flowingts 0.0.0 → 0.19.0

package/dist/server/static.js

@@ -0,0 +1,204 @@
+import { createReadStream, realpathSync, statSync } from 'node:fs';
+import { realpath, stat } from 'node:fs/promises';
+import { isAbsolute, resolve, sep } from 'node:path';
+import { kRawSend } from '../core/symbols.js';
+import { HttpError } from '../core/errors.js';
+import { contentTypeFor } from '../utils/mime.js';
+const UNITS = { s: 1, m: 60, h: 3600, d: 86_400 };
+export function parseMaxAge(value) {
+    if (value === undefined)
+        return 0;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value) || value < 0)
+            throw new Error(`[flowing] invalid maxAge ${value}.`);
+        return Math.floor(value);
+    }
+    const m = /^(\d+)\s*([smhd])$/.exec(value.trim());
+    if (!m)
+        throw new Error(`[flowing] invalid maxAge "${value}"; use seconds or "10s", "30m", "12h", "7d".`);
+    return Number(m[1]) * UNITS[m[2]];
+}
+/** Raiz real (symlinks resolvidos), conferida na configuração: um diretório que não existe falha cedo. */
+export function resolveRoot(root) {
+    let real;
+    try {
+        real = realpathSync(resolve(root));
+    }
+    catch {
+        throw new Error(`[flowing] static root "${root}" does not exist.`);
+    }
+    if (!statSync(real).isDirectory())
+        throw new Error(`[flowing] static root "${root}" is not a directory.`);
+    return real;
+}
+const notFound = () => new HttpError(404, 'Not Found', 'NOT_FOUND');
+/**
+ * Caminho dentro da raiz, ou `undefined` se a requisição tentar sair dela (path traversal) (F-13):
+ * byte nulo, barra invertida e segmentos `..` são recusados antes de resolver, e o resultado real
+ * (depois de seguir symlinks) precisa continuar dentro da raiz.
+ */
+async function insideRoot(root, relative, dotfiles) {
+    if (relative.includes('\0') || relative.includes('\\'))
+        return undefined;
+    const segments = relative.split('/').filter((s) => s !== '' && s !== '.');
+    if (segments.some((s) => s === '..'))
+        return undefined;
+    if (dotfiles === 'deny' && segments.some((s) => s.startsWith('.')))
+        return undefined;
+    const candidate = resolve(root, ...segments);
+    if (candidate !== root && !candidate.startsWith(root + sep))
+        return undefined;
+    try {
+        const real = await realpath(candidate);
+        return real === root || real.startsWith(root + sep) ? real : undefined;
+    }
+    catch {
+        return candidate; // não existe: o stat responde 404 adiante
+    }
+}
+async function fileStat(path) {
+    try {
+        return await stat(path);
+    }
+    catch {
+        return undefined;
+    }
+}
+const etagOf = (s) => `W/"${s.size.toString(16)}-${Math.floor(s.mtimeMs).toString(16)}"`;
+function contentDisposition(name) {
+    const ascii = name.replace(/[^\x20-\x7e]/g, '_').replace(/["\\]/g, '_');
+    return `attachment; filename="${ascii}"; filename*=UTF-8''${encodeURIComponent(name)}`;
+}
+/**
+ * `bytes=a-b`, `bytes=a-` ou `bytes=-n` sobre `size`. `undefined` = não satisfazível (416); `null` = ignorar
+ * e enviar o arquivo inteiro (outra unidade, vários intervalos ou sintaxe que não entendemos, RFC 9110 §14.2).
+ */
+function parseRange(header, size) {
+    const value = header.trim();
+    if (!/^bytes=/i.test(value) || value.includes(','))
+        return null;
+    const m = /^bytes=(\d*)-(\d*)$/i.exec(value);
+    if (!m)
+        return null;
+    const [, a, b] = m;
+    if (a === '' && b === '')
+        return undefined;
+    let start;
+    let end;
+    if (a === '') {
+        const n = Number(b);
+        if (n === 0)
+            return undefined;
+        start = Math.max(0, size - n);
+        end = size - 1;
+    }
+    else {
+        start = Number(a);
+        end = b === '' ? size - 1 : Math.min(Number(b), size - 1);
+    }
+    return start > end || start >= size ? undefined : { start, end };
+}
+/** Envia um arquivo já resolvido e conferido, com cache condicional e `Range` (F-13). */
+export async function sendResolvedFile(ctx, path, s, opts) {
+    const res = ctx.res;
+    const type = contentTypeFor(path, opts.mimeTypes);
+    const etag = opts.etag === false ? undefined : etagOf(s);
+    const modified = opts.lastModified === false ? undefined : new Date(Math.floor(s.mtimeMs / 1000) * 1000);
+    if (etag)
+        res.setHeader('ETag', etag);
+    if (modified)
+        res.setHeader('Last-Modified', modified.toUTCString());
+    const maxAge = parseMaxAge(opts.maxAge);
