elysia 2.0.0-exp.46 → 2.0.0-exp.49

package/dist/adapter/bun/index.js

@@ -6,7 +6,6 @@ const require_adapter_web_standard_index = require('../web-standard/index.js');
 const require_generation = require('../../generation.js');
 const require_compile_handler_index = require('../../compile/handler/index.js');
 const require_route_table = require('../../route-table.js');
-const require_ws_route = require('../../ws/route.js');
 
 //#region src/adapter/bun/index.ts
 const nativeStaticMethods = new Set([
@@ -29,6 +28,16 @@ function collectStaticRoutes(app) {
 	if (!table || !length) return;
 	const methods = table.method;
 	const paths = table.path;
+	const handlers = table.handler;
+	let hasCandidate = false;
+	for (let i = 0; i < length; i++) {
+		const h = handlers[i];
+		if (typeof h === "function" || h instanceof Error || h instanceof Promise) continue;
+		if (!nativeStaticMethods.has(methods[i])) continue;
+		hasCandidate = true;
+		break;
+	}
+	if (!hasCandidate) return;
 	const ready = require_utils.nullObject();
 	const strictPath = frozenRoot["~config"]?.strictPath === true;
 	const seen = /* @__PURE__ */ new Map();
@@ -58,6 +67,8 @@ function collectStaticRoutes(app) {
 		const path = paths[i];
 		if (seen.get(method + " " + path) !== i) continue;
 		if (!nativeStaticMethods.has(method)) continue;
+		const h = handlers[i];
+		if (typeof h === "function" || h instanceof Error || h instanceof Promise) continue;
 		const value = require_compile_handler_index.buildNativeStaticResponse(require_route_table.routeRow(table, i), app);
 		if (!value) continue;
 		add(method, path, value);
@@ -98,11 +109,11 @@ const BunAdapter = require_adapter_index.createAdapter({
 			} catch (error) {
 				console.warn("[Elysia] Native static promotion was skipped:", error);
 			}
-			const hasWs = app["~hasWS"];
 			let websocket;
-			if (hasWs) {
-				const defaultConfig = require_generation.frozenRootOf(app)["~config"]?.websocket;
-				websocket = defaultConfig ? Object.assign(require_ws_route.buildGlobalWSHandler(), defaultConfig) : require_ws_route.buildGlobalWSHandler();
+			if (app["~hasWS"]) {
+				const resolved = require_generation.resolvedWsOf(app);
+				if (!resolved) throw new Error("[Elysia] internal: WebSocket routes are present but no capability provider was resolved.");
+				websocket = resolved.config ? Object.assign(resolved.provider.buildGlobalWSHandler(), resolved.config) : resolved.provider.buildGlobalWSHandler();
 			}
 			return {
 				fetch,

package/dist/adapter/bun/index.mjs

@@ -2,10 +2,9 @@ import { createAdapter } from "../index.mjs";
 import { isDynamicRegex, needEncodeRegex } from "../../constants.mjs";
 import { flattenChain, getLoosePath, nullObject } from "../../utils.mjs";
 import { WebStandardAdapter } from "../web-standard/index.mjs";
-import { frozenRootOf } from "../../generation.mjs";
+import { frozenRootOf, resolvedWsOf } from "../../generation.mjs";
 import { buildNativeStaticResponse } from "../../compile/handler/index.mjs";
 import { routeRow } from "../../route-table.mjs";
-import { buildGlobalWSHandler } from "../../ws/route.mjs";
 
