@danceroutine/tango-core 1.11.15 → 1.12.1

package/dist/errors-DpI5Dxmr.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors-DpI5Dxmr.js","names":[],"sources":["../src/errors/factories/HttpErrorFactory.ts","../src/errors/factories/index.ts","../src/errors/ConflictError.ts","../src/errors/ValidationError.ts","../src/errors/MultipleObjectsReturned.ts","../src/errors/NotFoundError.ts","../src/errors/PermissionDenied.ts","../src/errors/AuthenticationError.ts","../src/errors/index.ts"],"sourcesContent":["import { TangoError } from '../TangoError';\nimport type { HttpError } from '../HttpError';\nimport { isError, isObject } from '../../runtime/index';\n\nexport interface HttpErrorFactoryConfig {\n    /**\n     * When true, raw error messages are included in HTTP responses.\n     * When false, generic messages are returned for non-TangoError exceptions.\n     * Defaults to true (dev-friendly). Set to false in production.\n     */\n    exposeErrors?: boolean;\n}\n\ntype ZodLikeIssue = {\n    path?: unknown[];\n    message?: unknown;\n};\n\ntype ZodLikeError = Error & {\n    issues: ZodLikeIssue[];\n};\n\n/**\n * Converts errors into structured HTTP error responses.\n * Supports TangoError subclasses out of the box, and custom error handlers\n * can be registered for third-party or application-specific error types.\n *\n * @example\n * ```typescript\n * // Development (default) — exposes real error messages\n * const devFactory = new HttpErrorFactory();\n *\n * // Production — hides internal error details\n * const prodFactory = new HttpErrorFactory({ exposeErrors: false });\n *\n * // Register a custom handler for a third-party error\n * prodFactory.registerHandler(ZodError, (err) => ({\n *   status: 400,\n *   body: { error: 'Validation failed', details: err.flatten().fieldErrors },\n * }));\n *\n * // Quick one-shot conversion with dev defaults\n * const httpError = HttpErrorFactory.toHttpError(new NotFoundError('missing'));\n * ```\n */\nexport class HttpErrorFactory {\n    static readonly BRAND = 'tango.error_factory.http' as const;\n    readonly __tangoBrand: typeof HttpErrorFactory.BRAND = HttpErrorFactory.BRAND;\n\n    // oxlint-disable-next-line typescript/no-explicit-any\n    private handlers = new Map<new (...args: any[]) => Error, (error: Error) => HttpError>();\n    private exposeErrors: boolean;\n\n    constructor(config: HttpErrorFactoryConfig = {}) {\n        this.exposeErrors = config.exposeErrors ?? true;\n    }\n\n    /**\n     * Narrow an unknown value to `HttpErrorFactory`.\n     */\n    static isHttpErrorFactory(value: unknown): value is HttpErrorFactory {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === HttpErrorFactory.BRAND\n        );\n    }\n\n    /**\n     * Convert an unknown error into an `HttpError` using dev-friendly defaults.\n     * Shorthand for `new HttpErrorFactory().create(error)`.\n     */\n    static toHttpError(error: unknown): HttpError {\n        return new HttpErrorFactory().create(error);\n    }\n\n    private static isZodLikeValidationError(error: unknown): error is ZodLikeError {\n        return (\n            isError(error) &&\n            isObject(error) &&\n            Array.isArray((error as { issues?: unknown }).issues) &&\n            (error as { name?: unknown }).name === 'ZodError'\n        );\n    }\n\n    private static zodLikeErrorDetails(error: ZodLikeError): Record<string, string[]> {\n        const details: Record<string, string[]> = {};\n\n        for (const issue of error.issues) {\n            const key = Array.isArray(issue.path) && issue.path.length > 0 ? String(issue.path.join('.')) : '_schema';\n            const message = typeof issue.message === 'string' ? issue.message : 'Invalid value';\n\n            const existing = details[key];\n            if (existing) {\n                existing.push(message);\n            } else {\n                details[key] = [message];\n            }\n        }\n\n        return details;\n    }\n\n    /**\n     * Register a custom mapper for an application or third-party error type.\n     */\n\n    // oxlint-disable-next-line typescript/no-explicit-any\n    registerHandler<T extends Error>(errorClass: new (...args: any[]) => T, handler: (error: T) => HttpError): this {\n        this.handlers.set(errorClass, handler as (error: Error) => HttpError);\n        return this;\n    }\n\n    /**\n     * Convert an unknown error into the normalized HTTP error shape Tango uses.\n     */\n    create(error: unknown): HttpError {\n        if (TangoError.isTangoError(error)) {\n            return error.toHttpError();\n        }\n\n        if (HttpErrorFactory.isZodLikeValidationError(error)) {\n            return {\n                status: 400,\n                body: {\n                    error: error.message || 'Validation failed',\n                    details: HttpErrorFactory.zodLikeErrorDetails(error),\n                },\n            };\n        }\n\n        for (const [ErrorClass, handler] of this.handlers) {\n            if (this.isErrorClassInstance(error, ErrorClass)) {\n                return handler(error);\n            }\n        }\n\n        if (isError(error)) {\n            return {\n                status: 500,\n                body: {\n                    error: this.exposeErrors ? error.message : 'Internal Server Error',\n                    details: null,\n                },\n            };\n        }\n\n        return {\n            status: 500,\n            body: {\n                error: 'Unknown error occurred',\n                details: null,\n            },\n        };\n    }\n\n    // oxlint-disable-next-line typescript/no-explicit-any\n    private isErrorClassInstance(error: unknown, ErrorClass: new (...args: any[]) => Error): error is Error {\n        if (!isError(error)) {\n            return false;\n        }\n\n        const expectedBrand = (ErrorClass as { BRAND?: unknown }).BRAND;\n        if (\n            typeof expectedBrand === 'string' &&\n            isObject(error) &&\n            (error as { __tangoBrand?: unknown }).