@lovrozagar/honey 0.6.8 → 0.7.0

package/dist/serve-register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve-register.d.ts","sourceRoot":"","sources":["../src/serve-register.ts"],"names":[],"mappings":"AAGA,wBAAgB,WAAW,IAAI,IAAI,CAElC"}
+{"version":3,"file":"serve-register.d.ts","sourceRoot":"","sources":["../src/serve-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAG7C,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAChE,mGAAmG;AACnG,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B,wBAAgB,WAAW,IAAI,IAAI,CAElC"}

package/dist/serve-register.js

@@ -0,0 +1,9 @@
+import { startHoneyServer } from "./serve.js";
+import { registerServeRuntime } from "./serve-slot.js";
+/** Starts a server for `app` on the given runtime. Production build entries call this directly. */
+export { startHoneyServer };
+export function enableServe() {
+    registerServeRuntime((app, options) => startHoneyServer(app, options));
+}
+enableServe();
+//# sourceMappingURL=serve-register.js.map

package/dist/serve-register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-register.js","sourceRoot":"","sources":["../src/serve-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAGtD,mGAAmG;AACnG,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B,MAAM,UAAU,WAAW;IAC1B,oBAAoB,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAY,EAAE,OAAO,CAAC,CAAC,CAAA;AAChF,CAAC;AAED,WAAW,EAAE,CAAA"}

package/dist/serve-slot.d.ts

@@ -3,4 +3,7 @@ export type ServeStart = (app: unknown, options?: HoneyServeOptions) => Promise<
 export declare function registerServeRuntime(next: ServeStart): void;
 export declare function resetServeRuntime(): void;
 export declare function getServeRuntime(): ServeStart;
+/** Marks this process as running codegen: `app.serve()` resolves without listening. */
+export declare function setCodegenProcess(active: boolean): void;
+export declare function isCodegenProcess(): boolean;
 //# sourceMappingURL=serve-slot.d.ts.map

package/dist/serve-slot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve-slot.d.ts","sourceRoot":"","sources":["../src/serve-slot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEhE,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,iBAAiB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;AAM5F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAE3D;AAED,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAED,wBAAgB,eAAe,IAAI,UAAU,CAG5C"}
+{"version":3,"file":"serve-slot.d.ts","sourceRoot":"","sources":["../src/serve-slot.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEhE,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,iBAAiB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;AAY5F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAE3D;AAED,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAED,wBAAgB,eAAe,IAAI,UAAU,CAI5C;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAIvD;AAED,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C"}

package/dist/serve-slot.js

@@ -0,0 +1,52 @@
+import { detectRuntime } from "./detect-runtime.js";
+const MISSING = 'Honey.serve() requires `import "@lovrozagar/honey/serve"` in the app entry.';
+/**
+ * Set while codegen evaluates an app module. A global, not a module variable: the app may load a
+ * different copy of this module than the generator (jiti instance, source vs compiled build).
+ */
+const CODEGEN = Symbol.for("@lovrozagar/honey.codegen");
+let runtime;
+export function registerServeRuntime(next) {
+    runtime = next;
+}
+export function resetServeRuntime() {
+    runtime = undefined;
+}
+export function getServeRuntime() {
+    if (isCodegenProcess())
+        return codegenServe;
+    if (!runtime)
+        throw new Error(MISSING);
+    return runtime;
+}
+/** Marks this process as running codegen: `app.serve()` resolves without listening. */
+export function setCodegenProcess(active) {
+    const slot = globalThis;
+    if (active)
+        slot[CODEGEN] = true;
+    else
+        delete slot[CODEGEN];
+}
+export function isCodegenProcess() {
+    return globalThis[CODEGEN] === true;
+}
+/* codegen loads the app to read its routes; a top-level `await app.serve()` must not bind a port */
+const codegenServe = async (_app, options = {}) => {
+    let detected = options.runtime;
+    try {
+        detected ??= detectRuntime();
+    }
+    catch {
+        detected = "node";
+    }
+    const hostname = options.hostname ?? "127.0.0.1";
+    const port = options.port ?? 3000;
+    return {
+        async close() { },
+        hostname,
+        port,
+        runtime: detected === "cloudflare" ? "node" : detected,
+        url: `http://${hostname}:${port}`,
+    };
+};
+//# sourceMappingURL=serve-slot.js.map

