@getsoda/core 0.1.1 → 0.2.0

package/dist/http/cors.js

@@ -0,0 +1,97 @@
+/**
+ * @module
+ * CORS middleware.
+ *
+ * Follows Hono's `cors()` and the `cors` package Nest uses, with two differences:
+ *
+ * - only a real preflight (`OPTIONS` with `Access-Control-Request-Method`, as
+ *   the Fetch spec defines it) is answered here; other `OPTIONS` requests reach
+ *   the application and its own `OPTIONS` routes;
+ * - `credentials: true` with `origin: '*'` is rejected when the middleware is
+ *   created: browsers refuse that pair, so it could never work.
+ *
+ * Response headers are set in place: Bun's responses always have mutable headers.
+ *
+ * ```ts
+ * cors({ origin: ['https://app.example.com'], credentials: true, maxAge: 600 })
+ * ```
+ */
+const DEFAULT_METHODS = ['GET', 'HEAD', 'PUT', 'PATCH', 'POST', 'DELETE'];
+const createOriginCheck = (origin) => {
+    if (typeof origin === 'function') {
+        return origin;
+    }
+    if (typeof origin === 'string') {
+        return (requested) => requested === origin;
+    }
+    const allowed = new Set(origin);
+    return (requested) => allowed.has(requested);
+};
+const appendVary = (headers, value) => {
+    const current = headers.get('vary');
+    if (current === null) {
+        headers.set('vary', value);
+    }
+    else if (current !== '*' && !current.toLowerCase().split(/\s*,\s*/).includes(value.toLowerCase())) {
+        headers.set('vary', `${current}, ${value}`);
+    }
+};
+/**
+ * Creates the CORS middleware. Throws a `TypeError` for options browsers would refuse.
+ */
+export const cors = (options = {}) => {
+    const origin = options.origin ?? '*';
+    const any = origin === '*';
+    if (any && options.credentials === true) {
+        throw new TypeError("cors(): credentials cannot be used with origin '*', browsers reject that combination; list the allowed origins instead");
+    }
+    const isAllowed = any ? () => true : createOriginCheck(origin);
+    const methods = (options.methods ?? DEFAULT_METHODS).join(', ');
+    const allowedHeaders = options.allowedHeaders?.join(', ');
+    const exposedHeaders = options.exposedHeaders?.join(', ');
+    const maxAge = options.maxAge === undefined ? undefined : String(options.maxAge);
+    /** Headers every CORS response of an allowed origin gets. */
+    const applyCommon = (headers, requested, req) => {
+        if (requested !== null && isAllowed(requested, req)) {
+            headers.set('access-control-allow-origin', any ? '*' : requested);
+            if (options.credentials === true) {
+                headers.set('access-control-allow-credentials', 'true');
+            }
+        }
+        // The response depends on Origin as soon as it is not the same for every origin.
+        if (!any) {
+            appendVary(headers, 'Origin');
+        }
+    };
+    return async (req, next) => {
+        const requested = req.headers.get('origin');
+        const preflight = req.method === 'OPTIONS' && requested !== null && req.headers.has('access-control-request-method');
+        if (preflight) {
+            const headers = new Headers();
+            applyCommon(headers, requested, req);
+            if (headers.has('access-control-allow-origin')) {
+                headers.set('access-control-allow-methods', methods);
+                const requestedHeaders = req.headers.get('access-control-request-headers');
+                const allowHeaders = allowedHeaders ?? requestedHeaders ?? '';
+                if (allowHeaders !== '') {
+                    headers.set('access-control-allow-headers', allowHeaders);
+                }
+                if (allowedHeaders === undefined && requestedHeaders !== null) {
+                    appendVary(headers, 'Access-Control-Request-Headers');
+                }
+                if (maxAge !== undefined) {
+                    headers.set('access-control-max-age', maxAge);
+                }
+            }
+            return new Response(null, { status: 204, headers });
+        }
+        const response = await next();
+        const headers = response.headers;
+        applyCommon(headers, requested, req);
+        if (exposedHeaders !== undefined && headers.has('access-control-allow-origin')) {
+            headers.set('access-control-expose-headers', exposedHeaders);
+        }
+        return response;
+    };
+};
+//# sourceMappingURL=cors.js.map

