@kavach/cookie 1.0.0-next.3

package/.turbo/turbo-coverage.log

@@ -0,0 +1,23 @@
+
+> @kavach/cookie@1.0.0-next.2 coverage /Users/Jerry/Code/Vikalp/kavach/packages/cookie
+> vitest run --coverage
+
+c
+ RUN  v0.24.5 /Users/Jerry/Code/Vikalp/kavach/packages/cookie
+      Coverage enabled with c8
+
+ ✓ spec/serialize.spec.js  (11 tests) 16ms
+ ✓ spec/parse.spec.js  (10 tests) 16ms
+
+Test Files  2 passed (2)
+     Tests  21 passed (21)
+  Start at  11:09:04
+  Duration  4.35s (transform 784ms, setup 0ms, collect 242ms, tests 32ms)
+
+ % Coverage report from c8
+----------|---------|----------|---------|---------|-------------------
+File      | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s 
+----------|---------|----------|---------|---------|-------------------
+All files |     100 |      100 |     100 |     100 |                   
+ index.js |     100 |      100 |     100 |     100 |                   
+----------|---------|----------|---------|---------|-------------------

package/.turbo/turbo-format.log

@@ -0,0 +1,16 @@
+
+> @kavach/cookie@1.0.0-next.2 format /Users/Jerry/Code/Vikalp/kavach/packages/cookie
+> prettier --write --plugin-search-dir=. .
+
+.eslintrc 33ms
+benchmark/index.js 21ms
+benchmark/parse-top.js 19ms
+benchmark/parse.js 23ms
+benchmark/top-sites.js 12ms
+package.json 4ms
+README.md 132ms
+spec/parse.spec.js 26ms
+spec/serialize.spec.js 51ms
+src/index.js 32ms
+tsconfig.json 3ms
+vitest.config.js 5ms

package/.turbo/turbo-lint.log

@@ -0,0 +1,6 @@
+
+> @kavach/cookie@1.0.0-next.2 lint /Users/Jerry/Code/Vikalp/kavach/packages/cookie
+> prettier --check --plugin-search-dir=. . && eslint .
+
+Checking formatting...
+All matched files use Prettier code style!

package/.turbo/turbo-prepublishOnly.log

@@ -0,0 +1,4 @@
+
+> @kavach/cookie@1.0.0-next.3 prepublishOnly /Users/Jerry/Code/Vikalp/kavach/packages/cookie
+> tsc
+

package/.turbo/turbo-test:ci.log

@@ -0,0 +1,15 @@
+
+> @kavach/cookie@1.0.0-next.3 test:ci /Users/Jerry/Code/Vikalp/kavach/packages/cookie
+> vitest run
+
+c
+ RUN  v0.24.5 /Users/Jerry/Code/Vikalp/kavach/packages/cookie
+
+ ✓ spec/serialize.spec.js  (11 tests) 13ms
+ ✓ spec/parse.spec.js  (10 tests) 81ms
+
+Test Files  2 passed (2)
+     Tests  21 passed (21)
+  Start at  11:57:43
+  Duration  3.68s (transform 1.91s, setup 1ms, collect 340ms, tests 94ms)
+

package/.turbo/turbo-upgrade.log

@@ -0,0 +1,23 @@
+
+> @kavach/cookie@1.0.0-next.3 upgrade /Users/Jerry/Code/Vikalp/kavach/packages/cookie
+> pnpm upgrade
+
+../..                                    | Progress: resolved 1, reused 0, downloaded 0, added 0
+../..                                    | Progress: resolved 5, reused 5, downloaded 0, added 0
+../..                                    | Progress: resolved 6, reused 6, downloaded 0, added 0
+../..                                    | Progress: resolved 10, reused 10, downloaded 0, added 0
+../..                                    | Progress: resolved 11, reused 10, downloaded 0, added 0
+../..                                    | Progress: resolved 12, reused 12, downloaded 0, added 0
+../..                                    | Progress: resolved 13, reused 12, downloaded 0, added 0
+../..                                    | Progress: resolved 63, reused 63, downloaded 0, added 0
+../..                                    | Progress: resolved 212, reused 170, downloaded 0, added 0
+../..                                    |   +5 +
+../..                                    | Progress: resolved 213, reused 171, downloaded 0, added 0, done
+
+devDependencies:
+- @types/node
++ @types/node 18.11.18
+- vite
++ vite 4.0.3
+
+Done in 15.7s

