vafast 0.3.2 → 0.3.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (136) hide show
  1. package/dist/auth/token.d.ts +13 -11
  2. package/dist/auth/token.js +118 -111
  3. package/dist/auth/token.js.map +1 -0
  4. package/dist/defineRoute.d.ts +5 -2
  5. package/dist/defineRoute.js +7 -2
  6. package/dist/defineRoute.js.map +1 -0
  7. package/dist/index.d.ts +30 -14
  8. package/dist/index.js +2275 -15
  9. package/dist/index.js.map +1 -0
  10. package/dist/middleware/auth.d.ts +8 -6
  11. package/dist/middleware/auth.js +198 -99
  12. package/dist/middleware/auth.js.map +1 -0
  13. package/dist/middleware/authMiddleware.d.ts +5 -2
  14. package/dist/middleware/authMiddleware.js +55 -11
  15. package/dist/middleware/authMiddleware.js.map +1 -0
  16. package/dist/middleware/component-renderer.d.ts +4 -2
  17. package/dist/middleware/component-renderer.js +87 -80
  18. package/dist/middleware/component-renderer.js.map +1 -0
  19. package/dist/middleware/component-router.d.ts +8 -3
  20. package/dist/middleware/component-router.js +33 -39
  21. package/dist/middleware/component-router.js.map +1 -0
  22. package/dist/middleware/cors.d.ts +6 -3
  23. package/dist/middleware/cors.js +42 -29
  24. package/dist/middleware/cors.js.map +1 -0
  25. package/dist/middleware/rateLimit.d.ts +5 -3
  26. package/dist/middleware/rateLimit.js +45 -29
  27. package/dist/middleware/rateLimit.js.map +1 -0
  28. package/dist/middleware.d.ts +6 -3
  29. package/dist/middleware.js +97 -51
  30. package/dist/middleware.js.map +1 -0
  31. package/dist/monitoring/index.d.ts +11 -4
  32. package/dist/monitoring/index.js +1327 -17
  33. package/dist/monitoring/index.js.map +1 -0
  34. package/dist/monitoring/native-monitor.d.ts +12 -6
  35. package/dist/monitoring/native-monitor.js +1286 -161
  36. package/dist/monitoring/native-monitor.js.map +1 -0
  37. package/dist/monitoring/types.d.ts +8 -6
  38. package/dist/monitoring/types.js +1 -1
  39. package/dist/monitoring/types.js.map +1 -0
  40. package/dist/node-server/index.d.ts +4 -22
  41. package/dist/node-server/index.js +254 -21
  42. package/dist/node-server/index.js.map +1 -0
  43. package/dist/node-server/request.d.ts +6 -2
  44. package/dist/node-server/request.js +102 -134
  45. package/dist/node-server/request.js.map +1 -0
  46. package/dist/node-server/response.d.ts +7 -3
  47. package/dist/node-server/response.js +67 -89
  48. package/dist/node-server/response.js.map +1 -0
  49. package/dist/node-server/serve.d.ts +11 -7
  50. package/dist/node-server/serve.js +231 -82
  51. package/dist/node-server/serve.js.map +1 -0
  52. package/dist/router/index.d.ts +3 -5
  53. package/dist/router/index.js +228 -7
  54. package/dist/router/index.js.map +1 -0
  55. package/dist/router/radix-tree.d.ts +7 -4
  56. package/dist/router/radix-tree.js +186 -218
  57. package/dist/router/radix-tree.js.map +1 -0
  58. package/dist/router.d.ts +7 -3
  59. package/dist/router.js +37 -83
  60. package/dist/router.js.map +1 -0
  61. package/dist/serve.d.ts +2 -12
  62. package/dist/serve.js +237 -11
  63. package/dist/serve.js.map +1 -0
  64. package/dist/server/base-server.d.ts +5 -2
  65. package/dist/server/base-server.js +124 -135
  66. package/dist/server/base-server.js.map +1 -0
  67. package/dist/server/component-server.d.ts +9 -4
  68. package/dist/server/component-server.js +481 -139
