@morojs/moro 1.6.8 → 1.7.0

package/dist/core/middleware/built-in/cookie/core.js

@@ -7,12 +7,30 @@ export function parseCookies(cookieHeader) {
     if (!cookieHeader) {
         return cookies;
     }
-    cookieHeader.split(';').forEach(cookie => {
-        const [name, value] = cookie.trim().split('=');
-        if (name && value) {
-            cookies[name] = decodeURIComponent(value);
+    // Avoid split/forEach, use single pass with indexOf
+    let start = 0;
+    const len = cookieHeader.length;
+    for (let i = 0; i <= len; i++) {
+        if (i === len || cookieHeader[i] === ';') {
+            if (i > start) {
+                const cookie = cookieHeader.substring(start, i).trim();
+                const equalIndex = cookie.indexOf('=');
+                if (equalIndex > 0) {
+                    const name = cookie.substring(0, equalIndex);
+                    const value = cookie.substring(equalIndex + 1);
+                    if (name && value) {
+                        try {
+                            cookies[name] = decodeURIComponent(value);
+                        }
+                        catch {
+                            cookies[name] = value;
+                        }
+                    }
+                }
+            }
+            start = i + 1;
         }
-    });
+    }
     return cookies;
 }
 /**
@@ -62,9 +80,8 @@ export class CookieCore {
     setCookie(res, name, value, options = {}) {
         const cookieString = buildCookieString(name, value, options);
         const existingCookies = res.getHeader('Set-Cookie') || [];
-        const cookies = Array.isArray(existingCookies)
-            ? [...existingCookies]
-            : [existingCookies];
+        // Avoid spread operator - direct array manipulation
+        const cookies = Array.isArray(existingCookies) ? existingCookies : [existingCookies];
         cookies.push(cookieString);
         res.setHeader('Set-Cookie', cookies);
     }
@@ -72,11 +89,22 @@ export class CookieCore {
      * Clear a cookie by setting its expiration to the past
      */
     clearCookie(res, name, options = {}) {
+        // Avoid spread operator - manually set properties
         const clearOptions = {
-            ...options,
             expires: new Date(0),
             maxAge: 0,
         };
+        // Copy other options manually
+        if (options.path !== undefined)
+            clearOptions.path = options.path;
+        if (options.domain !== undefined)
+            clearOptions.domain = options.domain;
+        if (options.httpOnly !== undefined)
+            clearOptions.httpOnly = options.httpOnly;
+        if (options.secure !== undefined)
+            clearOptions.secure = options.secure;
+        if (options.sameSite !== undefined)
+            clearOptions.sameSite = options.sameSite;
         this.setCookie(res, name, '', clearOptions);
     }
 }

