@rapidrest/service-core 1.0.0-rc.7 → 1.0.0

package/dist/lib/http/bun/BunRouter.js

@@ -0,0 +1,391 @@
+import { DEFAULT_MAX_BODY_SIZE } from "../uWS/Adapters.js";
+import { BunRequest, BunResponse, readBunBody } from "./BunAdapters.js";
+import { BunWebSocketShim } from "./BunWebSocket.js";
+import { makeWsStubResponse, runChain } from "../MiddlewareChain.js";
+import { ApiError } from "@rapidrest/core";
+import { ApiErrorMessages, ApiErrors } from "../../ApiErrors.js";
+/** Strips a single trailing slash from a pathname, except for the root `"/"` itself. */
+function normalizePath(pathname) {
+    if (pathname.length > 1 && pathname.endsWith("/")) {
+        return pathname.slice(0, -1);
+    }
+    return pathname;
+}
+/** Splits a normalized pathname into non-empty segments (e.g. `/users/:uid` -> `["users", ":uid"]`). */
+function splitPath(pathname) {
+    return pathname.split("/").filter((s) => s.length > 0);
+}
+/**
+ * Scores how well a route's segments match a request's segments: 2 points per exact static
+ * segment match, 1 point per `:param` segment match, or `null` if the segment counts differ or a
+ * static segment doesn't match. Higher scores are more specific (static beats `:param`).
+ */
+function matchSegments(routeSegments, reqSegments) {
+    if (routeSegments.length !== reqSegments.length)
+        return null;
+    let score = 0;
+    for (let i = 0; i < routeSegments.length; i++) {
+        const seg = routeSegments[i];
+        if (seg.startsWith(":")) {
+            score += 1;
+        }
+        else if (seg === reqSegments[i]) {
+            score += 2;
+        }
+        else {
+            return null;
+        }
+    }
+    return score;
+}
+/**
+ * Extracts `:param` values from a matched request path given the route's segment pattern.
+ * Deliberately does NOT percent-decode — matches uWS's `getParameter()`, which returns the raw
+ * segment as-is, so `:param` values are identical across both adapters for the same request.
+ */
+function extractParams(routeSegments, reqSegments) {
+    const params = {};
+    for (let i = 0; i < routeSegments.length; i++) {
+        const seg = routeSegments[i];
+        if (seg.startsWith(":")) {
+            params[seg.slice(1)] = reqSegments[i] ?? "";
+        }
+    }
+    return params;
+}
+/** Maps the framework's `ssl` config block (file paths) to Bun's `tls` option (file contents). */
+function mapSslConfigToBunTls(sslConfig) {
+    return {
+        key: Bun.file(sslConfig.key),
+        cert: Bun.file(sslConfig.cert),
+        ca: sslConfig.ca ? Bun.file(sslConfig.ca) : undefined,
+        passphrase: sslConfig.passphrase,
+    };
+}
+/**
+ * Bun-native HTTP/WebSocket router built on `Bun.serve()`. Exposes the same public surface as the
+ * uWS-backed `HttpRouter` (`use/get/post/put/delete/patch/head/options/ws/listen/close/isListening/
+ * listenPort`) so `RouteUtils.registerRoute()` and `Server.ts` work against either implementation
+ * unchanged.
+ *
+ * Unlike uWS, `Bun.serve()` has no built-in dynamic router, so this class maintains its own route
+ * table matched inside a single `fetch()` callback, with static-segment > `:param` > `/*` wildcard
+ * precedence — replicating uWS's specificity-based matching.
+ */
+export class BunRouter {
+    constructor(maxBodySize = DEFAULT_MAX_BODY_SIZE, sslConfig) {
+        this.routesByMethod = new Map();
+        this.wsRoutes = [];
+        this.globalMiddleware = [];
+        this.preRouteCount = -1;
+        this.rootWildcardVerbs = new Set();
+        /** The port the server is currently listening on (set after a successful `listen()` call). */
+        this.listenPort = 0;
+        // -------------------------------------------------------------------------
+        // Request dispatch
+        // -------------------------------------------------------------------------
+        this.fetchHandler = async (rawReq, server) => {
+            const url = new URL(rawReq.url);
+            // Deliberately no `length > 1` guard here (unlike normalizePath's trailing-slash strip): the bare root
+            // path "/" IS a trailing slash relative to an empty wildcard prefix (a `/*` route registered at the
+            // app root), so it must count as one or that route's wildcard boundary check would never match "/".
