@syncular/server-hono 0.0.6-221 → 0.0.6-224

package/README.md

@@ -22,7 +22,21 @@ npm install @syncular/console
 
 ## Sync CORS
 
-`createSyncRoutes` and `createSyncServer` accept a simple sync-route CORS allowlist:
+`createSyncRoutes` and `createSyncServer` accept a simple Hono-style sync CORS config.
+The common case is just an origin string:
+
+```ts
+const { syncRoutes } = createSyncServer({
+  db,
+  dialect,
+  sync,
+  routes: {
+    cors: 'https://app.example.com',
+  },
+});
+```
+
+Or use an object when you need extra exposed/allowed headers:
 
 ```ts
 const { syncRoutes } = createSyncServer({
@@ -31,15 +45,16 @@ const { syncRoutes } = createSyncServer({
   sync,
   routes: {
     cors: {
-      allowedOrigins: ['https://app.example.com'],
+      origin: ['https://app.example.com'],
+      allowHeaders: ['x-custom-header'],
     },
   },
 });
 ```
 
-Use `cors.resolveOrigin` only when you need dynamic policy logic.
+Use a function origin only when you need dynamic policy logic.
 When `routes.websocket.allowedOrigins` is unset, realtime websocket upgrades
-inherit `routes.cors.allowedOrigins`.
+inherit static `routes.cors` origins automatically.
 
 ## Links
 

package/dist/create-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-server.d.ts","sourceRoot":"","sources":["../src/create-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,UAAU,EACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAEL,mBAAmB,EAEpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gBAAgB,EAEhB,KAAK,cAAc,EACnB,KAAK,6BAA6B,EACnC,MAAM,UAAU,CAAC;AAElB,MAAM,WAAW,iBAAiB,CAChC,EAAE,SAAS,UAAU,GAAG,UAAU,EAClC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,CAAC,SAAS,SAAS,GAAG,SAAS;IAE/B,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAEf,0BAA0B;IAC1B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAE9B,+CAA+C;IAC/C,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAEjC,iEAAiE;IACjE,YAAY,CAAC,EAAE,oBAAoB,CAAC;IAEpC,sDAAsD;IACtD,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAE/B,+BAA+B;IAC/B,MAAM,CAAC,EAAE,6BAA6B,CAAC;IAEvC,sCAAsC;IACtC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAEpC;;;OAGG;IACH,OAAO,CAAC,EACJ,KAAK,GACL,CAAC;QACC,0FAA0F;QAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,oBAAoB,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,2BAA2B;IAC3B,UAAU,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAChD,2CAA2C;IAC3C,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;IACvD,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,6BAA6B,GAAG,SAAS,GAChD,MAAM,EAAE,GAAG,GAAG,GAAG,SAAS,CAE5B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,SAAS,UAAU,GAAG,UAAU,EAClC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,CAAC,SAAS,SAAS,GAAG,SAAS,EAC/B,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,gBAAgB,CA0G3D"}
+{"version":3,"file":"create-server.d.ts","sourceRoot":"","sources":["../src/create-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,UAAU,EACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAEL,mBAAmB,EAEpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gBAAgB,EAGhB,KAAK,cAAc,EACnB,KAAK,6BAA6B,EACnC,MAAM,UAAU,CAAC;AAElB,MAAM,WAAW,iBAAiB,CAChC,EAAE,SAAS,UAAU,GAAG,UAAU,EAClC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,CAAC,SAAS,SAAS,GAAG,SAAS;IAE/B,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAEf,0BAA0B;IAC1B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAE9B,+CAA+C;IAC/C,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAEjC,iEAAiE;IACjE,YAAY,CAAC,EAAE,oBAAoB,CAAC;IAEpC,sDAAsD;IACtD,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAE/B,+BAA+B;IAC/B,MAAM,CAAC,EAAE,6BAA6B,CAAC;IAEvC,sCAAsC;IACtC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAEpC;;;OAGG;IACH,OAAO,CAAC,EACJ,KAAK,GACL,CAAC;QACC,0FAA0F;QAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,oBAAoB,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,2BAA2B;IAC3B,UAAU,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAChD,2CAA2C;IAC3C,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;IACvD,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,6BAA6B,GAAG,SAAS,GAChD,MAAM,EAAE,GAAG,GAAG,GAAG,SAAS,CAK5B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,SAAS,UAAU,GAAG,UAAU,EAClC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,CAAC,SAAS,SAAS,GAAG,SAAS,EAC/B,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,gBAAgB,CA0G3D"}

