@suveren/gateway 0.8.7 → 0.9.0

package/node_modules/hono/dist/cjs/middleware/secure-headers/index.js

@@ -1,29 +1,4 @@
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var secure_headers_exports = {};
-__export(secure_headers_exports, {
-  NONCE: () => import_secure_headers.NONCE,
-  secureHeaders: () => import_secure_headers.secureHeaders
-});
-module.exports = __toCommonJS(secure_headers_exports);
-var import_secure_headers = require("./secure-headers");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  NONCE,
-  secureHeaders
-});
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_middleware_secure_headers_secure_headers = require("./secure-headers.js");
+exports.NONCE = require_middleware_secure_headers_secure_headers.NONCE;
+exports.secureHeaders = require_middleware_secure_headers_secure_headers.secureHeaders;

package/node_modules/hono/dist/cjs/middleware/secure-headers/permissions-policy.js

@@ -1,15 +0,0 @@
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var permissions_policy_exports = {};
-module.exports = __toCommonJS(permissions_policy_exports);

package/node_modules/hono/dist/cjs/middleware/secure-headers/secure-headers.js

@@ -1,198 +1,166 @@
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var secure_headers_exports = {};
-__export(secure_headers_exports, {
-  NONCE: () => NONCE,
-  secureHeaders: () => secureHeaders
-});
-module.exports = __toCommonJS(secure_headers_exports);
-var import_encode = require("../../utils/encode");
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_utils_encode = require("../../utils/encode.js");
+//#region src/middleware/secure-headers/secure-headers.ts
 const HEADERS_MAP = {
-  crossOriginEmbedderPolicy: ["Cross-Origin-Embedder-Policy", "require-corp"],
-  crossOriginResourcePolicy: ["Cross-Origin-Resource-Policy", "same-origin"],
-  crossOriginOpenerPolicy: ["Cross-Origin-Opener-Policy", "same-origin"],
-  originAgentCluster: ["Origin-Agent-Cluster", "?1"],
-  referrerPolicy: ["Referrer-Policy", "no-referrer"],
-  strictTransportSecurity: ["Strict-Transport-Security", "max-age=15552000; includeSubDomains"],
-  xContentTypeOptions: ["X-Content-Type-Options", "nosniff"],
-  xDnsPrefetchControl: ["X-DNS-Prefetch-Control", "off"],
-  xDownloadOptions: ["X-Download-Options", "noopen"],
-  xFrameOptions: ["X-Frame-Options", "SAMEORIGIN"],
-  xPermittedCrossDomainPolicies: ["X-Permitted-Cross-Domain-Policies", "none"],
-  xXssProtection: ["X-XSS-Protection", "0"]
+	crossOriginEmbedderPolicy: ["Cross-Origin-Embedder-Policy", "require-corp"],
+	crossOriginResourcePolicy: ["Cross-Origin-Resource-Policy", "same-origin"],
+	crossOriginOpenerPolicy: ["Cross-Origin-Opener-Policy", "same-origin"],
+	originAgentCluster: ["Origin-Agent-Cluster", "?1"],
+	referrerPolicy: ["Referrer-Policy", "no-referrer"],
+	strictTransportSecurity: ["Strict-Transport-Security", "max-age=15552000; includeSubDomains"],
+	xContentTypeOptions: ["X-Content-Type-Options", "nosniff"],
+	xDnsPrefetchControl: ["X-DNS-Prefetch-Control", "off"],
+	xDownloadOptions: ["X-Download-Options", "noopen"],
+	xFrameOptions: ["X-Frame-Options", "SAMEORIGIN"],
+	xPermittedCrossDomainPolicies: ["X-Permitted-Cross-Domain-Policies", "none"],
+	xXssProtection: ["X-XSS-Protection", "0"]
 };
 const DEFAULT_OPTIONS = {
-  crossOriginEmbedderPolicy: false,
-  crossOriginResourcePolicy: true,
-  crossOriginOpenerPolicy: true,
-  originAgentCluster: true,
-  referrerPolicy: true,
-  strictTransportSecurity: true,
-  xContentTypeOptions: true,
-  xDnsPrefetchControl: true,
-  xDownloadOptions: true,
-  xFrameOptions: true,
-  xPermittedCrossDomainPolicies: true,