package/dist/serve-slot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-slot.js","sourceRoot":"","sources":["../src/serve-slot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAKnD,MAAM,OAAO,GAAG,6EAA6E,CAAA;AAE7F;;;GAGG;AACH,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAA;AAEvD,IAAI,OAA+B,CAAA;AAEnC,MAAM,UAAU,oBAAoB,CAAC,IAAgB;IACpD,OAAO,GAAG,IAAI,CAAA;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB;IAChC,OAAO,GAAG,SAAS,CAAA;AACpB,CAAC;AAED,MAAM,UAAU,eAAe;IAC9B,IAAI,gBAAgB,EAAE;QAAE,OAAO,YAAY,CAAA;IAC3C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IACtC,OAAO,OAAO,CAAA;AACf,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAChD,MAAM,IAAI,GAAG,UAAgD,CAAA;IAC7D,IAAI,MAAM;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,OAAQ,UAAiD,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;AAC5E,CAAC;AAED,oGAAoG;AACpG,MAAM,YAAY,GAAe,KAAK,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE;IAC7D,IAAI,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAA;IAC9B,IAAI,CAAC;QACJ,QAAQ,KAAK,aAAa,EAAE,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,QAAQ,GAAG,MAAM,CAAA;IAClB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAA;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAA;IACjC,OAAO;QACN,KAAK,CAAC,KAAK,KAAI,CAAC;QAChB,QAAQ;QACR,IAAI;QACJ,OAAO,EAAE,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QACtD,GAAG,EAAE,UAAU,QAAQ,IAAI,IAAI,EAAE;KACjC,CAAA;AACF,CAAC,CAAA"}

package/dist/serve.d.ts

@@ -4,7 +4,11 @@ import { detectRuntime, type ServeRuntime } from "./detect-runtime.ts";
 export type { ServeRuntime };
 export { detectRuntime };
 export type ServeHandle = {
-    close(): Promise<void>;
+    /**
+     * Stop accepting connections, close WebSockets with 1001, and let in-flight requests finish
+     * for up to `timeout` ms (default 1000); then every connection is cut. Same on Node, Bun and Deno.
+     */
+    close(timeout?: number): Promise<void>;
     hostname: string;
     port: number;
     runtime: Exclude<ServeRuntime, "cloudflare">;
@@ -16,6 +20,19 @@ export type HoneyServeOptions = {
     hostname?: string;
     port?: number;
     runtime?: ServeRuntime;
+    /**
+     * Largest request body, in bytes; a bigger one is answered 413. Default 128 MiB on Node and
+     * Bun. Deno has no cap of its own.
+     */
+    maxRequestBodySize?: number;
+    /** Node only: `server.headersTimeout`, ms. */
+    headersTimeout?: number;
+    /** Node only: `server.requestTimeout`, ms. */
+    requestTimeout?: number;
+    /** Node only: `server.keepAliveTimeout`, ms. */
+    keepAliveTimeout?: number;
+    /** Node only: how long an upgrade request may take to become a WebSocket, ms (default 30 000). */
+    upgradeTimeout?: number;
 };
 export declare function startHoneyServer(app: Honey<Record<string, unknown>>, options?: HoneyServeOptions): Promise<ServeHandle>;
 //# sourceMappingURL=serve.d.ts.map

package/dist/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAQ,KAAK,WAAW,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEtE,YAAY,EAAE,YAAY,EAAE,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,CAAA;AAExB,MAAM,MAAM,WAAW,GAAG;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAC5C,GAAG,EAAE,MAAM,CAAA;CACX,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC/B,IAAI,CAAC,EAAE,OAAO,GAAG,WAAW,CAAA;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,YAAY,CAAA;CACtB,CAAA;AAYD,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACnC,OAAO,GAAE,iBAAsB,GAC7B,OAAO,CAAC,WAAW,CAAC,CA0FtB"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAQ,KAAK,WAAW,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAMtE,YAAY,EAAE,YAAY,EAAE,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,CAAA;AAExB,MAAM,MAAM,WAAW,GAAG;IACzB;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAC5C,GAAG,EAAE,MAAM,CAAA;CACX,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC/B,IAAI,CAAC,EAAE,OAAO,GAAG,WAAW,CAAA;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,gDAAgD;IAChD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kGAAkG;IAClG,cAAc,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA;AAkCD,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACnC,OAAO,GAAE,iBAAsB,GAC7B,OAAO,CAAC,WAAW,CAAC,CAoItB"}

