@psnext/slingcli 3.5.20261007-3 → 3.5.20261026-1

package/node_modules/fast-uri/test/reserved-path-normalization.test.js

@@ -77,13 +77,13 @@ test('serialize uses the RFC 3986 path character set without opening escapes', (
   )
   t.equal(
     fastURI.serialize({ path: './a:b/c:d' }),
-    'a%3Ab/c:d',
-    'escapes a first-segment colon exposed by dot-segment removal'
+    './a:b/c:d',
+    'a first-segment colon exposed by dot-segment removal is kept behind a "." segment'
   )
   t.equal(
     fastURI.normalize('./a:b'),
-    'a%3Ab',
-    'normalization keeps a relative path from becoming a scheme'
+    './a:b',
+    'normalization keeps a relative path from becoming a scheme without re-encoding the colon'
   )
   t.equal(
     fastURI.serialize({ path: '/Kſ' }),
@@ -107,3 +107,31 @@ test('equal distinguishes escaped reserved path data from literal syntax', (t) =
   )
   t.end()
 })
+
+// A suffix reference never emits its scheme token, so it is a scheme-less
+// (path-noscheme) reference: a bare ':' in its first path segment must be
+// escaped, or the serialized output reparses as an absolute URI with a scheme.
+// @see https://github.com/fastify/fast-uri/security/advisories/GHSA-333x-w4r6-6crp
+test('suffix reference escapes a first-segment colon instead of emitting a scheme', (t) => {
+  const dangerous = /^(?:javascript|data|vbscript):/i
+  const options = { reference: 'suffix', scheme: 'x' }
+
+  for (const input of ['javascript:alert(1)', '%6Aavascript:alert(1)', 'data:text/html,x', 'vbscript:msgbox(1)']) {
+    t.notOk(dangerous.test(fastURI.normalize(input, options)), `${input} normalizes to an inert reference`)
+  }
+
+  t.equal(
+    fastURI.normalize('javascript:alert(1)', options),
+    'javascript%3Aalert(1)',
+    'escapes the leading-segment colon to %3A'
+  )
+  t.notOk(
+    dangerous.test(fastURI.resolve('https://a.example/base/', '%6Aavascript:alert(1)', { reference: 'suffix' })),
+    'resolve in suffix mode does not emit a live scheme'
+  )
+
+  // legitimate suffix usage is unchanged
+  t.equal(fastURI.normalize('path/to/file', options), 'path/to/file', 'plain path unchanged')
+  t.equal(fastURI.normalize('a/b:c', options), 'a/b:c', 'colon in a later segment stays literal')
+  t.end()
+})

package/node_modules/fast-uri/test/scheme-validation.test.js

@@ -15,7 +15,15 @@ const malformedSchemes = [
   'foo_bar:value',
   'éxample:value',
   'Kttp://example.com/',
-  'ſcheme:value'
+  'ſcheme:value',
+  // RFC 3986 section 3.1 does not allow percent-encoding in a scheme.
+  '%4Aavascript:alert(1)',
+  '%6aavascript:alert(1)',
+  'foo%2Bbar:value',
+  '%u006Aavascript:1',
+  'ht%74ps://example.com/',
+  'ma%69lto:user@example.org',
+  '%64ata:text/html,x'
 ]
 
 test('parse validates the decoded scheme against RFC 3986', (t) => {
@@ -23,10 +31,7 @@ test('parse validates the decoded scheme against RFC 3986', (t) => {
     ['a:value', 'a'],
     ['HTTP://example.com/', 'http'],
     ['a1+.-:value', 'a1+.-'],
-    ['%4Aavascript:alert(1)', 'javascript'],
-    ['foo%2Bbar:value', 'foo+bar'],
-    ['%u006Aavascript:1', 'javascript'],
-    ['ht%74ps://example.com/', 'https']
+    ['foo+bar:value', 'foo+bar']
   ]
 
   for (const [uri, scheme] of validSchemes) {
@@ -42,17 +47,41 @@ test('parse validates the decoded scheme against RFC 3986', (t) => {
   t.end()
 })
 
-test('decoded schemes select their scheme handlers', (t) => {
+test('percent-encoded schemes do not select scheme handlers', (t) => {
   t.equal(
     fastURI.normalize('ht%74ps://example.com:443'),
-    'https://example.com/',
-    'HTTP normalization runs after decoding the scheme'
+    'ht%74ps://example.com:443',
+    'HTTP normalization does not run for an encoded scheme'
   )
 