package/dist/create-server.js

@@ -7,9 +7,10 @@
  */
 import { createConsoleEventEmitter, createConsoleRoutes, createTokenAuthenticator, } from './console/routes.js';
 import { isBenignConsoleSchemaError } from './console/schema-errors.js';
-import { createSyncRoutes, getSyncWebSocketConnectionManager, } from './routes.js';
+import { createSyncRoutes, getSyncWebSocketConnectionManager, normalizeSyncCorsConfig, } from './routes.js';
 export function resolveDefaultWebSocketAllowedOrigins(routes) {
-    return routes?.websocket?.allowedOrigins ?? routes?.cors?.allowedOrigins;
+    return (routes?.websocket?.allowedOrigins ??
+        normalizeSyncCorsConfig(routes?.cors)?.staticAllowedOrigins);
 }
 /**
  * Create a simplified sync server with sync and optional console routes.

package/dist/create-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-server.js","sourceRoot":"","sources":["../src/create-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAKrE,OAAO,EACL,gBAAgB,EAChB,iCAAiC,GAGlC,MAAM,UAAU,CAAC;AAiDlB,MAAM,UAAU,qCAAqC,CACnD,MAAiD,EACrB;IAC5B,OAAO,MAAM,EAAE,SAAS,EAAE,cAAc,IAAI,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC;AAAA,CAC1E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,gBAAgB,CAI9B,OAAuC,EAAoB;IAC3D,MAAM,EACJ,EAAE,EACF,OAAO,EACP,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,MAAM,EACN,gBAAgB,EAChB,OAAO,EAAE,aAAa,GACvB,GAAG,OAAO,CAAC;IAEZ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,qBAAqB,GACzB,aAAa,KAAK,KAAK,IAAI,aAAa,KAAK,SAAS;QACpD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC;IACpB,MAAM,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,gBAAgB;QACnC,CAAC,CAAC,CAAC,qBAAqB,EAAE,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAClE,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,gBAAgB,IAAI,CAAC,YAAY,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,gBAAgB;QAC1C,CAAC,CAAC,yBAAyB,EAAE;QAC7B,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,kBAAkB,GACtB,gBAAgB,IAAI,OAAO,CAAC,mBAAmB;QAC7C,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC/C,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QAAA,CACb,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,8BAA8B,GAClC,qCAAqC,CAAC,MAAM,CAAC,CAAC;IAEhD,qBAAqB;IACrB,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,EAAE;QACF,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,KAAK,EAAE,OAAO,EAAwB,EAAE,CACpD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QACpC,YAAY;QACZ,UAAU;QACV,kBAAkB,EAAE,mBAAmB;QACvC,kBAAkB;QAClB,IAAI,EAAE;YACJ,GAAG,MAAM;YACT,SAAS,EAAE,gBAAgB;gBACzB,CAAC,CAAC;oBACE,GAAG,MAAM,EAAE,SAAS;oBACpB,cAAc,EAAE,8BAA8B;oBAC9C,OAAO,EAAE,IAAI;oBACb,gBAAgB;iBACjB;gBACH,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;SACvB;KACF,CAAC,CAAC;IAEH,2DAA2D;IAC3D,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,OAAO,EAAE,UAAU,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,mBAAmB,CAAC;QACxC,EAAE;QACF,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,wBAAwB,CAAC,YAAY,CAAC;QACpD,WAAW,EAAE,qBAAqB,CAAC,WAAW;QAC9C,YAAY,EAAE,mBAAmB;QACjC,kBAAkB;QAClB,mBAAmB,EAAE,iCAAiC,CAAC,UAAU,CAAC;QAClE,OAAO,EAAE,qBAAqB,CAAC,OAAO;QACtC,WAAW,EAAE,qBAAqB,CAAC,WAAW;QAC9C,UAAU,EAAE,qBAAqB,CAAC,UAAU;QAC5C,GAAG,CAAC,gBAAgB,IAAI;YACtB,SAAS,EAAE;gBACT,OAAO,EAAE,IAAI;gBACb,gBAAgB;gBAChB,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB;gBAC3D,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe;gBACnD,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB;gBAC7D,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB;gBAC3D,cAAc,EAAE,8BAA8B;aAC/C;SACF,CAAC;KACH,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,aAAa;QACb,mBAAmB;KACpB,CAAC;AAAA,CACH"}
