@lovrozagar/honey 0.6.8 → 0.7.1

package/dist/request-path.js

@@ -0,0 +1,178 @@
+const PLAIN = 0;
+/** a character the slow path rewrites: a backslash, or one `encodeSegment` percent-encodes */
+const SLOW = 1;
+const PERCENT = 2;
+const SLASH = 3;
+const CHAR_CLASS = new Uint8Array(128);
+for (let c = 0; c < 128; c++) {
+    if (c <= 0x20 || c === 0x7f || c === 92 || needsEncoding(c))
+        CHAR_CLASS[c] = SLOW;
+}
+CHAR_CLASS[37] = PERCENT;
+CHAR_CLASS[47] = SLASH;
+/**
+ * The request path the router, scopes, `ctx.path`, `proxy()` and `staticFiles()` all see.
+ *
+ * Policy, applied the same way on every runtime:
+ * - empty segments collapse: `//admin///users` is `/admin/users`
+ * - dot segments resolve: `.` is dropped and `..` removes the segment before it, never past
+ *   the root; `%2e` counts as a dot, as it does for WHATWG URL parsing
+ * - a trailing slash is kept (the router and `trailingSlash()` decide what it means)
+ * - a backslash is a `/`, and characters a URL path cannot hold raw (space, controls, `"`, `<`,
+ *   `>`, `` ` ``, `{`, `}`, non-ASCII) are percent-encoded as UTF-8 — what WHATWG URL parsing
+ *   does, so a runtime that hands the app the raw target (Deno) and one that parses it first
+ *   (Bun, Node) route the same bytes the same way
+ * - an encoded `/` or `\` (`%2F`, `%5C`) is rejected unless `encodedSlashes` is `"allow"`: a
+ *   segment that decodes to a path separator means one thing to this router and another to
+ *   whatever the path is forwarded to (a proxy upstream, a file system). Allowed, it stays
+ *   encoded in the path and decodes into a param value.
+ * - everything else stays percent-encoded; params are decoded when they are extracted
+ *
+ * Returns `null` for a rejected path; the app answers 400.
+ */
+export function normalizePath(raw, encodedSlashes = "reject") {
+    const rejectEncoded = encodedSlashes === "reject";
+    let canonical = raw.charCodeAt(0) === 47;
+    const len = raw.length;
+    for (let i = 0; i < len; i++) {
+        const c = raw.charCodeAt(i);
+        const k = c < 128 ? CHAR_CLASS[c] : SLOW;
+        if (k === PLAIN)
+            continue;
+        if (k === SLOW) {
+            canonical = false;
+        }
+        else if (k === PERCENT) {
+            const hi = raw.charCodeAt(i + 1);
+            const lo = raw.charCodeAt(i + 2) | 0x20;
+            if (hi === 50 /* 2 */) {
+                if (lo === 102 /* f */ && rejectEncoded)
+                    return null;
+                if (lo === 101 /* e */)
+                    canonical = false;
+            }
+            else if (hi === 53 /* 5 */ && lo === 99 /* c */ && rejectEncoded) {
+                return null;
+            }
+        }
+        else {
+            const n = raw.charCodeAt(i + 1);
+            if (n === 47 || n === 46 /* . */)
+                canonical = false;
+        }
+    }
+    if (canonical)
+        return raw;
+    const out = [];
+    const segments = raw.replaceAll("\\", "/").split("/");
+    let trailing = false;
+    for (let i = 0; i < segments.length; i++) {
+        const seg = segments[i];
+        const last = i === segments.length - 1;
+        if (seg === "") {
+            if (last && i > 0)
+                trailing = true;
+            continue;
+        }
+        const dots = dotSegment(seg);
+        if (dots === 0) {
+            out.push(encodeSegment(seg));
+            continue;
+        }
+        if (dots === 2)
+            out.pop();
+        /* `/a/b/..` is `/a/`, like URL resolution */
+        if (last)
+            trailing = true;
+    }
+    if (out.length === 0)
+        return "/";
+    const path = `/${out.join("/")}`;
+    return trailing ? `${path}/` : path;
+}
+/**
+ * The WHATWG path percent-encode set, plus every non-ASCII code unit. `^` joined the set in
+ * 2023; Node and Bun encode it, Deno's parser does not yet, so it is encoded here to keep
+ * `ctx.path` the same on all three.
