@surfjs/next 0.2.0

package/dist/pages.js

@@ -0,0 +1,206 @@
+import { executePipeline } from '@surfjs/core';
+
+// src/pages.ts
+
+// src/shared.ts
+function getErrorStatus(code) {
+  switch (code) {
+    case "UNKNOWN_COMMAND":
+      return 404;
+    case "INVALID_PARAMS":
+      return 400;
+    case "AUTH_REQUIRED":
+      return 401;
+    case "AUTH_FAILED":
+      return 403;
+    case "SESSION_EXPIRED":
+      return 410;
+    case "RATE_LIMITED":
+      return 429;
+    case "NOT_SUPPORTED":
+      return 501;
+    default:
+      return 500;
+  }
+}
+function extractAuth(authHeader) {
+  if (!authHeader) return void 0;
+  return authHeader.startsWith("Bearer ") ? authHeader.slice(7) : authHeader;
+}
+function extractIp(forwardedFor, realIp) {
+  if (forwardedFor) return forwardedFor.split(",")[0]?.trim();
+  return realIp ?? void 0;
+}
+var CORS_HEADERS = {
+  "Access-Control-Allow-Origin": "*"
+};
+
+// src/pages.ts
+function headerValue(val) {
+  if (Array.isArray(val)) return val[0];
+  return val;
+}
+function createSurfApiHandler(surf) {
+  const registry = surf.commands;
+  const sessions = surf.sessions;
+  function resolveRoute(query) {
+    const slugParam = query["slug"];
+    if (!slugParam) return "/";
+    const parts = Array.isArray(slugParam) ? slugParam : [slugParam];
+    return "/" + parts.join("/");
+  }
+  function sendJson(res, status, body, extraHeaders) {
+    for (const [k, v] of Object.entries(CORS_HEADERS)) {
+      res.setHeader(k, v);
+    }
+    if (extraHeaders) {
+      for (const [k, v] of Object.entries(extraHeaders)) {
+        res.setHeader(k, v);
+      }
+    }
+    res.status(status).json(body);
+  }
+  return async function surfApiHandler(req, res) {
+    const route = resolveRoute(req.query);
+    const method = (req.method ?? "GET").toUpperCase();
+    if (method === "GET" && (route === "/.well-known/surf.json" || route === "/")) {
+      const manifestData = surf.manifest();
+      const etag = `"${manifestData.checksum}"`;
+      if (headerValue(req.headers["if-none-match"]) === etag) {
+        res.setHeader("ETag", etag);
+        res.setHeader("Cache-Control", "public, max-age=300");
+        for (const [k, v] of Object.entries(CORS_HEADERS)) {
+          res.setHeader(k, v);
+        }
+        res.status(304).end();
+        return;
+      }
+      sendJson(res, 200, manifestData, {
+        "ETag": etag,
+        "Cache-Control": "public, max-age=300"
+      });
+      return;
+    }
+    if (method !== "POST") {
+      sendJson(res, 405, { ok: false, error: { code: "NOT_SUPPORTED", message: `Method ${method} not allowed` } });
+      return;
+    }
+    const auth = extractAuth(headerValue(req.headers["authorization"]));
+    const ip = extractIp(
+      headerValue(req.headers["x-forwarded-for"]),
+      headerValue(req.headers["x-real-ip"])
+    );
+    if (route === "/surf/execute" || route === "/execute") {
+      const body = req.body;
+      if (!body?.command || typeof body.command !== "string") {
+        sendJson(res, 400, { ok: false, error: { code: "INVALID_PARAMS", message: "Missing command field" } });
+        return;
+      }
+      let sessionState;
+      if (body.sessionId) {
+        const session = await sessions.get(body.sessionId);
+        if (session) sessionState = session.state;
+      }
+      const command = registry.get(body.command);
+      const wantsStream = body.stream === true && command?.stream === true;
+      if (wantsStream) {
+        res.writeHead(200, {
+          "Content-Type": "text/event-stream",
