@rangojs/router 0.0.0-experimental.bd6e11bc → 0.0.0-experimental.bdaf10aa

package/src/vite/utils/package-resolution.ts

@@ -1,10 +1,3 @@
-/**
- * Package Resolution Utilities
- *
- * Handles detection of workspace vs npm install context and generates
- * appropriate aliases and exclude lists for Vite configuration.
- */
-
 import { existsSync } from "node:fs";
 import { createRequire } from "node:module";
 import { resolve } from "node:path";
@@ -17,44 +10,20 @@ const require = createRequire(import.meta.url);
  */
 const VIRTUAL_PACKAGE_NAME = "@rangojs/router";
 
-/**
- * Get the published package name (e.g., "@rangojs/router")
- */
 export function getPublishedPackageName(): string {
   return packageJson.name;
 }
 
-/**
- * Check if the package is installed from npm (scoped) vs workspace (unscoped)
- *
- * In workspace development:
- * - Package is installed as "@rangojs/router" via pnpm workspace alias
- * - The scoped name (@rangojs/router) doesn't exist in node_modules
- *
- * When installed from npm:
- * - Package is installed as "@rangojs/router"
- * - We need aliases to map "@rangojs/router/*" to "@rangojs/router/*"
- */
 export function isInstalledFromNpm(): boolean {
   const packageName = getPublishedPackageName();
   // Check if the scoped package exists in node_modules
   return existsSync(resolve(process.cwd(), "node_modules", packageName));
 }
 
-/**
- * Check if we're in a monorepo/workspace development context
- */
 export function isWorkspaceDevelopment(): boolean {
   return !isInstalledFromNpm();
 }
 
-/**
- * Subpaths derived from package.json exports that use TypeScript source.
- * These must be excluded from Vite's dependency optimization (they ship
- * as .ts/.tsx, not compiled JS) and aliased when installed from npm.
- *
- * Derived automatically from the exports field to prevent drift.
- */
 const SOURCE_EXPORT_SUBPATHS = Object.keys(packageJson.exports)
   .filter((key) => {
     const entry = (
@@ -70,12 +39,6 @@ const SOURCE_EXPORT_SUBPATHS = Object.keys(packageJson.exports)
   })
   .map((key) => key.replace(/^\./, ""));
 
-/**
- * Generate the list of modules to exclude from Vite's dependency optimization.
- *
- * We include both the published name and the virtual name because
- * Vite's optimizer runs before alias resolution.
- */
 export function getExcludeDeps(): string[] {
   const packageName = getPublishedPackageName();
   const excludes: string[] = [];
@@ -92,24 +55,10 @@ export function getExcludeDeps(): string[] {
   return excludes;
 }
 
-/**
- * Subpaths that need aliasing — same as SOURCE_EXPORT_SUBPATHS.
- * When installed from npm, virtual entries may use a different package name
- * than the published one; aliases bridge them.
- */
 const ALIAS_SUBPATHS = SOURCE_EXPORT_SUBPATHS;
 
-/**
- * Generate aliases to map virtual package paths to the actual published package.
- *
- * Only needed when installed from npm, where the package is under @rangojs/router
- * but virtual entries import from rsc-router/*.
- *
- * Returns empty object in workspace development where rsc-router resolves directly.
- */
 export function getPackageAliases(): Record<string, string> {
   if (isWorkspaceDevelopment()) {
-    // No aliases needed - rsc-router resolves directly
     return {};
   }
 
@@ -123,28 +72,7 @@ export function getPackageAliases(): Record<string, string> {
   return aliases;
 }
 