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 Jerry Thomas
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,284 @@
+# @kavach/cookie
+
+Basic HTTP cookie parser and serializer for HTTP servers.
+
+## Installation
+
+This is a [Node.js](https://nodejs.org/en/) module available through the
+[npm registry](https://www.npmjs.com/). Installation is done using the
+[`npm install` command](https://docs.npmjs.com/getting-started/installing-npm-packages-locally):
+
+```sh
+npm install @kavach/cookie
+```
+
+## API
+
+```js
+import * as cookie from '@kavach/cookie'
+```
+
+### parse(str, options)
+
+Parse an HTTP `Cookie` header string and return an object of all cookie name-value pairs.
+The `str` argument is the string representing a `Cookie` header value and the `options` parameter is an
+optional object containing additional parsing options.
+
+```js
+import { parse } from '@kavach/cookie'
+let cookies = parse('foo=bar; equation=E%3Dmc%5E2')
+// { foo: 'bar', equation: 'E=mc^2' }
+```
+
+#### Parse Options
+
+The `parse` function accepts these properties in the options object.
+
+##### decode
+
+Specifies a function that will be used to decode a cookie's value. Since the value of a cookie
+has a limited character set (and must be a simple string), this function can be used to decode
+a previously-encoded cookie value into a JavaScript string or other object.
+
+The default function is the global `decodeURIComponent`, which will decode any URL-encoded
+sequences into their byte representations.
+
+**note** if an error is thrown from this function, the original, non-decoded cookie value will
+be returned as the cookie's value.
+
+### serialize(name, value, options)
+
+Serialize a cookie name-value pair into a `Set-Cookie` header string. The `name` argument is the
+name for the cookie, the `value` argument is the value to set the cookie to, and the `options`
+argument is an optional object containing additional serialization options.
+
+```js
+import { serialize } from '@kavacg/cookie'
+let setCookie = serialize('foo', 'bar')
+// foo=bar
+```
+
+#### Serialize Options
+
+The `serialize` function accepts these properties in the options object.
+
+##### domain
+
+Specifies the value for the [`Domain` `Set-Cookie` attribute]([rfc-6265-5.2.3]). By default, no
+domain is set, and most clients will consider the cookie to apply to only the current domain.
+
+##### encode
+
+Specifies a function that will be used to encode a cookie's value. Since the value of a cookie
+has a limited character set (and must be a simple string), this function can be used to encode
+a value into a string suited for a cookie's value.
+
+The default function is the global `encodeURIComponent`, which will encode a JavaScript string
+into UTF-8 byte sequences and then URL-encode any that fall outside of the cookie range.
+
+##### expires
+
+Specifies the `Date` object to be the value for the [`Expires` `Set-Cookie` attribute]([rfc-6265-5.2.1]).
+By default, no expiration is set, and most clients will consider this a "non-persistent cookie" and
+will delete it on a condition like exiting a web browser application.
+
+##### maxAge
+
+Specifies the `number` (in seconds) to be the value for the [`Max-Age` `Set-Cookie` attribute]([rfc-6265-5.2.2]).
+The given number will be converted to an integer by rounding down. By default, no maximum age is set.
+
+> **note** the [cookie storage model specification]([rfc-6265-5.3]) states that if both `expires` and
+> `maxAge` are set, then `maxAge` takes precedence, but not all clients obey this, so if both are set,
+> they should point to the same date and time.
+
+##### httpOnly
+
+Specifies the `boolean` value for the [`HttpOnly` `Set-Cookie` attribute]([rfc-6265-5.2.6]). When truthy,
+the `HttpOnly` attribute is set, otherwise, it is not. By default, the `HttpOnly` attribute is not set.
+
+> **note** be careful when setting this to `true`, as compliant clients will not allow client-side
+> JavaScript to see the cookie in `document.cookie`.
+
+##### path
+
+Specifies the value for the [`Path` `Set-Cookie` attribute]([rfc-6265-5.2.4]). By default, the path
+is considered the ["default path"]([rfc-6265-5.1.4]).
+
+##### priority
+
+Specifies the `string` to be the value for the [`Priority` `Set-Cookie` attribute]([rfc-west-cookie-priority-00-4.1]).
+
+- `'low'` will set the `Priority` attribute to `Low`.
+- `'medium'` will set the `Priority` attribute to `Medium`, the default priority when not set.
+- `'high'` will set the `Priority` attribute to `High`.
+
+More information about the different priority levels can be found in
+[the specification]([rfc-west-cookie-priority-00-4.1]).
+
+> **note** This is an attribute that has not yet been fully standardized, and may change in the future.
+> This also means many clients may ignore this attribute until they understand it.
+
+##### sameSite
+
+Specifies the `boolean` or `string` to be the value for the [`SameSite` `Set-Cookie` attribute]([rfc-6265bis-09-5.4.7]).
+
+- `true` will set the `SameSite` attribute to `Strict` for strict same-site enforcement.
+- `false` will not set the `SameSite` attribute.
+- `'lax'` will set the `SameSite` attribute to `Lax` for lax same-site enforcement.
+- `'none'` will set the `SameSite` attribute to `None` for an explicit cross-site cookie.
+- `'strict'` will set the `SameSite` attribute to `Strict` for strict same-site enforcement.