+          "Cache-Control": "no-cache",
+          "Connection": "keep-alive",
+          "Access-Control-Allow-Origin": "*"
+        });
+        if (res.flushHeaders) res.flushHeaders();
+        const write = (data) => {
+          res.write(`data: ${JSON.stringify(data)}
+
+`);
+        };
+        const sseContext = {
+          sessionId: body.sessionId,
+          auth,
+          ip,
+          state: sessionState,
+          requestId: body.requestId,
+          emit: (data) => {
+            write({ type: "chunk", data });
+          }
+        };
+        try {
+          const response2 = await registry.execute(body.command, body.params, sseContext);
+          if (response2.ok) {
+            write({ type: "done", result: response2.result });
+          } else {
+            write({ type: "error", error: { code: response2.error.code, message: response2.error.message } });
+          }
+        } catch (e) {
+          write({
+            type: "error",
+            error: { code: "INTERNAL_ERROR", message: e instanceof Error ? e.message : "Unknown error" }
+          });
+        } finally {
+          res.end();
+        }
+        return;
+      }
+      const response = await registry.execute(body.command, body.params, {
+        sessionId: body.sessionId,
+        auth,
+        ip,
+        state: sessionState,
+        requestId: body.requestId
+      });
+      if (body.sessionId && response.ok && response.state) {
+        await sessions.update(body.sessionId, response.state);
+      }
+      const statusCode = response.ok ? 200 : getErrorStatus(response.error.code);
+      const extraHeaders = {};
+      if (!response.ok && response.error.code === "RATE_LIMITED") {
+        const retryMs = response.error.details?.["retryAfterMs"] ?? 0;
+        extraHeaders["Retry-After"] = String(Math.ceil(retryMs / 1e3));
+      }
+      sendJson(res, statusCode, response, extraHeaders);
+      return;
+    }
+    if (route === "/surf/pipeline" || route === "/pipeline") {
+      const body = req.body;
+      if (!body) {
+        sendJson(res, 400, { ok: false, error: { code: "INVALID_PARAMS", message: "Missing request body" } });
+        return;
+      }
+      try {
+        const result = await executePipeline(
+          body,
+          registry,
+          sessions,
+          auth
+        );
+        sendJson(res, 200, result);
+      } catch (e) {
+        sendJson(res, 500, {
+          ok: false,
+          error: { code: "INTERNAL_ERROR", message: e instanceof Error ? e.message : "Unknown error" }
+        });
+      }
+      return;
+    }
+    if (route === "/surf/session/start" || route === "/session/start") {
+      const session = await sessions.create();
+      sendJson(res, 200, { ok: true, sessionId: session.id });
+      return;
+    }
+    if (route === "/surf/session/end" || route === "/session/end") {
+      const body = req.body;
+      if (body?.sessionId) {
+        await sessions.destroy(body.sessionId);
+      }
+      sendJson(res, 200, { ok: true });
+      return;
+    }
+    sendJson(res, 404, { ok: false, error: { code: "NOT_FOUND", message: `Unknown route: POST ${route}` } });
+  };
+}
+
+export { createSurfApiHandler, extractAuth, extractIp, getErrorStatus };
+//# sourceMappingURL=pages.js.map
+//# sourceMappingURL=pages.js.map

