@blinkk/root 1.0.0-rc.30 → 1.0.0-rc.31

package/dist/{chunk-WNXIRMFF.js → chunk-O74GNZTB.js}

@@ -47,7 +47,7 @@ import busboy from "busboy";
 var DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024;
 function multipartMiddleware(options) {
   const maxFileSize = (options == null ? void 0 : options.maxFileSize) || DEFAULT_MAX_FILE_SIZE;
-  return (req, res, next) => {
+  const handler = (req, res, next) => {
     const contentType = String(req.headers["content-type"] || "");
     if (req.method === "POST" && contentType.startsWith("multipart/form-data")) {
       const parser = busboy({ headers: req.headers });
@@ -100,6 +100,7 @@ function multipartMiddleware(options) {
       next();
     }
   };
+  return handler;
 }
 
 // src/middleware/session.ts
@@ -180,4 +181,4 @@ export {
   sessionMiddleware,
   Session
 };
-//# sourceMappingURL=chunk-WNXIRMFF.js.map
+//# sourceMappingURL=chunk-O74GNZTB.js.map

package/dist/chunk-O74GNZTB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware/common.ts","../src/middleware/multipart.ts","../src/middleware/session.ts"],"sourcesContent":["import path from 'node:path';\nimport {RootConfig} from '../core/config';\nimport {Request, Response, NextFunction} from '../core/types';\n\n/**\n * Middleware that injects the root.js project config into the request context.\n */\nexport function rootProjectMiddleware(options: {rootConfig: RootConfig}) {\n  return (req: Request, _: Response, next: NextFunction) => {\n    req.rootConfig = options.rootConfig;\n    next();\n  };\n}\n\n/**\n * Trailing slash middleware. Handles trailing slash redirects (preserving any\n * query params) using the `server.trailingSlash` config in root.config.ts.\n */\nexport function trailingSlashMiddleware(options: {rootConfig: RootConfig}) {\n  const trailingSlash = options.rootConfig.server?.trailingSlash;\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    // If `trailingSlash: false`, force a trailing slash in the URL.\n    if (\n      trailingSlash === true &&\n      !path.extname(req.path) &&\n      !req.path.endsWith('/')\n    ) {\n      const redirectPath = `${req.path}/`;\n      redirectWithQuery(req, res, 301, redirectPath);\n      return;\n    }\n\n    // If `trailingSlash: false`, remove any trailing slash from the URL.\n    if (\n      trailingSlash === false &&\n      !path.extname(req.path) &&\n      req.path !== '/' &&\n      req.path.endsWith('/')\n    ) {\n      const redirectPath = removeTrailingSlashes(req.path);\n      redirectWithQuery(req, res, 301, redirectPath);\n      return;\n    }\n\n    next();\n  };\n}\n\n/**\n * Issues an HTTP redirect, preserving any query params from the original req.\n */\nfunction redirectWithQuery(\n  req: Request,\n  res: Response,\n  redirectCode: number,\n  redirectPath: string\n) {\n  const queryStr = getQueryStr(req);\n  const redirectUrl = queryStr ? `${redirectPath}?${queryStr}` : redirectPath;\n  res.redirect(redirectCode, redirectUrl);\n}\n\n/**\n * Returns the query string for a request, or empty string if no query.\n */\nfunction getQueryStr(req: Request): string {\n  const qIndex = req.originalUrl.indexOf('?');\n  if (qIndex === -1) {\n    return '';\n  }\n  return req.originalUrl.slice(qIndex + 1);\n}\n\n/**\n * Removes trailing slashes from a URL path.\n * Note: A path with only slashes (e.g. `///`) returns `/`.\n */\nfunction removeTrailingSlashes(urlPath: string) {\n  while (urlPath.endsWith('/') && urlPath !== '/') {\n    urlPath = urlPath.slice(0, -1);\n  }\n  return urlPath;\n}\n","import busboy from 'busboy';\nimport {RequestHandler} from 'express';\nimport {Request, Response, NextFunction, MultipartFile} from '../core/types';\n\nconst DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024; // 10MB\n\n/**\n * Middleware for parsing multipart file uploads that's compatible with the dev\n * server and Firebase Functions.\n *\n * Context:\n * https://stackoverflow.com/questions/47242340/how-to-perform-an-http-file-upload-using-express-on-cloud-functions-for-firebase\n */\nexport function multipartMiddleware(options?: {\n  maxFileSize?: number;\n}): RequestHandler {\n  const maxFileSize = options?.maxFileSize || DEFAULT_MAX_FILE_SIZE;\n  const handler: any = (req: Request, res: Response, next: NextFunction) => {\n    const contentType = String(req.headers['content-type'] || '');\n    if (\n      req.method === 'POST' &&\n      contentType.startsWith('multipart/form-data')\n    ) {\n      const parser = busboy({headers: req.headers});\n\n      // Data storage for fields and files\n      const fields: {[fieldname: string]: string} = {};\n      const files: {[name: string]: MultipartFile} = {};\n\n      // Handle field data.