package/dist/serve.js

@@ -0,0 +1,157 @@
+import { cors } from "./cors.js";
+import { detectRuntime } from "./detect-runtime.js";
+import { DEFAULT_MAX_REQUEST_BODY } from "./request-limits.js";
+import { setPeerAddress } from "./peer.js";
+import { hasValidHost } from "./client-info.js";
+export { detectRuntime };
+const DEFAULT_CLOSE_TIMEOUT = 1_000;
+/** The adapter the app already has (`app.wsAdapter(...)`), if any: serve() keeps it. */
+function ownAdapter(app) {
+    return app._graph.settings.wsAdapter;
+}
+/** Settle with `work`, or with `"timeout"` after `ms`; the timer never outlives the race. */
+async function within(work, ms) {
+    let timer;
+    const timeout = new Promise((r) => {
+        timer = setTimeout(() => r("timeout"), ms);
+    });
+    try {
+        return await Promise.race([work.then(() => "done"), timeout]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+const CF_SERVE_ERROR = "Honey.serve() cannot run on Cloudflare Workers. Export fetch:\n\n" +
+    "export default {\n" +
+    "  fetch: (req, env, ctx) => app.fetch(req, env, ctx),\n" +
+    "}\n";
+function publicHost(hostname) {
+    return hostname === "0.0.0.0" || hostname === "::" ? "127.0.0.1" : hostname;
+}
+export async function startHoneyServer(app, options = {}) {
+    const runtime = options.runtime ?? detectRuntime();
+    if (runtime === "cloudflare") {
+        throw new Error(CF_SERVE_ERROR);
+    }
+    const listening = app;
+    /* app-wide: every route, 404, 405 and preflight run it first — replaced, not stacked, on a re-serve */
+    const corsMw = options.cors ? cors(options.cors === true ? undefined : options.cors) : null;
+    app._setGlobal("serve:cors", corsMw);
+    const hostname = options.hostname ?? (runtime === "deno" ? "127.0.0.1" : "0.0.0.0");
+    const port = options.port ?? 3000;
+    const env = (options.env ?? {});
+    if (runtime === "bun") {
+        const existing = ownAdapter(listening);
+        let bunWs;
+        if (existing === null) {
+            const { bunWebSocket } = await import("./ws/bun.js");
+            bunWs = bunWebSocket();
+            listening.wsAdapter(bunWs);
+        }
+        else if ("websocket" in existing) {
+            bunWs = existing;
+        }
+        else {
+            throw new Error("serve() on Bun needs a bunWebSocket() adapter, but app.wsAdapter() was given another one");
+        }
+        const BunNs = globalThis.Bun;
+        /* `server` is the same object for every request: build the env once */
+        let envWithServer = null;
+        const server = BunNs.serve({
+            fetch: (req, srv) => {
+                if (envWithServer === null)
+                    envWithServer = { ...env, server: srv };
+                return listening.fetch(req, envWithServer);
+            },
+            hostname,
+            maxRequestBodySize: options.maxRequestBodySize ?? DEFAULT_MAX_REQUEST_BODY,
+            port,
+            websocket: bunWs.websocket,
+        });
+        const bound = server.port;
+        return {
+            async close(timeout = DEFAULT_CLOSE_TIMEOUT) {
+                bunWs.closeAll?.(1001, "server shutting down");
+                /* graceful first: in-flight requests finish; then cut what is left. Bun before 1.4 keeps
+                 * idle keep-alive connections serving after stop(false), so close those explicitly,
