@arkyn/server 3.0.9 → 3.0.10

package/dist/modules/http/api/_logRequest.js

@@ -1,31 +1,31 @@
 import { flushDebugLogs as e } from "../../utilities/flushDebugLogs.js";
-import { LogService as t } from "../../services/logService.js";
-import { SENSITIVE_DATA_KEYS as n } from "../../utilities/sensitiveDataKeys.js";
+import { SENSITIVE_DATA_KEYS as t } from "../../utilities/sensitiveDataKeys.js";
+import { LogService as n } from "../../services/logService.js";
 import { formatJsonObject as r, parseSensitiveData as i } from "@arkyn/shared";
 //#region src/http/api/_logRequest.ts
 async function a(a) {
-	let o = t.getConfig();
+	let o = n.getConfig();
 	if (!o) return;
 	let { userToken: s, apiUrl: c, trafficSourceId: l } = o;
 	if (!c) return;
 	let { elapsedTime: u, method: d, queryParams: f, requestBody: p, requestHeaders: m, responseBody: h, responseHeaders: g, status: _, rawUrl: v } = a;
 	if (process.env.NODE_ENV !== "development") try {
-		let t = new URL(v), a = "https";
-		t.protocol === "http:" && (a = "http");
+		let n = new URL(v), a = "https";
+		n.protocol === "http:" && (a = "http");
 		let o = JSON.stringify({
-			domainUrl: `${t.protocol}//${t.host}`,
-			pathnameUrl: t.pathname,
+			domainUrl: `${n.protocol}//${n.host}`,
+			pathnameUrl: n.pathname,
 			trafficSourceId: l,
 			status: _,
 			protocol: a,
 			method: d.toLowerCase(),
 			trafficUserId: null,
 			elapsedTime: u,
-			requestHeaders: i(JSON.stringify(m), [...n]),
-			requestBody: i(JSON.stringify(p), [...n]),
+			requestHeaders: i(JSON.stringify(m), [...t]),
+			requestBody: i(JSON.stringify(p), [...t]),
 			queryParams: JSON.stringify(f),
-			responseHeaders: i(JSON.stringify(g), [...n]),
-			responseBody: i(JSON.stringify(h), [...n])
+			responseHeaders: i(JSON.stringify(g), [...t]),
+			responseBody: i(JSON.stringify(h), [...t])
 		}), y = {
 			"Content-Type": "application/json",
 			Authorization: `Bearer ${s}`

package/dist/modules/http/badResponses/_badResponse.js

@@ -8,6 +8,7 @@ var r = class {
 	_status = 500;
 	_statusText = "Unknown error";
 	_debugColor = "red";
+	exposeCauseInProduction = !1;
 	get cause() {
 		return this._cause;
 	}
@@ -52,10 +53,11 @@ var r = class {
 		});
 	}
 	makeBody() {
+		let e = process.env.NODE_ENV === "production" && !this.exposeCauseInProduction;
 		return {
 			name: this._name,
 			message: this._statusText,
-			cause: this._cause
+			cause: e ? void 0 : this._cause
 		};
 	}
 };

