raffel 0.1.2

package/dist/http/security.d.ts

@@ -0,0 +1,233 @@
+/**
+ * Security Headers Middleware
+ *
+ * Helmet-compatible security headers middleware that sets various HTTP headers
+ * to help protect your app from well-known web vulnerabilities.
+ *
+ * @example
+ * import { secureHeaders } from 'raffel/http'
+ *
+ * // Default configuration (recommended for most apps)
+ * app.use('*', secureHeaders())
+ *
+ * // Custom configuration
+ * app.use('*', secureHeaders({
+ *   contentSecurityPolicy: {
+ *     directives: {
+ *       defaultSrc: ["'self'"],
+ *       scriptSrc: ["'self'", "https://cdn.example.com"],
+ *     },
+ *   },
+ *   hsts: { maxAge: 31536000, includeSubDomains: true },
+ *   frameguard: { action: 'deny' },
+ * }))
+ *
+ * // Disable specific headers
+ * app.use('*', secureHeaders({
+ *   hsts: false,
+ *   frameguard: false,
+ * }))
+ */
+import type { HttpMiddleware } from './app.js';
+/**
+ * CSP directive values
+ */
+export type CspDirectiveValue = string | string[];
+/**
+ * Content Security Policy directives
+ */
+export interface CspDirectives {
+    defaultSrc?: CspDirectiveValue;
+    scriptSrc?: CspDirectiveValue;
+    styleSrc?: CspDirectiveValue;
+    imgSrc?: CspDirectiveValue;
+    fontSrc?: CspDirectiveValue;
+    connectSrc?: CspDirectiveValue;
+    mediaSrc?: CspDirectiveValue;
+    objectSrc?: CspDirectiveValue;
+    frameSrc?: CspDirectiveValue;
+    childSrc?: CspDirectiveValue;
+    workerSrc?: CspDirectiveValue;
+    frameAncestors?: CspDirectiveValue;
+    formAction?: CspDirectiveValue;
+    baseUri?: CspDirectiveValue;
+    manifestSrc?: CspDirectiveValue;
+    upgradeInsecureRequests?: boolean;
+    blockAllMixedContent?: boolean;
+    reportUri?: string;
+    reportTo?: string;
+}
+/**
+ * Content Security Policy options
+ */
+export interface ContentSecurityPolicyOptions {
+    /**
+     * CSP directives
+     */
+    directives?: CspDirectives;
+    /**
+     * Use report-only mode (Content-Security-Policy-Report-Only header)
+     * @default false
+     */
+    reportOnly?: boolean;
+    /**
+     * Use default directives merged with custom ones
+     * @default true
+     */
+    useDefaults?: boolean;
+}
+/**
+ * HSTS options
+ */
+export interface HstsOptions {
+    /**
+     * Time in seconds the browser should remember to only use HTTPS
+     * @default 15552000 (180 days)
+     */
+    maxAge?: number;
+    /**
+     * Apply HSTS to subdomains
+     * @default true
+     */
+    includeSubDomains?: boolean;
+    /**
+     * Submit site to browser preload lists
+     * @default false
+     */
+    preload?: boolean;
+}
+/**
+ * X-Frame-Options action
+ */
+export type FrameguardAction = 'deny' | 'sameorigin';
+/**
+ * Frameguard options
+ */
+export interface FrameguardOptions {
+    /**
+     * Action to take for framing
+     * @default 'sameorigin'
+     */
+    action?: FrameguardAction;
+}
+/**
+ * Referrer-Policy values
+ */
+export type ReferrerPolicy = 'no-referrer' | 'no-referrer-when-downgrade' | 'origin' | 'origin-when-cross-origin' | 'same-origin' | 'strict-origin' | 'strict-origin-when-cross-origin' | 'unsafe-url';
+/**
+ * Referrer policy options
+ */
+export interface ReferrerPolicyOptions {
+    /**
+     * Referrer policy value
+     * @default 'strict-origin-when-cross-origin'
+     */
+    policy?: ReferrerPolicy | ReferrerPolicy[];
+}
+/**
+ * X-Permitted-Cross-Domain-Policies values
+ */
+export type CrossDomainPolicy = 'none' | 'master-only' | 'by-content-type' | 'by-ftp-filename' | 'all';
+/**
+ * Permissions Policy features
+ */
+export interface PermissionsPolicyOptions {
+    /**
+     * Feature policies as key-value pairs
+     * Key is the feature name, value is an array of allowed origins or 'self', 'none', '*'
+     *
+     * @example
+     * { geolocation: ['self'], camera: ['none'], microphone: ['self', 'https://example.com'] }
+     */
+    features?: Record<string, string[]>;
+}
+/**
+ * Security headers configuration
+ */
+export interface SecureHeadersOptions {
+    /**
+     * Content Security Policy configuration
+     * Set to false to disable
+     */
+    contentSecurityPolicy?: ContentSecurityPolicyOptions | false;
+    /**
+     * HTTP Strict Transport Security configuration
+     * Set to false to disable
+     */