+                 * now and again once in-flight requests have finished and left theirs idle. */
+                const graceful = Promise.resolve(server.stop(false));
+                server.closeIdleConnections?.();
+                if ((await within(graceful, timeout)) === "timeout")
+                    await Promise.resolve(server.stop(true));
+                server.closeIdleConnections?.();
+            },
+            hostname,
+            port: bound,
+            runtime,
+            url: `http://${publicHost(hostname)}:${bound}`,
+        };
+    }
+    if (runtime === "deno") {
+        if (ownAdapter(listening) === null) {
+            const { denoWebSocket } = await import("./ws/deno.js");
+            listening.wsAdapter(denoWebSocket());
+        }
+        const DenoNs = globalThis.Deno;
+        const ac = new AbortController();
+        const server = DenoNs.serve({ hostname, port, signal: ac.signal }, (req, info) => {
+            /* Deno builds req.url from Host and the target: a `Host: x/admin?` would pick the path */
+            if (!hasValidHost(req))
+                return listening._badRequestTarget();
+            const peer = info?.remoteAddr?.hostname;
+            if (typeof peer === "string")
+                setPeerAddress(req, peer);
+            return listening.fetch(req, env);
+        });
+        const bound = server.addr?.port ?? port;
+        return {
+            async close(timeout = DEFAULT_CLOSE_TIMEOUT) {
+                ownAdapter(listening)?.closeAll?.(1001, "server shutting down");
+                if (server.shutdown) {
+                    /* graceful: in-flight requests finish. Deno has no forced close, so a request still
+                     * running after `timeout` ends on its own (aborting the signal now would throw) */
+                    await within(server.shutdown(), timeout);
+                    return;
+                }
+                ac.abort();
+                await within(server.finished ?? Promise.resolve(), timeout);
+            },
+            hostname,
+            port: bound,
+            runtime,
+            url: `http://${publicHost(hostname)}:${bound}`,
+        };
+    }
+    const { serve } = await import("./node.js");
+    if (ownAdapter(listening) === null) {
+        const { nodeWebSocket } = await import("./ws/node.js");
+        listening.wsAdapter(nodeWebSocket());
+    }
+    const server = serve(listening, {
+        env,
+        headersTimeout: options.headersTimeout,
+        hostname,
+        keepAliveTimeout: options.keepAliveTimeout,
+        maxRequestBodySize: options.maxRequestBodySize,
+        port,
+        requestTimeout: options.requestTimeout,
+        upgradeTimeout: options.upgradeTimeout,
+    });
+    await new Promise((resolve, reject) => {
+        server.once("listening", () => resolve());
+        server.once("error", reject);
+    });
+    const addr = server.address();
+    const bound = typeof addr === "object" && addr !== null ? addr.port : port;
+    return {
+        async close(timeout = DEFAULT_CLOSE_TIMEOUT) {
+            await server.shutdown(timeout);
+        },
+        hostname,
+        port: bound,
+        runtime: "node",
+        url: `http://${publicHost(hostname)}:${bound}`,
+    };
+}
+//# sourceMappingURL=serve.js.map

