riser-bob 0.0.0-stage → 1.0.0

package/LICENSE

@@ -0,0 +1,27 @@
+# RiserBob Proprietary License
+
+Copyright (c) 2026 RiserBob. All rights reserved.
+
+## 1. Ownership
+RiserBob and its original source code, documentation, and associated materials are protected by applicable intellectual property laws. All rights not expressly granted under this license are reserved by the copyright holder.
+
+## 2. Permission to Use
+Subject to the terms of this license, users are granted permission to use the official, unmodified version of RiserBob in their own applications and projects.
+
+## 3. Modification Restrictions
+No person or entity may modify, adapt, alter, or create derivative versions of the RiserBob framework without prior written permission from the copyright holder.
+
+## 4. Distribution Restrictions
+Redistribution, resale, sublicensing, or publication of RiserBob or any modified version of the framework is prohibited unless expressly authorized in writing by the copyright holder.
+
+## 5. Independent Applications
+Users retain ownership of their independently developed application code, subject to any third-party rights and applicable law. Using RiserBob does not, by itself, transfer ownership of an application's independent code to the copyright holder.
+
+## 6. No Implied Permission
+No permission is granted beyond the rights expressly stated in this license. Any exception must be approved in writing by the copyright holder.
+
+## 7. Disclaimer
+RiserBob is provided "AS IS", without warranties of any kind, to the maximum extent permitted by applicable law.
+
+## 8. Contact and Written Permission
+Requests for permission to modify or redistribute RiserBob must be submitted to the copyright holder and approved in writing before the relevant activity takes place.

package/README.md

@@ -1,3 +1,231 @@
-# Temporary Holding Version
+# 🧽 RiserBob
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+A lightweight, fun, and fully tested HTTP framework for [Bun](https://bun.sh), with a built-in router, middleware pipeline, request validation, and consistent error handling.
+
+> RiserBob is distributed under the [RiserBob Proprietary License](#license). Please read it before using the framework.
+
+## Features
+
+- **Fast routing** with static and dynamic (`/users/:id`) routes, where static routes win over dynamic ones.
+- **Middleware pipeline** with global and per-route middleware, executed in registration order.
+- **Built-in auth middleware** for Bearer-token authentication with your own token verifier.
+- **Validator** with a simple rule syntax (`required`, `string`, `email`, `min:18`, ...).
+- **Response helpers** for JSON, status codes, headers, and redirects.
+- **Consistent errors** through `HttpError` and a central error handler (`404`, `405` with the `Allow` header, `500`).
+- **Fully tested** with Bun's test runner (unit and end-to-end tests).
+
+## Requirements
+
+- [Bun](https://bun.sh) 1.3 or newer
+
+## Installation
+
+```bash
+bun add riser-bob
+```
+
+> The examples below import from `riser-bob`. Adjust the import path if you install or reference the framework differently.
+
+## Quick Start
+
+```ts
+import { RiserBob } from 'riser-bob'
+
+const app = new RiserBob()
+
+app.spongGet('/', async (spongReq, spongRes) => {
+	return spongRes.json({ message: 'Welcome to Bikini Bottom! 🍍' })
+})
+
+app.spongListen(3000, () => {
+	console.log('RiserBob is running on http://localhost:3000')
+})
+```
+
+Run it:
+
+```bash
+bun run index.ts
+```
+
+## Routing
+
+Register routes with the `Sponge` methods. Every method returns the app, so calls can be chained.
+
+```ts
+app.spongGet('/users', listUsers)
+	.spongPost('/users', createUser)
+	.spongPut('/users/:id', replaceUser)
+	.spongPatch('/users/:id', updateUser)
+	.spongDelete('/users/:id', deleteUser)
+```
+
+Paths must start with `/`, and registering the same method and path twice throws an error.
+
+### Route parameters and query strings
+
+```ts
+app.spongGet('/users/:id', async (spongReq, spongRes) => {
+	const { id } = spongReq.params // decoded automatically
+	const page = spongReq.query.get('page') // URLSearchParams
+
+	return spongRes.json({ id, page })
+})
+```
+
+### Reading the request body
+
+```ts
+app.spongPost('/users', async (spongReq, spongRes) => {
+	const body = await spongReq.json<{ name: string }>()
+
+	return spongRes.json({ created: body.name })
+})
+```
+
+`spongReq` also exposes `method`, `path`, `url`, `headers`, `text()`, and the original `request`.
+
+## Middleware
+
+A middleware receives the request and a `next` function. Return `next()` to continue, or return a `Response` to stop the chain.
+
+```ts
+import type { SpongMiddleware, SpongRequest } from 'riser-bob'
+
+const logger: SpongMiddleware<SpongRequest> = async (spongReq, next) => {
+	console.log(`${spongReq.method} ${spongReq.path}`)
+	return next()
+}
+
+app.spongUse(logger) // global middleware
+
+app.spongGet('/admin', handler, adminOnly) // route-specific middleware
+```
+
+> Global middleware is attached when a route is registered, so call `spongUse` **before** registering the routes it should apply to.
+
+### Authentication
+
+```ts
+import { AuthMiddleware } from 'riser-bob'
+
+const auth = new AuthMiddleware(async (token) => {
+	// Return the user for a valid token, or null for an invalid one.
+	return verifyMyToken(token)
+})
+
+app.spongGet(
+	'/me',
+	async (spongReq, spongRes) => {
+		return spongRes.json({ user: spongReq.user })
+	},
+	auth.middleware
+)
+```
+
+The middleware reads the `Authorization: Bearer <token>` header. On success it sets `spongReq.user` and `spongReq.auth`. Otherwise it responds with `401` (`Unauthorized`, `Token is required`, or `Invalid or expired token`).
+
+## Validation
+
+```ts
+import { Validator } from 'riser-bob'
+
+const result = Validator.validate(
+	{ name: 'Zen', age: 17, email: 'zen@example.com' },
+	{
+		name: ['required', 'string'],
+		age: ['required', 'number', 'min:13'],
+		email: ['required', 'email']
+	}
+)
+
+if (!result.valid) {
+	console.log(result.errors) // { age: ['age must be at least 13'], ... }
+}
+```
+
+| Rule                            | Description                                            |
+| ------------------------------- | ------------------------------------------------------ |
+| `required`                      | Value must be present and not empty.                   |
+| `nullable`                      | `null` is allowed. Cannot be combined with `required`. |
+| `string` / `number` / `boolean` | Type checks. Numbers must be finite.                   |
+| `email`                         | Must be a valid email address.                         |
+| `confirmed`                     | Must match the `<field>Confirmation` value.            |
+| `min:n` / `max:n`               | Numeric limit for numbers, length limit for strings.   |
+| `minLength:n` / `maxLength:n`   | String length limits (integers only).                  |
+
+Fields without `required` are optional: missing values and empty strings are skipped.
+
+## Responses and Errors
+
+Handlers must return a `Response`. The `spongRes` helper builds one for you, and you can always return a standard `Response` instead.
+
+```ts
+app.spongGet('/ok', async (spongReq, spongRes) => spongRes.json({ ok: true }))
+app.spongGet('/raw', async () => new Response('plain text'))
+```
+
+To fail with a specific status, throw an `HttpError`:
+
+```ts
+import { HttpError } from 'riser-bob'
+
+app.spongGet('/secret', async () => {
+	throw new HttpError(403, 'Forbidden')
+})
+```
+
+RiserBob handles the common cases for you:
+
+| Situation                      | Response                                                |
+| ------------------------------ | ------------------------------------------------------- |
+| No matching route              | `404 Not Found`                                         |
+| Path exists, method does not   | `405 Method Not Allowed` with an `Allow` header         |
+| Handler throws an `HttpError`  | The error's status and message                          |
+| Handler throws any other error | `500 Internal Server Error` (details are never exposed) |
+| Handler returns no `Response`  | `500`                                                   |
+
+## Development
+
+```bash
+# Install dependencies
+bun install
+
+# Run all tests
+bun test
+```
+
+```text
+src/
+  application/   RiserBob application class
+  errors/        HttpError and ErrorHandler
+  http/          Response helpers
+  middleware/    Middleware pipeline and built-in middleware
+  routing/       Router
+  server/        HTTP server
+  types/         Shared types
+  validation/    Validator
+test/
+  unit/          Unit tests
+  e2e/           End-to-end tests
+```
+
+## Contributing
+
+Contributions are welcome, but because RiserBob is proprietary, please read [CONTRIBUTING.md](CONTRIBUTING.md) first. It explains the contribution terms. Please also follow our [Code of Conduct](CODE_OF_CONDUCT.md).
+
+## Security
+
+Please report vulnerabilities privately. See [SECURITY.md](SECURITY.md) for details.
+
+## License
+
+RiserBob is released under the **RiserBob Proprietary License**. In short:
+
+- You may use the official, unmodified version of RiserBob in your own applications and projects.
+- You may **not** modify, redistribute, resell, or sublicense the framework without prior written permission.
+- You keep full ownership of the application code you write with RiserBob.
+
+See the [LICENSE](LICENSE) file for the full terms.
+
+Copyright (c) 2026 RiserBob. All rights reserved.

