@lovrozagar/honey 0.6.5 → 0.7.0

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@lovrozagar/honey",
-	"version": "0.6.5",
+	"version": "0.7.0",
 	"description": "Type-safe API framework built on Web Standards. Builder-pattern DX, precompiled radix tree in production.",
 	"keywords": [
 		"api",
@@ -23,9 +23,10 @@
 		"directory": "packages/core"
 	},
 	"bin": {
-		"honey": "./src/cli.ts"
+		"honey": "./bin/honey.js"
 	},
 	"files": [
+		"bin",
 		"dist",
 		"docs",
 		"src"
@@ -34,196 +35,314 @@
 	"sideEffects": [
 		"./src/i18n.ts",
 		"./src/openapi/register.ts",
-		"./src/serve-register.ts"
+		"./src/proxy.ts",
+		"./src/realtime/register.ts",
+		"./src/serve-register.ts",
+		"./src/trust.ts",
+		"./src/ws/session.ts",
+		"./dist/i18n.js",
+		"./dist/openapi/register.js",
+		"./dist/proxy.js",
+		"./dist/realtime/register.js",
+		"./dist/serve-register.js",
+		"./dist/trust.js",
+		"./dist/ws/session.js"
 	],
 	"exports": {
 		".": {
+			"honey-source": "./src/index.ts",
 			"types": "./dist/index.d.ts",
-			"default": "./src/index.ts"
+			"bun": "./src/index.ts",
+			"default": "./dist/index.js"
 		},
 		"./accepts": {
+			"honey-source": "./src/accepts.ts",
 			"types": "./dist/accepts.d.ts",
-			"default": "./src/accepts.ts"
+			"bun": "./src/accepts.ts",
+			"default": "./dist/accepts.js"
 		},
 		"./body-limit": {
+			"honey-source": "./src/body-limit.ts",
 			"types": "./dist/body-limit.d.ts",
-			"default": "./src/body-limit.ts"
+			"bun": "./src/body-limit.ts",
+			"default": "./dist/body-limit.js"
 		},
 		"./build": {
+			"honey-source": "./src/build/index.ts",
 			"types": "./dist/build/index.d.ts",
-			"default": "./src/build/index.ts"
+			"bun": "./src/build/index.ts",
+			"default": "./dist/build/index.js"
 		},
 		"./cli": {
+			"honey-source": "./src/cli.ts",
 			"types": "./dist/cli.d.ts",
-			"default": "./src/cli.ts"
+			"bun": "./src/cli.ts",
+			"default": "./dist/cli.js"
 		},
 		"./client": {
+			"honey-source": "./src/client/index.ts",
 			"types": "./dist/client/index.d.ts",
-			"default": "./src/client/index.ts"
+			"bun": "./src/client/index.ts",
+			"default": "./dist/client/index.js"
 		},
 		"./client/sdk": {
+			"honey-source": "./src/client/sdk.ts",
 			"types": "./dist/client/sdk.d.ts",
-			"default": "./src/client/sdk.ts"
+			"bun": "./src/client/sdk.ts",
+			"default": "./dist/client/sdk.js"
 		},
 		"./codegen": {
+			"honey-source": "./src/codegen.ts",
 			"types": "./dist/codegen.d.ts",
-			"default": "./src/codegen.ts"
+			"bun": "./src/codegen.ts",
+			"default": "./dist/codegen.js"
 		},
 		"./codegen-go-cli": {
+			"honey-source": "./src/codegen-go-cli.ts",
 			"types": "./dist/codegen-go-cli.d.ts",
-			"default": "./src/codegen-go-cli.ts"
+			"bun": "./src/codegen-go-cli.ts",
+			"default": "./dist/codegen-go-cli.js"
 		},
 		"./codegen/extract": {
+			"honey-source": "./src/type-extractor.ts",
 			"types": "./dist/type-extractor.d.ts",
-			"default": "./src/type-extractor.ts"
+			"bun": "./src/type-extractor.ts",
+			"default": "./dist/type-extractor.js"
 		},
 		"./cookie": {
+			"honey-source": "./src/cookie.ts",
 			"types": "./dist/cookie.d.ts",
-			"default": "./src/cookie.ts"
+			"bun": "./src/cookie.ts",
+			"default": "./dist/cookie.js"
 		},
 		"./cookie-sign": {
+			"honey-source": "./src/cookie-sign.ts",
 			"types": "./dist/cookie-sign.d.ts",
-			"default": "./src/cookie-sign.ts"
+			"bun": "./src/cookie-sign.ts",
+			"default": "./dist/cookie-sign.js"
 		},
 		"./cors": {
+			"honey-source": "./src/cors.ts",
 			"types": "./dist/cors.d.ts",
-			"default": "./src/cors.ts"
+			"bun": "./src/cors.ts",
+			"default": "./dist/cors.js"
 		},
 		"./crypto": {
+			"honey-source": "./src/crypto.ts",
 			"types": "./dist/crypto.d.ts",
-			"default": "./src/crypto.ts"
+			"bun": "./src/crypto.ts",
+			"default": "./dist/crypto.js"
 		},
 		"./curl-logger": {
+			"honey-source": "./src/curl-logger.ts",
 			"types": "./dist/curl-logger.d.ts",
-			"default": "./src/curl-logger.ts"
+			"bun": "./src/curl-logger.ts",
+			"default": "./dist/curl-logger.js"
 		},
 		"./csrf": {
+			"honey-source": "./src/csrf.ts",
