srvx-nightly 0.11.7 → 0.11.8

package/dist/_chunks/_url.mjs

@@ -25,6 +25,20 @@ function lazyInherit(target, source, sourceKey) {
 		if (modified) Object.defineProperty(target, key, desc);
 	}
 }
+/**
+* URL wrapper with fast paths to access to the following props:
+*
+*  - `url.pathname`
+*  - `url.search`
+*  - `url.searchParams`
+*  - `url.protocol`
+*
+* **NOTES:**
+*
+* - It is assumed that the input URL is **already encoded** and formatted from an HTTP request and contains no hash.
+* - Triggering the setters or getters on other props will deoptimize to full URL parsing.
+* - Changes to `searchParams` will be discarded as we don't track them.
+*/
 const FastURL = /* @__PURE__ */ (() => {
 	const NativeURL = globalThis.URL;
 	const FastURL = class URL {

package/dist/_chunks/loader.d.mts

@@ -0,0 +1,87 @@
+import { Server, ServerHandler } from "srvx";
+
+//#region src/loader.d.ts
+declare const defaultExts: string[];
+declare const defaultEntries: string[];
+/**
+* Options for loading a server entry module.
+*/
+type LoadOptions = {
+  /**
+  * Path or URL to the server entry file.
+  *
+  * If not provided, common entry points will be searched automatically.
+  */
+  entry?: string;
+  /**
+  * Base directory for resolving relative paths.
+  *
+  * @default "."
+  */
+  dir?: string;
+  /**
+  * Set to `false` to disable interception of `http.Server.listen` to detect legacy handlers.
+  *
+  * @default true
+  */
+  interceptHttpListen?: boolean;
+  /**
+  * Set to `false` to disable Node.js handler (req, res) compatibility.
+  */
+  nodeCompat?: boolean;
+  /**
+  * Node.js server instance to return when intercepting `http.Server.listen`.
+  */
+  nodeServer?: NodeServer;
+  /**
+  * srvx server instance to return when intercepting `http.Server.listen`.
+  */
+  srvxServer?: Server;
+  /**
+  * Hook called after the module is loaded to allow for custom processing.
+  *
+  * You can return a modified version of the module if needed.
+  */
+  onLoad?: (module: unknown) => any;
+};
+/**
+* Result of loading a server entry module.
+*/
+type LoadedServerEntry = {
+  /**
+  * The web fetch handler extracted from the loaded module.
+  *
+  * This is resolved from `module.fetch`, `module.default.fetch`,
+  * or upgraded from a legacy Node.js handler.
+  */
+  fetch?: ServerHandler;
+  /**
+  * The raw loaded module.
+  */
+  module?: any;
+  /**
+  * Whether the handler was upgraded from a legacy Node.js HTTP handler.
+  *
+  * When `true`, the original module exported a Node.js-style `(req, res)` handler
+  * that has been wrapped for web fetch compatibility.
+  */
+  nodeCompat?: boolean;
+  /**
+  * The resolved `file://` URL of the loaded entry module.
+  */
+  url?: string;
+  /**
+  * Whether the specified entry file was not found.
+  *
+  * When `true`, no valid entry point could be located.
+  */
+  notFound?: boolean;
+  /**
+  * The original srvx server instance if the module used the loader API to export a server directly.
+  */
+  srvxServer?: Server;
+};
+declare function loadServerEntry(opts: LoadOptions): Promise<LoadedServerEntry>;
+type NodeServer = NonNullable<Server["node"]>["server"];
+//#endregion
+export { loadServerEntry as a, defaultExts as i, LoadedServerEntry as n, defaultEntries as r, LoadOptions as t };

package/dist/adapters/aws-lambda.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 function awsRequest(event, context) {
 	const req = new Request(awsEventURL(event), {

package/dist/adapters/bun.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { t as FastURL } from "../_chunks/_url.mjs";
 import { a as resolveTLSOptions, i as resolvePortAndHost, n as fmtURL, r as printListening, t as createWaitUntil } from "../_chunks/_utils2.mjs";
 import { n as gracefulShutdownPlugin, r as wrapFetch } from "../_chunks/_plugins.mjs";

package/dist/adapters/bunny.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 const FastURL = URL;
 const FastResponse = Response;

package/dist/adapters/cloudflare.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 const FastURL = URL;
 const FastResponse = Response;