package/dist/application/riser-bob.d.ts

@@ -0,0 +1,17 @@
+import type { SpongHandler } from '../types/spong-handler';
+import type { SpongRequest } from '../types/spong-request';
+import type { SpongMiddleware } from '../types/spong-middleware';
+export declare class RiserBob {
+    private readonly router;
+    private readonly middlewares;
+    private register;
+    spongGet(path: string, handler: SpongHandler, ...middlewares: SpongMiddleware<SpongRequest>[]): this;
+    spongPost(path: string, handler: SpongHandler, ...middlewares: SpongMiddleware<SpongRequest>[]): this;
+    spongPut(path: string, handler: SpongHandler, ...middlewares: SpongMiddleware<SpongRequest>[]): this;
+    spongPatch(path: string, handler: SpongHandler, ...middlewares: SpongMiddleware<SpongRequest>[]): this;
+    spongDelete(path: string, handler: SpongHandler, ...middlewares: SpongMiddleware<SpongRequest>[]): this;
+    spongHead(path: string, handler: SpongHandler, ...middlewares: SpongMiddleware<SpongRequest>[]): this;
+    spongOptions(path: string, handler: SpongHandler, ...middlewares: SpongMiddleware<SpongRequest>[]): this;
+    spongUse(middleware: SpongMiddleware<SpongRequest>): this;
+    spongListen(port?: number, callback?: () => void): Bun.Server<undefined>;
+}

package/dist/cli.js

@@ -0,0 +1,95 @@
+#!/usr/bin/env bun
+// @bun
+import{mkdir as b,writeFile as f}from"fs/promises";import i from"path";function h(o){return o.split(/[-_\s]+/).filter(Boolean).map((e)=>e[0].toUpperCase()+e.slice(1).toLowerCase()).join("")}function w(o){return o.replace(/([a-z0-9])([A-Z])/g,"$1-$2").toLowerCase().replace(/[_\s]+/g,"-")}function y(o){return/^[a-zA-Z][a-zA-Z0-9_-]*$/.test(o)}async function p(o){if(!y(o))throw Error('Invalid module name. Use letters, numbers, "-" or "_", starting with a letter.');let e=w(o),r=h(e),l=i.resolve(process.cwd(),"src","modules",e),c={[`${e}.controller.ts`]:`import type { SpongHandler } from "riser-bob";
+
+export class ${r}Controller {
+  readonly create: SpongHandler = async (spongReq, spongRes) => {
+    // TODO: Implement creation logic.
+  };
+
+  readonly findAll: SpongHandler = async (spongReq, spongRes) => {
+    // TODO: Implement fetching all records.
+  };
+
+  readonly findOne: SpongHandler = async (spongReq, spongRes) => {
+    // TODO: Implement fetching a record by ID.
+  };
+
+  readonly update: SpongHandler = async (spongReq, spongRes) => {
+    // TODO: Implement updating a record.
+  };
+
+  readonly delete: SpongHandler = async (spongReq, spongRes) => {
+    // TODO: Implement deleting a record.
+  };
+
+  verifyToken(token: string) {
+    // TODO: Implement token verification.
+    return null;
+  }
+}
+`,[`${e}.route.ts`]:`import type { RiserBob } from "riser-bob";
+import { AuthMiddleware } from "riser-bob";
+import { ${r}Controller } from "./${e}.controller";
+
+export class ${r}Router {
+  constructor(
+    private readonly bob: RiserBob,
+    private readonly controller: ${r}Controller,
+    private readonly authMiddleware: AuthMiddleware,
+  ) {}
+
+  register(): void {
+    // Public routes
+    this.bob.spongPost("/api/${e}", this.controller.create);
+    this.bob.spongGet("/api/${e}", this.controller.findAll);
+    this.bob.spongGet("/api/${e}/:id", this.controller.findOne);
+
+    // Protected routes
+    this.bob.spongPut(
+      "/api/${e}/:id",
+      this.controller.update,
+      this.authMiddleware.middleware,
+    );
+
+    this.bob.spongDelete(
+      "/api/${e}/:id",
+      this.controller.delete,
+      this.authMiddleware.middleware,
+    );
+  }
+}
+`,[`${e}.module.ts`]:`import type { RiserBob } from "riser-bob";
+import { AuthMiddleware } from "riser-bob";
+import { ${r}Controller } from "./${e}.controller";
+import { ${r}Router } from "./${e}.route";
+
+export class ${r}Module {
+  register(bob: RiserBob): void {
+    const controller = new ${r}Controller();
+
+    const authMiddleware = new AuthMiddleware((token) =>
+      controller.verifyToken(token),
+    );
+
+    const router = new ${r}Router(
+      bob,
+      controller,
+      authMiddleware,
+    );
+
+    router.register();
+  }
+}
+`};await b(l,{recursive:!0});for(let t of Object.keys(c)){let n=i.join(l,t);if(await Bun.file(n).exists())throw Error(`File "${i.relative(process.cwd(),n)}" already exists.`)}let d=[];try{for(let[t,n]of Object.entries(c)){let a=i.join(l,t);await f(a,n,{flag:"wx"}),d.push(a)}}catch(t){let{unlink:n}=await import("fs/promises");throw await Promise.all(d.map((a)=>n(a).catch(()=>{}))),t}console.log(`\uD83E\uDDFD Module "${e}" generated successfully!`),console.log(`\uD83D\uDCC1 ${i.relative(process.cwd(),l)}`);for(let t of Object.keys(c))console.log(`   \u2514\u2500\u2500 ${t}`)}var s=process.argv.slice(2),[m,v,g]=s;function u(){console.log(`
+\uD83E\uDDFD RiserBob CLI
+
+Usage:
+  riserbob g module <name>
+  riserbob generate module <name>
+  riserbob --help
+
+Commands:
+  g, generate    Generate a component
+  --help         Show this help message
+`)}async function R(){if(s.length===0||s.includes("--help")||s.includes("-h")){u();return}if(s.includes("--version")||s.includes("-v")){console.log("RiserBob CLI"),console.log("Version is provided by the installed package.");return}if((m==="g"||m==="generate")&&v==="module"&&g){await p(g);return}console.error("\uD83E\uDDFD Oh, barnacles! Unknown command."),u(),process.exitCode=1}R().catch((o)=>{let e=o instanceof Error?o.message:"Something went wrong.";console.error(`\uD83C\uDF4D RiserBob CLI: ${e}`),process.exitCode=1});

package/dist/errors/error-handler.d.ts

@@ -0,0 +1,3 @@
+export declare class ErrorHandler {
+    static handle(error: unknown): Response;
+}

package/dist/errors/http-error.d.ts

@@ -0,0 +1,4 @@
+export declare class HttpError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}