package/dist/core/middleware/built-in/cookie/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/cookie/core.ts"],"names":[],"mappings":"AAeA,yBAAyB;AAEzB;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACvC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAAa,EACb,UAAyB,EAAE;IAE3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,YAAY,GAAG,GAAG,IAAI,IAAI,WAAW,EAAE,CAAC;IAE5C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,YAAY,IAAI,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,YAAY,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,YAAY,IAAI,YAAY,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,YAAY,IAAI,UAAU,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,YAAY,IAAI,cAAc,OAAO,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,YAAY,IAAI,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,YAAY,IAAI,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,UAAU;IACrB,gBAAe,CAAC;IAEhB;;OAEG;IACH,YAAY,CAAC,YAAgC;QAC3C,OAAO,YAAY,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,GAAiB,EAAE,IAAY,EAAE,KAAa,EAAE,UAAyB,EAAE;QACnF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7D,MAAM,eAAe,GAAG,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;YAC5C,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC;YACtB,CAAC,CAAC,CAAC,eAAyB,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAiB,EAAE,IAAY,EAAE,UAAyB,EAAE;QACtE,MAAM,YAAY,GAAkB;YAClC,GAAG,OAAO;YACV,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,CAAC;SACV,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IAC9C,CAAC;CACF"}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/cookie/core.ts"],"names":[],"mappings":"AAeA,yBAAyB;AAEzB;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,oDAAoD;IACpD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC;IAEhC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;gBACd,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;oBAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;oBAC/C,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;wBAClB,IAAI,CAAC;4BACH,OAAO,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;wBAC5C,CAAC;wBAAC,MAAM,CAAC;4BACP,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;wBACxB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAAa,EACb,UAAyB,EAAE;IAE3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,YAAY,GAAG,GAAG,IAAI,IAAI,WAAW,EAAE,CAAC;IAE5C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,YAAY,IAAI,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,YAAY,IAAI,aAAa,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,YAAY,IAAI,YAAY,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,YAAY,IAAI,UAAU,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,YAAY,IAAI,cAAc,OAAO,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,YAAY,IAAI,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,YAAY,IAAI,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,UAAU;IACrB,gBAAe,CAAC;IAEhB;;OAEG;IACH,YAAY,CAAC,YAAgC;QAC3C,OAAO,YAAY,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,GAAiB,EAAE,IAAY,EAAE,KAAa,EAAE,UAAyB,EAAE;QACnF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE7D,MAAM,eAAe,GAAG,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC1D,oDAAoD;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAyB,CAAC,CAAC;QAC/F,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAiB,EAAE,IAAY,EAAE,UAAyB,EAAE;QACtE,kDAAkD;QAClD,MAAM,YAAY,GAAkB;YAClC,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,CAAC;SACV,CAAC;QACF,8BAA8B;QAC9B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,YAAY,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,YAAY,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC7E,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/core/middleware/built-in/helmet/core.d.ts

@@ -0,0 +1,19 @@
+import { HttpRequest, HttpResponse } from '../../../../types/http.js';
+export interface HelmetOptions {
+    contentSecurityPolicy?: boolean | Record<string, string[]>;
+    xFrameOptions?: boolean | 'DENY' | 'SAMEORIGIN';
+    xContentTypeOptions?: boolean;
+    xXssProtection?: boolean;
+    referrerPolicy?: boolean | string;
+    strictTransportSecurity?: boolean | {
+        maxAge?: number;
+        includeSubDomains?: boolean;
+    };
+    xDownloadOptions?: boolean;
+    xPermittedCrossDomainPolicies?: boolean;
+}
+export declare class HelmetCore {
+    private options;
+    constructor(options?: HelmetOptions);
+    applyHeaders(req: HttpRequest, res: HttpResponse): void;
+}