\n      parser.on('field', (fieldname: string, val: any) => {\n        fields[fieldname] = val;\n      });\n\n      // Handle file data. Files are saved to an in-memory buffer.\n      parser.on(\n        'file',\n        (\n          fieldname: string,\n          file: any,\n          meta: {\n            filename: string;\n            encoding: string;\n            mimeType: string;\n          }\n        ) => {\n          const {filename, encoding, mimeType: mimetype} = meta;\n          const fileChunks: Uint8Array[] = [];\n          let totalBytesRead = 0;\n\n          file.on('data', (chunk: Uint8Array) => {\n            totalBytesRead += chunk.length;\n\n            if (totalBytesRead > maxFileSize) {\n              // File size exceeds the limit, stop reading.\n              console.error(`File size exceeds the limit: ${fieldname}.`);\n              file.removeAllListeners('data');\n              // Consume and discard remaining data.\n              file.resume();\n            } else {\n              fileChunks.push(chunk);\n            }\n          });\n\n          file.on('end', () => {\n            if (totalBytesRead <= maxFileSize) {\n              const buffer = Buffer.concat(fileChunks);\n\n              files[fieldname] = {\n                fieldname,\n                buffer,\n                originalName: filename,\n                encoding,\n                mimetype,\n              };\n            }\n          });\n        }\n      );\n\n      // Update `req.body` and `req.files`.\n      parser.on('finish', () => {\n        req.body = fields;\n        req.files = files;\n        next();\n      });\n\n      // Pipe the request to Busboy. On Firebase Functions, `rawBody` contains\n      // the multipart request. Otherwise the express request can be piped to\n      // the Busboy parser.\n      if (req.rawBody) {\n        parser.end(req.rawBody);\n      } else {\n        req.pipe(parser);\n      }\n    } else {\n      next();\n    }\n  };\n  return handler;\n}\n","import {NextFunction, Request, Response} from '../core/types';\n\nexport const SESSION_COOKIE = '__session';\n\n// 5 days.\nconst DEFAULT_MAX_AGE = 60 * 60 * 24 * 5 * 1000;\n\nexport interface SessionMiddlewareOptions {\n  maxAge?: number;\n}\n\nexport interface SaveSessionOptions {\n  sameSite?: 'strict' | 'lax' | 'none';\n}\n\n/**\n * Middleware for storing session data stored in an http cookie called\n * `__session`. This cookie is compatible with Firebase Hosting:\n * https://firebase.google.com/docs/hosting/manage-cache#using_cookies\n */\nexport function sessionMiddleware(options?: SessionMiddlewareOptions) {\n  const maxAge = options?.maxAge || DEFAULT_MAX_AGE;\n  return (req: Request, res: Response, next: NextFunction) => {\n    const cookieValue = String(req.signedCookies[SESSION_COOKIE] || '');\n    const session = Session.fromCookieValue(cookieValue);\n    req.session = session;\n    res.session = session;\n    res.saveSession = (saveSessionOptions?: SaveSessionOptions) => {\n      // \"secure\" cookies require https, so disable \"secure\" when in development.\n      const secureCookie = Boolean(process.env.NODE_ENV !== 'development');\n      const cookieValue = session.toString();\n      const sameSite = saveSessionOptions?.sameSite || 'strict';\n      res.cookie(SESSION_COOKIE, cookieValue, {\n        maxAge: maxAge,\n        httpOnly: true,\n        secure: secureCookie,\n        signed: true,\n        sameSite: sameSite,\n      });\n    };\n    req.hooks.add('beforeRender', () => {\n      res.saveSession();\n    });\n    next();\n  };\n}\n\nexport class Session {\n  private data: Record<string, string> = {};\n\n  constructor(data?: Record<string, string>) {\n    this.data = data || {};\n  }\n\n  static fromCookieValue(cookieValue: string) {\n    const data: Record<string, string> = {};\n    if (cookieValue.startsWith('b64:')) {\n      try {\n        const encodedStr = cookieValue.slice(4);\n        const params = new URLSearchParams(base64Decode(encodedStr));\n        for (const [key, value] of params.entries()) {\n          data[key] = value;\n        }\n      } catch (err) {\n        console.warn('failed to parse