@getsoda/core 0.1.0 → 0.2.0

package/dist/http/body.d.ts

@@ -23,4 +23,32 @@ export declare const parseJson: (raw: string) => unknown;
  * invalid JSON, `undefined` for an empty body (a schema decides if that is allowed).
  */
 export declare const readJsonBody: (req: Request) => Promise<unknown>;
+/** A form value: text, or a file of a multipart body. */
+export type FormValue = string | File;
+/** Fields of a form; repeated fields and fields named `name[]` are arrays. */
+export type FormFields = Record<string, FormValue | FormValue[]>;
+/**
+ * Limits of a form body, beyond the server's `maxRequestBodySize`; each one
+ * exceeded is a `413`. Like the `limits` of multer and `@fastify/multipart`.
+ */
+export interface FormLimits {
+    /** Bytes of the whole body, refused as soon as they are exceeded, before the body is read entirely. */
+    readonly maxBodySize?: number;
+    /** Bytes of each file. */
+    readonly maxFileSize?: number;
+    /** Number of files. */
+    readonly maxFiles?: number;
+    /** Number of fields, files included. */
+    readonly maxFields?: number;
+}
+/**
+ * Reads a `multipart/form-data` or `application/x-www-form-urlencoded` body:
+ * `415` for another content type, `400` for a malformed body, `413` past a limit.
+ *
+ * Kept apart from JSON on purpose: an HTML form on another site can post a form
+ * without a CORS preflight, a JSON body cannot. A JSON endpoint must not accept forms.
+ *
+ * `File.type` is the type the client declared, not checked against the content.
+ */
+export declare const readFormBody: (req: Request, limits?: FormLimits) => Promise<FormFields>;
 //# sourceMappingURL=body.d.ts.map

package/dist/http/body.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../src/http/body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA8BH;;GAEG;AACH,eAAO,MAAM,SAAS,QAAS,MAAM,KAAG,OAavC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,QAAe,OAAO,KAAG,OAAO,CAAC,OAAO,CAahE,CAAA"}
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../src/http/body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA8BH;;GAEG;AACH,eAAO,MAAM,SAAS,QAAS,MAAM,KAAG,OAavC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,QAAe,OAAO,KAAG,OAAO,CAAC,OAAO,CAahE,CAAA;AAQD,yDAAyD;AACzD,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,IAAI,CAAA;AAErC,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,CAAC,CAAA;AA+BhE;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,uGAAuG;IACvG,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,0BAA0B;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,uBAAuB;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAuDD;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,QAAe,OAAO,WAAU,UAAU,KAAQ,OAAO,CAAC,UAAU,CAqB5F,CAAA"}