+
+More information about the different enforcement levels can be found in
+[the specification]([rfc-6265bis-09-5.4.7]).
+
+> **note** This is an attribute that has not yet been fully standardized and may change in the future.
+> This also means many clients may ignore this attribute until they understand it.
+
+##### secure
+
+Specifies the `boolean` value for the [`Secure` `Set-Cookie` attribute]([rfc-6265-5.2.5]). When truthy,
+the `Secure` attribute is set, otherwise, it is not. By default, the `Secure` attribute is not set.
+
+> **note**:
+> be careful when setting this to `true`, as compliant clients will not send the cookie back to
+> the server in the future if the browser does not have an HTTPS connection.
+
+## Example
+
+The following example uses this module in conjunction with the Node.js core HTTP server
+to prompt a user for their name and display it back on future visits.
+
+```js
+import * as cookie from 'cookie'
+import * as escapeHtml from 'escape-html'
+import * as http from 'http'
+import * as url from 'url'
+
+function onRequest(req, res) {
+  // Parse the query string
+  let query = url.parse(req.url, true, true).query
+
+  if (query && query.name) {
+    // Set a new cookie with the name
+    res.setHeader(
+      'Set-Cookie',
+      cookie.serialize('name', String(query.name), {
+        httpOnly: true,
+        maxAge: 60 * 60 * 24 * 7 // 1 week
+      })
+    )
+
+    // Redirect back after setting cookie
+    res.statusCode = 302
+    res.setHeader('Location', req.headers.referer || '/')
+    res.end()
+    return
+  }
+
+  // Parse the cookies on the request
+  let cookies = cookie.parse(req.headers.cookie || '')
+
+  // Get the visitor name set in the cookie
+  let name = cookies.name
+
+  res.setHeader('Content-Type', 'text/html; charset=UTF-8')
+
+  if (name) {
+    res.write('<p>Welcome back, <b>' + escapeHtml(name) + '</b>!</p>')
+  } else {
+    res.write('<p>Hello, new visitor!</p>')
+  }
+
+  res.write('<form method="GET">')
+  res.write(
+    '<input placeholder="enter your name" name="name"> <input type="submit" value="Set Name">'
+  )
+  res.end('</form>')
+}
+
+http.createServer(onRequest).listen(3000)
+```
+
+## Testing
+
+```sh
+pnpm test
+```
+
+## Benchmark
+
+```text
+$ pnpm bench
+
+> @kavach/cookie@1.0.0-next.0 bench cookie
+> node benchmark/index.js
+
+
+  node@16.15.0
+  v8@9.4.146.24-node.20
+  uv@1.43.0
+  zlib@1.2.11
+  brotli@1.0.9
+  ares@1.18.1
+  modules@93
+  nghttp2@1.47.0
+  napi@8
+  llhttp@6.0.4
+  openssl@1.1.1n+quic
+  cldr@40.0
+  icu@70.1
+  tz@2021a3
+  unicode@14.0
+  ngtcp2@0.1.0-DEV
+  nghttp3@0.1.0-DEV
+  cookie.parse - generic
+
+  6 tests completed.
+
+  simple      x 2,285,991 ops/sec ±1.46% (191 runs sampled)
+  decode      x 1,720,499 ops/sec ±1.25% (189 runs sampled)
+  unquote     x 1,883,221 ops/sec ±1.30% (186 runs sampled)
+  duplicates  x   765,346 ops/sec ±1.46% (185 runs sampled)
+  10 cookies  x   225,063 ops/sec ±1.04% (185 runs sampled)
+  100 cookies x    20,354 ops/sec ±1.17% (185 runs sampled)
+
+  cookie.parse - top sites
+
+  16 tests completed.
+
+  parse accounts.google.com x 1,096,402 ops/sec ±0.76% (193 runs sampled)
+  parse apple.com           x 2,229,368 ops/sec ±1.14% (184 runs sampled)
+  parse cloudflare.com      x   665,688 ops/sec ±0.91% (183 runs sampled)
+  parse docs.google.com     x   974,477 ops/sec ±1.07% (181 runs sampled)
+  parse drive.google.com    x 1,044,377 ops/sec ±0.95% (188 runs sampled)
+  parse en.wikipedia.org    x   444,311 ops/sec ±1.14% (184 runs sampled)
+  parse linkedin.com        x   287,581 ops/sec ±0.84% (186 runs sampled)
+  parse maps.google.com     x   481,702 ops/sec ±0.88% (185 runs sampled)
+  parse microsoft.com       x   249,242 ops/sec ±0.92% (183 runs sampled)
+  parse play.google.com     x   686,403 ops/sec ±0.92% (187 runs sampled)
+  parse plus.google.com     x   989,099 ops/sec ±0.86% (184 runs sampled)
+  parse sites.google.com    x   975,948 ops/sec ±1.71% (182 runs sampled)
+  parse support.google.com  x   552,380 ops/sec ±1.03% (189 runs sampled)
+  parse www.google.com      x   507,071 ops/sec ±0.96% (181 runs sampled)
+  parse youtu.be            x   941,225 ops/sec ±0.97% (194 runs sampled)
+  parse youtube.com         x   976,920 ops/sec ±0.61% (192 runs sampled)
+```
+
+## References
+
+This library is an ES module version of [jshttp/cookie](https://github.com/jshttp/cookie), for working with cookies in kavach.
+
+- [RFC 6265: HTTP State Management Mechanism][rfc-6265]
+- [Same-site Cookies][rfc-6265bis-09-5.4.7]
+
+[rfc-west-cookie-priority-00-4.1]: https://tools.ietf.org/html/draft-west-cookie-priority-00#section-4.1
+[rfc-6265bis-09-5.4.7]: https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-09#section-5.4.7
+[rfc-6265]: https://tools.ietf.org/html/rfc6265
+[rfc-6265-5.1.4]: https://tools.ietf.org/html/rfc6265#section-5.1.4
+[rfc-6265-5.2.1]: https://tools.ietf.org/html/rfc6265#section-5.2.1
+[rfc-6265-5.2.2]: https://tools.ietf.org/html/rfc6265#section-5.2.2
+[rfc-6265-5.2.3]: https://tools.ietf.org/html/rfc6265#section-5.2.3
+[rfc-6265-5.2.4]: https://tools.ietf.org/html/rfc6265#section-5.2.4
+[rfc-6265-5.2.5]: https://tools.ietf.org/html/rfc6265#section-5.2.5
+[rfc-6265-5.2.6]: https://tools.ietf.org/html/rfc6265#section-5.2.6
+[rfc-6265-5.3]: https://tools.ietf.org/html/rfc6265#section-5.3

