@zuplo/cli 7.4.7 → 7.5.1

package/node_modules/@zuplo/runtime/out/types/index.d.ts

@@ -1065,6 +1065,154 @@ export declare interface AIGatewaySemanticCacheV2InboundPolicyOptions {
   onUnknownShape?: OnUnknownShape_2;
 }
 
+/**
+ * Reads and writes the Smart Router result for an AI Gateway request.
+ *
+ * The built-in Smart Router policy `set()`s this after a successful
+ * classification. Custom policies can `get()` it later in the same request,
+ * or `set()` a compatible result of their own.
+ *
+ * @public
+ * @example
+ * ```typescript
+ * import { AIGatewaySmartRouter } from "@zuplo/runtime";
+ *
+ * const result = AIGatewaySmartRouter.get(context);
+ * if (result?.profile.intent === "code") {
+ *   // ...
+ * }
+ * ```
+ */
+export declare const AIGatewaySmartRouter: {
+  set(context: ZuploContext, result: AIGatewaySmartRouterResult): void;
+  get(context: ZuploContext): AIGatewaySmartRouterResult | undefined;
+};
+
+/**
+ * Prompt-complexity label produced by Smart Router.
+ *
+ * @public
+ */
+export declare type AIGatewaySmartRouterComplexity = "low" | "medium" | "high";
+
+/**
+ * Smart Router Inbound Policy for the AI Gateway
+ * @title Smart Router
+ * @product ai-gateway
+ * @requiresAI
+ *
+ * Classifies the last user prompt by calling a dedicated classifier AI
+ * Gateway app, stores the result on `AIGatewaySmartRouter`, and
+ * optionally overwrites completions routing from `modelsByComplexity`.
+ * Classification failures, timeouts, and invalid options fail open: the
+ * original request is forwarded.
+ *
+ * @param request - The ZuploRequest
+ * @param context - The ZuploContext
+ * @param options - The policy options set in policies.json
+ * @param policyName - The name of the policy as set in policies.json
+ * @returns A Request or a Response
+ */
+export declare function AIGatewaySmartRouterInboundPolicy(
+  request: ZuploRequest,
+  context: ZuploContext,
+  unparsedOptions: unknown,
+  policyName: string
+): Promise<ZuploRequest | Response>;
+
+/**
+ * Options for the Smart Router policy: classify the last user prompt with a dedicated classifier AI Gateway app, then optionally route by complexity.
+ * @public
+ */
+export declare interface AIGatewaySmartRouterInboundPolicyOptions {
+  classifierAppID: ClassifierAppID;
+  classifierAppApiKey: ClassifierAppAPIKey;
+  classifierModel: ClassifierModel;
+  smartRoutingEnabled?: SmartRoutingEnabled;
+  modelsByComplexity?: ModelsByComplexity;
+  intents?: Intents;
+  classifierPrompt?: ClassifierPrompt;
+  minConfidenceForRouting?: MinimumConfidenceForRouting;
+  classifierTimeoutMs?: ClassifierTimeoutMs;
+  maxPromptChars?: MaxPromptCharacters;
+}
+
+/**
+ * Structured classification of the last user prompt.
+ *
+ * @public
+ */
+export declare interface AIGatewaySmartRouterProfile {
+  intent: string;
+  complexity: AIGatewaySmartRouterComplexity;
+  confidence: number;
+  reasons: string[];
+}
+
+/**
+ * Where the classified text was taken from on the request.
+ *
+ * @public
+ */
+export declare type AIGatewaySmartRouterPromptSource = "user" | "prior-user";
+
+/**
+ * Why Smart Router did or did not change the request's model.
+ *
+ * @public
+ */
+export declare type AIGatewaySmartRouterReason =
+  | "applied"
+  | "disabled"
+  | "low-confidence"
+  | "no-model"
+  | "internal-error"
+  | "unknown-intent";
+
+/**
+ * Result produced by the Smart Router policy for the current request.
+ * Custom inbound policies can read this after Smart Router runs.
+ *
+ * @public
+ */
+export declare interface AIGatewaySmartRouterResult {
+  profile: AIGatewaySmartRouterProfile;
+  usage: AIGatewaySmartRouterTokenUsage;
+  classifierModel: string;
+  routing: AIGatewaySmartRouterRoutingDecision;
+  durationMs: number;
+  promptSource: AIGatewaySmartRouterPromptSource;
+  promptLength: number;
+  promptTruncated: boolean;
+  unknownIntent: boolean;
+  smartRouting: {
+    enabled: boolean;
+    applied: boolean;
+    reason: AIGatewaySmartRouterReason;
+    minConfidence: number;
+  };
+}
+
+/**
+ * Model chosen from `modelsByComplexity` for the classified complexity, if any.
+ *
+ * @public
+ */
+export declare interface AIGatewaySmartRouterRoutingDecision {
+  model?: string;
+}
+
+/**
+ * Classifier token usage reported by the classifier chat/completions call.
+ *
+ * @public
+ */
+export declare interface AIGatewaySmartRouterTokenUsage {
+  promptTokens: number;
+  completionTokens: number;
+  totalTokens: number;
+}
+
 /**
  * The options for this policy.
  * @public
@@ -3589,6 +3737,36 @@ declare type Claim = string;
  */
 declare type ClaimCheck = EqualsRule | InRule | StartsWithRule;
 