+    res.setHeader('Cache-Control', opts.noCache ? 'no-cache' : `public, max-age=${maxAge}${opts.immutable ? ', immutable' : ''}`);
+    res.setHeader('Accept-Ranges', 'bytes');
+    if (opts.download) {
+        const name = typeof opts.download === 'string' ? opts.download : (path.split(sep).pop() ?? 'download');
+        res.setHeader('Content-Disposition', contentDisposition(name));
+    }
+    // Condicionais (RFC 9110): If-None-Match prevalece sobre If-Modified-Since.
+    const inm = ctx.get('if-none-match');
+    const ims = ctx.get('if-modified-since');
+    const fresh = inm
+        ? etag !== undefined && inm.split(',').some((t) => t.trim() === '*' || t.trim().replace(/^W\//, '') === etag.replace(/^W\//, ''))
+        : ims !== undefined && modified !== undefined && !Number.isNaN(Date.parse(ims)) && modified.getTime() <= Date.parse(ims);
+    if (fresh) {
+        res.statusCode = 304;
+        res.removeHeader('Content-Type');
+        return void res.end();
+    }
+    let start = 0;
+    let end = s.size - 1;
+    const rangeHeader = ctx.get('range');
+    const ifRange = ctx.get('if-range');
+    // Range só vale para GET. If-Range exige comparação forte: nossos ETags são fracos e nunca a satisfazem;
+    // uma data precisa ser exatamente o Last-Modified (RFC 9110 §13.1.5).
+    const ifRangeOk = !ifRange ||
+        (!ifRange.startsWith('"') && !ifRange.startsWith('W/') && modified !== undefined && Date.parse(ifRange) === modified.getTime());
+    const rangeApplies = ctx.method === 'GET' && rangeHeader !== undefined && ifRangeOk;
+    if (rangeApplies && s.size > 0) {
+        const range = parseRange(rangeHeader, s.size);
+        if (range === undefined) {
+            res.statusCode = 416;
+            res.setHeader('Content-Range', `bytes */${s.size}`);
+            return void res.end();
+        }
+        if (range) {
+            ({ start, end } = range);
+            res.statusCode = 206;
+            res.setHeader('Content-Range', `bytes ${start}-${end}/${s.size}`);
+        }
+    }
+    res.setHeader('Content-Length', String(s.size === 0 ? 0 : end - start + 1));
+    if (ctx.method === 'HEAD' || s.size === 0) {
+        res.setHeader('Content-Type', type);
+        return void res.end();
+    }
+    ctx[kRawSend](createReadStream(path, { start, end }), type);
+}
+/** `ctx.sendFile()`: confere o caminho e envia (F-13). */
+export async function sendFile(ctx, path, opts = {}) {
+    // Como `ctx.json()`/`ctx.send()`: depois que a resposta saiu, um novo envio é ignorado (sem mexer nos headers).
+    if (ctx.sent)
+        return;
+    let full;
+    if (opts.root !== undefined) {
+        full = await insideRoot(resolveRoot(opts.root), path, 'deny');
+    }
+    else {
+        if (!isAbsolute(path))
+            throw new Error('[flowing] ctx.sendFile(): use an absolute path, or pass { root } with a relative one.');
+        full = path;
+    }
+    const s = full ? await fileStat(full) : undefined;
+    if (!full || !s?.isFile())
+        throw notFound();
+    await sendResolvedFile(ctx, full, s, opts);
+}
+/** Handler de `app.static()`: resolve o resto do path dentro da raiz, com índice e fallback de SPA. */
+export function staticHandler(rootInput, opts) {
+    const root = resolveRoot(rootInput);
+    parseMaxAge(opts.maxAge); // valida já
+    const dotfiles = opts.dotfiles ?? 'deny';
+    const index = opts.index === undefined ? 'index.html' : opts.index;
+    return async (ctx) => {
+        const rest = ctx.params['*'] ?? '';
+        let full = await insideRoot(root, rest, dotfiles);
+        let s = full ? await fileStat(full) : undefined;
+        if (full && s?.isDirectory()) {
+            full = index ? await insideRoot(root, `${rest}/${index}`, dotfiles) : undefined;
+            s = full ? await fileStat(full) : undefined;
+        }
+        if (full && s?.isFile())
+            return sendResolvedFile(ctx, full, s, opts);
+        // SPA: só para paths sem extensão, para um asset que falta continuar 404.
+        const last = rest.split('/').pop() ?? '';
+        if (opts.fallback && full !== undefined && !last.includes('.')) {
+            const fb = await insideRoot(root, opts.fallback, 'allow');
+            const fs = fb ? await fileStat(fb) : undefined;
+            if (fb && fs?.isFile())
+                return sendResolvedFile(ctx, fb, fs, { ...opts, noCache: true });
+        }
+        throw notFound();
+    };
+}
+//# sourceMappingURL=static.js.map

