stitchkit 0.5.0 → 0.7.0

package/dist/index-za2p453b.js

@@ -0,0 +1,87 @@
+import {
+  getClientInfo,
+  resolveSocketIp
+} from "./index-mwmpw6j1.js";
+
+// src/observability/trace.ts
+var TRACEPARENT_RE = /^00-([0-9a-f]{32})-([0-9a-f]{16})-[0-9a-f]{2}$/i;
+function randomHex(bytes) {
+  const arr = new Uint8Array(bytes);
+  crypto.getRandomValues(arr);
+  let hex = "";
+  for (const byte of arr)
+    hex += byte.toString(16).padStart(2, "0");
+  return hex;
+}
+function createTraceContext() {
+  return { traceId: randomHex(16), spanId: randomHex(8) };
+}
+function parseTraceparent(header) {
+  if (!header)
+    return null;
+  const match = TRACEPARENT_RE.exec(header.trim());
+  if (!match?.[1] || !match[2])
+    return null;
+  const traceId = match[1].toLowerCase();
+  const parentSpanId = match[2].toLowerCase();
+  if (/^0+$/.test(traceId) || /^0+$/.test(parentSpanId))
+    return null;
+  return { traceId, spanId: randomHex(8), parentSpanId };
+}
+function formatTraceparent(ctx) {
+  return `00-${ctx.traceId}-${ctx.spanId}-01`;
+}
+function resolveTraceContext(req) {
+  return parseTraceparent(req.headers.get("traceparent")) ?? createTraceContext();
+}
+function childSpan(parent) {
+  return {
+    traceId: parent.traceId,
+    spanId: randomHex(8),
+    parentSpanId: parent.spanId
+  };
+}
+
+// src/observability/context.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+var storage = new AsyncLocalStorage;
+function runWithRequestContext(ctx, fn) {
+  return storage.run(ctx, fn);
+}
+function getRequestContext() {
+  return storage.getStore();
+}
+function getTraceId() {
+  return storage.getStore()?.trace.traceId;
+}
+function getUserId() {
+  return storage.getStore()?.userId;
+}
+function setRequestUser(userId) {
+  const ctx = storage.getStore();
+  if (ctx)
+    ctx.userId = userId;
+}
+function setRequestError(error) {
+  const ctx = storage.getStore();
+  if (ctx)
+    ctx.error = error;
+}
+function wrapInRequestContext(handler, options = {}) {
+  return (req, server) => {
+    const ctx = {
+      trace: resolveTraceContext(req),
+      source: "http",
+      method: req.method,
+      path: new URL(req.url, "http://localhost").pathname,
+      startedAt: process.hrtime.bigint(),
+      ...getClientInfo(req, {
+        trustProxy: options.trustProxy,
+        socketIp: resolveSocketIp(req, server)
+      })
+    };
+    return runWithRequestContext(ctx, () => handler(req, server));
+  };
+}
+
+export { createTraceContext, parseTraceparent, formatTraceparent, resolveTraceContext, childSpan, runWithRequestContext, getRequestContext, getTraceId, getUserId, setRequestUser, setRequestError, wrapInRequestContext };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { createClient, createClients } from './browser/client';
+export { type ClientConfig, type ContractClientConfig, createClient, createClients, } from './browser/client';
 export { ApiError, type ApiEvent, type ApiEventListener, createHttpClient, type HeaderProvider, type HttpClient, type HttpClientConfig, type RequestOptions, } from './browser/http';
 export type { SocketEventMap, SocketIOClient, SocketIOClientConfig, } from './browser/socket-io';
 export { createSocketIOClient } from './browser/socket-io';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EACL,QAAQ,EACR,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAClE,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,YAAY,EACZ,aAAa,GACd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,QAAQ,EACR,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAClE,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -3,25 +3,27 @@ import {
   createClient,
   createClients,
   createHttpClient
-} from "./index-78q1qm7v.js";
+} from "./index-kdkvp26v.js";
 import {
   parseSSE
-} from "./index-d4rwrjbc.js";
+} from "./index-mahbaen9.js";
 import"./index-48ffdxgk.js";
-import"./index-vhdvv00d.js";
+import"./index-4843j09b.js";
 import {
   ALL_TRANSPORTS,
   AppError,
+  STITCH_ERROR_STATUS,
   appError,
   badRequest,
   conflict,
   defineContract,
   forbidden,
+  isStitchErrorCode,
   notFound,
   paginatedSchema,
   rateLimited,
   unauthorized
-} from "./index-afzt3nmx.js";
+} from "./index-9bk6r5ff.js";
 import"./index-809wc1tt.js";
 import"./index-37x76zdn.js";
 // src/browser/socket-io.ts
@@ -109,6 +111,7 @@ export {
   parseSSE,
   paginatedSchema,
   notFound,
+  isStitchErrorCode,
   forbidden,
   defineContract,
   createSocketIOClient,
@@ -118,6 +121,7 @@ export {
   conflict,
   badRequest,
   appError,
+  STITCH_ERROR_STATUS,
   AppError,
   ApiError,
   ALL_TRANSPORTS

