@trebired/frontend 8.4.2 → 8.5.0

package/dist/server/request-log.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"request-log.d.ts","sourceRoot":"","sources":["../../../src/server/request-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,cAAc,CAAC;AAEtB,KAAK,yBAAyB,GAAG;IAC/B,uBAAuB,CAAC,EAAE,KAAK,GAAG,SAAS,MAAM,EAAE,CAAC;IACpD,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,yBAAyB,CAAC;IAC7C,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAkIF,iBAAS,2BAA2B,CAClC,GAAG,EAAE,GAAG,EACR,OAAO,GAAE,yBAA8B,WAoBxC;AAED,OAAO,EAAE,2BAA2B,EAAE,CAAC;AACvC,YAAY,EAAE,yBAAyB,EAAE,CAAC"}

package/dist/server/request-log.js

@@ -1,116 +0,0 @@
-import { resolveFrontendServerLogger, } from "./logging.js";
-const attachedRequestLogApps = new WeakSet();
-const STATIC_ASSET_PREFIX_RE = /^\/(?:css|js)(?:\/|$)/i;
-const STATIC_ASSET_FILE_RE = /\.(?:avif|css|gif|ico|jpe?g|js|json|mjs|png|svg|ttf|webp|woff2?)(?:$|[?#])/i;
-const SOURCE_MAP_FILE_RE = /\.map(?:$|[?#])/i;
-const DEFAULT_BROWSER_PROBE_404_PREFIXES = ["/.well-known/appspecific/"];
-function text(value) {
-    return String(value == null ? "" : value).trim();
-}
-function pickClientIp(req) {
-    const forwardedFor = text(req?.headers?.["x-forwarded-for"]);
-    if (forwardedFor)
-        return text(forwardedFor.split(",")[0]);
-    const realIp = text(req?.headers?.["x-real-ip"]);
-    if (realIp)
-        return realIp;
-    return text(req?.ip || req?.connection?.remoteAddress);
-}
-function requestLogContext(req) {
-    return {
-        ip: pickClientIp(req),
-        method: text(req?.method).toUpperCase(),
-        startedAt: performance.now(),
-        url: text(req?.originalUrl || req?.url),
-    };
-}
-function requestLogPath(ctx) {
-    return ctx.url.split(/[?#]/)[0] || "/";
-}
-function requestLogKey(ctx) {
-    return `${ctx.method} ${requestLogPath(ctx)}`;
-}
-function isStaticAssetPath(pathname) {
-    return (STATIC_ASSET_PREFIX_RE.test(pathname) ||
-        pathname === "/favicon.svg" ||
-        pathname === "/favicon.ico" ||
-        STATIC_ASSET_FILE_RE.test(pathname));
-}
-function browserProbePrefixes(options) {
-    if (options.browserProbe404Prefixes === false)
-        return [];
-    return Array.isArray(options.browserProbe404Prefixes)
-        ? [...options.browserProbe404Prefixes]
-        : DEFAULT_BROWSER_PROBE_404_PREFIXES;
-}
-function isQuietBrowserProbe404(pathname, options) {
-    return browserProbePrefixes(options).some((prefix) => prefix && pathname.startsWith(prefix));
-}
-function shouldSkipFinishedRequestLog(ctx, status, options) {
-    const pathname = requestLogPath(ctx);
-    if (status === 404 && SOURCE_MAP_FILE_RE.test(pathname))
-        return true;
-    if (status === 404 && isQuietBrowserProbe404(pathname, options))
-        return true;
-    if (status < 200 || status >= 400)
-        return false;
-    if (isStaticAssetPath(pathname))
-        return true;
-    return new Set(options.quietSuccessRoutes || []).has(requestLogKey(ctx));
-}
-function requestLogMeta(ctx, status, outcome) {
-    return {
-        ip: ctx.ip,
-        method: ctx.method,
-        url: ctx.url,
-        status,
-        outcome,
-        duration_ms: Math.max(0, Math.round(performance.now() - ctx.startedAt)),
-    };
-}
-function readRequestLogger(options) {
-    return resolveFrontendServerLogger(options.readLogger?.() || options.logger);
-}
-function logFinishedRequest(res, ctx, options) {
-    const status = Number(res?.statusCode || 0);
-    if (shouldSkipFinishedRequestLog(ctx, status, options))
-        return;
-    const ok = status >= 200 && status < 400;
-    const outcome = ok ? "success" : "fail";
-    const msg = `${ctx.ip} ${ctx.method} ${ctx.url} ${status} ${outcome}`;
-    const logger = readRequestLogger(options);
-    const meta = requestLogMeta(ctx, status, outcome);
-    if (ok)
-        logger.log("success", "client.http", msg, meta);
-    else if (status >= 500)
-        logger.fail("client.http", msg, meta);
-    else
-        logger.warn("client.http", msg, meta);
-}
-function logClosedRequest(res, ctx, options) {
-    if (res?.writableEnded)
-        return;
-    if (isStaticAssetPath(requestLogPath(ctx)))
-        return;
-    readRequestLogger(options).warn("client.http", `${ctx.ip} ${ctx.method} ${ctx.url} closed fail`, requestLogMeta(ctx, Number(res?.statusCode || 0), "fail"));
-}
-function attachFrontendRequestLogger(app, options = {}) {
-    if (!app || typeof app.use !== "function")
-        return false;
-    if (attachedRequestLogApps.has(app))
-        return false;
-    attachedRequestLogApps.add(app);
-    if (Object.prototype.hasOwnProperty.call(options, "trustProxy") &&
-        typeof app.set === "function") {
-        app.set("trust proxy", options.trustProxy);
-    }
-    app.use((req, res, next) => {
-        const ctx = requestLogContext(req);
-        res.on("finish", () => logFinishedRequest(res, ctx, options));
-        res.on("close", () => logClosedRequest(res, ctx, options));
-        next();
-    });
-    return true;
-}
-export { attachFrontendRequestLogger };
-//# sourceMappingURL=request-log.js.map

