@daloyjs/core 0.7.5 → 0.8.2

package/README.md

@@ -24,7 +24,7 @@ DaloyJS exists to be the framework you'd build if you took the best ideas from e
 | **Supply-chain-hardened installs and publishing** | [pnpm](https://pnpm.io/motivation) + hardened CI/CD | `ignore-scripts`, release-age cooldown, explicit build allowlist, SHA-pinned actions, isolated OIDC publish with provenance. |
 
 ```
-320/320 framework tests passing · 100% line + function coverage · clean strict TypeScript 6
+framework test suite passing · 100% line + function coverage · clean strict TypeScript 6
 runs on Node, Bun, Deno, Cloudflare, Vercel
 ~12.3M static-route ops/sec · ~1.5M dynamic-route ops/sec on M-class CPU
 ```
@@ -61,9 +61,12 @@ For a new DaloyJS project, the recommended path is the official scaffolder:
 pnpm create daloy@latest my-api
 # or
 npm  create daloy@latest my-api
+
+# add GitHub Actions + governance files for a company repo
+pnpm create daloy@latest my-api --with-ci --code-owner @acme/security
 ```
 
-`create-daloy` gives you a working project structure, runtime template selection, docs routes, OpenAPI wiring, and production-oriented defaults without copying code out of the README.
+`create-daloy` gives you a working project structure, runtime template selection, docs routes, OpenAPI wiring, production-oriented defaults, and an optional hardened GitHub security bundle without copying code out of the README.
 
 See [Scaffold a project](https://daloyjs.dev/docs/scaffolder) for templates and flags.
 
@@ -178,7 +181,7 @@ import { swaggerUiHtml, htmlResponse } from "@daloyjs/core/docs";
 ```
 
 Mount at `/docs` and the UI is always contract-accurate — never stale.
-`create-daloy@0.1.20` mounts Swagger UI at `/docs` and the live spec at `/openapi.json` by default.
+`create-daloy@0.2.0` mounts Swagger UI at `/docs` and the live spec at `/openapi.json` by default.
 
 ---
 
@@ -262,11 +265,17 @@ await app.ready();
 ## Multi-runtime
 
 ```ts
-import { serve } from "@daloyjs/core/node";          // Node
-import { serve } from "@daloyjs/core/bun";           // Bun
-import { serve } from "@daloyjs/core/deno";          // Deno
+import { serve } from "@daloyjs/core/node";              // Node (Heroku, Railway, Render, Fly.io, any PaaS)
+import { serve } from "@daloyjs/core/bun";               // Bun
+import { serve } from "@daloyjs/core/deno";              // Deno
 import { toFetchHandler } from "@daloyjs/core/cloudflare"; // Cloudflare Workers
-import { toEdgeHandler }  from "@daloyjs/core/vercel";     // Vercel Edge / Next.js
+import {
+  toFetchHandler as toVercelFetchHandler,
+  toRouteHandlers,
+  toWebHandler,
+} from "@daloyjs/core/vercel"; // Vercel Node / Edge / Next.js / Netlify Edge
+import { installFastlyListener } from "@daloyjs/core/fastly";    // Fastly Compute
+import { toLambdaHandler }      from "@daloyjs/core/lambda";     // AWS Lambda / Netlify Functions / Lambda Function URLs
 ```
 
 The core only ever sees `Request → Response`. Adapters live at the edge.
@@ -292,14 +301,16 @@ DaloyJS is in **public preview** (`0.x`). The public API may still change betwee
 What works today, at a glance:
 