package/dist/modules/http/badResponses/_badResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"_badResponse.js","names":[],"sources":["../../../../src/http/badResponses/_badResponse.ts"],"sourcesContent":["import { formatJsonString } from \"@arkyn/shared\";\n\nimport { DebugService } from \"../../services/debugService\";\nimport { flushDebugLogs } from \"../../utilities/flushDebugLogs\";\n\nclass BadResponse {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tprivate _cause?: any;\n\tprivate _name: string = \"BadResponse\";\n\tprivate _status: number = 500;\n\tprivate _statusText: string = \"Unknown error\";\n\tprivate _debugColor: \"green\" | \"yellow\" | \"cyan\" | \"red\" = \"red\";\n\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tget cause(): any {\n\t\treturn this._cause;\n\t}\n\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tset cause(value: any) {\n\t\tthis._cause = value;\n\t}\n\n\tget name(): string {\n\t\treturn this._name;\n\t}\n\n\tset name(value: string) {\n\t\tthis._name = value;\n\t}\n\n\tget status(): number {\n\t\treturn this._status;\n\t}\n\n\tset status(value: number) {\n\t\tthis._status = value;\n\t}\n\n\tget statusText(): string {\n\t\treturn this._statusText;\n\t}\n\n\tset statusText(value: string) {\n\t\tthis._statusText = value;\n\t}\n\n\tget debugColor(): \"green\" | \"yellow\" | \"cyan\" | \"red\" {\n\t\treturn this._debugColor;\n\t}\n\n\tset debugColor(value: \"green\" | \"yellow\" | \"cyan\" | \"red\") {\n\t\tif (![\"green\", \"yellow\", \"cyan\", \"red\"].includes(value)) return;\n\t\tthis._debugColor = value;\n\t}\n\n\tonDebug() {\n\t\tconst debugs: string[] = [];\n\t\tconst { callerInfo, functionName } = DebugService.getCaller();\n\n\t\tdebugs.push(`Caller Function: ${functionName}`);\n\t\tdebugs.push(`Caller Location: ${callerInfo}`);\n\n\t\tif (this._statusText) debugs.push(`Message: ${this._statusText}`);\n\t\tif (this._cause) {\n\t\t\tdebugs.push(`Cause: ${formatJsonString(JSON.stringify(this._cause))}`);\n\t\t}\n\n\t\tflushDebugLogs({ scheme: \"red\", name: this._name, debugs });\n\t}\n\n\tmakeBody() {\n\t\treturn {\n\t\t\tname: this._name,\n\t\t\tmessage: this._statusText,\n\t\t\tcause: this._cause,\n\t\t};\n\t}\n}\n\nexport { BadResponse };\n"],"mappings":";;;;AAKA,IAAM,IAAN,MAAkB;CAEjB;CACA,QAAwB;CACxB,UAA0B;CAC1B,cAA8B;CAC9B,cAA2D;CAG3D,IAAI,QAAa;EAChB,OAAO,KAAK;CACb;CAGA,IAAI,MAAM,GAAY;EACrB,KAAK,SAAS;CACf;CAEA,IAAI,OAAe;EAClB,OAAO,KAAK;CACb;CAEA,IAAI,KAAK,GAAe;EACvB,KAAK,QAAQ;CACd;CAEA,IAAI,SAAiB;EACpB,OAAO,KAAK;CACb;CAEA,IAAI,OAAO,GAAe;EACzB,KAAK,UAAU;CAChB;CAEA,IAAI,aAAqB;EACxB,OAAO,KAAK;CACb;CAEA,IAAI,WAAW,GAAe;EAC7B,KAAK,cAAc;CACpB;CAEA,IAAI,aAAkD;EACrD,OAAO,KAAK;CACb;CAEA,IAAI,WAAW,GAA4C;EACrD;GAAC;GAAS;GAAU;GAAQ;EAAK,CAAC,CAAC,SAAS,CAAK,MACtD,KAAK,cAAc;CACpB;CAEA,UAAU;EACT,IAAM,IAAmB,CAAC,GACpB,EAAE,eAAY,oBAAiB,EAAa,UAAU;EAU5D,AARA,EAAO,KAAK,oBAAoB,GAAc,GAC9C,EAAO,KAAK,oBAAoB,GAAY,GAExC,KAAK,eAAa,EAAO,KAAK,YAAY,KAAK,aAAa,GAC5D,KAAK,UACR,EAAO,KAAK,UAAU,EAAiB,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,GAGtE,EAAe;GAAE,QAAQ;GAAO,MAAM,KAAK;GAAO;EAAO,CAAC;CAC3D;CAEA,WAAW;EACV,OAAO;GACN,MAAM,KAAK;GACX,SAAS,KAAK;GACd,OAAO,KAAK;EACb;CACD;AACD"}
+{"version":3,"file":"_badResponse.js","names":[],"sources":["../../../../src/http/badResponses/_badResponse.ts"],"sourcesContent":["import { formatJsonString } from \"@arkyn/shared\";\n\nimport { DebugService } from \"../../services/debugService\";\nimport { flushDebugLogs } from \"../../utilities/flushDebugLogs\";\n\nclass BadResponse {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tprivate _cause?: any;\n\tprivate _name: string = \"BadResponse\";\n\tprivate _status: number = 500;\n\tprivate _statusText: string = \"Unknown error\";\n\tprivate _debugColor: \"green\" | \"yellow\" | \"cyan\" | \"red\" = \"red\";\n\t/**\n\t * When `false` (the default), `makeBody()` omits `cause` in production so internal\n\t * details (stack traces, SQL, infra info) never reach the client. Subclasses whose\n\t * `cause` is safe, client-facing data (e.g. `UnprocessableEntity`'s form field errors)\n\t * set this to `true`.\n\t */\n\tprotected exposeCauseInProduction = false;\n\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tget cause(): any {\n\t\treturn this._cause;\n\t}\n\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tset cause(value: any) {\n\t\tthis._cause = value;\n\t}\n\n\tget name(): string {\n\t\treturn this._name;\n\t}\n\n\tset name(value: string) {\n\t\tthis._name = value;\n\t}\n\n\tget status(): number {\n\t\treturn this._status;\n\t}\n\n\tset status(value: number) {\n\t\tthis._status = value;\n\t}\n\n\tget statusText(): string {\n\t\treturn this._statusText;\n\t}\n\n\tset statusText(value: string) {\n\t\tthis._statusText = value;\n\t}\n\n\tget debugColor(): \"green\" | \"yellow\" | \"cyan\" | \"red\" {\n\t\treturn this._debugColor;\n\t}\n\n\tset debugColor(value: \"green\" | \"yellow\" | \"cyan\" | \"red\") {\n\t\tif (![\"green\", \"yellow\", \"cyan\", \"red\"].includes(value)) return;\n\t\tthis._debugColor = value;\n\t}\n\n\tonDebug() {\n\t\tconst debugs: string[] = [];\n\t\tconst { callerInfo, functionName } = DebugService.getCaller();\n\n\t\tdebugs.push(`Caller Function: ${functionName}`);\n\t\tdebugs.push(`Caller Location: ${callerInfo}`);\n\n\t\tif (this._statusText) debugs.push(`Message: ${this._statusText}`);\n\t\tif (this._cause) {\n\t\t\tdebugs.push(`Cause: ${formatJsonString(JSON.stringify(this._cause))}`);\n\t\t}\n\n\t\tflushDebugLogs({ scheme: \"red\", name: this._name, debugs });\n\t}\n\n\tmakeBody() {\n\t\tconst isProduction = process.env.NODE_ENV === \"production\";\n\t\tconst hideCause = isProduction && !this.exposeCauseInProduction;\n\n\t\treturn {\n\t\t\tname: this._name,\n\t\t\tmessage: this._statusText,\n\t\t\tcause: hideCause ? undefined : this._cause,\n\t\t};\n\t}\n}\n\nexport { BadResponse };\n"],"mappings":";;;;AAKA,IAAM,IAAN,MAAkB;CAEjB;CACA,QAAwB;CACxB,UAA0B;CAC1B,cAA8B;CAC9B,cAA2D;CAO3D,0BAAoC;CAGpC,IAAI,QAAa;EAChB,OAAO,KAAK;CACb;CAGA,IAAI,MAAM,GAAY;EACrB,KAAK,SAAS;CACf;CAEA,IAAI,OAAe;EAClB,OAAO,KAAK;CACb;CAEA,IAAI,KAAK,GAAe;EACvB,KAAK,QAAQ;CACd;CAEA,IAAI,SAAiB;EACpB,OAAO,KAAK;CACb;CAEA,IAAI,OAAO,GAAe;EACzB,KAAK,UAAU;CAChB;CAEA,IAAI,aAAqB;EACxB,OAAO,KAAK;CACb;CAEA,IAAI,WAAW,GAAe;EAC7B,KAAK,cAAc;CACpB;CAEA,IAAI,aAAkD;EACrD,OAAO,KAAK;CACb;CAEA,IAAI,WAAW,GAA4C;EACrD;GAAC;GAAS;GAAU;GAAQ;EAAK,CAAC,CAAC,SAAS,CAAK,MACtD,KAAK,cAAc;CACpB;CAEA,UAAU;EACT,IAAM,IAAmB,CAAC,GACpB,EAAE,eAAY,oBAAiB,EAAa,UAAU;EAU5D,AARA,EAAO,KAAK,oBAAoB,GAAc,GAC9C,EAAO,KAAK,oBAAoB,GAAY,GAExC,KAAK,eAAa,EAAO,KAAK,YAAY,KAAK,aAAa,GAC5D,KAAK,UACR,EAAO,KAAK,UAAU,EAAiB,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,GAGtE,EAAe;GAAE,QAAQ;GAAO,MAAM,KAAK;GAAO;EAAO,CAAC;CAC3D;CAEA,WAAW;EAEV,IAAM,IAAA,QAAA,IAAA,aADwC,gBACZ,CAAC,KAAK;EAExC,OAAO;GACN,MAAM,KAAK;GACX,SAAS,KAAK;GACd,OAAO,IAAY,KAAA,IAAY,KAAK;EACrC;CACD;AACD"}

package/dist/modules/http/badResponses/unprocessableEntity.js

@@ -1,11 +1,21 @@
 import { BadResponse as e } from "./_badResponse.js";
+import { SENSITIVE_DATA_KEYS as t } from "../../utilities/sensitiveDataKeys.js";
+import { parseSensitiveData as n } from "@arkyn/shared";
 //#region src/http/badResponses/unprocessableEntity.ts
-var t = class extends e {
+function r(e) {
+	if (e === void 0) return e;
+	try {
+		return JSON.parse(n(JSON.stringify(e), [...t]));
+	} catch {
+		return e;
+	}
+}
+var i = class extends e {
 	constructor(e) {
-		super(), this.name = "UnprocessableEntity", this.status = 422, this.statusText = e.message || "Unprocessable entity", this.debugColor = "yellow", this.cause = {
-			data: e.data,
+		super(), this.name = "UnprocessableEntity", this.status = 422, this.statusText = e.message || "Unprocessable entity", this.debugColor = "yellow", this.exposeCauseInProduction = !0, this.cause = {
+			data: r(e.data),
 			fieldErrors: e.fieldErrors,
-			fields: e.fields
+			fields: r(e.fields)
 		}, this.onDebug();
 	}
 	toResponse() {
@@ -25,6 +35,6 @@ var t = class extends e {
 	}
 };
 //#endregion
-export { t as UnprocessableEntity };
+export { i as UnprocessableEntity };
 