package/dist/server/request-log.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"request-log.js","sourceRoot":"","sources":["../../../src/server/request-log.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,GAE5B,MAAM,cAAc,CAAC;AAiBtB,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAAU,CAAC;AACrD,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AACxD,MAAM,oBAAoB,GAC1B,6EAA6E,CAAC;AAC9E,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C,MAAM,kCAAkC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAEzE,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,GAAQ;IAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC7D,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACjD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,OAAO;QACL,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC;QACrB,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE;QACvC,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE;QAC5B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,IAAI,GAAG,EAAE,GAAG,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAmB;IACzC,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,GAAmB;IACxC,OAAO,GAAG,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,CACL,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnC,QAAQ,KAAK,cAAc;QAC3B,QAAQ,KAAK,cAAc;QAC3B,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAkC;IAC9D,IAAI,OAAO,CAAC,uBAAuB,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACzD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC;QACrD,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC;QACtC,CAAC,CAAC,kCAAkC,CAAC;AACvC,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,OAAkC;IAClF,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACnD,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,4BAA4B,CACnC,GAAmB,EACnB,MAAc,EACd,OAAkC;IAElC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,iBAAiB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAe;IAC1E,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM;QACN,OAAO;QACP,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAkC;IAC3D,OAAO,2BAA2B,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAQ,EACR,GAAmB,EACnB,OAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;IAC5C,IAAI,4BAA4B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO;IAE/D,MAAM,EAAE,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC;IACzC,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;IACtE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAElD,IAAI,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;SACnD,IAAI,MAAM,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;;QACzD,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAQ,EACR,GAAmB,EACnB,OAAkC;IAElC,IAAI,GAAG,EAAE,aAAa;QAAE,OAAO;IAC/B,IAAI,iBAAiB,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO;IAEnD,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7B,aAAa,EACb,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,cAAc,EAChD,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,GAAQ,EACR,UAAqC,EAAE;IAEvC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEhC,IACE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;QACzD,OAAO,GAAG,CAAC,GAAG,KAAK,UAAU,EAC/B,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,OAAO,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/server/security/cors.d.ts

@@ -1,22 +0,0 @@
-import { type ServerRequestLike } from "../http.d.ts";
-type CorsOptions = {
-    allowedHeaders?: readonly string[];
-    credentials?: boolean;
-    exposedHeaders?: readonly string[];
-    isAllowedOrigin?: (req: ServerRequestLike, origin: string) => boolean | Promise<boolean>;
-    methods?: readonly string[];
-    optionsSuccessStatus?: number;
-};
-type CorsDelegateCallback = (error: Error | null, options: Record<string, unknown>) => void;
-declare function defaultCorsOptions(options?: CorsOptions): {
-    origin: boolean;
-    credentials: boolean;
-    exposedHeaders: readonly string[];
-    allowedHeaders: readonly string[];
-    methods: readonly string[];
-    optionsSuccessStatus: number;
-};
-declare function createCorsOptionsDelegate(options?: CorsOptions): (req: ServerRequestLike, callback: CorsDelegateCallback) => void;
-export { createCorsOptionsDelegate, defaultCorsOptions };
-export type { CorsDelegateCallback, CorsOptions };
-//# sourceMappingURL=cors.d.ts.map