package/dist/http/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../src/http/cors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAsBH,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;AAEzE,MAAM,iBAAiB,GAAG,CAAC,MAA0C,EAA+C,EAAE;IACpH,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,CAAA;IAC5C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IAE/B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;AAC9C,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAE,KAAa,EAAQ,EAAE;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAEnC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC;SAAM,IAAI,OAAO,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACpG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,EAAE,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,GAAgB,EAAE,EAAsB,EAAE;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,CAAA;IACpC,MAAM,GAAG,GAAG,MAAM,KAAK,GAAG,CAAA;IAE1B,IAAI,GAAG,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CACjB,wHAAwH,CACzH,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAC9D,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACzD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAEhF,6DAA6D;IAC7D,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAE,SAAwB,EAAE,GAAY,EAAQ,EAAE;QACrF,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAEjE,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;YACzD,CAAC;QACH,CAAC;QAED,iFAAiF;QACjF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC,CAAA;IAED,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;QAEpH,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;YAE7B,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;YAEpC,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,OAAO,CAAC,CAAA;gBAEpD,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAA;gBAC1E,MAAM,YAAY,GAAG,cAAc,IAAI,gBAAgB,IAAI,EAAE,CAAA;gBAE7D,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,YAAY,CAAC,CAAA;gBAC3D,CAAC;gBAED,IAAI,cAAc,KAAK,SAAS,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;oBAC9D,UAAU,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAA;gBACvD,CAAC;gBAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAA;gBAC/C,CAAC;YACH,CAAC;YAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;QACrD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAA;QAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;QAEhC,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;QAEpC,IAAI,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,cAAc,CAAC,CAAA;QAC9D,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;AACH,CAAC,CAAA"}

package/dist/http/index.d.ts

@@ -2,9 +2,11 @@
  * @module
  * HTTP layer for Soda: controllers, route decorators, request context, validation, exceptions.
  */
-export { body, context, header, param, query } from './arguments.ts';
+export { body, context, cookie, form, header, param, query, value } from './arguments.ts';
 export type { Argument, ArgumentFor, ArgumentKind, ArgumentValues } from './arguments.ts';
 export { Context } from './context.ts';
+export { CookieSigner, signed } from './cookies.ts';
+export { ContextKey } from './context-key.ts';
 export type { ContextParams, ParamNameOf } from './context.ts';
 export { All, Controller, Delete, Get, Head, Header, HttpCode, Options, Patch, Post, Put, Route } from './decorators.ts';
 export type { ArgumentsRouteDecorator, MethodMetadataDecorator, MethodRouteDecoratorFactory, RouteDecorator, RouteDecoratorFactory, RouteHandlerMethod, } from './decorators.ts';
@@ -21,4 +23,8 @@ export type { AnyParams, PathParams } from './types.ts';
 export { Catch, createDecorator, UseFilters, UseGuards, UseInterceptors } from './enhancers.ts';
 export type { CallHandler, CanActivate, ClassOrMethodDecorator, Enhancers, ExceptionFilter, FilterFunction, FilterLike, Guard, GuardFunction, Interceptor, InterceptorFunction, InterceptorLike, MetadataDecorator, } from './enhancers.ts';
 export type { RouteInfo } from './context.ts';
+export { cors } from './cors.ts';
+export type { CorsOptions } from './cors.ts';
+export type { Middleware, MiddlewareFunction, NestMiddleware, Next } from './middleware.ts';
+export type { FormFields, FormLimits, FormValue } from './body.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/http/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC9D,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACxH,YAAY,EACV,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,4BAA4B,EAC5B,iBAAiB,EACjB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACzD,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC3D,YAAY,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACvE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAChE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAC/F,YAAY,EACV,WAAW,EACX,WAAW,EACX,sBAAsB,EACtB,SAAS,EACT,eAAe,EACf,cAAc,EACd,UAAU,EACV,KAAK,EACL,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACzF,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC9D,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACxH,YAAY,EACV,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,4BAA4B,EAC5B,iBAAiB,EACjB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACzD,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC3D,YAAY,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACvE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAChE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAC/F,YAAY,EACV,WAAW,EACX,WAAW,EACX,sBAAsB,EACtB,SAAS,EACT,eAAe,EACf,cAAc,EACd,UAAU,EACV,KAAK,EACL,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC5C,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAC3F,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA"}

package/dist/http/index.js

@@ -2,12 +2,15 @@
  * @module
  * HTTP layer for Soda: controllers, route decorators, request context, validation, exceptions.
  */
-export { body, context, header, param, query } from './arguments.js';
+export { body, context, cookie, form, header, param, query, value } from './arguments.js';
 export { Context } from './context.js';
+export { CookieSigner, signed } from './cookies.js';
+export { ContextKey } from './context-key.js';
 export { All, Controller, Delete, Get, Head, Header, HttpCode, Options, Patch, Post, Put, Route } from './decorators.js';
 export { ControllerError } from './errors.js';
 export { BadRequestException, ConflictException, ForbiddenException, HttpException, InternalServerErrorException, NotFoundException, PayloadTooLargeException, ServiceUnavailableException, TooManyRequestsException, UnauthorizedException, UnprocessableEntityException, UnsupportedMediaTypeException, } from './exceptions.js';
 export { boolean, int, number, uuid } from './parsers.js';
 export { buildRoutes, controllerRoutes } from './routes.js';
 export { Catch, createDecorator, UseFilters, UseGuards, UseInterceptors } from './enhancers.js';
+export { cors } from './cors.js';
 //# sourceMappingURL=index.js.map

