@culturefy/shared 1.0.38 → 1.0.39

package/build/cjs/middlewares/sample middleware.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=sample middleware.js.map

package/build/cjs/middlewares/sample middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sample middleware.js","names":[],"sources":["../../../src/middlewares/sample middleware.ts"],"sourcesContent":[""],"mappings":"","ignoreList":[]}

package/build/cjs/types/middleware.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=middleware.js.map

package/build/cjs/types/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","names":[],"sources":["../../../src/types/middleware.ts"],"sourcesContent":["import { HttpRequest, HttpResponseInit, InvocationContext } from \"@azure/functions\";\n\n\nexport type IMiddleware = (\n  req: HttpRequest,\n  ctx: InvocationContext,\n  next: () => Promise<HttpResponseInit>\n) => Promise<HttpResponseInit>;\n\nexport type IHandler = (req: HttpRequest, ctx: InvocationContext) => Promise<HttpResponseInit>;"],"mappings":"","ignoreList":[]}

package/build/cjs/utils/index.js

@@ -31,4 +31,10 @@ Object.keys(_jwt).forEach(function (key) {
   if (key in exports && exports[key] === _jwt[key]) return;
   exports[key] = _jwt[key];
 });
+var _middleware = require("./middleware");
+Object.keys(_middleware).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _middleware[key]) return;
+  exports[key] = _middleware[key];
+});
 //# sourceMappingURL=index.js.map

package/build/cjs/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_secrets","require","Object","keys","forEach","key","exports","_response","_initializers","_mapper","_jwt"],"sources":["../../../src/utils/index.ts"],"sourcesContent":["export * from './secrets';\nexport * from './response';\nexport * from './initializers';\nexport * from './mapper';\nexport * from './jwt';"],"mappings":";;;AAAA,IAAAA,QAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,QAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,QAAA,CAAAK,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAL,QAAA,CAAAK,GAAA;AAAA;AACA,IAAAE,SAAA,GAAAN,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAI,SAAA,EAAAH,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAE,SAAA,CAAAF,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAE,SAAA,CAAAF,GAAA;AAAA;AACA,IAAAG,aAAA,GAAAP,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAK,aAAA,EAAAJ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAG,aAAA,CAAAH,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAG,aAAA,CAAAH,GAAA;AAAA;AACA,IAAAI,OAAA,GAAAR,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAM,OAAA,EAAAL,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAI,OAAA,CAAAJ,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAI,OAAA,CAAAJ,GAAA;AAAA;AACA,IAAAK,IAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,IAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,IAAA,CAAAL,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAK,IAAA,CAAAL,GAAA;AAAA","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_secrets","require","Object","keys","forEach","key","exports","_response","_initializers","_mapper","_jwt","_middleware"],"sources":["../../../src/utils/index.ts"],"sourcesContent":["export * from './secrets';\nexport * from './response';\nexport * from './initializers';\nexport * from './mapper';\nexport * from './jwt';\nexport * from './middleware';\n"],"mappings":";;;AAAA,IAAAA,QAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,QAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,QAAA,CAAAK,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAL,QAAA,CAAAK,GAAA;AAAA;AACA,IAAAE,SAAA,GAAAN,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAI,SAAA,EAAAH,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAE,SAAA,CAAAF,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAE,SAAA,CAAAF,GAAA;AAAA;AACA,IAAAG,aAAA,GAAAP,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAK,aAAA,EAAAJ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAG,aAAA,CAAAH,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAG,aAAA,CAAAH,GAAA;AAAA;AACA,IAAAI,OAAA,GAAAR,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAM,OAAA,EAAAL,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAI,OAAA,CAAAJ,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAI,OAAA,CAAAJ,GAAA;AAAA;AACA,IAAAK,IAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,IAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,IAAA,CAAAL,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAK,IAAA,CAAAL,GAAA;AAAA;AACA,IAAAM,WAAA,GAAAV,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAQ,WAAA,EAAAP,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAM,WAAA,CAAAN,GAAA;EAAAC,OAAA,CAAAD,GAAA,IAAAM,WAAA,CAAAN,GAAA;AAAA","ignoreList":[]}

