@blinkk/root 1.0.0-beta.59 → 1.0.0-beta.60

package/dist/{chunk-JXDXYAPH.js → chunk-AJF5RXXV.js}

@@ -136,14 +136,17 @@ var Session = class {
   }
   static fromCookieValue(cookieValue) {
     const data = {};
-    try {
-      const params = new URLSearchParams(base64Decode(cookieValue));
-      for (const [key, value] of params.entries()) {
-        data[key] = value;
+    if (cookieValue.startsWith("b64:")) {
+      try {
+        const encodedStr = cookieValue.slice(4);
+        const params = new URLSearchParams(base64Decode(encodedStr));
+        for (const [key, value] of params.entries()) {
+          data[key] = value;
+        }
+      } catch (err) {
+        console.warn("failed to parse session cookie:", err);
+        return new Session();
       }
-    } catch (err) {
-      console.warn("failed to parse session cookie:", err);
-      return new Session();
     }
     return new Session(data);
   }
@@ -158,7 +161,7 @@ var Session = class {
   }
   toString() {
     const params = new URLSearchParams(this.data);
-    return base64Encode(params.toString());
+    return `b64:${base64Encode(params.toString())}`;
   }
 };
 function base64Encode(str) {
@@ -176,4 +179,4 @@ export {
   sessionMiddleware,
   Session
 };
-//# sourceMappingURL=chunk-JXDXYAPH.js.map
+//# sourceMappingURL=chunk-AJF5RXXV.js.map

package/dist/{chunk-JXDXYAPH.js.map → chunk-AJF5RXXV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/middleware/common.ts","../src/middleware/multipart.ts","../src/middleware/session.ts"],"sourcesContent":["import path from 'node:path';\nimport {RootConfig} from '../core/config';\nimport {Request, Response, NextFunction} from '../core/types';\n\n/**\n * Middleware that injects the root.js project config into the request context.\n */\nexport function rootProjectMiddleware(options: {rootConfig: RootConfig}) {\n  return (req: Request, _: Response, next: NextFunction) => {\n    req.rootConfig = options.rootConfig;\n    next();\n  };\n}\n\n/**\n * Trailing slash middleware. Handles trailing slash redirects (preserving any\n * query params) using the `server.trailingSlash` config in root.config.ts.\n */\nexport function trailingSlashMiddleware(options: {rootConfig: RootConfig}) {\n  const trailingSlash = options.rootConfig.server?.trailingSlash;\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    // If `trailingSlash: false`, force a trailing slash in the URL.\n    if (\n      trailingSlash === true &&\n      !path.extname(req.path) &&\n      !req.path.endsWith('/')\n    ) {\n      const redirectPath = `${req.path}/`;\n      redirectWithQuery(req, res, 301, redirectPath);\n      return;\n    }\n\n    // If `trailingSlash: false`, remove any trailing slash from the URL.\n    if (\n      trailingSlash === false &&\n      !path.extname(req.path) &&\n      req.path !== '/' &&\n      req.path.endsWith('/')\n    ) {\n      const redirectPath = removeTrailingSlashes(req.path);\n      redirectWithQuery(req, res, 301, redirectPath);\n      return;\n    }\n\n    next();\n  };\n}\n\n/**\n * Issues an HTTP redirect, preserving any query params from the original req.\n */\nfunction redirectWithQuery(\n  req: Request,\n  res: Response,\n  redirectCode: number,\n  redirectPath: string\n) {\n  const queryStr = getQueryStr(req);\n  const redirectUrl = queryStr ? `${redirectPath}?