@nexus_js/middleware 0.6.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Nexus Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,17 @@
+# @nexus_js/middleware
+
+Nexus middleware — edge-compatible request pipeline with Web Standard APIs.
+
+## Documentation
+
+All guides, API reference, and examples live on **[nexusjs.dev](https://nexusjs.dev)**.
+
+## Links
+
+- **Website:** [https://nexusjs.dev](https://nexusjs.dev)
+- **Repository:** [github.com/bierfor/nexus](https://github.com/bierfor/nexus) (see `packages/middleware/`)
+- **Issues:** [github.com/bierfor/nexus/issues](https://github.com/bierfor/nexus/issues)
+
+## License
+
+MIT © Nexus contributors

package/dist/index.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Nexus Middleware — Web-standard request pipeline.
+ *
+ * 100% based on `Request` / `Response` — runs identically on:
+ *   - Node.js 20+
+ *   - Bun
+ *   - Deno
+ *   - Cloudflare Workers
+ *   - Vercel Edge Runtime
+ *   - Netlify Edge Functions
+ *
+ * Usage in src/middleware.ts:
+ *   import { defineMiddleware, sequence, auth, cors, rateLimit } from '@nexus_js/middleware';
+ *
+ *   export default defineMiddleware(
+ *     sequence(
+ *       cors({ origins: ['https://myapp.com'] }),
+ *       rateLimit({ max: 100, window: 60 }),
+ *       auth({ public: ['/login', '/register'] }),
+ *     )
+ *   );
+ */
+export type MiddlewareFn = (request: Request, next: () => Promise<Response>) => Promise<Response> | Response;
+export type Middleware = MiddlewareFn;
+/**
+ * Defines the middleware entry point.
+ * Export this from `src/middleware.ts`.
+ */
+export declare function defineMiddleware(fn: MiddlewareFn): MiddlewareFn;
+/**
+ * Composes multiple middlewares into a single pipeline.
+ * They run left-to-right.
+ */
+export declare function sequence(...middlewares: MiddlewareFn[]): MiddlewareFn;
+export interface CORSOptions {
+    /** Allowed origins. Use '*' for any. Default: '*' */
+    origins?: string | string[] | ((origin: string) => boolean);
+    methods?: string[];
+    headers?: string[];
+    credentials?: boolean;
+    maxAge?: number;
+}
+/**
+ * CORS middleware — handles preflight and injects CORS headers.
+ */
+export declare function cors(opts?: CORSOptions): MiddlewareFn;
+export interface RateLimitOptions {
+    /** Max requests per window */
+    max: number;
+    /** Window size in seconds */
+    window: number;
+    /** Key function to identify clients (default: IP-based) */
+    keyFn?: (request: Request) => string;
+    /** Message returned when rate limited */
+    message?: string;
+}
+/**
+ * Rate limiting middleware using a sliding window algorithm.
+ */
+export declare function rateLimit(opts: RateLimitOptions): MiddlewareFn;
+export interface AuthOptions {
+    /** Public paths that skip auth (supports wildcards like '/api/*') */
+    public?: string[];
+    /** Where to redirect unauthenticated users */
+    loginUrl?: string;
+    /** Custom session validator — return truthy if valid */
+    validate?: (request: Request) => boolean | Promise<boolean>;
+}
+/**
+ * Authentication guard middleware.
+ * Redirects to loginUrl if the user is not authenticated.
+ */
+export declare function auth(opts?: AuthOptions): MiddlewareFn;
+export interface GeoOptions {
+    /** Block requests from these country codes */
+    blocked?: string[];
+    /** Allow only these country codes */
+    allowed?: string[];
+}
+/**
+ * Geo-blocking middleware — uses Cloudflare/Vercel edge headers.
+ */
+export declare function geo(opts: GeoOptions): MiddlewareFn;
+/**
+ * Security headers middleware — HSTS, CSP, X-Frame-Options, etc.
+ */
+export declare function securityHeaders(opts?: {
+    csp?: string;
+    hsts?: boolean;
+    noSniff?: boolean;
+    frameOptions?: 'DENY' | 'SAMEORIGIN';
+}): MiddlewareFn;
+/**
+ * Request logger middleware — logs method, path, status and duration.
+ */
+export declare function logger(opts?: {
+    format?: 'tiny' | 'combined';
+}): MiddlewareFn;
+/**
+ * Wraps the Nexus middleware pipeline in a Cloudflare Worker handler.
+ */
+export declare function toCloudflareHandler(middleware: MiddlewareFn): {
+    fetch(request: Request, env: unknown, ctx: {
+        waitUntil: (p: Promise<unknown>) => void;
+    }): Promise<Response>;
+};
+/**
+ * Wraps the middleware for Vercel Edge Functions.