package/build/cjs/utils/middleware.js

@@ -0,0 +1,71 @@
+"use strict";
+
+exports.__esModule = true;
+exports.withMW = withMW;
+/**
+ * Compose Azure Functions middlewares (Koa-style).
+ * Each middleware gets (req, ctx, next) and must either:
+ *  - `return await next()` to pass-through, or
+ *  - `return <HttpResponseInit>` to short-circuit.
+ *
+ * Any headers/cookies accumulated on ctx via Symbol.for("cfy.resHeaders"/"cfy.resCookies")
+ * are merged into the final response.
+ */
+// ---- withMW (kept small; merges any ctx headers/cookies if you use them) ----
+function withMW(middlewares, handler) {
+  return async (req, ctx) => {
+    var _res$headers;
+    const stack = [...middlewares, async (r, c) => handler(r, c)];
+    let index = -1;
+    const dispatch = async i => {
+      if (i <= index) throw new Error("next() called multiple times");
+      index = i;
+      const fn = stack[i];
+      if (!fn) throw new Error("No handler in middleware stack");
+
+      // next always returns a HttpResponseInit
+      const next = () => dispatch(i + 1);
+      const result = await fn(req, ctx, next);
+      if (result === undefined) {
+        throw new Error("Middleware must return a response or `return await next()`");
+      }
+      return result;
+    };
+    const res = await dispatch(0);
+
+    // optional: merge bags if you set them elsewhere
+    const CTX_HEADERS = Symbol.for("cfy.resHeaders");
+    const CTX_COOKIES = Symbol.for("cfy.resCookies"); // string[]
+    const CTX_COOKIES_OBJ = Symbol.for("cfy.resCookies.obj"); // HttpCookie[]
+
+    const merged = {
+      ...res,
+      headers: {
+        ...((_res$headers = res.headers) != null ? _res$headers : {})
+      }
+    };
+
+    // merge cookies as objects (preferred by Azure Functions)
+    // @ts-ignore
+    const objCookies = ctx[CTX_COOKIES_OBJ];
+    if (objCookies != null && objCookies.length) {
+      var _res$cookies;
+      merged.cookies = [...((_res$cookies = res.cookies) != null ? _res$cookies : []), ...objCookies];
+    }
+
+    // (optional) header fallback for environments that expect Set-Cookie header(s)
+    const cookies = ctx[CTX_COOKIES];
+    if (cookies != null && cookies.length) {
+      var _h$SetCookie;
+      const h = merged.headers;
+      const existing = (_h$SetCookie = h["Set-Cookie"]) != null ? _h$SetCookie : h["set-cookie"];
+      h["Set-Cookie"] = existing ? Array.isArray(existing) ? existing.concat(cookies) : [existing, ...cookies] : cookies;
+    }
+
+    // merge extra headers if you use that bag
+    const extra = ctx[CTX_HEADERS];
+    if (extra) for (const [k, v] of Object.entries(extra)) merged.headers[k] = v;
+    return merged;
+  };
+}
+//# sourceMappingURL=middleware.js.map