 			"types": "./dist/csrf.d.ts",
-			"default": "./src/csrf.ts"
+			"bun": "./src/csrf.ts",
+			"default": "./dist/csrf.js"
 		},
 		"./errors": {
+			"honey-source": "./src/errors.ts",
 			"types": "./dist/errors.d.ts",
-			"default": "./src/errors.ts"
+			"bun": "./src/errors.ts",
+			"default": "./dist/errors.js"
 		},
 		"./etag": {
+			"honey-source": "./src/etag.ts",
 			"types": "./dist/etag.d.ts",
-			"default": "./src/etag.ts"
+			"bun": "./src/etag.ts",
+			"default": "./dist/etag.js"
 		},
 		"./i18n": {
+			"honey-source": "./src/i18n.ts",
 			"types": "./dist/i18n.d.ts",
-			"default": "./src/i18n.ts"
+			"bun": "./src/i18n.ts",
+			"default": "./dist/i18n.js"
 		},
 		"./input": {
+			"honey-source": "./src/input.ts",
 			"types": "./dist/input.d.ts",
-			"default": "./src/input.ts"
+			"bun": "./src/input.ts",
+			"default": "./dist/input.js"
 		},
 		"./ip-restrict": {
+			"honey-source": "./src/ip-restrict.ts",
 			"types": "./dist/ip-restrict.d.ts",
-			"default": "./src/ip-restrict.ts"
+			"bun": "./src/ip-restrict.ts",
+			"default": "./dist/ip-restrict.js"
 		},
 		"./logger": {
+			"honey-source": "./src/logger.ts",
 			"types": "./dist/logger.d.ts",
-			"default": "./src/logger.ts"
+			"bun": "./src/logger.ts",
+			"default": "./dist/logger.js"
 		},
 		"./node": {
+			"honey-source": "./src/node.ts",
 			"types": "./dist/node.d.ts",
-			"default": "./src/node.ts"
+			"bun": "./src/node.ts",
+			"default": "./dist/node.js"
 		},
 		"./openapi": {
+			"honey-source": "./src/openapi/register.ts",
 			"types": "./dist/openapi/register.d.ts",
-			"default": "./src/openapi/register.ts"
+			"bun": "./src/openapi/register.ts",
+			"default": "./dist/openapi/register.js"
 		},
 		"./openapi/spec": {
+			"honey-source": "./src/openapi/spec.ts",
 			"types": "./dist/openapi/spec.d.ts",
-			"default": "./src/openapi/spec.ts"
+			"bun": "./src/openapi/spec.ts",
+			"default": "./dist/openapi/spec.js"
 		},
 		"./openapi/scalar": {
+			"honey-source": "./src/openapi/scalar.ts",
 			"types": "./dist/openapi/scalar.d.ts",
-			"default": "./src/openapi/scalar.ts"
+			"bun": "./src/openapi/scalar.ts",
+			"default": "./dist/openapi/scalar.js"
 		},
 		"./openapi/swagger": {
+			"honey-source": "./src/openapi/swagger.ts",
 			"types": "./dist/openapi/swagger.d.ts",
-			"default": "./src/openapi/swagger.ts"
+			"bun": "./src/openapi/swagger.ts",
+			"default": "./dist/openapi/swagger.js"
 		},
 		"./plugin": {
+			"honey-source": "./src/plugin.ts",
 			"types": "./dist/plugin.d.ts",
-			"default": "./src/plugin.ts"
+			"bun": "./src/plugin.ts",
+			"default": "./dist/plugin.js"
 		},
 		"./powered-by": {
+			"honey-source": "./src/powered-by.ts",
 			"types": "./dist/powered-by.d.ts",
-			"default": "./src/powered-by.ts"
+			"bun": "./src/powered-by.ts",
+			"default": "./dist/powered-by.js"
 		},
 		"./pretty-json": {
+			"honey-source": "./src/pretty-json.ts",
 			"types": "./dist/pretty-json.d.ts",
-			"default": "./src/pretty-json.ts"
+			"bun": "./src/pretty-json.ts",
+			"default": "./dist/pretty-json.js"
 		},
 		"./proxy": {
+			"honey-source": "./src/proxy.ts",
 			"types": "./dist/proxy.d.ts",
-			"default": "./src/proxy.ts"
+			"bun": "./src/proxy.ts",
+			"default": "./dist/proxy.js"
+		},
+		"./realtime": {
+			"honey-source": "./src/realtime/register.ts",
+			"types": "./dist/realtime/register.d.ts",
+			"bun": "./src/realtime/register.ts",
+			"default": "./dist/realtime/register.js"
 		},
 		"./request-to-curl": {
+			"honey-source": "./src/request-to-curl.ts",
 			"types": "./dist/request-to-curl.d.ts",
-			"default": "./src/request-to-curl.ts"
+			"bun": "./src/request-to-curl.ts",
+			"default": "./dist/request-to-curl.js"
 		},
 		"./request-id": {
+			"honey-source": "./src/request-id.ts",
 			"types": "./dist/request-id.d.ts",
-			"default": "./src/request-id.ts"
+			"bun": "./src/request-id.ts",
+			"default": "./dist/request-id.js"
 		},
 		"./secure-headers": {
+			"honey-source": "./src/secure-headers.ts",
 			"types": "./dist/secure-headers.d.ts",
-			"default": "./src/secure-headers.ts"
+			"bun": "./src/secure-headers.ts",
+			"default": "./dist/secure-headers.js"