+{"version":3,"file":"create-server.js","sourceRoot":"","sources":["../src/create-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAKrE,OAAO,EACL,gBAAgB,EAChB,iCAAiC,EACjC,uBAAuB,GAGxB,MAAM,UAAU,CAAC;AAiDlB,MAAM,UAAU,qCAAqC,CACnD,MAAiD,EACrB;IAC5B,OAAO,CACL,MAAM,EAAE,SAAS,EAAE,cAAc;QACjC,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,oBAAoB,CAC5D,CAAC;AAAA,CACH;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,gBAAgB,CAI9B,OAAuC,EAAoB;IAC3D,MAAM,EACJ,EAAE,EACF,OAAO,EACP,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,MAAM,EACN,gBAAgB,EAChB,OAAO,EAAE,aAAa,GACvB,GAAG,OAAO,CAAC;IAEZ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,qBAAqB,GACzB,aAAa,KAAK,KAAK,IAAI,aAAa,KAAK,SAAS;QACpD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC;IACpB,MAAM,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,gBAAgB;QACnC,CAAC,CAAC,CAAC,qBAAqB,EAAE,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAClE,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,gBAAgB,IAAI,CAAC,YAAY,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,gBAAgB;QAC1C,CAAC,CAAC,yBAAyB,EAAE;QAC7B,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,kBAAkB,GACtB,gBAAgB,IAAI,OAAO,CAAC,mBAAmB;QAC7C,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC/C,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QAAA,CACb,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,8BAA8B,GAClC,qCAAqC,CAAC,MAAM,CAAC,CAAC;IAEhD,qBAAqB;IACrB,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,EAAE;QACF,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,KAAK,EAAE,OAAO,EAAwB,EAAE,CACpD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QACpC,YAAY;QACZ,UAAU;QACV,kBAAkB,EAAE,mBAAmB;QACvC,kBAAkB;QAClB,IAAI,EAAE;YACJ,GAAG,MAAM;YACT,SAAS,EAAE,gBAAgB;gBACzB,CAAC,CAAC;oBACE,GAAG,MAAM,EAAE,SAAS;oBACpB,cAAc,EAAE,8BAA8B;oBAC9C,OAAO,EAAE,IAAI;oBACb,gBAAgB;iBACjB;gBACH,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;SACvB;KACF,CAAC,CAAC;IAEH,2DAA2D;IAC3D,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,OAAO,EAAE,UAAU,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,mBAAmB,CAAC;QACxC,EAAE;QACF,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,wBAAwB,CAAC,YAAY,CAAC;QACpD,WAAW,EAAE,qBAAqB,CAAC,WAAW;QAC9C,YAAY,EAAE,mBAAmB;QACjC,kBAAkB;QAClB,mBAAmB,EAAE,iCAAiC,CAAC,UAAU,CAAC;QAClE,OAAO,EAAE,qBAAqB,CAAC,OAAO;QACtC,WAAW,EAAE,qBAAqB,CAAC,WAAW;QAC9C,UAAU,EAAE,qBAAqB,CAAC,UAAU;QAC5C,GAAG,CAAC,gBAAgB,IAAI;YACtB,SAAS,EAAE;gBACT,OAAO,EAAE,IAAI;gBACb,gBAAgB;gBAChB,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB;gBAC3D,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe;gBACnD,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB;gBAC7D,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB;gBAC3D,cAAc,EAAE,8BAA8B;aAC/C;SACF,CAAC;KACH,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,aAAa;QACb,mBAAmB;KACpB,CAAC;AAAA,CACH"}