package/dist/pages.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared.ts","../src/pages.ts"],"names":["response"],"mappings":";;;;;AAMO,SAAS,eAAe,IAAA,EAAsB;AACnD,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,iBAAA;AAAmB,MAAA,OAAO,GAAA;AAAA,IAC/B,KAAK,gBAAA;AAAkB,MAAA,OAAO,GAAA;AAAA,IAC9B,KAAK,eAAA;AAAiB,MAAA,OAAO,GAAA;AAAA,IAC7B,KAAK,aAAA;AAAe,MAAA,OAAO,GAAA;AAAA,IAC3B,KAAK,iBAAA;AAAmB,MAAA,OAAO,GAAA;AAAA,IAC/B,KAAK,cAAA;AAAgB,MAAA,OAAO,GAAA;AAAA,IAC5B,KAAK,eAAA;AAAiB,MAAA,OAAO,GAAA;AAAA,IAC7B;AAAS,MAAA,OAAO,GAAA;AAAA;AAEpB;AAQO,SAAS,YAAY,UAAA,EAA2D;AACrF,EAAA,IAAI,CAAC,YAAY,OAAO,MAAA;AACxB,EAAA,OAAO,WAAW,UAAA,CAAW,SAAS,IAAI,UAAA,CAAW,KAAA,CAAM,CAAC,CAAA,GAAI,UAAA;AAClE;AASO,SAAS,SAAA,CACd,cACA,MAAA,EACoB;AACpB,EAAA,IAAI,YAAA,SAAqB,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AAC1D,EAAA,OAAO,MAAA,IAAU,MAAA;AACnB;AAKO,IAAM,YAAA,GAAuC;AAAA,EAClD,6BAAA,EAA+B;AACjC,CAAA;;;ACVA,SAAS,YAAY,GAAA,EAAwD;AAC3E,EAAA,IAAI,MAAM,OAAA,CAAQ,GAAG,CAAA,EAAG,OAAO,IAAI,CAAC,CAAA;AACpC,EAAA,OAAO,GAAA;AACT;AA4BO,SAAS,qBACd,IAAA,EACgE;AAChE,EAAA,MAAM,WAAW,IAAA,CAAK,QAAA;AACtB,EAAA,MAAM,WAAW,IAAA,CAAK,QAAA;AAEtB,EAAA,SAAS,aAAa,KAAA,EAA8D;AAClF,IAAA,MAAM,SAAA,GAAY,MAAM,MAAM,CAAA;AAC9B,IAAA,IAAI,CAAC,WAAW,OAAO,GAAA;AACvB,IAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,SAAS,CAAA,GAAI,SAAA,GAAY,CAAC,SAAS,CAAA;AAC/D,IAAA,OAAO,GAAA,GAAM,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA;AAAA,EAC7B;AAEA,EAAA,SAAS,QAAA,CAAS,GAAA,EAAuB,MAAA,EAAgB,IAAA,EAAe,YAAA,EAA6C;AACnH,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,YAAY,CAAA,EAAG;AACjD,MAAA,GAAA,CAAI,SAAA,CAAU,GAAG,CAAC,CAAA;AAAA,IACpB;AACA,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,YAAY,CAAA,EAAG;AACjD,QAAA,GAAA,CAAI,SAAA,CAAU,GAAG,CAAC,CAAA;AAAA,MACpB;AAAA,IACF;AACA,IAAA,GAAA,CAAI,MAAA,CAAO,MAAM,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AAAA,EAC9B;AAEA,EAAA,OAAO,eAAe,cAAA,CAAe,GAAA,EAAsB,GAAA,EAAsC;AAC/F,IAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,CAAI,KAAK,CAAA;AACpC,IAAA,MAAM,MAAA,GAAA,CAAU,GAAA,CAAI,MAAA,IAAU,KAAA,EAAO,WAAA,EAAY;AAGjD,IAAA,IAAI,MAAA,KAAW,KAAA,KAAU,KAAA,KAAU,wBAAA,IAA4B,UAAU,GAAA,CAAA,EAAM;AAC7E,MAAA,MAAM,YAAA,GAAe,KAAK,QAAA,EAAS;AACnC,MAAA,MAAM,IAAA,GAAO,CAAA,CAAA,EAAI,YAAA,CAAa,QAAQ,CAAA,CAAA,CAAA;AAEtC,MAAA,IAAI,YAAY,GAAA,CAAI,OAAA,CAAQ,eAAe,CAAC,MAAM,IAAA,EAAM;AACtD,QAAA,GAAA,CAAI,SAAA,CAAU,QAAQ,IAAI,CAAA;AAC1B,QAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,qBAAqB,CAAA;AACpD,QAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,YAAY,CAAA,EAAG;AACjD,UAAA,GAAA,CAAI,SAAA,CAAU,GAAG,CAAC,CAAA;AAAA,QACpB;AACA,QAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,GAAA,EAAI;AACpB,QAAA;AAAA,MACF;AAEA,MAAA,QAAA,CAAS,GAAA,EAAK,KAAK,YAAA,EAAc;AAAA,QAC/B,MAAA,EAAQ,IAAA;AAAA,QACR,eAAA,EAAiB;AAAA,OAClB,CAAA;AACD,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,MAAA,QAAA,CAAS,GAAA,EAAK,GAAA,EAAK,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,EAAE,IAAA,EAAM,eAAA,EAAiB,OAAA,EAAS,CAAA,OAAA,EAAU,MAAM,CAAA,YAAA,CAAA,IAAkB,CAAA;AAC3G,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,OAAO,WAAA,CAAY,WAAA,CAAY,IAAI,OAAA,CAAQ,eAAe,CAAC,CAAC,CAAA;AAClE,IAAA,MAAM,EAAA,GAAK,SAAA;AAAA,MACT,WAAA,CAAY,GAAA,CAAI,OAAA,CAAQ,iBAAiB,CAAC,CAAA;AAAA,MAC1C,WAAA,CAAY,GAAA,CAAI,OAAA,CAAQ,WAAW,CAAC;AAAA,KACtC;AAGA,IAAA,IAAI,KAAA,KAAU,eAAA,IAAmB,KAAA,KAAU,UAAA,EAAY;AACrD,MAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AAEjB,MAAA,IAAI,CAAC,IAAA,EAAM,OAAA,IAAW,OAAO,IAAA,CAAK,YAAY,QAAA,EAAU;AACtD,QAAA,QAAA,CAAS,GAAA,EAAK,GAAA,EAAK,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,EAAE,IAAA,EAAM,gBAAA,EAAkB,OAAA,EAAS,uBAAA,EAAwB,EAAG,CAAA;AACrG,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,YAAA;AACJ,MAAA,IAAI,KAAK,SAAA,EAAW;AAClB,QAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,GAAA