@c9up/ream 0.1.3

package/dist/bodyparser/BodyParserMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BodyParserMiddleware.d.ts","sourceRoot":"","sources":["../../src/bodyparser/BodyParserMiddleware.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAGzD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KACjB,CAAA;IACD,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KACjB,CAAA;IACD,GAAG,CAAC,EAAE;QACJ,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KACjB,CAAA;IACD,SAAS,CAAC,EAAE;QACV,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KACjB,CAAA;CACF;AAkCD,MAAM,CAAC,OAAO,OAAO,oBAAoB;;gBAG3B,MAAM,CAAC,EAAE,gBAAgB;IAS/B,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC;CAkDzD"}

package/dist/bodyparser/BodyParserMiddleware.js

@@ -0,0 +1,143 @@
+/**
+ * BodyParser middleware — parses request bodies by content-type.
+ *
+ * Supports JSON, form-urlencoded, and raw text.
+ * Multipart (file uploads) handled separately.
+ * Configured via config/bodyparser.ts.
+ */
+import { hydrateMultipartPayload } from './MultipartFile.js';
+const DEFAULT_CONFIG = {
+    json: {
+        enabled: true,
+        limit: '1mb',
+        types: ['application/json', 'application/vnd.api+json'],
+    },
+    form: {
+        enabled: true,
+        limit: '1mb',
+        types: ['application/x-www-form-urlencoded'],
+    },
+    raw: {
+        enabled: false,
+        limit: '1mb',
+        types: ['text/plain'],
+    },
+    multipart: {
+        enabled: true,
+        limit: '20mb',
+        maxFields: 500,
+        tmpDir: '/tmp',
+        types: ['multipart/form-data'],
+    },
+};
+export default class BodyParserMiddleware {
+    #config;
+    constructor(config) {
+        this.#config = {
+            json: { ...DEFAULT_CONFIG.json, ...config?.json },
+            form: { ...DEFAULT_CONFIG.form, ...config?.form },
+            raw: { ...DEFAULT_CONFIG.raw, ...config?.raw },
+            multipart: { ...DEFAULT_CONFIG.multipart, ...config?.multipart },
+        };
+    }
+    async handle(ctx, next) {
+        const contentType = ctx.request.header('content-type') ?? '';
+        const rawBody = ctx.request.raw();
+        // Size check
+        if (Buffer.byteLength(rawBody, 'utf8') > parseSize(this.#getLimit(contentType))) {
+            ctx.response.status(413).json({
+                error: { code: 'E_REQUEST_ENTITY_TOO_LARGE', message: 'Request body exceeds size limit' },
+            });
+            return;
+        }
+        // JSON
+        if (this.#config.json.enabled && matchesType(contentType, this.#config.json.types)) {
+            // Request already lazy-parses JSON — nothing to do
+        }
+        // Form URL-encoded
+        if (this.#config.form.enabled && matchesType(contentType, this.#config.form.types)) {
+            ctx.request.setParsedBody(parseFormUrlEncoded(rawBody));
+        }
+        // Raw text — wrap the string under `_body` so consumers can still
+        // reach it through `request.input('_body')`. This matches the fallback
+        // shape used by `Request.#ensureParsedBody` when JSON yields a non-object.
+        if (this.#config.raw.enabled && matchesType(contentType, this.#config.raw.types)) {
+            ctx.request.setParsedBody({ _body: rawBody });
+        }
+        // Multipart — the Rust-side HyperServer parses the body server-side
+        // (multer crate) and ships the structured payload on `request.multipart`.
+        // JS just hydrates `MultipartFile` instances from the typed envelope.
+        if (this.#config.multipart.enabled && matchesType(contentType, this.#config.multipart.types)) {
+            const payload = ctx.request.multipart();
+            if (payload) {
+                const { fields, files } = hydrateMultipartPayload(payload);
+                ctx.request.setParsedBody(fields);
+                ctx.request.setFiles(files);
+            }
+        }
+        await next();
+    }
+    #getLimit(contentType) {
+        if (matchesType(contentType, this.#config.json.types))
+            return this.#config.json.limit;
+        if (matchesType(contentType, this.#config.form.types))
+            return this.#config.form.limit;
+        if (matchesType(contentType, this.#config.multipart.types))
+            return this.#config.multipart.limit;
+        return this.#config.raw.limit;
+    }
+}
+function matchesType(contentType, types) {
+    return types.some((t) => contentType.includes(t));
+}
+function parseSize(size) {
+    const match = size.match(/^(\d+)(kb|mb|gb)?$/i);
+    if (!match)
+        return 1024 * 1024; // default 1mb
+    const num = parseInt(match[1], 10);
+    switch (match[2]?.toLowerCase()) {
+        case 'kb':
+            return num * 1024;
+        case 'mb':
+            return num * 1024 * 1024;
+        case 'gb':
+            return num * 1024 * 1024 * 1024;
+        default:
+            return num;
+    }
+}
+function parseFormUrlEncoded(body) {
+    const result = {};
+    if (!body)
+        return result;
+    for (const pair of body.split('&')) {
+        if (!pair)
+            continue;
+        const eqIdx = pair.indexOf('=');
+        if (eqIdx === -1) {
+            result[decodeFormComponent(pair)] = '';
+        }
+        else {
+            result[decodeFormComponent(pair.slice(0, eqIdx))] = decodeFormComponent(pair.slice(eqIdx + 1));
+        }
+    }
+    return result;
+}
+// `application/x-www-form-urlencoded` reserves `+` for space (RFC 1866 / WHATWG
+// URL form spec), so the substitution must happen before percent-decoding —
+// otherwise a literal `+` (encoded as `%2B`) would be turned into a space too.
+//
+// Malformed percent-encoding (e.g. a truncated `a=%E0%A4%A`) makes
+// decodeURIComponent throw URIError; mirror Request.ts#safeDecode and fall back
+// to the substituted-but-undecoded value so an invalid body is a parse miss,
+// not a 500.
+function decodeFormComponent(value) {
+    const spaced = value.replace(/\+/g, ' ');
+    try {
+        return decodeURIComponent(spaced);
+    }
+    catch {
+        return spaced;
+    }
+}
+//# sourceMappingURL=BodyParserMiddleware.js.map