package/dist/index.d.ts

@@ -11,6 +11,6 @@ export { createSyncServer, type SyncServerOptions, type SyncServerResult, } from
 export * from './openapi';
 export * from './proxy';
 export * from './rate-limit';
-export { type CreateSyncRoutesOptions, createSyncRoutes, getSyncRealtimeUnsubscribe, getSyncWebSocketConnectionManager, } from './routes';
+export { type CreateSyncRoutesOptions, createSyncRoutes, getSyncRealtimeUnsubscribe, getSyncWebSocketConnectionManager, type LegacySyncCorsOptions, type NormalizedSyncCorsConfig, normalizeSyncCorsConfig, type SyncCorsOptions, type SyncCorsOrigin, type SyncCorsOriginResolver, } from './routes';
 export * from './ws';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EAAE,KAAK,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAGzE,cAAc,WAAW,CAAC;AAG1B,OAAO,EACL,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AAGzB,cAAc,WAAW,CAAC;AAG1B,cAAc,SAAS,CAAC;AAGxB,cAAc,cAAc,CAAC;AAG7B,OAAO,EACL,KAAK,uBAAuB,EAC5B,gBAAgB,EAChB,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,UAAU,CAAC;AAGlB,cAAc,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EAAE,KAAK,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAGzE,cAAc,WAAW,CAAC;AAG1B,OAAO,EACL,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AAGzB,cAAc,WAAW,CAAC;AAG1B,cAAc,SAAS,CAAC;AAGxB,cAAc,cAAc,CAAC;AAG7B,OAAO,EACL,KAAK,uBAAuB,EAC5B,gBAAgB,EAChB,0BAA0B,EAC1B,iCAAiC,EACjC,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,uBAAuB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,sBAAsB,GAC5B,MAAM,UAAU,CAAC;AAGlB,cAAc,MAAM,CAAC"}

package/dist/index.js

@@ -19,7 +19,7 @@ export * from './proxy/index.js';
 // Rate limiting
 export * from './rate-limit.js';
 // Route types and factory
-export { createSyncRoutes, getSyncRealtimeUnsubscribe, getSyncWebSocketConnectionManager, } from './routes.js';
+export { createSyncRoutes, getSyncRealtimeUnsubscribe, getSyncWebSocketConnectionManager, normalizeSyncCorsConfig, } from './routes.js';
 // WebSocket helpers for realtime sync
 export * from './ws.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAe;AACf,cAAc,gBAAgB,CAAC;AAE/B,cAAc;AACd,OAAO,EAAgC,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEzE,UAAU;AACV,cAAc,WAAW,CAAC;AAE1B,4BAA4B;AAC5B,OAAO,EACL,gBAAgB,GAGjB,MAAM,iBAAiB,CAAC;AAEzB,oBAAoB;AACpB,cAAc,WAAW,CAAC;AAE1B,QAAQ;AACR,cAAc,SAAS,CAAC;AAExB,gBAAgB;AAChB,cAAc,cAAc,CAAC;AAE7B,0BAA0B;AAC1B,OAAO,EAEL,gBAAgB,EAChB,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,UAAU,CAAC;AAElB,sCAAsC;AACtC,cAAc,MAAM,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAe;AACf,cAAc,gBAAgB,CAAC;AAE/B,cAAc;AACd,OAAO,EAAgC,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEzE,UAAU;AACV,cAAc,WAAW,CAAC;AAE1B,4BAA4B;AAC5B,OAAO,EACL,gBAAgB,GAGjB,MAAM,iBAAiB,CAAC;AAEzB,oBAAoB;AACpB,cAAc,WAAW,CAAC;AAE1B,QAAQ;AACR,cAAc,SAAS,CAAC;AAExB,gBAAgB;AAChB,cAAc,cAAc,CAAC;AAE7B,0BAA0B;AAC1B,OAAO,EAEL,gBAAgB,EAChB,0BAA0B,EAC1B,iCAAiC,EAGjC,uBAAuB,GAIxB,MAAM,UAAU,CAAC;AAElB,sCAAsC;AACtC,cAAc,MAAM,CAAC"}