,CAAI,KAAK,SAAS,CAAA;AACjD,QAAA,IAAI,OAAA,iBAAwB,OAAA,CAAQ,KAAA;AAAA,MACtC;AAEA,MAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,IAAA,CAAK,OAAO,CAAA;AACzC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,MAAA,KAAW,IAAA,IAAQ,SAAS,MAAA,KAAW,IAAA;AAEhE,MAAA,IAAI,WAAA,EAAa;AAEf,QAAA,GAAA,CAAI,UAAU,GAAA,EAAK;AAAA,UACjB,cAAA,EAAgB,mBAAA;AAAA,UAChB,eAAA,EAAiB,UAAA;AAAA,UACjB,YAAA,EAAc,YAAA;AAAA,UACd,6BAAA,EAA+B;AAAA,SAChC,CAAA;AACD,QAAA,IAAI,GAAA,CAAI,YAAA,EAAc,GAAA,CAAI,YAAA,EAAa;AAEvC,QAAA,MAAM,KAAA,GAAQ,CAAC,IAAA,KAAkB;AAC/B,UAAA,GAAA,CAAI,KAAA,CAAM,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC;;AAAA,CAAM,CAAA;AAAA,QAC/C,CAAA;AAEA,QAAA,MAAM,UAAA,GAAa;AAAA,UACjB,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,IAAA;AAAA,UACA,EAAA;AAAA,UACA,KAAA,EAAO,YAAA;AAAA,UACP,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,IAAA,EAAM,CAAC,IAAA,KAAkB;AACvB,YAAA,KAAA,CAAM,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,CAAA;AAAA,UAC/B;AAAA,SACF;AAEA,QAAA,IAAI;AACF,UAAA,MAAMA,SAAAA,GAAyB,MAAM,QAAA,CAAS,OAAA,CAAQ,KAAK,OAAA,EAAS,IAAA,CAAK,QAAQ,UAAU,CAAA;AAC3F,UAAA,IAAIA,UAAS,EAAA,EAAI;AACf,YAAA,KAAA,CAAM,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQA,SAAAA,CAAS,QAAQ,CAAA;AAAA,UACjD,CAAA,MAAO;AACL,YAAA,KAAA,CAAM,EAAE,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAMA,SAAAA,CAAS,KAAA,CAAM,IAAA,EAAM,OAAA,EAASA,SAAAA,CAAS,KAAA,CAAM,OAAA,IAAW,CAAA;AAAA,UAChG;AAAA,QACF,SAAS,CAAA,EAAG;AACV,UAAA,KAAA,CAAM;AAAA,YACJ,IAAA,EAAM,OAAA;AAAA,YACN,KAAA,EAAO,EAAE,IAAA,EAAM,gBAAA,EAAkB,SAAS,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA;AAAgB,WAC5F,CAAA;AAAA,QACH,CAAA,SAAE;AACA,UAAA,GAAA,CAAI,GAAA,EAAI;AAAA,QACV;AACA,QAAA;AAAA,MACF;AAGA,MAAA,MAAM,WAAyB,MAAM,QAAA,CAAS,QAAQ,IAAA,CAAK,OAAA,EAAS,KAAK,MAAA,EAAQ;AAAA,QAC/E,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,IAAA;AAAA,QACA,EAAA;AAAA,QACA,KAAA,EAAO,YAAA;AAAA,QACP,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAED,MAAA,IAAI,IAAA,CAAK,SAAA,IAAa,QAAA,CAAS,EAAA,IAAM,SAAS,KAAA,EAAO;AACnD,QAAA,MAAM,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,SAAS,KAAK,CAAA;AAAA,MACtD;AAEA,MAAA,MAAM,aAAa,QAAA,CAAS,EAAA,GAAK,MAAM,cAAA,CAAe,QAAA,CAAS,MAAM,IAAI,CAAA;AACzE,MAAA,MAAM,eAAuC,EAAC;AAE9C,MAAA,IAAI,CAAC,QAAA,CAAS,EAAA,IAAM,QAAA,CAAS,KAAA,CAAM,SAAS,cAAA,EAAgB;AAC1D,QAAA,MAAM,OAAA,GAAW,QAAA,CAAS,KAAA,CAAM,OAAA,GAAU,cAAc,CAAA,IAA4B,CAAA;AACpF,QAAA,YAAA,CAAa,aAAa,CAAA,GAAI,MAAA,CAAO,KAAK,IAAA,CAAK,OAAA,GAAU,GAAI,CAAC,CAAA;AAAA,MAChE;AAEA,MAAA,QAAA,CAAS,GAAA,EAAK,UAAA,EAAY,QAAA,EAAU,YAAY,CAAA;AAChD,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,KAAA,KAAU,gBAAA,IAAoB,KAAA,KAAU,WAAA,EAAa;AACvD,MAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AAEjB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,QAAA,CAAS,GAAA,EAAK,GAAA,EAAK,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,EAAE,IAAA,EAAM,gBAAA,EAAkB,OAAA,EAAS,sBAAA,EAAuB,EAAG,CAAA;AACpG,QAAA;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,SAAS,MAAM,eAAA;AAAA,UACnB,IAAA;AAAA,UACA,QAAA;AAAA,UACA,QAAA;AAAA,UACA;AAAA,SACF;AACA,QAAA,QAAA,CAAS,GAAA,EAAK,KAAK,MAAM,CAAA;AAAA,MAC3B,SAAS,CAAA,EAAG;AACV,QAAA,QAAA,CAAS,KAAK,GAAA,EAAK;AAAA,UACjB,EAAA,EAAI,KAAA;AAAA,UACJ,KAAA,EAAO,EAAE,IAAA,EAAM,gBAAA,EAAkB,SAAS,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA;AAAgB,SAC5F,CAAA;AAAA,MACH;AACA,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,KAAA,KAAU,qBAAA,IAAyB,KAAA,KAAU,gBAAA,EAAkB;AACjE,MAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,MAAA,EAAO;AACtC,MAAA,QAAA,CAAS,GAAA,EAAK,KAAK,EAAE,EAAA,EAAI,MAAM,SAAA,EAAW,OAAA,CAAQ,IAAI,CAAA;AACtD,