@velajs/vela 1.18.0 → 1.19.1

package/dist/seeder/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../src/seeder/seeder.tokens.ts","../../src/seeder/seeder.decorator.ts","../../src/seeder/seeder.registry.ts","../../src/seeder/seeder.module.ts"],"sourcesContent":["/** Custom class-metadata key for `@Seeder()` (read during bootstrap discovery). */\nexport const SEEDER_METADATA = 'vela:seeder';\n","import { Scope } from '../constants';\nimport { MetadataRegistry } from '../registry/metadata.registry';\nimport type { Constructor } from '../registry/types';\nimport { SEEDER_METADATA } from './seeder.tokens';\nimport type { SeederMetadata } from './seeder.types';\n\n/**\n * Mark a class as a seeder. Also marks it `@Injectable()` (singleton) so it only\n * needs to be listed in a module's providers (or `SeederModule.forRoot({ seeders })`)\n * to be discovered by {@link SeederRegistry} at bootstrap.\n */\nexport function Seeder(options: SeederMetadata = {}): ClassDecorator {\n  return (target) => {\n    const ctor = target as unknown as Constructor;\n    MetadataRegistry.markInjectable(ctor);\n    MetadataRegistry.setScope(ctor, Scope.SINGLETON);\n    MetadataRegistry.setCustomClassMeta(target, SEEDER_METADATA, options);\n  };\n}\n","import { Container } from '../container/container';\nimport { Inject, Injectable } from '../container/index';\nimport type { OnApplicationBootstrap } from '../lifecycle/index';\nimport { MetadataRegistry } from '../registry/metadata.registry';\nimport type { Constructor } from '../registry/types';\nimport { SEEDER_METADATA } from './seeder.tokens';\nimport type { RegisteredSeeder, Seeder, SeederMetadata, SeederResult } from './seeder.types';\n\n/**\n * Discovers `@Seeder()` providers at bootstrap and runs them on demand.\n * Mirrors `ScheduleRegistry`'s discovery (scan container tokens → read metadata).\n */\n@Injectable()\nexport class SeederRegistry implements OnApplicationBootstrap {\n  private seeders: RegisteredSeeder[] = [];\n\n  constructor(@Inject(Container) private readonly container: Container) {}\n\n  onApplicationBootstrap(): void {\n    for (const token of this.container.getTokens()) {\n      if (typeof token !== 'function') continue;\n      const meta = MetadataRegistry.getCustomClassMeta(token as Constructor, SEEDER_METADATA) as\n        | SeederMetadata\n        | undefined;\n      if (!meta) continue;\n      this.seeders.push({\n        target: token as RegisteredSeeder['target'],\n        name: meta.name ?? (token as Constructor).name,\n        order: meta.order ?? 0,\n      });\n    }\n    this.seeders.sort((a, b) => a.order - b.order);\n  }\n\n  /** Registered seeders in run order. */\n  list(): RegisteredSeeder[] {\n    return [...this.seeders];\n  }\n\n  /**\n   * Run every seeder in order, each in its own request-scoped child container so\n   * request-scoped dependencies resolve. Returns a per-seeder result; when\n   * `stopOnError` is true (default) the run aborts on the first failure.