package/dist/server/static.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.js","sourceRoot":"","sources":["../../src/server/static.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAc,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAmClD,MAAM,KAAK,GAA2B,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAE1E,MAAM,UAAU,WAAW,CAAC,KAAkC;IAC5D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,GAAG,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,8CAA8C,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAE,CAAC;AACtC,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,mBAAmB,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,uBAAuB,CAAC,CAAC;IAC1G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAEpE;;;;GAIG;AACH,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,QAAgB,EAAE,QAA0B;IAClF,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,0CAA0C;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;AAEhG,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACxE,OAAO,yBAAyB,KAAK,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,MAAc,EAAE,IAAY;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,KAAa,CAAC;IAClB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9B,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QAC9B,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAClB,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACnE,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAY,EACZ,IAAY,EACZ,CAAQ,EACR,IAAsE;IAEtE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAEzG,IAAI,IAAI;QAAE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ;QAAE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9H,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,CAAC;QACvG,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,4EAA4E;IAC5E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG;QACf,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3H,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QACjC,OAAO,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IACrB,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,yGAAyG;IACzG,sEAAsE;IACtE,MAAM,SAAS,GACb,CAAC,OAAO;QACR,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAClI,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,WAAW,KAAK,SAAS,IAAI,SAAS,CAAC;IACpF,IAAI,YAAY,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACzB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAY,EAAE,IAAY,EAAE,IAAI,GAAoB,EAAE;IACnF,gHAAgH;IAChH,IAAI,GAAG,CAAC,IAAI;QAAE,OAAO;IACrB,IAAI,IAAwB,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAChI,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE;QAAE,MAAM,QAAQ,EAAE,CAAC;IAC5C,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,IAAmB;IAClE,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACpC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACnE,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,MAAM,IAAI,GAAI,GAAG,CAAC,MAAiC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,IAAI,IAAI,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;YAC7B,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE;YAAE,OAAO,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAErE,0EAA0E;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/C,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE;gBAAE,OAAO,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,QAAQ,EAAE,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/tls.d.ts

@@ -0,0 +1,48 @@
+import type { SecureContext, SecureContextOptions } from 'node:tls';
+/** Material de um certificado: PEM (`key` + `cert`) ou PKCS#12 (`pfx`). */
+export interface TlsCertificate {
+    key?: string | Buffer | (string | Buffer)[];
+    cert?: string | Buffer | (string | Buffer)[];
+    pfx?: string | Buffer;
+    /** Senha da chave ou do `pfx`. */
+    passphrase?: string;
+    /** CAs intermediárias, se não estiverem no `cert` (fullchain). */
+    ca?: string | Buffer | (string | Buffer)[];
+}
+/**
+ * HTTPS no `app.listen({ tls })`. TLS 1.2 é o mínimo; SSLv3, TLS 1.0 e 1.1 não são aceitos.
+ *
+ * ```ts
+ * await app.listen({ port: 443, host: '0.0.0.0', tls: { key, cert } });
+ * ```
+ */
+export interface TlsOptions extends TlsCertificate {
+    /** Padrão: `'TLSv1.2'`. */
+    minVersion?: 'TLSv1.2' | 'TLSv1.3';
+    /**
+     * Certificados por domínio (SNI), escolhidos no handshake: `{ 'api.exemplo.com': { key, cert } }`.
+     * `'*.exemplo.dev'` vale para um nível de subdomínio, como no próprio certificado. Um domínio sem
+     * entrada usa o certificado principal (`key`/`cert`/`pfx`); sem ele, o handshake é recusado.
+     */
+    sni?: Record<string, TlsCertificate>;
+}
+/** O que o servidor HTTPS precisa: opções do certificado principal e o `SNICallback`. */
+export interface CompiledTls {
+    options: SecureContextOptions & {
+        SNICallback?: (servername: string, cb: (err: Error | null, ctx?: SecureContext) => void) => void;
+    };
+    /** Contexto do certificado principal, para `setSecureContext()` na troca. */
+    main: SecureContextOptions | undefined;
+}
+/**
+ * Valida a configuração e cria os contextos (os certificados são lidos e conferidos aqui, então um PEM
+ * inválido falha no `listen()`, e não no primeiro cliente).
+ */
+export declare function compileTls(tls: TlsOptions, lookup?: {
+    current: SniTable;
+}): CompiledTls;
+/** Tabela de contextos por domínio: igualdade exata primeiro, depois o curinga de um nível. */
+export interface SniTable {
+    find(servername: string): SecureContext | undefined;
+}
+//# sourceMappingURL=tls.d.ts.map