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,KAAA,KAAU,mBAAA,IAAuB,KAAA,KAAU,cAAA,EAAgB;AAC7D,MAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,MAAA,IAAI,MAAM,SAAA,EAAW;AACnB,QAAA,MAAM,QAAA,CAAS,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAA;AAAA,MACvC;AACA,MAAA,QAAA,CAAS,GAAA,EAAK,GAAA,EAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAC/B,MAAA;AAAA,IACF;AAEA,IAAA,QAAA,CAAS,GAAA,EAAK,GAAA,EAAK,EAAE,EAAA,EAAI,OAAO,KAAA,EAAO,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAAS,CAAA,oBAAA,EAAuB,KAAK,CAAA,CAAA,IAAM,CAAA;AAAA,EACzG,CAAA;AACF","file":"pages.js","sourcesContent":["import type { SurfInstance } from '@surfjs/core';\n\n/**\n * Surf error code to HTTP status code mapping.\n * Consistent with fastify and hono adapters.\n */\nexport function getErrorStatus(code: string): number {\n  switch (code) {\n    case 'UNKNOWN_COMMAND': return 404;\n    case 'INVALID_PARAMS': return 400;\n    case 'AUTH_REQUIRED': return 401;\n    case 'AUTH_FAILED': return 403;\n    case 'SESSION_EXPIRED': return 410;\n    case 'RATE_LIMITED': return 429;\n    case 'NOT_SUPPORTED': return 501;\n    default: return 500;\n  }\n}\n\n/**\n * Extract Bearer token from an Authorization header value.\n *\n * @param authHeader - Raw Authorization header value\n * @returns The token string, or `undefined` if not present\n */\nexport function extractAuth(authHeader: string | null | undefined): string | undefined {\n  if (!authHeader) return undefined;\n  return authHeader.startsWith('Bearer ') ? authHeader.slice(7) : authHeader;\n}\n\n/**\n * Extract client IP from forwarding headers.\n *\n * @param forwardedFor - `x-forwarded-for` header value\n * @param realIp - `x-real-ip` header value\n * @returns The client IP string, or `undefined` if not determinable\n */\nexport function extractIp(\n  forwardedFor: string | null | undefined,\n  realIp: string | null | undefined,\n): string | undefined {\n  if (forwardedFor) return forwardedFor.split(',')[0]?.trim();\n  return realIp ?? undefined;\n}\n\n/**\n * CORS headers applied to all Surf responses.\n */\nexport const CORS_HEADERS: Record<string, string> = {\n  'Access-Control-Allow-Origin': '*',\n};\n\n/**\n * Common types re-exported for internal use.\n */\nexport type { SurfInstance };\n","import type { SurfInstance } from '@surfjs/core';\nimport type {\n  ExecuteRequest,\n  PipelineRequest,\n  SurfResponse,\n} from '@surfjs/core';\nimport { executePipeline } from '@surfjs/core';\nimport {\n  getErrorStatus,\n  extractAuth,\n  extractIp,\n  CORS_HEADERS,\n} from './shared.js';\n\n/**\n * Minimal Next.js Pages API request type.\n * Avoids importing `next` at runtime for portability.\n */\ninterface PagesApiRequest {\n  method?: string;\n  url?: string;\n  headers: Record<string, string | string[] | undefined>;\n  query: Record<string, string | string[] | undefined>;\n  body?: unknown;\n}\n\n/**\n * Minimal Next.js Pages API response type.\n * Avoids importing `next` at runtime for portability.\n */\ninterface PagesApiResponse {\n  setHeader(name: string, value: string | number): PagesApiResponse;\n  status(code: number): PagesApiResponse;\n  json(body: unknown): void;\n  end(chunk?: string): void;\n  write(chunk: string): boolean;\n  writeHead(statusCode: number, headers?: Record<string, string>): void;\n  flushHeaders?(): void;\n}\n\nfunction headerValue(val: string | string[] | undefined): string | undefined {\n  if (Array.isArray(val)) return val[0];\n  return val;\n}\n\n/**\n * Creates a Pages Router API handler for Surf.js.