actor-ts 0.9.1 → 0.11.0

package/dist/http/middleware/index.d.ts

@@ -0,0 +1,30 @@
+export { BearerTokenAuth } from './BearerToken.js';
+export type { BearerTokenAuthOptions } from './BearerToken.js';
+export { IpAllowlist } from './IpAllowlist.js';
+export type { IpAllowlistOptions } from './IpAllowlist.js';
+export { strictTransportSecurity, hsts } from './Hsts.js';
+export { HstsOptions, HstsOptionsBuilder, HstsOptionsValidator } from './HstsOptions.js';
+export type { HstsOptionsType } from './HstsOptions.js';
+export { contentSecurityPolicy } from './Csp.js';
+export { CspOptions, CspOptionsBuilder } from './CspOptions.js';
+export type { CspOptionsType, CspDirectives } from './CspOptions.js';
+export { securityHeaders } from './SecurityHeaders.js';
+export { SecurityHeadersOptions, SecurityHeadersOptionsBuilder } from './SecurityHeadersOptions.js';
+export type { SecurityHeadersOptionsType } from './SecurityHeadersOptions.js';
+export { cors } from './Cors.js';
+export type { CorsRouteOptions } from './Cors.js';
+export { CorsOptions, CorsOptionsBuilder, CorsOptionsValidator } from './CorsOptions.js';
+export type { CorsOptionsType, CorsOrigin } from './CorsOptions.js';
+export { csrfProtection, requireSameOrigin, readCsrfToken } from './Csrf.js';
+export { CsrfOptions, CsrfOptionsBuilder, CsrfOptionsValidator, SameOriginOptions, SameOriginOptionsBuilder } from './CsrfOptions.js';
+export type { CsrfOptionsType, CsrfCookieOptions, SameOriginOptionsType } from './CsrfOptions.js';
+export { requestId } from './RequestId.js';
+export { RequestIdOptions, RequestIdOptionsBuilder } from './RequestIdOptions.js';
+export type { RequestIdOptionsType } from './RequestIdOptions.js';
+export { BasicAuth } from './BasicAuth.js';
+export { BasicAuthOptions, BasicAuthOptionsBuilder } from './BasicAuthOptions.js';
+export type { BasicAuthOptionsType } from './BasicAuthOptions.js';
+export { requestTimeout } from './Timeout.js';
+export { TimeoutOptions, TimeoutOptionsBuilder, TimeoutOptionsValidator } from './TimeoutOptions.js';
+export type { TimeoutOptionsType } from './TimeoutOptions.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/http/middleware/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,YAAY,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAG3D,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACzF,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAChE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACpG,YAAY,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAG9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACzF,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGpE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AACtI,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAGlG,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAClF,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAClF,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACrG,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/http/middleware/index.js

@@ -0,0 +1,23 @@
+export { BearerTokenAuth } from './BearerToken.js';
+export { IpAllowlist } from './IpAllowlist.js';
+// Security headers — HSTS, CSP, and the securityHeaders bundle.
+export { strictTransportSecurity, hsts } from './Hsts.js';
+export { HstsOptions, HstsOptionsBuilder, HstsOptionsValidator } from './HstsOptions.js';
+export { contentSecurityPolicy } from './Csp.js';
+export { CspOptions, CspOptionsBuilder } from './CspOptions.js';
+export { securityHeaders } from './SecurityHeaders.js';
+export { SecurityHeadersOptions, SecurityHeadersOptionsBuilder } from './SecurityHeadersOptions.js';
+// CORS — a route directive (expanded by the compiler), not plain middleware.
+export { cors } from './Cors.js';
+export { CorsOptions, CorsOptionsBuilder, CorsOptionsValidator } from './CorsOptions.js';
+// CSRF — stateless double-submit + the lightweight same-origin check.
+export { csrfProtection, requireSameOrigin, readCsrfToken } from './Csrf.js';
+export { CsrfOptions, CsrfOptionsBuilder, CsrfOptionsValidator, SameOriginOptions, SameOriginOptionsBuilder } from './CsrfOptions.js';
+// Request id, HTTP Basic auth, request timeout.
+export { requestId } from './RequestId.js';
+export { RequestIdOptions, RequestIdOptionsBuilder } from './RequestIdOptions.js';
+export { BasicAuth } from './BasicAuth.js';
+export { BasicAuthOptions, BasicAuthOptionsBuilder } from './BasicAuthOptions.js';
+export { requestTimeout } from './Timeout.js';
+export { TimeoutOptions, TimeoutOptionsBuilder, TimeoutOptionsValidator } from './TimeoutOptions.js';
+//# sourceMappingURL=index.js.map

package/dist/http/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/middleware/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,gEAAgE;AAChE,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAEzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAGpG,6EAA6E;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGzF,sEAAsE;AACtE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAGtI,gDAAgD;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAElF,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAElF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/http/static/DirectoryListing.d.ts

