@nifrajs/core 5.4.0 → 5.5.0

package/src/server/body.ts

@@ -462,6 +462,12 @@ export function markTransportCap(source: object, maxBytes: number): void {
   ;(source as { [TRANSPORT_CAP]?: number })[TRANSPORT_CAP] = maxBytes
 }
 
+/** The cap {@link markTransportCap} set on `source`, for a copy that must keep it. */
+export function transportCapOf(source: object): number | undefined {
+  const cap: unknown = Reflect.get(source, TRANSPORT_CAP)
+  return typeof cap === "number" ? cap : undefined
+}
+
 /**
  * Enforce a marked source's transport byte cap on **direct user reads** of its request
  * (`c.req.json()`, `c.req.arrayBuffer()`, the raw `body` stream, `clone()`, ...), without swapping

package/src/server/cookies.ts

@@ -78,6 +78,9 @@ export function parseCookies(header: string | null | undefined): Record<string,
   if (!header) return out
   const len = header.length
   let pos = 0
+  // The first "=" at or after the segment, kept while it lies in a later one, so a run of bare
+  // segments does not rescan the rest of the header each time. -1: none left.
+  let eq = header.indexOf("=")
   while (pos < len) {
     let end = header.indexOf(";", pos)
     if (end === -1) end = len
@@ -86,7 +89,7 @@ export function parseCookies(header: string | null | undefined): Record<string,
     while (start < end && header.charCodeAt(start) === 32) start++
     let stop = end
     while (stop > start && header.charCodeAt(stop - 1) === 32) stop--
-    const eq = header.indexOf("=", start)
+    if (eq !== -1 && eq < start) eq = header.indexOf("=", start)
     if (eq > start && eq < stop) {
       // name: trim trailing spaces before '='; value: trim leading spaces after it
       let nameEnd = eq
@@ -125,6 +128,8 @@ export function hasDuplicateCookie(header: string | null | undefined, targetName
   let found = false
   const len = header.length
   let pos = 0
+  // Kept across segments as in parseCookies.
+  let eq = header.indexOf("=")
   while (pos < len) {
     let end = header.indexOf(";", pos)
     if (end === -1) end = len
@@ -132,7 +137,7 @@ export function hasDuplicateCookie(header: string | null | undefined, targetName
     while (start < end && header.charCodeAt(start) === 32) start++
     let stop = end
     while (stop > start && header.charCodeAt(stop - 1) === 32) stop--
-    const eq = header.indexOf("=", start)
+    if (eq !== -1 && eq < start) eq = header.indexOf("=", start)
     if (eq > start && eq < stop) {
       let nameEnd = eq
       while (nameEnd > start && header.charCodeAt(nameEnd - 1) === 32) nameEnd--

package/src/server/core-copies.ts

@@ -23,7 +23,7 @@ if (!copies.includes(here) && copies.push(here) > 1) {
 
 /** This copy's version: a literal like the package root's `VERSION` (no fs on the edge), which
  * `scripts/version.ts` rewrites on every release and `check:publish` asserts. */
-const COPY_VERSION = "5.4.0"
+const COPY_VERSION = "5.5.0"
 
 /** Record this copy's version beside its URL. Called by each `server()` behind the development guard,
  * so a production bundle drops it with the version; a copy that built a server has recorded one. */