@void/edge 1.3.0 → 1.5.0

package/dist/index.d.mts

@@ -1,5 +1,4 @@
 import { AssetConfig, AssetConfig as AssetConfig$1, HeaderRule, HeaderRule as HeaderRule$1, RedirectRule, RedirectRule as RedirectRule$1 } from "@void/deploy-core";
-//#region src/access.d.ts
 type ProjectZeroTrustRouting = Readonly<{
   teamDomain: string;
   audiences: ReadonlyArray<Readonly<{
@@ -7,8 +6,8 @@ type ProjectZeroTrustRouting = Readonly<{
     audience: string;
   }>>;
 }>;
-//#endregion
-//#region src/headers.d.ts
+/** Upgrade public HTTP requests without involving assets or application code. */
+export declare function redirectToHttps(request: Request): Response | undefined;
 type HeaderRulePolicy = Readonly<{
   /**
    * Protect unrelated tenants that share one registrable domain. Direct
@@ -54,8 +53,6 @@ export declare function sanitizeClearSiteData(value: string): string | null;
  * Returns the original response unchanged when no rules or no matches.
  */
 export declare function applyHeaderRules(response: Response, pathname: string, rules?: ReadonlyArray<HeaderRule$1>, policy?: HeaderRulePolicy): Response;
-//#endregion
-//#region src/pattern.d.ts
 type CompiledPattern = Readonly<{
   /**
    * @deprecated Built on first read for older callers; Void does not use it.
@@ -108,8 +105,6 @@ export declare function matchSegmentPattern(pattern: string, pathname: string):
  * because `compilePattern` captures anonymous `*` as `splat`.
  */
 export declare function substituteParams(destination: string, params: Record<string, string>): string;
-//#endregion
-//#region src/routing-rules.d.ts
 type RoutingRuleResult = {
   type: "redirect";
   destination: string;
@@ -147,8 +142,6 @@ export declare function applyRoutingRules(pathname: string, rules?: ReadonlyArra
  * rather than `/new#faq?utm=x` (which browsers treat as fragment text).
  */
 export declare function mergeQueryIntoLocation(destination: string, requestSearch: string): string;
-//#endregion
-//#region src/runtime.d.ts
 type EdgeAssetFetcher = Readonly<{
   fetch(request: Request): Promise<Response>;
 }>;
@@ -156,6 +149,7 @@ type StaticEdgeEnv = Readonly<{
   ASSETS: EdgeAssetFetcher;
 }>;
 type StaticEdgeConfig = Readonly<{
+  alwaysUseHttps?: boolean;
   /** Optional native Worker self-metadata used to identify the served version. */
   versionMetadataBinding?: string;
   /**
@@ -178,8 +172,6 @@ type StaticEdgeHandler = Readonly<{
  * miss, and response-header rules apply to the effective pathname.
  */
 export declare function createStaticEdgeHandler(config: StaticEdgeConfig): StaticEdgeHandler;
-//#endregion
-//#region src/static.d.ts
 type ResolvedAsset = Readonly<{
   path: string;
   hash: string;
@@ -242,8 +234,6 @@ export declare function getContentType(path: string): string;
  * Any other stored value is authoritative and honored as-is.
  */
 export declare function resolveAssetContentType(stored: string | null | undefined, path: string): string | undefined;
-//#endregion
-//#region src/limits.d.ts
 /** Shared between the SDK, edge admission and Pages clients. */
 type UsageLimitData = {
   code: "usage_limit";
@@ -254,5 +244,4 @@ type UsageLimitData = {
 };
 export declare function readUsageLimit(value: unknown): UsageLimitData | null;
 export declare function usageLimitResponse(limit: UsageLimitData): Response;
-//#endregion
 export type { AssetConfig, ClearSiteDataMember, CompiledPattern, EdgeAssetFetcher, HeaderRule, HeaderRulePolicy, ProjectZeroTrustRouting, RedirectRule, ResolvedAsset, RoutingRuleResult, StaticEdgeConfig, StaticEdgeEnv, StaticEdgeHandler, UsageLimitData };