+/**
+ * API key sent as `Authorization: Bearer` when invoking the classifier app.
+ * @public
+ */
+declare type ClassifierAppAPIKey = string;
+
+/**
+ * The AI Gateway application id whose `/v1/chat/completions` route runs the classifier. The policy calls `/{classifierAppID}/v1/chat/completions` via `context.invokeRoute`.
+ * @public
+ */
+declare type ClassifierAppID = string;
+
+/**
+ * The `providerName/model` reference the classifier chat/completions request should use.
+ * @public
+ */
+declare type ClassifierModel = string;
+
+/**
+ * System prompt for the classifier. If it includes `{{intents}}`, that placeholder is replaced with the configured intent id/description list. A string or an array of lines (joined with newlines). Omit to use the built-in classifier prompt.
+ * @public
+ */
+declare type ClassifierPrompt = string | [string, ...string[]];
+
+/**
+ * How long to wait for the classifier `invokeRoute` call before skipping classification and forwarding the original request.
+ * @public
+ */
+declare type ClassifierTimeoutMs = number;
+
 /**
  * Removes all headers from the incoming request except for those in the exclude list.
  *
@@ -5778,6 +5956,12 @@ declare interface HeaderCredentialsConfig {
   headerName: string;
 }
 
+/**
+ * Model used for prompts classified as high complexity.
+ * @public
+ */
+declare type HighComplexityModel = string;
+
 /**
  * Sets HTTP deprecation headers on the outgoing response following the IETF
  * HTTP Deprecation Header standard. Supports the Deprecation, Sunset, and Link
@@ -7654,6 +7838,35 @@ declare interface InRule {
   in: [string | number | boolean, ...(string | number | boolean)[]];
 }
 
+/**
+ * Short description shown to the classifier for this intent.
+ * @public
+ */
+declare type IntentDescription = string;
+
+/**
+ * Stable intent identifier written into the classifier JSON schema enum.
+ * @public
+ */
+declare type IntentID = string;
+
+/**
+ * Labels the classifier may assign. Used to build the JSON schema enum and injected into `classifierPrompt` at `{{intents}}`. Omit to use the built-in taxonomy (code, summarization, translation, qa, conversation, classification, creative_writing, agentic, document_qa, other).
+ *
+ * @minItems 1
+ * @public
+ */
+declare type Intents = [
+  {
+    id: IntentID;
+    description: IntentDescription;
+  },
+  ...{
+    id: IntentID;
+    description: IntentDescription;
+  }[],
+];
+
 /**
  * Restricts which client IP addresses can call a route using an allow list, a
  * deny list, or both. Entries are individual IP addresses or CIDR ranges, in
@@ -8298,12 +8511,24 @@ declare type LokiTransportVersion = 1 | 2;
 