${queryStr}` : redirectPath;\n  res.redirect(redirectCode, redirectUrl);\n}\n\n/**\n * Returns the query string for a request, or empty string if no query.\n */\nfunction getQueryStr(req: Request): string {\n  const qIndex = req.originalUrl.indexOf('?');\n  if (qIndex === -1) {\n    return '';\n  }\n  return req.originalUrl.slice(qIndex + 1);\n}\n\n/**\n * Removes trailing slashes from a URL path.\n * Note: A path with only slashes (e.g. `///`) returns `/`.\n */\nfunction removeTrailingSlashes(urlPath: string) {\n  while (urlPath.endsWith('/') && urlPath !== '/') {\n    urlPath = urlPath.slice(0, -1);\n  }\n  return urlPath;\n}\n","import busboy from 'busboy';\nimport {Request, Response, NextFunction, MultipartFile} from '../core/types';\n\nconst DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024; // 10MB\n\n/**\n * Middleware for parsing multipart file uploads that's compatible with the dev\n * server and Firebase Functions.\n *\n * Context:\n * https://stackoverflow.com/questions/47242340/how-to-perform-an-http-file-upload-using-express-on-cloud-functions-for-firebase\n */\nexport function multipartMiddleware(options?: {maxFileSize?: number}) {\n  const maxFileSize = options?.maxFileSize || DEFAULT_MAX_FILE_SIZE;\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    const contentType = String(req.headers['content-type'] || '');\n    if (\n      req.method === 'POST' &&\n      contentType.startsWith('multipart/form-data')\n    ) {\n      const parser = busboy({headers: req.headers});\n\n      // Data storage for fields and files\n      const fields: {[fieldname: string]: string} = {};\n      const files: {[name: string]: MultipartFile} = {};\n\n      // Handle field data.\n      parser.on('field', (fieldname: string, val: any) => {\n        fields[fieldname] = val;\n      });\n\n      // Handle file data. Files are saved to an in-memory buffer.\n      parser.on(\n        'file',\n        (\n          fieldname: string,\n          file: any,\n          meta: {\n            filename: string;\n            encoding: string;\n            mimeType: string;\n          }\n        ) => {\n          const {filename, encoding, mimeType: mimetype} = meta;\n          const fileChunks: Uint8Array[] = [];\n          let totalBytesRead = 0;\n\n          file.on('data', (chunk: Uint8Array) => {\n            totalBytesRead += chunk.length;\n\n            if (totalBytesRead > maxFileSize) {\n              // File size exceeds the limit, stop reading.\n              console.error(`File size exceeds the limit: ${fieldname}.`);\n              file.removeAllListeners('data');\n              // Consume and discard remaining data.\n              file.resume();\n            } else {\n              fileChunks.push(chunk);\n            }\n          });\n\n          file.on('end', () => {\n            if (totalBytesRead <= maxFileSize) {\n              const buffer = Buffer.concat(fileChunks);\n\n              files[fieldname] = {\n                fieldname,\n                buffer,\n                originalName: filename,\n                encoding,\n                mimetype,\n              };\n            }\n          });\n        }\n      );\n\n      // Update `req.body` and `req.files`.