__tangoBrand === expectedBrand\n        ) {\n            return true;\n        }\n\n        const constructorName = (error as { constructor?: { name?: unknown } }).constructor?.name;\n        if (typeof constructorName === 'string' && constructorName === ErrorClass.name) {\n            return true;\n        }\n\n        const errorName = (error as { name?: unknown }).name;\n        if (typeof errorName === 'string' && errorName === ErrorClass.name) {\n            return true;\n        }\n\n        return false;\n    }\n}\n","/**\n * Domain boundary barrel: centralizes this subdomain's public contract.\n */\n\nexport { HttpErrorFactory, type HttpErrorFactoryConfig } from './HttpErrorFactory';\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for conflicting resource state (HTTP 409). */\nexport class ConflictError extends TangoError {\n    static readonly BRAND = 'tango.error.conflict' as const;\n    readonly __tangoBrand: typeof ConflictError.BRAND = ConflictError.BRAND;\n    status = 409;\n\n    /** Create a conflict error with optional custom message. */\n    constructor(message: string = 'Resource conflict') {\n        super(message);\n        this.name = 'ConflictError';\n        Object.setPrototypeOf(this, ConflictError.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `ConflictError`.\n     */\n    static isConflictError(value: unknown): value is ConflictError {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === ConflictError.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'conflict';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for request validation failures (HTTP 400). */\nexport class ValidationError extends TangoError {\n    readonly __tangoValidationErrorBrand = 'tango.error.validation' as const;\n    status = 400;\n\n    constructor(\n        message: string,\n        public details?: ErrorDetails\n    ) {\n        super(message);\n        this.name = 'ValidationError';\n        Object.setPrototypeOf(this, ValidationError.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `ValidationError`, including common legacy shapes.\n     */\n    static isValidationError(err: unknown): err is ValidationError {\n        return (\n            (!!err &&\n                typeof err === 'object' &&\n                (err as { __tangoValidationErrorBrand?: string }).__tangoValidationErrorBrand ===\n                    'tango.error.validation') ||\n            (typeof err === 'object' &&\n                err !== null &&\n                'fields' in err &&\n                typeof (err as { fields: unknown }).fields === 'object')\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'ValidationError';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return this.details;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error when a queryset lookup returns more than one row (HTTP 409). */\nexport class MultipleObjectsReturned extends TangoError {\n    static readonly BRAND = 'tango.error.multiple_objects_returned' as const;\n    readonly __tangoBrand: typeof MultipleObjectsReturned.BRAND = MultipleObjectsReturned.BRAND;\n    status = 409;\n\n    constructor(message: string = 'Multiple objects returned') {\n        super(message);\n        this.name = 'MultipleObjectsReturned';\n        Object.setPrototypeOf(this, MultipleObjectsReturned.prototype);\n    }\n\n    static isMultipleObjectsReturned(value: unknown): value is MultipleObjectsReturned {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === MultipleObjectsReturned.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'multiple_objects_returned';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for missing resources (HTTP 404). */\nexport class NotFoundError extends TangoError {\n    static readonly BRAND = 'tango.error.not_found' as const;\n    readonly __tangoBrand: typeof NotFoundError.BRAND = NotFoundError.BRAND;\n    status = 404;\n\n    /** Create a not-found error with optional custom message. */\n    constructor(message: string = 'Resource not found') {\n        super(message);\n        this.name = 'NotFoundError';\n        Object.setPrototypeOf(this, NotFoundError.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `NotFoundError`.\n     */\n    static isNotFoundError(value: unknown): value is NotFoundError {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === NotFoundError.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'not_found';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for authorization failures (HTTP 403). */\nexport class PermissionDenied extends TangoError {\n    static readonly BRAND = 'tango.error.permission_denied' as const;\n    readonly __tangoBrand: typeof PermissionDenied.BRAND = PermissionDenied.BRAND;\n    status = 403;\n\n    /** Create a permission-denied error with optional custom message. */\n    constructor(message: string = 'Permission denied') {\n        super(message);\n        this.name = 'PermissionDenied';\n        Object.setPrototypeOf(this, PermissionDenied.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `PermissionDenied`.\n     */\n    static isPermissionDenied(value: unknown): value is PermissionDenied {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === PermissionDenied.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'permission_denied';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for missing/invalid authentication (HTTP 401). */\nexport class AuthenticationError extends TangoError {\n    static readonly BRAND = 'tango.error.authentication' as const;\n    readonly __tangoBrand: typeof AuthenticationError.BRAND = AuthenticationError.BRAND;\n    status = 401;\n\n    /** Create an authentication error with optional custom message. */\n    constructor(message: string = 'Authentication required') {\n        super(message);\n        this.name = 'AuthenticationError';\n        Object.setPrototypeOf(this, AuthenticationError.