package/dist/server/tls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls.d.ts","sourceRoot":"","sources":["../../src/server/tls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAGpE,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC5C,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7C,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CAC5C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,2BAA2B;IAC3B,UAAU,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IACnC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACtC;AAUD,yFAAyF;AACzF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,oBAAoB,GAAG;QAAE,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,aAAa,KAAK,IAAI,KAAK,IAAI,CAAA;KAAE,CAAC;IACrI,6EAA6E;IAC7E,IAAI,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACxC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;IAAE,OAAO,EAAE,QAAQ,CAAA;CAAE,GAAG,WAAW,CAkBvF;AAED,+FAA+F;AAC/F,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;CACrD"}

package/dist/server/tls.js

@@ -0,0 +1,60 @@
+import { createSecureContext } from 'node:tls';
+const ALLOWED_MIN = new Set(['TLSv1.2', 'TLSv1.3']);
+function contextOptions(cert, minVersion) {
+    return { ...cert, minVersion: minVersion };
+}
+const hasCert = (c) => (c.key !== undefined && c.cert !== undefined) || c.pfx !== undefined;
+/**
+ * Valida a configuração e cria os contextos (os certificados são lidos e conferidos aqui, então um PEM
+ * inválido falha no `listen()`, e não no primeiro cliente).
+ */
+export function compileTls(tls, lookup) {
+    const minVersion = tls.minVersion ?? 'TLSv1.2';
+    if (!ALLOWED_MIN.has(minVersion)) {
+        throw new Error(`[flowing] tls.minVersion must be 'TLSv1.2' or 'TLSv1.3' (got '${minVersion}').`);
+    }
+    const { sni, minVersion: _m, ...mainCert } = tls;
+    const main = hasCert(mainCert) ? contextOptions(mainCert, minVersion) : undefined;
+    if (!main && !sni)
+        throw new Error('[flowing] tls needs a certificate: { key, cert }, { pfx } or { sni }.');
+    if (main)
+        createSecureContext(main); // valida já
+    const table = buildSniTable(sni ?? {}, minVersion);
+    if (lookup)
+        lookup.current = table;
+    const options = { ...(main ?? { minVersion: minVersion }) };
+    // Sempre instalado: assim um `reloadTLS()` com `sni` funciona mesmo que o `listen()` não tivesse `sni`.
+    // Sem entrada para o domínio, devolve `undefined` e vale o certificado principal.
+    const ref = lookup ?? { current: table };
+    options.SNICallback = (servername, cb) => cb(null, ref.current.find(servername));
+    return { options, main };
+}
+function buildSniTable(entries, minVersion) {
+    const exact = new Map();
+    const wildcard = new Map();
+    for (const [rawName, cert] of Object.entries(entries)) {
+        const name = rawName.toLowerCase();
+        if (!hasCert(cert))
+            throw new Error(`[flowing] tls.sni["${rawName}"] needs { key, cert } or { pfx }.`);
+        const valid = /^(\*\.)?([a-z0-9-]+\.)*[a-z0-9-]+$/.test(name);
+        if (!valid)
+            throw new Error(`[flowing] tls.sni: invalid domain "${rawName}"; use "api.exemplo.com" or "*.exemplo.dev".`);
+        const ctx = createSecureContext(contextOptions(cert, minVersion));
+        if (name.startsWith('*.'))
+            wildcard.set(name.slice(2), ctx);
+        else
+            exact.set(name, ctx);
+    }
+    return {
+        find(servername) {
+            const name = servername.toLowerCase().replace(/\.$/, '');
+            const hit = exact.get(name);
+            if (hit)
+                return hit;
+            const dot = name.indexOf('.');
+            // `*.exemplo.dev` cobre `a.exemplo.dev`, mas não `a.b.exemplo.dev` nem `exemplo.dev`.
+            return dot > 0 ? wildcard.get(name.slice(dot + 1)) : undefined;
+        },
+    };
+}
+//# sourceMappingURL=tls.js.map

