@elurjs/kit 2.4.4

package/dist/lib/router/route-scanner.d.cts

@@ -0,0 +1,50 @@
+/** A page route discovered by the scanner. */
+export interface PageRoute {
+    /** URL path, e.g. "/blog/:slug". */
+    path: string;
+    /** File system path to the page.ts module. */
+    pagePath: string;
+    /** File system path to the page.data.ts module, if any. */
+    dataPath?: string;
+    /** File system path to the page.action.ts module, if any. */
+    actionPath?: string;
+    /** Ordered list of layout.ts modules from root to leaf. */
+    layouts: string[];
+    /** File system path to the loading.ts module, if any. */
+    loadingPath?: string;
+    /** Dynamic parameter names extracted from the path. */
+    params: string[];
+    /** Whether the route has an optional catch-all segment. */
+    optionalCatchAll?: boolean;
+    /**
+     * Named slot modules discovered in the same directory as the page.
+     * Keyed by slot name (filename without `.slot.ts` suffix).
+     * (v2.1 — Fix #2: Layout Slots)
+     */
+    slots?: Record<string, string>;
+}
+/** An API route discovered by the scanner. */
+export interface ApiRoute {
+    /** URL path, e.g. "/api/posts". */
+    path: string;
+    /** File system path to the route.ts module. */
+    routePath: string;
+    /** Dynamic parameter names extracted from the path. */
+    params: string[];
+}
+/** Result of scanning the app directory. */
+export interface ScannedRoutes {
+    pages: PageRoute[];
+    api: ApiRoute[];
+    /** Optional 404 error page. */
+    error404?: PageRoute;
+    /** Optional 500 error page. */
+    error500?: PageRoute;
+}
+/**
+ * Scans an app directory for Elur Kit file-based routes.
+ *
+ * @param appDir Absolute path to the app directory (e.g. "src/app").
+ * @returns Discovered page and API routes.
+ */
+export declare function scanRoutes(appDir: string): Promise<ScannedRoutes>;

package/dist/lib/router/route-scanner.d.ts

@@ -0,0 +1,50 @@
+/** A page route discovered by the scanner. */
+export interface PageRoute {
+    /** URL path, e.g. "/blog/:slug". */
+    path: string;
+    /** File system path to the page.ts module. */
+    pagePath: string;
+    /** File system path to the page.data.ts module, if any. */
+    dataPath?: string;
+    /** File system path to the page.action.ts module, if any. */
+    actionPath?: string;
+    /** Ordered list of layout.ts modules from root to leaf. */
+    layouts: string[];
+    /** File system path to the loading.ts module, if any. */
+    loadingPath?: string;
+    /** Dynamic parameter names extracted from the path. */
+    params: string[];
+    /** Whether the route has an optional catch-all segment. */
+    optionalCatchAll?: boolean;
+    /**
+     * Named slot modules discovered in the same directory as the page.
+     * Keyed by slot name (filename without `.slot.ts` suffix).
+     * (v2.1 — Fix #2: Layout Slots)
+     */
+    slots?: Record<string, string>;
+}
+/** An API route discovered by the scanner. */
+export interface ApiRoute {
+    /** URL path, e.g. "/api/posts". */
+    path: string;
+    /** File system path to the route.ts module. */
+    routePath: string;
+    /** Dynamic parameter names extracted from the path. */
+    params: string[];
+}
+/** Result of scanning the app directory. */
+export interface ScannedRoutes {
+    pages: PageRoute[];
+    api: ApiRoute[];
+    /** Optional 404 error page. */
+    error404?: PageRoute;
+    /** Optional 500 error page. */
+    error500?: PageRoute;
+}
+/**
+ * Scans an app directory for Elur Kit file-based routes.
+ *
+ * @param appDir Absolute path to the app directory (e.g. "src/app").
+ * @returns Discovered page and API routes.
+ */
+export declare function scanRoutes(appDir: string): Promise<ScannedRoutes>;