package/dist/routes.d.ts

@@ -62,30 +62,46 @@ export interface SyncWebSocketConfig {
      */
     allowedOrigins?: string[] | '*';
 }
+export type SyncCorsOriginResolver = (origin: string | undefined, context: Context) => boolean | string | null | undefined | Promise<boolean | string | null | undefined>;
+export type SyncCorsOrigin = string | string[] | '*' | SyncCorsOriginResolver;
+export interface SyncCorsOptions {
+    /**
+     * Hono-style origin config.
+     * - string / string[]: exact or wildcard origin patterns
+     * - '*': allow all origins
+     * - function: dynamic allow/deny decision
+     */
+    origin?: SyncCorsOrigin;
+    /**
+     * Additional request headers to allow. These are appended to the built-in
+     * Syncular transport and tracing headers, not used as a replacement.
+     */
+    allowHeaders?: string[];
+    /**
+     * Additional response headers exposed to the browser.
+     */
+    exposeHeaders?: string[];
+}
+/**
+ * Legacy sync CORS config.
+ * @deprecated Prefer `cors: 'https://app.example.com'` or
+ * `cors: { origin: ['https://app.example.com'] }`.
+ */
+export interface LegacySyncCorsOptions {
+    allowedOrigins?: string[] | '*';
+    resolveOrigin?: (origin: string | undefined, context: Context) => string | null | Promise<string | null>;
+    allowCredentials?: boolean;
+    allowHeaders?: string[];
+    allowMethods?: string[];
+    maxAgeSeconds?: number;
+}
 export interface SyncRoutesConfigWithRateLimit {
     /**
      * Optional browser CORS handling for sync routes.
      * When configured, sync route responses and preflights include matching
      * CORS headers directly from the generated sync app.
      */
-    cors?: {
-        /**
-         * Simple exact-match origin allowlist.
-         * Use `'*'` to allow all origins.
-         * When omitted, provide `resolveOrigin` for custom logic.
-         */
-        allowedOrigins?: string[] | '*';
-        /**
-         * Advanced origin resolver for dynamic CORS decisions.
-         * When both `allowedOrigins` and `resolveOrigin` are provided,
-         * `resolveOrigin` takes precedence.
-         */
-        resolveOrigin?: (origin: string | undefined, context: Context) => string | null | Promise<string | null>;
-        allowCredentials?: boolean;
-        allowHeaders?: string[];
-        allowMethods?: string[];
-        maxAgeSeconds?: number;
-    };
+    cors?: SyncCorsOrigin | SyncCorsOptions | LegacySyncCorsOptions;
     /**
      * Max commits per pull request.
      * Default: 100
@@ -202,6 +218,16 @@ export interface CreateSyncRoutesOptions<DB extends SyncCoreDb = SyncCoreDb, Aut
      */
     consoleSchemaReady?: Promise<void>;
 }
+export type NormalizedSyncCorsConfig = {
+    resolveOrigin: (origin: string | undefined, context: Context) => Promise<string | null>;
+    staticAllowedOrigins?: string[] | '*';
+    allowHeaders: string[];
+    exposeHeaders: string[];
+    allowMethods: string[];
+    allowCredentials: boolean;
+    maxAgeSeconds: number;
+};
+export declare function normalizeSyncCorsConfig(config: SyncRoutesConfigWithRateLimit['cors']): NormalizedSyncCorsConfig | null;
 export declare function createSyncRoutes<DB extends SyncCoreDb = SyncCoreDb, Auth extends SyncAuthResult = SyncAuthResult, F extends SqlFamily = SqlFamily>(options: CreateSyncRoutesOptions<DB, Auth, F>): Hono;
 export declare function getSyncWebSocketConnectionManager(routes: Hono): WebSocketConnectionManager | undefined;
 export declare function getSyncRealtimeUnsubscribe(routes: Hono): (() => void) | undefined;