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `AuthenticationError`.\n     */\n    static isAuthenticationError(value: unknown): value is AuthenticationError {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === AuthenticationError.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'authentication_error';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","/**\n * Domain boundary barrel: centralizes this subdomain's public contract.\n */\n\nimport type { HttpError } from './HttpError';\nimport * as factories from './factories/index';\nimport { TangoError, type ErrorDetails, type ErrorEnvelope, type ProblemDetails } from './TangoError';\nimport { ConflictError } from './ConflictError';\nimport { ValidationError } from './ValidationError';\nimport { MultipleObjectsReturned } from './MultipleObjectsReturned';\nimport { NotFoundError } from './NotFoundError';\nimport { PermissionDenied } from './PermissionDenied';\nimport { AuthenticationError } from './AuthenticationError';\nimport { HttpErrorFactory, type HttpErrorFactoryConfig } from './factories/HttpErrorFactory';\n\nexport {\n    AuthenticationError,\n    ConflictError,\n    HttpErrorFactory,\n    MultipleObjectsReturned,\n    NotFoundError,\n    PermissionDenied,\n    TangoError,\n    ValidationError,\n    factories,\n};\n\nexport type { ErrorDetails, ErrorEnvelope, HttpError, HttpErrorFactoryConfig, ProblemDetails };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,IAAa,mBAAb,MAAa,iBAAiB;CAC1B,OAAgB,QAAQ;CACxB,eAAuD,iBAAiB;CAGxE,2BAAmB,IAAI,IAAgE;CACvF;CAEA,YAAY,SAAiC,CAAC,GAAG;EAC7C,KAAK,eAAe,OAAO,gBAAgB;CAC/C;;;;CAKA,OAAO,mBAAmB,OAA2C;EACjE,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,iBAAiB;CAEhF;;;;;CAMA,OAAO,YAAY,OAA2B;EAC1C,OAAO,IAAI,iBAAiB,EAAE,OAAO,KAAK;CAC9C;CAEA,OAAe,yBAAyB,OAAuC;EAC3E,OACI,QAAQ,KAAK,KACb,SAAS,KAAK,KACd,MAAM,QAAS,MAA+B,MAAM,KACnD,MAA6B,SAAS;CAE/C;CAEA,OAAe,oBAAoB,OAA+C;EAC9E,MAAM,UAAoC,CAAC;EAE3C,KAAK,MAAM,SAAS,MAAM,QAAQ;GAC9B,MAAM,MAAM,MAAM,QAAQ,MAAM,IAAI,KAAK,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,KAAK,GAAG,CAAC,IAAI;GAChG,MAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;GAEpE,MAAM,WAAW,QAAQ;GACzB,IAAI,UACA,SAAS,KAAK,OAAO;QAErB,QAAQ,OAAO,CAAC,OAAO;EAE/B;EAEA,OAAO;CACX;;;;CAOA,gBAAiC,YAAuC,SAAwC;EAC5G,KAAK,SAAS,IAAI,YAAY,OAAsC;EACpE,OAAO;CACX;;;;CAKA,OAAO,OAA2B;EAC9B,IAAI,WAAW,aAAa,KAAK,GAC7B,OAAO,MAAM,YAAY;EAG7B,IAAI,iBAAiB,yBAAyB,KAAK,GAC/C,OAAO;GACH,QAAQ;GACR,MAAM;IACF,OAAO,MAAM,WAAW;IACxB,SAAS,iBAAiB,oBAAoB,KAAK;GACvD;EACJ;EAGJ,KAAK,MAAM,CAAC,YAAY,YAAY,KAAK,UACrC,IAAI,KAAK,qBAAqB,OAAO,UAAU,GAC3C,OAAO,QAAQ,KAAK;EAI5B,IAAI,QAAQ,KAAK,GACb,OAAO;GACH,QAAQ;GACR,MAAM;IACF,OAAO,KAAK,eAAe,MAAM,UAAU;IAC3C,SAAS;GACb;EACJ;EAGJ,OAAO;GACH,QAAQ;GACR,MAAM;IACF,OAAO;IACP,SAAS;GACb;EACJ;CACJ;CAGA,qBAA6B,OAAgB,YAA2D;EACpG,IAAI,CAAC,QAAQ,KAAK,GACd,OAAO;EAGX,MAAM,gBAAiB,WAAmC;EAC1D,IACI,OAAO,kBAAkB,YACzB,SAAS,KAAK,KACb,MAAqC,iBAAiB,eAEvD,OAAO;EAGX,MAAM,kBAAmB,MAA+C,aAAa;EACrF,IAAI,OAAO,oBAAoB,YAAY,oBAAoB,WAAW,MACtE,OAAO;EAGX,MAAM,YAAa,MAA6B;EAChD,IAAI,OAAO,cAAc,YAAY,cAAc,WAAW,MAC1D,OAAO;EAGX,OAAO;CACX;AACJ;;;;;;;AEpLA,IAAa,gBAAb,MAAa,sBAAsB,WAAW;CAC1C,OAAgB,QAAQ;CACxB,eAAoD,cAAc;CAClE,SAAS;;CAGT,YAAY,UAAkB,qBAAqB;EAC/C,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,cAAc,SAAS;CACvD;;;;CAKA,OAAO,gBAAgB,OAAwC;EAC3D,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,cAAc;CAE7E;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ;;;;AC9BA,IAAa,kBAAb,MAAa,wBAAwB,WAAW;CAMjC;CALX,8BAAuC;CACvC,SAAS;CAET,YACI,SACA,SACF;EACE,MAAM,OAAO;EAFN,KAAA,UAAA;EAGP,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,gBAAgB,SAAS;CACzD;;;;CAKA,OAAO,kBAAkB,KAAsC;EAC3D,OACK,CAAC,CAAC,OACC,OAAO,QAAQ,YACd,IAAiD,gCAC9C,4BACP,OAAO,QAAQ,YACZ,QAAQ,QACR,YAAY,OACZ,OAAQ,IAA4B,WAAW;CAE3D;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C;EAC1C,OAAO,KAAK;CAChB;AACJ;;;;ACpCA,IAAa,0BAAb,MAAa,gCAAgC,WAAW;CACpD,OAAgB,QAAQ;CACxB,eAA8D,wBAAwB;CACtF,SAAS;CAET,YAAY,UAAkB,6BAA6B;EACvD,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,wBAAwB,SAAS;CACjE;CAEA,OAAO,0BAA0B,OAAkD;EAC/E,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,wBAAwB;CAEvF;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ;;;;AC1BA,IAAa,gBAAb,MAAa,sBAAsB,WAAW;CAC1C,OAAgB,QAAQ;CACxB,eAAoD,cAAc;CAClE,SAAS;;CAGT,YAAY,UAAkB,sBAAsB;EAChD,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,cAAc,SAAS;CACvD;;;;CAKA,OAAO,gBAAgB,OAAwC;EAC3D,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,cAAc;CAE7E;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ;;;;AC9BA,IAAa,mBAAb,MAAa,yBAAyB,WAAW;CAC7C,OAAgB,QAAQ;CACxB,eAAuD,iBAAiB;CACxE,SAAS;;CAGT,YAAY,UAAkB,qBAAqB;EAC/C,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,iBAAiB,SAAS;CAC1D;;;;CAKA,OAAO,mBAAmB,OAA2C;EACjE,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,iBAAiB;CAEhF;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ;;;;AC9BA,IAAa,sBAAb,MAAa,4BAA4B,WAAW;CAChD,OAAgB,QAAQ;CACxB,eAA0D,oBAAoB;CAC9E,SAAS;;CAGT,YAAY,UAAkB,2BAA2B;EACrD,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,oBAAoB,SAAS;CAC7D;;;;CAKA,OAAO,sBAAsB,OAA8C;EACvE,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,oBAAoB;CAEnF;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ"}