 		},
 		"./serve": {
+			"honey-source": "./src/serve-register.ts",
 			"types": "./dist/serve-register.d.ts",
-			"default": "./src/serve-register.ts"
+			"bun": "./src/serve-register.ts",
+			"default": "./dist/serve-register.js"
 		},
 		"./server-timing": {
+			"honey-source": "./src/server-timing.ts",
 			"types": "./dist/server-timing.d.ts",
-			"default": "./src/server-timing.ts"
+			"bun": "./src/server-timing.ts",
+			"default": "./dist/server-timing.js"
 		},
 		"./static": {
+			"honey-source": "./src/static.ts",
 			"types": "./dist/static.d.ts",
-			"default": "./src/static.ts"
+			"bun": "./src/static.ts",
+			"default": "./dist/static.js"
 		},
 		"./telemetry/otel": {
+			"honey-source": "./src/telemetry/otel.ts",
 			"types": "./dist/telemetry/otel.d.ts",
-			"default": "./src/telemetry/otel.ts"
+			"bun": "./src/telemetry/otel.ts",
+			"default": "./dist/telemetry/otel.js"
 		},
 		"./testing": {
+			"honey-source": "./src/testing.ts",
 			"types": "./dist/testing.d.ts",
-			"default": "./src/testing.ts"
+			"bun": "./src/testing.ts",
+			"default": "./dist/testing.js"
 		},
 		"./timeout": {
+			"honey-source": "./src/timeout.ts",
 			"types": "./dist/timeout.d.ts",
-			"default": "./src/timeout.ts"
+			"bun": "./src/timeout.ts",
+			"default": "./dist/timeout.js"
+		},
+		"./trust": {
+			"honey-source": "./src/trust.ts",
+			"types": "./dist/trust.d.ts",
+			"bun": "./src/trust.ts",
+			"default": "./dist/trust.js"
 		},
 		"./tree": {
+			"honey-source": "./src/tree.ts",
 			"types": "./dist/tree.d.ts",
-			"default": "./src/tree.ts"
+			"bun": "./src/tree.ts",
+			"default": "./dist/tree.js"
 		},
 		"./ws/bun": {
+			"honey-source": "./src/ws/bun.ts",
 			"types": "./dist/ws/bun.d.ts",
-			"default": "./src/ws/bun.ts"
+			"bun": "./src/ws/bun.ts",
+			"default": "./dist/ws/bun.js"
 		},
 		"./ws/cloudflare": {
+			"honey-source": "./src/ws/cloudflare.ts",
 			"types": "./dist/ws/cloudflare.d.ts",
-			"default": "./src/ws/cloudflare.ts"
+			"bun": "./src/ws/cloudflare.ts",
+			"default": "./dist/ws/cloudflare.js"
 		},
 		"./ws/deno": {
+			"honey-source": "./src/ws/deno.ts",
 			"types": "./dist/ws/deno.d.ts",
-			"default": "./src/ws/deno.ts"
+			"bun": "./src/ws/deno.ts",
+			"default": "./dist/ws/deno.js"
 		},
 		"./ws/node": {
+			"honey-source": "./src/ws/node.ts",
 			"types": "./dist/ws/node.d.ts",
-			"default": "./src/ws/node.ts"
+			"bun": "./src/ws/node.ts",
+			"default": "./dist/ws/node.js"
+		},
+		"./ws/session": {
+			"honey-source": "./src/ws/session.ts",
+			"types": "./dist/ws/session.d.ts",
+			"bun": "./src/ws/session.ts",
+			"default": "./dist/ws/session.js"
 		}
 	},
 	"publishConfig": {
 		"access": "public"
 	},
 	"scripts": {
-		"build:types": "tsc -p tsconfig.dts.json",
-		"prepack": "tsc -p tsconfig.dts.json",
+		"prepack": "bun scripts/build.ts",
 		"test": "vitest run",
 		"test:all": "vitest run --config vitest.all.config.ts",
 		"test:harness": "vitest run --config vitest.harness.config.ts",
@@ -231,7 +350,8 @@
 		"test:watch": "vitest",
 		"type:check": "tsc --noEmit -p tsconfig.src.json && tsc --noEmit -p tsconfig.types.json",
 		"type:check:tests": "NODE_OPTIONS='--max-old-space-size=4096' tsc --noEmit",
-		"type:check:types": "tsc --noEmit -p tsconfig.types.json"
+		"type:check:types": "tsc --noEmit -p tsconfig.types.json",
+		"build": "bun scripts/build.ts"
 	},
 	"dependencies": {
 		"jiti": "2.7.0"
@@ -243,22 +363,33 @@
 		"@total-typescript/ts-reset": "catalog:",
 		"@types/node": "catalog:",
 		"@types/ws": "catalog:",
+		"ajv": "8.20.0",
+		"ajv-formats": "3.0.1",
 		"arktype": "catalog:",
 		"effect": "catalog:",
+		"js-yaml": "4.3.1",
 		"ts-morph": "catalog:",
 		"typescript": "catalog:",
 		"valibot": "catalog:",
 		"vite": "catalog:",
 		"vitest": "catalog:",
+		"ws": "catalog:",
 		"yup": "catalog:",
 		"zod": "catalog:"
 	},
 	"peerDependencies": {
-		"ts-morph": ">=25.0.0"
+		"ts-morph": ">=25.0.0",
+		"ws": ">=8.0.0"
 	},
 	"peerDependenciesMeta": {
 		"ts-morph": {
 			"optional": true
+		},
+		"ws": {
+			"optional": true
 		}
+	},
+	"engines": {
+		"node": ">=22.12"
 	}
 }

