@nifrajs/middleware 2.9.1 → 2.11.0

package/dist/problem-details.js

@@ -0,0 +1,161 @@
+import { definePlugin, pathnameOf } from "@nifrajs/core/server";
+const JSON_TYPE = /^(?:application\/json|[^/]+\/[^;]+\+json)(?:\s*;|$)/i;
+const DEFAULT_MAX_BYTES = 64 * 1024;
+const STATUS_TITLES = {
+    400: "Bad Request",
+    401: "Unauthorized",
+    403: "Forbidden",
+    404: "Not Found",
+    405: "Method Not Allowed",
+    406: "Not Acceptable",
+    408: "Request Timeout",
+    409: "Conflict",
+    410: "Gone",
+    411: "Length Required",
+    412: "Precondition Failed",
+    413: "Content Too Large",
+    415: "Unsupported Media Type",
+    422: "Unprocessable Content",
+    429: "Too Many Requests",
+    500: "Internal Server Error",
+    501: "Not Implemented",
+    502: "Bad Gateway",
+    503: "Service Unavailable",
+    504: "Gateway Timeout",
+    507: "Insufficient Storage",
+};
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function readEnvelope(body, contentType, maxBytes) {
+    if (contentType === null || !JSON_TYPE.test(contentType))
+        return undefined;
+    const bytes = typeof body === "string" ? new TextEncoder().encode(body) : body;
+    if (bytes.byteLength > maxBytes)
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(new TextDecoder().decode(bytes));
+    }
+    catch {
+        return undefined;
+    }
+    if (!isRecord(parsed) || parsed.ok !== false || typeof parsed.error !== "string") {
+        return undefined;
+    }
+    return {
+        error: parsed.error,
+        ...(Object.hasOwn(parsed, "issues") ? { issues: parsed.issues } : {}),
+    };
+}
+async function readCappedBody(body, maxBytes) {
+    const reader = body.getReader();
+    const chunks = [];
+    let size = 0;
+    try {
+        while (true) {
+            const result = await reader.read();
+            if (result.done) {
+                const bytes = new Uint8Array(size);
+                let offset = 0;
+                for (const chunk of chunks) {
+                    bytes.set(chunk, offset);
+                    offset += chunk.byteLength;
+                }
+                return bytes;
+            }
+            if (size + result.value.byteLength > maxBytes) {
+                void reader.cancel().catch(() => { });
+                return undefined;
+            }
+            chunks.push(result.value);
+            size += result.value.byteLength;
+        }
+    }
+    catch {
+        void reader.cancel().catch(() => { });
+        return undefined;
+    }
+}
+function problemType(typeBase, code) {
+    if (typeBase === undefined)
+        return "about:blank";
+    return `${typeBase.replace(/\/+$/, "")}/${encodeURIComponent(code)}`;
+}
+function problemDocument(status, envelope, typeBase, instance) {
+    const document = {
+        type: problemType(typeBase, envelope.error),
+        title: STATUS_TITLES[status] ?? "HTTP Error",
+        status,
+        code: envelope.error,
+    };
+    if (envelope.issues !== undefined)
+        document.issues = envelope.issues;
+    if (instance !== undefined)
+        document.instance = instance;
+    return document;
+}
+function isAlreadyProblemDetails(contentType) {
+    return contentType?.toLowerCase().startsWith("application/problem+json") === true;
+}
+/**
+ * Opt-in RFC 9457 formatting for Nifra's structured error envelope.
+ *
+ * The default `{ ok: false, error }` response remains unchanged. This plugin only converts that
+ * framework envelope, so custom JSON errors and already-formatted problem documents pass through.
+ * Raw JSON error Responses are supported through a capped clone; encoded responses are never drained.
+ */
+export function problemDetails(options = {}) {
+    const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0) {
+        throw new Error("problemDetails: maxBytes must be a non-negative safe integer");
+    }
+    const instance = options.includeInstance === true;
+    const typeBase = options.typeBase;
+    return definePlugin("problemDetails", (app) => app.use({
+        onResponseBody(body, headers, req, status) {
+            if (status < 400 ||
+                status >= 600 ||
+                headers.has("content-encoding") ||
+                isAlreadyProblemDetails(headers.get("content-type"))) {
+                return undefined;
+            }
+            const envelope = readEnvelope(body, headers.get("content-type"), maxBytes);
+            if (envelope === undefined)
+                return undefined;
+            const document = problemDocument(status, envelope, typeBase, instance ? pathnameOf(req.url) : undefined);
+            headers.set("content-type", "application/problem+json");
+            headers.delete("content-length");
+            return JSON.stringify(document);
+        },
+        async onResponseRaw(response, req) {
+            if (response.status < 400 ||
+                response.status >= 600 ||
+                response.body === null ||
+                response.headers.has("content-encoding") ||
+                isAlreadyProblemDetails(response.headers.get("content-type"))) {
+                return response;
+            }
+            let bytes;
+            try {
+                const clone = response.clone();
+                if (clone.body === null)
+                    return response;
+                bytes = await readCappedBody(clone.body, maxBytes);
+            }
+            catch {
+                return response;
+            }
+            if (bytes === undefined)
+                return response;
+            const envelope = readEnvelope(bytes, response.headers.get("content-type"), maxBytes);
+            if (envelope === undefined)
+                return response;
+            const headers = new Headers(response.headers);
+            headers.set("content-type", "application/problem+json");
+            headers.delete("content-length");
+            return new Response(JSON.stringify(problemDocument(response.status, envelope, typeBase, instance ? pathnameOf(req.url) : undefined)), { status: response.status, statusText: response.statusText, headers });
+        },
+    }));
+}
+//# sourceMappingURL=problem-details.js.map