+ */
+function needsEncoding(c) {
+    return (c <= 0x20 ||
+        c >= 0x7f ||
+        c === 34 /* " */ ||
+        c === 60 /* < */ ||
+        c === 62 /* > */ ||
+        c === 94 /* ^ */ ||
+        c === 96 /* ` */ ||
+        c === 123 /* { */ ||
+        c === 125 /* } */);
+}
+/**
+ * One path segment as a normalized request path holds it: characters a URL path cannot hold
+ * raw become UTF-8 percent escapes, everything else (existing escapes included) is kept.
+ * Route patterns encode their static segments with this too, so `app.get("/é")` matches the
+ * `/%C3%A9` every runtime hands the app.
+ */
+export function encodeSegment(seg) {
+    let needs = false;
+    for (let i = 0; i < seg.length; i++) {
+        if (needsEncoding(seg.charCodeAt(i))) {
+            needs = true;
+            break;
+        }
+    }
+    if (!needs)
+        return seg;
+    let out = "";
+    for (const ch of seg) {
+        const c = ch.charCodeAt(0);
+        if (ch.length === 1 && !needsEncoding(c)) {
+            out += ch;
+            continue;
+        }
+        try {
+            out += encodeURIComponent(ch);
+        }
+        catch {
+            /* a lone surrogate: U+FFFD, as URL parsing encodes it */
+            out += "%EF%BF%BD";
+        }
+    }
+    return out;
+}
+/** 1 for `.`, 2 for `..` (either may be written `%2e`), 0 for anything else. */
+function dotSegment(seg) {
+    if (seg.length > 6)
+        return 0;
+    const s = seg.toLowerCase().replaceAll("%2e", ".");
+    if (s === ".")
+        return 1;
+    if (s === "..")
+        return 2;
+    return 0;
+}
+/** The path of a request URL without `new URL()`: everything from the first `/` after the authority, up to `?` or `#`. */
+export function pathOfUrl(rawUrl) {
+    const protoEnd = rawUrl.indexOf("//");
+    const pathStart = protoEnd === -1 ? 0 : rawUrl.indexOf("/", protoEnd + 2);
+    if (pathStart === -1)
+        return "/";
+    for (let i = pathStart; i < rawUrl.length; i++) {
+        const c = rawUrl.charCodeAt(i);
+        if (c === 63 /* ? */ || c === 35 /* # */)
+            return rawUrl.substring(pathStart, i);
+    }
+    return rawUrl.substring(pathStart);
+}
+/** `?query` of a request URL (with the `?`), or `""`. Never includes a fragment. */
+export function searchOfUrl(rawUrl) {
+    const protoEnd = rawUrl.indexOf("//");
+    const pathStart = protoEnd === -1 ? 0 : rawUrl.indexOf("/", protoEnd + 2);
+    if (pathStart === -1)
+        return "";
+    const q = rawUrl.indexOf("?", pathStart);
+    if (q === -1)
+        return "";
+    const hash = rawUrl.indexOf("#", q);
+    return hash === -1 ? rawUrl.substring(q) : rawUrl.substring(q, hash);
+}
+//# sourceMappingURL=request-path.js.map

package/dist/request-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-path.js","sourceRoot":"","sources":["../src/request-path.ts"],"names":[],"mappings":"AAAA,MAAM,KAAK,GAAG,CAAC,CAAA;AACf,8FAA8F;AAC9F,MAAM,IAAI,GAAG,CAAC,CAAA;AACd,MAAM,OAAO,GAAG,CAAC,CAAA;AACjB,MAAM,KAAK,GAAG,CAAC,CAAA;AAEf,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;AACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,aAAa,CAAC,CAAC,CAAC;QAAE,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;AAClF,CAAC;AACD,UAAU,CAAC,EAAE,CAAC,GAAG,OAAO,CAAA;AACxB,UAAU,CAAC,EAAE,CAAC,GAAG,KAAK,CAAA;AAEtB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,cAAc,GAAuB,QAAQ;IACvF,MAAM,aAAa,GAAG,cAAc,KAAK,QAAQ,CAAA;IACjD,IAAI,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;IACxC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAA;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACxC,IAAI,CAAC,KAAK,KAAK;YAAE,SAAQ;QACzB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAChB,SAAS,GAAG,KAAK,CAAA;QAClB,CAAC;aAAM,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAChC,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAA;YACvC,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;gBACvB,IAAI,EAAE,KAAK,GAAG,CAAC,OAAO,IAAI,aAAa;oBAAE,OAAO,IAAI,CAAA;gBACpD,IAAI,EAAE,KAAK,GAAG,CAAC,OAAO;oBAAE,SAAS,GAAG,KAAK,CAAA;YAC1C,CAAC;iBAAM,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,IAAI,aAAa,EAAE,CAAC;gBACpE,OAAO,IAAI,CAAA;YACZ,CAAC;QACF,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/B,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO;gBAAE,SAAS,GAAG,KAAK,CAAA;QACpD,CAAC;IACF,CAAC;IACD,IAAI,SAAS;QAAE,OAAO,GAAG,CAAA;IAEzB,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACrD,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACvB,MAAM,IAAI,GAAG,CAAC,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