+ */
+export declare function toVercelEdge(middleware: MiddlewareFn): (request: Request) => Promise<Response>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,KAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;AAElC,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC;AAItC;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,YAAY,GAAG,YAAY,CAE/D;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,GAAG,WAAW,EAAE,YAAY,EAAE,GAAG,YAAY,CAgBrE;AAID,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,IAAI,GAAE,WAAgB,GAAG,YAAY,CAuCzD;AAED,MAAM,WAAW,gBAAgB;IAC/B,8BAA8B;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC;IACrC,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAKD;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAsC9D;AAED,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7D;AAED;;;GAGG;AACH,wBAAgB,IAAI,CAAC,IAAI,GAAE,WAAgB,GAAG,YAAY,CA6BzD;AAED,MAAM,WAAW,UAAU;IACzB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAwBlD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,GAAE;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;CACjC,GAAG,YAAY,CAuBpB;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;CAAO,GAAG,YAAY,CAehF;AAID;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,YAAY;mBAEnC,OAAO,OAAO,OAAO,OAAO;QAAE,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;EAIpH;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,YAAY,IACrC,SAAS,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC,CAGnD"}

package/dist/index.js

@@ -0,0 +1,257 @@
+/**
+ * Nexus Middleware — Web-standard request pipeline.
+ *
+ * 100% based on `Request` / `Response` — runs identically on:
+ *   - Node.js 20+
+ *   - Bun
+ *   - Deno
+ *   - Cloudflare Workers
+ *   - Vercel Edge Runtime
+ *   - Netlify Edge Functions
+ *
+ * Usage in src/middleware.ts:
+ *   import { defineMiddleware, sequence, auth, cors, rateLimit } from '@nexus_js/middleware';
+ *
+ *   export default defineMiddleware(
+ *     sequence(
+ *       cors({ origins: ['https://myapp.com'] }),
+ *       rateLimit({ max: 100, window: 60 }),
+ *       auth({ public: ['/login', '/register'] }),
+ *     )
+ *   );
+ */
+// ── Core ──────────────────────────────────────────────────────────────────────
+/**
+ * Defines the middleware entry point.
+ * Export this from `src/middleware.ts`.
+ */
+export function defineMiddleware(fn) {
+    return fn;
+}
+/**
+ * Composes multiple middlewares into a single pipeline.
+ * They run left-to-right.
+ */
+export function sequence(...middlewares) {
+    return async (request, next) => {
+        let index = -1;
+        const dispatch = async (i) => {
+            if (i <= index)
+                throw new Error('next() called multiple times');
+            index = i;
+            const fn = middlewares[i];
+            if (!fn)
+                return next();
+            return fn(request, () => dispatch(i + 1));
+        };
+        return dispatch(0);
+    };
+}
+/**
+ * CORS middleware — handles preflight and injects CORS headers.
+ */
+export function cors(opts = {}) {
+    const allowedMethods = (opts.methods ?? ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'HEAD', 'OPTIONS']).join(', ');
+    const allowedHeaders = (opts.headers ?? ['Content-Type', 'Authorization', 'X-Nexus-Action']).join(', ');
+    return async (request, next) => {
+        const origin = request.headers.get('origin') ?? '';
+        const isAllowed = (() => {
+            const o = opts.origins ?? '*';
+            if (o === '*')
+                return true;
+            if (typeof o === 'function')
+                return o(origin);
+            if (Array.isArray(o))
+                return o.includes(origin);
+            return o === origin;
+        })();
+        // Preflight
+        if (request.method === 'OPTIONS') {
+            return new Response(null, {
+                status: 204,
+                headers: {
+                    'access-control-allow-origin': isAllowed ? origin || '*' : '',
+                    'access-control-allow-methods': allowedMethods,
+                    'access-control-allow-headers': allowedHeaders,
+                    'access-control-max-age': String(opts.maxAge ?? 86400),
+                    ...(opts.credentials ? { 'access-control-allow-credentials': 'true' } : {}),
+                },
+            });
+        }
+        const response = await next();
+        const headers = new Headers(response.headers);
+        if (isAllowed) {
+            headers.set('access-control-allow-origin', origin || '*');
+            if (opts.credentials)
+                headers.set('access-control-allow-credentials', 'true');
+        }
+        return new Response(response.body, { status: response.status, headers });
+    };
+}
+/** In-memory rate limit store (use Redis adapter in production) */
+const rateLimitStore = new Map();
+/**
+ * Rate limiting middleware using a sliding window algorithm.
