@ubean/server 0.1.13 → 0.2.0

package/dist/queue-GOfTAWlz.d.ts

@@ -0,0 +1,55 @@
+//#region src/queue.d.ts
+interface QueueMessage<T = unknown> {
+  id: string;
+  body: T;
+  timestamp: number;
+  attempts: number;
+  headers?: Record<string, string>;
+}
+interface QueueHandler<T = unknown> {
+  (message: QueueMessage<T>): void | Promise<void>;
+}
+interface QueueOptions<T = unknown> {
+  name: string;
+  handler?: QueueHandler<T>;
+  concurrency?: number;
+  retries?: number;
+  retryDelay?: number;
+  deadLetterQueue?: string;
+}
+interface QueueDefinition<T = unknown> extends QueueOptions<T> {
+  handler: QueueHandler<T>;
+}
+interface QueueDriver {
+  send<T>(queueName: string, message: T, options?: SendOptions): Promise<string>;
+  sendBatch<T>(queueName: string, messages: T[], options?: SendOptions): Promise<string[]>;
+  registerHandler?(queueName: string, handler: QueueHandler, options?: QueueOptions): void;
+  start?(): Promise<void>;
+  stop?(): Promise<void>;
+  getQueueDepth?(queueName: string): Promise<number>;
+  deleteMessage?(queueName: string, messageId: string): Promise<boolean>;
+}
+interface SendOptions {
+  delay?: number;
+  headers?: Record<string, string>;
+}
+interface QueueStats {
+  pending: number;
+  processing: number;
+  completed: number;
+  failed: number;
+}
+declare function defineQueue<T = unknown>(options: QueueOptions<T>, handler?: QueueHandler<T>): QueueDefinition<T>;
+declare function createMemoryQueueDriver(): QueueDriver;
+declare function useQueueDriver(): QueueDriver;
+declare function setQueueDriver(driver: QueueDriver): void;
+declare function sendMessage<T = unknown>(queueName: string, body: T, options?: SendOptions): Promise<string>;
+declare function sendMessages<T = unknown>(queueName: string, bodies: T[], options?: SendOptions): Promise<string[]>;
+declare function getQueueDefinitions(): QueueDefinition[];
+declare function clearQueueDefinitions(): void;
+declare function startQueueWorkers(): Promise<void>;
+declare function stopQueueWorkers(): Promise<void>;
+declare function getQueueStats(queueName: string): QueueStats | undefined;
+declare function getAllQueueStats(): Record<string, QueueStats>;
+//#endregion
+export { startQueueWorkers as _, QueueOptions as a, clearQueueDefinitions as c, getAllQueueStats as d, getQueueDefinitions as f, setQueueDriver as g, sendMessages as h, QueueMessage as i, createMemoryQueueDriver as l, sendMessage as m, QueueDriver as n, QueueStats as o, getQueueStats as p, QueueHandler as r, SendOptions as s, QueueDefinition as t, defineQueue as u, stopQueueWorkers as v, useQueueDriver as y };

package/dist/queue.d.ts

@@ -0,0 +1,2 @@
+import { _ as startQueueWorkers, a as QueueOptions, c as clearQueueDefinitions, d as getAllQueueStats, f as getQueueDefinitions, g as setQueueDriver, h as sendMessages, i as QueueMessage, l as createMemoryQueueDriver, m as sendMessage, n as QueueDriver, o as QueueStats, p as getQueueStats, r as QueueHandler, s as SendOptions, t as QueueDefinition, u as defineQueue, v as stopQueueWorkers, y as useQueueDriver } from "./queue-GOfTAWlz.js";
+export { QueueDefinition, QueueDriver, QueueHandler, QueueMessage, QueueOptions, QueueStats, SendOptions, clearQueueDefinitions, createMemoryQueueDriver, defineQueue, getAllQueueStats, getQueueDefinitions, getQueueStats, sendMessage, sendMessages, setQueueDriver, startQueueWorkers, stopQueueWorkers, useQueueDriver };

package/dist/queue.js

@@ -0,0 +1,2 @@
+import { a as getQueueDefinitions, c as sendMessages, d as stopQueueWorkers, f as useQueueDriver, i as getAllQueueStats, l as setQueueDriver, n as createMemoryQueueDriver, o as getQueueStats, r as defineQueue, s as sendMessage, t as clearQueueDefinitions, u as startQueueWorkers } from "./queue-Bwzi3mhK.js";
+export { clearQueueDefinitions, createMemoryQueueDriver, defineQueue, getAllQueueStats, getQueueDefinitions, getQueueStats, sendMessage, sendMessages, setQueueDriver, startQueueWorkers, stopQueueWorkers, useQueueDriver };