package/dist/bodyparser/BodyParserMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BodyParserMiddleware.js","sourceRoot":"","sources":["../../src/bodyparser/BodyParserMiddleware.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAkC5D,MAAM,cAAc,GAA6B;IAC/C,IAAI,EAAE;QACJ,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;KACxD;IACD,IAAI,EAAE;QACJ,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,CAAC,mCAAmC,CAAC;KAC7C;IACD,GAAG,EAAE;QACH,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,CAAC,YAAY,CAAC;KACtB;IACD,SAAS,EAAE;QACT,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,CAAC,qBAAqB,CAAC;KAC/B;CACF,CAAA;AAED,MAAM,CAAC,OAAO,OAAO,oBAAoB;IACvC,OAAO,CAA0B;IAEjC,YAAY,MAAyB;QACnC,IAAI,CAAC,OAAO,GAAG;YACb,IAAI,EAAE,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE;YACjD,IAAI,EAAE,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE;YACjD,GAAG,EAAE,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE;YAC9C,SAAS,EAAE,EAAE,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE;SACjE,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAgB,EAAE,IAAyB;QACtD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;QAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;QAEjC,aAAa;QACb,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,iCAAiC,EAAE;aAC1F,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,OAAO;QACP,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnF,mDAAmD;QACrD,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAA;QACzD,CAAC;QAED,kEAAkE;QAClE,uEAAuE;QACvE,2EAA2E;QAC3E,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/C,CAAC;QAED,oEAAoE;QACpE,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7F,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAA;YACvC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAA;gBAC1D,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;gBACjC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;QAED,MAAM,IAAI,EAAE,CAAA;IACd,CAAC;IAED,SAAS,CAAC,WAAmB;QAC3B,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAA;QACrF,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAA;QACrF,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAA;QAC/F,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAA;IAC/B,CAAC;CACF;AAED,SAAS,WAAW,CAAC,WAAmB,EAAE,KAAe;IACvD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,GAAG,IAAI,CAAA,CAAC,cAAc;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAClC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;QAChC,KAAK,IAAI;YACP,OAAO,GAAG,GAAG,IAAI,CAAA;QACnB,KAAK,IAAI;YACP,OAAO,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA;QAC1B,KAAK,IAAI;YACP,OAAO,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;QACjC;YACE,OAAO,GAAG,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAA;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QAChG,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,EAAE;AACF,mEAAmE;AACnE,gFAAgF;AAChF,6EAA6E;AAC7E,aAAa;AACb,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAA;IACf,CAAC;AACH,CAAC"}