session cookie:', err);\n        return new Session();\n      }\n    }\n    return new Session(data);\n  }\n\n  getItem(key: string): string | null {\n    return this.data[key] ?? null;\n  }\n\n  setItem(key: string, value: string) {\n    this.data[key] = value;\n  }\n\n  removeItem(key: string) {\n    delete this.data[key];\n  }\n\n  toString(): string {\n    const params = new URLSearchParams(this.data);\n    return `b64:${base64Encode(params.toString())}`;\n  }\n}\n\nfunction base64Encode(str: string): string {\n  return Buffer.from(str, 'utf-8').toString('base64');\n}\n\nfunction base64Decode(str: string): string {\n  return Buffer.from(str, 'base64').toString('utf-8');\n}\n"],"mappings":";AAAA,OAAO,UAAU;AAOV,SAAS,sBAAsB,SAAmC;AACvE,SAAO,CAAC,KAAc,GAAa,SAAuB;AACxD,QAAI,aAAa,QAAQ;AACzB,SAAK;AAAA,EACP;AACF;AAMO,SAAS,wBAAwB,SAAmC;AAlB3E;AAmBE,QAAM,iBAAgB,aAAQ,WAAW,WAAnB,mBAA2B;AAEjD,SAAO,CAAC,KAAc,KAAe,SAAuB;AAE1D,QACE,kBAAkB,QAClB,CAAC,KAAK,QAAQ,IAAI,IAAI,KACtB,CAAC,IAAI,KAAK,SAAS,GAAG,GACtB;AACA,YAAM,eAAe,GAAG,IAAI,IAAI;AAChC,wBAAkB,KAAK,KAAK,KAAK,YAAY;AAC7C;AAAA,IACF;AAGA,QACE,kBAAkB,SAClB,CAAC,KAAK,QAAQ,IAAI,IAAI,KACtB,IAAI,SAAS,OACb,IAAI,KAAK,SAAS,GAAG,GACrB;AACA,YAAM,eAAe,sBAAsB,IAAI,IAAI;AACnD,wBAAkB,KAAK,KAAK,KAAK,YAAY;AAC7C;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;AAKA,SAAS,kBACP,KACA,KACA,cACA,cACA;AACA,QAAM,WAAW,YAAY,GAAG;AAChC,QAAM,cAAc,WAAW,GAAG,YAAY,IAAI,QAAQ,KAAK;AAC/D,MAAI,SAAS,cAAc,WAAW;AACxC;AAKA,SAAS,YAAY,KAAsB;AACzC,QAAM,SAAS,IAAI,YAAY,QAAQ,GAAG;AAC1C,MAAI,WAAW,IAAI;AACjB,WAAO;AAAA,EACT;AACA,SAAO,IAAI,YAAY,MAAM,SAAS,CAAC;AACzC;AAMA,SAAS,sBAAsB,SAAiB;AAC9C,SAAO,QAAQ,SAAS,GAAG,KAAK,YAAY,KAAK;AAC/C,cAAU,QAAQ,MAAM,GAAG,EAAE;AAAA,EAC/B;AACA,SAAO;AACT;;;ACnFA,OAAO,YAAY;AAInB,IAAM,wBAAwB,KAAK,OAAO;AASnC,SAAS,oBAAoB,SAEjB;AACjB,QAAM,eAAc,mCAAS,gBAAe;AAC5C,QAAM,UAAe,CAAC,KAAc,KAAe,SAAuB;AACxE,UAAM,cAAc,OAAO,IAAI,QAAQ,cAAc,KAAK,EAAE;AAC5D,QACE,IAAI,WAAW,UACf,YAAY,WAAW,qBAAqB,GAC5C;AACA,YAAM,SAAS,OAAO,EAAC,SAAS,IAAI,QAAO,CAAC;AAG5C,YAAM,SAAwC,CAAC;AAC/C,YAAM,QAAyC,CAAC;AAGhD,aAAO,GAAG,SAAS,CAAC,WAAmB,QAAa;AAClD,eAAO,SAAS,IAAI;AAAA,MACtB,CAAC;AAGD,aAAO;AAAA,QACL;AAAA,QACA,CACE,WACA,MACA,SAKG;AACH,gBAAM,EAAC,UAAU,UAAU,UAAU,SAAQ,IAAI;AACjD,gBAAM,aAA2B,CAAC;AAClC,cAAI,iBAAiB;AAErB,eAAK,GAAG,QAAQ,CAAC,UAAsB;AACrC,8BAAkB,MAAM;AAExB,gBAAI,iBAAiB,aAAa;AAEhC,sBAAQ,MAAM,gCAAgC,SAAS,GAAG;AAC1D,mBAAK,mBAAmB,MAAM;AAE9B,mBAAK,OAAO;AAAA,YACd,OAAO;AACL,yBAAW,KAAK,KAAK;AAAA,YACvB;AAAA,UACF,CAAC;AAED,eAAK,GAAG,OAAO,MAAM;AACnB,gBAAI,kBAAkB,aAAa;AACjC,oBAAM,SAAS,OAAO,OAAO,UAAU;AAEvC,oBAAM,SAAS,IAAI;AAAA,gBACjB;AAAA,gBACA;AAAA,gBACA,cAAc;AAAA,gBACd;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAGA,aAAO,GAAG,UAAU,MAAM;AACxB,YAAI,OAAO;AACX,YAAI,QAAQ;AACZ,aAAK;AAAA,MACP,CAAC;AAKD,UAAI,IAAI,SAAS;AACf,eAAO,IAAI,IAAI,OAAO;AAAA,MACxB,OAAO;AACL,YAAI,KAAK,MAAM;AAAA,MACjB;AAAA,IACF,OAAO;AACL,WAAK;AAAA,IACP;AAAA,EACF;AACA,SAAO;AACT;;;AClGO,IAAM,iBAAiB;AAG9B,IAAM,kBAAkB,KAAK,KAAK,KAAK,IAAI;AAepC,SAAS,kBAAkB,SAAoC;AACpE,QAAM,UAAS,mCAAS,WAAU;AAClC,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,UAAM,cAAc,OAAO,IAAI,cAAc,cAAc,KAAK,EAAE;AAClE,UAAM,UAAU,QAAQ,gBAAgB,WAAW;AACnD,QAAI,UAAU;AACd,QAAI,UAAU;AACd,QAAI,cAAc,CAAC,uBAA4C;AAE7D,YAAM,eAAe,QAAQ,QAAQ,IAAI,aAAa,aAAa;AACnE,YAAMA,eAAc,QAAQ,SAAS;AACrC,YAAM,YAAW,yDAAoB,aAAY;AACjD,UAAI,OAAO,gBAAgBA,cAAa;AAAA,QACtC;AAAA,QACA,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AACA,QAAI,MAAM,IAAI,gBAAgB,MAAM;AAClC,UAAI,YAAY;AAAA,IAClB,CAAC;AACD,SAAK;AAAA,EACP;AACF;AAEO,IAAM,UAAN,MAAM,SAAQ;AAAA,EAGnB,YAAY,MAA+B;AAF3C,SAAQ,OAA+B,CAAC;AAGtC,SAAK,OAAO,QAAQ,CAAC;AAAA,EACvB;AAAA,EAEA,OAAO,gBAAgB,aAAqB;AAC1C,UAAM,OAA+B,CAAC;AACtC,QAAI,YAAY,WAAW,MAAM,GAAG;AAClC,UAAI;AACF,cAAM,aAAa,YAAY,MAAM,CAAC;AACtC,cAAM,SAAS,IAAI,gBAAgB,aAAa,UAAU,CAAC;AAC3D,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG;AAC3C,eAAK,GAAG,IAAI;AAAA,QACd;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,KAAK,mCAAmC,GAAG;AACnD,eAAO,IAAI,SAAQ;AAAA,MACrB;AAAA,IACF;AACA,WAAO,IAAI,SAAQ,IAAI;AAAA,EACzB;AAAA,EAEA,QAAQ,KAA4B;AAClC,WAAO,KAAK,KAAK,GAAG,KAAK;AAAA,EAC3B;AAAA,EAEA,QAAQ,KAAa,OAAe;AAClC,SAAK,KAAK,GAAG,IAAI;AAAA,EACnB;AAAA,EAEA,WAAW,KAAa;AACtB,WAAO,KAAK,KAAK,GAAG;AAAA,EACtB;AAAA,EAEA,WAAmB;AACjB,UAAM,SAAS,IAAI,gBAAgB,KAAK,IAAI;AAC5C,WAAO,OAAO,aAAa,OAAO,SAAS,CAAC,CAAC;AAAA,EAC/C;AACF;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,QAAQ;AACpD;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,OAAO;AACpD;","names":["cookieValue"]}