 - Contract-first routing, Standard Schema validation (Zod 4 / Valibot / ArkType / TypeBox), and OpenAPI 3.1 from a single source of truth.
-- Adapters for Node, Bun, Deno, Cloudflare Workers, and Vercel Edge.
+- Adapters for Node (Heroku/Railway/Render/Fly.io), Bun, Deno, Cloudflare Workers, Vercel Node / Edge / Next.js / Netlify Edge, Fastly Compute, and AWS Lambda / Netlify Functions / Lambda Function URLs.
 - Built-in security primitives (body limits, prototype-pollution-safe JSON, path-traversal guard, request timeouts, header injection guards) plus first-party middleware (`secureHeaders`, `cors`, `rateLimit`, `requestId`, `bearerAuth`, `csrf`, `session`, `timing` / `timingSafeEqual`).
 - Streaming helpers (SSE + NDJSON), multipart ergonomics, OpenTelemetry-compatible tracing, signed-cookie sessions with pluggable stores, and a Redis-backed rate-limit store at `@daloyjs/core/rate-limit-redis`.
 - In-process test client (`app.request()`), contract-test runner, in-process typed client, and Hey API codegen via `pnpm gen`.
-- `pnpm create daloy` scaffolder with Node, Bun, Deno, Cloudflare Worker, and Vercel Edge templates.
+- `pnpm create daloy` scaffolder with Node, Bun, Deno, Cloudflare Worker, and Vercel Edge templates, plus optional `--with-ci` GitHub Actions / Dependabot / CODEOWNERS / SECURITY.md hardening.
 - Plugin encapsulation, decorators, structured logging, request-id propagation, lifecycle events (`onPluginInstalled`, `onShutdown`, `onClose`), and graceful shutdown.
+- Integration guides for transactional email providers — AWS SES, SendGrid, Resend, Postmark, Mailgun, and Mailtrap — with a common `EmailSender` plugin pattern and runtime-compatibility matrix.
+- Authentication & authorization guides for AWS Cognito, Microsoft Entra ID (MSAL), Auth0, Okta, and Clerk — with a common bearer-auth plugin, scope/role enforcement, and runtime-compatibility matrix.
 
-Roadmap, version-by-version plan, and shipped/in-progress checklists live in [ROADMAP.md](./ROADMAP.md). Release history and rationale lives in [PROJECT_HISTORY.md](./PROJECT_HISTORY.md).
+Roadmap, version-by-version plan, and shipped/in-progress checklists live in [ROADMAP.md](./ROADMAP.md).
 
 ## License
 

package/dist/adapters/bun.d.ts

@@ -1,16 +1,38 @@
 /**
  * Bun adapter — `Bun.serve` already speaks web-standard fetch,
- * so this is the smallest possible wrapper.
+ * so this is the smallest possible wrapper. The adapter passes through the
+ * commonly-needed modern `Bun.serve` options (`idleTimeout`, `tls`,
+ * `development`, `unix`) and exposes the server's `url` for ergonomic logging.
  */
 import type { App } from "../app.js";
+export interface BunTLSOptions {
+    /** PEM certificate. */
+    cert: string;
+    /** PEM private key. */
+    key: string;
+    /** Optional passphrase for the key. */
+    passphrase?: string;
+    /** Optional CA bundle. */
+    ca?: string;
+}
 export interface BunServeOptions {
     port?: number;
     hostname?: string;
     /** Maximum request body bytes (Bun-level cap). Default: 16 MiB. */
     maxRequestBodySize?: number;
+    /** Seconds before an idle connection is closed. Default: Bun default (10). */
+    idleTimeout?: number;
+    /** When true, Bun enables development-mode error pages and verbose output. */
+    development?: boolean;
+    /** Optional unix socket path; when set, TCP `port`/`hostname` are not passed to Bun. */
+    unix?: string;
+    /** When supplied, Bun.serve listens on HTTPS. */
+    tls?: BunTLSOptions;
 }
-export declare function serve(app: App, opts?: BunServeOptions): {
-    stop: () => Promise<void>;
+export interface BunServerHandle {
     port: number;
-};
+    url: URL | undefined;
+    stop: () => Promise<void>;
+}
+export declare function serve(app: App, opts?: BunServeOptions): BunServerHandle;
 //# sourceMappingURL=bun.d.ts.map

package/dist/adapters/bun.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bun.d.ts","sourceRoot":"","sources":["../../src/adapters/bun.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,GAAE,eAAoB,GAAG;IAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CA0BvG"}
+{"version":3,"file":"bun.d.ts","sourceRoot":"","sources":["../../src/adapters/bun.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wFAAwF;IACxF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC;IACrB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,GAAE,eAAoB,GAAG,eAAe,CAoC3E"}