package/dist/lib/runtime/capabilities.d.cts

@@ -0,0 +1,47 @@
+export type FilesystemCapability = "none" | "readonly" | "persistent" | "ephemeral";
+export interface AdapterCapabilities {
+    /** Whether the host supports streaming responses (ReadableStream bodies). */
+    streaming: boolean;
+    /** Filesystem access model of the host. */
+    filesystem: FilesystemCapability;
+    /** Whether the host can run image transforms at request time. */
+    imageRuntime: boolean;
+    /** Whether the host allows background work after the response completes. */
+    backgroundWork: boolean;
+    /** Maximum request body size in bytes accepted by the host (if any). */
+    maxBodySize?: number;
+}
+export interface CapabilityOptions {
+    streaming?: boolean;
+    filesystem?: FilesystemCapability;
+    imageRuntime?: boolean;
+    backgroundWork?: boolean;
+    maxBodySize?: number;
+}
+/** Default capabilities for a full-featured long-lived Node/Bun process. */
+export declare const DEFAULT_CAPABILITIES: AdapterCapabilities;
+/** Default capabilities for a stateless serverless function (Vercel/Netlify). */
+export declare const SERVERLESS_CAPABILITIES: AdapterCapabilities;
+/** Default capabilities for an edge runtime (read-only filesystem). */
+export declare const EDGE_CAPABILITIES: AdapterCapabilities;
+export declare function createCapabilities(options?: CapabilityOptions): AdapterCapabilities;
+/** True when the host supports streaming responses (streaming !== false). */
+export declare function supportsStreaming(capabilities?: Pick<AdapterCapabilities, "streaming">): boolean;
+/** True when the host can write to persistent storage (for ISR/cache/image writes). */
+export declare function supportsPersistentStorage(capabilities: Pick<AdapterCapabilities, "filesystem">): boolean;
+/** True when the host exposes a writable filesystem at build/runtime. */
+export declare function supportsWritableFilesystem(capabilities: Pick<AdapterCapabilities, "filesystem">): boolean;
+export interface CapabilityDiagnostics {
+    ok: boolean;
+    problems: string[];
+}
+/**
+ * Validates a capability declaration and reports incompatible combinations.
+ * Used by the build pipeline so invalid hosts fail at build time instead of
+ * producing a broken runtime.
+ */
+export declare function validateCapabilities(capabilities: AdapterCapabilities, features?: {
+    isr?: boolean;
+    images?: boolean;
+    streaming?: boolean;
+}): CapabilityDiagnostics;

package/dist/lib/runtime/capabilities.d.ts

@@ -0,0 +1,47 @@
+export type FilesystemCapability = "none" | "readonly" | "persistent" | "ephemeral";
+export interface AdapterCapabilities {
+    /** Whether the host supports streaming responses (ReadableStream bodies). */
+    streaming: boolean;
+    /** Filesystem access model of the host. */
+    filesystem: FilesystemCapability;
+    /** Whether the host can run image transforms at request time. */
+    imageRuntime: boolean;
+    /** Whether the host allows background work after the response completes. */
+    backgroundWork: boolean;
+    /** Maximum request body size in bytes accepted by the host (if any). */
+    maxBodySize?: number;
+}
+export interface CapabilityOptions {
+    streaming?: boolean;
+    filesystem?: FilesystemCapability;
+    imageRuntime?: boolean;
+    backgroundWork?: boolean;
+    maxBodySize?: number;
+}
+/** Default capabilities for a full-featured long-lived Node/Bun process. */
+export declare const DEFAULT_CAPABILITIES: AdapterCapabilities;
+/** Default capabilities for a stateless serverless function (Vercel/Netlify). */
+export declare const SERVERLESS_CAPABILITIES: AdapterCapabilities;
+/** Default capabilities for an edge runtime (read-only filesystem). */
+export declare const EDGE_CAPABILITIES: AdapterCapabilities;
+export declare function createCapabilities(options?: CapabilityOptions): AdapterCapabilities;
+/** True when the host supports streaming responses (streaming !== false). */
+export declare function supportsStreaming(capabilities?: Pick<AdapterCapabilities, "streaming">): boolean;
+/** True when the host can write to persistent storage (for ISR/cache/image writes). */
+export declare function supportsPersistentStorage(capabilities: Pick<AdapterCapabilities, "filesystem">): boolean;
+/** True when the host exposes a writable filesystem at build/runtime. */
+export declare function supportsWritableFilesystem(capabilities: Pick<AdapterCapabilities, "filesystem">): boolean;
+export interface CapabilityDiagnostics {
+    ok: boolean;
+    problems: string[];
+}
+/**
+ * Validates a capability declaration and reports incompatible combinations.
+ * Used by the build pipeline so invalid hosts fail at build time instead of
+ * producing a broken runtime.
+ */
+export declare function validateCapabilities(capabilities: AdapterCapabilities, features?: {
+    isr?: boolean;
+    images?: boolean;
+    streaming?: boolean;
+}): CapabilityDiagnostics;