package/dist/http/body.js

@@ -14,7 +14,7 @@
  *    and `constructor` holding an own `prototype`. A plain `constructor` field
  *    (`"constructor": "Ford"`) is legitimate and kept.
  */
-import { BadRequestException, UnsupportedMediaTypeException } from './exceptions.js';
+import { BadRequestException, PayloadTooLargeException, UnsupportedMediaTypeException } from './exceptions.js';
 const SUSPECT_PROTO = /"(?:_|\\u005[Ff])(?:_|\\u005[Ff])(?:p|\\u0070)(?:r|\\u0072)(?:o|\\u006[Ff])(?:t|\\u0074)(?:o|\\u006[Ff])(?:_|\\u005[Ff])(?:_|\\u005[Ff])"\s*:/;
 const SUSPECT_CONSTRUCTOR = /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/;
 const BOM = 0xfeff;
@@ -63,4 +63,99 @@ export const readJsonBody = async (req) => {
     }
     return parseJson(text);
 };
+const FORM_TYPE = /^(?:multipart\/form-data|application\/x-www-form-urlencoded)(?:\s*;|$)/i;
+const ARRAY_SUFFIX = '[]';
+/**
+ * Turns form data into an object without prototype.
+ *
+ * ```ts
+ * 'a=1&a=2'      => { a: ['1', '2'] }   // repeated fields are kept, not overwritten
+ * 'tags[]=x'     => { tags: ['x'] }     // `[]` always gives an array, even with one value
+ * 'name=Ann'     => { name: 'Ann' }
+ * ```
+ */
+const toFields = (data) => {
+    const fields = Object.create(null);
+    for (const [rawKey, value] of data) {
+        const array = rawKey.endsWith(ARRAY_SUFFIX);
+        const key = array ? rawKey.slice(0, -ARRAY_SUFFIX.length) : rawKey;
+        const current = fields[key];
+        if (current === undefined) {
+            fields[key] = array ? [value] : value;
+        }
+        else if (Array.isArray(current)) {
+            current.push(value);
+        }
+        else {
+            fields[key] = [current, value];
+        }
+    }
+    return fields;
+};
+/** The body, read up to `max` bytes: `413` as soon as it is larger. */
+const readUpTo = async (req, max) => {
+    if (Number(req.headers.get('content-length') ?? 0) > max) {
+        throw new PayloadTooLargeException(`Request body is larger than ${max} bytes`);
+    }
+    if (req.body === null) {
+        return new Uint8Array();
+    }
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req.body) {
+        size += chunk.byteLength;
+        if (size > max) {
+            throw new PayloadTooLargeException(`Request body is larger than ${max} bytes`);
+        }
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks);
+};
+/** `413` for the first limit the form exceeds. */
+const checkLimits = (data, limits) => {
+    const { maxFileSize = Infinity, maxFiles = Infinity, maxFields = Infinity } = limits;
+    let fields = 0;
+    let files = 0;
+    for (const [name, value] of data) {
+        fields++;
+        if (fields > maxFields) {
+            throw new PayloadTooLargeException(`Form has more than ${maxFields} fields`);
+        }
+        if (typeof value !== 'string') {
+            files++;
+            if (files > maxFiles) {
+                throw new PayloadTooLargeException(`Form has more than ${maxFiles} files`);
+            }
+            if (value.size > maxFileSize) {
+                throw new PayloadTooLargeException(`File "${name}" is larger than ${maxFileSize} bytes`);
+            }
+        }
+    }
+};
+/**
+ * Reads a `multipart/form-data` or `application/x-www-form-urlencoded` body:
+ * `415` for another content type, `400` for a malformed body, `413` past a limit.
+ *
+ * Kept apart from JSON on purpose: an HTML form on another site can post a form
+ * without a CORS preflight, a JSON body cannot. A JSON endpoint must not accept forms.
+ *
+ * `File.type` is the type the client declared, not checked against the content.
+ */
+export const readFormBody = async (req, limits = {}) => {
+    const type = req.headers.get('content-type');
+    if (type === null || !FORM_TYPE.test(type)) {
+        throw new UnsupportedMediaTypeException(`Expected a form body, got ${type ?? 'no content type'}`);
+    }
+    // Parsed from the bytes read so far, as only a whole body can be parsed.
+    const source = limits.maxBodySize === undefined ? req : new Response(await readUpTo(req, limits.maxBodySize), { headers: { 'content-type': type } });
+    let data;
+    try {
+        data = await source.formData();
+    }
+    catch (error) {
+        throw new BadRequestException('Request body is not a valid form', { cause: error });
+    }
+    checkLimits(data, limits);
+    return toFields(data);
+};
 //# sourceMappingURL=body.js.map

package/dist/http/body.js.map

@@ -1 +1 @@
-{"version":3,"file":"body.js","sourceRoot":"","sources":["../../src/http/body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAA;AAEpF,MAAM,aAAa,GACjB,+IAA+I,CAAA;AACjJ,MAAM,mBAAmB,GACvB,gKAAgK,CAAA;AAClK,MAAM,GAAG,GAAG,MAAM,CAAA;AAClB,MAAM,SAAS,GAAG,8CAA8C,CAAA;AAEhE,MAAM,SAAS,GAAG,sDAAsD,CAAA;AAExE,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAE,KAAc,EAAW,EAAE;IACnE,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC1C,CAAC;IAED,IACE,GAAG,KAAK,aAAa;QACrB,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC1C,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAW,EAAE;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAC3D,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE7E,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAA;QACb,CAAC;QAED,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACnF,CAAC;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAY,EAAoB,EAAE;IACnE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAE7B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,6BAA6B,CAAC,6BAA6B,IAAI,IAAI,iBAAiB,EAAE,CAAC,CAAA;IACnG,CAAC;IAED,OAAO,SAAS,CAAC,IAAI,CAAC,CAAA;AACxB,CAAC,CAAA"}
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../src/http/body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAA;AAE9G,MAAM,aAAa,GACjB,+IAA+I,CAAA;AACjJ,MAAM,mBAAmB,GACvB,gKAAgK,CAAA;AAClK,MAAM,GAAG,GAAG,MAAM,CAAA;AAClB,MAAM,SAAS,GAAG,8CAA8C,CAAA;AAEhE,MAAM,SAAS,GAAG,sDAAsD,CAAA;AAExE,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAE,KAAc,EAAW,EAAE;IACnE,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC1C,CAAC;IAED,IACE,GAAG,KAAK,aAAa;QACrB,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC1C,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAW,EAAE;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAC3D,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE7E,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAA;QACb,CAAC;QAED,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACnF,CAAC;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAY,EAAoB,EAAE;IACnE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAE7B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,6BAA6B,CAAC,6BAA6B,IAAI,IAAI,iBAAiB,EAAE,CAAC,CAAA;IACnG,CAAC;IAED,OAAO,SAAS,CAAC,IAAI,CAAC,CAAA;AACxB,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,yEAAyE,CAAA;AAC3F,MAAM,YAAY,GAAG,IAAI,CAAA;AAWzB;;;;;;;;GAQG;AACH,MAAM,QAAQ,GAAG,CAAC,IAAc,EAAc,EAAE;IAC9C,MAAM,MAAM,GAAe,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAE9C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAClE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QAE3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACvC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAiBD,uEAAuE;AACvE,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAY,EAAE,GAAW,EAAoC,EAAE;IACrF,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QACzD,MAAM,IAAI,wBAAwB,CAAC,+BAA+B,GAAG,QAAQ,CAAC,CAAA;IAChF,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,UAAU,EAAE,CAAA;IACzB,CAAC;IAED,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,IAAI,GAAG,CAAC,CAAA;IAEZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAA;QAExB,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,wBAAwB,CAAC,+BAA+B,GAAG,QAAQ,CAAC,CAAA;QAChF,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC9B,CAAC,CAAA;AAED,kDAAkD;AAClD,MAAM,WAAW,GAAG,CAAC,IAAc,EAAE,MAAkB,EAAQ,EAAE;IAC/D,MAAM,EAAE,WAAW,GAAG,QAAQ,EAAE,QAAQ,GAAG,QAAQ,EAAE,SAAS,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAA;IACpF,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,KAAK,GAAG,CAAC,CAAA;IAEb,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,EAAE,CAAA;QAER,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,wBAAwB,CAAC,sBAAsB,SAAS,SAAS,CAAC,CAAA;QAC9E,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,EAAE,CAAA;YAEP,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,wBAAwB,CAAC,sBAAsB,QAAQ,QAAQ,CAAC,CAAA;YAC5E,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;gBAC7B,MAAM,IAAI,wBAAwB,CAAC,SAAS,IAAI,oBAAoB,WAAW,QAAQ,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAY,EAAE,MAAM,GAAe,EAAE,EAAuB,EAAE;IAC/F,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAE5C,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,6BAA6B,CAAC,6BAA6B,IAAI,IAAI,iBAAiB,EAAE,CAAC,CAAA;IACnG,CAAC;IAED,yEAAyE;IACzE,MAAM,MAAM,GACV,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IACvI,IAAI,IAAc,CAAA;IAElB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAEzB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC,CAAA"}