package/dist/core/middleware/built-in/helmet/core.js

@@ -0,0 +1,70 @@
+export class HelmetCore {
+    options;
+    constructor(options = {}) {
+        this.options = {
+            contentSecurityPolicy: options.contentSecurityPolicy ?? true,
+            xFrameOptions: options.xFrameOptions ?? 'DENY',
+            xContentTypeOptions: options.xContentTypeOptions ?? true,
+            xXssProtection: options.xXssProtection ?? true,
+            referrerPolicy: options.referrerPolicy ?? 'strict-origin-when-cross-origin',
+            strictTransportSecurity: options.strictTransportSecurity ?? {
+                maxAge: 31536000,
+                includeSubDomains: true,
+            },
+            xDownloadOptions: options.xDownloadOptions ?? true,
+            xPermittedCrossDomainPolicies: options.xPermittedCrossDomainPolicies ?? true,
+        };
+    }
+    applyHeaders(req, res) {
+        // X-Content-Type-Options
+        if (this.options.xContentTypeOptions) {
+            res.setHeader('X-Content-Type-Options', 'nosniff');
+        }
+        // X-Frame-Options
+        if (this.options.xFrameOptions) {
+            const value = typeof this.options.xFrameOptions === 'string' ? this.options.xFrameOptions : 'DENY';
+            res.setHeader('X-Frame-Options', value);
+        }
+        // X-XSS-Protection
+        if (this.options.xXssProtection) {
+            res.setHeader('X-XSS-Protection', '1; mode=block');
+        }
+        // Referrer-Policy
+        if (this.options.referrerPolicy) {
+            const value = typeof this.options.referrerPolicy === 'string'
+                ? this.options.referrerPolicy
+                : 'strict-origin-when-cross-origin';
+            res.setHeader('Referrer-Policy', value);
+        }
+        // Strict-Transport-Security (HSTS)
+        if (this.options.strictTransportSecurity) {
+            const hsts = typeof this.options.strictTransportSecurity === 'object'
+                ? this.options.strictTransportSecurity
+                : { maxAge: 31536000, includeSubDomains: true };
+            const value = `max-age=${hsts.maxAge || 31536000}${hsts.includeSubDomains ? '; includeSubDomains' : ''}`;
+            res.setHeader('Strict-Transport-Security', value);
+        }
+        // Content-Security-Policy
+        if (this.options.contentSecurityPolicy) {
+            let cspValue = "default-src 'self'";
+            if (typeof this.options.contentSecurityPolicy === 'object') {
+                const directives = [];
+                for (const [directive, sources] of Object.entries(this.options.contentSecurityPolicy)) {
+                    const kebabDirective = directive.replace(/([A-Z])/g, '-$1').toLowerCase();
+                    directives.push(`${kebabDirective} ${sources.join(' ')}`);
+                }
+                cspValue = directives.join('; ');
+            }
+            res.setHeader('Content-Security-Policy', cspValue);
+        }
+        // X-Download-Options
+        if (this.options.xDownloadOptions) {
+            res.setHeader('X-Download-Options', 'noopen');
+        }
+        // X-Permitted-Cross-Domain-Policies
+        if (this.options.xPermittedCrossDomainPolicies) {
+            res.setHeader('X-Permitted-Cross-Domain-Policies', 'none');
+        }
+    }
+}
+//# sourceMappingURL=core.js.map

package/dist/core/middleware/built-in/helmet/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/helmet/core.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,UAAU;IACb,OAAO,CAA0B;IAEzC,YAAY,UAAyB,EAAE;QACrC,IAAI,CAAC,OAAO,GAAG;YACb,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,IAAI;YAC5D,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM;YAC9C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;YACxD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;YAC9C,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,iCAAiC;YAC3E,uBAAuB,EAAE,OAAO,CAAC,uBAAuB,IAAI;gBAC1D,MAAM,EAAE,QAAQ;gBAChB,iBAAiB,EAAE,IAAI;aACxB;YACD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,6BAA6B,EAAE,OAAO,CAAC,6BAA6B,IAAI,IAAI;SAC7E,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,GAAgB,EAAE,GAAiB;QAC9C,yBAAyB;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;YACvF,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;QACrD,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,KAAK,QAAQ;gBAC7C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc;gBAC7B,CAAC,CAAC,iCAAiC,CAAC;YACxC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,mCAAmC;QACnC,IAAI,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACzC,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,KAAK,QAAQ;gBACtD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB;gBACtC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;YAEpD,MAAM,KAAK,GAAG,WAAW,IAAI,CAAC,MAAM,IAAI,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACzG,GAAG,CAAC,SAAS,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACvC,IAAI,QAAQ,GAAG,oBAAoB,CAAC;YAEpC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,KAAK,QAAQ,EAAE,CAAC;gBAC3D,MAAM,UAAU,GAAa,EAAE,CAAC;gBAChC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;oBACtF,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC1E,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5D,CAAC;gBACD,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAClC,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;QAED,oCAAoC;QACpC,IAAI,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,CAAC;YAC/C,GAAG,CAAC,SAAS,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF"}

package/dist/core/middleware/built-in/helmet/hook.d.ts

@@ -0,0 +1,2 @@
+import { HelmetOptions } from './core.js';
+export declare function registerHelmetHooks(hookManager: any, options?: HelmetOptions): void;