;QACtC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;gBAAE,QAAQ,GAAG,IAAI,CAAA;YAClC,SAAQ;QACT,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;YAC5B,SAAQ;QACT,CAAC;QACD,IAAI,IAAI,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,EAAE,CAAA;QACzB,6CAA6C;QAC7C,IAAI,IAAI;YAAE,QAAQ,GAAG,IAAI,CAAA;IAC1B,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAChC,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,CAAS;IAC/B,OAAO,CACN,CAAC,IAAI,IAAI;QACT,CAAC,IAAI,IAAI;QACT,CAAC,KAAK,EAAE,CAAC,OAAO;QAChB,CAAC,KAAK,EAAE,CAAC,OAAO;QAChB,CAAC,KAAK,EAAE,CAAC,OAAO;QAChB,CAAC,KAAK,EAAE,CAAC,OAAO;QAChB,CAAC,KAAK,EAAE,CAAC,OAAO;QAChB,CAAC,KAAK,GAAG,CAAC,OAAO;QACjB,CAAC,KAAK,GAAG,CAAC,OAAO,CACjB,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,KAAK,GAAG,IAAI,CAAA;YACZ,MAAK;QACN,CAAC;IACF,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAA;IACtB,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,IAAI,EAAE,CAAA;YACT,SAAQ;QACT,CAAC;QACD,IAAI,CAAC;YACJ,GAAG,IAAI,kBAAkB,CAAC,EAAE,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,yDAAyD;YACzD,GAAG,IAAI,WAAW,CAAA;QACnB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAC,GAAW;IAC9B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAClD,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAA;IACvB,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IACxB,OAAO,CAAC,CAAA;AACT,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,SAAS,CAAC,MAAc;IACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAA;IACzE,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,GAAG,CAAA;IAChC,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;AACnC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,MAAc;IACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAA;IACzE,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACxC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACvB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACnC,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;AACrE,CAAC"}

package/dist/request-to-curl.d.ts

@@ -2,7 +2,13 @@ export type RequestToCurlOptions = {
     excludeHeader?: (name: string, value: string) => boolean;
 };
 /**
- * Convert a native Request into a curl command string.
+ * Quote one shell word. Plain values use single quotes; values with control
+ * characters (CR, LF, ESC, …) use ANSI-C `$'…'` quoting with `\xHH` escapes, so
+ * a pasted command cannot carry a raw newline and a log line cannot be split.
+ */
+export declare function shellQuote(value: string): string;
+/**
+ * Convert a native Request into a curl command string. Every word is quoted.
  * The request is cloned so reading the body does not consume the original stream.
  */
 export declare function requestToCurl(request: Request, options?: RequestToCurlOptions): Promise<string>;

package/dist/request-to-curl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-to-curl.d.ts","sourceRoot":"","sources":["../src/request-to-curl.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG;IAClC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAA;CACxD,CAAA;AAMD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBrG"}
+{"version":3,"file":"request-to-curl.d.ts","sourceRoot":"","sources":["../src/request-to-curl.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG;IAClC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAA;CACxD,CAAA;AAUD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBrG"}

package/dist/request-to-curl.js

@@ -0,0 +1,48 @@
+function hasControl(value) {
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        if (code < 0x20 || code === 0x7f)
+            return true;
+    }
+    return false;
+}
+/**
+ * Quote one shell word. Plain values use single quotes; values with control
+ * characters (CR, LF, ESC, …) use ANSI-C `$'…'` quoting with `\xHH` escapes, so
+ * a pasted command cannot carry a raw newline and a log line cannot be split.
+ */
+export function shellQuote(value) {
+    if (!hasControl(value))
+        return `'${value.replace(/'/g, "'\\''")}'`;
+    let out = "$'";
+    for (const ch of value) {
+        const code = ch.codePointAt(0);
+        if (ch === "\\" || ch === "'")
+            out += `\\${ch}`;
+        else if (code < 0x20 || code === 0x7f)
+            out += `\\x${code.toString(16).padStart(2, "0")}`;
+        else
+            out += ch;
+    }
+    return `${out}'`;
+}
+/**
+ * Convert a native Request into a curl command string. Every word is quoted.
+ * The request is cloned so reading the body does not consume the original stream.