+ */
+export function rateLimit(opts) {
+    return async (request, next) => {
+        const key = opts.keyFn?.(request) ?? getClientIP(request);
+        const now = Date.now();
+        const windowMs = opts.window * 1000;
+        const entry = rateLimitStore.get(key);
+        if (!entry || now > entry.resetAt) {
+            rateLimitStore.set(key, { count: 1, resetAt: now + windowMs });
+            const response = await next();
+            return addRateLimitHeaders(response, opts.max, opts.max - 1, Math.floor((now + windowMs) / 1000));
+        }
+        entry.count++;
+        if (entry.count > opts.max) {
+            const retryAfter = Math.ceil((entry.resetAt - now) / 1000);
+            return new Response(opts.message ?? 'Too Many Requests', {
+                status: 429,
+                headers: {
+                    'retry-after': String(retryAfter),
+                    'x-ratelimit-limit': String(opts.max),
+                    'x-ratelimit-remaining': '0',
+                    'x-ratelimit-reset': String(Math.floor(entry.resetAt / 1000)),
+                    'content-type': 'text/plain',
+                },
+            });
+        }
+        const response = await next();
+        return addRateLimitHeaders(response, opts.max, opts.max - entry.count, Math.floor(entry.resetAt / 1000));
+    };
+}
+/**
+ * Authentication guard middleware.
+ * Redirects to loginUrl if the user is not authenticated.
+ */
+export function auth(opts = {}) {
+    const publicPaths = opts.public ?? [];
+    const loginUrl = opts.loginUrl ?? '/login';
+    return async (request, next) => {
+        const url = new URL(request.url);
+        const path = url.pathname;
+        // Check if path is public
+        const isPublic = publicPaths.some((p) => {
+            if (p.endsWith('*'))
+                return path.startsWith(p.slice(0, -1));
+            return path === p;
+        });
+        if (isPublic)
+            return next();
+        // Custom validator
+        if (opts.validate) {
+            const valid = await opts.validate(request);
+            if (valid)
+                return next();
+        }
+        else {
+            // Default: check for session cookie
+            const cookie = request.headers.get('cookie') ?? '';
+            if (cookie.includes('nx-session='))
+                return next();
+        }
+        // Not authenticated — redirect
+        return Response.redirect(loginUrl, 302);
+    };
+}
+/**
+ * Geo-blocking middleware — uses Cloudflare/Vercel edge headers.
+ */
+export function geo(opts) {
+    return async (request, next) => {
+        const country = request.headers.get('cf-ipcountry') ??
+            request.headers.get('x-vercel-ip-country') ??
+            request.headers.get('x-country-code') ??
+            'XX';
+        if (opts.blocked?.includes(country)) {
+            return new Response('Access denied from your region.', {
+                status: 403,
+                headers: { 'content-type': 'text/plain' },
+            });
+        }
+        if (opts.allowed && !opts.allowed.includes(country)) {
+            return new Response('Access denied from your region.', {
+                status: 403,
+                headers: { 'content-type': 'text/plain' },
+            });
+        }
+        return next();
+    };
+}
+/**
+ * Security headers middleware — HSTS, CSP, X-Frame-Options, etc.
+ */
+export function securityHeaders(opts = {}) {
+    return async (request, next) => {
+        const response = await next();
+        const headers = new Headers(response.headers);
+        if (opts.hsts !== false) {
+            headers.set('strict-transport-security', 'max-age=31536000; includeSubDomains');
+        }
+        if (opts.noSniff !== false) {
+            headers.set('x-content-type-options', 'nosniff');
+        }
+        if (opts.frameOptions !== undefined) {
+            headers.set('x-frame-options', opts.frameOptions);
+        }
+        if (opts.csp) {
+            headers.set('content-security-policy', opts.csp);
+        }
+        headers.set('referrer-policy', 'strict-origin-when-cross-origin');
+        headers.set('permissions-policy', 'camera=(), microphone=(), geolocation=()');
+        return new Response(response.body, { status: response.status, headers });
+    };
+}
+/**
+ * Request logger middleware — logs method, path, status and duration.
+ */
+export function logger(opts = {}) {
+    return async (request, next) => {
+        const start = Date.now();
+        const url = new URL(request.url);
+        const response = await next();
+        const ms = Date.now() - start;
+        const status = response.status;
+        const color = status >= 500 ? '\x1b[31m' : status >= 400 ? '\x1b[33m' : '\x1b[32m';
+        console.log(`  ${color}${status}\x1b[0m ${request.method} ${url.pathname} \x1b[2m${ms}ms\x1b[0m`);
+        return response;
+    };
+}
+// ── Edge adapter factory ───────────────────────────────────────────────────────
+/**
+ * Wraps the Nexus middleware pipeline in a Cloudflare Worker handler.