  69. package/dist/server/component-server.js.map +1 -0
  70. package/dist/server/index.d.ts +8 -7
  71. package/dist/server/index.js +1013 -11
  72. package/dist/server/index.js.map +1 -0
  73. package/dist/server/server-factory.d.ts +11 -5
  74. package/dist/server/server-factory.js +1007 -67
  75. package/dist/server/server-factory.js.map +1 -0
  76. package/dist/server/server.d.ts +9 -3
  77. package/dist/server/server.js +581 -112
  78. package/dist/server/server.js.map +1 -0
  79. package/dist/types/component-route.d.ts +8 -4
  80. package/dist/types/component-route.js +1 -1
  81. package/dist/types/component-route.js.map +1 -0
  82. package/dist/types/index.d.ts +5 -5
  83. package/dist/types/index.js +21 -4
  84. package/dist/types/index.js.map +1 -0
  85. package/dist/types/route.d.ts +13 -10
  86. package/dist/types/route.js +10 -9
  87. package/dist/types/route.js.map +1 -0
  88. package/dist/types/schema.d.ts +11 -7
  89. package/dist/types/schema.js +1 -1
  90. package/dist/types/schema.js.map +1 -0
  91. package/dist/types/types.d.ts +11 -9
  92. package/dist/types/types.js +1 -1
  93. package/dist/types/types.js.map +1 -0
  94. package/dist/utils/base64url.d.ts +4 -2
  95. package/dist/utils/base64url.js +12 -9
  96. package/dist/utils/base64url.js.map +1 -0
  97. package/dist/utils/create-handler.d.ts +11 -7
  98. package/dist/utils/create-handler.js +393 -217
  99. package/dist/utils/create-handler.js.map +1 -0
  100. package/dist/utils/dependency-manager.d.ts +3 -1
  101. package/dist/utils/dependency-manager.js +67 -69
  102. package/dist/utils/dependency-manager.js.map +1 -0
  103. package/dist/utils/go-await.d.ts +3 -1
  104. package/dist/utils/go-await.js +8 -22
  105. package/dist/utils/go-await.js.map +1 -0
  106. package/dist/utils/handle.d.ts +6 -4
  107. package/dist/utils/handle.js +44 -25
  108. package/dist/utils/handle.js.map +1 -0
  109. package/dist/utils/html-renderer.d.ts +3 -1
  110. package/dist/utils/html-renderer.js +25 -24
  111. package/dist/utils/html-renderer.js.map +1 -0
  112. package/dist/utils/index.d.ts +13 -13
  113. package/dist/utils/index.js +832 -21
  114. package/dist/utils/index.js.map +1 -0
  115. package/dist/utils/parsers.d.ts +15 -13
  116. package/dist/utils/parsers.js +138 -188
  117. package/dist/utils/parsers.js.map +1 -0
  118. package/dist/utils/path-matcher.d.ts +3 -1
  119. package/dist/utils/path-matcher.js +68 -78
  120. package/dist/utils/path-matcher.js.map +1 -0
  121. package/dist/utils/request-validator.d.ts +13 -10
  122. package/dist/utils/request-validator.js +234 -84
  123. package/dist/utils/request-validator.js.map +1 -0
  124. package/dist/utils/response.d.ts +9 -7
  125. package/dist/utils/response.js +93 -102
  126. package/dist/utils/response.js.map +1 -0
  127. package/dist/utils/validators/schema-validator.d.ts +13 -9
  128. package/dist/utils/validators/schema-validator.js +228 -209
  129. package/dist/utils/validators/schema-validator.js.map +1 -0
  130. package/dist/utils/validators/schema-validators-ultra.d.ts +15 -12
  131. package/dist/utils/validators/schema-validators-ultra.js +233 -256
  132. package/dist/utils/validators/schema-validators-ultra.js.map +1 -0
  133. package/dist/utils/validators/validators.d.ts +15 -12
  134. package/dist/utils/validators/validators.js +81 -122