package/dist/adapters/deno.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { t as FastURL } from "../_chunks/_url.mjs";
 import { a as resolveTLSOptions, i as resolvePortAndHost, n as fmtURL, r as printListening, t as createWaitUntil } from "../_chunks/_utils2.mjs";
 import { n as gracefulShutdownPlugin, r as wrapFetch } from "../_chunks/_plugins.mjs";

package/dist/adapters/generic.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { t as createWaitUntil } from "../_chunks/_utils2.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 const FastURL = URL;

package/dist/adapters/node.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { n as lazyInherit, t as FastURL } from "../_chunks/_url.mjs";
 import { a as resolveTLSOptions, i as resolvePortAndHost, n as fmtURL, r as printListening, t as createWaitUntil } from "../_chunks/_utils2.mjs";
 import { n as gracefulShutdownPlugin, r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
@@ -62,6 +63,11 @@ function streamBody(stream, nodeRes) {
 		nodeRes.off("error", streamCancel);
 	});
 }
+/**
+* Validates an HTTP Host header value (domain, IPv4, or bracketed IPv6) with optional port.
+* Intended for preliminary filtering invalid values like "localhost:3000/foobar?"
+*/
+const HOST_RE = /^(\[(?:[A-Fa-f0-9:.]+)\]|(?:[A-Za-z0-9_-]+\.)*[A-Za-z0-9_-]+|(?:\d{1,3}\.){3}\d{1,3})(:\d{1,5})?$/;
 var NodeRequestURL = class extends FastURL {
 	#req;
 	constructor({ req }) {
@@ -70,7 +76,11 @@ var NodeRequestURL = class extends FastURL {
 			const qIndex = path.indexOf("?");
 			const pathname = qIndex === -1 ? path : path?.slice(0, qIndex) || "/";
 			const search = qIndex === -1 ? "" : path?.slice(qIndex) || "";
-			const host = req.headers.host || req.headers[":authority"] || `${req.socket.localFamily === "IPv6" ? "[" + req.socket.localAddress + "]" : req.socket.localAddress}:${req.socket?.localPort || "80"}`;
+			let host = req.headers.host || req.headers[":authority"];
+			if (host) {
+				if (!HOST_RE.test(host)) throw new TypeError(`Invalid host header: ${host}`);
+			} else if (req.socket) host = `${req.socket.localFamily === "IPv6" ? "[" + req.socket.localAddress + "]" : req.socket.localAddress}:${req.socket?.localPort || "80"}`;
+			else host = "localhost";
 			const protocol = req.socket?.encrypted || req.headers["x-forwarded-proto"] === "https" || req.headers[":scheme"] === "https" ? "https:" : "http:";
 			super({
 				protocol,
@@ -248,6 +258,13 @@ const NodeRequest = /* @__PURE__ */ (() => {
 	Object.setPrototypeOf(Request.prototype, NativeRequest.prototype);
 	return Request;
 })();
+/**
+* Undici uses an incompatible Request constructor depending on private property accessors.
+*
+* This utility, patches global Request to support `new Request(req)` in Node.js.
+*
+* Alternatively you can use `new Request(req._request || req)` instead of patching global Request.
+*/
 function patchGlobalRequest() {
 	const NativeRequest = globalThis[Symbol.for("srvx.nativeRequest")] ??= globalThis.Request;
 	const PatchedRequest = class Request extends NativeRequest {
@@ -282,6 +299,11 @@ function readBody(req) {
 		req.on("data", onData).once("end", onEnd).once("error", onError);
 	});
 }
+/**
+* Fast Response for Node.js runtime
+*
+* It is faster because in most cases it doesn't create a full Response instance.
+*/
 const NodeResponse = /* @__PURE__ */ (() => {
 	const NativeResponse = globalThis.Response;
 	const STATUS_CODES = globalThis.process?.getBuiltinModule?.("node:http")?.STATUS_CODES || {};
@@ -390,6 +412,11 @@ const NodeResponse = /* @__PURE__ */ (() => {
 	Object.setPrototypeOf(NodeResponse.prototype, NativeResponse.prototype);
 	return NodeResponse;
 })();
+/**
+* Events:
+* - Readable (req from client): readable => data => end (push(null)) => error => close
+* - Writable (res to client): pipe => unpipe => drain => finish (end called) => error => close
+*/
 var WebRequestSocket = class extends Duplex {
 	_httpMessage;
 	autoSelectFamilyAttemptedAddresses = [];
@@ -604,6 +631,17 @@ var WebServerResponse = class extends ServerResponse {
 		});
 	}
 };
+/**
+* Calls a Node.js HTTP Request handler with a Fetch API Request object and returns a Response object.
+*
+* If the web Request contains an existing Node.js req/res pair (indicating it originated from a Node.js server from srvx/node), it will be called directly.
+*
+* Otherwise, new Node.js IncomingMessage and ServerResponse objects are created and linked to a custom Duplex stream that bridges the Fetch API streams with Node.js streams.
+*
+* The handler is invoked with these objects, and the response is constructed from the ServerResponse once it is finished.
+*
+* @experimental Behavior might be unstable.
+*/
 async function fetchNodeHandler(handler, req) {
 	const nodeRuntime = req.runtime?.node;
 	if (nodeRuntime && nodeRuntime.req && nodeRuntime.res) return await callNodeHandler(handler, req);
@@ -624,6 +662,9 @@ async function fetchNodeHandler(handler, req) {
 		});
 	}
 }
+/**
+* Converts a Fetch API handler to a Node.js HTTP handler.
+*/
 function toNodeHandler(handler) {
 	if (handler.__nodeHandler) return handler.__nodeHandler;
 	function convertedNodeHandler(nodeReq, nodeRes) {
@@ -637,6 +678,11 @@ function toNodeHandler(handler) {
 	assignFnName(convertedNodeHandler, handler, " (converted to Node handler)");
 	return convertedNodeHandler;
 }
+/**
+* Converts a Node.js HTTP handler into a Fetch API handler.
+*
+* @experimental Behavior might be unstable and won't work in Bun and Deno currently (tracker: https://github.com/h3js/srvx/issues/132)
+*/
 function toFetchHandler(handler) {
 	if (handler.__fetchHandler) return handler.__fetchHandler;
 	function convertedNodeHandler(req) {