 //#region src/adapter/bun/index.ts
 const nativeStaticMethods = new Set([
@@ -28,6 +27,16 @@ function collectStaticRoutes(app) {
 	if (!table || !length) return;
 	const methods = table.method;
 	const paths = table.path;
+	const handlers = table.handler;
+	let hasCandidate = false;
+	for (let i = 0; i < length; i++) {
+		const h = handlers[i];
+		if (typeof h === "function" || h instanceof Error || h instanceof Promise) continue;
+		if (!nativeStaticMethods.has(methods[i])) continue;
+		hasCandidate = true;
+		break;
+	}
+	if (!hasCandidate) return;
 	const ready = nullObject();
 	const strictPath = frozenRoot["~config"]?.strictPath === true;
 	const seen = /* @__PURE__ */ new Map();
@@ -57,6 +66,8 @@ function collectStaticRoutes(app) {
 		const path = paths[i];
 		if (seen.get(method + " " + path) !== i) continue;
 		if (!nativeStaticMethods.has(method)) continue;
+		const h = handlers[i];
+		if (typeof h === "function" || h instanceof Error || h instanceof Promise) continue;
 		const value = buildNativeStaticResponse(routeRow(table, i), app);
 		if (!value) continue;
 		add(method, path, value);
@@ -97,11 +108,11 @@ const BunAdapter = createAdapter({
 			} catch (error) {
 				console.warn("[Elysia] Native static promotion was skipped:", error);
 			}
-			const hasWs = app["~hasWS"];
 			let websocket;
-			if (hasWs) {
-				const defaultConfig = frozenRootOf(app)["~config"]?.websocket;
-				websocket = defaultConfig ? Object.assign(buildGlobalWSHandler(), defaultConfig) : buildGlobalWSHandler();
+			if (app["~hasWS"]) {
+				const resolved = resolvedWsOf(app);
+				if (!resolved) throw new Error("[Elysia] internal: WebSocket routes are present but no capability provider was resolved.");
+				websocket = resolved.config ? Object.assign(resolved.provider.buildGlobalWSHandler(), resolved.config) : resolved.provider.buildGlobalWSHandler();
 			}
 			return {
 				fetch,

package/dist/adapter/index.d.ts

@@ -1,7 +1,7 @@
 import { ElysiaAdapterOptions } from "./types.js";
 
 //#region src/adapter/index.d.ts
-declare function createAdapter<const T extends ElysiaAdapterOptions>(adapter: ElysiaAdapterOptions): T;
+declare const createAdapter: (adapter: ElysiaAdapterOptions) => ElysiaAdapterOptions;
 type ElysiaAdapter = ReturnType<typeof createAdapter>;
 //#endregion
 export { ElysiaAdapter, type ElysiaAdapterOptions, createAdapter };

package/dist/adapter/index.js

@@ -1,9 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 //#region src/adapter/index.ts
-function createAdapter(adapter) {
-	return adapter;
-}
+const createAdapter = (adapter) => adapter;
 
 //#endregion
 exports.createAdapter = createAdapter;

package/dist/adapter/index.mjs

@@ -1,7 +1,5 @@
 //#region src/adapter/index.ts
-function createAdapter(adapter) {
-	return adapter;
-}
+const createAdapter = (adapter) => adapter;
 
 //#endregion
 export { createAdapter };

package/dist/adapter/response-ownership.d.ts

@@ -0,0 +1,5 @@
+//#region src/adapter/response-ownership.d.ts
+declare function borrow<const T extends Response>(response: T): T;
+declare const isBorrowedResponse: (response: Response) => boolean;
+//#endregion
+export { borrow, isBorrowedResponse };

package/dist/adapter/response-ownership.js

@@ -0,0 +1,13 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/adapter/response-ownership.ts
+const borrowedResponses = /* @__PURE__ */ new WeakSet();
+function borrow(response) {
+	borrowedResponses.add(response);
+	return response;
+}
+const isBorrowedResponse = (response) => borrowedResponses.has(response);
+
+//#endregion
+exports.borrow = borrow;
+exports.isBorrowedResponse = isBorrowedResponse;

package/dist/adapter/response-ownership.mjs

@@ -0,0 +1,10 @@
+//#region src/adapter/response-ownership.ts
+const borrowedResponses = /* @__PURE__ */ new WeakSet();
+function borrow(response) {
+	borrowedResponses.add(response);
+	return response;
+}
+const isBorrowedResponse = (response) => borrowedResponses.has(response);
+
+//#endregion
+export { borrow, isBorrowedResponse };