 /* Excluded from this release type: LookupResult */
 
+/**
+ * Model used for prompts classified as low complexity.
+ * @public
+ */
+declare type LowComplexityModel = string;
+
 /**
  * Skip caching entirely when the conversation has more than this many messages. Unset by default (no limit). Set a bound to guard against topic drift: the cache key covers only the last recentMessageCount messages, so the deeper a conversation goes, the more likely a match on recent messages alone ignores earlier context that should change the answer.
  * @public
  */
 declare type MaxConversationLength = number;
 
+/**
+ * Maximum characters of user prompt sent to the classifier. Longer prompts are truncated.
+ * @public
+ */
+declare type MaxPromptCharacters = number;
+
 /**
  * Authenticate MCP gateway requests using a gateway-issued OAuth access token,
  * with browser login delegated to Auth0.
@@ -10087,6 +10312,12 @@ export declare interface McpWorkosOAuthInboundPolicyOptions {
   };
 }
 
+/**
+ * Model used for prompts classified as medium complexity.
+ * @public
+ */
+declare type MediumComplexityModel = string;
+
 declare interface MemoryCacheOptions {
   maxSize: number;
 }
@@ -10270,6 +10501,12 @@ declare interface MetricsType {
   responseContentLength?: boolean;
 }
 
+/**
+ * Minimum confidence (0–1) required before applying model routing. Unknown intents are capped strictly below this threshold.
+ * @public
+ */
+declare type MinimumConfidenceForRouting = number;
+
 /**
  * The options for this policy.
  * @public
@@ -10322,6 +10559,16 @@ declare interface Models {
   embeddings?: EmbeddingsModels;
 }
 
+/**
+ * Optional `providerName/model` routing by classified complexity. Used only when `smartRoutingEnabled` is true.
+ * @public
+ */
+declare interface ModelsByComplexity {
+  low?: LowComplexityModel;
+  medium?: MediumComplexityModel;
+  high?: HighComplexityModel;
+}
+
 declare type Modify<T, R> = Omit<T, keyof R> & R;
 
 declare interface MoesifContext {
@@ -13907,6 +14154,12 @@ export declare interface SleepInboundPolicyOptions {
   sleepInMs: number;
 }
 
+/**
+ * When true, apply model routing from `modelsByComplexity` when confidence is high enough and the intent is known. Classification still runs when false.
+ * @public
+ */
+declare type SmartRoutingEnabled = boolean;
+
 declare interface SplunkLoggingOptions {
   /**
    * The URL for the Splunk HTTP Event Collector (HEC) endpoint.

package/node_modules/@zuplo/runtime/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "7.4.7",
+  "version": "7.5.1",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {

package/node_modules/hono/dist/cjs/helper/ssg/ssg.js

@@ -206,7 +206,7 @@ const saveContentToFile = async (data, fsModule, outDir, extensionMap) => {
   const { routePath, content, mimeType } = awaitedData;
   const filePath = generateFilePath(routePath, outDir, mimeType, extensionMap);
   const dirPath = (0, import_utils2.dirname)(filePath);
-  if (!createdDirs.has(dirPath)) {
+  if (dirPath !== "" && !createdDirs.has(dirPath)) {
     await fsModule.mkdir(dirPath, { recursive: true });
     createdDirs.add(dirPath);
   }

