solidstep 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +18 -0
  3. package/client.d.ts +4 -0
  4. package/client.d.ts.map +1 -0
  5. package/client.js +91 -0
  6. package/index.d.ts +11 -0
  7. package/index.d.ts.map +1 -0
  8. package/index.js +97 -0
  9. package/package.json +58 -0
  10. package/server.d.ts +3 -0
  11. package/server.d.ts.map +1 -0
  12. package/server.js +666 -0
  13. package/utils/cache.d.ts +5 -0
  14. package/utils/cache.d.ts.map +1 -0
  15. package/utils/cache.js +97 -0
  16. package/utils/cookies.d.ts +5 -0
  17. package/utils/cookies.d.ts.map +1 -0
  18. package/utils/cookies.js +13 -0
  19. package/utils/cors.d.ts +14 -0
  20. package/utils/cors.d.ts.map +1 -0
  21. package/utils/cors.js +15 -0
  22. package/utils/csp.d.ts +38 -0
  23. package/utils/csp.d.ts.map +1 -0
  24. package/utils/csp.js +165 -0
  25. package/utils/csrf.d.ts +5 -0
  26. package/utils/csrf.d.ts.map +1 -0
  27. package/utils/csrf.js +46 -0
  28. package/utils/error-handler.d.ts +37 -0
  29. package/utils/error-handler.d.ts.map +1 -0
  30. package/utils/error-handler.js +40 -0
  31. package/utils/fetch.client.d.ts +23 -0
  32. package/utils/fetch.client.d.ts.map +1 -0
  33. package/utils/fetch.client.js +55 -0
  34. package/utils/fetch.server.d.ts +22 -0
  35. package/utils/fetch.server.d.ts.map +1 -0
  36. package/utils/fetch.server.js +54 -0
  37. package/utils/hooks/action-state.d.ts +3 -0
  38. package/utils/hooks/action-state.d.ts.map +1 -0
  39. package/utils/hooks/action-state.js +13 -0
  40. package/utils/loader.d.ts +18 -0
  41. package/utils/loader.d.ts.map +1 -0
  42. package/utils/loader.js +23 -0
  43. package/utils/redirect.d.ts +5 -0
  44. package/utils/redirect.d.ts.map +1 -0
  45. package/utils/redirect.js +14 -0
  46. package/utils/router.d.ts +104 -0
  47. package/utils/router.d.ts.map +1 -0
  48. package/utils/router.js +258 -0
  49. package/utils/server-action.client.d.ts +2 -0
  50. package/utils/server-action.client.d.ts.map +1 -0
  51. package/utils/server-action.client.js +200 -0
  52. package/utils/server-action.server.d.ts +5 -0
  53. package/utils/server-action.server.d.ts.map +1 -0
  54. package/utils/server-action.server.js +264 -0
  55. package/utils/server-only.d.ts +2 -0
  56. package/utils/server-only.d.ts.map +1 -0
  57. package/utils/server-only.js +4 -0
  58. package/utils/types.d.ts +8 -0
  59. package/utils/types.d.ts.map +1 -0
  60. package/utils/types.js +1 -0
@@ -0,0 +1,200 @@
1
+ import fetch from './fetch.client';
2
+ import { deserialize, toJSONAsync } from 'seroval';
3
+ import { CustomEventPlugin, DOMExceptionPlugin, EventPlugin, FormDataPlugin, HeadersPlugin, ReadableStreamPlugin, RequestPlugin, ResponsePlugin, URLPlugin, URLSearchParamsPlugin } from 'seroval-plugins/web';
4
+ class SerovalChunkReader {
5
+ reader;
6
+ buffer;
7
+ done;
8
+ constructor(stream) {
9
+ this.reader = stream.getReader();
10
+ this.buffer = new Uint8Array(0);
11
+ this.done = false;
12
+ }
13
+ async readChunk() {
14
+ // if there's no chunk, read again
15
+ const chunk = await this.reader.read();
16
+ if (!chunk.done) {
17
+ // repopulate the buffer
18
+ let newBuffer = new Uint8Array(this.buffer.length + chunk.value.length);
19
+ newBuffer.set(this.buffer);
20
+ newBuffer.set(chunk.value, this.buffer.length);
21
+ this.buffer = newBuffer;
22
+ }
23
+ else {
24
+ this.done = true;
25
+ }
26
+ }
27
+ async next() {
28
+ // Check if the buffer is empty
29
+ if (this.buffer.length === 0) {
30
+ // if we are already done...