\n      parser.on('finish', () => {\n        req.body = fields;\n        req.files = files;\n        next();\n      });\n\n      // Pipe the request to Busboy. On Firebase Functions, `rawBody` contains\n      // the multipart request. Otherwise the express request can be piped to\n      // the Busboy parser.\n      if (req.rawBody) {\n        parser.end(req.rawBody);\n      } else {\n        req.pipe(parser);\n      }\n    } else {\n      next();\n    }\n  };\n}\n","import {NextFunction, Request, Response} from '../core/types';\n\nexport const SESSION_COOKIE = '__session';\n\n// 5 days.\nconst DEFAULT_MAX_AGE = 60 * 60 * 24 * 5 * 1000;\n\nexport interface SessionMiddlewareOptions {\n  maxAge?: number;\n}\n\n/**\n * Middleware for storing session data stored in an http cookie called\n * `__session`. This cookie is compatible with Firebase Hosting:\n * https://firebase.google.com/docs/hosting/manage-cache#using_cookies\n */\nexport function sessionMiddleware(options?: SessionMiddlewareOptions) {\n  const maxAge = options?.maxAge || DEFAULT_MAX_AGE;\n  return (req: Request, res: Response, next: NextFunction) => {\n    const cookieValue = String(req.signedCookies[SESSION_COOKIE] || '');\n    const session = Session.fromCookieValue(cookieValue);\n    req.session = session;\n    res.session = session;\n    res.saveSession = () => {\n      // \"secure\" cookies require https, so disable \"secure\" when in development.\n      const secureCookie = Boolean(process.env.NODE_ENV !== 'development');\n      const cookieValue = session.toString();\n      res.cookie(SESSION_COOKIE, cookieValue, {\n        maxAge: maxAge,\n        httpOnly: true,\n        secure: secureCookie,\n        signed: true,\n        sameSite: 'strict',\n      });\n    };\n    req.hooks.add('beforeRender', () => {\n      res.saveSession();\n    });\n    next();\n  };\n}\n\nexport class Session {\n  private data: Record<string, string> = {};\n\n  constructor(data?: Record<string, string>) {\n    this.data = data || {};\n  }\n\n  static fromCookieValue(cookieValue: string) {\n    const data: Record<string, string> = {};\n    try {\n      const params = new URLSearchParams(base64Decode(cookieValue));\n      for (const [key, value] of params.entries()) {\n        data[key] = value;\n      }\n    } catch (err) {\n      console.warn('failed to parse session cookie:', err);\n      return new Session();\n    }\n    return new Session(data);\n  }\n\n  getItem(key: string): string | null {\n    return this.data[key] ?? null;\n  }\n\n  setItem(key: string, value: string) {\n    this.data[key] = value;\n  }\n\n  removeItem(key: string) {\n    delete this.data[key];\n  }\n\n  toString(): string {\n    const params = new URLSearchParams(this.data);\n    return base64Encode(params.toString());\n  }\n}\n\nfunction base64Encode(str: string): string {\n  return Buffer.from(str, 'utf-8').toString('base64');\n}\n\nfunction base64Decode(str: string): string {\n  return Buffer.from(str, 