package/benchmark/index.js

@@ -0,0 +1,9 @@
+import { suite as parseSuite } from './parse.js'
+import { suite as parseTopSuite } from './parse-top.js'
+
+for (let dep in process.versions) {
+	console.log('  %s@%s', dep, process.versions[dep])
+}
+
+parseSuite.run({ async: false })
+parseTopSuite.run({ async: false })

package/benchmark/parse-top.js

@@ -0,0 +1,37 @@
+/**
+ * Module dependencies.
+ */
+
+import pkg from 'benchmark'
+import { add, log } from 'beautify-benchmark'
+import { topSites } from './top-sites.js'
+import * as cookie from '../src/index.js'
+
+const { Suite } = pkg
+/**
+ * Globals for benchmark.js
+ */
+
+global.cookie = cookie
+
+export const suite = new Suite()
+
+Object.keys(topSites).forEach(function (domain) {
+	suite.add({
+		name: 'parse ' + domain,
+		minSamples: 100,
+		fn: 'let val = cookie.parse(' + JSON.stringify(topSites[domain]) + ')'
+	})
+})
+
+suite.on('start', function onCycle() {
+	process.stdout.write('  cookie.parse - top sites\n\n')
+})
+
+suite.on('cycle', function onCycle(event) {
+	add(event.target)
+})
+
+suite.on('complete', function onComplete() {
+	log()
+})

package/benchmark/parse.js

@@ -0,0 +1,79 @@
+/**
+ * Module dependencies.
+ */
+
+import pkg from 'benchmark'
+import { add, log } from 'beautify-benchmark'
+import * as cookie from '../src/index.js'
+
+const { Suite } = pkg
+/**
+ * Globals for benchmark.js
+ */
+
+global.cookie = cookie
+
+export const suite = new Suite()
+
+suite.add({
+	name: 'simple',
+	minSamples: 100,
+	fn: 'let val = cookie.parse("foo=bar")'
+})
+
+suite.add({
+	name: 'decode',
+	minSamples: 100,
+	fn: 'let val = cookie.parse("foo=hello%20there!")'
+})
+
+suite.add({
+	name: 'unquote',
+	minSamples: 100,
+	fn: 'let val = cookie.parse("foo=\\"foo bar\\"")'
+})
+
+suite.add({
+	name: 'duplicates',
+	minSamples: 100,
+	fn:
+		'let val = cookie.parse(' +
+		JSON.stringify(gencookies(2) + '; ' + gencookies(2)) +
+		')'
+})
+
+suite.add({
+	name: '10 cookies',
+	minSamples: 100,
+	fn: 'let val = cookie.parse(' + JSON.stringify(gencookies(10)) + ')'
+})
+
+suite.add({
+	name: '100 cookies',
+	minSamples: 100,
+	fn: 'let val = cookie.parse(' + JSON.stringify(gencookies(100)) + ')'
+})
+
+suite.on('start', function onCycle() {
+	process.stdout.write('  cookie.parse - generic\n\n')
+})
+
+suite.on('cycle', function onCycle(event) {
+	add(event.target)
+})
+
+suite.on('complete', function onComplete() {
+	log()
+})
+
+// suite.run({ async: false })
+
+function gencookies(num) {
+	let str = ''
+
+	for (let i = 0; i < num; i++) {
+		str += '; foo' + i + '=bar'
+	}
+
+	return str.slice(2)
+}