package/dist/problem-details.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"problem-details.js","sourceRoot":"","sources":["../src/problem-details.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAE/D,MAAM,SAAS,GAAG,sDAAsD,CAAA;AACxE,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAA;AAEnC,MAAM,aAAa,GAAqC;IACtD,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,oBAAoB;IACzB,GAAG,EAAE,gBAAgB;IACrB,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,qBAAqB;IAC1B,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,uBAAuB;IAC5B,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,uBAAuB;IAC5B,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,qBAAqB;IAC1B,GAAG,EAAE,iBAAiB;IACtB,GAAG,EAAE,sBAAsB;CAC5B,CAAA;AAgBD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAA;AACpD,CAAC;AAED,SAAS,YAAY,CACnB,IAAyB,EACzB,WAA0B,EAC1B,QAAgB;IAEhB,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1E,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9E,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ;QAAE,OAAO,SAAS,CAAA;IACjD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjF,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAA;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAgC,EAChC,QAAgB;IAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;IAC/B,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,IAAI,GAAG,CAAC,CAAA;IAEZ,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAClC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;gBAClC,IAAI,MAAM,GAAG,CAAC,CAAA;gBACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;oBACxB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;gBAC5B,CAAC;gBACD,OAAO,KAAK,CAAA;YACd,CAAC;YAED,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBACpC,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACzB,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAA;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpC,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAA4B,EAAE,IAAY;IAC7D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,aAAa,CAAA;IAChD,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAA;AACtE,CAAC;AAED,SAAS,eAAe,CACtB,MAAc,EACd,QAAuB,EACvB,QAA4B,EAC5B,QAA4B;IAE5B,MAAM,QAAQ,GAA4B;QACxC,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC;QAC3C,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,YAAY;QAC5C,MAAM;QACN,IAAI,EAAE,QAAQ,CAAC,KAAK;KACrB,CAAA;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;IACpE,IAAI,QAAQ,KAAK,SAAS;QAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAA;IACxD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,uBAAuB,CAAC,WAA0B;IACzD,OAAO,WAAW,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,KAAK,IAAI,CAAA;AACnF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,UAAiC,EAAE;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAA;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,KAAK,IAAI,CAAA;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IAEjC,OAAO,YAAY,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE,CAC5C,GAAG,CAAC,GAAG,CAAC;QACN,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM;YACvC,IACE,MAAM,GAAG,GAAG;gBACZ,MAAM,IAAI,GAAG;gBACb,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC/B,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EACpD,CAAC;gBACD,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;YAC1E,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAC5C,MAAM,QAAQ,GAAG,eAAe,CAC9B,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAA;YACD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAA;YACvD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;YAChC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACjC,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG;YAC/B,IACE,QAAQ,CAAC,MAAM,GAAG,GAAG;gBACrB,QAAQ,CAAC,MAAM,IAAI,GAAG;gBACtB,QAAQ,CAAC,IAAI,KAAK,IAAI;gBACtB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBACxC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAC7D,CAAC;gBACD,OAAO,QAAQ,CAAA;YACjB,CAAC;YACD,IAAI,KAA6B,CAAA;YACjC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAA;gBAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;oBAAE,OAAO,QAAQ,CAAA;gBACxC,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,QAAQ,CAAA;YACjB,CAAC;YACD,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAA;YACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;YACpF,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAA;YAC3C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC7C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAA;YACvD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;YAChC,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CACZ,eAAe,CACb,QAAQ,CAAC,MAAM,EACf,QAAQ,EACR,QAAQ,EACR,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAC3C,CACF,EACD,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,CACtE,CAAA;QACH,CAAC;KACF,CAAC,CACH,CAAA;AACH,CAAC"}