   // 3.x has no mailto scheme handler (added in v4); use the ws handler to
-  // verify that a percent-encoded scheme still selects its scheme handler
-  const ws = fastURI.parse('we%62socket://example.com/')
-  t.equal(ws.scheme, 'websocket', 'ws parsing runs after decoding the scheme')
+  // verify that a percent-encoded scheme does not select its scheme handler
+  const ws = fastURI.parse('w%73://example.com/a?b')
+  t.equal(ws.resourceName, undefined, 'ws parsing does not run for an encoded scheme')
+  t.equal(ws.error, MALFORMED_SCHEME_ERROR)
+  t.end()
+})
+
+test('normalization cannot synthesize a scheme from encoded input', (t) => {
+  const inputs = [
+    '%6Aavascript:alert(1)',
+    '%4A%41%56%41%53%43%52%49%50%54:alert(1)',
+    '%u006Aavascript:alert(1)',
+    'j%61vascript:alert(1)',
+    '%64ata:text/html,<script>alert(1)</script>',
+    'vb%73cript:msgbox(1)'
+  ]
+
+  for (const uri of inputs) {
+    const parsed = fastURI.parse(uri)
+    t.equal(parsed.error, MALFORMED_SCHEME_ERROR, uri + ' is malformed')
+    t.notOk(/^(?:javascript|data|vbscript):/i.test(String(parsed.scheme) + ':'), uri + ' parsed scheme is not decoded')
+    t.equal(fastURI.normalize(uri), uri, uri + ' normalizes to itself')
+    t.equal(fastURI.equal(uri, uri), false, uri + ' is not comparable')
+    t.throws(() => fastURI.resolve('https://example.com/app/', uri), /URI scheme is malformed\./, uri + ' is rejected by resolve')
+  }
+
+  t.equal(fastURI.equal('%68ttp://a/', 'http://a/'), false, 'encoded scheme does not alias a plain scheme')
   t.end()
 })
 
@@ -95,11 +124,21 @@ test('resolve rejects malformed decoded schemes in either input', (t) => {
   t.end()
 })
 
-test('serialize validates decoded component schemes', (t) => {
+test('serialize validates component schemes without decoding them', (t) => {
   t.equal(
-    fastURI.serialize({ scheme: 'foo%2Bbar', path: 'value' }),
+    fastURI.serialize({ scheme: 'foo+bar', path: 'value' }),
     'foo+bar:value',
-    'valid decoded scheme is serialized'
+    'valid scheme is serialized'
+  )
+  t.throws(
+    () => fastURI.serialize({ scheme: 'foo%2Bbar', path: 'value' }),
+    /URI scheme is malformed\./,
+    'percent-encoded scheme is rejected'
+  )
+  t.throws(
+    () => fastURI.serialize({ scheme: '%6Aavascript', path: 'alert(1)' }),
+    /URI scheme is malformed\./,
+    'encoded scheme cannot serialize as javascript:'
   )
   t.throws(
     () => fastURI.serialize({ scheme: '//evil.example', path: '/pwn' }),

package/node_modules/hono/README.md

@@ -17,7 +17,6 @@
 [![GitHub last commit](https://img.shields.io/github/last-commit/honojs/hono)](https://github.com/honojs/hono/commits/main)
 [![codecov](https://codecov.io/github/honojs/hono/graph/badge.svg)](https://codecov.io/github/honojs/hono)
 [![Discord badge](https://img.shields.io/discord/1011308539819597844?label=Discord&logo=Discord)](https://discord.gg/KMh2eNSdxV)
-[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/honojs/hono)
 
 Hono - _**means flame🔥 in Japanese**_ - is a small, simple, and ultrafast web framework built on Web Standards. It works on any JavaScript runtime: Cloudflare Workers, Fastly Compute, Deno, Bun, Vercel, AWS Lambda, Lambda@Edge, and Node.js.
 
@@ -63,9 +62,9 @@ The migration guide is available on [docs/MIGRATION.md](docs/MIGRATION.md).
 Contributions Welcome! You can contribute in the following ways.
 
 - Create an Issue - Propose a new feature. Report a bug.
-- Pull Request - Fix a bug or typo. Refactor the code.
-- Create third-party middleware - See [Third-party middleware](docs/CONTRIBUTING.md#third-party-middleware).
+- Build middleware and libraries - Grow the Hono ecosystem.
 - Share - Share your thoughts on the Blog, X, and others.
+- Sponsor - Support the maintainers through GitHub Sponsors: [@yusukebe](https://github.com/sponsors/yusukebe) and [@usualoma](https://github.com/sponsors/usualoma).
 - Make your application - Please try to use Hono.
 
