@ubean/app 0.2.2 → 0.3.0

package/dist/index.d.ts

@@ -1,5 +1,8 @@
 import { Context, Hono, MiddlewareHandler } from "hono";
 import { RegisterOptions, RouteRegistrar } from "@ubean/routes";
+import { CacheStore } from "@ubean/server/cache";
+import { DataCacheMiddlewareOptions } from "@ubean/server/middleware";
+import { CsrfOptions, SecurityHeadersOptions } from "@ubean/server/security";
 import { ComposedHandler, ComposedHandler as ComposedHandler$1, RouteMeta, RouteMeta as RouteMeta$1, RouteRule, RouteRule as RouteRule$1, UbeanEnv, UbeanEnv as UbeanEnv$1, UbeanMiddleware, UbeanMiddleware as UbeanMiddleware$1 } from "@ubean/shared";
 import { Hookable } from "hookable";
 import { ScannedApiRoute, ScannedApiRoute as ScannedApiRoute$1, ScannedCronTask, ScannedLayout, ScannedLayout as ScannedLayout$1, ScannedMiddleware, ScannedMiddleware as ScannedMiddleware$1, ScannedPageRoute, ScannedPageRoute as ScannedPageRoute$1 } from "@ubean/scan";
@@ -300,7 +303,7 @@ interface UbeanRuntimeHooks {
   error: (err: Error, c: Context<UbeanEnv$1>) => void | Promise<void>;
 }
 /**
- * Page renderer shape (satisfied by `@ubean/ssr`'s `PageRenderer`).
+ * Page renderer shape (satisfied by `@ubean/client/ssr`'s `PageRenderer`).
  * Declared as a type alias to the actual `@ubean/pages`'s `PageRenderer`
  * interface so consumers don't need to install `@ubean/pages` separately
  * to type-check against `UbeanAppOptions.pageRenderer`.
@@ -360,9 +363,19 @@ interface UbeanAppOptions {
     openAPIPath?: string;
   };
   i18nConfig?: {
+    enabled?: boolean;
     strategy?: 'prefix' | 'prefix_except_default' | 'prefix_and_default' | 'no_prefix';
     defaultLocale?: string;
-    locales?: string[];
+    locales?: string[] | Array<{
+      code: string;
+    }>;
+    detectBrowserLanguage?: false | {
+      cookieName?: string;
+      redirectOn?: 'root' | 'all';
+      alwaysRedirect?: boolean;
+    };
+    fallbackLocale?: string;
+    baseUrl?: string;
   };
   /** `pages/404.vue` 自动检测的 404 页面,注册为 Hono 兜底处理器 */
   notFoundPage?: ScannedPageRoute$1;
@@ -372,6 +385,49 @@ interface UbeanAppOptions {
    * the SSG/prerender path that bypasses Vite's `transformIndexHtml`.
    */
   colorModeScript?: string;
+  /**
+   * CSRF protection. Default `true` (origin check). `false` disables.
+   * Pass `CsrfOptions` to override (e.g. token mode).
+   */
+  csrf?: boolean | CsrfOptions;
+  /**
+   * Security response headers. Default `true`. `false` disables.
+   */
+  securityHeaders?: boolean | SecurityHeadersOptions;
+  /**
+   * Cross-request fetch Data Cache (`next: { revalidate, tags }`).
+   * Default `true`. Dev still skips cache unless `forceDevCache`.
+   */
+  dataCache?: boolean | DataCacheMiddlewareOptions;
+  /**
+   * HTTP / ISR cache store. Default is in-process memory (not shared
+   * across instances). Pass `createFsCacheStore(dir)` for a Node fs backend.
+   */
+  cacheStore?: CacheStore;
+  /** Declarative cache backend. `store: 'fs'` uses `createFsCacheStore`. */
+  cache?: {
+    store?: 'memory' | 'fs';
+    dir?: string;
+  };
+  /**
+   * File-convention SEO (`src/sitemap.ts`, `robots.ts`, …). Default: on when
+   * `rootDir` or `seoConventions.srcDir` is set. `false` disables.
+   */
+  seoConventions?: boolean | {
+    srcDir?: string;
+  };
+  /**
+   * Preloaded SEO convention modules (production `import.meta.glob`). When
+   * set, disk discovery is skipped — required on serverless.
+   */
+  seoConventionModules?: Record<string, {
+    default?: unknown;
+  }>;
+  /**
+   * Production `/_ipx` handler (from `@ubean/image` when `image` is enabled).
+   * Dev still uses the Vite middleware.