package/dist/lib/runtime/context.d.cts

@@ -0,0 +1,140 @@
+import type { ResolvedElurConfig } from "../config/index.js";
+export interface RouteTable {
+    pages: import("../router/route-scanner.js").PageRoute[];
+    api: import("../router/route-scanner.js").ApiRoute[];
+    error404?: import("../router/route-scanner.js").PageRoute;
+    error500?: import("../router/route-scanner.js").PageRoute;
+}
+/** Read-only access to request cookies. */
+export interface CookieJar {
+    /** Gets a cookie value by name, or undefined if not present. */
+    get(name: string): string | undefined;
+    /** Returns all cookie name-value pairs. */
+    getAll(): Record<string, string>;
+    /** Checks if a cookie exists. */
+    has(name: string): boolean;
+}
+/** Write access to response cookies (Set-Cookie headers). */
+export interface ResponseCookieJar {
+    /** Sets a Set-Cookie header. */
+    set(name: string, value: string, options?: CookieOptions): void;
+    /** Removes a cookie by setting it expired. */
+    clear(name: string, options?: CookieOptions): void;
+    /** Returns all Set-Cookie header values accumulated so far. */
+    getAll(): string[];
+}
+export interface CookieOptions {
+    httpOnly?: boolean;
+    secure?: boolean;
+    sameSite?: "strict" | "lax" | "none";
+    maxAge?: number;
+    expires?: Date;
+    path?: string;
+    domain?: string;
+}
+/** Mutable response state accumulated during the request lifecycle. */
+export interface ResponseState {
+    status?: number;
+    headers: Headers;
+    cookies: ResponseCookieJar;
+}
+export interface RequestContextOptions {
+    request: Request;
+    config: ResolvedElurConfig;
+    routes: RouteTable;
+    actions: import("../action/scan.js").ActionRegistry;
+    /** Public action names serialized into the HTML shell. */
+    publicActions: Record<string, string[]>;
+    /** Optional module loader for adapter-bundled entries. */
+    importer?: (path: string) => unknown | Promise<unknown>;
+    /** Whether the render endpoint (/__elur-js/render) is available. */
+    renderEndpoint?: boolean;
+    /** Whether to bypass the ISR cache (dev mode). */
+    noCache?: boolean;
+    /** ISR cache directory (absolute). */
+    cacheDir?: string;
+    /** Default ISR revalidate interval in seconds. */
+    defaultRevalidate?: number;
+    /** Route params (populated after route matching). */
+    params?: Record<string, string | string[] | undefined>;
+    /** Per-request locals (populated by middleware). */
+    locals?: Record<string, unknown>;
+    /** Abort signal for the request (from host disconnect). */
+    signal?: AbortSignal;
+    /** Request ID (auto-generated if not provided). */
+    requestId?: string;
+    /** Platform-specific context (e.g. Vercel, Netlify). */
+    platform?: unknown;
+    /** Matched route (populated after route matching). */
+    route?: import("../router/route-scanner.js").PageRoute | import("../router/route-scanner.js").ApiRoute;
+}
+export declare class RequestContext {
+    readonly request: Request;
+    readonly url: URL;
+    readonly config: ResolvedElurConfig;
+    readonly routes: RouteTable;
+    readonly actions: import("../action/scan.js").ActionRegistry;
+    readonly publicActions: Record<string, string[]>;
+    readonly importer?: (path: string) => unknown | Promise<unknown>;
+    readonly renderEndpoint: boolean;
+    readonly noCache: boolean;
+    readonly cacheDir?: string;
+    readonly defaultRevalidate?: number;
+    /** Route params derived from the matched route. */
+    params: Readonly<Record<string, string | string[] | undefined>>;
+    /** Per-request locals, populated by middleware. Not global. */
+    locals: Record<string, unknown>;
+    /** Read-only access to request cookies. */
+    readonly cookies: CookieJar;
+    /** Abort signal (from host disconnect when platform allows). */
+    readonly signal: AbortSignal;
+    /** Unique request ID for logging/correlation. */
+    readonly requestId: string;
+    /** Platform-specific context (Vercel, Netlify, etc.). */
+    readonly platform: unknown;
+    /** Matched route after route matching. */
+    route?: import("../router/route-scanner.js").PageRoute | import("../router/route-scanner.js").ApiRoute;
+    /** Mutable response state accumulated during the request. */
+    readonly response: ResponseState;
+    constructor(options: RequestContextOptions);
+    /** The pathname without a query string. */
+    get pathname(): string;
+    /** The HTTP method, uppercased. */
+    get method(): string;
+    /** Whether the request accepts JSON. */
+    get wantsJson(): boolean;
+    /** Search params from the request URL. */
+    get searchParams(): URLSearchParams;
+    /** Render config passed to renderPage/renderErrorPage. */
+    get renderConfig(): {
+        lang?: string;
+        clientEntry?: string;
+        renderEndpoint?: boolean;
+    };
+    /** Applies accumulated response state (headers, cookies, status) to a Response. */
+    applyToResponse(response: Response): Response;
+}
+export declare function htmlResponse(body: string, status?: number, headers?: HeadersInit): Response;
+export declare function jsonResponse(data: unknown, status?: number, headers?: HeadersInit): Response;
+export declare function textResponse(body: string, status?: number, headers?: HeadersInit): Response;
+export declare function notFound(body?: string): Response;
+export declare function methodNotAllowed(method: string): Response;
+export declare function serverError(body: string): Response;
+export declare function guessContentType(filePath: string): string;
+/**
+ * Serves a static file from the root directory with full conditional and
+ * range support:
+ *
+ * - ETag / Last-Modified with If-None-Match / If-Modified-Since → 304.
+ * - `Range` with `If-Range` (ETag or date) → 206 with `Content-Range`.
+ * - HEAD → same headers as GET without a body.
+ * - Invalid/unsatisfiable ranges → 416 with a `Content-Range: bytes (asterisk)/size` header.
+ *
+ * Files with content hashes in their names (e.g. `app-abc123.js`) get
+ * `Cache-Control: public, max-age=31536000, immutable`.
+ *
+ * @param root Static file root (absolute path).
+ * @param pathname Request pathname.
+ * @param request Optional request for conditional/range/HEAD handling.
+ */
+export declare function serveStaticFile(root: string, pathname: string, request?: Request): Promise<Response | null>;