package/dist/core/middleware/built-in/helmet/hook.js

@@ -0,0 +1,12 @@
+// Helmet Hook Integration
+import { HelmetCore } from './core.js';
+export function registerHelmetHooks(hookManager, options = {}) {
+    const core = new HelmetCore(options);
+    hookManager.on('request', async (context) => {
+        const { request, response } = context;
+        if (!request || !response)
+            return;
+        core.applyHeaders(request, response);
+    });
+}
+//# sourceMappingURL=hook.js.map

package/dist/core/middleware/built-in/helmet/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/helmet/hook.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,OAAO,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAEtD,MAAM,UAAU,mBAAmB,CAAC,WAAgB,EAAE,UAAyB,EAAE;IAC/E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IAErC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;QAC/C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QACtC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;YAAE,OAAO;QAElC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/middleware/built-in/helmet/index.d.ts

@@ -0,0 +1,6 @@
+export { HelmetCore } from './core.js';
+export type { HelmetOptions } from './core.js';
+export { createHelmetMiddleware } from './middleware.js';
+export { registerHelmetHooks } from './hook.js';
+import { createHelmetMiddleware } from './middleware.js';
+export declare const helmet: typeof createHelmetMiddleware;

package/dist/core/middleware/built-in/helmet/index.js

@@ -0,0 +1,7 @@
+// Helmet Middleware - Centralized Exports
+export { HelmetCore } from './core.js';
+export { createHelmetMiddleware } from './middleware.js';
+export { registerHelmetHooks } from './hook.js';
+import { createHelmetMiddleware } from './middleware.js';
+export const helmet = createHelmetMiddleware;
+//# sourceMappingURL=index.js.map

package/dist/core/middleware/built-in/helmet/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/helmet/index.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,MAAM,CAAC,MAAM,MAAM,GAAG,sBAAsB,CAAC"}

package/dist/core/middleware/built-in/helmet/middleware.d.ts

@@ -0,0 +1,22 @@
+import { Middleware } from '../../../../types/http.js';
+import { HelmetOptions } from './core.js';
+/**
+ * Create Helmet security headers middleware
+ *
+ * @example
+ * ```typescript
+ * import { helmet } from '@morojs/moro';
+ *
+ * app.use(helmet({
+ *   contentSecurityPolicy: {
+ *     defaultSrc: ["'self'"],
+ *     scriptSrc: ["'self'", "'unsafe-inline'"],
+ *   },
+ *   strictTransportSecurity: {
+ *     maxAge: 31536000,
+ *     includeSubDomains: true,
+ *   },
+ * }));
+ * ```
+ */
+export declare function createHelmetMiddleware(options?: HelmetOptions): Middleware;

package/dist/core/middleware/built-in/helmet/middleware.js

@@ -0,0 +1,28 @@
+import { HelmetCore } from './core.js';
+/**
+ * Create Helmet security headers middleware
+ *
+ * @example
+ * ```typescript
+ * import { helmet } from '@morojs/moro';
+ *
+ * app.use(helmet({
+ *   contentSecurityPolicy: {
+ *     defaultSrc: ["'self'"],
+ *     scriptSrc: ["'self'", "'unsafe-inline'"],
+ *   },
+ *   strictTransportSecurity: {
+ *     maxAge: 31536000,
+ *     includeSubDomains: true,
+ *   },
+ * }));
+ * ```
+ */
+export function createHelmetMiddleware(options = {}) {
+    const core = new HelmetCore(options);
+    return (req, res, next) => {
+        core.applyHeaders(req, res);
+        next();
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/core/middleware/built-in/helmet/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/helmet/middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAEtD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAyB,EAAE;IAChE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IAErC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/middleware/built-in/http2/core.d.ts