package/dist/adapter/utils.d.ts

@@ -17,16 +17,16 @@ declare function responseToSetHeaders(response: Response, set?: Context['set']):
   status: number | "Continue" | "Switching Protocols" | "Processing" | "Early Hints" | "OK" | "Created" | "Accepted" | "Non-Authoritative Information" | "No Content" | "Reset Content" | "Partial Content" | "Multi-Status" | "Already Reported" | "Multiple Choices" | "Moved Permanently" | "Found" | "See Other" | "Not Modified" | "Temporary Redirect" | "Permanent Redirect" | "Bad Request" | "Unauthorized" | "Payment Required" | "Forbidden" | "Not Found" | "Method Not Allowed" | "Not Acceptable" | "Proxy Authentication Required" | "Request Timeout" | "Conflict" | "Gone" | "Length Required" | "Precondition Failed" | "Payload Too Large" | "URI Too Long" | "Unsupported Media Type" | "Range Not Satisfiable" | "Expectation Failed" | "I'm a teapot" | "Enhance Your Calm" | "Misdirected Request" | "Unprocessable Content" | "Locked" | "Failed Dependency" | "Too Early" | "Upgrade Required" | "Precondition Required" | "Too Many Requests" | "Request Header Fields Too Large" | "Unavailable For Legal Reasons" | "Internal Server Error" | "Not Implemented" | "Bad Gateway" | "Service Unavailable" | "Gateway Timeout" | "HTTP Version Not Supported" | "Variant Also Negotiates" | "Insufficient Storage" | "Loop Detected" | "Not Extended" | "Network Authentication Required";
 };
 interface CreateHandlerParameter {
-  mapResponse(response: unknown, set: Context['set'], request?: Request): Response;
-  mapCompactResponse(response: unknown, request?: Request): Response;
+  mapResponse(response: unknown, set: Context['set'], request?: Request, owned?: boolean): Response;
+  mapCompactResponse(response: unknown, request?: Request, owned?: boolean): Response;
 }
 declare function createStreamHandler({
   mapResponse,
   mapCompactResponse
-}: CreateHandlerParameter): (generator: Generator | AsyncGenerator | ReadableStream, set?: Context["set"], request?: Request, skipFormat?: boolean) => Promise<Response>;
+}: CreateHandlerParameter): (generator: Generator | AsyncGenerator | ReadableStream, set?: Context["set"], request?: Request, skipFormat?: boolean, owned?: boolean) => Promise<Response>;
 declare function streamResponse(response: Response): AsyncGenerator<any, void, any>;
 declare function handleSet(set: Context['set']): void;
-declare function createResponseHandler(handler: CreateHandlerParameter): (response: Response, set?: Context["set"], request?: Request) => any;
+declare function createResponseHandler(handler: CreateHandlerParameter): (response: Response, set?: Context["set"], request?: Request, owned?: boolean) => any;
 /**
  * Split async source into `branches` independent iterators
  *

package/dist/adapter/utils.js

@@ -4,6 +4,7 @@ const require_constants = require('../constants.js');
 const require_utils = require('../utils.js');
 const require_adapter_skip_clone = require('./skip-clone.js');
 const require_cookie_serialize = require('../cookie/serialize.js');
+const require_adapter_response_ownership = require('./response-ownership.js');
 const require_adapter_default_headers = require('./default-headers.js');
 