package/dist/server/tls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls.js","sourceRoot":"","sources":["../../src/server/tls.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AA+B/C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpD,SAAS,cAAc,CAAC,IAAoB,EAAE,UAAkB;IAC9D,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,UAAgD,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC;AAS5G;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAe,EAAE,MAA8B;IACxE,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC;IAC/C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,iEAAiE,UAAU,KAAK,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC5G,IAAI,IAAI;QAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY;IAEjD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,MAAM;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;IACnC,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,UAAU,EAAE,UAAgD,EAAE,CAAC,EAAE,CAAC;IAC1H,wGAAwG;IACxG,kFAAkF;IAClF,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzC,OAAO,CAAC,WAAW,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAOD,SAAS,aAAa,CAAC,OAAuC,EAAE,UAAkB;IAChF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,oCAAoC,CAAC,CAAC;QACvG,MAAM,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,8CAA8C,CAAC,CAAC;QACzH,MAAM,GAAG,GAAG,mBAAmB,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;;YACvD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,IAAI,CAAC,UAAU;YACb,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,sFAAsF;YACtF,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/shims/symbol-metadata.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=symbol-metadata.d.ts.map

package/dist/shims/symbol-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbol-metadata.d.ts","sourceRoot":"","sources":["../../src/shims/symbol-metadata.ts"],"names":[],"mappings":""}

package/dist/shims/symbol-metadata.js

@@ -0,0 +1,8 @@
+// TC39 não cria Symbol.metadata automaticamente em todo runtime.
+// Este arquivo deve ser importado ANTES de qualquer decorator rodar.
+const S = Symbol;
+if (!S.metadata) {
+    S.metadata = Symbol.for('Symbol.metadata');
+}
+export {};
+//# sourceMappingURL=symbol-metadata.js.map

package/dist/shims/symbol-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbol-metadata.js","sourceRoot":"","sources":["../../src/shims/symbol-metadata.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,qEAAqE;AACrE,MAAM,CAAC,GAAG,MAA+B,CAAC;AAC1C,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChB,CAAC,CAAC,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC7C,CAAC"}

package/dist/utils/content-type.d.ts

@@ -0,0 +1,13 @@
+/** Media type sem parâmetros e em minúsculas: `"Application/JSON; charset=utf-8"` → `"application/json"`. */
+export declare function mediaType(header: string | undefined): string;
+/**
+ * Escolhe, entre os tipos `available` (em ordem de preferência do servidor), o melhor para o
+ * header `Accept` (F-31). Respeita q-values e curingas (`text/*`, `*\/*`). Sem `Accept`,
+ * devolve o primeiro. Retorna `undefined` quando nenhum é aceitável (→ 406).
+ */
+export declare function negotiate(accept: string | undefined, available: readonly string[]): string | undefined;
+/** Acrescenta `charset=utf-8` a tipos textuais sem charset. */
+export declare function withCharset(type: string): string;
+/** `application/json` ou `application/*+json`, com parâmetros opcionais (B-11). */
+export declare function isJsonContentType(header: string | undefined): boolean;
+//# sourceMappingURL=content-type.d.ts.map

package/dist/utils/content-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-type.d.ts","sourceRoot":"","sources":["../../src/utils/content-type.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAU5D;AAGD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAsBtG;AAYD,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYhD;AAGD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGrE"}