 //# sourceMappingURL=unprocessableEntity.js.map

package/dist/modules/http/badResponses/unprocessableEntity.js.map

@@ -1 +1 @@
-{"version":3,"file":"unprocessableEntity.js","names":[],"sources":["../../../../src/http/badResponses/unprocessableEntity.ts"],"sourcesContent":["import { BadResponse } from \"./_badResponse\";\n\n/**\n * HTTP 422 Unprocessable Entity, the request is well-formed but contains semantic validation errors.\n * Typically used for form field validation failures.\n *\n * @example\n * ```typescript\n * throw new UnprocessableEntity({\n *   message: \"Validation failed\",\n *   fieldErrors: { email: \"Invalid email format\", age: \"Must be 18 or older\" },\n *   fields: { email: \"not-an-email\", age: \"15\" },\n * });\n * ```\n */\nclass UnprocessableEntity extends BadResponse {\n\t/**\n\t * @param props.message - Human-readable description of the error.\n\t * @param props.fieldErrors - Per-field validation messages keyed by field name.\n\t * @param props.fields - Original submitted field values (useful for repopulating forms).\n\t * @param props.data - Any extra data to include in the response body.\n\t */\n\tconstructor(props: {\n\t\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\t\tdata?: any;\n\t\tfieldErrors?: Record<string, string>;\n\t\tfields?: Record<string, string>;\n\t\tmessage?: string;\n\t}) {\n\t\tsuper();\n\n\t\tthis.name = \"UnprocessableEntity\";\n\t\tthis.status = 422;\n\t\tthis.statusText = props.message || \"Unprocessable entity\";\n\t\tthis.debugColor = \"yellow\";\n\t\tthis.cause = {\n\t\t\tdata: props.data,\n\t\t\tfieldErrors: props.fieldErrors,\n\t\t\tfields: props.fields,\n\t\t};\n\n\t\tthis.onDebug();\n\t}\n\n\t/** Converts to a `Response` with `Content-Type: application/json` header. */\n\ttoResponse(): Response {\n\t\tconst responseInit: ResponseInit = {\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tstatus: this.status,\n\t\t\tstatusText: this.statusText,\n\t\t};\n\n\t\treturn new Response(JSON.stringify(this.makeBody()), responseInit);\n\t}\n\n\t/** Converts to a `Response` using `Response.json()`. Alternative to `toResponse()`. */\n\ttoJson(): Response {\n\t\tconst responseInit: ResponseInit = {\n\t\t\tstatus: this.status,\n\t\t\tstatusText: this.statusText,\n\t\t};\n\n\t\treturn Response.json(this.makeBody(), responseInit);\n\t}\n}\n\nexport { UnprocessableEntity };\n"],"mappings":";;AAeA,IAAM,IAAN,cAAkC,EAAY;CAO7C,YAAY,GAMT;EAaF,AAZA,MAAM,GAEN,KAAK,OAAO,uBACZ,KAAK,SAAS,KACd,KAAK,aAAa,EAAM,WAAW,wBACnC,KAAK,aAAa,UAClB,KAAK,QAAQ;GACZ,MAAM,EAAM;GACZ,aAAa,EAAM;GACnB,QAAQ,EAAM;EACf,GAEA,KAAK,QAAQ;CACd;CAGA,aAAuB;EACtB,IAAM,IAA6B;GAClC,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,QAAQ,KAAK;GACb,YAAY,KAAK;EAClB;EAEA,OAAO,IAAI,SAAS,KAAK,UAAU,KAAK,SAAS,CAAC,GAAG,CAAY;CAClE;CAGA,SAAmB;EAClB,IAAM,IAA6B;GAClC,QAAQ,KAAK;GACb,YAAY,KAAK;EAClB;EAEA,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG,CAAY;CACnD;AACD"}
+{"version":3,"file":"unprocessableEntity.js","names":[],"sources":["../../../../src/http/badResponses/unprocessableEntity.ts"],"sourcesContent":["import { parseSensitiveData } from \"@arkyn/shared\";\nimport { SENSITIVE_DATA_KEYS } from \"../../utilities/sensitiveDataKeys\";\nimport { BadResponse } from \"./_badResponse\";\n\n/**\n * Masks sensitive values (passwords, tokens, etc. — see `SENSITIVE_DATA_KEYS`) inside a\n * form-submission payload before it is echoed back to the client. `fields`/`data` on\n * `UnprocessableEntity` exist to repopulate a form, so submitted secrets must never be\n * returned in cleartext.\n */\nfunction redactSensitiveValues<T>(value: T): T {\n\tif (value === undefined) return value;\n\n\ttry {\n\t\treturn JSON.parse(\n\t\t\tparseSensitiveData(JSON.stringify(value), [...SENSITIVE_DATA_KEYS]),\n\t\t);\n\t} catch {\n\t\treturn value;\n\t}\n}\n\n/**\n * HTTP 422 Unprocessable Entity, the request is well-formed but contains semantic validation errors.\n * Typically used for form field validation failures.\n *\n * @example\n * ```typescript\n * throw new UnprocessableEntity({\n *   message: \"Validation failed\",\n *   fieldErrors: { email: \"Invalid email format\", age: \"Must be 18 or older\" },\n *   fields: { email: \"not-an-email\", age: \"15\" },\n * });\n * ```\n */\nclass UnprocessableEntity extends BadResponse {\n\t/**\n\t * @param props.message - Human-readable description of the error.\n\t * @param props.fieldErrors - Per-field validation messages keyed by field name.\n\t * @param props.fields - Original submitted field values (useful for repopulating forms).\n\t * @param props.data - Any extra data to include in the response body.\n\t */\n\tconstructor(props: {\n\t\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\t\tdata?: any;\n\t\tfieldErrors?: Record<string, string>;\n\t\tfields?: Record<string, string>;\n\t\tmessage?: string;\n\t}) {\n\t\tsuper();\n\n\t\tthis.name = \"UnprocessableEntity\";\n\t\tthis.status = 422;\n\t\tthis.statusText = props.message || \"Unprocessable entity\";\n\t\tthis.debugColor = \"yellow\";\n\t\t// `cause` here is structured, redacted form-validation data meant for the\n\t\t// client (to repopulate the form) — unlike other responses' `cause`, it stays\n\t\t// visible in production.\n\t\tthis.exposeCauseInProduction = true;\n\t\tthis.cause = {\n\t\t\tdata: redactSensitiveValues(props.data),\n\t\t\tfieldErrors: props.fieldErrors,\n\t\t\tfields: redactSensitiveValues(props.fields),\n\t\t};\n\n\t\tthis.onDebug();\n\t}\n\n\t/** Converts to a `Response` with `Content-Type: application/json` header. */\n\ttoResponse(): Response {\n\t\tconst responseInit: ResponseInit = {\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tstatus: this.status,\n\t\t\tstatusText: this.statusText,\n\t\t};\n\n\t\treturn new Response(JSON.stringify(this.makeBody()), responseInit);\n\t}\n\n\t/** Converts to a `Response` using `Response.json()`. Alternative to `toResponse()`. */\n\ttoJson(): Response {\n\t\tconst responseInit: ResponseInit = {\n\t\t\tstatus: this.status,\n\t\t\tstatusText: this.statusText,\n\t\t};\n\n\t\treturn Response.json(this.makeBody(), responseInit);\n\t}\n}\n\nexport { UnprocessableEntity };\n"],"mappings":";;;;AAUA,SAAS,EAAyB,GAAa;CAC9C,IAAI,MAAU,KAAA,GAAW,OAAO;CAEhC,IAAI;EACH,OAAO,KAAK,MACX,EAAmB,KAAK,UAAU,CAAK,GAAG,CAAC,GAAG,CAAmB,CAAC,CACnE;CACD,QAAQ;EACP,OAAO;CACR;AACD;AAeA,IAAM,IAAN,cAAkC,EAAY;CAO7C,YAAY,GAMT;EAiBF,AAhBA,MAAM,GAEN,KAAK,OAAO,uBACZ,KAAK,SAAS,KACd,KAAK,aAAa,EAAM,WAAW,wBACnC,KAAK,aAAa,UAIlB,KAAK,0BAA0B,IAC/B,KAAK,QAAQ;GACZ,MAAM,EAAsB,EAAM,IAAI;GACtC,aAAa,EAAM;GACnB,QAAQ,EAAsB,EAAM,MAAM;EAC3C,GAEA,KAAK,QAAQ;CACd;CAGA,aAAuB;EACtB,IAAM,IAA6B;GAClC,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,QAAQ,KAAK;GACb,YAAY,KAAK;EAClB;EAEA,OAAO,IAAI,SAAS,KAAK,UAAU,KAAK,SAAS,CAAC,GAAG,CAAY;CAClE;CAGA,SAAmB;EAClB,IAAM,IAA6B;GAClC,QAAQ,KAAK;GACb,YAAY,KAAK;EAClB;EAEA,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG,CAAY;CACnD;AACD"}

