elegance-js 2.1.36 → 3.0.0

package/dist/server/security.js

@@ -0,0 +1,120 @@
+function makeCSPString(cspOptions) {
+  const parts = [];
+  const addDirective = (name, values) => {
+    if (values && values.length > 0) {
+      parts.push(`${name} ${values.join(" ")}`);
+    }
+  };
+  addDirective("default-src", cspOptions.defaultSrc);
+  addDirective("child-src", cspOptions.childSrc);
+  addDirective("connect-src", cspOptions.connectSrc);
+  addDirective("font-src", cspOptions.fontSrc);
+  addDirective("frame-src", cspOptions.frameSrc);
+  addDirective("img-src", cspOptions.imgSrc);
+  addDirective("manifest-src", cspOptions.manifestSrc);
+  addDirective("media-src", cspOptions.mediaSrc);
+  addDirective("object-src", cspOptions.objectSrc);
+  addDirective("prefetch-src", cspOptions.prefetchSrc);
+  addDirective("script-src", cspOptions.scriptSrc);
+  addDirective("script-src-elem", cspOptions.scriptSrcElem);
+  addDirective("script-src-attr", cspOptions.scriptSrcAttr);
+  addDirective("style-src", cspOptions.styleSrc);
+  addDirective("style-src-elem", cspOptions.styleSrcElem);
+  addDirective("style-src-attr", cspOptions.styleSrcAttr);
+  addDirective("worker-src", cspOptions.workerSrc);
+  addDirective("base-uri", cspOptions.baseUri);
+  addDirective("form-action", cspOptions.formAction);
+  addDirective("frame-ancestors", cspOptions.frameAncestors);
+  addDirective("navigate-to", cspOptions.navigateTo);
+  addDirective("sandbox", cspOptions.sandbox);
+  addDirective("report-uri", cspOptions.reportUri);
+  addDirective("require-trusted-types-for", cspOptions.requireTrustedTypesFor);
+  addDirective("trusted-types", cspOptions.trustedTypes);
+  if (cspOptions.reportTo) {
+    parts.push(`report-to ${cspOptions.reportTo}`);
+  }
+  if (cspOptions.upgradeInsecureRequests) {
+    parts.push("upgrade-insecure-requests");
+  }
+  if (cspOptions.blockAllMixedContent) {
+    parts.push("block-all-mixed-content");
+  }
+  return parts.join("; ");
+}
+function makeHSTSHeader(opts) {
+  let header = `max-age=${opts.maxAge}`;
+  if (opts.includeSubDomains) header += "; includeSubDomains";
+  if (opts.preload) header += "; preload";
+  return header;
+}
+function makeXFrameOptionsHeader(value) {
+  return value;
+}
+function makeXContentTypeOptionsHeader() {
+  return "nosniff";
+}
+function makeReferrerPolicyHeader(policy) {
+  return policy;
+}
+function makePermissionsPolicyHeader(policies) {
+  return Object.entries(policies).map(([feature, origins]) => `${feature}=${origins.join(" ")}`).join(", ");
+}
+function makeCrossOriginEmbedderPolicyHeader(value) {
+  return value;
+}
+function makeCrossOriginOpenerPolicyHeader(value) {
+  return value;
+}
+function makeCrossOriginResourcePolicyHeader(value) {
+  return value;
+}
+function makeXDNSPrefetchControlHeader(value) {
+  return value;
+}
+function makeXXSSProtectionHeader(opts) {
+  if (!opts.enable) return "0";
+  let header = "1";
+  if (opts.mode === "block") header += "; mode=block";
+  if (opts.report) header += `; report=${opts.report}`;
+  return header;
+}
+function createSecurityHeaders(opts) {
+  const headers = {};
+  if (opts.contentSecurityPolicy) {
+    headers["Content-Security-Policy"] = makeCSPString(opts.contentSecurityPolicy);
+  }
+  if (opts.strictTransportSecurity) {
+    headers["Strict-Transport-Security"] = makeHSTSHeader(opts.strictTransportSecurity);
+  }
+  if (opts.xFrameOptions) {
+    headers["X-Frame-Options"] = makeXFrameOptionsHeader(opts.xFrameOptions);
+  }
+  if (opts.xContentTypeOptions) {
