@barqel/barq 0.0.0-stage → 1.0.0

package/dist/cookies.js

@@ -0,0 +1,234 @@
+import { timingSafeEqual } from "node:crypto";
+class CookieJarImpl {
+    secret;
+    onMutation;
+    state;
+    constructor(secret, requestHeaders, onMutation) {
+        this.secret = secret;
+        this.onMutation = onMutation;
+        this.state = { cookies: null, requestHeaders, pending: null };
+    }
+    get(name) {
+        return getCookies(this.state).get(name);
+    }
+    getSigned(name, customSecret) {
+        const signed = getCookies(this.state).get(name);
+        if (!signed)
+            return null;
+        const signingSecret = customSecret ?? this.secret;
+        if (!signingSecret)
+            return null;
+        return unsign(signed, signingSecret);
+    }
+    set(name, value, options) {
+        const cookieOptions = snapshotOptions(options);
+        validateCookie(name, cookieOptions);
+        getCookies(this.state).set(name, value);
+        getPending(this.state).push({
+            name,
+            headerString: buildCookieString(name, value, cookieOptions),
+        });
+        this.onMutation?.();
+    }
+    setSigned(name, value, options, customSecret) {
+        const signingSecret = customSecret ?? this.secret;
+        if (!signingSecret) {
+            throw new Error("A non-empty secret is required to set a signed cookie");
+        }
+        const cookieOptions = snapshotOptions(options);
+        validateCookie(name, cookieOptions);
+        const signed = sign(value, signingSecret);
+        getCookies(this.state).set(name, signed);
+        getPending(this.state).push({
+            name,
+            headerString: buildCookieString(name, signed, cookieOptions),
+        });
+        this.onMutation?.();
+    }
+    delete(name, options) {
+        const cookieOptions = snapshotOptions(options);
+        validateCookie(name, cookieOptions);
+        getCookies(this.state).delete(name);
+        getPending(this.state).push({
+            name,
+            headerString: buildCookieString(name, "", {
+                ...cookieOptions,
+                maxAge: 0,
+                expires: new Date(0),
+            }),
+        });
+        this.onMutation?.();
+    }
+    hasPending() {
+        return (this.state.pending?.length ?? 0) > 0;
+    }
+    apply(headers) {
+        const pending = this.state.pending;
+        if (pending === null)
+            return;
+        for (const cookie of pending) {
+            headers.append("set-cookie", cookie.headerString);
+        }
+        pending.length = 0;
+    }
+}
+function normalizeSameSite(value) {
+    if (!value)
+        return "Lax";
+    const lower = value.toLowerCase();
+    if (lower === "strict")
+        return "Strict";
+    if (lower === "lax")
+        return "Lax";
+    if (lower === "none")
+        return "None";
+    return value;
+}
+function buildCookieString(name, value, options) {
+    validateCookie(name, options);
+    let cookie = `${name}=${encodeURIComponent(value)}`;
+    if (options.path)
+        cookie += `; Path=${options.path}`;
+    if (options.domain)
+        cookie += `; Domain=${options.domain}`;
+    if (options.maxAge !== undefined)
+        cookie += `; Max-Age=${options.maxAge}`;
+    if (options.expires)
+        cookie += `; Expires=${options.expires.toUTCString()}`;
+    if (options.httpOnly !== false)
+        cookie += "; HttpOnly";
+    if (options.secure)
+        cookie += "; Secure";
+    const sameSite = normalizeSameSite(options.sameSite);
+    if (sameSite)
+        cookie += `; SameSite=${sameSite}`;
+    return cookie;
+}
+function sign(value, secret) {
+    const hasher = new Bun.CryptoHasher("sha256", secret);
+    hasher.update(value);
+    const sig = hasher.digest("base64url");
+    return `${value}.${sig}`;
+}
+function unsign(signedValue, secret) {
+    const lastDot = signedValue.lastIndexOf(".");
+    if (lastDot <= 0 || lastDot === signedValue.length - 1)
+        return null;
+    const value = signedValue.slice(0, lastDot);
+    const sig = signedValue.slice(lastDot + 1);
+    const hasher = new Bun.CryptoHasher("sha256", secret);
+    hasher.update(value);
+    const expected = hasher.digest("base64url");