package/dist/http/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AASxH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,4BAA4B,EAC5B,iBAAiB,EACjB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAEzD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAI3D,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAEzF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AASxH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,4BAA4B,EAC5B,iBAAiB,EACjB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAEzD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAI3D,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAiB/F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA"}

package/dist/http/middleware.d.ts

@@ -0,0 +1,56 @@
+/**
+ * @module
+ * Application middleware: runs around every request, before routing.
+ *
+ * Unlike guards and interceptors, which belong to a route, middleware sees
+ * every request: unknown paths (404), wrong methods (405), CORS preflights.
+ * That is where CORS, request ids, access logs or compression belong.
+ *
+ * ```ts
+ * const requestId: MiddlewareFunction = async (req, next) => {
+ *   const response = await next()
+ *
+ *   response.headers.set('x-request-id', crypto.randomUUID())
+ *
+ *   return response
+ * }
+ *
+ * await createApp(AppModule, { middleware: [cors({ origin: 'https://app.example.com' }), requestId] })
+ * ```
+ *
+ * As guards: a class is created once by the container (root module) and gets
+ * lifecycle hooks, a function runs where `inject()` works, an instance is used as is.
+ */
+import type { Constructor } from '../di/index.ts';
+import type { NativeHandler } from '../routing/index.ts';
+/** Continues with the next middleware, then the route. */
+export type Next = () => Promise<Response>;
+/** Class middleware. Like Nest's `NestMiddleware`, for the Fetch API. */
+export interface NestMiddleware {
+    use(req: Request, next: Next): Response | Promise<Response>;
+}
+/** Function middleware; `inject()` works inside it, before the first `await`. */
+export type MiddlewareFunction = (req: Request, next: Next) => Response | Promise<Response>;
+/** What `middleware` accepts. */
+export type Middleware = Constructor<NestMiddleware> | NestMiddleware | MiddlewareFunction;
+type Step = (req: Request, next: Next) => Response | Promise<Response>;
+/**
+ * Turns middleware declarations into steps. Classes are created now, inside
+ * `runInContext`, and passed to `onCreate` for their lifecycle hooks.
+ */
+export declare const resolveMiddleware: (middleware: readonly Middleware[], runInContext: <R>(fn: () => R) => R, onCreate: (instance: unknown) => void) => Step[];
+/**
+ * Wraps `handler` with the middleware steps, first one outermost.
+ * Errors of middleware go to `onError`, which builds the response.
+ */
+export declare const withMiddleware: <R extends Request>(steps: readonly Step[], handler: (req: R) => Response | Promise<Response>, onError: (error: unknown, req: Request) => Response) => ((req: R) => Promise<Response>);
+/**
+ * Applies middleware to every native route and to the fallback of a compiled table.
+ * Without middleware, the table is returned unchanged: no wrapper on the request path.
+ */
+export declare const applyMiddleware: (steps: readonly Step[], routes: Record<string, NativeHandler>, fetch: (req: Request) => Response | Promise<Response>, onError: (error: unknown, req: Request) => Response) => {
+    routes: Record<string, NativeHandler>;
+    fetch: (req: Request) => Response | Promise<Response>;
+};
+export {};
+//# sourceMappingURL=middleware.d.ts.map

package/dist/http/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/http/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAExD,0DAA0D;AAC1D,MAAM,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE1C,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC5D;AAED,iFAAiF;AACjF,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE3F,iCAAiC;AACjC,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,cAAc,CAAC,GAAG,cAAc,GAAG,kBAAkB,CAAA;AAE1F,KAAK,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAWtE;;;GAGG;AACH,eAAO,MAAM,iBAAiB,eAChB,SAAS,UAAU,EAAE,gBACnB,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,YACzB,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,KACpC,IAAI,EAqBN,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,cAAc,GAAI,CAAC,SAAS,OAAO,SACvC,SAAS,IAAI,EAAE,WACb,CAAC,GAAG,EAAE,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,WACxC,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,QAAQ,KAClD,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAShC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,UACnB,SAAS,IAAI,EAAE,UACd,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,SAC9B,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,WAC5C,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,QAAQ,KAClD;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAYhG,CAAA"}

