alepha 0.15.0 → 0.15.2

package/dist/server/cors/index.d.ts

@@ -25,9 +25,13 @@ declare const $cors: {
   [KIND]: typeof CorsPrimitive;
 };
 interface CorsPrimitiveConfig extends Partial<CorsOptions> {
-  /** Name identifier for this CORS config (default: property key) */
+  /**
+   * Name identifier for this CORS config (default: property key).
+   */
   name?: string;
-  /** Path patterns to match (supports wildcards like /api/*) */
+  /**
+   * Path patterns to match (supports wildcards like /api/*).
+   */
   paths?: string[];
 }
 interface AbstractCorsPrimitive {
@@ -68,23 +72,23 @@ declare class ServerCorsProvider {
     headers: string[];
   }>;
   /**
-       * Registered CORS configurations with their path patterns
-       */
+   * Registered CORS configurations with their path patterns
+   */
   readonly registeredConfigs: CorsPrimitiveConfig[];
   /**
-       * Register a CORS configuration (called by primitives)
-       */
+   * Register a CORS configuration (called by primitives)
+   */
   registerCors(config: CorsPrimitiveConfig): void;
   protected readonly onStart: alepha1.HookPrimitive<"start">;
   protected readonly configure: alepha1.HookPrimitive<"configure">;
   protected readonly onRequest: alepha1.HookPrimitive<"server:onRequest">;
   /**
-       * Build complete CORS options by merging with global defaults
-       */
+   * Build complete CORS options by merging with global defaults
+   */
   protected buildCorsOptions(config: CorsPrimitiveConfig): CorsOptions;
   /**
-       * Apply CORS headers to the response
-       */
+   * Apply CORS headers to the response
+   */
   protected applyCorsHeaders(request: {
     headers: {
       origin?: string;
@@ -101,37 +105,23 @@ type ServerCorsProviderOptions = CorsOptions;
 declare module "alepha/server" {
   interface ServerRoute {
     /**
-             * Route-specific CORS configuration.
-             * If set, overrides the global CORS options for this route.
-             */
+     * Route-specific CORS configuration.
+     * If set, overrides the global CORS options for this route.
+     */
     cors?: CorsOptions;
   }
 }
 /**
- * Plugin for configuring CORS on the Alepha server.
+ * | type | quality | stability |
+ * |------|---------|-----------|
+ * | backend | standard | stable |
  *
- * @example
- * ```ts
- * import { Alepha, $route } from "alepha";
- * import { AlephaServerCors, $cors } from "alepha/server-cors";
+ * Cross-Origin Resource Sharing configuration.
  *
- * class ApiService {
- *   // Global CORS is applied via corsOptions atom
+ * **Features:**
+ * - CORS policy definition
  *
- *   // Path-specific CORS for API routes
- *   apiCors = $cors({
- *     paths: ["/api/*"],
- *     origin: "https://app.example.com",
- *     credentials: true,
- *   });
- *
- *   route = $route({
- *     path: "/api/data",
- *     method: "POST",
- *     handler: () => ({ data: "hello" }),
- *   });
- * }
- * ```
+ * @module alepha.server.cors
  */
 declare const AlephaServerCors: alepha1.Service<alepha1.Module>;
 //#endregion

package/dist/server/cors/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/index.ts"],"mappings":";;;;;;;AAoBA;;;;;;AAMA;AASA;AAKA;;;;;;;cApBa,KAAA;EAAA,CAAA,OAAA,EAAkB,mBAAA,GAAsB,qBAAA;EAAA;;UAMpC,mBAAA,SAA4B,OAAA,CAAQ,WAAA;EAAA;EAAA,IAAA;EAAA;EAAA,KAAA;AAAA;AAAA,UASpC,qBAAA;EAAA,SAAA,IAAA;EAAA,SAAA,OAAA,EAEG,mBAAA;AAAA;AAAA,cAGP,aAAA,SACH,SAAA,CAAU,mBAAA,aACP,qBAAA;EAAA,mBAAA,kBAAA,EAE0B,kBAAA;EAAA,IAAA,KAAA;EAAA,UAAA,OAAA;AAAA;;;;AClCvC;;cAAa,WAAA,EAAW,OAAA,CAAA,IAAA,SAAA,OAAA;EAAA,MAAA,oBAoCtB,OAAA,CAAA,OAAA;EAAA,OAAA;;;;;KAEU,WAAA,GAAc,MAAA,QAAc,WAAA,CAAY,MAAA;AAAA;EAAA,UAAA,KAAA;IAAA,CAI/C,WAAA,CAAY,GAAA,GAAM,WAAA;EAAA;AAAA;AAAA,cAMV,kBAAA;EAAA,mBAAA,GAAA,EAAkB,cAAA,CACP,MAAA;EAAA,mBAAA,oBAAA,EACiB,oBAAA;EAAA,mBAAA,aAAA,EACP,QAAA;IAAA,MAAA;IAAA,WAAA;IAAA,MAAA;IAAA,OAAA;IAAA,OAAA;EAAA;EAAA;;;EAAA,SAAA,iBAAA,EAKG,mBAAA;EAAA;;;EAAA,aAAA,MAAA,EAKP,mBAAA;EAAA,mBAAA,OAAA,EAAmB,OAAA,CAIrB,aAAA;EAAA,mBAAA,SAAA,EAAA,OAAA,CAuBE,aAAA;EAAA,mBAAA,SAAA,EAAA,OAAA,CAwBA,aAAA;EAAA;;;EAAA,UAAA,iBAAA,MAAA,EAYO,mBAAA,GAAsB,WAAA;EAAA;;;EAAA,UAAA,iBAAA,OAAA;IAAA,OAAA;MAAA,MAAA;IAAA;IAAA,KAAA;MAAA,SAAA,GAAA,IAAA,UAAA,KAAA;IAAA;EAAA,GAAA,OAAA,EAkB9C,WAAA;EAAA,gBAAA,MAAA,sBAAA,OAAA,EAuBA,WAAA;AAAA;AAAA,KAWD,yBAAA,GAA4B,WAAA;;;;;;AChLU;;;WAUvC,WAAA;EAAA;AAAA;AAAA;;;AAgCX;;;;;;;;;;;;;;;;;;;;;;;AAhCW,cAgCE,gBAAA,EAAgB,OAAA,CAAA,OAAA,CAI3B,OAAA,CAJ2B,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/index.ts"],"mappings":";;;;;;;;;AAoBA;;;;;;;;;;;;;cAAa,KAAA;EAAA,UAAkB,mBAAA,GAAsB,qBAAA;EAAA;;UAMpC,mBAAA,SAA4B,OAAA,CAAQ,WAAA;;;;EAInD,IAAA;EAAA;;;EAIA,KAAA;AAAA;AAAA,UAKe,qBAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA,EAAS,mBAAA;AAAA;AAAA,cAGP,aAAA,SACH,SAAA,CAAU,mBAAA,aACP,qBAAA;EAAA,mBAEQ,kBAAA,EAAkB,kBAAA;EAAA,IAE1B,IAAA,CAAA;EAAA,UAID,MAAA,CAAA;AAAA;;;;;;cC5CC,WAAA,EAAW,OAAA,CAAA,IAAA,SAAA,OAAA;4BAoCtB,OAAA,CAAA,OAAA;;;;;;KAEU,WAAA,GAAc,MAAA,QAAc,WAAA,CAAY,MAAA;AAAA;EAAA,UAGxC,KAAA;IAAA,CACP,WAAA,CAAY,GAAA,GAAM,WAAA;EAAA;AAAA;AAAA,cAMV,kBAAA;EAAA,mBACQ,GAAA,EADU,cAAA,CACP,MAAA;EAAA,mBACH,oBAAA,EAAoB,oBAAA;EAAA,mBACpB,aAAA,EAAa,QAAA;;;;;;;ED3BhC;;;EAAA,SCgCgB,iBAAA,EAAmB,mBAAA;ED3BC;;;ECgC7B,YAAA,CAAa,MAAA,EAAQ,mBAAA;EAAA,mBAIT,OAAA,EAJ4B,OAAA,CAIrB,aAAA;EAAA,mBAuBP,SAAA,EAvBO,OAAA,CAuBE,aAAA;EAAA,mBAwBT,SAAA,EAxBS,OAAA,CAwBA,aAAA;EDjFS;AAGvC;;EAHuC,UC6F3B,gBAAA,CAAiB,MAAA,EAAQ,mBAAA,GAAsB,WAAA;EDzFvC;;;EAAA,UCsGR,gBAAA,CACR,OAAA;IACE,OAAA;MAAW,MAAA;IAAA;IACX,KAAA;MAAS,SAAA,GAAY,IAAA,UAAc,KAAA;IAAA;EAAA,GAErC,OAAA,EAAS,WAAA;EAqBJ,eAAA,CACL,MAAA,sBACA,OAAA,EAAS,WAAA;AAAA;AAAA,KAWD,yBAAA,GAA4B,WAAA;;;;YC3K5B,WAAA;;AFKZ;;;IEAI,IAAA,GAAO,WAAA;EAAA;AAAA;;;;;;;;;;;AFMX;;cEYa,gBAAA,EAAgB,OAAA,CAAA,OAAA,CAI3B,OAAA,CAJ2B,MAAA"}

package/dist/server/cors/index.js

@@ -161,30 +161,16 @@ $cors[KIND] = CorsPrimitive;
 //#endregion
 //#region ../../src/server/cors/index.ts
 /**
-* Plugin for configuring CORS on the Alepha server.
+* | type | quality | stability |
+* |------|---------|-----------|
+* | backend | standard | stable |
 *
-* @example
-* ```ts
-* import { Alepha, $route } from "alepha";
-* import { AlephaServerCors, $cors } from "alepha/server-cors";
+* Cross-Origin Resource Sharing configuration.
 *
-* class ApiService {
-*   // Global CORS is applied via corsOptions atom
+* **Features:**
+* - CORS policy definition
 *
-*   // Path-specific CORS for API routes
-*   apiCors = $cors({
-*     paths: ["/api/*"],
-*     origin: "https://app.example.com",
-*     credentials: true,
-*   });
-*
-*   route = $route({
-*     path: "/api/data",
-*     method: "POST",
-*     handler: () => ({ data: "hello" }),
-*   });
-* }
-* ```
+* @module alepha.server.cors
 */
 const AlephaServerCors = $module({
 	name: "alepha.server.cors",