 //#region src/adapter/utils.ts
@@ -143,29 +144,49 @@ function enqueueBinaryChunk(controller, chunk) {
 	return false;
 }
 function createStreamHandler({ mapResponse, mapCompactResponse }) {
-	return async (generator, set, request, skipFormat) => {
-		let init = generator.next?.();
+	return async (generator, set, request, skipFormat, owned = false) => {
+		if (require_utils.isByteStream(generator)) {
+			if (generator.locked) throw new TypeError("Cannot transfer a locked or consumed byte stream");
+			if (set) {
+				handleSet(set);
+				const headers = materializeSetHeaders(set);
+				if (headers instanceof Headers) {
+					if (!headers.has("content-type")) headers.set("content-type", "application/octet-stream");
+				} else if (!headers["content-type"]) headers["content-type"] = "application/octet-stream";
+				return new Response(generator, set);
+			}
+			return new Response(generator, { headers: { "content-type": "application/octet-stream" } });
+		}
+		const typedSSE = !skipFormat && "sse" in generator && generator.sse === true;
+		let init = typedSSE ? void 0 : generator.next?.();
 		if (set) handleSet(set);
 		if (init instanceof Promise) init = await init;
 		if (init?.value instanceof ReadableStream) generator = init.value;
 		else if (init && (typeof init?.done === "undefined" || init?.done)) {
-			if (set) return mapResponse(init.value, set, request);
-			return mapCompactResponse(init.value, request);
+			if (set) return mapResponse(init.value, set, request, owned);
+			return mapCompactResponse(init.value, request, owned);
 		}
-		const isSSE = !skipFormat && (init?.value?.sse ?? generator?.sse ?? (set?.headers instanceof Headers ? set.headers.get("content-type")?.startsWith("text/event-stream") : set?.headers["content-type"]?.startsWith("text/event-stream")));
+		const isSSE = typedSSE || !skipFormat && (init?.value?.sse ?? generator?.sse ?? (set?.headers instanceof Headers ? set.headers.get("content-type")?.startsWith("text/event-stream") : set?.headers["content-type"]?.startsWith("text/event-stream")));
 		const format = isSSE ? sseFormat : identityFormat;
 		const contentType = isSSE ? "text/event-stream" : init?.value && typeof init?.value === "object" ? ArrayBuffer.isView(init.value) ? "application/octet-stream" : "application/json" : "text/plain";
 		if (set) materializeSetHeaders(set);
 		const headers = set?.headers;
 		if (headers instanceof Headers) {
-			if (!headers.has("transfer-encoding")) headers.set("transfer-encoding", "chunked");
+			if (!typedSSE && !headers.has("transfer-encoding")) headers.set("transfer-encoding", "chunked");
 			if (!headers.has("content-type")) headers.set("content-type", contentType);
 			if (!headers.has("cache-control")) headers.set("cache-control", "no-cache");
 		} else if (headers) {
-			if (!headers["transfer-encoding"]) headers["transfer-encoding"] = "chunked";
+			if (!typedSSE && !headers["transfer-encoding"]) headers["transfer-encoding"] = "chunked";
 			if (!headers["content-type"]) headers["content-type"] = contentType;
 			if (!headers["cache-control"]) headers["cache-control"] = "no-cache";
-		} else set = {
+		} else if (typedSSE) set = {
+			status: 200,
+			headers: {
+				"content-type": contentType,
+				"cache-control": "no-cache"
+			}
+		};
+		else set = {
 			status: 200,
 			headers: {
 				"content-type": contentType,
@@ -250,7 +271,7 @@ function createStreamHandler({ mapResponse, mapCompactResponse }) {
 				cleanupAbort();
 				safeReturn();
 			}
-		}), set);
+		}, typedSSE ? { highWaterMark: 0 } : void 0), set);
 	};
 }
 async function* streamResponse(response) {
@@ -310,7 +331,7 @@ function mergeStatus(responseStatus, setStatus) {
 	if (responseStatus === 200) return setStatus;