+    hsts?: HstsOptions | false;
+    /**
+     * X-Frame-Options configuration
+     * Set to false to disable
+     */
+    frameguard?: FrameguardOptions | false;
+    /**
+     * X-Content-Type-Options: nosniff
+     * Set to false to disable
+     * @default true
+     */
+    nosniff?: boolean;
+    /**
+     * Referrer-Policy configuration
+     * Set to false to disable
+     */
+    referrerPolicy?: ReferrerPolicyOptions | false;
+    /**
+     * X-XSS-Protection configuration
+     * Set to false to disable
+     * @default true (sets to '0' to disable XSS auditor as it can introduce vulnerabilities)
+     */
+    xssFilter?: boolean;
+    /**
+     * X-DNS-Prefetch-Control
+     * Set to false to disable, true to set 'off', 'on' to enable
+     * @default 'off'
+     */
+    dnsPrefetchControl?: boolean | 'on' | 'off';
+    /**
+     * Permissions-Policy configuration
+     * Set to false to disable
+     */
+    permissionsPolicy?: PermissionsPolicyOptions | false;
+    /**
+     * X-Permitted-Cross-Domain-Policies
+     * Set to false to disable
+     * @default 'none'
+     */
+    crossDomainPolicy?: CrossDomainPolicy | false;
+    /**
+     * X-Download-Options: noopen
+     * Set to false to disable
+     * @default true
+     */
+    ieNoOpen?: boolean;
+    /**
+     * Cross-Origin-Embedder-Policy
+     * Set to false to disable
+     */
+    crossOriginEmbedderPolicy?: 'require-corp' | 'credentialless' | false;
+    /**
+     * Cross-Origin-Opener-Policy
+     * Set to false to disable
+     */
+    crossOriginOpenerPolicy?: 'same-origin' | 'same-origin-allow-popups' | 'unsafe-none' | false;
+    /**
+     * Cross-Origin-Resource-Policy
+     * Set to false to disable
+     */
+    crossOriginResourcePolicy?: 'same-origin' | 'same-site' | 'cross-origin' | false;
+    /**
+     * Origin-Agent-Cluster header
+     * Set to false to disable
+     * @default '?1'
+     */
+    originAgentCluster?: boolean;
+}
+/**
+ * Create security headers middleware
+ *
+ * @param options - Security headers configuration
+ * @returns Middleware function
+ */
+export declare function secureHeaders<E extends Record<string, unknown> = Record<string, unknown>>(options?: SecureHeadersOptions): HttpMiddleware<E>;
+export default secureHeaders;
+//# sourceMappingURL=security.d.ts.map

package/dist/http/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/http/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAM9C;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,EAAE,CAAA;AAEjD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,OAAO,CAAC,EAAE,iBAAiB,CAAA;IAC3B,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,cAAc,CAAC,EAAE,iBAAiB,CAAA;IAClC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,OAAO,CAAC,EAAE,iBAAiB,CAAA;IAC3B,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,UAAU,CAAC,EAAE,aAAa,CAAA;IAE1B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IAEpB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAE3B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,YAAY,CAAA;AAEpD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAA;CAC1B;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,4BAA4B,GAC5B,QAAQ,GACR,0BAA0B,GAC1B,aAAa,GACb,eAAe,GACf,iCAAiC,GACjC,YAAY,CAAA;AAEhB;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,MAAM,CAAC,EAAE,cAAc,GAAG,cAAc,EAAE,CAAA;CAC3C;AAED;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,aAAa,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,KAAK,CAAA;AAEtG;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,4BAA4B,GAAG,KAAK,CAAA;IAE5D;;;OAGG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAA;IAE1B;;;OAGG;IACH,UAAU,CAAC,EAAE,iBAAiB,GAAG,KAAK,CAAA;IAEtC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IAEjB;;;OAGG;IACH,cAAc,CAAC,EAAE,qBAAqB,GAAG,KAAK,CAAA;IAE9C;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IAEnB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,KAAK,CAAA;IAE3C;;;OAGG;IACH,iBAAiB,CAAC,EAAE,wBAAwB,GAAG,KAAK,CAAA;IAEpD;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,KAAK,CAAA;IAE7C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB;;;OAGG;IACH,yBAAyB,CAAC,EAAE,cAAc,GAAG,gBAAgB,GAAG,KAAK,CAAA;IAErE;;;OAGG;IACH,uBAAuB,CAAC,EAAE,aAAa,GAAG,0BAA0B,GAAG,aAAa,GAAG,KAAK,CAAA;IAE5F;;;OAGG;IACH,yBAAyB,CAAC,EAAE,aAAa,GAAG,WAAW,GAAG,cAAc,GAAG,KAAK,CAAA;IAEhF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAC7B;AAuBD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvF,OAAO,GAAE,oBAAyB,GACjC,cAAc,CAAC,CAAC,CAAC,CA6BnB;AAmLD,eAAe,aAAa,CAAA"}