+{"version":3,"file":"errors-DpI5Dxmr.js","names":[],"sources":["../src/errors/factories/HttpErrorFactory.ts","../src/errors/factories/index.ts","../src/errors/ConflictError.ts","../src/errors/ValidationError.ts","../src/errors/MultipleObjectsReturned.ts","../src/errors/NotFoundError.ts","../src/errors/PermissionDenied.ts","../src/errors/AuthenticationError.ts","../src/errors/index.ts"],"sourcesContent":["import { TangoError } from '../TangoError';\nimport type { HttpError } from '../HttpError';\nimport { isError, isObject } from '../../runtime/index';\n\nexport interface HttpErrorFactoryConfig {\n    /**\n     * When true, raw error messages are included in HTTP responses.\n     * When false, generic messages are returned for non-TangoError exceptions.\n     * Defaults to true (dev-friendly). Set to false in production.\n     */\n    exposeErrors?: boolean;\n}\n\ntype ZodLikeIssue = {\n    path?: unknown[];\n    message?: unknown;\n};\n\ntype ZodLikeError = Error & {\n    issues: ZodLikeIssue[];\n};\n\n/**\n * Converts errors into structured HTTP error responses.\n * Supports TangoError subclasses out of the box, and custom error handlers\n * can be registered for third-party or application-specific error types.\n *\n * @example\n * ```typescript\n * // Development (default) — exposes real error messages\n * const devFactory = new HttpErrorFactory();\n *\n * // Production — hides internal error details\n * const prodFactory = new HttpErrorFactory({ exposeErrors: false });\n *\n * // Register a custom handler for a third-party error\n * prodFactory.registerHandler(ZodError, (err) => ({\n *   status: 400,\n *   body: { error: 'Validation failed', details: err.flatten().fieldErrors },\n * }));\n *\n * // Quick one-shot conversion with dev defaults\n * const httpError = HttpErrorFactory.toHttpError(new NotFoundError('missing'));\n * ```\n */\nexport class HttpErrorFactory {\n    static readonly BRAND = 'tango.error_factory.http' as const;\n    readonly __tangoBrand: typeof HttpErrorFactory.BRAND = HttpErrorFactory.BRAND;\n\n    // oxlint-disable-next-line typescript/no-explicit-any\n    private handlers = new Map<new (...args: any[]) => Error, (error: Error) => HttpError>();\n    private exposeErrors: boolean;\n\n    constructor(config: HttpErrorFactoryConfig = {}) {\n        this.exposeErrors = config.exposeErrors ?? true;\n    }\n\n    /**\n     * Narrow an unknown value to `HttpErrorFactory`.\n     */\n    static isHttpErrorFactory(value: unknown): value is HttpErrorFactory {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === HttpErrorFactory.BRAND\n        );\n    }\n\n    /**\n     * Convert an unknown error into an `HttpError` using dev-friendly defaults.\n     * Shorthand for `new HttpErrorFactory().create(error)`.\n     */\n    static toHttpError(error: unknown): HttpError {\n        return new HttpErrorFactory().create(error);\n    }\n\n    private static isZodLikeValidationError(error: unknown): error is ZodLikeError {\n        return (\n            isError(error) &&\n            isObject(error) &&\n            Array.isArray((error as { issues?: unknown }).issues) &&\n            (error as { name?: unknown }).name === 'ZodError'\n        );\n    }\n\n    private static zodLikeErrorDetails(error: ZodLikeError): Record<string, string[]> {\n        const details: Record<string, string[]> = {};\n\n        for (const issue of error.issues) {\n            const key = Array.isArray(issue.path) && issue.path.length > 0 ? String(issue.path.join('.')) : '_schema';\n            const message = typeof issue.message === 'string' ? issue.message : 'Invalid value';\n\n            const existing = details[key];\n            if (existing) {\n                existing.push(message);\n            } else {\n                details[key] = [message];\n            }\n        }\n\n        return details;\n    }\n\n    /**\n     * Register a custom mapper for an application or third-party error type.\n     */\n\n    // oxlint-disable-next-line typescript/no-explicit-any\n    registerHandler<T extends Error>(errorClass: new (...args: any[]) => T, handler: (error: T) => HttpError): this {\n        this.handlers.set(errorClass, handler as (error: Error) => HttpError);\n        return this;\n    }\n\n    /**\n     * Convert an unknown error into the normalized HTTP error shape Tango uses.\n     */\n    create(error: unknown): HttpError {\n        if (TangoError.isTangoError(error)) {\n            return error.toHttpError();\n        }\n\n        if (HttpErrorFactory.isZodLikeValidationError(error)) {\n            return {\n                status: 400,\n                body: {\n                    error: error.message || 'Validation failed',\n                    details: HttpErrorFactory.zodLikeErrorDetails(error),\n                },\n            };\n        }\n\n        for (const [ErrorClass, handler] of this.handlers) {\n            if (this.isErrorClassInstance(error, ErrorClass)) {\n                return handler(error);\n            }\n        }\n\n        if (isError(error)) {\n            return {\n                status: 500,\n                body: {\n                    error: this.exposeErrors ? error.message : 'Internal Server Error',\n                    details: null,\n                },\n            };\n        }\n\n        return {\n            status: 500,\n            body: {\n                error: 'Unknown error occurred',\n                details: null,\n            },\n        };\n    }\n\n    // oxlint-disable-next-line typescript/no-explicit-any\n    private isErrorClassInstance(error: unknown, ErrorClass: new (...args: any[]) => Error): error is Error {\n        if (!isError(error)) {\n            return false;\n        }\n\n        const expectedBrand = (ErrorClass as { BRAND?: unknown }).BRAND;\n        if (\n            typeof expectedBrand === 'string' &&\n            isObject(error) &&\n            (error as { __tangoBrand?: unknown }).__tangoBrand === expectedBrand\n        ) {\n            return true;\n        }\n\n        const constructorName = (error as { constructor?: { name?: unknown } }).constructor?.name;\n        if (typeof constructorName === 'string' && constructorName === ErrorClass.name) {\n            return true;\n        }\n\n        const errorName = (error as { name?: unknown }).name;\n        if (typeof errorName === 'string' && errorName === ErrorClass.name) {\n            return true;\n        }\n\n        return false;\n    }\n}\n","/**\n * Domain boundary barrel: centralizes this subdomain's public contract.