package/dist/range.d.ts

@@ -0,0 +1,19 @@
+import { type ByteRange, type ByteRangeResult, parseByteRange } from "@nifrajs/core/range";
+export { type ByteRange, type ByteRangeResult, parseByteRange };
+export interface RangeResponseOptions {
+    /** Media type for the complete representation and each single-range response. */
+    readonly contentType?: string;
+    /** Entity tag used for conditional requests and `If-Range`. */
+    readonly etag?: string;
+    /** Validator used for conditional requests and date-form `If-Range`. */
+    readonly lastModified?: Date;
+    /** Optional cache policy copied to the response. */
+    readonly cacheControl?: string;
+}
+/**
+ * Create a standards-shaped byte representation response with Range, If-Range, and conditional
+ * validator handling. The input is already caller-owned memory; this helper does not read or retain
+ * external state. Multiple ranges use `multipart/byteranges` and adjacent ranges are coalesced.
+ */
+export declare function rangeResponse(request: Request, body: string | ArrayBuffer | ArrayBufferView | Uint8Array, options?: RangeResponseOptions): Response;
+//# sourceMappingURL=range.d.ts.map

package/dist/range.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"range.d.ts","sourceRoot":"","sources":["../src/range.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAK1F,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,cAAc,EAAE,CAAA;AAE/D,MAAM,WAAW,oBAAoB;IACnC,iFAAiF;IACjF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,CAAA;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B;AA+GD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,GAAG,UAAU,EACzD,OAAO,GAAE,oBAAyB,GACjC,QAAQ,CAuCV"}