31
+ if (this.done) {
32
+ return {
33
+ done: true,
34
+ value: undefined
35
+ };
36
+ }
37
+ // Otherwise, read a new chunk
38
+ await this.readChunk();
39
+ return await this.next();
40
+ }
41
+ // Read the "byte header"
42
+ // The byte header tells us how big the expected data is
43
+ // so we know how much data we should wait before we
44
+ // deserialize the data
45
+ const head = new TextDecoder().decode(this.buffer.subarray(1, 11));
46
+ const bytes = Number.parseInt(head, 16); // ;0x00000000;
47
+ if (Number.isNaN(bytes)) {
48
+ throw new Error(`Malformed server function stream header: ${head}`);
49
+ }
50
+ // Check if the buffer has enough bytes to be parsed
51
+ while (bytes > this.buffer.length - 12) {
52
+ // If it's not enough, and the reader is done
53
+ // then the chunk is invalid.
54
+ if (this.done) {
55
+ throw new Error('Malformed server function stream.');
56
+ }
57
+ // Otherwise, we read more chunks
58
+ await this.readChunk();
59
+ }
60
+ // Extract the exact chunk as defined by the byte header
61
+ const partial = new TextDecoder().decode(this.buffer.subarray(12, 12 + bytes));
62
+ // The rest goes to the buffer
63
+ this.buffer = this.buffer.subarray(12 + bytes);
64
+ // Deserialize the chunk
65
+ return {
66
+ done: false,
67
+ value: deserialize(partial)
68
+ };
69
+ }
70
+ async drain() {
71
+ while (true) {
72
+ const result = await this.next();
73
+ if (result.done) {
74
+ break;
75
+ }
76
+ }
77
+ }
78
+ }
79
+ async function deserializeStream(id, response) {
80
+ if (!response.body) {
81
+ throw new Error('missing body');
82
+ }
83
+ const reader = new SerovalChunkReader(response.body);
84
+ const result = await reader.next();
85
+ if (!result.done) {
86
+ reader.drain().then(() => {
87
+ // @ts-ignore
88
+ delete $R[id];
89
+ }, () => {
90
+ // no-op
91
+ });
92
+ }
93
+ return result.value;
94
+ }
95
+ let INSTANCE = 0;
96
+ function createRequest(base, id, instance, options) {
97
+ return fetch(base, {
98
+ method: 'POST',
99
+ ...options,
100
+ headers: {
101
+ ...options.headers,
102
+ 'X-Server-Id': id,
103
+ 'X-Server-Instance': instance,
104
+ 'server-action': id,
105
+ },
106
+ serverAction: true,
107
+ }, false);
108
+ }
109
+ const plugins = [
110
+ CustomEventPlugin,
111
+ DOMExceptionPlugin,
112
+ EventPlugin,
113
+ FormDataPlugin,
114
+ HeadersPlugin,
115
+ ReadableStreamPlugin,
116
+ RequestPlugin,
117
+ ResponsePlugin,
118
+ URLSearchParamsPlugin,
119
+ URLPlugin
120
+ ];
121
+ async function fetchServerFunction(base, id, options, args) {
122
+ const instance = `server-fn:${INSTANCE++}`;
123
+ const response = await (args.length === 0
124
+ ? createRequest(base, id, instance, options)
125
+ : args.length === 1 && args[0] instanceof FormData
126
+ ? createRequest(base, id, instance, { ...options, body: args[0] })
127
+ : args.length === 1 && args[0] instanceof URLSearchParams
128
+ ? createRequest(base, id, instance, {
129
+ ...options,
130
+ body: args[0],
131
+ headers: { ...options.headers, 'Content-Type': 'application/x-www-form-urlencoded' }
132
+ })
133
+ : createRequest(base, id, instance, {
134
+ ...options,
135
+ body: JSON.stringify(await Promise.resolve(toJSONAsync(args, { plugins }))),
136
+ headers: { ...options.headers, 'Content-Type': 'application/json' }
137
+ }));
138