@@ -0,0 +1,35 @@
+import { HttpRequest, HttpResponse } from '../../../../types/http.js';
+export interface Http2PushOptions {
+    resources?: Array<{
+        path: string;
+        as: string;
+        type?: string;
+        priority?: number;
+    }>;
+    condition?: (req: HttpRequest) => boolean;
+    autoDetect?: boolean;
+}
+export interface Http2PushResult {
+    pushed: string[];
+    failed: string[];
+}
+export declare class Http2PushCore {
+    private options;
+    constructor(options?: Http2PushOptions);
+    /**
+     * Add push capability to response object
+     */
+    addPushCapability(req: HttpRequest, res: HttpResponse): void;
+    /**
+     * Auto-detect and push resources from HTML
+     */
+    setupAutoDetect(req: HttpRequest, res: HttpResponse): void;
+    /**
+     * Push configured resources
+     */
+    pushConfiguredResources(req: HttpRequest, res: HttpResponse): Http2PushResult;
+    /**
+     * Check if HTTP/2 is available
+     */
+    isHttp2Available(req: HttpRequest, res: HttpResponse): boolean;
+}

package/dist/core/middleware/built-in/http2/core.js

@@ -0,0 +1,128 @@
+export class Http2PushCore {
+    options;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    /**
+     * Add push capability to response object
+     */
+    addPushCapability(req, res) {
+        // Add HTTP/2 push capability to response
+        res.push = (path, pushOptions = {}) => {
+            // Check if HTTP/2 is supported
+            if (req.httpVersion === '2.0' && res.stream && res.stream.pushAllowed) {
+                try {
+                    const pushHeaders = {
+                        ':method': 'GET',
+                        ':path': path,
+                        ...pushOptions.headers,
+                    };
+                    const pushStream = res.stream.pushStream(pushHeaders);
+                    if (pushStream) {
+                        // Set priority if specified
+                        if (pushOptions.priority !== undefined) {
+                            try {
+                                const weight = Math.max(1, Math.min(256, pushOptions.priority));
+                                pushStream.priority({
+                                    parent: 0,
+                                    weight,
+                                    exclusive: false,
+                                });
+                            }
+                            catch {
+                                // Priority setting failed, continue
+                            }
+                        }
+                        return pushStream;
+                    }
+                }
+                catch {
+                    // Push failed, continue normally
+                }
+            }
+            return null;
+        };
+    }
+    /**
+     * Auto-detect and push resources from HTML
+     */
+    setupAutoDetect(req, res) {
+        if (!this.options.autoDetect || !req.path.endsWith('.html')) {
+            return;
+        }
+        // Will push resources after HTML is rendered
+        const originalSend = res.send;
+        res.send = function (data) {
+            if (typeof data === 'string' && req.httpVersion === '2.0') {
+                // Extract CSS and JS from HTML
+                const cssMatches = data.match(/<link[^>]+href=["']([^"']+\.css)["']/g) || [];
+                const jsMatches = data.match(/<script[^>]+src=["']([^"']+\.js)["']/g) || [];
+                // Push CSS files (high priority)
+                for (const match of cssMatches) {
+                    const pathMatch = match.match(/href=["']([^"']+)["']/);
+                    if (pathMatch) {
+                        res.push?.(pathMatch[1], {
+                            headers: { 'content-type': 'text/css' },
+                            priority: 200, // High priority
+                        });
+                    }
+                }
+                // Push JS files (medium priority)
+                for (const match of jsMatches) {
+                    const pathMatch = match.match(/src=["']([^"']+)["']/);
+                    if (pathMatch) {
+                        res.push?.(pathMatch[1], {
+                            headers: { 'content-type': 'application/javascript' },
+                            priority: 150, // Medium priority
+                        });
+                    }
+                }
+            }
+            return originalSend.call(res, data);
+        };
+    }
+    /**
+     * Push configured resources
+     */
+    pushConfiguredResources(req, res) {
+        const result = {
+            pushed: [],
+            failed: [],
+        };
+        if (!this.options.resources) {
+            return result;
+        }
+        // Check condition if provided
+        if (this.options.condition && !this.options.condition(req)) {
+            return result;
+        }
+        // Push each configured resource
+        for (const resource of this.options.resources) {
+            try {
+                const pushStream = res.push?.(resource.path, {
+                    headers: {
+                        'content-type': resource.type || 'text/plain',
+                    },
+                    priority: resource.priority,
+                });
+                if (pushStream) {
+                    result.pushed.push(resource.path);
+                }
+                else {
+                    result.failed.push(resource.path);
+                }
+            }
+            catch {
+                result.failed.push(resource.path);
+            }
+        }
+        return result;
+    }
+    /**
+     * Check if HTTP/2 is available
+     */
+    isHttp2Available(req, res) {
+        return req.httpVersion === '2.0' && res.push !== undefined;
+    }
+}
+//# sourceMappingURL=core.js.map