\n *\n * Returns a single handler for use in a Next.js catch-all API route:\n * `pages/api/surf/[...slug].ts`\n *\n * @example\n * ```ts\n * // pages/api/surf/[...slug].ts\n * import { createSurf } from '@surfjs/core';\n * import { createSurfApiHandler } from '@surfjs/next/pages';\n *\n * const surf = createSurf({ name: 'my-app', commands: { ... } });\n * export default createSurfApiHandler(surf);\n * ```\n *\n * @example\n * ```ts\n * // Disable body parsing for streaming support\n * export const config = { api: { bodyParser: true } };\n * export default createSurfApiHandler(surf);\n * ```\n *\n * @param surf - A `SurfInstance` created via `createSurf()`\n * @returns A Next.js Pages API handler function\n */\nexport function createSurfApiHandler(\n  surf: SurfInstance,\n): (req: PagesApiRequest, res: PagesApiResponse) => Promise<void> {\n  const registry = surf.commands;\n  const sessions = surf.sessions;\n\n  function resolveRoute(query: Record<string, string | string[] | undefined>): string {\n    const slugParam = query['slug'];\n    if (!slugParam) return '/';\n    const parts = Array.isArray(slugParam) ? slugParam : [slugParam];\n    return '/' + parts.join('/');\n  }\n\n  function sendJson(res: PagesApiResponse, status: number, body: unknown, extraHeaders?: Record<string, string>): void {\n    for (const [k, v] of Object.entries(CORS_HEADERS)) {\n      res.setHeader(k, v);\n    }\n    if (extraHeaders) {\n      for (const [k, v] of Object.entries(extraHeaders)) {\n        res.setHeader(k, v);\n      }\n    }\n    res.status(status).json(body);\n  }\n\n  return async function surfApiHandler(req: PagesApiRequest, res: PagesApiResponse): Promise<void> {\n    const route = resolveRoute(req.query);\n    const method = (req.method ?? 'GET').toUpperCase();\n\n    // ─── GET /.well-known/surf.json ──────────────────────────────────\n    if (method === 'GET' && (route === '/.well-known/surf.json' || route === '/')) {\n      const manifestData = surf.manifest();\n      const etag = `\"${manifestData.checksum}\"`;\n\n      if (headerValue(req.headers['if-none-match']) === etag) {\n        res.setHeader('ETag', etag);\n        res.setHeader('Cache-Control', 'public, max-age=300');\n        for (const [k, v] of Object.entries(CORS_HEADERS)) {\n          res.setHeader(k, v);\n        }\n        res.status(304).end();\n        return;\n      }\n\n      sendJson(res, 200, manifestData, {\n        'ETag': etag,\n        'Cache-Control': 'public, max-age=300',\n      });\n      return;\n    }\n\n    // Only POST beyond this point\n    if (method !== 'POST') {\n      sendJson(res, 405, { ok: false, error: { code: 'NOT_SUPPORTED', message: `Method ${method} not allowed` } });\n      return;\n    }\n\n    const auth = extractAuth(headerValue(req.headers['authorization']));\n    const ip = extractIp(\n      headerValue(req.headers['x-forwarded-for']),\n      headerValue(req.headers['x-real-ip']),\n    );\n\n    // ─── POST /surf/execute ──────────────────────────────────────────\n    if (route === '/surf/execute' || route === '/execute') {\n      const body = req.body as ExecuteRequest | undefined;\n\n      if (!body?.command || typeof body.command !