package/node_modules/hono/dist/cjs/helper/ssg/utils.js

@@ -33,8 +33,14 @@ const dirname = (path) => {
 const normalizePath = (path) => {
   return path.replace(/(\\)/g, "/").replace(/\/$/g, "");
 };
-const handleParent = (resultPaths, beforeParentFlag) => {
-  if (resultPaths.length === 0 || beforeParentFlag) {
+const getUncRoot = (path) => {
+  const uncRoot = path.replace(/\\/g, "/").match(/^\/\/([^/]+)\/([^/]+)/);
+  if (uncRoot) {
+    return `${uncRoot[1].toLowerCase()}/${uncRoot[2].toLowerCase()}`;
+  }
+};
+const handleParent = (resultPaths) => {
+  if (resultPaths.length === 0 || resultPaths[resultPaths.length - 1] === "..") {
     resultPaths.push("..");
   } else {
     resultPaths.pop();
@@ -47,22 +53,20 @@ const handleNonDot = (path, resultPaths) => {
   }
 };
 const handleSegments = (paths, resultPaths) => {
-  let beforeParentFlag = false;
   for (const path of paths) {
     if (path === "..") {
-      handleParent(resultPaths, beforeParentFlag);
-      beforeParentFlag = true;
+      handleParent(resultPaths);
     } else {
       handleNonDot(path, resultPaths);
-      beforeParentFlag = false;
     }
   }
 };
 const joinPaths = (...paths) => {
+  const hasUncPrefix = getUncRoot(paths[0]) !== void 0;
   paths = paths.map(normalizePath);
   const resultPaths = [];
   handleSegments(paths.join("/").split("/"), resultPaths);
-  return (paths[0][0] === "/" ? "/" : "") + resultPaths.join("/");
+  return (hasUncPrefix ? "//" : paths[0][0] === "/" ? "/" : "") + resultPaths.join("/");
 };
 const filterStaticGenerateRoutes = (hono) => {
   return hono.routes.reduce((acc, { method, handler, path }) => {
@@ -76,10 +80,26 @@ const filterStaticGenerateRoutes = (hono) => {
 const isDynamicRoute = (path) => {
   return path.split("/").some((segment) => segment.startsWith(":") || segment.includes("*"));
 };
+const toSegments = (path) => path === "" ? [] : path.split("/");
+const getPathRoot = (path) => {
+  const normalizedPath = path.replace(/\\/g, "/");
+  const uncRoot = getUncRoot(normalizedPath);
+  if (uncRoot) {
+    return `unc:${uncRoot}`;
+  }
+  const driveRoot = normalizedPath.match(/^([A-Za-z]):/);
+  if (driveRoot) {
+    const kind = normalizedPath[2] === "/" ? "drive-absolute" : "drive-relative";
+    return `${kind}:${driveRoot[1].toLowerCase()}`;
+  }
+  return normalizedPath.startsWith("/") ? "absolute" : "relative";
+};
 const ensureWithinOutDir = (outDir, filePath) => {
-  const normalizedOutDir = joinPaths("/", outDir);
-  const normalizedFilePath = joinPaths("/", filePath);
-  if (normalizedFilePath !== normalizedOutDir && !normalizedFilePath.startsWith(`${normalizedOutDir}/`)) {
+  const outDirSegments = toSegments(joinPaths(outDir));
+  const filePathSegments = toSegments(joinPaths(filePath));
+  const hasMismatchedPathRoot = getPathRoot(outDir) !== getPathRoot(filePath);
+  const climbsAboveOutDir = filePathSegments[outDirSegments.length] === "..";
+  if (hasMismatchedPathRoot || filePathSegments.length <= outDirSegments.length || !outDirSegments.every((segment, i) => segment === filePathSegments[i]) || climbsAboveOutDir) {
     throw new Error(`Path traversal detected: "${filePath}" is outside the output directory`);
   }
 };

package/node_modules/hono/dist/cjs/middleware/cache/index.js

@@ -44,7 +44,7 @@ const parseVaryDirectives = (vary) => {
 };
 const createCacheKey = (key, requestUrl, request, varyHeaders) => {
   const url = new URL(cacheKeyPath, requestUrl);
-  url.searchParams.append(cacheKeyParameter, key.split("#", 1)[0]);
+  url.searchParams.append(cacheKeyParameter, key);
   url.searchParams.append(cacheMethodKeyParameter, request.method);
   if (request.method === "QUERY") {
     url.searchParams.append(queryDigestKeyParameter, request.digest);