package/dist/core/middleware/built-in/http2/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/http2/core.ts"],"names":[],"mappings":"AAmBA,MAAM,OAAO,aAAa;IAChB,OAAO,CAAmB;IAElC,YAAY,UAA4B,EAAE;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,GAAgB,EAAE,GAAiB;QACnD,yCAAyC;QACxC,GAAW,CAAC,IAAI,GAAG,CAAC,IAAY,EAAE,cAAmB,EAAE,EAAE,EAAE;YAC1D,+BAA+B;YAC/B,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,IAAK,GAAW,CAAC,MAAM,IAAK,GAAW,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxF,IAAI,CAAC;oBACH,MAAM,WAAW,GAAQ;wBACvB,SAAS,EAAE,KAAK;wBAChB,OAAO,EAAE,IAAI;wBACb,GAAG,WAAW,CAAC,OAAO;qBACvB,CAAC;oBAEF,MAAM,UAAU,GAAI,GAAW,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;oBAE/D,IAAI,UAAU,EAAE,CAAC;wBACf,4BAA4B;wBAC5B,IAAI,WAAW,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;4BACvC,IAAI,CAAC;gCACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;gCAC/D,UAAkB,CAAC,QAAQ,CAAC;oCAC3B,MAAM,EAAE,CAAC;oCACT,MAAM;oCACN,SAAS,EAAE,KAAK;iCACjB,CAAC,CAAC;4BACL,CAAC;4BAAC,MAAM,CAAC;gCACP,oCAAoC;4BACtC,CAAC;wBACH,CAAC;wBAED,OAAO,UAAU,CAAC;oBACpB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,GAAgB,EAAE,GAAiB;QACjD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,6CAA6C;QAC7C,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;QAC9B,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS;YAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;gBAC1D,+BAA+B;gBAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,IAAI,EAAE,CAAC;gBAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,IAAI,EAAE,CAAC;gBAE5E,iCAAiC;gBACjC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;oBAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBACvD,IAAI,SAAS,EAAE,CAAC;wBACb,GAAW,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;4BAChC,OAAO,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE;4BACvC,QAAQ,EAAE,GAAG,EAAE,gBAAgB;yBAChC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,kCAAkC;gBAClC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;oBAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBACtD,IAAI,SAAS,EAAE,CAAC;wBACb,GAAW,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;4BAChC,OAAO,EAAE,EAAE,cAAc,EAAE,wBAAwB,EAAE;4BACrD,QAAQ,EAAE,GAAG,EAAE,kBAAkB;yBAClC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,GAAgB,EAAE,GAAiB;QACzD,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;SACX,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,gCAAgC;QAChC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,UAAU,GAAI,GAAW,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;oBACpD,OAAO,EAAE;wBACP,cAAc,EAAE,QAAQ,CAAC,IAAI,IAAI,YAAY;qBAC9C;oBACD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;iBAC5B,CAAC,CAAC;gBAEH,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACpC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,GAAgB,EAAE,GAAiB;QAClD,OAAO,GAAG,CAAC,WAAW,KAAK,KAAK,IAAK,GAAW,CAAC,IAAI,KAAK,SAAS,CAAC;IACtE,CAAC;CACF"}