+    headers["X-Content-Type-Options"] = makeXContentTypeOptionsHeader();
+  }
+  if (opts.referrerPolicy) {
+    headers["Referrer-Policy"] = makeReferrerPolicyHeader(opts.referrerPolicy);
+  }
+  if (opts.permissionsPolicy) {
+    headers["Permissions-Policy"] = makePermissionsPolicyHeader(opts.permissionsPolicy);
+  }
+  if (opts.crossOriginEmbedderPolicy) {
+    headers["Cross-Origin-Embedder-Policy"] = makeCrossOriginEmbedderPolicyHeader(opts.crossOriginEmbedderPolicy);
+  }
+  if (opts.crossOriginOpenerPolicy) {
+    headers["Cross-Origin-Opener-Policy"] = makeCrossOriginOpenerPolicyHeader(opts.crossOriginOpenerPolicy);
+  }
+  if (opts.crossOriginResourcePolicy) {
+    headers["Cross-Origin-Resource-Policy"] = makeCrossOriginResourcePolicyHeader(opts.crossOriginResourcePolicy);
+  }
+  if (opts.xDnsPrefetchControl) {
+    headers["X-DNS-Prefetch-Control"] = makeXDNSPrefetchControlHeader(opts.xDnsPrefetchControl);
+  }
+  if (opts.xXssProtection) {
+    headers["X-XSS-Protection"] = makeXXSSProtectionHeader(opts.xXssProtection);
+  }
+  return headers;
+}
+export {
+  createSecurityHeaders
+};

package/dist/server/server.d.ts

@@ -1,103 +1,77 @@
-/**
- * The Elegance.JS server.
- * This server can be used to run your project.
- *
- * It's HTTP only, so if you want HTTPS, use a proxy.
- */
-import { CompiledLayout, CompiledPage } from "../compilation/compiler";
-import { LayoutInformation } from "./layout";
-import { PageInformation } from "./page";
-import { IncomingMessage, ServerResponse } from "http";
-import { URLSearchParams } from "url";
-type ServerOptions = {
-    /** If a port is not available, it will increment the port +1 in a loop until it finds a valid one. */
-    port: number;
-    hostname: string;
-    /** Whether or not to use the built-in api handler. */
+import { IncomingMessage, ServerResponse } from "node:http";
+import type { CompiledRoute, Manifest, CacheKey } from "../build/common";
+export type ServerOptions = {
     serveAPI: boolean;
-    /**
-     * Setting this to true allows dynamic pages to be compiled whenever a user requests them.
-     */
-    allowDynamic: boolean;
-    /**
-     * Setting this to true will make statuscode pages like 404.ts be returned in-favor of simple HTTP error codes.
-     */
+    allowDynamicPages: boolean;
     allowStatusCodePages: boolean;
-    /**
-     * If basename is /my-website/, and the user makes a request to `/my-website/home`,
-     * the page that we will look for will be `/home`.
-     */
-    base?: string;
-    /** These are gathered by the compiler, you just need to pass them in. */
-    allLayouts: Map<string, LayoutInformation>;
-    /** These are gathered by the compiler, you just need to pass them in. */
-    allPages: Map<string, PageInformation>;
-    /** These are gathered by the compiler, you just need to pass them in. */
-    allStatusCodePages: Map<string, PageInformation>;
-    /** These are gathered by the compiler, you just need to pass them in. */
-    builtStaticPages: Map<string, CompiledPage>;
-    /** These are gathered by the compiler, you just need to pass them in. */
-    builtStaticLayouts: Map<string, CompiledLayout>;
-};
-type ServerStartupResult = {
-    /** The port that we ended up actually using (might differ from the one given, if it was not available) */
     port: number;
 };
-/**
- * Starts the Elegance server and distributes the DIST directory to the public.
- * If hot-reloading is enabled, this also tells the clients to refresh the page.