 	return responseStatus;
 }
-function cancelPropagatingBody(clonedBody, orphanedBranch) {
+function cancelPropagatingBody(clonedBody, orphanedBranch, preserveOrphan = false) {
 	const reader = clonedBody.getReader();
 	return new ReadableStream({
 		async pull(controller) {
@@ -319,23 +340,42 @@ function cancelPropagatingBody(clonedBody, orphanedBranch) {
 			else controller.enqueue(value);
 		},
 		cancel(reason) {
+			if (preserveOrphan) {
+				reader.cancel(reason).catch(() => {});
+				return;
+			}
 			orphanedBranch.cancel(reason);
 			return reader.cancel(reason);
 		}
 	});
 }
+const warnedStreamBorrows = /* @__PURE__ */ new WeakSet();
 function createResponseHandler(handler) {
 	const handleStream = createStreamHandler(handler);
-	return (response, set, request) => {
+	return (response, set, request, owned = false) => {
+		if (require_adapter_skip_clone.skipClone.has(response) && !response.bodyUsed) {
+			require_adapter_skip_clone.skipClone.delete(response);
+			owned = true;
+		}
+		const explicitlyBorrowed = require_adapter_response_ownership.isBorrowedResponse(response);
+		const borrowed = !owned || explicitlyBorrowed;
+		const mustClone = owned && explicitlyBorrowed;
+		if (!borrowed && response.bodyUsed) throw new TypeError("Cannot reuse a consumed Response across requests — a returned Response is request-owned; call borrow(response) to mark it reusable");
 		if (set) {
 			const status = mergeStatus(response.status, set.status);
-			if ((status === void 0 || status === response.status) && !set.cookie && !require_utils.isNotEmpty(set.headers)) return response;
-		}
+			const statusUnchanged = status === void 0 || status === response.status;
+			if (!mustClone && statusUnchanged && !set.cookie && !require_utils.isNotEmpty(set.headers)) return response;
+		} else if (!mustClone) return response;
+		if (!borrowed && response.body?.locked) throw new TypeError("Cannot patch a Response whose body is locked — release the reader, or call borrow(response) if it must be reused");
 		let body = response.body;
-		if (require_adapter_skip_clone.skipClone.has(response) && !response.bodyUsed) require_adapter_skip_clone.skipClone.delete(response);
-		else {
+		if (borrowed) {
+			const bodyBefore = body;
 			const cloned = response.clone();
-			body = cloned.body && response.body ? cancelPropagatingBody(cloned.body, response.body) : cloned.body;
+			if (explicitlyBorrowed && bodyBefore && response.body !== bodyBefore && !warnedStreamBorrows.has(response)) {
+				warnedStreamBorrows.add(response);
+				console.warn("[elysia] borrow() was called on a stream-backed Response — its entire body will stay buffered in memory for as long as the borrowed object lives, and every reuse adds a tee layer. Borrow only buffered Responses (string / ArrayBuffer / Blob bodies), or construct a fresh Response per request.");
+			}
+			body = cloned.body && response.body ? cancelPropagatingBody(cloned.body, response.body, explicitlyBorrowed) : cloned.body;
 		}
 		const newResponse = new Response(body, set ? {
 			headers: mergeHeaders(response.headers, set.headers),
@@ -346,7 +386,7 @@ function createResponseHandler(handler) {
 			status: response.status,
 			statusText: response.statusText
 		});
-		if (!newResponse.headers.has("content-length") && newResponse.headers.get("transfer-encoding") === "chunked") return handleStream(streamResponse(newResponse), responseToSetHeaders(newResponse, set), request, true);
+		if (borrowed && !newResponse.headers.has("content-length") && newResponse.headers.get("transfer-encoding") === "chunked") return handleStream(streamResponse(newResponse), responseToSetHeaders(newResponse, set), request, true);
 		return newResponse;
 	};
 }