package/dist/utils/content-type.js

@@ -0,0 +1,75 @@
+/** Media type sem parâmetros e em minúsculas: `"Application/JSON; charset=utf-8"` → `"application/json"`. */
+export function mediaType(header) {
+    if (!header)
+        return '';
+    let base = MEDIA_TYPES.get(header);
+    if (base === undefined) {
+        base = header.split(';', 1)[0].trim().toLowerCase();
+        // Memoizado com limite: os tipos vêm da configuração e dos handlers (baixa cardinalidade), mas um
+        // Content-Type montado com dado do cliente não pode fazer o mapa crescer sem fim.
+        if (MEDIA_TYPES.size < 256)
+            MEDIA_TYPES.set(header, base);
+    }
+    return base;
+}
+const MEDIA_TYPES = new Map();
+/**
+ * Escolhe, entre os tipos `available` (em ordem de preferência do servidor), o melhor para o
+ * header `Accept` (F-31). Respeita q-values e curingas (`text/*`, `*\/*`). Sem `Accept`,
+ * devolve o primeiro. Retorna `undefined` quando nenhum é aceitável (→ 406).
+ */
+export function negotiate(accept, available) {
+    if (!accept?.trim())
+        return available[0];
+    const ranges = accept
+        .split(',')
+        .map((part, index) => {
+        const [range = '', ...params] = part.trim().toLowerCase().split(';');
+        const q = Number(params
+            .map((p) => p.trim())
+            .find((p) => p.startsWith('q='))
+            ?.slice(2) ?? '1');
+        return { range: range.trim(), q: Number.isFinite(q) ? q : 1, index };
+    })
+        .filter((r) => r.range && r.q > 0)
+        .sort((a, b) => b.q - a.q || specificity(b.range) - specificity(a.range) || a.index - b.index);
+    for (const { range } of ranges) {
+        const match = available.find((type) => matches(range, mediaType(type)));
+        if (match)
+            return match;
+    }
+    return undefined;
+}
+function specificity(range) {
+    if (range === '*/*')
+        return 0;
+    return range.endsWith('/*') ? 1 : 2;
+}
+function matches(range, type) {
+    if (range === '*/*' || range === type)
+        return true;
+    return range.endsWith('/*') && type.startsWith(range.slice(0, -1));
+}
+/** Acrescenta `charset=utf-8` a tipos textuais sem charset. */
+export function withCharset(type) {
+    let out = WITH_CHARSET.get(type);
+    if (out === undefined) {
+        if (/;\s*charset=/i.test(type))
+            out = type;
+        else {
+            const base = mediaType(type);
+            const textual = base.startsWith('text/') || isJsonContentType(base) || /\+xml$|\/xml$|yaml$/.test(base);
+            out = textual ? `${type}; charset=utf-8` : type;
+        }
+        if (WITH_CHARSET.size < 256)
+            WITH_CHARSET.set(type, out);
+    }
+    return out;
+}
+const WITH_CHARSET = new Map();
+/** `application/json` ou `application/*+json`, com parâmetros opcionais (B-11). */
+export function isJsonContentType(header) {
+    const type = mediaType(header);
+    return type === 'application/json' || /^application\/[a-z0-9!#$&^_.-]+\+json$/.test(type);
+}
+//# sourceMappingURL=content-type.js.map

package/dist/utils/content-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-type.js","sourceRoot":"","sources":["../../src/utils/content-type.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,MAAM,UAAU,SAAS,CAAC,MAA0B;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrD,kGAAkG;QAClG,kFAAkF;QAClF,IAAI,WAAW,CAAC,IAAI,GAAG,GAAG;YAAE,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,MAA0B,EAAE,SAA4B;IAChF,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,MAAM,CACd,MAAM;aACH,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CACpB,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACvE,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAEjG,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,IAAY;IAC1C,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,GAAG,GAAG,IAAI,CAAC;aACtC,CAAC;YACJ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxG,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,GAAG,GAAG;YAAE,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE/C,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,IAAI,KAAK,kBAAkB,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5F,CAAC"}

package/dist/utils/cookie.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Leitura e escrita de cookies (RFC 6265), seguras por padrão.
+ *
+ * - **Leitura:** o resultado é um objeto sem protótipo (`__proto__` vira um cookie comum, sem poluir
+ *   nada); em nomes repetidos vale o primeiro, como nos navegadores; um valor com `%` inválido fica cru.
+ * - **Escrita:** `HttpOnly`, `Secure`, `SameSite=Lax` e `Path=/` por padrão. Nome, `Domain` e `Path`
+ *   são validados (sem `;`, quebra de linha nem caracteres de controle), então não dá para injetar
+ *   atributos. O valor é codificado com `encodeURIComponent`.
+ * - **Prefixos:** `__Host-` exige `Secure`, `Path=/` e nenhum `Domain`; `__Secure-` exige `Secure`.
+ *   `SameSite=None` exige `Secure`. Violações lançam erro na hora de definir o cookie.
+ */
+export interface CookieOptions {
+    /** Padrão: `true`. Impede a leitura por JavaScript no navegador. */
+    httpOnly?: boolean;
+    /** Padrão: `true`. Os navegadores aceitam cookies `Secure` em `http://localhost`. */
+    secure?: boolean;
+    /** Padrão: `'Lax'`. `'None'` exige `secure`. */
+    sameSite?: 'Strict' | 'Lax' | 'None' | false;
+    /** Padrão: `'/'`. */
+    path?: string;
+    /** Sem `domain`, o cookie vale só para o host atual (o mais restrito). */
+    domain?: string;
+    /** Duração em segundos. `0` remove o cookie. */
+    maxAge?: number;
+    expires?: Date;
+    /** Cookie particionado (CHIPS), para uso em iframes de terceiros. Exige `secure`. */
+    partitioned?: boolean;
+    priority?: 'Low' | 'Medium' | 'High';
+}
+/** Lê o header `Cookie` num objeto sem protótipo. */
+export declare function parseCookies(header: string | undefined): Record<string, string>;
+/** Monta o valor de um header `Set-Cookie`, aplicando os padrões seguros. */
+export declare function serializeCookie(name: string, value: string, opts?: CookieOptions): string;
+//# sourceMappingURL=cookie.d.ts.map

