create-jen-app 0.1.0

package/templates/static/lib/middleware/builtins/request-id.js

@@ -0,0 +1,25 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { randomUUID } from "node:crypto";
+export async function requestId(ctx, next) {
+    const id = ctx.req.headers["x-request-id"] || randomUUID();
+    ctx.response.header("X-Request-ID", id);
+    // Also attach to context for logger
+    ctx.state.requestId = id;
+    await next();
+}

package/templates/static/lib/middleware/builtins/security-headers.d.ts

@@ -0,0 +1 @@
+export function securityHeaders(ctx: any, next: any): Promise<void>;

package/templates/static/lib/middleware/builtins/security-headers.js

@@ -0,0 +1,39 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+export async function securityHeaders(ctx, next) {
+    // Prevent DNS prefetch (privacy)
+    ctx.response.header("X-DNS-Prefetch-Control", "off");
+    // Clickjacking protection
+    ctx.response.header("X-Frame-Options", "DENY"); // Changed from SAMEORIGIN for stronger protection
+    // HTTPS enforcement
+    ctx.response.header("Strict-Transport-Security", "max-age=31536000; includeSubDomains; preload");
+    // Prevent opening files in browser (IE)
+    ctx.response.header("X-Download-Options", "noopen");
+    // MIME type sniffing protection
+    ctx.response.header("X-Content-Type-Options", "nosniff");
+    // XSS protection (obsolete but still useful for older browsers)
+    ctx.response.header("X-XSS-Protection", "1; mode=block");
+    // Referrer policy
+    ctx.response.header("Referrer-Policy", "strict-origin-when-cross-origin");
+    // Content Security Policy - NEW
+    // Adjust directives based on your application needs
+    ctx.response.header("Content-Security-Policy", "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self'; frame-ancestors 'none';");
+    // Permissions Policy (formerly Feature Policy) - NEW
+    ctx.response.header("Permissions-Policy", "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()");
+    await next();
+}

package/templates/static/lib/middleware/context.d.ts

@@ -0,0 +1,18 @@
+export class Context {
+    constructor(req: any, res: any);
+    req: any;
+    res: any;
+    url: URL;
+    state: {};
+    response: ResponseBuilder;
+    body: any;
+    query: {
+        [k: string]: string;
+    };
+    params: {};
+    get cookies(): {
+        [k: string]: any;
+    };
+    json(data: any, status?: number): void;
+}
+import { ResponseBuilder } from "./response.js";

package/templates/static/lib/middleware/context.js

@@ -0,0 +1,50 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { ResponseBuilder } from "./response.js";
+export class Context {
+    req;
+    res;
+    url;
+    state;
+    response;
+    body; // For parsed body
+    query;
+    params;
+    constructor(req, res) {
+        this.req = req;
+        this.res = res;
+        this.url = new URL(req.url ?? "/", `http://${req.headers.host || "localhost"}`);
+        this.state = {};
+        this.response = new ResponseBuilder(res);
+        this.body = null;
+        this.query = Object.fromEntries(this.url.searchParams);
+        this.params = {};
+    }
+    get cookies() {
+        const header = this.req.headers.cookie;
+        if (!header)
+            return {};
+        return Object.fromEntries(header.split(";").map((c) => {
+            const [key, ...v] = c.trim().split("=");
+            return [key, decodeURIComponent(v.join("="))];
+        }));
+    }
+    json(data, status = 200) {
+        return this.response.status(status).json(data).send();
+    }
+}

package/templates/static/lib/middleware/decorators.d.ts

@@ -0,0 +1,2 @@
+export function UseMiddleware(...middleware: any[]): (target: any, propertyKey: any, descriptor: any) => void;
+export const MIDDLEWARE_METADATA_KEY: unique symbol;