+ if (response.headers.has('Location') ||
139
+ response.headers.has('X-Revalidate') ||
140
+ response.headers.has('X-Single-Flight')) {
141
+ if (response.body) {
142
+ /* @ts-ignore-next-line */
143
+ response.customBody = () => {
144
+ return deserializeStream(instance, response);
145
+ };
146
+ }
147
+ return response;
148
+ }
149
+ const contentType = response.headers.get('Content-Type');
150
+ let result;
151
+ if (contentType && contentType.startsWith('text/plain')) {
152
+ result = await response.text();
153
+ }
154
+ else if (contentType && contentType.startsWith('application/json')) {
155
+ result = await response.json();
156
+ }
157
+ else {
158
+ result = await deserializeStream(instance, response);
159
+ }
160
+ if (response.headers.has('X-Error')) {
161
+ if (result.name === 'RedirectError') {
162
+ window.location.href = result.message;
163
+ }
164
+ throw result;
165
+ }
166
+ return result;
167
+ }
168
+ export function createServerReference(fn, id, name) {
169
+ const baseURL = import.meta.env.SERVER_BASE_URL;
170
+ return new Proxy(fn, {
171
+ get(target, prop, receiver) {
172
+ if (prop === 'url') {
173
+ return `${baseURL}/_server?id=${encodeURIComponent(id)}&name=${encodeURIComponent(name)}`;
174
+ }
175
+ if (prop === 'GET') {
176
+ return receiver.withOptions({ method: 'GET' });
177
+ }
178
+ if (prop === 'withOptions') {
179
+ const url = `${baseURL}/_server/?id=${encodeURIComponent(id)}&name=${encodeURIComponent(name)}`;
180
+ return (options) => {
181
+ const fn = async (...args) => {
182
+ const encodeArgs = options.method && options.method.toUpperCase() === 'GET';
183
+ return fetchServerFunction(encodeArgs
184
+ ? url +
185
+ (args.length
186
+ ? `&args=${encodeURIComponent(JSON.stringify(await Promise.resolve(toJSONAsync(args, { plugins }))))}`
187
+ : '')
188
+ : `${baseURL}/_server`, `${id}#${name}`, options, encodeArgs ? [] : args);
189
+ };
190
+ fn.url = url;
191
+ return fn;
192
+ };
193
+ }
194
+ return target[prop];
195
+ },
196
+ apply(target, thisArg, args) {
197
+ return fetchServerFunction(`${baseURL}/_server`, `${id}#${name}`, {}, args);
198
+ }
199
+ });
200
+ }
@@ -0,0 +1,5 @@
1
+ import { type HTTPEvent } from 'vinxi/http';
2
+ export declare function handleServerFunction(event: HTTPEvent): Promise<unknown>;
3
+ declare const _default: import("vinxi/http").EventHandler<import("vinxi/http").EventHandlerRequest, Promise<unknown>>;
4
+ export default _default;
5
+ //# sourceMappingURL=server-action.server.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"server-action.server.d.ts","sourceRoot":"","sources":["../../utils/server-action.server.ts"],"names":[],"mappings":"AAgBA,OAAO,EAIN,KAAK,SAAS,EAWd,MAAM,YAAY,CAAC;AAoHpB,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,SAAS,oBAqK1D;;AAED,wBAAkD"}
@@ -0,0 +1,264 @@
1
+ /// <reference types='vinxi/types/server' />
2
+ import { crossSerializeStream, fromJSON, getCrossReferenceHeader } from 'seroval';
3
+ import { CustomEventPlugin, DOMExceptionPlugin, EventPlugin, FormDataPlugin, HeadersPlugin, ReadableStreamPlugin, RequestPlugin, ResponsePlugin, URLPlugin, URLSearchParamsPlugin } from 'seroval-plugins/web';
4
+ import { sharedConfig } from 'solid-js';
5
+ import { provideRequestEvent } from 'solid-js/web/storage';
6