package/dist/realtime.d.ts

@@ -0,0 +1,2 @@
+import { A as handleUpgrade, C as defineWebSocket, D as handleClose, E as getWebSocketDefinitions, O as handleError, S as defineRoom, T as getRooms, _ as WebSocketRoom, a as broadcastSSE, b as createRoom, c as createSSEStream, d as getSSEConnections, f as sseHeaders, g as WebSocketHooks, h as WebSocketDefinition, i as SSEOptions, j as registerWebSocket, k as handleMessage, l as defineSSE, m as UpgradeResult, n as SSEHandler, o as clearSSEState, p as Peer, r as SSEMessage, s as closeAllSSE, t as SSEConnection, u as formatSSEMessage, v as broadcast, w as getRoom, x as createWebSocketMiddleware, y as clearWebSocketState } from "./sse-Ct72zhic.js";
+export { Peer, SSEConnection, SSEHandler, SSEMessage, SSEOptions, UpgradeResult, WebSocketDefinition, WebSocketHooks, WebSocketRoom, broadcast, broadcastSSE, clearSSEState, clearWebSocketState, closeAllSSE, createRoom, createSSEStream, createWebSocketMiddleware, defineRoom, defineSSE, defineWebSocket, formatSSEMessage, getRoom, getRooms, getSSEConnections, getWebSocketDefinitions, handleClose, handleError, handleMessage, handleUpgrade, registerWebSocket, sseHeaders };

package/dist/realtime.js

@@ -0,0 +1,2 @@
+import { S as registerWebSocket, _ as getWebSocketDefinitions, a as defineSSE, b as handleMessage, c as sseHeaders, d as createRoom, f as createWebSocketMiddleware, g as getRooms, h as getRoom, i as createSSEStream, l as broadcast, m as defineWebSocket, n as clearSSEState, o as formatSSEMessage, p as defineRoom, r as closeAllSSE, s as getSSEConnections, t as broadcastSSE, u as clearWebSocketState, v as handleClose, x as handleUpgrade, y as handleError } from "./sse-a6Ky9Vcl.js";
+export { broadcast, broadcastSSE, clearSSEState, clearWebSocketState, closeAllSSE, createRoom, createSSEStream, createWebSocketMiddleware, defineRoom, defineSSE, defineWebSocket, formatSSEMessage, getRoom, getRooms, getSSEConnections, getWebSocketDefinitions, handleClose, handleError, handleMessage, handleUpgrade, registerWebSocket, sseHeaders };

package/dist/security.d.ts

@@ -0,0 +1,2 @@
+import { _ as generateCsrfToken, a as createSessionMiddleware, c as useSession, d as createSecurityHeadersMiddleware, f as defineSecurityHeaders, g as defineCsrf, h as createCsrfMiddleware, i as SessionStore, l as ContentSecurityPolicyDirectives, m as CsrfOptions, n as SessionData, o as createStorageSessionStore, p as serializeCsp, r as SessionOptions, s as defineSessionStore, t as Session, u as SecurityHeadersOptions } from "./sessions-BLqFFQTL.js";
+export { ContentSecurityPolicyDirectives, CsrfOptions, SecurityHeadersOptions, Session, SessionData, SessionOptions, SessionStore, createCsrfMiddleware, createSecurityHeadersMiddleware, createSessionMiddleware, createStorageSessionStore, defineCsrf, defineSecurityHeaders, defineSessionStore, generateCsrfToken, serializeCsp, useSession };

package/dist/security.js

@@ -0,0 +1,2 @@
+import { a as createSecurityHeadersMiddleware, c as createCsrfMiddleware, i as useSession, l as defineCsrf, n as createStorageSessionStore, o as defineSecurityHeaders, r as defineSessionStore, s as serializeCsp, t as createSessionMiddleware, u as generateCsrfToken } from "./sessions-BsBsyFAG.js";
+export { createCsrfMiddleware, createSecurityHeadersMiddleware, createSessionMiddleware, createStorageSessionStore, defineCsrf, defineSecurityHeaders, defineSessionStore, generateCsrfToken, serializeCsp, useSession };