+            const reqHasTrailingSlash = url.pathname.endsWith("/");
+            const normalizedPath = normalizePath(url.pathname);
+            const reqSegments = splitPath(normalizedPath);
+            if (rawReq.headers.get("upgrade")?.toLowerCase() === "websocket") {
+                const wsMatch = this.matchWsRoute(reqSegments);
+                if (wsMatch) {
+                    const req = new BunRequest(rawReq, server);
+                    req.params = extractParams(wsMatch.segments, reqSegments);
+                    if (wsMatch.upgradeAuth) {
+                        const authResult = wsMatch.upgradeAuth(req);
+                        if (authResult.reject) {
+                            return new Response(JSON.stringify({ status: 401, message: "Unauthorized" }), {
+                                status: 401,
+                                headers: { "content-type": "application/json" },
+                            });
+                        }
+                        if (authResult.user) {
+                            req.user = authResult.user;
+                            req.auth = authResult;
+                            req.authPayload = authResult.authPayload;
+                            req.authToken = authResult.authToken;
+                        }
+                    }
+                    const socketData = { req, handlers: wsMatch.handlers };
+                    const upgraded = server.upgrade(rawReq, { data: socketData });
+                    if (upgraded)
+                        return undefined;
+                    return new Response("WebSocket upgrade failed", { status: 400 });
+                }
+                // No matching ws route — fall through to normal HTTP handling (ends in 404 below).
+            }
+            const method = rawReq.method.toUpperCase();
+            const route = this.matchRoute(method, reqSegments, reqHasTrailingSlash);
+            if (!route) {
+                return new Response(JSON.stringify({ code: ApiErrors.NOT_FOUND, status: 404, message: ApiErrorMessages.NOT_FOUND }), { status: 404, headers: { "content-type": "application/json" } });
+            }
+            const req = new BunRequest(rawReq, server);
+            // For wildcard-suffixed routes, `route.segments` is only the prefix — slice reqSegments to
+            // match so extractParams doesn't walk past it. For exact-length routes this is a no-op
+            // (route.segments.length === reqSegments.length is guaranteed by matchSegments).
+            req.params = extractParams(route.segments, reqSegments.slice(0, route.segments.length));
+            const res = new BunResponse(rawReq);
+            res.isHead = route.isHead;
+            const bodyResult = await readBunBody(req, rawReq, this.maxBodySize);
+            if (!bodyResult.ok)
+                return bodyResult.response;
+            const allHandlers = [
+                ...this.globalMiddleware.slice(0, route.preLength),
+                ...route.handlers,
+                ...this.globalMiddleware.slice(route.preLength),
+            ];
+            runChain(allHandlers, req, res)
+                .then(() => {
+                if (!res.writableEnded)
+                    res.status(204).end();
+            })
+                .catch((err) => {
+                res.abortStream(err);
+            });
+            return res.responseReady;
+        };
+        this.websocketConfig = {
+            open: async (ws) => {
+                const data = ws.data;
+                const shim = new BunWebSocketShim(ws);
+                data.shim = shim;
+                const req = data.req;
+                req.websocket = shim;
+                req.wsHandled = false;
+                // A middleware that rejects (e.g. checkRequiredRoles/checkElevation/checkRequiredPerms) with
+                // no downstream handler to translate that into a close has nowhere else to signal it — mirror
+                // the convention route handlers use themselves: close with 1002 and the error's short code.
+                const stubRes = makeWsStubResponse((status, payload) => {
+                    req.wsHandled = true;
+                    shim.close(1002, payload?.code || payload?.message || "Internal Server Error");
+                });
+                await runChain(data.handlers, req, stubRes);
+                // Guard against the client disconnecting while runChain was awaiting (e.g. authWebSocket
+                // waiting for a LOGIN frame) — mirrors the uWS router's readyState !== 3 / try-catch guard.
+                if (!req.wsHandled && shim.readyState !== 3) {
+                    try {
+                        ws.close();
+                    }
+                    catch {
+                        // Client already disconnected — nothing to do
+                    }
+                }
+            },
+            message: (ws, message) => {
+                const data = ws.data;
+                const isBinary = typeof message !== "string";
+                data.shim?.emit("message", isBinary ? Buffer.from(message) : message, isBinary);
+            },
+            close: (ws, code, reason) => {
+                const data = ws.data;
+                if (data.shim)
+                    data.shim.readyState = 3; // CLOSED
+                data.shim?.emit("close", code, reason);
+            },
+        };
+        this.maxBodySize = maxBodySize;
+        this.sslConfig = sslConfig;
+    }
+    /** Returns `true` if the server is currently listening. */
+    get isListening() {
+        return this._bunServer !== undefined;
+    }
+    /** Register global middleware that runs before every route handler. */
+    use(...handlers) {
+        this.globalMiddleware.push(...handlers);
+        return this;
+    }
+    /**
+     * Freezes the pre-route middleware count the first time a route is registered.
+     * All global middleware registered BEFORE this call is "pre-route" middleware;
+     * everything added after is "post-route" (error handlers, metrics, etc.).