 For more details, see [docs/CONTRIBUTING.md](docs/CONTRIBUTING.md).

package/node_modules/hono/dist/cjs/helper/css/common.js

@@ -46,7 +46,11 @@ const isValidKeyframeName = (name) => isValidClassName(name) && !RESERVED_KEYFRA
 const defaultOnInvalidSlug = (slug) => {
 	console.warn(`Invalid slug: ${slug}`);
 };
-const cssStringReStr = ["\"(?:(?:\\\\[\\s\\S]|[^\"\\\\])*)\"", "'(?:(?:\\\\[\\s\\S]|[^'\\\\])*)'"].join("|");
+const cssStringReStr = [
+	"\"(?:(?:\\\\[\\s\\S]|[^\"\\\\])*)\"",
+	"'(?:(?:\\\\[\\s\\S]|[^'\\\\])*)'",
+	"url\\(\\s*[^)\"'\\s]*\\s*\\)"
+].join("|");
 const minifyCssRe = new RegExp([
 	"(" + cssStringReStr + ")",
 	"(?:" + [
@@ -56,11 +60,12 @@ const minifyCssRe = new RegExp([
 		"\\s+$"
 	].join("|") + ")",
 	"\\s*;\\s*(}|$)\\s*",
-	"\\s*([{};:,])\\s*",
+	"\\s*([{};,])\\s*",
+	"(:)\\s*",
 	"(\\s)\\s+"
 ].join("|"), "g");
 const minify = (css) => {
-	return css.replace(minifyCssRe, (_, $1, $2, $3, $4) => $1 || $2 || $3 || $4 || "");
+	return css.replace(minifyCssRe, (_, $1, $2, $3, $4, $5) => $1 || $2 || $3 || $4 || $5 || "");
 };
 const buildStyleString = (strings, values) => {
 	const selectors = [];

package/node_modules/hono/dist/cjs/helper/css/index.js

@@ -21,7 +21,7 @@ const createCssContext = ({ id, classNameSlug, onInvalidSlug }) => {
 	const [cssJsxDomObject, StyleRenderToDom] = require_jsx_dom_css.createCssJsxDomObjects({ id });
 	const contextMap = /* @__PURE__ */ new WeakMap();
 	const nonceMap = /* @__PURE__ */ new WeakMap();
-	const replaceStyleRe = new RegExp(`(<style id="${id}"(?: nonce="[^"]*")?>.*?)(</style>)`);
+	const replaceStyleRe = new RegExp(`(<style id="${id}"(?: nonce="[^"]*")?>.*?)(</style>)`, "s");
 	const newCssClassNameObject = (cssClassName) => {
 		const appendStyle = ({ buffer, context }) => {
 			const [toAdd, added] = contextMap.get(context);

package/node_modules/hono/dist/cjs/helper/route/index.js

@@ -111,7 +111,9 @@ const basePath = (c, index) => {
 			const pattern = require_utils_url.getPattern(paths[i], paths[i + 1]);
 			if (pattern) {
 				const re = pattern[2] === true || pattern === "*" ? /[^\/]+/ : pattern[2];
-				basePathLength += reqPath.substring(basePathLength + 1).match(re)?.[0].length || 0;
+				const restPath = reqPath.substring(basePathLength + 1);
+				const segment = restPath.split("/", 1)[0];
+				basePathLength += (restPath.match(re)?.[0] ?? (re.test(segment) ? segment : "")).length;
 			} else basePathLength += paths[i].length;
 			basePathLength += 1;
 		}

package/node_modules/hono/dist/cjs/jsx/base.js

@@ -240,7 +240,7 @@ const cloneElement = (element, props, ...children) => {
 	if (children.length > 0) childrenToClone = children;
 	else {
 		const c = element.props.children;
-		childrenToClone = Array.isArray(c) ? c : [c];
+		childrenToClone = c !== void 0 ? Array.isArray(c) ? c : [c] : [];
 	}
 	return jsx(element.tag, {
 		...element.props,