package/dist/modules/utilities/decodeRequestBody.js

@@ -1,22 +1,27 @@
 import { BadRequest as e } from "../http/badResponses/badRequest.js";
 //#region src/utilities/decodeRequestBody.ts
-async function t(t) {
-	let n, r = await t.arrayBuffer(), i = new TextDecoder().decode(r);
+var t = 5 * 1024 * 1024;
+async function n(n, r) {
+	let i, a = r?.maxBodySizeBytes ?? t, o = Number(n.headers.get("content-length"));
+	if (Number.isFinite(o) && o > a) throw new e("Request body exceeds the maximum allowed size");
+	let s = await n.arrayBuffer();
+	if (s.byteLength > a) throw new e("Request body exceeds the maximum allowed size");
+	let c = new TextDecoder().decode(s);
 	try {
-		n = JSON.parse(i);
+		i = JSON.parse(c);
 	} catch {
 		try {
-			if (i.includes("=")) {
-				let e = new URLSearchParams(i);
-				n = Object.fromEntries(e.entries());
+			if (c.includes("=")) {
+				let e = new URLSearchParams(c);
+				i = Object.fromEntries(e.entries());
 			} else throw new e("Invalid URLSearchParams format");
 		} catch {
 			throw new e("Failed to extract data from request");
 		}
 	}
-	return n;
+	return i;
 }
 //#endregion
-export { t as decodeRequestBody };
+export { n as decodeRequestBody };
 
 //# sourceMappingURL=decodeRequestBody.js.map

package/dist/modules/utilities/decodeRequestBody.js.map

@@ -1 +1 @@
-{"version":3,"file":"decodeRequestBody.js","names":[],"sources":["../../../src/utilities/decodeRequestBody.ts"],"sourcesContent":["import { BadRequest } from \"../http/badResponses/badRequest\";\n\n/**\n * Decodes a request body into a plain object, trying JSON first then URL-encoded form data.\n * Throws `BadRequest` if neither format can be parsed.\n *\n * @param request - The incoming request whose body will be decoded.\n * @returns The decoded body as a plain object.\n *\n * @example\n * ```typescript\n * export async function action({ request }: ActionFunctionArgs) {\n *   const body = await decodeRequestBody(request);\n *   // body is now a plain JS object\n * }\n * ```\n */\n\n// biome-ignore lint/suspicious/noExplicitAny: intentional\nasync function decodeRequestBody(request: Request): Promise<any> {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tlet data: any;\n\n\tconst arrayBuffer = await request.arrayBuffer();\n\tconst text = new TextDecoder().decode(arrayBuffer);\n\n\ttry {\n\t\tdata = JSON.parse(text);\n\t} catch (_jsonError) {\n\t\ttry {\n\t\t\tif (text.includes(\"=\")) {\n\t\t\t\tconst formData = new URLSearchParams(text);\n\t\t\t\tdata = Object.fromEntries(formData.entries());\n\t\t\t} else {\n\t\t\t\tthrow new BadRequest(\"Invalid URLSearchParams format\");\n\t\t\t}\n\t\t} catch (_formDataError) {\n\t\t\tthrow new BadRequest(\"Failed to extract data from request\");\n\t\t}\n\t}\n\n\treturn data;\n}\n\nexport { decodeRequestBody };\n"],"mappings":";;AAmBA,eAAe,EAAkB,GAAgC;CAEhE,IAAI,GAEE,IAAc,MAAM,EAAQ,YAAY,GACxC,IAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAW;CAEjD,IAAI;EACH,IAAO,KAAK,MAAM,CAAI;CACvB,QAAqB;EACpB,IAAI;GACH,IAAI,EAAK,SAAS,GAAG,GAAG;IACvB,IAAM,IAAW,IAAI,gBAAgB,CAAI;IACzC,IAAO,OAAO,YAAY,EAAS,QAAQ,CAAC;GAC7C,OACC,MAAM,IAAI,EAAW,gCAAgC;EAEvD,QAAyB;GACxB,MAAM,IAAI,EAAW,qCAAqC;EAC3D;CACD;CAEA,OAAO;AACR"}
+{"version":3,"file":"decodeRequestBody.js","names":[],"sources":["../../../src/utilities/decodeRequestBody.ts"],"sourcesContent":["import { BadRequest } from \"../http/badResponses/badRequest\";\n\n/** Default maximum accepted request body size (5 MB) when `maxBodySizeBytes` isn't set. */\nconst DEFAULT_MAX_BODY_SIZE_BYTES = 5 * 1024 * 1024;\n\ntype DecodeRequestBodyOptions = {\n\t/** Max accepted body size in bytes. Larger bodies are rejected with `BadRequest`. @default 5242880 (5 MB) */\n\tmaxBodySizeBytes?: number;\n};\n\n/**\n * Decodes a request body into a plain object, trying JSON first then URL-encoded form data.\n * Throws `BadRequest` if neither format can be parsed, or if the body exceeds `maxBodySizeBytes`.\n *\n * @param request - The incoming request whose body will be decoded.\n * @param options.maxBodySizeBytes - Max accepted body size in bytes. Default: 5 MB.\n * @returns The decoded body as a plain object.\n *\n * @example\n * ```typescript\n * export async function action({ request }: ActionFunctionArgs) {\n *   const body = await decodeRequestBody(request);\n *   // body is now a plain JS object\n * }\n * ```\n */\n\nasync function decodeRequestBody(\n\trequest: Request,\n\toptions?: DecodeRequestBodyOptions,\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n): Promise<any> {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tlet data: any;\n\n\tconst maxBodySizeBytes =\n\t\toptions?.maxBodySizeBytes ?? DEFAULT_MAX_BODY_SIZE_BYTES;\n\n\tconst contentLength = Number(request.headers.get(\"content-length\"));\n\tif (Number.isFinite(contentLength) && contentLength > maxBodySizeBytes) {\n\t\tthrow new BadRequest(\"Request body exceeds the maximum allowed size\");\n\t}\n\n\tconst arrayBuffer = await request.arrayBuffer();\n\n\tif (arrayBuffer.byteLength > maxBodySizeBytes) {\n\t\tthrow new BadRequest(\"Request body exceeds the maximum allowed size\");\n\t}\n\n\tconst text = new TextDecoder().decode(arrayBuffer);\n\n\ttry {\n\t\tdata = JSON.parse(text);\n\t} catch (_jsonError) {\n\t\ttry {\n\t\t\tif (text.includes(\"=\")) {\n\t\t\t\tconst formData = new URLSearchParams(text);\n\t\t\t\tdata = Object.fromEntries(formData.entries());\n\t\t\t} else {\n\t\t\t\tthrow new BadRequest(\"Invalid URLSearchParams format\");\n\t\t\t}\n\t\t} catch (_formDataError) {\n\t\t\tthrow new BadRequest(\"Failed to extract data from request\");\n\t\t}\n\t}\n\n\treturn data;\n}\n\nexport { decodeRequestBody };\n"],"mappings":";;AAGA,IAAM,IAA8B,IAAI,OAAO;AAwB/C,eAAe,EACd,GACA,GAEe;CAEf,IAAI,GAEE,IACL,GAAS,oBAAoB,GAExB,IAAgB,OAAO,EAAQ,QAAQ,IAAI,gBAAgB,CAAC;CAClE,IAAI,OAAO,SAAS,CAAa,KAAK,IAAgB,GACrD,MAAM,IAAI,EAAW,+CAA+C;CAGrE,IAAM,IAAc,MAAM,EAAQ,YAAY;CAE9C,IAAI,EAAY,aAAa,GAC5B,MAAM,IAAI,EAAW,+CAA+C;CAGrE,IAAM,IAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAW;CAEjD,IAAI;EACH,IAAO,KAAK,MAAM,CAAI;CACvB,QAAqB;EACpB,IAAI;GACH,IAAI,EAAK,SAAS,GAAG,GAAG;IACvB,IAAM,IAAW,IAAI,gBAAgB,CAAI;IACzC,IAAO,OAAO,YAAY,EAAS,QAAQ,CAAC;GAC7C,OACC,MAAM,IAAI,EAAW,gCAAgC;EAEvD,QAAyB;GACxB,MAAM,IAAI,EAAW,qCAAqC;EAC3D;CACD;CAEA,OAAO;AACR"}