package/dist/bodyparser/MultipartFile.d.ts

@@ -0,0 +1,77 @@
+/**
+ * MultipartFile — represents an uploaded file.
+ *
+ * Like AdonisJS MultipartFile:
+ *   const avatar = request.file('avatar', { size: '2mb', extnames: ['jpg', 'png'] })
+ *   await avatar.moveToDisk('uploads')
+ */
+import { Readable } from 'node:stream';
+export interface FileValidationOptions {
+    size?: string;
+    extnames?: string[];
+}
+export declare class MultipartFile {
+    #private;
+    /** Original filename from the client. */
+    readonly clientName: string;
+    /** File extension (without dot). */
+    readonly extname: string;
+    /** MIME type from the Content-Type header. */
+    readonly type: string;
+    /** File size in bytes. */
+    readonly size: number;
+    /** Raw file content as Buffer. */
+    readonly content: Buffer;
+    /** Field name in the form. */
+    readonly fieldName: string;
+    /** Validation errors. */
+    readonly errors: string[];
+    constructor(options: {
+        fieldName: string;
+        clientName: string;
+        type: string;
+        content: Buffer;
+    });
+    /** Validate file against size and extension rules. */
+    validate(options: FileValidationOptions): boolean;
+    get isValid(): boolean;
+    /**
+     * Move file to a directory on disk. When `name` is supplied it must be
+     * a plain filename — no path separators, no `.`/`..` segments. The
+     * common footgun is passing the client-supplied `clientName` directly
+     * (`await file.moveToDisk('uploads', file.clientName)`); a malicious
+     * upload could otherwise traverse out of `directory` via `../../etc/...`.
+     */
+    moveToDisk(directory: string, name?: string): Promise<string>;
+    get isMoved(): boolean;
+    /**
+     * Return a fresh `Readable` over the file's bytes. The underlying buffer is
+     * not consumed — repeated calls always start at byte 0, so callers can pipe
+     * the same file into multiple sinks (e.g. validation hash + disk write)
+     * without `Buffer.from(this.content)` boilerplate.
+     */
+    stream(): Readable;
+}
+/**
+ * Hydrate `MultipartFile` instances from the typed payload the Rust
+ * HyperServer attaches to the request. The wire-level parser (multer crate,
+ * see `crates/ream-http/src/multipart.rs`) handles the actual RFC 7578
+ * parsing — JS just decodes the base64 envelope and wraps the result.
+ */
+export declare function hydrateMultipartPayload(payload: {
+    fields: Array<{
+        name: string;
+        value: string;
+    }>;
+    files: Array<{
+        fieldName: string;
+        clientName: string;
+        contentType: string;
+        size: number;
+        contentB64: string;
+    }>;
+}): {
+    fields: Record<string, string>;
+    files: MultipartFile[];
+};
+//# sourceMappingURL=MultipartFile.d.ts.map

package/dist/bodyparser/MultipartFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MultipartFile.d.ts","sourceRoot":"","sources":["../../src/bodyparser/MultipartFile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtC,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,qBAAa,aAAa;;IACxB,yCAAyC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAE3B,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IAExB,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB,kCAAkC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IAExB,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAE1B,yBAAyB;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAK;gBAKlB,OAAO,EAAE;QACnB,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;KAChB;IAUD,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO;IAiBjD,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;;OAMG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA2BnE,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;OAKG;IACH,MAAM,IAAI,QAAQ;CAGnB;AAyBD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9C,KAAK,EAAE,KAAK,CAAC;QACX,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,WAAW,EAAE,MAAM,CAAA;QACnB,IAAI,EAAE,MAAM,CAAA;QACZ,UAAU,EAAE,MAAM,CAAA;KACnB,CAAC,CAAA;CACH,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,aAAa,EAAE,CAAA;CAAE,CAe7D"}