+ */
+export async function requestToCurl(request, options) {
+    const clonedRequest = request.clone();
+    const parts = ["curl", "-X", shellQuote(clonedRequest.method)];
+    for (const [name, value] of clonedRequest.headers.entries()) {
+        if (options?.excludeHeader?.(name, value) === true)
+            continue;
+        parts.push("-H", shellQuote(`${name}: ${value}`));
+    }
+    const body = await clonedRequest.text();
+    if (body.length > 0) {
+        parts.push("--data-raw", shellQuote(body));
+    }
+    parts.push(shellQuote(clonedRequest.url));
+    return parts.join(" ");
+}
+//# sourceMappingURL=request-to-curl.js.map

package/dist/request-to-curl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-to-curl.js","sourceRoot":"","sources":["../src/request-to-curl.ts"],"names":[],"mappings":"AAIA,SAAS,UAAU,CAAC,KAAa;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;IAC9C,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACvC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAA;IAClE,IAAI,GAAG,GAAG,IAAI,CAAA;IACd,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAW,CAAA;QACxC,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,IAAI,KAAK,EAAE,EAAE,CAAA;aAC1C,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,GAAG,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;;YACnF,GAAG,IAAI,EAAE,CAAA;IACf,CAAC;IACD,OAAO,GAAG,GAAG,GAAG,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,OAA8B;IACnF,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IACrC,MAAM,KAAK,GAAa,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAExE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI;YAAE,SAAQ;QAC5D,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAA;IAEvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;IAEzC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACvB,CAAC"}

package/dist/response.d.ts

@@ -1,5 +1,6 @@
 import type { CookieOptions } from "./cookie.ts";
 import type { HoneyError } from "./error.ts";
+import { type ProducerOptions } from "./producer-stream.ts";
 import type { StatusKey } from "./types.ts";
 export type { CookieOptions } from "./cookie.ts";
 export { serializeCookie } from "./cookie.ts";
@@ -20,9 +21,19 @@ export type SSEOptions = ResponseOptions & {
     lastEventId?: string;
 };
 export type SSEStream = {
+    /** End the stream. Idempotent and synchronous: safe in a `finally`. */
     close(): void;
+    /** True once the stream ended: closed, or the client went away. */
+    readonly closed: boolean;
     lastEventId: string | undefined;
+    /**
+     * Queue an event. Resolves when the client is ready for more. After the stream ended it
+     * rejects with an `AbortError`, which ends an awaiting loop; Honey does not report that
+     * rejection, and an unawaited one never surfaces as an unhandled rejection.
+     */
     send(event: SSEEvent): Promise<void>;
+    /** Aborts when the client disconnects, the request times out, or the server shuts down. */
+    readonly signal: AbortSignal;
 };
 export type ErrorFormatter = (error: HoneyError, defaultShape: Record<string, unknown>) => Record<string, unknown>;
 declare const CONTENT_TYPE: unique symbol;
@@ -35,6 +46,8 @@ export type TypedResponse<CT extends string = string, SK extends string = string
 export declare class HoneyRes {
     protected readonly _nodeOut: boolean;
     constructor(nodeOut?: boolean);
+    /** Signal and error reporting for streams; the per-request res wires `ctx.signal` and the logger. */
+    protected _producer(): ProducerOptions;
     private _known;
     binary<SK extends StatusKey>(statusKey: SK, body: ArrayBuffer | Uint8Array<ArrayBuffer>, opts?: ResponseOptions): TypedResponse<"application/octet-stream", SK>;
     csv<SK extends StatusKey>(statusKey: SK, body: string, opts?: ResponseOptions): TypedResponse<"text/csv", SK>;
@@ -50,11 +63,21 @@ export declare class HoneyRes {
     raw(response: Response): TypedResponse;
     redirect(url: string, opts?: ResponseOptions): TypedResponse<"none", "found">;
     sse(callback: (stream: SSEStream) => Promise<void>, opts?: SSEOptions): TypedResponse<"text/event-stream", "ok">;
-    generate(generator: AsyncGenerator<string, void, unknown> | Generator<string, void, unknown>, opts?: {
+    /**
+     * Stream a generator's values. A disconnect, `timeout()` or shutdown calls `generator.return()`,
+     * so its `finally` runs; a throw mid-stream breaks the body instead of ending it cleanly.