  135. package/dist/utils/validators/validators.js.map +1 -0
  136. package/package.json +5 -4
package/dist/index.js CHANGED
@@ -1,15 +1,2275 @@
1
- export * from "./server";
2
- export * from "./middleware";
3
- export * from "./utils";
4
- export * from "./router";
5
- export * from "./middleware/authMiddleware";
6
- export * from "./middleware/rateLimit";
7
- export * from "./middleware/cors";
8
- export * from "./auth/token";
9
- export * from "./middleware/auth";
10
- export * from "./defineRoute";
11
- export * from "./types/index";
12
- // 统一的 serve 函数(自动适配 Bun/Node.js)
13
- export { serve } from "./serve";
14
- // 重新导出 Type 以便用户使用
15
- export { Type } from "@sinclair/typebox";
1
+ // src/router.ts
2
+ function flattenNestedRoutes(routes) {
3
+ const flattened = [];
4
+ function processRoute(route, parentPath = "", parentMiddleware = []) {
5
+ const currentPath = normalizePath(parentPath + route.path);
6
+ const currentMiddleware = [
7
+ ...parentMiddleware,
8
+ ...route.middleware || []
9
+ ];
10
+ if ("method" in route && "handler" in route) {
11
+ flattened.push({
12
+ ...route,
13
+ fullPath: currentPath,
14
+ middlewareChain: currentMiddleware
15
+ });
16
+ } else if ("children" in route && route.children) {
17
+ for (const child of route.children) {
18
+ processRoute(child, currentPath, currentMiddleware);
19
+ }
20
+ }
21
+ }
22
+ for (const route of routes) {
23
+ processRoute(route);
24
+ }
25
+ return flattened;
26
+ }
27
+ function normalizePath(path) {
28
+ let normalized = decodeURIComponent(path);
29
+ normalized = normalized.replace(/\/+/g, "/");
30
+ if (normalized === "") return "/";
31
+ if (normalized !== "/" && normalized.endsWith("/")) {
32
+ normalized = normalized.slice(0, -1);
33
+ }
34
+ return normalized;
35
+ }
36
+
37
+ // src/utils/response.ts
38
+ function json(data, status = 200, headers = {}) {
39
+ const body = JSON.stringify(data);
40
+ if (Object.keys(headers).length === 0) {
41
+ return new Response(body, {
42
+ status,
43
+ headers: { "Content-Type": "application/json" }
44
+ });
45
+ }
46
+ const h = new Headers({
47
+ "Content-Type": "application/json",
48
+ ...headers
49
+ });
50
+ return new Response(body, {
51
+ status,
52
+ headers: h
53
+ });
54
+ }
55
+ var JSON_HEADERS = { "Content-Type": "application/json" };
56
+ var TEXT_HEADERS = { "Content-Type": "text/plain" };
57
+ function mapResponse(response) {
58
+ if (response instanceof Response) return response;
59
+ switch (response?.constructor?.name) {
60
+ case "String":
61
+ return new Response(response, { headers: TEXT_HEADERS });
62
+ case "Object":
63
+ case "Array":
64
+ return new Response(JSON.stringify(response), { headers: JSON_HEADERS });
65
+ case "Number":
66
+ case "Boolean":
67
+ return new Response(String(response), { headers: TEXT_HEADERS });
68
+ case void 0:
69
+ return new Response(null, { status: 204 });
70
+ case "ReadableStream":
71
+ return new Response(response);
72
+ case "Blob":
73
+ return new Response(response);
74
+ case "ArrayBuffer":
75
+ return new Response(response);
76
+ case "Uint8Array":
77
+ return new Response(response);
78
+ default:
79
+ if (response instanceof Promise) {
80
+ return response.then(mapResponse);
81
+ }
82
+ return new Response(JSON.stringify(response), { headers: JSON_HEADERS });
83
+ }
84
+ }
85