package/dist/range.js

@@ -0,0 +1,144 @@
+import { parseByteRange } from "@nifrajs/core/range";
+// The parser lives in core because `@nifrajs/web`'s `public/` handler needs the identical answer for
+// files on disk, and web cannot depend on this package. Re-exported here so the middleware surface
+// stays one import.
+export { parseByteRange };
+const TEXT = new TextEncoder();
+function bytesOf(body) {
+    if (typeof body === "string")
+        return TEXT.encode(body);
+    if (body instanceof Uint8Array)
+        return body;
+    if (body instanceof ArrayBuffer)
+        return new Uint8Array(body);
+    return new Uint8Array(body.buffer, body.byteOffset, body.byteLength);
+}
+function httpDate(date) {
+    const time = date.getTime();
+    if (!Number.isFinite(time))
+        throw new RangeError("rangeResponse: lastModified must be a valid Date");
+    return new Date(time).toUTCString();
+}
+function validators(options) {
+    const headers = new Headers();
+    if (options.contentType !== undefined)
+        headers.set("content-type", options.contentType);
+    if (options.etag !== undefined)
+        headers.set("etag", options.etag);
+    if (options.lastModified !== undefined)
+        headers.set("last-modified", httpDate(options.lastModified));
+    if (options.cacheControl !== undefined)
+        headers.set("cache-control", options.cacheControl);
+    return headers;
+}
+function emptyResponse(status, headers) {
+    headers.delete("content-length");
+    headers.delete("content-type");
+    return new Response(null, { status, headers });
+}
+function matchesIfNoneMatch(value, etag) {
+    const normalized = etag.startsWith("W/") ? etag.slice(2) : etag;
+    return value.split(",").some((candidate) => {
+        const item = candidate.trim();
+        if (item === "*")
+            return true;
+        const comparable = item.startsWith("W/") ? item.slice(2) : item;
+        return comparable === normalized;
+    });
+}
+function ifRangeMatches(value, options) {
+    if (value === null)
+        return true;
+    const item = value.trim();
+    if (options.etag !== undefined)
+        return !item.startsWith("W/") && item === options.etag;
+    if (options.lastModified === undefined)
+        return false;
+    const time = Date.parse(item);
+    return (Number.isFinite(time) &&
+        Math.floor(time / 1000) >= Math.floor(options.lastModified.getTime() / 1000));
+}
+function shouldReturnNotModified(request, options) {
+    if (request.method !== "GET" && request.method !== "HEAD")
+        return false;
+    const ifNoneMatch = request.headers.get("if-none-match");
+    // RFC conditional precedence: an If-None-Match header suppresses date evaluation even when this
+    // representation has no ETag to compare. A non-matching tag must not be upgraded to a 304 by an
+    // older If-Modified-Since value.
+    if (ifNoneMatch !== null) {
+        return options.etag !== undefined && matchesIfNoneMatch(ifNoneMatch, options.etag);
+    }
+    // If-Modified-Since remains a valid fallback when the request did not send If-None-Match.
+    const lastModified = options.lastModified?.getTime();
+    const ifModifiedSince = request.headers.get("if-modified-since");
+    return (lastModified !== undefined &&
+        Number.isFinite(lastModified) &&
+        ifModifiedSince !== null &&
+        Number.isFinite(Date.parse(ifModifiedSince)) &&
+        Math.floor(Date.parse(ifModifiedSince) / 1000) >= Math.floor(lastModified / 1000));
+}
+function responseBody(bytes, request) {
+    return request.method === "HEAD" ? null : bytes;
+}
+function multipartBytes(bytes, ranges, size, contentType, boundary) {
+    const chunks = [];
+    let total = 0;
+    const add = (chunk) => {
+        chunks.push(chunk);
+        total += chunk.byteLength;
+    };
+    for (const range of ranges) {
+        add(TEXT.encode(`--${boundary}\r\n`));
+        add(TEXT.encode(`Content-Range: bytes ${range.start}-${range.end}/${size}\r\n`));
+        add(TEXT.encode(`Content-Type: ${contentType}\r\n\r\n`));
+        add(bytes.subarray(range.start, range.end + 1));
+        add(TEXT.encode("\r\n"));
+    }
+    add(TEXT.encode(`--${boundary}--\r\n`));
+    const body = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        body.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return body;
+}
+/**
+ * Create a standards-shaped byte representation response with Range, If-Range, and conditional
+ * validator handling. The input is already caller-owned memory; this helper does not read or retain
+ * external state. Multiple ranges use `multipart/byteranges` and adjacent ranges are coalesced.
+ */
+export function rangeResponse(request, body, options = {}) {
+    const bytes = bytesOf(body);
+    const headers = validators(options);
+    headers.set("accept-ranges", "bytes");
+    if (shouldReturnNotModified(request, options))
+        return emptyResponse(304, headers);
+    const requestedRange = request.method === "GET" || request.method === "HEAD" ? request.headers.get("range") : null;
+    const range = requestedRange !== null && ifRangeMatches(request.headers.get("if-range"), options)
+        ? parseByteRange(requestedRange, bytes.byteLength)
+        : { kind: "none" };
+    if (range.kind === "unsatisfiable") {
+        headers.set("content-range", `bytes */${bytes.byteLength}`);
+        headers.set("content-length", "0");
+        return new Response(null, { status: 416, headers });
+    }
+    if (range.kind === "none") {
+        headers.set("content-length", String(bytes.byteLength));
+        return new Response(responseBody(bytes, request), { status: 200, headers });
+    }
+    const contentType = options.contentType ?? "application/octet-stream";
+    if (range.ranges.length === 1) {
+        const selected = range.ranges[0];
+        const selectedBytes = bytes.subarray(selected.start, selected.end + 1);
+        headers.set("content-range", `bytes ${selected.start}-${selected.end}/${bytes.byteLength}`);
+        headers.set("content-length", String(selectedBytes.byteLength));
+        return new Response(responseBody(selectedBytes, request), { status: 206, headers });
+    }
+    const boundary = `nifra-${crypto.randomUUID().replaceAll("-", "")}`;
+    const selectedBytes = multipartBytes(bytes, range.ranges, bytes.byteLength, contentType, boundary);
+    headers.set("content-type", `multipart/byteranges; boundary=${boundary}`);
+    headers.set("content-length", String(selectedBytes.byteLength));
+    return new Response(responseBody(selectedBytes, request), { status: 206, headers });
+}
+//# sourceMappingURL=range.js.map