package/node_modules/hono/dist/cjs/utils/body.js

@@ -21,6 +21,8 @@ __export(body_exports, {
 });
 module.exports = __toCommonJS(body_exports);
 var import_buffer = require("./buffer");
+const MAX_NESTING_DEPTH = 32;
+const MAX_NESTED_OBJECTS = 1e4;
 const isRawRequest = (request) => "headers" in request;
 const parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
   const { all = false, dot = false } = options;
@@ -53,6 +55,7 @@ async function parseFormData(request, options) {
 }
 function convertFormDataToBodyData(formData, options) {
   const form = /* @__PURE__ */ Object.create(null);
+  const nestingState = { count: 0 };
   formData.forEach((value, key) => {
     const shouldParseAllValues = options.all || key.endsWith("[]");
     if (!shouldParseAllValues) {
@@ -65,7 +68,7 @@ function convertFormDataToBodyData(formData, options) {
     Object.entries(form).forEach(([key, value]) => {
       const shouldParseDotValues = key.includes(".");
       if (shouldParseDotValues) {
-        handleParsingNestedValues(form, key, value);
+        handleParsingNestedValues(form, key, value, nestingState);
         delete form[key];
       }
     });
@@ -88,23 +91,32 @@ const handleParsingAllValues = (form, key, value) => {
     }
   }
 };
-const handleParsingNestedValues = (form, key, value) => {
+const handleParsingNestedValues = (form, key, value, state) => {
   if (/(?:^|\.)__proto__\./.test(key)) {
     return;
   }
   let nestedForm = form;
-  const keys = key.split(".");
+  const keys = key.split(".", MAX_NESTING_DEPTH + 2);
+  if (keys.length > MAX_NESTING_DEPTH + 1) {
+    throwNestingLimitExceeded();
+  }
   keys.forEach((key2, index) => {
     if (index === keys.length - 1) {
       nestedForm[key2] = value;
     } else {
       if (!nestedForm[key2] || typeof nestedForm[key2] !== "object" || Array.isArray(nestedForm[key2]) || nestedForm[key2] instanceof File) {
+        if (state.count++ >= MAX_NESTED_OBJECTS) {
+          throwNestingLimitExceeded();
+        }
         nestedForm[key2] = /* @__PURE__ */ Object.create(null);
       }
       nestedForm = nestedForm[key2];
     }
   });
 };
+const throwNestingLimitExceeded = () => {
+  throw new Error("Nesting limit exceeded");
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   parseBody

package/node_modules/hono/dist/cjs/utils/url.js

@@ -119,7 +119,11 @@ const getPath = (request) => {
 };
 const getQueryStrings = (url) => {
   const queryIndex = url.indexOf("?", 8);
-  return queryIndex === -1 ? "" : "?" + url.slice(queryIndex + 1);
+  if (queryIndex === -1) {
+    return "";
+  }
+  const hashIndex = url.indexOf("#", 8);
+  return hashIndex === -1 ? url.slice(queryIndex) : queryIndex < hashIndex ? url.slice(queryIndex, hashIndex) : "";
 };
 const getPathNoStrict = (request) => {
   const result = getPath(request);
@@ -166,6 +170,10 @@ const _decodeURI = (value) => {
   return tryDecodeURIComponent(value);
 };
 const _getQueryParam = (url, key, multiple) => {
+  const hashIndex = url.indexOf("#", 8);
+  if (hashIndex !== -1) {
+    url = url.slice(0, hashIndex);
+  }
   let encoded;
   if (!multiple && key && key.indexOf("%") === -1 && key.indexOf("+") === -1) {
     let keyIndex2 = url.indexOf("?", 8);