+ function redirect(location, status = 302) {
86
+ return new Response(null, {
87
+ status,
88
+ headers: {
89
+ Location: location
90
+ }
91
+ });
92
+ }
93
+ function text(content, status = 200, headers = {}) {
94
+ const h = new Headers({
95
+ "Content-Type": "text/plain; charset=utf-8",
96
+ ...headers
97
+ });
98
+ return new Response(content, {
99
+ status,
100
+ headers: h
101
+ });
102
+ }
103
+ function html(content, status = 200, headers = {}) {
104
+ const h = new Headers({
105
+ "Content-Type": "text/html; charset=utf-8",
106
+ ...headers
107
+ });
108
+ return new Response(content, {
109
+ status,
110
+ headers: h
111
+ });
112
+ }
113
+ function empty(status = 204, headers = {}) {
114
+ return new Response(null, {
115
+ status,
116
+ headers
117
+ });
118
+ }
119
+ function stream(stream2, status = 200, headers = {}) {
120
+ const h = new Headers({
121
+ "Content-Type": "application/octet-stream",
122
+ ...headers
123
+ });
124
+ return new Response(stream2, {
125
+ status,
126
+ headers: h
127
+ });
128
+ }
129
+
130
+ // src/middleware.ts
131
+ var VafastError = class extends Error {
132
+ status;
133
+ type;
134
+ expose;
135
+ constructor(message, options = {}) {
136
+ super(message);
137
+ this.name = "VafastError";
138
+ this.status = options.status ?? 500;
139
+ this.type = options.type ?? "internal_error";
140
+ this.expose = options.expose ?? false;
141
+ if (options.cause) this.cause = options.cause;
142
+ }
143
+ };
144
+ function composeMiddleware(middleware, finalHandler) {
145
+ const all = [errorHandler, ...middleware];
146
+ return function composedHandler(req) {
147
+ let i = -1;
148
+ const dispatch = (index) => {
149
+ if (index <= i)
150
+ return Promise.reject(new Error("next() called multiple times"));
151
+ i = index;
152
+ if (index < all.length) {
153
+ const mw = all[index];
154
+ return Promise.resolve(mw(req, () => dispatch(index + 1)));
155
+ }
156
+ return Promise.resolve(finalHandler(req)).then(mapResponse);
157
+ };
158
+ return dispatch(0);
159
+ };
160
+ }
161
+ var errorHandler = async (req, next) => {
162
+ try {
163
+ return await next();
164
+ } catch (err) {
165
+ console.error("\u672A\u5904\u7406\u7684\u9519\u8BEF:", err);
166
+ if (err instanceof VafastError) {
167
+ return json(
168
+ {
169
+ error: err.type,
170
+ message: err.expose ? err.message : "\u53D1\u751F\u4E86\u4E00\u4E2A\u9519\u8BEF"
171
+ },
172
+ err.status
173
+ );
174
+ }
175
+ return json({ error: "internal_error", message: "\u51FA\u73B0\u4E86\u4E00\u4E9B\u95EE\u9898" }, 500);
176
+ }
177
+ };
178
+
179
+ // src/server/base-server.ts
180
+ var BaseServer = class {
181
+ globalMiddleware = [];
182
+ use(mw) {
183
+ this.globalMiddleware.push(mw);
184
+ }
185
+ /**
186
+ * 打印扁平化后的路由信息,用于调试
187
+ */
188
+ logFlattenedRoutes(routes, type = "\u8DEF\u7531") {
189
+ console.log(`\u{1F680} \u6241\u5E73\u5316\u540E\u7684${type}:`);
190
+ for (const route of routes) {
191
+ const method = route.method || "GET";
192
+ const path = route.fullPath || route.path;
193
+ console.log(` ${method} ${path}`);
194
+ if (route.middlewareChain && route.middlewareChain.length > 0) {
195
+ console.log(` \u4E2D\u95F4\u4EF6\u94FE: ${route.middlewareChain.length} \u4E2A`);
196
+ }
197
+ }
198
+ console.log("");
199
+ }
200
+ /**
201
+ * 检测路由冲突
202
+ * 检查是否有路径相同但方法不同的路由,以及潜在的路径冲突
203
+ */
204