package/benchmark/top-sites.js

@@ -0,0 +1,31 @@
+export const topSites = {
+	'accounts.google.com':
+		'__Ulll-UUUU=0:0U0lUlllUUUl0lUl00UUUUUU0lUlll:l0ll0UlUU0l0lUUU',
+	'apple.com': 'lll=UU',
+	'cloudflare.com':
+		'__ll_ll=lUllUll.0Ul0Ull0UUUU.ll_U0lllUU0UlUll0lUllU-0000000000-0-UUUl+0Ulll0UUUU0U0Ullll0UUUUUlllU0UUUUlUUUlUUUUUUUlUlUUll0l0UlUlUl0Ul000UUlUU0/0l0l0UU0UllUU0U0lU/lllU0lUllU',
+	'docs.google.com':
+		'__Ulll-UUUU=0:Ulll0UlUUllUlUl0UUlUUlUU0UUUUU:U0U0U0llUU0-0Ul0',
+	'drive.google.com':
+		'__Ulll-UUUU=0:UUll0UllUUll0lUU0llUUllUllUlll:U0UllUlll-lU0lll',
+	'en.wikipedia.org':
+		'UUU-Ulll-Ulllll=00-Ull-0000; UUU-Ulll-Ulllll-Ulllll=00-Ull-0000; UllUU=UU:UU:Ulllllllllll:00.00:-00.00:l0',
+	'linkedin.com':
+		'UUUUUUUUUU=llll:0000000000000000000; llll=l=0&llll=ll-ll; lllllll="l=0&ll000l0l-0lll-00l0-0000-0lll0ll0ll00"; llllllll="l=0&0000000000000000l0l000-0l0l-0000-0000-0l0l00l0000lUUUUUl_llU0UlUllUUlU0lUlUl00llUl"; llll="l=UUUU00:l=U:l=U:l=U:l=U:l=0000:l=0:l=0:l=0000000000:l=0000000000:l=0:lll=UUUUUlUlUUUUUUllllllU0UUlUlU0lll"',
+	'maps.google.com':
+		'0U_UUU=0000-00-00-00; UUU=000=UllUl00U-UU0llllUU0lUUlUl0llUl0U0lllUlUUU0l00UUUllllUlU0l0UllUUlUlU0UllUllU0UUlU00llUUUllUUlUl00lUlUUUlUUU0Ul00lllUUUUllUUl0UUlU0UllUlUUllllUllUllUll0llllllllll0lUUUlU0Ull',
+	'microsoft.com':
+		'llUllllUllllll=0; UUUU=0UUU00U0000000U0000U000000UU00UU; U-UU-UUUUUUUU=lll=00000l0%2200000l%22llllll000l0%22llllllllllll000%22lllllllllll%22llllllllllllllll%22llllllllllllllll%22llllllllllllllllllllll%22llllllllllllllllll%22lll-lll-lllll0l0ll%22llllllllllll%22lllllllllllllllll%2200000l0ll&lll=0ll00ll0-000l-000l-l000-l00ll0l0l00l; U-UU-Ulll=0; lllll_UllUU=0000000000~ll=00~ll=0lll000ll0l0000lll000lll0ll0000l; lllll_UllUU=0000000000~ll=00~ll=0lll000ll0l0000lll000lll0ll0000l',
+	'play.google.com':
+		'UUU=000=Ull0l00UlllUUUlU0UllUl0llU0l-lllUllUl0lllUU0UUU0lUlU-UUll000lUl00U0Ul_UlUU0l0lUUUUlUUl0UlUl0lU0-lll0l0l0UlUllllU0U0UU0U00UllU0l0lU0lll_0lUUU0UllUUUUll0UlUl0l0UUUUU00UUllll',
+	'plus.google.com':
+		'__Ulll-UUUU=0:0Ull0lUU0UUUlll0U-UllUUllllUlU:lll00_lllUUUUUUU',
+	'sites.google.com':
+		'__Ulll-UUUU=0:_UU0lll0UUUUlUU0lUll0UUlllllUl:UUll0lllU0UUlll0',
+	'support.google.com':
+		'UUU=000=llU0lUlllUUlllUUll0U0UUll0UUlUUlU-lUUllU0UllUlUUlUlU0UlUUU_U-UlUU0lUUlUllUlUlUUl00llllUl0lUUUU00Ul0UUlUll0UUUU_UUlUlllUllllU0U0lllllUlU000UllUl--UUU_ll_lllU0UllUUlllU00UlU; UUU=000=llU0lUlllUUlllUUll0U0UUll0UUlUUlU-lUUllU0UllUlUUlUlU0UlUUU_U-UlUU0lUUlUllUlUlUUl00llllUl0lUUUU00Ul0UUlUll0UUUU_UUlUlllUllllU0U0lllllUlU000UllUl--UUU_ll_lllU0UllUUlllU00UlU',
+	'www.google.com':
+		'0U_UUU=0000-00-00-00; UUU=UUUU_UUUlUUUUlUll_lllll0U00UUl0lllUUUUlUU_0_llUl0l0UUlU0_lU; UUU=000=lll0lUlUlllUll00U_lUlUUUUlll0lUlUU0lllUlllUllUUUll0U_U0llUU0UlU0Ull0U_l-_UUl00lUllUl0UUllUlUll0UUllUUUlU0UUlUllUlUUUlUllU-lUUlll0UlU0lUllUUUUlUUUlUlUU0llll_lU0lUlllll_UlUl',
+	'youtu.be': 'UUU=0; UUU=UUUUUUUllUU; UUUUUUU_UUUU0_UUUU=00UlUU-UUU0',
+	'youtube.com': 'UUU=0; UUU=lU0lUUUlUll; UUUUUUU_UUUU0_UUUU=0UUUlUllU0l'
+}

package/dist/index.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Parse a cookie header.
+ *
+ * Parse the given cookie header string into an object
+ * The object has the various cookies as keys(names) => values
+ *
+ * @param {string} str
+ * @param {object} [options]
+ * @return {object}
+ * @public
+ */
+export function parse(str: string, options?: object): object;
+/**
+ * Serialize data into a cookie header.
+ *
+ * Serialize the a name value pair into a cookie string suitable for
+ * http headers. An optional options object specified cookie parameters.
+ *
+ * serialize('foo', 'bar', { httpOnly: true })
+ *   => "foo=bar; httpOnly"
+ *
+ * @param {string} name
+ * @param {string} val
+ * @param {object} [options]
+ * @return {string}
+ * @public
+ */
+export function serialize(name: string, val: string, options?: object): string;
+declare namespace _default {
+    export { parse };
+    export { serialize };
+}
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.js"],"names":[],"mappings":"AA+BA;;;;;;;;;;GAUG;AAEH,2BANW,MAAM,YACN,MAAM,GACL,MAAM,CAsCjB;AAED;;;;;;;;;;;;;;GAcG;AAEH,gCAPW,MAAM,OACN,MAAM,YACN,MAAM,GACL,MAAM,CA2FjB"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@kavach/cookie",
+  "version": "1.0.0-next.3",
+  "description": "Cookie serialize/deserialize forked from jshttp/cookie",
+  "author": "Jerry Thomas <me@jerrythomas.name>",
+  "license": "MIT",
+  "keywords": [
+    "cookie",
+    "cookies"
+  ],
+  "main": "index.js",
+  "module": "src/index.js",
+  "types": "dist/index.d.ts",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jerrythomas/kavach",
+    "directory": "packages/cookie"
+  },
+  "prettier": "@jerrythomas/prettier-config",
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@jerrythomas/prettier-config": "^1.0.0",
+    "@types/benchmark": "^2.1.2",
+    "@types/node": "^18.11.18",
+    "@vitest/coverage-c8": "^0.24.5",
+    "@vitest/ui": "~0.12.10",
+    "beautify-benchmark": "0.2.4",
+    "benchmark": "2.1.4",
+    "c8": "^7.12.0",
+    "safe-buffer": "5.2.1",
+    "top-sites": "1.1.97",
+    "typescript": "^4.9.4",
+    "vite": "^4.0.3",
+    "vitest": "0.24.5",
+    "eslint-config-library": "1.0.0",
+    "shared-config": "1.0.0"
+  },
+  "exports": {
+    "./package.json": "./package.json",
+    "./provider.css": "./src/provider.css",
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./src/index.js"
+    }
+  },
+  "scripts": {
+    "bench": "node benchmark/index.js",
+    "lint": "prettier --check --plugin-search-dir=. . && eslint .",
+    "format": "prettier --write --plugin-search-dir=. .",
+    "test:ci": "vitest run",
+    "test:ui": "vitest --ui",
+    "test": "vitest",
+    "coverage": "vitest run --coverage",
+    "upgrade": "pnpm upgrade"
+  }
+}