'base64').toString('utf-8');\n}\n"],"mappings":";AAAA,OAAO,UAAU;AAOV,SAAS,sBAAsB,SAAmC;AACvE,SAAO,CAAC,KAAc,GAAa,SAAuB;AACxD,QAAI,aAAa,QAAQ;AACzB,SAAK;AAAA,EACP;AACF;AAMO,SAAS,wBAAwB,SAAmC;AAlB3E;AAmBE,QAAM,iBAAgB,aAAQ,WAAW,WAAnB,mBAA2B;AAEjD,SAAO,CAAC,KAAc,KAAe,SAAuB;AAE1D,QACE,kBAAkB,QAClB,CAAC,KAAK,QAAQ,IAAI,IAAI,KACtB,CAAC,IAAI,KAAK,SAAS,GAAG,GACtB;AACA,YAAM,eAAe,GAAG,IAAI;AAC5B,wBAAkB,KAAK,KAAK,KAAK,YAAY;AAC7C;AAAA,IACF;AAGA,QACE,kBAAkB,SAClB,CAAC,KAAK,QAAQ,IAAI,IAAI,KACtB,IAAI,SAAS,OACb,IAAI,KAAK,SAAS,GAAG,GACrB;AACA,YAAM,eAAe,sBAAsB,IAAI,IAAI;AACnD,wBAAkB,KAAK,KAAK,KAAK,YAAY;AAC7C;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;AAKA,SAAS,kBACP,KACA,KACA,cACA,cACA;AACA,QAAM,WAAW,YAAY,GAAG;AAChC,QAAM,cAAc,WAAW,GAAG,gBAAgB,aAAa;AAC/D,MAAI,SAAS,cAAc,WAAW;AACxC;AAKA,SAAS,YAAY,KAAsB;AACzC,QAAM,SAAS,IAAI,YAAY,QAAQ,GAAG;AAC1C,MAAI,WAAW,IAAI;AACjB,WAAO;AAAA,EACT;AACA,SAAO,IAAI,YAAY,MAAM,SAAS,CAAC;AACzC;AAMA,SAAS,sBAAsB,SAAiB;AAC9C,SAAO,QAAQ,SAAS,GAAG,KAAK,YAAY,KAAK;AAC/C,cAAU,QAAQ,MAAM,GAAG,EAAE;AAAA,EAC/B;AACA,SAAO;AACT;;;ACnFA,OAAO,YAAY;AAGnB,IAAM,wBAAwB,KAAK,OAAO;AASnC,SAAS,oBAAoB,SAAkC;AACpE,QAAM,eAAc,mCAAS,gBAAe;AAE5C,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,UAAM,cAAc,OAAO,IAAI,QAAQ,mBAAmB,EAAE;AAC5D,QACE,IAAI,WAAW,UACf,YAAY,WAAW,qBAAqB,GAC5C;AACA,YAAM,SAAS,OAAO,EAAC,SAAS,IAAI,QAAO,CAAC;AAG5C,YAAM,SAAwC,CAAC;AAC/C,YAAM,QAAyC,CAAC;AAGhD,aAAO,GAAG,SAAS,CAAC,WAAmB,QAAa;AAClD,eAAO,aAAa;AAAA,MACtB,CAAC;AAGD,aAAO;AAAA,QACL;AAAA,QACA,CACE,WACA,MACA,SAKG;AACH,gBAAM,EAAC,UAAU,UAAU,UAAU,SAAQ,IAAI;AACjD,gBAAM,aAA2B,CAAC;AAClC,cAAI,iBAAiB;AAErB,eAAK,GAAG,QAAQ,CAAC,UAAsB;AACrC,8BAAkB,MAAM;AAExB,gBAAI,iBAAiB,aAAa;AAEhC,sBAAQ,MAAM,gCAAgC,YAAY;AAC1D,mBAAK,mBAAmB,MAAM;AAE9B,mBAAK,OAAO;AAAA,YACd,OAAO;AACL,yBAAW,KAAK,KAAK;AAAA,YACvB;AAAA,UACF,CAAC;AAED,eAAK,GAAG,OAAO,MAAM;AACnB,gBAAI,kBAAkB,aAAa;AACjC,oBAAM,SAAS,OAAO,OAAO,UAAU;AAEvC,oBAAM,aAAa;AAAA,gBACjB;AAAA,gBACA;AAAA,gBACA,cAAc;AAAA,gBACd;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAGA,aAAO,GAAG,UAAU,MAAM;AACxB,YAAI,OAAO;AACX,YAAI,QAAQ;AACZ,aAAK;AAAA,MACP,CAAC;AAKD,UAAI,IAAI,SAAS;AACf,eAAO,IAAI,IAAI,OAAO;AAAA,MACxB,OAAO;AACL,YAAI,KAAK,MAAM;AAAA,MACjB;AAAA,IACF,OAAO;AACL,WAAK;AAAA,IACP;AAAA,EACF;AACF;;;AC/FO,IAAM,iBAAiB;AAG9B,IAAM,kBAAkB,KAAK,KAAK,KAAK,IAAI;AAWpC,SAAS,kBAAkB,SAAoC;AACpE,QAAM,UAAS,mCAAS,WAAU;AAClC,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,UAAM,cAAc,OAAO,IAAI,cAAc,mBAAmB,EAAE;AAClE,UAAM,UAAU,QAAQ,gBAAgB,WAAW;AACnD,QAAI,UAAU;AACd,QAAI,UAAU;AACd,QAAI,cAAc,MAAM;AAEtB,YAAM,eAAe,QAAQ,QAAQ,IAAI,aAAa,aAAa;AACnE,YAAMA,eAAc,QAAQ,SAAS;AACrC,UAAI,OAAO,gBAAgBA,cAAa;AAAA,QACtC;AAAA,QACA,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,QAAI,MAAM,IAAI,gBAAgB,MAAM;AAClC,UAAI,YAAY;AAAA,IAClB,CAAC;AACD,SAAK;AAAA,EACP;AACF;AAEO,IAAM,UAAN,MAAc;AAAA,EAGnB,YAAY,MAA+B;AAF3C,SAAQ,OAA+B,CAAC;AAGtC,SAAK,OAAO,QAAQ,CAAC;AAAA,EACvB;AAAA,EAEA,OAAO,gBAAgB,aAAqB;AAC1C,UAAM,OAA+B,CAAC;AACtC,QAAI;AACF,YAAM,SAAS,IAAI,gBAAgB,aAAa,WAAW,CAAC;AAC5D,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG;AAC3C,aAAK,OAAO;AAAA,MACd;AAAA,IACF,SAAS,KAAP;AACA,cAAQ,KAAK,mCAAmC,GAAG;AACnD,aAAO,IAAI,QAAQ;AAAA,IACrB;AACA,WAAO,IAAI,QAAQ,IAAI;AAAA,EACzB;AAAA,EAEA,QAAQ,KAA4B;AAClC,WAAO,KAAK,KAAK,QAAQ;AAAA,EAC3B;AAAA,EAEA,QAAQ,KAAa,OAAe;AAClC,SAAK,KAAK,OAAO;AAAA,EACnB;AAAA,EAEA,WAAW,KAAa;AACtB,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,WAAmB;AACjB,UAAM,SAAS,IAAI,gBAAgB,KAAK,IAAI;AAC5C,WAAO,aAAa,OAAO,SAAS,CAAC;AAAA,EACvC;AACF;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,QAAQ;AACpD;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,OAAO;AACpD;","names":["cookieValue"]}