package/dist/node.js

@@ -3,9 +3,9 @@ import {
   createImplement,
   createSocketIOServer,
   implement
-} from "./index-kgjnt3hn.js";
+} from "./index-8hsj2qm9.js";
 import"./index-x3fcszf8.js";
-import"./index-vhdvv00d.js";
+import"./index-4843j09b.js";
 import {
   AppError,
   appError,
@@ -15,7 +15,7 @@ import {
   notFound,
   rateLimited,
   unauthorized
-} from "./index-afzt3nmx.js";
+} from "./index-9bk6r5ff.js";
 import"./index-mwmpw6j1.js";
 import"./index-kzfs85xp.js";
 import"./index-809wc1tt.js";

package/dist/observability/index.js

@@ -1,7 +1,18 @@
 import {
-  getClientInfo,
-  resolveSocketIp
-} from "../index-mwmpw6j1.js";
+  childSpan,
+  createTraceContext,
+  formatTraceparent,
+  getRequestContext,
+  getTraceId,
+  getUserId,
+  parseTraceparent,
+  resolveTraceContext,
+  runWithRequestContext,
+  setRequestError,
+  setRequestUser,
+  wrapInRequestContext
+} from "../index-za2p453b.js";
+import"../index-mwmpw6j1.js";
 import {
   isUnsafeKey
 } from "../index-kzfs85xp.js";
@@ -10,89 +21,6 @@ import {
 } from "../index-809wc1tt.js";
 import"../index-37x76zdn.js";
 