-/**
- * Plugin-rsc pushes bare specs like
- * `@vitejs/plugin-rsc/vendor/react-server-dom/client.edge` into
- * `optimizeDeps.include` for the ssr and rsc environments. In strict pnpm
- * consumer apps, `@vitejs/plugin-rsc` is only reachable from @rangojs/router's
- * node_modules, so Vite's optimizer — which resolves from the project root —
- * can't find them and emits "Failed to resolve dependency" warnings.
- *
- * We resolve those specs from this plugin's location (where plugin-rsc is
- * guaranteed to be installed as our dep) and expose them as `resolve.alias`
- * entries. The optimizer's resolver honors aliases, so the bare specs map to
- * absolute paths and resolve cleanly.
- */
 export function getVendorAliases(): Record<string, string> {
-  // client.browser is intentionally NOT aliased. plugin-rsc injects it into
-  // the client env's optimizeDeps.include; Vite's manual-include path resolves
-  // and pre-bundles regardless of optimizeDeps.exclude, so aliasing would
-  // trigger esbuild pre-bundling of the CJS vendor file and bypass the
-  // cjs-to-esm transform that patches `require('react'|'react-dom')` into
-  // real ESM imports. The consumer may still see a single "Failed to resolve"
-  // warning for client.browser; runtime resolution from plugin-rsc's own
-  // importer works because Vite resolves relative to the importer (not root).
   const specs = [
     "@vitejs/plugin-rsc/vendor/react-server-dom/client.edge",
     "@vitejs/plugin-rsc/vendor/react-server-dom/server.edge",
@@ -154,7 +82,7 @@ export function getVendorAliases(): Record<string, string> {
     try {
       aliases[spec] = require.resolve(spec);
     } catch {
-      // Spec unresolvable (unexpected but non-fatal — Vite will warn as before).
+      // Non-fatal; Vite will warn if it cannot resolve the spec
     }
   }
   return aliases;

package/src/vite/utils/prerender-utils.ts

@@ -9,30 +9,13 @@ import {
 } from "node:fs";
 import { resolve } from "node:path";
 
-/**
- * Escape special RegExp characters in a string for safe interpolation
- * into new RegExp() patterns.
- */
-export function escapeRegExp(str: string): string {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
+import { escapeRegExp } from "../../regex-escape.js";
+import { encodePathRemainder } from "../../router/url-params.js";
 
-/**
- * Encode route param values for path interpolation while preserving path
- * separators for wildcard params (splat-style values can include `/`).
- */
 export function encodePathParam(value: unknown): string {
-  return String(value)
-    .split("/")
-    .map((segment) => encodeURIComponent(segment))
-    .join("/");
+  return encodePathRemainder(String(value), encodeURIComponent);
 }
 
-/**
- * Substitute route params into a pattern, stripping constraint and optional
- * syntax (:param(a|b)? -> value). Also handles wildcard params (*key).
- * Optional params not present in `params` are removed from the output.
- */
 export function substituteRouteParams(
   pattern: string,
   params: Record<string, string>,
@@ -41,17 +24,24 @@ export function substituteRouteParams(
   let result = pattern;
   let hadOmittedOptional = false;
 
-  // First pass: substitute provided params.
-  // Empty string on an optional placeholder is treated as omitted —
-  // caller-supplied params or `getParams()` shapes may pass `""` for an
-  // absent optional, so letting the second pass strip them keeps slash
-  // cleanup consistent. Empty string on required `:key` or wildcard
-  // `*key` still substitutes, matching prior behaviour.
   for (const [key, value] of Object.entries(params)) {
     const escaped = escapeRegExp(key);
+    // Named catch-all `:key+` / `:key*` (issue #634). Like the runtime reverse,
+    // the value is multi-segment: encode each segment and keep the `/` separators
+    // (a whole-value encode would turn `a/b` into `a%2Fb`), and consume the
+    // trailing modifier so it does not leak into the URL. `*` (zero-or-more)
+    // absent collapses via the trailing cleanup below.
+    const catchAllRe = new RegExp(`:${escaped}[+*]`);
+    if (catchAllRe.test(result)) {
+      if (value === "") {
+        result = result.replace(catchAllRe, "");
+        hadOmittedOptional = true;
+      } else {
+        result = result.replace(catchAllRe, encodePathRemainder(value, encode));
+      }
+      continue;
+    }
     if (value === "") {
-      // Only replace required placeholders (negative lookahead for `?`);
-      // leave `:key?` for the second pass.
       result = result.replace(
         new RegExp(`:${escaped}(\\([^)]*\\))?(?!\\?)`),
         "",
@@ -66,13 +56,11 @@ export function substituteRouteParams(
     }
   }
 
-  // Second pass: strip remaining optional param placeholders not in params
   result = result.replace(/:([a-zA-Z_][a-zA-Z0-9_]*)(\([^)]*\))?\?/g, () => {
     hadOmittedOptional = true;
     return "";
   });
 