-  xXssProtection: true,
-  removePoweredBy: true,
-  permissionsPolicy: {}
+	crossOriginEmbedderPolicy: false,
+	crossOriginResourcePolicy: true,
+	crossOriginOpenerPolicy: true,
+	originAgentCluster: true,
+	referrerPolicy: true,
+	strictTransportSecurity: true,
+	xContentTypeOptions: true,
+	xDnsPrefetchControl: true,
+	xDownloadOptions: true,
+	xFrameOptions: true,
+	xPermittedCrossDomainPolicies: true,
+	xXssProtection: true,
+	removePoweredBy: true,
+	permissionsPolicy: {}
 };
 const generateNonce = () => {
-  const arrayBuffer = new Uint8Array(16);
-  crypto.getRandomValues(arrayBuffer);
-  return (0, import_encode.encodeBase64)(arrayBuffer.buffer);
+	const arrayBuffer = /* @__PURE__ */ new Uint8Array(16);
+	crypto.getRandomValues(arrayBuffer);
+	return require_utils_encode.encodeBase64(arrayBuffer.buffer);
 };
 const NONCE = (ctx) => {
-  const key = "secureHeadersNonce";
-  const init = ctx.get(key);
-  const nonce = init || generateNonce();
-  if (init == null) {
-    ctx.set(key, nonce);
-  }
-  return `'nonce-${nonce}'`;
+	const key = "secureHeadersNonce";
+	const init = ctx.get(key);
+	const nonce = init || generateNonce();
+	if (init == null) ctx.set(key, nonce);
+	return `'nonce-${nonce}'`;
 };
+/**
+* Secure Headers Middleware for Hono.
+*
+* @see {@link https://hono.dev/docs/middleware/builtin/secure-headers}
+*
+* @param {Partial<SecureHeadersOptions>} [customOptions] - The options for the secure headers middleware.
+* @param {ContentSecurityPolicyOptions} [customOptions.contentSecurityPolicy] - Settings for the Content-Security-Policy header.
+* @param {ContentSecurityPolicyOptions} [customOptions.contentSecurityPolicyReportOnly] - Settings for the Content-Security-Policy-Report-Only header.
+* @param {overridableHeader} [customOptions.crossOriginEmbedderPolicy=false] - Settings for the Cross-Origin-Embedder-Policy header.
+* @param {overridableHeader} [customOptions.crossOriginResourcePolicy=true] - Settings for the Cross-Origin-Resource-Policy header.
+* @param {overridableHeader} [customOptions.crossOriginOpenerPolicy=true] - Settings for the Cross-Origin-Opener-Policy header.
+* @param {overridableHeader} [customOptions.originAgentCluster=true] - Settings for the Origin-Agent-Cluster header.
+* @param {overridableHeader} [customOptions.referrerPolicy=true] - Settings for the Referrer-Policy header.
+* @param {ReportingEndpointOptions[]} [customOptions.reportingEndpoints] - Settings for the Reporting-Endpoints header.
+* @param {ReportToOptions[]} [customOptions.reportTo] - Settings for the Report-To header.
+* @param {overridableHeader} [customOptions.strictTransportSecurity=true] - Settings for the Strict-Transport-Security header.
+* @param {overridableHeader} [customOptions.xContentTypeOptions=true] - Settings for the X-Content-Type-Options header.
+* @param {overridableHeader} [customOptions.xDnsPrefetchControl=true] - Settings for the X-DNS-Prefetch-Control header.
+* @param {overridableHeader} [customOptions.xDownloadOptions=true] - Settings for the X-Download-Options header.
+* @param {overridableHeader} [customOptions.xFrameOptions=true] - Settings for the X-Frame-Options header.
+* @param {overridableHeader} [customOptions.xPermittedCrossDomainPolicies=true] - Settings for the X-Permitted-Cross-Domain-Policies header.
+* @param {overridableHeader} [customOptions.xXssProtection=true] - Settings for the X-XSS-Protection header.
+* @param {boolean} [customOptions.removePoweredBy=true] - Settings for remove X-Powered-By header.
+* @param {PermissionsPolicyOptions} [customOptions.permissionsPolicy] - Settings for the Permissions-Policy header.