package/dist/http/middleware.js

@@ -0,0 +1,83 @@
+/**
+ * @module
+ * Application middleware: runs around every request, before routing.
+ *
+ * Unlike guards and interceptors, which belong to a route, middleware sees
+ * every request: unknown paths (404), wrong methods (405), CORS preflights.
+ * That is where CORS, request ids, access logs or compression belong.
+ *
+ * ```ts
+ * const requestId: MiddlewareFunction = async (req, next) => {
+ *   const response = await next()
+ *
+ *   response.headers.set('x-request-id', crypto.randomUUID())
+ *
+ *   return response
+ * }
+ *
+ * await createApp(AppModule, { middleware: [cors({ origin: 'https://app.example.com' }), requestId] })
+ * ```
+ *
+ * As guards: a class is created once by the container (root module) and gets
+ * lifecycle hooks, a function runs where `inject()` works, an instance is used as is.
+ */
+/** Runs a step, turning a synchronous throw into a rejection. */
+const settle = (step) => {
+    try {
+        return Promise.resolve(step());
+    }
+    catch (error) {
+        return Promise.reject(error);
+    }
+};
+/**
+ * Turns middleware declarations into steps. Classes are created now, inside
+ * `runInContext`, and passed to `onCreate` for their lifecycle hooks.
+ */
+export const resolveMiddleware = (middleware, runInContext, onCreate) => {
+    const steps = [];
+    for (const entry of middleware) {
+        if (typeof entry === 'function' && typeof entry.prototype?.use === 'function') {
+            const instance = runInContext(() => new entry());
+            onCreate(instance);
+            steps.push((req, next) => instance.use(req, next));
+        }
+        else if (typeof entry === 'function') {
+            const fn = entry;
+            steps.push((req, next) => runInContext(() => fn(req, next)));
+        }
+        else if (typeof entry === 'object' && entry !== null && typeof entry.use === 'function') {
+            steps.push((req, next) => entry.use(req, next));
+        }
+        else {
+            throw new TypeError(`Invalid middleware: ${String(entry)} is neither a function nor an object with use()`);
+        }
+    }
+    return steps;
+};
+/**
+ * Wraps `handler` with the middleware steps, first one outermost.
+ * Errors of middleware go to `onError`, which builds the response.
+ */
+export const withMiddleware = (steps, handler, onError) => {
+    const count = steps.length;
+    return (req) => {
+        const call = (index) => index === count ? settle(() => handler(req)) : settle(() => steps[index](req, () => call(index + 1)));
+        return call(0).catch((error) => onError(error, req));
+    };
+};
+/**
+ * Applies middleware to every native route and to the fallback of a compiled table.
+ * Without middleware, the table is returned unchanged: no wrapper on the request path.
+ */
+export const applyMiddleware = (steps, routes, fetch, onError) => {
+    if (steps.length === 0) {
+        return { routes, fetch };
+    }
+    const wrapped = {};
+    for (const key of Object.keys(routes)) {
+        wrapped[key] = withMiddleware(steps, routes[key], onError);
+    }
+    return { routes: wrapped, fetch: withMiddleware(steps, fetch, onError) };
+};
+//# sourceMappingURL=middleware.js.map

package/dist/http/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/http/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAqBH,iEAAiE;AACjE,MAAM,MAAM,GAAG,CAAC,IAAwC,EAAqB,EAAE;IAC7E,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,UAAiC,EACjC,YAAmC,EACnC,QAAqC,EAC7B,EAAE;IACV,MAAM,KAAK,GAAW,EAAE,CAAA;IAExB,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAQ,KAAK,CAAC,SAAiD,EAAE,GAAG,KAAK,UAAU,EAAE,CAAC;YACvH,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,IAAK,KAAqC,EAAE,CAAC,CAAA;YAEjF,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAClB,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;QACpD,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YACvC,MAAM,EAAE,GAAG,KAA2B,CAAA;YAEtC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9D,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;YAC1F,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,SAAS,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAA;QAC5G,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAsB,EACtB,OAAiD,EACjD,OAAmD,EAClB,EAAE;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAA;IAE1B,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,CAAC,KAAa,EAAqB,EAAE,CAChD,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAExG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;IAC/D,CAAC,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAAsB,EACtB,MAAqC,EACrC,KAAqD,EACrD,OAAmD,EAC+C,EAAE;IACpG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAC1B,CAAC;IAED,MAAM,OAAO,GAAkC,EAAE,CAAA;IAEjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAE,EAAE,OAAO,CAAC,CAAA;IAC7D,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAA;AAC1E,CAAC,CAAA"}