package/dist/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgBH,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,uBAAuB,EAEvB,cAAc,EACd,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,cAAc,EAKnB,KAAK,YAAY,EAUlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,MAAM,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,OAAO,EAAE,KAAK,MAAM,EAAO,MAAM,QAAQ,CAAC;AAG1C,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAIL,0BAA0B,EAC3B,MAAM,MAAM,CAAC;AAQd,MAAM,WAAW,cAAe,SAAQ,cAAc;CAAG;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;CACjC;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,IAAI,CAAC,EAAE;QACL;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QAChC;;;;WAIG;QACH,aAAa,CAAC,EAAE,CACd,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,OAAO,KACb,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QAC5C,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;OAEG;IACH,uBAAuB,CAAC,EAAE;QACxB;;;WAGG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;;WAIG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF;;;OAGG;IACH,SAAS,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;IACxC;;OAEG;IACH,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAEhC;;;OAGG;IACH,KAAK,CAAC,EAAE;QACN,2DAA2D;QAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iCAAiC;QACjC,OAAO,CAAC,EAAE,YAAY,CAAC;KACxB,CAAC;IAEF;;;OAGG;IACH,OAAO,CAAC,EAAE;QACR,iEAAiE;QACjE,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,0BAA0B;QAC1B,OAAO,CAAC,EAAE,cAAc,CAAC;KAC1B,CAAC;IAEF;;;OAGG;IACH,QAAQ,CAAC,EAAE;QACT,WAAW,EAAE,uBAAuB,CAAC;QACrC,qDAAqD;QACrD,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB,CACtC,EAAE,SAAS,UAAU,GAAG,UAAU,EAClC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,CAAC,SAAS,SAAS,GAAG,SAAS;IAE/B,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACzC,OAAO,CAAC,EAAE,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,6BAA6B,CAAC;IACrC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IACjD;;;;OAIG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC;;;OAGG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;;;OAGG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,KAAK,EAAE;YACV,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,CAAC;YACnD,SAAS,EAAE,MAAM,CAAC;YAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SAC/B,GAAG,IAAI,CAAC;KACV,CAAC;IACF;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAiZD,wBAAgB,gBAAgB,CAC9B,EAAE,SAAS,UAAU,GAAG,UAAU,EAClC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,CAAC,SAAS,SAAS,GAAG,SAAS,EAC/B,OAAO,EAAE,uBAAuB,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAqlErD;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,IAAI,GACX,0BAA0B,GAAG,SAAS,CAExC;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,IAAI,GACX,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAE1B"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgBH,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EACT,UAAU,EACV,uBAAuB,EAEvB,cAAc,EACd,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,cAAc,EAKnB,KAAK,YAAY,EAUlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,MAAM,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,OAAO,EAAE,KAAK,MAAM,EAAO,MAAM,QAAQ,CAAC;AAG1C,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,cAAc,CAAC;AAKtB,OAAO,EAIL,0BAA0B,EAC3B,MAAM,MAAM,CAAC;AAQd,MAAM,WAAW,cAAe,SAAQ,cAAc;CAAG;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;CACjC;AAED,MAAM,MAAM,sBAAsB,GAAG,CACnC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,OAAO,KAEd,OAAO,GACP,MAAM,GACN,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAEjD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,GAAG,GAAG,sBAAsB,CAAC;AAE9E,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAChC,aAAa,CAAC,EAAE,CACd,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,OAAO,KACb,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,IAAI,CAAC,EAAE,cAAc,GAAG,eAAe,GAAG,qBAAqB,CAAC;IAChE;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;OAEG;IACH,uBAAuB,CAAC,EAAE;QACxB;;;WAGG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;;WAIG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF;;;OAGG;IACH,SAAS,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;IACxC;;OAEG;IACH,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAEhC;;;OAGG;IACH,KAAK,CAAC,EAAE;QACN,2DAA2D;QAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iCAAiC;QACjC,OAAO,CAAC,EAAE,YAAY,CAAC;KACxB,CAAC;IAEF;;;OAGG;IACH,OAAO,CAAC,EAAE;QACR,iEAAiE;QACjE,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,0BAA0B;QAC1B,OAAO,CAAC,EAAE,cAAc,CAAC;KAC1B,CAAC;IAEF;;;OAGG;IACH,QAAQ,CAAC,EAAE;QACT,WAAW,EAAE,uBAAuB,CAAC;QACrC,qDAAqD;QACrD,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB,CACtC,EAAE,SAAS,UAAU,GAAG,UAAU,EAClC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,CAAC,SAAS,SAAS,GAAG,SAAS;IAE/B,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACzC,OAAO,CAAC,EAAE,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,6BAA6B,CAAC;IACrC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IACjD;;;;OAIG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC;;;OAGG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;;;OAGG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,KAAK,EAAE;YACV,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,eAAe,CAAC;YACnD,SAAS,EAAE,MAAM,CAAC;YAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SAC/B,GAAG,IAAI,CAAC;KACV,CAAC;IACF;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AA0FD,MAAM,MAAM,wBAAwB,GAAG;IACrC,aAAa,EAAE,CACb,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACtC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AA4GF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,6BAA6B,CAAC,MAAM,CAAC,GAC5C,wBAAwB,GAAG,IAAI,CA8EjC;AAkQD,wBAAgB,gBAAgB,CAC9B,EAAE,SAAS,UAAU,GAAG,UAAU,EAClC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,CAAC,SAAS,SAAS,GAAG,SAAS,EAC/B,OAAO,EAAE,uBAAuB,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CA8kErD;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,IAAI,GACX,0BAA0B,GAAG,SAAS,CAExC;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,IAAI,GACX,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAE1B"}

