rouzer 1.0.0-beta.12 → 1.0.0-beta.14

package/dist/server/router.d.ts

@@ -1,6 +1,5 @@
-import type { AdapterRequestContext } from '@hattip/core';
 import { type Params } from '@remix-run/route-pattern';
-import { chain, MiddlewareChain, type MiddlewareContext } from 'alien-middleware';
+import { chain, MiddlewareChain, type HattipContext, type MiddlewareContext } from 'alien-middleware';
 import * as z from 'zod/mini';
 import type { InferRouteResponse, MutationMethod, Promisable, QueryMethod, Routes } from '../types.js';
 export { chain };
@@ -95,7 +94,7 @@ export declare function createRouter<TRoutes extends Routes, TMiddleware extends
     } ? z.infer<T["path"]> : Params<TRoutes[K]["path"]["source"]>;
     body: z.infer<T["body"]>;
     headers: z.infer<T["headers"]>;
-}) => Promisable<Response | InferRouteResponse<T>> : never : never : never; }; }) => import("alien-middleware").ApplyMiddleware<TMiddleware, (context: AdapterRequestContext<TMiddleware extends MiddlewareChain<infer T extends {
+}) => Promisable<Response | InferRouteResponse<T>> : never : never : never; }; }) => import("alien-middleware").ApplyMiddleware<TMiddleware, (context: HattipContext<TMiddleware extends MiddlewareChain<infer T extends {
     initial: {
         env: object;
         properties: object;
@@ -105,7 +104,7 @@ export declare function createRouter<TRoutes extends Routes, TMiddleware extends
         properties: object;
     };
     platform: unknown;
-}> ? T["platform"] : never> & {
+}> ? T["platform"] : never, any> & {
     url?: URL | undefined;
     path?: {} | undefined;
 }) => Promise<Response | undefined>>;

package/dist/server/router.js

@@ -23,6 +23,12 @@ export function createRouter(config) {
     });
     return (handlers) => middlewares.use(async function (context) {
         const request = context.request;
+        const origin = request.headers.get('Origin');
+        if (origin &&
+            allowOrigins &&
+            !allowOrigins.some(pattern => pattern.test(origin))) {
+            return new Response(null, { status: 403 });
+        }
         const url = (context.url ??= new URL(request.url));
         let method = request.method.toUpperCase();
         let isPreflight = false;
@@ -47,11 +53,6 @@ export function createRouter(config) {
                 continue;
             }
             if (isPreflight) {
-                const origin = request.headers.get('Origin');
-                if (allowOrigins &&
-                    !(origin && allowOrigins.some(pattern => pattern.test(origin)))) {
-                    return new Response(null, { status: 403 });
-                }
                 return new Response(null, {
                     headers: {
                         'Access-Control-Allow-Origin': origin ?? '*',
@@ -60,6 +61,9 @@ export function createRouter(config) {
                     },
                 });
             }
+            if (origin) {
+                context.setHeader('Access-Control-Allow-Origin', origin);
+            }
             if (route.path) {
                 const error = parsePathParams(context, enableStringParsing(route.path), match.params);
                 if (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rouzer",
-  "version": "1.0.0-beta.12",
+  "version": "1.0.0-beta.14",
   "type": "module",
   "exports": {
     ".": {
@@ -22,7 +22,7 @@
   "dependencies": {
     "@hattip/core": "^0.0.49",
     "@remix-run/route-pattern": "^0.15.3",
-    "alien-middleware": "^0.10.2"
+    "alien-middleware": "^0.10.3"
   },
   "prettier": "@alloc/prettier-config",
   "license": "MIT",

package/readme.md

@@ -39,6 +39,17 @@ The following request parts can be validated with Zod:
 
 Zod validation happens on both the server and client.
 
+## Route URL patterns
+
+Rouzer uses `@remix-run/route-pattern` for matching and generation. Patterns can include:
+
+- Pathname-only patterns like `blog/:slug` (default).
+- Full URLs with protocol/hostname/port like `https://:store.shopify.com/orders`.
+- Dynamic segments with `:param` names (valid JS identifiers), including multiple params in one segment like `v:major.:minor`.
+- Optional segments wrapped in parentheses, which can be nested like `api(/v:major(.:minor))`.
+- Wildcards with `*name` (captured) or `*` (uncaptured) for multi-segment paths like `assets/*path` or `files/*`.
+- Query matching with `?` to require parameters or exact values like `search?q` or `search?q=routing`.
+
 ## Server router
 
 ```ts
@@ -66,6 +77,34 @@ export const handler = createRouter({
 })
 ```
 
+## Router options
+
+```ts
+export const handler = createRouter({
+  routes,
+  middlewares,
+  basePath: 'api/',
+  cors: {
+    allowOrigins: ['example.net', 'https://*.example.com', '*://localhost:3000'],
+  },
+  debug: process.env.NODE_ENV === 'development',
+})({
+  helloRoute: {
+    GET(ctx) {
+      const message = `Hello, ${ctx.path.name}${ctx.query.excited ? '!' : '.'}`
+      return { message }
+    },
+  },
+})
+```
+
+- `basePath` is prepended to every route (leading/trailing slashes are trimmed).
+- CORS preflight (`OPTIONS`) is handled automatically for matched routes.
+- `cors.allowOrigins` restricts preflight requests to a list of origins (default is to allow any origin).
+  - Wildcards are supported for protocol and subdomain; the protocol is optional and defaults to `https`.
+- If you rely on `Cookie` or `Authorization` request headers, you must set
+  `Access-Control-Allow-Credentials` in your handler.
+
 ## Client wrapper
 
 ```ts