+ import { eventHandler, setHeader, setResponseStatus, appendResponseHeader, toWebRequest, getWebRequest, getRequestIP, getResponseStatus, getResponseStatusText, getResponseHeader, getResponseHeaders, removeResponseHeader, setResponseHeader } from 'vinxi/http';
7
+ import invariant from 'vinxi/lib/invariant';
8
+ import { getManifest } from 'vinxi/manifest';
9
+ import { RedirectError } from './redirect';
10
+ function createChunk(data) {
11
+ const encodeData = new TextEncoder().encode(data);
12
+ const bytes = encodeData.length;
13
+ const baseHex = bytes.toString(16);
14
+ const totalHex = '00000000'.substring(0, 8 - baseHex.length) + baseHex; // 32-bit
15
+ const head = new TextEncoder().encode(`;0x${totalHex};`);
16
+ const chunk = new Uint8Array(12 + bytes);
17
+ chunk.set(head);
18
+ chunk.set(encodeData, 12);
19
+ return chunk;
20
+ }
21
+ function serializeToStream(id, value) {
22
+ return new ReadableStream({
23
+ start(controller) {
24
+ crossSerializeStream(value, {
25
+ scopeId: id,
26
+ plugins: [
27
+ CustomEventPlugin,
28
+ DOMExceptionPlugin,
29
+ EventPlugin,
30
+ FormDataPlugin,
31
+ HeadersPlugin,
32
+ ReadableStreamPlugin,
33
+ RequestPlugin,
34
+ ResponsePlugin,
35
+ URLSearchParamsPlugin,
36
+ URLPlugin
37
+ ],
38
+ onSerialize(data, initial) {
39
+ controller.enqueue(createChunk(initial ? `(${getCrossReferenceHeader(id)},${data})` : data));
40
+ },
41
+ onDone() {
42
+ controller.close();
43
+ },
44
+ onError(error) {
45
+ controller.error(error);
46
+ }
47
+ });
48
+ }
49
+ });
50
+ }
51
+ class HeaderProxy {
52
+ event;
53
+ constructor(event) {
54
+ this.event = event;
55
+ }
56
+ get(key) {
57
+ const h = getResponseHeader(this.event, key);
58
+ return Array.isArray(h) ? h.join(', ') : h || null;
59
+ }
60
+ has(key) {
61
+ return this.get(key) !== undefined;
62
+ }
63
+ set(key, value) {
64
+ return setResponseHeader(this.event, key, value);
65
+ }
66
+ delete(key) {
67
+ return removeResponseHeader(this.event, key);
68
+ }
69
+ append(key, value) {
70
+ appendResponseHeader(this.event, key, value);
71
+ }
72
+ getSetCookie() {
73
+ const cookies = getResponseHeader(this.event, 'Set-Cookie');
74
+ return Array.isArray(cookies) ? cookies : [cookies];
75
+ }
76
+ forEach(fn) {
77
+ return Object.entries(getResponseHeaders(this.event)).forEach(([key, value]) => fn(Array.isArray(value) ? value.join(', ') : value, key, this));
78
+ }
79
+ entries() {
80
+ return Object.entries(getResponseHeaders(this.event))
81
+ .map(([key, value]) => [key, Array.isArray(value) ? value.join(', ') : value])[Symbol.iterator]();
82
+ }
83
+ keys() {
84
+ return Object.keys(getResponseHeaders(this.event))[Symbol.iterator]();
85
+ }
86
+ values() {
87
+ return Object.values(getResponseHeaders(this.event))
88
+ .map(value => (Array.isArray(value) ? value.join(', ') : value))[Symbol.iterator]();
89
+ }
90
+ [Symbol.iterator]() {
91
+ return this.entries()[Symbol.iterator]();
92
+ }
93
+ }
94
+ function createResponseStub(event) {
95
+ return {
96
+ get status() {
97
+ return getResponseStatus(event);
98
+ },
99
+ set status(v) {
100
+ setResponseStatus(event, v);
101
+ },
102
+ get statusText() {
103
+ return getResponseStatusText(event);
104
+ },
105
+ set statusText(v) {
106
+ setResponseStatus(event, getResponseStatus(event), v);
107
+ },
108
+ headers: new HeaderProxy(event)
109
+ };
110