+    const actualBytes = Buffer.from(sig);
+    const expectedBytes = Buffer.from(expected);
+    if (actualBytes.length !== expectedBytes.length)
+        return null;
+    if (!timingSafeEqual(actualBytes, expectedBytes))
+        return null;
+    return value;
+}
+function decodeCookieValue(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        // A malformed percent escape is an invalid cookie value, not a request error.
+        return value;
+    }
+}
+function validateCookie(name, options) {
+    if (!/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(name)) {
+        throw new TypeError("Cookie name must be a valid HTTP token");
+    }
+    if (options.path !== undefined &&
+        (!options.path.startsWith("/") || /[;\r\n\0]/.test(options.path))) {
+        throw new TypeError("Cookie path must start with '/' and contain no controls");
+    }
+    if (options.domain !== undefined &&
+        (!/^(?:\.?[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?)(?:\.[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?)*$/.test(options.domain) ||
+            options.domain.includes(".."))) {
+        throw new TypeError("Cookie domain is invalid");
+    }
+    if (options.maxAge !== undefined &&
+        (!Number.isSafeInteger(options.maxAge) || options.maxAge < 0)) {
+        throw new TypeError("Cookie maxAge must be a non-negative safe integer");
+    }
+    if (options.expires !== undefined &&
+        !Number.isFinite(options.expires.getTime())) {
+        throw new TypeError("Cookie expires must be a valid Date");
+    }
+    if (options.sameSite !== undefined &&
+        !["strict", "lax", "none"].includes(options.sameSite.toLowerCase())) {
+        throw new TypeError("Cookie sameSite must be Strict, Lax, or None");
+    }
+    if (options.sameSite?.toLowerCase() === "none" && !options.secure) {
+        throw new TypeError("SameSite=None cookies must also be Secure");
+    }
+    if (name.startsWith("__Secure-") && !options.secure) {
+        throw new TypeError("__Secure- cookies must also be Secure");
+    }
+    if (name.startsWith("__Host-") &&
+        (!options.secure || options.path !== "/" || options.domain !== undefined)) {
+        throw new TypeError("__Host- cookies must be Secure, use Path=/, and omit Domain");
+    }
+}
+function snapshotOptions(options) {
+    if (!options)
+        return {};
+    return {
+        ...options,
+        ...(options.expires === undefined
+            ? {}
+            : { expires: new Date(options.expires.getTime()) }),
+    };
+}
+function parseCookieHeader(header) {
+    const cookies = new Map();
+    let pos = 0;
+    const len = header.length;
+    while (pos < len) {
+        while (pos < len && header.charCodeAt(pos) === 32)
+            pos++;
+        if (pos >= len)
+            break;
+        const eq = header.indexOf("=", pos);
+        if (eq === -1)
+            break;
+        const name = header.slice(pos, eq).trim();
+        pos = eq + 1;
+        let end = header.indexOf(";", pos);
+        if (end === -1)
+            end = len;
+        const value = header.slice(pos, end);
+        if (name)
+            cookies.set(name, decodeCookieValue(value));
+        pos = end + 1;
+    }
+    return cookies;
+}
+function getCookies(state) {
+    if (state.cookies !== null)
+        return state.cookies;
+    const header = state.requestHeaders?.get("cookie") ?? "";
+    state.requestHeaders = undefined;
+    state.cookies = header.length === 0 ? new Map() : parseCookieHeader(header);
+    return state.cookies;
+}
+function getPending(state) {
+    if (state.pending === null)
+        state.pending = [];
+    return state.pending;
+}
+export function createCookieJar(secret, requestHeaders, onMutation) {
+    return new CookieJarImpl(secret ?? "", requestHeaders, onMutation);
+}
+export function hasPendingCookies(cookieJar) {
+    return cookieJar instanceof CookieJarImpl && cookieJar.hasPending();
+}
+export function applyPendingCookies(cookieJar, headers) {
+    if (!(cookieJar instanceof CookieJarImpl)) {
+        throw new TypeError("CookieJar was not created by Barq");
+    }
+    cookieJar.apply(headers);
+}
+//# sourceMappingURL=cookies.js.map