+     */
+    capturePreRouteCount() {
+        if (this.preRouteCount === -1) {
+            this.preRouteCount = this.globalMiddleware.length;
+        }
+        return this.preRouteCount;
+    }
+    pushRoute(method, route) {
+        const list = this.routesByMethod.get(method) ?? [];
+        list.push(route);
+        this.routesByMethod.set(method, list);
+    }
+    register(method, routePath, handlers, isHead = false) {
+        const pre = this.capturePreRouteCount();
+        const normalized = normalizePath(routePath);
+        const isRootWildcard = normalized === "/*";
+        if (isRootWildcard)
+            this.rootWildcardVerbs.add(method.toLowerCase());
+        const hasWildcardSuffix = isRootWildcard || normalized.endsWith("/*");
+        // Strip the trailing "/*" (2 chars) to get the prefix; "/*" itself strips to "" -> segments [].
+        const segments = hasWildcardSuffix ? splitPath(normalized.slice(0, -2)) : splitPath(normalized);
+        this.pushRoute(method, { segments, hasWildcardSuffix, isRootWildcard, handlers, preLength: pre, isHead });
+        return this;
+    }
+    // -------------------------------------------------------------------------
+    // HTTP verb methods
+    // -------------------------------------------------------------------------
+    get(routePath, ...handlers) {
+        return this.register("GET", routePath, handlers);
+    }
+    post(routePath, ...handlers) {
+        return this.register("POST", routePath, handlers);
+    }
+    put(routePath, ...handlers) {
+        return this.register("PUT", routePath, handlers);
+    }
+    delete(routePath, ...handlers) {
+        return this.register("DELETE", routePath, handlers);
+    }
+    patch(routePath, ...handlers) {
+        return this.register("PATCH", routePath, handlers);
+    }
+    head(routePath, ...handlers) {
+        return this.register("HEAD", routePath, handlers, true);
+    }
+    options(routePath, ...handlers) {
+        return this.register("OPTIONS", routePath, handlers);
+    }
+    /**
+     * Registers a WebSocket route. Handlers follow the same `(req, res, next)` pattern as HTTP
+     * routes; they receive `req.websocket` containing the Bun WebSocket shim.
+     *
+     * `upgradeAuth` is an optional pre-upgrade auth function, run synchronously inside `fetch()`
+     * before the handshake. If it returns `{ reject: true }`, an HTTP 401 is sent and the upgrade
+     * is aborted. If it returns `{ user, ... }`, those credentials are attached to the request so
+     * downstream middleware sees an authenticated user. If it returns `{}`, auth falls through to
+     * the post-upgrade message-based LOGIN flow.
+     */
+    ws(routePath, handlers, _wsOptions, upgradeAuth) {
+        const normalized = normalizePath(routePath);
+        this.wsRoutes.push({ segments: splitPath(normalized), handlers, upgradeAuth });
+        return this;
+    }
+    // -------------------------------------------------------------------------
+    // Route matching
+    // -------------------------------------------------------------------------
+    /**
+     * Matches a request against the route table. Exact-length static/param routes always outrank
+     * wildcard-suffixed routes, matching uWS's `best ?? wildcard` fallback behavior. Among wildcard
+     * candidates, the one with the longest (most specific) matching prefix wins — e.g. `/static/*`
+     * beats a bare `/*` for requests under `/static`.
+     *
+     * `reqHasTrailingSlash` is required to replicate uWS's own wildcard boundary rule, verified
+     * empirically against real uWS: a `<prefix>/*` route matches `<prefix>/` and anything nested
+     * under it, but NOT the bare `<prefix>` with no trailing slash — a distinction that's lost if
+     * matching were done on segment arrays alone, since `/static` and `/static/` produce the same
+     * segment list once empty segments are filtered out.
+     */
+    matchRoute(method, reqSegments, reqHasTrailingSlash) {
+        const candidates = this.routesByMethod.get(method);
+        if (!candidates)
+            return null;
+        let best = null;
+        let bestScore = -1;
+        let bestWildcard = null;
+        let bestWildcardSpecificity = -1;
+        for (const route of candidates) {
+            if (route.hasWildcardSuffix) {
+                const prefixLen = route.segments.length;
+                const hasContentAfterPrefix = reqSegments.length > prefixLen || (reqSegments.length === prefixLen && reqHasTrailingSlash);
+                if (!hasContentAfterPrefix)
+                    continue;
+                const score = matchSegments(route.segments, reqSegments.slice(0, prefixLen));
+                if (score === null)
+                    continue;
+                if (prefixLen > bestWildcardSpecificity) {
+                    bestWildcardSpecificity = prefixLen;
+                    bestWildcard = route;
+                }
+                continue;
+            }
+            const score = matchSegments(route.segments, reqSegments);
+            if (score !== null && score > bestScore) {
+                bestScore = score;
+                best = route;
+            }
+        }
+        return best ?? bestWildcard;
+    }
+    matchWsRoute(reqSegments) {
+        let best = null;
+        let bestScore = -1;
+        for (const route of this.wsRoutes) {
+            const score = matchSegments(route.segments, reqSegments);
+            if (score !== null && score > bestScore) {
+                bestScore = score;
+                best = route;
+            }
+        }
+        return best;
+    }
+    /**
+     * Starts listening on the given host and port.