package/dist/modules/validations/validateEmail.js

@@ -31,26 +31,31 @@ var s = [
 	"MX",
 	"A",
 	"AAAA"
-];
-async function c(t, n) {
-	try {
-		return await e?.promises?.resolve(t, n), !0;
-	} catch {
-		return !1;
-	}
-}
-async function l(e) {
-	for (let t of s) if (await c(e, t)) return !0;
+], c = 5e3;
+async function l(t, n, r) {
+	return new Promise((i) => {
+		let a = !1, o = setTimeout(() => {
+			a || (a = !0, i(!1));
+		}, r);
+		o.unref?.(), e.promises.resolve(t, n).then(() => {
+			a || (a = !0, clearTimeout(o), i(!0));
+		}).catch(() => {
+			a || (a = !0, clearTimeout(o), i(!1));
+		});
+	});
+}
+async function u(e, t) {
+	for (let n of s) if (await l(e, n, t)) return !0;
 	return !1;
 }
-async function u(e) {
+async function d(e, n) {
 	if (!e || typeof e != "string") return !1;
-	let n = e.trim();
-	if (!t(n) || !a(n)) return !1;
-	let r = o(n);
-	return r ? await l(r) : !1;
+	let r = e.trim();
+	if (!t(r) || !a(r)) return !1;
+	let i = o(r);
+	return i ? await u(i, n?.dnsTimeoutMs ?? c) : !1;
 }
 //#endregion
-export { u as validateEmail };
+export { d as validateEmail };
 