package/node_modules/hono/dist/helper/ssg/ssg.js

@@ -184,7 +184,7 @@ var saveContentToFile = async (data, fsModule, outDir, extensionMap) => {
   const { routePath, content, mimeType } = awaitedData;
   const filePath = generateFilePath(routePath, outDir, mimeType, extensionMap);
   const dirPath = dirname(filePath);
-  if (!createdDirs.has(dirPath)) {
+  if (dirPath !== "" && !createdDirs.has(dirPath)) {
     await fsModule.mkdir(dirPath, { recursive: true });
     createdDirs.add(dirPath);
   }

package/node_modules/hono/dist/helper/ssg/utils.js

@@ -8,8 +8,14 @@ var dirname = (path) => {
 var normalizePath = (path) => {
   return path.replace(/(\\)/g, "/").replace(/\/$/g, "");
 };
-var handleParent = (resultPaths, beforeParentFlag) => {
-  if (resultPaths.length === 0 || beforeParentFlag) {
+var getUncRoot = (path) => {
+  const uncRoot = path.replace(/\\/g, "/").match(/^\/\/([^/]+)\/([^/]+)/);
+  if (uncRoot) {
+    return `${uncRoot[1].toLowerCase()}/${uncRoot[2].toLowerCase()}`;
+  }
+};
+var handleParent = (resultPaths) => {
+  if (resultPaths.length === 0 || resultPaths[resultPaths.length - 1] === "..") {
     resultPaths.push("..");
   } else {
     resultPaths.pop();
@@ -22,22 +28,20 @@ var handleNonDot = (path, resultPaths) => {
   }
 };
 var handleSegments = (paths, resultPaths) => {
-  let beforeParentFlag = false;
   for (const path of paths) {
     if (path === "..") {
-      handleParent(resultPaths, beforeParentFlag);
-      beforeParentFlag = true;
+      handleParent(resultPaths);
     } else {
       handleNonDot(path, resultPaths);
-      beforeParentFlag = false;
     }
   }
 };
 var joinPaths = (...paths) => {
+  const hasUncPrefix = getUncRoot(paths[0]) !== void 0;
   paths = paths.map(normalizePath);
   const resultPaths = [];
   handleSegments(paths.join("/").split("/"), resultPaths);
-  return (paths[0][0] === "/" ? "/" : "") + resultPaths.join("/");
+  return (hasUncPrefix ? "//" : paths[0][0] === "/" ? "/" : "") + resultPaths.join("/");
 };
 var filterStaticGenerateRoutes = (hono) => {
   return hono.routes.reduce((acc, { method, handler, path }) => {
@@ -51,10 +55,26 @@ var filterStaticGenerateRoutes = (hono) => {
 var isDynamicRoute = (path) => {
   return path.split("/").some((segment) => segment.startsWith(":") || segment.includes("*"));
 };
+var toSegments = (path) => path === "" ? [] : path.split("/");
+var getPathRoot = (path) => {
+  const normalizedPath = path.replace(/\\/g, "/");
+  const uncRoot = getUncRoot(normalizedPath);
+  if (uncRoot) {
+    return `unc:${uncRoot}`;
+  }
+  const driveRoot = normalizedPath.match(/^([A-Za-z]):/);
+  if (driveRoot) {
+    const kind = normalizedPath[2] === "/" ? "drive-absolute" : "drive-relative";
+    return `${kind}:${driveRoot[1].toLowerCase()}`;
+  }
+  return normalizedPath.startsWith("/") ? "absolute" : "relative";
+};
 var ensureWithinOutDir = (outDir, filePath) => {
-  const normalizedOutDir = joinPaths("/", outDir);
-  const normalizedFilePath = joinPaths("/", filePath);
-  if (normalizedFilePath !== normalizedOutDir && !normalizedFilePath.startsWith(`${normalizedOutDir}/`)) {
+  const outDirSegments = toSegments(joinPaths(outDir));
+  const filePathSegments = toSegments(joinPaths(filePath));
+  const hasMismatchedPathRoot = getPathRoot(outDir) !== getPathRoot(filePath);
+  const climbsAboveOutDir = filePathSegments[outDirSegments.length] === "..";
+  if (hasMismatchedPathRoot || filePathSegments.length <= outDirSegments.length || !outDirSegments.every((segment, i) => segment === filePathSegments[i]) || climbsAboveOutDir) {
     throw new Error(`Path traversal detected: "${filePath}" is outside the output directory`);
   }
 };