package/dist/server/cors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"sourcesContent":["import { $atom, $hook, $inject, $use, type Static, t } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { ServerRouterProvider } from \"alepha/server\";\nimport type { CorsPrimitiveConfig } from \"../primitives/$cors.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * CORS configuration atom (global defaults)\n */\nexport const corsOptions = $atom({\n  name: \"alepha.server.cors.options\",\n  schema: t.object({\n    origin: t.optional(\n      t.string({\n        description:\n          \"Allowed origins (* for all, string for single, comma-separated for multiple)\",\n        default: \"*\",\n      }),\n    ),\n    methods: t.array(t.string(), {\n      description: \"Allowed HTTP methods\",\n      default: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    }),\n    headers: t.array(t.string(), {\n      description: \"Allowed headers\",\n      default: [\"Content-Type\", \"Authorization\"],\n    }),\n    credentials: t.optional(\n      t.boolean({\n        description: \"Allow credentials\",\n        default: true,\n      }),\n    ),\n    maxAge: t.optional(\n      t.number({\n        description: \"Preflight cache duration in seconds\",\n      }),\n    ),\n  }),\n  default: {\n    origin: \"*\",\n    methods: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    headers: [\"Content-Type\", \"Authorization\"],\n    credentials: true,\n  },\n});\n\nexport type CorsOptions = Static<typeof corsOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [corsOptions.key]: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class ServerCorsProvider {\n  protected readonly log = $logger();\n  protected readonly serverRouterProvider = $inject(ServerRouterProvider);\n  protected readonly globalOptions = $use(corsOptions);\n\n  /**\n   * Registered CORS configurations with their path patterns\n   */\n  public readonly registeredConfigs: CorsPrimitiveConfig[] = [];\n\n  /**\n   * Register a CORS configuration (called by primitives)\n   */\n  public registerCors(config: CorsPrimitiveConfig): void {\n    this.registeredConfigs.push(config);\n  }\n\n  protected readonly onStart = $hook({\n    on: \"start\",\n    handler: async () => {\n      // Apply path-specific CORS configs to routes\n      for (const config of this.registeredConfigs) {\n        if (config.paths) {\n          for (const pattern of config.paths) {\n            const matchedRoutes = this.serverRouterProvider.getRoutes(pattern);\n            for (const route of matchedRoutes) {\n              route.cors = this.buildCorsOptions(config);\n            }\n          }\n        }\n      }\n\n      if (this.registeredConfigs.length > 0) {\n        this.log.info(\n          `Initialized with ${this.registeredConfigs.length} registered CORS configurations.`,\n        );\n      }\n    },\n  });\n\n  protected readonly configure = $hook({\n    on: \"configure\",\n    handler: () => {\n      const routes = this.serverRouterProvider.getRoutes();\n      for (const route of routes) {\n        if (\n          !route.method ||\n          route.method === \"GET\" ||\n          route.method === \"OPTIONS\"\n        ) {\n          continue;\n        }\n\n        this.serverRouterProvider.createRoute({\n          path: route.path,\n          method: \"OPTIONS\",\n          handler: ({ reply }) => {\n            reply.setStatus(204);\n          },\n        });\n      }\n    },\n  });\n\n  protected readonly onRequest = $hook({\n    on: \"server:onRequest\",\n    handler: ({ route, request }) => {\n      // Use route-specific CORS if defined, otherwise use global options\n      const corsConfig = route.cors ?? this.globalOptions;\n      this.applyCorsHeaders(request, corsConfig);\n    },\n  });\n\n  /**\n   * Build complete CORS options by merging with global defaults\n   */\n  protected buildCorsOptions(config: CorsPrimitiveConfig): CorsOptions {\n    return {\n      origin: config.origin ?? this.globalOptions.origin,\n      methods: config.methods ?? this.globalOptions.methods,\n      headers: config.headers ?? this.globalOptions.headers,\n      credentials: config.credentials ?? this.globalOptions.credentials,\n      maxAge: config.maxAge ?? this.globalOptions.maxAge,\n    };\n  }\n\n  /**\n   * Apply CORS headers to the response\n   */\n  protected applyCorsHeaders(\n    request: {\n      headers: { origin?: string };\n      reply: { setHeader: (name: string, value: string) => void };\n    },\n    options: CorsOptions,\n  ): void {\n    const reqOrigin = request.headers.origin;\n    const { origin, methods, headers, credentials, maxAge } = options;\n\n    if (reqOrigin && this.isOriginAllowed(reqOrigin, origin)) {\n      request.reply.setHeader(\"Access-Control-Allow-Origin\", reqOrigin);\n    }\n\n    if (credentials) {\n      request.reply.setHeader(\"Access-Control-Allow-Credentials\", \"true\");\n    }\n\n    request.reply.setHeader(\"Access-Control-Allow-Methods\", methods.join(\", \"));\n    request.reply.setHeader(\"Access-Control-Allow-Headers\", headers.join(\", \"));\n\n    if (maxAge != null) {\n      request.reply.setHeader(\"Access-Control-Max-Age\", String(maxAge));\n    }\n  }\n\n  public isOriginAllowed(\n    origin: string | undefined,\n    allowed: CorsOptions[\"origin\"],\n  ): boolean {\n    if (!allowed) return false;\n    if (allowed === \"*\") return true;\n    return allowed\n      .split(\",\")\n      .map((o) => o.trim())\n      .includes(origin ?? \"\");\n  }\n}\n\nexport type ServerCorsProviderOptions = CorsOptions;\n","import { $inject, createPrimitive, KIND, Primitive } from \"alepha\";\nimport type { CorsOptions } from \"../providers/ServerCorsProvider.ts\";\nimport { ServerCorsProvider } from \"../providers/ServerCorsProvider.ts\";\n\n/**\n * Declares CORS configuration for specific server routes.\n * This primitive provides path-based CORS configuration.\n *\n * @example\n * ```ts\n * class ApiService {\n *   // Apply specific CORS to API routes\n *   cors = $cors({\n *     paths: [\"/api/*\"],\n *     origin: \"https://app.example.com\",\n *     credentials: true,\n *   });\n * }\n * ```\n */\nexport const $cors = (options: CorsPrimitiveConfig): AbstractCorsPrimitive => {\n  return createPrimitive(CorsPrimitive, options);\n};\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface CorsPrimitiveConfig extends Partial<CorsOptions> {\n  /** Name identifier for this CORS config (default: property key) */\n  name?: string;\n  /** Path patterns to match (supports wildcards like /api/*) */\n  paths?: string[];\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface AbstractCorsPrimitive {\n  readonly name: string;\n  readonly options: CorsPrimitiveConfig;\n}\n\nexport class CorsPrimitive\n  extends Primitive<CorsPrimitiveConfig>\n  implements AbstractCorsPrimitive\n{\n  protected readonly serverCorsProvider = $inject(ServerCorsProvider);\n\n  public get name(): string {\n    return this.options.name ?? `${this.config.propertyKey}`;\n  }\n\n  protected onInit() {\n    // Register this CORS configuration with the provider\n    this.serverCorsProvider.registerCors(this.options);\n  }\n}\n\n$cors[KIND] = CorsPrimitive;\n","import { $module } from \"alepha\";\nimport { $cors } from \"./primitives/$cors.ts\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$cors.ts\";\nexport * from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ndeclare module \"alepha/server\" {\n  interface ServerRoute {\n    /**\n     * Route-specific CORS configuration.\n     * If set, overrides the global CORS options for this route.\n     */\n    cors?: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Plugin for configuring CORS on the Alepha server.\n *\n * @example\n * ```ts\n * import { Alepha, $route } from \"alepha\";\n * import { AlephaServerCors, $cors } from \"alepha/server-cors\";\n *\n * class ApiService {\n *   // Global CORS is applied via corsOptions atom\n *\n *   // Path-specific CORS for API routes\n *   apiCors = $cors({\n *     paths: [\"/api/*\"],\n *     origin: \"https://app.example.com\",\n *     credentials: true,\n *   });\n *\n *   route = $route({\n *     path: \"/api/data\",\n *     method: \"POST\",\n *     handler: () => ({ data: \"hello\" }),\n *   });\n * }\n * ```\n */\nexport const AlephaServerCors = $module({\n  name: \"alepha.server.cors\",\n  primitives: [$cors],\n  services: [ServerCorsProvider],\n});\n"],"mappings":";;;;;;;;AAUA,MAAa,cAAc,MAAM;CAC/B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,QAAQ,EAAE,SACR,EAAE,OAAO;GACP,aACE;GACF,SAAS;GACV,CAAC,CACH;EACD,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;GAC3B,aAAa;GACb,SAAS;IAAC;IAAO;IAAQ;IAAO;IAAS;IAAU;IAAU;GAC9D,CAAC;EACF,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;GAC3B,aAAa;GACb,SAAS,CAAC,gBAAgB,gBAAgB;GAC3C,CAAC;EACF,aAAa,EAAE,SACb,EAAE,QAAQ;GACR,aAAa;GACb,SAAS;GACV,CAAC,CACH;EACD,QAAQ,EAAE,SACR,EAAE,OAAO,EACP,aAAa,uCACd,CAAC,CACH;EACF,CAAC;CACF,SAAS;EACP,QAAQ;EACR,SAAS;GAAC;GAAO;GAAQ;GAAO;GAAS;GAAU;GAAU;EAC7D,SAAS,CAAC,gBAAgB,gBAAgB;EAC1C,aAAa;EACd;CACF,CAAC;AAYF,IAAa,qBAAb,MAAgC;CAC9B,AAAmB,MAAM,SAAS;CAClC,AAAmB,uBAAuB,QAAQ,qBAAqB;CACvE,AAAmB,gBAAgB,KAAK,YAAY;;;;CAKpD,AAAgB,oBAA2C,EAAE;;;;CAK7D,AAAO,aAAa,QAAmC;AACrD,OAAK,kBAAkB,KAAK,OAAO;;CAGrC,AAAmB,UAAU,MAAM;EACjC,IAAI;EACJ,SAAS,YAAY;AAEnB,QAAK,MAAM,UAAU,KAAK,kBACxB,KAAI,OAAO,MACT,MAAK,MAAM,WAAW,OAAO,OAAO;IAClC,MAAM,gBAAgB,KAAK,qBAAqB,UAAU,QAAQ;AAClE,SAAK,MAAM,SAAS,cAClB,OAAM,OAAO,KAAK,iBAAiB,OAAO;;AAMlD,OAAI,KAAK,kBAAkB,SAAS,EAClC,MAAK,IAAI,KACP,oBAAoB,KAAK,kBAAkB,OAAO,kCACnD;;EAGN,CAAC;CAEF,AAAmB,YAAY,MAAM;EACnC,IAAI;EACJ,eAAe;GACb,MAAM,SAAS,KAAK,qBAAqB,WAAW;AACpD,QAAK,MAAM,SAAS,QAAQ;AAC1B,QACE,CAAC,MAAM,UACP,MAAM,WAAW,SACjB,MAAM,WAAW,UAEjB;AAGF,SAAK,qBAAqB,YAAY;KACpC,MAAM,MAAM;KACZ,QAAQ;KACR,UAAU,EAAE,YAAY;AACtB,YAAM,UAAU,IAAI;;KAEvB,CAAC;;;EAGP,CAAC;CAEF,AAAmB,YAAY,MAAM;EACnC,IAAI;EACJ,UAAU,EAAE,OAAO,cAAc;GAE/B,MAAM,aAAa,MAAM,QAAQ,KAAK;AACtC,QAAK,iBAAiB,SAAS,WAAW;;EAE7C,CAAC;;;;CAKF,AAAU,iBAAiB,QAA0C;AACnE,SAAO;GACL,QAAQ,OAAO,UAAU,KAAK,cAAc;GAC5C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,aAAa,OAAO,eAAe,KAAK,cAAc;GACtD,QAAQ,OAAO,UAAU,KAAK,cAAc;GAC7C;;;;;CAMH,AAAU,iBACR,SAIA,SACM;EACN,MAAM,YAAY,QAAQ,QAAQ;EAClC,MAAM,EAAE,QAAQ,SAAS,SAAS,aAAa,WAAW;AAE1D,MAAI,aAAa,KAAK,gBAAgB,WAAW,OAAO,CACtD,SAAQ,MAAM,UAAU,+BAA+B,UAAU;AAGnE,MAAI,YACF,SAAQ,MAAM,UAAU,oCAAoC,OAAO;AAGrE,UAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,KAAK,CAAC;AAC3E,UAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,KAAK,CAAC;AAE3E,MAAI,UAAU,KACZ,SAAQ,MAAM,UAAU,0BAA0B,OAAO,OAAO,CAAC;;CAIrE,AAAO,gBACL,QACA,SACS;AACT,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,YAAY,IAAK,QAAO;AAC5B,SAAO,QACJ,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,SAAS,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;AClK7B,MAAa,SAAS,YAAwD;AAC5E,QAAO,gBAAgB,eAAe,QAAQ;;AAmBhD,IAAa,gBAAb,cACU,UAEV;CACE,AAAmB,qBAAqB,QAAQ,mBAAmB;CAEnE,IAAW,OAAe;AACxB,SAAO,KAAK,QAAQ,QAAQ,GAAG,KAAK,OAAO;;CAG7C,AAAU,SAAS;AAEjB,OAAK,mBAAmB,aAAa,KAAK,QAAQ;;;AAItD,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACJd,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,YAAY,CAAC,MAAM;CACnB,UAAU,CAAC,mBAAmB;CAC/B,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/cors/providers/ServerCorsProvider.ts","../../../src/server/cors/primitives/$cors.ts","../../../src/server/cors/index.ts"],"sourcesContent":["import { $atom, $hook, $inject, $use, type Static, t } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { ServerRouterProvider } from \"alepha/server\";\nimport type { CorsPrimitiveConfig } from \"../primitives/$cors.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * CORS configuration atom (global defaults)\n */\nexport const corsOptions = $atom({\n  name: \"alepha.server.cors.options\",\n  schema: t.object({\n    origin: t.optional(\n      t.string({\n        description:\n          \"Allowed origins (* for all, string for single, comma-separated for multiple)\",\n        default: \"*\",\n      }),\n    ),\n    methods: t.array(t.string(), {\n      description: \"Allowed HTTP methods\",\n      default: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    }),\n    headers: t.array(t.string(), {\n      description: \"Allowed headers\",\n      default: [\"Content-Type\", \"Authorization\"],\n    }),\n    credentials: t.optional(\n      t.boolean({\n        description: \"Allow credentials\",\n        default: true,\n      }),\n    ),\n    maxAge: t.optional(\n      t.number({\n        description: \"Preflight cache duration in seconds\",\n      }),\n    ),\n  }),\n  default: {\n    origin: \"*\",\n    methods: [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"],\n    headers: [\"Content-Type\", \"Authorization\"],\n    credentials: true,\n  },\n});\n\nexport type CorsOptions = Static<typeof corsOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [corsOptions.key]: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class ServerCorsProvider {\n  protected readonly log = $logger();\n  protected readonly serverRouterProvider = $inject(ServerRouterProvider);\n  protected readonly globalOptions = $use(corsOptions);\n\n  /**\n   * Registered CORS configurations with their path patterns\n   */\n  public readonly registeredConfigs: CorsPrimitiveConfig[] = [];\n\n  /**\n   * Register a CORS configuration (called by primitives)\n   */\n  public registerCors(config: CorsPrimitiveConfig): void {\n    this.registeredConfigs.push(config);\n  }\n\n  protected readonly onStart = $hook({\n    on: \"start\",\n    handler: async () => {\n      // Apply path-specific CORS configs to routes\n      for (const config of this.registeredConfigs) {\n        if (config.paths) {\n          for (const pattern of config.paths) {\n            const matchedRoutes = this.serverRouterProvider.getRoutes(pattern);\n            for (const route of matchedRoutes) {\n              route.cors = this.buildCorsOptions(config);\n            }\n          }\n        }\n      }\n\n      if (this.registeredConfigs.length > 0) {\n        this.log.info(\n          `Initialized with ${this.registeredConfigs.length} registered CORS configurations.`,\n        );\n      }\n    },\n  });\n\n  protected readonly configure = $hook({\n    on: \"configure\",\n    handler: () => {\n      const routes = this.serverRouterProvider.getRoutes();\n      for (const route of routes) {\n        if (\n          !route.method ||\n          route.method === \"GET\" ||\n          route.method === \"OPTIONS\"\n        ) {\n          continue;\n        }\n\n        this.serverRouterProvider.createRoute({\n          path: route.path,\n          method: \"OPTIONS\",\n          handler: ({ reply }) => {\n            reply.setStatus(204);\n          },\n        });\n      }\n    },\n  });\n\n  protected readonly onRequest = $hook({\n    on: \"server:onRequest\",\n    handler: ({ route, request }) => {\n      // Use route-specific CORS if defined, otherwise use global options\n      const corsConfig = route.cors ?? this.globalOptions;\n      this.applyCorsHeaders(request, corsConfig);\n    },\n  });\n\n  /**\n   * Build complete CORS options by merging with global defaults\n   */\n  protected buildCorsOptions(config: CorsPrimitiveConfig): CorsOptions {\n    return {\n      origin: config.origin ?? this.globalOptions.origin,\n      methods: config.methods ?? this.globalOptions.methods,\n      headers: config.headers ?? this.globalOptions.headers,\n      credentials: config.credentials ?? this.globalOptions.credentials,\n      maxAge: config.maxAge ?? this.globalOptions.maxAge,\n    };\n  }\n\n  /**\n   * Apply CORS headers to the response\n   */\n  protected applyCorsHeaders(\n    request: {\n      headers: { origin?: string };\n      reply: { setHeader: (name: string, value: string) => void };\n    },\n    options: CorsOptions,\n  ): void {\n    const reqOrigin = request.headers.origin;\n    const { origin, methods, headers, credentials, maxAge } = options;\n\n    if (reqOrigin && this.isOriginAllowed(reqOrigin, origin)) {\n      request.reply.setHeader(\"Access-Control-Allow-Origin\", reqOrigin);\n    }\n\n    if (credentials) {\n      request.reply.setHeader(\"Access-Control-Allow-Credentials\", \"true\");\n    }\n\n    request.reply.setHeader(\"Access-Control-Allow-Methods\", methods.join(\", \"));\n    request.reply.setHeader(\"Access-Control-Allow-Headers\", headers.join(\", \"));\n\n    if (maxAge != null) {\n      request.reply.setHeader(\"Access-Control-Max-Age\", String(maxAge));\n    }\n  }\n\n  public isOriginAllowed(\n    origin: string | undefined,\n    allowed: CorsOptions[\"origin\"],\n  ): boolean {\n    if (!allowed) return false;\n    if (allowed === \"*\") return true;\n    return allowed\n      .split(\",\")\n      .map((o) => o.trim())\n      .includes(origin ?? \"\");\n  }\n}\n\nexport type ServerCorsProviderOptions = CorsOptions;\n","import { $inject, createPrimitive, KIND, Primitive } from \"alepha\";\nimport type { CorsOptions } from \"../providers/ServerCorsProvider.ts\";\nimport { ServerCorsProvider } from \"../providers/ServerCorsProvider.ts\";\n\n/**\n * Declares CORS configuration for specific server routes.\n * This primitive provides path-based CORS configuration.\n *\n * @example\n * ```ts\n * class ApiService {\n *   // Apply specific CORS to API routes\n *   cors = $cors({\n *     paths: [\"/api/*\"],\n *     origin: \"https://app.example.com\",\n *     credentials: true,\n *   });\n * }\n * ```\n */\nexport const $cors = (options: CorsPrimitiveConfig): AbstractCorsPrimitive => {\n  return createPrimitive(CorsPrimitive, options);\n};\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface CorsPrimitiveConfig extends Partial<CorsOptions> {\n  /**\n   * Name identifier for this CORS config (default: property key).\n   */\n  name?: string;\n  /**\n   * Path patterns to match (supports wildcards like /api/*).\n   */\n  paths?: string[];\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface AbstractCorsPrimitive {\n  readonly name: string;\n  readonly options: CorsPrimitiveConfig;\n}\n\nexport class CorsPrimitive\n  extends Primitive<CorsPrimitiveConfig>\n  implements AbstractCorsPrimitive\n{\n  protected readonly serverCorsProvider = $inject(ServerCorsProvider);\n\n  public get name(): string {\n    return this.options.name ?? `${this.config.propertyKey}`;\n  }\n\n  protected onInit() {\n    // Register this CORS configuration with the provider\n    this.serverCorsProvider.registerCors(this.options);\n  }\n}\n\n$cors[KIND] = CorsPrimitive;\n","import { $module } from \"alepha\";\nimport { $cors } from \"./primitives/$cors.ts\";\nimport {\n  type CorsOptions,\n  ServerCorsProvider,\n} from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$cors.ts\";\nexport * from \"./providers/ServerCorsProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ndeclare module \"alepha/server\" {\n  interface ServerRoute {\n    /**\n     * Route-specific CORS configuration.\n     * If set, overrides the global CORS options for this route.\n     */\n    cors?: CorsOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * | type | quality | stability |\n * |------|---------|-----------|\n * | backend | standard | stable |\n *\n * Cross-Origin Resource Sharing configuration.\n *\n * **Features:**\n * - CORS policy definition\n *\n * @module alepha.server.cors\n */\nexport const AlephaServerCors = $module({\n  name: \"alepha.server.cors\",\n  primitives: [$cors],\n  services: [ServerCorsProvider],\n});\n"],"mappings":";;;;;;;;AAUA,MAAa,cAAc,MAAM;CAC/B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,QAAQ,EAAE,SACR,EAAE,OAAO;GACP,aACE;GACF,SAAS;GACV,CAAC,CACH;EACD,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;GAC3B,aAAa;GACb,SAAS;IAAC;IAAO;IAAQ;IAAO;IAAS;IAAU;IAAU;GAC9D,CAAC;EACF,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;GAC3B,aAAa;GACb,SAAS,CAAC,gBAAgB,gBAAgB;GAC3C,CAAC;EACF,aAAa,EAAE,SACb,EAAE,QAAQ;GACR,aAAa;GACb,SAAS;GACV,CAAC,CACH;EACD,QAAQ,EAAE,SACR,EAAE,OAAO,EACP,aAAa,uCACd,CAAC,CACH;EACF,CAAC;CACF,SAAS;EACP,QAAQ;EACR,SAAS;GAAC;GAAO;GAAQ;GAAO;GAAS;GAAU;GAAU;EAC7D,SAAS,CAAC,gBAAgB,gBAAgB;EAC1C,aAAa;EACd;CACF,CAAC;AAYF,IAAa,qBAAb,MAAgC;CAC9B,AAAmB,MAAM,SAAS;CAClC,AAAmB,uBAAuB,QAAQ,qBAAqB;CACvE,AAAmB,gBAAgB,KAAK,YAAY;;;;CAKpD,AAAgB,oBAA2C,EAAE;;;;CAK7D,AAAO,aAAa,QAAmC;AACrD,OAAK,kBAAkB,KAAK,OAAO;;CAGrC,AAAmB,UAAU,MAAM;EACjC,IAAI;EACJ,SAAS,YAAY;AAEnB,QAAK,MAAM,UAAU,KAAK,kBACxB,KAAI,OAAO,MACT,MAAK,MAAM,WAAW,OAAO,OAAO;IAClC,MAAM,gBAAgB,KAAK,qBAAqB,UAAU,QAAQ;AAClE,SAAK,MAAM,SAAS,cAClB,OAAM,OAAO,KAAK,iBAAiB,OAAO;;AAMlD,OAAI,KAAK,kBAAkB,SAAS,EAClC,MAAK,IAAI,KACP,oBAAoB,KAAK,kBAAkB,OAAO,kCACnD;;EAGN,CAAC;CAEF,AAAmB,YAAY,MAAM;EACnC,IAAI;EACJ,eAAe;GACb,MAAM,SAAS,KAAK,qBAAqB,WAAW;AACpD,QAAK,MAAM,SAAS,QAAQ;AAC1B,QACE,CAAC,MAAM,UACP,MAAM,WAAW,SACjB,MAAM,WAAW,UAEjB;AAGF,SAAK,qBAAqB,YAAY;KACpC,MAAM,MAAM;KACZ,QAAQ;KACR,UAAU,EAAE,YAAY;AACtB,YAAM,UAAU,IAAI;;KAEvB,CAAC;;;EAGP,CAAC;CAEF,AAAmB,YAAY,MAAM;EACnC,IAAI;EACJ,UAAU,EAAE,OAAO,cAAc;GAE/B,MAAM,aAAa,MAAM,QAAQ,KAAK;AACtC,QAAK,iBAAiB,SAAS,WAAW;;EAE7C,CAAC;;;;CAKF,AAAU,iBAAiB,QAA0C;AACnE,SAAO;GACL,QAAQ,OAAO,UAAU,KAAK,cAAc;GAC5C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,SAAS,OAAO,WAAW,KAAK,cAAc;GAC9C,aAAa,OAAO,eAAe,KAAK,cAAc;GACtD,QAAQ,OAAO,UAAU,KAAK,cAAc;GAC7C;;;;;CAMH,AAAU,iBACR,SAIA,SACM;EACN,MAAM,YAAY,QAAQ,QAAQ;EAClC,MAAM,EAAE,QAAQ,SAAS,SAAS,aAAa,WAAW;AAE1D,MAAI,aAAa,KAAK,gBAAgB,WAAW,OAAO,CACtD,SAAQ,MAAM,UAAU,+BAA+B,UAAU;AAGnE,MAAI,YACF,SAAQ,MAAM,UAAU,oCAAoC,OAAO;AAGrE,UAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,KAAK,CAAC;AAC3E,UAAQ,MAAM,UAAU,gCAAgC,QAAQ,KAAK,KAAK,CAAC;AAE3E,MAAI,UAAU,KACZ,SAAQ,MAAM,UAAU,0BAA0B,OAAO,OAAO,CAAC;;CAIrE,AAAO,gBACL,QACA,SACS;AACT,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,YAAY,IAAK,QAAO;AAC5B,SAAO,QACJ,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,SAAS,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;AClK7B,MAAa,SAAS,YAAwD;AAC5E,QAAO,gBAAgB,eAAe,QAAQ;;AAuBhD,IAAa,gBAAb,cACU,UAEV;CACE,AAAmB,qBAAqB,QAAQ,mBAAmB;CAEnE,IAAW,OAAe;AACxB,SAAO,KAAK,QAAQ,QAAQ,GAAG,KAAK,OAAO;;CAG7C,AAAU,SAAS;AAEjB,OAAK,mBAAmB,aAAa,KAAK,QAAQ;;;AAItD,MAAM,QAAQ;;;;;;;;;;;;;;;;ACtBd,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,YAAY,CAAC,MAAM;CACnB,UAAU,CAAC,mBAAmB;CAC/B,CAAC"}