package/dist/http/parsers.d.ts

@@ -10,6 +10,7 @@
  * ctx.query('page', int({ optional: true }))  // number | undefined
  * ```
  */
+import { BadRequestException } from './exceptions.ts';
 import type { InferOutput, StandardSchemaV1 } from './schema.ts';
 /**
  * Turns a raw string (`undefined` when absent) into a value, or throws an `HttpException`.
@@ -28,6 +29,8 @@ export interface ParserOptions {
 type Result<T, O extends ParserOptions> = O extends {
     readonly optional: true;
 } ? T | undefined : T;
+/** The `400` of a value that is missing or not what a parser expects. */
+export declare const failure: (name: string, expected: string) => BadRequestException;
 /**
  * Integer within `Number.MAX_SAFE_INTEGER`. Unlike Nest's `ParseIntPipe`,
  * `'99999999999999999999'` is rejected instead of being silently rounded.

package/dist/http/parsers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers.d.ts","sourceRoot":"","sources":["../../src/http/parsers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEhE;;GAEG;AACH,MAAM,WAAW,MAAM,CAAC,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC,CAAA;CAC/D;AAED,0EAA0E;AAC1E,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC,CAAC,CAAA;AAEhF,8BAA8B;AAC9B,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,gBAAgB,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;AAE3G,MAAM,WAAW,aAAa;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,SAAS,aAAa,IAAI,CAAC,SAAS;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAA;AAiCnG;;;GAGG;AACH,eAAO,MAAM,GAAG,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAS9D,CAAA;AAEhC,uDAAuD;AACvD,eAAO,MAAM,MAAM,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CASjE,CAAA;AAEhC,6BAA6B;AAC7B,eAAO,MAAM,OAAO,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAGhG,CAAA;AAEH,6CAA6C;AAC7C,eAAO,MAAM,IAAI,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAC6B,CAAA;AAE5H;;GAEG;AACH,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,MAAM,GAAG,SAAS,QAAQ,MAAM,KAAG,MAAM,CAAC,CAAC,CACK,CAAA"}
+{"version":3,"file":"parsers.d.ts","sourceRoot":"","sources":["../../src/http/parsers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEhE;;GAEG;AACH,MAAM,WAAW,MAAM,CAAC,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC,CAAA;CAC/D;AAED,0EAA0E;AAC1E,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC,CAAC,CAAA;AAEhF,8BAA8B;AAC9B,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,gBAAgB,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;AAE3G,MAAM,WAAW,aAAa;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,SAAS,aAAa,IAAI,CAAC,SAAS;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAA;AAMnG,yEAAyE;AACzE,eAAO,MAAM,OAAO,SAAU,MAAM,YAAY,MAAM,KAAG,mBAC6B,CAAA;AA0BtF;;;GAGG;AACH,eAAO,MAAM,GAAG,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAS9D,CAAA;AAEhC,uDAAuD;AACvD,eAAO,MAAM,MAAM,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CASjE,CAAA;AAEhC,6BAA6B;AAC7B,eAAO,MAAM,OAAO,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAGhG,CAAA;AAEH,6CAA6C;AAC7C,eAAO,MAAM,IAAI,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,YAAY,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAC6B,CAAA;AAE5H;;GAEG;AACH,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,MAAM,GAAG,SAAS,QAAQ,MAAM,KAAG,MAAM,CAAC,CAAC,CACK,CAAA"}

package/dist/http/parsers.js

@@ -15,7 +15,8 @@ import { isStandardSchema, validateSync } from './schema.js';
 const INTEGER = /^-?\d+$/;
 const NUMBER = /^-?(?:\d+\.?\d*|\.\d+)(?:[eE][-+]?\d+)?$/;
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-const failure = (name, expected) => new BadRequestException(`Validation failed for "${name}" (${expected} is expected)`);
+/** The `400` of a value that is missing or not what a parser expects. */
+export const failure = (name, expected) => new BadRequestException(`Validation failed for "${name}" (${expected} is expected)`);
 const createParser = (expected, convert, options) => ({
     parse: (value, name) => {
         if (value === undefined) {

package/dist/http/parsers.js.map

@@ -1 +1 @@
-{"version":3,"file":"parsers.js","sourceRoot":"","sources":["../../src/http/parsers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAuB5D,MAAM,OAAO,GAAG,SAAS,CAAA;AACzB,MAAM,MAAM,GAAG,0CAA0C,CAAA;AACzD,MAAM,IAAI,GAAG,iEAAiE,CAAA;AAE9E,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAuB,EAAE,CACtE,IAAI,mBAAmB,CAAC,0BAA0B,IAAI,MAAM,QAAQ,eAAe,CAAC,CAAA;AAEtF,MAAM,YAAY,GAAG,CACnB,QAAgB,EAChB,OAAyC,EACzC,OAAsB,EACC,EAAE,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC/B,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAEhC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC/B,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,CAAqC,OAAW,EAA6B,EAAE,CAChG,YAAY,CACV,gBAAgB,EAChB