package/src/accepts.ts

@@ -1,56 +1,102 @@
 type ParsedType = {
+	/** Position in the header, for stable tie-breaking. */
+	index: number
+	/** Media-type parameters other than q, names lowercased (more parameters = more specific). */
+	params: Map<string, string>
 	q: number
 	subtype: string
 	type: string
 }
 
+/** RFC 9110 §12.4.2: qvalue = ( "0" [ "." 0*3DIGIT ] ) / ( "1" [ "." 0*3("0") ] ). Lenient on digit count. */
+function parseQ(raw: string): number | null {
+	if (!/^(?:0(?:\.\d*)?|1(?:\.0*)?|\.\d+)$/.test(raw)) return null
+	const q = Number(raw)
+	return q >= 0 && q <= 1 ? q : null
+}
+
 function parseAccept(header: string): ParsedType[] {
 	const types: ParsedType[] = []
-	for (const part of header.split(",")) {
-		const trimmed = part.trim()
+	const parts = header.split(",")
+	for (let index = 0; index < parts.length; index++) {
+		const trimmed = parts[index].trim()
 		if (trimmed.length === 0) continue
 
 		const segments = trimmed.split(";")
-		const mediaType = segments[0].trim()
+		const mediaType = segments[0].trim().toLowerCase()
 		const slash = mediaType.indexOf("/")
-		if (slash === -1) continue
+		if (slash <= 0 || slash === mediaType.length - 1) continue
+		const type = mediaType.slice(0, slash)
+		const subtype = mediaType.slice(slash + 1)
+		/* `*\/html` is not a valid range. */
+		if (type === "*" && subtype !== "*") continue
 