package/build/cjs/utils/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","names":["withMW","middlewares","handler","req","ctx","_res$headers","stack","r","c","index","dispatch","i","Error","fn","next","result","undefined","res","CTX_HEADERS","Symbol","for","CTX_COOKIES","CTX_COOKIES_OBJ","merged","headers","objCookies","length","_res$cookies","cookies","_h$SetCookie","h","existing","Array","isArray","concat","extra","k","v","Object","entries"],"sources":["../../../src/utils/middleware.ts"],"sourcesContent":["import { app, HttpRequest, HttpResponseInit, InvocationContext } from \"@azure/functions\";\nimport { IHandler, IMiddleware } from \"../types/middleware\";\n\n/**\n * Compose Azure Functions middlewares (Koa-style).\n * Each middleware gets (req, ctx, next) and must either:\n *  - `return await next()` to pass-through, or\n *  - `return <HttpResponseInit>` to short-circuit.\n *\n * Any headers/cookies accumulated on ctx via Symbol.for(\"cfy.resHeaders\"/\"cfy.resCookies\")\n * are merged into the final response.\n */\n// ---- withMW (kept small; merges any ctx headers/cookies if you use them) ----\nexport function withMW(middlewares: IMiddleware[], handler: IHandler) {\n  return async (req: HttpRequest, ctx: InvocationContext): Promise<HttpResponseInit> => {\n      const stack: IMiddleware[] = [...middlewares, async (r, c) => handler(r, c)];\n\n      let index = -1;\n      const dispatch = async (i: number): Promise<HttpResponseInit> => {\n          if (i <= index) throw new Error(\"next() called multiple times\");\n          index = i;\n\n          const fn = stack[i];\n          if (!fn) throw new Error(\"No handler in middleware stack\");\n\n          // next always returns a HttpResponseInit\n          const next = () => dispatch(i + 1);\n          const result = await fn(req, ctx, next);\n\n          if (result === undefined) {\n              throw new Error(\"Middleware must return a response or `return await next()`\");\n          }\n          return result;\n      };\n\n      const res = await dispatch(0);\n\n      // optional: merge bags if you set them elsewhere\n      const CTX_HEADERS = Symbol.for(\"cfy.resHeaders\");\n      const CTX_COOKIES = Symbol.for(\"cfy.resCookies\");       // string[]\n      const CTX_COOKIES_OBJ = Symbol.for(\"cfy.resCookies.obj\"); // HttpCookie[]\n\n      const merged: HttpResponseInit = { ...res, headers: { ...(res.headers ?? {}) } };\n\n      // merge cookies as objects (preferred by Azure Functions)\n      // @ts-ignore\n      const objCookies = (ctx as any)[CTX_COOKIES_OBJ] as HttpCookie[] | undefined;\n      if (objCookies?.length) {\n          merged.cookies = [...(res.cookies ?? []), ...objCookies];\n      }\n\n      // (optional) header fallback for environments that expect Set-Cookie header(s)\n      const cookies = (ctx as any)[CTX_COOKIES] as string[] | undefined;\n      if (cookies?.length) {\n          const h = merged.headers as any;\n          const existing = h[\"Set-Cookie\"] ?? h[\"set-cookie\"];\n          h[\"Set-Cookie\"] = existing\n              ? (Array.isArray(existing) ? existing.concat(cookies) : [existing, ...cookies])\n              : cookies;\n      }\n\n      // merge extra headers if you use that bag\n      const extra = (ctx as any)[CTX_HEADERS] as Record<string, string | string[]> | undefined;\n      if (extra) for (const [k, v] of Object.entries(extra)) (merged.headers as any)[k] = v;\n\n      return merged;\n\n\n  };\n}\n"],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASA,MAAMA,CAACC,WAA0B,EAAEC,OAAiB,EAAE;EACpE,OAAO,OAAOC,GAAgB,EAAEC,GAAsB,KAAgC;IAAA,IAAAC,YAAA;IAClF,MAAMC,KAAoB,GAAG,CAAC,GAAGL,WAAW,EAAE,OAAOM,CAAC,EAAEC,CAAC,KAAKN,OAAO,CAACK,CAAC,EAAEC,CAAC,CAAC,CAAC;IAE5E,IAAIC,KAAK,GAAG,CAAC,CAAC;IACd,MAAMC,QAAQ,GAAG,MAAOC,CAAS,IAAgC;MAC7D,IAAIA,CAAC,IAAIF,KAAK,EAAE,MAAM,IAAIG,KAAK,CAAC,8BAA8B,CAAC;MAC/DH,KAAK,GAAGE,CAAC;MAET,MAAME,EAAE,GAAGP,KAAK,CAACK,CAAC,CAAC;MACnB,IAAI,CAACE,EAAE,EAAE,MAAM,IAAID,KAAK,CAAC,gCAAgC,CAAC;;MAE1D;MACA,MAAME,IAAI,GAAGA,CAAA,KAAMJ,QAAQ,CAACC,CAAC,GAAG,CAAC,CAAC;MAClC,MAAMI,MAAM,GAAG,MAAMF,EAAE,CAACV,GAAG,EAAEC,GAAG,EAAEU,IAAI,CAAC;MAEvC,IAAIC,MAAM,KAAKC,SAAS,EAAE;QACtB,MAAM,IAAIJ,KAAK,CAAC,4DAA4D,CAAC;MACjF;MACA,OAAOG,MAAM;IACjB,CAAC;IAED,MAAME,GAAG,GAAG,MAAMP,QAAQ,CAAC,CAAC,CAAC;;IAE7B;IACA,MAAMQ,WAAW,GAAGC,MAAM,CAACC,GAAG,CAAC,gBAAgB,CAAC;IAChD,MAAMC,WAAW,GAAGF,MAAM,CAACC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAO;IACxD,MAAME,eAAe,GAAGH,MAAM,CAACC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;;IAE1D,MAAMG,MAAwB,GAAG;MAAE,GAAGN,GAAG;MAAEO,OAAO,EAAE;QAAE,KAAAnB,YAAA,GAAIY,GAAG,CAACO,OAAO,YAAAnB,YAAA,GAAI,CAAC,CAAC;MAAE;IAAE,CAAC;;IAEhF;IACA;IACA,MAAMoB,UAAU,GAAIrB,GAAG,CAASkB,eAAe,CAA6B;IAC5E,IAAIG,UAAU,YAAVA,UAAU,CAAEC,MAAM,EAAE;MAAA,IAAAC,YAAA;MACpBJ,MAAM,CAACK,OAAO,GAAG,CAAC,KAAAD,YAAA,GAAIV,GAAG,CAACW,OAAO,YAAAD,YAAA,GAAI,EAAE,CAAC,EAAE,GAAGF,UAAU,CAAC;IAC5D;;IAEA;IACA,MAAMG,OAAO,GAAIxB,GAAG,CAASiB,WAAW,CAAyB;IACjE,IAAIO,OAAO,YAAPA,OAAO,CAAEF,MAAM,EAAE;MAAA,IAAAG,YAAA;MACjB,MAAMC,CAAC,GAAGP,MAAM,CAACC,OAAc;MAC/B,MAAMO,QAAQ,IAAAF,YAAA,GAAGC,CAAC,CAAC,YAAY,CAAC,YAAAD,YAAA,GAAIC,CAAC,CAAC,YAAY,CAAC;MACnDA,CAAC,CAAC,YAAY,CAAC,GAAGC,QAAQ,GACnBC,KAAK,CAACC,OAAO,CAACF,QAAQ,CAAC,GAAGA,QAAQ,CAACG,MAAM,CAACN,OAAO,CAAC,GAAG,CAACG,QAAQ,EAAE,GAAGH,OAAO,CAAC,GAC5EA,OAAO;IACjB;;IAEA;IACA,MAAMO,KAAK,GAAI/B,GAAG,CAASc,WAAW,CAAkD;IACxF,IAAIiB,KAAK,EAAE,KAAK,MAAM,CAACC,CAAC,EAAEC,CAAC,CAAC,IAAIC,MAAM,CAACC,OAAO,CAACJ,KAAK,CAAC,EAAGZ,MAAM,CAACC,OAAO,CAASY,CAAC,CAAC,GAAGC,CAAC;IAErF,OAAOd,MAAM;EAGjB,CAAC;AACH","ignoreList":[]}