package/node_modules/hono/dist/cjs/middleware/bearer-auth/index.js

@@ -53,6 +53,14 @@ const bearerAuth = (options) => {
 		const wwwAuthenticateHeaderValue = typeof wwwAuthenticateHeader === "function" ? await wwwAuthenticateHeader(c) : wwwAuthenticateHeader;
 		const headers = { "WWW-Authenticate": typeof wwwAuthenticateHeaderValue === "string" ? wwwAuthenticateHeaderValue : `${wwwAuthenticatePrefix}${Object.entries(wwwAuthenticateHeaderValue).map(([key, value]) => `${key}="${value}"`).join(",")}` };
 		const responseMessage = typeof messageOption === "function" ? await messageOption(c) : messageOption;
+		if (responseMessage instanceof Response) {
+			const resHeaders = new Headers(responseMessage.headers);
+			if (!resHeaders.has("WWW-Authenticate")) resHeaders.set("WWW-Authenticate", headers["WWW-Authenticate"]);
+			throw new require_http_exception.HTTPException(responseMessage.status, { res: new Response(responseMessage.body, {
+				status: responseMessage.status,
+				headers: resHeaders
+			}) });
+		}
 		const res = typeof responseMessage === "string" ? new Response(responseMessage, {
 			status,
 			headers

package/node_modules/hono/dist/cjs/middleware/serve-static/index.js

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_utils_url = require("../../utils/url.js");
+const require_utils_accept = require("../../utils/accept.js");
 const require_utils_compress = require("../../utils/compress.js");
 const require_utils_mime = require("../../utils/mime.js");
 const require_middleware_serve_static_path = require("./path.js");
@@ -20,6 +21,7 @@ const serveStatic = (options) => {
 	const join = options.join ?? require_middleware_serve_static_path.defaultJoin;
 	return async (c, next) => {
 		if (c.finalized) return next();
+		if (c.req.method !== "GET" && c.req.method !== "HEAD") return next();
 		let filename;
 		if (options.path) filename = options.path;
 		else try {
@@ -39,7 +41,7 @@ const serveStatic = (options) => {
 			const mimeType = options.mimes && require_utils_mime.getMimeType(path, options.mimes) || require_utils_mime.getMimeType(path);
 			c.header("Content-Type", mimeType || "application/octet-stream");
 			if (options.precompressed && (!mimeType || require_utils_compress.COMPRESSIBLE_CONTENT_TYPE_REGEX.test(mimeType))) {
-				const acceptEncodingSet = new Set(c.req.header("Accept-Encoding")?.split(",").map((encoding) => encoding.trim()));
+				const acceptEncodingSet = new Set(require_utils_accept.parseAccept(c.req.header("Accept-Encoding") ?? "").filter((encoding) => encoding.q > 0).map((encoding) => encoding.type));
 				for (const encoding of ENCODINGS_ORDERED_KEYS) {
 					if (!acceptEncodingSet.has(encoding)) continue;
 					const compressedContent = await getContent(path + ENCODINGS[encoding], c);

package/node_modules/hono/dist/cjs/router/trie-router/node.js

@@ -98,7 +98,7 @@ var Node = class Node {
 						const restPathString = path.slice(partOffsets[i]);
 						const m = matcher.exec(restPathString);
 						if (m) {
-							params[name] = m[0];
+							if (!Object.hasOwn(params, name)) params[name] = m[0];
 							this.#pushHandlerSets(handlerSets, child, method, node.#params, params);
 							if (m[0].length === restPathString.length && child.#children["*"]) this.#pushHandlerSets(handlerSets, child.#children["*"], method, node.#params, params);
 							for (const _ in child.#children) {
@@ -111,7 +111,7 @@ var Node = class Node {
 						}
 					}
 					if (matcher === true || matcher.test(part)) {
-						params[name] = part;
+						if (!Object.hasOwn(params, name)) params[name] = part;
 						if (isLast) {
 							this.#pushHandlerSets(handlerSets, child, method, params, node.#params);
 							if (child.#children["*"]) this.#pushHandlerSets(handlerSets, child.#children["*"], method, params, node.#params);

package/node_modules/hono/dist/cjs/utils/url.js

@@ -154,16 +154,21 @@ const _getQueryParam = (url, key, multiple) => {
 	if (hashIndex !== -1) url = url.slice(0, hashIndex);
 	let encoded;
 	if (!multiple && key && key.indexOf("%") === -1 && key.indexOf("+") === -1) {
-		let keyIndex = url.indexOf("?", 8);
+		const queryIndex = url.indexOf("?", 8);
+		let keyIndex = queryIndex;
 		if (keyIndex === -1) return;
 		if (!url.startsWith(key, keyIndex + 1)) keyIndex = url.indexOf(`&${key}`, keyIndex + 1);
 		while (keyIndex !== -1) {
 			const trailingKeyCode = url.charCodeAt(keyIndex + key.length + 1);
-			if (trailingKeyCode === 61) {
-				const valueIndex = keyIndex + key.length + 2;
-				const endIndex = url.indexOf("&", valueIndex);
-				return _decodeURI(url.slice(valueIndex, endIndex === -1 ? void 0 : endIndex));
-			} else if (trailingKeyCode == 38 || isNaN(trailingKeyCode)) return "";
+			if (trailingKeyCode === 61 || trailingKeyCode === 38 || isNaN(trailingKeyCode)) {
+				if (keyIndex > queryIndex && /(?:^|&)[^=&]*[%+]/.test(url.slice(queryIndex + 1, keyIndex))) break;
+				if (trailingKeyCode === 61) {
+					const valueIndex = keyIndex + key.length + 2;
+					const endIndex = url.indexOf("&", valueIndex);
+					return _decodeURI(url.slice(valueIndex, endIndex === -1 ? void 0 : endIndex));
+				}
+				return "";
+			}
 			keyIndex = url.indexOf(`&${key}`, keyIndex + 1);
 		}
 		encoded = /[%+]/.test(url);