-// src/observability/context.ts
-import { AsyncLocalStorage } from "node:async_hooks";
-
-// src/observability/trace.ts
-var TRACEPARENT_RE = /^00-([0-9a-f]{32})-([0-9a-f]{16})-[0-9a-f]{2}$/i;
-function randomHex(bytes) {
-  const arr = new Uint8Array(bytes);
-  crypto.getRandomValues(arr);
-  let hex = "";
-  for (const byte of arr)
-    hex += byte.toString(16).padStart(2, "0");
-  return hex;
-}
-function createTraceContext() {
-  return { traceId: randomHex(16), spanId: randomHex(8) };
-}
-function parseTraceparent(header) {
-  if (!header)
-    return null;
-  const match = TRACEPARENT_RE.exec(header.trim());
-  if (!match?.[1] || !match[2])
-    return null;
-  const traceId = match[1].toLowerCase();
-  const parentSpanId = match[2].toLowerCase();
-  if (/^0+$/.test(traceId) || /^0+$/.test(parentSpanId))
-    return null;
-  return { traceId, spanId: randomHex(8), parentSpanId };
-}
-function formatTraceparent(ctx) {
-  return `00-${ctx.traceId}-${ctx.spanId}-01`;
-}
-function resolveTraceContext(req) {
-  return parseTraceparent(req.headers.get("traceparent")) ?? createTraceContext();
-}
-function childSpan(parent) {
-  return {
-    traceId: parent.traceId,
-    spanId: randomHex(8),
-    parentSpanId: parent.spanId
-  };
-}
-
-// src/observability/context.ts
-var storage = new AsyncLocalStorage;
-function runWithRequestContext(ctx, fn) {
-  return storage.run(ctx, fn);
-}
-function getRequestContext() {
-  return storage.getStore();
-}
-function getTraceId() {
-  return storage.getStore()?.trace.traceId;
-}
-function getUserId() {
-  return storage.getStore()?.userId;
-}
-function setRequestUser(userId) {
-  const ctx = storage.getStore();
-  if (ctx)
-    ctx.userId = userId;
-}
-function setRequestError(error) {
-  const ctx = storage.getStore();
-  if (ctx)
-    ctx.error = error;
-}
-function wrapInRequestContext(handler, options = {}) {
-  return (req, server) => {
-    const ctx = {
-      trace: resolveTraceContext(req),
-      source: "http",
-      method: req.method,
-      path: new URL(req.url, "http://localhost").pathname,
-      startedAt: process.hrtime.bigint(),
-      ...getClientInfo(req, {
-        trustProxy: options.trustProxy,
-        socketIp: resolveSocketIp(req, server)
-      })
-    };
-    return runWithRequestContext(ctx, () => handler(req, server));
-  };
-}
-
 // src/observability/sanitize.ts
 var DEFAULT_SENSITIVE_KEYS = /(password|passwd|pwd|secret|token|apikey|api[-_ ]?key|auth|authorization|bearer|session|cookie|init[-_ ]?data|credential|private[-_ ]?key)/i;
 var DEFAULT_MAX_BYTES = 16000;

package/dist/server/context.d.ts

@@ -5,6 +5,6 @@
 import { type RuntimeContext } from '../contract';
 import { type ClientIpOptions } from './request';
 import type { MethodDef } from './types';
-export declare function buildContext(req: Request, url: URL, method: MethodDef, pathParams: Record<string, string>, traceId: string, clientIp: ClientIpOptions): Promise<RuntimeContext>;
+export declare function buildContext(req: Request, url: URL, method: MethodDef, pathParams: Record<string, string>, traceId: string, clientIp: ClientIpOptions, maxUploadBytes?: number): Promise<RuntimeContext>;
 export declare function buildErrorContext(req: Request, url: URL, traceId: string, clientIp: ClientIpOptions): RuntimeContext;
 //# sourceMappingURL=context.d.ts.map

package/dist/server/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/server/context.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAG9D,OAAO,EAAE,KAAK,eAAe,EAAmC,MAAM,WAAW,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAmCzC,wBAAsB,YAAY,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,cAAc,CAAC,CA2CzB;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,eAAe,GACxB,cAAc,CAWhB"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/server/context.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAG9D,OAAO,EAAE,KAAK,eAAe,EAAmC,MAAM,WAAW,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAmCzC,wBAAsB,YAAY,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,eAAe,EACzB,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,cAAc,CAAC,CA8CzB;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,eAAe,GACxB,cAAc,CAWhB"}

package/dist/server/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/server/create.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAEV,eAAe,EACf,aAAa,EAGd,MAAM,SAAS,CAAC;AAEjB,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAwMxF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,uBAsBnD"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/server/create.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAEV,eAAe,EACf,aAAa,EAGd,MAAM,SAAS,CAAC;AAEjB,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAgNxF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,uBAsBnD"}