package/dist/routes.js

@@ -14,7 +14,7 @@ import { sql } from 'kysely';
 import { z } from 'zod';
 import { isBenignConsoleSchemaError } from './console/schema-errors.js';
 import { createRateLimiter, DEFAULT_SYNC_RATE_LIMITS, } from './rate-limit.js';
-import { isWebSocketOriginAllowed } from './websocket-origin.js';
+import { isWebSocketOriginAllowed, resolveAllowedOriginFromPatterns, } from './websocket-origin.js';
 import { createWebSocketConnection, createWebSocketConnectionOwnerKey, WebSocketConnectionManager, } from './ws.js';
 /**
  * WeakMaps for storing Hono-instance-specific data without augmenting the type.
@@ -91,11 +91,15 @@ const DEFAULT_SYNC_CORS_ALLOW_METHODS = [
     'DELETE',
     'OPTIONS',
 ];
+const DEFAULT_SYNC_CORS_EXPOSE_HEADERS = [];
 function applySyncCorsHeaders(args) {
     args.headers.set('Access-Control-Allow-Origin', args.allowedOrigin);
     args.headers.set('Access-Control-Allow-Headers', args.allowHeaders.join(', '));
     args.headers.set('Access-Control-Allow-Methods', args.allowMethods.join(', '));
     args.headers.set('Access-Control-Max-Age', String(args.maxAgeSeconds));
+    if (args.exposeHeaders.length > 0) {
+        args.headers.set('Access-Control-Expose-Headers', args.exposeHeaders.join(', '));
+    }
     if (args.allowedOrigin !== '*') {
         args.headers.append('Vary', 'Origin');
         if (args.allowCredentials) {
@@ -109,21 +113,114 @@ function createSyncCorsOriginDeniedResponse(origin) {
         message: `Origin ${origin} is not allowed for sync access.`,
     }, { status: 403 });
 }
-async function resolveSyncCorsOrigin(args) {
-    const { config, origin, context } = args;
-    if (typeof config.resolveOrigin === 'function') {
-        return config.resolveOrigin(origin, context);
-    }
-    if (config.allowedOrigins === '*') {
-        return '*';
+function mergeUniqueHeaders(...lists) {
+    const seen = new Set();
+    const merged = [];
+    for (const list of lists) {
+        for (const header of list ?? []) {
+            const trimmed = header.trim();
+            if (trimmed.length === 0)
+                continue;
+            const key = trimmed.toLowerCase();
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            merged.push(trimmed);
+        }
     }
-    if (Array.isArray(config.allowedOrigins)) {
-        if (!origin) {
+    return merged;
+}
+function normalizeOriginResolver(resolver) {
+    return async (origin, context) => {
+        const resolved = await resolver(origin, context);
+        if (resolved === true) {
+            return origin ?? null;
+        }
+        if (resolved === false || resolved == null) {
             return null;
         }
-        return config.allowedOrigins.includes(origin) ? origin : null;
+        return resolved;
+    };
+}
+function createStaticOriginResolver(allowedOrigins) {
+    return async (origin) => {
+        if (allowedOrigins === '*') {
+            return '*';
+        }
+        return resolveAllowedOriginFromPatterns(origin, allowedOrigins);
+    };
+}
+function toStaticAllowedOrigins(origin) {
+    return origin === '*' ? '*' : typeof origin === 'string' ? [origin] : origin;
+}
+function isLegacySyncCorsOptions(value) {
+    return (!!value &&
+        typeof value === 'object' &&
+        !Array.isArray(value) &&
+        ('allowedOrigins' in value ||
+            'resolveOrigin' in value ||
+            'allowCredentials' in value ||
+            'allowMethods' in value ||
+            'maxAgeSeconds' in value));
+}
+export function normalizeSyncCorsConfig(config) {
+    if (!config) {
+        return null;
     }
-    return null;
+    if (typeof config === 'string' ||
+        Array.isArray(config) ||
+        typeof config === 'function') {
+        const originResolver = typeof config === 'function'
+            ? normalizeOriginResolver(config)
+            : createStaticOriginResolver(toStaticAllowedOrigins(config));
+        const staticAllowedOrigins = typeof config === 'function' ? undefined : toStaticAllowedOrigins(config);
+        return {
+            resolveOrigin: originResolver,
+            staticAllowedOrigins,
+            allowHeaders: [...DEFAULT_SYNC_CORS_ALLOW_HEADERS],
+            exposeHeaders: [...DEFAULT_SYNC_CORS_EXPOSE_HEADERS],
+            allowMethods: [...DEFAULT_SYNC_CORS_ALLOW_METHODS],
+            allowCredentials: true,
+            maxAgeSeconds: 86_400,
+        };
+    }