+     * Resolves when the server is ready; rejects if the port cannot be bound.
+     */
+    listen(host, port) {
+        // Register a catch-all OPTIONS handler so CORS global middleware runs for all preflight
+        // requests. preLength=0 places all globalMiddleware as "post-route" so it all executes
+        // sequentially; the CORS middleware terminates the chain early for OPTIONS (sends 204
+        // without calling next). Mirrors Router.ts::listen()'s uWS behavior exactly.
+        this.pushRoute("OPTIONS", {
+            segments: [],
+            hasWildcardSuffix: true,
+            isRootWildcard: true,
+            handlers: [],
+            preLength: 0,
+            isHead: false,
+        });
+        // Register a JSON 404 fallback for any request that doesn't match a registered route,
+        // respecting an app-defined literal `/*` route (e.g. a `BaseStaticRoute` mounted at the site
+        // root) via `rootWildcardVerbs`, exactly as the uWS router does.
+        const notFoundHandler = (_req, _res, next) => {
+            next(new ApiError(ApiErrors.NOT_FOUND, 404, ApiErrorMessages.NOT_FOUND));
+        };
+        const verbs = [
+            "get",
+            "post",
+            "put",
+            "delete",
+            "patch",
+            "head",
+        ];
+        for (const verb of verbs) {
+            if (!this.rootWildcardVerbs.has(verb)) {
+                this[verb]("/*", notFoundHandler);
+            }
+        }
+        const tls = this.sslConfig ? mapSslConfigToBunTls(this.sslConfig) : undefined;
+        return new Promise((resolve, reject) => {
+            try {
+                this._bunServer = Bun.serve({
+                    hostname: host,
+                    port,
+                    fetch: this.fetchHandler,
+                    websocket: this.websocketConfig,
+                    tls,
+                });
+                this.listenPort = this._bunServer.port ?? port;
+                resolve();
+            }
+            catch (err) {
+                reject(err instanceof Error ? err : new Error(`Failed to listen on ${host}:${port}`));
+            }
+        });
+    }
+    /** Stops the server, closing the listen socket. */
+    close() {
+        if (this._bunServer) {
+            void this._bunServer.stop();
+            this._bunServer = undefined;
+        }
+    }
+}
+//# sourceMappingURL=BunRouter.js.map

package/dist/lib/http/bun/BunRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BunRouter.js","sourceRoot":"","sources":["../../../../src/http/bun/BunRouter.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAsB,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEjE,wFAAwF;AACxF,SAAS,aAAa,CAAC,QAAgB;IACnC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,wGAAwG;AACxG,SAAS,SAAS,CAAC,QAAgB;IAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,aAAuB,EAAE,WAAqB;IACjE,IAAI,aAAa,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,KAAK,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,aAAuB,EAAE,WAAqB;IACjE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,kGAAkG;AAClG,SAAS,oBAAoB,CAAC,SAA0E;IACpG,OAAO;QACH,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAC5B,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC9B,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACrD,UAAU,EAAE,SAAS,CAAC,UAAU;KACnC,CAAC;AACN,CAAC;AAqCD;;;;;;;;;GASG;AACH,MAAM,OAAO,SAAS;IAYlB,YAAY,cAAsB,qBAAqB,EAAE,SAAe;QAXvD,mBAAc,GAAiC,IAAI,GAAG,EAAE,CAAC;QACzD,aAAQ,GAAsB,EAAE,CAAC;QACjC,qBAAgB,GAAqB,EAAE,CAAC;QACjD,kBAAa,GAAW,CAAC,CAAC,CAAC;QAClB,sBAAiB,GAAgB,IAAI,GAAG,EAAE,CAAC;QAI5D,8FAA8F;QACvF,eAAU,GAAW,CAAC,CAAC;QA8J9B,4EAA4E;QAC5E,mBAAmB;QACnB,4EAA4E;QAE3D,iBAAY,GAAG,KAAK,EAAE,MAAe,EAAE,MAAuB,EAAiC,EAAE;YAC9G,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChC,uGAAuG;YACvG,oGAAoG;YACpG,oGAAoG;YACpG,MAAM,mBAAmB,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvD,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;YAE9C,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;gBAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC/C,IAAI,OAAO,EAAE,CAAC;oBACV,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,CAAc,CAAC;oBACxD,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;oBAE1D,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;wBACtB,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;wBAC5C,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;4BACpB