package/dist/adapters/bun.js

@@ -2,9 +2,7 @@ export function serve(app, opts = {}) {
     const Bun = globalThis.Bun;
     if (!Bun?.serve)
         throw new Error("Bun runtime not detected");
-    const server = Bun.serve({
-        port: opts.port ?? 3000,
-        hostname: opts.hostname ?? "0.0.0.0",
+    const cfg = {
         maxRequestBodySize: opts.maxRequestBodySize ?? 16 * 1024 * 1024,
         fetch: (req) => app.fetch(req),
         error: (err) => new Response(JSON.stringify({
@@ -13,9 +11,23 @@ export function serve(app, opts = {}) {
             status: 500,
             detail: err.message,
         }), { status: 500, headers: { "content-type": "application/problem+json" } }),
-    });
+    };
+    if (opts.unix === undefined) {
+        cfg.port = opts.port ?? 3000;
+        cfg.hostname = opts.hostname ?? "0.0.0.0";
+    }
+    if (opts.idleTimeout !== undefined)
+        cfg.idleTimeout = opts.idleTimeout;
+    if (opts.development !== undefined)
+        cfg.development = opts.development;
+    if (opts.unix !== undefined)
+        cfg.unix = opts.unix;
+    if (opts.tls)
+        cfg.tls = opts.tls;
+    const server = Bun.serve(cfg);
     return {
         port: server.port,
+        url: server.url,
         stop: async () => {
             await app.shutdown();
             server.stop(true);

package/dist/adapters/bun.js.map

@@ -1 +1 @@
-{"version":3,"file":"bun.js","sourceRoot":"","sources":["../../src/adapters/bun.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,KAAK,CAAC,GAAQ,EAAE,OAAwB,EAAE;IACxD,MAAM,GAAG,GAAI,UAAkB,CAAC,GAAG,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;QACpC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;QAC/D,KAAK,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;QACvC,KAAK,EAAE,CAAC,GAAU,EAAE,EAAE,CACpB,IAAI,QAAQ,CACV,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,qCAAqC;YAC3C,KAAK,EAAE,uBAAuB;YAC9B,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,GAAG,CAAC,OAAO;SACpB,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAAE,CACzE;KACJ,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"bun.js","sourceRoot":"","sources":["../../src/adapters/bun.ts"],"names":[],"mappings":"AAwCA,MAAM,UAAU,KAAK,CAAC,GAAQ,EAAE,OAAwB,EAAE;IACxD,MAAM,GAAG,GAAI,UAAmI,CAAC,GAAG,CAAC;IACrJ,IAAI,CAAC,GAAG,EAAE,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAE7D,MAAM,GAAG,GAA4B;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;QAC/D,KAAK,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;QACvC,KAAK,EAAE,CAAC,GAAU,EAAE,EAAE,CACpB,IAAI,QAAQ,CACV,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,qCAAqC;YAC3C,KAAK,EAAE,uBAAuB;YAC9B,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,GAAG,CAAC,OAAO;SACpB,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAAE,CACzE;KACJ,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAC7B,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACvE,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACvE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAClD,IAAI,IAAI,CAAC,GAAG;QAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAEjC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/cloudflare.d.ts

@@ -1,11 +1,28 @@
 /**
  * Cloudflare Workers / generic fetch handler adapter.
  *
- * Usage:
+ * Cloudflare Workers expect the module's default export to expose a `fetch`
+ * property whose value is the `(request, env, ctx) => Response` function.
+ * `toFetchHandler` returns that exact shape, so the recommended usage is:
+ *
+ *   import { toFetchHandler } from "@daloyjs/core/cloudflare";
+ *   import { app } from "./server.js";
  *   export default toFetchHandler(app);
+ *
+ * Do NOT wrap the result again (e.g. `export default { fetch: toFetchHandler(app) }`),
+ * that nests the object and breaks the Workers runtime.
+ *
+ * The generic accepts the Worker's `Env` type when you want stronger typing
+ * against bindings, e.g. `toFetchHandler<MyEnv>(app)`.
  */
 import type { App } from "../app.js";
-export declare function toFetchHandler(app: App): {
-    fetch: (req: Request, env?: unknown, ctx?: unknown) => Promise<Response>;
-};
+export interface ExportedFetchHandler<Env = unknown> {
+    fetch: (request: Request, env?: Env, ctx?: ExecutionContextLike) => Promise<Response>;
+}
+interface ExecutionContextLike {
+    waitUntil?: (promise: Promise<unknown>) => void;
+    passThroughOnException?: () => void;
+}
+export declare function toFetchHandler<Env = unknown>(app: App): ExportedFetchHandler<Env>;
+export {};
 //# sourceMappingURL=cloudflare.d.ts.map

