@kamod-ch/otok-flash 2.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Kamod
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,73 @@
+# @kamod-ch/otok-flash
+
+Signed one-time flash cookies for [Otok](https://github.com/kamod-ch/otok) PRG flows.
+
+Show SSR toasts after `redirect()` without client JavaScript or session storage.
+
+## Install
+
+```bash
+pnpm add @kamod-ch/otok-flash hono @kamod-ch/otok
+```
+
+## Action → redirect
+
+```ts
+import { flashRedirect, flashSuccess } from "@kamod-ch/otok-flash";
+import { flashConfig } from "../features/flash.js";
+
+export async function action({ hono }: OtokActionContext) {
+  await save();
+  flashRedirect("/items", flashSuccess("Gespeichert"), hono, flashConfig);
+}
+```
+
+## Loader or middleware → display
+
+```ts
+import { consumeFlash } from "@kamod-ch/otok-flash";
+import { flashConfig } from "../features/flash.js";
+
+export async function loader({ hono }) {
+  return {
+    flash: consumeFlash(hono, flashConfig),
+  };
+}
+```
+
+Or globally:
+
+```ts
+import { createFlashMiddleware } from "@kamod-ch/otok-flash/middleware";
+
+export default createFlashMiddleware({
+  secret: process.env.FLASH_SECRET!,
+  contextKey: "flash",
+});
+```
+
+Then read `hono.get("flash")` in loaders/components.
+
+## API
+
+| Export | Purpose |
+|--------|---------|
+| `setFlash(c, message, config)` | Set signed flash cookie |
+| `consumeFlash(c, config)` | Read + clear cookie |
+| `flashRedirect(location, message, c, config)` | Set flash and `redirect()` |
+| `flashSuccess` / `flashError` / … | Message helpers |
+| `createFlashMiddleware(config)` | Auto-consume on GET requests |
+
+Flash cookies are `httpOnly`, signed with HMAC-SHA256, and expire after `maxAgeSeconds` (default 120).
+
+## App config helper
+
+```ts
+export const flashConfig = {
+  secret: process.env.FLASH_SECRET ?? "dev-only-change-me",
+  cookieName: "app_flash",
+  secure: () => process.env.NODE_ENV === "production",
+};
+```
+
+Use a strong secret in production.

package/dist/flash.d.ts

@@ -0,0 +1,13 @@
+import type { Context } from "hono";
+import { DEFAULT_FLASH_COOKIE, type FlashConfig, type FlashMessage, type FlashType } from "./types.js";
+export declare function clearFlash(c: Context, config?: Pick<FlashConfig, "cookieName" | "path">): void;
+export declare function setFlash(c: Context, input: FlashMessage | string, config: FlashConfig): void;
+export declare function consumeFlash(c: Context, config: FlashConfig): FlashMessage | undefined;
+export declare function flashRedirect(location: string, input: FlashMessage | string, c: Context, config: FlashConfig, status?: 302 | 303): never;
+export declare function createFlashType(type: FlashType): (message: string) => FlashMessage;
+export declare const flashSuccess: (message: string) => FlashMessage;
+export declare const flashError: (message: string) => FlashMessage;
+export declare const flashWarning: (message: string) => FlashMessage;
+export declare const flashInfo: (message: string) => FlashMessage;
+export { DEFAULT_FLASH_COOKIE, type FlashConfig, type FlashMessage, type FlashType };
+//# sourceMappingURL=flash.d.ts.map

package/dist/flash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flash.d.ts","sourceRoot":"","sources":["../src/flash.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAIpC,OAAO,EACL,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,YAAY,EAEjB,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAoCpB,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,GAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,MAAM,CAAM,GAAG,IAAI,CAOlG;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI,CAW5F;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,SAAS,CAwBtF;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,GAAG,MAAM,EAC5B,CAAC,EAAE,OAAO,EACV,MAAM,EAAE,WAAW,EACnB,MAAM,GAAE,GAAG,GAAG,GAAS,GACtB,KAAK,CAGP;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,IACrC,SAAS,MAAM,KAAG,YAAY,CACvC;AAED,eAAO,MAAM,YAAY,YAHN,MAAM,KAAG,YAG0B,CAAC;AACvD,eAAO,MAAM,UAAU,YAJJ,MAAM,KAAG,YAIsB,CAAC;AACnD,eAAO,MAAM,YAAY,YALN,MAAM,KAAG,YAK0B,CAAC;AACvD,eAAO,MAAM,SAAS,YANH,MAAM,KAAG,YAMoB,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,CAAC"}