package/dist/lib/runtime/context.d.ts

@@ -0,0 +1,140 @@
+import type { ResolvedElurConfig } from "../config/index.js";
+export interface RouteTable {
+    pages: import("../router/route-scanner.js").PageRoute[];
+    api: import("../router/route-scanner.js").ApiRoute[];
+    error404?: import("../router/route-scanner.js").PageRoute;
+    error500?: import("../router/route-scanner.js").PageRoute;
+}
+/** Read-only access to request cookies. */
+export interface CookieJar {
+    /** Gets a cookie value by name, or undefined if not present. */
+    get(name: string): string | undefined;
+    /** Returns all cookie name-value pairs. */
+    getAll(): Record<string, string>;
+    /** Checks if a cookie exists. */
+    has(name: string): boolean;
+}
+/** Write access to response cookies (Set-Cookie headers). */
+export interface ResponseCookieJar {
+    /** Sets a Set-Cookie header. */
+    set(name: string, value: string, options?: CookieOptions): void;
+    /** Removes a cookie by setting it expired. */
+    clear(name: string, options?: CookieOptions): void;
+    /** Returns all Set-Cookie header values accumulated so far. */
+    getAll(): string[];
+}
+export interface CookieOptions {
+    httpOnly?: boolean;
+    secure?: boolean;
+    sameSite?: "strict" | "lax" | "none";
+    maxAge?: number;
+    expires?: Date;
+    path?: string;
+    domain?: string;
+}
+/** Mutable response state accumulated during the request lifecycle. */
+export interface ResponseState {
+    status?: number;
+    headers: Headers;
+    cookies: ResponseCookieJar;
+}
+export interface RequestContextOptions {
+    request: Request;
+    config: ResolvedElurConfig;
+    routes: RouteTable;
+    actions: import("../action/scan.js").ActionRegistry;
+    /** Public action names serialized into the HTML shell. */
+    publicActions: Record<string, string[]>;
+    /** Optional module loader for adapter-bundled entries. */
+    importer?: (path: string) => unknown | Promise<unknown>;
+    /** Whether the render endpoint (/__elur-js/render) is available. */
+    renderEndpoint?: boolean;
+    /** Whether to bypass the ISR cache (dev mode). */
+    noCache?: boolean;
+    /** ISR cache directory (absolute). */
+    cacheDir?: string;
+    /** Default ISR revalidate interval in seconds. */
+    defaultRevalidate?: number;
+    /** Route params (populated after route matching). */
+    params?: Record<string, string | string[] | undefined>;
+    /** Per-request locals (populated by middleware). */
+    locals?: Record<string, unknown>;
+    /** Abort signal for the request (from host disconnect). */
+    signal?: AbortSignal;
+    /** Request ID (auto-generated if not provided). */
+    requestId?: string;
+    /** Platform-specific context (e.g. Vercel, Netlify). */
+    platform?: unknown;
+    /** Matched route (populated after route matching). */
+    route?: import("../router/route-scanner.js").PageRoute | import("../router/route-scanner.js").ApiRoute;
+}
+export declare class RequestContext {
+    readonly request: Request;
+    readonly url: URL;
+    readonly config: ResolvedElurConfig;
+    readonly routes: RouteTable;
+    readonly actions: import("../action/scan.js").ActionRegistry;
