-  const checked = event.isDataRequest
-    ? new Request(event.url, { method: event.request.method, headers: event.request.headers })
-    : event.request;
-  return guarded(checked, () => resolve(event));
-}
+import { building } from '$app/environment';
+import { createStopneticAppHandler } from '@stopnetic/js/server';
+
+let guarded;
+// When merging existing hooks, run this first and put them in the continuation.
+export async function handle({ event, resolve }) {
+  // Build-time public prerendering only. Protected routes must have prerender=false.
+  if (building) return resolve(event);
+  guarded ??= createStopneticAppHandler((_request, run) => run());
+  // SvelteKit exposes the canonical page URL on data requests. Check that page
+  // rather than allowing an unmatched /members/__data.json alias through.
+  const checked = event.isDataRequest
+    ? new Request(event.url, { method: event.request.method, headers: event.request.headers })
+    : event.request;
+  return guarded(checked, () => resolve(event));
+}

package/examples/ssr/sveltekit/page.server.js

@@ -1,3 +1,3 @@
-// Merge into the PROTECTED route's +page.server.js, retaining loads/actions.
-export const prerender = false;
-export const ssr = true;
+// Merge into the PROTECTED route's +page.server.js, retaining loads/actions.
+export const prerender = false;
+export const ssr = true;

package/examples/ssr/vue/install.mjs

@@ -1,10 +1,10 @@
-// Existing custom Vue SSR server: call before assets, APIs and Vue rendering.
-// Keep createSSRApp/renderToString and client hydration unchanged.
-import { createStopneticServer } from '@stopnetic/js/server';
-export function installStopneticVueSSR(app) {
-  let server;
-  app.use((req, res, next) => {
-    server ??= createStopneticServer();
-    return server.access(req, res, () => server.guard(req, res, next));
-  });
-}
+// Existing custom Vue SSR server: call before assets, APIs and Vue rendering.
+// Keep createSSRApp/renderToString and client hydration unchanged.
+import { createStopneticServer } from '@stopnetic/js/server';
+export function installStopneticVueSSR(app) {
+  let server;
+  app.use((req, res, next) => {
+    server ??= createStopneticServer();
+    return server.access(req, res, () => server.guard(req, res, next));
+  });
+}

package/package.json

@@ -1,20 +1,25 @@
 {
   "name": "@stopnetic/js",
-  "version": "0.0.6-pilot",
+  "version": "0.1.0",
   "description": "Server-side Stopnetic guard for JavaScript websites, Node.js and Express-compatible servers.",
   "type": "module",
   "license": "MIT",
   "author": "Stopnetic",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/KlimentSidorov/stopin.git",
+    "url": "git+https://github.com/KlimentSidorov/stopnetic.git",
     "directory": "integrations/javascript"
   },
   "keywords": [
     "stopnetic",
     "javascript",
+    "typescript",
     "nodejs",
     "express",
+    "react",
+    "angular",
+    "vue",
+    "svelte",
     "access-control"
   ],
   "files": [
@@ -23,24 +28,41 @@
     "examples/frontend",
     "examples/ssr"
   ],
-  "bin": { "stopnetic-js": "./bin/stopnetic-js.js" },
+  "bin": {
+    "stopnetic-js": "./bin/stopnetic-js.js"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
-    "./server": { "types": "./dist/server.d.ts", "default": "./dist/server.js" },
-    "./browser": { "types": "./dist/browser.d.ts", "default": "./dist/browser.js" },
-    "./react": { "types": "./dist/react.d.ts", "default": "./dist/react.js" }
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "default": "./dist/server.js"
+    },
+    "./browser": {
+      "types": "./dist/browser.d.ts",
+      "default": "./dist/browser.js"
+    },
+    "./react": {
+      "types": "./dist/react.d.ts",
+      "default": "./dist/react.js"
+    }
+  },
+  "peerDependencies": {
+    "react": "*"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
   },
-  "peerDependencies": { "react": "*" },
-  "peerDependenciesMeta": { "react": { "optional": true } },
   "engines": {
     "node": ">=22"
   },
   "publishConfig": {
     "access": "public",
-    "tag": "pilot",
+    "tag": "latest",
     "registry": "https://registry.npmjs.org/"
   },
   "scripts": {
@@ -52,5 +74,9 @@
   "devDependencies": {
     "express": "^4.22.3",
     "express5": "npm:express@^5.2.1"
+  },
+  "homepage": "https://github.com/KlimentSidorov/stopnetic/tree/main/integrations/javascript#readme",
+  "bugs": {
+    "url": "https://github.com/KlimentSidorov/stopnetic/issues"
   }
 }