package/dist/server/security/cors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../../src/server/security/cors.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AAEvB,KAAK,WAAW,GAAG;IACjB,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,CAChB,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,MAAM,KACX,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,KAAK,oBAAoB,GAAG,CAC1B,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,IAAI,CAAC;AAEV,iBAAS,kBAAkB,CAAC,OAAO,GAAE,WAAgB;;;;;;;EAsBpD;AAED,iBAAS,yBAAyB,CAAC,OAAO,GAAE,WAAgB,IAExD,KAAK,iBAAiB,EACtB,UAAU,oBAAoB,UAiBjC;AAED,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,CAAC;AACzD,YAAY,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC"}

package/dist/server/security/cors.js

@@ -1,41 +0,0 @@
-import { requestHeader, } from "../http.js";
-function defaultCorsOptions(options = {}) {
-    return {
-        origin: true,
-        credentials: options.credentials !== false,
-        exposedHeaders: options.exposedHeaders || ["X-CSRF-Token"],
-        allowedHeaders: options.allowedHeaders || [
-            "Content-Type",
-            "Authorization",
-            "X-Requested-With",
-            "X-CSRF-Token",
-        ],
-        methods: options.methods || [
-            "GET",
-            "HEAD",
-            "OPTIONS",
-            "POST",
-            "PUT",
-            "PATCH",
-            "DELETE",
-        ],
-        optionsSuccessStatus: options.optionsSuccessStatus || 200,
-    };
-}
-function createCorsOptionsDelegate(options = {}) {
-    return function corsOptionsDelegate(req, callback) {
-        Promise.resolve()
-            .then(async () => {
-            const origin = requestHeader(req, "origin");
-            if (!origin || !options.isAllowedOrigin) {
-                callback(null, defaultCorsOptions(options));
-                return;
-            }
-            const allowed = await options.isAllowedOrigin(req, origin);
-            callback(allowed ? null : new Error("Not allowed by CORS"), allowed ? defaultCorsOptions(options) : { origin: false });
-        })
-            .catch((error) => callback(error, { origin: false }));
-    };
-}
-export { createCorsOptionsDelegate, defaultCorsOptions };
-//# sourceMappingURL=cors.js.map

package/dist/server/security/cors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../../../src/server/security/cors.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GAEd,MAAM,eAAe,CAAC;AAmBvB,SAAS,kBAAkB,CAAC,UAAuB,EAAE;IACnD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,OAAO,CAAC,WAAW,KAAK,KAAK;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC;QAC1D,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI;YACxC,cAAc;YACd,eAAe;YACf,kBAAkB;YAClB,cAAc;SACf;QACD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI;YAC1B,KAAK;YACL,MAAM;YACN,SAAS;YACT,MAAM;YACN,KAAK;YACL,OAAO;YACP,QAAQ;SACT;QACD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,GAAG;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAuB,EAAE;IAC1D,OAAO,SAAS,mBAAmB,CACjC,GAAsB,EACtB,QAA8B;QAE9B,OAAO,CAAC,OAAO,EAAE;aAChB,IAAI,CAAC,KAAK,IAAG,EAAE;YACZ,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC3D,QAAQ,CACN,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,EACjD,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAC1D,CAAC;QACN,CAAC,CAAC;aACD,KAAK,CAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/server/security/helpers.d.ts

@@ -1,6 +0,0 @@
-import type { ServerResponseLike } from "../http.d.ts";
-declare function securityText(value: unknown): string;
-declare function responseLocals(res: ServerResponseLike | null | undefined): Record<string, unknown>;
-declare function attachUseMiddleware(app: unknown, middleware: unknown): void;
-export { attachUseMiddleware, responseLocals, securityText };
-//# sourceMappingURL=helpers.d.ts.map

package/dist/server/security/helpers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../src/server/security/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,iBAAS,YAAY,CAAC,KAAK,EAAE,OAAO,UAEnC;AAED,iBAAS,cAAc,CAAC,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,2BAIjE;AAED,iBAAS,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,QAI7D;AAED,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC"}

package/dist/server/security/helpers.js

@@ -1,17 +0,0 @@
-function securityText(value) {
-    return value == null ? null : String(value);
-}
-function responseLocals(res) {
-    if (!res)
-        return null;
-    if (!res.locals || typeof res.locals !== "object")
-        res.locals = {};
-    return res.locals;
-}
-function attachUseMiddleware(app, middleware) {
-    if (app && typeof app.use === "function") {
-        app.use(middleware);
-    }
-}
-export { attachUseMiddleware, responseLocals, securityText };
-//# sourceMappingURL=helpers.js.map