package/dist/http/context-key.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @module
+ * Typed keys for values attached to a request: what a guard found (the user,
+ * the tenant), read later by interceptors and the handler.
+ *
+ * Like Angular's `HttpContextToken`: the key is an object, so two keys can
+ * never collide, and it carries the value type. Unlike it, a default is
+ * optional: reading a key nobody set and that has no default is a programming
+ * error (a guard missing on the route), reported as such.
+ *
+ * ```ts
+ * export const USER = new ContextKey<User>('user')
+ *
+ * // guard
+ * ctx.set(USER, await this.#auth.verify(ctx.header('authorization')))
+ *
+ * // handler
+ * const user = ctx.get(USER)
+ * ```
+ */
+/**
+ * Key of a value attached to a request.
+ */
+export declare class ContextKey<T> {
+    readonly description: string;
+    /** Value of the key when nothing was set. Without it, reading an unset key throws. */
+    readonly defaultValue?: (() => T) | undefined;
+    constructor(description: string, 
+    /** Value of the key when nothing was set. Without it, reading an unset key throws. */
+    defaultValue?: (() => T) | undefined);
+    toString(): string;
+}
+//# sourceMappingURL=context-key.d.ts.map

package/dist/http/context-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-key.d.ts","sourceRoot":"","sources":["../../src/http/context-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;GAEG;AACH,qBAAa,UAAU,CAAC,CAAC;IAErB,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,sFAAsF;IACtF,QAAQ,CAAC,YAAY,CAAC,GAAE,MAAM,CAAC;IAHjC,YACW,WAAW,EAAE,MAAM;IAC5B,sFAAsF;IAC7E,YAAY,CAAC,GAAE,MAAM,CAAC,aAAA,EAC7B;IAEJ,QAAQ,IAAI,MAAM,CAEjB;CACF"}

package/dist/http/context-key.js

@@ -0,0 +1,37 @@
+/**
+ * @module
+ * Typed keys for values attached to a request: what a guard found (the user,
+ * the tenant), read later by interceptors and the handler.
+ *
+ * Like Angular's `HttpContextToken`: the key is an object, so two keys can
+ * never collide, and it carries the value type. Unlike it, a default is
+ * optional: reading a key nobody set and that has no default is a programming
+ * error (a guard missing on the route), reported as such.
+ *
+ * ```ts
+ * export const USER = new ContextKey<User>('user')
+ *
+ * // guard
+ * ctx.set(USER, await this.#auth.verify(ctx.header('authorization')))
+ *
+ * // handler
+ * const user = ctx.get(USER)
+ * ```
+ */
+/**
+ * Key of a value attached to a request.
+ */
+export class ContextKey {
+    description;
+    defaultValue;
+    constructor(description, 
+    /** Value of the key when nothing was set. Without it, reading an unset key throws. */
+    defaultValue) {
+        this.description = description;
+        this.defaultValue = defaultValue;
+    }
+    toString() {
+        return `ContextKey(${this.description})`;
+    }
+}
+//# sourceMappingURL=context-key.js.map