package/dist/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAoB,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,aAAa,EAAqB,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAI/C,OAAO,EAAE,aAAa,EAAE,CAAA;AAmCxB,MAAM,qBAAqB,GAAG,KAAK,CAAA;AAInC,wFAAwF;AACxF,SAAS,UAAU,CAAC,GAAmC;IACtD,OAAQ,GAA+B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAA;AAClE,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,MAAM,CAAC,IAAsB,EAAE,EAAU;IACvD,IAAI,KAAgD,CAAA;IACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,CAAC,EAAE,EAAE;QAC5C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IACF,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAe,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IACvE,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;AACF,CAAC;AAED,MAAM,cAAc,GACnB,mEAAmE;IACnE,oBAAoB;IACpB,yDAAyD;IACzD,KAAK,CAAA;AAEN,SAAS,UAAU,CAAC,QAAgB;IACnC,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAmC,EACnC,OAAO,GAAsB,EAAE;IAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,aAAa,EAAE,CAAA;IAClD,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;IAChC,CAAC;IAED,MAAM,SAAS,GAAmC,GAAG,CAAA;IACrD,uGAAuG;IACvG,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAC1F;IAAC,GAAiE,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAEpG,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACnF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAA;IACjC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAA;IAE1D,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QACtC,IAAI,KAAmB,CAAA;QACvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;YACpD,KAAK,GAAG,YAAY,EAAE,CAAA;YACtB,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC;aAAM,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;YACpC,KAAK,GAAG,QAAwB,CAAA;QACjC,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;QAC5G,CAAC;QACD,MAAM,KAAK,GAAI,UAA0F,CAAC,GAAG,CAAA;QAC7G,uEAAuE;QACvE,IAAI,aAAa,GAAmC,IAAI,CAAA;QACxD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,KAAK,EAAE,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE;gBACrC,IAAI,aAAa,KAAK,IAAI;oBAAE,aAAa,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;gBACnE,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;YAC3C,CAAC;YACD,QAAQ;YACR,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,wBAAwB;YAC1E,IAAI;YACJ,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAA;QACzB,OAAO;YACN,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,qBAAqB;gBAC1C,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;gBAC9C;;+FAE+E;gBAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;gBACpD,MAAM,CAAC,oBAAoB,EAAE,EAAE,CAAA;gBAC/B,IAAI,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,SAAS;oBAAE,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;gBAC7F,MAAM,CAAC,oBAAoB,EAAE,EAAE,CAAA;YAChC,CAAC;YACD,QAAQ;YACR,IAAI,EAAE,KAAK;YACX,OAAO;YACP,GAAG,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE;SAC9C,CAAA;IACF,CAAC;IAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;YACtD,SAAS,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAA;QACrC,CAAC;QACD,MAAM,MAAM,GACX,UAQA,CAAC,IAAI,CAAA;QACN,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YAChF,0FAA0F;YAC1F,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;gBAAE,OAAQ,SAA0D,CAAC,iBAAiB,EAAE,CAAA;YAC9G,MAAM,IAAI,GAAG,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAA;YACvC,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACvD,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACjC,CAAC,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAA;QACvC,OAAO;YACN,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,qBAAqB;gBAC1C,UAAU,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;gBAC/D,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACrB;uGACmF;oBACnF,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAA;oBACxC,OAAM;gBACP,CAAC;gBACD,EAAE,CAAC,KAAK,EAAE,CAAA;gBACV,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;YAC5D,CAAC;YACD,QAAQ;YACR,IAAI,EAAE,KAAK;YACX,OAAO;YACP,GAAG,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE;SAC9C,CAAA;IACF,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAC3C,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;QACtD,SAAS,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAA;IACrC,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAkB,EAAE;QACxC,GAAG;QACH,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,QAAQ;QACR,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,IAAI;QACJ,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,cAAc,EAAE,OAAO,CAAC,cAAc;KACtC,CAAC,CAAA;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IAC7B,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1E,OAAO;QACN,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,qBAAqB;YAC1C,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC/B,CAAC;QACD,QAAQ;QACR,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE;KAC9C,CAAA;AACF,CAAC"}

