@zmdb/web 1.0.0-beta.1

package/dist/static/index.js

@@ -0,0 +1,348 @@
+// @zmdb/web — confined static-file responses (epic #564, issue #568).
+//
+// Paths are decoded once, refused before filesystem access, opened once, and
+// streamed from that descriptor. Every refusal is the same empty 404; details
+// go only to the required onError sink.
+import { respond, stream } from '../pipeline/index.js';
+const DEFAULT_CACHE_CONTROL = 'public, max-age=0, must-revalidate';
+const NOSNIFF = Object.freeze({ 'x-content-type-options': 'nosniff' });
+const DEFAULT_CONTENT_TYPES = Object.freeze({
+    '.css': 'text/css',
+    '.csv': 'text/csv',
+    '.gif': 'image/gif',
+    '.htm': 'text/html; charset=utf-8',
+    '.html': 'text/html; charset=utf-8',
+    '.ico': 'image/x-icon',
+    '.jpeg': 'image/jpeg',
+    '.jpg': 'image/jpeg',
+    '.js': 'application/javascript',
+    '.json': 'application/json',
+    '.mjs': 'application/javascript',
+    '.png': 'image/png',
+    '.svg': 'image/svg+xml',
+    '.txt': 'text/plain; charset=utf-8',
+    '.webp': 'image/webp',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.xml': 'application/xml',
+});
+/** Build a handler whose root is resolved and validated exactly once. */
+export async function createStaticHandler(options) {
+    // Keep @zmdb/web and @zmdb/web/static loadable on Fetch-only runtimes. The
+    // Node filesystem is required only when an application constructs this
+    // filesystem-backed handler.
+    const [fsModule, fsPromises, pathModule] = await Promise.all([
+        import('node:fs'),
+        import('node:fs/promises'),
+        import('node:path'),
+    ]);
+    const filesystem = {
+        open: (path, flags) => fsPromises.open(path, flags),
+        realpath: path => fsPromises.realpath(path),
+        stat: path => fsPromises.stat(path),
+        readFlags: fsModule.constants.O_RDONLY | fsModule.constants.O_NONBLOCK,
+    };
+    const paths = {
+        extname: pathModule.extname,
+        isAbsolute: pathModule.isAbsolute,
+        resolve: pathModule.resolve,
+        sep: pathModule.sep,
+    };
+    const root = await filesystem.realpath(options.root);
+    const rootStat = await filesystem.stat(root);
+    if (!rootStat.isDirectory()) {
+        throw new Error('static root must be a directory');
+    }
+    const cacheControl = options.cacheControl ?? DEFAULT_CACHE_CONTROL;
+    const contentTypes = normalizedContentTypes(options.contentTypes);
+    return {
+        serve(pathname, headers) {
+            return serveFromRoot(filesystem, paths, root, pathname, headers, cacheControl, contentTypes, options);
+        },
+    };
+}
+async function serveFromRoot(filesystem, paths, root, pathname, requestHeaders, cacheControl, contentTypes, options) {
+    const relative = confinedPath(pathname, options.index, paths);
+    if (relative.kind === 'missing') {
+        return notFound();
+    }
+    if (relative.kind === 'refused') {
+        report(options, relative.error);
+        return notFound();
+    }
+    const resolved = paths.resolve(root, relative.value);
+    if (!contains(root, resolved, paths.sep)) {
+        report(options, new Error('static path escaped its root'));
+        return notFound();
+    }
+    let handle;
+    try {
+        // O_NONBLOCK is load-bearing for FIFOs: opening one only to discover its
+        // inode type must not wait forever for a writer.
+        handle = await filesystem.open(resolved, filesystem.readFlags);
+    }
+    catch (error) {
+        if (!isOrdinaryMiss(error)) {
+            report(options, error);
+        }
+        return notFound();
+    }
+    try {
+        const descriptorStat = await handle.stat();
+        if (!descriptorStat.isFile()) {
+            report(options, new Error('static path is not a regular file'));
+            await closeQuietly(handle);
+            return notFound();
+        }
+        const target = await openedRealpath(filesystem, handle, resolved, descriptorStat);
+        if (!contains(root, target, paths.sep)) {
+            report(options, new Error('static symlink escaped its root'));
+            await closeQuietly(handle);
+            return notFound();
+        }
+        const validators = validatorHeaders(descriptorStat, cacheControl);
+        if (notModified(requestHeaders, descriptorStat, validators.etag)) {
+            await closeQuietly(handle);
+            return respond({ status: 304, headers: validators });
+        }
+        const requestedRange = header(requestHeaders, 'if-range') === undefined