@@ -0,0 +1,16 @@
+export interface ListingEntry {
+    readonly name: string;
+    readonly isDirectory: boolean;
+    readonly size: number;
+    readonly mtime: Date;
+}
+export interface ListingInput {
+    /** Request path, for the heading (escaped). */
+    readonly urlPath: string;
+    /** Omit the `../` parent link at the mount root. */
+    readonly atMountRoot: boolean;
+    readonly entries: readonly ListingEntry[];
+}
+/** Render a directory listing as a self-contained HTML document. */
+export declare function renderDirectoryListing(input: ListingInput): string;
+//# sourceMappingURL=DirectoryListing.d.ts.map

package/dist/http/static/DirectoryListing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DirectoryListing.d.ts","sourceRoot":"","sources":["../../../src/http/static/DirectoryListing.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAC3C;AAOD,oEAAoE;AACpE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CA0BlE"}

package/dist/http/static/DirectoryListing.js

@@ -0,0 +1,39 @@
+/**
+ * Minimal HTML directory listing.  Entry names are HTML-escaped in text
+ * and URL-encoded in hrefs, so a filename like `<script>x</script>` can
+ * neither break out of the markup nor the attribute (XSS defence).
+ */
+import { escapeHtml } from '../Html.js';
+function formatMtime(d) {
+    // YYYY-MM-DD HH:mm (UTC) — deterministic across runtimes.
+    return d.toISOString().slice(0, 16).replace('T', ' ');
+}
+/** Render a directory listing as a self-contained HTML document. */
+export function renderDirectoryListing(input) {
+    const sorted = [...input.entries].sort((a, b) => {
+        if (a.isDirectory !== b.isDirectory)
+            return a.isDirectory ? -1 : 1; // directories first
+        const an = a.name.toLowerCase();
+        const bn = b.name.toLowerCase();
+        return an < bn ? -1 : an > bn ? 1 : 0;
+    });
+    const rows = [];
+    if (!input.atMountRoot)
+        rows.push('<tr><td><a href="../">../</a></td><td></td><td></td></tr>');
+    for (const e of sorted) {
+        const suffix = e.isDirectory ? '/' : '';
+        const href = `${encodeURIComponent(e.name)}${suffix}`;
+        const label = `${escapeHtml(e.name)}${suffix}`;
+        const size = e.isDirectory ? '&ndash;' : String(e.size);
+        rows.push(`<tr><td><a href="${href}">${label}</a></td><td>${size}</td><td>${formatMtime(e.mtime)}</td></tr>`);
+    }
+    const title = `Index of ${escapeHtml(input.urlPath)}`;
+    return '<!doctype html><html lang="en"><head><meta charset="utf-8">'
+        + '<meta name="viewport" content="width=device-width, initial-scale=1">'
+        + `<title>${title}</title>`
+        + '<style>body{font-family:system-ui,sans-serif;margin:2rem}'
+        + 'table{border-collapse:collapse;width:100%}'
+        + 'td{padding:.25rem .75rem;border-bottom:1px solid #ddd;font-family:monospace}</style>'
+        + `</head><body><h1>${title}</h1><table><tbody>${rows.join('')}</tbody></table></body></html>`;
+}
+//# sourceMappingURL=DirectoryListing.js.map

package/dist/http/static/DirectoryListing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DirectoryListing.js","sourceRoot":"","sources":["../../../src/http/static/DirectoryListing.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAiBxC,SAAS,WAAW,CAAC,CAAO;IAC1B,0DAA0D;IAC1D,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,sBAAsB,CAAC,KAAmB;IACxD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC9C,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW;YAAE,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;QACxF,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC/F,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,KAAK,KAAK,gBAAgB,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,OAAO,6DAA6D;UAChE,sEAAsE;UACtE,UAAU,KAAK,UAAU;UACzB,2DAA2D;UAC3D,4CAA4C;UAC5C,sFAAsF;UACtF,oBAAoB,KAAK,sBAAsB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,gCAAgC,CAAC;AACnG,CAAC"}

package/dist/http/static/StaticFiles.d.ts

@@ -0,0 +1,11 @@
+import { type Route } from '../Route.js';
+import { type StaticFilesOptions } from './StaticFilesOptions.js';
+/** Serve a single file at `filePath` with the correct content-type. */
+export declare function getFromFile(filePath: string, options?: StaticFilesOptions): Route;
+/** Serve files from a directory tree.  With `routePrefix`, mounts under it. */
+export declare function getFromDirectory(fsRoot: string, options?: StaticFilesOptions): Route;
+export declare function getFromDirectory(routePrefix: string, fsRoot: string, options?: StaticFilesOptions): Route;
+/** getFromDirectory with directory browsing forced on. */
+export declare function getFromBrowseableDirectory(fsRoot: string, options?: StaticFilesOptions): Route;
+export declare function getFromBrowseableDirectory(routePrefix: string, fsRoot: string, options?: StaticFilesOptions): Route;
+//# sourceMappingURL=StaticFiles.d.ts.map