+    if (isLegacySyncCorsOptions(config)) {
+        const staticAllowedOrigins = config.allowedOrigins;
+        const resolveOrigin = typeof config.resolveOrigin === 'function'
+            ? async (origin, context) => (await config.resolveOrigin?.(origin, context)) ?? null
+            : config.allowedOrigins
+                ? createStaticOriginResolver(config.allowedOrigins)
+                : async () => null;
+        return {
+            resolveOrigin,
+            staticAllowedOrigins,
+            allowHeaders: mergeUniqueHeaders(DEFAULT_SYNC_CORS_ALLOW_HEADERS, config.allowHeaders),
+            exposeHeaders: [...DEFAULT_SYNC_CORS_EXPOSE_HEADERS],
+            allowMethods: config.allowMethods ?? [...DEFAULT_SYNC_CORS_ALLOW_METHODS],
+            allowCredentials: config.allowCredentials ?? true,
+            maxAgeSeconds: config.maxAgeSeconds ?? 86_400,
+        };
+    }
+    const staticOrigin = config.origin;
+    const resolveOrigin = typeof staticOrigin === 'function'
+        ? normalizeOriginResolver(staticOrigin)
+        : staticOrigin
+            ? createStaticOriginResolver(toStaticAllowedOrigins(staticOrigin))
+            : async () => null;
+    const staticAllowedOrigins = typeof staticOrigin === 'function'
+        ? undefined
+        : staticOrigin
+            ? toStaticAllowedOrigins(staticOrigin)
+            : undefined;
+    return {
+        resolveOrigin,
+        staticAllowedOrigins,
+        allowHeaders: mergeUniqueHeaders(DEFAULT_SYNC_CORS_ALLOW_HEADERS, config.allowHeaders),
+        exposeHeaders: mergeUniqueHeaders(DEFAULT_SYNC_CORS_EXPOSE_HEADERS, config.exposeHeaders),
+        allowMethods: [...DEFAULT_SYNC_CORS_ALLOW_METHODS],
+        allowCredentials: true,
+        maxAgeSeconds: 86_400,
+    };
 }
 function createOpaqueId(prefix) {
     const randomPart = typeof crypto !== 'undefined' && 'randomUUID' in crypto
@@ -330,31 +427,25 @@ export function createSyncRoutes(options) {
         });
         return c.text('Internal Server Error', 500);
     });
-    const corsConfig = config.cors;
+    const corsConfig = normalizeSyncCorsConfig(config.cors);
     if (corsConfig) {
         routes.use('*', async (c, next) => {
             const origin = readOriginHeader(c);
-            const allowedOrigin = await resolveSyncCorsOrigin({
-                config: corsConfig,
-                origin,
-                context: c,
-            });
+            const allowedOrigin = await corsConfig.resolveOrigin(origin, c);
             if (origin && !allowedOrigin) {
                 return createSyncCorsOriginDeniedResponse(origin);
             }
             const resolvedOrigin = allowedOrigin ?? '*';
-            const allowHeaders = corsConfig.allowHeaders ?? DEFAULT_SYNC_CORS_ALLOW_HEADERS;
-            const allowMethods = corsConfig.allowMethods ?? DEFAULT_SYNC_CORS_ALLOW_METHODS;
-            const maxAgeSeconds = corsConfig.maxAgeSeconds ?? 86_400;
             if (c.req.method === 'OPTIONS') {
                 const headers = new Headers();
                 applySyncCorsHeaders({
                     headers,
                     allowedOrigin: resolvedOrigin,
-                    allowCredentials: corsConfig.allowCredentials ?? false,
-                    allowHeaders,
-                    allowMethods,
-                    maxAgeSeconds,
+                    allowCredentials: corsConfig.allowCredentials,
+                    allowHeaders: corsConfig.allowHeaders,
+                    exposeHeaders: corsConfig.exposeHeaders,
+                    allowMethods: corsConfig.allowMethods,
+                    maxAgeSeconds: corsConfig.maxAgeSeconds,
                 });
                 return new Response(null, { status: 204, headers });
             }
@@ -362,10 +453,11 @@ export function createSyncRoutes(options) {
             applySyncCorsHeaders({
                 headers: c.res.headers,
                 allowedOrigin: resolvedOrigin,
-                allowCredentials: corsConfig.allowCredentials ?? false,
-                allowHeaders,
-                allowMethods,
-                maxAgeSeconds,
+                allowCredentials: corsConfig.allowCredentials,
+                allowHeaders: corsConfig.allowHeaders,
+                exposeHeaders: corsConfig.exposeHeaders,
+                allowMethods: corsConfig.allowMethods,
+                maxAgeSeconds: corsConfig.maxAgeSeconds,
             });
             return c.res;
         });