package/spec/parse.spec.js

@@ -0,0 +1,91 @@
+import { describe, expect, it } from 'vitest'
+import { parse } from '../src/index.js'
+
+describe('Cookie Parser', () => {
+	it('argument validation', () => {
+		expect(parse.bind()).toThrowError(/argument str must be a string/)
+		expect(parse.bind(null, 42)).toThrowError(/argument str must be a string/)
+	})
+
+	it('basic', () => {
+		expect(parse('foo=bar')).toEqual({ foo: 'bar' })
+		expect(parse('foo=123')).toEqual({ foo: '123' })
+	})
+
+	it('ignore spaces', () => {
+		expect(parse('FOO    = bar;   baz  =   raz')).toEqual({
+			FOO: 'bar',
+			baz: 'raz'
+		})
+	})
+
+	it('escaping', () => {
+		expect(parse('foo="bar=123456789&name=Magic+Mouse"')).toEqual({
+			foo: 'bar=123456789&name=Magic+Mouse'
+		})
+
+		expect(parse('email=%20%22%2c%3b%2f')).toEqual({ email: ' ",;/' })
+	})
+
+	it('ignore escaping error and return original value', () => {
+		expect(parse('foo=%1;bar=bar')).toEqual({ foo: '%1', bar: 'bar' })
+	})
+
+	it('ignore non values', () => {
+		expect(parse('foo=%1;bar=bar;HttpOnly;Secure')).toEqual({
+			foo: '%1',
+			bar: 'bar'
+		})
+	})
+
+	it('unencoded', () => {
+		expect(
+			parse('foo="bar=123456789&name=Magic+Mouse"', {
+				decode: function (v) {
+					return v
+				}
+			})
+		).toEqual({ foo: 'bar=123456789&name=Magic+Mouse' })
+
+		expect(
+			parse('email=%20%22%2c%3b%2f', {
+				decode: function (v) {
+					return v
+				}
+			})
+		).toEqual({ email: '%20%22%2c%3b%2f' })
+	})
+
+	it('dates', () => {
+		expect(
+			parse('priority=true; expires=Wed, 29 Jan 2014 17:43:25 GMT; Path=/', {
+				decode: function (v) {
+					return v
+				}
+			})
+		).toEqual({
+			priority: 'true',
+			Path: '/',
+			expires: 'Wed, 29 Jan 2014 17:43:25 GMT'
+		})
+	})
+
+	it('missing value', () => {
+		expect(
+			parse('foo; bar=1; fizz= ; buzz=2', {
+				decode: function (v) {
+					return v
+				}
+			})
+		).toEqual({ bar: '1', fizz: '', buzz: '2' })
+	})
+
+	it('assign only once', () => {
+		expect(parse('foo=%1;bar=bar;foo=boo')).toEqual({ foo: '%1', bar: 'bar' })
+		expect(parse('foo=false;bar=bar;foo=true'), {
+			foo: 'false',
+			bar: 'bar'
+		})
+		expect(parse('foo=;bar=bar;foo=boo')).toEqual({ foo: '', bar: 'bar' })
+	})
+})