package/dist/http/static/StaticFiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticFiles.d.ts","sourceRoot":"","sources":["../../../src/http/static/StaticFiles.ts"],"names":[],"mappings":"AAOA,OAAO,EAA+B,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AAMtE,OAAO,EAGL,KAAK,kBAAkB,EAExB,MAAM,yBAAyB,CAAC;AAgKjC,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,KAAK,CAOjF;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,KAAK,CAAC;AACtF,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,KAAK,CAAC;AAa3G,0DAA0D;AAC1D,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,KAAK,CAAC;AAChG,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,KAAK,CAAC"}

package/dist/http/static/StaticFiles.js

@@ -0,0 +1,202 @@
+/**
+ * Static file serving directives — the backend-agnostic replacement for
+ * reaching into `@fastify/static`.  Bodies are buffered into memory
+ * (bounded by `maxFileSize`); path handling is decode-once-then-validate
+ * with root confinement (see {@link resolveStaticPath}).
+ */
+import { basename, join, sep } from 'node:path';
+import { concat, get, path, redirect } from '../Route.js';
+import { Status } from '../types.js';
+import { contentTypeFor } from '../MimeTypes.js';
+import { readDirectory, readFileBytes, realPath, statPath } from './fsAccess.js';
+import { resolveStaticPath } from './staticPath.js';
+import { renderDirectoryListing } from './DirectoryListing.js';
+import { resolveStaticOptions, } from './StaticFilesOptions.js';
+const notFound = () => ({ status: Status.NotFound, body: { error: 'not found' } });
+const tooLarge = () => ({ status: 413, body: { error: 'file too large' } });
+function queryString(query) {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(query)) {
+        if (value === undefined)
+            continue;
+        if (Array.isArray(value))
+            for (const v of value)
+                params.append(key, v);
+        else
+            params.append(key, value);
+    }
+    const queryString = params.toString();
+    return queryString ? `?${queryString}` : '';
+}
+function weakEtag(stat) {
+    return `W/"${stat.size.toString(16)}-${Math.floor(stat.mtimeMs).toString(16)}"`;
+}
+/** If-None-Match (weak compare, `*`) takes precedence over If-Modified-Since. */
+function isNotModified(req, etag, mtimeMs, lastModified) {
+    const inm = req.headers['if-none-match'];
+    if (etag && inm !== undefined) {
+        if (inm.trim() === '*')
+            return true;
+        const strip = (t) => t.trim().replace(/^W\//, '');
+        return inm.split(',').some((t) => strip(t) === strip(etag));
+    }
+    const ims = req.headers['if-modified-since'];
+    if (lastModified && ims !== undefined) {
+        const since = Date.parse(ims);
+        // second-granularity comparison (Last-Modified has no sub-second part)
+        return !Number.isNaN(since) && Math.floor(mtimeMs / 1000) * 1000 <= since;
+    }
+    return false;
+}
+function parseRange(header, size) {
+    const rangeMatch = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
+    if (!rangeMatch)
+        return null; // multi-range or non-bytes unit → ignore, serve full 200
+    const [, startStr, endStr] = rangeMatch;
+    if (startStr === '' && endStr === '')
+        return null;
+    let start;
+    let end;
+    if (startStr === '') {
+        const suffix = parseInt(endStr, 10);
+        if (suffix === 0)
+            return 'unsatisfiable';
+        start = Math.max(0, size - suffix);
+        end = size - 1;
+    }
+    else {
+        start = parseInt(startStr, 10);
+        end = endStr === '' ? size - 1 : parseInt(endStr, 10);
+    }
+    if (start > end || start >= size)
+        return 'unsatisfiable';
+    if (end >= size)
+        end = size - 1;
+    return { start, end };
+}
+/** Build the response for a resolved, confirmed-regular file. */
+async function serveResolvedFile(fsPath, stat, req, settings, servedName) {
+    if (stat.size > settings.maxFileSize)
+        return tooLarge();
+    const isHead = req.method === 'HEAD';
+    const etag = settings.etag ? weakEtag(stat) : undefined;
+    const lastModified = settings.lastModified ? new Date(stat.mtimeMs).toUTCString() : undefined;
+    // The content-type goes on the response's `contentType` field, not a
+    // header — otherwise the backends' Uint8Array path overrides it with
+    // application/octet-stream (they gate the default on `contentType`).
+    const contentType = settings.contentType ?? contentTypeFor(servedName, settings.contentTypes);
+    const headers = {};
+    if (settings.cacheControl)
+        headers['cache-control'] = settings.cacheControl;
+    if (etag)
+        headers['etag'] = etag;
+    if (lastModified)
+        headers['last-modified'] = lastModified;
+    if (settings.ranges)
+        headers['accept-ranges'] = 'bytes';
+    if (isNotModified(req, etag, stat.mtimeMs, settings.lastModified)) {
+        return { status: Status.NotModified, headers, contentType, body: null };
+    }
+    const rangeHeader = settings.ranges ? req.headers['range'] : undefined;