package/dist/adapter/utils.mjs

@@ -1,8 +1,9 @@
 import { hasHeaderShorthand, isBun } from "../universal/constants.mjs";
 import { StatusMap } from "../constants.mjs";
-import { isNotEmpty, nullObject } from "../utils.mjs";
+import { isByteStream, isNotEmpty, nullObject } from "../utils.mjs";
 import { skipClone } from "./skip-clone.mjs";
 import { serializeCookie } from "../cookie/serialize.mjs";
+import { isBorrowedResponse } from "./response-ownership.mjs";
 import { defaultHeaders } from "./default-headers.mjs";
 
 //#region src/adapter/utils.ts
@@ -142,29 +143,49 @@ function enqueueBinaryChunk(controller, chunk) {
 	return false;
 }
 function createStreamHandler({ mapResponse, mapCompactResponse }) {
-	return async (generator, set, request, skipFormat) => {
-		let init = generator.next?.();
+	return async (generator, set, request, skipFormat, owned = false) => {
+		if (isByteStream(generator)) {
+			if (generator.locked) throw new TypeError("Cannot transfer a locked or consumed byte stream");
+			if (set) {
+				handleSet(set);
+				const headers = materializeSetHeaders(set);
+				if (headers instanceof Headers) {
+					if (!headers.has("content-type")) headers.set("content-type", "application/octet-stream");
+				} else if (!headers["content-type"]) headers["content-type"] = "application/octet-stream";
+				return new Response(generator, set);
+			}
+			return new Response(generator, { headers: { "content-type": "application/octet-stream" } });
+		}
+		const typedSSE = !skipFormat && "sse" in generator && generator.sse === true;
+		let init = typedSSE ? void 0 : generator.next?.();
 		if (set) handleSet(set);
 		if (init instanceof Promise) init = await init;
 		if (init?.value instanceof ReadableStream) generator = init.value;
 		else if (init && (typeof init?.done === "undefined" || init?.done)) {
-			if (set) return mapResponse(init.value, set, request);
-			return mapCompactResponse(init.value, request);
+			if (set) return mapResponse(init.value, set, request, owned);
+			return mapCompactResponse(init.value, request, owned);
 		}
-		const isSSE = !skipFormat && (init?.value?.sse ?? generator?.sse ?? (set?.headers instanceof Headers ? set.headers.get("content-type")?.startsWith("text/event-stream") : set?.headers["content-type"]?.startsWith("text/event-stream")));
+		const isSSE = typedSSE || !skipFormat && (init?.value?.sse ?? generator?.sse ?? (set?.headers instanceof Headers ? set.headers.get("content-type")?.startsWith("text/event-stream") : set?.headers["content-type"]?.startsWith("text/event-stream")));
 		const format = isSSE ? sseFormat : identityFormat;
 		const contentType = isSSE ? "text/event-stream" : init?.value && typeof init?.value === "object" ? ArrayBuffer.isView(init.value) ? "application/octet-stream" : "application/json" : "text/plain";
 		if (set) materializeSetHeaders(set);
 		const headers = set?.headers;
 		if (headers instanceof Headers) {
-			if (!headers.has("transfer-encoding")) headers.set("transfer-encoding", "chunked");
+			if (!typedSSE && !headers.has("transfer-encoding")) headers.set("transfer-encoding", "chunked");
 			if (!headers.has("content-type")) headers.set("content-type", contentType);
 			if (!headers.has("cache-control")) headers.set("cache-control", "no-cache");
 		} else if (headers) {
-			if (!headers["transfer-encoding"]) headers["transfer-encoding"] = "chunked";
+			if (!typedSSE && !headers["transfer-encoding"]) headers["transfer-encoding"] = "chunked";
 			if (!headers["content-type"]) headers["content-type"] = contentType;
 			if (!headers["cache-control"]) headers["cache-control"] = "no-cache";
-		} else set = {
+		} else if (typedSSE) set = {
+			status: 200,
+			headers: {
+				"content-type": contentType,
+				"cache-control": "no-cache"
+			}
+		};
+		else set = {
 			status: 200,
 			headers: {
 				"content-type": contentType,
@@ -249,7 +270,7 @@ function createStreamHandler({ mapResponse, mapCompactResponse }) {
 				cleanupAbort();
 				safeReturn();
 			}
-		}), set);
+		}, typedSSE ? { highWaterMark: 0 } : void 0), set);
 	};
 }
 async function* streamResponse(response) {
@@ -309,7 +330,7 @@ function mergeStatus(responseStatus, setStatus) {
 	if (responseStatus === 200) return setStatus;
 	return responseStatus;
 }
-function cancelPropagatingBody(clonedBody, orphanedBranch) {