package/dist/server/health/index.d.ts

@@ -1,4 +1,4 @@
-import * as alepha6 from "alepha";
+import * as alepha1 from "alepha";
 import { Alepha } from "alepha";
 import * as alepha_server0 from "alepha/server";
 import { DateTimeProvider } from "alepha/datetime";
@@ -13,19 +13,19 @@ declare class ServerHealthProvider {
   protected readonly time: DateTimeProvider;
   protected readonly alepha: Alepha;
   readonly health: alepha_server0.RoutePrimitive<{
-    response: alepha6.TObject<{
-      message: alepha6.TString;
-      uptime: alepha6.TNumber;
-      date: alepha6.TString;
-      ready: alepha6.TBoolean;
+    response: alepha1.TObject<{
+      message: alepha1.TString;
+      uptime: alepha1.TNumber;
+      date: alepha1.TString;
+      ready: alepha1.TBoolean;
     }>;
   }>;
   readonly healthz: alepha_server0.RoutePrimitive<{
-    response: alepha6.TObject<{
-      message: alepha6.TString;
-      uptime: alepha6.TNumber;
-      date: alepha6.TString;
-      ready: alepha6.TBoolean;
+    response: alepha1.TObject<{
+      message: alepha1.TString;
+      uptime: alepha1.TNumber;
+      date: alepha1.TString;
+      ready: alepha1.TBoolean;
     }>;
   }>;
   protected healthCheck(): {
@@ -37,21 +37,27 @@ declare class ServerHealthProvider {
 }
 //#endregion
 //#region ../../src/server/health/schemas/healthSchema.d.ts
-declare const healthSchema: alepha6.TObject<{
-  message: alepha6.TString;
-  uptime: alepha6.TNumber;
-  date: alepha6.TString;
-  ready: alepha6.TBoolean;
+declare const healthSchema: alepha1.TObject<{
+  message: alepha1.TString;
+  uptime: alepha1.TNumber;
+  date: alepha1.TString;
+  ready: alepha1.TBoolean;
 }>;
 //#endregion
 //#region ../../src/server/health/index.d.ts
 /**
- * Plugin for Alepha Server that provides health-check endpoints.
+ * | type | quality | stability |
+ * |------|---------|-----------|
+ * | devops | standard | stable |
+ *
+ * Application health monitoring endpoints.
+ *
+ * **Features:**
+ * - `GET /health` endpoint
  *
- * @see {@link ServerHealthProvider}
  * @module alepha.server.health
  */
-declare const AlephaServerHealth: alepha6.Service<alepha6.Module>;
+declare const AlephaServerHealth: alepha1.Service<alepha1.Module>;
 //#endregion
 export { AlephaServerHealth, ServerHealthProvider, healthSchema };
 //# sourceMappingURL=index.d.ts.map

package/dist/server/health/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/index.ts"],"mappings":";;;;;;;AAUA;;;;cAAa,oBAAA;EAAA,mBAAA,IAAA,EACc,gBAAA;EAAA,mBAAA,MAAA,EACA,MAAA;EAAA,SAAA,MAAA,iBAEH,cAAA;IAAA,QAAA;eAFG,OAAA,CAAA,OAAA;MAAA,MAAA;;;;;mCAWF,cAAA;IAAA,QAAA;eATD,OAAA,CAAA,OAAA;MAAA,MAAA;;;;;;;;;;;;;;cCZX,YAAA,UAAY,OAAA;EAAA,OAAA,EAKvB,OAAA,CAAA,OAAA;EAAA,MAAA;;;;;;;ACUF;;;;;cAAa,kBAAA,EAAkB,OAAA,CAAA,OAAA,CAG7B,OAAA,CAH6B,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/index.ts"],"mappings":";;;;;;;;;;AAUA;cAAa,oBAAA;EAAA,mBACQ,IAAA,EAAM,gBAAA;EAAA,mBACN,MAAA,EAAM,MAAA;EAAA,SAET,MAAA,iBAAM,cAAA;;eAFG,OAAA,CAAA,OAAA;;;;;;WAWT,OAAA,iBAAO,cAAA;;eATD,OAAA,CAAA,OAAA;;;;;;YAkBZ,WAAA,CAAA;;;;;;;;;cC9BC,YAAA,UAAY,OAAA;WAKvB,OAAA,CAAA,OAAA;;;;;;;;;;;ADGF;;;;;;;;cEaa,kBAAA,EAAkB,OAAA,CAAA,OAAA,CAG7B,OAAA,CAH6B,MAAA"}

package/dist/server/health/index.js

@@ -45,9 +45,15 @@ var ServerHealthProvider = class {
 //#endregion
 //#region ../../src/server/health/index.ts
 /**
-* Plugin for Alepha Server that provides health-check endpoints.
+* | type | quality | stability |
+* |------|---------|-----------|
+* | devops | standard | stable |
+*
+* Application health monitoring endpoints.
+*
+* **Features:**
+* - `GET /health` endpoint
 *
-* @see {@link ServerHealthProvider}
 * @module alepha.server.health
 */
 const AlephaServerHealth = $module({

package/dist/server/health/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/index.ts"],"sourcesContent":["import { t } from \"alepha\";\n\nexport const healthSchema = t.object({\n  message: t.text(),\n  uptime: t.number(),\n  date: t.datetime(),\n  ready: t.boolean(),\n});\n","import { $inject, Alepha } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $route } from \"alepha/server\";\nimport { healthSchema } from \"../schemas/healthSchema.ts\";\n\n/**\n * Register `/health` & `/healthz` endpoint.\n *\n * - Provides basic health information about the server.\n */\nexport class ServerHealthProvider {\n  protected readonly time: DateTimeProvider = $inject(DateTimeProvider);\n  protected readonly alepha = $inject(Alepha);\n\n  public readonly health = $route({\n    path: \"/health\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  public readonly healthz = $route({\n    path: \"/healthz\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  protected healthCheck() {\n    return {\n      message: \"OK\",\n      uptime: Math.floor(process.uptime()),\n      date: this.time.nowISOString(),\n      ready: this.alepha.isReady(),\n    };\n  }\n}\n","import { $module } from \"alepha\";\nimport { AlephaServer } from \"alepha/server\";\nimport { ServerHealthProvider } from \"./providers/ServerHealthProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/ServerHealthProvider.ts\";\nexport * from \"./schemas/healthSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Plugin for Alepha Server that provides health-check endpoints.\n *\n * @see {@link ServerHealthProvider}\n * @module alepha.server.health\n */\nexport const AlephaServerHealth = $module({\n  name: \"alepha.server.health\",\n  services: [AlephaServer, ServerHealthProvider],\n});\n"],"mappings":";;;;;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,MAAM;CACjB,QAAQ,EAAE,QAAQ;CAClB,MAAM,EAAE,UAAU;CAClB,OAAO,EAAE,SAAS;CACnB,CAAC;;;;;;;;;ACGF,IAAa,uBAAb,MAAkC;CAChC,AAAmB,OAAyB,QAAQ,iBAAiB;CACrE,AAAmB,SAAS,QAAQ,OAAO;CAE3C,AAAgB,SAAS,OAAO;EAC9B,MAAM;EACN,QAAQ,EACN,UAAU,cACX;EACD,QAAQ;EACR,eAAe,KAAK,aAAa;EAClC,CAAC;CAEF,AAAgB,UAAU,OAAO;EAC/B,MAAM;EACN,QAAQ,EACN,UAAU,cACX;EACD,QAAQ;EACR,eAAe,KAAK,aAAa;EAClC,CAAC;CAEF,AAAU,cAAc;AACtB,SAAO;GACL,SAAS;GACT,QAAQ,KAAK,MAAM,QAAQ,QAAQ,CAAC;GACpC,MAAM,KAAK,KAAK,cAAc;GAC9B,OAAO,KAAK,OAAO,SAAS;GAC7B;;;;;;;;;;;;ACrBL,MAAa,qBAAqB,QAAQ;CACxC,MAAM;CACN,UAAU,CAAC,cAAc,qBAAqB;CAC/C,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/health/schemas/healthSchema.ts","../../../src/server/health/providers/ServerHealthProvider.ts","../../../src/server/health/index.ts"],"sourcesContent":["import { t } from \"alepha\";\n\nexport const healthSchema = t.object({\n  message: t.text(),\n  uptime: t.number(),\n  date: t.datetime(),\n  ready: t.boolean(),\n});\n","import { $inject, Alepha } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $route } from \"alepha/server\";\nimport { healthSchema } from \"../schemas/healthSchema.ts\";\n\n/**\n * Register `/health` & `/healthz` endpoint.\n *\n * - Provides basic health information about the server.\n */\nexport class ServerHealthProvider {\n  protected readonly time: DateTimeProvider = $inject(DateTimeProvider);\n  protected readonly alepha = $inject(Alepha);\n\n  public readonly health = $route({\n    path: \"/health\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  public readonly healthz = $route({\n    path: \"/healthz\",\n    schema: {\n      response: healthSchema,\n    },\n    silent: true,\n    handler: () => this.healthCheck(),\n  });\n\n  protected healthCheck() {\n    return {\n      message: \"OK\",\n      uptime: Math.floor(process.uptime()),\n      date: this.time.nowISOString(),\n      ready: this.alepha.isReady(),\n    };\n  }\n}\n","import { $module } from \"alepha\";\nimport { AlephaServer } from \"alepha/server\";\nimport { ServerHealthProvider } from \"./providers/ServerHealthProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/ServerHealthProvider.ts\";\nexport * from \"./schemas/healthSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * | type | quality | stability |\n * |------|---------|-----------|\n * | devops | standard | stable |\n *\n * Application health monitoring endpoints.\n *\n * **Features:**\n * - `GET /health` endpoint\n *\n * @module alepha.server.health\n */\nexport const AlephaServerHealth = $module({\n  name: \"alepha.server.health\",\n  services: [AlephaServer, ServerHealthProvider],\n});\n"],"mappings":";;;;;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,MAAM;CACjB,QAAQ,EAAE,QAAQ;CAClB,MAAM,EAAE,UAAU;CAClB,OAAO,EAAE,SAAS;CACnB,CAAC;;;;;;;;;ACGF,IAAa,uBAAb,MAAkC;CAChC,AAAmB,OAAyB,QAAQ,iBAAiB;CACrE,AAAmB,SAAS,QAAQ,OAAO;CAE3C,AAAgB,SAAS,OAAO;EAC9B,MAAM;EACN,QAAQ,EACN,UAAU,cACX;EACD,QAAQ;EACR,eAAe,KAAK,aAAa;EAClC,CAAC;CAEF,AAAgB,UAAU,OAAO;EAC/B,MAAM;EACN,QAAQ,EACN,UAAU,cACX;EACD,QAAQ;EACR,eAAe,KAAK,aAAa;EAClC,CAAC;CAEF,AAAU,cAAc;AACtB,SAAO;GACL,SAAS;GACT,QAAQ,KAAK,MAAM,QAAQ,QAAQ,CAAC;GACpC,MAAM,KAAK,KAAK,cAAc;GAC9B,OAAO,KAAK,OAAO,SAAS;GAC7B;;;;;;;;;;;;;;;;;;ACfL,MAAa,qBAAqB,QAAQ;CACxC,MAAM;CACN,UAAU,CAAC,cAAc,qBAAqB;CAC/C,CAAC"}

package/dist/server/helmet/index.d.ts

@@ -62,8 +62,8 @@ interface HstsOptions {
 declare class ServerHelmetProvider {
   protected readonly alepha: Alepha;
   /**
-       * The configuration options loaded from the atom.
-       */
+   * The configuration options loaded from the atom.
+   */
   protected readonly options: Readonly<{
     isSecure?: boolean | undefined;
     strictTransportSecurity?: {
@@ -88,10 +88,18 @@ declare class ServerHelmetProvider {
 //#endregion
 //#region ../../src/server/helmet/index.d.ts
 /**
- * Automatically adds important HTTP security headers to every response
- * to help protect your application from common web vulnerabilities.
+ * | type | quality | stability |
+ * |------|---------|-----------|
+ * | backend | standard | stable |
+ *
+ * HTTP security headers.
+ *
+ * **Features:**
+ * - X-Frame-Options
+ * - X-Content-Type-Options
+ * - Content-Security-Policy
+ * - Other security headers
  *
- * @see {@link ServerHelmetProvider}
  * @module alepha.server.helmet
  */
 declare const AlephaServerHelmet: alepha1.Service<alepha1.Module>;