+    if (rangeHeader !== undefined) {
+        const ifRange = req.headers['if-range'];
+        // A weak ETag can never satisfy If-Range; only an exact Last-Modified match does.
+        const honourRange = ifRange === undefined || ifRange === lastModified;
+        if (honourRange) {
+            const parsed = parseRange(rangeHeader, stat.size);
+            if (parsed === 'unsatisfiable') {
+                return { status: 416, headers: { ...headers, 'content-range': `bytes */${stat.size}` }, contentType, body: null };
+            }
+            if (parsed) {
+                const length = parsed.end - parsed.start + 1;
+                const rangeHeaders = {
+                    ...headers,
+                    'content-range': `bytes ${parsed.start}-${parsed.end}/${stat.size}`,
+                    'content-length': String(length),
+                };
+                if (isHead)
+                    return { status: 206, headers: rangeHeaders, contentType, body: null };
+                const bytes = await readFileBytes(fsPath);
+                return { status: 206, headers: rangeHeaders, contentType, body: bytes.subarray(parsed.start, parsed.end + 1) };
+            }
+        }
+    }
+    if (isHead)
+        return { status: Status.OK, headers: { ...headers, 'content-length': String(stat.size) }, contentType, body: null };
+    return { status: Status.OK, headers, contentType, body: await readFileBytes(fsPath) };
+}
+async function renderListing(fsPath, req, atMountRoot, settings) {
+    const entries = [];
+    for (const entry of await readDirectory(fsPath)) {
+        if (settings.dotfiles === 'deny' && entry.name.startsWith('.'))
+            continue;
+        const stat = await statPath(join(fsPath, entry.name));
+        if (!stat || (!stat.isFile && !stat.isDirectory))
+            continue; // skip broken symlinks / specials
+        entries.push({ name: entry.name, isDirectory: entry.isDirectory, size: stat.size, mtime: new Date(stat.mtimeMs) });
+    }
+    const html = renderDirectoryListing({ urlPath: req.path, atMountRoot, entries });
+    return {
+        status: Status.OK,
+        contentType: 'text/html; charset=utf-8',
+        headers: { 'x-content-type-options': 'nosniff', 'cache-control': 'no-store' },
+        body: req.method === 'HEAD' ? null : html,
+    };
+}
+async function serveFromDirectory(root, rawRest, req, settings) {
+    const resolved = resolveStaticPath(root, rawRest, { dotfiles: settings.dotfiles });
+    if (!resolved.ok)
+        return notFound();
+    const stat = await statPath(resolved.fsPath);
+    if (!stat)
+        return notFound();
+    if (settings.symlinks === 'within-root') {
+        const [realFile, realRoot] = await Promise.all([realPath(resolved.fsPath), realPath(root)]);
+        if (!realFile || !realRoot || (realFile !== realRoot && !realFile.startsWith(realRoot + sep)))
+            return notFound();
+    }
+    if (stat.isDirectory) {
+        if (!req.path.endsWith('/'))
+            return redirect(`${req.path}/${queryString(req.query)}`, Status.MovedPermanently);
+        for (const index of settings.indexFiles) {
+            const indexPath = join(resolved.fsPath, index);
+            const indexStat = await statPath(indexPath);
+            if (indexStat && indexStat.isFile)
+                return serveResolvedFile(indexPath, indexStat, req, settings, index);
+        }
+        const atMountRoot = rawRest.replace(/^\/+|\/+$/g, '') === '';
+        if (settings.browse)
+            return renderListing(resolved.fsPath, req, atMountRoot, settings);
+        return notFound();
+    }
+    if (!stat.isFile)
+        return notFound(); // device files (NUL, CON, …) stat as non-files
+    return serveResolvedFile(resolved.fsPath, stat, req, settings, basename(resolved.fsPath));
+}
+/** Serve a single file at `filePath` with the correct content-type. */
+export function getFromFile(filePath, options) {
+    const settings = resolveStaticOptions(options);
+    return get(async (req) => {
+        const stat = await statPath(filePath);
+        if (!stat || !stat.isFile)
+            return notFound();
+        return serveResolvedFile(filePath, stat, req, settings, basename(filePath));
+    });
+}
+export function getFromDirectory(a, b, c) {
+    const routePrefix = typeof b === 'string' ? a : undefined;
+    const fsRoot = typeof b === 'string' ? b : a;
+    const options = typeof b === 'string' ? c : b;
+    const settings = resolveStaticOptions(options);
+    const inner = concat(get((req) => serveFromDirectory(fsRoot, '', req, settings)), path('*', get((req) => serveFromDirectory(fsRoot, req.params['*'] ?? '', req, settings))));
+    return routePrefix !== undefined ? path(routePrefix, inner) : inner;
+}
+export function getFromBrowseableDirectory(a, b, c) {
+    if (typeof b === 'string') {
+        const base = (c ?? {});
+        return getFromDirectory(a, b, { ...base, browse: true });
+    }
+    const base = (b ?? {});
+    return getFromDirectory(a, { ...base, browse: true });
+}
+//# sourceMappingURL=StaticFiles.js.map