+            ? parseRange(header(requestHeaders, 'range'), descriptorStat.size)
+            : { kind: 'full' };
+        if (requestedRange.kind === 'unsatisfiable') {
+            await closeQuietly(handle);
+            return respond({
+                status: 416,
+                headers: { ...validators, 'content-range': `bytes */${String(descriptorStat.size)}` },
+            });
+        }
+        const extension = paths.extname(relative.value).toLowerCase();
+        const contentType = contentTypes[extension] ?? 'application/octet-stream';
+        const start = requestedRange.kind === 'full' ? 0 : requestedRange.start;
+        const end = requestedRange.kind === 'full' ? Math.max(0, descriptorStat.size - 1) : requestedRange.end;
+        const length = requestedRange.kind === 'full' ? descriptorStat.size : end - start + 1;
+        const responseHeaders = {
+            ...validators,
+            'accept-ranges': 'bytes',
+            'content-length': String(length),
+            'content-type': contentType,
+        };
+        if (requestedRange.kind !== 'full') {
+            responseHeaders['content-range'] = `bytes ${String(start)}-${String(end)}/${String(descriptorStat.size)}`;
+        }
+        return stream(fileWindow(handle, start, length), {
+            status: requestedRange.kind === 'full' ? 200 : 206,
+            headers: responseHeaders,
+            length,
+            onError: options.onError,
+        });
+    }
+    catch (error) {
+        await closeQuietly(handle);
+        report(options, error);
+        return notFound();
+    }
+}
+function confinedPath(pathname, index, paths) {
+    if (pathname.length === 0 && index === undefined) {
+        return { kind: 'missing' };
+    }
+    let decoded;
+    try {
+        decoded = decodeURIComponent(pathname.length === 0 ? (index ?? '') : pathname);
+    }
+    catch {
+        return { kind: 'refused', error: new Error('static path is not valid percent-encoded UTF-8') };
+    }
+    if (decoded.length === 0 ||
+        decoded.includes('%') ||
+        decoded.includes('\0') ||
+        decoded.includes('\\') ||
+        decoded.startsWith('/') ||
+        decoded.startsWith('//') ||
+        /^[A-Za-z]:/.test(decoded) ||
+        paths.isAbsolute(decoded)) {
+        return { kind: 'refused', error: new Error('static path contains a refused form') };
+    }
+    const segments = decoded.split('/');
+    if (segments.some(segment => segment.length === 0 || segment === '..' || segment.startsWith('.'))) {
+        return { kind: 'refused', error: new Error('static path contains a refused segment') };
+    }
+    return { kind: 'path', value: decoded };
+}
+function contains(root, candidate, separator) {
+    const prefix = root.endsWith(separator) ? root : `${root}${separator}`;
+    return candidate === root || candidate.startsWith(prefix);
+}
+function normalizedContentTypes(overrides) {
+    if (overrides === undefined) {
+        return DEFAULT_CONTENT_TYPES;
+    }
+    const result = { ...DEFAULT_CONTENT_TYPES };
+    for (const key of Object.keys(overrides)) {
+        result[key.toLowerCase()] = overrides[key] ?? 'application/octet-stream';
+    }
+    return result;
+}
+async function openedRealpath(filesystem, handle, originalPath, descriptorStat) {
+    try {
+        // Linux exposes the canonical target of the descriptor itself. The frozen
+        // tests already require /proc for descriptor accounting, and this form
+        // closes the path-swap gap between open() and the symlink containment check.
+        return await filesystem.realpath(`/proc/self/fd/${String(handle.fd)}`);
+    }
+    catch {
+        // Other supported Node platforms have no portable fd-to-path API. The
+        // opened descriptor still owns response metadata and bytes. Bind the
+        // path-based real target back to that descriptor by filesystem identity so
+        // a swap between open() and realpath() is refused.
+        const target = await filesystem.realpath(originalPath);
+        const targetStat = await filesystem.stat(target);
+        if (!sameFile(descriptorStat, targetStat)) {
+            throw new Error('static path changed while it was being opened');
+        }
+        return target;
+    }
+}
+function sameFile(left, right) {
+    return left.dev === right.dev && left.ino === right.ino;
+}
+function validatorHeaders(statValue, cacheControl) {
+    return {
+        'cache-control': cacheControl,