+    readonly publicActions: Record<string, string[]>;
+    readonly importer?: (path: string) => unknown | Promise<unknown>;
+    readonly renderEndpoint: boolean;
+    readonly noCache: boolean;
+    readonly cacheDir?: string;
+    readonly defaultRevalidate?: number;
+    /** Route params derived from the matched route. */
+    params: Readonly<Record<string, string | string[] | undefined>>;
+    /** Per-request locals, populated by middleware. Not global. */
+    locals: Record<string, unknown>;
+    /** Read-only access to request cookies. */
+    readonly cookies: CookieJar;
+    /** Abort signal (from host disconnect when platform allows). */
+    readonly signal: AbortSignal;
+    /** Unique request ID for logging/correlation. */
+    readonly requestId: string;
+    /** Platform-specific context (Vercel, Netlify, etc.). */
+    readonly platform: unknown;
+    /** Matched route after route matching. */
+    route?: import("../router/route-scanner.js").PageRoute | import("../router/route-scanner.js").ApiRoute;
+    /** Mutable response state accumulated during the request. */
+    readonly response: ResponseState;
+    constructor(options: RequestContextOptions);
+    /** The pathname without a query string. */
+    get pathname(): string;
+    /** The HTTP method, uppercased. */
+    get method(): string;
+    /** Whether the request accepts JSON. */
+    get wantsJson(): boolean;
+    /** Search params from the request URL. */
+    get searchParams(): URLSearchParams;
+    /** Render config passed to renderPage/renderErrorPage. */
+    get renderConfig(): {
+        lang?: string;
+        clientEntry?: string;
+        renderEndpoint?: boolean;
+    };
+    /** Applies accumulated response state (headers, cookies, status) to a Response. */
+    applyToResponse(response: Response): Response;
+}
+export declare function htmlResponse(body: string, status?: number, headers?: HeadersInit): Response;
+export declare function jsonResponse(data: unknown, status?: number, headers?: HeadersInit): Response;
+export declare function textResponse(body: string, status?: number, headers?: HeadersInit): Response;
+export declare function notFound(body?: string): Response;
+export declare function methodNotAllowed(method: string): Response;
+export declare function serverError(body: string): Response;
+export declare function guessContentType(filePath: string): string;
+/**
+ * Serves a static file from the root directory with full conditional and
+ * range support:
+ *
+ * - ETag / Last-Modified with If-None-Match / If-Modified-Since → 304.
+ * - `Range` with `If-Range` (ETag or date) → 206 with `Content-Range`.
+ * - HEAD → same headers as GET without a body.
+ * - Invalid/unsatisfiable ranges → 416 with a `Content-Range: bytes (asterisk)/size` header.
+ *
+ * Files with content hashes in their names (e.g. `app-abc123.js`) get
+ * `Cache-Control: public, max-age=31536000, immutable`.
+ *
+ * @param root Static file root (absolute path).
+ * @param pathname Request pathname.
+ * @param request Optional request for conditional/range/HEAD handling.
+ */
+export declare function serveStaticFile(root: string, pathname: string, request?: Request): Promise<Response | null>;