package/dist/server-timing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-timing.d.ts","sourceRoot":"","sources":["../src/server-timing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,MAAM,MAAM,MAAM,GAAG;IACpB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/C,CAAA;AAkBD,wBAAgB,YAAY,IAAI,YAAY,CAAC,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0CnE"}
+{"version":3,"file":"server-timing.d.ts","sourceRoot":"","sources":["../src/server-timing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAGnD,MAAM,MAAM,MAAM,GAAG;IACpB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/C,CAAA;AAqBD,wBAAgB,YAAY,IAAI,YAAY,CAAC,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0CnE"}

package/dist/server-timing.js

@@ -0,0 +1,51 @@
+import { namedMiddleware } from "./middleware.js";
+import { withHeaders } from "./with-headers.js";
+/* metric names are RFC 9110 tokens; anything else becomes `_` */
+const nonTokenRe = /[^!#$%&'*+.^`|~\w-]/g;
+function sanitizeName(name) {
+    const token = name.replace(nonTokenRe, "_");
+    return token.length > 0 ? token : "_";
+}
+/* descriptions are quoted-strings: latin1 only, no controls, `\` and `"` escaped */
+const nonQuotableRe = /[^\t\x20-\x7e\x80-\xff]/g;
+function escapeDescription(desc) {
+    return desc.replace(nonQuotableRe, "?").replace(/[\\"]/g, "\\$&");
+}
+export function serverTiming() {
+    const mw = async (_ctx, next) => {
+        const requestStart = performance.now();
+        const entries = new Map();
+        const timing = {
+            end(name) {
+                const entry = entries.get(name);
+                if (entry) {
+                    entry.end = performance.now();
+                }
+            },
+            start(name, description) {
+                entries.set(name, { description, start: performance.now() });
+            },
+        };
+        const response = await next({ timing });
+        /* auto-close any unclosed timings */
+        const now = performance.now();
+        const parts = [];
+        for (const [name, entry] of entries) {
+            const dur = ((entry.end ?? now) - entry.start).toFixed(2);
+            let part = sanitizeName(name);
+            if (entry.description) {
+                part += `;desc="${escapeDescription(entry.description)}"`;
+            }
+            part += `;dur=${dur}`;
+            parts.push(part);
+        }
+        /* always include total request duration */
+        const totalDur = (performance.now() - requestStart).toFixed(2);
+        parts.push(`total;dur=${totalDur}`);
+        /* append: an upstream or handler Server-Timing is kept */
+        const value = parts.join(", ");
+        return withHeaders(response, (headers) => headers.append("server-timing", value));
+    };
+    return namedMiddleware("serverTiming", mw);
+}
+//# sourceMappingURL=server-timing.js.map

package/dist/server-timing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-timing.js","sourceRoot":"","sources":["../src/server-timing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAa/C,iEAAiE;AACjE,MAAM,UAAU,GAAG,sBAAsB,CAAA;AACzC,SAAS,YAAY,CAAC,IAAY;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAA;AACtC,CAAC;AAED,oFAAoF;AACpF,MAAM,aAAa,GAAG,0BAA0B,CAAA;AAChD,SAAS,iBAAiB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,YAAY;IAC3B,MAAM,EAAE,GAAyC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACrE,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;QACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;QAE9C,MAAM,MAAM,GAAW;YACtB,GAAG,CAAC,IAAY;gBACf,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAC/B,IAAI,KAAK,EAAE,CAAC;oBACX,KAAK,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;gBAC9B,CAAC;YACF,CAAC;YACD,KAAK,CAAC,IAAY,EAAE,WAAoB;gBACvC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YAC7D,CAAC;SACD,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAEvC,qCAAqC;QACrC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;QAC7B,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YACzD,IAAI,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAC7B,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvB,IAAI,IAAI,UAAU,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAA;YAC1D,CAAC;YACD,IAAI,IAAI,QAAQ,GAAG,EAAE,CAAA;YACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjB,CAAC;QAED,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC9D,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAA;QAEnC,0DAA0D;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9B,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAA;IAClF,CAAC,CAAA;IAED,OAAO,eAAe,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;AAC3C,CAAC"}

package/dist/static.d.ts

@@ -1,8 +1,17 @@
 import type { MiddlewareFn } from "./middleware.ts";
 type StaticConfig<TCtx> = {
+    /**
+     * Returns the file for `filePath`, or `null` to fall through to the next handler.
+     * `filePath` starts with `/`, is decoded once, and has no `.`, `..`, empty, NUL, `:` or
+     * separator-bearing segments — joining it onto a root directory cannot leave that root,
+     * on POSIX or Windows.
+     */
     resolve: (ctx: TCtx, filePath: string) => Response | null | Promise<Response | null>;
+    /** Mount point, matched on whole segments: `/assets` serves `/assets/x`, never `/assets-private/x`. */
     prefix?: string;
+    /** Extra response headers; a function receives the same `filePath` that `resolve` got. */
     headers?: Record<string, string> | ((filePath: string) => Record<string, string>);
+    /** Rewrites the decoded file path before `resolve`. The result is checked again. */
     rewritePath?: (filePath: string, ctx: TCtx) => string;
 };
 export declare function staticFiles<TCtx extends {