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;IAE/D,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC,EACD,OAAO,IAAI,EAAE,CACe,CAAA;AAEhC,uDAAuD;AACvD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAqC,OAAW,EAA6B,EAAE,CACnG,YAAY,CACV,gBAAgB,EAChB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;IAE9D,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AACrD,CAAC,EACD,OAAO,IAAI,EAAE,CACe,CAAA;AAEhC,6BAA6B;AAC7B,MAAM,CAAC,MAAM,OAAO,GAAG,CAAqC,OAAW,EAA8B,EAAE,CACrG,YAAY,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,IAAI,EAAE,CAEzH,CAAA;AAEH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,IAAI,GAAG,CAAqC,OAAW,EAA6B,EAAE,CACjG,YAAY,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,IAAI,EAAE,CAA8B,CAAA;AAE5H;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAiC,MAAS,EAAE,KAAyB,EAAE,IAAY,EAAa,EAAE,CAC3H,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,MAA0B,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAc,CAAA"}
+{"version":3,"file":"parsers.js","sourceRoot":"","sources":["../../src/http/parsers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAuB5D,MAAM,OAAO,GAAG,SAAS,CAAA;AACzB,MAAM,MAAM,GAAG,0CAA0C,CAAA;AACzD,MAAM,IAAI,GAAG,iEAAiE,CAAA;AAE9E,yEAAyE;AACzE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAuB,EAAE,CAC7E,IAAI,mBAAmB,CAAC,0BAA0B,IAAI,MAAM,QAAQ,eAAe,CAAC,CAAA;AAEtF,MAAM,YAAY,GAAG,CACnB,QAAgB,EAChB,OAAyC,EACzC,OAAsB,EACC,EAAE,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC9B,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC/B,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAEhC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC/B,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,CAAqC,OAAW,EAA6B,EAAE,CAChG,YAAY,CACV,gBAAgB,EAChB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;IAE/D,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC,EACD,OAAO,IAAI,EAAE,CACe,CAAA;AAEhC,uDAAuD;AACvD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAqC,OAAW,EAA6B,EAAE,CACnG,YAAY,CACV,gBAAgB,EAChB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;IAE9D,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AACrD,CAAC,EACD,OAAO,IAAI,EAAE,CACe,CAAA;AAEhC,6BAA6B;AAC7B,MAAM,CAAC,MAAM,OAAO,GAAG,CAAqC,OAAW,EAA8B,EAAE,CACrG,YAAY,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,IAAI,EAAE,CAEzH,CAAA;AAEH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,IAAI,GAAG,CAAqC,OAAW,EAA6B,EAAE,CACjG,YAAY,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,IAAI,EAAE,CAA8B,CAAA;AAE5H;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAiC,MAAS,EAAE,KAAyB,EAAE,IAAY,EAAa,EAAE,CAC3H,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,MAA0B,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAc,CAAA"}

package/dist/index.d.ts

@@ -33,5 +33,6 @@
 export * from './app/index.ts';
 export * from './di/index.ts';
 export * from './http/index.ts';
+export * from './logger/index.ts';
 export * from './routing/index.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA"}

package/dist/index.js

@@ -33,5 +33,6 @@
 export * from './app/index.js';
 export * from './di/index.js';
 export * from './http/index.js';
+export * from './logger/index.js';
 export * from './routing/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA"}

package/dist/jwt/algorithms.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @module
+ * JWS algorithms (RFC 7518) on WebCrypto, and the keys they take.
+ */
+import type { webcrypto } from 'node:crypto';
+/** Algorithms a token can be signed with. `none` is not one of them. */
+export type JwtAlgorithm = 'HS256' | 'HS384' | 'HS512' | 'RS256' | 'RS384' | 'RS512' | 'PS256' | 'PS384' | 'PS512' | 'ES256' | 'ES384' | 'ES512' | 'EdDSA';
+/**
+ * A key: a `CryptoKey`, a JWK, a PEM string (`PRIVATE KEY` in PKCS #8 or
+ * `PUBLIC KEY` in SPKI), or the secret of an HMAC algorithm.
+ */
+export type JwtKey = CryptoKey | webcrypto.JsonWebKey | string;
+export declare const isJwtAlgorithm: (value: unknown) => value is JwtAlgorithm;
+export declare const isHmac: (algorithm: JwtAlgorithm) => boolean;
+/** Imports `key` once for `usage` with `algorithm`. */
+export declare const importKey: (key: JwtKey, algorithm: JwtAlgorithm, usage: 'sign' | 'verify') => Promise<CryptoKey>;
+export declare const signBytes: (algorithm: JwtAlgorithm, key: CryptoKey, data: Uint8Array<ArrayBuffer>) => Promise<Uint8Array<ArrayBuffer>>;
+export declare const verifyBytes: (algorithm: JwtAlgorithm, key: CryptoKey, signature: Uint8Array<ArrayBuffer>, data: Uint8Array<ArrayBuffer>) => Promise<boolean>;
+//# sourceMappingURL=algorithms.d.ts.map