package/dist/cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../src/cookies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAc9C,MAAM,aAAa;IAIE;IAEA;IALF,KAAK,CAAc;IAEpC,YACmB,MAAc,EAC/B,cAAwB,EACP,UAAuB;QAFvB,WAAM,GAAN,MAAM,CAAQ;QAEd,eAAU,GAAV,UAAU,CAAa;QAExC,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,YAAqB;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,aAAa,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC;QAClD,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvC,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,OAA0B;QACzD,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/C,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;YAC1B,IAAI;YACJ,YAAY,EAAE,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC;SAC5D,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,SAAS,CACP,IAAY,EACZ,KAAa,EACb,OAA0B,EAC1B,YAAqB;QAErB,MAAM,aAAa,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC;QAClD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/C,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAC1C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;YAC1B,IAAI;YACJ,YAAY,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC;SAC7D,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,OAA0B;QAC7C,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/C,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;YAC1B,IAAI;YACJ,YAAY,EAAE,iBAAiB,CAAC,IAAI,EAAE,EAAE,EAAE;gBACxC,GAAG,aAAa;gBAChB,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;aACrB,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,UAAU;QACR,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,OAAgB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACnC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACrB,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACxC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,KAAa,EACb,OAAyB;IAEzB,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,MAAM,GAAG,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;IAEpD,IAAI,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC;IAC1E,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IAC5E,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;QAAE,MAAM,IAAI,YAAY,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ;QAAE,MAAM,IAAI,cAAc,QAAQ,EAAE,CAAC;IAEjD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,MAAc;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,MAAM,CAAC,WAAmB,EAAE,MAAc;IACjD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,KAAK,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,WAAW,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,OAAyB;IAC7D,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IACD,IACE,OAAO,CAAC,IAAI,KAAK,SAAS;QAC1B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EACjE,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,CAAC,CAAC,kGAAkG,CAAC,IAAI,CACvG,OAAO,CAAC,MAAM,CACf;YACC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC;IACD,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,EAC7D,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAC3E,CAAC;IACD,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;QAC7B,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC7D,CAAC;IACD,IACE,OAAO,CAAC,QAAQ,KAAK,SAAS;QAC9B,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,IACE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1B,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAA0B;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO;QACL,GAAG,OAAO;QACV,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1B,OAAO,GAAG,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE;YAAE,GAAG,EAAE,CAAC;QACzD,IAAI,GAAG,IAAI,GAAG;YAAE,MAAM;QACtB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,MAAM;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QACb,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,KAAkB;IACpC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzD,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC;IACjC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,KAAkB;IACpC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAe,EACf,cAAwB,EACxB,UAAuB;IAEvB,OAAO,IAAI,aAAa,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAoB;IACpD,OAAO,SAAS,YAAY,aAAa,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,SAAoB,EACpB,OAAgB;IAEhB,IAAI,CAAC,CAAC,SAAS,YAAY,aAAa,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;IACD,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC"}