package/dist/lib/runtime/handler.d.cts

@@ -0,0 +1,39 @@
+import type { SecurityHeadersConfig } from "../config/index.js";
+export interface WebHandlerOptions {
+    /** Static file root (absolute path). Usually the build output directory. */
+    staticRoot: string;
+    /** Whether to bypass the ISR cache (dev mode). */
+    noCache?: boolean;
+    /** ISR cache directory (absolute). */
+    cacheDir?: string;
+    /** Default ISR revalidate interval in seconds. */
+    defaultRevalidate?: number;
+    /** Optional module loader for adapter-bundled entries. */
+    importer?: (path: string) => Promise<unknown>;
+    /** HTML lang attribute. */
+    lang?: string;
+    /** Client entry path. */
+    clientEntry?: string;
+    /** Whether the render endpoint exists. */
+    renderEndpoint?: boolean;
+    /** Security headers config (runtime-security §14). `false` disables. */
+    securityHeaders?: SecurityHeadersConfig | false;
+}
+export interface WebHandlerRouteTable {
+    pages: import("../router/route-scanner.js").PageRoute[];
+    api: import("../router/route-scanner.js").ApiRoute[];
+    error404?: import("../router/route-scanner.js").PageRoute;
+    error500?: import("../router/route-scanner.js").PageRoute;
+}
+export interface WebHandlerActionRegistry {
+    [pagePath: string]: Record<string, string>;
+}
+export interface CreateWebHandlerResult {
+    (request: Request): Promise<Response>;
+}
+/**
+ * Create a unified Web handler from scanned routes, actions and options.
+ *
+ * The returned function is the single entry point for all runtimes.
+ */
+export declare function createWebHandler(routes: WebHandlerRouteTable, actions: WebHandlerActionRegistry, options: WebHandlerOptions): CreateWebHandlerResult;

package/dist/lib/runtime/handler.d.ts

@@ -0,0 +1,39 @@
+import type { SecurityHeadersConfig } from "../config/index.js";
+export interface WebHandlerOptions {
+    /** Static file root (absolute path). Usually the build output directory. */
+    staticRoot: string;
+    /** Whether to bypass the ISR cache (dev mode). */
+    noCache?: boolean;
+    /** ISR cache directory (absolute). */
+    cacheDir?: string;
+    /** Default ISR revalidate interval in seconds. */
+    defaultRevalidate?: number;
+    /** Optional module loader for adapter-bundled entries. */
+    importer?: (path: string) => Promise<unknown>;
+    /** HTML lang attribute. */
+    lang?: string;
+    /** Client entry path. */
+    clientEntry?: string;
+    /** Whether the render endpoint exists. */
+    renderEndpoint?: boolean;
+    /** Security headers config (runtime-security §14). `false` disables. */
+    securityHeaders?: SecurityHeadersConfig | false;
+}
+export interface WebHandlerRouteTable {
+    pages: import("../router/route-scanner.js").PageRoute[];
+    api: import("../router/route-scanner.js").ApiRoute[];
+    error404?: import("../router/route-scanner.js").PageRoute;
+    error500?: import("../router/route-scanner.js").PageRoute;
+}
+export interface WebHandlerActionRegistry {
+    [pagePath: string]: Record<string, string>;
+}
+export interface CreateWebHandlerResult {
+    (request: Request): Promise<Response>;
+}
+/**
+ * Create a unified Web handler from scanned routes, actions and options.
+ *
+ * The returned function is the single entry point for all runtimes.
+ */
+export declare function createWebHandler(routes: WebHandlerRouteTable, actions: WebHandlerActionRegistry, options: WebHandlerOptions): CreateWebHandlerResult;