package/dist/http/security.js

@@ -0,0 +1,230 @@
+/**
+ * Security Headers Middleware
+ *
+ * Helmet-compatible security headers middleware that sets various HTTP headers
+ * to help protect your app from well-known web vulnerabilities.
+ *
+ * @example
+ * import { secureHeaders } from 'raffel/http'
+ *
+ * // Default configuration (recommended for most apps)
+ * app.use('*', secureHeaders())
+ *
+ * // Custom configuration
+ * app.use('*', secureHeaders({
+ *   contentSecurityPolicy: {
+ *     directives: {
+ *       defaultSrc: ["'self'"],
+ *       scriptSrc: ["'self'", "https://cdn.example.com"],
+ *     },
+ *   },
+ *   hsts: { maxAge: 31536000, includeSubDomains: true },
+ *   frameguard: { action: 'deny' },
+ * }))
+ *
+ * // Disable specific headers
+ * app.use('*', secureHeaders({
+ *   hsts: false,
+ *   frameguard: false,
+ * }))
+ */
+// ─────────────────────────────────────────────────────────────────────────────
+// Default Values
+// ─────────────────────────────────────────────────────────────────────────────
+const DEFAULT_CSP_DIRECTIVES = {
+    defaultSrc: ["'self'"],
+    baseUri: ["'self'"],
+    fontSrc: ["'self'", 'https:', 'data:'],
+    formAction: ["'self'"],
+    frameAncestors: ["'self'"],
+    imgSrc: ["'self'", 'data:'],
+    objectSrc: ["'none'"],
+    scriptSrc: ["'self'"],
+    styleSrc: ["'self'", "'unsafe-inline'"],
+    upgradeInsecureRequests: true,
+};
+// ─────────────────────────────────────────────────────────────────────────────
+// Security Headers Middleware
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Create security headers middleware
+ *
+ * @param options - Security headers configuration
+ * @returns Middleware function
+ */
+export function secureHeaders(options = {}) {
+    // Pre-compute static headers
+    const staticHeaders = buildStaticHeaders(options);
+    return async (c, next) => {
+        // Execute the handler first
+        await next();
+        // No response to modify
+        if (!c.res) {
+            return;
+        }
+        // Clone response with security headers
+        const headers = new Headers(c.res.headers);
+        // Apply pre-computed headers
+        for (const [name, value] of staticHeaders) {
+            if (!headers.has(name)) {
+                headers.set(name, value);
+            }
+        }
+        c.res = new Response(c.res.body, {
+            status: c.res.status,
+            statusText: c.res.statusText,
+            headers,
+        });
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Header Builders
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Build all static security headers at middleware creation time
+ */
+function buildStaticHeaders(options) {
+    const headers = [];
+    // Content-Security-Policy
+    if (options.contentSecurityPolicy !== false) {
+        const cspHeader = buildCspHeader(options.contentSecurityPolicy || {});
+        if (cspHeader) {
+            const headerName = options.contentSecurityPolicy?.reportOnly
+                ? 'Content-Security-Policy-Report-Only'
+                : 'Content-Security-Policy';
+            headers.push([headerName, cspHeader]);
+        }
+    }
+    // Strict-Transport-Security
+    if (options.hsts !== false) {
+        headers.push(['Strict-Transport-Security', buildHstsHeader(options.hsts || {})]);
+    }
+    // X-Frame-Options
+    if (options.frameguard !== false) {
+        const action = options.frameguard?.action || 'sameorigin';
+        headers.push(['X-Frame-Options', action.toUpperCase()]);
+    }
+    // X-Content-Type-Options
+    if (options.nosniff !== false) {
+        headers.push(['X-Content-Type-Options', 'nosniff']);
+    }
+    // Referrer-Policy
+    if (options.referrerPolicy !== false) {
+        const policy = options.referrerPolicy?.policy || 'strict-origin-when-cross-origin';
+        const policyValue = Array.isArray(policy) ? policy.join(', ') : policy;
+        headers.push(['Referrer-Policy', policyValue]);
+    }
+    // X-XSS-Protection (disabled by default as it can introduce vulnerabilities)
+    if (options.xssFilter !== false) {