-		let q = 1.0
+		let q = 1
+		const params = new Map<string, string>()
 		for (let i = 1; i < segments.length; i++) {
-			const param = segments[i].trim()
-			if (param.startsWith("q=")) {
-				const parsed = Number.parseFloat(param.slice(2))
-				if (!Number.isNaN(parsed)) q = parsed
+			const eq = segments[i].indexOf("=")
+			if (eq === -1) continue
+			const name = segments[i].slice(0, eq).trim().toLowerCase()
+			const value = segments[i].slice(eq + 1).trim()
+			if (name === "q") {
+				const parsed = parseQ(value)
+				/* An unparsable weight makes the whole range unusable rather than silently q=1. */
+				q = parsed ?? 0
+				/* Parameters after q are accept-extensions, not media-type parameters. */
+				break
 			}
+			params.set(name, unquote(value))
 		}
 
-		types.push({
-			q,
-			subtype: mediaType.slice(slash + 1).toLowerCase(),
-			type: mediaType.slice(0, slash).toLowerCase(),
-		})
+		types.push({ index, params, q, subtype, type })
 	}
-	return types.sort((a, b) => b.q - a.q)
+	return types
 }
 
-function matches(accept: ParsedType, supported: string): boolean {
-	const slash = supported.indexOf("/")
-	if (slash === -1) return false
-	const sType = supported.slice(0, slash)
-	const sSub = supported.slice(slash + 1)
+function unquote(value: string): string {
+	return value.length >= 2 && value.startsWith('"') && value.endsWith('"') ? value.slice(1, -1) : value
+}
 
-	if (accept.type === "*" && accept.subtype === "*") return true
-	if (accept.type === sType && accept.subtype === "*") return true
-	return accept.type === sType && accept.subtype === sSub
+/** `type/subtype;a=1;b=2` → its parameters, names lowercased. */
+function typeParams(segments: string[]): Map<string, string> {
+	const params = new Map<string, string>()
+	for (let i = 1; i < segments.length; i++) {
+		const eq = segments[i].indexOf("=")
+		if (eq === -1) continue
+		params.set(segments[i].slice(0, eq).trim().toLowerCase(), unquote(segments[i].slice(eq + 1).trim()))
+	}
+	return params
+}
+
+/**
+ * 0 = no match; otherwise higher is more specific. A range with parameters matches only a
+ * supported type that carries every one of them with the same value (RFC 9110 §12.5.1), so
+ * `application/json;v=2;q=0` excludes `application/json;v=2`, never plain `application/json`.
+ */
+function specificity(range: ParsedType, sType: string, sSub: string, sParams: Map<string, string>): number {
+	if (range.type === "*") return 1
+	if (range.type !== sType) return 0
+	if (range.subtype === "*") return 2
+	if (range.subtype !== sSub) return 0
+	for (const [name, value] of range.params) {
+		if (sParams.get(name) !== value) return 0
+	}
+	return 3 + range.params.size
 }
 
 /**
  * Pick the best supported content type based on the request's Accept header.
- * Returns null if no match found. Returns first supported type if no Accept header.
+ *
+ * Each supported type takes the weight of the most specific range that matches
+ * it (RFC 9110 §12.5.1), so `text/html;q=0, *\/*` excludes `text/html`. Among
+ * types with equal weight, the server's order in `supported` wins.
+ *
+ * Returns null if no match found. Returns the first supported type if there is
+ * no Accept header.
  */
 export function accepts(req: Request, supported: string[]): string | null {
 	const header = req.headers.get("accept")
-	if (header === null || header.length === 0) {
+	if (header === null || header.trim().length === 0) {
 		return supported[0] ?? null
 	}
 
@@ -59,19 +105,31 @@ export function accepts(req: Request, supported: string[]): string | null {
 		return supported[0] ?? null
 	}
 