-  // Clean up slashes from omitted optional segments
   if (hadOmittedOptional) {
     const hadTrailingSlash = pattern.length > 1 && pattern.endsWith("/");
     result = result.replace(/\/\/+/g, "/").replace(/\/+$/, "") || "/";
@@ -82,10 +70,6 @@ export function substituteRouteParams(
   return result;
 }
 
-/**
- * Run an async function over items with bounded concurrency.
- * Errors propagate immediately and abort remaining work.
- */
 export async function runWithConcurrency<T>(
   items: T[],
   concurrency: number,
@@ -97,19 +81,30 @@ export async function runWithConcurrency<T>(
     return;
   }
   let nextIndex = 0;
+  // On first failure (the default prerender.onError: "fail" re-throws), stop
+  // scheduling new work so the remaining workers don't keep running full RSC
+  // renders before the build aborts. The first error is surfaced after all
+  // in-flight workers settle, preserving the throw-to-fail-build behavior.
+  let firstError: unknown;
+  let failed = false;
   async function worker() {
-    while (nextIndex < items.length) {
+    while (nextIndex < items.length && !failed) {
       const idx = nextIndex++;
-      await fn(items[idx]);
+      try {
+        await fn(items[idx]);
+      } catch (err) {
+        if (!failed) {
+          failed = true;
+          firstError = err;
+        }
+        return;
+      }
     }
   }
   await Promise.all(Array.from({ length: limit }, () => worker()));
+  if (failed) throw firstError;
 }
 
-/**
- * Group prerender entries by their concurrency setting so each group
- * can be rendered with the appropriate parallelism.
- */
 export function groupByConcurrency<T extends { concurrency: number }>(
   entries: T[],
 ): { concurrency: number; entries: T[] }[] {
@@ -129,10 +124,6 @@ export function groupByConcurrency<T extends { concurrency: number }>(
   }));
 }
 
-/**
- * Notify all routers' onError callbacks about a build-time error.
- * Uses a synthetic request since there is no real request during build.
- */
 export function notifyOnError(
   registry: Map<string, any>,
   error: unknown,
@@ -172,6 +163,42 @@ export function notifyOnError(
   }
 }
 
+/**
+ * Resolve a thrown build-time render error into the prerender build's policy and
+ * log a per-entry line. A `Skip` (or any render error under `prerender.onError:
+ * "warn"`) logs and returns so the caller skips the entry; a render error under
+ * the default "fail" logs FAIL, notifies `onError`, and re-throws to fail the
+ * build. Shared by `expandPrerenderRoutes` (prerender) and `renderStaticHandlers`
+ * (static) so the Skip/warn/fail policy lives in one place. `label` is the padded
+ * URL / handler name for the log line; `elapsed` is the per-entry duration string.
+ */
+export function resolvePrerenderError(
+  registry: Map<string, any>,
+  error: any,
+  onError: "fail" | "warn",
+  label: string,
+  elapsed: string,
+  phase: "prerender" | "static",
+  routeKey?: string,
+  pathname?: string,
+): void {
+  const isSkip = error?.name === "Skip";
+  if (isSkip || onError === "warn") {
+    if (isSkip) {
+      console.log(`[rango]   SKIP ${label} (${elapsed}ms) - ${error.message}`);
+    } else {
+      console.warn(
+        `[rango]   WARN ${label} (${elapsed}ms) - render error, not pre-rendered (prerender.onError: "warn"): ${error.message}`,
+      );
+    }
+    notifyOnError(registry, error, phase, routeKey, pathname, true);
+    return;
+  }
+  console.error(`[rango]   FAIL ${label} (${elapsed}ms) - ${error.message}`);
+  notifyOnError(registry, error, phase, routeKey, pathname);
+  throw error;
+}
+
 function getStagedAssetDir(projectRoot: string): string {
   return resolve(projectRoot, "node_modules/.rangojs-router-build/rsc-assets");
 }

package/src/vite/utils/shared-utils.ts

@@ -1,11 +1,13 @@
 import type { Plugin, ResolvedConfig } from "vite";
 import * as Vite from "vite";
+import { isAbsolute, resolve } from "node:path";
 import { getPublishedPackageName } from "./package-resolution.js";
 import { performanceTracksOptimizeDepsPlugin } from "../plugins/performance-tracks.js";
 import {
   VIRTUAL_ENTRY_BROWSER,
   VIRTUAL_ENTRY_SSR,
   getVirtualEntryRSC,
+  getVirtualEntryRSCHost,
   getVirtualVersionContent,
   VIRTUAL_IDS,
 } from "../plugins/virtual-entries.js";
@@ -54,13 +56,59 @@ export const sharedRolldownOptions: {
   plugins: [versionRolldownPlugin, performanceTracksOptimizeDepsPlugin()],
 };
 