\n */\n\nexport { HttpErrorFactory, type HttpErrorFactoryConfig } from './HttpErrorFactory';\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for conflicting resource state (HTTP 409). */\nexport class ConflictError extends TangoError {\n    static readonly BRAND = 'tango.error.conflict' as const;\n    readonly __tangoBrand: typeof ConflictError.BRAND = ConflictError.BRAND;\n    status = 409;\n\n    /** Create a conflict error with optional custom message. */\n    constructor(message: string = 'Resource conflict') {\n        super(message);\n        this.name = 'ConflictError';\n        Object.setPrototypeOf(this, ConflictError.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `ConflictError`.\n     */\n    static isConflictError(value: unknown): value is ConflictError {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === ConflictError.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'conflict';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for request validation failures (HTTP 400). */\nexport class ValidationError extends TangoError {\n    readonly __tangoValidationErrorBrand = 'tango.error.validation' as const;\n    status = 400;\n\n    constructor(\n        message: string,\n        public details?: ErrorDetails\n    ) {\n        super(message);\n        this.name = 'ValidationError';\n        Object.setPrototypeOf(this, ValidationError.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `ValidationError`, including common legacy shapes.\n     */\n    static isValidationError(err: unknown): err is ValidationError {\n        return (\n            (!!err &&\n                typeof err === 'object' &&\n                (err as { __tangoValidationErrorBrand?: string }).__tangoValidationErrorBrand ===\n                    'tango.error.validation') ||\n            (typeof err === 'object' &&\n                err !== null &&\n                'fields' in err &&\n                typeof (err as { fields: unknown }).fields === 'object')\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'ValidationError';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return this.details;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error when a queryset lookup returns more than one row (HTTP 409). */\nexport class MultipleObjectsReturned extends TangoError {\n    static readonly BRAND = 'tango.error.multiple_objects_returned' as const;\n    readonly __tangoBrand: typeof MultipleObjectsReturned.BRAND = MultipleObjectsReturned.BRAND;\n    status = 409;\n\n    constructor(message: string = 'Multiple objects returned') {\n        super(message);\n        this.name = 'MultipleObjectsReturned';\n        Object.setPrototypeOf(this, MultipleObjectsReturned.prototype);\n    }\n\n    static isMultipleObjectsReturned(value: unknown): value is MultipleObjectsReturned {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === MultipleObjectsReturned.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'multiple_objects_returned';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for missing resources (HTTP 404). */\nexport class NotFoundError extends TangoError {\n    static readonly BRAND = 'tango.error.not_found' as const;\n    readonly __tangoBrand: typeof NotFoundError.BRAND = NotFoundError.BRAND;\n    status = 404;\n\n    /** Create a not-found error with optional custom message. */\n    constructor(message: string = 'Resource not found') {\n        super(message);\n        this.name = 'NotFoundError';\n        Object.setPrototypeOf(this, NotFoundError.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `NotFoundError`.\n     */\n    static isNotFoundError(value: unknown): value is NotFoundError {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === NotFoundError.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'not_found';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for authorization failures (HTTP 403). */\nexport class PermissionDenied extends TangoError {\n    static readonly BRAND = 'tango.error.permission_denied' as const;\n    readonly __tangoBrand: typeof PermissionDenied.BRAND = PermissionDenied.BRAND;\n    status = 403;\n\n    /** Create a permission-denied error with optional custom message. */\n    constructor(message: string = 'Permission denied') {\n        super(message);\n        this.name = 'PermissionDenied';\n        Object.setPrototypeOf(this, PermissionDenied.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `PermissionDenied`.\n     */\n    static isPermissionDenied(value: unknown): value is PermissionDenied {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === PermissionDenied.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'permission_denied';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","import { TangoError, type ErrorDetails } from './TangoError';\n\n/** Error for missing/invalid authentication (HTTP 401). */\nexport class AuthenticationError extends TangoError {\n    static readonly BRAND = 'tango.error.authentication' as const;\n    readonly __tangoBrand: typeof AuthenticationError.BRAND = AuthenticationError.BRAND;\n    status = 401;\n\n    /** Create an authentication error with optional custom message. */\n    constructor(message: string = 'Authentication required') {\n        super(message);\n        this.name = 'AuthenticationError';\n        Object.setPrototypeOf(this, AuthenticationError.prototype);\n    }\n\n    /**\n     * Narrow an unknown value to `AuthenticationError`.\n     */\n    static isAuthenticationError(value: unknown): value is AuthenticationError {\n        return (\n            typeof value === 'object' &&\n            value !== null &&\n            (value as { __tangoBrand?: unknown }).__tangoBrand === AuthenticationError.BRAND\n        );\n    }\n\n    protected override getErrorName(): string {\n        return 'authentication_error';\n    }\n\n    protected override getDetails(): ErrorDetails {\n        return undefined;\n    }\n}\n","/**\n * Domain boundary barrel: centralizes this subdomain's public contract.