npm - mates-fullstack - Versions diffs - 1.0.0-beta.1 - Mend

mates-fullstack 1.0.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (202) hide show

package/README.md +311 -0
package/dist/arctic-auth.d.ts +101 -0
package/dist/arctic-auth.d.ts.map +1 -0
package/dist/arctic-auth.js +538 -0
package/dist/arctic-auth.js.map +1 -0
package/dist/asset-manifest.d.ts +14 -0
package/dist/asset-manifest.d.ts.map +1 -0
package/dist/asset-manifest.js +102 -0
package/dist/asset-manifest.js.map +1 -0
package/dist/browser.d.ts +18 -0
package/dist/browser.d.ts.map +1 -0
package/dist/browser.js +25 -0
package/dist/browser.js.map +1 -0
package/dist/build-esbuild.d.ts +29 -0
package/dist/build-esbuild.d.ts.map +1 -0
package/dist/build-esbuild.js +699 -0
package/dist/build-esbuild.js.map +1 -0
package/dist/build-prod.d.ts +126 -0
package/dist/build-prod.d.ts.map +1 -0
package/dist/build-prod.js +1014 -0
package/dist/build-prod.js.map +1 -0
package/dist/cli-new.d.ts +14 -0
package/dist/cli-new.d.ts.map +1 -0
package/dist/cli-new.js +637 -0
package/dist/cli-new.js.map +1 -0
package/dist/client.d.ts +43 -0
package/dist/client.d.ts.map +1 -0
package/dist/client.js +130 -0
package/dist/client.js.map +1 -0
package/dist/cors.d.ts +16 -0
package/dist/cors.d.ts.map +1 -0
package/dist/cors.js +60 -0
package/dist/cors.js.map +1 -0
package/dist/ctx.d.ts +78 -0
package/dist/ctx.d.ts.map +1 -0
package/dist/ctx.js +280 -0
package/dist/ctx.js.map +1 -0
package/dist/dev-watcher.d.ts +23 -0
package/dist/dev-watcher.d.ts.map +1 -0
package/dist/dev-watcher.js +136 -0
package/dist/dev-watcher.js.map +1 -0
package/dist/docs-generator.d.ts +69 -0
package/dist/docs-generator.d.ts.map +1 -0
package/dist/docs-generator.js +557 -0
package/dist/docs-generator.js.map +1 -0
package/dist/docs-page.d.ts +20 -0
package/dist/docs-page.d.ts.map +1 -0
package/dist/docs-page.js +1152 -0
package/dist/docs-page.js.map +1 -0
package/dist/download.d.ts +78 -0
package/dist/download.d.ts.map +1 -0
package/dist/download.js +202 -0
package/dist/download.js.map +1 -0
package/dist/env-loader.d.ts +76 -0
package/dist/env-loader.d.ts.map +1 -0
package/dist/env-loader.js +213 -0
package/dist/env-loader.js.map +1 -0
package/dist/errors.d.ts +146 -0
package/dist/errors.d.ts.map +1 -0
package/dist/errors.js +386 -0
package/dist/errors.js.map +1 -0
package/dist/head.d.ts +31 -0
package/dist/head.d.ts.map +1 -0
package/dist/head.js +245 -0
package/dist/head.js.map +1 -0
package/dist/index.d.ts +30 -0
package/dist/index.d.ts.map +1 -0
package/dist/index.js +30 -0
package/dist/index.js.map +1 -0
package/dist/internal-prefixes.d.ts +16 -0
package/dist/internal-prefixes.d.ts.map +1 -0
package/dist/internal-prefixes.js +16 -0
package/dist/internal-prefixes.js.map +1 -0
package/dist/internal.d.ts +25 -0
package/dist/internal.d.ts.map +1 -0
package/dist/internal.js +25 -0
package/dist/internal.js.map +1 -0
package/dist/jwt.d.ts +166 -0
package/dist/jwt.d.ts.map +1 -0
package/dist/jwt.js +261 -0
package/dist/jwt.js.map +1 -0