package/dist/cors.d.ts

@@ -0,0 +1,11 @@
+import type { Middleware } from "./types";
+export interface CorsOptions {
+    origin?: string | string[] | ((origin: string) => boolean | string);
+    methods?: string[];
+    allowedHeaders?: string[];
+    exposedHeaders?: string[];
+    credentials?: boolean;
+    maxAge?: number;
+}
+export declare function cors(options?: CorsOptions): Middleware;
+//# sourceMappingURL=cors.d.ts.map

package/dist/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../src/cors.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,CAAC,CAAC;IACpE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,UAAU,CAyF1D"}

package/dist/cors.js

@@ -0,0 +1,82 @@
+export function cors(options = {}) {
+    const methods = (options.methods ?? ["GET", "HEAD", "PUT", "POST", "DELETE", "PATCH"]).join(", ");
+    const allowedHeaders = options.allowedHeaders?.join(", ");
+    const exposedHeaders = options.exposedHeaders?.join(", ");
+    const maxAge = options.maxAge !== undefined ? String(options.maxAge) : null;
+    const credentials = options.credentials === true;
+    function resolveOrigin(reqOrigin) {
+        if (!options.origin || options.origin === "*") {
+            return credentials ? (reqOrigin ?? "*") : "*";
+        }
+        if (!reqOrigin)
+            return null;
+        if (typeof options.origin === "string") {
+            return options.origin === reqOrigin ? reqOrigin : null;
+        }
+        if (Array.isArray(options.origin)) {
+            return options.origin.includes(reqOrigin) ? reqOrigin : null;
+        }
+        if (typeof options.origin === "function") {
+            const result = options.origin(reqOrigin);
+            if (typeof result === "string")
+                return result;
+            return result ? reqOrigin : null;
+        }
+        return null;
+    }
+    function setCorsHeaders(headers, matchedOrigin) {
+        if (matchedOrigin) {
+            headers.set("access-control-allow-origin", matchedOrigin);
+            if (matchedOrigin !== "*") {
+                headers.append("vary", "Origin");
+            }
+        }
+        if (credentials) {
+            headers.set("access-control-allow-credentials", "true");
+        }
+        if (exposedHeaders) {
+            headers.set("access-control-expose-headers", exposedHeaders);
+        }
+    }
+    return {
+        before(ctx) {
+            const reqOrigin = ctx.req.headers.get("origin");
+            const matchedOrigin = resolveOrigin(reqOrigin);
+            if (ctx.req.method === "OPTIONS") {
+                const headers = new Headers();
+                setCorsHeaders(headers, matchedOrigin);
+                headers.set("access-control-allow-methods", methods);
+                if (allowedHeaders) {
+                    headers.set("access-control-allow-headers", allowedHeaders);
+                }
+                else {
+                    const reqHeaders = ctx.req.headers.get("access-control-request-headers");
+                    if (reqHeaders) {
+                        headers.set("access-control-allow-headers", reqHeaders);
+                    }
+                }
+                if (maxAge) {
+                    headers.set("access-control-max-age", maxAge);
+                }
+                headers.set("content-length", "0");
+                return new Response(null, { status: 204, headers });
+            }
+            ctx.state._corsOrigin = matchedOrigin;
+        },
+        after(ctx, res) {
+            const matchedOrigin = ctx.state
+                ._corsOrigin;
+            if (matchedOrigin !== undefined) {
+                const headers = new Headers(res.headers);
+                setCorsHeaders(headers, matchedOrigin);
+                return new Response(res.body, {
+                    status: res.status,
+                    statusText: res.statusText,
+                    headers,
+                });
+            }
+            return res;
+        },
+    };
+}
+//# sourceMappingURL=cors.js.map

package/dist/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../src/cors.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,IAAI,CAAC,UAAuB,EAAE;IAC5C,MAAM,OAAO,GAAG,CACd,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC;IAEjD,SAAS,aAAa,CAAC,SAAwB;QAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC9C,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC;YAC9C,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,cAAc,CACrB,OAAgB,EAChB,aAA4B;QAE5B,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,aAAa,CAAC,CAAC;YAC1D,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;gBAC1B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,cAAc,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,CAAC,GAAY;YACjB,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;YAE/C,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC9B,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,OAAO,CAAC,CAAC;gBACrD,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;gBAC9D,CAAC;qBAAM,CAAC;oBACN,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CACpC,gCAAgC,CACjC,CAAC;oBACF,IAAI,UAAU,EAAE,CAAC;wBACf,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,UAAU,CAAC,CAAC;oBAC1D,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;gBAChD,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;gBACnC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;YAEA,GAAG,CAAC,KAAiC,CAAC,WAAW,GAAG,aAAa,CAAC;QACrE,CAAC;QACD,KAAK,CAAC,GAAY,EAAE,GAAa;YAC/B,MAAM,aAAa,GAAI,GAAG,CAAC,KAAiC;iBACzD,WAAwC,CAAC;YAC5C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACzC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBACvC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;oBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,10 @@
+export type HeadersInit = NonNullable<ResponseInit["headers"]>;
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    readonly headers?: HeadersInit;
+    constructor(status: number, body?: unknown, headers?: HeadersInit);
+}
+export declare function errorToResponse(err: unknown, development: boolean): Response;
+export declare const createErrorResponse: typeof errorToResponse;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;AAE/D,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;gBAEnB,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW;CAYlE;AAwDD,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,GAAG,QAAQ,CAa5E;AAED,eAAO,MAAM,mBAAmB,wBAAkB,CAAC"}