package/dist/server/helmet/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/helmet/providers/ServerHelmetProvider.ts","../../../src/server/helmet/index.ts"],"mappings":";;;;;;AAOA;;cAAa,aAAA,EAAa,OAAA,CAAA,IAAA,SAAA,OAAA;EAAA,QAAA,oBAsCxB,OAAA,CAAA,QAAA;EAAA,uBAAA;;;;;;;;;;;;;KAEU,aAAA,GAAgB,MAAA,QAAc,aAAA,CAAc,MAAA;AAAA;EAAA,UAAA,KAAA;IAAA,CAInD,aAAA,CAAc,GAAA,GAAM,aAAA;EAAA;AAAA;AAAA,KAMpB,YAAA;AAAA,UAEY,aAAA;EAAA,gBACC,YAAA;EAAA,eACD,YAAA;EAAA,cACD,YAAA;EAAA,YACF,YAAA;EAAA,gBACI,YAAA;EAAA,aACH,YAAA;EAAA,eACE,YAAA;EAAA,cACD,YAAA;EAAA,cACA,YAAA;EAAA,OAAA,GACJ,YAAA;EAAA;EAAA,cAEI,YAAA;EAAA,gBACE,YAAA;EAAA,oBACI,YAAA;EAAA,iBACH,YAAA;EAAA,aACJ,YAAA;EAAA,CAAA,GAAA,WACE,YAAA;AAAA;AAAA,UAGA,UAAA;EAAA,UAAA,EACH,aAAA;AAAA;AAAA,UAGG,WAAA;EAAA,MAAA;EAAA,iBAAA;EAAA,OAAA;AAAA;AAAA;AAUjB;;;AAViB,cAUJ,oBAAA;EAAA,mBAAA,MAAA,EACc,MAAA;EAAA;;;EAAA,mBAAA,OAAA,EAKC,QAAA;IAAA,QAAA;IAAA,uBAAA;MAAA,MAAA;MAAA,iBAAA;MAAA,OAAA;IAAA;IAAA,mBAAA;IAAA,aAAA;IAAA,cAAA;IAAA,qBAAA;MAAA,UAAA;4CALD,OAAA,CAAA,IAAA;MAAA;;;;oCAOS,aAAA;EAAA,UAAA,aAAA,GAgBR,MAAA;EAAA,mBAAA,UAAA,EAAM,OAAA,CAiEH,aAAA;AAAA;;;;ACrK/B;;;;;;cAAa,kBAAA,EAAkB,OAAA,CAAA,OAAA,CAG7B,OAAA,CAH6B,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/server/helmet/providers/ServerHelmetProvider.ts","../../../src/server/helmet/index.ts"],"mappings":";;;;;;;;cAOa,aAAA,EAAa,OAAA,CAAA,IAAA,SAAA,OAAA;8BAsCxB,OAAA,CAAA,QAAA;;;;;;;;;;;;;;KAEU,aAAA,GAAgB,MAAA,QAAc,aAAA,CAAc,MAAA;AAAA;EAAA,UAG5C,KAAA;IAAA,CACP,aAAA,CAAc,GAAA,GAAM,aAAA;EAAA;AAAA;AAAA,KAMpB,YAAA;AAAA,UAEY,aAAA;EACf,aAAA,GAAgB,YAAA;EAChB,YAAA,GAAe,YAAA;EACf,WAAA,GAAc,YAAA;EACd,SAAA,GAAY,YAAA;EACZ,aAAA,GAAgB,YAAA;EAChB,UAAA,GAAa,YAAA;EACb,YAAA,GAAe,YAAA;EACf,WAAA,GAAc,YAAA;EACd,WAAA,GAAc,YAAA;EACd,OAAA,GAAU,YAAA;EACV,YAAA;EACA,WAAA,GAAc,YAAA;EACd,aAAA,GAAgB,YAAA;EAChB,iBAAA,GAAoB,YAAA;EACpB,cAAA,GAAiB,YAAA;EACjB,UAAA,GAAa,YAAA;EAAA,CACZ,GAAA,WAAc,YAAA;AAAA;AAAA,UAGA,UAAA;EACf,UAAA,EAAY,aAAA;AAAA;AAAA,UAGG,WAAA;EACf,MAAA;EACA,iBAAA;EACA,OAAA;AAAA;;;;;cAOW,oBAAA;EAAA,mBACQ,MAAA,EAAM,MAAA;;;;qBAKN,OAAA,EAAO,QAAA;;;;;;;;;;;;4CALD,OAAA,CAAA,IAAA;MAAA;;;;YAOf,oBAAA,CAAA,GAAwB,aAAA;EAAA,UAgBxB,YAAA,CAAA,GAAgB,MAAA;EAAA,mBAiEP,UAAA,EAjEa,OAAA,CAiEH,aAAA;AAAA;;;;;;;AA/K/B;;;;;;;;;;;cCkBa,kBAAA,EAAkB,OAAA,CAAA,OAAA,CAG7B,OAAA,CAH6B,MAAA"}

package/dist/server/helmet/index.js

@@ -113,10 +113,18 @@ var ServerHelmetProvider = class {
 //#endregion
 //#region ../../src/server/helmet/index.ts
 /**
-* Automatically adds important HTTP security headers to every response
-* to help protect your application from common web vulnerabilities.
+* | type | quality | stability |
+* |------|---------|-----------|
+* | backend | standard | stable |
+*
+* HTTP security headers.
+*
+* **Features:**
+* - X-Frame-Options
+* - X-Content-Type-Options
+* - Content-Security-Policy
+* - Other security headers
 *
-* @see {@link ServerHelmetProvider}
 * @module alepha.server.helmet
 */
 const AlephaServerHelmet = $module({

package/dist/server/helmet/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/helmet/providers/ServerHelmetProvider.ts","../../../src/server/helmet/index.ts"],"sourcesContent":["import { $atom, $hook, $inject, $use, Alepha, type Static, t } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Helmet security headers configuration atom\n */\nexport const helmetOptions = $atom({\n  name: \"alepha.server.helmet.options\",\n  schema: t.object({\n    isSecure: t.optional(t.boolean()),\n    strictTransportSecurity: t.optional(\n      t.object({\n        maxAge: t.optional(t.number()),\n        includeSubDomains: t.optional(t.boolean()),\n        preload: t.optional(t.boolean()),\n      }),\n    ),\n    xContentTypeOptions: t.optional(t.boolean()),\n    xFrameOptions: t.optional(t.enum([\"DENY\", \"SAMEORIGIN\"])),\n    xXssProtection: t.optional(t.boolean()),\n    contentSecurityPolicy: t.optional(\n      t.object({\n        directives: t.record(t.string(), t.any()),\n      }),\n    ),\n    referrerPolicy: t.optional(\n      t.enum([\n        \"no-referrer\",\n        \"no-referrer-when-downgrade\",\n        \"origin\",\n        \"origin-when-cross-origin\",\n        \"same-origin\",\n        \"strict-origin\",\n        \"strict-origin-when-cross-origin\",\n        \"unsafe-url\",\n      ]),\n    ),\n  }),\n  default: {\n    strictTransportSecurity: { maxAge: 15552000, includeSubDomains: true },\n    xFrameOptions: \"SAMEORIGIN\",\n    xXssProtection: false,\n    referrerPolicy: \"strict-origin-when-cross-origin\",\n  },\n});\n\nexport type HelmetOptions = Static<typeof helmetOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [helmetOptions.key]: HelmetOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ntype CspDirective = string | string[];\n\nexport interface CspDirectives {\n  \"default-src\"?: CspDirective;\n  \"script-src\"?: CspDirective;\n  \"style-src\"?: CspDirective;\n  \"img-src\"?: CspDirective;\n  \"connect-src\"?: CspDirective;\n  \"font-src\"?: CspDirective;\n  \"object-src\"?: CspDirective;\n  \"media-src\"?: CspDirective;\n  \"frame-src\"?: CspDirective;\n  sandbox?: CspDirective | boolean;\n  \"report-uri\"?: string;\n  \"child-src\"?: CspDirective;\n  \"form-action\"?: CspDirective;\n  \"frame-ancestors\"?: CspDirective;\n  \"plugin-types\"?: CspDirective;\n  \"base-uri\"?: CspDirective;\n  [key: string]: CspDirective | undefined | boolean;\n}\n\nexport interface CspOptions {\n  directives: CspDirectives;\n}\n\nexport interface HstsOptions {\n  maxAge?: number;\n  includeSubDomains?: boolean;\n  preload?: boolean;\n}\n\n/**\n * Provides a configurable way to apply essential HTTP security headers\n * to every server response, without external dependencies.\n */\nexport class ServerHelmetProvider {\n  protected readonly alepha = $inject(Alepha);\n\n  /**\n   * The configuration options loaded from the atom.\n   */\n  protected readonly options = $use(helmetOptions);\n\n  protected defaultCspDirectives(): CspDirectives {\n    return {\n      \"default-src\": [\"'self'\"],\n      \"base-uri\": [\"'self'\"],\n      \"font-src\": [\"'self'\", \"https:\", \"data:\"],\n      \"form-action\": [\"'self'\"],\n      \"frame-ancestors\": [\"'self'\"],\n      \"img-src\": [\"'self'\", \"data:\"],\n      \"object-src\": [\"'none'\"],\n      \"script-src\": [\"'self'\"],\n      \"script-src-attr\": [\"'none'\"],\n      \"style-src\": [\"'self'\", \"https:\", \"'unsafe-inline'\"],\n      \"upgrade-insecure-requests\": [],\n    };\n  }\n\n  protected buildHeaders(): Record<string, string> {\n    const headers: Record<string, string> = {};\n    const {\n      strictTransportSecurity: hsts,\n      xContentTypeOptions,\n      xFrameOptions,\n      xXssProtection,\n      contentSecurityPolicy: csp,\n      referrerPolicy,\n    } = this.options;\n\n    // Strict-Transport-Security\n    if (hsts) {\n      let value = `max-age=${hsts.maxAge ?? 15552000}`;\n      if (hsts.includeSubDomains) value += \"; includeSubDomains\";\n      if (hsts.preload) value += \"; preload\";\n      headers[\"strict-transport-security\"] = value;\n    }\n\n    // X-Content-Type-Options\n    if (xContentTypeOptions !== false) {\n      headers[\"x-content-type-options\"] = \"nosniff\";\n    }\n\n    // X-Frame-Options\n    if (xFrameOptions) {\n      headers[\"x-frame-options\"] = xFrameOptions;\n    }\n\n    // X-XSS-Protection\n    if (xXssProtection !== false) {\n      headers[\"x-xss-protection\"] = \"1; mode=block\";\n    }\n\n    // Referrer-Policy\n    if (referrerPolicy) {\n      headers[\"referrer-policy\"] = referrerPolicy;\n    }\n\n    // Content-Security-Policy\n    if (csp) {\n      const directives =\n        Object.keys(csp).length === 0\n          ? this.defaultCspDirectives()\n          : csp.directives;\n      headers[\"content-security-policy\"] = Object.entries(directives)\n        .map(([key, value]) => {\n          const kebabKey = key.replace(\n            /[A-Z]/g,\n            (letter) => `-${letter.toLowerCase()}`,\n          );\n          if (Array.isArray(value)) {\n            return `${kebabKey} ${value.join(\" \")}`;\n          }\n          if (typeof value === \"boolean\" && value) {\n            return kebabKey;\n          }\n          return `${kebabKey} ${value}`;\n        })\n        .join(\"; \");\n    }\n\n    return headers;\n  }\n\n  protected readonly onResponse = $hook({\n    on: \"server:onResponse\",\n    priority: \"first\",\n    handler: ({ response }) => {\n      // this check is important. Only add HSTS on HTTPS requests.\n      const isSecure =\n        response.headers[\"x-forwarded-proto\"] === \"https\" ||\n        this.options.isSecure ||\n        this.alepha.isProduction();\n\n      const headersToSet = this.buildHeaders();\n\n      for (const [key, value] of Object.entries(headersToSet)) {\n        if (key === \"strict-transport-security\" && !isSecure) {\n          continue;\n        }\n        // don't overwrite headers if they are already set\n        if (!response.headers[key]) {\n          response.headers[key] = value;\n        }\n      }\n    },\n  });\n}\n","import { $module } from \"alepha\";\nimport { AlephaServer } from \"alepha/server\";\nimport { ServerHelmetProvider } from \"./providers/ServerHelmetProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/ServerHelmetProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Automatically adds important HTTP security headers to every response\n * to help protect your application from common web vulnerabilities.\n *\n * @see {@link ServerHelmetProvider}\n * @module alepha.server.helmet\n */\nexport const AlephaServerHelmet = $module({\n  name: \"alepha.server.helmet\",\n  services: [AlephaServer, ServerHelmetProvider],\n});\n"],"mappings":";;;;;;;AAOA,MAAa,gBAAgB,MAAM;CACjC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;EACjC,yBAAyB,EAAE,SACzB,EAAE,OAAO;GACP,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC9B,mBAAmB,EAAE,SAAS,EAAE,SAAS,CAAC;GAC1C,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;GACjC,CAAC,CACH;EACD,qBAAqB,EAAE,SAAS,EAAE,SAAS,CAAC;EAC5C,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,aAAa,CAAC,CAAC;EACzD,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC;EACvC,uBAAuB,EAAE,SACvB,EAAE,OAAO,EACP,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,EAC1C,CAAC,CACH;EACD,gBAAgB,EAAE,SAChB,EAAE,KAAK;GACL;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC,CACH;EACF,CAAC;CACF,SAAS;EACP,yBAAyB;GAAE,QAAQ;GAAU,mBAAmB;GAAM;EACtE,eAAe;EACf,gBAAgB;EAChB,gBAAgB;EACjB;CACF,CAAC;;;;;AAgDF,IAAa,uBAAb,MAAkC;CAChC,AAAmB,SAAS,QAAQ,OAAO;;;;CAK3C,AAAmB,UAAU,KAAK,cAAc;CAEhD,AAAU,uBAAsC;AAC9C,SAAO;GACL,eAAe,CAAC,SAAS;GACzB,YAAY,CAAC,SAAS;GACtB,YAAY;IAAC;IAAU;IAAU;IAAQ;GACzC,eAAe,CAAC,SAAS;GACzB,mBAAmB,CAAC,SAAS;GAC7B,WAAW,CAAC,UAAU,QAAQ;GAC9B,cAAc,CAAC,SAAS;GACxB,cAAc,CAAC,SAAS;GACxB,mBAAmB,CAAC,SAAS;GAC7B,aAAa;IAAC;IAAU;IAAU;IAAkB;GACpD,6BAA6B,EAAE;GAChC;;CAGH,AAAU,eAAuC;EAC/C,MAAM,UAAkC,EAAE;EAC1C,MAAM,EACJ,yBAAyB,MACzB,qBACA,eACA,gBACA,uBAAuB,KACvB,mBACE,KAAK;AAGT,MAAI,MAAM;GACR,IAAI,QAAQ,WAAW,KAAK,UAAU;AACtC,OAAI,KAAK,kBAAmB,UAAS;AACrC,OAAI,KAAK,QAAS,UAAS;AAC3B,WAAQ,+BAA+B;;AAIzC,MAAI,wBAAwB,MAC1B,SAAQ,4BAA4B;AAItC,MAAI,cACF,SAAQ,qBAAqB;AAI/B,MAAI,mBAAmB,MACrB,SAAQ,sBAAsB;AAIhC,MAAI,eACF,SAAQ,qBAAqB;AAI/B,MAAI,KAAK;GACP,MAAM,aACJ,OAAO,KAAK,IAAI,CAAC,WAAW,IACxB,KAAK,sBAAsB,GAC3B,IAAI;AACV,WAAQ,6BAA6B,OAAO,QAAQ,WAAW,CAC5D,KAAK,CAAC,KAAK,WAAW;IACrB,MAAM,WAAW,IAAI,QACnB,WACC,WAAW,IAAI,OAAO,aAAa,GACrC;AACD,QAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,GAAG,SAAS,GAAG,MAAM,KAAK,IAAI;AAEvC,QAAI,OAAO,UAAU,aAAa,MAChC,QAAO;AAET,WAAO,GAAG,SAAS,GAAG;KACtB,CACD,KAAK,KAAK;;AAGf,SAAO;;CAGT,AAAmB,aAAa,MAAM;EACpC,IAAI;EACJ,UAAU;EACV,UAAU,EAAE,eAAe;GAEzB,MAAM,WACJ,SAAS,QAAQ,yBAAyB,WAC1C,KAAK,QAAQ,YACb,KAAK,OAAO,cAAc;GAE5B,MAAM,eAAe,KAAK,cAAc;AAExC,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,aAAa,EAAE;AACvD,QAAI,QAAQ,+BAA+B,CAAC,SAC1C;AAGF,QAAI,CAAC,SAAS,QAAQ,KACpB,UAAS,QAAQ,OAAO;;;EAI/B,CAAC;;;;;;;;;;;;AC3LJ,MAAa,qBAAqB,QAAQ;CACxC,MAAM;CACN,UAAU,CAAC,cAAc,qBAAqB;CAC/C,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/server/helmet/providers/ServerHelmetProvider.ts","../../../src/server/helmet/index.ts"],"sourcesContent":["import { $atom, $hook, $inject, $use, Alepha, type Static, t } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Helmet security headers configuration atom\n */\nexport const helmetOptions = $atom({\n  name: \"alepha.server.helmet.options\",\n  schema: t.object({\n    isSecure: t.optional(t.boolean()),\n    strictTransportSecurity: t.optional(\n      t.object({\n        maxAge: t.optional(t.number()),\n        includeSubDomains: t.optional(t.boolean()),\n        preload: t.optional(t.boolean()),\n      }),\n    ),\n    xContentTypeOptions: t.optional(t.boolean()),\n    xFrameOptions: t.optional(t.enum([\"DENY\", \"SAMEORIGIN\"])),\n    xXssProtection: t.optional(t.boolean()),\n    contentSecurityPolicy: t.optional(\n      t.object({\n        directives: t.record(t.string(), t.any()),\n      }),\n    ),\n    referrerPolicy: t.optional(\n      t.enum([\n        \"no-referrer\",\n        \"no-referrer-when-downgrade\",\n        \"origin\",\n        \"origin-when-cross-origin\",\n        \"same-origin\",\n        \"strict-origin\",\n        \"strict-origin-when-cross-origin\",\n        \"unsafe-url\",\n      ]),\n    ),\n  }),\n  default: {\n    strictTransportSecurity: { maxAge: 15552000, includeSubDomains: true },\n    xFrameOptions: \"SAMEORIGIN\",\n    xXssProtection: false,\n    referrerPolicy: \"strict-origin-when-cross-origin\",\n  },\n});\n\nexport type HelmetOptions = Static<typeof helmetOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [helmetOptions.key]: HelmetOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\ntype CspDirective = string | string[];\n\nexport interface CspDirectives {\n  \"default-src\"?: CspDirective;\n  \"script-src\"?: CspDirective;\n  \"style-src\"?: CspDirective;\n  \"img-src\"?: CspDirective;\n  \"connect-src\"?: CspDirective;\n  \"font-src\"?: CspDirective;\n  \"object-src\"?: CspDirective;\n  \"media-src\"?: CspDirective;\n  \"frame-src\"?: CspDirective;\n  sandbox?: CspDirective | boolean;\n  \"report-uri\"?: string;\n  \"child-src\"?: CspDirective;\n  \"form-action\"?: CspDirective;\n  \"frame-ancestors\"?: CspDirective;\n  \"plugin-types\"?: CspDirective;\n  \"base-uri\"?: CspDirective;\n  [key: string]: CspDirective | undefined | boolean;\n}\n\nexport interface CspOptions {\n  directives: CspDirectives;\n}\n\nexport interface HstsOptions {\n  maxAge?: number;\n  includeSubDomains?: boolean;\n  preload?: boolean;\n}\n\n/**\n * Provides a configurable way to apply essential HTTP security headers\n * to every server response, without external dependencies.\n */\nexport class ServerHelmetProvider {\n  protected readonly alepha = $inject(Alepha);\n\n  /**\n   * The configuration options loaded from the atom.\n   */\n  protected readonly options = $use(helmetOptions);\n\n  protected defaultCspDirectives(): CspDirectives {\n    return {\n      \"default-src\": [\"'self'\"],\n      \"base-uri\": [\"'self'\"],\n      \"font-src\": [\"'self'\", \"https:\", \"data:\"],\n      \"form-action\": [\"'self'\"],\n      \"frame-ancestors\": [\"'self'\"],\n      \"img-src\": [\"'self'\", \"data:\"],\n      \"object-src\": [\"'none'\"],\n      \"script-src\": [\"'self'\"],\n      \"script-src-attr\": [\"'none'\"],\n      \"style-src\": [\"'self'\", \"https:\", \"'unsafe-inline'\"],\n      \"upgrade-insecure-requests\": [],\n    };\n  }\n\n  protected buildHeaders(): Record<string, string> {\n    const headers: Record<string, string> = {};\n    const {\n      strictTransportSecurity: hsts,\n      xContentTypeOptions,\n      xFrameOptions,\n      xXssProtection,\n      contentSecurityPolicy: csp,\n      referrerPolicy,\n    } = this.options;\n\n    // Strict-Transport-Security\n    if (hsts) {\n      let value = `max-age=${hsts.maxAge ?? 15552000}`;\n      if (hsts.includeSubDomains) value += \"; includeSubDomains\";\n      if (hsts.preload) value += \"; preload\";\n      headers[\"strict-transport-security\"] = value;\n    }\n\n    // X-Content-Type-Options\n    if (xContentTypeOptions !== false) {\n      headers[\"x-content-type-options\"] = \"nosniff\";\n    }\n\n    // X-Frame-Options\n    if (xFrameOptions) {\n      headers[\"x-frame-options\"] = xFrameOptions;\n    }\n\n    // X-XSS-Protection\n    if (xXssProtection !== false) {\n      headers[\"x-xss-protection\"] = \"1; mode=block\";\n    }\n\n    // Referrer-Policy\n    if (referrerPolicy) {\n      headers[\"referrer-policy\"] = referrerPolicy;\n    }\n\n    // Content-Security-Policy\n    if (csp) {\n      const directives =\n        Object.keys(csp).length === 0\n          ? this.defaultCspDirectives()\n          : csp.directives;\n      headers[\"content-security-policy\"] = Object.entries(directives)\n        .map(([key, value]) => {\n          const kebabKey = key.replace(\n            /[A-Z]/g,\n            (letter) => `-${letter.toLowerCase()}`,\n          );\n          if (Array.isArray(value)) {\n            return `${kebabKey} ${value.join(\" \")}`;\n          }\n          if (typeof value === \"boolean\" && value) {\n            return kebabKey;\n          }\n          return `${kebabKey} ${value}`;\n        })\n        .join(\"; \");\n    }\n\n    return headers;\n  }\n\n  protected readonly onResponse = $hook({\n    on: \"server:onResponse\",\n    priority: \"first\",\n    handler: ({ response }) => {\n      // this check is important. Only add HSTS on HTTPS requests.\n      const isSecure =\n        response.headers[\"x-forwarded-proto\"] === \"https\" ||\n        this.options.isSecure ||\n        this.alepha.isProduction();\n\n      const headersToSet = this.buildHeaders();\n\n      for (const [key, value] of Object.entries(headersToSet)) {\n        if (key === \"strict-transport-security\" && !isSecure) {\n          continue;\n        }\n        // don't overwrite headers if they are already set\n        if (!response.headers[key]) {\n          response.headers[key] = value;\n        }\n      }\n    },\n  });\n}\n","import { $module } from \"alepha\";\nimport { AlephaServer } from \"alepha/server\";\nimport { ServerHelmetProvider } from \"./providers/ServerHelmetProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/ServerHelmetProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * | type | quality | stability |\n * |------|---------|-----------|\n * | backend | standard | stable |\n *\n * HTTP security headers.\n *\n * **Features:**\n * - X-Frame-Options\n * - X-Content-Type-Options\n * - Content-Security-Policy\n * - Other security headers\n *\n * @module alepha.server.helmet\n */\nexport const AlephaServerHelmet = $module({\n  name: \"alepha.server.helmet\",\n  services: [AlephaServer, ServerHelmetProvider],\n});\n"],"mappings":";;;;;;;AAOA,MAAa,gBAAgB,MAAM;CACjC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;EACjC,yBAAyB,EAAE,SACzB,EAAE,OAAO;GACP,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC9B,mBAAmB,EAAE,SAAS,EAAE,SAAS,CAAC;GAC1C,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;GACjC,CAAC,CACH;EACD,qBAAqB,EAAE,SAAS,EAAE,SAAS,CAAC;EAC5C,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,aAAa,CAAC,CAAC;EACzD,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC;EACvC,uBAAuB,EAAE,SACvB,EAAE,OAAO,EACP,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,EAC1C,CAAC,CACH;EACD,gBAAgB,EAAE,SAChB,EAAE,KAAK;GACL;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC,CACH;EACF,CAAC;CACF,SAAS;EACP,yBAAyB;GAAE,QAAQ;GAAU,mBAAmB;GAAM;EACtE,eAAe;EACf,gBAAgB;EAChB,gBAAgB;EACjB;CACF,CAAC;;;;;AAgDF,IAAa,uBAAb,MAAkC;CAChC,AAAmB,SAAS,QAAQ,OAAO;;;;CAK3C,AAAmB,UAAU,KAAK,cAAc;CAEhD,AAAU,uBAAsC;AAC9C,SAAO;GACL,eAAe,CAAC,SAAS;GACzB,YAAY,CAAC,SAAS;GACtB,YAAY;IAAC;IAAU;IAAU;IAAQ;GACzC,eAAe,CAAC,SAAS;GACzB,mBAAmB,CAAC,SAAS;GAC7B,WAAW,CAAC,UAAU,QAAQ;GAC9B,cAAc,CAAC,SAAS;GACxB,cAAc,CAAC,SAAS;GACxB,mBAAmB,CAAC,SAAS;GAC7B,aAAa;IAAC;IAAU;IAAU;IAAkB;GACpD,6BAA6B,EAAE;GAChC;;CAGH,AAAU,eAAuC;EAC/C,MAAM,UAAkC,EAAE;EAC1C,MAAM,EACJ,yBAAyB,MACzB,qBACA,eACA,gBACA,uBAAuB,KACvB,mBACE,KAAK;AAGT,MAAI,MAAM;GACR,IAAI,QAAQ,WAAW,KAAK,UAAU;AACtC,OAAI,KAAK,kBAAmB,UAAS;AACrC,OAAI,KAAK,QAAS,UAAS;AAC3B,WAAQ,+BAA+B;;AAIzC,MAAI,wBAAwB,MAC1B,SAAQ,4BAA4B;AAItC,MAAI,cACF,SAAQ,qBAAqB;AAI/B,MAAI,mBAAmB,MACrB,SAAQ,sBAAsB;AAIhC,MAAI,eACF,SAAQ,qBAAqB;AAI/B,MAAI,KAAK;GACP,MAAM,aACJ,OAAO,KAAK,IAAI,CAAC,WAAW,IACxB,KAAK,sBAAsB,GAC3B,IAAI;AACV,WAAQ,6BAA6B,OAAO,QAAQ,WAAW,CAC5D,KAAK,CAAC,KAAK,WAAW;IACrB,MAAM,WAAW,IAAI,QACnB,WACC,WAAW,IAAI,OAAO,aAAa,GACrC;AACD,QAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,GAAG,SAAS,GAAG,MAAM,KAAK,IAAI;AAEvC,QAAI,OAAO,UAAU,aAAa,MAChC,QAAO;AAET,WAAO,GAAG,SAAS,GAAG;KACtB,CACD,KAAK,KAAK;;AAGf,SAAO;;CAGT,AAAmB,aAAa,MAAM;EACpC,IAAI;EACJ,UAAU;EACV,UAAU,EAAE,eAAe;GAEzB,MAAM,WACJ,SAAS,QAAQ,yBAAyB,WAC1C,KAAK,QAAQ,YACb,KAAK,OAAO,cAAc;GAE5B,MAAM,eAAe,KAAK,cAAc;AAExC,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,aAAa,EAAE;AACvD,QAAI,QAAQ,+BAA+B,CAAC,SAC1C;AAGF,QAAI,CAAC,SAAS,QAAQ,KACpB,UAAS,QAAQ,OAAO;;;EAI/B,CAAC;;;;;;;;;;;;;;;;;;;;ACnLJ,MAAa,qBAAqB,QAAQ;CACxC,MAAM;CACN,UAAU,CAAC,cAAc,qBAAqB;CAC/C,CAAC"}