package/node_modules/hono/dist/middleware/cache/index.js

@@ -23,7 +23,7 @@ var parseVaryDirectives = (vary) => {
 };
 var createCacheKey = (key, requestUrl, request, varyHeaders) => {
   const url = new URL(cacheKeyPath, requestUrl);
-  url.searchParams.append(cacheKeyParameter, key.split("#", 1)[0]);
+  url.searchParams.append(cacheKeyParameter, key);
   url.searchParams.append(cacheMethodKeyParameter, request.method);
   if (request.method === "QUERY") {
     url.searchParams.append(queryDigestKeyParameter, request.digest);

package/node_modules/hono/dist/types/utils/url.d.ts

@@ -19,6 +19,10 @@ export declare const tryDecode: (str: string, decoder: Decoder) => string;
  */
 export declare const tryDecodeURI: (str: string) => string;
 export declare const getPath: (request: Request) => string;
+/**
+ * @deprecated
+ * Use the `URL` API instead.
+ */
 export declare const getQueryStrings: (url: string) => string;
 export declare const getPathNoStrict: (request: Request) => string;
 /**

package/node_modules/hono/dist/utils/body.js

@@ -1,5 +1,7 @@
 // src/utils/body.ts
 import { bufferToFormData } from "./buffer.js";
+var MAX_NESTING_DEPTH = 32;
+var MAX_NESTED_OBJECTS = 1e4;
 var isRawRequest = (request) => "headers" in request;
 var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
   const { all = false, dot = false } = options;
@@ -32,6 +34,7 @@ async function parseFormData(request, options) {
 }
 function convertFormDataToBodyData(formData, options) {
   const form = /* @__PURE__ */ Object.create(null);
+  const nestingState = { count: 0 };
   formData.forEach((value, key) => {
     const shouldParseAllValues = options.all || key.endsWith("[]");
     if (!shouldParseAllValues) {
@@ -44,7 +47,7 @@ function convertFormDataToBodyData(formData, options) {
     Object.entries(form).forEach(([key, value]) => {
       const shouldParseDotValues = key.includes(".");
       if (shouldParseDotValues) {
-        handleParsingNestedValues(form, key, value);
+        handleParsingNestedValues(form, key, value, nestingState);
         delete form[key];
       }
     });
@@ -67,23 +70,32 @@ var handleParsingAllValues = (form, key, value) => {
     }
   }
 };
-var handleParsingNestedValues = (form, key, value) => {
+var handleParsingNestedValues = (form, key, value, state) => {
   if (/(?:^|\.)__proto__\./.test(key)) {
     return;
   }
   let nestedForm = form;
-  const keys = key.split(".");
+  const keys = key.split(".", MAX_NESTING_DEPTH + 2);
+  if (keys.length > MAX_NESTING_DEPTH + 1) {
+    throwNestingLimitExceeded();
+  }
   keys.forEach((key2, index) => {
     if (index === keys.length - 1) {
       nestedForm[key2] = value;
     } else {
       if (!nestedForm[key2] || typeof nestedForm[key2] !== "object" || Array.isArray(nestedForm[key2]) || nestedForm[key2] instanceof File) {
+        if (state.count++ >= MAX_NESTED_OBJECTS) {
+          throwNestingLimitExceeded();
+        }
         nestedForm[key2] = /* @__PURE__ */ Object.create(null);
       }
       nestedForm = nestedForm[key2];
     }
   });
 };
+var throwNestingLimitExceeded = () => {
+  throw new Error("Nesting limit exceeded");
+};
 export {
   parseBody
 };