package/dist/{chunk-N7J5D7KC.js → chunk-QQOTOKPH.js}

@@ -2,7 +2,7 @@ import {
   rootProjectMiddleware,
   sessionMiddleware,
   trailingSlashMiddleware
-} from "./chunk-WNXIRMFF.js";
+} from "./chunk-O74GNZTB.js";
 import {
   bundleRootConfig,
   copyGlob,
@@ -1412,4 +1412,4 @@ export {
   start,
   createProdServer
 };
-//# sourceMappingURL=chunk-N7J5D7KC.js.map
+//# sourceMappingURL=chunk-QQOTOKPH.js.map

package/dist/cli.d.ts

@@ -1,4 +1,4 @@
-import { S as Server } from './types-3pEO32yG.js';
+import { S as Server } from './types-oson8XS0.js';
 import 'express';
 import 'preact';
 import 'vite';

package/dist/cli.js

@@ -6,8 +6,8 @@ import {
   dev,
   preview,
   start
-} from "./chunk-N7J5D7KC.js";
-import "./chunk-WNXIRMFF.js";
+} from "./chunk-QQOTOKPH.js";
+import "./chunk-O74GNZTB.js";
 import "./chunk-JH33OQEK.js";
 import "./chunk-QKBMWK5B.js";
 import "./chunk-IUQLRDFW.js";

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { R as Route } from './types-3pEO32yG.js';
-export { C as ConfigureServerHook, g as ConfigureServerOptions, k as GetStaticPaths, G as GetStaticProps, o as Handler, H as HandlerContext, r as HandlerRenderFn, q as HandlerRenderOptions, L as LocaleGroup, M as MultipartFile, N as NextFunction, P as Plugin, m as Request, l as RequestMiddleware, n as Response, b as RootConfig, c as RootI18nConfig, d as RootRedirectConfig, e as RootServerConfig, a as RootUserConfig, p as RouteModule, j as RouteParams, S as Server, h as configureServerPlugins, f as defineConfig, i as getVitePlugins } from './types-3pEO32yG.js';
+import { R as Route } from './types-oson8XS0.js';
+export { C as ConfigureServerHook, g as ConfigureServerOptions, k as GetStaticPaths, G as GetStaticProps, o as Handler, H as HandlerContext, r as HandlerRenderFn, q as HandlerRenderOptions, L as LocaleGroup, M as MultipartFile, N as NextFunction, P as Plugin, m as Request, l as RequestMiddleware, n as Response, b as RootConfig, c as RootI18nConfig, d as RootRedirectConfig, e as RootServerConfig, a as RootUserConfig, p as RouteModule, j as RouteParams, S as Server, h as configureServerPlugins, f as defineConfig, i as getVitePlugins } from './types-oson8XS0.js';
 import * as preact$1 from 'preact';
 import { FunctionalComponent, ComponentChildren } from 'preact';
 import 'express';