package/templates/static/lib/middleware/decorators.js

@@ -0,0 +1,61 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+// Simple in-memory storage for metadata if Reflect is not available
+// This avoids the 'reflect-metadata' dependency
+const MetadataStorage = new WeakMap();
+function getMetadata(key, target, propertyKey) {
+    // @ts-ignore
+    if (typeof Reflect !== "undefined" && Reflect.getMetadata) {
+        // @ts-ignore
+        return Reflect.getMetadata(key, target, propertyKey);
+    }
+    const targetMap = MetadataStorage.get(target);
+    if (!targetMap)
+        return undefined;
+    const mapKey = propertyKey ? `${String(key)}:${String(propertyKey)}` : key;
+    return targetMap.get(mapKey);
+}
+function defineMetadata(key, value, target, propertyKey) {
+    // @ts-ignore
+    if (typeof Reflect !== "undefined" && Reflect.defineMetadata) {
+        // @ts-ignore
+        return Reflect.defineMetadata(key, value, target, propertyKey);
+    }
+    let targetMap = MetadataStorage.get(target);
+    if (!targetMap) {
+        targetMap = new Map();
+        MetadataStorage.set(target, targetMap);
+    }
+    const mapKey = propertyKey ? `${String(key)}:${String(propertyKey)}` : key;
+    targetMap.set(mapKey, value);
+}
+export const MIDDLEWARE_METADATA_KEY = Symbol("jen:middleware");
+export function UseMiddleware(...middleware) {
+    return function (target, propertyKey, descriptor) {
+        if (descriptor) {
+            // Method decorator
+            const existing = getMetadata(MIDDLEWARE_METADATA_KEY, target, propertyKey) || [];
+            defineMetadata(MIDDLEWARE_METADATA_KEY, [...existing, ...middleware], target, propertyKey);
+        }
+        else {
+            // Class decorator
+            const existing = getMetadata(MIDDLEWARE_METADATA_KEY, target) || [];
+            defineMetadata(MIDDLEWARE_METADATA_KEY, [...existing, ...middleware], target);
+        }
+    };
+}

package/templates/static/lib/middleware/errors/handler.d.ts

@@ -0,0 +1 @@
+export function errorHandler(ctx: any, next: any): Promise<void>;

package/templates/static/lib/middleware/errors/handler.js

@@ -0,0 +1,65 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { HttpError } from "./http-error.js";
+export async function errorHandler(ctx, next) {
+    try {
+        await next();
+    }
+    catch (err) {
+        const status = err instanceof HttpError ? err.statusCode : 500;
+        const message = err.message || "Internal Server Error";
+        const details = err instanceof HttpError ? err.details : undefined;
+        console.error(`Error processing request: ${message}`, err);
+        // Check if response is already sent
+        if (ctx.res.writableEnded)
+            return;
+        const accept = ctx.req.headers.accept || "";
+        if (accept.includes("text/html")) {
+            const html = `
+        <!DOCTYPE html>
+        <html>
+        <head>
+            <title>Error ${status}</title>
+            <meta name="viewport" content="width=device-width, initial-scale=1">
+            <style>
+                body { font-family: system-ui, -apple-system, sans-serif; padding: 2rem; max-width: 800px; margin: 0 auto; line-height: 1.5; }
+                h1 { color: #e11d48; border-bottom: 1px solid #eee; padding-bottom: 0.5rem; }
+                pre { background: #f4f4f5; padding: 1rem; border-radius: 0.5rem; overflow-x: auto; }
+            </style>
+        </head>
+        <body>
+            <h1>Error ${status}</h1>
+            <p><strong>${message}</strong></p>
+            ${details ? `<details><summary>Details</summary><pre>${JSON.stringify(details, null, 2)}</pre></details>` : ""}
+            <hr style="margin-top: 2rem; border: 0; border-top: 1px solid #eee;">
+            <p style="color: #666; font-size: 0.875rem;">Jen.js Framework</p>
+        </body>
+        </html>
+        `;
+            ctx.response.status(status).html(html).send();
+            return;
+        }
+        ctx.response.status(status).json({
+            error: true,
+            statusCode: status,
+            message,
+            details,
+        });
+        ctx.response.send();
+    }
+}