+ detectRouteConflicts(routes) {
205
+ const pathGroups = /* @__PURE__ */ new Map();
206
+ for (const route of routes) {
207
+ const path = route.fullPath || route.path;
208
+ const method = route.method || "GET";
209
+ if (!pathGroups.has(path)) {
210
+ pathGroups.set(path, []);
211
+ }
212
+ pathGroups.get(path).push({ ...route, method });
213
+ }
214
+ for (const [path, routeList] of pathGroups) {
215
+ if (routeList.length > 1) {
216
+ const methods = routeList.map((r) => r.method);
217
+ const uniqueMethods = [...new Set(methods)];
218
+ if (uniqueMethods.length === 1) {
219
+ console.warn(
220
+ `\u26A0\uFE0F \u8DEF\u7531\u51B2\u7A81: ${uniqueMethods[0]} ${path} \u5B9A\u4E49\u4E86 ${routeList.length} \u6B21`
221
+ );
222
+ routeList.forEach((route, index) => {
223
+ console.warn(` ${index + 1}. ${route.method} ${path}`);
224
+ });
225
+ } else {
226
+ console.log(`\u2139\uFE0F \u8DEF\u5F84 ${path} \u652F\u6301\u65B9\u6CD5: ${uniqueMethods.join(", ")}`);
227
+ }
228
+ }
229
+ }
230
+ this.detectDynamicRouteConflicts(routes);
231
+ }
232
+ /**
233
+ * 检测动态路由的潜在冲突
234
+ */
235
+ detectDynamicRouteConflicts(routes) {
236
+ const dynamicRoutes = routes.filter((r) => {
237
+ const path = r.fullPath || r.path;
238
+ return path.includes(":") || path.includes("*");
239
+ });
240
+ for (let i = 0; i < dynamicRoutes.length; i++) {
241
+ for (let j = i + 1; j < dynamicRoutes.length; j++) {
242
+ const route1 = dynamicRoutes[i];
243
+ const route2 = dynamicRoutes[j];
244
+ const method1 = route1.method || "GET";
245
+ const method2 = route2.method || "GET";
246
+ if (method1 === method2) {
247
+ const path1 = route1.fullPath || route1.path;
248
+ const path2 = route2.fullPath || route2.path;
249
+ if (this.pathsMayConflict(path1, path2)) {
250
+ console.warn(
251
+ `\u26A0\uFE0F \u6F5C\u5728\u8DEF\u7531\u51B2\u7A81: ${method1} ${path1} \u53EF\u80FD\u4E0E ${path2} \u51B2\u7A81`
252
+ );
253
+ }
254
+ }
255
+ }
256
+ }
257
+ }
258
+ /**
259
+ * 判断两个路径是否可能冲突
260
+ */
261
+ pathsMayConflict(path1, path2) {
262
+ const parts1 = path1.split("/").filter(Boolean);
263
+ const parts2 = path2.split("/").filter(Boolean);
264
+ if (parts1.length !== parts2.length) return false;
265
+ for (let i = 0; i < parts1.length; i++) {
266
+ const p1 = parts1[i];
267
+ const p2 = parts2[i];
268
+ if (!p1.startsWith(":") && !p1.startsWith("*") && !p2.startsWith(":") && !p2.startsWith("*") && p1 !== p2) {
269
+ return false;
270
+ }
271
+ if (p1 === "*" && p2.startsWith(":") || p2 === "*" && p1.startsWith(":")) {
272
+ return true;
273
+ }
274
+ }
275
+ return false;
276
+ }
277
+ /**
278
+ * 路径匹配
279
+ */
280
+ matchPath(pattern, path) {
281
+ const patternParts = pattern.split("/").filter(Boolean);
282
+ const pathParts = path.split("/").filter(Boolean);
283
+ if (patternParts.length !== pathParts.length) {
284
+ return false;
285
+ }
286
+ for (let i = 0; i < patternParts.length; i++) {
287
+ if (patternParts[i] !== pathParts[i] && !patternParts[i].startsWith(":")) {
288
+ return false;
289
+ }
290
+ }
291
+ return true;
292
+ }
293
+ /**
294
+ * 提取路径参数
295
+ */
296
+ extractParams(pattern, path) {
297
+ const params = {};
298
+ const patternParts = pattern.split("/").filter(Boolean);
299
+ const pathParts = path.split("/").filter(Boolean);
300
+ for (let i = 0; i < patternParts.length; i++) {
301