package/dist/jwt/algorithms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"algorithms.d.ts","sourceRoot":"","sources":["../../src/jwt/algorithms.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE5C,wEAAwE;AACxE,MAAM,MAAM,YAAY,GACpB,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,CAAA;AAEX;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC,UAAU,GAAG,MAAM,CAAA;AAwC9D,eAAO,MAAM,cAAc,UAAW,OAAO,KAAG,KAAK,IAAI,YAA6E,CAAA;AAEtI,eAAO,MAAM,MAAM,cAAe,YAAY,KAAG,OAAqC,CAAA;AAKtF,uDAAuD;AACvD,eAAO,MAAM,SAAS,QAAe,MAAM,aAAa,YAAY,SAAS,MAAM,GAAG,QAAQ,KAAG,OAAO,CAAC,SAAS,CA2BjH,CAAA;AAED,eAAO,MAAM,SAAS,cAAqB,YAAY,OAAO,SAAS,QAAQ,UAAU,CAAC,WAAW,CAAC,KAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CACvD,CAAA;AAEjF,eAAO,MAAM,WAAW,cACX,YAAY,OAClB,SAAS,aACH,UAAU,CAAC,WAAW,CAAC,QAC5B,UAAU,CAAC,WAAW,CAAC,KAC5B,OAAO,CAAC,OAAO,CAA2E,CAAA"}

package/dist/jwt/algorithms.js

@@ -0,0 +1,60 @@
+/**
+ * @module
+ * JWS algorithms (RFC 7518) on WebCrypto, and the keys they take.
+ */
+/** Import parameters, and the signing parameters where they differ. */
+const ALGORITHMS = {
+    HS256: hmac('SHA-256'),
+    HS384: hmac('SHA-384'),
+    HS512: hmac('SHA-512'),
+    RS256: rsa('RSASSA-PKCS1-v1_5', 'SHA-256'),
+    RS384: rsa('RSASSA-PKCS1-v1_5', 'SHA-384'),
+    RS512: rsa('RSASSA-PKCS1-v1_5', 'SHA-512'),
+    PS256: pss('SHA-256', 32),
+    PS384: pss('SHA-384', 48),
+    PS512: pss('SHA-512', 64),
+    ES256: ecdsa('P-256', 'SHA-256'),
+    ES384: ecdsa('P-384', 'SHA-384'),
+    ES512: ecdsa('P-521', 'SHA-512'),
+    EdDSA: { key: { name: 'Ed25519' }, sign: { name: 'Ed25519' } },
+};
+function hmac(hash) {
+    const params = { name: 'HMAC', hash };
+    return { key: params, sign: params };
+}
+function rsa(name, hash) {
+    return { key: { name, hash }, sign: { name } };
+}
+function pss(hash, saltLength) {
+    return { key: { name: 'RSA-PSS', hash }, sign: { name: 'RSA-PSS', saltLength } };
+}
+function ecdsa(namedCurve, hash) {
+    return { key: { name: 'ECDSA', namedCurve }, sign: { name: 'ECDSA', hash } };
+}
+export const isJwtAlgorithm = (value) => typeof value === 'string' && Object.hasOwn(ALGORITHMS, value);
+export const isHmac = (algorithm) => algorithm.startsWith('HS');
+const pemBody = (pem) => Uint8Array.fromBase64(pem.replace(/-----(?:BEGIN|END) [A-Z ]+-----/g, '').replace(/\s/g, ''));
+/** Imports `key` once for `usage` with `algorithm`. */
+export const importKey = async (key, algorithm, usage) => {
+    const params = ALGORITHMS[algorithm].key;
+    if (key instanceof CryptoKey) {
+        return key;
+    }
+    if (typeof key === 'object') {
+        return crypto.subtle.importKey('jwk', key, params, false, [usage]);
+    }
+    if (isHmac(algorithm)) {
+        return crypto.subtle.importKey('raw', new TextEncoder().encode(key), params, false, [usage]);
+    }
+    if (key.includes('-----BEGIN PRIVATE KEY-----') && usage === 'sign') {
+        return crypto.subtle.importKey('pkcs8', pemBody(key), params, false, [usage]);
+    }
+    if (key.includes('-----BEGIN PUBLIC KEY-----') && usage === 'verify') {
+        return crypto.subtle.importKey('spki', pemBody(key), params, false, [usage]);
+    }
+    throw new TypeError(`A ${algorithm} key must be a CryptoKey, a JWK or a PEM string: ` +
+        (usage === 'sign' ? 'a PKCS #8 "PRIVATE KEY" to sign' : 'an SPKI "PUBLIC KEY" to verify'));
+};
+export const signBytes = async (algorithm, key, data) => new Uint8Array(await crypto.subtle.sign(ALGORITHMS[algorithm].sign, key, data));
+export const verifyBytes = (algorithm, key, signature, data) => crypto.subtle.verify(ALGORITHMS[algorithm].sign, key, signature, data);
+//# sourceMappingURL=algorithms.js.map

package/dist/jwt/algorithms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"algorithms.js","sourceRoot":"","sources":["../../src/jwt/algorithms.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA6BH,uEAAuE;AACvE,MAAM,UAAU,GAA2F;IACzG,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;IACtB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;IACtB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;IACtB,KAAK,EAAE,GAAG,CAAC,mBAAmB,EAAE,SAAS,CAAC;IAC1C,KAAK,EAAE,GAAG,CAAC,mBAAmB,EAAE,SAAS,CAAC;IAC1C,KAAK,EAAE,GAAG,CAAC,mBAAmB,EAAE,SAAS,CAAC;IAC1C,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;IACzB,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;IACzB,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;IACzB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;IAChC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;IAChC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;IAChC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;CAC/D,CAAA;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAErC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACtC,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY;IACrC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAA;AAChD,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