package/node_modules/hono/dist/helper/css/common.js

@@ -45,7 +45,11 @@ const isValidKeyframeName = (name) => isValidClassName(name) && !RESERVED_KEYFRA
 const defaultOnInvalidSlug = (slug) => {
 	console.warn(`Invalid slug: ${slug}`);
 };
-const cssStringReStr = ["\"(?:(?:\\\\[\\s\\S]|[^\"\\\\])*)\"", "'(?:(?:\\\\[\\s\\S]|[^'\\\\])*)'"].join("|");
+const cssStringReStr = [
+	"\"(?:(?:\\\\[\\s\\S]|[^\"\\\\])*)\"",
+	"'(?:(?:\\\\[\\s\\S]|[^'\\\\])*)'",
+	"url\\(\\s*[^)\"'\\s]*\\s*\\)"
+].join("|");
 const minifyCssRe = new RegExp([
 	"(" + cssStringReStr + ")",
 	"(?:" + [
@@ -55,11 +59,12 @@ const minifyCssRe = new RegExp([
 		"\\s+$"
 	].join("|") + ")",
 	"\\s*;\\s*(}|$)\\s*",
-	"\\s*([{};:,])\\s*",
+	"\\s*([{};,])\\s*",
+	"(:)\\s*",
 	"(\\s)\\s+"
 ].join("|"), "g");
 const minify = (css) => {
-	return css.replace(minifyCssRe, (_, $1, $2, $3, $4) => $1 || $2 || $3 || $4 || "");
+	return css.replace(minifyCssRe, (_, $1, $2, $3, $4, $5) => $1 || $2 || $3 || $4 || $5 || "");
 };
 const buildStyleString = (strings, values) => {
 	const selectors = [];

package/node_modules/hono/dist/helper/css/index.js

@@ -20,7 +20,7 @@ const createCssContext = ({ id, classNameSlug, onInvalidSlug }) => {
 	const [cssJsxDomObject, StyleRenderToDom] = createCssJsxDomObjects({ id });
 	const contextMap = /* @__PURE__ */ new WeakMap();
 	const nonceMap = /* @__PURE__ */ new WeakMap();
-	const replaceStyleRe = new RegExp(`(<style id="${id}"(?: nonce="[^"]*")?>.*?)(</style>)`);
+	const replaceStyleRe = new RegExp(`(<style id="${id}"(?: nonce="[^"]*")?>.*?)(</style>)`, "s");
 	const newCssClassNameObject = (cssClassName) => {
 		const appendStyle = ({ buffer, context }) => {
 			const [toAdd, added] = contextMap.get(context);

package/node_modules/hono/dist/helper/route/index.js

@@ -110,7 +110,9 @@ const basePath = (c, index) => {
 			const pattern = getPattern(paths[i], paths[i + 1]);
 			if (pattern) {
 				const re = pattern[2] === true || pattern === "*" ? /[^\/]+/ : pattern[2];
-				basePathLength += reqPath.substring(basePathLength + 1).match(re)?.[0].length || 0;
+				const restPath = reqPath.substring(basePathLength + 1);
+				const segment = restPath.split("/", 1)[0];
+				basePathLength += (restPath.match(re)?.[0] ?? (re.test(segment) ? segment : "")).length;
 			} else basePathLength += paths[i].length;
 			basePathLength += 1;
 		}

package/node_modules/hono/dist/jsx/base.js

@@ -239,7 +239,7 @@ const cloneElement = (element, props, ...children) => {
 	if (children.length > 0) childrenToClone = children;
 	else {
 		const c = element.props.children;
-		childrenToClone = Array.isArray(c) ? c : [c];
+		childrenToClone = c !== void 0 ? Array.isArray(c) ? c : [c] : [];
 	}
 	return jsx(element.tag, {
 		...element.props,