+        etag: `W/"${String(statValue.size)}-${String(statValue.mtimeMs)}"`,
+        'last-modified': statValue.mtime.toUTCString(),
+        'x-content-type-options': 'nosniff',
+    };
+}
+function notModified(headers, statValue, etag) {
+    const ifNoneMatch = header(headers, 'if-none-match');
+    if (ifNoneMatch !== undefined) {
+        return ifNoneMatch
+            .split(',')
+            .map(value => value.trim())
+            .some(value => value === '*' || weakTag(value) === weakTag(etag));
+    }
+    const ifModifiedSince = header(headers, 'if-modified-since');
+    if (ifModifiedSince === undefined) {
+        return false;
+    }
+    const since = Date.parse(ifModifiedSince);
+    return Number.isFinite(since) && Math.floor(statValue.mtimeMs / 1000) * 1000 <= since;
+}
+function weakTag(value) {
+    const trimmed = value.trim();
+    return trimmed.startsWith('W/') ? trimmed.slice(2) : trimmed;
+}
+function parseRange(value, size) {
+    if (value === undefined || value.includes(',')) {
+        return { kind: 'full' };
+    }
+    const match = /^bytes=(\d*)-(\d*)$/i.exec(value.trim());
+    if (match === null) {
+        return { kind: 'full' };
+    }
+    const first = match[1] ?? '';
+    const second = match[2] ?? '';
+    if (first.length === 0 && second.length === 0) {
+        return { kind: 'full' };
+    }
+    if (first.length === 0) {
+        const suffix = safeInteger(second);
+        if (suffix === undefined || suffix <= 0 || size === 0) {
+            return { kind: 'full' };
+        }
+        return { kind: 'range', start: Math.max(0, size - suffix), end: size - 1 };
+    }
+    const start = safeInteger(first);
+    if (start === undefined) {
+        return { kind: 'full' };
+    }
+    if (start >= size) {
+        return { kind: 'unsatisfiable' };
+    }
+    if (second.length === 0) {
+        return { kind: 'range', start, end: size - 1 };
+    }
+    const requestedEnd = safeInteger(second);
+    if (requestedEnd === undefined || requestedEnd < start) {
+        return { kind: 'full' };
+    }
+    return { kind: 'range', start, end: Math.min(requestedEnd, size - 1) };
+}
+function safeInteger(value) {
+    if (!/^\d+$/.test(value)) {
+        return undefined;
+    }
+    const parsed = Number(value);
+    return Number.isSafeInteger(parsed) ? parsed : undefined;
+}
+function header(headers, wanted) {
+    for (const name of Object.keys(headers)) {
+        if (name.toLowerCase() === wanted) {
+            return headers[name];
+        }
+    }
+    return undefined;
+}
+function fileWindow(handle, start, length) {
+    let position = start;
+    let remaining = length;
+    let closed = false;
+    const close = async () => {
+        if (!closed) {
+            closed = true;
+            await handle.close();
+        }
+    };
+    return new ReadableStream({
+        async pull(controller) {
+            try {
+                if (remaining === 0) {
+                    await close();
+                    controller.close();
+                    return;
+                }
+                const wanted = Math.min(64 * 1024, remaining);
+                const chunk = new Uint8Array(wanted);
+                const result = await handle.read(chunk, 0, wanted, position);
+                if (result.bytesRead === 0) {
+                    throw new Error('static file ended before its measured length');
+                }
+                position += result.bytesRead;
+                remaining -= result.bytesRead;
+                controller.enqueue(chunk.slice(0, result.bytesRead));
+            }
+            catch (error) {
+                await close().catch(() => undefined);
+                controller.error(error);
+            }
+        },
+        cancel: close,
+    });
+}
+function notFound() {
+    return respond({ status: 404, headers: NOSNIFF });
+}
+function isOrdinaryMiss(error) {
+    const code = errorCode(error);
+    return code === 'ENOENT' || code === 'ENOTDIR';
+}
+function errorCode(error) {
+    if (typeof error !== 'object' || error === null || !('code' in error)) {
+        return undefined;
+    }
+    const code = Reflect.get(error, 'code');
+    return typeof code === 'string' ? code : undefined;
+}
+function report(options, error) {
+    try {
+        options.onError(error);
+    }
+    catch {
+        // A diagnostic sink cannot turn a uniform 404 into a rejected request.
+    }
+}
+async function closeQuietly(handle) {
+    await handle.close().catch(() => undefined);
+}
+//# sourceMappingURL=index.js.map