+ }
111
+ export async function handleServerFunction(event) {
112
+ const request = toWebRequest(event);
113
+ const serverReference = request.headers.get('X-Server-Id');
114
+ const instance = request.headers.get('X-Server-Instance');
115
+ const url = new URL(request.url);
116
+ let functionId;
117
+ let name;
118
+ if (serverReference) {
119
+ invariant(typeof serverReference === 'string', 'Invalid server function');
120
+ [functionId, name] = serverReference.split('#');
121
+ }
122
+ else {
123
+ functionId = url.searchParams.get('id');
124
+ name = url.searchParams.get('name');
125
+ if (!functionId || !name) {
126
+ return process.env.NODE_ENV === 'development'
127
+ ? new Response('Server function not found', { status: 404 })
128
+ : new Response(null, { status: 404 });
129
+ }
130
+ }
131
+ const serverFunction = (await getManifest(import.meta.env.ROUTER_NAME).chunks[functionId].import())[name];
132
+ let parsed = [];
133
+ // grab bound arguments from url when no JS
134
+ if (!instance || event.method === 'GET') {
135
+ const args = url.searchParams.get('args');
136
+ if (args) {
137
+ const json = JSON.parse(args);
138
+ (json.t
139
+ ? fromJSON(json, {
140
+ plugins: [
141
+ CustomEventPlugin,
142
+ DOMExceptionPlugin,
143
+ EventPlugin,
144
+ FormDataPlugin,
145
+ HeadersPlugin,
146
+ ReadableStreamPlugin,
147
+ RequestPlugin,
148
+ ResponsePlugin,
149
+ URLSearchParamsPlugin,
150
+ URLPlugin
151
+ ]
152
+ })
153
+ : json).forEach((arg) => parsed.push(arg));
154
+ }
155
+ }
156
+ if (event.method === 'POST') {
157
+ const contentType = request.headers.get('content-type');
158
+ const h3Request = event.node.req;
159
+ // This should never be the case in 'proper' Nitro presets since node.req has to be IncomingMessage,
160
+ // But the new azure-functions preset for some reason uses a ReadableStream in node.req (#1521)
161
+ const isReadableStream = h3Request instanceof ReadableStream;
162
+ const hasReadableStream = h3Request.body instanceof ReadableStream;
163
+ const isH3EventBodyStreamLocked = (isReadableStream && h3Request.locked) ||
164
+ (hasReadableStream && h3Request.body.locked);
165
+ const requestBody = isReadableStream ? h3Request : h3Request.body;
166
+ if (contentType?.startsWith('multipart/form-data') ||
167
+ contentType?.startsWith('application/x-www-form-urlencoded')) {
168
+ // workaround for https://github.com/unjs/nitro/issues/1721
169
+ // (issue only in edge runtimes and netlify preset)
170
+ parsed.push(await (isH3EventBodyStreamLocked
171
+ ? request
172
+ : new Request(request, { ...request, body: requestBody })).formData());
173
+ // what should work when #1721 is fixed
174
+ // parsed.push(await request.formData);
175
+ }
176
+ else if (contentType?.startsWith('application/json')) {
177
+ // workaround for https://github.com/unjs/nitro/issues/1721
178
+ // (issue only in edge runtimes and netlify preset)
179
+ const tmpReq = isH3EventBodyStreamLocked
180
+ ? request
181
+ : new Request(request, { ...request, body: requestBody });
182
+ // what should work when #1721 is fixed
183
+ // just use request.json() here
184
+ parsed = fromJSON(await tmpReq.json(), {
185
+ plugins: [
186
+ CustomEventPlugin,
187
+ DOMExceptionPlugin,
188
+ EventPlugin,
189
+ FormDataPlugin,
190
+ HeadersPlugin,
191
+ ReadableStreamPlugin,