package/dist/range.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"range.js","sourceRoot":"","sources":["../src/range.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAE1F,qGAAqG;AACrG,mGAAmG;AACnG,oBAAoB;AACpB,OAAO,EAAwC,cAAc,EAAE,CAAA;AAa/D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAA;AAE9B,SAAS,OAAO,CAAC,IAAyD;IACxE,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACtD,IAAI,IAAI,YAAY,UAAU;QAAE,OAAO,IAAI,CAAA;IAC3C,IAAI,IAAI,YAAY,WAAW;QAAE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;IAC5D,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAU;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxB,MAAM,IAAI,UAAU,CAAC,kDAAkD,CAAC,CAAA;IAC1E,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,OAA6B;IAC/C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;IAC7B,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IACvF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QACpC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IAC9D,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC1F,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,OAAgB;IACrD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAChC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IAC9B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,IAAY;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC/D,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,OAAO,UAAU,KAAK,UAAU,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB,EAAE,OAA6B;IACzE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACzB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,CAAA;IACtF,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7B,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAC7E,CAAA;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB,EAAE,OAA6B;IAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAA;IACvE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACxD,gGAAgG;IAChG,gGAAgG;IAChG,iCAAiC;IACjC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACpF,CAAC;IACD,0FAA0F;IAC1F,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,CAAA;IACpD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IAChE,OAAO,CACL,YAAY,KAAK,SAAS;QAC1B,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC7B,eAAe,KAAK,IAAI;QACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAClF,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB,EAAE,OAAgB;IACvD,OAAO,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;AACjD,CAAC;AAED,SAAS,cAAc,CACrB,KAAiB,EACjB,MAA4B,EAC5B,IAAY,EACZ,WAAmB,EACnB,QAAgB;IAEhB,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,GAAG,GAAG,CAAC,KAAiB,EAAQ,EAAE;QACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;IAC3B,CAAC,CAAA;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,MAAM,CAAC,CAAC,CAAA;QACrC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAA;QAChF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,WAAW,UAAU,CAAC,CAAC,CAAA;QACxD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1B,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,QAAQ,CAAC,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACvB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;IAC5B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAgB,EAChB,IAAyD,EACzD,UAAgC,EAAE;IAElC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IACnC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;IAErC,IAAI,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC;QAAE,OAAO,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAEjF,MAAM,cAAc,GAClB,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7F,MAAM,KAAK,GACT,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QACjF,CAAC,CAAC,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC;QAClD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAA;IAE/B,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;QAC3D,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAClC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;QACvD,OAAO,IAAI,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,0BAA0B,CAAA;IACrE,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAA;QACjC,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;QACtE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;QAC3F,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAA;QAC/D,OAAO,IAAI,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAA;IACnE,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;IAClG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kCAAkC,QAAQ,EAAE,CAAC,CAAA;IACzE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAA;IAC/D,OAAO,IAAI,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;AACrF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nifrajs/middleware",
-  "version": "2.9.1",
+  "version": "2.11.0",
   "description": "Composable middleware for nifra - auth, CSRF, JWT/JWKS, IP restriction, CORS, body limits, response cache, timing, and operational helpers.",
   "keywords": [
     "bun",
@@ -46,10 +46,10 @@
     "access": "public"
   },
   "dependencies": {
-    "@nifrajs/schema": "2.9.1"
+    "@nifrajs/schema": "2.11.0"
   },
   "peerDependencies": {
-    "@nifrajs/core": "^2.9.1"
+    "@nifrajs/core": "^2.11.0"
   },
   "devDependencies": {
     "@nifrajs/core": "workspace:*",