 //# sourceMappingURL=validateEmail.js.map

package/dist/modules/validations/validateEmail.js.map

@@ -1 +1 @@
-{"version":3,"file":"validateEmail.js","names":[],"sources":["../../../src/validations/validateEmail.ts"],"sourcesContent":["import dns from \"node:dns\";\n\nfunction isValidBasicFormat(email: string): boolean {\n\tconst emailRegex =\n\t\t/^[a-zA-Z0-9.!$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/;\n\n\treturn emailRegex.test(email);\n}\n\nfunction isValidLocalPart(localPart: string): boolean {\n\tif (localPart.length === 0 || localPart.length > 64) return false;\n\tif (localPart.startsWith(\".\") || localPart.endsWith(\".\")) return false;\n\tif (localPart.includes(\"..\")) return false;\n\n\tconst validLocalRegex = /^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+$/;\n\tif (!validLocalRegex.test(localPart)) return false;\n\n\treturn true;\n}\n\nfunction isValidDomainLabel(label: string): boolean {\n\tif (label.length === 0 || label.length > 63) return false;\n\tif (label.startsWith(\"-\") || label.endsWith(\"-\")) return false;\n\tif (!/^[a-zA-Z0-9-]+$/.test(label)) return false;\n\treturn true;\n}\n\nfunction isValidDomainPart(domainPart: string): boolean {\n\tif (domainPart.length === 0 || domainPart.length > 253) return false;\n\n\tif (\n\t\tdomainPart.startsWith(\".\") ||\n\t\tdomainPart.endsWith(\".\") ||\n\t\tdomainPart.startsWith(\"-\") ||\n\t\tdomainPart.endsWith(\"-\")\n\t) {\n\t\treturn false;\n\t}\n\n\tconst labels = domainPart.split(\".\");\n\tif (labels.length < 2) return false;\n\n\tfor (const label of labels) if (!isValidDomainLabel(label)) return false;\n\n\tconst tld = labels[labels.length - 1];\n\tif (tld.length < 2 || !/^[a-zA-Z]+$/.test(tld)) return false;\n\n\treturn true;\n}\n\nfunction isValidAdvancedSyntax(email: string): boolean {\n\tconst parts = email.split(\"@\");\n\tif (parts.length !== 2) return false;\n\n\tconst [localPart, domainPart] = parts;\n\n\tif (!isValidLocalPart(localPart)) return false;\n\tif (!isValidDomainPart(domainPart)) return false;\n\treturn true;\n}\n\nfunction extractDomain(email: string): string | null {\n\tconst parts = email.split(\"@\");\n\treturn parts.length === 2 ? parts[1].toLowerCase() : null;\n}\n\nconst DNS_RECORD_TYPES = [\"MX\", \"A\", \"AAAA\"] as const;\n\nasync function tryResolveDnsRecord(\n\tdomain: string,\n\trecordType: string,\n): Promise<boolean> {\n\ttry {\n\t\tawait dns?.promises?.resolve(domain, recordType);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nasync function isValidDns(domain: string): Promise<boolean> {\n\tfor (const recordType of DNS_RECORD_TYPES) {\n\t\tconst hasRecord = await tryResolveDnsRecord(domain, recordType);\n\t\tif (hasRecord) return true;\n\t}\n\treturn false;\n}\n\n/**\n * Validates if an email address is valid in all possible ways, including DNS validation.\n *\n * This function performs comprehensive email validation by:\n * - Checking basic email format and syntax\n * - Validating advanced RFC 5322 compliance rules\n * - Verifying that the domain has valid MX or A records in DNS\n *\n * @param rawEmail - The email address to validate.\n * @returns `true` if the email passes format checks and its domain resolves in DNS, otherwise `false`.\n *\n * @example\n * ```typescript\n * await validateEmail(\"user@gmail.com\"); // true\n * await validateEmail(\"user@gmil.com\"); // false (invalid domain)\n * await validateEmail(\"invalid-email\"); // false (invalid format)\n * ```\n */\n\nasync function validateEmail(rawEmail: string): Promise<boolean> {\n\tif (!rawEmail || typeof rawEmail !== \"string\") return false;\n\tconst email = rawEmail.trim();\n\n\tif (!isValidBasicFormat(email)) return false;\n\tif (!isValidAdvancedSyntax(email)) return false;\n\n\tconst domain = extractDomain(email);\n\tif (!domain) return false;\n\n\treturn await isValidDns(domain);\n}\n\nexport { validateEmail };\n"],"mappings":";;AAEA,SAAS,EAAmB,GAAwB;CAInD,OAAO,sIAAW,KAAK,CAAK;AAC7B;AAEA,SAAS,EAAiB,GAA4B;CAQrD,OAFA,EALI,EAAU,WAAW,KAAK,EAAU,SAAS,MAC7C,EAAU,WAAW,GAAG,KAAK,EAAU,SAAS,GAAG,KACnD,EAAU,SAAS,IAAI,KAGvB,CAAC,qCAAgB,KAAK,CAAS;AAGpC;AAEA,SAAS,EAAmB,GAAwB;CAInD,OADA,EAFI,EAAM,WAAW,KAAK,EAAM,SAAS,MACrC,EAAM,WAAW,GAAG,KAAK,EAAM,SAAS,GAAG,KAC3C,CAAC,kBAAkB,KAAK,CAAK;AAElC;AAEA,SAAS,EAAkB,GAA6B;CAGvD,IAFI,EAAW,WAAW,KAAK,EAAW,SAAS,OAGlD,EAAW,WAAW,GAAG,KACzB,EAAW,SAAS,GAAG,KACvB,EAAW,WAAW,GAAG,KACzB,EAAW,SAAS,GAAG,GAEvB,OAAO;CAGR,IAAM,IAAS,EAAW,MAAM,GAAG;CACnC,IAAI,EAAO,SAAS,GAAG,OAAO;CAE9B,KAAK,IAAM,KAAS,GAAQ,IAAI,CAAC,EAAmB,CAAK,GAAG,OAAO;CAEnE,IAAM,IAAM,EAAO,EAAO,SAAS;CAGnC,OAFA,EAAI,EAAI,SAAS,KAAK,CAAC,cAAc,KAAK,CAAG;AAG9C;AAEA,SAAS,EAAsB,GAAwB;CACtD,IAAM,IAAQ,EAAM,MAAM,GAAG;CAC7B,IAAI,EAAM,WAAW,GAAG,OAAO;CAE/B,IAAM,CAAC,GAAW,KAAc;CAIhC,OADA,EADI,CAAC,EAAiB,CAAS,KAC3B,CAAC,EAAkB,CAAU;AAElC;AAEA,SAAS,EAAc,GAA8B;CACpD,IAAM,IAAQ,EAAM,MAAM,GAAG;CAC7B,OAAO,EAAM,WAAW,IAAI,EAAM,EAAE,CAAC,YAAY,IAAI;AACtD;AAEA,IAAM,IAAmB;CAAC;CAAM;CAAK;AAAM;AAE3C,eAAe,EACd,GACA,GACmB;CACnB,IAAI;EAEH,OADA,MAAM,GAAK,UAAU,QAAQ,GAAQ,CAAU,GACxC;CACR,QAAQ;EACP,OAAO;CACR;AACD;AAEA,eAAe,EAAW,GAAkC;CAC3D,KAAK,IAAM,KAAc,GAExB,IAAI,MADoB,EAAoB,GAAQ,CAAU,GAC/C,OAAO;CAEvB,OAAO;AACR;AAqBA,eAAe,EAAc,GAAoC;CAChE,IAAI,CAAC,KAAY,OAAO,KAAa,UAAU,OAAO;CACtD,IAAM,IAAQ,EAAS,KAAK;CAG5B,IADI,CAAC,EAAmB,CAAK,KACzB,CAAC,EAAsB,CAAK,GAAG,OAAO;CAE1C,IAAM,IAAS,EAAc,CAAK;CAGlC,OAFK,IAEE,MAAM,EAAW,CAAM,IAFV;AAGrB"}