package/dist/adapters/cloudflare.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/adapters/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG;IAAE,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAAE,CAIrH"}
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/adapters/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,oBAAoB,CAAC,GAAG,GAAG,OAAO;IACjD,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,oBAAoB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvF;AAED,UAAU,oBAAoB;IAC5B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAChD,sBAAsB,CAAC,EAAE,MAAM,IAAI,CAAC;CACrC;AAED,wBAAgB,cAAc,CAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAIjF"}

package/dist/adapters/cloudflare.js.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../src/adapters/cloudflare.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;KAC/B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../src/adapters/cloudflare.ts"],"names":[],"mappings":"AA4BA,MAAM,UAAU,cAAc,CAAgB,GAAQ;IACpD,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;KAC/B,CAAC;AACJ,CAAC"}

package/dist/adapters/deno.d.ts

@@ -1,12 +1,35 @@
 /**
  * Deno adapter — `Deno.serve` is web-standard fetch.
+ *
+ * Supports the modern `Deno.serve(options, handler)` signature: HTTPS via
+ * `cert`/`key`, an `onListen` callback, an `onError` hook, and signal-based
+ * graceful shutdown (also wired to SIGTERM/SIGINT when `handleSignals` is
+ * left at the default).
  */
 import type { App } from "../app.js";
 export interface DenoServeOptions {
     port?: number;
     hostname?: string;
+    /** Optional external signal that triggers graceful shutdown. */
+    signal?: AbortSignal;
+    /** Optional TLS certificate (PEM). When supplied together with `key`, serves HTTPS. */
+    cert?: string;
+    /** Optional TLS private key (PEM). Pairs with `cert`. */
+    key?: string;
+    /** Invoked once the server is listening. */
+    onListen?: (info: {
+        hostname: string;
+        port: number;
+    }) => void;
+    /** Invoked when the fetch handler itself throws. Must return a fallback Response. */
+    onError?: (err: unknown) => Response | Promise<Response>;
+    /** Listen for SIGTERM/SIGINT and shut down. Default: true. */
+    handleSignals?: boolean;
+    /** Drain timeout for graceful shutdown. Default: 10000. */
+    shutdownTimeoutMs?: number;
 }
-export declare function serve(app: App, opts?: DenoServeOptions): {
+export interface DenoServerHandle {
     shutdown: () => Promise<void>;
-};
+}
+export declare function serve(app: App, opts?: DenoServeOptions): DenoServerHandle;
 //# sourceMappingURL=deno.d.ts.map

package/dist/adapters/deno.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deno.d.ts","sourceRoot":"","sources":["../../src/adapters/deno.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,GAAE,gBAAqB,GAAG;IAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAa9F"}
+{"version":3,"file":"deno.d.ts","sourceRoot":"","sources":["../../src/adapters/deno.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,uFAAuF;IACvF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC9D,qFAAqF;IACrF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzD,8DAA8D;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,GAAE,gBAAqB,GAAG,gBAAgB,CAoD7E"}

package/dist/adapters/deno.js

@@ -1,13 +1,45 @@
 export function serve(app, opts = {}) {
     const D = globalThis.Deno;
-    if (!D?.serve)
+    const denoServe = D?.serve;
+    if (!denoServe)
         throw new Error("Deno runtime not detected");
-    const server = D.serve({ port: opts.port ?? 3000, hostname: opts.hostname ?? "0.0.0.0" }, (req) => app.fetch(req));
-    return {
-        shutdown: async () => {
-            await app.shutdown();
-            await server.shutdown?.();
-        },
+    const controller = new AbortController();
+    const init = {
+        port: opts.port ?? 3000,
+        hostname: opts.hostname ?? "0.0.0.0",
+        signal: controller.signal,
     };
+    if (opts.cert && opts.key) {
+        init.cert = opts.cert;
+        init.key = opts.key;
+    }
+    if (opts.onListen)
+        init.onListen = opts.onListen;
+    if (opts.onError)
+        init.onError = opts.onError;
+    const server = denoServe(init, (req) => app.fetch(req));
+    const onSignal = () => {
+        void shutdown();
+    };
+    if (opts.handleSignals !== false && typeof D?.addSignalListener === "function") {
+        D.addSignalListener("SIGTERM", onSignal);
+        D.addSignalListener("SIGINT", onSignal);
+    }
+    opts.signal?.addEventListener("abort", onSignal, { once: true });
+    let stopped = false;
+    const shutdown = async () => {
+        if (stopped)
+            return;
+        stopped = true;
+        controller.abort();
+        opts.signal?.removeEventListener("abort", onSignal);
+        if (opts.handleSignals !== false && typeof D?.removeSignalListener === "function") {
+            D.removeSignalListener("SIGTERM", onSignal);
+            D.removeSignalListener("SIGINT", onSignal);
+        }
+        await app.shutdown(opts.shutdownTimeoutMs ?? 10_000);
+        await server.shutdown?.();
+    };
+    return { shutdown };
 }
 //# sourceMappingURL=deno.js.map