+        headers.push(['X-XSS-Protection', '0']);
+    }
+    // X-DNS-Prefetch-Control
+    if (options.dnsPrefetchControl !== false) {
+        const value = options.dnsPrefetchControl === 'on' ? 'on' : 'off';
+        headers.push(['X-DNS-Prefetch-Control', value]);
+    }
+    // Permissions-Policy
+    if (options.permissionsPolicy !== false && options.permissionsPolicy?.features) {
+        const policy = buildPermissionsPolicyHeader(options.permissionsPolicy.features);
+        if (policy) {
+            headers.push(['Permissions-Policy', policy]);
+        }
+    }
+    // X-Permitted-Cross-Domain-Policies
+    if (options.crossDomainPolicy !== false) {
+        headers.push(['X-Permitted-Cross-Domain-Policies', options.crossDomainPolicy || 'none']);
+    }
+    // X-Download-Options (for IE)
+    if (options.ieNoOpen !== false) {
+        headers.push(['X-Download-Options', 'noopen']);
+    }
+    // Cross-Origin-Embedder-Policy
+    if (options.crossOriginEmbedderPolicy) {
+        headers.push(['Cross-Origin-Embedder-Policy', options.crossOriginEmbedderPolicy]);
+    }
+    // Cross-Origin-Opener-Policy
+    if (options.crossOriginOpenerPolicy) {
+        headers.push(['Cross-Origin-Opener-Policy', options.crossOriginOpenerPolicy]);
+    }
+    // Cross-Origin-Resource-Policy
+    if (options.crossOriginResourcePolicy) {
+        headers.push(['Cross-Origin-Resource-Policy', options.crossOriginResourcePolicy]);
+    }
+    // Origin-Agent-Cluster
+    if (options.originAgentCluster !== false) {
+        headers.push(['Origin-Agent-Cluster', '?1']);
+    }
+    return headers;
+}
+/**
+ * Build Content-Security-Policy header value
+ */
+function buildCspHeader(options) {
+    const useDefaults = options.useDefaults !== false;
+    const directives = useDefaults
+        ? { ...DEFAULT_CSP_DIRECTIVES, ...options.directives }
+        : options.directives || {};
+    const parts = [];
+    for (const [key, value] of Object.entries(directives)) {
+        if (value === undefined || value === null)
+            continue;
+        const directiveName = camelToKebab(key);
+        if (typeof value === 'boolean') {
+            if (value) {
+                parts.push(directiveName);
+            }
+        }
+        else if (Array.isArray(value)) {
+            parts.push(`${directiveName} ${value.join(' ')}`);
+        }
+        else {
+            parts.push(`${directiveName} ${value}`);
+        }
+    }
+    return parts.join('; ');
+}
+/**
+ * Build Strict-Transport-Security header value
+ */
+function buildHstsHeader(options) {
+    const maxAge = options.maxAge ?? 15552000; // 180 days
+    const parts = [`max-age=${maxAge}`];
+    if (options.includeSubDomains !== false) {
+        parts.push('includeSubDomains');
+    }
+    if (options.preload) {
+        parts.push('preload');
+    }
+    return parts.join('; ');
+}
+/**
+ * Build Permissions-Policy header value
+ */
+function buildPermissionsPolicyHeader(features) {
+    const parts = [];
+    for (const [feature, values] of Object.entries(features)) {
+        const featureName = camelToKebab(feature);
+        if (values.length === 0 || values.includes('none')) {
+            parts.push(`${featureName}=()`);
+        }
+        else if (values.includes('*')) {
+            parts.push(`${featureName}=*`);
+        }
+        else {
+            const formattedValues = values.map((v) => (v === 'self' ? 'self' : `"${v}"`));
+            parts.push(`${featureName}=(${formattedValues.join(' ')})`);
+        }
+    }
+    return parts.join(', ');
+}
+/**
+ * Convert camelCase to kebab-case
+ */
+function camelToKebab(str) {
+    return str.replace(/([a-z])([A-Z])/g, '$1-$2').toLowerCase();
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Exports
+// ─────────────────────────────────────────────────────────────────────────────
+export default secureHeaders;
+//# sourceMappingURL=security.js.map