package/dist/server/security/helpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../../src/server/security/helpers.ts"],"names":[],"mappings":"AAEA,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,GAA0C;IAChE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IACnE,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY,EAAE,UAAmB;IAC5D,IAAI,GAAG,IAAI,OAAO,GAAyB,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9D,GAA8C,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC"}

package/dist/server/security/policy.d.ts

@@ -1,42 +0,0 @@
-import { type ServerRequestLike, type ServerResponseLike } from "../http.d.ts";
-type NonceMiddlewareOptions = {
-    bytes?: number;
-    localsKey?: string;
-};
-type SecurityHeadersOptions = {
-    acceptClientHints?: readonly string[];
-    crossOriginOpenerPolicy?: string | false;
-    crossOriginResourcePolicy?: string | false;
-    dnsPrefetchControl?: string | false;
-    frameOptions?: string | false;
-    hsts?: false | string | {
-        header?: string;
-        shouldSend?: (req: ServerRequestLike) => boolean;
-    };
-    originAgentCluster?: string | false;
-    permittedCrossDomainPolicies?: string | false;
-    permissionsPolicy?: false | readonly string[] | string;
-    referrerPolicy?: string | false;
-};
-type ContentSecurityPolicyOptions = {
-    directives?: readonly string[] | ((context: ContentSecurityPolicyContext) => readonly string[]);
-    nonceLocalKey?: string;
-    shouldUpgradeInsecureRequests?: (req: ServerRequestLike) => boolean;
-};
-type ContentSecurityPolicyContext = {
-    nonce: string;
-    req: ServerRequestLike;
-};
-declare function createNonceMiddleware(options?: NonceMiddlewareOptions): (_req: unknown, res: ServerResponseLike, next: () => unknown) => unknown;
-declare function attachNonceMiddleware(app: unknown, options?: NonceMiddlewareOptions): void;
-declare function applySecurityHeaders(req: ServerRequestLike, res: ServerResponseLike, options?: SecurityHeadersOptions): void;
-declare function createSecurityHeadersMiddleware(options?: SecurityHeadersOptions): (req: ServerRequestLike, res: ServerResponseLike, next: () => unknown) => unknown;
-declare function attachSecurityHeadersMiddleware(app: unknown, options?: SecurityHeadersOptions): void;
-declare function defaultContentSecurityPolicyDirectives(context: ContentSecurityPolicyContext): string[];
-declare function contentSecurityPolicyHeader(context: ContentSecurityPolicyContext, options?: ContentSecurityPolicyOptions): string;
-declare function applyContentSecurityPolicy(req: ServerRequestLike, res: ServerResponseLike, options?: ContentSecurityPolicyOptions): void;
-declare function createContentSecurityPolicyMiddleware(options?: ContentSecurityPolicyOptions): (req: ServerRequestLike, res: ServerResponseLike, next: (error?: unknown) => unknown) => unknown;
-declare function attachContentSecurityPolicyMiddleware(app: unknown, options?: ContentSecurityPolicyOptions): void;
-export { applyContentSecurityPolicy, applySecurityHeaders, attachContentSecurityPolicyMiddleware, attachNonceMiddleware, attachSecurityHeadersMiddleware, contentSecurityPolicyHeader, createContentSecurityPolicyMiddleware, createNonceMiddleware, createSecurityHeadersMiddleware, defaultContentSecurityPolicyDirectives, };
-export type { ContentSecurityPolicyContext, ContentSecurityPolicyOptions, NonceMiddlewareOptions, SecurityHeadersOptions, };
-//# sourceMappingURL=policy.d.ts.map