package/dist/adapters/deno.js.map

@@ -1 +1 @@
-{"version":3,"file":"deno.js","sourceRoot":"","sources":["../../src/adapters/deno.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,KAAK,CAAC,GAAQ,EAAE,OAAyB,EAAE;IACzD,MAAM,CAAC,GAAI,UAAkB,CAAC,IAAI,CAAC;IACnC,IAAI,CAAC,CAAC,EAAE,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CACpB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,EACjE,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CACjC,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"deno.js","sourceRoot":"","sources":["../../src/adapters/deno.ts"],"names":[],"mappings":"AAiCA,MAAM,UAAU,KAAK,CAAC,GAAQ,EAAE,OAAyB,EAAE;IACzD,MAAM,CAAC,GAAI,UAMT,CAAC,IAAI,CAAC;IACR,MAAM,SAAS,GAAG,CAAC,EAAE,KAER,CAAC;IACd,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAE7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;QACpC,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IACjD,IAAI,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAE9C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,KAAK,QAAQ,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK,IAAI,OAAO,CAAC,EAAE,iBAAiB,KAAK,UAAU,EAAE,CAAC;QAC/E,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK,IAAI,OAAO,CAAC,EAAE,oBAAoB,KAAK,UAAU,EAAE,CAAC;YAClF,CAAC,CAAC,oBAAoB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC5C,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC"}

package/dist/adapters/fastly.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Fastly Compute adapter.
+ *
+ * Fastly Compute uses the standard `fetch` event model, so the adapter is a
+ * one-liner wrapper around {@link App.fetch}. Two usage styles are supported:
+ *
+ *   // 1. Event listener style (Fastly Compute @ Edge JS default):
+ *   import { installFastlyListener } from "@daloyjs/core/fastly";
+ *   installFastlyListener(app);
+ *
+ *   // 2. Plain function style (composable with other handlers):
+ *   import { toFastlyHandler } from "@daloyjs/core/fastly";
+ *   const handler = toFastlyHandler(app);
+ *   addEventListener("fetch", (event) => event.respondWith(handler(event.request)));
+ *
+ * Caveats: Fastly Compute does not expose `node:*` modules or full WHATWG
+ * streams; avoid Node-only middleware (Node session store, Redis client,
+ * multipart helpers that rely on `node:stream`).
+ */
+import type { App } from "../app.js";
+export declare function toFastlyHandler(app: App): (req: Request) => Promise<Response>;
+export declare function installFastlyListener(app: App): void;
+//# sourceMappingURL=fastly.d.ts.map

package/dist/adapters/fastly.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fastly.d.ts","sourceRoot":"","sources":["../../src/adapters/fastly.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAE7E;AAOD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAMpD"}

package/dist/adapters/fastly.js

@@ -0,0 +1,11 @@
+export function toFastlyHandler(app) {
+    return (req) => app.fetch(req);
+}
+export function installFastlyListener(app) {
+    const g = globalThis;
+    if (typeof g.addEventListener !== "function") {
+        throw new Error("Fastly Compute runtime not detected: globalThis.addEventListener is missing");
+    }
+    g.addEventListener("fetch", (event) => event.respondWith(app.fetch(event.request)));
+}
+//# sourceMappingURL=fastly.js.map

package/dist/adapters/fastly.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fastly.js","sourceRoot":"","sources":["../../src/adapters/fastly.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,eAAe,CAAC,GAAQ;IACtC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAOD,MAAM,UAAU,qBAAqB,CAAC,GAAQ;IAC5C,MAAM,CAAC,GAAG,UAAwG,CAAC;IACnH,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/adapters/lambda.d.ts