== 'string') {\n        sendJson(res, 400, { ok: false, error: { code: 'INVALID_PARAMS', message: 'Missing command field' } });\n        return;\n      }\n\n      let sessionState: Record<string, unknown> | undefined;\n      if (body.sessionId) {\n        const session = await sessions.get(body.sessionId);\n        if (session) sessionState = session.state;\n      }\n\n      const command = registry.get(body.command);\n      const wantsStream = body.stream === true && command?.stream === true;\n\n      if (wantsStream) {\n        // SSE streaming via Node.js response\n        res.writeHead(200, {\n          'Content-Type': 'text/event-stream',\n          'Cache-Control': 'no-cache',\n          'Connection': 'keep-alive',\n          'Access-Control-Allow-Origin': '*',\n        });\n        if (res.flushHeaders) res.flushHeaders();\n\n        const write = (data: unknown) => {\n          res.write(`data: ${JSON.stringify(data)}\\n\\n`);\n        };\n\n        const sseContext = {\n          sessionId: body.sessionId,\n          auth,\n          ip,\n          state: sessionState,\n          requestId: body.requestId,\n          emit: (data: unknown) => {\n            write({ type: 'chunk', data });\n          },\n        };\n\n        try {\n          const response: SurfResponse = await registry.execute(body.command, body.params, sseContext);\n          if (response.ok) {\n            write({ type: 'done', result: response.result });\n          } else {\n            write({ type: 'error', error: { code: response.error.code, message: response.error.message } });\n          }\n        } catch (e) {\n          write({\n            type: 'error',\n            error: { code: 'INTERNAL_ERROR', message: e instanceof Error ? e.message : 'Unknown error' },\n          });\n        } finally {\n          res.end();\n        }\n        return;\n      }\n\n      // Standard JSON response\n      const response: SurfResponse = await registry.execute(body.command, body.params, {\n        sessionId: body.sessionId,\n        auth,\n        ip,\n        state: sessionState,\n        requestId: body.requestId,\n      });\n\n      if (body.sessionId && response.ok && response.state) {\n        await sessions.update(body.sessionId, response.state);\n      }\n\n      const statusCode = response.ok ? 200 : getErrorStatus(response.error.code);\n      const extraHeaders: Record<string, string> = {};\n\n      if (!response.ok && response.error.code === 'RATE_LIMITED') {\n        const retryMs = (response.error.details?.['retryAfterMs'] as number | undefined) ?? 0;\n        extraHeaders['Retry-After'] = String(Math.ceil(retryMs / 1000));\n      }\n\n      sendJson(res, statusCode, response, extraHeaders);\n      return;\n    }\n\n    // ─── POST /surf/pipeline ─────────────────────────────────────────\n    if (route === '/surf/pipeline' || route === '/pipeline') {\n      const body = req.body as PipelineRequest | undefined;\n\n      if (!body) {\n        sendJson(res, 400, { ok: false, error: { code: 'INVALID_PARAMS', message: 'Missing request body' } });\n        return;\n      }\n\n      try {\n        const result = await executePipeline(\n          body,\n          registry as Parameters<typeof executePipeline>[1],\n          sessions as Parameters<typeof executePipeline>[2],\n          auth,\n        );\n        sendJson(res, 200, result);\n      } catch (e) {\n        sendJson(res, 500, {\n          ok: false,\n          error: { code: 'INTERNAL_ERROR', message: e instanceof Error ? e.message : 'Unknown error' },\n        });\n      }\n      return;\n    }\n\n    // ─── POST /surf/session/start ────────────────────────────────────\n    if (route === '/surf/session/start' || route === '/session/start') {\n      const session = await sessions.create();\n      sendJson(res, 200, { ok: true, sessionId: session.id });\n      return;\n    }\n\n    // ─── POST /surf/session/end ──────────────────────────────────────\n    if (route === '/surf/session/end' || route === '/session/end') {\n      const body = req.body as { sessionId?: string } | undefined;\n      if (body?.sessionId) {\n        await sessions.destroy(body.sessionId);\n      }\n      sendJson(res, 200, { ok: true });\n      return;\n    }\n\n    sendJson(res, 404, { ok: false, error: { code: 'NOT_FOUND', message: `Unknown route: POST ${route}` } });\n  };\n}\n\nexport { getErrorStatus, extractAuth, extractIp } from './shared.js';\n"]}