package/dist/http/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/http/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AA6OH,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,MAAM,sBAAsB,GAAkB;IAC5C,UAAU,EAAE,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,CAAC,QAAQ,CAAC;IACnB,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;IACtC,UAAU,EAAE,CAAC,QAAQ,CAAC;IACtB,cAAc,EAAE,CAAC,QAAQ,CAAC;IAC1B,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,CAAC,QAAQ,CAAC;IACrB,SAAS,EAAE,CAAC,QAAQ,CAAC;IACrB,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACvC,uBAAuB,EAAE,IAAI;CAC9B,CAAA;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAgC,EAAE;IAElC,6BAA6B;IAC7B,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAEjD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,4BAA4B;QAC5B,MAAM,IAAI,EAAE,CAAA;QAEZ,wBAAwB;QACxB,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YACX,OAAM;QACR,CAAC;QAED,uCAAuC;QACvC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAE1C,6BAA6B;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC;QAED,CAAC,CAAC,GAAG,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;YAC/B,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;YACpB,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU;YAC5B,OAAO;SACR,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,kBAAkB,CAAC,OAA6B;IACvD,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,0BAA0B;IAC1B,IAAI,OAAO,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAA;QACrE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,UAAU,GAAG,OAAO,CAAC,qBAAqB,EAAE,UAAU;gBAC1D,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,yBAAyB,CAAA;YAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAClF,CAAC;IAED,kBAAkB;IAClB,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,MAAM,IAAI,YAAY,CAAA;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IACzD,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC,CAAA;IACrD,CAAC;IAED,kBAAkB;IAClB,IAAI,OAAO,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,MAAM,IAAI,iCAAiC,CAAA;QAClF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAA;IAChD,CAAC;IAED,6EAA6E;IAC7E,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAA;IACzC,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC,CAAA;IACjD,CAAC;IAED,qBAAqB;IACrB,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK,IAAI,OAAO,CAAC,iBAAiB,EAAE,QAAQ,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;QAC/E,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,mCAAmC,EAAE,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,CAAC,CAAA;IAC1F,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAA;IAChD,CAAC;IAED,+BAA+B;IAC/B,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,8BAA8B,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAA;IACnF,CAAC;IAED,6BAA6B;IAC7B,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,4BAA4B,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAA;IAC/E,CAAC;IAED,+BAA+B;IAC/B,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,8BAA8B,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAA;IACnF,CAAC;IAED,uBAAuB;IACvB,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC,CAAA;IAC9C,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAqC;IAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,KAAK,CAAA;IACjD,MAAM,UAAU,GAAG,WAAW;QAC5B,CAAC,CAAC,EAAE,GAAG,sBAAsB,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE;QACtD,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAA;IAE5B,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAQ;QAEnD,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QAEvC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YAC3B,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,IAAI,KAAK,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAoB;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAA,CAAC,WAAW;IACrD,MAAM,KAAK,GAAG,CAAC,WAAW,MAAM,EAAE,CAAC,CAAA;IAEnC,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IACjC,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CAAC,QAAkC;IACtE,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;QAEzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,KAAK,CAAC,CAAA;QACjC,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,CAAC,CAAA;QAChC,CAAC;aAAM,CAAC;YACN,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YAC7E,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,KAAK,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;AAC9D,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,eAAe,aAAa,CAAA"}

package/dist/http/serve.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Node.js Serve Helper
+ *
+ * Provides a serve() function to run HttpApp with Node.js http server.