package/dist/flash.js

@@ -0,0 +1,92 @@
+import { getCookie, setCookie } from "hono/cookie";
+import { redirect } from "@kamod-ch/otok/server";
+import { seal, unseal } from "./sign.js";
+import { DEFAULT_FLASH_COOKIE, } from "./types.js";
+function resolveSecure(c, secure) {
+    if (typeof secure === "function")
+        return secure(c);
+    if (typeof secure === "boolean")
+        return secure;
+    return process.env.NODE_ENV === "production";
+}
+function resolveConfig(config) {
+    return {
+        secret: config.secret,
+        cookieName: config.cookieName ?? DEFAULT_FLASH_COOKIE,
+        maxAgeSeconds: config.maxAgeSeconds ?? 120,
+        sameSite: config.sameSite ?? "Lax",
+        path: config.path ?? "/",
+        secure: config.secure,
+        contextKey: config.contextKey ?? "flash",
+    };
+}
+function normalizeFlash(input) {
+    return typeof input === "string" ? { message: input, type: "info" } : input;
+}
+function writeFlashCookie(c, payload, config) {
+    const resolved = resolveConfig(config);
+    const token = seal(JSON.stringify(payload), resolved.secret);
+    setCookie(c, resolved.cookieName, token, {
+        httpOnly: true,
+        sameSite: resolved.sameSite,
+        path: resolved.path,
+        secure: resolveSecure(c, resolved.secure),
+        maxAge: resolved.maxAgeSeconds,
+    });
+}
+export function clearFlash(c, config = {}) {
+    const cookieName = config.cookieName ?? DEFAULT_FLASH_COOKIE;
+    setCookie(c, cookieName, "", {
+        httpOnly: true,
+        path: config.path ?? "/",
+        maxAge: 0,
+    });
+}
+export function setFlash(c, input, config) {
+    const flash = normalizeFlash(input);
+    writeFlashCookie(c, {
+        message: flash.message,
+        type: flash.type ?? "info",
+        iat: Date.now(),
+    }, config);
+}
+export function consumeFlash(c, config) {
+    const resolved = resolveConfig(config);
+    const token = getCookie(c, resolved.cookieName);
+    clearFlash(c, { cookieName: resolved.cookieName, path: resolved.path });
+    if (!token)
+        return undefined;
+    const raw = unseal(token, resolved.secret);
+    if (!raw)
+        return undefined;
+    let payload;
+    try {
+        payload = JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (!payload.message || typeof payload.message !== "string")
+        return undefined;
+    if (typeof payload.iat !== "number")
+        return undefined;
+    if (Date.now() - payload.iat > resolved.maxAgeSeconds * 1000)
+        return undefined;
+    return {
+        message: payload.message,
+        type: payload.type,
+    };
+}
+export function flashRedirect(location, input, c, config, status = 303) {
+    setFlash(c, input, config);
+    redirect(location, status);
+}
+export function createFlashType(type) {
+    return (message) => ({ message, type });
+}
+export const flashSuccess = createFlashType("success");
+export const flashError = createFlashType("error");
+export const flashWarning = createFlashType("warning");
+export const flashInfo = createFlashType("info");
+export { DEFAULT_FLASH_COOKIE };
+//# sourceMappingURL=flash.js.map

package/dist/flash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flash.js","sourceRoot":"","sources":["../src/flash.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EACL,oBAAoB,GAKrB,MAAM,YAAY,CAAC;AAEpB,SAAS,aAAa,CAAC,CAAU,EAAE,MAA4C;IAC7E,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB;IACxC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,oBAAoB;QACrD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,GAAG;QAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;QAClC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,GAAG;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,OAAO;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAA4B;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU,EAAE,OAAqB,EAAE,MAAmB;IAC9E,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7D,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE;QACvC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,QAAQ,CAAC,aAAa;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAU,EAAE,SAAmD,EAAE;IAC1F,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC7D,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;QAC3B,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,GAAG;QACxB,MAAM,EAAE,CAAC;KACV,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAU,EAAE,KAA4B,EAAE,MAAmB;IACpF,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACpC,gBAAgB,CACd,CAAC,EACD;QACE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,MAAM;QAC1B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;KAChB,EACD,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAU,EAAE,MAAmB;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChD,UAAU,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9E,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,aAAa,GAAG,IAAI;QAAE,OAAO,SAAS,CAAC;IAE/E,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,KAA4B,EAC5B,CAAU,EACV,MAAmB,EACnB,SAAoB,GAAG;IAEvB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAe;IAC7C,OAAO,CAAC,OAAe,EAAgB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAuD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { clearFlash, consumeFlash, createFlashType, DEFAULT_FLASH_COOKIE, flashError, flashInfo, flashRedirect, flashSuccess, flashWarning, setFlash, type FlashConfig, type FlashMessage, type FlashType, } from "./flash.js";
+export { createFlashMiddleware, readFlash, type FlashMiddlewareOptions } from "./middleware.js";
+export { seal, unseal } from "./sign.js";
+export { default } from "./plugin.js";
+export type { FlashPluginOptions } from "./plugin.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,UAAU,EACV,SAAS,EACT,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,SAAS,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { clearFlash, consumeFlash, createFlashType, DEFAULT_FLASH_COOKIE, flashError, flashInfo, flashRedirect, flashSuccess, flashWarning, setFlash, } from "./flash.js";
+export { createFlashMiddleware, readFlash } from "./middleware.js";
+export { seal, unseal } from "./sign.js";
+export { default } from "./plugin.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,UAAU,EACV,SAAS,EACT,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,QAAQ,GAIT,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA+B,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/middleware.d.ts