package/dist/server/file.d.ts

@@ -0,0 +1,52 @@
+/** An inclusive byte range `[start, end]`. */
+export interface ByteRange {
+    start: number;
+    end: number;
+}
+/**
+ * Parse a single-range `Range` header against a known `size`.
+ *
+ * - `null` — no header, malformed, or multiple ranges (caller serves the full
+ *   `200` body; ignoring an unparseable Range is RFC-compliant).
+ * - `'unsatisfiable'` — a well-formed range that lies outside the file (the
+ *   caller answers `416` with `Content-Range: bytes * /size`).
+ * - `{ start, end }` — an inclusive, clamped range to serve as `206`.
+ *
+ * Multiple ranges (`bytes=0-9,20-29`) are intentionally unsupported and return
+ * `null` (no `multipart/byteranges`). → ADR 0023.
+ */
+export declare function parseByteRange(header: string | null, size: number): ByteRange | 'unsatisfiable' | null;
+/**
+ * A weak entity tag derived from size + mtime — cheap (no content hashing) and
+ * stable across requests. Weak because two files with the same size and mtime
+ * are treated as equivalent, which is the right trade for static media.
+ */
+export declare function weakETag(size: number, mtimeMs: number): string;
+export interface ServeFileOptions {
+    /** Absolute (or cwd-relative) path to the file. The caller owns containment. */
+    path: string;
+    /** MIME type. Auto-detected from the path extension when omitted. */
+    contentType?: string;
+    /** Sets `Content-Disposition` with this filename. */
+    filename?: string;
+    /** `Content-Disposition` type. Defaults to `inline` (set with `filename`). */
+    disposition?: 'inline' | 'attachment';
+    /** Value for the `Cache-Control` header, verbatim. */
+    cacheControl?: string;
+    /** Emit a weak `ETag` (default `true`). */
+    etag?: boolean;
+    /** Emit `Last-Modified` (default `true`). */
+    lastModified?: boolean;
+}
+/**
+ * Serve a file with full Range + conditional-request support. Returns:
+ * `405` (non GET/HEAD), `404` (missing), `304` (fresh per `If-None-Match` /
+ * `If-Modified-Since`), `200` (full — no/ignored Range), `206` (range), or `416`
+ * (unsatisfiable range). Always sets `Accept-Ranges: bytes` and `nosniff`; a
+ * `HEAD` returns every header with an empty body.
+ *
+ * Bun-first (`Bun.file`). The caller is responsible for path containment — for
+ * URL-derived paths use `staticRoute` or `isWithinDir`. → ADR 0023.
+ */
+export declare function serveFile(req: Request, opts: ServeFileOptions): Promise<Response>;
+//# sourceMappingURL=file.d.ts.map

package/dist/server/file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/server/file.ts"],"names":[],"mappings":"AAaA,8CAA8C;AAC9C,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,IAAI,EAAE,MAAM,GACX,SAAS,GAAG,eAAe,GAAG,IAAI,CAkCpC;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AA6ED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;IACtC,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,6CAA6C;IAC7C,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwEvF"}

package/dist/server/implement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"implement.d.ts","sourceRoot":"","sources":["../../src/server/implement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,KAAK,EAAE,QAAQ,EAAa,UAAU,EAAE,MAAM,SAAS,CAAC;AAE/D;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACrC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,UAAU,CAyC3E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,SAAS,cAAc,MACjD,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAC3C,UAAU,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAChC,UAAU,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,KAC1B,UAAU,CACd"}
+{"version":3,"file":"implement.d.ts","sourceRoot":"","sources":["../../src/server/implement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,KAAK,EAAE,QAAQ,EAAa,UAAU,EAAE,MAAM,SAAS,CAAC;AAE/D;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACrC,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,UAAU,CA6C3E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,SAAS,cAAc,MACjD,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAC3C,UAAU,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EAChC,UAAU,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,KAC1B,UAAU,CACd"}