package/dist/server/links/index.browser.js

@@ -1,4 +1,4 @@
-import { $inject, $module, Alepha, AlephaError, KIND, Primitive, createPrimitive, jsonSchemaToTypeBox, t } from "alepha";
+import { $atom, $inject, $module, Alepha, AlephaError, KIND, Primitive, createPrimitive, jsonSchemaToTypeBox, t } from "alepha";
 import { $logger } from "alepha/logger";
 import { HttpClient, ServerReply, UnauthorizedError } from "alepha/server";
 
@@ -20,6 +20,13 @@ const apiLinksResponseSchema = t.object({
 	links: t.array(apiLinkSchema)
 });
 
+//#endregion
+//#region ../../src/server/links/atoms/apiLinksAtom.ts
+const apiLinksAtom = $atom({
+	name: "alepha.server.request.apiLinks",
+	schema: t.optional(apiLinksResponseSchema)
+});
+
 //#endregion
 //#region ../../src/server/links/providers/LinkProvider.ts
 /**
@@ -247,6 +254,7 @@ $remote[KIND] = RemotePrimitive;
 //#region ../../src/server/links/index.browser.ts
 const AlephaServerLinks = $module({
 	name: "alepha.server.links",
+	atoms: [apiLinksAtom],
 	primitives: [$remote, $client],
 	services: [LinkProvider]
 });