package/dist/utils/cookie.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../src/utils/cookie.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qFAAqF;IACrF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IAC7C,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,qFAAqF;IACrF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACtC;AAQD,qDAAqD;AACrD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAa/E;AAWD,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,MAAM,CAoC7F"}

package/dist/utils/cookie.js

@@ -0,0 +1,94 @@
+/**
+ * Leitura e escrita de cookies (RFC 6265), seguras por padrão.
+ *
+ * - **Leitura:** o resultado é um objeto sem protótipo (`__proto__` vira um cookie comum, sem poluir
+ *   nada); em nomes repetidos vale o primeiro, como nos navegadores; um valor com `%` inválido fica cru.
+ * - **Escrita:** `HttpOnly`, `Secure`, `SameSite=Lax` e `Path=/` por padrão. Nome, `Domain` e `Path`
+ *   são validados (sem `;`, quebra de linha nem caracteres de controle), então não dá para injetar
+ *   atributos. O valor é codificado com `encodeURIComponent`.
+ * - **Prefixos:** `__Host-` exige `Secure`, `Path=/` e nenhum `Domain`; `__Secure-` exige `Secure`.
+ *   `SameSite=None` exige `Secure`. Violações lançam erro na hora de definir o cookie.
+ */
+/** `token` da RFC 7230: o que um nome de cookie pode conter. */
+const TOKEN = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+/** Domain e Path: nada de `;`, controle (inclui CR/LF) nem DEL. */
+// biome-ignore lint/suspicious/noControlCharactersInRegex: recusar caracteres de controle é o objetivo (injeção de atributos).
+const ATTR_VALUE = /^[^\x00-\x1f\x7f;]*$/;
+/** Lê o header `Cookie` num objeto sem protótipo. */
+export function parseCookies(header) {
+    const out = Object.create(null);
+    if (!header)
+        return out;
+    for (const part of header.split(';')) {
+        const eq = part.indexOf('=');
+        if (eq === -1)
+            continue;
+        const name = part.slice(0, eq).trim();
+        if (!name || name in out)
+            continue;
+        let value = part.slice(eq + 1).trim();
+        if (value.length >= 2 && value.startsWith('"') && value.endsWith('"'))
+            value = value.slice(1, -1);
+        out[name] = safeDecode(value);
+    }
+    return out;
+}
+function safeDecode(value) {
+    if (!value.includes('%'))
+        return value;
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return value;
+    }
+}
+/** Monta o valor de um header `Set-Cookie`, aplicando os padrões seguros. */
+export function serializeCookie(name, value, opts = {}) {
+    if (!TOKEN.test(name))
+        throw new Error(`[flowing] invalid cookie name "${name}".`);
+    const httpOnly = opts.httpOnly ?? true;
+    const secure = opts.secure ?? true;
+    const sameSite = opts.sameSite ?? 'Lax';
+    const path = opts.path ?? '/';
+    if (!ATTR_VALUE.test(path))
+        throw new Error(`[flowing] invalid cookie path "${path}".`);
+    if (opts.domain !== undefined && (!opts.domain || !ATTR_VALUE.test(opts.domain))) {
+        throw new Error(`[flowing] invalid cookie domain "${opts.domain}".`);
+    }
+    if (sameSite === 'None' && !secure)
+        throw new Error(`[flowing] cookie "${name}": SameSite=None requires secure.`);
+    if (opts.partitioned && !secure)
+        throw new Error(`[flowing] cookie "${name}": partitioned requires secure.`);
+    if (name.startsWith('__Secure-') && !secure)
+        throw new Error(`[flowing] cookie "${name}": the __Secure- prefix requires secure.`);
+    if (name.startsWith('__Host-') && (!secure || path !== '/' || opts.domain !== undefined)) {
+        throw new Error(`[flowing] cookie "${name}": the __Host- prefix requires secure, path "/" and no domain.`);
+    }
+    let out = `${name}=${encodeURIComponent(value)}`;
+    if (opts.maxAge !== undefined) {
+        if (!Number.isFinite(opts.maxAge))
+            throw new Error(`[flowing] cookie "${name}": invalid maxAge.`);
+        out += `; Max-Age=${Math.floor(opts.maxAge)}`;
+    }
+    if (opts.expires) {
+        if (Number.isNaN(opts.expires.getTime()))
+            throw new Error(`[flowing] cookie "${name}": invalid expires.`);
+        out += `; Expires=${opts.expires.toUTCString()}`;
+    }
+    if (opts.domain !== undefined)
+        out += `; Domain=${opts.domain}`;
+    out += `; Path=${path}`;
+    if (httpOnly)
+        out += '; HttpOnly';
+    if (secure)
+        out += '; Secure';
+    if (sameSite)
+        out += `; SameSite=${sameSite}`;
+    if (opts.partitioned)
+        out += '; Partitioned';
+    if (opts.priority)
+        out += `; Priority=${opts.priority}`;
+    return out;
+}
+//# sourceMappingURL=cookie.js.map