package/dist/server/index.d.ts

@@ -1,7 +1,8 @@
-export { AppError, appError, badRequest, conflict, forbidden, notFound, rateLimited, unauthorized, } from '../contract';
+export { AppError, appError, badRequest, conflict, forbidden, isStitchErrorCode, notFound, rateLimited, STITCH_ERROR_STATUS, type StitchErrorCode, unauthorized, } from '../contract';
 export { cacheHeaders, createCache } from './cache';
 export { createHandler, createServer } from './create';
 export { createEventBus, type EventBus } from './event-bus';
+export { type ByteRange, parseByteRange, type ServeFileOptions, serveFile, weakETag, } from './file';
 export { createImplement, implement } from './implement';
 export { type AuthHook, type AuthHookConfig, type AuthRule, type BearerResolverConfig, createAuthHook, createBearerResolver, extractToken, type JwtPayload, type SignJwtOptions, signJwt, verifyJwt, } from './middleware/auth';
 export { type CookieDef, type CookieOptions, defineCookie, parseCookies, serializeCookie, } from './middleware/cookies';
@@ -10,6 +11,7 @@ export { deriveCodeChallenge, type PkceMethod, verifyPkce } from './middleware/p
 export { parseMultipart } from './multipart';
 export { generateOpenApiDocument, type OpenApiConfig, type OpenApiDocument, type OpenApiInfo, type OpenApiServer, openApiRoute, } from './openapi';
 export { createRateLimiter, type RateLimitConfig } from './rate-limit';
+export { errorResponse, parseBody, respondJson } from './raw';
 export { type ClientIpOptions, extractIp, generateTraceId, getClientInfo, resolveSocketIp, resolveTraceId, } from './request';
 export { staticRoute } from './router';
 export type { SocketIOServerConfig, SocketIOServerHandle } from './socket-io';

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,WAAW,EACX,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,OAAO,EACP,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrE,YAAY,EACV,SAAS,EACT,eAAe,EACf,aAAa,EACb,QAAQ,EACR,cAAc,EACd,SAAS,EACT,QAAQ,EACR,eAAe,EACf,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,QAAQ,GACT,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,OAAO,EACP,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrE,YAAY,EACV,SAAS,EACT,eAAe,EACf,aAAa,EACb,QAAQ,EACR,cAAc,EACd,SAAS,EACT,QAAQ,EACR,eAAe,EACf,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,aAAa,CAAC"}

