@orpc/server 2.0.0-beta.42 → 2.0.0-beta.43

package/dist/adapters/aws-lambda/index.mjs

@@ -1,7 +1,7 @@
 import { resolveMaybeOptionalOptions } from '@orpc/shared';
 import { toStandardLazyRequest, sendStandardResponse } from '@standard-server/aws-lambda';
 import { r as resolveFriendlyStandardHandlerHandleOptions } from '../../shared/server.W91HSRkE.mjs';
-import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.BFEVk-EI.mjs';
+import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.B1ecixZJ.mjs';
 import '@orpc/client';
 import '@standard-server/core';
 import '../../shared/server.FEqy7Hrj.mjs';

package/dist/adapters/crossws/index.mjs

@@ -1,7 +1,7 @@
 import { resolveMaybeOptionalOptions } from '@orpc/shared';
 import { ServerPeer, encodePeerMessage, decodePeerMessage, isClientPeerSendMessage } from '@standard-server/peer';
 import { createStandardPeerRequestHandler } from '../standard-peer/index.mjs';
-import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.BFEVk-EI.mjs';
+import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.B1ecixZJ.mjs';
 import '../../shared/server.W91HSRkE.mjs';
 import '@orpc/client';
 import '@standard-server/core';

package/dist/adapters/fastify/index.mjs

@@ -1,7 +1,7 @@
 import { resolveMaybeOptionalOptions } from '@orpc/shared';
 import { toStandardLazyRequest, sendStandardResponse } from '@standard-server/fastify';
 import { r as resolveFriendlyStandardHandlerHandleOptions } from '../../shared/server.W91HSRkE.mjs';
-import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.BFEVk-EI.mjs';
+import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.B1ecixZJ.mjs';
 import '@orpc/client';
 import '@standard-server/core';
 import '../../shared/server.FEqy7Hrj.mjs';

package/dist/adapters/fetch/index.mjs

@@ -2,7 +2,7 @@ export { R as BodyLimitPlugin } from '../../shared/server.1ExWFMze.mjs';
 import { resolveMaybeOptionalOptions } from '@orpc/shared';
 import { toStandardLazyRequest, toFetchResponse } from '@standard-server/fetch';
 import { r as resolveFriendlyStandardHandlerHandleOptions } from '../../shared/server.W91HSRkE.mjs';
-import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.BFEVk-EI.mjs';
+import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.B1ecixZJ.mjs';
 import '@orpc/client';
 import '@standard-server/core';
 import '../../shared/server.FEqy7Hrj.mjs';

package/dist/adapters/message-port/index.mjs

@@ -2,7 +2,7 @@ import { onMessagePortMessage, onMessagePortClose, postMessagePortMessage } from
 import { value, resolveMaybeOptionalOptions } from '@orpc/shared';
 import { ServerPeer, encodePeerMessage, decodePeerMessage, isClientPeerSendMessage, isPeerMessage } from '@standard-server/peer';
 import { createStandardPeerRequestHandler } from '../standard-peer/index.mjs';
-import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.BFEVk-EI.mjs';
+import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.B1ecixZJ.mjs';
 import '../../shared/server.W91HSRkE.mjs';
 import '@orpc/client';
 import '@standard-server/core';

package/dist/adapters/node/index.mjs

@@ -2,7 +2,7 @@ export { R as BodyLimitPlugin } from '../../shared/server.1ExWFMze.mjs';
 import { resolveMaybeOptionalOptions } from '@orpc/shared';
 import { toStandardLazyRequest, sendStandardResponse } from '@standard-server/node';
 import { r as resolveFriendlyStandardHandlerHandleOptions } from '../../shared/server.W91HSRkE.mjs';
-import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.BFEVk-EI.mjs';
+import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.B1ecixZJ.mjs';
 import '@orpc/client';
 import '@standard-server/core';
 import '@standard-server/fetch';

package/dist/adapters/standard/index.mjs

@@ -1,4 +1,4 @@
-export { C as CompositeStandardHandlerPlugin, R as RPCHandlerCodec, a as RPCMatcher, b as RPC_DEFAULT_ALLOW_METHODS, S as StandardHandler, T as TracingHandlerPlugin } from '../../shared/server.BFEVk-EI.mjs';
+export { C as CompositeStandardHandlerPlugin, R as RPCHandlerCodec, a as RPCMatcher, b as RPC_DEFAULT_ALLOW_METHODS, S as StandardHandler, T as TracingHandlerPlugin } from '../../shared/server.B1ecixZJ.mjs';
 export { r as resolveFriendlyStandardHandlerHandleOptions } from '../../shared/server.W91HSRkE.mjs';
 import '@orpc/client';
 import '@orpc/shared';