package/node_modules/hono/dist/middleware/bearer-auth/index.js

@@ -52,6 +52,14 @@ const bearerAuth = (options) => {
 		const wwwAuthenticateHeaderValue = typeof wwwAuthenticateHeader === "function" ? await wwwAuthenticateHeader(c) : wwwAuthenticateHeader;
 		const headers = { "WWW-Authenticate": typeof wwwAuthenticateHeaderValue === "string" ? wwwAuthenticateHeaderValue : `${wwwAuthenticatePrefix}${Object.entries(wwwAuthenticateHeaderValue).map(([key, value]) => `${key}="${value}"`).join(",")}` };
 		const responseMessage = typeof messageOption === "function" ? await messageOption(c) : messageOption;
+		if (responseMessage instanceof Response) {
+			const resHeaders = new Headers(responseMessage.headers);
+			if (!resHeaders.has("WWW-Authenticate")) resHeaders.set("WWW-Authenticate", headers["WWW-Authenticate"]);
+			throw new HTTPException(responseMessage.status, { res: new Response(responseMessage.body, {
+				status: responseMessage.status,
+				headers: resHeaders
+			}) });
+		}
 		const res = typeof responseMessage === "string" ? new Response(responseMessage, {
 			status,
 			headers

package/node_modules/hono/dist/middleware/serve-static/index.js

@@ -1,4 +1,5 @@
 import { tryDecodeURI } from "../../utils/url.js";
+import { parseAccept } from "../../utils/accept.js";
 import { COMPRESSIBLE_CONTENT_TYPE_REGEX } from "../../utils/compress.js";
 import { getMimeType } from "../../utils/mime.js";
 import { defaultJoin } from "./path.js";
@@ -19,6 +20,7 @@ const serveStatic = (options) => {
 	const join = options.join ?? defaultJoin;
 	return async (c, next) => {
 		if (c.finalized) return next();
+		if (c.req.method !== "GET" && c.req.method !== "HEAD") return next();
 		let filename;
 		if (options.path) filename = options.path;
 		else try {
@@ -38,7 +40,7 @@ const serveStatic = (options) => {
 			const mimeType = options.mimes && getMimeType(path, options.mimes) || getMimeType(path);
 			c.header("Content-Type", mimeType || "application/octet-stream");
 			if (options.precompressed && (!mimeType || COMPRESSIBLE_CONTENT_TYPE_REGEX.test(mimeType))) {
-				const acceptEncodingSet = new Set(c.req.header("Accept-Encoding")?.split(",").map((encoding) => encoding.trim()));
+				const acceptEncodingSet = new Set(parseAccept(c.req.header("Accept-Encoding") ?? "").filter((encoding) => encoding.q > 0).map((encoding) => encoding.type));
 				for (const encoding of ENCODINGS_ORDERED_KEYS) {
 					if (!acceptEncodingSet.has(encoding)) continue;
 					const compressedContent = await getContent(path + ENCODINGS[encoding], c);

package/node_modules/hono/dist/router/trie-router/node.js

@@ -97,7 +97,7 @@ var Node = class Node {
 						const restPathString = path.slice(partOffsets[i]);
 						const m = matcher.exec(restPathString);
 						if (m) {
-							params[name] = m[0];
+							if (!Object.hasOwn(params, name)) params[name] = m[0];
 							this.#pushHandlerSets(handlerSets, child, method, node.#params, params);
 							if (m[0].length === restPathString.length && child.#children["*"]) this.#pushHandlerSets(handlerSets, child.#children["*"], method, node.#params, params);
 							for (const _ in child.#children) {
@@ -110,7 +110,7 @@ var Node = class Node {
 						}
 					}
 					if (matcher === true || matcher.test(part)) {
-						params[name] = part;
+						if (!Object.hasOwn(params, name)) params[name] = part;
 						if (isLast) {
 							this.#pushHandlerSets(handlerSets, child, method, params, node.#params);
 							if (child.#children["*"]) this.#pushHandlerSets(handlerSets, child.#children["*"], method, params, node.#params);

package/node_modules/hono/dist/types/adapter/aws-lambda/conninfo.d.ts

@@ -1,4 +1,4 @@
-import { GetConnInfo } from "../../helper/conninfo/types.js";
+import { GetConnInfo } from "../../helper/conninfo/index.js";
 //#region src/adapter/aws-lambda/conninfo.d.ts
 /**
  * Get connection information from AWS Lambda