package/dist/bodyparser/MultipartFile.js

@@ -0,0 +1,138 @@
+/**
+ * MultipartFile — represents an uploaded file.
+ *
+ * Like AdonisJS MultipartFile:
+ *   const avatar = request.file('avatar', { size: '2mb', extnames: ['jpg', 'png'] })
+ *   await avatar.moveToDisk('uploads')
+ */
+import { randomBytes } from 'node:crypto';
+import { Readable } from 'node:stream';
+export class MultipartFile {
+    /** Original filename from the client. */
+    clientName;
+    /** File extension (without dot). */
+    extname;
+    /** MIME type from the Content-Type header. */
+    type;
+    /** File size in bytes. */
+    size;
+    /** Raw file content as Buffer. */
+    content;
+    /** Field name in the form. */
+    fieldName;
+    /** Validation errors. */
+    errors = [];
+    /** Whether the file has been moved. */
+    #moved = false;
+    constructor(options) {
+        this.fieldName = options.fieldName;
+        this.clientName = options.clientName;
+        this.type = options.type;
+        this.content = options.content;
+        this.size = options.content.length;
+        const segments = options.clientName.split('.');
+        this.extname = segments.length > 1 ? (segments.at(-1) ?? '').toLowerCase() : '';
+    }
+    /** Validate file against size and extension rules. */
+    validate(options) {
+        if (options.size) {
+            const maxBytes = parseFileSize(options.size);
+            if (this.size > maxBytes) {
+                this.errors.push(`File size ${this.size} exceeds limit ${options.size}`);
+            }
+        }
+        if (options.extnames && options.extnames.length > 0) {
+            if (!options.extnames.includes(this.extname)) {
+                this.errors.push(`Extension '${this.extname}' not allowed. Allowed: ${options.extnames.join(', ')}`);
+            }
+        }
+        return this.errors.length === 0;
+    }
+    get isValid() {
+        return this.errors.length === 0;
+    }
+    /**
+     * Move file to a directory on disk. When `name` is supplied it must be
+     * a plain filename — no path separators, no `.`/`..` segments. The
+     * common footgun is passing the client-supplied `clientName` directly
+     * (`await file.moveToDisk('uploads', file.clientName)`); a malicious
+     * upload could otherwise traverse out of `directory` via `../../etc/...`.
+     */
+    async moveToDisk(directory, name) {
+        const { mkdirSync, writeFileSync } = await import('node:fs');
+        const { join } = await import('node:path');
+        if (name !== undefined && !isSafeFilename(name)) {
+            throw new Error(`MultipartFile.moveToDisk: 'name' must be a plain filename (no path separators, '.', or '..'). Got: ${JSON.stringify(name)}`);
+        }
+        mkdirSync(directory, { recursive: true });
+        const fileName = name ?? `${randomBytes(16).toString('hex')}.${this.extname}`;
+        // Defense-in-depth: the default branch interpolates `extname` (derived
+        // from attacker-controlled `clientName`) into the filename, bypassing
+        // the `name` guard above. Re-validate the synthesized fileName before
+        // join to reject a hostile extname (separators, NUL).
+        if (!isSafeFilename(fileName)) {
+            throw new Error(`MultipartFile.moveToDisk: derived filename '${fileName}' is unsafe (separator or invalid char in clientName-derived extname).`);
+        }
+        const filePath = join(directory, fileName);
+        writeFileSync(filePath, this.content);
+        this.#moved = true;
+        return filePath;
+    }
+    get isMoved() {
+        return this.#moved;
+    }
+    /**
+     * Return a fresh `Readable` over the file's bytes. The underlying buffer is
+     * not consumed — repeated calls always start at byte 0, so callers can pipe
+     * the same file into multiple sinks (e.g. validation hash + disk write)
+     * without `Buffer.from(this.content)` boilerplate.
+     */
+    stream() {
+        return Readable.from(this.content, { objectMode: false });
+    }
+}
+function isSafeFilename(name) {
+    if (name.length === 0)
+        return false;
+    if (name === '.' || name === '..')
+        return false;
+    if (/[\\/\0]/.test(name))
+        return false;
+    return true;
+}
+function parseFileSize(size) {
+    const match = size.match(/^(\d+)(kb|mb|gb)?$/i);
+    if (!match)
+        return 1024 * 1024;
+    const num = parseInt(match[1], 10);
+    switch (match[2]?.toLowerCase()) {
+        case 'kb':
+            return num * 1024;
+        case 'mb':
+            return num * 1024 * 1024;
+        case 'gb':
+            return num * 1024 * 1024 * 1024;
+        default:
+            return num;
+    }
+}
+/**
+ * Hydrate `MultipartFile` instances from the typed payload the Rust
+ * HyperServer attaches to the request. The wire-level parser (multer crate,
+ * see `crates/ream-http/src/multipart.rs`) handles the actual RFC 7578
+ * parsing — JS just decodes the base64 envelope and wraps the result.
+ */
+export function hydrateMultipartPayload(payload) {
+    const fields = {};
+    for (const field of payload.fields) {
+        fields[field.name] = field.value;
+    }
+    const files = payload.files.map((f) => new MultipartFile({
+        fieldName: f.fieldName,
+        clientName: f.clientName,
+        type: f.contentType,
+        content: Buffer.from(f.contentB64, 'base64'),
+    }));
+    return { fields, files };
+}
+//# sourceMappingURL=MultipartFile.js.map