package/dist/functions.js

@@ -1,8 +1,8 @@
 import {
   createPreviewServer,
   createProdServer
-} from "./chunk-N7J5D7KC.js";
-import "./chunk-WNXIRMFF.js";
+} from "./chunk-QQOTOKPH.js";
+import "./chunk-O74GNZTB.js";
 import "./chunk-JH33OQEK.js";
 import "./chunk-QKBMWK5B.js";
 import "./chunk-IUQLRDFW.js";

package/dist/middleware.d.ts

@@ -1,6 +1,6 @@
-import { b as RootConfig, m as Request, n as Response, N as NextFunction } from './types-3pEO32yG.js';
-export { s as SESSION_COOKIE, u as SaveSessionOptions, w as Session, t as SessionMiddlewareOptions, v as sessionMiddleware } from './types-3pEO32yG.js';
-import 'express';
+import { b as RootConfig, m as Request, n as Response, N as NextFunction } from './types-oson8XS0.js';
+export { s as SESSION_COOKIE, u as SaveSessionOptions, w as Session, t as SessionMiddlewareOptions, v as sessionMiddleware } from './types-oson8XS0.js';
+import { RequestHandler } from 'express';
 import 'preact';
 import 'vite';
 import 'html-minifier-terser';
@@ -29,6 +29,6 @@ declare function trailingSlashMiddleware(options: {
  */
 declare function multipartMiddleware(options?: {
     maxFileSize?: number;
-}): (req: Request, res: Response, next: NextFunction) => void;
+}): RequestHandler;
 
 export { multipartMiddleware, rootProjectMiddleware, trailingSlashMiddleware };

package/dist/middleware.js

@@ -5,7 +5,7 @@ import {
   rootProjectMiddleware,
   sessionMiddleware,
   trailingSlashMiddleware
-} from "./chunk-WNXIRMFF.js";
+} from "./chunk-O74GNZTB.js";
 export {
   SESSION_COOKIE,
   Session,

package/dist/node.d.ts

@@ -1,4 +1,4 @@
-import { b as RootConfig } from './types-3pEO32yG.js';
+import { b as RootConfig } from './types-oson8XS0.js';
 import { ViteDevServer } from 'vite';
 import 'express';
 import 'preact';

package/dist/render.d.ts

@@ -1,4 +1,4 @@
-export { x as Renderer } from './types-3pEO32yG.js';
+export { x as Renderer } from './types-oson8XS0.js';
 import 'express';
 import 'preact';
 import 'vite';

package/dist/{types-3pEO32yG.d.ts → types-oson8XS0.d.ts}

@@ -375,6 +375,10 @@ type Request = Request$1 & {
     viteServer?: ViteDevServer;
     /** The root.js renderer, to render routes within middleware. */
     renderer?: Renderer;
+    /** Logged in user for the request. */
+    user?: {
+        email: string;
+    };
     /**
      * Handler context, provided to route files that export a custom `handler()`
      * function.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blinkk/root",
-  "version": "1.0.0-rc.30",
+  "version": "1.0.0-rc.31",
   "author": "s@blinkk.com",
   "license": "MIT",
   "engines": {