package/build/esm/middlewares/sample middleware.js

@@ -0,0 +1,2 @@
+
+//# sourceMappingURL=sample middleware.js.map

package/build/esm/middlewares/sample middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sample middleware.js","names":[],"sources":["../../../src/middlewares/sample middleware.ts"],"sourcesContent":[""],"mappings":"","ignoreList":[]}

package/build/esm/types/middleware.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=middleware.js.map

package/build/esm/types/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","names":[],"sources":["../../../src/types/middleware.ts"],"sourcesContent":["import { HttpRequest, HttpResponseInit, InvocationContext } from \"@azure/functions\";\n\n\nexport type IMiddleware = (\n  req: HttpRequest,\n  ctx: InvocationContext,\n  next: () => Promise<HttpResponseInit>\n) => Promise<HttpResponseInit>;\n\nexport type IHandler = (req: HttpRequest, ctx: InvocationContext) => Promise<HttpResponseInit>;"],"mappings":"","ignoreList":[]}

package/build/esm/utils/index.js

@@ -3,4 +3,5 @@ export * from './response';
 export * from './initializers';
 export * from './mapper';
 export * from './jwt';
+export * from './middleware';
 //# sourceMappingURL=index.js.map

package/build/esm/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/utils/index.ts"],"sourcesContent":["export * from './secrets';\nexport * from './response';\nexport * from './initializers';\nexport * from './mapper';\nexport * from './jwt';"],"mappings":"AAAA,cAAc,WAAW;AACzB,cAAc,YAAY;AAC1B,cAAc,gBAAgB;AAC9B,cAAc,UAAU;AACxB,cAAc,OAAO","ignoreList":[]}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/utils/index.ts"],"sourcesContent":["export * from './secrets';\nexport * from './response';\nexport * from './initializers';\nexport * from './mapper';\nexport * from './jwt';\nexport * from './middleware';\n"],"mappings":"AAAA,cAAc,WAAW;AACzB,cAAc,YAAY;AAC1B,cAAc,gBAAgB;AAC9B,cAAc,UAAU;AACxB,cAAc,OAAO;AACrB,cAAc,cAAc","ignoreList":[]}

package/build/esm/utils/middleware.js

@@ -0,0 +1,65 @@
+function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
+/**
+ * Compose Azure Functions middlewares (Koa-style).
+ * Each middleware gets (req, ctx, next) and must either:
+ *  - `return await next()` to pass-through, or
+ *  - `return <HttpResponseInit>` to short-circuit.
+ *
+ * Any headers/cookies accumulated on ctx via Symbol.for("cfy.resHeaders"/"cfy.resCookies")
+ * are merged into the final response.
+ */
+// ---- withMW (kept small; merges any ctx headers/cookies if you use them) ----
+export function withMW(middlewares, handler) {
+  return async (req, ctx) => {
+    var _res$headers;
+    const stack = [...middlewares, async (r, c) => handler(r, c)];
+    let index = -1;
+    const dispatch = async i => {
+      if (i <= index) throw new Error("next() called multiple times");
+      index = i;
+      const fn = stack[i];
+      if (!fn) throw new Error("No handler in middleware stack");
+
+      // next always returns a HttpResponseInit
+      const next = () => dispatch(i + 1);
+      const result = await fn(req, ctx, next);
+      if (result === undefined) {
+        throw new Error("Middleware must return a response or `return await next()`");
+      }
+      return result;
+    };
+    const res = await dispatch(0);
+
+    // optional: merge bags if you set them elsewhere
+    const CTX_HEADERS = Symbol.for("cfy.resHeaders");
+    const CTX_COOKIES = Symbol.for("cfy.resCookies"); // string[]
+    const CTX_COOKIES_OBJ = Symbol.for("cfy.resCookies.obj"); // HttpCookie[]
+
+    const merged = _extends({}, res, {
+      headers: _extends({}, (_res$headers = res.headers) != null ? _res$headers : {})
+    });
+
+    // merge cookies as objects (preferred by Azure Functions)
+    // @ts-ignore
+    const objCookies = ctx[CTX_COOKIES_OBJ];
+    if (objCookies != null && objCookies.length) {
+      var _res$cookies;
+      merged.cookies = [...((_res$cookies = res.cookies) != null ? _res$cookies : []), ...objCookies];
+    }
+
+    // (optional) header fallback for environments that expect Set-Cookie header(s)
+    const cookies = ctx[CTX_COOKIES];
+    if (cookies != null && cookies.length) {
+      var _h$SetCookie;
+      const h = merged.headers;
+      const existing = (_h$SetCookie = h["Set-Cookie"]) != null ? _h$SetCookie : h["set-cookie"];
+      h["Set-Cookie"] = existing ? Array.isArray(existing) ? existing.concat(cookies) : [existing, ...cookies] : cookies;
+    }
+
+    // merge extra headers if you use that bag
+    const extra = ctx[CTX_HEADERS];
+    if (extra) for (const [k, v] of Object.entries(extra)) merged.headers[k] = v;
+    return merged;
+  };
+}
+//# sourceMappingURL=middleware.js.map