\n   */\n  async runAll(options: { stopOnError?: boolean } = {}): Promise<SeederResult[]> {\n    const stopOnError = options.stopOnError ?? true;\n    const results: SeederResult[] = [];\n    for (const seeder of this.seeders) {\n      const child = this.container.createChild();\n      let failed = false;\n      try {\n        const instance = child.resolve<Seeder>(seeder.target);\n        await instance.run();\n        results.push({ name: seeder.name, ok: true });\n      } catch (error) {\n        results.push({ name: seeder.name, ok: false, error });\n        failed = true;\n      } finally {\n        // Dispose the per-seeder child so its request-scoped disposables clean up.\n        await child.dispose();\n      }\n      if (failed && stopOnError) break;\n    }\n    return results;\n  }\n}\n","import type { VelaApplication } from '../application';\nimport { Module } from '../module/decorators';\nimport { defineModule } from '../module/define-module';\nimport { stableHash } from '../module/stable-hash';\nimport type { Type } from '../container/types';\nimport { SeederRegistry } from './seeder.registry';\nimport type { SeederResult } from './seeder.types';\n\nexport interface SeederModuleOptions {\n  seeders?: Type[];\n}\n\nconst { ConfigurableModuleClass } = defineModule<SeederModuleOptions>({\n  name: 'Seeder',\n  // Class references aren't value-hashable — key on the seeder names, the same\n  // identity the hand-rolled forRoot used.\n  key: (options) => stableHash({ seeders: (options.seeders ?? []).map((s) => s.name) }),\n  setup: ({ options }) => ({\n    // Register seeder classes as providers so they're discovered at bootstrap.\n    // (Seeders declared in other modules' providers are also discovered — this\n    // is just a convenience to co-locate them.)\n    providers: [...(options.seeders ?? [])],\n  }),\n});\n\n@Module({\n  // Lazy: the @Seeder metadata scan runs when SeederRegistry is first\n  // resolved (runSeeders) — hook replay repopulates it correctly.\n  lazy: true,\n  providers: [SeederRegistry],\n  exports: [SeederRegistry],\n})\nexport class SeederModule extends ConfigurableModuleClass {}\n\n/** Convenience runner: resolve the registry from a built app and run all seeders. */\nexport function runSeeders(\n  app: VelaApplication,\n  options?: { stopOnError?: boolean },\n): Promise<SeederResult[]> {\n  return app.get(SeederRegistry).runAll(options);\n}\n"],"mappings":";;;;;;AACA,MAAa,kBAAkB;;;;;;;;ACU/B,SAAgB,OAAO,UAA0B,CAAC,GAAmB;CACnE,QAAQ,WAAW;EACjB,MAAM,OAAO;EACb,iBAAiB,eAAe,IAAI;EACpC,iBAAiB,SAAS,MAAM,MAAM,SAAS;EAC/C,iBAAiB,mBAAmB,QAAQ,iBAAiB,OAAO;CACtE;AACF;;;ACLO,IAAA,iBAAA,MAAM,eAAiD;CAGZ;CAFhD,UAAsC,CAAC;CAEvC,YAAY,WAA0D;EAAtB,KAAA,YAAA;CAAuB;CAEvE,yBAA+B;EAC7B,KAAK,MAAM,SAAS,KAAK,UAAU,UAAU,GAAG;GAC9C,IAAI,OAAO,UAAU,YAAY;GACjC,MAAM,OAAO,iBAAiB,mBAAmB,OAAsB,eAAe;GAGtF,IAAI,CAAC,MAAM;GACX,KAAK,QAAQ,KAAK;IAChB,QAAQ;IACR,MAAM,KAAK,QAAS,MAAsB;IAC1C,OAAO,KAAK,SAAS;GACvB,CAAC;EACH;EACA,KAAK,QAAQ,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK;CAC/C;;CAGA,OAA2B;EACzB,OAAO,CAAC,GAAG,KAAK,OAAO;CACzB;;;;;;CAOA,MAAM,OAAO,UAAqC,CAAC,GAA4B;EAC7E,MAAM,cAAc,QAAQ,eAAe;EAC3C,MAAM,UAA0B,CAAC;EACjC,KAAK,MAAM,UAAU,KAAK,SAAS;GACjC,MAAM,QAAQ,KAAK,UAAU,YAAY;GACzC,IAAI,SAAS;GACb,IAAI;IAEF,MADiB,MAAM,QAAgB,OAAO,MACjC,CAAC,CAAC,IAAI;IACnB,QAAQ,KAAK;KAAE,MAAM,OAAO;KAAM,IAAI;IAAK,CAAC;GAC9C,SAAS,OAAO;IACd,QAAQ,KAAK;KAAE,MAAM,OAAO;KAAM,IAAI;KAAO;IAAM,CAAC;IACpD,SAAS;GACX,UAAU;IAER,MAAM,MAAM,QAAQ;GACtB;GACA,IAAI,UAAU,aAAa;EAC7B;EACA,OAAO;CACT;AACF;;CArDC,WAAW;oBAIG,OAAO,SAAS,CAAA;;;;;ACJ/B,MAAM,EAAE,4BAA4B,aAAkC;CACpE,MAAM;CAGN,MAAM,YAAY,WAAW,EAAE,UAAU,QAAQ,WAAW,CAAC,EAAA,CAAG,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC;CACpF,QAAQ,EAAE,eAAe,EAIvB,WAAW,CAAC,GAAI,QAAQ,WAAW,CAAC,CAAE,EACxC;AACF,CAAC;AASM,IAAA,eAAA,MAAM,qBAAqB,wBAAwB,CAAC;2BAP1D,OAAO;CAGN,MAAM;CACN,WAAW,CAAC,cAAc;CAC1B,SAAS,CAAC,cAAc;AAC1B,CAAC,CAAA,GAAA,YAAA;;AAID,SAAgB,WACd,KACA,SACyB;CACzB,OAAO,IAAI,IAAI,cAAc,CAAC,CAAC,OAAO,OAAO;AAC/C"}

package/dist/signed-url-CMmi0SIb.js

@@ -0,0 +1,56 @@
+//#region src/crypto/signed-url.ts
+async function importKey(secret) {
+	return crypto.subtle.importKey("raw", new TextEncoder().encode(secret), {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign", "verify"]);
+}
+function toBase64Url(buffer) {
+	const bytes = new Uint8Array(buffer);
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function fromBase64Url(value) {
+	const base64 = value.replace(/-/g, "+").replace(/_/g, "/");
+	const binary = atob(base64);
+	const bytes = new Uint8Array(new ArrayBuffer(binary.length));
+	for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+	return bytes;
+}
+/**
+* Sign a URL (or path) with HMAC-SHA256, appending `signature` (and `expires`).
+* The signature covers `pathname + search` (minus the signature param). Returns
+* the full URL for absolute inputs, or `pathname?search` for relative ones.
+*/
+async function signUrl(url, secret, options) {
+	const parsed = new URL(url, "https://placeholder.local");
+	const key = await importKey(secret);
+	if (options?.expiresIn) {
+		const expires = Math.floor(Date.now() / 1e3) + options.expiresIn;
+		parsed.searchParams.set("expires", String(expires));
+	}
+	const dataToSign = `${parsed.pathname}?${parsed.searchParams.toString()}`;
+	const signatureBuffer = await crypto.subtle.sign("HMAC", key, new TextEncoder().encode(dataToSign));
+	parsed.searchParams.set("signature", toBase64Url(signatureBuffer));
+	return url.startsWith("http") ? parsed.toString() : `${parsed.pathname}?${parsed.searchParams.toString()}`;
+}
+/** Verify a signed URL (timing-safe) and enforce `expires`. */
+async function verifySignedUrl(url, secret) {
+	const parsed = new URL(url, "https://placeholder.local");
+	const signature = parsed.searchParams.get("signature");
+	if (!signature) return false;
+	const expires = parsed.searchParams.get("expires");
+	if (expires) {
+		const expiryTime = parseInt(expires, 10);
+		if (Number.isNaN(expiryTime) || Math.floor(Date.now() / 1e3) > expiryTime) return false;
+	}
+	parsed.searchParams.delete("signature");
+	const dataToVerify = `${parsed.pathname}?${parsed.searchParams.toString()}`;
+	const key = await importKey(secret);
+	return crypto.subtle.verify("HMAC", key, fromBase64Url(signature), new TextEncoder().encode(dataToVerify));