+* @returns {MiddlewareHandler} The middleware handler function.
+*
+* @example
+* ```ts
+* const app = new Hono()
+* app.use(secureHeaders())
+* ```
+*/
 const secureHeaders = (customOptions) => {
-  const options = { ...DEFAULT_OPTIONS, ...customOptions };
-  const headersToSet = getFilteredHeaders(options);
-  const callbacks = [];
-  if (options.contentSecurityPolicy) {
-    const [callback, value] = getCSPDirectives(
-      options.contentSecurityPolicy,
-      "Content-Security-Policy"
-    );
-    if (callback) {
-      callbacks.push(callback);
-    }
-    headersToSet.push(["Content-Security-Policy", value]);
-  }
-  if (options.contentSecurityPolicyReportOnly) {
-    const [callback, value] = getCSPDirectives(
-      options.contentSecurityPolicyReportOnly,
-      "Content-Security-Policy-Report-Only"
-    );
-    if (callback) {
-      callbacks.push(callback);
-    }
-    headersToSet.push(["Content-Security-Policy-Report-Only", value]);
-  }
-  if (options.permissionsPolicy && Object.keys(options.permissionsPolicy).length > 0) {
-    headersToSet.push([
-      "Permissions-Policy",
-      getPermissionsPolicyDirectives(options.permissionsPolicy)
-    ]);
-  }
-  if (options.reportingEndpoints) {
-    headersToSet.push(["Reporting-Endpoints", getReportingEndpoints(options.reportingEndpoints)]);
-  }
-  if (options.reportTo) {
-    headersToSet.push(["Report-To", getReportToOptions(options.reportTo)]);
-  }
-  return async function secureHeaders2(ctx, next) {
-    const headersToSetForReq = callbacks.length === 0 ? headersToSet : callbacks.reduce((acc, cb) => cb(ctx, acc), headersToSet);
-    await next();
-    setHeaders(ctx, headersToSetForReq);
-    if (options?.removePoweredBy) {
-      ctx.res.headers.delete("X-Powered-By");
-    }
-  };
+	const options = {
+		...DEFAULT_OPTIONS,
+		...customOptions
+	};
+	const headersToSet = getFilteredHeaders(options);
+	const callbacks = [];
+	if (options.contentSecurityPolicy) {
+		const [callback, value] = getCSPDirectives(options.contentSecurityPolicy, "Content-Security-Policy");
+		if (callback) callbacks.push(callback);
+		headersToSet.push(["Content-Security-Policy", value]);
+	}
+	if (options.contentSecurityPolicyReportOnly) {
+		const [callback, value] = getCSPDirectives(options.contentSecurityPolicyReportOnly, "Content-Security-Policy-Report-Only");
+		if (callback) callbacks.push(callback);
+		headersToSet.push(["Content-Security-Policy-Report-Only", value]);
+	}
+	if (options.permissionsPolicy && Object.keys(options.permissionsPolicy).length > 0) headersToSet.push(["Permissions-Policy", getPermissionsPolicyDirectives(options.permissionsPolicy)]);
+	if (options.reportingEndpoints) headersToSet.push(["Reporting-Endpoints", getReportingEndpoints(options.reportingEndpoints)]);
+	if (options.reportTo) headersToSet.push(["Report-To", getReportToOptions(options.reportTo)]);
+	return async function secureHeaders(ctx, next) {
+		const headersToSetForReq = callbacks.length === 0 ? headersToSet : callbacks.reduce((acc, cb) => cb(ctx, acc), headersToSet);
+		await next();
+		setHeaders(ctx, headersToSetForReq);
+		if (options?.removePoweredBy) ctx.res.headers.delete("X-Powered-By");
+	};
 };
 function getFilteredHeaders(options) {
-  return Object.entries(HEADERS_MAP).filter(([key]) => options[key]).map(([key, defaultValue]) => {
-    const overrideValue = options[key];
-    return typeof overrideValue === "string" ? [defaultValue[0], overrideValue] : defaultValue;
-  });
+	return Object.entries(HEADERS_MAP).filter(([key]) => options[key]).map(([key, defaultValue]) => {
+		const overrideValue = options[key];
+		return typeof overrideValue === "string" ? [defaultValue[0], overrideValue] : defaultValue;
+	});
 }
 function getCSPDirectives(contentSecurityPolicy, headerName) {
-  const callbacks = [];
-  const resultValues = [];