package/dist/log.d.ts +44 -0
package/dist/log.d.ts.map +1 -0
package/dist/log.js +66 -0
package/dist/log.js.map +1 -0
package/dist/logger.d.ts +76 -0
package/dist/logger.d.ts.map +1 -0
package/dist/logger.js +138 -0
package/dist/logger.js.map +1 -0
package/dist/main-runner.d.ts +59 -0
package/dist/main-runner.d.ts.map +1 -0
package/dist/main-runner.js +157 -0
package/dist/main-runner.js.map +1 -0
package/dist/mates-auth.d.ts +82 -0
package/dist/mates-auth.d.ts.map +1 -0
package/dist/mates-auth.js +323 -0
package/dist/mates-auth.js.map +1 -0
package/dist/middleware.d.ts +30 -0
package/dist/middleware.d.ts.map +1 -0
package/dist/middleware.js +67 -0
package/dist/middleware.js.map +1 -0
package/dist/project-resolver.d.ts +102 -0
package/dist/project-resolver.d.ts.map +1 -0
package/dist/project-resolver.js +271 -0
package/dist/project-resolver.js.map +1 -0
package/dist/rate-limit.d.ts +37 -0
package/dist/rate-limit.d.ts.map +1 -0
package/dist/rate-limit.js +109 -0
package/dist/rate-limit.js.map +1 -0
package/dist/redirect.d.ts +84 -0
package/dist/redirect.d.ts.map +1 -0
package/dist/redirect.js +105 -0
package/dist/redirect.js.map +1 -0
package/dist/renderer.d.ts +91 -0
package/dist/renderer.d.ts.map +1 -0
package/dist/renderer.js +630 -0
package/dist/renderer.js.map +1 -0
package/dist/request-logger.d.ts +12 -0
package/dist/request-logger.d.ts.map +1 -0
package/dist/request-logger.js +55 -0
package/dist/request-logger.js.map +1 -0
package/dist/rest.d.ts +25 -0
package/dist/rest.d.ts.map +1 -0
package/dist/rest.js +93 -0
package/dist/rest.js.map +1 -0
package/dist/router.d.ts +71 -0
package/dist/router.d.ts.map +1 -0
package/dist/router.js +222 -0
package/dist/router.js.map +1 -0
package/dist/rpc-registry.d.ts +84 -0
package/dist/rpc-registry.d.ts.map +1 -0
package/dist/rpc-registry.js +271 -0
package/dist/rpc-registry.js.map +1 -0
package/dist/rpc-runner.d.ts +82 -0
package/dist/rpc-runner.d.ts.map +1 -0
package/dist/rpc-runner.js +564 -0
package/dist/rpc-runner.js.map +1 -0
package/dist/sanitize.d.ts +61 -0
package/dist/sanitize.d.ts.map +1 -0
package/dist/sanitize.js +193 -0
package/dist/sanitize.js.map +1 -0
package/dist/security-headers.d.ts +114 -0
package/dist/security-headers.d.ts.map +1 -0
package/dist/security-headers.js +121 -0
package/dist/security-headers.js.map +1 -0
package/dist/server-fn.d.ts +323 -0
package/dist/server-fn.d.ts.map +1 -0
package/dist/server-fn.js +373 -0
package/dist/server-fn.js.map +1 -0
package/dist/server-public.d.ts +13 -0
package/dist/server-public.d.ts.map +1 -0
package/dist/server-public.js +12 -0
package/dist/server-public.js.map +1 -0
package/dist/server-timeout.d.ts +38 -0
package/dist/server-timeout.d.ts.map +1 -0
package/dist/server-timeout.js +46 -0
package/dist/server-timeout.js.map +1 -0
package/dist/server.d.ts +100 -0
package/dist/server.d.ts.map +1 -0
package/dist/server.js +1218 -0
package/dist/server.js.map +1 -0
package/dist/socket-router.d.ts +153 -0
package/dist/socket-router.d.ts.map +1 -0