+/**
+ * Normalize an explicit `hostRouter` option into the specifier emitted as the
+ * host entry's `import ... from "<path>"`, and — for the forms that resolve
+ * unambiguously against the project root — verify the file exists (failing with
+ * a rango message instead of a downstream bundler "failed to resolve").
+ *
+ * Only a BARE specifier ("src/worker.rsc.tsx") that exists under the root is
+ * rewritten (to "./src/...") so it is not read as a package. A bare specifier
+ * that does NOT exist under the root is passed through VERBATIM: it may be a
+ * Vite alias ("@/worker.rsc.tsx"), an imports-map entry ("#app/worker"), or a
+ * workspace package the bundler resolves — rewriting or rejecting those was a
+ * regression (aliases worked before normalization existed). "./"/"../", a
+ * leading-slash (Vite root-relative), and a filesystem-absolute path are
+ * emitted unchanged — Vite resolves each. A leading-slash path and a
+ * filesystem-absolute path are indistinguishable on POSIX, so both are treated
+ * as "rooted": passed through WITHOUT an existence check (guessing between the
+ * two would wrongly reject a valid file — this was a regression the first time
+ * the check was added). Only the explicitly-relative forms, which resolve
+ * unambiguously against the root, fail fast with a rango message.
+ *
+ * `exists` is injected so the logic is unit-testable without a real filesystem.
+ */
+export function normalizeHostRouterEntry(
+  rawInput: string,
+  root: string,
+  exists: (absPath: string) => boolean,
+): string {
+  const raw = rawInput.replaceAll("\\", "/");
+  const isRelative = raw.startsWith("./") || raw.startsWith("../");
+  const isRooted = raw.startsWith("/") || isAbsolute(rawInput);
+  if (isRooted) return raw;
+  if (isRelative) {
+    if (!exists(resolve(root, raw))) {
+      throw new Error(
+        `[rango] hostRouter entry not found: "${rawInput}" (resolved under ` +
+          `${root}). Point it at your createHostRouter() module, e.g. ` +
+          `rango({ hostRouter: "./src/worker.rsc.tsx" }).`,
+      );
+    }
+    return raw;
+  }
+  // Bare specifier: an existing root-relative file gets the explicit "./";
+  // anything else (alias, imports-map, package) is the bundler's to resolve.
+  return exists(resolve(root, raw)) ? "./" + raw : raw;
+}
+
 /**
  * Create a virtual modules plugin for default entry files.
  * Provides virtual module content when entries use VIRTUAL_IDS (no custom entry configured).
  */
 export function createVirtualEntriesPlugin(
   entries: { client: string; ssr: string; rsc?: string },
-  routerPathRef?: { path?: string },
+  routerPathRef?: { path?: string; kind?: "router" | "host" },
 ): Plugin {
   // Build virtual modules map based on which entries use virtual IDs
   const virtualModules: Record<string, string> = {};
@@ -108,7 +156,9 @@ export function createVirtualEntriesPlugin(
             : routerPathRef.path;
           // Normalize backslashes for Windows (path.join/slice preserve native separators)
           const absoluteRouterPath = raw.replaceAll("\\", "/");
-          return getVirtualEntryRSC(absoluteRouterPath);
+          return routerPathRef.kind === "host"
+            ? getVirtualEntryRSCHost(absoluteRouterPath)
+            : getVirtualEntryRSC(absoluteRouterPath);
         }
       }
       return null;
@@ -161,23 +211,9 @@ function isContentHashedAssetConflict(message: string | undefined): boolean {
 }
 