+function cancelPropagatingBody(clonedBody, orphanedBranch, preserveOrphan = false) {
 	const reader = clonedBody.getReader();
 	return new ReadableStream({
 		async pull(controller) {
@@ -318,23 +339,42 @@ function cancelPropagatingBody(clonedBody, orphanedBranch) {
 			else controller.enqueue(value);
 		},
 		cancel(reason) {
+			if (preserveOrphan) {
+				reader.cancel(reason).catch(() => {});
+				return;
+			}
 			orphanedBranch.cancel(reason);
 			return reader.cancel(reason);
 		}
 	});
 }
+const warnedStreamBorrows = /* @__PURE__ */ new WeakSet();
 function createResponseHandler(handler) {
 	const handleStream = createStreamHandler(handler);
-	return (response, set, request) => {
+	return (response, set, request, owned = false) => {
+		if (skipClone.has(response) && !response.bodyUsed) {
+			skipClone.delete(response);
+			owned = true;
+		}
+		const explicitlyBorrowed = isBorrowedResponse(response);
+		const borrowed = !owned || explicitlyBorrowed;
+		const mustClone = owned && explicitlyBorrowed;
+		if (!borrowed && response.bodyUsed) throw new TypeError("Cannot reuse a consumed Response across requests — a returned Response is request-owned; call borrow(response) to mark it reusable");
 		if (set) {
 			const status = mergeStatus(response.status, set.status);
-			if ((status === void 0 || status === response.status) && !set.cookie && !isNotEmpty(set.headers)) return response;
-		}
+			const statusUnchanged = status === void 0 || status === response.status;
+			if (!mustClone && statusUnchanged && !set.cookie && !isNotEmpty(set.headers)) return response;
+		} else if (!mustClone) return response;
+		if (!borrowed && response.body?.locked) throw new TypeError("Cannot patch a Response whose body is locked — release the reader, or call borrow(response) if it must be reused");
 		let body = response.body;
-		if (skipClone.has(response) && !response.bodyUsed) skipClone.delete(response);
-		else {
+		if (borrowed) {
+			const bodyBefore = body;
 			const cloned = response.clone();
-			body = cloned.body && response.body ? cancelPropagatingBody(cloned.body, response.body) : cloned.body;
+			if (explicitlyBorrowed && bodyBefore && response.body !== bodyBefore && !warnedStreamBorrows.has(response)) {
+				warnedStreamBorrows.add(response);
+				console.warn("[elysia] borrow() was called on a stream-backed Response — its entire body will stay buffered in memory for as long as the borrowed object lives, and every reuse adds a tee layer. Borrow only buffered Responses (string / ArrayBuffer / Blob bodies), or construct a fresh Response per request.");
+			}
+			body = cloned.body && response.body ? cancelPropagatingBody(cloned.body, response.body, explicitlyBorrowed) : cloned.body;
 		}
 		const newResponse = new Response(body, set ? {
 			headers: mergeHeaders(response.headers, set.headers),
@@ -345,7 +385,7 @@ function createResponseHandler(handler) {
 			status: response.status,
 			statusText: response.statusText
 		});
-		if (!newResponse.headers.has("content-length") && newResponse.headers.get("transfer-encoding") === "chunked") return handleStream(streamResponse(newResponse), responseToSetHeaders(newResponse, set), request, true);
+		if (borrowed && !newResponse.headers.has("content-length") && newResponse.headers.get("transfer-encoding") === "chunked") return handleStream(streamResponse(newResponse), responseToSetHeaders(newResponse, set), request, true);
 		return newResponse;
 	};
 }

package/dist/adapter/web-standard/handler.d.ts

@@ -2,10 +2,10 @@ import { MaybePromise } from "../../types.js";
 import { Context } from "../../context.js";
 
 //#region src/adapter/web-standard/handler.d.ts
-declare function mapResponse(response: unknown, set: Context['set'], request?: Request): Response;
-declare function mapCompactResponse(response: unknown, request?: Request): Response;
+declare function mapResponse(response: unknown, set: Context['set'], request?: Request, owned?: boolean): Response;
+declare function mapCompactResponse(response: unknown, request?: Request, owned?: boolean): Response;
 declare function errorToResponse(error: Error & {
   toResponse?(): MaybePromise<Response>;
-}, set?: Context['set']): any;
+}, set?: Context['set'], request?: Request, owned?: boolean): any;
 //#endregion
 export { errorToResponse, mapCompactResponse, mapResponse };