weifuwu 0.22.1 → 0.22.3

package/dist/kb.d.ts

@@ -0,0 +1,70 @@
+import type { Sql } from './vendor.ts';
+import type { Middleware } from './types.ts';
+export interface KBOptions {
+    /** Postgres SQL client (with pgvector extension enabled). */
+    sql: Sql<{}>;
+    /**
+     * Embedding function.
+     * Takes a text string, returns a vector of numbers.
+     * Example: (text) => embed({ model: openai.embedding('text-embedding-3-small'), value: text }).then(r => r.embedding)
+     */
+    embedding: (text: string) => Promise<number[]>;
+    /** Vector dimensions (default: 1536 for text-embedding-3-small). */
+    dimensions?: number;
+    /** Table name (default: '_kb_docs'). */
+    table?: string;
+    /** Default chunk size in characters (default: 512). */
+    chunkSize?: number;
+    /** Default chunk overlap in characters (default: 64). */
+    chunkOverlap?: number;
+    /** Default search limit (default: 5). */
+    searchLimit?: number;
+    /** Minimum similarity score threshold (0–1, default: 0). Set higher for stricter matches. */
+    searchThreshold?: number;
+}
+export interface KBIngestOptions {
+    title?: string;
+    metadata?: Record<string, unknown>;
+    chunkSize?: number;
+    chunkOverlap?: number;
+}
+export interface KBSearchResult {
+    id: number;
+    key: string;
+    title: string;
+    content: string;
+    score: number;
+    metadata: Record<string, unknown>;
+}
+export interface KBSearchOptions {
+    limit?: number;
+    /** Minimum cosine similarity score (0–1). Results below this are excluded. */
+    threshold?: number;
+}
+export interface KBListEntry {
+    key: string;
+    title: string;
+    chunks: number;
+}
+export interface KBModule {
+    /**
+     * Ingest a document: chunk → embed → store.
+     * If a document with the same key exists, it is replaced (delete + re-insert).
+     * Returns the number of chunks created.
+     */
+    ingest(key: string, content: string, options?: KBIngestOptions): Promise<number>;
+    /**
+     * Search the knowledge base by semantic similarity.
+     * Query is embedded, then vector similarity search returns top results.
+     */
+    search(query: string, searchOptions?: KBSearchOptions): Promise<KBSearchResult[]>;
+    /** Delete all chunks for a document key. */
+    delete(key: string): Promise<void>;
+    /** List all document keys with title and chunk count. */
+    list(): Promise<KBListEntry[]>;
+    /** Create the table and HNSW index. Safe to call multiple times. */
+    migrate(): Promise<void>;
+    /** Middleware that injects `ctx.kb` with `.search()` method. */
+    middleware(): Middleware;
+}
+export declare function knowledgeBase(options: KBOptions): KBModule;

package/dist/oauth-client.d.ts

@@ -0,0 +1,41 @@
+import type { PostgresClient } from './postgres/types.ts';
+import { Router } from './router.ts';
+export interface OAuthProviderConfig {
+    clientId: string;
+    clientSecret: string;
+    scope?: string;
+    /** Custom auth URL (overrides built-in provider default). */
+    authUrl?: string;
+    /** Custom token URL (overrides built-in provider default). */
+    tokenUrl?: string;
+    /** Custom user info URL (overrides built-in provider default). */
+    userUrl?: string;
+    /**
+     * Custom user parser.
+     * Required when any of authUrl/tokenUrl/userUrl is custom.
+     * Receives the raw response from userUrl + the access token.
+     */
+    parseUser?: (data: any, accessToken: string) => ProviderUser;
+}
+export interface OAuthClientOptions {
+    /** Postgres client (required). */
+    pg: PostgresClient;
+    /** JWT secret — must match user() module's jwtSecret. */
+    jwtSecret: string;
+    /** JWT expiry (default: '24h'). */
+    expiresIn?: string | number;
+    /** Where to redirect after successful login (default: '/'). */
+    redirectUrl?: string;
+    /** Provider configurations. */
+    providers: Record<string, OAuthProviderConfig>;
+    /** Table name for provider-user links (default: '_auth_providers'). */
+    table?: string;
+}
+interface ProviderUser {
+    id: string;
+    email: string;
+    name: string;
+    avatarUrl?: string;
+}
+export declare function oauthClient(options: OAuthClientOptions): Router;
+export {};