package/dist/http/content-negotiation.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Checks whether a request uses JSON as its body format.
+ */
+export declare const isJsonContentType: (contentType: string | null) => boolean;
+/**
+ * Throws 415 when the request body is not declared as JSON.
+ */
+export declare const requireJsonContentType: (contentType: string | null) => void;
+/**
+ * Checks whether an Accept header permits a given response media type.
+ *
+ * Supports exact types, type wildcards,  and q= quality values.
+ * A missing Accept header means any response type is acceptable.
+ */
+export declare const acceptsMediaType: (acceptHeader: string | null, responseType: string) => boolean;
+/**
+ * Throws 406 when the client does not accept the response media type.
+ */
+export declare const requireAccepts: (acceptHeader: string | null, responseType: string) => void;

package/dist/http/read-request-body.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_MAX_BODY_SIZE: number;
+export declare const readRequestBody: (request: Request, maxBodySize?: number) => Promise<Uint8Array>;

package/dist/http/response/riser-bob-response.d.ts

@@ -0,0 +1,2 @@
+import type { SpongResponse } from '../../types/spong-response';
+export declare function RiserBobResponse(): SpongResponse;

package/dist/http/response/status-code.d.ts

@@ -0,0 +1,65 @@
+export declare const StatusCode: {
+    readonly Continue: 100;
+    readonly SwitchingProtocols: 101;
+    readonly Processing: 102;
+    readonly EarlyHints: 103;
+    readonly OK: 200;
+    readonly Created: 201;
+    readonly Accepted: 202;
+    readonly NonAuthoritativeInfo: 203;
+    readonly NoContent: 204;
+    readonly ResetContent: 205;
+    readonly PartialContent: 206;
+    readonly MultiStatus: 207;
+    readonly AlreadyReported: 208;
+    readonly IMUsed: 226;
+    readonly MultipleChoices: 300;
+    readonly MovedPermanently: 301;
+    readonly Found: 302;
+    readonly SeeOther: 303;
+    readonly NotModified: 304;
+    readonly UseProxy: 305;
+    readonly TemporaryRedirect: 307;
+    readonly PermanentRedirect: 308;
+    readonly BadRequest: 400;
+    readonly Unauthorized: 401;
+    readonly PaymentRequired: 402;
+    readonly Forbidden: 403;
+    readonly NotFound: 404;
+    readonly MethodNotAllowed: 405;
+    readonly NotAcceptable: 406;
+    readonly ProxyAuthenticationRequired: 407;
+    readonly RequestTimeout: 408;
+    readonly Conflict: 409;
+    readonly Gone: 410;
+    readonly LengthRequired: 411;
+    readonly PreconditionFailed: 412;
+    readonly ContentTooLarge: 413;
+    readonly URITooLong: 414;
+    readonly UnsupportedMediaType: 415;
+    readonly RangeNotSatisfiable: 416;
+    readonly ExpectationFailed: 417;
+    readonly ImATeapot: 418;
+    readonly MisdirectedRequest: 421;
+    readonly UnprocessableContent: 422;
+    readonly Locked: 423;
+    readonly FailedDependency: 424;
+    readonly TooEarly: 425;
+    readonly UpgradeRequired: 426;
+    readonly PreconditionRequired: 428;
+    readonly TooManyRequests: 429;
+    readonly RequestHeaderFieldsTooLarge: 431;
+    readonly UnavailableForLegalReasons: 451;
+    readonly InternalServerError: 500;
+    readonly NotImplemented: 501;
+    readonly BadGateway: 502;
+    readonly ServiceUnavailable: 503;
+    readonly GatewayTimeout: 504;
+    readonly HTTPVersionNotSupported: 505;
+    readonly VariantAlsoNegotiates: 506;
+    readonly InsufficientStorage: 507;
+    readonly LoopDetected: 508;
+    readonly NotExtended: 510;
+    readonly NetworkAuthenticationRequired: 511;
+};
+export type StatusCode = (typeof StatusCode)[keyof typeof StatusCode];

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export { RiserBob } from './application/riser-bob';
+export { HttpError } from './errors/http-error';
+export { AuthMiddleware } from './middleware/auth-middleware';
+export { corsMiddleware } from './middleware/cors-middleware';
+export { loggerMiddleware } from './middleware/logger-middleware';
+export { MiddlewarePipeline } from './middleware/middleware-pipeline';
+export type { SpongAuth } from './types/spong-auth';
+export type { SpongHandler } from './types/spong-handler';
+export type { SpongMethod } from './types/spong-method';
+export type { SpongMiddleware } from './types/spong-middleware';
+export type { SpongRequest } from './types/spong-request';
+export type { SpongResponse } from './types/spong-response';
+export type { ValidationSchema } from './validation/validator';
+export { Validator } from './validation/validator';