@@ -0,0 +1,67 @@
+import type { App } from "../app.js";
+/**
+ * AWS Lambda / Netlify Functions adapter.
+ *
+ * Supports API Gateway HTTP API (payload format v2.0), Lambda Function URLs,
+ * API Gateway REST API (payload format v1.0), and Netlify Functions.
+ *
+ *   // handler.ts (Netlify Functions / Lambda @ Function URL)
+ *   import { toLambdaHandler } from "@daloyjs/core/lambda";
+ *   import { app } from "./server.js";
+ *   export const handler = toLambdaHandler(app);
+ *
+ * The adapter performs no Node-only I/O, so it is safe in any runtime that
+ * provides the standard `Request`/`Response`/`atob`/`btoa` globals.
+ */
+export interface LambdaEventV1 {
+    version?: "1.0" | string;
+    path?: string;
+    httpMethod?: string;
+    headers?: Record<string, string | undefined>;
+    multiValueHeaders?: Record<string, string[] | undefined>;
+    queryStringParameters?: Record<string, string | undefined> | null;
+    multiValueQueryStringParameters?: Record<string, string[] | undefined> | null;
+    requestContext?: {
+        domainName?: string;
+        path?: string;
+    };
+    body?: string;
+    isBase64Encoded?: boolean;
+}
+export interface LambdaEventV2 {
+    version?: string;
+    rawPath?: string;
+    rawQueryString?: string;
+    headers?: Record<string, string | undefined>;
+    cookies?: string[];
+    requestContext?: {
+        http?: {
+            method?: string;
+            path?: string;
+        };
+        domainName?: string;
+    };
+    body?: string;
+    isBase64Encoded?: boolean;
+}
+export type LambdaEvent = LambdaEventV1 | LambdaEventV2;
+export interface LambdaResponseV1 {
+    statusCode: number;
+    headers: Record<string, string>;
+    multiValueHeaders?: Record<string, string[]>;
+    cookies?: never;
+    body: string;
+    isBase64Encoded: boolean;
+}
+export interface LambdaResponseV2 {
+    statusCode: number;
+    headers: Record<string, string>;
+    cookies?: string[];
+    multiValueHeaders?: never;
+    body: string;
+    isBase64Encoded: boolean;
+}
+export type LambdaResponse = LambdaResponseV1 | LambdaResponseV2;
+export type LambdaHandler = (event: LambdaEvent) => Promise<LambdaResponse>;
+export declare function toLambdaHandler(app: App): LambdaHandler;
+//# sourceMappingURL=lambda.d.ts.map

package/dist/adapters/lambda.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.d.ts","sourceRoot":"","sources":["../../src/adapters/lambda.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACzD,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;IAClE,+BAA+B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;IAC9E,cAAc,CAAC,EAAE;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE;QACf,IAAI,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,aAAa,CAAC;AAExD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,CAAC,EAAE,KAAK,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;AAI5E,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,aAAa,CAMvD"}