package/dist/static.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"static.d.ts","sourceRoot":"","sources":["../src/static.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,KAAK,YAAY,CAAC,IAAI,IAAI;IACzB,OAAO,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IACpF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjF,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,KAAK,MAAM,CAAA;CACrD,CAAA;AAID,wBAAgB,WAAW,CAAC,IAAI,SAAS;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CA8C7G"}
+{"version":3,"file":"static.d.ts","sourceRoot":"","sources":["../src/static.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAInD,KAAK,YAAY,CAAC,IAAI,IAAI;IACzB;;;;;OAKG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IACpF,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjF,oFAAoF;IACpF,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,KAAK,MAAM,CAAA;CACrD,CAAA;AAoDD,wBAAgB,WAAW,CAAC,IAAI,SAAS;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAwC7G"}

package/dist/static.js

@@ -0,0 +1,102 @@
+import { namedMiddleware } from "./middleware.js";
+import { normalizePath, pathOfUrl } from "./request-path.js";
+import { withHeaders } from "./with-headers.js";
+function normalizePrefix(prefix) {
+    const normalized = normalizePath(prefix.startsWith("/") ? prefix : `/${prefix}`);
+    if (normalized === null)
+        throw new Error(`staticFiles: invalid prefix ${JSON.stringify(prefix)}`);
+    return normalized.length > 1 && normalized.endsWith("/") ? normalized.slice(0, -1) : normalized;
+}
+/**
+ * `/`-joined decoded segments, or `null` when any segment is malformed percent-encoding or
+ * decodes to something a file system treats specially (`.`, `..`, empty, a separator, NUL, `:`).
+ */
+function safeFilePath(encoded) {
+    const parts = encoded.split("/");
+    const out = [];
+    for (let i = 0; i < parts.length; i++) {
+        const part = parts[i];
+        if (part === "") {
+            /* the leading slash, and a trailing one (a directory request) */
+            if (i === 0 || i === parts.length - 1)
+                continue;
+            return null;
+        }
+        let seg;
+        try {
+            seg = decodeURIComponent(part);
+        }
+        catch {
+            return null;
+        }
+        if (!isSafeSegment(seg))
+            return null;
+        out.push(seg);
+    }
+    const joined = `/${out.join("/")}`;
+    return out.length > 0 && encoded.endsWith("/") ? `${joined}/` : joined;
+}
+function isSafeSegment(seg) {
+    if (seg === "" || seg === "." || seg === "..")
+        return false;
+    /* `:` makes a Windows drive (`C:`) or alternate data stream (`a.txt::$DATA`) */
+    return !seg.includes("/") && !seg.includes("\\") && !seg.includes("\0") && !seg.includes(":");
+}
+/** Re-checks a `rewritePath` result: it must be the same safe shape `resolve` would get without one. */
+function safeRewrite(path) {
+    if (!path.startsWith("/"))
+        return null;
+    const parts = path.split("/");
+    for (let i = 1; i < parts.length; i++) {
+        if (parts[i] === "" && i === parts.length - 1)
+            continue;
+        if (!isSafeSegment(parts[i]))
+            return null;
+    }
+    return path;
+}
+export function staticFiles(config) {
+    const prefix = normalizePrefix(config.prefix ?? "/");
+    const mw = async (ctx, next) => {
+        const method = ctx.req.method;
+        if (method !== "GET" && method !== "HEAD")
+            return next();
+        /* the normalized path the router matched — never the raw request target */
+        const fromCtx = ctx.path;
+        const path = typeof fromCtx === "string" && fromCtx !== "" ? fromCtx : normalizePath(pathOfUrl(ctx.req.url));
+        if (path === null)
+            return next();
+        let rest;
+        if (prefix === "/") {
+            rest = path;
+        }
+        else if (path === prefix) {
+            rest = "/";
+        }
+        else if (path.startsWith(prefix) && path.charCodeAt(prefix.length) === 47) {
+            rest = path.substring(prefix.length);
+        }
+        else {
+            return next();
+        }
+        const decoded = safeFilePath(rest);
+        if (decoded === null)
+            return next();
+        const filePath = config.rewritePath ? safeRewrite(config.rewritePath(decoded, ctx)) : decoded;
+        if (filePath === null)
+            return next();
+        const response = await config.resolve(ctx, filePath);
+        if (response === null)
+            return next();
+        if (!config.headers)
+            return response;
+        /* a resolver's Response can have immutable headers (`fetch()`, a Workers ASSETS binding) */
+        const extra = typeof config.headers === "function" ? config.headers(filePath) : config.headers;
+        return withHeaders(response, (headers) => {
+            for (const key of Object.keys(extra))
+                headers.set(key, extra[key]);
+        });
+    };
+    return namedMiddleware("staticFiles", mw);
+}
+//# sourceMappingURL=static.js.map