-  for (const [directive, value] of Object.entries(contentSecurityPolicy)) {
-    const valueArray = Array.isArray(value) ? value : [value];
-    valueArray.forEach((value2, i) => {
-      if (typeof value2 === "function") {
-        const index = i * 2 + 2 + resultValues.length;
-        callbacks.push((ctx, values) => {
-          values[index] = value2(ctx, directive);
-        });
-      }
-    });
-    resultValues.push(
-      directive.replace(
-        /[A-Z]+(?![a-z])|[A-Z]/g,
-        (match, offset) => offset ? "-" + match.toLowerCase() : match.toLowerCase()
-      ),
-      ...valueArray.flatMap((value2) => [" ", value2]),
-      "; "
-    );
-  }
-  resultValues.pop();
-  return callbacks.length === 0 ? [void 0, resultValues.join("")] : [
-    (ctx, headersToSet) => headersToSet.map((values) => {
-      if (values[0] === headerName) {
-        const clone = values[1].slice();
-        callbacks.forEach((cb) => {
-          cb(ctx, clone);
-        });
-        return [values[0], clone.join("")];
-      } else {
-        return values;
-      }
-    }),
-    resultValues
-  ];
+	const callbacks = [];
+	const resultValues = [];
+	for (const [directive, value] of Object.entries(contentSecurityPolicy)) {
+		const valueArray = Array.isArray(value) ? value : [value];
+		valueArray.forEach((value, i) => {
+			if (typeof value === "function") {
+				const index = i * 2 + 2 + resultValues.length;
+				callbacks.push((ctx, values) => {
+					values[index] = value(ctx, directive);
+				});
+			}
+		});
+		resultValues.push(directive.replace(/[A-Z]+(?![a-z])|[A-Z]/g, (match, offset) => offset ? "-" + match.toLowerCase() : match.toLowerCase()), ...valueArray.flatMap((value) => [" ", value]), "; ");
+	}
+	resultValues.pop();
+	return callbacks.length === 0 ? [void 0, resultValues.join("")] : [(ctx, headersToSet) => headersToSet.map((values) => {
+		if (values[0] === headerName) {
+			const clone = values[1].slice();
+			callbacks.forEach((cb) => {
+				cb(ctx, clone);
+			});
+			return [values[0], clone.join("")];
+		} else return values;
+	}), resultValues];
 }
 function getPermissionsPolicyDirectives(policy) {
-  return Object.entries(policy).map(([directive, value]) => {
-    const kebabDirective = camelToKebab(directive);
-    if (typeof value === "boolean") {
-      return `${kebabDirective}=${value ? "*" : "()"}`;
-    }
-    if (Array.isArray(value)) {
-      if (value.length === 0) {
-        return `${kebabDirective}=()`;
-      }
-      if (value.length === 1 && value[0] === "*") {
-        return `${kebabDirective}=*`;
-      }
-      if (value.length === 1 && value[0] === "none") {
-        return `${kebabDirective}=()`;
-      }
-      const allowlist = value.map((item) => ["self", "src"].includes(item) ? item : `"${item}"`);
-      return `${kebabDirective}=(${allowlist.join(" ")})`;
-    }
-    return "";
-  }).filter(Boolean).join(", ");
+	return Object.entries(policy).map(([directive, value]) => {
+		const kebabDirective = camelToKebab(directive);
+		if (typeof value === "boolean") return `${kebabDirective}=${value ? "*" : "()"}`;
+		if (Array.isArray(value)) {
+			if (value.length === 0) return `${kebabDirective}=()`;
+			if (value.length === 1 && value[0] === "*") return `${kebabDirective}=*`;
+			if (value.length === 1 && value[0] === "none") return `${kebabDirective}=()`;
+			return `${kebabDirective}=(${value.map((item) => ["self", "src"].includes(item) ? item : `"${item}"`).join(" ")})`;
+		}
+		return "";
+	}).filter(Boolean).join(", ");
 }
 function camelToKebab(str) {
-  return str.replace(/([a-z\d])([A-Z])/g, "$1-$2").toLowerCase();
+	return str.replace(/([a-z\d])([A-Z])/g, "$1-$2").toLowerCase();
 }
 function getReportingEndpoints(reportingEndpoints = []) {
-  return reportingEndpoints.map((endpoint) => `${endpoint.name}="${endpoint.url}"`).join(", ");