+{"version":3,"sources":["../src/middleware/common.ts","../src/middleware/multipart.ts","../src/middleware/session.ts"],"sourcesContent":["import path from 'node:path';\nimport {RootConfig} from '../core/config';\nimport {Request, Response, NextFunction} from '../core/types';\n\n/**\n * Middleware that injects the root.js project config into the request context.\n */\nexport function rootProjectMiddleware(options: {rootConfig: RootConfig}) {\n  return (req: Request, _: Response, next: NextFunction) => {\n    req.rootConfig = options.rootConfig;\n    next();\n  };\n}\n\n/**\n * Trailing slash middleware. Handles trailing slash redirects (preserving any\n * query params) using the `server.trailingSlash` config in root.config.ts.\n */\nexport function trailingSlashMiddleware(options: {rootConfig: RootConfig}) {\n  const trailingSlash = options.rootConfig.server?.trailingSlash;\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    // If `trailingSlash: false`, force a trailing slash in the URL.\n    if (\n      trailingSlash === true &&\n      !path.extname(req.path) &&\n      !req.path.endsWith('/')\n    ) {\n      const redirectPath = `${req.path}/`;\n      redirectWithQuery(req, res, 301, redirectPath);\n      return;\n    }\n\n    // If `trailingSlash: false`, remove any trailing slash from the URL.\n    if (\n      trailingSlash === false &&\n      !path.extname(req.path) &&\n      req.path !== '/' &&\n      req.path.endsWith('/')\n    ) {\n      const redirectPath = removeTrailingSlashes(req.path);\n      redirectWithQuery(req, res, 301, redirectPath);\n      return;\n    }\n\n    next();\n  };\n}\n\n/**\n * Issues an HTTP redirect, preserving any query params from the original req.\n */\nfunction redirectWithQuery(\n  req: Request,\n  res: Response,\n  redirectCode: number,\n  redirectPath: string\n) {\n  const queryStr = getQueryStr(req);\n  const redirectUrl = queryStr ? `${redirectPath}?${queryStr}` : redirectPath;\n  res.redirect(redirectCode, redirectUrl);\n}\n\n/**\n * Returns the query string for a request, or empty string if no query.\n */\nfunction getQueryStr(req: Request): string {\n  const qIndex = req.originalUrl.indexOf('?');\n  if (qIndex === -1) {\n    return '';\n  }\n  return req.originalUrl.slice(qIndex + 1);\n}\n\n/**\n * Removes trailing slashes from a URL path.\n * Note: A path with only slashes (e.g. `///`) returns `/`.\n */\nfunction removeTrailingSlashes(urlPath: string) {\n  while (urlPath.endsWith('/') && urlPath !== '/') {\n    urlPath = urlPath.slice(0, -1);\n  }\n  return urlPath;\n}\n","import busboy from 'busboy';\nimport {Request, Response, NextFunction, MultipartFile} from '../core/types';\n\nconst DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024; // 10MB\n\n/**\n * Middleware for parsing multipart file uploads that's compatible with the dev\n * server and Firebase Functions.\n *\n * Context:\n * https://stackoverflow.com/questions/47242340/how-to-perform-an-http-file-upload-using-express-on-cloud-functions-for-firebase\n */\nexport function multipartMiddleware(options?: {maxFileSize?: number}) {\n  const maxFileSize = options?.maxFileSize || DEFAULT_MAX_FILE_SIZE;\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    const contentType = String(req.headers['content-type'] || '');\n    if (\n      req.method === 'POST' &&\n      contentType.startsWith('multipart/form-data')\n    ) {\n      const parser = busboy({headers: req.headers});\n\n      // Data storage for fields and files\n      const fields: {[fieldname: string]: string} = {};\n      const files: {[name: string]: MultipartFile} = {};\n\n      // Handle field data.