\n */\n\nimport type { HttpError } from './HttpError';\nimport * as factories from './factories/index';\nimport { TangoError, type ErrorDetails, type ErrorEnvelope, type ProblemDetails } from './TangoError';\nimport { ConflictError } from './ConflictError';\nimport { ValidationError } from './ValidationError';\nimport { MultipleObjectsReturned } from './MultipleObjectsReturned';\nimport { NotFoundError } from './NotFoundError';\nimport { PermissionDenied } from './PermissionDenied';\nimport { AuthenticationError } from './AuthenticationError';\nimport { HttpErrorFactory, type HttpErrorFactoryConfig } from './factories/HttpErrorFactory';\n\nexport {\n    AuthenticationError,\n    ConflictError,\n    HttpErrorFactory,\n    MultipleObjectsReturned,\n    NotFoundError,\n    PermissionDenied,\n    TangoError,\n    ValidationError,\n    factories,\n};\n\nexport type { ErrorDetails, ErrorEnvelope, HttpError, HttpErrorFactoryConfig, ProblemDetails };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,IAAa,mBAAb,MAAa,iBAAiB;CAC1B,OAAgB,QAAQ;CACxB,eAAuD,iBAAiB;CAGxE,2BAAmB,IAAI,IAAgE;CACvF;CAEA,YAAY,SAAiC,CAAC,GAAG;EAC7C,KAAK,eAAe,OAAO,gBAAgB;CAC/C;;;;CAKA,OAAO,mBAAmB,OAA2C;EACjE,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,iBAAiB;CAEhF;;;;;CAMA,OAAO,YAAY,OAA2B;EAC1C,OAAO,IAAI,iBAAiB,CAAC,CAAC,OAAO,KAAK;CAC9C;CAEA,OAAe,yBAAyB,OAAuC;EAC3E,OACI,QAAQ,KAAK,KACb,SAAS,KAAK,KACd,MAAM,QAAS,MAA+B,MAAM,KACnD,MAA6B,SAAS;CAE/C;CAEA,OAAe,oBAAoB,OAA+C;EAC9E,MAAM,UAAoC,CAAC;EAE3C,KAAK,MAAM,SAAS,MAAM,QAAQ;GAC9B,MAAM,MAAM,MAAM,QAAQ,MAAM,IAAI,KAAK,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,KAAK,GAAG,CAAC,IAAI;GAChG,MAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;GAEpE,MAAM,WAAW,QAAQ;GACzB,IAAI,UACA,SAAS,KAAK,OAAO;QAErB,QAAQ,OAAO,CAAC,OAAO;EAE/B;EAEA,OAAO;CACX;;;;CAOA,gBAAiC,YAAuC,SAAwC;EAC5G,KAAK,SAAS,IAAI,YAAY,OAAsC;EACpE,OAAO;CACX;;;;CAKA,OAAO,OAA2B;EAC9B,IAAI,WAAW,aAAa,KAAK,GAC7B,OAAO,MAAM,YAAY;EAG7B,IAAI,iBAAiB,yBAAyB,KAAK,GAC/C,OAAO;GACH,QAAQ;GACR,MAAM;IACF,OAAO,MAAM,WAAW;IACxB,SAAS,iBAAiB,oBAAoB,KAAK;GACvD;EACJ;EAGJ,KAAK,MAAM,CAAC,YAAY,YAAY,KAAK,UACrC,IAAI,KAAK,qBAAqB,OAAO,UAAU,GAC3C,OAAO,QAAQ,KAAK;EAI5B,IAAI,QAAQ,KAAK,GACb,OAAO;GACH,QAAQ;GACR,MAAM;IACF,OAAO,KAAK,eAAe,MAAM,UAAU;IAC3C,SAAS;GACb;EACJ;EAGJ,OAAO;GACH,QAAQ;GACR,MAAM;IACF,OAAO;IACP,SAAS;GACb;EACJ;CACJ;CAGA,qBAA6B,OAAgB,YAA2D;EACpG,IAAI,CAAC,QAAQ,KAAK,GACd,OAAO;EAGX,MAAM,gBAAiB,WAAmC;EAC1D,IACI,OAAO,kBAAkB,YACzB,SAAS,KAAK,KACb,MAAqC,iBAAiB,eAEvD,OAAO;EAGX,MAAM,kBAAmB,MAA+C,aAAa;EACrF,IAAI,OAAO,oBAAoB,YAAY,oBAAoB,WAAW,MACtE,OAAO;EAGX,MAAM,YAAa,MAA6B;EAChD,IAAI,OAAO,cAAc,YAAY,cAAc,WAAW,MAC1D,OAAO;EAGX,OAAO;CACX;AACJ;;;;;;;AEpLA,IAAa,gBAAb,MAAa,sBAAsB,WAAW;CAC1C,OAAgB,QAAQ;CACxB,eAAoD,cAAc;CAClE,SAAS;;CAGT,YAAY,UAAkB,qBAAqB;EAC/C,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,cAAc,SAAS;CACvD;;;;CAKA,OAAO,gBAAgB,OAAwC;EAC3D,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,cAAc;CAE7E;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ;;;;AC9BA,IAAa,kBAAb,MAAa,wBAAwB,WAAW;CAMjC;CALX,8BAAuC;CACvC,SAAS;CAET,YACI,SACA,SACF;EACE,MAAM,OAAO;EAFN,KAAA,UAAA;EAGP,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,gBAAgB,SAAS;CACzD;;;;CAKA,OAAO,kBAAkB,KAAsC;EAC3D,OACK,CAAC,CAAC,OACC,OAAO,QAAQ,YACd,IAAiD,gCAC9C,4BACP,OAAO,QAAQ,YACZ,QAAQ,QACR,YAAY,OACZ,OAAQ,IAA4B,WAAW;CAE3D;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C;EAC1C,OAAO,KAAK;CAChB;AACJ;;;;ACpCA,IAAa,0BAAb,MAAa,gCAAgC,WAAW;CACpD,OAAgB,QAAQ;CACxB,eAA8D,wBAAwB;CACtF,SAAS;CAET,YAAY,UAAkB,6BAA6B;EACvD,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,wBAAwB,SAAS;CACjE;CAEA,OAAO,0BAA0B,OAAkD;EAC/E,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,wBAAwB;CAEvF;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ;;;;AC1BA,IAAa,gBAAb,MAAa,sBAAsB,WAAW;CAC1C,OAAgB,QAAQ;CACxB,eAAoD,cAAc;CAClE,SAAS;;CAGT,YAAY,UAAkB,sBAAsB;EAChD,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,cAAc,SAAS;CACvD;;;;CAKA,OAAO,gBAAgB,OAAwC;EAC3D,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,cAAc;CAE7E;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ;;;;AC9BA,IAAa,mBAAb,MAAa,yBAAyB,WAAW;CAC7C,OAAgB,QAAQ;CACxB,eAAuD,iBAAiB;CACxE,SAAS;;CAGT,YAAY,UAAkB,qBAAqB;EAC/C,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,iBAAiB,SAAS;CAC1D;;;;CAKA,OAAO,mBAAmB,OAA2C;EACjE,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,iBAAiB;CAEhF;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ;;;;AC9BA,IAAa,sBAAb,MAAa,4BAA4B,WAAW;CAChD,OAAgB,QAAQ;CACxB,eAA0D,oBAAoB;CAC9E,SAAS;;CAGT,YAAY,UAAkB,2BAA2B;EACrD,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,OAAO,eAAe,MAAM,oBAAoB,SAAS;CAC7D;;;;CAKA,OAAO,sBAAsB,OAA8C;EACvE,OACI,OAAO,UAAU,YACjB,UAAU,QACT,MAAqC,iBAAiB,oBAAoB;CAEnF;CAEA,eAA0C;EACtC,OAAO;CACX;CAEA,aAA8C,CAE9C;AACJ"}

package/dist/http/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TangoHeaders, i as TangoRequest, n as TangoResponse, o as JsonValue, r as TangoQueryParams, s as TangoBody } from "../index-Ds43ITu5.js";
+import { a as TangoHeaders, i as TangoRequest, n as TangoResponse, o as JsonValue, r as TangoQueryParams, s as TangoBody } from "../index-Be9hXvS0.js";
 export { type JsonValue, TangoBody, TangoHeaders, TangoQueryParams, TangoRequest, TangoResponse };

package/dist/http/index.js

@@ -1,2 +1,2 @@
-import { a as TangoHeaders, i as TangoQueryParams, n as TangoResponse, o as TangoBody, r as TangoRequest } from "../http-BJPRtBGV.js";
+import { a as TangoHeaders, i as TangoQueryParams, n as TangoResponse, o as TangoBody, r as TangoRequest } from "../http-Bf_uQBDm.js";
 export { TangoBody, TangoHeaders, TangoQueryParams, TangoRequest, TangoResponse };

package/dist/{http-BJPRtBGV.js → http-Bf_uQBDm.js}

@@ -320,6 +320,11 @@ var TangoBody = class TangoBody {
 var TangoHeaders = class TangoHeaders extends Headers {
 	static BRAND = "tango.http.headers";
 	__tangoBrand = TangoHeaders.BRAND;
+	cookieEntries = [];
+	constructor(init) {
+		super();
+		this.appendHeadersInit(init);
+	}
 	/**
 	* Narrow an unknown value to `TangoHeaders`.