- */
-declare function serveProject(startupServerOptions: ServerOptions): Promise<ServerStartupResult>;
-/** Get the current query as `URLSearchParams` */
-declare function getQuery(): URLSearchParams;
-/** Get the current page's request and response. */
-declare function getRequest(): {
-    req: IncomingMessage;
-    res: ServerResponse;
-};
-/**
- * Get the cookies for the current request.
- * Requires a dynamic page.
- */
-declare function getCookieStore(): {
-    /**
-     * Get a cookie value by name
-     */
-    get(name: string): string | undefined;
-    /**
-     * Check if a cookie exists
-     */
-    has(name: string): boolean;
-    /**
-     * Get all cookies as a plain object
-     */
-    getAll(): Record<string, string>;
-    /**
-     * Set a cookie
-     *
-     * @param name Cookie name
-     * @param value Cookie value
-     * @param options Optional cookie attributes
-     */
-    set(name: string, value: string, options?: {
-        maxAge?: number;
-        expires?: Date;
-        path?: string;
-        domain?: string;
-        secure?: boolean;
-        httpOnly?: boolean;
-        sameSite?: "Strict" | "Lax" | "None";
-    }): void;
-    /**
-     * Delete a cookie (sets it to expire immediately)
-     */
-    delete(name: string, path?: string, domain?: string): void;
-};
-declare function redirect(location: string, statusCode?: number): void;
-declare const respondWith: {
-    notFound(): Promise<void>;
-    notAuthorized(): Promise<void>;
-    forbidden(): Promise<void>;
-    internalError(): Promise<void>;
-};
-export { serveProject, getQuery, getRequest, getCookieStore, redirect, respondWith };
+interface ApiRouteModule {
+    GET?: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>;
+    POST?: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>;
+    PUT?: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>;
+    DELETE?: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>;
+    PATCH?: (req: IncomingMessage, res: ServerResponse) => void | Promise<void>;
+}
+type MiddlewareFn = (req: IncomingMessage, res: ServerResponse, next: () => Promise<void>) => void | Promise<void>;
+interface CachedFileHeaders {
+    raw: Record<string, string | number>;
+    gzip: Record<string, string | number>;
+    brotli: Record<string, string | number>;
+}
+interface CachedFile {
+    raw: Buffer;
+    gzip: Buffer;
+    brotli: Buffer;
+    mime: string;
+    etag: string;
+    headers: CachedFileHeaders;
+}
+export interface MatchedRoute {
+    pathname: string;
+    pageFile: string;
+    layouts: string[];
+    layoutCacheKeys: CacheKey[];
+    cacheKey: CacheKey;
+    sharedChunkPaths: string[];
+    isDynamic: boolean;
+    patternPathname?: string | undefined;
+    matcher: (pathname: string) => Record<string, string | string[] | undefined> | null;
+}
+declare class LRU<K, V> {
+    private readonly max;
+    private readonly map;
+    constructor(max: number);
+    get(key: K): V | undefined;
+    set(key: K, val: V): void;
+    has(key: K): boolean;
+    delete(key: K): void;
+}
+export declare const staticCache: Map<string, CachedFile>;
+export declare const dynamicModuleCache: LRU<string, CompiledRoute>;
+export declare const aotStaticCache: Map<string, CompiledRoute>;
+export declare const statusCodePageCache: Map<string, {
+    compiled: CompiledRoute;
+    pageFile: string;
+    layouts: string[];
+    layoutCacheKeys: CacheKey[];
+    cacheKey: CacheKey;
+}>;
+export declare const middlewareChainCache: Map<string, MiddlewareFn[]>;
+export declare const encCache: LRU<string, Encoding>;
+export declare let staticRouteMap: Map<string, MatchedRoute> | null;
+export declare let paramRoutes: MatchedRoute[] | null;
+export declare let apiRoutesCache: Map<string, ApiRouteModule> | null;
+export declare let middlewareMapCache: Map<string, MiddlewareFn[]> | null;