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE;gCAC1E,MAAM,EAAE,GAAG;gCACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;6BAClD,CAAC,CAAC;wBACP,CAAC;wBACD,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;4BAClB,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;4BAC3B,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC;4BACtB,GAAG,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;4BACzC,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;wBACzC,CAAC;oBACL,CAAC;oBAED,MAAM,UAAU,GAAiB,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAS,CAAC,CAAC;oBACrE,IAAI,QAAQ;wBAAE,OAAO,SAAS,CAAC;oBAC/B,OAAO,IAAI,QAAQ,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,mFAAmF;YACvF,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,OAAO,IAAI,QAAQ,CACf,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,CAAC,SAAS,EAAE,CAAC,EAC/F,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACnE,CAAC;YACN,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3C,2FAA2F;YAC3F,uFAAuF;YACvF,iFAAiF;YACjF,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;YACpC,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAE1B,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACpE,IAAI,CAAC,UAAU,CAAC,EAAE;gBAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;YAE/C,MAAM,WAAW,GAAG;gBAChB,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;gBAClD,GAAG,KAAK,CAAC,QAAQ;gBACjB,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aAClD,CAAC;YAEF,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC;iBAC1B,IAAI,CAAC,GAAG,EAAE;gBACP,IAAI,CAAC,GAAG,CAAC,aAAa;oBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAClD,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACX,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YAEP,OAAO,GAAG,CAAC,aAAa,CAAC;QAC7B,CAAC,CAAC;QAEe,oBAAe,GAAQ;YACpC,IAAI,EAAE,KAAK,EAAE,EAAO,EAAE,EAAE;gBACpB,MAAM,IAAI,GAAG,EAAE,CAAC,IAAoB,CAAC;gBACrC,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;gBACrB,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;gBAEtB,6FAA6F;gBAC7F,8FAA8F;gBAC9F,4FAA4F;gBAC5F,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;oBACnD,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;oBACrB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,OAAO,IAAI,uBAAuB,CAAC,CAAC;gBACnF,CAAC,CAAC,CAAC;gBACH,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBAE5C,yFAAyF;gBACzF,4FAA4F;gBAC5F,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;oBAC1C,IAAI,CAAC;wBACD,EAAE,CAAC,KAAK,EAAE,CAAC;oBACf,CAAC;oBAAC,MAAM,CAAC;wBACL,8CAA8C;oBAClD,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO,EAAE,CAAC,EAAO,EAAE,OAAsC,EAAE,EAAE;gBACzD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAoB,CAAC;gBACrC,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC;gBAC7C,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAc,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3F,CAAC;YAED,KAAK,EAAE,CAAC,EAAO,EAAE,IAAY,EAAE,MAAc,EAAE,EAAE;gBAC7C,MAAM,IAAI,GAAG,EAAE,CAAC,IAAoB,CAAC;gBACrC,IAAI,IAAI,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,SAAS;gBAClD,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;SACJ,CAAC;QApRE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,2DAA2D;IAC3D,IAAW,WAAW;QAClB,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;IACzC,CAAC;IAED,uEAAuE;IAChE,GAAG,CAAC,GAAG,QAA0B;QACpC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACK,oBAAoB;QACxB,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC9B,CAAC;IAEO,SAAS,CAAC,MAAc,EAAE,KAAoB;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAEO,QAAQ,CAAC,MAAc,EAAE,SAAiB,EAAE,QAA0B,EAAE,SAAkB,KAAK;QACnG,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,UAAU,KAAK,IAAI,CAAC;QAC3C,IAAI,cAAc;YAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACrE,MAAM,iBAAiB,GAAG,cAAc,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtE,gGAAgG;QAChG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAChG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1G,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,4EAA4E;IAC5E,oBAAoB;IACpB,4EAA4E;IAErE,GAAG,CAAC,SAAiB,EAAE,GAAG,QAA0B;QACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IAEM,IAAI,CAAC,SAAiB,EAAE,GAAG,QAA0B;QACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEM,GAAG,CAAC,SAAiB,EAAE,GAAG,QAA0B;QACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IAEM,MAAM,CAAC,SAAiB,EAAE,GAAG,QAA0B;QAC1D,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAEM,KAAK,CAAC,SAAiB