package/node_modules/hono/dist/types/adapter/bun/conninfo.d.ts

@@ -1,4 +1,4 @@
-import { GetConnInfo } from "../../helper/conninfo/types.js";
+import { GetConnInfo } from "../../helper/conninfo/index.js";
 //#region src/adapter/bun/conninfo.d.ts
 /**
  * Get ConnInfo with Bun

package/node_modules/hono/dist/types/adapter/bun/ssg.d.ts

@@ -1,4 +1,4 @@
-import { FileSystemModule, ToSSGAdaptorInterface } from "../../helper/ssg/ssg.js";
+import { FileSystemModule, ToSSGAdaptorInterface } from "../../helper/ssg/index.js";
 //#region src/adapter/bun/ssg.d.ts
 /**
  * @experimental

package/node_modules/hono/dist/types/adapter/cloudflare-pages/conninfo.d.ts

@@ -1,4 +1,4 @@
-import { GetConnInfo } from "../../helper/conninfo/types.js";
+import { GetConnInfo } from "../../helper/conninfo/index.js";
 //#region src/adapter/cloudflare-pages/conninfo.d.ts
 /**
  * Get connection information from Cloudflare Pages

package/node_modules/hono/dist/types/adapter/cloudflare-workers/conninfo.d.ts

@@ -1,4 +1,4 @@
-import { GetConnInfo } from "../../helper/conninfo/types.js";
+import { GetConnInfo } from "../../helper/conninfo/index.js";
 //#region src/adapter/cloudflare-workers/conninfo.d.ts
 /**
  * @deprecated `hono/cloudflare-workers` will be removed in v5. Install `@hono/cloudflare-workers` and import from there instead.

package/node_modules/hono/dist/types/adapter/deno/conninfo.d.ts

@@ -1,4 +1,4 @@
-import { GetConnInfo } from "../../helper/conninfo/types.js";
+import { GetConnInfo } from "../../helper/conninfo/index.js";
 //#region src/adapter/deno/conninfo.d.ts
 /**
  * Get conninfo with Deno

package/node_modules/hono/dist/types/adapter/deno/ssg.d.ts

@@ -1,4 +1,4 @@
-import { FileSystemModule, ToSSGAdaptorInterface } from "../../helper/ssg/ssg.js";
+import { FileSystemModule, ToSSGAdaptorInterface } from "../../helper/ssg/index.js";
 //#region src/adapter/deno/ssg.d.ts
 /**
  * @experimental

package/node_modules/hono/dist/types/adapter/lambda-edge/conninfo.d.ts

@@ -1,4 +1,4 @@
-import { GetConnInfo } from "../../helper/conninfo/types.js";
+import { GetConnInfo } from "../../helper/conninfo/index.js";
 //#region src/adapter/lambda-edge/conninfo.d.ts
 /**
  * @deprecated `hono/lambda-edge` will be removed in v5. Install `@hono/lambda-edge` and import from there instead.

package/node_modules/hono/dist/types/adapter/netlify/conninfo.d.ts

@@ -1,4 +1,4 @@
-import { GetConnInfo } from "../../helper/conninfo/types.js";
+import { GetConnInfo } from "../../helper/conninfo/index.js";
 //#region src/adapter/netlify/conninfo.d.ts
 /**
  * Get connection information from Netlify

package/node_modules/hono/dist/types/adapter/vercel/conninfo.d.ts

@@ -1,4 +1,4 @@
-import { GetConnInfo } from "../../helper/conninfo/types.js";
+import { GetConnInfo } from "../../helper/conninfo/index.js";
 //#region src/adapter/vercel/conninfo.d.ts
 /**
  * @deprecated `hono/vercel` will be removed in v5. Install `@hono/vercel` and import from there instead.

package/node_modules/hono/dist/types/helper/testing/index.d.ts

@@ -2,7 +2,8 @@ import { UnionToIntersection } from "../../utils/types.js";
 import { Schema } from "../../types.js";
 import { ExecutionContext } from "../../context.js";
 import { Hono } from "../../hono.js";
-import { Client, ClientRequestOptions } from "../../client/types.js";
+import { ClientRequestOptions } from "../../client/index.js";
+import { Client } from "../../client/types.js";
 //#region src/helper/testing/index.d.ts
 type ExtractEnv<T> = T extends Hono<infer E, Schema, string> ? E : never;
 export declare const testClient: <T extends Hono<any, Schema, string>>(app: T, Env?: ExtractEnv<T>["Bindings"] | {}, executionCtx?: ExecutionContext, options?: Omit<ClientRequestOptions, "fetch">) => UnionToIntersection<Client<T, "http://localhost">>;