package/dist/static/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/static/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,wCAAwC;AAKxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAoB,MAAM,sBAAsB,CAAC;AAczE,MAAM,qBAAqB,GAAG,oCAAoC,CAAC;AACnE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC,CAAC;AACvE,MAAM,qBAAqB,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC5E,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,0BAA0B;IAClC,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,wBAAwB;IAC/B,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,wBAAwB;IAChC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,2BAA2B;IACnC,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,iBAAiB;CAC1B,CAAC,CAAC;AAwBH,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAsB;IAC9D,2EAA2E;IAC3E,uEAAuE;IACvE,6BAA6B;IAC7B,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3D,MAAM,CAAC,SAAS,CAAC;QACjB,MAAM,CAAC,kBAAkB,CAAC;QAC1B,MAAM,CAAC,WAAW,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,UAAU,GAAqB;QACnC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACnD,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3C,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU;KACvE,CAAC;IACF,MAAM,KAAK,GAAgB;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,GAAG,EAAE,UAAU,CAAC,GAAG;KACpB,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACnE,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAElE,OAAO;QACL,KAAK,CAAC,QAAgB,EAAE,OAAyC;YAC/D,OAAO,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QACxG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,UAA4B,EAC5B,KAAkB,EAClB,IAAY,EACZ,QAAgB,EAChB,cAAgD,EAChD,YAAoB,EACpB,YAA8C,EAC9C,OAAsB;IAEtB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC3D,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7B,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAChE,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;YAC9D,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,WAAW,CAAC,cAAc,EAAE,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,cAAc,GAClB,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,KAAK,SAAS;YAC9C,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC;YAClE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;QAEhC,IAAI,cAAc,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC5C,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,eAAe,EAAE,WAAW,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE;aACtF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,0BAA0B,CAAC;QAC1E,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC;QACxE,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC;QACvG,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC;QACtF,MAAM,eAAe,GAA2B;YAC9C,GAAG,UAAU;YACb,eAAe,EAAE,OAAO;YACxB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;YAChC,cAAc,EAAE,WAAW;SAC5B,CAAC;QACF,IAAI,cAAc,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACnC,eAAe,CAAC,eAAe,CAAC,GAAG,SAAS,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5G,CAAC;QAED,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;YAC/C,MAAM,EAAE,cAAc,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAClD,OAAO,EAAE,eAAe;YACxB,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvB,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAOD,SAAS,YAAY,CAAC,QAAgB,EAAE,KAAyB,EAAE,KAAkB;IACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,gDAAgD,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QACxB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1B,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EACzB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAClG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,wCAAwC,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB,EAAE,SAAiB;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC;IACvE,OAAO,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,sBAAsB,CAC7B,SAAuD;IAEvD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,GAAG,qBAAqB,EAAE,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAA4B,EAC5B,MAAkB,EAClB,YAAoB,EACpB,cAAqB;IAErB,IAAI,CAAC;QACH,0EAA0E;QAC1E,uEAAuE;QACvE,6EAA6E;QAC7E,OAAO,MAAM,UAAU,CAAC,QAAQ,CAAC,iBAAiB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,qEAAqE;QACrE,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAW,EAAE,KAAY;IACzC,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAgB,EAAE,YAAoB;IAC9D,OAAO;QACL,eAAe,EAAE,YAAY;QAC7B,IAAI,EAAE,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;QAClE,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE;QAC9C,wBAAwB,EAAE,SAAS;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAyC,EAAE,SAAgB,EAAE,IAAY;IAC5F,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,WAAW;aACf,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC1B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC7D,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC;AACxF,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB,EAAE,IAAY;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,GAAG,KAAK,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,MAAM,CAAC,OAAyC,EAAE,MAAc;IACvE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,MAAkB,EAAE,KAAa,EAAE,MAAc;IACnE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAAS,GAAG,MAAM,CAAC;IACvB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,IAAI,cAAc,CAA0B;QACjD,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,CAAC;gBACH,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;oBACpB,MAAM,KAAK,EAAE,CAAC;oBACd,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC9C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC7D,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAClE,CAAC;gBACD,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC;gBAC7B,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;gBAC9B,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACrC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,MAAM,CAAC,OAAsB,EAAE,KAAc;IACpD,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAkB;IAC5C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC9C,CAAC"}