package/dist/http/static/StaticFiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticFiles.js","sourceRoot":"","sources":["../../../src/http/static/StaticFiles.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAc,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,MAAM,EAAuC,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAiB,MAAM,eAAe,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAqB,MAAM,uBAAuB,CAAC;AAClF,OAAO,EACL,oBAAoB,GAIrB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,QAAQ,GAAG,GAAiB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;AACjG,MAAM,QAAQ,GAAG,GAAiB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;AAE1F,SAAS,WAAW,CAAC,KAA2B;IAC9C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;;YAClE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IACtC,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc;IAC9B,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;AAClF,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,GAAgB,EAAE,IAAwB,EAAE,OAAe,EAAE,YAAqB;IACvG,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,IAAI,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7C,IAAI,YAAY,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,uEAAuE;QACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAID,SAAS,UAAU,CAAC,MAAc,EAAE,IAAY;IAC9C,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,CAAC,yDAAyD;IACvF,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC;IACxC,IAAI,QAAQ,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,KAAa,CAAC;IAClB,IAAI,GAAW,CAAC;IAChB,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAO,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,eAAe,CAAC;QACzC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;QACnC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,QAAQ,CAAC,QAAS,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,eAAe,CAAC;IACzD,IAAI,GAAG,IAAI,IAAI;QAAE,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC;IAChC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED,iEAAiE;AACjE,KAAK,UAAU,iBAAiB,CAC9B,MAAc,EACd,IAAc,EACd,GAAgB,EAChB,QAA+B,EAC/B,UAAkB;IAElB,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,WAAW;QAAE,OAAO,QAAQ,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9F,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9F,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,YAAY;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC;IAC5E,IAAI,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACjC,IAAI,YAAY;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;IAC1D,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC;IAExD,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxC,kFAAkF;QAClF,MAAM,WAAW,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,YAAY,CAAC;QACtE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACpH,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;gBAC7C,MAAM,YAAY,GAAG;oBACnB,GAAG,OAAO;oBACV,eAAe,EAAE,SAAS,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE;oBACnE,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;iBACjC,CAAC;gBACF,IAAI,MAAM;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACnF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;gBAC1C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;YACjH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChI,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,GAAgB,EAAE,WAAoB,EAAE,QAA+B;IAClH,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACzE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,SAAS,CAAC,kCAAkC;QAC9F,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,EAAE;QACjB,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,EAAE,wBAAwB,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE;QAC7E,IAAI,EAAE,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;KAC1C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe,EAAE,GAAgB,EAAE,QAA+B;IAChH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,EAAE,CAAC;IAEpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,EAAE,CAAC;IAE7B,IAAI,QAAQ,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACxC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;YAAE,OAAO,QAAQ,EAAE,CAAC;IACnH,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/G,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM;gBAAE,OAAO,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC1G,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC;QAC7D,IAAI,QAAQ,CAAC,MAAM;YAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACvF,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,EAAE,CAAC,CAAC,+CAA+C;IACpF,OAAO,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,OAA4B;IACxE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC7C,OAAO,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC;AAKD,MAAM,UAAU,gBAAgB,CAAC,CAAS,EAAE,CAA+B,EAAE,CAAsB;IACjG,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAClB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,EAC3D,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAC1F,CAAC;IACF,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACtE,CAAC;AAKD,MAAM,UAAU,0BAA0B,CAAC,CAAS,EAAE,CAA+B,EAAE,CAAsB;IAC3G,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAoC,CAAC;QAC1D,OAAO,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAoC,CAAC;IAC1D,OAAO,gBAAgB,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC"}