package/dist/index.js

@@ -0,0 +1,22 @@
+// @bun
+class M{routes=new Map;register(e,n,i){let s=`${e} ${n}`;if(this.routes.has(s))throw Error(`\uD83C\uDF4D Oh, barnacles! Route "${s}" already lives in Bikini Bottom! \uD83E\uDDFD`);return this.routes.set(s,i),this}matchPath(e,n){let i=e.split("/").filter(Boolean),s=n.split("/").filter(Boolean);if(i.length!==s.length)return;let r={};for(let o=0;o<i.length;o++){let d=i[o],t=s[o];if(!d||!t)return;if(d.startsWith(":")){let l=d.slice(1);if(!l)return;try{r[l]=decodeURIComponent(t)}catch{return}}else if(d!==t)return}return r}compareRoutes(e,n){let i=e.split("/").filter(Boolean),s=n.split("/").filter(Boolean),r=Math.min(i.length,s.length);for(let o=0;o<r;o++){let d=i[o].startsWith(":"),t=s[o].startsWith(":");if(d!==t)return Number(d)-Number(t)}return s.length-i.length}match(e,n){let i=[...this.routes.entries()].filter(([s])=>s.startsWith(`${e} `)).sort(([s],[r])=>{let o=s.slice(e.length+1),d=r.slice(e.length+1);return this.compareRoutes(o,d)});for(let[s,r]of i){let o=s.slice(e.length+1),d=this.matchPath(o,n);if(d!==void 0)return{handler:r,params:d}}return}allowedMethods(e){return["GET","POST","PUT","PATCH","DELETE"].filter((i)=>this.routes.has(`${i} ${e}`))}}class x{middlewares=[];use(e){return this.middlewares.push(e),this}async execute(e,n,i){let s=-1,r=async(o)=>{if(o<=s)throw Error("[RiserBob] \uD83E\uDDFD Oh, barnacles! next() called multiple times!");s=o;let d=this.middlewares[o];if(!d)return i();return d(e,n,()=>r(o+1))};return r(0)}}class c extends Error{status;constructor(e,n){super(n);this.status=e;this.name="HttpError"}}class S{static handle(e){if(e instanceof c)return Response.json({error:e.message},{status:e.status});return console.error("[RiserBob] \uD83E\uDDFD An unexpected error occurred!",e),Response.json({error:"Internal Server Error"},{status:500})}}var K=(e)=>{if(!e)return!1;let n=e.split(";",1)[0]?.trim().toLowerCase();return n==="application/json"||n?.startsWith("application/")===!0&&n.endsWith("+json")},L=(e)=>{if(!K(e))throw new c(415,"Unsupported Media Type")};var P=10485760,T=async(e,n=P)=>{let i=e.headers.get("content-length");if(i!==null){let l=Number(i);if(!Number.isSafeInteger(l)||l<0)throw new c(400,"Invalid Content-Length");if(l>n)throw new c(413,"Content Too Large")}if(!e.body)return new Uint8Array;let s=e.body.getReader(),r=[],o=0;try{while(!0){let{done:l,value:g}=await s.read();if(l)break;if(o+=g.byteLength,o>n)throw await s.cancel().catch(()=>{}),new c(413,"Content Too Large");r.push(g)}}catch(l){throw await s.cancel().catch(()=>{}),l}finally{s.releaseLock()}let d=new Uint8Array(o),t=0;for(let l of r)d.set(l,t),t+=l.byteLength;return d};var a={Continue:100,SwitchingProtocols:101,Processing:102,EarlyHints:103,OK:200,Created:201,Accepted:202,NonAuthoritativeInfo:203,NoContent:204,ResetContent:205,PartialContent:206,MultiStatus:207,AlreadyReported:208,IMUsed:226,MultipleChoices:300,MovedPermanently:301,Found:302,SeeOther:303,NotModified:304,UseProxy:305,TemporaryRedirect:307,PermanentRedirect:308,BadRequest:400,Unauthorized:401,PaymentRequired:402,Forbidden:403,NotFound:404,MethodNotAllowed:405,NotAcceptable:406,ProxyAuthenticationRequired:407,RequestTimeout:408,Conflict:409,Gone:410,LengthRequired:411,PreconditionFailed:412,ContentTooLarge:413,URITooLong:414,UnsupportedMediaType:415,RangeNotSatisfiable:416,ExpectationFailed:417,ImATeapot:418,MisdirectedRequest:421,UnprocessableContent:422,Locked:423,FailedDependency:424,TooEarly:425,UpgradeRequired:426,PreconditionRequired:428,TooManyRequests:429,RequestHeaderFieldsTooLarge:431,UnavailableForLegalReasons:451,InternalServerError:500,NotImplemented:501,BadGateway:502,ServiceUnavailable:503,GatewayTimeout:504,HTTPVersionNotSupported:505,VariantAlsoNegotiates:506,InsufficientStorage:507,LoopDetected:508,NotExtended:510,NetworkAuthenticationRequired:511};function q(){let e=a.OK,n=new Headers,i=(t)=>{if(!Number.isInteger(t)||t<200||t>599)throw RangeError(`Invalid Fetch Response status: ${t}`)},s=(t)=>t===204||t===205||t===304,r=(t,l=e)=>{if(i(l),s(l))throw TypeError(`Status ${l} cannot have a response body`);return Response.json(t,{status:l,headers:n})},o=(t)=>(i(t),new Response(null,{status:t,headers:n})),d=(t,l="/")=>{let g=new URL(l,"http://localhost");return new Response(null,{status:t,headers:new Headers([...n.entries(),["Location",g.href]])})};return{send(t){let l=new Headers(n);if(!l.has("Content-Type")&&typeof t==="string")l.set("Content-Type","text/plain; charset=utf-8");return new Response(t,{status:e,headers:l})},json:r,status(t){return e=t,this},header(t,l){return n.set(t,l),this},SpongContinue:()=>o(a.Continue),SpongSwitchingProtocols:()=>o(a.SwitchingProtocols),SpongProcessing:()=>o(a.Processing),SpongEarlyHints:()=>o(a.EarlyHints),SpongOK:(t={message:"OK"})=>r(t,a.OK),SpongCreated:(t={message:"Created"})=>r(t,a.Created),SpongAccepted:(t={message:"Accepted"})=>r(t,a.Accepted),SpongNonAuthoritativeInfo:(t={})=>r(t,a.NonAuthoritativeInfo),SpongNoContent:()=>o(a.NoContent),SpongResetContent:()=>o(a.ResetContent),SpongPartialContent:(t={})=>r(t,a.PartialContent),SpongMultiStatus:(t={})=>r(t,a.MultiStatus),SpongAlreadyReported:(t={})=>r(t,a.AlreadyReported),SpongIMUsed:(t={})=>r(t,a.IMUsed),SpongMultipleChoices:(t={})=>r(t,a.MultipleChoices),SpongMovedPermanently:(t)=>d(a.MovedPermanently,t),SpongFound:(t)=>d(a.Found,t),SpongSeeOther:(t)=>d(a.SeeOther,t),SpongNotModified:()=>o(a.NotModified),SpongUseProxy:(t)=>d(a.UseProxy,t),SpongTemporaryRedirect:(t)=>d(a.TemporaryRedirect,t),SpongPermanentRedirect:(t)=>d(a.PermanentRedirect,t),SpongBadRequest:(t={error:"Bad Request"})=>r(t,a.BadRequest),SpongUnauthorized:(t={error:"Unauthorized"})=>r(t,a.Unauthorized),SpongPaymentRequired:(t={})=>r(t,a.PaymentRequired),SpongForbidden:(t={error:"Forbidden"})=>r(t,a.Forbidden),SpongNotFound:(t={error:"Not Found"})=>r(t,a.NotFound),SpongMethodNotAllowed:(t={})=>r(t,a.MethodNotAllowed),SpongNotAcceptable:(t={})=>r(t,a.NotAcceptable),SpongProxyAuthenticationRequired:(t={})=>r(t,a.ProxyAuthenticationRequired),SpongRequestTimeout:(t={})=>r(t,a.RequestTimeout),SpongConflict:(t={})=>r(t,a.Conflict),SpongGone:(t={})=>r(t,a.Gone),SpongLengthRequired:(t={})=>r(t,a.LengthRequired),SpongPreconditionFailed:(t={})=>r(t,a.PreconditionFailed),SpongContentTooLarge:(t={})=>r(t,a.ContentTooLarge),SpongURITooLong:(t={})=>r(t,a.URITooLong),SpongUnsupportedMediaType:(t={})=>r(t,a.UnsupportedMediaType),SpongRangeNotSatisfiable:(t={})=>r(t,a.RangeNotSatisfiable),SpongExpectationFailed:(t={})=>r(t,a.ExpectationFailed),SpongImATeapot:(t={message:"I'm a teapot"})=>r(t,a.ImATeapot),SpongMisdirectedRequest:(t={})=>r(t,a.MisdirectedRequest),SpongUnprocessableContent:(t={})=>r(t,a.UnprocessableContent),SpongLocked:(t={})=>r(t,a.Locked),SpongFailedDependency:(t={})=>r(t,a.FailedDependency),SpongTooEarly:(t={})=>r(t,a.TooEarly),SpongUpgradeRequired:(t={})=>r(t,a.UpgradeRequired),SpongPreconditionRequired:(t={})=>r(t,a.PreconditionRequired),SpongTooManyRequests:(t={})=>r(t,a.TooManyRequests),SpongRequestHeaderFieldsTooLarge:(t={})=>r(t,a.RequestHeaderFieldsTooLarge),SpongUnavailableForLegalReasons:(t={})=>r(t,a.UnavailableForLegalReasons),SpongInternalServerError:(t={error:"Internal Server Error"})=>r(t,a.InternalServerError),SpongNotImplemented:(t={})=>r(t,a.NotImplemented),SpongBadGateway:(t={})=>r(t,a.BadGateway),SpongServiceUnavailable:(t={})=>r(t,a.ServiceUnavailable),SpongGatewayTimeout:(t={})=>r(t,a.GatewayTimeout),SpongHTTPVersionNotSupported:(t={})=>r(t,a.HTTPVersionNotSupported),SpongVariantAlsoNegotiates:(t={})=>r(t,a.VariantAlsoNegotiates),SpongInsufficientStorage:(t={})=>r(t,a.InsufficientStorage),SpongLoopDetected:(t={})=>r(t,a.LoopDetected),SpongNotExtended:(t={})=>r(t,a.NotExtended),SpongNetworkAuthenticationRequired:(t={})=>r(t,a.NetworkAuthenticationRequired)}}var J=globalThis.Bun;var I=(e,n=3000,i)=>{let s=J.serve({port:n,async fetch(r){try{let o=new URL(r.url),d=r.headers.get("origin");if(r.method==="OPTIONS"){let p=new Headers;if(d)p.set("Access-Control-Allow-Origin",d),p.set("Access-Control-Allow-Credentials","true"),p.set("Access-Control-Allow-Methods","GET, POST, PUT, PATCH, DELETE, OPTIONS"),p.set("Access-Control-Allow-Headers","Content-Type, Authorization"),p.set("Access-Control-Max-Age","86400"),p.set("Vary","Origin");return new Response(null,{status:204,headers:p})}let t=e.match(r.method,o.pathname);if(!t){let p=e.allowedMethods(o.pathname);if(p.length>0)return console.error(`[RiserBob] \uD83D\uDE2D\uD83E\uDDFD Method Not Allowed!