package/dist/chunk-WNXIRMFF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/middleware/common.ts","../src/middleware/multipart.ts","../src/middleware/session.ts"],"sourcesContent":["import path from 'node:path';\nimport {RootConfig} from '../core/config';\nimport {Request, Response, NextFunction} from '../core/types';\n\n/**\n * Middleware that injects the root.js project config into the request context.\n */\nexport function rootProjectMiddleware(options: {rootConfig: RootConfig}) {\n  return (req: Request, _: Response, next: NextFunction) => {\n    req.rootConfig = options.rootConfig;\n    next();\n  };\n}\n\n/**\n * Trailing slash middleware. Handles trailing slash redirects (preserving any\n * query params) using the `server.trailingSlash` config in root.config.ts.\n */\nexport function trailingSlashMiddleware(options: {rootConfig: RootConfig}) {\n  const trailingSlash = options.rootConfig.server?.trailingSlash;\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    // If `trailingSlash: false`, force a trailing slash in the URL.\n    if (\n      trailingSlash === true &&\n      !path.extname(req.path) &&\n      !req.path.endsWith('/')\n    ) {\n      const redirectPath = `${req.path}/`;\n      redirectWithQuery(req, res, 301, redirectPath);\n      return;\n    }\n\n    // If `trailingSlash: false`, remove any trailing slash from the URL.\n    if (\n      trailingSlash === false &&\n      !path.extname(req.path) &&\n      req.path !== '/' &&\n      req.path.endsWith('/')\n    ) {\n      const redirectPath = removeTrailingSlashes(req.path);\n      redirectWithQuery(req, res, 301, redirectPath);\n      return;\n    }\n\n    next();\n  };\n}\n\n/**\n * Issues an HTTP redirect, preserving any query params from the original req.\n */\nfunction redirectWithQuery(\n  req: Request,\n  res: Response,\n  redirectCode: number,\n  redirectPath: string\n) {\n  const queryStr = getQueryStr(req);\n  const redirectUrl = queryStr ? `${redirectPath}?${queryStr}` : redirectPath;\n  res.redirect(redirectCode, redirectUrl);\n}\n\n/**\n * Returns the query string for a request, or empty string if no query.\n */\nfunction getQueryStr(req: Request): string {\n  const qIndex = req.originalUrl.indexOf('?');\n  if (qIndex === -1) {\n    return '';\n  }\n  return req.originalUrl.slice(qIndex + 1);\n}\n\n/**\n * Removes trailing slashes from a URL path.\n * Note: A path with only slashes (e.g. `///`) returns `/`.\n */\nfunction removeTrailingSlashes(urlPath: string) {\n  while (urlPath.endsWith('/') && urlPath !== '/') {\n    urlPath = urlPath.slice(0, -1);\n  }\n  return urlPath;\n}\n","import busboy from 'busboy';\nimport {Request, Response, NextFunction, MultipartFile} from '../core/types';\n\nconst DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024; // 10MB\n\n/**\n * Middleware for parsing multipart file uploads that's compatible with the dev\n * server and Firebase Functions.\n *\n * Context:\n * https://stackoverflow.com/questions/47242340/how-to-perform-an-http-file-upload-using-express-on-cloud-functions-for-firebase\n */\nexport function multipartMiddleware(options?: {maxFileSize?: number}) {\n  const maxFileSize = options?.maxFileSize || DEFAULT_MAX_FILE_SIZE;\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    const contentType = String(req.headers['content-type'] || '');\n    if (\n      req.method === 'POST' &&\n      contentType.startsWith('multipart/form-data')\n    ) {\n      const parser = busboy({headers: req.headers});\n\n      // Data storage for fields and files\n      const fields: {[fieldname: string]: string} = {};\n      const files: {[name: string]: MultipartFile} = {};\n\n      // Handle field data.\n      parser.on('field', (fieldname: string, val: any) => {\n        fields[fieldname] = val;\n      });\n\n      // Handle file data. Files are saved to an in-memory buffer.