package/dist/bodyparser/MultipartFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MultipartFile.js","sourceRoot":"","sources":["../../src/bodyparser/MultipartFile.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAOtC,MAAM,OAAO,aAAa;IACxB,yCAAyC;IAChC,UAAU,CAAQ;IAE3B,oCAAoC;IAC3B,OAAO,CAAQ;IAExB,8CAA8C;IACrC,IAAI,CAAQ;IAErB,0BAA0B;IACjB,IAAI,CAAQ;IAErB,kCAAkC;IACzB,OAAO,CAAQ;IAExB,8BAA8B;IACrB,SAAS,CAAQ;IAE1B,yBAAyB;IAChB,MAAM,GAAa,EAAE,CAAA;IAE9B,uCAAuC;IACvC,MAAM,GAAG,KAAK,CAAA;IAEd,YAAY,OAKX;QACC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QAClC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACxB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAC9B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACjF,CAAC;IAED,sDAAsD;IACtD,QAAQ,CAAC,OAA8B;QACrC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC5C,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,kBAAkB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YAC1E,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,cAAc,IAAI,CAAC,OAAO,2BAA2B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnF,CAAA;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAA;IACjC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAA;IACjC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,IAAa;QAC/C,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;QAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QAE1C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,sGAAsG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAC7H,CAAA;QACH,CAAC;QAED,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzC,MAAM,QAAQ,GAAG,IAAI,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAA;QAC7E,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,sDAAsD;QACtD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,+CAA+C,QAAQ,wEAAwE,CAChI,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QAC1C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;IAC3D,CAAC;CACF;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACnC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC/C,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,GAAG,IAAI,CAAA;IAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAClC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;QAChC,KAAK,IAAI;YACP,OAAO,GAAG,GAAG,IAAI,CAAA;QACnB,KAAK,IAAI;YACP,OAAO,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA;QAC1B,KAAK,IAAI;YACP,OAAO,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;QACjC;YACE,OAAO,GAAG,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OASvC;IACC,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAA;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,aAAa,CAAC;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,IAAI,EAAE,CAAC,CAAC,WAAW;QACnB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC;KAC7C,CAAC,CACL,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC"}

package/dist/bodyparser/parseSize.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Parse a human-readable size string (e.g. '1mb', '512kb', '2gb') to bytes.
+ * Single source of truth — used by both BodyParserMiddleware and MultipartFile.
+ */
+export declare function parseSize(size: string): number;
+//# sourceMappingURL=parseSize.d.ts.map

package/dist/bodyparser/parseSize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseSize.d.ts","sourceRoot":"","sources":["../../src/bodyparser/parseSize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAc9C"}

package/dist/bodyparser/parseSize.js

@@ -0,0 +1,21 @@
+/**
+ * Parse a human-readable size string (e.g. '1mb', '512kb', '2gb') to bytes.
+ * Single source of truth — used by both BodyParserMiddleware and MultipartFile.
+ */
+export function parseSize(size) {
+    const match = size.match(/^(\d+)(kb|mb|gb)?$/i);
+    if (!match)
+        return 1024 * 1024; // default 1mb
+    const num = parseInt(match[1], 10);
+    switch (match[2]?.toLowerCase()) {
+        case 'kb':
+            return num * 1024;
+        case 'mb':
+            return num * 1024 * 1024;
+        case 'gb':
+            return num * 1024 * 1024 * 1024;
+        default:
+            return num;
+    }
+}
+//# sourceMappingURL=parseSize.js.map