+export declare function primeStaticCache(): Promise<void>;
+export declare function compileRouteMatcher(pattern: string): (pathname: string) => Record<string, string | string[] | undefined> | null;
+export declare function warmDynamicCaches(manifest: Manifest): Promise<{
+    staticRouteMap: Map<string, MatchedRoute>;
+    paramRoutes: MatchedRoute[];
+}>;
+export declare function loadApiRoutes(manifest: Manifest): Promise<Map<string, ApiRouteModule>>;
+export declare function loadMiddlewareMap(manifest: Manifest): Promise<Map<string, MiddlewareFn[]>>;
+type Encoding = "br" | "gzip" | null;
+export declare function serve(): Promise<void>;
+export {};
+//# sourceMappingURL=server.d.ts.map

package/dist/server/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAiB1E,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAc,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AASrF,MAAM,MAAM,aAAa,GAAG;IACxB,QAAQ,EAAc,OAAO,CAAC;IAC9B,iBAAiB,EAAK,OAAO,CAAC;IAC9B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,IAAI,EAAkB,MAAM,CAAC;CAChC,CAAC;AAYF,UAAU,cAAc;IACpB,GAAG,CAAC,EAAK,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,CAAC,EAAI,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,GAAG,CAAC,EAAK,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,KAAK,CAAC,EAAG,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChF;AAED,KAAK,YAAY,GAAG,CAChB,GAAG,EAAG,eAAe,EACrB,GAAG,EAAG,cAAc,EACpB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KACxB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,UAAU,iBAAiB;IACvB,GAAG,EAAK,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACxC,IAAI,EAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CAC3C;AAED,UAAU,UAAU;IAChB,GAAG,EAAM,MAAM,CAAC;IAChB,IAAI,EAAK,MAAM,CAAC;IAChB,MAAM,EAAG,MAAM,CAAC;IAChB,IAAI,EAAK,MAAM,CAAC;IAChB,IAAI,EAAK,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IACzB,QAAQ,EAAW,MAAM,CAAC;IAC1B,QAAQ,EAAW,MAAM,CAAC;IAC1B,OAAO,EAAY,MAAM,EAAE,CAAC;IAC5B,eAAe,EAAI,QAAQ,EAAE,CAAC;IAC9B,QAAQ,EAAW,QAAQ,CAAC;IAC5B,gBAAgB,EAAG,MAAM,EAAE,CAAC;IAC5B,SAAS,EAAU,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAG,MAAM,GAAG,SAAS,CAAC;IACtC,OAAO,EAAY,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;CACjG;AAED,cAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IAEE,OAAO,CAAC,QAAQ,CAAC,GAAG;IADhC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;gBACV,GAAG,EAAE,MAAM;IAExC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,SAAS;IAQ1B,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI;IAMzB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO;IACpB,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI;CACvB;AAED,eAAO,MAAM,WAAW,yBAAuC,CAAC;AAChE,eAAO,MAAM,kBAAkB,4BAAsC,CAAC;AACtE,eAAO,MAAM,cAAc,4BAAuC,CAAC;AACnE,eAAO,MAAM,mBAAmB;cACX,aAAa;cACb,MAAM;aACN,MAAM,EAAE;qBACR,QAAQ,EAAE;cACV,QAAQ;EACzB,CAAC;AACL,eAAO,MAAM,oBAAoB,6BAAoC,CAAC;AACtE,eAAO,MAAM,QAAQ,uBAA2C,CAAC;AAEjE,eAAO,IAAI,cAAc,EAAK,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,IAAW,CAAC;AACtE,eAAO,IAAI,WAAW,EAAQ,YAAY,EAAE,GAAG,IAAsB,CAAC;AACtE,eAAO,IAAI,cAAc,EAAK,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAW,CAAC;AACxE,eAAO,IAAI,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,IAAW,CAAC;AA+CzE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CA4BtD;AAED,wBAAgB,mBAAmB,CAC/B,OAAO,EAAE,MAAM,GAChB,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAgD5E;AA2BD,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC;IACjE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC1C,WAAW,EAAK,YAAY,EAAE,CAAC;CAClC,CAAC,CA6ED;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAU5F;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAwBhG;AAsCD,KAAK,QAAQ,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;AAsmBrC,wBAAsB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB3C"}