+ */
+export function toCloudflareHandler(middleware) {
+    return {
+        async fetch(request, env, ctx) {
+            return middleware(request, () => Promise.resolve(new Response('Not Found', { status: 404 })));
+        },
+    };
+}
+/**
+ * Wraps the middleware for Vercel Edge Functions.
+ */
+export function toVercelEdge(middleware) {
+    return async (request) => {
+        return middleware(request, () => Promise.resolve(new Response('Not Found', { status: 404 })));
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Helpers
+// ─────────────────────────────────────────────────────────────────────────────
+function getClientIP(request) {
+    return (request.headers.get('cf-connecting-ip') ??
+        request.headers.get('x-real-ip') ??
+        request.headers.get('x-forwarded-for')?.split(',')[0]?.trim() ??
+        'unknown');
+}
+function addRateLimitHeaders(response, limit, remaining, reset) {
+    const headers = new Headers(response.headers);
+    headers.set('x-ratelimit-limit', String(limit));
+    headers.set('x-ratelimit-remaining', String(Math.max(0, remaining)));
+    headers.set('x-ratelimit-reset', String(reset));
+    return new Response(response.body, { status: response.status, headers });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AASH,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAgB;IAC/C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAG,WAA2B;IACrD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAEf,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAS,EAAqB,EAAE;YACtD,IAAI,CAAC,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAChE,KAAK,GAAG,CAAC,CAAC;YAEV,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,EAAE,CAAC;YAEvB,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC;QAEF,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAaD;;GAEG;AACH,MAAM,UAAU,IAAI,CAAC,OAAoB,EAAE;IACzC,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjH,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExG,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnD,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE;YACtB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC;YAC9B,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC3B,IAAI,OAAO,CAAC,KAAK,UAAU;gBAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChD,OAAO,CAAC,KAAK,MAAM,CAAC;QACtB,CAAC,CAAC,EAAE,CAAC;QAEL,YAAY;QACZ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,6BAA6B,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE;oBAC7D,8BAA8B,EAAE,cAAc;oBAC9C,8BAA8B,EAAE,cAAc;oBAC9C,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;oBACtD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5E;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE9C,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;YAC1D,IAAI,IAAI,CAAC,WAAW;gBAAE,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC;AACJ,CAAC;AAaD,mEAAmE;AACnE,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8C,CAAC;AAE7E;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAsB;IAC9C,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YAC9B,OAAO,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACpG,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,mBAAmB,EAAE;gBACvD,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;oBACjC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;oBACrC,uBAAuB,EAAE,GAAG;oBAC5B,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;oBAC7D,cAAc,EAAE,YAAY;iBAC7B;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CACxB,QAAQ,EACR,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,EACtB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CACjC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,IAAI,CAAC,OAAoB,EAAE;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAE3C,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE1B,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACtC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ;YAAE,OAAO,IAAI,EAAE,CAAC;QAE5B,mBAAmB;QACnB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,oCAAoC;YACpC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,+BAA+B;QAC/B,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AASD;;GAEG;AACH,MAAM,UAAU,GAAG,CAAC,IAAgB;IAClC,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,OAAO,GACX,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YACnC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC1C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACrC,IAAI,CAAC;QAEP,IAAI,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,QAAQ,CAAC,iCAAiC,EAAE;gBACrD,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,QAAQ,CAAC,iCAAiC,EAAE;gBACrD,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAK5B,EAAE;IACJ,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE9C,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,qCAAqC,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,0CAA0C,CAAC,CAAC;QAE9E,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,OAAyC,EAAE;IAChE,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACnF,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,GAAG,MAAM,WAAW,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,WAAW,EAAE,WAAW,CACrF,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAElF;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAwB;IAC1D,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAAY,EAAE,GAAiD;YAC3F,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAChG,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,UAAwB;IACnD,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,WAAW,CAAC,OAAgB;IACnC,OAAO,CACL,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAChC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QAC7D,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAkB,EAClB,KAAa,EACb,SAAiB,EACjB,KAAa;IAEb,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@nexus_js/middleware",
+  "version": "0.6.0",
+  "description": "Nexus middleware — edge-compatible request pipeline with Web Standard APIs",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.5.0"
+  },
+  "license": "MIT",
+  "homepage": "https://nexusjs.dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/bierfor/nexus.git",
+    "directory": "packages/middleware"
+  },
+  "bugs": {
+    "url": "https://github.com/bierfor/nexus/issues"
+  },
+  "keywords": [
+    "nexus",
+    "framework",
+    "full-stack",
+    "svelte",
+    "islands",
+    "ssr",
+    "vite",
+    "server-actions"
+  ],
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch",
+    "clean": "rm -rf dist"
+  }
+}