package/dist/http/context-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-key.js","sourceRoot":"","sources":["../../src/http/context-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;GAEG;AACH,MAAM,OAAO,UAAU;IAEV,WAAW;IAEX,YAAY;IAHvB,YACW,WAAmB;IAC5B,sFAAsF;IAC7E,YAAsB;2BAFtB,WAAW;4BAEX,YAAY;IACpB,CAAC;IAEJ,QAAQ;QACN,OAAO,cAAc,IAAI,CAAC,WAAW,GAAG,CAAA;IAC1C,CAAC;CACF"}

package/dist/http/context.d.ts

@@ -3,6 +3,8 @@
  * Request context passed to route handlers.
  */
 import type { Constructor } from '../di/index.ts';
+import type { FormFields, FormLimits } from './body.ts';
+import type { ContextKey } from './context-key.ts';
 import type { MetadataDecorator } from './enhancers.ts';
 import type { Parsed, ValueParser } from './parsers.ts';
 import type { InferOutput, StandardSchemaV1 } from './schema.ts';
@@ -41,14 +43,24 @@ export interface RouteInfo {
  * }
  * ```
  *
- * The URL is parsed only when `url` or `query()` is used; the body is read at most once.
+ * The URL is parsed only when `url` or `query()` is used; the body is read at
+ * most once; the storage of `set()` is created on the first `set()`.
  */
 export declare class Context<P extends string = string> {
     #private;
-    readonly req: Request;
+    readonly req: Bun.BunRequest;
     readonly params: ContextParams<P>;
     readonly route: RouteInfo;
-    constructor(req: Request, params: ContextParams<P>, route: RouteInfo);
+    constructor(req: Bun.BunRequest, params: ContextParams<P>, route: RouteInfo);
+    /** Attaches a value to this request, for the guards, interceptors and handler that follow. */
+    set<T>(key: ContextKey<T>, value: T): void;
+    /**
+     * Value attached to this request under `key`, or its default. Throws if
+     * nothing was set and the key has no default: a guard is missing on the route.
+     */
+    get<T>(key: ContextKey<T>): T;
+    /** `true` if a value was set under `key` for this request. */
+    has(key: ContextKey<unknown>): boolean;
     /**
      * Custom metadata of the route, the method's value over the class's.
      * Like Nest's `reflector.getAllAndOverride(Roles, [handler, class])`.
@@ -64,11 +76,33 @@ export declare class Context<P extends string = string> {
     /** Request header; converted and checked when a parser is given. */
     header(name: string): string | undefined;
     header<V extends ValueParser<unknown>>(name: string, parser: V): Parsed<V>;
+    /**
+     * Cookies of the request: Bun's `CookieMap`. What `set()` and `delete()`
+     * change is sent with the response as `Set-Cookie`, whatever the response is.
+     *
+     * ```ts
+     * ctx.cookies.set('theme', 'dark', { maxAge: 60 * 60 * 24 * 365 })
+     * ctx.cookies.delete('session')
+     * ```
+     */
+    get cookies(): Bun.CookieMap;
+    /** Cookie, decoded; converted and checked when a parser is given, such as `signed()`. */
+    cookie(name: string): string | undefined;
+    cookie<V extends ValueParser<unknown>>(name: string, parser: V): Parsed<V>;
     /**
      * JSON body, validated by `schema` when given. `415` for a non-JSON body,
      * `400` for invalid JSON or a failed validation.
      */
     body(): Promise<unknown>;
     body<S extends StandardSchemaV1>(schema: S): Promise<InferOutput<S>>;
+    /**
+     * Form body (`multipart/form-data` or `application/x-www-form-urlencoded`),
+     * validated by `schema` when given. `415` for another content type.
+     * Repeated fields and fields named `name[]` are arrays; files are `File`s
+     * whose `type` is what the client declared, not checked against the content.
+     * `limits` bound the body, the files and the fields: `413` past them.
+     */
+    form(limits?: FormLimits): Promise<FormFields>;
+    form<S extends StandardSchemaV1>(schema: S, limits?: FormLimits): Promise<InferOutput<S>>;
 }
 //# sourceMappingURL=context.d.ts.map

package/dist/http/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/http/context.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAEvD,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAEvD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvD;;;GAGG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,MAAM,IAAI,MAAM,SAAS,CAAC,GAAG,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;AAEhH,+CAA+C;AAC/C,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,MAAM,IAAI,MAAM,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,CAAA;AAEpG;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;IACzC,qCAAqC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChD;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,OAAO,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;;IAK1C,QAAQ,CAAC,GAAG,EAAE,OAAO;IACrB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS;IAH3B,YACW,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,KAAK,EAAE,SAAS,EACvB;IAEJ;;;OAGG;IACH,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS,CAE1D;IAED,IAAI,GAAG,IAAI,GAAG,CAIb;IAED,6EAA6E;IAC7E,KAAK,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7D,KAAK,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAO9F,sFAAsF;IACtF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACvC,KAAK,CAAC,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAOzE,oEAAoE;IACpE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACxC,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAO1E;;;OAGG;IACH,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IACxB,IAAI,CAAC,CAAC,SAAS,gBAAgB,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;CAQrE"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/http/context.