package/node_modules/hono/dist/types/hono-base.d.ts

@@ -6,14 +6,6 @@ type GetPath<E extends Env> = (request: Request, options?: {
   env?: E['Bindings'];
 }) => string;
 export type HonoOptions<E extends Env> = {
-  /**
-   * `strict` option specifies whether to distinguish whether the last path is a directory or not.
-   *
-   * @see {@link https://hono.dev/docs/api/hono#strict-mode}
-   *
-   * @default true
-   */
-  strict?: boolean;
   /**
    * `router` option specifies which router to use.
    *
@@ -25,6 +17,15 @@ export type HonoOptions<E extends Env> = {
    * ```
    */
   router?: Router<[H, RouterRoute]>;
+} & ({
+  /**
+   * `strict` option specifies whether to distinguish whether the last path is a directory or not.
+   *
+   * @see {@link https://hono.dev/docs/api/hono#strict-mode}
+   *
+   * @default true
+   */
+  strict?: true;
   /**
    * `getPath` can handle the host header value.
    *
@@ -46,7 +47,18 @@ export type HonoOptions<E extends Env> = {
    * ```
    */
   getPath?: GetPath<E>;
-};
+} | {
+  /**
+   * `strict` option specifies whether to distinguish whether the last path is a directory or not.
+   * When `strict` is `false`, `getPath` is not used.
+   *
+   * @see {@link https://hono.dev/docs/api/hono#strict-mode}
+   *
+   * @default true
+   */
+  strict: false;
+  getPath?: never;
+});
 type MountOptionHandler = (c: Context) => unknown;
 type MountReplaceRequest = (originalRequest: Request) => Request;
 type MountOptions = MountOptionHandler | {

package/node_modules/hono/dist/types/index.d.ts

@@ -2,5 +2,5 @@ import { Env, ErrorHandler, Handler, Input, MiddlewareHandler, Next, NotFoundHan
 import { HonoRequest } from "./request.js";
 import { Context, ContextRenderer, ContextVariableMap, ExecutionContext } from "./context.js";
 import { Hono } from "./hono.js";
-import { ClientRequestOptions, InferRequestType, InferResponseType } from "./client/types.js";
+import { ClientRequestOptions, InferRequestType, InferResponseType } from "./client/index.js";
 export { type ClientRequestOptions, Context, type ContextRenderer, type ContextVariableMap, type Env, type ErrorHandler, type ExecutionContext, type Handler, Hono, type HonoRequest, type InferRequestType, type InferResponseType, type Input, type MiddlewareHandler, type Next, type NotFoundHandler, type NotFoundResponse, type Schema, type ToSchema, type TypedResponse, type ValidationTargets };

package/node_modules/hono/dist/types/jsx/components.d.ts

@@ -1,6 +1,6 @@
 import { HtmlEscapedString } from "../utils/html.js";
-import { PropsWithChildren } from "./types.js";
-import { Child, FC } from "./base.js";
+import { PropsWithChildren } from "./index.js";
+import { Child, FC } from "./index.js";
 //#region src/jsx/components.d.ts
 export declare const childrenToString: (children: Child[]) => Promise<HtmlEscapedString[]>;
 export type ErrorHandler = (error: Error) => void;

package/node_modules/hono/dist/types/jsx/context.d.ts

@@ -1,5 +1,5 @@
-import { PropsWithChildren } from "./types.js";
-import { FC } from "./base.js";
+import { PropsWithChildren } from "./index.js";
+import { FC } from "./index.js";
 //#region src/jsx/context.d.ts
 export interface Context<T> extends FC<PropsWithChildren<{
   value: T;

package/node_modules/hono/dist/types/jsx/dom/components.d.ts

@@ -1,6 +1,6 @@
 import { ErrorHandler, FallbackRender } from "../components.js";
-import { PropsWithChildren } from "../types.js";
-import { Child, FC } from "../base.js";
+import { PropsWithChildren } from "../index.js";
+import { Child, FC } from "../index.js";
 //#region src/jsx/dom/components.d.ts
 export declare const ErrorBoundary: FC<PropsWithChildren<{
   fallback?: Child;

package/node_modules/hono/dist/types/jsx/dom/css.d.ts

@@ -1,6 +1,6 @@
 import { ClassNameSlug, CssClassName, CssVariableType, OnInvalidSlug, rawCssString } from "../../helper/css/common.js";
-import { PropsWithChildren } from "../types.js";
-import { FC } from "../base.js";
+import { PropsWithChildren } from "../index.js";
+import { FC } from "../index.js";
 //#region src/jsx/dom/css.d.ts
 interface CreateCssJsxDomObjectsType {
   (args: {