192
+ RequestPlugin,
193
+ ResponsePlugin,
194
+ URLSearchParamsPlugin,
195
+ URLPlugin
196
+ ]
197
+ });
198
+ }
199
+ }
200
+ try {
201
+ let result = await provideRequestEvent({
202
+ request: getWebRequest(event),
203
+ response: createResponseStub(event),
204
+ clientAddress: getRequestIP(event),
205
+ locals: {},
206
+ nativeEvent: event
207
+ }, async () => {
208
+ sharedConfig.context = { event };
209
+ event.locals.serverFunctionMeta = {
210
+ id: `${functionId}#${name}`
211
+ };
212
+ return serverFunction(...parsed);
213
+ });
214
+ // handle responses
215
+ if (result instanceof Response) {
216
+ if (result.headers?.has('X-Content-Raw'))
217
+ return result;
218
+ if (instance) {
219
+ // forward headers
220
+ // if (result.headers) mergeResponseHeaders(event, result.headers);
221
+ // forward non-redirect statuses
222
+ if (result.status && (result.status < 300 || result.status >= 400))
223
+ setResponseStatus(event, result.status);
224
+ if (result.customBody) {
225
+ result = await result.customBody();
226
+ }
227
+ else if (result.body === undefined)
228
+ result = null;
229
+ }
230
+ }
231
+ setHeader(event, 'content-type', 'text/javascript');
232
+ return serializeToStream(instance, result);
233
+ }
234
+ catch (x) {
235
+ if (x instanceof Response) {
236
+ // forward headers
237
+ // if ((x as any).headers) mergeResponseHeaders(event, (x as any).headers);
238
+ // forward non-redirect statuses
239
+ if (x.status && (!instance || x.status < 300 || x.status >= 400))
240
+ setResponseStatus(event, x.status);
241
+ if (x.customBody) {
242
+ // biome-ignore lint/suspicious/noCatchAssign: <explanation>
243
+ x = x.customBody();
244
+ // biome-ignore lint/suspicious/noCatchAssign: <explanation>
245
+ }
246
+ else if (x.body === undefined)
247
+ x = null;
248
+ setHeader(event, 'X-Error', 'true');
249
+ }
250
+ else if (instance) {
251
+ const error = x instanceof Error ? x.message : typeof x === 'string' ? x : 'true';
252
+ setHeader(event, 'X-Error', error.replace(/[\r\n]+/g, ''));
253
+ if (!(x instanceof RedirectError)) {
254
+ setResponseStatus(event, 500);
255
+ }
256
+ }
257
+ if (instance) {
258
+ setHeader(event, 'content-type', 'text/javascript');
259
+ return serializeToStream(instance, x);
260
+ }
261
+ return x;
262
+ }
263
+ }
264
+ export default eventHandler(handleServerFunction);
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=server-only.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"server-only.d.ts","sourceRoot":"","sources":["../../utils/server-only.ts"],"names":[],"mappings":""}
@@ -0,0 +1,4 @@
1
+ import { isServer } from 'solid-js/web';
2
+ if (!isServer) {
3
+ throw new Error('This module is only available on the server side.');
4
+ }
@@ -0,0 +1,8 @@
1
+ export type Meta = {
2
+ [key: string]: {
3
+ type: 'link' | 'meta' | 'script' | 'style' | 'title';
4
+ attributes: Record<string, string>;
5
+ content?: string;
6
+ };
7
+ };
8
+ //# sourceMappingURL=types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../utils/types.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,IAAI,GAAG;IACf,CAAC,GAAG,EAAE,MAAM,GAAG;QACX,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;QACrD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACL,CAAC"}
package/utils/types.js ADDED
@@ -0,0 +1 @@
1
+ export {};