package/spec/serialize.spec.js

@@ -0,0 +1,169 @@
+import { describe, expect, it } from 'vitest'
+import cookie from '../src/index.js'
+
+describe('Cookie Serialize', () => {
+	it('basic', () => {
+		expect(cookie.serialize('foo', 'bar')).toEqual('foo=bar')
+		expect(cookie.serialize('foo', 'bar baz')).toEqual('foo=bar%20baz')
+		expect(cookie.serialize('foo', '')).toEqual('foo=')
+		expect(cookie.serialize.bind(cookie, 'foo\n', 'bar')).toThrowError(
+			/argument name is invalid/
+		)
+		expect(cookie.serialize.bind(cookie, 'foo\u280a', 'bar')).toThrowError(
+			/argument name is invalid/
+		)
+		expect(
+			cookie.serialize.bind(cookie, 'foo', 'bar', { encode: 42 })
+		).toThrowError(/option encode is invalid/)
+	})
+
+	it('path', () => {
+		expect(cookie.serialize('foo', 'bar', { path: '/' })).toEqual(
+			'foo=bar; Path=/'
+		)
+		expect(
+			cookie.serialize.bind(cookie, 'foo', 'bar', {
+				path: '/\n'
+			})
+		).toThrowError(/option path is invalid/)
+	})
+
+	it('secure', () => {
+		expect(cookie.serialize('foo', 'bar', { secure: true })).toEqual(
+			'foo=bar; Secure'
+		)
+		expect(cookie.serialize('foo', 'bar', { secure: false })).toEqual('foo=bar')
+	})
+
+	it('domain', () => {
+		expect(cookie.serialize('foo', 'bar', { domain: 'example.com' })).toEqual(
+			'foo=bar; Domain=example.com'
+		)
+		expect(
+			cookie.serialize.bind(cookie, 'foo', 'bar', {
+				domain: 'example.com\n'
+			})
+		).toThrowError(/option domain is invalid/)
+	})
+
+	it('httpOnly', () => {
+		expect(cookie.serialize('foo', 'bar', { httpOnly: true })).toEqual(
+			'foo=bar; HttpOnly'
+		)
+	})
+
+	it('maxAge', () => {
+		expect(() =>
+			cookie.serialize('foo', 'bar', {
+				maxAge: 'buzz'
+			})
+		).toThrowError(/option maxAge is invalid/)
+
+		expect(() =>
+			cookie.serialize('foo', 'bar', {
+				maxAge: Infinity
+			})
+		).toThrowError(/option maxAge is invalid/)
+
+		expect(cookie.serialize('foo', 'bar', { maxAge: 1000 })).toEqual(
+			'foo=bar; Max-Age=1000'
+		)
+		expect(cookie.serialize('foo', 'bar', { maxAge: '1000' })).toEqual(
+			'foo=bar; Max-Age=1000'
+		)
+		expect(cookie.serialize('foo', 'bar', { maxAge: 0 })).toEqual(
+			'foo=bar; Max-Age=0'
+		)
+		expect(cookie.serialize('foo', 'bar', { maxAge: '0' })).toEqual(
+			'foo=bar; Max-Age=0'
+		)
+		expect(cookie.serialize('foo', 'bar', { maxAge: null })).toEqual('foo=bar')
+		expect(cookie.serialize('foo', 'bar', { maxAge: undefined })).toEqual(
+			'foo=bar'
+		)
+		expect(cookie.serialize('foo', 'bar', { maxAge: 3.14 })).toEqual(
+			'foo=bar; Max-Age=3'
+		)
+	})
+
+	it('expires', () => {
+		expect(
+			cookie.serialize('foo', 'bar', {
+				expires: new Date(Date.UTC(2000, 11, 24, 10, 30, 59, 900))
+			})
+		).toEqual('foo=bar; Expires=Sun, 24 Dec 2000 10:30:59 GMT')
+
+		expect(
+			cookie.serialize.bind(cookie, 'foo', 'bar', {
+				expires: Date.now()
+			})
+		).toThrowError(/option expires is invalid/)
+	})
+
+	it('sameSite', () => {
+		expect(cookie.serialize('foo', 'bar', { sameSite: true })).toEqual(
+			'foo=bar; SameSite=Strict'
+		)
+		expect(cookie.serialize('foo', 'bar', { sameSite: 'Strict' })).toEqual(
+			'foo=bar; SameSite=Strict'
+		)
+		expect(cookie.serialize('foo', 'bar', { sameSite: 'strict' })).toEqual(
+			'foo=bar; SameSite=Strict'
+		)
+		expect(cookie.serialize('foo', 'bar', { sameSite: 'Lax' })).toEqual(
+			'foo=bar; SameSite=Lax'
+		)
+		expect(cookie.serialize('foo', 'bar', { sameSite: 'lax' })).toEqual(
+			'foo=bar; SameSite=Lax'
+		)
+		expect(cookie.serialize('foo', 'bar', { sameSite: 'None' })).toEqual(
+			'foo=bar; SameSite=None'
+		)
+		expect(cookie.serialize('foo', 'bar', { sameSite: 'none' })).toEqual(
+			'foo=bar; SameSite=None'
+		)
+		expect(cookie.serialize('foo', 'bar', { sameSite: false })).toEqual(
+			'foo=bar'
+		)
+
+		expect(
+			cookie.serialize.bind(cookie, 'foo', 'bar', {
+				sameSite: 'foo'
+			})
+		).toThrowError(/option sameSite is invalid/)
+	})
+
+	it('escaping', () => {
+		expect(cookie.serialize('cat', '+ ')).toEqual('cat=%2B%20')
+	})
+
+	it('parse->serialize', () => {
+		expect(
+			cookie.parse(cookie.serialize('cat', 'foo=123&name=baz five'))
+		).toEqual({
+			cat: 'foo=123&name=baz five'
+		})
+
+		expect(cookie.parse(cookie.serialize('cat', ' ";/'))).toEqual({
+			cat: ' ";/'
+		})
+	})
+
+	it('unencoded', () => {
+		expect(
+			cookie.serialize('cat', '+ ', {
+				encode: function (value) {
+					return value
+				}
+			})
+		).toEqual('cat=+ ')
+
+		expect(
+			cookie.serialize.bind(cookie, 'cat', '+ \n', {
+				encode: function (value) {
+					return value
+				}
+			})
+		).toThrowError(/argument val is invalid/)
+	})
+})