+}
+//#endregion
+export { verifySignedUrl as n, signUrl as t };
+
+//# sourceMappingURL=signed-url-CMmi0SIb.js.map

package/dist/signed-url-CMmi0SIb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-url-CMmi0SIb.js","names":[],"sources":["../src/crypto/signed-url.ts"],"sourcesContent":["// Signed-URL utilities using HMAC-SHA256 via the Web Crypto API (edge-safe;\n// no node:crypto). Verification uses crypto.subtle.verify for timing-safety.\n// Pattern: https://developers.cloudflare.com/workers/examples/signing-requests/\n//\n// This is the canonical home for the util. `@velajs/vela/storage` re-exports it\n// (see src/storage/index.ts) so the storage subpath API is unchanged, while\n// core (the URL generator + signed-URL guard) imports it here directly — core\n// never reaches into a published subpath.\n\nexport interface SignedUrlOptions {\n  /** Time-to-live in seconds; a matching `expires` param is added + enforced. */\n  expiresIn?: number;\n}\n\nasync function importKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    'raw',\n    new TextEncoder().encode(secret),\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['sign', 'verify'],\n  );\n}\n\nfunction toBase64Url(buffer: ArrayBuffer): string {\n  const bytes = new Uint8Array(buffer);\n  let binary = '';\n  for (const byte of bytes) binary += String.fromCharCode(byte);\n  return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n}\n\nfunction fromBase64Url(value: string): Uint8Array<ArrayBuffer> {\n  const base64 = value.replace(/-/g, '+').replace(/_/g, '/');\n  const binary = atob(base64);\n  const bytes = new Uint8Array(new ArrayBuffer(binary.length));\n  for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n  return bytes;\n}\n\n/**\n * Sign a URL (or path) with HMAC-SHA256, appending `signature` (and `expires`).\n * The signature covers `pathname + search` (minus the signature param). Returns\n * the full URL for absolute inputs, or `pathname?search` for relative ones.\n */\nexport async function signUrl(\n  url: string,\n  secret: string,\n  options?: SignedUrlOptions,\n): Promise<string> {\n  const parsed = new URL(url, 'https://placeholder.local');\n  const key = await importKey(secret);\n\n  if (options?.expiresIn) {\n    const expires = Math.floor(Date.now() / 1000) + options.expiresIn;\n    parsed.searchParams.set('expires', String(expires));\n  }\n\n  const dataToSign = `${parsed.pathname}?${parsed.searchParams.toString()}`;\n  const signatureBuffer = await crypto.subtle.sign(\n    'HMAC',\n    key,\n    new TextEncoder().encode(dataToSign),\n  );\n  parsed.searchParams.set('signature', toBase64Url(signatureBuffer));\n\n  return url.startsWith('http')\n    ? parsed.toString()\n    : `${parsed.pathname}?${parsed.searchParams.toString()}`;\n}\n\n/** Verify a signed URL (timing-safe) and enforce `expires`. */\nexport async function verifySignedUrl(url: string, secret: string): Promise<boolean> {\n  const parsed = new URL(url, 'https://placeholder.local');\n  const signature = parsed.searchParams.get('signature');\n  if (!signature) return false;\n\n  const expires = parsed.searchParams.get('expires');\n  if (expires) {\n    const expiryTime = parseInt(expires, 10);\n    if (Number.isNaN(expiryTime) || Math.floor(Date.now() / 1000) > expiryTime) return false;\n  }\n\n  parsed.searchParams.delete('signature');\n  const dataToVerify = `${parsed.pathname}?