+ if (patternParts[i].startsWith(":")) {
302
+ const paramName = patternParts[i].slice(1);
303
+ params[paramName] = pathParts[i];
304
+ }
305
+ }
306
+ return params;
307
+ }
308
+ };
309
+
310
+ // src/router/radix-tree.ts
311
+ var RadixRouter = class {
312
+ root;
313
+ constructor() {
314
+ this.root = this.createNode("");
315
+ }
316
+ createNode(path) {
317
+ return {
318
+ path,
319
+ children: /* @__PURE__ */ Object.create(null),
320
+ handlers: /* @__PURE__ */ Object.create(null)
321
+ };
322
+ }
323
+ /** 分割路径 */
324
+ splitPath(path) {
325
+ return path.split("/").filter(Boolean);
326
+ }
327
+ /** 编译器函数 - 用于预编译中间件链 */
328
+ compiler;
329
+ /** 设置中间件编译器 */
330
+ setCompiler(compiler) {
331
+ this.compiler = compiler;
332
+ }
333
+ /** 注册路由 */
334
+ register(method, pattern, handler, middleware = []) {
335
+ const segments = this.splitPath(pattern);
336
+ let node = this.root;
337
+ for (const segment of segments) {
338
+ const firstChar = segment[0];
339
+ if (firstChar === ":") {
340
+ if (!node.paramChild) {
341
+ node.paramChild = this.createNode(segment);
342
+ node.paramChild.paramName = segment.substring(1);
343
+ }
344
+ node = node.paramChild;
345
+ } else if (firstChar === "*") {
346
+ if (!node.wildcardChild) {
347
+ node.wildcardChild = this.createNode(segment);
348
+ node.wildcardChild.paramName = segment.length > 1 ? segment.substring(1) : "*";
349
+ }
350
+ node = node.wildcardChild;
351
+ break;
352
+ } else {
353
+ if (!node.children[segment]) {
354
+ node.children[segment] = this.createNode(segment);
355
+ }
356
+ node = node.children[segment];
357
+ }
358
+ }
359
+ const routeHandler = { handler, middleware };
360
+ if (this.compiler && middleware.length === 0) {
361
+ routeHandler.compiled = this.compiler([], handler);
362
+ }
363
+ node.handlers[method] = routeHandler;
364
+ }
365
+ /** 预编译所有路由(在添加全局中间件后调用) */
366
+ precompileAll(globalMiddleware) {
367
+ if (!this.compiler) return;
368
+ this.precompileNode(this.root, globalMiddleware);
369
+ }
370
+ precompileNode(node, globalMiddleware) {
371
+ for (const method in node.handlers) {
372
+ const routeHandler = node.handlers[method];
373
+ if (routeHandler) {
374
+ const allMiddleware = [...globalMiddleware, ...routeHandler.middleware];
375
+ routeHandler.compiled = this.compiler(
376
+ allMiddleware,
377
+ routeHandler.handler
378
+ );
379
+ }
380
+ }
381
+ for (const key in node.children) {
382
+ this.precompileNode(node.children[key], globalMiddleware);
383
+ }
384
+ if (node.paramChild) {
385
+ this.precompileNode(node.paramChild, globalMiddleware);
386
+ }
387
+ if (node.wildcardChild) {
388
+ this.precompileNode(node.wildcardChild, globalMiddleware);
389
+ }
390
+ }
391
+ /** 匹配路由 */
392
+ match(method, path) {
393
+ const segments = this.splitPath(path);
394
+ const params = /* @__PURE__ */ Object.create(null);
395
+ const node = this.matchNode(this.root, segments, 0, params);
396
+ if (!node) return null;
397
+ const routeHandler = node.handlers[method];
398
+ if (!routeHandler) return null;
399
+ return {
400
+ handler: routeHandler.handler,
401
+ middleware: routeHandler.middleware,
402
+ params,
403
+ compiled: routeHandler.compiled
404
+ };
405
+ }
406
+ /** 递归匹配节点 (优先级: 静态 > 动态参数 > 通配符) */
407
+ matchNode(node, segments, index, params) {
408
+ if (index === segments.length) {
409
+ for (const method in node.handlers) {