\n      parser.on('field', (fieldname: string, val: any) => {\n        fields[fieldname] = val;\n      });\n\n      // Handle file data. Files are saved to an in-memory buffer.\n      parser.on(\n        'file',\n        (\n          fieldname: string,\n          file: any,\n          meta: {\n            filename: string;\n            encoding: string;\n            mimeType: string;\n          }\n        ) => {\n          const {filename, encoding, mimeType: mimetype} = meta;\n          const fileChunks: Uint8Array[] = [];\n          let totalBytesRead = 0;\n\n          file.on('data', (chunk: Uint8Array) => {\n            totalBytesRead += chunk.length;\n\n            if (totalBytesRead > maxFileSize) {\n              // File size exceeds the limit, stop reading.\n              console.error(`File size exceeds the limit: ${fieldname}.`);\n              file.removeAllListeners('data');\n              // Consume and discard remaining data.\n              file.resume();\n            } else {\n              fileChunks.push(chunk);\n            }\n          });\n\n          file.on('end', () => {\n            if (totalBytesRead <= maxFileSize) {\n              const buffer = Buffer.concat(fileChunks);\n\n              files[fieldname] = {\n                fieldname,\n                buffer,\n                originalName: filename,\n                encoding,\n                mimetype,\n              };\n            }\n          });\n        }\n      );\n\n      // Update `req.body` and `req.files`.\n      parser.on('finish', () => {\n        req.body = fields;\n        req.files = files;\n        next();\n      });\n\n      // Pipe the request to Busboy. On Firebase Functions, `rawBody` contains\n      // the multipart request. Otherwise the express request can be piped to\n      // the Busboy parser.\n      if (req.rawBody) {\n        parser.end(req.rawBody);\n      } else {\n        req.pipe(parser);\n      }\n    } else {\n      next();\n    }\n  };\n}\n","import {NextFunction, Request, Response} from '../core/types';\n\nexport const SESSION_COOKIE = '__session';\n\n// 5 days.\nconst DEFAULT_MAX_AGE = 60 * 60 * 24 * 5 * 1000;\n\nexport interface SessionMiddlewareOptions {\n  maxAge?: number;\n}\n\n/**\n * Middleware for storing session data stored in an http cookie called\n * `__session`. This cookie is compatible with Firebase Hosting:\n * https://firebase.google.com/docs/hosting/manage-cache#using_cookies\n */\nexport function sessionMiddleware(options?: SessionMiddlewareOptions) {\n  const maxAge = options?.maxAge || DEFAULT_MAX_AGE;\n  return (req: Request, res: Response, next: NextFunction) => {\n    const cookieValue = String(req.signedCookies[SESSION_COOKIE] || '');\n    const session = Session.fromCookieValue(cookieValue);\n    req.session = session;\n    res.session = session;\n    res.saveSession = () => {\n      // \"secure\" cookies require https, so disable \"secure\" when in development.\n      const secureCookie = Boolean(process.env.NODE_ENV !