-	/* for each supported type (server preference order), find best q match */
 	let bestMatch: string | null = null
-	let bestQ = -1
+	let bestQ = 0
 
 	for (const s of supported) {
-		for (const accept of parsed) {
-			if (accept.q === 0) continue
-			if (matches(accept, s) && accept.q > bestQ) {
-				bestQ = accept.q
-				bestMatch = s
-				break
+		const lower = s.toLowerCase()
+		const slash = lower.indexOf("/")
+		if (slash === -1) continue
+		const sType = lower.slice(0, slash)
+		const sSegments = s.slice(slash + 1).split(";")
+		const sSub = sSegments[0].trim().toLowerCase()
+		const sParams = typeParams(sSegments)
+
+		let weight = -1
+		let bestSpecificity = 0
+		for (const range of parsed) {
+			const spec = specificity(range, sType, sSub, sParams)
+			if (spec > bestSpecificity) {
+				bestSpecificity = spec
+				weight = range.q
 			}
 		}
+		if (weight > bestQ) {
+			bestQ = weight
+			bestMatch = s
+		}
 	}
 
 	return bestMatch

package/src/body-kind.ts

@@ -0,0 +1,67 @@
+import { isHoneyResponse, replaceResponse } from "./honey-response.ts"
+import { BODY_KIND } from "./producer-stream.ts"
+
+/** Set by `ctx.res.json/text/html/...` on native responses built from in-memory bytes. */
+const RAW_BODY = Symbol.for("honey.rawBody")
+
+/** The in-memory body of a response Honey built from a string or bytes, if any. */
+export function rawBodyOf(response: Response): string | Uint8Array | null {
+	if (isHoneyResponse(response)) return response.rawBody
+	return (response as Response & { [RAW_BODY]?: string | Uint8Array })[RAW_BODY] ?? null
+}
+
+/**
+ * What kind of body a response carries, decided without reading it.
+ *
+ * - `empty`: no body.
+ * - `buffered`: the whole body is already in memory (a response Honey built
+ *   from a string or bytes) or its size is declared by `content-length`, so
+ *   reading it is bounded.
+ * - `stream`: anything else (SSE, `generate()`, `new Response(stream)`, a
+ *   proxied `fetch()` without a length). Middleware must not buffer it.
+ *
+ * Content type is never consulted: SSE and NDJSON streams carry one.
+ * Honey's own responses are tagged when they are created: buffered ones by their raw body,
+ * streams by `BODY_KIND`. An untagged native response is a stream unless it declares a length.
+ */
+export function bodyKind(response: Response): "buffered" | "empty" | "stream" {
+	if (rawBodyOf(response) !== null) return "buffered"
+	/* `sse()`, `stream()` and `generate()` tag their responses at creation */
+	if ((response as Response & { [BODY_KIND]?: string })[BODY_KIND] === "stream") return "stream"
+	if (isHoneyResponse(response)) {
+		/* `body` is the stream (or null) when no raw bytes exist; reading it does not allocate. */
+		return response.body === null ? "empty" : "stream"
+	}
+	if (response.body === null) return "empty"
+	const length = response.headers.get("content-length")
+	if (length !== null && /^\d+$/.test(length.trim())) return "buffered"
+	return "stream"
+}
+
+/** A stream `sse()`, `stream()` or `generate()` created: possibly endless, never to be buffered. */
+export function isProducedStream(response: Response): boolean {
+	return (response as Response & { [BODY_KIND]?: string })[BODY_KIND] === "stream"
+}
+
+function noop(): void {}
+
+/**
+ * The response to a HEAD request: same status and headers, no body. A body Honey built in
+ * memory keeps its `content-length`, so HEAD reports the size GET would send; a stream is
+ * cancelled unread, so its producer never starts (or stops if it already did).
+ */
+export function headResponse(response: Response): Response {
+	if (response.status === 101) return response
+	const raw = rawBodyOf(response)
+	const headers = new Headers(response.headers as HeadersInit)
+	if (raw !== null) {
+		if (!headers.has("content-length")) {
+			const length = typeof raw === "string" ? new TextEncoder().encode(raw).byteLength : raw.byteLength
+			headers.set("content-length", String(length))
+		}
+	} else {
+		const body = response.body
+		if (body !== null && !body.locked) body.cancel().catch(noop)
+	}
+	return replaceResponse(response, { body: null, headers })
+}