package/dist/errors.js

@@ -0,0 +1,81 @@
+import { json } from "./http";
+export class HttpError extends Error {
+    status;
+    body;
+    headers;
+    constructor(status, body, headers) {
+        if (!Number.isInteger(status) || status < 100 || status > 599) {
+            throw new Error(`Invalid HTTP status code: ${status}. Must be an integer between 100 and 599.`);
+        }
+        super(typeof body === "string" ? body : `HTTP ${status}`);
+        this.name = "HttpError";
+        this.status = status;
+        this.body = body ?? { error: defaultStatusText(status) };
+        if (headers !== undefined)
+            this.headers = headers;
+    }
+}
+function defaultStatusText(status) {
+    switch (status) {
+        case 400:
+            return "Bad Request";
+        case 401:
+            return "Unauthorized";
+        case 403:
+            return "Forbidden";
+        case 404:
+            return "Not Found";
+        case 405:
+            return "Method Not Allowed";
+        case 408:
+            return "Request Timeout";
+        case 409:
+            return "Conflict";
+        case 413:
+            return "Payload Too Large";
+        case 418:
+            return "I'm a teapot";
+        case 422:
+            return "Unprocessable Entity";
+        case 429:
+            return "Too Many Requests";
+        case 500:
+            return "Internal Server Error";
+        case 502:
+            return "Bad Gateway";
+        case 503:
+            return "Service Unavailable";
+        case 504:
+            return "Gateway Timeout";
+        default:
+            return status >= 500 ? "Internal Server Error" : "Error";
+    }
+}
+function safeJson(status, body, headers) {
+    try {
+        const init = headers !== undefined ? { status, headers } : { status };
+        return json(body, init);
+    }
+    catch {
+        return new Response("Internal Server Error", {
+            status: 500,
+            headers: { "content-type": "text/plain; charset=utf-8" },
+        });
+    }
+}
+export function errorToResponse(err, development) {
+    if (err instanceof Response) {
+        return err;
+    }
+    if (err instanceof HttpError) {
+        return safeJson(err.status, err.body, err.headers);
+    }
+    if (development) {
+        const message = err instanceof Error ? err.message : String(err);
+        const stack = err instanceof Error ? err.stack : undefined;
+        return safeJson(500, { error: "Internal Server Error", message, stack });
+    }
+    return safeJson(500, { error: "Internal Server Error" });
+}
+export const createErrorResponse = errorToResponse;
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAI9B,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,MAAM,CAAS;IACf,IAAI,CAAU;IACd,OAAO,CAAe;IAE/B,YAAY,MAAc,EAAE,IAAc,EAAE,OAAqB;QAC/D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,2CAA2C,CAC/E,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACpD,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,aAAa,CAAC;QACvB,KAAK,GAAG;YACN,OAAO,cAAc,CAAC;QACxB,KAAK,GAAG;YACN,OAAO,WAAW,CAAC;QACrB,KAAK,GAAG;YACN,OAAO,WAAW,CAAC;QACrB,KAAK,GAAG;YACN,OAAO,oBAAoB,CAAC;QAC9B,KAAK,GAAG;YACN,OAAO,iBAAiB,CAAC;QAC3B,KAAK,GAAG;YACN,OAAO,UAAU,CAAC;QACpB,KAAK,GAAG;YACN,OAAO,mBAAmB,CAAC;QAC7B,KAAK,GAAG;YACN,OAAO,cAAc,CAAC;QACxB,KAAK,GAAG;YACN,OAAO,sBAAsB,CAAC;QAChC,KAAK,GAAG;YACN,OAAO,mBAAmB,CAAC;QAC7B,KAAK,GAAG;YACN,OAAO,uBAAuB,CAAC;QACjC,KAAK,GAAG;YACN,OAAO,aAAa,CAAC;QACvB,KAAK,GAAG;YACN,OAAO,qBAAqB,CAAC;QAC/B,KAAK,GAAG;YACN,OAAO,iBAAiB,CAAC;QAC3B;YACE,OAAO,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,MAAc,EACd,IAAa,EACb,OAAqB;IAErB,IAAI,CAAC;QACH,MAAM,IAAI,GACR,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,QAAQ,CAAC,uBAAuB,EAAE;YAC3C,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,WAAoB;IAChE,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,7 @@
+export type HeadersInit = NonNullable<ResponseInit["headers"]>;
+export declare function isNullBodyStatus(status: number): boolean;
+export declare function json(data: unknown, init?: number | ResponseInit): Response;
+export declare function text(body: string, init?: number | ResponseInit): Response;
+export declare function empty(status?: number, headers?: HeadersInit): Response;
+export declare function redirect(url: string, status?: number, allowlist?: ReadonlySet<string>): Response;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;AAE/D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAExD;AAeD,wBAAgB,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,QAAQ,CAoC1E;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,QAAQ,CAiCzE;AAED,wBAAgB,KAAK,CAAC,MAAM,SAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,QAAQ,CAInE;AAOD,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,SAAM,EACZ,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAC9B,QAAQ,CAqCV"}