+{"version":3,"file":"validateEmail.js","names":[],"sources":["../../../src/validations/validateEmail.ts"],"sourcesContent":["import dns from \"node:dns\";\n\nfunction isValidBasicFormat(email: string): boolean {\n\tconst emailRegex =\n\t\t/^[a-zA-Z0-9.!$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/;\n\n\treturn emailRegex.test(email);\n}\n\nfunction isValidLocalPart(localPart: string): boolean {\n\tif (localPart.length === 0 || localPart.length > 64) return false;\n\tif (localPart.startsWith(\".\") || localPart.endsWith(\".\")) return false;\n\tif (localPart.includes(\"..\")) return false;\n\n\tconst validLocalRegex = /^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+$/;\n\tif (!validLocalRegex.test(localPart)) return false;\n\n\treturn true;\n}\n\nfunction isValidDomainLabel(label: string): boolean {\n\tif (label.length === 0 || label.length > 63) return false;\n\tif (label.startsWith(\"-\") || label.endsWith(\"-\")) return false;\n\tif (!/^[a-zA-Z0-9-]+$/.test(label)) return false;\n\treturn true;\n}\n\nfunction isValidDomainPart(domainPart: string): boolean {\n\tif (domainPart.length === 0 || domainPart.length > 253) return false;\n\n\tif (\n\t\tdomainPart.startsWith(\".\") ||\n\t\tdomainPart.endsWith(\".\") ||\n\t\tdomainPart.startsWith(\"-\") ||\n\t\tdomainPart.endsWith(\"-\")\n\t) {\n\t\treturn false;\n\t}\n\n\tconst labels = domainPart.split(\".\");\n\tif (labels.length < 2) return false;\n\n\tfor (const label of labels) if (!isValidDomainLabel(label)) return false;\n\n\tconst tld = labels[labels.length - 1];\n\tif (tld.length < 2 || !/^[a-zA-Z]+$/.test(tld)) return false;\n\n\treturn true;\n}\n\nfunction isValidAdvancedSyntax(email: string): boolean {\n\tconst parts = email.split(\"@\");\n\tif (parts.length !== 2) return false;\n\n\tconst [localPart, domainPart] = parts;\n\n\tif (!isValidLocalPart(localPart)) return false;\n\tif (!isValidDomainPart(domainPart)) return false;\n\treturn true;\n}\n\nfunction extractDomain(email: string): string | null {\n\tconst parts = email.split(\"@\");\n\treturn parts.length === 2 ? parts[1].toLowerCase() : null;\n}\n\nconst DNS_RECORD_TYPES = [\"MX\", \"A\", \"AAAA\"] as const;\n\n/** Default time to wait for a single DNS lookup before treating it as unresolved. */\nconst DEFAULT_DNS_TIMEOUT_MS = 5000;\n\n/**\n * Resolves a single DNS record type for `domain`, racing it against `timeoutMs` so a slow\n * or unresponsive DNS server can never leave the caller waiting indefinitely. A timeout is\n * treated the same as \"no record found\" (`false`), not as a validation error.\n */\nasync function tryResolveDnsRecord(\n\tdomain: string,\n\trecordType: string,\n\ttimeoutMs: number,\n): Promise<boolean> {\n\treturn new Promise((resolve) => {\n\t\tlet settled = false;\n\n\t\tconst timer = setTimeout(() => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tresolve(false);\n\t\t}, timeoutMs);\n\t\ttimer.unref?.();\n\n\t\tdns.promises\n\t\t\t.resolve(domain, recordType)\n\t\t\t.then(() => {\n\t\t\t\tif (settled) return;\n\t\t\t\tsettled = true;\n\t\t\t\tclearTimeout(timer);\n\t\t\t\tresolve(true);\n\t\t\t})\n\t\t\t.catch(() => {\n\t\t\t\tif (settled) return;\n\t\t\t\tsettled = true;\n\t\t\t\tclearTimeout(timer);\n\t\t\t\tresolve(false);\n\t\t\t});\n\t});\n}\n\nasync function isValidDns(domain: string, timeoutMs: number): Promise<boolean> {\n\tfor (const recordType of DNS_RECORD_TYPES) {\n\t\tconst hasRecord = await tryResolveDnsRecord(domain, recordType, timeoutMs);\n\t\tif (hasRecord) return true;\n\t}\n\treturn false;\n}\n\ntype ValidateEmailOptions = {\n\t/** Max time (ms) to wait for each DNS lookup before treating it as unresolved. @default 5000 */\n\tdnsTimeoutMs?: number;\n};\n\n/**\n * Validates if an email address is valid in all possible ways, including DNS validation.\n *\n * This function performs comprehensive email validation by:\n * - Checking basic email format and syntax\n * - Validating advanced RFC 5322 compliance rules\n * - Verifying that the domain has valid MX or A records in DNS\n *\n * DNS lookups are bounded by `options.dnsTimeoutMs` (default 5000ms) so a slow or\n * unresponsive DNS server can never leave the returned promise pending indefinitely.\n *\n * @param rawEmail - The email address to validate.\n * @param options.dnsTimeoutMs - Max time (ms) to wait for each DNS lookup. Default: 5000.\n * @returns `true` if the email passes format checks and its domain resolves in DNS, otherwise `false`.\n *\n * @example\n * ```typescript\n * await validateEmail(\"user@gmail.com\"); // true\n * await validateEmail(\"user@gmil.com\"); // false (invalid domain)\n * await validateEmail(\"invalid-email\"); // false (invalid format)\n * await validateEmail(\"user@slow-dns.com\", { dnsTimeoutMs: 2000 }); // bounded wait\n * ```\n */\n\nasync function validateEmail(\n\trawEmail: string,\n\toptions?: ValidateEmailOptions,\n): Promise<boolean> {\n\tif (!rawEmail || typeof rawEmail !== \"string\") return false;\n\tconst email = rawEmail.trim();\n\n\tif (!isValidBasicFormat(email)) return false;\n\tif (!isValidAdvancedSyntax(email)) return false;\n\n\tconst domain = extractDomain(email);\n\tif (!domain) return false;\n\n\tconst timeoutMs = options?.dnsTimeoutMs ?? DEFAULT_DNS_TIMEOUT_MS;\n\treturn await isValidDns(domain, timeoutMs);\n}\n\nexport { validateEmail };\n"],"mappings":";;AAEA,SAAS,EAAmB,GAAwB;CAInD,OAAO,sIAAW,KAAK,CAAK;AAC7B;AAEA,SAAS,EAAiB,GAA4B;CAQrD,OAFA,EALI,EAAU,WAAW,KAAK,EAAU,SAAS,MAC7C,EAAU,WAAW,GAAG,KAAK,EAAU,SAAS,GAAG,KACnD,EAAU,SAAS,IAAI,KAGvB,CAAC,qCAAgB,KAAK,CAAS;AAGpC;AAEA,SAAS,EAAmB,GAAwB;CAInD,OADA,EAFI,EAAM,WAAW,KAAK,EAAM,SAAS,MACrC,EAAM,WAAW,GAAG,KAAK,EAAM,SAAS,GAAG,KAC3C,CAAC,kBAAkB,KAAK,CAAK;AAElC;AAEA,SAAS,EAAkB,GAA6B;CAGvD,IAFI,EAAW,WAAW,KAAK,EAAW,SAAS,OAGlD,EAAW,WAAW,GAAG,KACzB,EAAW,SAAS,GAAG,KACvB,EAAW,WAAW,GAAG,KACzB,EAAW,SAAS,GAAG,GAEvB,OAAO;CAGR,IAAM,IAAS,EAAW,MAAM,GAAG;CACnC,IAAI,EAAO,SAAS,GAAG,OAAO;CAE9B,KAAK,IAAM,KAAS,GAAQ,IAAI,CAAC,EAAmB,CAAK,GAAG,OAAO;CAEnE,IAAM,IAAM,EAAO,EAAO,SAAS;CAGnC,OAFA,EAAI,EAAI,SAAS,KAAK,CAAC,cAAc,KAAK,CAAG;AAG9C;AAEA,SAAS,EAAsB,GAAwB;CACtD,IAAM,IAAQ,EAAM,MAAM,GAAG;CAC7B,IAAI,EAAM,WAAW,GAAG,OAAO;CAE/B,IAAM,CAAC,GAAW,KAAc;CAIhC,OADA,EADI,CAAC,EAAiB,CAAS,KAC3B,CAAC,EAAkB,CAAU;AAElC;AAEA,SAAS,EAAc,GAA8B;CACpD,IAAM,IAAQ,EAAM,MAAM,GAAG;CAC7B,OAAO,EAAM,WAAW,IAAI,EAAM,EAAE,CAAC,YAAY,IAAI;AACtD;AAEA,IAAM,IAAmB;CAAC;CAAM;CAAK;AAAM,GAGrC,IAAyB;AAO/B,eAAe,EACd,GACA,GACA,GACmB;CACnB,OAAO,IAAI,SAAS,MAAY;EAC/B,IAAI,IAAU,IAER,IAAQ,iBAAiB;GAC1B,MACJ,IAAU,IACV,EAAQ,EAAK;EACd,GAAG,CAAS;EAGZ,AAFA,EAAM,QAAQ,GAEd,EAAI,SACF,QAAQ,GAAQ,CAAU,CAAC,CAC3B,WAAW;GACP,MACJ,IAAU,IACV,aAAa,CAAK,GAClB,EAAQ,EAAI;EACb,CAAC,CAAC,CACD,YAAY;GACR,MACJ,IAAU,IACV,aAAa,CAAK,GAClB,EAAQ,EAAK;EACd,CAAC;CACH,CAAC;AACF;AAEA,eAAe,EAAW,GAAgB,GAAqC;CAC9E,KAAK,IAAM,KAAc,GAExB,IAAI,MADoB,EAAoB,GAAQ,GAAY,CAAS,GAC1D,OAAO;CAEvB,OAAO;AACR;AA+BA,eAAe,EACd,GACA,GACmB;CACnB,IAAI,CAAC,KAAY,OAAO,KAAa,UAAU,OAAO;CACtD,IAAM,IAAQ,EAAS,KAAK;CAG5B,IADI,CAAC,EAAmB,CAAK,KACzB,CAAC,EAAsB,CAAK,GAAG,OAAO;CAE1C,IAAM,IAAS,EAAc,CAAK;CAIlC,OAHK,IAGE,MAAM,EAAW,GADN,GAAS,gBAAgB,CACF,IAHrB;AAIrB"}