package/dist/adapters/service-worker.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 const FastURL = URL;
 const FastResponse = Response;

package/dist/cli.d.mts

@@ -1,4 +1,4 @@
-import { LoadOptions } from "./loader.mjs";
+import { t as LoadOptions } from "./_chunks/loader.mjs";
 
 //#region src/cli/types.d.ts
 type MainOptions = CLIOptions & {

package/dist/cli.mjs

@@ -179,7 +179,7 @@ function getResponseFormat(res) {
 }
 const srvxMeta = {
 	name: "srvx-nightly",
-	version: "0.11.7",
+	version: "0.11.8",
 	description: "Universal Server."
 };
 function usage(mainOpts) {

package/dist/loader.d.mts

@@ -1,87 +1,2 @@
-import { Server, ServerHandler } from "srvx";
-
-//#region src/loader.d.ts
-declare const defaultExts: string[];
-declare const defaultEntries: string[];
-/**
-* Options for loading a server entry module.
-*/
-type LoadOptions = {
-  /**
-  * Path or URL to the server entry file.
-  *
-  * If not provided, common entry points will be searched automatically.
-  */
-  entry?: string;
-  /**
-  * Base directory for resolving relative paths.
-  *
-  * @default "."
-  */
-  dir?: string;
-  /**
-  * Set to `false` to disable interception of `http.Server.listen` to detect legacy handlers.
-  *
-  * @default true
-  */
-  interceptHttpListen?: boolean;
-  /**
-  * Set to `false` to disable Node.js handler (req, res) compatibility.
-  */
-  nodeCompat?: boolean;
-  /**
-  * Node.js server instance to return when intercepting `http.Server.listen`.
-  */
-  nodeServer?: NodeServer;
-  /**
-  * srvx server instance to return when intercepting `http.Server.listen`.
-  */
-  srvxServer?: Server;
-  /**
-  * Hook called after the module is loaded to allow for custom processing.
-  *
-  * You can return a modified version of the module if needed.
-  */
-  onLoad?: (module: unknown) => any;
-};
-/**
-* Result of loading a server entry module.
-*/
-type LoadedServerEntry = {
-  /**
-  * The web fetch handler extracted from the loaded module.
-  *
-  * This is resolved from `module.fetch`, `module.default.fetch`,
-  * or upgraded from a legacy Node.js handler.
-  */
-  fetch?: ServerHandler;
-  /**
-  * The raw loaded module.
-  */
-  module?: any;
-  /**
-  * Whether the handler was upgraded from a legacy Node.js HTTP handler.
-  *
-  * When `true`, the original module exported a Node.js-style `(req, res)` handler
-  * that has been wrapped for web fetch compatibility.
-  */
-  nodeCompat?: boolean;
-  /**
-  * The resolved `file://` URL of the loaded entry module.
-  */
-  url?: string;
-  /**
-  * Whether the specified entry file was not found.
-  *
-  * When `true`, no valid entry point could be located.
-  */
-  notFound?: boolean;
-  /**
-  * The original srvx server instance if the module used the loader API to export a server directly.
-  */
-  srvxServer?: Server;
-};
-declare function loadServerEntry(opts: LoadOptions): Promise<LoadedServerEntry>;
-type NodeServer = NonNullable<Server["node"]>["server"];
-//#endregion
+import { a as loadServerEntry, i as defaultExts, n as LoadedServerEntry, r as defaultEntries, t as LoadOptions } from "./_chunks/loader.mjs";
 export { LoadOptions, LoadedServerEntry, defaultEntries, defaultExts, loadServerEntry };