,EAAE,GAAG,QAA0B;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAEM,IAAI,CAAC,SAAiB,EAAE,GAAG,QAA0B;QACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAEM,OAAO,CAAC,SAAiB,EAAE,GAAG,QAA0B;QAC3D,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;;;OASG;IACI,EAAE,CAAC,SAAiB,EAAE,QAA0B,EAAE,UAAgB,EAAE,WAA2B;QAClG,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,4EAA4E;IAC5E,iBAAiB;IACjB,4EAA4E;IAE5E;;;;;;;;;;;OAWG;IACK,UAAU,CAAC,MAAc,EAAE,WAAqB,EAAE,mBAA4B;QAClF,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,IAAI,IAAI,GAAyB,IAAI,CAAC;QACtC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;QACnB,IAAI,YAAY,GAAyB,IAAI,CAAC;QAC9C,IAAI,uBAAuB,GAAG,CAAC,CAAC,CAAC;QAEjC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACxC,MAAM,qBAAqB,GACvB,WAAW,CAAC,MAAM,GAAG,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,mBAAmB,CAAC,CAAC;gBAChG,IAAI,CAAC,qBAAqB;oBAAE,SAAS;gBACrC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC7E,IAAI,KAAK,KAAK,IAAI;oBAAE,SAAS;gBAC7B,IAAI,SAAS,GAAG,uBAAuB,EAAE,CAAC;oBACtC,uBAAuB,GAAG,SAAS,CAAC;oBACpC,YAAY,GAAG,KAAK,CAAC;gBACzB,CAAC;gBACD,SAAS;YACb,CAAC;YACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACzD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;gBACtC,SAAS,GAAG,KAAK,CAAC;gBAClB,IAAI,GAAG,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QAED,OAAO,IAAI,IAAI,YAAY,CAAC;IAChC,CAAC;IAEO,YAAY,CAAC,WAAqB;QACtC,IAAI,IAAI,GAA2B,IAAI,CAAC;QACxC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACzD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;gBACtC,SAAS,GAAG,KAAK,CAAC;gBAClB,IAAI,GAAG,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IA6HD;;;OAGG;IACI,MAAM,CAAC,IAAY,EAAE,IAAY;QACpC,wFAAwF;QACxF,uFAAuF;QACvF,sFAAsF;QACtF,6EAA6E;QAC7E,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;YACtB,QAAQ,EAAE,EAAE;YACZ,iBAAiB,EAAE,IAAI;YACvB,cAAc,EAAE,IAAI;YACpB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,sFAAsF;QACtF,6FAA6F;QAC7F,iEAAiE;QACjE,MAAM,eAAe,GAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAkB,EAAE,EAAE;YACvE,IAAI,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC;QACF,MAAM,KAAK,GAAgE;YACvE,KAAK;YACL,MAAM;YACN,KAAK;YACL,QAAQ;YACR,OAAO;YACP,MAAM;SACT,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACtC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,CAAC;gBACD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC;oBACxB,QAAQ,EAAE,IAAI;oBACd,IAAI;oBACJ,KAAK,EAAE,IAAI,CAAC,YAAY;oBACxB,SAAS,EAAE,IAAI,CAAC,eAAe;oBAC/B,GAAG;iBACC,CAAC,CAAC;gBACV,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC;gBAC/C,OAAO,EAAE,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uBAAuB,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1F,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED,mDAAmD;IAC5C,KAAK;QACR,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAChC,CAAC;IACL,CAAC;CAKJ"}

package/dist/lib/http/bun/BunWebSocket.js

@@ -0,0 +1,49 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2020-2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { EventEmitter } from "events";
+/**
+ * Wraps a Bun `ServerWebSocket` handle and exposes an EventEmitter-based API compatible with
+ * `IWebSocketShim`, mirroring `UWSWebSocketShim`'s behavior for the uWS-backed router so that
+ * route handlers (e.g. `BaseAdminRoute`) and `AuthMiddleware.authWebSocket()` work unchanged
+ * regardless of which runtime is active.
+ */
+export class BunWebSocketShim extends EventEmitter {
+    constructor(ws) {
+        super();
+        this.readyState = 1; // OPEN
+        this._ws = ws;
+    }
+    /**
+     * Sends data over the WebSocket connection.
+     * @param data The data to send.
+     * @param cb Optional callback invoked on completion or error.
+     */
+    send(data, cb) {
+        try {
+            const result = this._ws.send(typeof data === "string" ? data : Buffer.from(data));
+            // Bun's ws.send returns bytes sent on success, 0 when the message was dropped due to
+            // backpressure, or a negative number when it was queued to be sent once backpressure
+            // clears (not itself a failure) — only treat 0 as an actual send failure.
+            if (cb)
+                cb(result === 0 ? new Error("Bun backpressure: send dropped") : undefined);
+        }
+        catch (err) {
+            if (cb)
+                cb(err);
+        }
+    }
+    /**
+     * Closes the WebSocket connection with an optional code and reason.