package/dist/utils/cookie.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.js","sourceRoot":"","sources":["../../src/utils/cookie.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAqBH,gEAAgE;AAChE,MAAM,KAAK,GAAG,gCAAgC,CAAC;AAC/C,mEAAmE;AACnE,+HAA+H;AAC/H,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAE1C,qDAAqD;AACrD,MAAM,UAAU,YAAY,CAAC,MAA0B;IACrD,MAAM,GAAG,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,GAAG;YAAE,SAAS;QACnC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClG,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa,EAAE,IAAI,GAAkB,EAAE;IACnF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,IAAI,CAAC,CAAC;IAEnF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;IAE9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,IAAI,CAAC,CAAC;IACxF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,mCAAmC,CAAC,CAAC;IAClH,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,iCAAiC,CAAC,CAAC;IAC7G,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,0CAA0C,CAAC,CAAC;IAClI,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,gEAAgE,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,GAAG,GAAG,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,oBAAoB,CAAC,CAAC;QAClG,GAAG,IAAI,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,qBAAqB,CAAC,CAAC;QAC1G,GAAG,IAAI,aAAa,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,IAAI,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;IAChE,GAAG,IAAI,UAAU,IAAI,EAAE,CAAC;IACxB,IAAI,QAAQ;QAAE,GAAG,IAAI,YAAY,CAAC;IAClC,IAAI,MAAM;QAAE,GAAG,IAAI,UAAU,CAAC;IAC9B,IAAI,QAAQ;QAAE,GAAG,IAAI,cAAc,QAAQ,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,WAAW;QAAE,GAAG,IAAI,eAAe,CAAC;IAC7C,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,IAAI,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,7 @@
+export { isJsonContentType, mediaType, negotiate, withCharset } from './content-type.ts';
+export { joinPaths } from './path.ts';
+export { DEFAULT_MAX_QUERY_KEYS, parseQuery, type ParsedQuery, type QueryParser } from './query.ts';
+export { hostnameOf, isValidHost, parseRequestTarget, pickForwarded } from './request-target.ts';
+export { compileHostMatcher, compileOriginMatcher, normalizeOrigin, toFullMatch, type MatchRule } from './origin-match.ts';
+export { parseCookies, serializeCookie, type CookieOptions } from './cookie.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AACpG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC3H,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,7 @@
+export { isJsonContentType, mediaType, negotiate, withCharset } from './content-type.js';
+export { joinPaths } from './path.js';
+export { DEFAULT_MAX_QUERY_KEYS, parseQuery } from './query.js';
+export { hostnameOf, isValidHost, parseRequestTarget, pickForwarded } from './request-target.js';
+export { compileHostMatcher, compileOriginMatcher, normalizeOrigin, toFullMatch } from './origin-match.js';
+export { parseCookies, serializeCookie } from './cookie.js';
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAsC,MAAM,YAAY,CAAC;AACpG,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe,EAAE,WAAW,EAAkB,MAAM,mBAAmB,CAAC;AAC3H,OAAO,EAAE,YAAY,EAAE,eAAe,EAAsB,MAAM,aAAa,CAAC"}