+     */
+    generate(generator: AsyncGenerator<string | Uint8Array, void, unknown> | Generator<string | Uint8Array, void, unknown>, opts?: {
         contentType?: string;
         status?: number;
     }): TypedResponse<string, "ok">;
-    stream(callback: (writable: WritableStream) => Promise<void>, opts?: ResponseOptions): TypedResponse<"application/octet-stream", "ok">;
+    /**
+     * Write the body through a `WritableStream`. The callback starts when the body is first read
+     * (never for HEAD); `signal` aborts when the client disconnects, the request times out, or the
+     * server shuts down. Returning ends the body after queued writes flush, whether or not the
+     * writable was closed; throwing breaks it, even while the callback holds a writer.
+     */
+    stream(callback: (writable: WritableStream, signal: AbortSignal) => Promise<void>, opts?: ResponseOptions): TypedResponse<"application/octet-stream", "ok">;
     text<SK extends StatusKey>(statusKey: SK, body: string, opts?: ResponseOptions): TypedResponse<"text/plain", SK>;
     xml<SK extends StatusKey>(statusKey: SK, body: string, opts?: ResponseOptions): TypedResponse<"application/xml", SK>;
 }

package/dist/response.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAG3C,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,MAAM,eAAe,GAAG;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG;IACtB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACvB,KAAK,IAAI,IAAI,CAAA;IACb,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,IAAI,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpC,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AA+BlH,OAAO,CAAC,MAAM,YAAY,EAAE,OAAO,MAAM,CAAA;AACzC,OAAO,CAAC,MAAM,UAAU,EAAE,OAAO,MAAM,CAAA;AAEvC,qGAAqG;AACrG,MAAM,MAAM,aAAa,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,EAAE,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI,QAAQ,GAAG;IAC9F,QAAQ,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAA;IAC3B,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAA;CACzB,CAAA;AAsBD,qBAAa,QAAQ;IACpB,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAEpC,YAAY,OAAO,UAAQ,EAE1B;IAED,OAAO,CAAC,MAAM;IAsBd,MAAM,CAAC,EAAE,SAAS,SAAS,EAC1B,SAAS,EAAE,EAAE,EACb,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC,EAC3C,IAAI,CAAC,EAAE,eAAe,GACpB,aAAa,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAG/C;IAED,GAAG,CAAC,EAAE,SAAS,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAE5G;IAED,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC,CAE9G;IAED,IAAI,CAAC,EAAE,SAAS,SAAS,EACxB,SAAS,EAAE,EAAE,EACb,IAAI,EAAE,OAAO,EACb,IAAI,CAAC,EAAE,eAAe,GACpB,aAAa,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAEvC;IAED,SAAS,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CASrE;IAED;;;;;OAKG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,GAAG,aAAa,CAGrC;IAED,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAS5E;IAED,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,aAAa,CAAC,mBAAmB,EAAE,IAAI,CAAC,CA4E/G;IAED,QAAQ,CACP,SAAS,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EACnF,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9C,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAqB7B;IAED,MAAM,CACL,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,EACrD,IAAI,CAAC,EAAE,eAAe,GACpB,aAAa,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAiBjD;IAED,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,CAE/G;IAED,GAAG,CAAC,EAAE,SAAS,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAEnH;CACD;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEhH,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,UAAU,EACjB,gBAAgB,EAAE,cAAc,EAChC,eAAe,CAAC,EAAE,oBAAoB,GAAG,IAAI,GAC3C,QAAQ,CA+CV"}
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,OAAO,EAA8C,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACvG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAG3C,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,MAAM,eAAe,GAAG;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG;IACtB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACvB,uEAAuE;IACvE,KAAK,IAAI,IAAI,CAAA;IACb,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B;;;;OAIG;IACH,IAAI,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAsClH,OAAO,CAAC,MAAM,YAAY,EAAE,OAAO,MAAM,CAAA;AACzC,OAAO,CAAC,MAAM,UAAU,EAAE,OAAO,MAAM,CAAA;AAEvC,qGAAqG;AACrG,MAAM,MAAM,aAAa,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,EAAE,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI,QAAQ,GAAG;IAC9F,QAAQ,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAA;IAC3B,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAA;CACzB,CAAA;AA2BD,qBAAa,QAAQ;IACpB,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAEpC,YAAY,OAAO,UAAQ,EAE1B;IAED,qGAAqG;IACrG,SAAS,CAAC,SAAS,IAAI,eAAe,CAErC;IAED,OAAO,CAAC,MAAM;IA2Bd,MAAM,CAAC,EAAE,SAAS,SAAS,EAC1B,SAAS,EAAE,EAAE,EACb,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC,EAC3C,IAAI,CAAC,EAAE,eAAe,GACpB,aAAa,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAG/C;IAED,GAAG,CAAC,EAAE,SAAS,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAE5G;IAED,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC,CAE9G;IAED,IAAI,CAAC,EAAE,SAAS,SAAS,EACxB,SAAS,EAAE,EAAE,EACb,IAAI,EAAE,OAAO,EACb,IAAI,CAAC,EAAE,eAAe,GACpB,aAAa,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAEvC;IAED,SAAS,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CASrE;IAED;;;;;OAKG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,GAAG,aAAa,CAGrC;IAED,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAS5E;IAED,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,aAAa,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAqD/G;IAED;;;OAGG;IACH,QAAQ,CACP,SAAS,EAAE,cAAc,CAAC,MAAM,GAAG,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,EAC7G,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9C,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAM7B;IAED;;;;;OAKG;IACH,MAAM,CACL,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,EAC1E,IAAI,CAAC,EAAE,eAAe,GACpB,aAAa,CAAC,0BAA0B,EAAE,IAAI,CAAC,CA4CjD;IAED,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,CAE/G;IAED,GAAG,CAAC,EAAE,SAAS,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAEnH;CACD;AAUD,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEhH,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,UAAU,EACjB,gBAAgB,EAAE,cAAc,EAChC,eAAe,CAAC,EAAE,oBAAoB,GAAG,IAAI,GAC3C,QAAQ,CA+CV"}

package/dist/response.js

@@ -0,0 +1,313 @@
+import { serializeCookie } from "./cookie.js";
+import { createHoneyResponse, isHoneyResponse } from "./honey-response.js";
+import { generatorStream, producerStream, tagStream } from "./producer-stream.js";
+import { statusKeyToCode } from "./types.js";
+export { serializeCookie } from "./cookie.js";
+function applyResponseOptions(headers, opts) {
+    if (opts?.headers) {
+        for (const [k, v] of Object.entries(opts.headers)) {
+            headers.set(k, v);
+        }
+    }
+    if (opts?.cookies) {
+        for (const [name, cookieOpts] of Object.entries(opts.cookies)) {
+            headers.append("set-cookie", serializeCookie(name, cookieOpts));
+        }
+    }
+}
+function applyPlainOptions(headers, opts) {
+    if (opts?.headers) {
+        for (const [k, v] of Object.entries(opts.headers)) {
+            headers[k.toLowerCase()] = v;
+        }
+    }
+    if (opts?.cookies) {
+        /* append, as `Headers.append` does on the native path: a `set-cookie` in `opts.headers` stays */
+        const existing = headers["set-cookie"];
+        const cookies = existing === undefined ? [] : Array.isArray(existing) ? [...existing] : [existing];
+        for (const [name, cookieOpts] of Object.entries(opts.cookies)) {
+            cookies.push(serializeCookie(name, cookieOpts));
+        }
+        headers["set-cookie"] = cookies;
+    }
+}
+/** Statuses whose responses never carry a body (Fetch "null body status"). */
+function isNullBodyStatus(status) {
+    return status === 101 || status === 103 || status === 204 || status === 205 || status === 304;
+}
+/** Cast a native Response to TypedResponse — zero runtime cost */
+function typed(response) {
+    return response;
+}
+/** Node adapter reads this to `res.end(payload)` without draining the Fetch body. */
+const RAW_BODY = Symbol.for("honey.rawBody");
+function withRawBody(response, body) {
+    Object.defineProperty(response, RAW_BODY, { value: body });
+    return response;
+}
+/* pre-allocated header objects — Bun optimizes plain objects better than Headers instances */
+const JSON_HEADERS = { "content-type": "application/json" };
+const TEXT_HEADERS = { "content-type": "text/plain; charset=utf-8" };
+const HTML_HEADERS = { "content-type": "text/html; charset=utf-8" };
+const CSV_HEADERS = { "content-type": "text/csv; charset=utf-8" };
+const BINARY_HEADERS = { "content-type": "application/octet-stream" };
+/** Report a stream producer failure where no logger is wired (a bare `HoneyRes`). */
+function reportToConsole(err) {
+    console.error("honey: stream producer failed", err);
+}
+export class HoneyRes {
+    _nodeOut;
+    constructor(nodeOut = false) {
+        this._nodeOut = nodeOut;
+    }
+    /** Signal and error reporting for streams; the per-request res wires `ctx.signal` and the logger. */
+    _producer() {
+        return { report: reportToConsole };
+    }
+    _known(statusCode, headers, raw, opts) {
+        const status = opts?.status ?? statusCode;
+        if (isNullBodyStatus(status)) {
+            /* `new Response(body, { status: 204 })` throws on the native path; fail the same way everywhere */
+            throw new TypeError(`A ${status} response cannot have a body; use ctx.res.noContent() or another status`);
+        }
+        if (this._nodeOut) {
+            if (!opts?.headers && !opts?.cookies) {
+                return typed(createHoneyResponse({ headers, raw, status }));
+            }
+            const plain = { ...headers };
+            applyPlainOptions(plain, opts);
+            return typed(createHoneyResponse({ headers: plain, raw, status }));
+        }
+        if (!opts?.headers && !opts?.cookies) {
+            return typed(withRawBody(new Response(raw, { headers, status }), raw));
+        }
+        const native = new Headers(headers);