+     */
+    close(code, reason) {
+        try {
+            this._ws.close(code, reason);
+        }
+        catch {
+            // Socket may already be closed
+        }
+    }
+}
+//# sourceMappingURL=BunWebSocket.js.map

package/dist/lib/http/bun/BunWebSocket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BunWebSocket.js","sourceRoot":"","sources":["../../../../src/http/bun/BunWebSocket.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wEAAwE;AACxE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAgBtC;;;;;GAKG;AACH,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IAI9C,YAAY,EAAuB;QAC/B,KAAK,EAAE,CAAC;QAHL,eAAU,GAAW,CAAC,CAAC,CAAC,OAAO;QAIlC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACI,IAAI,CAAC,IAAS,EAAE,EAA0B;QAC7C,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAClF,qFAAqF;YACrF,qFAAqF;YACrF,0EAA0E;YAC1E,IAAI,EAAE;gBAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAI,EAAE;gBAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,IAAa,EAAE,MAAe;QACvC,IAAI,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACL,+BAA+B;QACnC,CAAC;IACL,CAAC;CACJ"}

package/dist/lib/http/index.js

@@ -1,4 +1,17 @@
-export { UWSRequest, UWSResponse, readBody } from "./Adapters.js";
-export { HttpRouter, runChain } from "./Router.js";
-export { UWSWebSocketShim, createWebSocketStream } from "./WebSocket.js";
+export { isBunRuntime } from "./RuntimeDetect.js";
+export { extractParamNames, makeWsStubResponse, runChain } from "./MiddlewareChain.js";
+export { RedisSessionStore } from "./session/RedisSessionStore.js";
+export { SessionManager } from "./session/SessionManager.js";
+export { createSessionMiddleware } from "./session/sessionMiddleware.js";
+// uWS-backed adapter. `HttpRouter` is exported as a type only — the class itself value-imports
+// `uWebSockets.js` at module load, which does not work under Bun. Consumers that only annotate with
+// the type stay safe on every runtime; constructing one is done internally by Server.ts via a
+// dynamic import gated on `isBunRuntime()`.
+export { UWSRequest, UWSResponse, readBody } from "./uWS/Adapters.js";
+export { UWSWebSocketShim, createWebSocketStream } from "./uWS/WebSocket.js";
+// Bun-backed adapter. Safe to value-export unconditionally on every runtime — these modules never
+// touch the `Bun` global outside of method bodies invoked at runtime.
+export { BunRequest, BunResponse, readBunBody } from "./bun/BunAdapters.js";
+export { BunRouter } from "./bun/BunRouter.js";
+export { BunWebSocketShim } from "./bun/BunWebSocket.js";
 //# sourceMappingURL=index.js.map

package/dist/lib/http/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAMvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,+FAA+F;AAC/F,oGAAoG;AACpG,8FAA8F;AAC9F,4CAA4C;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAGtE,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE7E,kGAAkG;AAClG,sEAAsE;AACtE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/lib/http/session/RedisSessionStore.js

@@ -0,0 +1,30 @@
+const KEY_PREFIX = "session:";
+/**
+ * Redis-backed session store for multi-instance/production deployments, where an in-process
+ * `MemorySessionStore` would not be shared across horizontally-scaled instances.
+ */
+export class RedisSessionStore {
+    constructor(client) {
+        /** The default record TTL (in seconds). */
+        this.defaultTTL = 60;
+        this.client = client;
+    }
+    async load(sessionId) {
+        const raw = await this.client.get(KEY_PREFIX + sessionId);
+        if (!raw)
+            return undefined;
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    async save(sessionId, data, ttlSeconds = this.defaultTTL) {
+        await this.client.setEx(KEY_PREFIX + sessionId, ttlSeconds, JSON.stringify(data));
+    }
+    async delete(sessionId) {
+        await this.client.del(KEY_PREFIX + sessionId);
+    }
+}
+//# sourceMappingURL=RedisSessionStore.js.map

package/dist/lib/http/session/RedisSessionStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RedisSessionStore.js","sourceRoot":"","sources":["../../../../src/http/session/RedisSessionStore.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAM1B,YAAY,MAAuB;QAHnC,2CAA2C;QACpC,eAAU,GAAW,EAAE,CAAC;QAG3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,IAAI,CACb,SAAiB,EACjB,IAAyB,EACzB,aAAqB,IAAI,CAAC,UAAU;QAEpC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,SAAiB;QACjC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAClD,CAAC;CACJ"}

package/dist/lib/http/session/SessionManager.js

@@ -0,0 +1,113 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import * as crypto from "crypto";
+import { MemoryStore, ObjectDecorators } from "@rapidrest/core";
+import { DatabaseDecorators } from "../../decorators/index.js";
+import { RedisSessionStore } from "./RedisSessionStore.js";
+const { Config, Init, Logger } = ObjectDecorators;
+const { Redis } = DatabaseDecorators;
+/**
+ * Owns session-ID generation/signing and store selection (in-memory by default, Redis-backed when
+ * a `cache` datasource connection is available and `session.store` isn't forced to `"memory"`).