+`+`Requested Method: ${r.method}
+Path: ${o.pathname}
+Allowed Methods: ${p.join(", ")}`),Response.json({error:"Method Not Allowed"},{status:405,headers:{Allow:p.join(", ")}});throw console.warn(`[RiserBob] \uD83E\uDDFD\uD83D\uDE02 Welcome to Bikini Bottom!
+  \uD83D\uDD0E Requested Method: ${r.method}
+  \uD83D\uDEE3\uFE0F Requested Path: ${o.pathname}
+  \uD83E\uDD37 Route not found! Did Patrick register it?
+  \uD83C\uDF4D SpongeBob: "I checked my pineapple, but the endpoint isn't there!"
+  \uD83E\uDD80 Mr. Krabs: "NO ROUTE, NO MONEY!"
+  `),new c(404,"Not Found")}let{handler:l,params:g}=t,m=r.headers.get("content-length");if(m!==null&&Number(m)>P)throw new c(413,"Content Too Large");let w={request:r,method:r.method,url:o,path:o.pathname,params:g,query:o.searchParams,headers:r.headers,formData:async()=>{let p=await T(r),u=r.headers.get("content-type");if(!u)throw new c(400,"Missing Content-Type");let O=new Response(p.buffer.slice(p.byteOffset,p.byteOffset+p.byteLength),{headers:{"Content-Type":u}});try{return await O.formData()}catch{throw new c(400,"Invalid form data")}},json:async()=>{L(r.headers.get("content-type"));let p=await T(r),u=new TextDecoder().decode(p);try{return JSON.parse(u)}catch{throw new c(400,"Invalid JSON body")}},text:async()=>{let p=await T(r);return new TextDecoder().decode(p)}},y=q(),h=await l(w,y);if(h instanceof Response)return h;return console.error(`[RiserBob] \uD83D\uDE2D\uD83E\uDDFD Oh no! RiserBob is sad! The Handler forgot to return a valid Response! \uD83D\uDC94
+  Method: ${r.method}
+  Path: ${o.pathname}
+  Expected: Response
+  Received: ${h===void 0?"undefined":typeof h}
+  \uD83D\uDE22 RiserBob is crying in Bikini Bottom... \uD83C\uDF4D`),S.handle(Error("Handler did not send a response"))}catch(o){return console.error(`[RiserBob] \uD83D\uDE2D\uD83E\uDDFD Oh no! RiserBob is freaking out!
+  Something went wrong while handling this request! \uD83D\uDCA5
+  RiserBob: "Who lives in a pineapple under a bug?! \uD83D\uDE31\uD83C\uDF4D"
+  Error:`,o),S.handle(o)}}});return i?.(),s};class U{router=new M;middlewares=[];register(e,n,i,...s){if(!n.startsWith("/"))throw Error(`\uD83E\uDDFD Oh, barnacles! "${n}" must start with "/"! \uD83C\uDF4D`);let r=new x;for(let d of this.middlewares)r.use(d);for(let d of s)r.use(d);let o=async(d,t)=>r.execute(d,t,async()=>{let l=await i(d,t);if(l instanceof Response)return l;throw console.error("[RiserBob] \uD83E\uDDFD Oh, barnacles! Handler did not return a Response! \uD83C\uDF4D"),new c(500,"Handler did not send a response")});return this.router.register(e,n,o),this}spongGet(e,n,...i){return this.register("GET",e,n,...i)}spongPost(e,n,...i){return this.register("POST",e,n,...i)}spongPut(e,n,...i){return this.register("PUT",e,n,...i)}spongPatch(e,n,...i){return this.register("PATCH",e,n,...i)}spongDelete(e,n,...i){return this.register("DELETE",e,n,...i)}spongHead(e,n,...i){return this.register("HEAD",e,n,...i)}spongOptions(e,n,...i){return this.register("OPTIONS",e,n,...i)}spongUse(e){return this.middlewares.push(e),this}spongListen(e=4000,n){return I(this.router,e,n)}}import{createHmac as Z,timingSafeEqual as Y}from"crypto";var X=/^[\u0021-\u003A\u003C\u003E-\u007E]+$/,Q=/^[\u0021-\u003A\u003C-\u007E]*$/,ee=/^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i,te=/^[\u0020-\u003A\u003D-\u007E]*$/,re=/^[!#$&'()*+\-.\/0-9:<=>?@A-Z[\]\^_`a-z{|}~]*$/,oe=(()=>{let e=function(){};return e.prototype=Object.create(null),e})();function ne(e,n){let i=new oe,s=e.length;if(s<2)return i;let r=n?.decode||de,o=0;do{let d=ae(e,o,s);if(d===s)break;let t=se(e,o,s);if(d>t){o=e.lastIndexOf(";",d-1)+1;continue}let l=B(e,o,d);if(i[l]===void 0)i[l]=r(B(e,d+1,t));o=t+1}while(o<s);return i}function ie(e,n){let i=n?.encode||le;if(!X.test(e.name))throw TypeError(`argument name is invalid: ${e.name}`);let s=e.value==null?"":i(e.value);if(!Q.test(s))throw TypeError(`argument val is invalid: ${e.value}`);let r=e.name+"="+s;if(e.maxAge!==void 0){if(!Number.isInteger(e.maxAge))throw TypeError(`option maxAge is invalid: ${e.maxAge}`);r+="; Max-Age="+e.maxAge}if(e.domain){if(!ee.test(e.domain))throw TypeError(`option domain is invalid: ${e.domain}`);r+="; Domain="+e.domain}if(e.path){if(!te.test(e.path))throw TypeError(`option path is invalid: ${e.path}`);r+="; Path="+e.path}if(e.expires){if(!Number.isFinite(e.expires.valueOf()))throw TypeError(`option expires is invalid: ${e.expires}`);r+="; Expires="+e.expires.toUTCString()}if(e.httpOnly)r+="; HttpOnly";if(e.secure)r+="; Secure";if(e.partitioned)r+="; Partitioned";if(e.priority)switch(typeof e.priority==="string"?e.priority.toLowerCase():void 0){case"low":r+="; Priority=Low";break;case"medium":r+="; Priority=Medium";break;case"high":r+="; Priority=High";break;default:throw TypeError(`option priority is invalid: ${e.priority}`)}if(e.sameSite)switch(typeof e.sameSite==="string"?e.sameSite.toLowerCase():e.sameSite){case!0:case"strict":r+="; SameSite=Strict";break;case"lax":r+="; SameSite=Lax";break;case"none":r+="; SameSite=None";break;default:throw TypeError(`option sameSite is invalid: ${e.sameSite}`)}return r}function se(e,n,i){let s=e.indexOf(";",n);return s===-1?i:s}function ae(e,n,i){let s=e.indexOf("=",n);return s===-1?i:s}function B(e,n,i){if(n===i)return"";let s=n,r=i;do{let o=e.charCodeAt(s);if(o!==32&&o!==9)break}while(++s<r);while(r>s){let o=e.charCodeAt(r-1);if(o!==32&&o!==9)break;r--}return e.slice(s,r)}function de(e){if(e.indexOf("%")===-1)return e;try{return decodeURIComponent(e)}catch(n){return e}}function le(e){return re.test(e)?e:encodeURIComponent(e)}class f extends Error{code;constructor(e,n,i){super(n,i);this.code=e,this.name="CookieError"}}var pe=Object.freeze({path:"/",httpOnly:!0,secure:!0,sameSite:"lax"}),D=4096,F=34560000,ue=16384,V=32,ce=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/,ge=/^\/[\x20-\x3A\x3C-\x7E]*$/,_="[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?",me=new RegExp(`^\\.?${_}(?:\\.${_})*$`,"i"),he=new Set(["lax","strict","none"]),fe=new Set(["low","medium","high"]);function N(e){return Object.fromEntries(Object.entries(e).filter(([,n])=>n!==void 0))}function j(e,n,i){return Z("sha256",i).update(`${e}=${n}`).digest("base64url")}class A{cookies=new Map;pending=new Map;secrets;defaults;headerRejected;constructor(e,n={}){let i=n.secrets??[];for(let o of i)if(typeof o!=="string"||o.length<V)throw new f("WEAK_SECRET",`Cookie secrets must be strings of at least ${V} characters.`);this.secrets=[...i],this.defaults=N(n.defaults??{}),this.resolveOptions("probe",{});let s=n.maxHeaderBytes??ue,r=!1;if(typeof e==="string"&&e!=="")if(Buffer.byteLength(e,"utf8")>s)r=!0;else this.load(e);this.headerRejected=r}static fromRequest(e,n){return new A(e.headers.get("cookie"),n)}get(e){return this.cookies.get(e)}has(e){return this.cookies.has(e)}names(){return[...this.cookies.keys()]}getAll(){return Object.fromEntries(this.cookies)}set(e,n,i={}){let s=this.resolveOptions(e,i),r=this.serialize(e,n,s);if(this.record(e,s,r),this.isExpired(s))this.cookies.delete(e);else this.cookies.set(e,n);return this}setSigned(e,n,i={}){let s=this.secrets[0];if(s===void 0)throw new f("SECRETS_REQUIRED","Signed cookies need at least one secret in CookieManagerOptions.secrets.");if(typeof n!=="string")throw new f("INVALID_VALUE","Cookie value must be a string.");return this.set(e,`${n}.${j(e,n,s)}`,i)}getSigned(e){let n=this.cookies.get(e);if(n===void 0)return;let i=n.lastIndexOf(".");if(i===-1)return;let s=n.slice(0,i),r=Buffer.from(n.slice(i+1),"utf8"),o=!1;for(let d of this.secrets){let t=Buffer.from(j(e,s,d),"utf8");if(r.length===t.length&&Y(r,t))o=!0}return o?s:void 0}delete(e,n={}){let i=this.resolveOptions(e,{...N(n),expires:new Date(0),maxAge:0}),s=this.serialize(e,"",i);return this.record(e,i,s),this.cookies.delete(e),this}getSetCookieHeaders(){return[...this.pending.values()]}applyTo(e){let n=this.getSetCookieHeaders();if(n.length===0)return e;try{for(let i of n)e.headers.append("Set-Cookie",i);return e}catch{let i=new Response(e.body,{status:e.status,statusText:e.statusText,headers:new Headers(e.headers)});for(let s of n)i.headers.append("Set-Cookie",s);return i}}load(e){let n;try{n=ne(e)}catch{return}for(let[i,s]of Object.entries(n))if(s!