package/build/esm/utils/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","names":["withMW","middlewares","handler","req","ctx","_res$headers","stack","r","c","index","dispatch","i","Error","fn","next","result","undefined","res","CTX_HEADERS","Symbol","for","CTX_COOKIES","CTX_COOKIES_OBJ","merged","_extends","headers","objCookies","length","_res$cookies","cookies","_h$SetCookie","h","existing","Array","isArray","concat","extra","k","v","Object","entries"],"sources":["../../../src/utils/middleware.ts"],"sourcesContent":["import { app, HttpRequest, HttpResponseInit, InvocationContext } from \"@azure/functions\";\nimport { IHandler, IMiddleware } from \"../types/middleware\";\n\n/**\n * Compose Azure Functions middlewares (Koa-style).\n * Each middleware gets (req, ctx, next) and must either:\n *  - `return await next()` to pass-through, or\n *  - `return <HttpResponseInit>` to short-circuit.\n *\n * Any headers/cookies accumulated on ctx via Symbol.for(\"cfy.resHeaders\"/\"cfy.resCookies\")\n * are merged into the final response.\n */\n// ---- withMW (kept small; merges any ctx headers/cookies if you use them) ----\nexport function withMW(middlewares: IMiddleware[], handler: IHandler) {\n  return async (req: HttpRequest, ctx: InvocationContext): Promise<HttpResponseInit> => {\n      const stack: IMiddleware[] = [...middlewares, async (r, c) => handler(r, c)];\n\n      let index = -1;\n      const dispatch = async (i: number): Promise<HttpResponseInit> => {\n          if (i <= index) throw new Error(\"next() called multiple times\");\n          index = i;\n\n          const fn = stack[i];\n          if (!fn) throw new Error(\"No handler in middleware stack\");\n\n          // next always returns a HttpResponseInit\n          const next = () => dispatch(i + 1);\n          const result = await fn(req, ctx, next);\n\n          if (result === undefined) {\n              throw new Error(\"Middleware must return a response or `return await next()`\");\n          }\n          return result;\n      };\n\n      const res = await dispatch(0);\n\n      // optional: merge bags if you set them elsewhere\n      const CTX_HEADERS = Symbol.for(\"cfy.resHeaders\");\n      const CTX_COOKIES = Symbol.for(\"cfy.resCookies\");       // string[]\n      const CTX_COOKIES_OBJ = Symbol.for(\"cfy.resCookies.obj\"); // HttpCookie[]\n\n      const merged: HttpResponseInit = { ...res, headers: { ...(res.headers ?? {}) } };\n\n      // merge cookies as objects (preferred by Azure Functions)\n      // @ts-ignore\n      const objCookies = (ctx as any)[CTX_COOKIES_OBJ] as HttpCookie[] | undefined;\n      if (objCookies?.length) {\n          merged.cookies = [...(res.cookies ?? []), ...objCookies];\n      }\n\n      // (optional) header fallback for environments that expect Set-Cookie header(s)\n      const cookies = (ctx as any)[CTX_COOKIES] as string[] | undefined;\n      if (cookies?.length) {\n          const h = merged.headers as any;\n          const existing = h[\"Set-Cookie\"] ?? h[\"set-cookie\"];\n          h[\"Set-Cookie\"] = existing\n              ? (Array.isArray(existing) ? existing.concat(cookies) : [existing, ...cookies])\n              : cookies;\n      }\n\n      // merge extra headers if you use that bag\n      const extra = (ctx as any)[CTX_HEADERS] as Record<string, string | string[]> | undefined;\n      if (extra) for (const [k, v] of Object.entries(extra)) (merged.headers as any)[k] = v;\n\n      return merged;\n\n\n  };\n}\n"],"mappings":";AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,MAAMA,CAACC,WAA0B,EAAEC,OAAiB,EAAE;EACpE,OAAO,OAAOC,GAAgB,EAAEC,GAAsB,KAAgC;IAAA,IAAAC,YAAA;IAClF,MAAMC,KAAoB,GAAG,CAAC,GAAGL,WAAW,EAAE,OAAOM,CAAC,EAAEC,CAAC,KAAKN,OAAO,CAACK,CAAC,EAAEC,CAAC,CAAC,CAAC;IAE5E,IAAIC,KAAK,GAAG,CAAC,CAAC;IACd,MAAMC,QAAQ,GAAG,MAAOC,CAAS,IAAgC;MAC7D,IAAIA,CAAC,IAAIF,KAAK,EAAE,MAAM,IAAIG,KAAK,CAAC,8BAA8B,CAAC;MAC/DH,KAAK,GAAGE,CAAC;MAET,MAAME,EAAE,GAAGP,KAAK,CAACK,CAAC,CAAC;MACnB,IAAI,CAACE,EAAE,EAAE,MAAM,IAAID,KAAK,CAAC,gCAAgC,CAAC;;MAE1D;MACA,MAAME,IAAI,GAAGA,CAAA,KAAMJ,QAAQ,CAACC,CAAC,GAAG,CAAC,CAAC;MAClC,MAAMI,MAAM,GAAG,MAAMF,EAAE,CAACV,GAAG,EAAEC,GAAG,EAAEU,IAAI,CAAC;MAEvC,IAAIC,MAAM,KAAKC,SAAS,EAAE;QACtB,MAAM,IAAIJ,KAAK,CAAC,4DAA4D,CAAC;MACjF;MACA,OAAOG,MAAM;IACjB,CAAC;IAED,MAAME,GAAG,GAAG,MAAMP,QAAQ,CAAC,CAAC,CAAC;;IAE7B;IACA,MAAMQ,WAAW,GAAGC,MAAM,CAACC,GAAG,CAAC,gBAAgB,CAAC;IAChD,MAAMC,WAAW,GAAGF,MAAM,CAACC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAO;IACxD,MAAME,eAAe,GAAGH,MAAM,CAACC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;;IAE1D,MAAMG,MAAwB,GAAAC,QAAA,KAAQP,GAAG;MAAEQ,OAAO,EAAAD,QAAA,MAAAnB,YAAA,GAAQY,GAAG,CAACQ,OAAO,YAAApB,YAAA,GAAI,CAAC,CAAC;IAAG,EAAE;;IAEhF;IACA;IACA,MAAMqB,UAAU,GAAItB,GAAG,CAASkB,eAAe,CAA6B;IAC5E,IAAII,UAAU,YAAVA,UAAU,CAAEC,MAAM,EAAE;MAAA,IAAAC,YAAA;MACpBL,MAAM,CAACM,OAAO,GAAG,CAAC,KAAAD,YAAA,GAAIX,GAAG,CAACY,OAAO,YAAAD,YAAA,GAAI,EAAE,CAAC,EAAE,GAAGF,UAAU,CAAC;IAC5D;;IAEA;IACA,MAAMG,OAAO,GAAIzB,GAAG,CAASiB,WAAW,CAAyB;IACjE,IAAIQ,OAAO,YAAPA,OAAO,CAAEF,MAAM,EAAE;MAAA,IAAAG,YAAA;MACjB,MAAMC,CAAC,GAAGR,MAAM,CAACE,OAAc;MAC/B,MAAMO,QAAQ,IAAAF,YAAA,GAAGC,CAAC,CAAC,YAAY,CAAC,YAAAD,YAAA,GAAIC,CAAC,CAAC,YAAY,CAAC;MACnDA,CAAC,CAAC,YAAY,CAAC,GAAGC,QAAQ,GACnBC,KAAK,CAACC,OAAO,CAACF,QAAQ,CAAC,GAAGA,QAAQ,CAACG,MAAM,CAACN,OAAO,CAAC,GAAG,CAACG,QAAQ,EAAE,GAAGH,OAAO,CAAC,GAC5EA,OAAO;IACjB;;IAEA;IACA,MAAMO,KAAK,GAAIhC,GAAG,CAASc,WAAW,CAAkD;IACxF,IAAIkB,KAAK,EAAE,KAAK,MAAM,CAACC,CAAC,EAAEC,CAAC,CAAC,IAAIC,MAAM,CAACC,OAAO,CAACJ,KAAK,CAAC,EAAGb,MAAM,CAACE,OAAO,CAASY,CAAC,CAAC,GAAGC,CAAC;IAErF,OAAOf,MAAM;EAGjB,CAAC;AACH","ignoreList":[]}