package/dist/http/static/StaticFilesOptions.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Options for the static-file directives.  Options-only (HTTP terminal
+ * handlers have no ActorSystem at request time, so no HOCON layer).
+ */
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+import { OptionsValidator } from '../../util/OptionsValidator.js';
+/** Plain settings shape for the static-file directives. */
+export interface StaticFilesOptionsType {
+    /** Index files tried for a directory request.  Default `['index.html']`; `[]` disables. */
+    readonly indexFiles?: readonly string[];
+    /** Render an HTML listing when a directory has no usable index.  Default false. */
+    readonly browse?: boolean;
+    /** `Cache-Control` header value.  Default: header omitted. */
+    readonly cacheControl?: string;
+    /** Emit a weak `ETag` (size + mtime) and honour `If-None-Match`.  Default true. */
+    readonly etag?: boolean;
+    /** Emit `Last-Modified` and honour `If-Modified-Since`.  Default true. */
+    readonly lastModified?: boolean;
+    /** Honour a single `Range` request (206 / 416).  Default true. */
+    readonly ranges?: boolean;
+    /** Dotfile policy.  Default `'deny'` (404 + hidden from listings). */
+    readonly dotfiles?: 'deny' | 'allow';
+    /** Symlink policy.  Default `'within-root'` (a link escaping the root → 404). */
+    readonly symlinks?: 'within-root' | 'follow';
+    /** Per-extension content-type overrides (ext → full content-type). */
+    readonly contentTypes?: Readonly<Record<string, string>>;
+    /** getFromFile only: force this exact content-type. */
+    readonly contentType?: string;
+    /** Max file size buffered into memory.  Default 50 MiB; larger → 413. */
+    readonly maxFileSize?: number;
+}
+/** Fluent builder for {@link StaticFilesOptionsType}. */
+export declare class StaticFilesOptionsBuilder extends OptionsBuilder<StaticFilesOptionsType> {
+    static create(): StaticFilesOptionsBuilder;
+    withIndexFiles(...names: string[]): this;
+    withBrowse(enabled?: boolean): this;
+    withCacheControl(value: string): this;
+    withEtag(enabled: boolean): this;
+    withLastModified(enabled: boolean): this;
+    withRanges(enabled: boolean): this;
+    withDotfiles(policy: 'deny' | 'allow'): this;
+    withSymlinks(policy: 'within-root' | 'follow'): this;
+    withContentTypes(map: Readonly<Record<string, string>>): this;
+    withContentType(contentType: string): this;
+    withMaxFileSize(bytes: number): this;
+}
+/** Accepted input: the builder or a plain object. */
+export type StaticFilesOptions = StaticFilesOptionsBuilder | Partial<StaticFilesOptionsType>;
+export declare const StaticFilesOptions: typeof StaticFilesOptionsBuilder;
+/**
+ * Validates resolved {@link StaticFilesOptionsType} settings.  `maxFileSize`
+ * (the in-memory buffering cap, in bytes) must be a positive integer, and
+ * the `dotfiles` / `symlinks` policies must be one of their allowed
+ * literals — replacing what would otherwise be a silent mis-configuration.
+ */
+export declare class StaticFilesOptionsValidator extends OptionsValidator<StaticFilesOptionsType> {
+    constructor();
+    protected rules(_s: Partial<StaticFilesOptionsType>): void;
+}
+/** Fully-applied settings after defaults. */
+export interface ResolvedStaticOptions {
+    readonly indexFiles: readonly string[];
+    readonly browse: boolean;
+    readonly cacheControl: string | undefined;
+    readonly etag: boolean;
+    readonly lastModified: boolean;
+    readonly ranges: boolean;
+    readonly dotfiles: 'deny' | 'allow';
+    readonly symlinks: 'within-root' | 'follow';
+    readonly contentTypes: Readonly<Record<string, string>> | undefined;
+    readonly contentType: string | undefined;
+    readonly maxFileSize: number;
+}
+/** Apply defaults to an options bag (builder or plain object), then validate. */
+export declare function resolveStaticOptions(options?: StaticFilesOptions): ResolvedStaticOptions;
+//# sourceMappingURL=StaticFilesOptions.d.ts.map

package/dist/http/static/StaticFilesOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticFilesOptions.d.ts","sourceRoot":"","sources":["../../../src/http/static/StaticFilesOptions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,2DAA2D;AAC3D,MAAM,WAAW,sBAAsB;IACrC,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,mFAAmF;IACnF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,GAAG,QAAQ,CAAC;IAC7C,sEAAsE;IACtE,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,uDAAuD;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,yDAAyD;AACzD,qBAAa,yBAA0B,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IACnF,MAAM,CAAC,MAAM,IAAI,yBAAyB;IAG1C,cAAc,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAGxC,UAAU,CAAC,OAAO,UAAO,GAAG,IAAI;IAGhC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAGrC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAGhC,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAGxC,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAGlC,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI;IAG5C,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,QAAQ,GAAG,IAAI;IAGpD,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI;IAG7D,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAG1C,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAGrC;AAED,qDAAqD;AACrD,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAC7F,eAAO,MAAM,kBAAkB,kCAA4B,CAAC;AAE5D;;;;;GAKG;AACH,qBAAa,2BAA4B,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;;IAIvF,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI;CAK3D;AAED,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,aAAa,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACpE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,qBAAqB,CAkBxF"}