package/dist/http.js

@@ -0,0 +1,127 @@
+const NULL_BODY_STATUSES = new Set([204, 205, 304]);
+const DEFAULT_JSON_HEADERS = Object.freeze({
+    "content-type": "application/json; charset=utf-8",
+});
+const DEFAULT_JSON_INIT = Object.freeze({
+    status: 200,
+    headers: DEFAULT_JSON_HEADERS,
+});
+const DEFAULT_TEXT_HEADERS = Object.freeze({
+    "content-type": "text/plain; charset=utf-8",
+});
+export function isNullBodyStatus(status) {
+    return (status >= 100 && status < 200) || NULL_BODY_STATUSES.has(status);
+}
+function createJsonResponse(data, init) {
+    // Preserve JSON.stringify's empty-body behavior for values that do not
+    // produce a JSON value, while using Bun's native serializer otherwise.
+    if (data === undefined ||
+        typeof data === "function" ||
+        typeof data === "symbol") {
+        return new Response(JSON.stringify(data), init);
+    }
+    return Response.json(data, init);
+}
+export function json(data, init) {
+    if (init === undefined) {
+        if (typeof data === "object" && data !== null) {
+            return new Response(JSON.stringify(data), DEFAULT_JSON_INIT);
+        }
+        return createJsonResponse(data, DEFAULT_JSON_INIT);
+    }
+    if (typeof init === "number") {
+        if (isNullBodyStatus(init)) {
+            return new Response(null, { status: init });
+        }
+        return createJsonResponse(data, {
+            status: init,
+            headers: DEFAULT_JSON_HEADERS,
+        });
+    }
+    const status = init.status ?? 200;
+    if (isNullBodyStatus(status)) {
+        return new Response(null, { ...init, status });
+    }
+    if (init.headers === undefined) {
+        return createJsonResponse(data, {
+            ...init,
+            status,
+            headers: DEFAULT_JSON_HEADERS,
+        });
+    }
+    const headers = new Headers(init.headers);
+    if (!headers.has("content-type")) {
+        headers.set("content-type", "application/json; charset=utf-8");
+    }
+    return createJsonResponse(data, { ...init, status, headers });
+}
+export function text(body, init) {
+    if (init === undefined) {
+        return new Response(body);
+    }
+    if (typeof init === "number") {
+        if (isNullBodyStatus(init)) {
+            return new Response(null, { status: init });
+        }
+        return new Response(body, {
+            status: init,
+            headers: DEFAULT_TEXT_HEADERS,
+        });
+    }
+    const status = init.status ?? 200;
+    if (isNullBodyStatus(status)) {
+        return new Response(null, { ...init, status });
+    }
+    if (init.headers === undefined) {
+        return new Response(body, {
+            ...init,
+            status,
+            headers: DEFAULT_TEXT_HEADERS,
+        });
+    }
+    const headers = new Headers(init.headers);
+    if (!headers.has("content-type")) {
+        headers.set("content-type", "text/plain; charset=utf-8");
+    }
+    return new Response(body, { ...init, status, headers });
+}
+export function empty(status = 204, headers) {
+    const init = headers !== undefined ? { status, headers } : { status };
+    return new Response(null, init);
+}
+// biome-ignore lint/suspicious/noControlCharactersInRegex: This regex detects control characters in redirect targets.
+const CONTROL_CHARS = /[\u0000-\u001f\u007f]/;
+const ALLOWED_REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+export function redirect(url, status = 302, allowlist) {
+    if (!ALLOWED_REDIRECT_STATUSES.has(status)) {
+        throw new TypeError(`redirect status must be one of: ${Array.from(ALLOWED_REDIRECT_STATUSES).join(", ")}`);
+    }
+    if (CONTROL_CHARS.test(url) || url.includes("\\")) {
+        throw new TypeError("redirect target contains control or backslash characters");
+    }
+    if (url.charCodeAt(0) === 47) {
+        if (url.charCodeAt(1) === 47) {
+            throw new TypeError("redirect target must not be protocol-relative");
+        }
+    }
+    else {
+        let parsed;
+        try {
+            parsed = new URL(url);
+        }
+        catch {
+            throw new TypeError("redirect target must be a root-relative path or an absolute URL");
+        }
+        if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+            throw new TypeError(`redirect target protocol is not allowed: ${parsed.protocol}`);
+        }
+        const host = parsed.host.toLowerCase();
+        if (allowlist !== undefined && !allowlist.has(host)) {
+            throw new TypeError(`redirect target host is not allowlisted: ${host}`);