package/dist/server/security/policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../src/server/security/policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AAOvB,KAAK,sBAAsB,GAAG;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,uBAAuB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzC,yBAAyB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC3C,kBAAkB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,EACJ,KAAK,GACL,MAAM,GACL;QACA,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC;KAClD,CAAC;IACF,kBAAkB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACpC,4BAA4B,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC9C,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC;IACvD,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CACjC,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAClC,UAAU,CAAC,EACV,SAAS,MAAM,EAAE,GACjB,CAAC,CAAC,OAAO,EAAE,4BAA4B,KAAK,SAAS,MAAM,EAAE,CAAC,CAAC;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6BAA6B,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC;CACrE,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,iBAAiB,CAAC;CACxB,CAAC;AAEF,iBAAS,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,IAI/D,MAAM,OAAO,EACb,KAAK,kBAAkB,EACvB,MAAM,MAAM,OAAO,aAMtB;AAED,iBAAS,qBAAqB,CAC5B,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,sBAA2B,QAGrC;AA4CD,iBAAS,oBAAoB,CAC3B,GAAG,EAAE,iBAAiB,EACtB,GAAG,EAAE,kBAAkB,EACvB,OAAO,GAAE,sBAA2B,QAqDrC;AAED,iBAAS,+BAA+B,CACtC,OAAO,GAAE,sBAA2B,IAGlC,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,MAAM,MAAM,OAAO,aAKtB;AAED,iBAAS,+BAA+B,CACtC,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,sBAA2B,QAGrC;AAWD,iBAAS,sCAAsC,CAC7C,OAAO,EAAE,4BAA4B,YAkBtC;AAYD,iBAAS,2BAA2B,CAClC,OAAO,EAAE,4BAA4B,EACrC,OAAO,GAAE,4BAAiC,UAY3C;AAED,iBAAS,0BAA0B,CACjC,GAAG,EAAE,iBAAiB,EACtB,GAAG,EAAE,kBAAkB,EACvB,OAAO,GAAE,4BAAiC,QAa3C;AAED,iBAAS,qCAAqC,CAC5C,OAAO,GAAE,4BAAiC,IAGxC,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,aASrC;AAED,iBAAS,qCAAqC,CAC5C,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,4BAAiC,QAG3C;AAED,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,qCAAqC,EACrC,qBAAqB,EACrB,+BAA+B,EAC/B,2BAA2B,EAC3B,qCAAqC,EACrC,qBAAqB,EACrB,+BAA+B,EAC/B,sCAAsC,GACvC,CAAC;AACF,YAAY,EACV,4BAA4B,EAC5B,4BAA4B,EAC5B,sBAAsB,EACtB,sBAAsB,GACvB,CAAC"}