package/dist/http/static/StaticFilesOptions.js

@@ -0,0 +1,83 @@
+/**
+ * Options for the static-file directives.  Options-only (HTTP terminal
+ * handlers have no ActorSystem at request time, so no HOCON layer).
+ */
+import { OptionsBuilder } from '../../util/OptionsBuilder.js';
+import { OptionsValidator } from '../../util/OptionsValidator.js';
+/** Fluent builder for {@link StaticFilesOptionsType}. */
+export class StaticFilesOptionsBuilder extends OptionsBuilder {
+    static create() {
+        return new StaticFilesOptionsBuilder();
+    }
+    withIndexFiles(...names) {
+        return this.set('indexFiles', names);
+    }
+    withBrowse(enabled = true) {
+        return this.set('browse', enabled);
+    }
+    withCacheControl(value) {
+        return this.set('cacheControl', value);
+    }
+    withEtag(enabled) {
+        return this.set('etag', enabled);
+    }
+    withLastModified(enabled) {
+        return this.set('lastModified', enabled);
+    }
+    withRanges(enabled) {
+        return this.set('ranges', enabled);
+    }
+    withDotfiles(policy) {
+        return this.set('dotfiles', policy);
+    }
+    withSymlinks(policy) {
+        return this.set('symlinks', policy);
+    }
+    withContentTypes(map) {
+        return this.set('contentTypes', map);
+    }
+    withContentType(contentType) {
+        return this.set('contentType', contentType);
+    }
+    withMaxFileSize(bytes) {
+        return this.set('maxFileSize', bytes);
+    }
+}
+export const StaticFilesOptions = StaticFilesOptionsBuilder;
+/**
+ * Validates resolved {@link StaticFilesOptionsType} settings.  `maxFileSize`
+ * (the in-memory buffering cap, in bytes) must be a positive integer, and
+ * the `dotfiles` / `symlinks` policies must be one of their allowed
+ * literals — replacing what would otherwise be a silent mis-configuration.
+ */
+export class StaticFilesOptionsValidator extends OptionsValidator {
+    constructor() {
+        super('StaticFilesOptions');
+    }
+    rules(_s) {
+        this.positiveInt('maxFileSize');
+        this.oneOf('dotfiles', ['deny', 'allow']);
+        this.oneOf('symlinks', ['within-root', 'follow']);
+    }
+}
+/** Apply defaults to an options bag (builder or plain object), then validate. */
+export function resolveStaticOptions(options) {
+    const resolvedOptions = (options ?? {});
+    const resolved = {
+        indexFiles: resolvedOptions.indexFiles ?? ['index.html'],
+        browse: resolvedOptions.browse ?? false,
+        cacheControl: resolvedOptions.cacheControl,
+        etag: resolvedOptions.etag ?? true,
+        lastModified: resolvedOptions.lastModified ?? true,
+        ranges: resolvedOptions.ranges ?? true,
+        dotfiles: resolvedOptions.dotfiles ?? 'deny',
+        symlinks: resolvedOptions.symlinks ?? 'within-root',
+        contentTypes: resolvedOptions.contentTypes,
+        contentType: resolvedOptions.contentType,
+        maxFileSize: resolvedOptions.maxFileSize ?? 50 * 1024 * 1024,
+    };
+    // Single consume-time gate shared by getFromFile / getFromDirectory.
+    new StaticFilesOptionsValidator().validate(resolved);
+    return resolved;
+}
+//# sourceMappingURL=StaticFilesOptions.js.map