package/dist/server/links/index.browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.browser.js","names":[],"sources":["../../../src/server/links/schemas/apiLinksResponseSchema.ts","../../../src/server/links/providers/LinkProvider.ts","../../../src/server/links/primitives/$client.ts","../../../src/server/links/primitives/$remote.ts","../../../src/server/links/index.browser.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const apiLinkSchema = t.object({\n  name: t.text({\n    description: \"Name of the API link, used for identification.\",\n  }),\n\n  group: t.optional(\n    t.text({\n      description:\n        \"Group to which the API link belongs, used for categorization.\",\n    }),\n  ),\n\n  path: t.text({\n    description: \"Pathname used to access the API link.\",\n  }),\n\n  method: t.optional(\n    t.text({\n      description:\n        \"HTTP method used for the API link, e.g., GET, POST, etc. If not specified, defaults to GET.\",\n    }),\n  ),\n\n  requestBodyType: t.optional(\n    t.text({\n      description:\n        \"Type of the request body for the API link. Default is application/json for POST/PUT/PATCH, null for others.\",\n    }),\n  ),\n\n  service: t.optional(\n    t.text({\n      description:\n        \"Service name associated with the API link, used for service discovery.\",\n    }),\n  ),\n\n  rawSchema: t.optional(\n    t.object({\n      body: t.optional(t.string()),\n      response: t.optional(t.string()),\n    }),\n  ),\n});\n\nexport const apiLinksResponseSchema = t.object({\n  prefix: t.optional(t.text()),\n  links: t.array(apiLinkSchema),\n});\n\nexport type ApiLinksResponse = Static<typeof apiLinksResponseSchema>;\nexport type ApiLink = Static<typeof apiLinkSchema>;\n","import {\n  $inject,\n  Alepha,\n  AlephaError,\n  type Async,\n  jsonSchemaToTypeBox,\n  t,\n} from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport type { ServerRouteSecure } from \"alepha/security\";\nimport {\n  type ActionPrimitive,\n  type ClientRequestEntry,\n  type ClientRequestOptions,\n  type ClientRequestResponse,\n  type FetchResponse,\n  HttpClient,\n  type RequestConfigSchema,\n  ServerReply,\n  type ServerRequest,\n  type ServerRequestConfigEntry,\n  type ServerResponseBody,\n  type TRequestBody,\n  UnauthorizedError,\n} from \"alepha/server\";\nimport {\n  type ApiLink,\n  apiLinksResponseSchema,\n} from \"../schemas/apiLinksResponseSchema.ts\";\n\n/**\n * Browser, SSR friendly, service to handle links.\n */\nexport class LinkProvider {\n  static path = {\n    apiLinks: \"/api/_links\",\n  };\n\n  protected readonly log = $logger();\n  protected readonly alepha = $inject(Alepha);\n  protected readonly httpClient = $inject(HttpClient);\n\n  // all server links (local + remote)\n  // THIS IS NOT USER LINKS! (which are filtered by permissions)\n  protected serverLinks: Array<HttpClientLink> = [];\n\n  /**\n   * Get applicative links registered on the server.\n   * This does not include lazy-loaded remote links.\n   */\n  public getServerLinks(): HttpClientLink[] {\n    if (this.alepha.isBrowser()) {\n      this.log.warn(\n        \"Getting server links in the browser is not supported. Use `fetchLinks` to get links from the server.\",\n      );\n      return [];\n    }\n\n    return this.serverLinks;\n  }\n\n  /**\n   * Register a new link for the application.\n   */\n  public registerLink(link: HttpClientLink): void {\n    if (this.alepha.isBrowser()) {\n      this.log.warn(\n        \"Registering links in the browser is not supported. Use `fetchLinks` to get links from the server.\",\n      );\n      return;\n    }\n\n    if (!link.handler && !link.host) {\n      throw new AlephaError(\n        \"Can't create link - 'handler' or 'host' is required\",\n      );\n    }\n\n    if (this.serverLinks.some((l) => l.name === link.name)) {\n      // remove existing link with the same name\n      this.serverLinks = this.serverLinks.filter((l) => l.name !== link.name);\n    }\n\n    if (!link.rawSchema) {\n      link.rawSchema = {};\n      if (link.schema?.body)\n        link.rawSchema.body = JSON.stringify(link.schema.body);\n      if (link.schema?.response)\n        link.rawSchema.response = JSON.stringify(link.schema.response);\n    }\n\n    this.serverLinks.push(link);\n  }\n\n  public get links(): HttpClientLink[] {\n    // TODO: not performant at all, use a map instead for ServerLinks\n    const apiLinks = this.alepha.store.get(\n      \"alepha.server.request.apiLinks\",\n    )?.links;\n\n    if (apiLinks) {\n      if (this.alepha.isBrowser()) {\n        return apiLinks;\n      }\n\n      const links = [];\n      for (const link of apiLinks) {\n        const originalLink = this.serverLinks.find((l) => l.name === link.name);\n        if (originalLink) {\n          links.push(originalLink);\n        }\n      }\n      return links;\n    }\n\n    return this.serverLinks ?? [];\n  }\n\n  /**\n   * Force browser to refresh links from the server.\n   */\n  public async fetchLinks(): Promise<HttpClientLink[]> {\n    const { data } = await this.httpClient.fetch(\n      `${LinkProvider.path.apiLinks}`,\n      {\n        method: \"GET\",\n        schema: {\n          response: apiLinksResponseSchema,\n        },\n      },\n    );\n\n    this.alepha.store.set(\"alepha.server.request.apiLinks\", data);\n\n    return data.links;\n  }\n\n  /**\n   * Create a virtual client that can be used to call actions.\n   *\n   * Use js Proxy under the hood.\n   */\n  public client<T extends object>(\n    scope: ClientScope = {},\n  ): HttpVirtualClient<T> {\n    return new Proxy<HttpVirtualClient<T>>({} as HttpVirtualClient<T>, {\n      get: (_, prop) => {\n        if (typeof prop !== \"string\") {\n          return;\n        }\n\n        return this.createVirtualAction<RequestConfigSchema>(prop, scope);\n      },\n    });\n  }\n\n  /**\n   * Check if a link with the given name exists.\n   * @param name\n   */\n  public can(name: string): boolean {\n    return this.links.some((link) => link.name === name);\n  }\n\n  /**\n   * Resolve a link by its name and call it.\n   * - If link is local, it will call the local handler.\n   * - If link is remote, it will make a fetch request to the remote server.\n   */\n  public async follow(\n    name: string,\n    config: Partial<ServerRequestConfigEntry> = {},\n    options: ClientRequestOptions & ClientScope = {},\n  ): Promise<any> {\n    this.log.trace(\"Following link\", { name, config, options });\n    const link = await this.getLinkByName(name, options);\n\n    // if a handler is defined, use it (ssr)\n    if (link.handler && !options.request) {\n      this.log.trace(\"Local link found\", { name });\n      return link.handler(\n        {\n          method: link.method,\n          url: new URL(`http://localhost${link.path}`),\n          query: config.query ?? {},\n          body: config.body ?? {},\n          params: config.params ?? {},\n          headers: config.headers ?? {},\n          metadata: {},\n          reply: new ServerReply(),\n        } as Partial<ServerRequest> as ServerRequest,\n        options,\n      );\n    }\n\n    this.log.trace(\"Remote link found\", {\n      name,\n      host: link.host,\n      service: link.service,\n    });\n\n    return this.followRemote(link, config, options).then(\n      (response) => response.data,\n    );\n  }\n\n  protected createVirtualAction<T extends RequestConfigSchema>(\n    name: string,\n    scope: ClientScope = {},\n  ): VirtualAction<T> {\n    const $: VirtualAction<T> = async (\n      config: any = {},\n      options: ClientRequestOptions = {},\n    ) => {\n      return this.follow(name, config, {\n        ...scope,\n        ...options,\n      });\n    };\n\n    Object.defineProperty($, \"name\", {\n      value: name,\n      writable: false,\n    });\n\n    $.run = async (config: any = {}, options: ClientRequestOptions = {}) => {\n      return this.follow(name, config, {\n        ...scope,\n        ...options,\n      });\n    };\n\n    $.fetch = async (config: any = {}, options: ClientRequestOptions = {}) => {\n      const link = await this.getLinkByName(name, scope);\n      return this.followRemote(link, config, options);\n    };\n\n    $.can = () => {\n      return this.can(name);\n    };\n\n    $.schema = () => {\n      const link = this.links.find((l) => l.name === name);\n      if (!link) {\n        throw new AlephaError(`Link ${name} not found.`);\n      }\n\n      if (link.rawSchema && !link.schema) {\n        link.schema = {};\n        link.schema.body = link.rawSchema?.body\n          ? (jsonSchemaToTypeBox(\n              JSON.parse(link.rawSchema.body),\n            ) as TRequestBody)\n          : undefined;\n        link.schema.response = link.rawSchema?.response\n          ? (jsonSchemaToTypeBox(\n              JSON.parse(link.rawSchema.response),\n            ) as TRequestBody)\n          : undefined;\n      }\n\n      return link.schema as {\n        body: any;\n        response: any;\n      };\n    };\n\n    return $;\n  }\n\n  protected async followRemote(\n    link: HttpClientLink,\n    config: Partial<ServerRequestConfigEntry> = {},\n    options: ClientRequestOptions = {},\n  ): Promise<FetchResponse> {\n    options.request ??= {};\n    options.request.headers = new Headers(options.request.headers);\n\n    const als = this.alepha.context.get<ServerRequest>(\"request\");\n    if (als?.headers.authorization) {\n      options.request.headers.set(\"authorization\", als.headers.authorization);\n    }\n\n    const context = this.alepha.context.get(\"context\");\n    if (typeof context === \"string\") {\n      options.request.headers.set(\"x-request-id\", context);\n    }\n\n    const action = {\n      ...link,\n      // schema is not used in the client,\n      // we assume that TypeScript will check\n      schema: {\n        body: t.any(),\n        response: t.any(),\n      },\n    };\n\n    // prefix with service when host is not defined (e.g. browser)\n    if (!link.host && link.service) {\n      action.path = `/${link.service}${action.path}`;\n    }\n\n    action.path = `${action.prefix ?? \"/api\"}${action.path}`;\n    action.prefix = undefined; // prefix is not used in the client\n\n    // else, make a request\n    return this.httpClient.fetchAction({\n      host: link.host,\n      config,\n      options,\n      action: action as any, // schema.body TAny is not accepted\n    });\n  }\n\n  protected async getLinkByName(\n    name: string,\n    options: ClientScope = {},\n  ): Promise<HttpClientLink> {\n    if (\n      this.alepha.isBrowser() &&\n      !this.alepha.store.get(\"alepha.server.request.apiLinks\")\n    ) {\n      await this.fetchLinks();\n    }\n\n    const link = this.links.find(\n      (a) =>\n        a.name === name &&\n        (!options.group || a.group === options.group) &&\n        (!options.service || options.service === a.service),\n    );\n\n    if (!link) {\n      const error = new UnauthorizedError(`Action ${name} not found.`);\n      // mimic http error handling\n      await this.alepha.events.emit(\"client:onError\", {\n        route: link,\n        error,\n      });\n      throw error;\n    }\n\n    if (options.hostname) {\n      return {\n        ...link,\n        host: options.hostname,\n      };\n    }\n\n    return link;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface HttpClientLink extends ApiLink {\n  secured?: boolean | ServerRouteSecure;\n  prefix?: string;\n  // -- server only --\n  // only for remote actions\n  host?: string;\n  service?: string;\n  // used only for local actions, not for remote actions\n  schema?: RequestConfigSchema;\n  handler?: (\n    request: ServerRequest,\n    options: ClientRequestOptions,\n  ) => Async<ServerResponseBody>;\n}\n\nexport interface ClientScope {\n  group?: string;\n  service?: string;\n  hostname?: string;\n}\n\nexport type HttpVirtualClient<T> = {\n  [K in keyof T as T[K] extends ActionPrimitive<RequestConfigSchema>\n    ? K\n    : never]: T[K] extends ActionPrimitive<infer Schema>\n    ? VirtualAction<Schema>\n    : never;\n};\n\nexport interface VirtualAction<T extends RequestConfigSchema>\n  extends Pick<ActionPrimitive<T>, \"name\" | \"run\" | \"fetch\"> {\n  (\n    config?: ClientRequestEntry<T>,\n    opts?: ClientRequestOptions,\n  ): Promise<ClientRequestResponse<T>>;\n  can: () => boolean;\n  schema: () => {\n    body: T[\"body\"];\n    response: T[\"response\"];\n  };\n}\n","import { $inject, KIND } from \"alepha\";\nimport {\n  type ClientScope,\n  type HttpVirtualClient,\n  LinkProvider,\n} from \"../providers/LinkProvider.ts\";\n\n/**\n * Create a new client.\n */\nexport const $client = <T extends object>(\n  scope?: ClientScope,\n): HttpVirtualClient<T> => {\n  return $inject(LinkProvider).client<T>(scope);\n};\n\n$client[KIND] = \"$client\";\n","import { createPrimitive, KIND, Primitive } from \"alepha\";\nimport type { ServiceAccountPrimitive } from \"alepha/security\";\nimport type { ProxyPrimitiveOptions } from \"alepha/server/proxy\";\n\n/**\n * $remote is a primitive that allows you to define remote service access.\n *\n * Use it only when you have 2 or more services that need to communicate with each other.\n *\n * All remote services can be exposed as actions, ... or not.\n *\n * You can add a service account if you want to use a security layer.\n */\nexport const $remote = (options: RemotePrimitiveOptions) => {\n  return createPrimitive(RemotePrimitive, options);\n};\n\nexport interface RemotePrimitiveOptions {\n  /**\n   * The URL of the remote service.\n   * You can use a function to generate the URL dynamically.\n   * You probably should use $env(env) to get the URL from the environment.\n   *\n   * @example\n   * ```ts\n   * import { $remote } from \"alepha/server\";\n   * import { $inject, t } from \"alepha\";\n   *\n   * class App {\n   *   env = $env(t.object({\n   *     REMOTE_URL: t.text({default: \"http://localhost:3000\"}),\n   *   }));\n   *   remote = $remote({\n   *     url: this.env.REMOTE_URL,\n   *   });\n   * }\n   * ```\n   */\n  url: string | (() => string);\n\n  /**\n   * The name of the remote service.