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAEvD,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAEvD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvD;;;GAGG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,MAAM,IAAI,MAAM,SAAS,CAAC,GAAG,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;AAEhH,+CAA+C;AAC/C,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,MAAM,IAAI,MAAM,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,CAAA;AAEpG;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;IACzC,qCAAqC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,OAAO,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;;IAM1C,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS;IAH3B,YACW,GAAG,EAAE,GAAG,CAAC,UAAU,EACnB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,KAAK,EAAE,SAAS,EACvB;IAEJ,8FAA8F;IAC9F,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAGzC;IAED;;;OAGG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAiB5B;IAED,8DAA8D;IAC9D,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,OAAO,CAErC;IAED;;;OAGG;IACH,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS,CAE1D;IAED,IAAI,GAAG,IAAI,GAAG,CAIb;IAED,6EAA6E;IAC7E,KAAK,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7D,KAAK,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAO9F,sFAAsF;IACtF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACvC,KAAK,CAAC,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAOzE,oEAAoE;IACpE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACxC,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAO1E;;;;;;;;OAQG;IACH,IAAI,OAAO,IAAI,GAAG,CAAC,SAAS,CAE3B;IAED,yFAAyF;IACzF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACxC,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAO1E;;;OAGG;IACH,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IACxB,IAAI,CAAC,CAAC,SAAS,gBAAgB,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;IAOpE;;;;;;OAMG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAC9C,IAAI,CAAC,CAAC,SAAS,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;CAmB1F"}

package/dist/http/context.js

@@ -2,9 +2,9 @@
  * @module
  * Request context passed to route handlers.
  */
-import { readJsonBody } from './body.js';
+import { readFormBody, readJsonBody } from './body.js';
 import { applyParser } from './parsers.js';
-import { validate } from './schema.js';
+import { isStandardSchema, validate } from './schema.js';
 /**
  * What a route handler receives: the request, with typed readers. `P` is the
  * route path as written in the decorator.
@@ -19,7 +19,8 @@ import { validate } from './schema.js';
  * }
  * ```
  *
- * The URL is parsed only when `url` or `query()` is used; the body is read at most once.
+ * The URL is parsed only when `url` or `query()` is used; the body is read at
+ * most once; the storage of `set()` is created on the first `set()`.
  */
 export class Context {
     req;
@@ -27,11 +28,37 @@ export class Context {
     route;
     #url;
     #body;
+    #values;
     constructor(req, params, route) {
         this.req = req;
         this.params = params;
         this.route = route;
     }
+    /** Attaches a value to this request, for the guards, interceptors and handler that follow. */
+    set(key, value) {
+        this.#values ??= new Map();
+        this.#values.set(key, value);
+    }
+    /**
+     * Value attached to this request under `key`, or its default. Throws if
+     * nothing was set and the key has no default: a guard is missing on the route.
+     */
+    get(key) {
+        if (this.#values?.has(key) === true) {
+            return this.#values.get(key);
+        }
+        if (key.defaultValue === undefined) {
+            throw new Error(`${key.toString()} is not set for ${this.route.controller.name}.${this.route.handler}: ` +
+                'is the guard or interceptor that sets it applied to this route?');
+        }
+        const value = key.defaultValue();
+        this.set(key, value);
+        return value;
+    }
+    /** `true` if a value was set under `key` for this request. */
+    has(key) {
+        return this.#values?.has(key) === true;
+    }
     /**
      * Custom metadata of the route, the method's value over the class's.
      * Like Nest's `reflector.getAllAndOverride(Roles, [handler, class])`.
@@ -55,10 +82,41 @@ export class Context {
         const value = this.req.headers.get(name) ?? undefined;
         return parser === undefined ? value : applyParser(parser, value, name);
     }
+    /**
+     * Cookies of the request: Bun's `CookieMap`. What `set()` and `delete()`
+     * change is sent with the response as `Set-Cookie`, whatever the response is.
+     *
+     * ```ts
+     * ctx.cookies.set('theme', 'dark', { maxAge: 60 * 60 * 24 * 365 })
+     * ctx.cookies.delete('session')
+     * ```
+     */
+    get cookies() {
+        return this.req.cookies;
+    }
+    cookie(name, parser) {
+        const value = this.req.cookies.get(name) ?? undefined;
+        return parser === undefined ? value : applyParser(parser, value, name);
+    }
     async body(schema) {
-        this.#body ??= readJsonBody(this.req);
-        const value = await this.#body;
+        const value = await this.#read('JSON', readJsonBody);
         return schema === undefined ? value : validate(schema, value, '');
     }
+    async form(schemaOrLimits, limits) {
+        if (isStandardSchema(schemaOrLimits)) {
+            return validate(schemaOrLimits, await this.#read('form', (req) => readFormBody(req, limits)), '');
+        }
+        return this.#read('form', (req) => readFormBody(req, schemaOrLimits));
+    }
+    /** Reads the body once; reading it again in another format is a programming error. */
+    #read(kind, read) {
+        if (this.#body === undefined) {
+            this.#body = { kind, value: read(this.req) };
+        }
+        else if (this.#body.kind !== kind) {
+            throw new TypeError(`The body of this request was already read as ${this.#body.kind}, it cannot be read as ${kind}`);
+        }
+        return this.#body.value;
+    }
 }
 //# sourceMappingURL=context.js.map