package/dist/shared-CckJeURD.d.cts

@@ -0,0 +1,22 @@
+/**
+ * Surf error code to HTTP status code mapping.
+ * Consistent with fastify and hono adapters.
+ */
+declare function getErrorStatus(code: string): number;
+/**
+ * Extract Bearer token from an Authorization header value.
+ *
+ * @param authHeader - Raw Authorization header value
+ * @returns The token string, or `undefined` if not present
+ */
+declare function extractAuth(authHeader: string | null | undefined): string | undefined;
+/**
+ * Extract client IP from forwarding headers.
+ *
+ * @param forwardedFor - `x-forwarded-for` header value
+ * @param realIp - `x-real-ip` header value
+ * @returns The client IP string, or `undefined` if not determinable
+ */
+declare function extractIp(forwardedFor: string | null | undefined, realIp: string | null | undefined): string | undefined;
+
+export { extractIp as a, extractAuth as e, getErrorStatus as g };

package/dist/shared-CckJeURD.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Surf error code to HTTP status code mapping.
+ * Consistent with fastify and hono adapters.
+ */
+declare function getErrorStatus(code: string): number;
+/**
+ * Extract Bearer token from an Authorization header value.
+ *
+ * @param authHeader - Raw Authorization header value
+ * @returns The token string, or `undefined` if not present
+ */
+declare function extractAuth(authHeader: string | null | undefined): string | undefined;
+/**
+ * Extract client IP from forwarding headers.
+ *
+ * @param forwardedFor - `x-forwarded-for` header value
+ * @param realIp - `x-real-ip` header value
+ * @returns The client IP string, or `undefined` if not determinable
+ */
+declare function extractIp(forwardedFor: string | null | undefined, realIp: string | null | undefined): string | undefined;
+
+export { extractIp as a, extractAuth as e, getErrorStatus as g };

package/package.json

@@ -0,0 +1,73 @@
+{
+  "name": "@surfjs/next",
+  "version": "0.2.0",
+  "description": "Next.js adapter for Surf.js — App Router + Pages Router support",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./pages": {
+      "import": {
+        "types": "./dist/pages.d.ts",
+        "default": "./dist/pages.js"
+      },
+      "require": {
+        "types": "./dist/pages.d.cts",
+        "default": "./dist/pages.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit"
+  },
+  "peerDependencies": {
+    "@surfjs/core": ">=0.2.0",
+    "next": ">=13.0.0"
+  },
+  "devDependencies": {
+    "@surfjs/core": "workspace:*",
+    "@types/node": "^22.0.0",
+    "next": "^15.0.0",
+    "tsup": "^8.5.1",
+    "typescript": "^5.8.0"
+  },
+  "license": "MIT",
+  "keywords": [
+    "surf",
+    "next",
+    "nextjs",
+    "ai",
+    "agents",
+    "protocol",
+    "app-router",
+    "pages-router"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/hauselabs/surf.git",
+    "directory": "packages/next"
+  },
+  "homepage": "https://surf.codes",
+  "bugs": {
+    "url": "https://github.com/hauselabs/surf/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}