package/dist/lib/runtime/index.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../node-http-DhxguYyz.cjs"),t=require("../runtime-CrH5X-Es.cjs"),n=require("../capabilities-C0TDQoMY.cjs");exports.DEFAULT_CAPABILITIES=n.t,exports.DEFAULT_SECURITY_HEADERS=t.n,exports.EDGE_CAPABILITIES=n.n,exports.RequestContext=t.a,exports.SERVERLESS_CAPABILITIES=n.r,exports.applySecurityHeaders=t.r,exports.buildSecurityHeaders=t.i,exports.createCapabilities=n.i,exports.createWebHandler=t.t,exports.guessContentType=t.o,exports.htmlResponse=t.s,exports.incomingMessageToRequest=e.t,exports.jsonResponse=t.c,exports.methodNotAllowed=t.l,exports.notFound=t.u,exports.resolveStaticFile=t.m,exports.serveStaticFile=t.d,exports.serverError=t.f,exports.supportsPersistentStorage=n.a,exports.supportsStreaming=n.o,exports.supportsWritableFilesystem=n.s,exports.textResponse=t.p,exports.validateCapabilities=n.c;

package/dist/lib/runtime/index.d.cts

@@ -0,0 +1,6 @@
+export { RequestContext, type RequestContextOptions, type RouteTable, type CookieJar, type ResponseCookieJar, type ResponseState, type CookieOptions, htmlResponse, jsonResponse, textResponse, notFound, methodNotAllowed, serverError, guessContentType, serveStaticFile, } from "./context.js";
+export { createWebHandler, type WebHandlerOptions, type WebHandlerRouteTable, type WebHandlerActionRegistry, type CreateWebHandlerResult, } from "./handler.js";
+export { resolveStaticFile } from "./static.js";
+export { incomingMessageToRequest } from "./node-http.js";
+export { buildSecurityHeaders, applySecurityHeaders, DEFAULT_SECURITY_HEADERS, } from "./security-headers.js";
+export { DEFAULT_CAPABILITIES, SERVERLESS_CAPABILITIES, EDGE_CAPABILITIES, createCapabilities, supportsStreaming, supportsPersistentStorage, supportsWritableFilesystem, validateCapabilities, type AdapterCapabilities, type FilesystemCapability, type CapabilityOptions, type CapabilityDiagnostics, } from "./capabilities.js";

package/dist/lib/runtime/index.d.ts

@@ -0,0 +1,6 @@
+export { RequestContext, type RequestContextOptions, type RouteTable, type CookieJar, type ResponseCookieJar, type ResponseState, type CookieOptions, htmlResponse, jsonResponse, textResponse, notFound, methodNotAllowed, serverError, guessContentType, serveStaticFile, } from "./context.js";
+export { createWebHandler, type WebHandlerOptions, type WebHandlerRouteTable, type WebHandlerActionRegistry, type CreateWebHandlerResult, } from "./handler.js";
+export { resolveStaticFile } from "./static.js";
+export { incomingMessageToRequest } from "./node-http.js";
+export { buildSecurityHeaders, applySecurityHeaders, DEFAULT_SECURITY_HEADERS, } from "./security-headers.js";
+export { DEFAULT_CAPABILITIES, SERVERLESS_CAPABILITIES, EDGE_CAPABILITIES, createCapabilities, supportsStreaming, supportsPersistentStorage, supportsWritableFilesystem, validateCapabilities, type AdapterCapabilities, type FilesystemCapability, type CapabilityOptions, type CapabilityDiagnostics, } from "./capabilities.js";