package/dist/http/static/StaticFilesOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticFilesOptions.js","sourceRoot":"","sources":["../../../src/http/static/StaticFilesOptions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AA4BlE,yDAAyD;AACzD,MAAM,OAAO,yBAA0B,SAAQ,cAAsC;IACnF,MAAM,CAAC,MAAM;QACX,OAAO,IAAI,yBAAyB,EAAE,CAAC;IACzC,CAAC;IACD,cAAc,CAAC,GAAG,KAAe;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,UAAU,CAAC,OAAO,GAAG,IAAI;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,gBAAgB,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,QAAQ,CAAC,OAAgB;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,gBAAgB,CAAC,OAAgB;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,UAAU,CAAC,OAAgB;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,YAAY,CAAC,MAAwB;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,YAAY,CAAC,MAAgC;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,gBAAgB,CAAC,GAAqC;QACpD,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IACD,eAAe,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;CACF;AAID,MAAM,CAAC,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,OAAO,2BAA4B,SAAQ,gBAAwC;IACvF;QACE,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC9B,CAAC;IACS,KAAK,CAAC,EAAmC;QACjD,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;CACF;AAiBD,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,OAA4B;IAC/D,MAAM,eAAe,GAAG,CAAC,OAAO,IAAI,EAAE,CAAoC,CAAC;IAC3E,MAAM,QAAQ,GAA0B;QACtC,UAAU,EAAE,eAAe,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC;QACxD,MAAM,EAAE,eAAe,CAAC,MAAM,IAAI,KAAK;QACvC,YAAY,EAAE,eAAe,CAAC,YAAY;QAC1C,IAAI,EAAE,eAAe,CAAC,IAAI,IAAI,IAAI;QAClC,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,IAAI;QAClD,MAAM,EAAE,eAAe,CAAC,MAAM,IAAI,IAAI;QACtC,QAAQ,EAAE,eAAe,CAAC,QAAQ,IAAI,MAAM;QAC5C,QAAQ,EAAE,eAAe,CAAC,QAAQ,IAAI,aAAa;QACnD,YAAY,EAAE,eAAe,CAAC,YAAY;QAC1C,WAAW,EAAE,eAAe,CAAC,WAAW;QACxC,WAAW,EAAE,eAAe,CAAC,WAAW,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;KAC7D,CAAC;IACF,qEAAqE;IACrE,IAAI,2BAA2B,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/http/static/fsAccess.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Cross-runtime filesystem access for static serving.  `node:fs/promises`
+ * is lazy-imported (cached) and works on Bun, Node, and Deno via their
+ * node-compat layers — no per-runtime adapter needed while bodies are
+ * buffered (a future streaming path could add one behind this module).
+ */
+export interface FileStat {
+    readonly size: number;
+    readonly mtimeMs: number;
+    readonly isFile: boolean;
+    readonly isDirectory: boolean;
+}
+export interface DirEntry {
+    readonly name: string;
+    readonly isDirectory: boolean;
+}
+/** stat, mapped to our minimal shape; null on any error (ENOENT, ENOTDIR, …). */
+export declare function statPath(path: string): Promise<FileStat | null>;
+/** Canonicalised real path (follows symlinks); null on error. */
+export declare function realPath(path: string): Promise<string | null>;
+/** Directory entries with a file/dir flag. */
+export declare function readDirectory(path: string): Promise<DirEntry[]>;
+/** Read the whole file into a Uint8Array (bounded by the caller's maxFileSize). */
+export declare function readFileBytes(path: string): Promise<Uint8Array>;
+//# sourceMappingURL=fsAccess.d.ts.map

package/dist/http/static/fsAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsAccess.d.ts","sourceRoot":"","sources":["../../../src/http/static/fsAccess.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAQD,iFAAiF;AACjF,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAOrE;AAED,iEAAiE;AACjE,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMnE;AAED,8CAA8C;AAC9C,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAGrE;AAED,mFAAmF;AACnF,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAGrE"}

package/dist/http/static/fsAccess.js

@@ -0,0 +1,42 @@
+/**
+ * Cross-runtime filesystem access for static serving.  `node:fs/promises`
+ * is lazy-imported (cached) and works on Bun, Node, and Deno via their
+ * node-compat layers — no per-runtime adapter needed while bodies are
+ * buffered (a future streaming path could add one behind this module).
+ */
+let fsPromises;
+async function fsp() {
+    if (!fsPromises)
+        fsPromises = await import('node:fs/promises');
+    return fsPromises;
+}
+/** stat, mapped to our minimal shape; null on any error (ENOENT, ENOTDIR, …). */
+export async function statPath(path) {
+    try {
+        const stat = await (await fsp()).stat(path);
+        return { size: stat.size, mtimeMs: stat.mtimeMs, isFile: stat.isFile(), isDirectory: stat.isDirectory() };
+    }
+    catch {
+        return null;
+    }
+}
+/** Canonicalised real path (follows symlinks); null on error. */
+export async function realPath(path) {
+    try {
+        return await (await fsp()).realpath(path);
+    }
+    catch {
+        return null;
+    }
+}
+/** Directory entries with a file/dir flag. */
+export async function readDirectory(path) {
+    const entries = await (await fsp()).readdir(path, { withFileTypes: true });
+    return entries.map((e) => ({ name: e.name, isDirectory: e.isDirectory() }));
+}
+/** Read the whole file into a Uint8Array (bounded by the caller's maxFileSize). */
+export async function readFileBytes(path) {
+    const buf = await (await fsp()).readFile(path);
+    return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
+}
+//# sourceMappingURL=fsAccess.js.map

package/dist/http/static/fsAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsAccess.js","sourceRoot":"","sources":["../../../src/http/static/fsAccess.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH,IAAI,UAAyD,CAAC;AAC9D,KAAK,UAAU,GAAG;IAChB,IAAI,CAAC,UAAU;QAAE,UAAU,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC"}