 	*/
@@ -343,6 +348,22 @@ var TangoHeaders = class TangoHeaders extends Headers {
 		if (options.partitioned) cookie += "; Partitioned";
 		return cookie;
 	}
+	static getCookieIdentity(name, options = {}) {
+		return {
+			name,
+			domain: options.domain?.toLowerCase() ?? "",
+			path: options.path ?? "/"
+		};
+	}
+	static hasCookieIdentity(entry, identity) {
+		return entry.identity !== null && entry.identity.name === identity.name && entry.identity.domain === identity.domain && entry.identity.path === identity.path;
+	}
+	static isSetCookieName(name) {
+		return name.toLowerCase() === "set-cookie";
+	}
+	static hasHeaderEntries(value) {
+		return typeof value.entries === "function";
+	}
 	static hasNumberSize(value) {
 		return typeof value === "object" && value !== null && typeof value.size === "number";
 	}
@@ -353,6 +374,36 @@ var TangoHeaders = class TangoHeaders extends Headers {
 		const maybeBuffer = Buffer;
 		return typeof Buffer !== "undefined" && typeof maybeBuffer.isBuffer === "function" && maybeBuffer.isBuffer(value);
 	}
+	append(name, value) {
+		if (!TangoHeaders.isSetCookieName(name)) {
+			super.append(name, value);
+			return;
+		}
+		this.cookieEntries.push({
+			line: value,
+			identity: null
+		});
+		this.syncSetCookieHeader();
+	}
+	set(name, value) {
+		if (!TangoHeaders.isSetCookieName(name)) {
+			super.set(name, value);
+			return;
+		}
+		this.cookieEntries = [{
+			line: value,
+			identity: null
+		}];
+		this.syncSetCookieHeader();
+	}
+	delete(name) {
+		if (!TangoHeaders.isSetCookieName(name)) {
+			super.delete(name);
+			return;
+		}
+		this.cookieEntries = [];
+		super.delete("Set-Cookie");
+	}
 	/**
 	* Sets the Content-Disposition header with type "inline" and the specified filename.
 	* This is useful to indicate that the content should be displayed inline in the browser,
@@ -379,7 +430,12 @@ var TangoHeaders = class TangoHeaders extends Headers {
 	*/
 	clone() {
 		const copy = new TangoHeaders();
-		for (const [name, value] of this.entries()) copy.append(name, value);
+		for (const [name, value] of this.entries()) if (!TangoHeaders.isSetCookieName(name)) copy.append(name, value);
+		copy.cookieEntries = this.cookieEntries.map((entry) => ({
+			line: entry.line,
+			identity: entry.identity === null ? null : { ...entry.identity }
+		}));
+		copy.syncSetCookieHeader();
 		return copy;
 	}
 	/**
@@ -434,22 +490,30 @@ var TangoHeaders = class TangoHeaders extends Headers {
 		this.set(key, Array.from(nextSet).join(", "));
 	}
 	/**
-	* Set a cookie header (for Set-Cookie).
-	* @param name
-	* @param value
-	* @param options
+	* Set a `Set-Cookie` line, replacing prior helper-managed intent for the same name, domain, and path.
 	*/
 	setCookie(name, value, options) {
-		this.append("Set-Cookie", TangoHeaders.serializeCookie(name, value, options));
+		const identity = TangoHeaders.getCookieIdentity(name, options);
+		this.replaceCookieIdentity(identity, TangoHeaders.serializeCookie(name, value, options));
 	}
 	/**
-	* Append (additionally) a new cookie.
+	* Append another `Set-Cookie` line without replacing earlier cookie intent.
 	*/
 	appendCookie(name, value, options) {
-		this.append("Set-Cookie", TangoHeaders.serializeCookie(name, value, options));
+		this.cookieEntries.push({
+			line: TangoHeaders.serializeCookie(name, value, options),
+			identity: TangoHeaders.getCookieIdentity(name, options)
+		});
+		this.syncSetCookieHeader();
+	}
+	/**
+	* Return each `Set-Cookie` header line separately.
+	*/
+	getSetCookie() {
+		return this.cookieEntries.map((entry) => entry.line);
 	}
 	/**
-	* Delete a cookie ("unset" it via expired date).
+	* Expire a cookie, replacing prior helper-managed intent for the same name, domain, and path.
 	*/
 	deleteCookie(name, options) {
 		this.setCookie(name, "", {
@@ -485,14 +549,14 @@ var TangoHeaders = class TangoHeaders extends Headers {
 		this.set("Content-Type", mime);
 	}
 	/**
-	* Attempt to guess and set the Content-Type header from a file (string or Blob) and optional filename.
+	* Attempt to guess and set the Content-Type header from response body bytes and an optional filename.
 	*
-	* @param file File-like input (string or Blob)
-	* @param filename Optional filename to help guess mime type by extension
+	* @param body Response body bytes (for example a Blob or Uint8Array)
+	* @param filename Optional filename used to guess mime type by extension
 	*/
-	setContentTypeByFile(file, filename) {
+	setContentTypeForBody(body, filename) {
 		if (this.has("Content-Type")) return;
-		if (typeof file === "string" && filename) {
+		if (filename) {
 			const dotIndex = filename.lastIndexOf(".");
 			const mime = {
 				txt: "text/plain",
@@ -511,18 +575,25 @@ var TangoHeaders = class TangoHeaders extends Headers {
 				ico: "image/x-icon",
 				md: "text/markdown"
 			}[dotIndex >= 0 ? filename.slice(dotIndex + 1).toLowerCase() : ""];
-			if (mime) this.set("Content-Type", mime);
-			else this.set("Content-Type", "application/octet-stream");
-			return;
+			if (mime) {
+				this.set("Content-Type", mime);
+				return;
+			}
 		}
-		if (isBlob(file)) {
-			if (file.type && file.type !== "") this.set("Content-Type", file.type);
+		if (isBlob(body)) {
+			if (body.type && body.type !== "") this.set("Content-Type", body.type);
 			else this.set("Content-Type", "application/octet-stream");
 			return;
 		}
 		this.set("Content-Type", "application/octet-stream");
 	}
 	/**
+	* @deprecated Use {@link TangoHeaders.setContentTypeForBody} instead.
+	*/
+	setContentTypeByFile(body, filename) {
+		this.setContentTypeForBody(body, filename);
+	}
+	/**
 	* Sets the Content-Length header, inferring it from the body if not explicitly provided.
 	* If the body is a string, ArrayBuffer, Uint8Array, Blob/Buffer (or has a .size or .length property),
 	* the length is computed. For unsupported types, does nothing.