package/dist/http/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/http/context.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAExC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE1C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AA2BtC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,OAAO;IAKP,GAAG;IACH,MAAM;IACN,KAAK;IANhB,IAAI,CAAiB;IACrB,KAAK,CAA8B;IAEnC,YACW,GAAY,EACZ,MAAwB,EACxB,KAAgB;mBAFhB,GAAG;sBACH,MAAM;qBACN,KAAK;IACb,CAAC;IAEJ;;;OAGG;IACH,QAAQ,CAAI,SAA+B;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAkB,CAAA;IAChE,CAAC;IAED,IAAI,GAAG;QACL,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAEnC,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;IAKD,KAAK,CAAC,IAAY,EAAE,MAA6B;QAC/C,MAAM,KAAK,GAAI,IAAI,CAAC,MAAoB,CAAC,IAAI,CAAC,CAAA;QAE9C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACxE,CAAC;IAKD,KAAK,CAAC,IAAY,EAAE,MAA6B;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAA;QAE1D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACxE,CAAC;IAKD,MAAM,CAAC,IAAY,EAAE,MAA6B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAA;QAErD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACxE,CAAC;IAQD,KAAK,CAAC,IAAI,CAAC,MAAyB;QAClC,IAAI,CAAC,KAAK,KAAK,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAErC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAA;QAE9B,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IACnE,CAAC;CACF"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/http/context.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAItD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE1C,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AA2BxD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,OAAO;IAMP,GAAG;IACH,MAAM;IACN,KAAK;IAPhB,IAAI,CAAiB;IACrB,KAAK,CAAkF;IACvF,OAAO,CAA+C;IAEtD,YACW,GAAmB,EACnB,MAAwB,EACxB,KAAgB;mBAFhB,GAAG;sBACH,MAAM;qBACN,KAAK;IACb,CAAC;IAEJ,8FAA8F;IAC9F,GAAG,CAAI,GAAkB,EAAE,KAAQ;QACjC,IAAI,CAAC,OAAO,KAAK,IAAI,GAAG,EAAE,CAAA;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC9B,CAAC;IAED;;;OAGG;IACH,GAAG,CAAI,GAAkB;QACvB,IAAI,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAM,CAAA;QACnC,CAAC;QAED,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,CAAC,QAAQ,EAAE,mBAAmB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI;gBACtF,iEAAiE,CACpE,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,EAAE,CAAA;QAEhC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAEpB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,8DAA8D;IAC9D,GAAG,CAAC,GAAwB;QAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;IACxC,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAI,SAA+B;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAkB,CAAA;IAChE,CAAC;IAED,IAAI,GAAG;QACL,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAEnC,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;IAKD,KAAK,CAAC,IAAY,EAAE,MAA6B;QAC/C,MAAM,KAAK,GAAI,IAAI,CAAC,MAAoB,CAAC,IAAI,CAAC,CAAA;QAE9C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACxE,CAAC;IAKD,KAAK,CAAC,IAAY,EAAE,MAA6B;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAA;QAE1D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACxE,CAAC;IAKD,MAAM,CAAC,IAAY,EAAE,MAA6B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAA;QAErD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACxE,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAA;IACzB,CAAC;IAKD,MAAM,CAAC,IAAY,EAAE,MAA6B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAA;QAErD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACxE,CAAC;IAQD,KAAK,CAAC,IAAI,CAAC,MAAyB;QAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QAEpD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IACnE,CAAC;IAWD,KAAK,CAAC,IAAI,CAAC,cAA8C,EAAE,MAAmB;QAC5E,IAAI,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,OAAO,QAAQ,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACnG,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAA;IACvE,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,IAAqB,EAAE,IAAwC;QACnE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;QAC9C,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,SAAS,CAAC,gDAAgD,IAAI,CAAC,KAAK,CAAC,IAAI,0BAA0B,IAAI,EAAE,CAAC,CAAA;QACtH,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAA;IACzB,CAAC;CACF"}