+	return reportingEndpoints.map((endpoint) => `${endpoint.name}="${endpoint.url}"`).join(", ");
 }
 function getReportToOptions(reportTo = []) {
-  return reportTo.map((option) => JSON.stringify(option)).join(", ");
+	return reportTo.map((option) => JSON.stringify(option)).join(", ");
 }
 function setHeaders(ctx, headersToSet) {
-  headersToSet.forEach(([header, value]) => {
-    ctx.res.headers.set(header, value);
-  });
+	headersToSet.forEach(([header, value]) => {
+		ctx.res.headers.set(header, value);
+	});
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  NONCE,
-  secureHeaders
-});
+//#endregion
+exports.NONCE = NONCE;
+exports.secureHeaders = secureHeaders;

package/node_modules/hono/dist/cjs/middleware/serve-static/index.js

@@ -1,99 +1,62 @@
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var serve_static_exports = {};
-__export(serve_static_exports, {
-  serveStatic: () => serveStatic
-});
-module.exports = __toCommonJS(serve_static_exports);
-var import_compress = require("../../utils/compress");
-var import_mime = require("../../utils/mime");
-var import_url = require("../../utils/url");
-var import_path = require("./path");
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_utils_url = require("../../utils/url.js");
+const require_utils_compress = require("../../utils/compress.js");
+const require_utils_mime = require("../../utils/mime.js");
+const require_middleware_serve_static_path = require("./path.js");
+//#region src/middleware/serve-static/index.ts
 const ENCODINGS = {
-  br: ".br",
-  zstd: ".zst",
-  gzip: ".gz"
+	br: ".br",
+	zstd: ".zst",
+	gzip: ".gz"
 };
 const ENCODINGS_ORDERED_KEYS = Object.keys(ENCODINGS);
 const DEFAULT_DOCUMENT = "index.html";
+/**
+* This middleware is not directly used by the user. Create a wrapper specifying `getContent()` by the environment such as Deno or Bun.
+*/
 const serveStatic = (options) => {
-  const root = options.root ?? "./";
-  const optionPath = options.path;
-  const join = options.join ?? import_path.defaultJoin;
-  return async (c, next) => {
-    if (c.finalized) {
-      return next();
-    }
-    let filename;
-    if (options.path) {
-      filename = options.path;
-    } else {
-      try {
-        filename = (0, import_url.tryDecodeURI)(c.req.path);
-        if (/(?:^|[\/\\])\.{1,2}(?:$|[\/\\])|[\/\\]{2,}|\\/.test(filename)) {
-          throw new Error();
-        }
-      } catch {
-        await options.onNotFound?.(c.req.path, c);
-        return next();
-      }
-    }
-    let path = join(
-      root,
-      !optionPath && options.rewriteRequestPath ? options.rewriteRequestPath(filename) : filename
-    );
-    if (options.isDir && await options.isDir(path)) {
-      path = join(path, DEFAULT_DOCUMENT);
-    }
-    const getContent = options.getContent;
-    let content = await getContent(path, c);
-    if (content instanceof Response) {
-      return c.newResponse(content.body, content);
-    }
-    if (content != null) {
-      const mimeType = options.mimes && (0, import_mime.getMimeType)(path, options.mimes) || (0, import_mime.getMimeType)(path);
-      c.header("Content-Type", mimeType || "application/octet-stream");
-      if (options.precompressed && (!mimeType || import_compress.COMPRESSIBLE_CONTENT_TYPE_REGEX.test(mimeType))) {
-        const acceptEncodingSet = new Set(
-          c.req.header("Accept-Encoding")?.split(",").map((encoding) => encoding.trim())
-        );
-        for (const encoding of ENCODINGS_ORDERED_KEYS) {
-          if (!acceptEncodingSet.has(encoding)) {
-            continue;
-          }
-          const compressedContent = await getContent(path + ENCODINGS[encoding], c);
-          if (compressedContent) {
-            content = compressedContent;
-            c.header("Content-Encoding", encoding);
-            c.header("Vary", "Accept-Encoding", { append: true });