package/dist/static.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.js","sourceRoot":"","sources":["../src/static.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAkB/C,SAAS,eAAe,CAAC,MAAc;IACtC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAA;IAChF,IAAI,UAAU,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjG,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;AAChG,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,OAAe;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACjB,iEAAiE;YACjE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAQ;YAC/C,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,IAAI,GAAW,CAAA;QACf,IAAI,CAAC;YACJ,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACpC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAClC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;AACvE,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IACjC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC3D,gFAAgF;IAChF,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AAC9F,CAAC;AAED,wGAAwG;AACxG,SAAS,WAAW,CAAC,IAAY;IAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAQ;QACvD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;IAC1C,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAgC,MAA0B;IACpF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAA;IAEpD,MAAM,EAAE,GAA2B,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAA;QAC7B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,EAAE,CAAA;QAExD,2EAA2E;QAC3E,MAAM,OAAO,GAAI,GAA0B,CAAC,IAAI,CAAA;QAChD,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5G,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,EAAE,CAAA;QAEhC,IAAI,IAAY,CAAA;QAChB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACpB,IAAI,GAAG,IAAI,CAAA;QACZ,CAAC;aAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,GAAG,GAAG,CAAA;QACX,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7E,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;aAAM,CAAC;YACP,OAAO,IAAI,EAAE,CAAA;QACd,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,EAAE,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;QAC7F,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,EAAE,CAAA;QAEpC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACpD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,EAAE,CAAA;QAEpC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAA;QACpC,4FAA4F;QAC5F,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAA;QAC9F,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACnE,CAAC,CAAC,CAAA;IACH,CAAC,CAAA;IAED,OAAO,eAAe,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;AAC1C,CAAC"}

package/dist/telemetry/otel.d.ts

@@ -18,6 +18,7 @@ type TelemetryAdapter = {
         duration: number;
         method: string;
         path: string;
+        route?: string;
         status: number;
     }): void;
     onMethodNotAllowed?(ctx: {
@@ -50,6 +51,7 @@ type TelemetryAdapter = {
         params: Record<string, string>;
         path: string;
         req: Request;
+        route?: string;
     }): void;
 };
 export declare function otelAdapter(options: {

package/dist/telemetry/otel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otel.d.ts","sourceRoot":"","sources":["../../src/telemetry/otel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,KAAK,IAAI,GAAG;IACX,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAClE,GAAG,IAAI,IAAI,CAAA;IACX,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/C,CAAA;AAED,KAAK,MAAM,GAAG;IACb,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B,CAAA;AAED,KAAK,gBAAgB,GAAG;IACvB,OAAO,CAAC,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC1F,SAAS,CAAC,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IACzF,kBAAkB,CAAC,CAAC,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACjG,YAAY,CAAC,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC7E,UAAU,CAAC,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACtE,SAAS,CAAC,CAAC,GAAG,EAAE;QAAE,GAAG,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACrD,UAAU,CAAC,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC1E,OAAO,CAAC,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;CACnG,CAAA;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CA8GzE"}
+{"version":3,"file":"otel.d.ts","sourceRoot":"","sources":["../../src/telemetry/otel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,KAAK,IAAI,GAAG;IACX,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAClE,GAAG,IAAI,IAAI,CAAA;IACX,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/C,CAAA;AAED,KAAK,MAAM,GAAG;IACb,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B,CAAA;AAED,KAAK,gBAAgB,GAAG;IACvB,OAAO,CAAC,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC1F,SAAS,CAAC,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IACzG,kBAAkB,CAAC,CAAC,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACjG,YAAY,CAAC,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC7E,UAAU,CAAC,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACtE,SAAS,CAAC,CAAC,GAAG,EAAE;QAAE,GAAG,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACrD,UAAU,CAAC,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC1E,OAAO,CAAC,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CACnH,CAAA;AAqBD,wBAAgB,WAAW,CAAC,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAiHzE"}