410
+ if (node.handlers[method]) return node;
411
+ }
412
+ return null;
413
+ }
414
+ const segment = segments[index];
415
+ const staticChild = node.children[segment];
416
+ if (staticChild) {
417
+ const result = this.matchNode(staticChild, segments, index + 1, params);
418
+ if (result) return result;
419
+ }
420
+ if (node.paramChild) {
421
+ const paramName = node.paramChild.paramName;
422
+ const oldValue = params[paramName];
423
+ params[paramName] = segment;
424
+ const result = this.matchNode(
425
+ node.paramChild,
426
+ segments,
427
+ index + 1,
428
+ params
429
+ );
430
+ if (result) return result;
431
+ if (oldValue === void 0) {
432
+ delete params[paramName];
433
+ } else {
434
+ params[paramName] = oldValue;
435
+ }
436
+ }
437
+ if (node.wildcardChild) {
438
+ params[node.wildcardChild.paramName || "*"] = segments.slice(index).join("/");
439
+ return node.wildcardChild;
440
+ }
441
+ return null;
442
+ }
443
+ /** 获取路径允许的 HTTP 方法 */
444
+ getAllowedMethods(path) {
445
+ const segments = this.splitPath(path);
446
+ const node = this.findNode(segments);
447
+ if (!node) return [];
448
+ const methods = [];
449
+ for (const method in node.handlers) {
450
+ if (node.handlers[method]) {
451
+ methods.push(method);
452
+ }
453
+ }
454
+ return methods;
455
+ }
456
+ /** 查找节点(不提取参数) */
457
+ findNode(segments) {
458
+ let node = this.root;
459
+ for (const segment of segments) {
460
+ if (node.children[segment]) {
461
+ node = node.children[segment];
462
+ } else if (node.paramChild) {
463
+ node = node.paramChild;
464
+ } else if (node.wildcardChild) {
465
+ return node.wildcardChild;
466
+ } else {
467
+ return null;
468
+ }
469
+ }
470
+ return node;
471
+ }
472
+ /** 获取所有已注册的路由 */
473
+ getRoutes() {
474
+ const routes = [];
475
+ this.collectRoutes(this.root, "", routes);
476
+ return routes;
477
+ }
478
+ collectRoutes(node, prefix, routes) {
479
+ const currentPath = prefix + (node.path ? "/" + node.path : "");
480
+ for (const method in node.handlers) {
481
+ if (node.handlers[method]) {
482
+ routes.push({ method, path: currentPath || "/" });
483
+ }
484
+ }
485
+ for (const key in node.children) {
486
+ this.collectRoutes(node.children[key], currentPath, routes);
487
+ }
488
+ if (node.paramChild) {
489
+ this.collectRoutes(node.paramChild, currentPath, routes);
490
+ }
491
+ if (node.wildcardChild) {
492
+ this.collectRoutes(node.wildcardChild, currentPath, routes);
493
+ }
494
+ }
495
+ };
496
+
497
+ // src/server/server.ts
498
+ var Server = class extends BaseServer {
499
+ router;
500
+ routes;
501
+ /** 是否已预编译 */
502
+ isCompiled = false;
503
+ /** 预编译时的全局中间件数量 */
504
+ compiledWithMiddlewareCount = 0;
505
+ constructor(routes = []) {
506
+ super();
507
+ this.router = new RadixRouter();
508
+ this.routes = [];
509
+ this.router.setCompiler(
510
+ (middleware, handler) => composeMiddleware(middleware, handler)
511
+ );
512
+ if (routes.length > 0) {
513
+ this.registerRoutes(routes);
514
+ }
515
+ }
516
+ /**
517
+ * 预编译所有路由处理链
518
+ * 在添加所有路由和全局中间件后调用,可提升运行时性能
519
+ */
520
+ compile() {
521
+ this.router.precompileAll(this.globalMiddleware);
522
+ this.isCompiled = true;
523
+ this.compiledWithMiddlewareCount = this.globalMiddleware.length;
524
+ return this;
525
+ }
526
+ registerRoutes(routes) {
527
+ const flattened = flattenNestedRoutes(routes);