-            break;
-          }
-        }
-      }
-      await options.onFound?.(path, c);
-      return c.body(content);
-    }
-    await options.onNotFound?.(path, c);
-    await next();
-    return;
-  };
+	const root = options.root ?? "./";
+	const optionPath = options.path;
+	const join = options.join ?? require_middleware_serve_static_path.defaultJoin;
+	return async (c, next) => {
+		if (c.finalized) return next();
+		let filename;
+		if (options.path) filename = options.path;
+		else try {
+			if (!options.allowPercentInPath && c.req.path.includes("%")) throw new Error();
+			filename = require_utils_url.tryDecodeURI(c.req.path);
+			if (/(?:^|[\/\\])\.{1,2}(?:$|[\/\\])|[\/\\]{2,}|\\/.test(filename)) throw new Error();
+		} catch {
+			await options.onNotFound?.(c.req.path, c);
+			return next();
+		}
+		let path = join(root, !optionPath && options.rewriteRequestPath ? options.rewriteRequestPath(filename) : filename);
+		if (options.isDir && await options.isDir(path)) path = join(path, DEFAULT_DOCUMENT);
+		const getContent = options.getContent;
+		let content = await getContent(path, c);
+		if (content instanceof Response) return c.newResponse(content.body, content);
+		if (content != null) {
+			const mimeType = options.mimes && require_utils_mime.getMimeType(path, options.mimes) || require_utils_mime.getMimeType(path);
+			c.header("Content-Type", mimeType || "application/octet-stream");
+			if (options.precompressed && (!mimeType || require_utils_compress.COMPRESSIBLE_CONTENT_TYPE_REGEX.test(mimeType))) {
+				const acceptEncodingSet = new Set(c.req.header("Accept-Encoding")?.split(",").map((encoding) => encoding.trim()));
+				for (const encoding of ENCODINGS_ORDERED_KEYS) {
+					if (!acceptEncodingSet.has(encoding)) continue;
+					const compressedContent = await getContent(path + ENCODINGS[encoding], c);
+					if (compressedContent) {
+						content = compressedContent;
+						c.header("Content-Encoding", encoding);
+						c.header("Vary", "Accept-Encoding", { append: true });
+						break;
+					}
+				}
+			}
+			await options.onFound?.(path, c);
+			return c.body(content);
+		}
+		await options.onNotFound?.(path, c);
+		await next();
+	};
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  serveStatic
-});
+//#endregion
+exports.serveStatic = serveStatic;

package/node_modules/hono/dist/cjs/middleware/serve-static/path.js

@@ -1,40 +1,17 @@
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var path_exports = {};
-__export(path_exports, {
-  defaultJoin: () => defaultJoin
-});
-module.exports = __toCommonJS(path_exports);
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/middleware/serve-static/path.ts
+/**
+* `defaultJoin` does not support Windows paths and always uses `/` separators.
+* If you need Windows path support, please use `join` exported from `node:path` etc. instead.
+*/
 const defaultJoin = (...paths) => {
-  let result = paths.filter((p) => p !== "").join("/");
-  result = result.replace(/(?<=\/)\/+/g, "");
-  const segments = result.split("/");
-  const resolved = [];
-  for (const segment of segments) {
-    if (segment === ".." && resolved.length > 0 && resolved.at(-1) !== "..") {
-      resolved.pop();
-    } else if (segment !== ".") {
-      resolved.push(segment);
-    }
-  }
-  return resolved.join("/") || ".";
+	let result = paths.filter((p) => p !== "").join("/");
+	result = result.replace(/(?<=\/)\/+/g, "");
+	const segments = result.split("/");
+	const resolved = [];
+	for (const segment of segments) if (segment === ".." && resolved.length > 0 && resolved.at(-1) !== "..") resolved.pop();
+	else if (segment !== ".") resolved.push(segment);
+	return resolved.join("/") || ".";
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  defaultJoin
-});
+//#endregion
+exports.defaultJoin = defaultJoin;