==void 0)this.cookies.set(i,s)}resolveOptions(e,n){if(typeof e!=="string"||!ce.test(e))throw new f("INVALID_NAME",`Invalid cookie name: ${JSON.stringify(e)}.`);let i={...pe,...this.defaults,...N(n)},s=(o)=>{throw new f("INVALID_OPTION",`Cookie "${e}": ${o}`)};if(i.maxAge!==void 0){if(!Number.isSafeInteger(i.maxAge)||i.maxAge<0)s("maxAge must be a non-negative integer (seconds).");i.maxAge=Math.min(i.maxAge,F)}if(i.expires!==void 0){if(!(i.expires instanceof Date)||Number.isNaN(i.expires.getTime()))s("expires must be a valid Date.");let o=Date.now()+F*1000;if(i.expires.getTime()>o)i.expires=new Date(o)}if(i.path!==void 0&&!ge.test(i.path))s('path must start with "/" and not contain ";" or control characters.');if(i.domain!==void 0&&(i.domain.length>253||!me.test(i.domain)))s("domain is not a valid host name.");if(i.priority!==void 0&&!fe.has(i.priority))s('priority must be "low", "medium" or "high".');if(typeof i.sameSite==="string"&&!he.has(i.sameSite))s('sameSite must be "lax", "strict" or "none".');let r=e.startsWith("__Host-");if((r||e.startsWith("__Secure-")||i.sameSite==="none"||i.partitioned===!0)&&i.secure!==!0)s("this cookie requires the Secure attribute (__Host-/__Secure- prefix, SameSite=None or Partitioned).");if(r){if(i.domain!==void 0)s("__Host- cookies cannot set a domain.");if(i.path!=="/")s('__Host- cookies must use path "/".')}return i}serialize(e,n,i){if(typeof n!=="string")throw new f("INVALID_VALUE","Cookie value must be a string.");let s;try{s=ie({name:e,value:n,...i})}catch(r){throw new f("SERIALIZATION_FAILED",`Cookie "${e}" could not be serialized.`,{cause:r})}if(Buffer.byteLength(s,"utf8")>D)throw new f("COOKIE_TOO_LARGE",`Cookie "${e}" is larger than ${D} bytes.`);return s}record(e,n,i){let s=[e,n.domain?.toLowerCase()??"",n.path??"/",n.partitioned===!0?"partitioned":""].join("\x00");this.pending.delete(s),this.pending.set(s,i)}isExpired(e){return e.maxAge===0||e.expires!==void 0&&e.expires.getTime()<=Date.now()}}class z{verifyToken;mode;cookieName;constructor(e,n={}){this.verifyToken=e;this.mode=n.mode??"both",this.cookieName=n.cookieName??"token"}getToken(e){if(this.mode==="bearer"||this.mode==="both"){let n=e.headers.get("authorization");if(n){let i=n.match(/^Bearer\s+(\S+)$/i);if(!i)return null;return i[1]??null}if(this.mode==="bearer")return null}if(this.mode==="cookie"||this.mode==="both")return A.fromRequest(e.request).get(this.cookieName)??null;return null}middleware=async(e,n,i)=>{let s=this.getToken(e);if(!s)return n.SpongUnauthorized({success:!1,message:"Authentication token is missing or invalid."});let r;try{r=await this.verifyToken(s)}catch(o){return console.error("[RiserBob] Token verification failed:",o),S.handle(o)}if(!r)return n.SpongUnauthorized({success:!1,message:"Token is invalid or expired."});return e.user=r,e.auth={token:s},i()}}var ye=["GET","POST","PUT","PATCH","DELETE"],we=["Content-Type","Authorization"],Se=(e)=>{let{origin:n,credentials:i=!1,methods:s=ye,allowedHeaders:r=we,exposedHeaders:o=[],maxAge:d=86400}=e;if(n==="*"&&i)throw TypeError('[RiserBob] CORS cannot use "*" with credentials enabled.');if(!Array.isArray(s)||s.length===0)throw TypeError("[RiserBob] CORS methods must contain at least one method.");if(!Array.isArray(r))throw TypeError("[RiserBob] CORS allowedHeaders must be an array.");if(!Array.isArray(o))throw TypeError("[RiserBob] CORS exposedHeaders must be an array.");if(!Number.isInteger(d)||d<0)throw TypeError("[RiserBob] CORS maxAge must be a non-negative integer.");let t=new Set(Array.isArray(n)?n:[]),l=s.join(", "),g=r.join(", "),m=o.join(", ");return async(w,y,h)=>{let p=w.request.headers.get("origin"),u=new Headers;if(n==="*"?!0:p!==null&&t.has(p)||typeof n==="string"&&n!=="*"&&p===n){if(u.set("Access-Control-Allow-Origin",n==="*"?"*":p),i)u.set("Access-Control-Allow-Credentials","true");if(u.set("Access-Control-Allow-Methods",l),r.length>0)u.set("Access-Control-Allow-Headers",g);if(o.length>0)u.set("Access-Control-Expose-Headers",m);if(u.set("Access-Control-Max-Age",String(d)),n!=="*")u.set("Vary","Origin")}if(w.method==="OPTIONS")return new Response(null,{status:204,headers:u});let R=await h(),b=new Headers(R.headers);for(let[k,W]of u)if(k.toLowerCase()==="vary"){let H=b.get("Vary"),E=H?H.split(",").map((v)=>v.trim()):[];if(!E.some((v)=>v.toLowerCase()==="origin"))E.push("Origin");b.set("Vary",E.join(", "))}else b.set(k,W);return new Response(R.body,{status:R.status,statusText:R.statusText,headers:b})}};var Re=async(e,n,i)=>{let s=performance.now(),r=500;try{let o=await i();return r=o.status,o}catch(o){throw console.error("[RiserBob] \uD83D\uDC80\uD83E\uDDFD Barnacles! Request failed!",o),o}finally{let o=(performance.now()-s).toFixed(2),d=new Date().toISOString();console.log(`[RiserBob] ${d} | ${e.method} ${e.path} | ${r} | ${o}ms`)}};var be=new Set(["required","nullable","string","number","boolean","email","confirmed","min","max","minLength","maxLength"]);class G{static parseSchema(e){let n={};for(let[i,s]of Object.entries(e)){if(!Array.isArray(s))throw TypeError(`Invalid validation rules for "${i}"`);n[i]=s.map((o)=>{if(typeof o!=="string")throw TypeError(`Invalid validation rule for "${i}"`);let d=o.indexOf(":"),t=d===-1?o:o.slice(0,d);if(!be.has(t))throw TypeError(`Unknown validation rule: ${o}`);if(!["min","max","minLength","maxLength"].includes(t)){if(d!==-1)throw TypeError(`Rule "${t}" does not accept a limit`);return{name:t}}if(d===-1)throw TypeError(`Rule "${t}" requires a limit`);let g=o.slice(d+1);if(!/^\d+(?:\.\d+)?$/.test(g))throw TypeError(`Invalid validation limit: ${o}`);let m=Number(g);if(!Number.isFinite(m))throw TypeError(`Invalid validation limit: ${o}`);if(t.endsWith("Length")&&!Number.isInteger(m))throw TypeError(`Rule "${t}" requires an integer limit`);return{name:t,limit:m}});let r=n[i].map((o)=>o.name);if(r.includes("required")&&r.includes("nullable"))throw console.error(`[RiserBob] \uD83E\uDDFD\uD83C\uDF4D Oh, barnacles! Invalid Validation Schema!
+  Field: ${i}
+  \uD83D\uDCA5 "required" and "nullable" cannot be combined!
+  \uD83E\uDD91 Squidward says: "Fix your Schema already!"`),TypeError(`[RiserBob] Invalid rules for field "${i}".`)}return n}static validate(e,n){if(e===null||typeof e!=="object"||Array.isArray(e))throw TypeError("Validation data must be a plain object");let i=this.parseSchema(n),s={},r=(o,d)=>{(s[o]??=[]).push(d)};for(let[o,d]of Object.entries(i)){let t=e[o],l=d.map((h)=>h.name),g=l.includes("required"),m=l.includes("nullable"),w=t===void 0||t===null||typeof t==="string"&&t.trim()==="";if(g&&w){r(o,`${o} is required`);continue}if(t===void 0)continue;if(t===null&&m)continue;if(typeof t==="string"&&t.trim()===""&&!g)continue;let y=!1;if(l.includes("string")&&typeof t!=="string")r(o,`${o} must be a string`),y=!0;if(l.includes("number")&&(typeof t!=="number"||!Number.isFinite(t)))r(o,`${o} must be a number`),y=!0;if(l.includes("boolean")&&typeof t!=="boolean")r(o,`${o} must be a boolean`),y=!0;if(y)continue;if(l.includes("email")&&(typeof t!=="string"||!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t)))r(o,`${o} must be a valid email`);if(l.includes("confirmed")&&t!==e[`${o}Confirmation`])r(o,`${o} confirmation does not match`);for(let h of d){let{name:p,limit:u}=h;if(u===void 0)continue;if(p==="min"||p==="max")if(typeof t==="number"){if(p==="min"&&t<u)r(o,`${o} must be at least ${u}`);if(p==="max"&&t>u)r(o,`${o} may not be greater than ${u}`)}else if(typeof t==="string"){if(p==="min"&&t.length<u)r(o,`${o} must be at least ${u} characters`);if(p==="max"&&t.length>u)r(o,`${o} may not exceed ${u} characters`)}else r(o,`${o} must be a string or number for ${p}`);if(p==="minLength"){if(typeof t!=="string")r(o,`${o} must be a string`);else if(t.length<u)r(o,`${o} must be at least ${u} characters`)}if(p==="maxLength"){if(typeof t!=="string")r(o,`${o} must be a string`);else if(t.length>u)r(o,`${o} may not exceed ${u} characters`)}}}if(Object.keys(s).length>0)return{valid:!1,errors:s};return{valid:!0,data:e,errors:{}}}}export{z as AuthMiddleware,c as HttpError,x as MiddlewarePipeline,U as RiserBob,G as Validator,Se as corsMiddleware,Re as loggerMiddleware};