package/dist/utilities/decodeRequestBody.d.ts

@@ -1,8 +1,13 @@
+type DecodeRequestBodyOptions = {
+    /** Max accepted body size in bytes. Larger bodies are rejected with `BadRequest`. @default 5242880 (5 MB) */
+    maxBodySizeBytes?: number;
+};
 /**
  * Decodes a request body into a plain object, trying JSON first then URL-encoded form data.
- * Throws `BadRequest` if neither format can be parsed.
+ * Throws `BadRequest` if neither format can be parsed, or if the body exceeds `maxBodySizeBytes`.
  *
  * @param request - The incoming request whose body will be decoded.
+ * @param options.maxBodySizeBytes - Max accepted body size in bytes. Default: 5 MB.
  * @returns The decoded body as a plain object.
  *
  * @example
@@ -13,6 +18,6 @@
  * }
  * ```
  */
-declare function decodeRequestBody(request: Request): Promise<any>;
+declare function decodeRequestBody(request: Request, options?: DecodeRequestBodyOptions): Promise<any>;
 export { decodeRequestBody };
 //# sourceMappingURL=decodeRequestBody.d.ts.map

package/dist/utilities/decodeRequestBody.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decodeRequestBody.d.ts","sourceRoot":"","sources":["../../src/utilities/decodeRequestBody.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AAGH,iBAAe,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAuB/D;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"decodeRequestBody.d.ts","sourceRoot":"","sources":["../../src/utilities/decodeRequestBody.ts"],"names":[],"mappings":"AAKA,KAAK,wBAAwB,GAAG;IAC/B,6GAA6G;IAC7G,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AAEH,iBAAe,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,wBAAwB,GAEhC,OAAO,CAAC,GAAG,CAAC,CAoCd;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/validations/validateEmail.d.ts

@@ -1,3 +1,7 @@
+type ValidateEmailOptions = {
+    /** Max time (ms) to wait for each DNS lookup before treating it as unresolved. @default 5000 */
+    dnsTimeoutMs?: number;
+};
 /**
  * Validates if an email address is valid in all possible ways, including DNS validation.
  *
@@ -6,7 +10,11 @@
  * - Validating advanced RFC 5322 compliance rules
  * - Verifying that the domain has valid MX or A records in DNS
  *
+ * DNS lookups are bounded by `options.dnsTimeoutMs` (default 5000ms) so a slow or
+ * unresponsive DNS server can never leave the returned promise pending indefinitely.
+ *
  * @param rawEmail - The email address to validate.
+ * @param options.dnsTimeoutMs - Max time (ms) to wait for each DNS lookup. Default: 5000.
  * @returns `true` if the email passes format checks and its domain resolves in DNS, otherwise `false`.
  *
  * @example
@@ -14,8 +22,9 @@
  * await validateEmail("user@gmail.com"); // true
  * await validateEmail("user@gmil.com"); // false (invalid domain)
  * await validateEmail("invalid-email"); // false (invalid format)
+ * await validateEmail("user@slow-dns.com", { dnsTimeoutMs: 2000 }); // bounded wait
  * ```
  */
-declare function validateEmail(rawEmail: string): Promise<boolean>;
+declare function validateEmail(rawEmail: string, options?: ValidateEmailOptions): Promise<boolean>;
 export { validateEmail };
 //# sourceMappingURL=validateEmail.d.ts.map

package/dist/validations/validateEmail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validateEmail.d.ts","sourceRoot":"","sources":["../../src/validations/validateEmail.ts"],"names":[],"mappings":"AAwFA;;;;;;;;;;;;;;;;;GAiBG;AAEH,iBAAe,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAW/D;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"validateEmail.d.ts","sourceRoot":"","sources":["../../src/validations/validateEmail.ts"],"names":[],"mappings":"AAoHA,KAAK,oBAAoB,GAAG;IAC3B,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,iBAAe,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,OAAO,CAAC,CAYlB;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arkyn/server",
-  "version": "3.0.9",
+  "version": "3.0.10",
   "author": "Arkyn | Lucas Gonçalves",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -45,14 +45,14 @@
   },
   "scripts": {
     "audit": "bun audit",
-    "build": "bunx vite build && bunx tsc --project tsconfig.json --emitDeclarationOnly && bun ./generate-exports.ts && rm -f dist/modules/index.js dist/modules/style.css",
+    "build": "bunx vite build && bunx tsc --project tsconfig.json --emitDeclarationOnly && bun ../../scripts/generate-exports.ts && rm -f dist/modules/index.js dist/modules/style.css",
     "prebuild": "rm -rf dist",
     "publish:beta": "bash ../../scripts/publish-idempotent.sh beta",
     "publish:latest": "bash ../../scripts/publish-idempotent.sh latest",
-    "release:beta": "bun ./generate-version.ts beta",
-    "release:patch": "bun ./generate-version.ts patch",
-    "release:minor": "bun ./generate-version.ts minor",
-    "release:major": "bun ./generate-version.ts major",
+    "release:beta": "bun ../../scripts/generate-version.ts beta",
+    "release:patch": "bun ../../scripts/generate-version.ts patch",
+    "release:minor": "bun ../../scripts/generate-version.ts minor",
+    "release:major": "bun ../../scripts/generate-version.ts major",
     "test": "bunx vitest --config vitest.config.ts --run",
     "test:watch": "bunx vitest --config vitest.config.ts --watch",
     "typecheck": "bunx tsc --project tsconfig.json --noEmit"