+        applyResponseOptions(native, opts);
+        return typed(withRawBody(new Response(raw, { headers: native, status }), raw));
+    }
+    binary(statusKey, body, opts) {
+        const raw = body instanceof Uint8Array ? body : new Uint8Array(body);
+        return this._known(statusKeyToCode[statusKey], BINARY_HEADERS, raw, opts);
+    }
+    csv(statusKey, body, opts) {
+        return this._known(statusKeyToCode[statusKey], CSV_HEADERS, body, opts);
+    }
+    html(statusKey, body, opts) {
+        return this._known(statusKeyToCode[statusKey], HTML_HEADERS, body, opts);
+    }
+    json(statusKey, data, opts) {
+        return this._known(statusKeyToCode[statusKey], JSON_HEADERS, JSON.stringify(data), opts);
+    }
+    noContent(opts) {
+        if (this._nodeOut) {
+            const headers = {};
+            applyPlainOptions(headers, opts);
+            return typed(createHoneyResponse({ headers, raw: null, status: 204 }));
+        }
+        const headers = new Headers();
+        applyResponseOptions(headers, opts);
+        return typed(new Response(null, { headers, status: 204 }));
+    }
+    /**
+     * Return a native Response. `fetch()`, `Fetcher.fetch`, `cache.match`, and `Response.redirect`
+     * return guarded headers that throw on `set`, which breaks response middleware (`requestId`,
+     * `secureHeaders`, `poweredBy`, `serverTiming`). Copy status and headers into a new Response; the
+     * body streams through unread. WebSocket upgrades and responses Honey built pass through as-is.
+     */
+    raw(response) {
+        if (response.status === 101 || isHoneyResponse(response) || RAW_BODY in response)
+            return typed(response);
+        return typed(new Response(response.body, response));
+    }
+    redirect(url, opts) {
+        if (this._nodeOut) {
+            const headers = { location: url };
+            applyPlainOptions(headers, opts);
+            return typed(createHoneyResponse({ headers, raw: null, status: opts?.status ?? 302 }));
+        }
+        const headers = new Headers({ location: url });
+        applyResponseOptions(headers, opts);
+        return typed(new Response(null, { headers, status: opts?.status ?? 302 }));
+    }
+    sse(callback, opts) {
+        const encoder = new TextEncoder();
+        const body = producerStream((sink) => {
+            const stream = {
+                close: () => sink.close(),
+                get closed() {
+                    return sink.closed;
+                },
+                lastEventId: opts?.lastEventId,
+                send(event) {
+                    if (/[\r\n]/.test(event.event)) {
+                        throw new Error("SSE event name must not contain newlines");
+                    }
+                    if (event.id && /[\r\n]/.test(event.id)) {
+                        throw new Error("SSE id must not contain newlines");
+                    }
+                    const dataStr = typeof event.data === "string" ? event.data : JSON.stringify(event.data);
+                    const dataLines = dataStr
+                        .split(/\r\n|\r|\n/)
+                        .map((line) => `data: ${line}`)
+                        .join("\n");
+                    let msg = `event: ${event.event}\n${dataLines}\n`;
+                    if (event.id)
+                        msg += `id: ${event.id}\n`;
+                    /** SSE retry must be a non-negative integer per spec — skip if invalid */
+                    if (event.retry !== undefined && Number.isFinite(event.retry) && event.retry >= 0) {
+                        msg += `retry: ${Math.floor(event.retry)}\n`;
+                    }
+                    msg += "\n";
+                    return sink.write(encoder.encode(msg));
+                },
+                signal: sink.signal,
+            };
+            if (opts?.defaultRetry !== undefined) {
+                void sink.write(encoder.encode(`retry: ${opts.defaultRetry}\n\n`));
+            }
+            if (opts?.keepalive !== undefined && opts.keepalive > 0) {
+                const heartbeat = encoder.encode(": heartbeat\n\n");
+                const timer = setInterval(() => {
+                    void sink.write(heartbeat);
+                }, opts.keepalive);
+                sink.onEnd(() => clearInterval(timer));
+            }
+            return callback(stream);
+        }, this._producer());
+        /* no `connection: keep-alive`: HTTP/1.1 keeps the connection by default, the header would
+         * override a client's `Connection: close`, and HTTP/2 forbids it */
+        const headers = new Headers({
+            "cache-control": "no-cache",
+            "content-type": "text/event-stream",
+        });
+        applyResponseOptions(headers, opts);
+        return typed(tagStream(new Response(body, { headers, status: opts?.status ?? 200 })));
+    }
+    /**
+     * Stream a generator's values. A disconnect, `timeout()` or shutdown calls `generator.return()`,
+     * so its `finally` runs; a throw mid-stream breaks the body instead of ending it cleanly.