package/dist/core/middleware/built-in/http2/hook.d.ts

@@ -0,0 +1,5 @@
+import { Http2PushOptions } from './core.js';
+/**
+ * Register HTTP/2 hooks with the hook manager
+ */
+export declare function registerHttp2Hooks(hookManager: any, options?: Http2PushOptions): void;

package/dist/core/middleware/built-in/http2/hook.js

@@ -0,0 +1,34 @@
+// HTTP/2 Hook Integration
+import { Http2PushCore } from './core.js';
+/**
+ * Register HTTP/2 hooks with the hook manager
+ */
+export function registerHttp2Hooks(hookManager, options = {}) {
+    const core = new Http2PushCore(options);
+    // Hook: Add HTTP/2 capabilities to response
+    hookManager.on('request', async (context) => {
+        const { request, response } = context;
+        if (!request || !response) {
+            return;
+        }
+        // Add push capability
+        core.addPushCapability(request, response);
+        // Setup auto-detect
+        core.setupAutoDetect(request, response);
+        // Push configured resources
+        core.pushConfiguredResources(request, response);
+    });
+    // Hook: Log HTTP/2 metrics
+    hookManager.on('response', async (context) => {
+        const { request, response } = context;
+        if (!request || !response) {
+            return;
+        }
+        // Track HTTP/2 usage
+        if (core.isHttp2Available(request, response)) {
+            // Could emit metrics here
+            context.http2Used = true;
+        }
+    });
+}
+//# sourceMappingURL=hook.js.map

package/dist/core/middleware/built-in/http2/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/http2/hook.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,OAAO,EAAE,aAAa,EAAoB,MAAM,WAAW,CAAC;AAE5D;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAgB,EAAE,UAA4B,EAAE;IACjF,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IAExC,4CAA4C;IAC5C,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;QAC/C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAEtC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1C,oBAAoB;QACpB,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAExC,4BAA4B;QAC5B,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;QAChD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAEtC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7C,0BAA0B;YAC1B,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/middleware/built-in/http2/index.d.ts

@@ -0,0 +1,8 @@
+export { Http2PushCore } from './core.js';
+export type { Http2PushOptions, Http2PushResult } from './core.js';
+export { createHttp2PushMiddleware } from './middleware.js';
+export { registerHttp2Hooks } from './hook.js';
+import { createHttp2PushMiddleware } from './middleware.js';
+export declare const http2: {
+    push: typeof createHttp2PushMiddleware;
+};

package/dist/core/middleware/built-in/http2/index.js

@@ -0,0 +1,10 @@
+// HTTP/2 Middleware - Centralized Exports
+export { Http2PushCore } from './core.js';
+export { createHttp2PushMiddleware } from './middleware.js';
+export { registerHttp2Hooks } from './hook.js';
+// Convenience exports
+import { createHttp2PushMiddleware } from './middleware.js';
+export const http2 = {
+    push: createHttp2PushMiddleware,
+};
+//# sourceMappingURL=index.js.map

package/dist/core/middleware/built-in/http2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/http2/index.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,sBAAsB;AACtB,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,IAAI,EAAE,yBAAyB;CAChC,CAAC"}

package/dist/core/middleware/built-in/http2/middleware.d.ts

@@ -0,0 +1,20 @@
+import { Middleware } from '../../../../types/http.js';
+import { Http2PushOptions } from './core.js';
+/**
+ * Create HTTP/2 Server Push middleware
+ *
+ * @example
+ * ```typescript
+ * import { http2 } from '@morojs/moro';
+ *
+ * app.use(http2.push({
+ *   autoDetect: true,
+ *   resources: [
+ *     { path: '/styles/main.css', as: 'style', type: 'text/css', priority: 200 },
+ *     { path: '/scripts/app.js', as: 'script', type: 'application/javascript', priority: 150 },
+ *   ],
+ *   condition: (req) => req.path === '/' || req.path.endsWith('.html'),
+ * }));
+ * ```
+ */
+export declare function createHttp2PushMiddleware(options?: Http2PushOptions): Middleware;