package/dist/lib/runtime/index.js

@@ -0,0 +1,4 @@
+import { t as e } from "../node-http-DRAUhO0c.js";
+import { a as t, c as n, d as r, f as i, i as a, l as o, m as s, n as c, o as l, p as u, r as d, s as f, t as p, u as m } from "../runtime-Ds2-wH6P.js";
+import { a as h, c as g, i as _, n as v, o as y, r as b, s as x, t as S } from "../capabilities-C7txofmY.js";
+export { S as DEFAULT_CAPABILITIES, c as DEFAULT_SECURITY_HEADERS, v as EDGE_CAPABILITIES, t as RequestContext, b as SERVERLESS_CAPABILITIES, d as applySecurityHeaders, a as buildSecurityHeaders, _ as createCapabilities, p as createWebHandler, l as guessContentType, f as htmlResponse, e as incomingMessageToRequest, n as jsonResponse, o as methodNotAllowed, m as notFound, s as resolveStaticFile, r as serveStaticFile, i as serverError, h as supportsPersistentStorage, y as supportsStreaming, x as supportsWritableFilesystem, u as textResponse, g as validateCapabilities };

package/dist/lib/runtime/node-http.d.cts

@@ -0,0 +1,2 @@
+import type { IncomingMessage } from "node:http";
+export declare function incomingMessageToRequest(req: IncomingMessage, body?: BodyInit | null): Request;

package/dist/lib/runtime/node-http.d.ts

@@ -0,0 +1,2 @@
+import type { IncomingMessage } from "node:http";
+export declare function incomingMessageToRequest(req: IncomingMessage, body?: BodyInit | null): Request;

package/dist/lib/runtime/security-headers.d.cts

@@ -0,0 +1,13 @@
+import type { SecurityHeadersConfig } from "../config/index.js";
+/** Default security headers applied when `security.headers` is not `false`. */
+export declare const DEFAULT_SECURITY_HEADERS: Required<Omit<SecurityHeadersConfig, "contentSecurityPolicy" | "hsts" | "permissionsPolicy">>;
+/**
+ * Builds the security headers map from the resolved config.
+ * Returns an empty map if headers are disabled.
+ */
+export declare function buildSecurityHeaders(config: SecurityHeadersConfig | false, isHttps: boolean, nonce?: string): Record<string, string>;
+/**
+ * Applies security headers to an existing Response, preserving any
+ * user-set headers unless overridden by security config.
+ */
+export declare function applySecurityHeaders(response: Response, headers: Record<string, string>): Response;

package/dist/lib/runtime/security-headers.d.ts

@@ -0,0 +1,13 @@
+import type { SecurityHeadersConfig } from "../config/index.js";
+/** Default security headers applied when `security.headers` is not `false`. */
+export declare const DEFAULT_SECURITY_HEADERS: Required<Omit<SecurityHeadersConfig, "contentSecurityPolicy" | "hsts" | "permissionsPolicy">>;
+/**
+ * Builds the security headers map from the resolved config.
+ * Returns an empty map if headers are disabled.
+ */
+export declare function buildSecurityHeaders(config: SecurityHeadersConfig | false, isHttps: boolean, nonce?: string): Record<string, string>;
+/**
+ * Applies security headers to an existing Response, preserving any
+ * user-set headers unless overridden by security config.
+ */
+export declare function applySecurityHeaders(response: Response, headers: Record<string, string>): Response;

package/dist/lib/runtime/static.d.cts

@@ -0,0 +1 @@
+export declare function resolveStaticFile(root: string, pathname: string): Promise<string | null>;

package/dist/lib/runtime/static.d.ts

@@ -0,0 +1 @@
+export declare function resolveStaticFile(root: string, pathname: string): Promise<string | null>;