package/dist/index.mjs

@@ -1,4 +1,21 @@
-//#region src/pattern.ts
+// src/https.ts
+/** Upgrade public HTTP requests without involving assets or application code. */
+function redirectToHttps(request) {
+	const url = new URL(request.url);
+	if (url.protocol !== "http:" || url.hostname === "localhost" || url.hostname.endsWith(".localhost") || isIpv4Loopback(url.hostname) || url.hostname === "[::1]" || url.pathname.startsWith("/.well-known/acme-challenge/") || url.pathname.startsWith("/.well-known/pki-validation/")) return;
+	url.protocol = "https:";
+	url.port = "";
+	return Response.redirect(url.href, 308);
+}
+/**
+* `URL` already rewrites every IPv4 form (`127.1`, `0x7f.0.0.1`) to four
+* decimal parts and rejects parts above 255, so only the shape is checked.
+*/
+function isIpv4Loopback(hostname) {
+	const parts = hostname.split(".");
+	return parts.length === 4 && parts[0] === "127" && parts.every((part) => part !== "" && [...part].every((char) => char >= "0" && char <= "9"));
+}
+// src/pattern.ts
 /**
 * Path-pattern matchers shared by routing, header, and revalidate rules.
 *
@@ -366,8 +383,7 @@ function substituteParams(destination, params) {
 	if (/^[/\\]{2}/.test(result) && !/^[/\\]{2}/.test(destination)) return "/" + result.replace(/^[/\\]+/, "");
 	return result;
 }
-//#endregion
-//#region src/headers.ts
+// src/headers.ts
 /**
 * Headers that rules may never set on a shared domain. void.app is not on the
 * Public Suffix List, so a `Set-Cookie` with `Domain=.void.app` reaches every
@@ -478,8 +494,7 @@ function applyHeaderRules(response, pathname, rules, policy) {
 	}
 	return newResponse;
 }
-//#endregion
-//#region src/routing-rules.ts
+// src/routing-rules.ts
 /**
 * Check routing rules (redirects + rewrites) against a request pathname.
 *
@@ -545,8 +560,7 @@ function mergeQueryIntoLocation(destination, requestSearch) {
 	for (const [key, value] of reqParams) if (!destParams.has(key)) destParams.append(key, value);
 	return base.slice(0, destQueryIdx) + "?" + destParams.toString() + fragment;
 }
-//#endregion
-//#region src/runtime.ts
+// src/runtime.ts
 /**
 * Create the thin Worker used by direct static, SPA, and SSG deployments.
 * Routing semantics intentionally match the hosted dispatch Worker: redirects
@@ -564,6 +578,10 @@ function createStaticEdgeHandler(config) {
 				versionId: metadata?.id
 			}, { headers: { "cache-control": "no-store" } });
 		}
+		if (config.alwaysUseHttps) {
+			const redirect = redirectToHttps(request);
+			if (redirect) return redirect;
+		}
 		let effectiveUrl = new URL(originalUrl);
 		let effectiveRequest = request;
 		const route = applyRoutingRules(effectiveUrl.pathname, config.redirectRules, effectiveUrl.hostname);
@@ -599,8 +617,7 @@ function rewriteRequest(request, url, originalUrl) {
 	rewritten.headers.set("X-Void-Original-URL", originalUrl);
 	return rewritten;
 }
-//#endregion
-//#region src/static.ts
+// src/static.ts
 /**
 * Percent-decode a request pathname for a manifest lookup, honoring required
 * URL encodings and encoded square brackets. Returns the raw value unchanged
@@ -830,8 +847,7 @@ function resolveAssetContentType(stored, path) {
 	if (!stored || stored === "application/octet-stream") return getContentType(path);
 	return stored;
 }
-//#endregion
-//#region src/limits.ts
+// src/limits.ts
 function readUsageLimit(value) {
 	if (!value || typeof value !== "object") return null;
 	const v = value;
@@ -863,5 +879,4 @@ function usageLimitResponse(limit) {
 		headers
 	});
 }
-//#endregion
-export { applyHeaderRules, applyRoutingRules, compilePattern, createStaticEdgeHandler, getContentType, matchLiteralPattern, matchPattern, matchPatternCaptures, matchSegmentPattern, mergeQueryIntoLocation, parseClearSiteData, readUsageLimit, resolveAssetContentType, resolveStaticPath, safeDecodePathname, sanitizeClearSiteData, substituteParams, usageLimitResponse };
+export { applyHeaderRules, applyRoutingRules, compilePattern, createStaticEdgeHandler, getContentType, matchLiteralPattern, matchPattern, matchPatternCaptures, matchSegmentPattern, mergeQueryIntoLocation, parseClearSiteData, readUsageLimit, redirectToHttps, resolveAssetContentType, resolveStaticPath, safeDecodePathname, sanitizeClearSiteData, substituteParams, usageLimitResponse };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@void/edge",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "description": "Routing, headers, and static asset helpers for Void runtimes.",
   "homepage": "https://void.cloud",
   "bugs": {
@@ -26,12 +26,12 @@
     "access": "public"
   },
   "dependencies": {
-    "@void/deploy-core": "1.3.0"
+    "@void/deploy-core": "1.5.0"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^5.20261019.1",
+    "@cloudflare/workers-types": "^5.20261102.1",
     "typescript": "7.0.2",
-    "vite-plus": "1.3.0"
+    "vite-plus": "1.4.0"
   },
   "scripts": {
     "build": "vp pack",