package/build/src/middlewares/sample middleware.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=sample%20middleware.js.map

package/build/src/middlewares/sample middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sample middleware.js","sourceRoot":"","sources":["../../../src/middlewares/sample middleware.ts"],"names":[],"mappings":""}

package/build/src/types/middleware.d.ts

@@ -0,0 +1,3 @@
+import { HttpRequest, HttpResponseInit, InvocationContext } from "@azure/functions";
+export type IMiddleware = (req: HttpRequest, ctx: InvocationContext, next: () => Promise<HttpResponseInit>) => Promise<HttpResponseInit>;
+export type IHandler = (req: HttpRequest, ctx: InvocationContext) => Promise<HttpResponseInit>;

package/build/src/types/middleware.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=middleware.js.map

package/build/src/types/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/types/middleware.ts"],"names":[],"mappings":""}

package/build/src/utils/index.d.ts

@@ -3,3 +3,4 @@ export * from './response';
 export * from './initializers';
 export * from './mapper';
 export * from './jwt';
+export * from './middleware';

package/build/src/utils/index.js

@@ -6,4 +6,5 @@ tslib_1.__exportStar(require("./response"), exports);
 tslib_1.__exportStar(require("./initializers"), exports);
 tslib_1.__exportStar(require("./mapper"), exports);
 tslib_1.__exportStar(require("./jwt"), exports);
+tslib_1.__exportStar(require("./middleware"), exports);
 //# sourceMappingURL=index.js.map

package/build/src/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":";;;AAAA,oDAA0B;AAC1B,qDAA2B;AAC3B,yDAA+B;AAC/B,mDAAyB;AACzB,gDAAsB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":";;;AAAA,oDAA0B;AAC1B,qDAA2B;AAC3B,yDAA+B;AAC/B,mDAAyB;AACzB,gDAAsB;AACtB,uDAA6B"}