package/dist/middleware/auth-middleware.d.ts

@@ -0,0 +1,21 @@
+import type { SpongMiddleware } from '../types/spong-middleware';
+import type { SpongRequest } from '../types/spong-request';
+interface VerifiedUser {
+    id: string;
+    [key: string]: unknown;
+}
+type TokenVerifier = (token: string) => Promise<VerifiedUser | null> | VerifiedUser | null;
+export type AuthMode = 'cookie' | 'bearer' | 'both';
+export interface AuthMiddlewareOptions {
+    mode?: AuthMode;
+    cookieName?: string;
+}
+export declare class AuthMiddleware {
+    private readonly verifyToken;
+    private readonly mode;
+    private readonly cookieName;
+    constructor(verifyToken: TokenVerifier, options?: AuthMiddlewareOptions);
+    private getToken;
+    middleware: SpongMiddleware<SpongRequest>;
+}
+export {};

package/dist/middleware/cors-middleware.d.ts

@@ -0,0 +1,15 @@
+import type { SpongMiddleware } from '../types/spong-middleware';
+import type { SpongRequest } from '../types/spong-request';
+export interface CorsOptions {
+    /**
+     * Allowed origins.
+     * Use '*' to allow any origin only when credentials are disabled.
+     */
+    origin: string | string[] | '*';
+    credentials?: boolean;
+    methods?: string[];
+    allowedHeaders?: string[];
+    exposedHeaders?: string[];
+    maxAge?: number;
+}
+export declare const corsMiddleware: (options: CorsOptions) => SpongMiddleware<SpongRequest>;

package/dist/middleware/logger-middleware.d.ts

@@ -0,0 +1,5 @@
+import type { SpongRequest } from '../types/spong-request';
+import type { SpongResponse } from '../types/spong-response';
+type SpongNext = () => Promise<Response>;
+export declare const loggerMiddleware: (spongReq: SpongRequest, spongRes: SpongResponse, spongNext: SpongNext) => Promise<Response>;
+export {};

package/dist/middleware/middleware-pipeline.d.ts

@@ -0,0 +1,8 @@
+import type { SpongMiddleware } from '../types/spong-middleware';
+import type { SpongResponse } from '../types/spong-response';
+export type SpongNext = () => Promise<Response>;
+export declare class MiddlewarePipeline<Context = unknown> {
+    private readonly middlewares;
+    use(middleware: SpongMiddleware<Context>): this;
+    execute(context: Context, spongRes: SpongResponse, finalHandler: SpongNext): Promise<Response>;
+}

package/dist/routing/router.d.ts

@@ -0,0 +1,13 @@
+import type { SpongHandler } from '../types/spong-handler';
+import { type HttpMethod } from '../types/spong-method';
+export declare class Router {
+    private routes;
+    register(method: HttpMethod, path: string, handler: SpongHandler): this;
+    private matchPath;
+    private compareRoutes;
+    match(method: string, path: string): {
+        handler: SpongHandler;
+        params: Record<string, string>;
+    } | undefined;
+    allowedMethods(path: string): HttpMethod[];
+}

package/dist/server/http-server.d.ts

@@ -0,0 +1,3 @@
+import type { Router } from '../routing/router';
+import Bun from 'bun';
+export declare const HttpServer: (router: Router, port?: number, callback?: () => void) => Bun.Server<undefined>;