package/src/index.js

@@ -0,0 +1,204 @@
+/*!
+ * cookie
+ * Copyright(c) 2012-2014 Roman Shtylman
+ * Copyright(c) 2015 Douglas Christopher Wilson
+ * MIT Licensed
+ *
+ * Converted to ESM for use in SvelteKit apps
+ */
+
+'use strict'
+
+/**
+ * Module variables.
+ * @private
+ */
+
+var decode = decodeURIComponent
+var encode = encodeURIComponent
+var pairSplitRegExp = /; */
+
+/**
+ * RegExp to match field-content in RFC 7230 sec 3.2
+ *
+ * field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ]
+ * field-vchar   = VCHAR / obs-text
+ * obs-text      = %x80-FF
+ */
+
+// eslint-disable-next-line no-control-regex
+var fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/
+
+/**
+ * Parse a cookie header.
+ *
+ * Parse the given cookie header string into an object
+ * The object has the various cookies as keys(names) => values
+ *
+ * @param {string} str
+ * @param {object} [options]
+ * @return {object}
+ * @public
+ */
+
+export function parse(str, options) {
+	if (typeof str !== 'string') {
+		throw new TypeError('argument str must be a string')
+	}
+
+	var obj = {}
+	var opt = options || {}
+	var pairs = str.split(pairSplitRegExp)
+	var dec = opt.decode || decode
+
+	for (var i = 0; i < pairs.length; i++) {
+		var pair = pairs[i]
+		var eq_idx = pair.indexOf('=')
+
+		// skip things that don't look like key=value
+		if (eq_idx < 0) {
+			continue
+		}
+
+		var key = pair.slice(0, eq_idx).trim()
+		var val = pair.slice(++eq_idx, pair.length).trim()
+
+		// quoted values
+		if ('"' == val[0]) {
+			val = val.slice(1, -1)
+		}
+
+		// only assign once
+		if (undefined == obj[key]) {
+			obj[key] = tryDecode(val, dec)
+		}
+	}
+
+	return obj
+}
+
+/**
+ * Serialize data into a cookie header.
+ *
+ * Serialize the a name value pair into a cookie string suitable for
+ * http headers. An optional options object specified cookie parameters.
+ *
+ * serialize('foo', 'bar', { httpOnly: true })
+ *   => "foo=bar; httpOnly"
+ *
+ * @param {string} name
+ * @param {string} val
+ * @param {object} [options]
+ * @return {string}
+ * @public
+ */
+
+export function serialize(name, val, options) {
+	var opt = options || {}
+	var enc = opt.encode || encode
+
+	if (typeof enc !== 'function') {
+		throw new TypeError('option encode is invalid')
+	}
+
+	if (!fieldContentRegExp.test(name)) {
+		throw new TypeError('argument name is invalid')
+	}
+
+	var value = enc(val)
+
+	if (value && !fieldContentRegExp.test(value)) {
+		throw new TypeError('argument val is invalid')
+	}
+
+	var str = name + '=' + value
+
+	if (null != opt.maxAge) {
+		var maxAge = opt.maxAge - 0
+
+		if (isNaN(maxAge) || !isFinite(maxAge)) {
+			throw new TypeError('option maxAge is invalid')
+		}
+
+		str += '; Max-Age=' + Math.floor(maxAge)
+	}
+
+	if (opt.domain) {
+		if (!fieldContentRegExp.test(opt.domain)) {
+			throw new TypeError('option domain is invalid')
+		}
+
+		str += '; Domain=' + opt.domain
+	}
+
+	if (opt.path) {
+		if (!fieldContentRegExp.test(opt.path)) {
+			throw new TypeError('option path is invalid')
+		}
+
+		str += '; Path=' + opt.path
+	}
+
+	if (opt.expires) {
+		if (typeof opt.expires.toUTCString !== 'function') {
+			throw new TypeError('option expires is invalid')
+		}
+
+		str += '; Expires=' + opt.expires.toUTCString()
+	}
+
+	if (opt.httpOnly) {
+		str += '; HttpOnly'
+	}
+
+	if (opt.secure) {
+		str += '; Secure'
+	}
+
+	if (opt.sameSite) {
+		var sameSite =
+			typeof opt.sameSite === 'string'
+				? opt.sameSite.toLowerCase()
+				: opt.sameSite
+
+		switch (sameSite) {
+			case true:
+				str += '; SameSite=Strict'
+				break
+			case 'lax':
+				str += '; SameSite=Lax'
+				break
+			case 'strict':
+				str += '; SameSite=Strict'
+				break
+			case 'none':
+				str += '; SameSite=None'
+				break
+			default:
+				throw new TypeError('option sameSite is invalid')
+		}
+	}
+
+	return str
+}
+
+/**
+ * Try decoding a string using a decoding function.
+ *
+ * @param {string} str
+ * @param {function} decode
+ * @private
+ */
+
+function tryDecode(str, decode) {
+	try {
+		return decode(str)
+	} catch (e) {
+		return str
+	}
+}
+
+export default {
+	parse,
+	serialize
+}

package/tsconfig.json

@@ -0,0 +1,8 @@
+{
+	"extends": "shared-config/jsconfig.json",
+	"include": ["src/**/*.js"],
+	"compilerOptions": {
+		"outDir": "dist",
+		"checkJs": false
+	}
+}

package/vitest.config.js

@@ -0,0 +1,13 @@
+import { defineConfig } from 'vite'
+
+export default defineConfig({
+	plugins: [],
+	test: {
+		globals: true,
+		coverage: {
+			reporter: ['html', 'lcov', 'text'],
+			all: false,
+			include: ['src']
+		}
+	}
+})