package/build/src/utils/middleware.d.ts

@@ -0,0 +1,12 @@
+import { HttpRequest, HttpResponseInit, InvocationContext } from "@azure/functions";
+import { IHandler, IMiddleware } from "../types/middleware";
+/**
+ * Compose Azure Functions middlewares (Koa-style).
+ * Each middleware gets (req, ctx, next) and must either:
+ *  - `return await next()` to pass-through, or
+ *  - `return <HttpResponseInit>` to short-circuit.
+ *
+ * Any headers/cookies accumulated on ctx via Symbol.for("cfy.resHeaders"/"cfy.resCookies")
+ * are merged into the final response.
+ */
+export declare function withMW(middlewares: IMiddleware[], handler: IHandler): (req: HttpRequest, ctx: InvocationContext) => Promise<HttpResponseInit>;

package/build/src/utils/middleware.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withMW = withMW;
+const tslib_1 = require("tslib");
+/**
+ * Compose Azure Functions middlewares (Koa-style).
+ * Each middleware gets (req, ctx, next) and must either:
+ *  - `return await next()` to pass-through, or
+ *  - `return <HttpResponseInit>` to short-circuit.
+ *
+ * Any headers/cookies accumulated on ctx via Symbol.for("cfy.resHeaders"/"cfy.resCookies")
+ * are merged into the final response.
+ */
+// ---- withMW (kept small; merges any ctx headers/cookies if you use them) ----
+function withMW(middlewares, handler) {
+    return (req, ctx) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const stack = [...middlewares, (r, c) => tslib_1.__awaiter(this, void 0, void 0, function* () { return handler(r, c); })];
+        let index = -1;
+        const dispatch = (i) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+            if (i <= index)
+                throw new Error("next() called multiple times");
+            index = i;
+            const fn = stack[i];
+            if (!fn)
+                throw new Error("No handler in middleware stack");
+            // next always returns a HttpResponseInit
+            const next = () => dispatch(i + 1);
+            const result = yield fn(req, ctx, next);
+            if (result === undefined) {
+                throw new Error("Middleware must return a response or `return await next()`");
+            }
+            return result;
+        });
+        const res = yield dispatch(0);
+        // optional: merge bags if you set them elsewhere
+        const CTX_HEADERS = Symbol.for("cfy.resHeaders");
+        const CTX_COOKIES = Symbol.for("cfy.resCookies"); // string[]
+        const CTX_COOKIES_OBJ = Symbol.for("cfy.resCookies.obj"); // HttpCookie[]
+        const merged = Object.assign(Object.assign({}, res), { headers: Object.assign({}, ((_a = res.headers) !== null && _a !== void 0 ? _a : {})) });
+        // merge cookies as objects (preferred by Azure Functions)
+        // @ts-ignore
+        const objCookies = ctx[CTX_COOKIES_OBJ];
+        if (objCookies === null || objCookies === void 0 ? void 0 : objCookies.length) {
+            merged.cookies = [...((_b = res.cookies) !== null && _b !== void 0 ? _b : []), ...objCookies];
+        }
+        // (optional) header fallback for environments that expect Set-Cookie header(s)
+        const cookies = ctx[CTX_COOKIES];
+        if (cookies === null || cookies === void 0 ? void 0 : cookies.length) {
+            const h = merged.headers;
+            const existing = (_c = h["Set-Cookie"]) !== null && _c !== void 0 ? _c : h["set-cookie"];
+            h["Set-Cookie"] = existing
+                ? (Array.isArray(existing) ? existing.concat(cookies) : [existing, ...cookies])
+                : cookies;
+        }
+        // merge extra headers if you use that bag
+        const extra = ctx[CTX_HEADERS];
+        if (extra)
+            for (const [k, v] of Object.entries(extra))
+                merged.headers[k] = v;
+        return merged;
+    });
+}
+//# sourceMappingURL=middleware.js.map

package/build/src/utils/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/utils/middleware.ts"],"names":[],"mappings":";;AAaA,wBAwDC;;AAlED;;;;;;;;GAQG;AACH,gFAAgF;AAChF,SAAgB,MAAM,CAAC,WAA0B,EAAE,OAAiB;IAClE,OAAO,CAAO,GAAgB,EAAE,GAAsB,EAA6B,EAAE;;QACjF,MAAM,KAAK,GAAkB,CAAC,GAAG,WAAW,EAAE,CAAO,CAAC,EAAE,CAAC,EAAE,EAAE,wDAAC,OAAA,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA,GAAA,CAAC,CAAC;QAE7E,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QACf,MAAM,QAAQ,GAAG,CAAO,CAAS,EAA6B,EAAE;YAC5D,IAAI,CAAC,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAChE,KAAK,GAAG,CAAC,CAAC;YAEV,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAE3D,yCAAyC;YACzC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAExC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,MAAM,CAAC;QAClB,CAAC,CAAA,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAE9B,iDAAiD;QACjD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAO,WAAW;QACnE,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe;QAEzE,MAAM,MAAM,mCAA0B,GAAG,KAAE,OAAO,oBAAO,CAAC,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,CAAC,IAAI,CAAC;QAEjF,0DAA0D;QAC1D,aAAa;QACb,MAAM,UAAU,GAAI,GAAW,CAAC,eAAe,CAA6B,CAAC;QAC7E,IAAI,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,MAAM,EAAE,CAAC;YACrB,MAAM,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;QAC7D,CAAC;QAED,+EAA+E;QAC/E,MAAM,OAAO,GAAI,GAAW,CAAC,WAAW,CAAyB,CAAC;QAClE,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAc,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAA,CAAC,CAAC,YAAY,CAAC,mCAAI,CAAC,CAAC,YAAY,CAAC,CAAC;YACpD,CAAC,CAAC,YAAY,CAAC,GAAG,QAAQ;gBACtB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;gBAC/E,CAAC,CAAC,OAAO,CAAC;QAClB,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAI,GAAW,CAAC,WAAW,CAAkD,CAAC;QACzF,IAAI,KAAK;YAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAG,MAAM,CAAC,OAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAEtF,OAAO,MAAM,CAAC;IAGlB,CAAC,CAAA,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@culturefy/shared",
   "description": "Shared utilities for culturefy serverless services",
-  "version": "1.0.38",
+  "version": "1.0.39",
   "main": "build/cjs/index.js",
   "module": "build/esm/index.js",
   "types": "build/src/index.d.ts",