 /**
- * Rollup onwarn handler that suppresses known harmless warnings:
- * - "use client" directives: handled by the RSC plugin, not relevant to Rollup
- * - sourcemap errors: caused by "use client" directive at line 1:0 confusing sourcemap resolution
- * - sourcemap incomplete: plugins that transform without generating sourcemaps (router + RSC plugin)
- * - dynamic/static mixed imports: expected for router internals (e.g. request-context, cache-scope).
- *   Under Rolldown (Vite 8) this surfaces as the INEFFECTIVE_DYNAMIC_IMPORT code emitted directly
- *   by the bundler, rather than the vite:reporter message handled below (Rollup/Vite 7 shape).
- * - empty bundle: @vitejs/plugin-rsc scan build (step 1/5) produces an empty "index" chunk
- *   because the RSC entry is fully externalized during client-reference analysis
- * - file name conflicts on content-hashed assets: @vitejs/plugin-rsc copies the rsc
- *   environment's imported CSS/assets into the client bundle (its assets-manifest
- *   generateBundle re-emits each via emitFile with an explicit content-hashed
- *   fileName). When the client bundle already produced that identical asset,
- *   rollup raises FILE_NAME_CONFLICT even though the bytes are identical (a
- *   content hash collision IS a content match). Only these are suppressed; a
- *   collision on a stable name still surfaces. No upstream fix as of
- *   @vitejs/plugin-rsc@0.5.27; remove when it skips the redundant emit.
+ * Suppress known harmless warnings: "use client" directives, sourcemap errors,
+ * mixed imports (expected for router internals), empty bundles, and content-hashed
+ * asset collisions from @vitejs/plugin-rsc copying RSC-env assets to the client bundle.
  */
 export function onwarn(
   warning: Vite.Rollup.RollupLog,
@@ -197,10 +233,6 @@ export function onwarn(
   ) {
     return;
   }
-  // @vitejs/plugin-rsc@0.5.14: rsc:virtual:vite-rsc/assets-manifest renderChunk
-  // returns { code } without map, causing Rollup to warn about incorrect sourcemaps.
-  // This is harmless (simple string replacement). Remove this suppression if a
-  // future version of @vitejs/plugin-rsc fixes the missing sourcemap.
   if (warning.message?.includes("Sourcemap is likely to be incorrect")) {
     return;
   }
@@ -215,10 +247,6 @@ export function onwarn(
   defaultHandler(warning);
 }
 
-/**
- * Manual chunks configuration for client build.
- * Splits React and router packages into separate chunks for better caching.
- */
 export function getManualChunks(id: string): string | undefined {
   const normalized = Vite.normalizePath(id);
 
@@ -230,16 +258,6 @@ export function getManualChunks(id: string): string | undefined {
   ) {
     return "react";
   }
-  // Use dynamic package name from package.json
-  // Check both npm install path and workspace symlink resolved path.
-  //
-  // The workspace patterns are anchored to the package's own `src`/`dist` so
-  // they match the router runtime but NOT consumer apps that merely live under a
-  // `packages/rangojs-router/` ancestor (the in-repo e2e apps at
-  // `packages/rangojs-router/e2e/<app>/src/...`). Without the anchor those apps'
-  // own client components were force-merged into the shared "router" chunk,
-  // which both misrepresented real-consumer bundles and blocked `clientChunks`
-  // splitting from relocating them.
   const packageName = getPublishedPackageName();
   if (
     normalized.includes(`node_modules/${packageName}/`) ||

package/src/browser/react/use-client-cache.ts

@@ -1,58 +0,0 @@
-"use client";
-
-import { useContext, useCallback } from "react";
-import { NavigationStoreContext } from "./context.js";
-
-/**
- * Return type for useClientCache hook
- */
-export interface ClientCacheControls {
-  /**
-   * Clear the client-side navigation cache.
-   * Call this after data changes that happen outside of server actions
-   * (e.g., REST API calls, WebSocket updates, etc.)
-   *
-   * This will also broadcast to other tabs to clear their caches.
-   */
-  clear: () => void;
-}
-
-/**
- * Hook to access client-side cache controls
- *
- * Use this when you need to manually invalidate the navigation cache
- * after data changes that happen outside of server actions.
- *
- * Server actions automatically clear the cache, so you only need this for:
- * - REST API mutations
- * - WebSocket-driven updates
- * - Other non-RSC data changes
- *
- * @example
- * ```tsx
- * function DataEditor() {
- *   const { clear } = useClientCache();
- *
- *   async function handleSave() {
- *     await fetch('/api/data', { method: 'POST', body: JSON.stringify(data) });
- *     // Clear cache so back/forward navigation shows fresh data
- *     clear();
- *   }
- *
- *   return <button onClick={handleSave}>Save</button>;
- * }
- * ```
- */
-export function useClientCache(): ClientCacheControls {
-  const ctx = useContext(NavigationStoreContext);
-
-  if (!ctx) {
-    throw new Error("useClientCache must be used within NavigationProvider");
-  }
-
-  const clear = useCallback(() => {
-    ctx.store.clearHistoryCache();
-  }, [ctx]);
-
-  return { clear };
-}