package/dist/socket-router.js +612 -0
package/dist/socket-router.js.map +1 -0
package/dist/sso.d.ts +90 -0
package/dist/sso.d.ts.map +1 -0
package/dist/sso.js +261 -0
package/dist/sso.js.map +1 -0
package/dist/ssr-context.d.ts +49 -0
package/dist/ssr-context.d.ts.map +1 -0
package/dist/ssr-context.js +85 -0
package/dist/ssr-context.js.map +1 -0
package/dist/ssr-globals.d.ts +32 -0
package/dist/ssr-globals.d.ts.map +1 -0
package/dist/ssr-globals.js +1010 -0
package/dist/ssr-globals.js.map +1 -0
package/dist/ssr-template.d.ts +73 -0
package/dist/ssr-template.d.ts.map +1 -0
package/dist/ssr-template.js +507 -0
package/dist/ssr-template.js.map +1 -0
package/dist/stack-mapper.d.ts +25 -0
package/dist/stack-mapper.d.ts.map +1 -0
package/dist/stack-mapper.js +139 -0
package/dist/stack-mapper.js.map +1 -0
package/dist/stream.d.ts +89 -0
package/dist/stream.d.ts.map +1 -0
package/dist/stream.js +299 -0
package/dist/stream.js.map +1 -0
package/dist/upload.d.ts +69 -0
package/dist/upload.d.ts.map +1 -0
package/dist/upload.js +110 -0
package/dist/upload.js.map +1 -0
package/dist/validate.d.ts +58 -0
package/dist/validate.d.ts.map +1 -0
package/dist/validate.js +89 -0
package/dist/validate.js.map +1 -0
package/dist/verify-package.d.ts +3 -0
package/dist/verify-package.d.ts.map +1 -0
package/dist/verify-package.js +128 -0
package/dist/verify-package.js.map +1 -0
package/package.json +79 -0

package/dist/rpc-registry.js ADDED Viewed

@@ -0,0 +1,271 @@
+/**
+ * mates-fullstack — rpc-registry.ts
+ *
+ * Scans server/api/ and registers every exported async function as an RPC endpoint.
+ *
+ * URL derivation:
+ *   server/api/users.ts        + getUsers   → POST /api/users/getUsers
+ *   server/api/posts/index.ts  + getPosts   → POST /api/posts/getPosts
+ *   server/api/auth.ts         + login      → POST /api/auth/login
+ *
+ * The URL is also the test/Postman endpoint:
+ *   POST /api/users/getUsers
+ *   Content-Type: application/json
+ *   { "page": 0 }
+ *
+ * Rules for what gets registered:
+ *   ✅ Exported async functions
+ *   ✅ Plain exported functions (warned but registered)
+ *   ❌ default export (page component convention)
+ *   ❌ Non-function exports (types, constants)
+ *   ❌ Reserved names: loader, meta, layout, staticPaths, onConnect, onDisconnect
+ *   ❌ Functions named "then" or "catch" (conflicts with Promise protocol)
+ *   ❌ Files starting with _ or containing .test. / .spec.
+ *
+ * Dev mode:
+ *   Files are re-imported with a cache-busting timestamp on every rescan.
+ *   The watcher triggers a rescan on file add/remove/rename.
+ *   Content edits are picked up because the cache-bust forces a fresh import.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { devError, devWarn } from "./log.js";
+// ─── Reserved export names ────────────────────────────────────────────────────
+/**
+ * Export names that must never be registered as RPC functions.
+ * These are framework-level exports consumed by the SSR runtime or
+ * WebSocket handlers.