package/dist/types/spong-auth.d.ts

@@ -0,0 +1,3 @@
+export interface SpongAuth {
+    token: string;
+}

package/dist/types/spong-handler.d.ts

@@ -0,0 +1,4 @@
+import type { SpongRequest } from './spong-request';
+import type { SpongResponse } from './spong-response';
+export type SpongHandler = (spongReq: SpongRequest, spongRes: SpongResponse) => Response | void | Promise<Response | void>;
+export type RouteHandler = SpongHandler;

package/dist/types/spong-method.d.ts

@@ -0,0 +1,10 @@
+export declare enum SpongMethod {
+    GET = "GET",
+    POST = "POST",
+    PUT = "PUT",
+    PATCH = "PATCH",
+    DELETE = "DELETE",
+    HEAD = "HEAD",
+    OPTIONS = "OPTIONS"
+}
+export type HttpMethod = SpongMethod;

package/dist/types/spong-middleware.d.ts

@@ -0,0 +1,3 @@
+import type { SpongResponse } from "./spong-response";
+export type SpongNext = () => Promise<Response>;
+export type SpongMiddleware<Context = unknown> = (context: Context, spongRes: SpongResponse, spongNext: SpongNext) => Response | Promise<Response>;

package/dist/types/spong-request.d.ts

@@ -0,0 +1,20 @@
+import type { SpongAuth } from './spong-auth';
+interface AuthenticationUser {
+    id: string;
+    [key: string]: unknown;
+}
+export interface SpongRequest {
+    readonly request: Request;
+    readonly method: string;
+    readonly url: URL;
+    readonly path: string;
+    readonly params: Record<string, string>;
+    readonly query: URLSearchParams;
+    readonly headers: Headers;
+    user?: AuthenticationUser;
+    auth?: SpongAuth;
+    json<T = unknown>(): Promise<T>;
+    formData(): ReturnType<Response['formData']>;
+    text(): Promise<string>;
+}
+export {};

package/dist/types/spong-response.d.ts

@@ -0,0 +1,68 @@
+export interface SpongResponse {
+    send(body: string): Response;
+    json(data: unknown, status?: number): Response;
+    status(code: number): SpongResponse;
+    header(name: string, value: string): SpongResponse;
+    SpongContinue(): Response;
+    SpongSwitchingProtocols(): Response;
+    SpongProcessing(): Response;
+    SpongEarlyHints(): Response;
+    SpongOK(data?: unknown): Response;
+    SpongCreated(data?: unknown): Response;
+    SpongAccepted(data?: unknown): Response;
+    SpongNonAuthoritativeInfo(data?: unknown): Response;
+    SpongNoContent(): Response;
+    SpongResetContent(): Response;
+    SpongPartialContent(data?: unknown): Response;
+    SpongMultiStatus(data?: unknown): Response;
+    SpongAlreadyReported(data?: unknown): Response;
+    SpongIMUsed(data?: unknown): Response;
+    SpongMultipleChoices(data?: unknown): Response;
+    SpongMovedPermanently(url?: string): Response;
+    SpongFound(url?: string): Response;
+    SpongSeeOther(url?: string): Response;
+    SpongNotModified(): Response;
+    SpongUseProxy(url?: string): Response;
+    SpongTemporaryRedirect(url?: string): Response;
+    SpongPermanentRedirect(url?: string): Response;
+    SpongBadRequest(data?: unknown): Response;
+    SpongUnauthorized(data?: unknown): Response;
+    SpongPaymentRequired(data?: unknown): Response;
+    SpongForbidden(data?: unknown): Response;
+    SpongNotFound(data?: unknown): Response;
+    SpongMethodNotAllowed(data?: unknown): Response;
+    SpongNotAcceptable(data?: unknown): Response;
+    SpongProxyAuthenticationRequired(data?: unknown): Response;
+    SpongRequestTimeout(data?: unknown): Response;
+    SpongConflict(data?: unknown): Response;
+    SpongGone(data?: unknown): Response;
+    SpongLengthRequired(data?: unknown): Response;
+    SpongPreconditionFailed(data?: unknown): Response;
+    SpongContentTooLarge(data?: unknown): Response;
+    SpongURITooLong(data?: unknown): Response;
+    SpongUnsupportedMediaType(data?: unknown): Response;
+    SpongRangeNotSatisfiable(data?: unknown): Response;
+    SpongExpectationFailed(data?: unknown): Response;
+    SpongImATeapot(data?: unknown): Response;
+    SpongMisdirectedRequest(data?: unknown): Response;
+    SpongUnprocessableContent(data?: unknown): Response;
+    SpongLocked(data?: unknown): Response;
+    SpongFailedDependency(data?: unknown): Response;
+    SpongTooEarly(data?: unknown): Response;
+    SpongUpgradeRequired(data?: unknown): Response;
+    SpongPreconditionRequired(data?: unknown): Response;
+    SpongTooManyRequests(data?: unknown): Response;
+    SpongRequestHeaderFieldsTooLarge(data?: unknown): Response;
+    SpongUnavailableForLegalReasons(data?: unknown): Response;
+    SpongInternalServerError(data?: unknown): Response;
+    SpongNotImplemented(data?: unknown): Response;
+    SpongBadGateway(data?: unknown): Response;
+    SpongServiceUnavailable(data?: unknown): Response;
+    SpongGatewayTimeout(data?: unknown): Response;
+    SpongHTTPVersionNotSupported(data?: unknown): Response;
+    SpongVariantAlsoNegotiates(data?: unknown): Response;
+    SpongInsufficientStorage(data?: unknown): Response;
+    SpongLoopDetected(data?: unknown): Response;
+    SpongNotExtended(data?: unknown): Response;
+    SpongNetworkAuthenticationRequired(data?: unknown): Response;
+}

package/dist/validation/validator.d.ts

@@ -0,0 +1,15 @@
+export type ValidationRule = 'required' | 'nullable' | 'string' | 'number' | 'boolean' | 'email' | 'confirmed' | `min:${number}` | `max:${number}` | `minLength:${number}` | `maxLength:${number}`;
+export type ValidationSchema = Record<string, ValidationRule[]>;
+export type ValidationErrors = Record<string, string[]>;
+export type ValidationResult<T> = {
+    valid: true;
+    data: T;
+    errors: ValidationErrors;
+} | {
+    valid: false;
+    errors: ValidationErrors;
+};
+export declare class Validator {
+    private static parseSchema;
+    static validate<T>(data: Record<string, unknown>, schema: ValidationSchema): ValidationResult<T>;
+}

package/package.json

@@ -1,6 +1,58 @@
 {
-  "name": "riser-bob",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+	"name": "riser-bob",
+	"version": "1.0.0",
+	"description": "A TypeScript backend framework built for Bun",
+	"type": "module",
+	"main": "./dist/index.js",
+	"module": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js"
+		}
+	},
+	"files": [
+		"dist",
+		"README.md",
+		"LICENSE"
+	],
+	"bin": {
+		"riser-bob": "./dist/cli.js"
+	},
+	"scripts": {
+		"dev": "bun run --watch src/index.ts",
+		"build": "bun run build:framework && bun run build:types && bun run build:cli",
+		"build:framework": "bun build src/index.ts --outdir dist --target bun --minify",
+		"build:cli": "bun build cli/index.ts --outfile dist/cli.js --target bun --minify",
+		"build:types": "tsc -p tsconfig.build.json",
+		"start": "bun run src/index.ts",
+		"typecheck": "tsc --noEmit",
+		"lint": "eslint test/",
+		"lint:fix": "eslint test/ --fix"
+	},
+	"keywords": [
+		"riser-bob",
+		"bun",
+		"typescript",
+		"backend",
+		"framework",
+		"cli"
+	],
+	"license": "MIT",
+	"devDependencies": {
+		"@eslint/js": "^10.0.1",
+		"@types/bun": "^1.4.3",
+		"eslint": "^10.13.0",
+		"globals": "^17.13.0",
+		"jiti": "^2.7.0",
+		"typescript": "^5.9.3",
+		"typescript-eslint": "^8.71.2"
+	},
+	"peerDependencies": {
+		"typescript": "^5"
+	},
+	"dependencies": {
+		"@riser-bob/cookie": "0.1.1"
+	}
+}