@@ -0,0 +1,12 @@
+import type { Context } from "hono";
+import { type OtokMiddleware } from "@kamod-ch/otok/server";
+import { consumeFlash } from "./flash.js";
+import type { FlashConfig } from "./types.js";
+export interface FlashMiddlewareOptions extends FlashConfig {
+    /** When false, leaves flash on the cookie for a later loader. Default: true. */
+    consume?: boolean;
+    onFlash?: (c: Context, flash: NonNullable<ReturnType<typeof consumeFlash>>) => void;
+}
+export declare function createFlashMiddleware(options: FlashMiddlewareOptions): OtokMiddleware;
+export declare function readFlash(c: Context, contextKey?: string): ReturnType<typeof consumeFlash> | undefined;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,sBAAuB,SAAQ,WAAW;IACzD,gFAAgF;IAChF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC;CACrF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,cAAc,CAcrF;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,SAAU,GAC5B,UAAU,CAAC,OAAO,YAAY,CAAC,GAAG,SAAS,CACxE"}

package/dist/middleware.js

@@ -0,0 +1,20 @@
+import { defineMiddleware } from "@kamod-ch/otok/server";
+import { consumeFlash } from "./flash.js";
+export function createFlashMiddleware(options) {
+    const consume = options.consume ?? true;
+    const contextKey = options.contextKey ?? "flash";
+    return defineMiddleware(async (c, next) => {
+        if (consume) {
+            const flash = consumeFlash(c, options);
+            if (flash) {
+                c.set(contextKey, flash);
+                options.onFlash?.(c, flash);
+            }
+        }
+        await next();
+    });
+}
+export function readFlash(c, contextKey = "flash") {
+    return c.get(contextKey);
+}
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAuB,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAS1C,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC;IAEjD,OAAO,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACvC,IAAI,KAAK,EAAE,CAAC;gBACV,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACzB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAU,EAAE,UAAU,GAAG,OAAO;IACxD,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAgD,CAAC;AAC1E,CAAC"}

package/dist/plugin.d.ts

@@ -0,0 +1,15 @@
+import { type FlashMiddlewareOptions } from "./middleware.js";
+export type FlashPluginOptions = FlashMiddlewareOptions;
+/**
+ * Otok flash plugin — mounts signed flash-cookie middleware on the Hono app.
+ *
+ * ```ts
+ * import flash from "@kamod-ch/otok-flash";
+ *
+ * export default defineConfig({
+ *   plugins: [flash({ secret: process.env.FLASH_SECRET! })],
+ * });
+ * ```
+ */
+export default function flash(options: FlashPluginOptions): import("@kamod-ch/otok-config").OtokPlugin<unknown>;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,KAAK,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAErF,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAmBxD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,OAAO,UAAU,KAAK,CAAC,OAAO,EAAE,kBAAkB,uDAMxD"}

package/dist/plugin.js

@@ -0,0 +1,37 @@
+import { definePlugin } from "@kamod-ch/otok";
+import { createFlashMiddleware } from "./middleware.js";
+const flashPluginFactory = definePlugin({
+    name: "@kamod-ch/otok-flash",
+    version: "1.0.0",
+    schema: {
+        parse(input) {
+            if (!input || typeof input !== "object") {
+                throw new Error("flash() options must be an object");
+            }
+            const record = input;
+            if (typeof record.secret !== "string" || !record.secret) {
+                throw new Error("flash() requires secret: string");
+            }
+            return input;
+        },
+    },
+});
+/**
+ * Otok flash plugin — mounts signed flash-cookie middleware on the Hono app.
+ *
+ * ```ts
+ * import flash from "@kamod-ch/otok-flash";
+ *
+ * export default defineConfig({
+ *   plugins: [flash({ secret: process.env.FLASH_SECRET! })],
+ * });
+ * ```
+ */
+export default function flash(options) {
+    const plugin = flashPluginFactory(options);
+    plugin.configureApp = ({ app }) => {
+        app.use("*", createFlashMiddleware(options));
+    };
+    return plugin;
+}
+//# sourceMappingURL=plugin.js.map