,UAAkB;IAC3C,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAA;AAClF,CAAC;AAED,SAAS,KAAK,CAAC,UAAkB,EAAE,IAAY;IAC7C,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAA;AAC9E,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;AAEtI,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,SAAuB,EAAW,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;AAEtF,MAAM,OAAO,GAAG,CAAC,GAAW,EAA2B,EAAE,CACvD,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;AAE/F,uDAAuD;AACvD,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,GAAW,EAAE,SAAuB,EAAE,KAAwB,EAAsB,EAAE;IACpH,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAA;IAExC,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IACpE,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9F,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACpE,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAC/E,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,IAAI,SAAS,CACjB,KAAK,SAAS,mDAAmD;QAC/D,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAC5F,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,SAAuB,EAAE,GAAc,EAAE,IAA6B,EAAoC,EAAE,CAC1I,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;AAEjF,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,SAAuB,EACvB,GAAc,EACd,SAAkC,EAClC,IAA6B,EACX,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA"}

package/dist/jwt/errors.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @module
+ * Why a token was refused.
+ */
+export type JwtErrorCode = 
+/** Not three base64url parts holding JSON objects. */
+'malformed'
+/** Signed with another algorithm than the one configured, or with critical extensions. */
+ | 'algorithm'
+/** The signature does not match. */
+ | 'signature'
+/** `exp` is past. */
+ | 'expired'
+/** `nbf` is still to come. */
+ | 'not-active'
+/** A registered claim has the wrong type, or `iss` or `aud` is not the expected one. */
+ | 'claims';
+/** A token that `JwtService.verify()` refused. */
+export declare class JwtError extends Error {
+    readonly code: JwtErrorCode;
+    readonly name = "JwtError";
+    constructor(code: JwtErrorCode, message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/jwt/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/jwt/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,YAAY;AACtB,sDAAsD;AACpD,WAAW;AACb,0FAA0F;GACxF,WAAW;AACb,oCAAoC;GAClC,WAAW;AACb,qBAAqB;GACnB,SAAS;AACX,8BAA8B;GAC5B,YAAY;AACd,wFAAwF;GACtF,QAAQ,CAAA;AAEZ,kDAAkD;AAClD,qBAAa,QAAS,SAAQ,KAAK;IAI/B,QAAQ,CAAC,IAAI,EAAE,YAAY;IAH7B,SAAkB,IAAI,cAAa;IAEnC,YACW,IAAI,EAAE,YAAY,EAC3B,OAAO,EAAE,MAAM,EAGhB;CACF"}

package/dist/jwt/errors.js

@@ -0,0 +1,14 @@
+/**
+ * @module
+ * Why a token was refused.
+ */
+/** A token that `JwtService.verify()` refused. */
+export class JwtError extends Error {
+    code;
+    name = 'JwtError';
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/jwt/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/jwt/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,kDAAkD;AAClD,MAAM,OAAO,QAAS,SAAQ,KAAK;IAItB,IAAI;IAHG,IAAI,GAAG,UAAU,CAAA;IAEnC,YACW,IAAkB,EAC3B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;oBAHL,IAAI;IAIf,CAAC;CACF"}

package/dist/jwt/guard.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @module
+ * `JwtGuard`: lets in requests carrying a valid token, the way
+ * `AuthGuard('jwt')` of `@nestjs/passport` does.
+ */
+import type { Context } from '../http/context.ts';
+import { ContextKey } from '../http/context-key.ts';
+import type { CanActivate } from '../http/enhancers.ts';
+import type { JwtPayload } from './service.ts';
+/** Payload of the token `JwtGuard` accepted: `ctx.get(JWT_PAYLOAD)` or `value(JWT_PAYLOAD)`. */
+export declare const JWT_PAYLOAD: ContextKey<JwtPayload>;
+/**
+ * Accepts a request whose token `JwtService` verifies, read from
+ * `Authorization: Bearer <token>` or, without that header, from the cookie
+ * named by the `cookie` option of `JwtModule`. The payload goes to
+ * {@link JWT_PAYLOAD}; anything else is a `401`.
+ *
+ * ```ts
+ * @Get('me', [value(JWT_PAYLOAD)])
+ * @UseGuards(JwtGuard)
+ * me(payload: JwtPayload) {}
+ * ```
+ *
+ * Needs `JwtModule` imported in the controller's module, or registered as global.
+ */
+export declare class JwtGuard implements CanActivate {
+    #private;
+    canActivate(ctx: Context): Promise<boolean>;
+}
+//# sourceMappingURL=guard.d.ts.map

package/dist/jwt/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/jwt/guard.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAKvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAE9C,gGAAgG;AAChG,eAAO,MAAM,WAAW,wBAA2C,CAAA;AAQnE;;;;;;;;;;;;;GAaG;AACH,qBAAa,QAAS,YAAW,WAAW;;IAIpC,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CA6BhD;CACF"}