+        }
+    }
+    const res = new Response(null, { status });
+    res.headers.set("location", url);
+    return res;
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AACzE,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,cAAc,EAAE,iCAAiC;CAClD,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAiB,MAAM,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,GAAG;IACX,OAAO,EAAE,oBAAoB;CAC9B,CAAC,CAAC;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,cAAc,EAAE,2BAA2B;CAC5C,CAAC,CAAC;AAGH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa,EAAE,IAAkB;IAC3D,uEAAuE;IACvE,uEAAuE;IACvE,IACE,IAAI,KAAK,SAAS;QAClB,OAAO,IAAI,KAAK,UAAU;QAC1B,OAAO,IAAI,KAAK,QAAQ,EACxB,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAa,EAAE,IAA4B;IAC9D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,kBAAkB,CAAC,IAAI,EAAE;YAC9B,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC;IAClC,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,kBAAkB,CAAC,IAAI,EAAE;YAC9B,GAAG,IAAI;YACP,MAAM;YACN,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAY,EAAE,IAA4B;IAC7D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC;IAClC,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,GAAG,IAAI;YACP,MAAM;YACN,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,OAAqB;IACvD,MAAM,IAAI,GACR,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,sHAAsH;AACtH,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAErE,MAAM,UAAU,QAAQ,CACtB,GAAW,EACX,MAAM,GAAG,GAAG,EACZ,SAA+B;IAE/B,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CACjB,mCAAmC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CACjB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CACjB,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,SAAS,CACjB,4CAA4C,MAAM,CAAC,QAAQ,EAAE,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+export type { AppOptions, RouteHandlerArg, ShutdownResult, WebSocketOptions, } from "./app";
+export { App, RouteGroup } from "./app";
+export type { ContextApplication } from "./context";
+export { Context } from "./context";
+export { createCookieJar } from "./cookies";
+export type { CorsOptions } from "./cors";
+export { cors } from "./cors";
+export { createErrorResponse, errorToResponse, HttpError } from "./errors";
+export { empty, json, redirect, text } from "./http";
+export { parseRequestTarget } from "./internal/pathname";
+export type { MiddlewareDispatcher } from "./middleware";
+export { composeMiddlewareDispatcher, composeMiddlewares, isThenable, runPipeline, unwindAfter, } from "./middleware";
+export type { BeforeResult, CookieJar, ErrorHandler, Handler, HandlerResult, HttpMethod, Middleware, NotFoundHandler, Params, ResponseHandler, RouteParams, SetCookieOptions, WebSocketHandlers, } from "./types";
+export type { StandardSchemaV1, StandardSchemaV1Issue, Validator, } from "./validation";
+export { validateJson } from "./validation";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,UAAU,EACV,eAAe,EACf,cAAc,EACd,gBAAgB,GACjB,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,YAAY,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,UAAU,EACV,WAAW,EACX,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,OAAO,EACP,aAAa,EACb,UAAU,EACV,UAAU,EACV,eAAe,EACf,MAAM,EACN,eAAe,EACf,WAAW,EACX,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,SAAS,GACV,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+export { App, RouteGroup } from "./app";
+export { Context } from "./context";
+export { createCookieJar } from "./cookies";
+export { cors } from "./cors";
+export { createErrorResponse, errorToResponse, HttpError } from "./errors";
+export { empty, json, redirect, text } from "./http";
+export { parseRequestTarget } from "./internal/pathname";
+export { composeMiddlewareDispatcher, composeMiddlewares, isThenable, runPipeline, unwindAfter, } from "./middleware";
+export { validateJson } from "./validation";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,UAAU,EACV,WAAW,EACX,WAAW,GACZ,MAAM,cAAc,CAAC;AAqBtB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/internal/ip.d.ts

@@ -0,0 +1,6 @@
+export type IpMatcher = (ip: string) => boolean;
+export declare function compileTrustProxy(trust: boolean | string | readonly string[] | ((ip: string) => boolean) | undefined): IpMatcher;
+export declare function isIpRange(value: string): boolean;
+export declare function ipMatchesRange(ip: string, range: string): boolean;
+export declare function isValidIpAddress(value: string): boolean;
+//# sourceMappingURL=ip.d.ts.map