package/src/types/middleware.ts

@@ -0,0 +1,10 @@
+import { HttpRequest, HttpResponseInit, InvocationContext } from "@azure/functions";
+
+
+export type IMiddleware = (
+  req: HttpRequest,
+  ctx: InvocationContext,
+  next: () => Promise<HttpResponseInit>
+) => Promise<HttpResponseInit>;
+
+export type IHandler = (req: HttpRequest, ctx: InvocationContext) => Promise<HttpResponseInit>;

package/src/utils/index.ts

@@ -2,4 +2,5 @@ export * from './secrets';
 export * from './response';
 export * from './initializers';
 export * from './mapper';
-export * from './jwt';
+export * from './jwt';
+export * from './middleware';

package/src/utils/middleware.ts

@@ -0,0 +1,70 @@
+import { app, HttpRequest, HttpResponseInit, InvocationContext } from "@azure/functions";
+import { IHandler, IMiddleware } from "../types/middleware";
+
+/**
+ * Compose Azure Functions middlewares (Koa-style).
+ * Each middleware gets (req, ctx, next) and must either:
+ *  - `return await next()` to pass-through, or
+ *  - `return <HttpResponseInit>` to short-circuit.
+ *
+ * Any headers/cookies accumulated on ctx via Symbol.for("cfy.resHeaders"/"cfy.resCookies")
+ * are merged into the final response.
+ */
+// ---- withMW (kept small; merges any ctx headers/cookies if you use them) ----
+export function withMW(middlewares: IMiddleware[], handler: IHandler) {
+  return async (req: HttpRequest, ctx: InvocationContext): Promise<HttpResponseInit> => {
+      const stack: IMiddleware[] = [...middlewares, async (r, c) => handler(r, c)];
+
+      let index = -1;
+      const dispatch = async (i: number): Promise<HttpResponseInit> => {
+          if (i <= index) throw new Error("next() called multiple times");
+          index = i;
+
+          const fn = stack[i];
+          if (!fn) throw new Error("No handler in middleware stack");
+
+          // next always returns a HttpResponseInit
+          const next = () => dispatch(i + 1);
+          const result = await fn(req, ctx, next);
+
+          if (result === undefined) {
+              throw new Error("Middleware must return a response or `return await next()`");
+          }
+          return result;
+      };
+
+      const res = await dispatch(0);
+
+      // optional: merge bags if you set them elsewhere
+      const CTX_HEADERS = Symbol.for("cfy.resHeaders");
+      const CTX_COOKIES = Symbol.for("cfy.resCookies");       // string[]
+      const CTX_COOKIES_OBJ = Symbol.for("cfy.resCookies.obj"); // HttpCookie[]
+
+      const merged: HttpResponseInit = { ...res, headers: { ...(res.headers ?? {}) } };
+
+      // merge cookies as objects (preferred by Azure Functions)
+      // @ts-ignore
+      const objCookies = (ctx as any)[CTX_COOKIES_OBJ] as HttpCookie[] | undefined;
+      if (objCookies?.length) {
+          merged.cookies = [...(res.cookies ?? []), ...objCookies];
+      }
+
+      // (optional) header fallback for environments that expect Set-Cookie header(s)
+      const cookies = (ctx as any)[CTX_COOKIES] as string[] | undefined;
+      if (cookies?.length) {
+          const h = merged.headers as any;
+          const existing = h["Set-Cookie"] ?? h["set-cookie"];
+          h["Set-Cookie"] = existing
+              ? (Array.isArray(existing) ? existing.concat(cookies) : [existing, ...cookies])
+              : cookies;
+      }
+
+      // merge extra headers if you use that bag
+      const extra = (ctx as any)[CTX_HEADERS] as Record<string, string | string[]> | undefined;
+      if (extra) for (const [k, v] of Object.entries(extra)) (merged.headers as any)[k] = v;
+
+      return merged;
+
+
+  };
+}