package/src/browser/shallow.ts

@@ -1,40 +0,0 @@
-/**
- * Shallow comparison utility for selector optimization
- *
- * Used by useNavigation hook to prevent unnecessary re-renders
- * when the selected value hasn't changed.
- *
- * @param a - First value
- * @param b - Second value
- * @returns true if values are shallowly equal
- */
-export function shallow<T>(a: T, b: T): boolean {
-  // Same reference or primitive equality
-  if (Object.is(a, b)) return true;
-
-  // Different types or non-objects
-  if (typeof a !== "object" || typeof b !== "object") return false;
-
-  // Null checks
-  if (a === null || b === null) return false;
-
-  // Compare object keys
-  const keysA = Object.keys(a);
-  const keysB = Object.keys(b);
-
-  if (keysA.length !== keysB.length) return false;
-
-  // Check each key's value with Object.is
-  for (const key of keysA) {
-    if (
-      !Object.is(
-        (a as Record<string, unknown>)[key],
-        (b as Record<string, unknown>)[key],
-      )
-    ) {
-      return false;
-    }
-  }
-
-  return true;
-}

package/src/handles/index.ts

@@ -1,7 +0,0 @@
-/**
- * Built-in handles for rsc-router.
- */
-
-export { Meta } from "./meta.ts";
-export { MetaTags } from "./MetaTags.tsx";
-export { Breadcrumbs, type BreadcrumbItem } from "./breadcrumbs.ts";

package/src/network-error-thrower.tsx

@@ -1,23 +0,0 @@
-"use client";
-
-import type { ReactNode } from "react";
-import type { NetworkError } from "./errors.js";
-
-interface NetworkErrorThrowerProps {
-  error: NetworkError;
-}
-
-/**
- * Client component that throws a NetworkError during render.
- * Used to trigger the root error boundary when a network error occurs
- * during navigation or server actions.
- *
- * This must be a separate component because:
- * 1. Errors must be thrown during React's render phase to be caught by error boundaries
- * 2. The error occurs in async code (fetch), so we need to propagate it to React's render
- */
-export function NetworkErrorThrower({
-  error,
-}: NetworkErrorThrowerProps): ReactNode {
-  throw error;
-}

package/src/router/middleware-cookies.ts

@@ -1,55 +0,0 @@
-/**
- * Cookie Utilities
- *
- * Parsing and serialization for HTTP cookies used by middleware context.
- */
-
-import type { CookieOptions } from "./middleware-types.js";
-
-/**
- * Parse cookies from Cookie header
- */
-export function parseCookies(
-  cookieHeader: string | null,
-): Record<string, string> {
-  if (!cookieHeader) return {};
-
-  const cookies: Record<string, string> = {};
-  const pairs = cookieHeader.split(";");
-
-  for (const pair of pairs) {
-    const [name, ...rest] = pair.trim().split("=");
-    if (name) {
-      const raw = rest.join("=");
-      try {
-        cookies[name] = decodeURIComponent(raw);
-      } catch {
-        // Malformed percent-encoded value (e.g. %zz) - fall back to raw value
-        cookies[name] = raw;
-      }
-    }
-  }
-
-  return cookies;
-}
-
-/**
- * Serialize a cookie for Set-Cookie header
- */
-export function serializeCookie(
-  name: string,
-  value: string,
-  options: CookieOptions = {},
-): string {
-  let cookie = `${encodeURIComponent(name)}=${encodeURIComponent(value)}`;
-
-  if (options.domain) cookie += `; Domain=${options.domain}`;
-  if (options.path) cookie += `; Path=${options.path}`;
-  if (options.maxAge !== undefined) cookie += `; Max-Age=${options.maxAge}`;
-  if (options.expires) cookie += `; Expires=${options.expires.toUTCString()}`;
-  if (options.httpOnly) cookie += "; HttpOnly";
-  if (options.secure) cookie += "; Secure";
-  if (options.sameSite) cookie += `; SameSite=${options.sameSite}`;
-
-  return cookie;
-}