@@ -617,6 +688,39 @@ var TangoHeaders = class TangoHeaders extends Headers {
 	getResponseTime() {
 		return this.get("X-Response-Time");
 	}
+	appendHeadersInit(init) {
+		if (!init) return;
+		if (TangoHeaders.isTangoHeaders(init)) {
+			for (const [name, value] of init.entries()) if (!TangoHeaders.isSetCookieName(name)) super.append(name, value);
+			this.cookieEntries = init.cookieEntries.map((entry) => ({
+				line: entry.line,
+				identity: entry.identity === null ? null : { ...entry.identity }
+			}));
+			this.syncSetCookieHeader();
+			return;
+		}
+		if (Array.isArray(init)) {
+			for (const [name, value] of init) this.append(name, value);
+			return;
+		}
+		if (TangoHeaders.hasHeaderEntries(init)) {
+			for (const [name, value] of init.entries()) this.append(name, value);
+			return;
+		}
+		for (const [name, value] of Object.entries(init)) this.append(name, value);
+	}
+	replaceCookieIdentity(identity, line) {
+		this.cookieEntries = this.cookieEntries.filter((entry) => !TangoHeaders.hasCookieIdentity(entry, identity));
+		this.cookieEntries.push({
+			line,
+			identity
+		});
+		this.syncSetCookieHeader();
+	}
+	syncSetCookieHeader() {
+		super.delete("Set-Cookie");
+		for (const entry of this.cookieEntries) super.append("Set-Cookie", entry.line);
+	}
 };
 //#endregion
 //#region src/http/TangoQueryParams.ts
@@ -1367,33 +1471,55 @@ var TangoResponse = class TangoResponse {
 		});
 	}
 	/**
-	* Returns a response for serving a file.
+	* Create a response with inline Content-Disposition for file-like body content.
+	*
+	* The first argument is response body bytes, not a filesystem path. To serve bytes
+	* from disk, read the file first and pass the result here.
+	*
+	* @example
+	* ```ts
+	* import { readFile } from 'node:fs/promises';
+	*
+	* const bytes = await readFile('/data/report.pdf');
+	* return TangoResponse.file(bytes, { filename: 'report.pdf' });
+	* ```
 	*/
-	static file(file, opts) {
+	static file(body, opts) {
 		const headers = new TangoHeaders(opts?.init?.headers ?? {});
 		if (opts?.filename) headers.setContentDispositionInline(opts.filename);
 		if (opts?.contentType && !headers.has("Content-Type")) headers.set("Content-Type", opts.contentType);
-		else if (!headers.has("Content-Type")) headers.setContentTypeByFile(file, opts?.filename);
-		if (!headers.has("Content-Length")) headers.setContentLengthFromBody(file);
+		else if (!headers.has("Content-Type")) headers.setContentTypeForBody(body, opts?.filename);
+		if (!headers.has("Content-Length")) headers.setContentLengthFromBody(body);
 		return new TangoResponse({
 			...opts?.init,
-			body: file,
+			body,
 			headers
 		});
 	}
 	/**
-	* Returns a response that prompts the user to download the file.
+	* Create a response with attachment Content-Disposition for file-like body content.
+	*
+	* The first argument must be the response body bytes, not a filesystem path. To serve bytes
+	* from disk, read the file first and pass the result here.
+	*
+	* @example
+	* ```ts
+	* import { readFile } from 'node:fs/promises';
+	*
+	* const bytes = await readFile('/data/report.pdf');
+	* return TangoResponse.download(bytes, { filename: 'report.pdf' });
+	* ```
 	*/
-	static download(file, opts) {
+	static download(body, opts) {
 		const headers = new TangoHeaders(opts?.init?.headers ?? {});
 		if (opts?.filename) headers.setContentDispositionAttachment(opts.filename);
 		else headers.set("Content-Disposition", "attachment");
 		if (opts?.contentType && !headers.has("Content-Type")) headers.set("Content-Type", opts.contentType);
-		else if (!headers.has("Content-Type")) headers.setContentTypeByFile(file, opts?.filename);
-		if (!headers.has("Content-Length")) headers.setContentLengthFromBody(file);
+		else if (!headers.has("Content-Type")) headers.setContentTypeForBody(body, opts?.filename);
+		if (!headers.has("Content-Length")) headers.setContentLengthFromBody(body);
 		return new TangoResponse({
 			...opts?.init,
-			body: file,
+			body,
 			headers
 		});
 	}
@@ -1457,19 +1583,19 @@ var TangoResponse = class TangoResponse {
 		this.headers.vary(...fields);
 	}
 	/**
-	* Add a `Set-Cookie` header that replaces prior application intent.
+	* Add a `Set-Cookie` header that replaces prior helper-managed intent for the same name, domain, and path.
 	*/
 	setCookie(name, value, options) {
 		this.headers.setCookie(name, value, options);
 	}
 	/**
-	* Append another `Set-Cookie` header.
+	* Append another `Set-Cookie` header without replacing earlier cookie intent.
 	*/
 	appendCookie(name, value, options) {
 		this.headers.appendCookie(name, value, options);
 	}
 	/**
-	* Expire a cookie by issuing a matching deletion cookie header.
+	* Expire a cookie by replacing prior helper-managed intent for the same name, domain, and path.
 	*/
 	deleteCookie(name, options) {
 		this.headers.deleteCookie(name, options);
@@ -1571,8 +1697,13 @@ var TangoResponse = class TangoResponse {
 	toWebResponse() {
 		const responseForTransfer = !this.bodyUsed && isReadableStream(this.bodySource) ? this.clone() : this;
 		const body = TangoResponse.normalizeWebBody(responseForTransfer.bodySource);
+		const headers = new Headers();
+		responseForTransfer.headers.forEach((value, key) => {
+			if (key.toLowerCase() !== "set-cookie") headers.append(key, value);
+		});
+		for (const cookie of responseForTransfer.headers.getSetCookie()) headers.append("Set-Cookie", cookie);
 		return new Response(body, {
-			headers: new Headers(responseForTransfer.headers),
+			headers,
 			status: responseForTransfer.status,
 			statusText: responseForTransfer.statusText
 		});
@@ -1657,4 +1788,4 @@ var http_exports = /* @__PURE__ */ __exportAll({
 //#endregion
 export { TangoHeaders as a, TangoQueryParams as i, TangoResponse as n, TangoBody as o, TangoRequest as r, http_exports as t };
 
-//# sourceMappingURL=http-BJPRtBGV.js.map
+//# sourceMappingURL=http-Bf_uQBDm.js.map