package/dist/tracing.mjs

@@ -1,3 +1,24 @@
+/**
+*
+* @experimental Channel names, event types and config options may change in future releases.
+*
+* Tracing plugin that adds diagnostics channel tracing to middleware and fetch handlers.
+*
+* This plugin wraps all middleware and the fetch handler with tracing instrumentation,
+* allowing you to subscribe to `srvx.request` and `srvx.middleware` tracing channels.
+*
+* @example
+* ```ts
+* import { serve } from "srvx";
+* import { tracingPlugin } from "srvx/tracing";
+*
+* const server = serve({
+*   fetch: (req) => new Response("OK"),
+*   middleware: [myMiddleware],
+*   plugins: [tracingPlugin()],
+* });
+* ```
+*/
 function tracingPlugin(opts = {}) {
 	return (server) => {
 		const { tracingChannel } = globalThis.process?.getBuiltinModule?.("node:diagnostics_channel") || {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "srvx-nightly",
-  "version": "0.11.7",
+  "version": "0.11.8",
   "description": "Universal Server.",
   "homepage": "https://srvx.h3.dev",
   "license": "MIT",
@@ -59,7 +59,7 @@
     "vitest": "vitest"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^4.20260217.0",
+    "@cloudflare/workers-types": "^4.20260304.0",
     "@hono/node-server": "^1.19.9",
     "@mitata/counters": "^0.0.8",
     "@mjackson/node-fetch-server": "^0.7.0",
@@ -67,10 +67,10 @@
     "@types/bun": "^1.3.9",
     "@types/deno": "^2.5.0",
     "@types/express": "^5.0.6",
-    "@types/node": "^25.2.3",
+    "@types/node": "^25.3.0",
     "@types/node-forge": "^1.3.14",
-    "@types/serviceworker": "^0.0.191",
-    "@typescript/native-preview": "^7.0.0-dev.20260217.1",
+    "@types/serviceworker": "^0.0.192",
+    "@typescript/native-preview": "^7.0.0-dev.20260225.1",
     "@vitest/coverage-v8": "^4.0.18",
     "@whatwg-node/server": "^0.10.18",
     "automd": "^0.4.3",
@@ -83,10 +83,10 @@
     "mdbox": "^0.1.1",
     "mitata": "^1.0.34",
     "node-forge": "^1.3.3",
-    "obuild": "^0.4.27",
-    "oxfmt": "^0.33.0",
-    "oxlint": "^1.48.0",
-    "srvx-release": "npm:srvx@^0.11.4",
+    "obuild": "^0.4.31",
+    "oxfmt": "^0.35.0",
+    "oxlint": "^1.50.0",
+    "srvx-release": "npm:srvx@^0.11.7",
     "tslib": "^2.8.1",
     "typescript": "^5.9.3",
     "undici": "^7.22.0",
@@ -98,5 +98,5 @@
   "engines": {
     "node": ">=20.16.0"
   },
-  "packageManager": "pnpm@10.29.3"
+  "packageManager": "pnpm@10.30.2"
 }