package/dist/bodyparser/parseSize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseSize.js","sourceRoot":"","sources":["../../src/bodyparser/parseSize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,GAAG,IAAI,CAAA,CAAC,cAAc;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAClC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;QAChC,KAAK,IAAI;YACP,OAAO,GAAG,GAAG,IAAI,CAAA;QACnB,KAAK,IAAI;YACP,OAAO,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA;QAC1B,KAAK,IAAI;YACP,OAAO,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;QACjC;YACE,OAAO,GAAG,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/bootstrap/hyper-server.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Default HyperServer factory — encapsulates the platform-suffix mapping
+ * and the require() lookup so consumer apps stop hand-rolling the same
+ * ~25 lines in every `bin/server.ts`.
+ *
+ * Usage in an app:
+ *
+ *     import { createHyperServerFactory } from '@c9up/ream/bootstrap'
+ *     new Ignitor(APP_ROOT, {
+ *       port: 3000,
+ *       serverFactory: await createHyperServerFactory(),
+ *     })
+ *
+ * Returns `undefined` when no prebuilt binary matches the host platform —
+ * callers can branch on that to fall back to a JS-only server in tests.
+ *
+ * Binary lives at the package root (`./index.<platform>.node`),
+ * matching the @c9up/chronos / @c9up/sigil convention.
+ */
+import type { HyperServerLike } from '../Ignitor.js';
+/**
+ * Resolve the prebuilt HyperServer NAPI binary for the current platform.
+ * Returns a `serverFactory` compatible with `IgnitorConfig`, or `undefined`
+ * when no binary is available (unsupported platform / missing build).
+ */
+export declare function createHyperServerFactory(): ((port: number) => HyperServerLike) | undefined;
+//# sourceMappingURL=hyper-server.d.ts.map

package/dist/bootstrap/hyper-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hyper-server.d.ts","sourceRoot":"","sources":["../../src/bootstrap/hyper-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AA2BpD;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,eAAe,CAAC,GAAG,SAAS,CAqB1F"}

package/dist/bootstrap/hyper-server.js

@@ -0,0 +1,63 @@
+/**
+ * Default HyperServer factory — encapsulates the platform-suffix mapping
+ * and the require() lookup so consumer apps stop hand-rolling the same
+ * ~25 lines in every `bin/server.ts`.
+ *
+ * Usage in an app:
+ *
+ *     import { createHyperServerFactory } from '@c9up/ream/bootstrap'
+ *     new Ignitor(APP_ROOT, {
+ *       port: 3000,
+ *       serverFactory: await createHyperServerFactory(),
+ *     })
+ *
+ * Returns `undefined` when no prebuilt binary matches the host platform —
+ * callers can branch on that to fall back to a JS-only server in tests.
+ *
+ * Binary lives at the package root (`./index.<platform>.node`),
+ * matching the @c9up/chronos / @c9up/sigil convention.
+ */
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+import { arch, platform } from 'node:process';
+import { fileURLToPath } from 'node:url';
+const PLATFORM_SUFFIX = {
+    'linux-x64': 'linux-x64-gnu',
+    'linux-arm64': 'linux-arm64-gnu',
+    'darwin-x64': 'darwin-x64',
+    'darwin-arm64': 'darwin-arm64',
+    'win32-x64': 'win32-x64-msvc',
+};
+function isHyperServerNapi(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        'HyperServer' in value &&
+        typeof value.HyperServer === 'function');
+}
+/**
+ * Resolve the prebuilt HyperServer NAPI binary for the current platform.
+ * Returns a `serverFactory` compatible with `IgnitorConfig`, or `undefined`
+ * when no binary is available (unsupported platform / missing build).
+ */
+export function createHyperServerFactory() {
+    const suffix = PLATFORM_SUFFIX[`${platform}-${arch}`];
+    if (!suffix)
+        return undefined;
+    const require2 = createRequire(import.meta.url);
+    const here = dirname(fileURLToPath(import.meta.url));
+    // bootstrap/hyper-server.ts lives at src/bootstrap/, so the package root
+    // is two directories up.
+    const binaryPath = join(here, '..', '..', `index.${suffix}.node`);
+    let mod;
+    try {
+        mod = require2(binaryPath);
+    }
+    catch {
+        return undefined;
+    }
+    if (!isHyperServerNapi(mod))
+        return undefined;
+    const Ctor = mod.HyperServer;
+    return (port) => new Ctor(port);
+}
+//# sourceMappingURL=hyper-server.js.map