package/dist/adapters/lambda.js

@@ -0,0 +1,117 @@
+const TEXT_TYPE_RE = /^(text\/|application\/(json|xml|javascript|x-www-form-urlencoded|.*\+json|.*\+xml))/i;
+export function toLambdaHandler(app) {
+    return async (event) => {
+        const request = eventToRequest(event);
+        const response = await app.fetch(request);
+        return responseToLambda(response, isV2Event(event));
+    };
+}
+function eventToRequest(event) {
+    const headers = new Headers();
+    for (const [k, v] of Object.entries(event.headers ?? {})) {
+        if (v === undefined)
+            continue;
+        headers.set(k, v);
+    }
+    if ("multiValueHeaders" in event) {
+        for (const [k, values] of Object.entries(event.multiValueHeaders ?? {})) {
+            if (!values?.length)
+                continue;
+            headers.set(k, k.toLowerCase() === "cookie" ? values.join("; ") : values.join(", "));
+        }
+    }
+    if ("cookies" in event && event.cookies?.length)
+        headers.set("cookie", event.cookies.join("; "));
+    const method = isV2Event(event) ? event.requestContext?.http?.method ?? "GET" : event.httpMethod ?? "GET";
+    const rawPath = isV2Event(event)
+        ? event.rawPath ?? event.requestContext?.http?.path ?? "/"
+        : event.path ?? event.requestContext?.path ?? "/";
+    const host = headers.get("host") ?? event.requestContext?.domainName ?? "localhost";
+    const proto = headers.get("x-forwarded-proto") ?? "https";
+    const rawQueryString = isV2Event(event) ? event.rawQueryString ?? "" : queryStringForV1(event);
+    const qs = rawQueryString ? `?${rawQueryString}` : "";
+    const path = rawPath.startsWith("/") ? rawPath : `/${rawPath}`;
+    const url = `${proto}://${host}${path}${qs}`;
+    const init = { method, headers };
+    if (method !== "GET" && method !== "HEAD" && event.body != null) {
+        init.body = event.isBase64Encoded
+            ? base64ToBytes(event.body)
+            : event.body;
+    }
+    return new Request(url, init);
+}
+async function responseToLambda(res, useV2Response) {
+    const headers = {};
+    const getSetCookie = res.headers.getSetCookie;
+    const cookies = typeof getSetCookie === "function"
+        ? getSetCookie.call(res.headers)
+        : cookieFallback(res.headers);
+    res.headers.forEach((value, key) => {
+        if (key.toLowerCase() === "set-cookie")
+            return;
+        headers[key] = value;
+    });
+    const contentType = res.headers.get("content-type") ?? "";
+    const isText = TEXT_TYPE_RE.test(contentType);
+    let body = "";
+    let isBase64Encoded = false;
+    if (res.body) {
+        const buf = new Uint8Array(await res.arrayBuffer());
+        if (buf.length > 0) {
+            if (isText) {
+                body = new TextDecoder().decode(buf);
+            }
+            else {
+                body = bytesToBase64(buf);
+                isBase64Encoded = true;
+            }
+        }
+    }
+    const out = {
+        statusCode: res.status,
+        headers,
+        body,
+        isBase64Encoded,
+    };
+    if (!cookies.length)
+        return out;
+    if (useV2Response)
+        return { ...out, cookies };
+    return { ...out, multiValueHeaders: { "set-cookie": cookies } };
+}
+function isV2Event(event) {
+    const requestContext = event.requestContext;
+    return event.version === "2.0" || "rawPath" in event || "rawQueryString" in event || !!requestContext?.http;
+}
+function queryStringForV1(event) {
+    const values = new URLSearchParams();
+    for (const [key, list] of Object.entries(event.multiValueQueryStringParameters ?? {})) {
+        for (const value of list ?? [])
+            values.append(key, value);
+    }
+    if (values.size > 0)
+        return values.toString();
+    for (const [key, value] of Object.entries(event.queryStringParameters ?? {})) {
+        if (value !== undefined)
+            values.append(key, value);
+    }
+    return values.toString();
+}
+function cookieFallback(headers) {
+    const cookie = headers.get("set-cookie");
+    return cookie ? [cookie] : [];
+}
+function base64ToBytes(b64) {
+    const binary = atob(b64);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+function bytesToBase64(bytes) {
+    let binary = "";
+    for (let i = 0; i < bytes.length; i++)
+        binary += String.fromCharCode(bytes[i]);
+    return btoa(binary);
+}
+//# sourceMappingURL=lambda.js.map