\n   *\n   * @default Member of the class containing the remote service.\n   */\n  name?: string;\n\n  /**\n   * If true, all methods of the remote service will be exposed as actions in this context.\n   * > Note: Proxy will never use the service account, it just... proxies the request.\n   */\n  proxy?:\n    | boolean\n    | Partial<\n        ProxyPrimitiveOptions & {\n          /**\n           * If true, the remote service won't be available internally, only through the proxy.\n           */\n          noInternal: boolean;\n        }\n      >;\n\n  /**\n   * For communication between the server and the remote service with a security layer.\n   * This will be used for internal communication and will not be exposed to the client.\n   */\n  serviceAccount?: ServiceAccountPrimitive;\n}\n\nexport class RemotePrimitive extends Primitive<RemotePrimitiveOptions> {\n  public get name(): string {\n    return this.options.name ?? this.config.propertyKey;\n  }\n}\n\n$remote[KIND] = RemotePrimitive;\n","import { $module } from \"alepha\";\nimport { $client } from \"./primitives/$client.ts\";\nimport { $remote } from \"./primitives/$remote.ts\";\nimport { LinkProvider } from \"./providers/LinkProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$client.ts\";\nexport * from \"./primitives/$remote.ts\";\nexport * from \"./providers/LinkProvider.ts\";\nexport * from \"./schemas/apiLinksResponseSchema.ts\";\n\n// ---------------------------------------------------------------- -----------------------------------------------------\n\nexport const AlephaServerLinks = $module({\n  name: \"alepha.server.links\",\n  primitives: [$remote, $client],\n  services: [LinkProvider],\n});\n"],"mappings":";;;;;AAGA,MAAa,gBAAgB,EAAE,OAAO;CACpC,MAAM,EAAE,KAAK,EACX,aAAa,kDACd,CAAC;CAEF,OAAO,EAAE,SACP,EAAE,KAAK,EACL,aACE,iEACH,CAAC,CACH;CAED,MAAM,EAAE,KAAK,EACX,aAAa,yCACd,CAAC;CAEF,QAAQ,EAAE,SACR,EAAE,KAAK,EACL,aACE,+FACH,CAAC,CACH;CAED,iBAAiB,EAAE,SACjB,EAAE,KAAK,EACL,aACE,+GACH,CAAC,CACH;CAED,SAAS,EAAE,SACT,EAAE,KAAK,EACL,aACE,0EACH,CAAC,CACH;CAED,WAAW,EAAE,SACX,EAAE,OAAO;EACP,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC5B,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;EACjC,CAAC,CACH;CACF,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;CAC5B,OAAO,EAAE,MAAM,cAAc;CAC9B,CAAC;;;;;;;AClBF,IAAa,eAAb,MAAa,aAAa;CACxB,OAAO,OAAO,EACZ,UAAU,eACX;CAED,AAAmB,MAAM,SAAS;CAClC,AAAmB,SAAS,QAAQ,OAAO;CAC3C,AAAmB,aAAa,QAAQ,WAAW;CAInD,AAAU,cAAqC,EAAE;;;;;CAMjD,AAAO,iBAAmC;AACxC,MAAI,KAAK,OAAO,WAAW,EAAE;AAC3B,QAAK,IAAI,KACP,uGACD;AACD,UAAO,EAAE;;AAGX,SAAO,KAAK;;;;;CAMd,AAAO,aAAa,MAA4B;AAC9C,MAAI,KAAK,OAAO,WAAW,EAAE;AAC3B,QAAK,IAAI,KACP,oGACD;AACD;;AAGF,MAAI,CAAC,KAAK,WAAW,CAAC,KAAK,KACzB,OAAM,IAAI,YACR,sDACD;AAGH,MAAI,KAAK,YAAY,MAAM,MAAM,EAAE,SAAS,KAAK,KAAK,CAEpD,MAAK,cAAc,KAAK,YAAY,QAAQ,MAAM,EAAE,SAAS,KAAK,KAAK;AAGzE,MAAI,CAAC,KAAK,WAAW;AACnB,QAAK,YAAY,EAAE;AACnB,OAAI,KAAK,QAAQ,KACf,MAAK,UAAU,OAAO,KAAK,UAAU,KAAK,OAAO,KAAK;AACxD,OAAI,KAAK,QAAQ,SACf,MAAK,UAAU,WAAW,KAAK,UAAU,KAAK,OAAO,SAAS;;AAGlE,OAAK,YAAY,KAAK,KAAK;;CAG7B,IAAW,QAA0B;EAEnC,MAAM,WAAW,KAAK,OAAO,MAAM,IACjC,iCACD,EAAE;AAEH,MAAI,UAAU;AACZ,OAAI,KAAK,OAAO,WAAW,CACzB,QAAO;GAGT,MAAM,QAAQ,EAAE;AAChB,QAAK,MAAM,QAAQ,UAAU;IAC3B,MAAM,eAAe,KAAK,YAAY,MAAM,MAAM,EAAE,SAAS,KAAK,KAAK;AACvE,QAAI,aACF,OAAM,KAAK,aAAa;;AAG5B,UAAO;;AAGT,SAAO,KAAK,eAAe,EAAE;;;;;CAM/B,MAAa,aAAwC;EACnD,MAAM,EAAE,SAAS,MAAM,KAAK,WAAW,MACrC,GAAG,aAAa,KAAK,YACrB;GACE,QAAQ;GACR,QAAQ,EACN,UAAU,wBACX;GACF,CACF;AAED,OAAK,OAAO,MAAM,IAAI,kCAAkC,KAAK;AAE7D,SAAO,KAAK;;;;;;;CAQd,AAAO,OACL,QAAqB,EAAE,EACD;AACtB,SAAO,IAAI,MAA4B,EAAE,EAA0B,EACjE,MAAM,GAAG,SAAS;AAChB,OAAI,OAAO,SAAS,SAClB;AAGF,UAAO,KAAK,oBAAyC,MAAM,MAAM;KAEpE,CAAC;;;;;;CAOJ,AAAO,IAAI,MAAuB;AAChC,SAAO,KAAK,MAAM,MAAM,SAAS,KAAK,SAAS,KAAK;;;;;;;CAQtD,MAAa,OACX,MACA,SAA4C,EAAE,EAC9C,UAA8C,EAAE,EAClC;AACd,OAAK,IAAI,MAAM,kBAAkB;GAAE;GAAM;GAAQ;GAAS,CAAC;EAC3D,MAAM,OAAO,MAAM,KAAK,cAAc,MAAM,QAAQ;AAGpD,MAAI,KAAK,WAAW,CAAC,QAAQ,SAAS;AACpC,QAAK,IAAI,MAAM,oBAAoB,EAAE,MAAM,CAAC;AAC5C,UAAO,KAAK,QACV;IACE,QAAQ,KAAK;IACb,KAAK,IAAI,IAAI,mBAAmB,KAAK,OAAO;IAC5C,OAAO,OAAO,SAAS,EAAE;IACzB,MAAM,OAAO,QAAQ,EAAE;IACvB,QAAQ,OAAO,UAAU,EAAE;IAC3B,SAAS,OAAO,WAAW,EAAE;IAC7B,UAAU,EAAE;IACZ,OAAO,IAAI,aAAa;IACzB,EACD,QACD;;AAGH,OAAK,IAAI,MAAM,qBAAqB;GAClC;GACA,MAAM,KAAK;GACX,SAAS,KAAK;GACf,CAAC;AAEF,SAAO,KAAK,aAAa,MAAM,QAAQ,QAAQ,CAAC,MAC7C,aAAa,SAAS,KACxB;;CAGH,AAAU,oBACR,MACA,QAAqB,EAAE,EACL;EAClB,MAAM,IAAsB,OAC1B,SAAc,EAAE,EAChB,UAAgC,EAAE,KAC/B;AACH,UAAO,KAAK,OAAO,MAAM,QAAQ;IAC/B,GAAG;IACH,GAAG;IACJ,CAAC;;AAGJ,SAAO,eAAe,GAAG,QAAQ;GAC/B,OAAO;GACP,UAAU;GACX,CAAC;AAEF,IAAE,MAAM,OAAO,SAAc,EAAE,EAAE,UAAgC,EAAE,KAAK;AACtE,UAAO,KAAK,OAAO,MAAM,QAAQ;IAC/B,GAAG;IACH,GAAG;IACJ,CAAC;;AAGJ,IAAE,QAAQ,OAAO,SAAc,EAAE,EAAE,UAAgC,EAAE,KAAK;GACxE,MAAM,OAAO,MAAM,KAAK,cAAc,MAAM,MAAM;AAClD,UAAO,KAAK,aAAa,MAAM,QAAQ,QAAQ;;AAGjD,IAAE,YAAY;AACZ,UAAO,KAAK,IAAI,KAAK;;AAGvB,IAAE,eAAe;GACf,MAAM,OAAO,KAAK,MAAM,MAAM,MAAM,EAAE,SAAS,KAAK;AACpD,OAAI,CAAC,KACH,OAAM,IAAI,YAAY,QAAQ,KAAK,aAAa;AAGlD,OAAI,KAAK,aAAa,CAAC,KAAK,QAAQ;AAClC,SAAK,SAAS,EAAE;AAChB,SAAK,OAAO,OAAO,KAAK,WAAW,OAC9B,oBACC,KAAK,MAAM,KAAK,UAAU,KAAK,CAChC,GACD;AACJ,SAAK,OAAO,WAAW,KAAK,WAAW,WAClC,oBACC,KAAK,MAAM,KAAK,UAAU,SAAS,CACpC,GACD;;AAGN,UAAO,KAAK;;AAMd,SAAO;;CAGT,MAAgB,aACd,MACA,SAA4C,EAAE,EAC9C,UAAgC,EAAE,EACV;AACxB,UAAQ,YAAY,EAAE;AACtB,UAAQ,QAAQ,UAAU,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;EAE9D,MAAM,MAAM,KAAK,OAAO,QAAQ,IAAmB,UAAU;AAC7D,MAAI,KAAK,QAAQ,cACf,SAAQ,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,QAAQ,cAAc;EAGzE,MAAM,UAAU,KAAK,OAAO,QAAQ,IAAI,UAAU;AAClD,MAAI,OAAO,YAAY,SACrB,SAAQ,QAAQ,QAAQ,IAAI,gBAAgB,QAAQ;EAGtD,MAAM,SAAS;GACb,GAAG;GAGH,QAAQ;IACN,MAAM,EAAE,KAAK;IACb,UAAU,EAAE,KAAK;IAClB;GACF;AAGD,MAAI,CAAC,KAAK,QAAQ,KAAK,QACrB,QAAO,OAAO,IAAI,KAAK,UAAU,OAAO;AAG1C,SAAO,OAAO,GAAG,OAAO,UAAU,SAAS,OAAO;AAClD,SAAO,SAAS;AAGhB,SAAO,KAAK,WAAW,YAAY;GACjC,MAAM,KAAK;GACX;GACA;GACQ;GACT,CAAC;;CAGJ,MAAgB,cACd,MACA,UAAuB,EAAE,EACA;AACzB,MACE,KAAK,OAAO,WAAW,IACvB,CAAC,KAAK,OAAO,MAAM,IAAI,iCAAiC,CAExD,OAAM,KAAK,YAAY;EAGzB,MAAM,OAAO,KAAK,MAAM,MACrB,MACC,EAAE,SAAS,SACV,CAAC,QAAQ,SAAS,EAAE,UAAU,QAAQ,WACtC,CAAC,QAAQ,WAAW,QAAQ,YAAY,EAAE,SAC9C;AAED,MAAI,CAAC,MAAM;GACT,MAAM,QAAQ,IAAI,kBAAkB,UAAU,KAAK,aAAa;AAEhE,SAAM,KAAK,OAAO,OAAO,KAAK,kBAAkB;IAC9C,OAAO;IACP;IACD,CAAC;AACF,SAAM;;AAGR,MAAI,QAAQ,SACV,QAAO;GACL,GAAG;GACH,MAAM,QAAQ;GACf;AAGH,SAAO;;;;;;;;;ACpVX,MAAa,WACX,UACyB;AACzB,QAAO,QAAQ,aAAa,CAAC,OAAU,MAAM;;AAG/C,QAAQ,QAAQ;;;;;;;;;;;;;ACHhB,MAAa,WAAW,YAAoC;AAC1D,QAAO,gBAAgB,iBAAiB,QAAQ;;AAuDlD,IAAa,kBAAb,cAAqC,UAAkC;CACrE,IAAW,OAAe;AACxB,SAAO,KAAK,QAAQ,QAAQ,KAAK,OAAO;;;AAI5C,QAAQ,QAAQ;;;;AC7DhB,MAAa,oBAAoB,QAAQ;CACvC,MAAM;CACN,YAAY,CAAC,SAAS,QAAQ;CAC9B,UAAU,CAAC,aAAa;CACzB,CAAC"}
+{"version":3,"file":"index.browser.js","names":[],"sources":["../../../src/server/links/schemas/apiLinksResponseSchema.ts","../../../src/server/links/atoms/apiLinksAtom.ts","../../../src/server/links/providers/LinkProvider.ts","../../../src/server/links/primitives/$client.ts","../../../src/server/links/primitives/$remote.ts","../../../src/server/links/index.browser.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const apiLinkSchema = t.object({\n  name: t.text({\n    description: \"Name of the API link, used for identification.\",\n  }),\n\n  group: t.optional(\n    t.text({\n      description:\n        \"Group to which the API link belongs, used for categorization.\",\n    }),\n  ),\n\n  path: t.text({\n    description: \"Pathname used to access the API link.\",\n  }),\n\n  method: t.optional(\n    t.text({\n      description:\n        \"HTTP method used for the API link, e.g., GET, POST, etc. If not specified, defaults to GET.\",\n    }),\n  ),\n\n  requestBodyType: t.optional(\n    t.text({\n      description:\n        \"Type of the request body for the API link. Default is application/json for POST/PUT/PATCH, null for others.\",\n    }),\n  ),\n\n  service: t.optional(\n    t.text({\n      description:\n        \"Service name associated with the API link, used for service discovery.\",\n    }),\n  ),\n\n  rawSchema: t.optional(\n    t.object({\n      body: t.optional(t.string()),\n      response: t.optional(t.string()),\n    }),\n  ),\n});\n\nexport const apiLinksResponseSchema = t.object({\n  prefix: t.optional(t.text()),\n  links: t.array(apiLinkSchema),\n});\n\nexport type ApiLinksResponse = Static<typeof apiLinksResponseSchema>;\nexport type ApiLink = Static<typeof apiLinkSchema>;\n","import { $atom, t } from \"alepha\";\nimport { apiLinksResponseSchema } from \"../schemas/apiLinksResponseSchema.ts\";\n\nexport const apiLinksAtom = $atom({\n  name: \"alepha.server.request.apiLinks\",\n  schema: t.optional(apiLinksResponseSchema),\n});\n","import {\n  $inject,\n  Alepha,\n  AlephaError,\n  type Async,\n  jsonSchemaToTypeBox,\n  t,\n} from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport type { ServerRouteSecure } from \"alepha/security\";\nimport {\n  type ActionPrimitive,\n  type ClientRequestEntry,\n  type ClientRequestOptions,\n  type ClientRequestResponse,\n  type FetchResponse,\n  HttpClient,\n  type RequestConfigSchema,\n  ServerReply,\n  type ServerRequest,\n  type ServerRequestConfigEntry,\n  type ServerResponseBody,\n  type TRequestBody,\n  UnauthorizedError,\n} from \"alepha/server\";\nimport {\n  type ApiLink,\n  apiLinksResponseSchema,\n} from \"../schemas/apiLinksResponseSchema.ts\";\n\n/**\n * Browser, SSR friendly, service to handle links.\n */\nexport class LinkProvider {\n  static path = {\n    apiLinks: \"/api/_links\",\n  };\n\n  protected readonly log = $logger();\n  protected readonly alepha = $inject(Alepha);\n  protected readonly httpClient = $inject(HttpClient);\n\n  // all server links (local + remote)\n  // THIS IS NOT USER LINKS! (which are filtered by permissions)\n  protected serverLinks: Array<HttpClientLink> = [];\n\n  /**\n   * Get applicative links registered on the server.\n   * This does not include lazy-loaded remote links.\n   */\n  public getServerLinks(): HttpClientLink[] {\n    if (this.alepha.isBrowser()) {\n      this.log.warn(\n        \"Getting server links in the browser is not supported. Use `fetchLinks` to get links from the server.\",\n      );\n      return [];\n    }\n\n    return this.serverLinks;\n  }\n\n  /**\n   * Register a new link for the application.\n   */\n  public registerLink(link: HttpClientLink): void {\n    if (this.alepha.isBrowser()) {\n      this.log.warn(\n        \"Registering links in the browser is not supported. Use `fetchLinks` to get links from the server.\",\n      );\n      return;\n    }\n\n    if (!link.handler && !link.host) {\n      throw new AlephaError(\n        \"Can't create link - 'handler' or 'host' is required\",\n      );\n    }\n\n    if (this.serverLinks.some((l) => l.name === link.name)) {\n      // remove existing link with the same name\n      this.serverLinks = this.serverLinks.filter((l) => l.name !== link.name);\n    }\n\n    if (!link.rawSchema) {\n      link.rawSchema = {};\n      if (link.schema?.body)\n        link.rawSchema.body = JSON.stringify(link.schema.body);\n      if (link.schema?.response)\n        link.rawSchema.response = JSON.stringify(link.schema.response);\n    }\n\n    this.serverLinks.push(link);\n  }\n\n  public get links(): HttpClientLink[] {\n    // TODO: not performant at all, use a map instead for ServerLinks\n    const apiLinks = this.alepha.store.get(\n      \"alepha.server.request.apiLinks\",\n    )?.links;\n\n    if (apiLinks) {\n      if (this.alepha.isBrowser()) {\n        return apiLinks;\n      }\n\n      const links = [];\n      for (const link of apiLinks) {\n        const originalLink = this.serverLinks.find((l) => l.name === link.name);\n        if (originalLink) {\n          links.push(originalLink);\n        }\n      }\n      return links;\n    }\n\n    return this.serverLinks ?? [];\n  }\n\n  /**\n   * Force browser to refresh links from the server.\n   */\n  public async fetchLinks(): Promise<HttpClientLink[]> {\n    const { data } = await this.httpClient.fetch(\n      `${LinkProvider.path.apiLinks}`,\n      {\n        method: \"GET\",\n        schema: {\n          response: apiLinksResponseSchema,\n        },\n      },\n    );\n\n    this.alepha.store.set(\"alepha.server.request.apiLinks\", data);\n\n    return data.links;\n  }\n\n  /**\n   * Create a virtual client that can be used to call actions.\n   *\n   * Use js Proxy under the hood.\n   */\n  public client<T extends object>(\n    scope: ClientScope = {},\n  ): HttpVirtualClient<T> {\n    return new Proxy<HttpVirtualClient<T>>({} as HttpVirtualClient<T>, {\n      get: (_, prop) => {\n        if (typeof prop !== \"string\") {\n          return;\n        }\n\n        return this.createVirtualAction<RequestConfigSchema>(prop, scope);\n      },\n    });\n  }\n\n  /**\n   * Check if a link with the given name exists.\n   * @param name\n   */\n  public can(name: string): boolean {\n    return this.links.some((link) => link.name === name);\n  }\n\n  /**\n   * Resolve a link by its name and call it.\n   * - If link is local, it will call the local handler.\n   * - If link is remote, it will make a fetch request to the remote server.