package/templates/static/lib/middleware/errors/http-error.d.ts

@@ -0,0 +1,5 @@
+export class HttpError extends Error {
+    constructor(statusCode: any, message: any, details: any);
+    statusCode: any;
+    details: any;
+}

package/templates/static/lib/middleware/errors/http-error.js

@@ -0,0 +1,27 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+export class HttpError extends Error {
+    statusCode;
+    details;
+    constructor(statusCode, message, details) {
+        super(message);
+        this.statusCode = statusCode;
+        this.details = details;
+        Object.setPrototypeOf(this, HttpError.prototype);
+    }
+}

package/templates/static/lib/middleware/kernel.d.ts

@@ -0,0 +1,6 @@
+export class Kernel {
+    globalMiddleware: any[];
+    use(mw: any): void;
+    handle(req: any, res: any): Promise<void>;
+    handleWithGroup(req: any, res: any, groupName: any): Promise<void>;
+}

package/templates/static/lib/middleware/kernel.js

@@ -0,0 +1,39 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { Pipeline } from "./pipeline.js";
+import { MiddlewareRegistry } from "./registry.js";
+import { Context } from "./context.js";
+export class Kernel {
+    globalMiddleware = [];
+    constructor() { }
+    use(mw) {
+        this.globalMiddleware.push(mw);
+    }
+    async handle(req, res) {
+        const ctx = new Context(req, res);
+        const fn = Pipeline.compose(this.globalMiddleware);
+        await fn(ctx, async () => { });
+    }
+    async handleWithGroup(req, res, groupName) {
+        const ctx = new Context(req, res);
+        const registry = MiddlewareRegistry.get();
+        const groupMw = registry.getGroup(groupName);
+        const fn = Pipeline.compose([...this.globalMiddleware, ...groupMw]);
+        await fn(ctx, async () => { });
+    }
+}

package/templates/static/lib/middleware/pipeline.d.ts

@@ -0,0 +1,4 @@
+export class Pipeline {
+    static compose(middleware: any): (context: any, next: any) => any;
+    static resolveMiddleware(mw: any): any;
+}

package/templates/static/lib/middleware/pipeline.js

@@ -0,0 +1,67 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+export class Pipeline {
+    static compose(middleware) {
+        if (!Array.isArray(middleware))
+            throw new TypeError("Middleware stack must be an array!");
+        const handlers = middleware.map((mw) => this.resolveMiddleware(mw));
+        return function (context, next) {
+            let index = -1;
+            function dispatch(i) {
+                if (i <= index)
+                    return Promise.reject(new Error("next() called multiple times"));
+                index = i;
+                let fn = handlers[i];
+                if (i === handlers.length) {
+                    fn = next;
+                }
+                if (!fn)
+                    return Promise.resolve();
+                try {
+                    return Promise.resolve(fn(context, dispatch.bind(null, i + 1)));
+                }
+                catch (err) {
+                    return Promise.reject(err);
+                }
+            }
+            return dispatch(0);
+        };
+    }
+    static resolveMiddleware(mw) {
+        if (typeof mw === "function") {
+            // Check if it's a class constructor (has prototype.handle)
+            if ("prototype" in mw &&
+                mw.prototype &&
+                typeof mw.prototype.handle === "function") {
+                try {
+                    const instance = new mw();
+                    return instance.handle.bind(instance);
+                }
+                catch (e) {
+                    // If instantiation fails, assume it's a simple function middleware
+                    return mw;
+                }
+            }
+            return mw;
+        }
+        if (typeof mw === "object" && mw !== null && "handle" in mw) {
+            return mw.handle.bind(mw);
+        }
+        throw new TypeError("Middleware must be a function, a class constructor, or an object with a handle() method");
+    }
+}

package/templates/static/lib/middleware/registry.d.ts

@@ -0,0 +1,10 @@
+export class MiddlewareRegistry {
+    static instance: any;
+    static get(): any;
+    middleware: Map<any, any>;
+    groups: Map<any, any>;
+    register(name: any, mw: any): void;
+    get(name: any): any;
+    group(groupName: any, middlewareNames: any): void;
+    getGroup(groupName: any): any;
+}