package/src/conditional.ts

@@ -0,0 +1,70 @@
+import { withHeaders } from "./_utils.ts"
+
+export interface ConditionalResponseOptions {
+  /** Entity tag to attach and compare using HTTP weak comparison for GET/HEAD. */
+  readonly etag?: string
+  /** Last-modified validator to attach and compare at one-second HTTP date precision. */
+  readonly lastModified?: Date
+}
+
+function lastModifiedHeader(date: Date | undefined): string | undefined {
+  if (date === undefined) return undefined
+  if (!Number.isFinite(date.getTime())) {
+    throw new RangeError("conditionalResponse: lastModified must be a valid Date")
+  }
+  return date.toUTCString()
+}
+
+function weakTag(value: string): string {
+  return value.startsWith("W/") ? value.slice(2) : value
+}
+
+function matchesIfNoneMatch(value: string, etag: string): boolean {
+  const comparable = weakTag(etag)
+  return value.split(",").some((candidate) => {
+    const item = candidate.trim()
+    return item === "*" || weakTag(item) === comparable
+  })
+}
+
+function isFresh(request: Request, options: ConditionalResponseOptions): boolean {
+  if (request.method !== "GET" && request.method !== "HEAD") return false
+  const ifNoneMatch = request.headers.get("if-none-match")
+  if (ifNoneMatch !== null && options.etag !== undefined) {
+    return matchesIfNoneMatch(ifNoneMatch, options.etag)
+  }
+  if (ifNoneMatch !== null) return false
+  const modified = options.lastModified?.getTime()
+  const since = request.headers.get("if-modified-since")
+  return (
+    modified !== undefined &&
+    since !== null &&
+    Number.isFinite(modified) &&
+    Number.isFinite(Date.parse(since)) &&
+    Math.floor(Date.parse(since) / 1000) >= Math.floor(modified / 1000)
+  )
+}
+
+/** Apply validators to a response and produce a standards-compliant 304 when it is fresh. */
+export function conditionalResponse(
+  request: Request,
+  response: Response,
+  options: ConditionalResponseOptions = {},
+): Response {
+  const modified = lastModifiedHeader(options.lastModified)
+  if (response.status < 200 || response.status >= 300) return response
+  if (!isFresh(request, options)) {
+    if (options.etag === undefined && modified === undefined) return response
+    return withHeaders(response, (headers) => {
+      if (options.etag !== undefined) headers.set("etag", options.etag)
+      if (modified !== undefined) headers.set("last-modified", modified)
+    })
+  }
+  const headers = new Headers(response.headers)
+  if (options.etag !== undefined) headers.set("etag", options.etag)
+  if (modified !== undefined) headers.set("last-modified", modified)
+  headers.delete("content-length")
+  headers.delete("content-type")
+  void response.body?.cancel().catch(() => {})
+  return new Response(null, { status: 304, headers })
+}