package/dist/s3.d.ts

@@ -0,0 +1,68 @@
+import { S3Client } from '@aws-sdk/client-s3';
+import type { Middleware } from './types.ts';
+import type { Readable } from 'node:stream';
+declare module './types.ts' {
+    interface Context {
+        s3: S3Module;
+    }
+}
+export interface S3Options {
+    /** S3 bucket name. Required. */
+    bucket: string;
+    /** AWS region. Default: 'us-east-1'. */
+    region?: string;
+    /** Custom endpoint (MinIO, Cloudflare R2, Backblaze B2, etc.). */
+    endpoint?: string;
+    /** Force path-style addressing (required for MinIO, some private clouds). */
+    forcePathStyle?: boolean;
+    /** AWS credentials. Falls back to AWS env vars / IAM role if omitted. */
+    credentials?: {
+        accessKeyId: string;
+        secretAccessKey: string;
+    };
+    /**
+     * Base public URL for unsigned URLs.
+     * When set, `s3.url(key, { expiresIn: 0 })` returns a public URL.
+     * Example: 'https://cdn.example.com' or 'https://pub-xxx.r2.dev'
+     */
+    publicUrl?: string;
+}
+export interface S3PutOptions {
+    /** Content-Type of the object. */
+    contentType?: string;
+    /** Cache-Control header value. */
+    cacheControl?: string;
+    /** User-defined metadata (prefix x-amz-meta-). */
+    metadata?: Record<string, string>;
+}
+export interface S3UrlOptions {
+    /**
+     * Signed URL expiry in seconds.
+     * Default: 3600 (1 hour).
+     * Set to 0 to return an unsigned public URL (requires `publicUrl` option).
+     */
+    expiresIn?: number;
+}
+export interface S3Module {
+    /** Upload a file. Returns the key. */
+    put(key: string, body: S3Body, options?: S3PutOptions): Promise<string>;
+    /** Download a file. Returns the body as Buffer, or null if not found. */
+    get(key: string): Promise<Buffer | null>;
+    /** Delete a file. */
+    delete(key: string): Promise<void>;
+    /** Check if a file exists. */
+    exists(key: string): Promise<boolean>;
+    /**
+     * Generate a URL for an object.
+     * - If `expiresIn` > 0 (default): returns a signed URL with that expiry.
+     * - If `expiresIn` === 0 and `publicUrl` is configured: returns an unsigned
+     *   public URL. Throws if `publicUrl` is not set.
+     */
+    url(key: string, options?: S3UrlOptions): Promise<string>;
+    /** List object keys under a prefix. */
+    list(prefix?: string): Promise<string[]>;
+    /** The underlying S3Client (for advanced usage). */
+    client: S3Client;
+}
+export type S3Body = Buffer | Uint8Array | string | ReadableStream | Readable;
+export declare function s3(options: S3Options): S3Module & Middleware;

package/dist/serve.d.ts

@@ -17,7 +17,7 @@ export interface ServeOptions {
     shutdown?: boolean;
 }
 export interface Server {
-    stop: () => Promise<void>;
+    stop: (timeoutMs?: number) => Promise<void>;
     readonly port: number;
     readonly hostname: string;
     ready: Promise<void>;

package/dist/session.d.ts

@@ -50,6 +50,18 @@ export interface SessionOptions {
         secure?: boolean;
         sameSite?: 'strict' | 'lax' | 'none';
     };
+    /**
+     * Secret for signing the session cookie with HMAC-SHA256.
+     * When set, the cookie value becomes `sid.signature` — tampering is detected
+     * and rejected. Strongly recommended in production.
+     */
+    secret?: string;
+    /**
+     * Interval (ms) for automatic session ID rotation.
+     * Rotating the ID mitigates session fixation attacks.
+     * Default: 900_000 (15 min). Set to 0 to disable.
+     */
+    rotateInterval?: number;
 }
 export interface SessionInjected {
     session: Session;

package/dist/test-utils.d.ts

@@ -38,16 +38,16 @@ export declare class TestApp {
     constructor();
     /** Add global middleware */
     use(mw: any): this;
-    /** Register a GET route */
-    get(path: string, handler: Handler): this;
-    /** Register a POST route */
-    post(path: string, handler: Handler): this;
-    /** Register a PUT route */
-    put(path: string, handler: Handler): this;
-    /** Register a PATCH route */
-    patch(path: string, handler: Handler): this;
-    /** Register a DELETE route */
-    delete(path: string, handler: Handler): this;
+    /** Register a GET route — supports route-level middleware via spread args. */
+    get(path: string, ...args: any[]): this;
+    /** Register a POST route. */
+    post(path: string, ...args: any[]): this;
+    /** Register a PUT route. */
+    put(path: string, ...args: any[]): this;
+    /** Register a PATCH route. */
+    patch(path: string, ...args: any[]): this;
+    /** Register a DELETE route. */
+    delete(path: string, ...args: any[]): this;
     /** Start building a GET request */
     getReq(path: string): TestRequest;
     /** Start building a POST request */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "weifuwu",
-  "version": "0.22.1",
+  "version": "0.22.3",
   "description": "Web-standard HTTP framework for Node.js — (req, ctx) => Response",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -28,6 +28,8 @@
   },
   "dependencies": {
     "@ai-sdk/openai": "^3.0.66",
+    "@aws-sdk/client-s3": "^3.1068.0",
+    "@aws-sdk/s3-request-presigner": "^3.1068.0",
     "@graphql-tools/schema": "^10",
     "@tailwindcss/postcss": "^4",
     "ai": "^6",