package/dist/sessions-BLqFFQTL.d.ts

@@ -0,0 +1,217 @@
+import { i as UbeanStorage } from "./storage-QdlPtPtR.js";
+import { Context, MiddlewareHandler } from "hono";
+import { UbeanEnv } from "@ubean/shared";
+//#region src/csrf.d.ts
+interface CsrfOptions {
+  /** 校验模式:'token'(double-submit cookie,默认) | 'origin'(Origin/Referer 校验) | 'both' */
+  mode?: 'token' | 'origin' | 'both';
+  /** cookie 名称,默认 'ubean_csrf' */
+  cookieName?: string;
+  /** token header 名称,默认 'x-csrf-token' */
+  headerName?: string;
+  /** token 在 body 中的字段名,默认 'csrfToken' */
+  fieldName?: string;
+  /** token 长度(字节数),默认 32 */
+  tokenLength?: number;
+  /** cookie 选项 */
+  cookie?: {
+    path?: string;
+    secure?: boolean;
+    sameSite?: 'strict' | 'lax' | 'none';
+    domain?: string;
+  };
+  /** 自定义 token 生成函数 */
+  generateToken?: () => string;
+  /** 跳过校验的路径(glob 风格前缀匹配) */
+  exclude?: string[];
+  /** 自定义错误处理 */
+  handler?: (c: Context<UbeanEnv>) => Response | Promise<Response>;
+}
+/**
+ * 创建 CSRF 保护中间件
+ *
+ * @example
+ * ```typescript
+ * // 使用默认配置(double-submit cookie 模式)
+ * app.use('*', createCsrfMiddleware());
+ *
+ * // 仅校验 Origin
+ * app.use('*', createCsrfMiddleware({ mode: 'origin' }));
+ *
+ * // 排除 API 路径
+ * app.use('*', createCsrfMiddleware({ exclude: ['/api/webhook/**'] }));
+ * ```
+ */
+declare function createCsrfMiddleware(options?: CsrfOptions): MiddlewareHandler<UbeanEnv>;
+/**
+ * 生成 CSRF token(供前端使用)
+ */
+declare function generateCsrfToken(length?: number): string;
+declare function defineCsrf(options: CsrfOptions): MiddlewareHandler<UbeanEnv>;
+//#endregion
+//#region src/security-headers.d.ts
+interface ContentSecurityPolicyDirectives {
+  'default-src'?: string[];
+  'script-src'?: string[];
+  'style-src'?: string[];
+  'img-src'?: string[];
+  'font-src'?: string[];
+  'connect-src'?: string[];
+  'media-src'?: string[];
+  'object-src'?: string[];
+  'frame-src'?: string[];
+  'child-src'?: string[];
+  'worker-src'?: string[];
+  'manifest-src'?: string[];
+  'base-uri'?: string[];
+  'form-action'?: string[];
+  'frame-ancestors'?: string[];
+  'navigate-to'?: string[];
+  'plugin-types'?: string[];
+  'require-trusted-types-for'?: string[];
+  'trusted-types'?: string[];
+  'upgrade-insecure-requests'?: boolean;
+  'block-all-mixed-content'?: boolean;
+  'report-uri'?: string[];
+  'report-to'?: string[];
+  [key: string]: string[] | boolean | undefined;
+}
+interface SecurityHeadersOptions {
+  /** Content-Security-Policy 指令,设为 false 禁用 */
+  contentSecurityPolicy?: ContentSecurityPolicyDirectives | false;
+  /** 仅报告不拦截(report-only 模式) */
+  contentSecurityPolicyReportOnly?: boolean;
+  /** Strict-Transport-Security 配置,设为 false 禁用 */
+  strictTransportSecurity?: {
+    maxAge?: number;
+    includeSubDomains?: boolean;
+    preload?: boolean;
+  } | false;
+  /** X-Frame-Options: 'DENY' | 'SAMEORIGIN' | false 禁用 */
+  xFrameOptions?: 'DENY' | 'SAMEORIGIN' | false;
+  /** X-Content-Type-Options,默认 'nosniff',设为 false 禁用 */
+  xContentTypeOptions?: 'nosniff' | false;
+  /** Referrer-Policy,默认 'strict-origin-when-cross-origin',设为 false 禁用 */
+  referrerPolicy?: string | false;
+  /** Permissions-Policy 配置 */
+  permissionsPolicy?: Record<string, string[]> | false;
+  /** Cross-Origin-Opener-Policy,默认 'same-origin',设为 false 禁用 */
+  crossOriginOpenerPolicy?: 'same-origin' | 'same-origin-allow-popups' | 'unsafe-none' | false;
+  /** Cross-Origin-Embedder-Policy,设为 false 禁用 */
+  crossOriginEmbedderPolicy?: 'require-corp' | 'credentialless' | 'unsafe-none' | false;
+  /** Cross-Origin-Resource-Policy,默认 'same-origin',设为 false 禁用 */
+  crossOriginResourcePolicy?: 'same-site' | 'same-origin' | 'cross-origin' | false;