package/templates/static/lib/middleware/registry.js

@@ -0,0 +1,41 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+export class MiddlewareRegistry {
+    static instance;
+    middleware = new Map();
+    groups = new Map();
+    constructor() { }
+    static get() {
+        if (!this.instance)
+            this.instance = new MiddlewareRegistry();
+        return this.instance;
+    }
+    register(name, mw) {
+        this.middleware.set(name, mw);
+    }
+    get(name) {
+        return this.middleware.get(name);
+    }
+    group(groupName, middlewareNames) {
+        this.groups.set(groupName, middlewareNames);
+    }
+    getGroup(groupName) {
+        const names = this.groups.get(groupName) || [];
+        return names.map((n) => this.get(n)).filter((m) => !!m);
+    }
+}

package/templates/static/lib/middleware/response.d.ts

@@ -0,0 +1,13 @@
+export class ResponseBuilder {
+    constructor(res: any);
+    statusCode: number;
+    headers: {};
+    body: null;
+    res: any;
+    status(code: any): this;
+    header(key: any, value: any): this;
+    json(data: any): this;
+    html(html: any): this;
+    text(text: any): this;
+    send(): void;
+}

package/templates/static/lib/middleware/response.js

@@ -0,0 +1,60 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+export class ResponseBuilder {
+    statusCode = 200;
+    headers = {};
+    body = null;
+    res;
+    constructor(res) {
+        this.res = res;
+    }
+    status(code) {
+        this.statusCode = code;
+        return this;
+    }
+    header(key, value) {
+        this.headers[key] = value;
+        return this;
+    }
+    json(data) {
+        this.header("Content-Type", "application/json");
+        this.body = JSON.stringify(data);
+        return this;
+    }
+    html(html) {
+        this.header("Content-Type", "text/html");
+        this.body = html;
+        return this;
+    }
+    text(text) {
+        this.header("Content-Type", "text/plain");
+        this.body = text;
+        return this;
+    }
+    send() {
+        if (this.res.writableEnded)
+            return;
+        this.res.writeHead(this.statusCode, this.headers);
+        if (this.body !== null && this.body !== undefined) {
+            this.res.end(this.body);
+        }
+        else {
+            this.res.end();
+        }
+    }
+}

package/templates/static/lib/middleware/types.d.ts

@@ -0,0 +1 @@
+export {};

package/templates/static/lib/middleware/types.js

@@ -0,0 +1,18 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+export {};

package/templates/static/lib/middleware/utils/matcher.d.ts

@@ -0,0 +1 @@
+export function matchPath(pattern: any, path: any): boolean;

package/templates/static/lib/middleware/utils/matcher.js

@@ -0,0 +1,31 @@
+/*
+ * This file is part of Jen.js.
+ * Copyright (C) 2026 oopsio
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+export function matchPath(pattern, path) {
+    if (pattern === "*")
+        return true;
+    if (pattern === path)
+        return true;
+    // Basic glob: * matches anything
+    const regexString = "^" +
+        pattern
+            .replace(/[.+?^${}()|[\\]/g, "\\$&") // escape regex characters
+            .replace(/\*/g, ".*") +
+        "$"; // convert * to .*
+    const regex = new RegExp(regexString);
+    return regex.test(path);
+}

package/templates/static/lib/native/bundle.d.ts

@@ -0,0 +1,19 @@
+import esbuild from "esbuild";
+export interface BundlerOptions {
+    entryPoint: string;
+    outdir?: string;
+    format?: "esm" | "cjs" | "iife";
+    minify?: boolean;
+    sourcemap?: boolean;
+}
+export declare function bundle(opts: BundlerOptions): Promise<esbuild.BuildResult<{
+    entryPoints: string[];
+    outdir: string;
+    format: "esm" | "iife" | "cjs";
+    minify: boolean;
+    sourcemap: boolean;
+    platform: "browser";
+    target: string;
+    logLevel: "info";
+}>>;
+export declare function bundleAssets(assetsDir: string, outdir: string): Promise<void>;