package/dist/server/security/policy.js

@@ -1,159 +0,0 @@
-import crypto from "node:crypto";
-import { setResponseHeader, } from "../http.js";
-import { attachUseMiddleware, responseLocals, securityText, } from "./helpers.js";
-function createNonceMiddleware(options = {}) {
-    const bytes = Math.max(8, Math.floor(Number(options.bytes) || 16));
-    const localsKey = options.localsKey || "nonce";
-    return function nonceMiddleware(_req, res, next) {
-        const locals = responseLocals(res);
-        if (locals)
-            locals[localsKey] = crypto.randomBytes(bytes).toString("base64");
-        return next();
-    };
-}
-function attachNonceMiddleware(app, options = {}) {
-    attachUseMiddleware(app, createNonceMiddleware(options));
-}
-function hstsHeader(options) {
-    if (options === false)
-        return "";
-    if (typeof options === "string")
-        return options;
-    if (options && typeof options === "object" && options.header) {
-        return options.header;
-    }
-    return "max-age=31536000; includeSubDomains; preload";
-}
-function shouldSendHsts(req, options) {
-    if (options === false)
-        return false;
-    if (options && typeof options === "object" && options.shouldSend) {
-        return options.shouldSend(req);
-    }
-    return Boolean(req && req.secure);
-}
-function defaultPermissionsPolicy() {
-    return [
-        "geolocation=()",
-        "camera=()",
-        "microphone=()",
-        "payment=()",
-        "gamepad=()",
-        "gyroscope=()",
-        "magnetometer=()",
-        "display-capture=()",
-    ];
-}
-function permissionsPolicyHeader(input) {
-    if (input === false)
-        return "";
-    if (typeof input === "string")
-        return input;
-    const entries = input || defaultPermissionsPolicy();
-    return Array.from(entries).join(", ");
-}
-function applySecurityHeaders(req, res, options = {}) {
-    const hsts = hstsHeader(options.hsts);
-    if (hsts && shouldSendHsts(req, options.hsts)) {
-        setResponseHeader(res, "Strict-Transport-Security", hsts);
-    }
-    setResponseHeader(res, "X-Content-Type-Options", "nosniff");
-    if (options.dnsPrefetchControl !== false) {
-        setResponseHeader(res, "X-DNS-Prefetch-Control", options.dnsPrefetchControl || "off");
-    }
-    if (options.permittedCrossDomainPolicies !== false) {
-        setResponseHeader(res, "X-Permitted-Cross-Domain-Policies", options.permittedCrossDomainPolicies || "none");
-    }
-    if (options.frameOptions !== false) {
-        setResponseHeader(res, "X-Frame-Options", options.frameOptions || "SAMEORIGIN");
-    }
-    if (options.referrerPolicy !== false) {
-        setResponseHeader(res, "Referrer-Policy", options.referrerPolicy || "strict-origin-when-cross-origin");
-    }
-    const permissions = permissionsPolicyHeader(options.permissionsPolicy);
-    if (permissions)
-        setResponseHeader(res, "Permissions-Policy", permissions);
-    if (options.crossOriginOpenerPolicy !== false) {
-        setResponseHeader(res, "Cross-Origin-Opener-Policy", options.crossOriginOpenerPolicy || "same-origin");
-    }
-    if (options.crossOriginResourcePolicy !== false) {
-        setResponseHeader(res, "Cross-Origin-Resource-Policy", options.crossOriginResourcePolicy || "same-origin");
-    }
-    if (options.originAgentCluster !== false) {
-        setResponseHeader(res, "Origin-Agent-Cluster", options.originAgentCluster || "?1");
-    }
-    if (options.acceptClientHints && options.acceptClientHints.length) {
-        setResponseHeader(res, "Accept-CH", options.acceptClientHints.join(", "));
-    }
-}
-function createSecurityHeadersMiddleware(options = {}) {
-    return function securityHeadersMiddleware(req, res, next) {
-        applySecurityHeaders(req, res, options);
-        return next();
-    };
-}
-function attachSecurityHeadersMiddleware(app, options = {}) {
-    attachUseMiddleware(app, createSecurityHeadersMiddleware(options));
-}
-function cspNonce(res, options) {
-    const key = options.nonceLocalKey || "nonce";
-    const nonce = res && res.locals ? res.locals[key] : "";
-    return securityText(nonce) || "";
-}
-function defaultContentSecurityPolicyDirectives(context) {
-    return [
-        "default-src 'self'",
-        `script-src 'self' 'nonce-${context.nonce}'`,
-        `script-src-elem 'self' 'nonce-${context.nonce}'`,
-        "script-src-attr 'none'",
-        "style-src 'self' 'unsafe-inline'",
-        "font-src 'self' data:",
-        "img-src 'self' data: blob: https:",
-        "worker-src 'self' blob:",
-        "frame-src 'self'",
-        "connect-src 'self'",
-        "frame-ancestors 'self'",
-        "object-src 'none'",
-        "base-uri 'self'",
-        "form-action 'self'",
-    ];
-}
-function contentSecurityPolicyDirectives(context, options) {
-    if (typeof options.directives === "function") {
-        return options.directives(context);
-    }
-    return options.directives || defaultContentSecurityPolicyDirectives(context);
-}
-function contentSecurityPolicyHeader(context, options = {}) {
-    const values = Array.from(contentSecurityPolicyDirectives(context, options))
-        .map((directive) => String(directive || "").trim())
-        .filter(Boolean);
-    if (options.shouldUpgradeInsecureRequests &&
-        options.shouldUpgradeInsecureRequests(context.req)) {
-        values.push("upgrade-insecure-requests");
-    }
-    return values.join("; ");
-}
-function applyContentSecurityPolicy(req, res, options = {}) {
-    const nonce = cspNonce(res, options);
-    if (!nonce) {
-        throw new Error("Content security policy nonce is missing. Ensure nonce middleware runs first.");
-    }
-    setResponseHeader(res, "Content-Security-Policy", contentSecurityPolicyHeader({ nonce, req }, options));
-}
-function createContentSecurityPolicyMiddleware(options = {}) {
-    return function contentSecurityPolicyMiddleware(req, res, next) {
-        try {
-            applyContentSecurityPolicy(req, res, options);
-            return next();
-        }
-        catch (error) {
-            return next(error);
-        }
-    };
-}
-function attachContentSecurityPolicyMiddleware(app, options = {}) {
-    attachUseMiddleware(app, createContentSecurityPolicyMiddleware(options));
-}
-export { applyContentSecurityPolicy, applySecurityHeaders, attachContentSecurityPolicyMiddleware, attachNonceMiddleware, attachSecurityHeadersMiddleware, contentSecurityPolicyHeader, createContentSecurityPolicyMiddleware, createNonceMiddleware, createSecurityHeadersMiddleware, defaultContentSecurityPolicyDirectives, };
-//# sourceMappingURL=policy.js.map