package/dist/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAA+B,MAAM,iBAAiB,CAAC;AAIrF,MAAM,kBAAkB,GAAG,YAAY,CAAqB;IAC1D,IAAI,EAAE,sBAAsB;IAC5B,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE;QACN,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,KAA2B,CAAC;QACrC,CAAC;KACF;CACF,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,OAAO,UAAU,KAAK,CAAC,OAA2B;IACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QAChC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/sign.d.ts

@@ -0,0 +1,6 @@
+export declare function encodePayload(payload: string): string;
+export declare function decodePayload(encoded: string): string | null;
+export declare function signPayload(encodedPayload: string, secret: string): string;
+export declare function seal(value: string, secret: string): string;
+export declare function unseal(token: string, secret: string): string | null;
+//# sourceMappingURL=sign.d.ts.map

package/dist/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../src/sign.ts"],"names":[],"mappings":"AAEA,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5D;AAED,wBAAgB,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAcnE"}

package/dist/sign.js

@@ -0,0 +1,35 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+export function encodePayload(payload) {
+    return Buffer.from(payload, "utf8").toString("base64url");
+}
+export function decodePayload(encoded) {
+    try {
+        return Buffer.from(encoded, "base64url").toString("utf8");
+    }
+    catch {
+        return null;
+    }
+}
+export function signPayload(encodedPayload, secret) {
+    return createHmac("sha256", secret).update(encodedPayload).digest("base64url");
+}
+export function seal(value, secret) {
+    const encoded = encodePayload(value);
+    return `${encoded}.${signPayload(encoded, secret)}`;
+}
+export function unseal(token, secret) {
+    const separator = token.lastIndexOf(".");
+    if (separator <= 0)
+        return null;
+    const encoded = token.slice(0, separator);
+    const signature = token.slice(separator + 1);
+    if (!encoded || !signature)
+        return null;
+    const expected = signPayload(encoded, secret);
+    const left = Buffer.from(signature);
+    const right = Buffer.from(expected);
+    if (left.length !== right.length || !timingSafeEqual(left, right))
+        return null;
+    return decodePayload(encoded);
+}
+//# sourceMappingURL=sign.js.map

package/dist/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../src/sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,cAAsB,EAAE,MAAc;IAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,KAAa,EAAE,MAAc;IAChD,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,GAAG,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,MAAc;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAExC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/E,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,20 @@
+import type { Context } from "hono";
+export type FlashType = "info" | "success" | "error" | "warning";
+export type FlashMessage = {
+    message: string;
+    type?: FlashType;
+};
+export interface FlashConfig {
+    secret: string;
+    cookieName?: string;
+    maxAgeSeconds?: number;
+    secure?: boolean | ((c: Context) => boolean);
+    sameSite?: "Strict" | "Lax" | "None";
+    path?: string;
+    contextKey?: string;
+}
+export interface FlashPayload extends FlashMessage {
+    iat: number;
+}
+export declare const DEFAULT_FLASH_COOKIE = "otok_flash";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAEjE,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,eAAO,MAAM,oBAAoB,eAAe,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export const DEFAULT_FLASH_COOKIE = "otok_flash";
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAuBA,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@kamod-ch/otok-flash",
+  "version": "2.0.0",
+  "description": "Signed flash cookies for Otok PRG redirects and SSR toasts.",
+  "license": "MIT",
+  "homepage": "https://github.com/kamod-ch/otok/tree/main/packages/otok-flash#readme",
+  "bugs": {
+    "url": "https://github.com/kamod-ch/otok/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kamod-ch/otok.git",
+    "directory": "packages/otok-flash"
+  },
+  "type": "module",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./middleware": {
+      "types": "./dist/middleware.d.ts",
+      "default": "./dist/middleware.js"
+    }
+  },
+  "peerDependencies": {
+    "@kamod-ch/otok": ">=0.6.1",
+    "hono": ">=4"
+  },
+  "devDependencies": {
+    "@types/node": "^24.12.2",
+    "hono": "^4.12.25",
+    "preact": "^10.28.2",
+    "typescript": "~6.0.2",
+    "vitest": "^4.1.2",
+    "@kamod-ch/otok": "0.6.1",
+    "@kamod-ch/otok-test": "0.5.1"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
+}