+ */
+const RESERVED_NAMES = new Set([
+    "default", // page component / module default
+    "loader", // SSR data loader
+    "meta", // page <head> metadata
+    "layout", // page layout wrapper
+    "staticPaths", // SSG static path list
+    "onConnect", // WebSocket lifecycle
+    "onDisconnect", // WebSocket lifecycle
+    "then", // conflicts with Promise protocol
+    "catch", // conflicts with Promise protocol
+    "finally", // conflicts with Promise protocol
+]);
+// ─── Registry ─────────────────────────────────────────────────────────────────
+/** url → RpcEntry */
+const _registry = new Map();
+/** Absolute path of the currently scanned apiDir */
+let _apiDir = null;
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Scan server/api/ and populate the registry.
+ * Call once at startup. In dev mode, call again after file changes
+ * or use watchRpcFunctions() for automatic rescanning.
+ */
+export async function scanRpcFunctions(apiDir, dev = false) {
+    if (!fs.existsSync(apiDir))
+        return;
+    _apiDir = apiDir;
+    _registry.clear();
+    const files = _collectFiles(apiDir);
+    for (const filePath of files) {
+        // Security: ensure resolved path stays inside apiDir
+        const absApi = path.resolve(apiDir);
+        const absFile = path.resolve(filePath);
+        if (!absFile.startsWith(absApi + path.sep) && absFile !== absApi) {
+            continue;
+        }
+        await _registerFile(apiDir, filePath, dev);
+    }
+}
+/**
+ * Look up a registered RPC function by its URL.
+ * Returns null if not found.
+ *
+ * @example
+ * lookupRpcFn("/api/users/getUsers")
+ */
+export function lookupRpcFn(url) {
+    // Normalize: strip query string if present
+    const pathname = url.split("?")[0];
+    return _registry.get(pathname) ?? null;
+}
+/**
+ * Returns all registered RPC entries.
+ * Used by the docs generator and startup logging.
+ */
+export function listRpcFunctions() {
+    return Array.from(_registry.values());
+}
+/**
+ * Returns the number of registered RPC functions.
+ */
+export function rpcRegistrySize() {
+    return _registry.size;
+}
+/**
+ * Clear the registry. Used before a rescan or in tests.
+ */
+export function clearRpcRegistry() {
+    _registry.clear();
+    _apiDir = null;
+}
+/**
+ * Watch server/api/ for file changes and trigger a rescan.
+ * Returns a cleanup function that stops the watcher.
+ *
+ * Only responds to file add/remove/rename events — content edits are
+ * handled by the cache-bust import in dev mode.
+ */
+export function watchRpcFunctions(apiDir, onChange) {
+    if (!fs.existsSync(apiDir))
+        return () => { };
+    let debounce = null;
+    const watcher = fs.watch(apiDir, { recursive: true }, (event, filename) => {
+        if (!filename)
+            return;
+        if (!_isApiFile(path.basename(filename)))
+            return;
+        if (debounce)
+            clearTimeout(debounce);
+        debounce = setTimeout(async () => {
+            await scanRpcFunctions(apiDir, true);
+            onChange(event, filename);
+        }, 50);
+    });
+    return () => {
+        if (debounce)
+            clearTimeout(debounce);
+        watcher.close();
+    };
+}
+// ─── URL derivation ───────────────────────────────────────────────────────────
+/**
+ * Derive the RPC URL for a function exported from a file.