package/dist/bootstrap/hyper-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hyper-server.js","sourceRoot":"","sources":["../../src/bootstrap/hyper-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAGxC,MAAM,eAAe,GAA2B;IAC9C,WAAW,EAAE,eAAe;IAC5B,aAAa,EAAE,iBAAiB;IAChC,YAAY,EAAE,YAAY;IAC1B,cAAc,EAAE,cAAc;IAC9B,WAAW,EAAE,gBAAgB;CAC9B,CAAA;AAUD,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,aAAa,IAAI,KAAK;QACtB,OAAQ,KAAkC,CAAC,WAAW,KAAK,UAAU,CACtE,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAA;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAE7B,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,yEAAyE;IACzE,yBAAyB;IACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,MAAM,OAAO,CAAC,CAAA;IAEjE,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAE7C,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAA;IAC5B,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAA;AACzC,CAAC"}

package/dist/console/CommandRunner.d.ts

@@ -0,0 +1,18 @@
+/**
+ * CommandRunner — minimal CLI command framework.
+ *
+ * Registers commands and dispatches based on argv.
+ * Like AdonisJS Ace but lightweight.
+ */
+export interface Command {
+    name: string;
+    description: string;
+    run(args: string[], flags: Record<string, string | boolean>): Promise<void>;
+}
+export declare class CommandRunner {
+    #private;
+    register(command: Command): this;
+    handle(argv: string[]): Promise<void>;
+    getCommands(): Map<string, Command>;
+}
+//# sourceMappingURL=CommandRunner.d.ts.map

package/dist/console/CommandRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandRunner.d.ts","sourceRoot":"","sources":["../../src/console/CommandRunner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5E;AAED,qBAAa,aAAa;;IAGxB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAK1B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA2B3C,WAAW,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;CAGpC"}

package/dist/console/CommandRunner.js

@@ -0,0 +1,65 @@
+/**
+ * CommandRunner — minimal CLI command framework.
+ *
+ * Registers commands and dispatches based on argv.
+ * Like AdonisJS Ace but lightweight.
+ */
+export class CommandRunner {
+    #commands = new Map();
+    register(command) {
+        this.#commands.set(command.name, command);
+        return this;
+    }
+    async handle(argv) {
+        const { commandName, args, flags } = parseArgv(argv);
+        if (!commandName || commandName === 'help') {
+            this.#printHelp();
+            return;
+        }
+        const command = this.#commands.get(commandName);
+        if (!command) {
+            console.error(`Unknown command: ${commandName}`);
+            console.error(`Run without arguments to see available commands.`);
+            process.exitCode = 1;
+            return;
+        }
+        await command.run(args, flags);
+    }
+    #printHelp() {
+        console.log('\nAvailable commands:\n');
+        for (const [name, cmd] of this.#commands) {
+            console.log(`  ${name.padEnd(25)} ${cmd.description}`);
+        }
+        console.log('');
+    }
+    getCommands() {
+        return new Map(this.#commands);
+    }
+}
+function parseArgv(argv) {
+    const flags = {};
+    const positional = [];
+    for (const arg of argv) {
+        if (arg.startsWith('--')) {
+            const eqIdx = arg.indexOf('=');
+            if (eqIdx !== -1) {
+                flags[arg.slice(2, eqIdx)] = arg.slice(eqIdx + 1);
+            }
+            else {
+                flags[arg.slice(2)] = true;
+            }
+        }
+        else if (arg.startsWith('-') && arg.length === 2) {
+            flags[arg.slice(1)] = true;
+        }
+        else {
+            positional.push(arg);
+        }
+    }
+    return {
+        commandName: positional[0],
+        args: positional.slice(1),
+        flags,
+    };
+}
+//# sourceMappingURL=CommandRunner.js.map

package/dist/console/CommandRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandRunner.js","sourceRoot":"","sources":["../../src/console/CommandRunner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,OAAO,aAAa;IACxB,SAAS,GAAyB,IAAI,GAAG,EAAE,CAAA;IAE3C,QAAQ,CAAC,OAAgB;QACvB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACzC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAc;QACzB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAEpD,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC3C,IAAI,CAAC,UAAU,EAAE,CAAA;YACjB,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAA;YAChD,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAA;YACjE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACpB,OAAM;QACR,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAChC,CAAC;IAED,UAAU;QACR,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;QACtC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;QACxD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACjB,CAAC;IAED,WAAW;QACT,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChC,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAAc;IAK/B,MAAM,KAAK,GAAqC,EAAE,CAAA;IAClD,MAAM,UAAU,GAAa,EAAE,CAAA;IAE/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YACnD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;YAC5B,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;QAC5B,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QAC1B,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACzB,KAAK;KACN,CAAA;AACH,CAAC"}