package/dist/adapters/lambda.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.js","sourceRoot":"","sources":["../../src/adapters/lambda.ts"],"names":[],"mappings":"AAsEA,MAAM,YAAY,GAAG,sFAAsF,CAAC;AAE5G,MAAM,UAAU,eAAe,CAAC,GAAQ;IACtC,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAkB;IACxC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,mBAAmB,IAAI,KAAK,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,MAAM,EAAE,MAAM;gBAAE,SAAS;YAC9B,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,IAAI,SAAS,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjG,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC;IAC1G,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC;QAC9B,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI,GAAG;QAC1D,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,IAAI,GAAG,CAAC;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE,UAAU,IAAI,WAAW,CAAC;IACpF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC;IAC1D,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;IAC/D,MAAM,GAAG,GAAG,GAAG,KAAK,MAAM,IAAI,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC;IAE7C,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC9C,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,eAAe;YAC/B,CAAC,CAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAc;YACzC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAa,EAAE,aAAsB;IACnE,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAI,GAAG,CAAC,OAAuD,CAAC,YAAY,CAAC;IAC/F,MAAM,OAAO,GAAa,OAAO,YAAY,KAAK,UAAU;QAC1D,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,YAAY;YAAE,OAAO;QAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE9C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC1B,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG;QACV,UAAU,EAAE,GAAG,CAAC,MAAM;QACtB,OAAO;QACP,IAAI;QACJ,eAAe;KAChB,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC;IAChC,IAAI,aAAa;QAAE,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC;IAC9C,OAAO,EAAE,GAAG,GAAG,EAAE,iBAAiB,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,KAAkB;IACnC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAgD,CAAC;IAC9E,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,SAAS,IAAI,KAAK,IAAI,gBAAgB,IAAI,KAAK,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC;AAC9G,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,EAAE,CAAC;QACtF,KAAK,MAAM,KAAK,IAAI,IAAI,IAAI,EAAE;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7E,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC"}

package/dist/adapters/node.d.ts

@@ -15,6 +15,13 @@ export interface NodeServerOptions {
     handleSignals?: boolean;
     /** Maximum HTTP header size bytes (DoS protection). Default: 16 KiB. */
     maxHeaderBytes?: number;
+    /**
+     * When true, honor `x-forwarded-proto` and `x-forwarded-host` headers when
+     * constructing the request URL. Enable this only when running behind a
+     * trusted reverse proxy (e.g. a TLS-terminating load balancer); otherwise
+     * clients can spoof the scheme/host. Default: false.
+     */
+    trustProxy?: boolean;
 }
 export interface NodeServerHandle {
     server: Server;

package/dist/adapters/node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/adapters/node.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA2D,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAEjG,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,GAAE,iBAAsB,GAAG,gBAAgB,CAmD9E"}
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/adapters/node.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA2D,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAEjG,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,GAAE,iBAAsB,GAAG,gBAAgB,CAoD9E"}

package/dist/adapters/node.js

@@ -5,9 +5,10 @@
 import { createServer } from "node:http";
 import { Readable } from "node:stream";
 export function serve(app, opts = {}) {
+    const trustProxy = opts.trustProxy === true;
     const server = createServer({ maxHeaderSize: opts.maxHeaderBytes ?? 16 * 1024 }, async (req, res) => {
         try {
-            const request = await toWebRequest(req);
+            const request = await toWebRequest(req, trustProxy);
             const response = await app.fetch(request);
             await sendWebResponse(response, res);
         }
@@ -50,9 +51,12 @@ export function serve(app, opts = {}) {
     }
     return { server, port, close };
 }
-async function toWebRequest(req) {
-    const host = req.headers.host ?? "localhost";
-    const url = `http://${host}${req.url ?? "/"}`;
+async function toWebRequest(req, trustProxy) {
+    const forwardedHost = trustProxy ? firstHeader(req.headers["x-forwarded-host"]) : undefined;
+    const host = forwardedHost ?? req.headers.host ?? "localhost";
+    const forwardedProto = trustProxy ? firstHeader(req.headers["x-forwarded-proto"]) : undefined;
+    const proto = forwardedProto ?? (req.socket.encrypted ? "https" : "http");
+    const url = `${proto}://${host}${req.url ?? "/"}`;
     const headers = new Headers();
     for (const [k, v] of Object.entries(req.headers)) {
         if (v === undefined)
@@ -70,6 +74,15 @@ async function toWebRequest(req) {
     }
     return new Request(url, init);
 }
+function firstHeader(v) {
+    if (v === undefined)
+        return undefined;
+    const raw = Array.isArray(v) ? v[0] : v;
+    if (raw === undefined)
+        return undefined;
+    const comma = raw.indexOf(",");
+    return (comma === -1 ? raw : raw.slice(0, comma)).trim() || undefined;
+}
 async function sendWebResponse(res, out) {
     out.statusCode = res.status;
     res.headers.forEach((v, k) => out.setHeader(k, v));