+   */
+  ipxHandler?: MiddlewareHandler<UbeanEnv$1>;
 }
 interface UbeanAppPlugin {
   name: string;
@@ -389,6 +445,7 @@ declare class UbeanApp {
   constructor(options?: UbeanAppOptions);
   private _setupBaseMiddleware;
   init(): Promise<this>;
+  private _registerSeoConventions;
   private _lazyInitPromise;
   lazyInit(): Promise<this>;
   resetInit(): void;

package/dist/index.js

@@ -1,12 +1,15 @@
+import { AsyncLocalStorage } from "node:async_hooks";
 import { existsSync } from "node:fs";
 import { Hono } from "hono";
-import { ACTIONS_ENDPOINT, createActionsMiddleware } from "@ubean/actions";
-import { createRouteRulesMiddleware, registerOpenAPIRoutes, registerRoutes, setInternalFetcher } from "@ubean/routes";
-import { UbeanError, errorToResponse, isUbeanError } from "@ubean/shared";
+import { createI18nMiddleware, ensureLocaleMessages } from "@ubean/i18n";
 import { SERVER_COMPONENT_ENDPOINT, createServerComponentMiddleware } from "@ubean/islands/server";
-import { createCacheMiddleware, createMemoryStore, resolveRouteCacheRules, useCacheStore } from "@ubean/server/cache";
-import { serveStatic } from "@ubean/server/static";
+import { ACTIONS_ENDPOINT, bindActionContextStorage, buildActionContext, createActionsMiddleware, createRouteRulesMiddleware, registerOpenAPIRoutes, registerRoutes, setInternalFetcher } from "@ubean/routes";
+import { createCacheMiddleware, createFsCacheStore, createMemoryStore, resolveRouteCacheRules, useCacheStore } from "@ubean/server/cache";
+import { createDataCacheMiddleware } from "@ubean/server/middleware";
 import { createWebSocketMiddleware } from "@ubean/server/realtime";
+import { createCsrfMiddleware, createSecurityHeadersMiddleware } from "@ubean/server/security";
+import { serveStatic } from "@ubean/server/static";
+import { UbeanError, errorToResponse, isUbeanError } from "@ubean/shared";
 import { requestId } from "hono/request-id";
 import { createHooks } from "hookable";
 import { isAbsolute, join } from "pathe";
@@ -216,6 +219,50 @@ function mergeServerConfigs(base, ...configs) {
 }
 //#endregion
 //#region src/app.ts
+const actionContextAls = new AsyncLocalStorage();
+bindActionContextStorage(actionContextAls);
+const DEFAULT_CSRF_EXCLUDE = [
+	"/_health",
+	"/_openapi.json",
+	"/_scalar",
+	"/_ipx/**",
+	"/_devtools/**",
+	"/_iconify/**"
+];
+const DEFAULT_SECURITY_HEADERS = {
+	strictTransportSecurity: false,
+	contentSecurityPolicy: {
+		"default-src": ["'self'"],
+		"script-src": [
+			"'self'",
+			"'unsafe-inline'",
+			"'unsafe-eval'"
+		],
+		"style-src": ["'self'", "'unsafe-inline'"],
+		"img-src": [
+			"'self'",
+			"data:",
+			"blob:",
+			"https:"
+		],
+		"font-src": ["'self'", "data:"],
+		"connect-src": [
+			"'self'",
+			"ws:",
+			"wss:"
+		],
+		"object-src": ["'none'"],
+		"base-uri": ["'self'"],
+		"form-action": ["'self'"],
+		"frame-ancestors": ["'self'"]
+	}
+};
+function resolveToggle(value, defaultOn) {
+	if (value === false) return false;
+	if (value === void 0) return defaultOn ? {} : false;
+	if (value === true) return {};
+	return value;
+}
 var UbeanApp = class {
 	hono;
 	hooks;
@@ -235,12 +282,41 @@ var UbeanApp = class {
 			if (!await applyHandleHook(c, next)) await next();
 		});
 		this.hono.use("*", requestId());
+		this.hono.use("*", async (c, next) => {
+			await actionContextAls.run(buildActionContext(c), () => next());
+		});
+		const securityHeaders = resolveToggle(this.options.securityHeaders, true);
+		if (securityHeaders !== false) this.hono.use("*", createSecurityHeadersMiddleware({
+			...DEFAULT_SECURITY_HEADERS,
+			...securityHeaders
+		}));
+		const csrf = resolveToggle(this.options.csrf, true);
+		if (csrf !== false) this.hono.use("*", createCsrfMiddleware({
+			mode: "origin",
+			...csrf,
+			exclude: [...DEFAULT_CSRF_EXCLUDE, ...csrf.exclude ?? []]
+		}));
+		const dataCache = resolveToggle(this.options.dataCache, true);
+		if (dataCache !== false) this.hono.use("*", createDataCacheMiddleware(dataCache));
+		if (this.options.cacheStore) useCacheStore(this.options.cacheStore);
+		else if (this.options.cache?.store === "fs") useCacheStore(createFsCacheStore(this.options.cache.dir || ".ubean/cache"));
+		const i18nCfg = this.options.i18nConfig;
+		if (i18nCfg?.enabled !== false && (i18nCfg?.locales?.length ?? 0) > 0 && i18nCfg) {
+			const locales = (i18nCfg.locales || []).map((l) => typeof l === "string" ? l : l.code);
+			this.hono.use("*", createI18nMiddleware({