+ *
+ * Examples (apiDir = /project/server/api):
+ *   /project/server/api/users.ts        + getUsers  → /api/users/getUsers
+ *   /project/server/api/posts/index.ts  + getPosts  → /api/posts/getPosts
+ *   /project/server/api/auth.ts         + login     → /api/auth/login
+ */
+export function deriveRpcUrl(apiDir, filePath, fnName) {
+    const rel = path.relative(apiDir, filePath);
+    const withoutExt = rel.replace(/\.(ts|js|tsx|jsx)$/, "");
+    // Normalize path separators to forward slash
+    let modulePath = withoutExt.split(path.sep).join("/");
+    // Drop trailing "index" — posts/index → posts
+    if (modulePath.endsWith("/index")) {
+        modulePath = modulePath.slice(0, -6);
+    }
+    else if (modulePath === "index") {
+        modulePath = "";
+    }
+    // Build: /api/{modulePath}/{fnName}
+    const parts = ["api"];
+    if (modulePath)
+        parts.push(modulePath);
+    parts.push(fnName);
+    return "/" + parts.join("/");
+}
+// ─── Internal ─────────────────────────────────────────────────────────────────
+async function _registerFile(apiDir, filePath, dev) {
+    // In dev mode, cache-bust so updated implementations are picked up
+    const importSpecifier = dev ? `${filePath}?t=${Date.now()}` : filePath;
+    let mod;
+    try {
+        mod = await import(importSpecifier);
+    }
+    catch (err) {
+        const message = `failed to import ${path.relative(apiDir, filePath)}: ${err?.message ?? err}`;
+        if (!dev)
+            throw new Error(message);
+        // In dev, log and keep the server alive so the developer can fix the file.
+        devError(message);
+        return;
+    }
+    let registered = 0;
+    const urlsSeen = new Set();
+    for (const [exportName, exportValue] of Object.entries(mod)) {
+        // Skip reserved names
+        if (RESERVED_NAMES.has(exportName))
+            continue;
+        // Skip non-functions
+        if (typeof exportValue !== "function")
+            continue;
+        // Skip non-async functions with a warning
+        // (async check: constructor.name === "AsyncFunction")
+        const isAsync = exportValue.constructor?.name === "AsyncFunction";
+        if (!isAsync) {
+            devWarn(`${path.relative(apiDir, filePath)}: ` +
+                `export "${exportName}" is not async — skipped. ` +
+                `RPC functions must be async.`);
+            continue;
+        }
+        const url = deriveRpcUrl(apiDir, filePath, exportName);
+        // Collision detection: two functions mapping to the same URL
+        if (_registry.has(url)) {
+            const existing = _registry.get(url);
+            if (existing.filePath !== filePath) {
+                // Different files, same URL — warn, first one wins
+                devWarn(`URL collision: ${url} is registered by both ` +
+                    `"${path.relative(apiDir, existing.filePath)}" and ` +
+                    `"${path.relative(apiDir, filePath)}" — ` +
+                    `first registration wins.`);
+                continue;
+            }
+            // Same file, same URL — shouldn't happen but skip silently
+            continue;
+        }
+        urlsSeen.add(url);
+        _registry.set(url, {
+            url,
+            filePath,
+            fnName: exportName,
+            fn: exportValue,
+        });
+        registered++;
+    }
+    // Warn if file only has HTTP method exports (GET/POST/etc.) — wrong folder
+    if (registered === 0) {
+        const httpMethods = ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD"];
+        const hasHttpExports = Object.keys(mod).some((k) => httpMethods.includes(k));
+        if (hasHttpExports) {
+            devWarn(`${path.relative(apiDir, filePath)} exports HTTP methods ` +
+                `(GET/POST/etc.) but no RPC functions. ` +
+                `mates-fullstack only exposes RPC functions from server/api/.`);
+        }
+    }
+}
+/**
+ * Recursively collect all api files under a directory.
+ */
+function _collectFiles(dir) {
+    const results = [];
+    _walk(dir, results);
+    return results;
+}
+function _walk(dir, out) {
+    let entries;
+    try {
+        entries = fs.readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            _walk(full, out);
+        }
+        else if (_isApiFile(entry.name)) {
+            out.push(full);
+        }
+    }
+}
+function _isApiFile(filename) {
+    if (filename.startsWith("_"))
+        return false;
+    if (filename.startsWith("."))
+        return false;
+    if (filename.includes(".test.") || filename.includes(".spec."))