package/dist/server/security/policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/server/security/policy.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,iBAAiB,GAGlB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,cAAc,CAAC;AAuCtB,SAAS,qBAAqB,CAAC,UAAkC,EAAE;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;IAC/C,OAAO,SAAS,eAAe,CAC7B,IAAa,EACb,GAAuB,EACvB,IAAmB;QAEnB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7E,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAY,EACZ,UAAkC,EAAE;IAEpC,mBAAmB,CAAC,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,OAAuC;IACzD,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7D,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,8CAA8C,CAAC;AACxD,CAAC;AAED,SAAS,cAAc,CACrB,GAAsB,EACtB,OAAuC;IAEvC,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACjE,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO;QACL,gBAAgB;QAChB,WAAW;QACX,eAAe;QACf,YAAY;QACZ,YAAY;QACZ,cAAc;QACd,iBAAiB;QACjB,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAkD;IAElD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,KAAK,IAAI,wBAAwB,EAAE,CAAC;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAsB,EACtB,GAAuB,EACvB,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,iBAAiB,CAAC,GAAG,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,iBAAiB,CAAC,GAAG,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACzC,iBAAiB,CACf,GAAG,EACH,wBAAwB,EACxB,OAAO,CAAC,kBAAkB,IAAI,KAAK,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,4BAA4B,KAAK,KAAK,EAAE,CAAC;QACnD,iBAAiB,CACf,GAAG,EACH,mCAAmC,EACnC,OAAO,CAAC,4BAA4B,IAAI,MAAM,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACnC,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,EAAE,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QACrC,iBAAiB,CACf,GAAG,EACH,iBAAiB,EACjB,OAAO,CAAC,cAAc,IAAI,iCAAiC,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE,IAAI,WAAW;QAAE,iBAAiB,CAAC,GAAG,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,uBAAuB,KAAK,KAAK,EAAE,CAAC;QAC9C,iBAAiB,CACf,GAAG,EACH,4BAA4B,EAC5B,OAAO,CAAC,uBAAuB,IAAI,aAAa,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,yBAAyB,KAAK,KAAK,EAAE,CAAC;QAChD,iBAAiB,CACf,GAAG,EACH,8BAA8B,EAC9B,OAAO,CAAC,yBAAyB,IAAI,aAAa,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACzC,iBAAiB,CAAC,GAAG,EAAE,sBAAsB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAClE,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,UAAkC,EAAE;IAEpC,OAAO,SAAS,yBAAyB,CACvC,GAAsB,EACtB,GAAuB,EACvB,IAAmB;QAEnB,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,GAAY,EACZ,UAAkC,EAAE;IAEpC,mBAAmB,CAAC,GAAG,EAAE,+BAA+B,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CACf,GAAuB,EACvB,OAAqC;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,sCAAsC,CAC7C,OAAqC;IAErC,OAAO;QACL,oBAAoB;QACpB,4BAA4B,OAAO,CAAC,KAAK,GAAG;QAC5C,iCAAiC,OAAO,CAAC,KAAK,GAAG;QACjD,wBAAwB;QACxB,kCAAkC;QAClC,uBAAuB;QACvB,mCAAmC;QACnC,yBAAyB;QACzB,kBAAkB;QAClB,oBAAoB;QACpB,wBAAwB;QACxB,mBAAmB;QACnB,iBAAiB;QACjB,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,OAAqC,EACrC,OAAqC;IAErC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,IAAI,sCAAsC,CAAC,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAqC,EACrC,UAAwC,EAAE;IAE1C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC3E,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SAClD,MAAM,CAAC,OAAO,CAAC,CAAC;IACjB,IACE,OAAO,CAAC,6BAA6B;QACnC,OAAO,CAAC,6BAA6B,CAAC,OAAO,CAAC,GAAG,CAAC,EACpD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAsB,EACtB,GAAuB,EACvB,UAAwC,EAAE;IAE1C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,iBAAiB,CACf,GAAG,EACH,yBAAyB,EACzB,2BAA2B,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,UAAwC,EAAE;IAE1C,OAAO,SAAS,+BAA+B,CAC7C,GAAsB,EACtB,GAAuB,EACvB,IAAkC;QAElC,IAAI,CAAC;YACH,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC,CAC5C,GAAY,EACZ,UAAwC,EAAE;IAE1C,mBAAmB,CAAC,GAAG,EAAE,qCAAqC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,qCAAqC,EACrC,qBAAqB,EACrB,+BAA+B,EAC/B,2BAA2B,EAC3B,qCAAqC,EACrC,qBAAqB,EACrB,+BAA+B,EAC/B,sCAAsC,GACvC,CAAC"}