\n      parser.on(\n        'file',\n        (\n          fieldname: string,\n          file: any,\n          meta: {\n            filename: string;\n            encoding: string;\n            mimeType: string;\n          }\n        ) => {\n          const {filename, encoding, mimeType: mimetype} = meta;\n          const fileChunks: Uint8Array[] = [];\n          let totalBytesRead = 0;\n\n          file.on('data', (chunk: Uint8Array) => {\n            totalBytesRead += chunk.length;\n\n            if (totalBytesRead > maxFileSize) {\n              // File size exceeds the limit, stop reading.\n              console.error(`File size exceeds the limit: ${fieldname}.`);\n              file.removeAllListeners('data');\n              // Consume and discard remaining data.\n              file.resume();\n            } else {\n              fileChunks.push(chunk);\n            }\n          });\n\n          file.on('end', () => {\n            if (totalBytesRead <= maxFileSize) {\n              const buffer = Buffer.concat(fileChunks);\n\n              files[fieldname] = {\n                fieldname,\n                buffer,\n                originalName: filename,\n                encoding,\n                mimetype,\n              };\n            }\n          });\n        }\n      );\n\n      // Update `req.body` and `req.files`.\n      parser.on('finish', () => {\n        req.body = fields;\n        req.files = files;\n        next();\n      });\n\n      // Pipe the request to Busboy. On Firebase Functions, `rawBody` contains\n      // the multipart request. Otherwise the express request can be piped to\n      // the Busboy parser.\n      if (req.rawBody) {\n        parser.end(req.rawBody);\n      } else {\n        req.pipe(parser);\n      }\n    } else {\n      next();\n    }\n  };\n}\n","import {NextFunction, Request, Response} from '../core/types';\n\nexport const SESSION_COOKIE = '__session';\n\n// 5 days.\nconst DEFAULT_MAX_AGE = 60 * 60 * 24 * 5 * 1000;\n\nexport interface SessionMiddlewareOptions {\n  maxAge?: number;\n}\n\nexport interface SaveSessionOptions {\n  sameSite?: 'strict' | 'lax' | 'none';\n}\n\n/**\n * Middleware for storing session data stored in an http cookie called\n * `__session`. This cookie is compatible with Firebase Hosting:\n * https://firebase.google.com/docs/hosting/manage-cache#using_cookies\n */\nexport function sessionMiddleware(options?: SessionMiddlewareOptions) {\n  const maxAge = options?.maxAge || DEFAULT_MAX_AGE;\n  return (req: Request, res: Response, next: NextFunction) => {\n    const cookieValue = String(req.signedCookies[SESSION_COOKIE] || '');\n    const session = Session.fromCookieValue(cookieValue);\n    req.session = session;\n    res.session = session;\n    res.saveSession = (saveSessionOptions?: SaveSessionOptions) => {\n      // \"secure\" cookies require https, so disable \"secure\" when in development.\n      const secureCookie = Boolean(process.env.NODE_ENV !== 'development');\n      const cookieValue = session.toString();\n      const sameSite = saveSessionOptions?.sameSite || 'strict';\n      res.cookie(SESSION_COOKIE, cookieValue, {\n        maxAge: maxAge,\n        httpOnly: true,\n        secure: secureCookie,\n        signed: true,\n        sameSite: sameSite,\n      });\n    };\n    req.hooks.add('beforeRender', () => {\n      res.saveSession();\n    });\n    next();\n  };\n}\n\nexport class Session {\n  private data: Record<string, string> = {};\n\n  constructor(data?: Record<string, string>) {\n    this.data = data || {};\n  }\n\n  static fromCookieValue(cookieValue: string) {\n    const data: Record<string, string> = {};\n    if (cookieValue.startsWith('b64:')) {\n      try {\n        const encodedStr = cookieValue.slice(4);\n        const params = new URLSearchParams(base64Decode(encodedStr));\n        for (const [key, value] of params.entries()) {\n          data[key] = value;\n        }\n      } catch (err) {\n        console.warn('failed to parse session cookie:', err);\n        return new Session();\n      }\n    }\n    return new Session(data);\n  }\n\n  getItem(key: string): string | null {\n    return this.data[key] ?? null;\n  }\n\n  setItem(key: string, value: string) {\n    this.data[key] = value;\n  }\n\n  removeItem(key: string) {\n    delete this.data[key];\n  }\n\n  toString(): string {\n    const params = new URLSearchParams(this.data);\n    return `b64:${base64Encode(params.toString())}`;\n  }\n}\n\nfunction base64Encode(str: string): string {\n  return Buffer.from(str, 'utf-8').toString('base64');\n}\n\nfunction base64Decode(str: string): string {\n  return Buffer.from(str, 'base64').toString('utf-8');\n}\n"],"mappings":";AAAA,OAAO,UAAU;AAOV,SAAS,sBAAsB,SAAmC;AACvE,SAAO,CAAC,KAAc,GAAa,SAAuB;AACxD,QAAI,aAAa,QAAQ;AACzB,SAAK;AAAA,EACP;AACF;AAMO,SAAS,wBAAwB,SAAmC;AAlB3E;AAmBE,QAAM,iBAAgB,aAAQ,WAAW,WAAnB,mBAA2B;AAEjD,SAAO,CAAC,KAAc,KAAe,SAAuB;AAE1D,QACE,kBAAkB,QAClB,CAAC,KAAK,QAAQ,IAAI,IAAI,KACtB,CAAC,IAAI,KAAK,SAAS,GAAG,GACtB;AACA,YAAM,eAAe,GAAG,IAAI,IAAI;AAChC,wBAAkB,KAAK,KAAK,KAAK,YAAY;AAC7C;AAAA,IACF;AAGA,QACE,kBAAkB,SAClB,CAAC,KAAK,QAAQ,IAAI,IAAI,KACtB,IAAI,SAAS,OACb,IAAI,KAAK,SAAS,GAAG,GACrB;AACA,YAAM,eAAe,sBAAsB,IAAI,IAAI;AACnD,wBAAkB,KAAK,KAAK,KAAK,YAAY;AAC7C;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;AAKA,SAAS,kBACP,KACA,KACA,cACA,cACA;AACA,QAAM,WAAW,YAAY,GAAG;AAChC,QAAM,cAAc,WAAW,GAAG,YAAY,IAAI,QAAQ,KAAK;AAC/D,MAAI,SAAS,cAAc,WAAW;AACxC;AAKA,SAAS,YAAY,KAAsB;AACzC,QAAM,SAAS,IAAI,YAAY,QAAQ,GAAG;AAC1C,MAAI,WAAW,IAAI;AACjB,WAAO;AAAA,EACT;AACA,SAAO,IAAI,YAAY,MAAM,SAAS,CAAC;AACzC;AAMA,SAAS,sBAAsB,SAAiB;AAC9C,SAAO,QAAQ,SAAS,GAAG,KAAK,YAAY,KAAK;AAC/C,cAAU,QAAQ,MAAM,GAAG,EAAE;AAAA,EAC/B;AACA,SAAO;AACT;;;ACnFA,OAAO,YAAY;AAGnB,IAAM,wBAAwB,KAAK,OAAO;AASnC,SAAS,oBAAoB,SAAkC;AACpE,QAAM,eAAc,mCAAS,gBAAe;AAE5C,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,UAAM,cAAc,OAAO,IAAI,QAAQ,cAAc,KAAK,EAAE;AAC5D,QACE,IAAI,WAAW,UACf,YAAY,WAAW,qBAAqB,GAC5C;AACA,YAAM,SAAS,OAAO,EAAC,SAAS,IAAI,QAAO,CAAC;AAG5C,YAAM,SAAwC,CAAC;AAC/C,YAAM,QAAyC,CAAC;AAGhD,aAAO,GAAG,SAAS,CAAC,WAAmB,QAAa;AAClD,eAAO,SAAS,IAAI;AAAA,MACtB,CAAC;AAGD,aAAO;AAAA,QACL;AAAA,QACA,CACE,WACA,MACA,SAKG;AACH,gBAAM,EAAC,UAAU,UAAU,UAAU,SAAQ,IAAI;AACjD,gBAAM,aAA2B,CAAC;AAClC,cAAI,iBAAiB;AAErB,eAAK,GAAG,QAAQ,CAAC,UAAsB;AACrC,8BAAkB,MAAM;AAExB,gBAAI,iBAAiB,aAAa;AAEhC,sBAAQ,MAAM,gCAAgC,SAAS,GAAG;AAC1D,mBAAK,mBAAmB,MAAM;AAE9B,mBAAK,OAAO;AAAA,YACd,OAAO;AACL,yBAAW,KAAK,KAAK;AAAA,YACvB;AAAA,UACF,CAAC;AAED,eAAK,GAAG,OAAO,MAAM;AACnB,gBAAI,kBAAkB,aAAa;AACjC,oBAAM,SAAS,OAAO,OAAO,UAAU;AAEvC,oBAAM,SAAS,IAAI;AAAA,gBACjB;AAAA,gBACA;AAAA,gBACA,cAAc;AAAA,gBACd;AAAA,gBACA;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAGA,aAAO,GAAG,UAAU,MAAM;AACxB,YAAI,OAAO;AACX,YAAI,QAAQ;AACZ,aAAK;AAAA,MACP,CAAC;AAKD,UAAI,IAAI,SAAS;AACf,eAAO,IAAI,IAAI,OAAO;AAAA,MACxB,OAAO;AACL,YAAI,KAAK,MAAM;AAAA,MACjB;AAAA,IACF,OAAO;AACL,WAAK;AAAA,IACP;AAAA,EACF;AACF;;;AC/FO,IAAM,iBAAiB;AAG9B,IAAM,kBAAkB,KAAK,KAAK,KAAK,IAAI;AAepC,SAAS,kBAAkB,SAAoC;AACpE,QAAM,UAAS,mCAAS,WAAU;AAClC,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,UAAM,cAAc,OAAO,IAAI,cAAc,cAAc,KAAK,EAAE;AAClE,UAAM,UAAU,QAAQ,gBAAgB,WAAW;AACnD,QAAI,UAAU;AACd,QAAI,UAAU;AACd,QAAI,cAAc,CAAC,uBAA4C;AAE7D,YAAM,eAAe,QAAQ,QAAQ,IAAI,aAAa,aAAa;AACnE,YAAMA,eAAc,QAAQ,SAAS;AACrC,YAAM,YAAW,yDAAoB,aAAY;AACjD,UAAI,OAAO,gBAAgBA,cAAa;AAAA,QACtC;AAAA,QACA,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AACA,QAAI,MAAM,IAAI,gBAAgB,MAAM;AAClC,UAAI,YAAY;AAAA,IAClB,CAAC;AACD,SAAK;AAAA,EACP;AACF;AAEO,IAAM,UAAN,MAAM,SAAQ;AAAA,EAGnB,YAAY,MAA+B;AAF3C,SAAQ,OAA+B,CAAC;AAGtC,SAAK,OAAO,QAAQ,CAAC;AAAA,EACvB;AAAA,EAEA,OAAO,gBAAgB,aAAqB;AAC1C,UAAM,OAA+B,CAAC;AACtC,QAAI,YAAY,WAAW,MAAM,GAAG;AAClC,UAAI;AACF,cAAM,aAAa,YAAY,MAAM,CAAC;AACtC,cAAM,SAAS,IAAI,gBAAgB,aAAa,UAAU,CAAC;AAC3D,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG;AAC3C,eAAK,GAAG,IAAI;AAAA,QACd;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,KAAK,mCAAmC,GAAG;AACnD,eAAO,IAAI,SAAQ;AAAA,MACrB;AAAA,IACF;AACA,WAAO,IAAI,SAAQ,IAAI;AAAA,EACzB;AAAA,EAEA,QAAQ,KAA4B;AAClC,WAAO,KAAK,KAAK,GAAG,KAAK;AAAA,EAC3B;AAAA,EAEA,QAAQ,KAAa,OAAe;AAClC,SAAK,KAAK,GAAG,IAAI;AAAA,EACnB;AAAA,EAEA,WAAW,KAAa;AACtB,WAAO,KAAK,KAAK,GAAG;AAAA,EACtB;AAAA,EAEA,WAAmB;AACjB,UAAM,SAAS,IAAI,gBAAgB,KAAK,IAAI;AAC5C,WAAO,OAAO,aAAa,OAAO,SAAS,CAAC,CAAC;AAAA,EAC/C;AACF;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,QAAQ;AACpD;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,OAAO;AACpD;","names":["cookieValue"]}