package/src/content-negotiation.ts

@@ -0,0 +1,139 @@
+export interface ContentPreference {
+  readonly type: string
+  readonly subtype: string
+  readonly q: number
+  readonly specificity: 0 | 1 | 2
+}
+
+interface ParsedMediaType extends ContentPreference {
+  readonly parameters: ReadonlyMap<string, string>
+}
+
+const MAX_ACCEPT_HEADER_LENGTH = 16 * 1024
+const MAX_MEDIA_RANGES = 128
+
+function splitHeader(value: string): string[] | undefined {
+  if (value.length > MAX_ACCEPT_HEADER_LENGTH) return undefined
+  const parts: string[] = []
+  let start = 0
+  let quoted = false
+  for (let index = 0; index < value.length; index++) {
+    const character = value[index]
+    if (character === '"' && value[index - 1] !== "\\") quoted = !quoted
+    if (character === "," && !quoted) {
+      parts.push(value.slice(start, index))
+      if (parts.length >= MAX_MEDIA_RANGES) return undefined
+      start = index + 1
+    }
+  }
+  parts.push(value.slice(start))
+  return parts
+}
+
+function parseMediaType(value: string, qDefault = 1): ParsedMediaType | undefined {
+  const segments = value.split(";")
+  const media = segments.shift()?.trim().toLowerCase() ?? ""
+  const slash = media.indexOf("/")
+  if (slash <= 0 || slash === media.length - 1) return undefined
+  const type = media.slice(0, slash)
+  const subtype = media.slice(slash + 1)
+  if (!/^[\w!#$&^_.+-]+$/.test(type) || !/^[\w!#$&^_.+*-]+$/.test(subtype)) return undefined
+
+  let q = qDefault
+  const parameters = new Map<string, string>()
+  let afterQuality = false
+  for (const segment of segments) {
+    const separator = segment.indexOf("=")
+    if (separator < 1) continue
+    const key = segment.slice(0, separator).trim().toLowerCase()
+    const raw = segment.slice(separator + 1).trim()
+    const parameter = raw.startsWith('"') && raw.endsWith('"') ? raw.slice(1, -1) : raw
+    if (key === "q") {
+      if (afterQuality) continue
+      const parsed = Number(parameter)
+      if (!Number.isFinite(parsed) || parsed < 0 || parsed > 1) return undefined
+      q = parsed
+      afterQuality = true
+    } else if (!afterQuality) {
+      parameters.set(key, parameter.toLowerCase())
+    }
+  }
+  const specificity: 0 | 1 | 2 = type === "*" ? 0 : subtype === "*" ? 1 : 2
+  return { type, subtype, q, specificity, parameters }
+}
+
+/** Parse an `Accept` header, preserving quality and wildcard specificity. */
+export function parseAcceptHeader(value: string | null): readonly ContentPreference[] {
+  if (value === null || value.trim() === "") return []
+  const preferences: ContentPreference[] = []
+  for (const item of splitHeader(value) ?? []) {
+    const parsed = parseMediaType(item)
+    if (parsed !== undefined) preferences.push(parsed)
+  }
+  return preferences
+}
+
+function parsedAcceptHeader(value: string): readonly ParsedMediaType[] {
+  const preferences: ParsedMediaType[] = []
+  for (const item of splitHeader(value) ?? []) {
+    const parsed = parseMediaType(item)
+    if (parsed !== undefined) preferences.push(parsed)
+  }
+  return preferences
+}
+
+function offeredMatches(offer: ParsedMediaType, preference: ParsedMediaType): boolean {
+  if (preference.type !== "*" && preference.type !== offer.type) return false
+  if (preference.subtype !== "*" && preference.subtype !== offer.subtype) return false
+  for (const [key, value] of preference.parameters) {
+    if (offer.parameters.get(key) !== value) return false
+  }
+  return true
+}
+
+function acceptHeaderOf(value: string | null | Headers | Request): string | null {
+  if (typeof value === "string" || value === null) return value
+  return value instanceof Request ? value.headers.get("accept") : value.get("accept")
+}
+
+/**
+ * Select the best offered media type for an `Accept` header. The returned string is the original
+ * offered value, so parameters such as `profile` are preserved. An absent/empty header accepts the
+ * first offer; an explicit `q=0` or no matching offer returns `undefined`.
+ */
+export function negotiateContentType(
+  accept: string | null | Headers | Request,
+  offered: readonly string[],
+): string | undefined {
+  if (offered.length === 0) return undefined
+  const header = acceptHeaderOf(accept)
+  if (header === null || header.trim() === "") return offered[0]
+  const preferences = parsedAcceptHeader(header)
+  let selected:
+    | {
+        readonly value: string
+        readonly q: number
+        readonly specificity: number
+        readonly index: number
+      }
+    | undefined
+
+  offered.forEach((value, index) => {
+    const parsed = parseMediaType(value, 0)
+    if (parsed === undefined) return
+    let best: ParsedMediaType | undefined
+    for (const preference of preferences) {
+      if (!offeredMatches(parsed, preference)) continue
+      if (best === undefined || preference.specificity > best.specificity) best = preference
+    }
+    if (best === undefined || best.q === 0) return
+    if (
+      selected === undefined ||
+      best.q > selected.q ||
+      (best.q === selected.q && best.specificity > selected.specificity)
+    ) {
+      selected = { value, q: best.q, specificity: best.specificity, index }
+    }
+  })
+  return selected?.value
+}