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import {
   parseSSE,
   streamSSE
-} from "../index-d4rwrjbc.js";
+} from "../index-mahbaen9.js";
 import {
   createAuthHook,
   createBearerResolver,
@@ -13,7 +13,7 @@ import {
   signJwt,
   verifyJwt,
   verifyPkce
-} from "../index-1cf8jkhf.js";
+} from "../index-hty3443r.js";
 import {
   inputIsQuery
 } from "../index-48ffdxgk.js";
@@ -21,6 +21,9 @@ import {
   jsonSchemaFields,
   toJsonSchema
 } from "../index-0ed3bx43.js";
+import {
+  getTraceId
+} from "../index-za2p453b.js";
 import {
   composeWebSocketHandlers,
   corsHeaders,
@@ -30,23 +33,28 @@ import {
   createServer,
   createSocketIOServer,
   implement,
+  mimeForPath,
   parseMultipart,
   socketIoLane,
   staticRoute,
   webSocketLane
-} from "../index-kgjnt3hn.js";
+} from "../index-8hsj2qm9.js";
 import"../index-x3fcszf8.js";
-import"../index-vhdvv00d.js";
+import {
+  normalizeError
+} from "../index-4843j09b.js";
 import {
   AppError,
+  STITCH_ERROR_STATUS,
   appError,
   badRequest,
   conflict,
   forbidden,
+  isStitchErrorCode,
   notFound,
   rateLimited,
   unauthorized
-} from "../index-afzt3nmx.js";
+} from "../index-9bk6r5ff.js";
 import {
   extractIp,
   generateTraceId,
@@ -169,6 +177,154 @@ function createEventBus(options = {}) {
     }
   };
 }
+// src/server/file.ts
+function parseByteRange(header, size) {
+  if (!header)
+    return null;
+  const match = /^bytes=(.+)$/.exec(header.trim());
+  const rawSpec = match?.[1];
+  if (rawSpec === undefined)
+    return null;
+  const spec = rawSpec.trim();
+  if (spec.includes(","))
+    return null;
+  const dash = spec.indexOf("-");
+  if (dash === -1)
+    return null;
+  const startStr = spec.slice(0, dash).trim();
+  const endStr = spec.slice(dash + 1).trim();
+  if (startStr === "") {
+    if (!/^\d+$/.test(endStr))
+      return null;
+    const suffix = Number(endStr);
+    if (suffix === 0 || size === 0)
+      return "unsatisfiable";
+    return { start: Math.max(0, size - suffix), end: size - 1 };
+  }
+  if (!/^\d+$/.test(startStr))
+    return null;
+  const start = Number(startStr);
+  if (size === 0 || start >= size)
+    return "unsatisfiable";
+  if (endStr === "")
+    return { start, end: size - 1 };
+  if (!/^\d+$/.test(endStr))
+    return null;
+  const end = Number(endStr);
+  if (end < start)
+    return null;
+  return { start, end: end >= size ? size - 1 : end };
+}
+function weakETag(size, mtimeMs) {
+  return `W/"${size.toString(16)}-${Math.floor(mtimeMs).toString(16)}"`;
+}
+function leSeconds(aMs, bMs) {
+  return Math.floor(aMs / 1000) <= Math.floor(bMs / 1000);
+}
+function isNotModified(req, v) {
+  const inm = req.headers.get("if-none-match");
+  if (inm !== null) {
+    const value = inm.trim();
+    if (value === "*")
+      return true;
+    if (v.etag === undefined)
+      return false;
+    return value.split(",").map((t) => t.trim()).includes(v.etag);
+  }
+  const ims = req.headers.get("if-modified-since");
+  if (ims !== null) {
+    if (v.lastModifiedMs === undefined)
+      return false;
+    const since = Date.parse(ims);
+    if (Number.isNaN(since))
+      return false;
+    return leSeconds(v.lastModifiedMs, since);
+  }
+  return false;
+}
+function ifRangeMatches(req, v) {
+  const ir = req.headers.get("if-range");
+  if (ir === null)
+    return true;
+  const value = ir.trim();
+  if (v.etag !== undefined && value === v.etag)
+    return true;
+  if (v.lastModifiedMs !== undefined) {
+    const asDate = Date.parse(value);
+    if (!Number.isNaN(asDate))
+      return leSeconds(v.lastModifiedMs, asDate);
+  }
+  return false;
+}
+function asciiFilename(filename) {
+  let out = "";
+  for (let i = 0;i < filename.length; i++) {
+    const code = filename.charCodeAt(i);
+    out += code >= 32 && code < 127 && code !== 34 && code !== 92 ? filename.charAt(i) : "_";
+  }
+  return out;
+}
+function contentDisposition(disposition, filename) {
+  return `${disposition}; filename="${asciiFilename(filename)}"; filename*=UTF-8''${encodeURIComponent(filename)}`;
+}
+async function serveFile(req, opts) {
+  if (req.method !== "GET" && req.method !== "HEAD") {
+    return new Response("Method not allowed", {
+      status: 405,
+      headers: { Allow: "GET, HEAD" }
+    });
+  }
+  const file = Bun.file(opts.path);
+  if (!await file.exists()) {
+    return new Response("Not found", { status: 404 });
+  }
+  const size = file.size;
+  const mtimeMs = file.lastModified;
+  const contentType = opts.contentType ?? mimeForPath(opts.path);
+  const useEtag = opts.etag !== false;
+  const useLastModified = opts.lastModified !== false;