+				defaultLocale: i18nCfg.defaultLocale || "en",
+				locales,
+				strategy: i18nCfg.strategy || "prefix_except_default",
+				detectBrowserLanguage: i18nCfg.detectBrowserLanguage,
+				loadMessages: (locale, fallback) => ensureLocaleMessages(locale, fallback)
+			}));
+		}
 		if (this.options.routeRules && Object.keys(this.options.routeRules).length > 0) {
-			this.hono.use("*", createRouteRulesMiddleware(this.options.routeRules));
+			this.hono.use("*", createRouteRulesMiddleware(this.options.routeRules, { dispatch: (req) => Promise.resolve(this.hono.fetch(req)) }));
 			const cacheRules = resolveRouteCacheRules(this.options.routeRules);
 			const hasIsrRules = Object.values(this.options.routeRules).some((r) => r?.isr !== void 0);
 			if (Object.keys(cacheRules).length > 0 || hasIsrRules) {
-				useCacheStore(createMemoryStore());
+				if (!this.options.cacheStore && this.options.cache?.store !== "fs") useCacheStore(createMemoryStore());
 				if (Object.keys(cacheRules).length > 0) this.hono.use("*", createCacheMiddleware({ rules: cacheRules }));
 			}
 		}
@@ -289,12 +365,20 @@ var UbeanApp = class {
 			ssrExclude: this.options.ssrExclude,
 			streaming: this.options.streaming,
 			botFallback: this.options.botFallback,
-			i18nConfig: this.options.i18nConfig,
+			i18nConfig: this.options.i18nConfig ? {
+				strategy: this.options.i18nConfig.strategy,
+				defaultLocale: this.options.i18nConfig.defaultLocale,
+				locales: (this.options.i18nConfig.locales || []).map((l) => typeof l === "string" ? l : l.code),
+				cookieName: this.options.i18nConfig.detectBrowserLanguage === false ? void 0 : this.options.i18nConfig.detectBrowserLanguage?.cookieName || "ubean_locale",
+				baseUrl: this.options.i18nConfig.baseUrl
+			} : void 0,
 			notFoundPage: this.options.notFoundPage,
 			colorModeScript: this.options.colorModeScript,
 			cacheStore: this.options.routeRules && Object.keys(this.options.routeRules).length > 0 ? useCacheStore() : void 0
 		};
 		await registerRoutes(this, registerOpts);
+		if (this.options.ipxHandler) this.hono.get("/_ipx/*", this.options.ipxHandler);
+		await this._registerSeoConventions();
 		this.hono.on("POST", ACTIONS_ENDPOINT, createActionsMiddleware());
 		this.hono.on("POST", SERVER_COMPONENT_ENDPOINT, createServerComponentMiddleware());
 		if (this.options.openAPI) {
@@ -307,6 +391,23 @@ var UbeanApp = class {
 		this._ready = true;
 		return this;
 	}
+	async _registerSeoConventions() {
+		if (this.options.seoConventions === false) return;
+		const srcDir = (typeof this.options.seoConventions === "object" ? this.options.seoConventions : {}).srcDir ?? (this.options.rootDir ? join(this.options.rootDir, "src") : void 0);
+		try {
+			const mod = await import("@ubean/seo/conventions");
+			if (this.options.seoConventionModules) {
+				await mod.registerSeoConventionModules(this, this.options.seoConventionModules);
+				return;
+			}
+			if (!srcDir) return;
+			await mod.registerSeoConventions(this, { srcDir });
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			if (message.includes("Cannot find module '@ubean/seo") || message.includes("Failed to resolve")) return;
+			throw err;
+		}
+	}
 	_lazyInitPromise = null;
 	lazyInit() {
 		if (this._ready) return Promise.resolve(this);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ubean/app",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "Hono app factory and server config for ubean (createUbeanApp, defineServer)",
   "files": [
     "dist"
@@ -19,25 +19,30 @@
     "hono": "4.13.3",
     "hookable": "^6.1.1",
     "pathe": "^2.0.3",
-    "@ubean/actions": "0.2.2",
-    "@ubean/islands": "0.2.2",
-    "@ubean/routes": "0.2.2",
-    "@ubean/scan": "0.2.2",
-    "@ubean/shared": "0.2.2",
-    "@ubean/server": "0.2.2"
+    "@ubean/i18n": "0.3.0",
+    "@ubean/islands": "0.3.0",
+    "@ubean/routes": "0.3.0",
+    "@ubean/scan": "0.3.0",
+    "@ubean/shared": "0.3.0",
+    "@ubean/server": "0.3.0"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",
     "typescript": "7.0.2",
     "vite-plus": "0.2.9",
-    "@ubean/pages": "0.2.2"
+    "@ubean/pages": "0.3.0",
+    "@ubean/seo": "0.3.0"
   },
   "peerDependencies": {
-    "@ubean/pages": "0.2.2"
+    "@ubean/pages": "0.3.0",
+    "@ubean/seo": "0.3.0"
   },
   "peerDependenciesMeta": {
     "@ubean/pages": {
       "optional": true
+    },
+    "@ubean/seo": {
+      "optional": true
     }
   },
   "scripts": {