package/dist/adapters/websocket/index.mjs

@@ -1,7 +1,7 @@
 import { toStringOrBytes, resolveMaybeOptionalOptions, sequential, loadBytes } from '@orpc/shared';
 import { ServerPeer, encodePeerMessage, decodePeerMessage, isClientPeerSendMessage } from '@standard-server/peer';
 import { createStandardPeerRequestHandler } from '../standard-peer/index.mjs';
-import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.BFEVk-EI.mjs';
+import { R as RPCHandlerCodec, S as StandardHandler } from '../../shared/server.B1ecixZJ.mjs';
 import '../../shared/server.W91HSRkE.mjs';
 import '@orpc/client';
 import '@standard-server/core';

package/dist/plugins/index.d.mts

@@ -112,6 +112,8 @@ interface CORSHandlerPluginOptions<T extends Context> {
     /**
      * Configures the `Access-Control-Allow-Headers` header for preflight requests.
      * Falls back to the request's `Access-Control-Request-Headers` if not set.
+     * When set, it replaces that fallback, so include every non-safelisted header
+     * clients send, such as `Content-Type`.
      */
     allowHeaders?: readonly string[];
     /**

package/dist/plugins/index.d.ts

@@ -112,6 +112,8 @@ interface CORSHandlerPluginOptions<T extends Context> {
     /**
      * Configures the `Access-Control-Allow-Headers` header for preflight requests.
      * Falls back to the request's `Access-Control-Request-Headers` if not set.
+     * When set, it replaces that fallback, so include every non-safelisted header
+     * clients send, such as `Content-Type`.
      */
     allowHeaders?: readonly string[];
     /**

package/dist/shared/{server.BFEVk-EI.mjs → server.B1ecixZJ.mjs}

@@ -183,6 +183,7 @@ class TracingHandlerPlugin {
 }
 
 const RPC_DEFAULT_ALLOW_METHODS = ["POST", "PUT", "PATCH", "DELETE"];
+const NORMALIZABLE_PATHNAME_REGEX = /[^\w\-.!~*'()/]/;
 class RPCMatcher {
   filter;
   allowMethodsSet;
@@ -244,7 +245,7 @@ class RPCMatcher {
       await loading;
     }
     let entry = this.tree.get(pathname);
-    if (entry === void 0 && pathname.includes("%")) {
+    if (entry === void 0 && NORMALIZABLE_PATHNAME_REGEX.test(pathname)) {
       const normalizedPathname = normalizeHttpPath(pathname);
       const normalizedLoading = this.resolvePendingLazyRouters(normalizedPathname);
       if (normalizedLoading !== void 0) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@orpc/server",
   "type": "module",
-  "version": "2.0.0-beta.42",
+  "version": "2.0.0-beta.43",
   "description": "Build typesafe APIs with oRPC: RPC and OpenAPI support, middleware, and adapters for Node.js, Bun, Deno, Fetch, Fastify, WebSocket, AWS Lambda, and more",
   "license": "MIT",
   "funding": [
@@ -117,15 +117,15 @@
     }
   },
   "dependencies": {
-    "@orpc/client": "2.0.0-beta.42",
-    "@orpc/contract": "2.0.0-beta.42",
-    "@orpc/shared": "2.0.0-beta.42",
-    "@standard-server/aws-lambda": "~0.10.1",
-    "@standard-server/core": "~0.10.1",
-    "@standard-server/fastify": "~0.10.1",
-    "@standard-server/fetch": "~0.10.1",
-    "@standard-server/node": "~0.10.1",
-    "@standard-server/peer": "~0.10.1",
+    "@orpc/client": "2.0.0-beta.43",
+    "@orpc/contract": "2.0.0-beta.43",
+    "@orpc/shared": "2.0.0-beta.43",
+    "@standard-server/aws-lambda": "~0.10.2",
+    "@standard-server/core": "~0.10.2",
+    "@standard-server/fastify": "~0.10.2",
+    "@standard-server/fetch": "~0.10.2",
+    "@standard-server/node": "~0.10.2",
+    "@standard-server/peer": "~0.10.2",
     "cookie": "^2.0.1"
   },
   "devDependencies": {