package/src/index.ts

@@ -37,6 +37,15 @@ export {
 export { type CacheControlOptions, cacheControl } from "./cache-control.ts"
 export { type Composable, combine, namedCombine } from "./combine.ts"
 export { type CompressionOptions, compression } from "./compression.ts"
+export {
+  type ConditionalResponseOptions,
+  conditionalResponse,
+} from "./conditional.ts"
+export {
+  type ContentPreference,
+  negotiateContentType,
+  parseAcceptHeader,
+} from "./content-negotiation.ts"
 export { type CorsOptions, cors } from "./cors.ts"
 export {
   type CsrfOptions,
@@ -84,6 +93,13 @@ export {
 } from "./language.ts"
 export { type LoggerOptions, logger, type RequestLogFields } from "./logger.ts"
 export { type MethodOverrideOptions, methodOverride } from "./method-override.ts"
+export {
+  type MultipartBody,
+  type MultipartHeadersInit,
+  type MultipartPart,
+  type MultipartResponseOptions,
+  multipartResponse,
+} from "./multipart.ts"
 export {
   buildOpenApiDocument,
   type OpenApiInfo,
@@ -97,6 +113,14 @@ export {
 } from "./openapi.ts"
 export { type PoweredByOptions, poweredBy } from "./powered-by.ts"
 export { type PrettyJsonOptions, prettyJson } from "./pretty-json.ts"
+export { type ProblemDetailsOptions, problemDetails } from "./problem-details.ts"
+export {
+  type ByteRange,
+  type ByteRangeResult,
+  parseByteRange,
+  type RangeResponseOptions,
+  rangeResponse,
+} from "./range.ts"
 export {
   MemoryStore,
   type MemoryStoreOptions,