+ * Registered by `Server.ts` only when a `session` config block is present.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class SessionManager {
+    async init() {
+        if (!this._objectFactory) {
+            throw new Error("objectFactory is not set.");
+        }
+        this.secret = this.options.secret ?? this.globalCookieSecret;
+        if (!this.secret) {
+            throw new Error("SessionManager requires `session.secret` (or `cookie_secret`) to be configured for signing session cookies.");
+        }
+        this.cookieName = this.options.cookieName ?? "rrst.sid";
+        this.ttlSeconds = this.options.ttl ?? 3600;
+        this.cookieSecure = this.options.cookieSecure ?? false;
+        this.cookieSameSite = this.options.cookieSameSite ?? "Lax";
+        this.cookiePath = this.options.cookiePath ?? "/";
+        if (this.options.store === "redis" && !this.cacheClient) {
+            throw new Error("session.store is set to 'redis' but no `cache` datasource connection was found.");
+        }
+        if (this.cacheClient && this.options.store !== "memory") {
+            this.store = await this._objectFactory.newInstance(RedisSessionStore, { args: [this.cacheClient] });
+            this.logger?.info("Session support enabled (store: redis).");
+        }
+        else {
+            this.store = await this._objectFactory.newInstance(MemoryStore);
+            this.logger?.info("Session support enabled (store: memory).");
+        }
+    }
+    /** Generates a new, cryptographically random session ID. */
+    generateId() {
+        return crypto.randomBytes(24).toString("base64url");
+    }
+    /** Signs a session ID for safe storage in a cookie value. */
+    signId(id) {
+        const signature = crypto.createHmac("sha256", this.secret).update(id).digest("base64url");
+        return `${id}.${signature}`;
+    }
+    /**
+     * Verifies a signed session ID cookie value, returning the original session ID if the
+     * signature is valid, or `undefined` if it's missing, malformed, or tampered with.
+     */
+    verifyId(signed) {
+        const idx = signed.lastIndexOf(".");
+        if (idx < 0)
+            return undefined;
+        const id = signed.slice(0, idx);
+        const signature = signed.slice(idx + 1);
+        const expected = crypto.createHmac("sha256", this.secret).update(id).digest("base64url");
+        const expectedBuf = Buffer.from(expected);
+        const actualBuf = Buffer.from(signature);
+        if (expectedBuf.length !== actualBuf.length)
+            return undefined;
+        if (!crypto.timingSafeEqual(expectedBuf, actualBuf))
+            return undefined;
+        return id;
+    }
+    async load(sessionId) {
+        return this.store.load(sessionId);
+    }
+    async save(sessionId, data) {
+        return this.store.save(sessionId, data, this.ttlSeconds);
+    }
+    async delete(sessionId) {
+        return this.store.delete(sessionId);
+    }
+}
+__decorate([
+    Config("session", {}),
+    __metadata("design:type", Object)
+], SessionManager.prototype, "options", void 0);
+__decorate([
+    Config("cookie_secret", null),
+    __metadata("design:type", String)
+], SessionManager.prototype, "globalCookieSecret", void 0);
+__decorate([
+    Redis("cache", false),
+    __metadata("design:type", Object)
+], SessionManager.prototype, "cacheClient", void 0);
+__decorate([
+    Logger,
+    __metadata("design:type", Object)
+], SessionManager.prototype, "logger", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], SessionManager.prototype, "init", null);
+//# sourceMappingURL=SessionManager.js.map

package/dist/lib/http/session/SessionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionManager.js","sourceRoot":"","sources":["../../../../src/http/session/SessionManager.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAClD,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IA2BT,AAAN,KAAK,CAAC,IAAI;QACd,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,kBAAkB,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACX,6GAA6G,CAChH,CAAC;QACN,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;QACvD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC;QAEjD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtD,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACpG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAClE,CAAC;IACL,CAAC;IAED,4DAA4D;IACrD,UAAU;QACb,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC;IAED,6DAA6D;IACtD,MAAM,CAAC,EAAU;QACpB,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1F,OAAO,GAAG,EAAE,IAAI,SAAS,EAAE,CAAC;IAChC,CAAC;IAED;;;OAGG;IACI,QAAQ,CAAC,MAAc;QAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACzF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACtE,OAAO,EAAE,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,IAAyB;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACJ;AA5FW;IADP,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;;+CACD;AAGb;IADP,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC;;0DACM;AAI5B;IADP,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;;mDACgB;AAG9B;IADP,MAAM;;8CACc;AAYP;IADb,IAAI;;;;0CA8BJ"}