== 'development');\n      const cookieValue = session.toString();\n      res.cookie(SESSION_COOKIE, cookieValue, {\n        maxAge: maxAge,\n        httpOnly: true,\n        secure: secureCookie,\n        signed: true,\n        sameSite: 'strict',\n      });\n    };\n    req.hooks.add('beforeRender', () => {\n      res.saveSession();\n    });\n    next();\n  };\n}\n\nexport class Session {\n  private data: Record<string, string> = {};\n\n  constructor(data?: Record<string, string>) {\n    this.data = data || {};\n  }\n\n  static fromCookieValue(cookieValue: string) {\n    const data: Record<string, string> = {};\n    if (cookieValue.startsWith('b64:')) {\n      try {\n        const encodedStr = cookieValue.slice(4);\n        const params = new URLSearchParams(base64Decode(encodedStr));\n        for (const [key, value] of params.entries()) {\n          data[key] = value;\n        }\n      } catch (err) {\n        console.warn('failed to parse session cookie:', err);\n        return new Session();\n      }\n    }\n    return new Session(data);\n  }\n\n  getItem(key: string): string | null {\n    return this.data[key] ?? null;\n  }\n\n  setItem(key: string, value: string) {\n    this.data[key] = value;\n  }\n\n  removeItem(key: string) {\n    delete this.data[key];\n  }\n\n  toString(): string {\n    const params = new URLSearchParams(this.data);\n    return `b64:${base64Encode(params.toString())}`;\n  }\n}\n\nfunction base64Encode(str: string): string {\n  return Buffer.from(str, 'utf-8').toString('base64');\n}\n\nfunction base64Decode(str: string): string {\n  return Buffer.from(str, 'base64').toString('utf-8');\n}\n"],"mappings":";AAAA,OAAO,UAAU;AAOV,SAAS,sBAAsB,SAAmC;AACvE,SAAO,CAAC,KAAc,GAAa,SAAuB;AACxD,QAAI,aAAa,QAAQ;AACzB,SAAK;AAAA,EACP;AACF;AAMO,SAAS,wBAAwB,SAAmC;AAlB3E;AAmBE,QAAM,iBAAgB,aAAQ,WAAW,WAAnB,mBAA2B;AAEjD,SAAO,CAAC,KAAc,KAAe,SAAuB;AAE1D,QACE,kBAAkB,QAClB,CAAC,KAAK,QAAQ,IAAI,IAAI,KACtB,CAAC,IAAI,KAAK,SAAS,GAAG,GACtB;AACA,YAAM,eAAe,GAAG,IAAI;AAC5B,wBAAkB,KAAK,KAAK,KAAK,YAAY;AAC7C;AAAA,IACF;AAGA,QACE,kBAAkB,SAClB,CAAC,KAAK,QAAQ,IAAI,IAAI,KACtB,IAAI,SAAS,OACb,IAAI,KAAK,SAAS,GAAG,GACrB;AACA,YAAM,eAAe,sBAAsB,IAAI,IAAI;AACnD,wBAAkB,KAAK,KAAK,KAAK,YAAY;AAC7C;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;AAKA,SAAS,kBACP,KACA,KACA,cACA,cACA;AACA,QAAM,WAAW,YAAY,GAAG;AAChC,QAAM,cAAc,WAAW,GAAG,gBAAgB,aAAa;AAC/D,MAAI,SAAS,cAAc,WAAW;AACxC;AAKA,SAAS,YAAY,KAAsB;AACzC,QAAM,SAAS,IAAI,YAAY,QAAQ,GAAG;AAC1C,MAAI,WAAW,IAAI;AACjB,WAAO;AAAA,EACT;AACA,SAAO,IAAI,YAAY,MAAM,SAAS,CAAC;AACzC;AAMA,SAAS,sBAAsB,SAAiB;AAC9C,SAAO,QAAQ,SAAS,GAAG,KAAK,YAAY,KAAK;AAC/C,cAAU,QAAQ,MAAM,GAAG,EAAE;AAAA,EAC/B;AACA,SAAO;AACT;;;ACnFA,OAAO,YAAY;AAGnB,IAAM,wBAAwB,KAAK,OAAO;AASnC,SAAS,oBAAoB,SAAkC;AACpE,QAAM,eAAc,mCAAS,gBAAe;AAE5C,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,UAAM,cAAc,OAAO,IAAI,QAAQ,mBAAmB,EAAE;AAC5D,QACE,IAAI,WAAW,UACf,YAAY,WAAW,qBAAqB,GAC5C;AACA,YAAM,SAAS,OAAO,EAAC,SAAS,IAAI,QAAO,CAAC;AAG5C,YAAM,SAAwC,CAAC;AAC/C,YAAM,QAAyC,CAAC;AAGhD,aAAO,GAAG,SAAS,CAAC,WAAmB,QAAa;AAClD,eAAO,aAAa;AAAA,MACtB,CAAC;AAGD,aAAO;AAAA,QACL;AAAA,QACA,CACE,WACA,MACA,SAKG;AACH,gBAAM,EAAC,UAAU,UAAU,UAAU,SAAQ,IAAI;AACjD,gBAAM,aAA2B,CAAC;AAClC,cAAI,iBAAiB;AAErB,eAAK,GAAG,QAAQ,CAAC,UAAsB;AACrC,8BAAkB,MAAM;AAExB,gBAAI,iBAAiB,aAAa;AAEhC,sBAAQ,MAAM,gCAAgC,YAAY;AAC1D,mBAAK,mBAAmB,MAAM;AAE9B,mBAAK,OAAO;AAAA,YACd,OAAO;AACL,yBAAW,KAAK,KAAK;AAAA,YACvB;AAAA,UACF,CAAC;AAED,eAAK,GAAG,OAAO,MAAM;AACnB,gBAAI,kBAAkB,aAAa;AACjC,oBAAM,SAAS,OAAO,OAAO,UAAU;AAEvC,oBAAM,aAAa;AAAA,gBACjB;AAAA,gBACA;AAAA,gBACA,cAAc;AAAA,gBACd;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAGA,aAAO,GAAG,UAAU,MAAM;AACxB,YAAI,OAAO;AACX,YAAI,QAAQ;AACZ,aAAK;AAAA,MACP,CAAC;AAKD,UAAI,IAAI,SAAS;AACf,eAAO,IAAI,IAAI,OAAO;AAAA,MACxB,OAAO;AACL,YAAI,KAAK,MAAM;AAAA,MACjB;AAAA,IACF,OAAO;AACL,WAAK;AAAA,IACP;AAAA,EACF;AACF;;;AC/FO,IAAM,iBAAiB;AAG9B,IAAM,kBAAkB,KAAK,KAAK,KAAK,IAAI;AAWpC,SAAS,kBAAkB,SAAoC;AACpE,QAAM,UAAS,mCAAS,WAAU;AAClC,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,UAAM,cAAc,OAAO,IAAI,cAAc,mBAAmB,EAAE;AAClE,UAAM,UAAU,QAAQ,gBAAgB,WAAW;AACnD,QAAI,UAAU;AACd,QAAI,UAAU;AACd,QAAI,cAAc,MAAM;AAEtB,YAAM,eAAe,QAAQ,QAAQ,IAAI,aAAa,aAAa;AACnE,YAAMA,eAAc,QAAQ,SAAS;AACrC,UAAI,OAAO,gBAAgBA,cAAa;AAAA,QACtC;AAAA,QACA,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,QAAI,MAAM,IAAI,gBAAgB,MAAM;AAClC,UAAI,YAAY;AAAA,IAClB,CAAC;AACD,SAAK;AAAA,EACP;AACF;AAEO,IAAM,UAAN,MAAc;AAAA,EAGnB,YAAY,MAA+B;AAF3C,SAAQ,OAA+B,CAAC;AAGtC,SAAK,OAAO,QAAQ,CAAC;AAAA,EACvB;AAAA,EAEA,OAAO,gBAAgB,aAAqB;AAC1C,UAAM,OAA+B,CAAC;AACtC,QAAI,YAAY,WAAW,MAAM,GAAG;AAClC,UAAI;AACF,cAAM,aAAa,YAAY,MAAM,CAAC;AACtC,cAAM,SAAS,IAAI,gBAAgB,aAAa,UAAU,CAAC;AAC3D,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG;AAC3C,eAAK,OAAO;AAAA,QACd;AAAA,MACF,SAAS,KAAP;AACA,gBAAQ,KAAK,mCAAmC,GAAG;AACnD,eAAO,IAAI,QAAQ;AAAA,MACrB;AAAA,IACF;AACA,WAAO,IAAI,QAAQ,IAAI;AAAA,EACzB;AAAA,EAEA,QAAQ,KAA4B;AAClC,WAAO,KAAK,KAAK,QAAQ;AAAA,EAC3B;AAAA,EAEA,QAAQ,KAAa,OAAe;AAClC,SAAK,KAAK,OAAO;AAAA,EACnB;AAAA,EAEA,WAAW,KAAa;AACtB,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,WAAmB;AACjB,UAAM,SAAS,IAAI,gBAAgB,KAAK,IAAI;AAC5C,WAAO,OAAO,aAAa,OAAO,SAAS,CAAC;AAAA,EAC9C;AACF;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,QAAQ;AACpD;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,OAAO;AACpD;","names":["cookieValue"]}

package/dist/{chunk-OEAC5ZO6.js → chunk-XG7BJNHU.js}

@@ -2,7 +2,7 @@ import {
   rootProjectMiddleware,
   sessionMiddleware,
   trailingSlashMiddleware
-} from "./chunk-JXDXYAPH.js";
+} from "./chunk-AJF5RXXV.js";
 import {
   copyGlob,
   createViteServer,
@@ -1286,4 +1286,4 @@ export {
   start,
   createProdServer
 };
-//# sourceMappingURL=chunk-OEAC5ZO6.js.map
+//# sourceMappingURL=chunk-XG7BJNHU.js.map

package/dist/cli.js

@@ -6,8 +6,8 @@ import {
   dev,
   preview,
   start
-} from "./chunk-OEAC5ZO6.js";
-import "./chunk-JXDXYAPH.js";
+} from "./chunk-XG7BJNHU.js";
+import "./chunk-AJF5RXXV.js";
 import "./chunk-SDT4J6VY.js";
 import "./chunk-QKBMWK5B.js";
 import "./chunk-DXD5LKU3.js";

package/dist/functions.js

@@ -1,8 +1,8 @@
 import {
   createPreviewServer,
   createProdServer
-} from "./chunk-OEAC5ZO6.js";
-import "./chunk-JXDXYAPH.js";
+} from "./chunk-XG7BJNHU.js";
+import "./chunk-AJF5RXXV.js";
 import "./chunk-SDT4J6VY.js";
 import "./chunk-QKBMWK5B.js";
 import "./chunk-DXD5LKU3.js";

package/dist/middleware.js

@@ -5,7 +5,7 @@ import {
   rootProjectMiddleware,
   sessionMiddleware,
   trailingSlashMiddleware
-} from "./chunk-JXDXYAPH.js";
+} from "./chunk-AJF5RXXV.js";
 export {
   SESSION_COOKIE,
   Session,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blinkk/root",
-  "version": "1.0.0-beta.59",
+  "version": "1.0.0-beta.60",
   "author": "s@blinkk.com",
   "license": "MIT",
   "engines": {