package/dist/http/cookies.d.ts

@@ -0,0 +1,49 @@
+/**
+ * @module
+ * Signed cookies. Reading and writing cookies is Bun's: `ctx.cookies` is the
+ * request's `CookieMap`, whose changes Bun sends with the response as
+ * `Set-Cookie`. This module adds what `@fastify/cookie` and `cookie-signature`
+ * add on top: values signed with HMAC-SHA256, so the client can read them but
+ * not forge them.
+ *
+ * ```ts
+ * const signer = new CookieSigner(process.env.COOKIE_SECRET!)
+ *
+ * ctx.cookies.set('session', signer.sign(id), { httpOnly: true, secure: true })
+ *
+ * @Get('me', [cookie('session', signed(signer))])
+ * me(id: string) {}
+ * ```
+ *
+ * A signature proves the value was set by the server, not that it is secret
+ * or recent: store secrets server-side, and limit the lifetime with `maxAge`.
+ */
+import type { Parser, ParserOptions } from './parsers.ts';
+/**
+ * Signs cookie values as `value.signature` and checks them. Several secrets
+ * allow rotation: the first signs, every one verifies.
+ *
+ * ```ts
+ * new CookieSigner([process.env.COOKIE_SECRET!, process.env.OLD_COOKIE_SECRET!])
+ * ```
+ */
+export declare class CookieSigner {
+    #private;
+    /** Secrets should be random and long: `openssl rand -base64 32`. */
+    constructor(secrets: string | readonly string[]);
+    /** `value` followed by `.` and its signature, in base64url. */
+    sign(value: string): string;
+    /** The value of a signed string, or `undefined` if it is not signed by one of the secrets. */
+    unsign(signed: string): string | undefined;
+}
+type Result<O extends ParserOptions> = O extends {
+    readonly optional: true;
+} ? string | undefined : string;
+/**
+ * Parser of a signed cookie: its value, `400` when it is missing or its
+ * signature is wrong. With `{ optional: true }`, both give `undefined`, as a
+ * forged cookie is no better than none.
+ */
+export declare const signed: <const O extends ParserOptions = {}>(signer: CookieSigner, options?: O) => Parser<Result<O>>;
+export {};
+//# sourceMappingURL=cookies.d.ts.map

package/dist/http/cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../src/http/cookies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAKzD;;;;;;;GAOG;AACH,qBAAa,YAAY;;IAGvB,oEAAoE;IACpE,YAAY,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EAQ9C;IAED,+DAA+D;IAC/D,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1B;IAED,8FAA8F;IAC9F,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAmBzC;CACF;AAED,KAAK,MAAM,CAAC,CAAC,SAAS,aAAa,IAAI,CAAC,SAAS;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAA;AAE1G;;;;GAIG;AACH,eAAO,MAAM,MAAM,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,UAAU,YAAY,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAU7G,CAAA"}