+     */
+    generate(generator, opts) {
+        const headers = new Headers({
+            "content-type": opts?.contentType ?? "application/octet-stream",
+        });
+        const body = generatorStream(generator, this._producer());
+        return typed(tagStream(new Response(body, { headers, status: opts?.status ?? 200 })));
+    }
+    /**
+     * Write the body through a `WritableStream`. The callback starts when the body is first read
+     * (never for HEAD); `signal` aborts when the client disconnects, the request times out, or the
+     * server shuts down. Returning ends the body after queued writes flush, whether or not the
+     * writable was closed; throwing breaks it, even while the callback holds a writer.
+     */
+    stream(callback, opts) {
+        const encoder = new TextEncoder();
+        const body = producerStream(async (sink) => {
+            /* `size()` runs as each chunk enters the writable's queue: it counts writes not yet flushed */
+            let queued = 0;
+            let flushed = 0;
+            let onFlushed = null;
+            const writable = new WritableStream({
+                abort(reason) {
+                    sink.error(reason);
+                },
+                close() {
+                    sink.close();
+                },
+                async write(chunk) {
+                    try {
+                        await sink.write(toBytes(chunk, encoder));
+                    }
+                    finally {
+                        flushed++;
+                        if (flushed === queued)
+                            onFlushed?.();
+                    }
+                },
+            }, {
+                highWaterMark: 1,
+                size() {
+                    queued++;
+                    return 1;
+                },
+            });
+            await callback(writable, sink.signal);
+            if (sink.closed)
+                return;
+            if (flushed < queued) {
+                await new Promise((resolve) => {
+                    onFlushed = resolve;
+                    sink.onEnd(resolve);
+                });
+            }
+        }, this._producer());
+        const headers = new Headers();
+        applyResponseOptions(headers, opts);
+        return typed(tagStream(new Response(body, { headers, status: opts?.status ?? 200 })));
+    }
+    text(statusKey, body, opts) {
+        return this._known(statusKeyToCode[statusKey], TEXT_HEADERS, body, opts);
+    }
+    xml(statusKey, body, opts) {
+        return this._known(statusKeyToCode[statusKey], { "content-type": "application/xml" }, body, opts);
+    }
+}
+function toBytes(chunk, encoder) {
+    if (chunk instanceof Uint8Array)
+        return chunk;
+    if (typeof chunk === "string")
+        return encoder.encode(chunk);
+    if (chunk instanceof ArrayBuffer)
+        return new Uint8Array(chunk);
+    if (ArrayBuffer.isView(chunk))
+        return new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength);
+    throw new TypeError("ctx.res.stream() chunks must be strings, ArrayBuffers or typed arrays");
+}
+export function createErrorResponse(error, defaultFormatter, customFormatter) {
+    let body;
+    if (error.data !== undefined) {
+        /* custom schema error — apply customErrorFormatter if set, else use data as-is */
+        const rawData = error.data;
+        if (customFormatter) {
+            try {
+                body = customFormatter(error, rawData);
+            }
+            catch {
+                body = rawData;
+            }
+        }
+        else {
+            body = rawData;
+        }
+    }
+    else {
+        /* standard error — build default shape, apply defaultErrorFormatter */
+        const defaultShape = {
+            error_key: error.errorKey,
+            fields: error.fields,
+            message: error.message,
+            status: error.status,
+            status_key: error.statusKey,
+            success: false,
+        };
+        try {
+            body = defaultFormatter(error, defaultShape);
+        }
+        catch {
+            /* formatter crashed — fall back to default shape */
+            body = defaultShape;
+        }
+    }
+    const headers = { "content-type": "application/json" };
+    if (error.headers) {
+        for (const [k, v] of Object.entries(error.headers)) {
+            headers[k] = v;
+        }
+    }
+    const payload = JSON.stringify(body);
+    return withRawBody(new Response(payload, {
+        headers,
+        status: error.status,
+    }), payload);
+}
+//# sourceMappingURL=response.js.map