+ * Includes graceful shutdown support.
+ */
+import { type Server } from 'node:http';
+/** Fetch handler function */
+export type FetchHandler = (request: Request) => Response | Promise<Response>;
+/** Serve options */
+export interface ServeOptions {
+    /** Fetch handler (e.g., app.fetch) */
+    fetch: FetchHandler;
+    /** Port to listen on */
+    port?: number;
+    /** Hostname to bind to */
+    hostname?: string;
+    /** Callback when server starts listening */
+    onListen?: (info: {
+        port: number;
+        hostname: string;
+    }) => void;
+    /** Callback when server encounters an error */
+    onError?: (err: Error) => void;
+}
+/** Extended server interface with graceful shutdown */
+export interface RaffelServer extends Server {
+    /**
+     * Stop accepting new connections
+     * Existing requests continue processing
+     */
+    stopAcceptingRequests(): void;
+    /**
+     * Wait for all in-flight requests to complete
+     * @param timeoutMs - Maximum time to wait (default: 30000)
+     * @returns Promise that resolves when all requests complete or timeout
+     */
+    waitForRequestsToFinish(timeoutMs?: number): Promise<void>;
+    /**
+     * Get the current count of in-flight requests
+     */
+    getInFlightCount(): number;
+    /**
+     * Graceful shutdown - stop accepting + wait for completion
+     * @param timeoutMs - Maximum time to wait for requests
+     */
+    shutdown(timeoutMs?: number): Promise<void>;
+}
+/**
+ * Create and start an HTTP server for the given fetch handler
+ *
+ * @example
+ * const app = new HttpApp()
+ * app.get('/', (c) => c.text('Hello!'))
+ *
+ * const server = serve({
+ *   fetch: app.fetch,
+ *   port: 3000,
+ *   hostname: '0.0.0.0',
+ *   onListen: ({ port, hostname }) => {
+ *     console.log(`Listening on http://${hostname}:${port}`)
+ *   }
+ * })
+ *
+ * // Graceful shutdown
+ * process.on('SIGTERM', async () => {
+ *   await server.shutdown()
+ * })
+ */
+export declare function serve(options: ServeOptions): RaffelServer;
+export default serve;
+//# sourceMappingURL=serve.d.ts.map

package/dist/http/serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/http/serve.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAgB,KAAK,MAAM,EAA6C,MAAM,WAAW,CAAA;AAOhG,6BAA6B;AAC7B,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE7E,oBAAoB;AACpB,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,KAAK,EAAE,YAAY,CAAA;IAEnB,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;IAE7D,+CAA+C;IAC/C,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,CAAA;CAC/B;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAa,SAAQ,MAAM;IAC1C;;;OAGG;IACH,qBAAqB,IAAI,IAAI,CAAA;IAE7B;;;;OAIG;IACH,uBAAuB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE1D;;OAEG;IACH,gBAAgB,IAAI,MAAM,CAAA;IAE1B;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5C;AAuFD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,YAAY,CA4GzD;AAMD,eAAe,KAAK,CAAA"}