\n   */\n  public async follow(\n    name: string,\n    config: Partial<ServerRequestConfigEntry> = {},\n    options: ClientRequestOptions & ClientScope = {},\n  ): Promise<any> {\n    this.log.trace(\"Following link\", { name, config, options });\n    const link = await this.getLinkByName(name, options);\n\n    // if a handler is defined, use it (ssr)\n    if (link.handler && !options.request) {\n      this.log.trace(\"Local link found\", { name });\n      return link.handler(\n        {\n          method: link.method,\n          url: new URL(`http://localhost${link.path}`),\n          query: config.query ?? {},\n          body: config.body ?? {},\n          params: config.params ?? {},\n          headers: config.headers ?? {},\n          metadata: {},\n          reply: new ServerReply(),\n        } as Partial<ServerRequest> as ServerRequest,\n        options,\n      );\n    }\n\n    this.log.trace(\"Remote link found\", {\n      name,\n      host: link.host,\n      service: link.service,\n    });\n\n    return this.followRemote(link, config, options).then(\n      (response) => response.data,\n    );\n  }\n\n  protected createVirtualAction<T extends RequestConfigSchema>(\n    name: string,\n    scope: ClientScope = {},\n  ): VirtualAction<T> {\n    const $: VirtualAction<T> = async (\n      config: any = {},\n      options: ClientRequestOptions = {},\n    ) => {\n      return this.follow(name, config, {\n        ...scope,\n        ...options,\n      });\n    };\n\n    Object.defineProperty($, \"name\", {\n      value: name,\n      writable: false,\n    });\n\n    $.run = async (config: any = {}, options: ClientRequestOptions = {}) => {\n      return this.follow(name, config, {\n        ...scope,\n        ...options,\n      });\n    };\n\n    $.fetch = async (config: any = {}, options: ClientRequestOptions = {}) => {\n      const link = await this.getLinkByName(name, scope);\n      return this.followRemote(link, config, options);\n    };\n\n    $.can = () => {\n      return this.can(name);\n    };\n\n    $.schema = () => {\n      const link = this.links.find((l) => l.name === name);\n      if (!link) {\n        throw new AlephaError(`Link ${name} not found.`);\n      }\n\n      if (link.rawSchema && !link.schema) {\n        link.schema = {};\n        link.schema.body = link.rawSchema?.body\n          ? (jsonSchemaToTypeBox(\n              JSON.parse(link.rawSchema.body),\n            ) as TRequestBody)\n          : undefined;\n        link.schema.response = link.rawSchema?.response\n          ? (jsonSchemaToTypeBox(\n              JSON.parse(link.rawSchema.response),\n            ) as TRequestBody)\n          : undefined;\n      }\n\n      return link.schema as {\n        body: any;\n        response: any;\n      };\n    };\n\n    return $;\n  }\n\n  protected async followRemote(\n    link: HttpClientLink,\n    config: Partial<ServerRequestConfigEntry> = {},\n    options: ClientRequestOptions = {},\n  ): Promise<FetchResponse> {\n    options.request ??= {};\n    options.request.headers = new Headers(options.request.headers);\n\n    const als = this.alepha.context.get<ServerRequest>(\"request\");\n    if (als?.headers.authorization) {\n      options.request.headers.set(\"authorization\", als.headers.authorization);\n    }\n\n    const context = this.alepha.context.get(\"context\");\n    if (typeof context === \"string\") {\n      options.request.headers.set(\"x-request-id\", context);\n    }\n\n    const action = {\n      ...link,\n      // schema is not used in the client,\n      // we assume that TypeScript will check\n      schema: {\n        body: t.any(),\n        response: t.any(),\n      },\n    };\n\n    // prefix with service when host is not defined (e.g. browser)\n    if (!link.host && link.service) {\n      action.path = `/${link.service}${action.path}`;\n    }\n\n    action.path = `${action.prefix ?? \"/api\"}${action.path}`;\n    action.prefix = undefined; // prefix is not used in the client\n\n    // else, make a request\n    return this.httpClient.fetchAction({\n      host: link.host,\n      config,\n      options,\n      action: action as any, // schema.body TAny is not accepted\n    });\n  }\n\n  protected async getLinkByName(\n    name: string,\n    options: ClientScope = {},\n  ): Promise<HttpClientLink> {\n    if (\n      this.alepha.isBrowser() &&\n      !this.alepha.store.get(\"alepha.server.request.apiLinks\")\n    ) {\n      await this.fetchLinks();\n    }\n\n    const link = this.links.find(\n      (a) =>\n        a.name === name &&\n        (!options.group || a.group === options.group) &&\n        (!options.service || options.service === a.service),\n    );\n\n    if (!link) {\n      const error = new UnauthorizedError(`Action ${name} not found.`);\n      // mimic http error handling\n      await this.alepha.events.emit(\"client:onError\", {\n        route: link,\n        error,\n      });\n      throw error;\n    }\n\n    if (options.hostname) {\n      return {\n        ...link,\n        host: options.hostname,\n      };\n    }\n\n    return link;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport interface HttpClientLink extends ApiLink {\n  secured?: boolean | ServerRouteSecure;\n  prefix?: string;\n  // -- server only --\n  // only for remote actions\n  host?: string;\n  service?: string;\n  // used only for local actions, not for remote actions\n  schema?: RequestConfigSchema;\n  handler?: (\n    request: ServerRequest,\n    options: ClientRequestOptions,\n  ) => Async<ServerResponseBody>;\n}\n\nexport interface ClientScope {\n  group?: string;\n  service?: string;\n  hostname?: string;\n}\n\nexport type HttpVirtualClient<T> = {\n  [K in keyof T as T[K] extends ActionPrimitive<RequestConfigSchema>\n    ? K\n    : never]: T[K] extends ActionPrimitive<infer Schema>\n    ? VirtualAction<Schema>\n    : never;\n};\n\nexport interface VirtualAction<T extends RequestConfigSchema>\n  extends Pick<ActionPrimitive<T>, \"name\" | \"run\" | \"fetch\"> {\n  (\n    config?: ClientRequestEntry<T>,\n    opts?: ClientRequestOptions,\n  ): Promise<ClientRequestResponse<T>>;\n  can: () => boolean;\n  schema: () => {\n    body: T[\"body\"];\n    response: T[\"response\"];\n  };\n}\n","import { $inject, KIND } from \"alepha\";\nimport {\n  type ClientScope,\n  type HttpVirtualClient,\n  LinkProvider,\n} from \"../providers/LinkProvider.ts\";\n\n/**\n * Create a new client.\n */\nexport const $client = <T extends object>(\n  scope?: ClientScope,\n): HttpVirtualClient<T> => {\n  return $inject(LinkProvider).client<T>(scope);\n};\n\n$client[KIND] = \"$client\";\n","import { createPrimitive, KIND, Primitive } from \"alepha\";\nimport type { ServiceAccountPrimitive } from \"alepha/security\";\nimport type { ProxyPrimitiveOptions } from \"alepha/server/proxy\";\n\n/**\n * $remote is a primitive that allows you to define remote service access.\n *\n * Use it only when you have 2 or more services that need to communicate with each other.\n *\n * All remote services can be exposed as actions, ... or not.\n *\n * You can add a service account if you want to use a security layer.\n */\nexport const $remote = (options: RemotePrimitiveOptions) => {\n  return createPrimitive(RemotePrimitive, options);\n};\n\nexport interface RemotePrimitiveOptions {\n  /**\n   * The URL of the remote service.\n   * You can use a function to generate the URL dynamically.\n   * You probably should use $env(env) to get the URL from the environment.\n   *\n   * @example\n   * ```ts\n   * import { $remote } from \"alepha/server\";\n   * import { $inject, t } from \"alepha\";\n   *\n   * class App {\n   *   env = $env(t.object({\n   *     REMOTE_URL: t.text({default: \"http://localhost:3000\"}),\n   *   }));\n   *   remote = $remote({\n   *     url: this.env.REMOTE_URL,\n   *   });\n   * }\n   * ```\n   */\n  url: string | (() => string);\n\n  /**\n   * The name of the remote service.\n   *\n   * @default Member of the class containing the remote service.\n   */\n  name?: string;\n\n  /**\n   * If true, all methods of the remote service will be exposed as actions in this context.\n   * > Note: Proxy will never use the service account, it just... proxies the request.\n   */\n  proxy?:\n    | boolean\n    | Partial<\n        ProxyPrimitiveOptions & {\n          /**\n           * If true, the remote service won't be available internally, only through the proxy.\n           */\n          noInternal: boolean;\n        }\n      >;\n\n  /**\n   * For communication between the server and the remote service with a security layer.\n   * This will be used for internal communication and will not be exposed to the client.\n   */\n  serviceAccount?: ServiceAccountPrimitive;\n}\n\nexport class RemotePrimitive extends Primitive<RemotePrimitiveOptions> {\n  public get name(): string {\n    return this.options.name ?? this.config.propertyKey;\n  }\n}\n\n$remote[KIND] = RemotePrimitive;\n","import { $module } from \"alepha\";\nimport { apiLinksAtom } from \"./atoms/apiLinksAtom.ts\";\nimport { $client } from \"./primitives/$client.ts\";\nimport { $remote } from \"./primitives/$remote.ts\";\nimport { LinkProvider } from \"./providers/LinkProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./primitives/$client.ts\";\nexport * from \"./primitives/$remote.ts\";\nexport * from \"./providers/LinkProvider.ts\";\nexport * from \"./schemas/apiLinksResponseSchema.ts\";\n\n// ---------------------------------------------------------------- -----------------------------------------------------\n\nexport const AlephaServerLinks = $module({\n  name: \"alepha.server.links\",\n  atoms: [apiLinksAtom],\n  primitives: [$remote, $client],\n  services: [LinkProvider],\n});\n"],"mappings":";;;;;AAGA,MAAa,gBAAgB,EAAE,OAAO;CACpC,MAAM,EAAE,KAAK,EACX,aAAa,kDACd,CAAC;CAEF,OAAO,EAAE,SACP,EAAE,KAAK,EACL,aACE,iEACH,CAAC,CACH;CAED,MAAM,EAAE,KAAK,EACX,aAAa,yCACd,CAAC;CAEF,QAAQ,EAAE,SACR,EAAE,KAAK,EACL,aACE,+FACH,CAAC,CACH;CAED,iBAAiB,EAAE,SACjB,EAAE,KAAK,EACL,aACE,+GACH,CAAC,CACH;CAED,SAAS,EAAE,SACT,EAAE,KAAK,EACL,aACE,0EACH,CAAC,CACH;CAED,WAAW,EAAE,SACX,EAAE,OAAO;EACP,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC5B,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;EACjC,CAAC,CACH;CACF,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;CAC5B,OAAO,EAAE,MAAM,cAAc;CAC9B,CAAC;;;;AChDF,MAAa,eAAe,MAAM;CAChC,MAAM;CACN,QAAQ,EAAE,SAAS,uBAAuB;CAC3C,CAAC;;;;;;;AC2BF,IAAa,eAAb,MAAa,aAAa;CACxB,OAAO,OAAO,EACZ,UAAU,eACX;CAED,AAAmB,MAAM,SAAS;CAClC,AAAmB,SAAS,QAAQ,OAAO;CAC3C,AAAmB,aAAa,QAAQ,WAAW;CAInD,AAAU,cAAqC,EAAE;;;;;CAMjD,AAAO,iBAAmC;AACxC,MAAI,KAAK,OAAO,WAAW,EAAE;AAC3B,QAAK,IAAI,KACP,uGACD;AACD,UAAO,EAAE;;AAGX,SAAO,KAAK;;;;;CAMd,AAAO,aAAa,MAA4B;AAC9C,MAAI,KAAK,OAAO,WAAW,EAAE;AAC3B,QAAK,IAAI,KACP,oGACD;AACD;;AAGF,MAAI,CAAC,KAAK,WAAW,CAAC,KAAK,KACzB,OAAM,IAAI,YACR,sDACD;AAGH,MAAI,KAAK,YAAY,MAAM,MAAM,EAAE,SAAS,KAAK,KAAK,CAEpD,MAAK,cAAc,KAAK,YAAY,QAAQ,MAAM,EAAE,SAAS,KAAK,KAAK;AAGzE,MAAI,CAAC,KAAK,WAAW;AACnB,QAAK,YAAY,EAAE;AACnB,OAAI,KAAK,QAAQ,KACf,MAAK,UAAU,OAAO,KAAK,UAAU,KAAK,OAAO,KAAK;AACxD,OAAI,KAAK,QAAQ,SACf,MAAK,UAAU,WAAW,KAAK,UAAU,KAAK,OAAO,SAAS;;AAGlE,OAAK,YAAY,KAAK,KAAK;;CAG7B,IAAW,QAA0B;EAEnC,MAAM,WAAW,KAAK,OAAO,MAAM,IACjC,iCACD,EAAE;AAEH,MAAI,UAAU;AACZ,OAAI,KAAK,OAAO,WAAW,CACzB,QAAO;GAGT,MAAM,QAAQ,EAAE;AAChB,QAAK,MAAM,QAAQ,UAAU;IAC3B,MAAM,eAAe,KAAK,YAAY,MAAM,MAAM,EAAE,SAAS,KAAK,KAAK;AACvE,QAAI,aACF,OAAM,KAAK,aAAa;;AAG5B,UAAO;;AAGT,SAAO,KAAK,eAAe,EAAE;;;;;CAM/B,MAAa,aAAwC;EACnD,MAAM,EAAE,SAAS,MAAM,KAAK,WAAW,MACrC,GAAG,aAAa,KAAK,YACrB;GACE,QAAQ;GACR,QAAQ,EACN,UAAU,wBACX;GACF,CACF;AAED,OAAK,OAAO,MAAM,IAAI,kCAAkC,KAAK;AAE7D,SAAO,KAAK;;;;;;;CAQd,AAAO,OACL,QAAqB,EAAE,EACD;AACtB,SAAO,IAAI,MAA4B,EAAE,EAA0B,EACjE,MAAM,GAAG,SAAS;AAChB,OAAI,OAAO,SAAS,SAClB;AAGF,UAAO,KAAK,oBAAyC,MAAM,MAAM;KAEpE,CAAC;;;;;;CAOJ,AAAO,IAAI,MAAuB;AAChC,SAAO,KAAK,MAAM,MAAM,SAAS,KAAK,SAAS,KAAK;;;;;;;CAQtD,MAAa,OACX,MACA,SAA4C,EAAE,EAC9C,UAA8C,EAAE,EAClC;AACd,OAAK,IAAI,MAAM,kBAAkB;GAAE;GAAM;GAAQ;GAAS,CAAC;EAC3D,MAAM,OAAO,MAAM,KAAK,cAAc,MAAM,QAAQ;AAGpD,MAAI,KAAK,WAAW,CAAC,QAAQ,SAAS;AACpC,QAAK,IAAI,MAAM,oBAAoB,EAAE,MAAM,CAAC;AAC5C,UAAO,KAAK,QACV;IACE,QAAQ,KAAK;IACb,KAAK,IAAI,IAAI,mBAAmB,KAAK,OAAO;IAC5C,OAAO,OAAO,SAAS,EAAE;IACzB,MAAM,OAAO,QAAQ,EAAE;IACvB,QAAQ,OAAO,UAAU,EAAE;IAC3B,SAAS,OAAO,WAAW,EAAE;IAC7B,UAAU,EAAE;IACZ,OAAO,IAAI,aAAa;IACzB,EACD,QACD;;AAGH,OAAK,IAAI,MAAM,qBAAqB;GAClC;GACA,MAAM,KAAK;GACX,SAAS,KAAK;GACf,CAAC;AAEF,SAAO,KAAK,aAAa,MAAM,QAAQ,QAAQ,CAAC,MAC7C,aAAa,SAAS,KACxB;;CAGH,AAAU,oBACR,MACA,QAAqB,EAAE,EACL;EAClB,MAAM,IAAsB,OAC1B,SAAc,EAAE,EAChB,UAAgC,EAAE,KAC/B;AACH,UAAO,KAAK,OAAO,MAAM,QAAQ;IAC/B,GAAG;IACH,GAAG;IACJ,CAAC;;AAGJ,SAAO,eAAe,GAAG,QAAQ;GAC/B,OAAO;GACP,UAAU;GACX,CAAC;AAEF,IAAE,MAAM,OAAO,SAAc,EAAE,EAAE,UAAgC,EAAE,KAAK;AACtE,UAAO,KAAK,OAAO,MAAM,QAAQ;IAC/B,GAAG;IACH,GAAG;IACJ,CAAC;;AAGJ,IAAE,QAAQ,OAAO,SAAc,EAAE,EAAE,UAAgC,EAAE,KAAK;GACxE,MAAM,OAAO,MAAM,KAAK,cAAc,MAAM,MAAM;AAClD,UAAO,KAAK,aAAa,MAAM,QAAQ,QAAQ;;AAGjD,IAAE,YAAY;AACZ,UAAO,KAAK,IAAI,KAAK;;AAGvB,IAAE,eAAe;GACf,MAAM,OAAO,KAAK,MAAM,MAAM,MAAM,EAAE,SAAS,KAAK;AACpD,OAAI,CAAC,KACH,OAAM,IAAI,YAAY,QAAQ,KAAK,aAAa;AAGlD,OAAI,KAAK,aAAa,CAAC,KAAK,QAAQ;AAClC,SAAK,SAAS,EAAE;AAChB,SAAK,OAAO,OAAO,KAAK,WAAW,OAC9B,oBACC,KAAK,MAAM,KAAK,UAAU,KAAK,CAChC,GACD;AACJ,SAAK,OAAO,WAAW,KAAK,WAAW,WAClC,oBACC,KAAK,MAAM,KAAK,UAAU,SAAS,CACpC,GACD;;AAGN,UAAO,KAAK;;AAMd,SAAO;;CAGT,MAAgB,aACd,MACA,SAA4C,EAAE,EAC9C,UAAgC,EAAE,EACV;AACxB,UAAQ,YAAY,EAAE;AACtB,UAAQ,QAAQ,UAAU,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;EAE9D,MAAM,MAAM,KAAK,OAAO,QAAQ,IAAmB,UAAU;AAC7D,MAAI,KAAK,QAAQ,cACf,SAAQ,QAAQ,QAAQ,IAAI,iBAAiB,IAAI,QAAQ,cAAc;EAGzE,MAAM,UAAU,KAAK,OAAO,QAAQ,IAAI,UAAU;AAClD,MAAI,OAAO,YAAY,SACrB,SAAQ,QAAQ,QAAQ,IAAI,gBAAgB,QAAQ;EAGtD,MAAM,SAAS;GACb,GAAG;GAGH,QAAQ;IACN,MAAM,EAAE,KAAK;IACb,UAAU,EAAE,KAAK;IAClB;GACF;AAGD,MAAI,CAAC,KAAK,QAAQ,KAAK,QACrB,QAAO,OAAO,IAAI,KAAK,UAAU,OAAO;AAG1C,SAAO,OAAO,GAAG,OAAO,UAAU,SAAS,OAAO;AAClD,SAAO,SAAS;AAGhB,SAAO,KAAK,WAAW,YAAY;GACjC,MAAM,KAAK;GACX;GACA;GACQ;GACT,CAAC;;CAGJ,MAAgB,cACd,MACA,UAAuB,EAAE,EACA;AACzB,MACE,KAAK,OAAO,WAAW,IACvB,CAAC,KAAK,OAAO,MAAM,IAAI,iCAAiC,CAExD,OAAM,KAAK,YAAY;EAGzB,MAAM,OAAO,KAAK,MAAM,MACrB,MACC,EAAE,SAAS,SACV,CAAC,QAAQ,SAAS,EAAE,UAAU,QAAQ,WACtC,CAAC,QAAQ,WAAW,QAAQ,YAAY,EAAE,SAC9C;AAED,MAAI,CAAC,MAAM;GACT,MAAM,QAAQ,IAAI,kBAAkB,UAAU,KAAK,aAAa;AAEhE,SAAM,KAAK,OAAO,OAAO,KAAK,kBAAkB;IAC9C,OAAO;IACP;IACD,CAAC;AACF,SAAM;;AAGR,MAAI,QAAQ,SACV,QAAO;GACL,GAAG;GACH,MAAM,QAAQ;GACf;AAGH,SAAO;;;;;;;;;ACpVX,MAAa,WACX,UACyB;AACzB,QAAO,QAAQ,aAAa,CAAC,OAAU,MAAM;;AAG/C,QAAQ,QAAQ;;;;;;;;;;;;;ACHhB,MAAa,WAAW,YAAoC;AAC1D,QAAO,gBAAgB,iBAAiB,QAAQ;;AAuDlD,IAAa,kBAAb,cAAqC,UAAkC;CACrE,IAAW,OAAe;AACxB,SAAO,KAAK,QAAQ,QAAQ,KAAK,OAAO;;;AAI5C,QAAQ,QAAQ;;;;AC5DhB,MAAa,oBAAoB,QAAQ;CACvC,MAAM;CACN,OAAO,CAAC,aAAa;CACrB,YAAY,CAAC,SAAS,QAAQ;CAC9B,UAAU,CAAC,aAAa;CACzB,CAAC"}