package/dist/testing/index.d.ts

@@ -0,0 +1,20 @@
+import { type ModuleClass, type ProviderDef, type Token } from '@zmdb/app';
+import type { Observability } from '@zmdb/app/observability';
+import { type WebRequest, type WebResponse } from '../pipeline/index.js';
+/** Options for `createTestApp`. */
+export interface TestAppOptions {
+    readonly overrides?: readonly ProviderDef[];
+    readonly observability?: Observability;
+}
+/** A test application: drive requests in-process and resolve providers. */
+export interface TestApp extends AsyncDisposable {
+    request(req: WebRequest): Promise<WebResponse>;
+    get<T>(token: Token<T>): T;
+    init(): Promise<void>;
+}
+/**
+ * Compile one overridden graph, hand that exact graph to createApplication,
+ * and drive its controllers through the production HTTP router.
+ */
+export declare function createTestApp(rootModule: ModuleClass, options?: TestAppOptions): TestApp;
+//# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,KAAK,EACX,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG7D,OAAO,EAA6B,KAAK,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEpG,mCAAmC;AACnC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAC5C,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;CACxC;AAED,2EAA2E;AAC3E,MAAM,WAAW,OAAQ,SAAQ,eAAe;IAC9C,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAoB5F"}

package/dist/testing/index.js

@@ -0,0 +1,32 @@
+// @zmdb/web — in-process HTTP testing over the app-owned graph and lifecycle.
+import { compileModule, createApplication, } from '@zmdb/app';
+import { applicationControllersOf, withCompiledApplication } from '../app/bridge.js';
+import { createRouter } from '../pipeline/index.js';
+/**
+ * Compile one overridden graph, hand that exact graph to createApplication,
+ * and drive its controllers through the production HTTP router.
+ */
+export function createTestApp(rootModule, options = {}) {
+    const compiled = compileModule(rootModule, options.overrides ?? []);
+    const applicationOptions = options.observability === undefined ? {} : { observability: options.observability };
+    const application = createApplication(rootModule, withCompiledApplication(applicationOptions, compiled));
+    const router = createRouter(options.observability);
+    for (const binding of applicationControllersOf(application)) {
+        if (binding.kind === 'eager') {
+            router.register(binding.controller);
+        }
+        else {
+            router.registerDeferred(binding.controller, binding.instance);
+        }
+    }
+    return {
+        request: req => router.handle(req),
+        get: (token) => resolveFrom(application.container, token),
+        init: application.init,
+        [Symbol.asyncDispose]: application[Symbol.asyncDispose],
+    };
+}
+function resolveFrom(container, token) {
+    return container.resolve(token);
+}