+        return false;
+    return /\.(ts|js|tsx|jsx)$/.test(filename);
+}
+//# sourceMappingURL=rpc-registry.js.map

package/dist/rpc-registry.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"rpc-registry.js","sourceRoot":"","sources":["../src/rpc-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAe7C,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,SAAS,EAAE,kCAAkC;IAC7C,QAAQ,EAAE,kBAAkB;IAC5B,MAAM,EAAE,uBAAuB;IAC/B,QAAQ,EAAE,sBAAsB;IAChC,aAAa,EAAE,uBAAuB;IACtC,WAAW,EAAE,sBAAsB;IACnC,cAAc,EAAE,sBAAsB;IACtC,MAAM,EAAE,kCAAkC;IAC1C,OAAO,EAAE,kCAAkC;IAC3C,SAAS,EAAE,kCAAkC;CAC9C,CAAC,CAAC;AAEH,iFAAiF;AAEjF,qBAAqB;AACrB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;AAE9C,oDAAoD;AACpD,IAAI,OAAO,GAAkB,IAAI,CAAC;AAElC,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,GAAG,GAAG,KAAK;IAEX,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO;IAEnC,OAAO,GAAG,MAAM,CAAC;IACjB,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAEpC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,qDAAqD;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACjE,SAAS;QACX,CAAC;QAED,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,SAAS,CAAC,IAAI,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,GAAG,IAAI,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,QAAmD;IAEnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAE5C,IAAI,QAAQ,GAAyC,IAAI,CAAC;IAE1D,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QACxE,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO;QAEjD,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QACrC,QAAQ,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACrC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5B,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,EAAE;QACV,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,QAAgB,EAChB,MAAc;IAEd,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAEzD,6CAA6C;IAC7C,IAAI,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEtD,8CAA8C;IAC9C,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAClC,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,oCAAoC;IACpC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEnB,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,aAAa,CAC1B,MAAc,EACd,QAAgB,EAChB,GAAY;IAEZ,mEAAmE;IACnE,MAAM,eAAe,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEvE,IAAI,GAA4B,CAAC;IAEjC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,oBAAoB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC9F,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,2EAA2E;QAC3E,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,sBAAsB;QACtB,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAE7C,qBAAqB;QACrB,IAAI,OAAO,WAAW,KAAK,UAAU;YAAE,SAAS;QAEhD,0CAA0C;QAC1C,sDAAsD;QACtD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,IAAI,KAAK,eAAe,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CACL,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI;gBACpC,WAAW,UAAU,4BAA4B;gBACjD,8BAA8B,CACjC,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEvD,6DAA6D;QAC7D,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YACrC,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnC,mDAAmD;gBACnD,OAAO,CACL,kBAAkB,GAAG,yBAAyB;oBAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;oBACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACzC,0BAA0B,CAC7B,CAAC;gBACF,SAAS;YACX,CAAC;YACD,2DAA2D;YAC3D,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE;YACjB,GAAG;YACH,QAAQ;YACR,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,WAAmD;SACxD,CAAC,CAAC;QAEH,UAAU,EAAE,CAAC;IACf,CAAC;IAED,2EAA2E;IAC3E,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACjD,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CACxB,CAAC;QACF,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CACL,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,wBAAwB;gBACxD,wCAAwC;gBACxC,8DAA8D,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,GAAa;IACvC,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnB,CAAC;aAAM,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,OAAO,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC"}

package/dist/rpc-runner.d.ts ADDED Viewed

@@ -0,0 +1,82 @@
+/**
+ * mates-fullstack — rpc-runner.ts
+ *
+ * Executes a registered RPC function for an incoming HTTP request.