+  /** 跳过的路径前缀 */
+  exclude?: string[];
+  /** 自定义额外 header */
+  extraHeaders?: Record<string, string>;
+}
+/**
+ * 将 CSP 指令对象序列化为 header 值
+ */
+declare function serializeCsp(directives: ContentSecurityPolicyDirectives): string;
+/**
+ * 创建安全头中间件
+ *
+ * @example
+ * ```typescript
+ * // 使用默认安全头
+ * app.use('*', createSecurityHeadersMiddleware());
+ *
+ * // 自定义 CSP
+ * app.use('*', createSecurityHeadersMiddleware({
+ *   contentSecurityPolicy: {
+ *     'default-src': ["'self'"],
+ *     'script-src': ["'self'", 'https://cdn.example.com'],
+ *     'style-src': ["'self'", "'unsafe-inline'"],
+ *     'img-src': ["'self'", 'data:', 'https:']
+ *   }
+ * }));
+ *
+ * // 禁用某些头
+ * app.use('*', createSecurityHeadersMiddleware({
+ *   xFrameOptions: false,
+ *   contentSecurityPolicy: false
+ * }));
+ * ```
+ */
+declare function createSecurityHeadersMiddleware(options?: SecurityHeadersOptions): MiddlewareHandler<UbeanEnv>;
+declare function defineSecurityHeaders(options: SecurityHeadersOptions): MiddlewareHandler<UbeanEnv>;
+//#endregion
+//#region src/sessions.d.ts
+type SessionData = Record<string, unknown>;
+interface Session<T extends SessionData = SessionData> {
+  /** 读取 session 值 */
+  get<K extends keyof T>(key: K): T[K] | undefined;
+  /** 设置 session 值 */
+  set<K extends keyof T>(key: K, value: T[K]): void;
+  /** 删除 session 值 */
+  delete(key: string): void;
+  /** 检查 key 是否存在 */
+  has(key: string): boolean;
+  /** 获取所有 session 数据 */
+  all(): SessionData;
+  /** 保存 session(写入存储/cookie) */
+  save(): Promise<void>;
+  /** 销毁 session */
+  destroy(): Promise<void>;
+  /** session ID */
+  readonly id: string;
+  /** 是否已修改 */
+  readonly isDirty: boolean;
+  /** 是否已销毁 */
+  readonly isDestroyed: boolean;
+}
+interface SessionStore {
+  get(id: string): Promise<SessionData | null>;
+  set(id: string, data: SessionData, ttl?: number): Promise<void>;
+  delete(id: string): Promise<void>;
+}
+interface SessionOptions {
+  /** session cookie 名称,默认 'ubean_session' */
+  cookieName?: string;
+  /** session 有效期(秒),默认 7 天 */
+  ttl?: number;
+  /** cookie 选项 */
+  cookie?: {
+    path?: string;
+    secure?: boolean;
+    httpOnly?: boolean;
+    sameSite?: 'strict' | 'lax' | 'none';
+    domain?: string;
+  };
+  /** 自定义 session store(storage 模式),不传则用 cookie 模式 */
+  store?: SessionStore;
+  /** 自定义 session ID 生成函数 */
+  generateId?: () => string;
+  /** 自定义签名密钥(cookie 模式用于签名) */
+  secret?: string;
+  /** 跳过路径 */
+  exclude?: string[];
+}
+declare function createStorageSessionStore(storage?: UbeanStorage, prefix?: string): SessionStore;
+/**
+ * 创建 session 中间件
+ *
+ * @example
+ * ```typescript
+ * // cookie 模式(默认,数据存 signed cookie)
+ * app.use('*', createSessionMiddleware({ secret: 'my-secret' }));
+ *
+ * // storage 模式(数据存服务端 KV/storage)
+ * app.use('*', createSessionMiddleware({
+ *   store: createStorageSessionStore()
+ * }));
+ * ```
+ */
+declare function createSessionMiddleware(options?: SessionOptions): MiddlewareHandler<UbeanEnv>;
+/**
+ * 从 Hono Context 获取 session
+ */
+declare function useSession<T extends SessionData = SessionData>(c: Context<UbeanEnv>): Session<T> | null;
+/**
+ * 定义 session store 别名
+ */
+declare function defineSessionStore(store: SessionStore): SessionStore;
+//#endregion
+export { generateCsrfToken as _, createSessionMiddleware as a, useSession as c, createSecurityHeadersMiddleware as d, defineSecurityHeaders as f, defineCsrf as g, createCsrfMiddleware as h, SessionStore as i, ContentSecurityPolicyDirectives as l, CsrfOptions as m, SessionData as n, createStorageSessionStore as o, serializeCsp as p, SessionOptions as r, defineSessionStore as s, Session as t, SecurityHeadersOptions as u };