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EACL,aAAa,EACb,iBAAiB,GAMlB,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAkD,MAAM,sBAAsB,CAAC;AAepG;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,UAAuB,EAAE,OAAO,GAAmB,EAAE;IACjF,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,kBAAkB,GACtB,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzG,MAAM,MAAM,GAAW,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,wBAAwB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QAClC,GAAG,EAAE,CAAI,KAAe,EAAK,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;QACzE,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAI,SAAoB,EAAE,KAAe;IAC3D,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC"}

package/dist/traced-router.d.ts

@@ -0,0 +1,5 @@
+import type { Observability } from '@zmdb/app/observability';
+import { type Router } from './pipeline/index.js';
+/** Build the HTTP router with the app-owned observability ports. */
+export declare function createTracedRouter(observability?: Observability): Router;
+//# sourceMappingURL=traced-router.d.ts.map

package/dist/traced-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traced-router.d.ts","sourceRoot":"","sources":["../src/traced-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAEhE,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,aAAa,GAAE,aAAkB,GAAG,MAAM,CAE5E"}

package/dist/traced-router.js

@@ -0,0 +1,6 @@
+import { createRouter } from './pipeline/index.js';
+/** Build the HTTP router with the app-owned observability ports. */
+export function createTracedRouter(observability = {}) {
+    return createRouter(observability);
+}
+//# sourceMappingURL=traced-router.js.map

package/dist/traced-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traced-router.js","sourceRoot":"","sources":["../src/traced-router.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAe,MAAM,qBAAqB,CAAC;AAEhE,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,aAAa,GAAkB,EAAE;IAClE,OAAO,YAAY,CAAC,aAAa,CAAC,CAAC;AACrC,CAAC"}

package/dist/upload/index.d.ts

@@ -0,0 +1,28 @@
+export interface UploadLimits {
+    readonly maxParts: number;
+    readonly maxPartBytes: number;
+    readonly maxTotalBytes: number;
+    readonly maxFieldNameBytes: number;
+    readonly maxFilenameBytes: number;
+    readonly maxPartHeaderBytes: number;
+}
+export declare const UPLOAD_DEFAULTS: UploadLimits;
+export interface UploadPart {
+    readonly name: string;
+    readonly filename: string | undefined;
+    readonly declaredType: string | undefined;
+    readonly bytes: Uint8Array<ArrayBuffer>;
+}
+export interface Multipart {
+    readonly fields: Readonly<Record<string, string>>;
+    readonly files: readonly UploadPart[];
+}
+/**
+ * Parse one bounded `multipart/form-data` body without decoding file contents.
+ *
+ * The adapter's `maxBodyBytes` is the transfer-time limit. This function checks
+ * `maxTotalBytes` before scanning and then stops each bounded scan at the first
+ * exceeded part/header limit, before decoding or returning that region.
+ */
+export declare function parseMultipart(rawBody: unknown, contentType: string, overrides?: Partial<UploadLimits>): Multipart;
+//# sourceMappingURL=index.d.ts.map

package/dist/upload/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/upload/index.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,eAAO,MAAM,eAAe,EAAE,YAO5B,CAAC;AAEH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;CACvC;AAkXD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,OAAO,CAAC,YAAY,CAAM,GACpC,SAAS,CAsEX"}