+ *
+ * Execution pipeline per request:
+ *   1. Read + size-check request body
+ *   2. Parse payload (JSON or multipart/form-data)
+ *   3. Create Context from request headers
+ *   4. Run onRequest hooks (registered in server/main.ts)
+ *      - throws          → error response sent, onResponse SKIPPED
+ *      - returns Response → that response sent, onResponse RUNS
+ *      - returns nothing  → continue
+ *   5. Run entry.fn(payload, ctx)
+ *      - throws          → error response sent, onResponse SKIPPED
+ *      - returns data    → onResponse hooks run, then response sent
+ *   6. Detect return type → route to correct response writer:
+ *      - StreamResponse → SSE
+ *      - Download       → binary attachment
+ *      - void/null/undefined → {} 200
+ *      - anything else  → JSON 200
+ *   7. Run onResponse hooks (with data + ctx)
+ *   8. Apply ctx.resHeaders to the response
+ *
+ * Error handling:
+ *   - Redirect throw     → 302 JSON { __type: "Redirect", url, status }
+ *   - ServerError throw  → 4xx/5xx JSON { __type, message, status, code, ...}
+ *   - Plain Error throw  → 500, message hidden in production
+ *   - Unknown throw      → 500, "Internal Server Error"
+ *
+ * Body limits:
+ *   - JSON:      1MB default (MAX_JSON_BYTES)
+ *   - Multipart: 10MB default (MAX_UPLOAD_BYTES)
+ */
+/// <reference types="node" />
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { RpcEntry } from "./rpc-registry.js";
+export interface RpcRunnerConfig {
+    /** Maximum JSON request body size. Default: 1MB */
+    maxJsonBytes?: number;
+    /** Maximum allowed object depth in JSON payloads. Default: 50 */
+    maxJsonDepth?: number;
+    /** Maximum allowed array length in JSON payloads. Default: 10_000 */
+    maxArrayLength?: number;
+    /** Maximum allowed length for any string value. Default: 100_000 */
+    maxStringLength?: number;
+    /** Maximum multipart/form-data upload size. Default: 10MB */
+    maxUploadBytes?: number;
+    /** Maximum number of multipart parts. Default: 200 */
+    maxMultipartParts?: number;
+}
+/**
+ * Configure RPC runner limits. Call once at startup.
+ * All values are optional — only provided values override the defaults.
+ */
+export declare function configureRpcRunner(config: RpcRunnerConfig): void;
+/** Request timeout in milliseconds: 30 seconds */
+export declare const DEFAULT_TIMEOUT_MS = 30000;
+/**
+ * Handle a single RPC request end-to-end.
+ * Never throws under any circumstances.
+ * All errors — including unexpected framework bugs — produce a JSON error response.
+ */
+export declare function runRpcRequest(req: IncomingMessage, res: ServerResponse, entry: RpcEntry, dev: boolean, timeoutMs?: number,
+/** Pre-populated ctx from the outer request handler. When supplied, auth
+ * and other middleware state already applied via onRequest are shared. */
+sharedCtx?: import("./ctx.js").Context): Promise<void>;
+/**
+ * Read and parse the request body.
+ *
+ * Handles:
+ *   - application/json        → JSON.parse
+ *   - multipart/form-data     → FormData-like object with File entries
+ *   - no content-type         → attempt JSON parse, fallback to {}
+ *   - empty body              → {}
+ *
+ * Throws with .status set for:
+ *   - Body too large (413)
+ *   - Malformed JSON (400)
+ */
+export declare function parseRpcBody(req: IncomingMessage): Promise<unknown>;
+//# sourceMappingURL=rpc-runner.d.ts.map

package/dist/rpc-runner.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"rpc-runner.d.ts","sourceRoot":"","sources":["../src/rpc-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AA2BlD,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAWD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAahE;AA0CD,kDAAkD;AAClD,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAIzC;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,QAAQ,EACf,GAAG,EAAE,OAAO,EACZ,SAAS,SAAqB;AAC9B;0EAC0E;AAC1E,SAAS,CAAC,EAAE,OAAO,UAAU,EAAE,OAAO,GACrC,OAAO,CAAC,IAAI,CAAC,CA4Cf;AA0ID;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAEzE"}