package/dist/http/cookies.js

@@ -0,0 +1,77 @@
+/**
+ * @module
+ * Signed cookies. Reading and writing cookies is Bun's: `ctx.cookies` is the
+ * request's `CookieMap`, whose changes Bun sends with the response as
+ * `Set-Cookie`. This module adds what `@fastify/cookie` and `cookie-signature`
+ * add on top: values signed with HMAC-SHA256, so the client can read them but
+ * not forge them.
+ *
+ * ```ts
+ * const signer = new CookieSigner(process.env.COOKIE_SECRET!)
+ *
+ * ctx.cookies.set('session', signer.sign(id), { httpOnly: true, secure: true })
+ *
+ * @Get('me', [cookie('session', signed(signer))])
+ * me(id: string) {}
+ * ```
+ *
+ * A signature proves the value was set by the server, not that it is secret
+ * or recent: store secrets server-side, and limit the lifetime with `maxAge`.
+ */
+import { timingSafeEqual } from 'node:crypto';
+import { failure } from './parsers.js';
+const hmac = (secret, value) => new Bun.CryptoHasher('sha256', secret).update(value).digest('base64url');
+/**
+ * Signs cookie values as `value.signature` and checks them. Several secrets
+ * allow rotation: the first signs, every one verifies.
+ *
+ * ```ts
+ * new CookieSigner([process.env.COOKIE_SECRET!, process.env.OLD_COOKIE_SECRET!])
+ * ```
+ */
+export class CookieSigner {
+    #secrets;
+    /** Secrets should be random and long: `openssl rand -base64 32`. */
+    constructor(secrets) {
+        const list = typeof secrets === 'string' ? [secrets] : [...secrets];
+        if (list.length === 0 || list.includes('')) {
+            throw new TypeError('CookieSigner needs at least one secret, and no empty ones');
+        }
+        this.#secrets = list;
+    }
+    /** `value` followed by `.` and its signature, in base64url. */
+    sign(value) {
+        return `${value}.${hmac(this.#secrets[0], value)}`;
+    }
+    /** The value of a signed string, or `undefined` if it is not signed by one of the secrets. */
+    unsign(signed) {
+        const dot = signed.lastIndexOf('.');
+        if (dot === -1) {
+            return undefined;
+        }
+        const value = signed.slice(0, dot);
+        const signature = Buffer.from(signed.slice(dot + 1));
+        for (const secret of this.#secrets) {
+            const expected = Buffer.from(hmac(secret, value));
+            if (expected.length === signature.length && timingSafeEqual(expected, signature)) {
+                return value;
+            }
+        }
+        return undefined;
+    }
+}
+/**
+ * Parser of a signed cookie: its value, `400` when it is missing or its
+ * signature is wrong. With `{ optional: true }`, both give `undefined`, as a
+ * forged cookie is no better than none.
+ */
+export const signed = (signer, options) => ({
+    parse: (value, name) => {
+        const unsigned = value === undefined ? undefined : signer.unsign(value);
+        if (unsigned === undefined && options?.optional !== true) {
+            throw failure(name, 'signed cookie');
+        }
+        return unsigned;
+    },
+});
+//# sourceMappingURL=cookies.js.map

package/dist/http/cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.js","sourceRoot":"","sources":["../../src/http/cookies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAGtC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,KAAa,EAAU,EAAE,CACrD,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAE1E;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IACd,QAAQ,CAAmB;IAEpC,oEAAoE;IACpE,YAAY,OAAmC;QAC7C,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAA;QAEnE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAA;QAClF,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;IACtB,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,KAAa;QAChB,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,KAAK,CAAC,EAAE,CAAA;IACrD,CAAC;IAED,8FAA8F;IAC9F,MAAM,CAAC,MAAc;QACnB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QAEnC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QAEpD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;YAEjD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;gBACjF,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;CACF;AAID;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAqC,MAAoB,EAAE,OAAW,EAAqB,EAAE,CAAC,CAAC;IACnH,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAEvE,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QACtC,CAAC;QAED,OAAO,QAAqB,CAAA;IAC9B,CAAC;CACF,CAAC,CAAA"}

package/dist/http/cors.d.ts

@@ -0,0 +1,41 @@
+/**
+ * @module
+ * CORS middleware.
+ *
+ * Follows Hono's `cors()` and the `cors` package Nest uses, with two differences:
+ *
+ * - only a real preflight (`OPTIONS` with `Access-Control-Request-Method`, as
+ *   the Fetch spec defines it) is answered here; other `OPTIONS` requests reach
+ *   the application and its own `OPTIONS` routes;
+ * - `credentials: true` with `origin: '*'` is rejected when the middleware is
+ *   created: browsers refuse that pair, so it could never work.
+ *
+ * Response headers are set in place: Bun's responses always have mutable headers.
+ *
+ * ```ts
+ * cors({ origin: ['https://app.example.com'], credentials: true, maxAge: 600 })
+ * ```
+ */
+import type { MiddlewareFunction } from './middleware.ts';
+export interface CorsOptions {
+    /**
+     * Allowed origins: `'*'` (default), one origin, a list, or a predicate.
+     * An allowed origin is echoed back; a refused one gets no CORS headers, so the browser blocks the response.
+     */
+    readonly origin?: '*' | string | readonly string[] | ((origin: string, req: Request) => boolean);
+    /** Methods announced to preflights. */
+    readonly methods?: readonly string[];
+    /** Headers announced to preflights. Defaults to the ones the preflight asks for. */
+    readonly allowedHeaders?: readonly string[];
+    /** Response headers the browser exposes to scripts. */
+    readonly exposedHeaders?: readonly string[];
+    /** Allows cookies and `Authorization`; needs explicit origins. */
+    readonly credentials?: boolean;
+    /** Seconds a browser may cache a preflight. */
+    readonly maxAge?: number;
+}
+/**
+ * Creates the CORS middleware. Throws a `TypeError` for options browsers would refuse.
+ */
+export declare const cors: (options?: CorsOptions) => MiddlewareFunction;
+//# sourceMappingURL=cors.d.ts.map

package/dist/http/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/http/cors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAEzD,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,CAAA;IAChG,uCAAuC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,oFAAoF;IACpF,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,uDAAuD;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AA4BD;;GAEG;AACH,eAAO,MAAM,IAAI,aAAa,WAAW,KAAQ,kBA0EhD,CAAA"}