${parsed.searchParams.toString()}`;\n  const key = await importKey(secret);\n  return crypto.subtle.verify(\n    'HMAC',\n    key,\n    fromBase64Url(signature),\n    new TextEncoder().encode(dataToVerify),\n  );\n}\n"],"mappings":";AAcA,eAAe,UAAU,QAAoC;CAC3D,OAAO,OAAO,OAAO,UACnB,OACA,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,GAC/B;EAAE,MAAM;EAAQ,MAAM;CAAU,GAChC,OACA,CAAC,QAAQ,QAAQ,CACnB;AACF;AAEA,SAAS,YAAY,QAA6B;CAChD,MAAM,QAAQ,IAAI,WAAW,MAAM;CACnC,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OAAO,UAAU,OAAO,aAAa,IAAI;CAC5D,OAAO,KAAK,MAAM,CAAC,CAAC,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,EAAE;AAC/E;AAEA,SAAS,cAAc,OAAwC;CAC7D,MAAM,SAAS,MAAM,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;CACzD,MAAM,SAAS,KAAK,MAAM;CAC1B,MAAM,QAAQ,IAAI,WAAW,IAAI,YAAY,OAAO,MAAM,CAAC;CAC3D,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK,MAAM,KAAK,OAAO,WAAW,CAAC;CACtE,OAAO;AACT;;;;;;AAOA,eAAsB,QACpB,KACA,QACA,SACiB;CACjB,MAAM,SAAS,IAAI,IAAI,KAAK,2BAA2B;CACvD,MAAM,MAAM,MAAM,UAAU,MAAM;CAElC,IAAI,SAAS,WAAW;EACtB,MAAM,UAAU,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,QAAQ;EACxD,OAAO,aAAa,IAAI,WAAW,OAAO,OAAO,CAAC;CACpD;CAEA,MAAM,aAAa,GAAG,OAAO,SAAS,GAAG,OAAO,aAAa,SAAS;CACtE,MAAM,kBAAkB,MAAM,OAAO,OAAO,KAC1C,QACA,KACA,IAAI,YAAY,CAAC,CAAC,OAAO,UAAU,CACrC;CACA,OAAO,aAAa,IAAI,aAAa,YAAY,eAAe,CAAC;CAEjE,OAAO,IAAI,WAAW,MAAM,IACxB,OAAO,SAAS,IAChB,GAAG,OAAO,SAAS,GAAG,OAAO,aAAa,SAAS;AACzD;;AAGA,eAAsB,gBAAgB,KAAa,QAAkC;CACnF,MAAM,SAAS,IAAI,IAAI,KAAK,2BAA2B;CACvD,MAAM,YAAY,OAAO,aAAa,IAAI,WAAW;CACrD,IAAI,CAAC,WAAW,OAAO;CAEvB,MAAM,UAAU,OAAO,aAAa,IAAI,SAAS;CACjD,IAAI,SAAS;EACX,MAAM,aAAa,SAAS,SAAS,EAAE;EACvC,IAAI,OAAO,MAAM,UAAU,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,YAAY,OAAO;CACrF;CAEA,OAAO,aAAa,OAAO,WAAW;CACtC,MAAM,eAAe,GAAG,OAAO,SAAS,GAAG,OAAO,aAAa,SAAS;CACxE,MAAM,MAAM,MAAM,UAAU,MAAM;CAClC,OAAO,OAAO,OAAO,OACnB,QACA,KACA,cAAc,SAAS,GACvB,IAAI,YAAY,CAAC,CAAC,OAAO,YAAY,CACvC;AACF"}

package/dist/signed-url-DKhgja4U.d.ts

@@ -0,0 +1,16 @@
+//#region src/crypto/signed-url.d.ts
+interface SignedUrlOptions {
+  /** Time-to-live in seconds; a matching `expires` param is added + enforced. */
+  expiresIn?: number;
+}
+/**
+ * Sign a URL (or path) with HMAC-SHA256, appending `signature` (and `expires`).
+ * The signature covers `pathname + search` (minus the signature param). Returns
+ * the full URL for absolute inputs, or `pathname?search` for relative ones.
+ */
+declare function signUrl(url: string, secret: string, options?: SignedUrlOptions): Promise<string>;
+/** Verify a signed URL (timing-safe) and enforce `expires`. */
+declare function verifySignedUrl(url: string, secret: string): Promise<boolean>;
+//#endregion
+export { signUrl as n, verifySignedUrl as r, SignedUrlOptions as t };
+//# sourceMappingURL=signed-url-DKhgja4U.d.ts.map