+  const etag = useEtag ? weakETag(size, mtimeMs) : undefined;
+  const validators = {
+    etag,
+    lastModifiedMs: useLastModified ? mtimeMs : undefined
+  };
+  const isHead = req.method === "HEAD";
+  const base = new Headers;
+  base.set("Accept-Ranges", "bytes");
+  base.set("X-Content-Type-Options", "nosniff");
+  if (etag)
+    base.set("ETag", etag);
+  if (useLastModified)
+    base.set("Last-Modified", new Date(mtimeMs).toUTCString());
+  if (opts.cacheControl)
+    base.set("Cache-Control", opts.cacheControl);
+  if (opts.filename) {
+    base.set("Content-Disposition", contentDisposition(opts.disposition ?? "inline", opts.filename));
+  } else if (opts.disposition) {
+    base.set("Content-Disposition", opts.disposition);
+  }
+  if ((useEtag || useLastModified) && isNotModified(req, validators)) {
+    return new Response(null, { status: 304, headers: base });
+  }
+  const rangeHeader = req.headers.get("range");
+  const range = rangeHeader !== null && ifRangeMatches(req, validators) ? parseByteRange(rangeHeader, size) : null;
+  if (range === "unsatisfiable") {
+    base.set("Content-Range", `bytes */${size}`);
+    base.set("Content-Type", contentType);
+    return new Response(null, { status: 416, headers: base });
+  }
+  if (range) {
+    const length = range.end - range.start + 1;
+    base.set("Content-Type", contentType);
+    base.set("Content-Range", `bytes ${range.start}-${range.end}/${size}`);
+    base.set("Content-Length", String(length));
+    const body = isHead ? null : file.slice(range.start, range.end + 1);
+    return new Response(body, { status: 206, headers: base });
+  }
+  base.set("Content-Type", contentType);
+  base.set("Content-Length", String(size));
+  return new Response(isHead ? null : file, { status: 200, headers: base });
+}
 // src/server/openapi.ts
 var ERROR_ENVELOPE_SCHEMA = {
   type: "object",
@@ -362,8 +518,30 @@ function createRateLimiter() {
     }
   };
 }
+// src/server/raw.ts
+function respondJson(data) {
+  if (data === null || data === undefined)
+    return new Response(null, { status: 204 });
+  return Response.json(data);
+}
+function errorResponse2(error) {
+  const appErr = normalizeError(error);
+  const res = Response.json(appErr.toJSON(), { status: appErr.status });
+  const traceId = getTraceId();
+  if (traceId)
+    res.headers.set("x-request-id", traceId);
+  return res;
+}
+async function parseBody(req, schema) {
+  const raw = await req.json().catch(() => null);
+  if (raw === null)
+    return null;
+  const parsed = schema.safeParse(raw);
+  return parsed.success ? parsed.data : null;
+}
 export {
   webSocketLane,
+  weakETag,
   verifyPkce,
   verifyJwt,
   unauthorized,
@@ -371,15 +549,20 @@ export {
   staticRoute,
   socketIoLane,
   signJwt,
+  serveFile,
   serializeCookie,
+  respondJson,
   resolveTraceId,
   resolveSocketIp,
   rateLimited,
   parseSSE,
   parseMultipart,
   parseCookies,
+  parseByteRange,
+  parseBody,
   openApiRoute,
   notFound,
+  isStitchErrorCode,
   implement,
   getClientInfo,
   generateTraceId,
@@ -387,6 +570,7 @@ export {
   forbidden,
   extractToken,
   extractIp,
+  errorResponse2 as errorResponse,
   deriveCodeChallenge,
   defineCookie,
   createSocketIOServer,
@@ -405,5 +589,6 @@ export {
   cacheHeaders,
   badRequest,
   appError,
+  STITCH_ERROR_STATUS,
   AppError
 };

package/dist/server/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/server/logger.ts"],"names":[],"mappings":"AAwCA,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnD;AAQD,yCAAyC;AACzC,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAIxE;AAED,wEAAwE;AACxE,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAEvF;AA0BD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAGnE;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CACzB,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,UAAU,CASZ;AAED,oFAAoF;AACpF,wBAAgB,WAAW,CACzB,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,UAAU,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAoBN"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/server/logger.ts"],"names":[],"mappings":"AAwCA,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnD;AAoBD,yCAAyC;AACzC,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAIxE;AAED,wEAAwE;AACxE,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAEvF;AA0BD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAGnE;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CACzB,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,UAAU,CASZ;AAED,oFAAoF;AACpF,wBAAgB,WAAW,CACzB,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,UAAU,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAoBN"}