package/dist/core/middleware/built-in/http2/middleware.js

@@ -0,0 +1,31 @@
+import { Http2PushCore } from './core.js';
+/**
+ * Create HTTP/2 Server Push middleware
+ *
+ * @example
+ * ```typescript
+ * import { http2 } from '@morojs/moro';
+ *
+ * app.use(http2.push({
+ *   autoDetect: true,
+ *   resources: [
+ *     { path: '/styles/main.css', as: 'style', type: 'text/css', priority: 200 },
+ *     { path: '/scripts/app.js', as: 'script', type: 'application/javascript', priority: 150 },
+ *   ],
+ *   condition: (req) => req.path === '/' || req.path.endsWith('.html'),
+ * }));
+ * ```
+ */
+export function createHttp2PushMiddleware(options = {}) {
+    const core = new Http2PushCore(options);
+    return (req, res, next) => {
+        // Add push capability to response
+        core.addPushCapability(req, res);
+        // Setup auto-detection if enabled
+        core.setupAutoDetect(req, res);
+        // Push configured resources
+        core.pushConfiguredResources(req, res);
+        next();
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/core/middleware/built-in/http2/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/http2/middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAoB,MAAM,WAAW,CAAC;AAE5D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAA4B,EAAE;IACtE,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IAExC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,kCAAkC;QAClC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEjC,kCAAkC;QAClC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAE/B,4BAA4B;QAC5B,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEvC,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/middleware/built-in/index.d.ts

@@ -12,6 +12,14 @@ export { sse } from './sse/index.js';
 export { session } from './session/index.js';
 export { cache } from './cache/index.js';
 export { cdn } from './cdn/index.js';
+export { http2 } from './http2/index.js';
+export { helmet } from './helmet/index.js';
+export { compression } from './compression/index.js';
+export { bodySize } from './body-size/index.js';
+export { staticFiles } from './static/index.js';
+export { upload } from './upload/index.js';
+export { template } from './template/index.js';
+export { range } from './range/index.js';
 export { requireAuth, requireRole, requirePermission, requireAdmin, guestOnly, optionalAuth, withAuth, protectedRoute, authUtils, authResponses, sessionHelpers, } from './auth/helpers.js';
 export { safeVerifyJWT, extractJWTFromHeader, createAuthErrorResponse, type JWTVerificationResult, } from './auth/jwt-helpers.js';
 export { extendedProviders, enterpriseProviders, createCustomOAuthProvider, createCustomOIDCProvider, } from './auth/providers.js';
@@ -32,6 +40,16 @@ export declare const builtInMiddleware: {
     cache: (options?: import("../../../index.js").CacheOptions) => import("../index.js").MiddlewareInterface;
     cdn: (options?: import("./cdn/index.js").CDNOptions) => import("../index.js").MiddlewareInterface;
     graphql: (options: import("./graphql/index.js").GraphQLOptions) => import("../index.js").MiddlewareInterface;
+    http2: {
+        push: typeof import("./http2/middleware.js").createHttp2PushMiddleware;
+    };
+    helmet: typeof import("./helmet/middleware.js").createHelmetMiddleware;
+    compression: typeof import("./compression/middleware.js").createCompressionMiddleware;
+    bodySize: typeof import("./body-size/middleware.js").createBodySizeMiddleware;
+    staticFiles: typeof import("./static/middleware.js").createStaticMiddleware;
+    upload: typeof import("./upload/middleware.js").createUploadMiddleware;
+    template: typeof import("./template/middleware.js").createTemplateMiddleware;
+    range: typeof import("./range/middleware.js").createRangeMiddleware;
 };
 export declare const simpleMiddleware: {
     requestLogger: (context: any) => Promise<void>;