package/dist/server/security.d.ts

@@ -1,17 +0,0 @@
-import type { ServerResponseLike } from "./http.js";
-type SecurityState = {
-    csrfToken: string | null;
-    nonce: string;
-};
-type SecurityMiddlewareOptions = {
-    csrfLocalKey?: string;
-    localsKey?: string;
-    nonceLocalKey?: string;
-};
-declare function createSecurityState(res: ServerResponseLike | null | undefined, options?: SecurityMiddlewareOptions): SecurityState;
-declare function applySecurityToLocals(res: ServerResponseLike | null | undefined, options?: SecurityMiddlewareOptions): SecurityState;
-declare function createSecurityMiddleware(options?: SecurityMiddlewareOptions): (_req: unknown, res: ServerResponseLike, next: () => unknown) => unknown;
-declare function attachSecurityMiddleware(app: unknown, options?: SecurityMiddlewareOptions): void;
-export { applySecurityToLocals, attachSecurityMiddleware, createSecurityMiddleware, createSecurityState, };
-export type { SecurityMiddlewareOptions, SecurityState };
-//# sourceMappingURL=security.d.ts.map

package/dist/server/security.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/server/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAOpD,KAAK,aAAa,GAAG;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,iBAAS,mBAAmB,CAC1B,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,EAC1C,OAAO,GAAE,yBAA8B,GACtC,aAAa,CAMf;AAED,iBAAS,qBAAqB,CAC5B,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,EAC1C,OAAO,GAAE,yBAA8B,iBAOxC;AAED,iBAAS,wBAAwB,CAAC,OAAO,GAAE,yBAA8B,IAErE,MAAM,OAAO,EACb,KAAK,kBAAkB,EACvB,MAAM,MAAM,OAAO,aAKtB;AAED,iBAAS,wBAAwB,CAC/B,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,yBAA8B,QAGxC;AAED,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,GACpB,CAAC;AACF,YAAY,EAAE,yBAAyB,EAAE,aAAa,EAAE,CAAC"}

package/dist/server/security.js

@@ -1,27 +0,0 @@
-import { attachUseMiddleware, responseLocals, securityText, } from "./security/helpers.js";
-function createSecurityState(res, options = {}) {
-    const locals = responseLocals(res) || {};
-    return {
-        csrfToken: securityText(locals[options.csrfLocalKey || "csrfToken"]),
-        nonce: securityText(locals[options.nonceLocalKey || "nonce"]) || "",
-    };
-}
-function applySecurityToLocals(res, options = {}) {
-    const locals = responseLocals(res);
-    if (!locals)
-        return null;
-    const state = createSecurityState(res, options);
-    locals[options.localsKey || "security"] = state;
-    return state;
-}
-function createSecurityMiddleware(options = {}) {
-    return function securityMiddleware(_req, res, next) {
-        applySecurityToLocals(res, options);
-        return next();
-    };
-}
-function attachSecurityMiddleware(app, options = {}) {
-    attachUseMiddleware(app, createSecurityMiddleware(options));
-}
-export { applySecurityToLocals, attachSecurityMiddleware, createSecurityMiddleware, createSecurityState, };
-//# sourceMappingURL=security.js.map

package/dist/server/security.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/server/security.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAa/B,SAAS,mBAAmB,CAC1B,GAA0C,EAC1C,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACzC,OAAO;QACL,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;QACpE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAA0C,EAC1C,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAqC,EAAE;IACvE,OAAO,SAAS,kBAAkB,CAChC,IAAa,EACb,GAAuB,EACvB,IAAmB;QAEnB,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAAY,EACZ,UAAqC,EAAE;IAEvC,mBAAmB,CAAC,GAAG,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,GACpB,CAAC"}

package/dist/src/server/request-log.d.ts

@@ -1,12 +0,0 @@
-import { type FrontendServerLoggerInput } from "./logging.js";
-type FrontendRequestLogOptions = {
-    browserProbe404Prefixes?: false | readonly string[];
-    logger?: FrontendServerLoggerInput;
-    quietSuccessRoutes?: readonly string[];
-    readLogger?: () => FrontendServerLoggerInput;
-    trustProxy?: unknown;
-};
-declare function attachFrontendRequestLogger(app: any, options?: FrontendRequestLogOptions): boolean;
-export { attachFrontendRequestLogger };
-export type { FrontendRequestLogOptions };
-//# sourceMappingURL=request-log.d.ts.map

package/dist/src/server/request-log.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"request-log.d.ts","sourceRoot":"","sources":["../../../src/server/request-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,cAAc,CAAC;AAEtB,KAAK,yBAAyB,GAAG;IAC/B,uBAAuB,CAAC,EAAE,KAAK,GAAG,SAAS,MAAM,EAAE,CAAC;IACpD,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,yBAAyB,CAAC;IAC7C,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAkIF,iBAAS,2BAA2B,CAClC,GAAG,EAAE,GAAG,EACR,OAAO,GAAE,yBAA8B,WAoBxC;AAED,OAAO,EAAE,2BAA2B,EAAE,CAAC;AACvC,YAAY,EAAE,yBAAyB,EAAE,CAAC"}