528
+ this.routes.push(...flattened);
529
+ for (const route of flattened) {
530
+ this.router.register(
531
+ route.method,
532
+ route.fullPath,
533
+ route.handler,
534
+ route.middlewareChain || []
535
+ );
536
+ }
537
+ this.detectRouteConflicts(flattened);
538
+ this.logFlattenedRoutes(flattened);
539
+ if (this.globalMiddleware.length === 0 && !this.isCompiled) {
540
+ this.compile();
541
+ }
542
+ }
543
+ /** 快速提取 pathname */
544
+ extractPathname(url) {
545
+ let start = url.indexOf("://");
546
+ start = start === -1 ? 0 : start + 3;
547
+ const pathStart = url.indexOf("/", start);
548
+ if (pathStart === -1) return "/";
549
+ let end = url.indexOf("?", pathStart);
550
+ if (end === -1) end = url.indexOf("#", pathStart);
551
+ if (end === -1) end = url.length;
552
+ return url.substring(pathStart, end) || "/";
553
+ }
554
+ /** 生成 404/405 响应 */
555
+ createErrorResponse(method, pathname) {
556
+ const allowedMethods = this.router.getAllowedMethods(pathname);
557
+ if (allowedMethods.length > 0) {
558
+ return json(
559
+ {
560
+ success: false,
561
+ error: "Method Not Allowed",
562
+ message: `Method ${method} not allowed for this endpoint`,
563
+ allowedMethods
564
+ },
565
+ 405,
566
+ { Allow: allowedMethods.join(", ") }
567
+ );
568
+ }
569
+ return json({ success: false, error: "Not Found" }, 404);
570
+ }
571
+ /** 处理请求 */
572
+ fetch = async (req) => {
573
+ const pathname = this.extractPathname(req.url);
574
+ const method = req.method;
575
+ const match = this.router.match(method, pathname);
576
+ if (match) {
577
+ req.params = match.params;
578
+ if (match.compiled && this.globalMiddleware.length === this.compiledWithMiddlewareCount) {
579
+ return match.compiled(req);
580
+ }
581
+ const allMiddleware = [...this.globalMiddleware, ...match.middleware];
582
+ const handler = composeMiddleware(allMiddleware, match.handler);
583
+ return handler(req);
584
+ }
585
+ if (method === "OPTIONS") {
586
+ const allowedMethods = this.router.getAllowedMethods(pathname);
587
+ if (allowedMethods.length > 0) {
588
+ const anyMatch = this.router.match(
589
+ allowedMethods[0],
590
+ pathname
591
+ );
592
+ const routeMiddleware = anyMatch?.middleware || [];
593
+ const allMiddleware = [...this.globalMiddleware, ...routeMiddleware];
594
+ const optionsHandler = () => new Response(null, {
595
+ status: 204,
596
+ headers: { Allow: allowedMethods.join(", ") }
597
+ });
598
+ const handler = composeMiddleware(allMiddleware, optionsHandler);
599
+ return handler(req);
600
+ }
601
+ }
602
+ if (this.globalMiddleware.length > 0) {
603
+ const handler = composeMiddleware(
604
+ this.globalMiddleware,
605
+ () => this.createErrorResponse(method, pathname)
606
+ );
607
+ return handler(req);
608
+ }
609
+ return this.createErrorResponse(method, pathname);
610
+ };
611
+ addRoute(route) {
612
+ const flattenedRoute = {
613
+ ...route,
614
+ fullPath: route.path,
615
+ middlewareChain: route.middleware || []
616
+ };
617
+ this.routes.push(flattenedRoute);
618
+ this.router.register(
619
+ route.method,
620
+ route.path,
621
+ route.handler,
622
+ route.middleware || []
623
+ );
624
+ }
625
+ addRoutes(routes) {
626
+ this.registerRoutes(routes);
627
+ }
628
+ getRoutes() {
629
+ return this.router.getRoutes();
630
+ }
631
+ };
632
+
633
+ // src/middleware/component-router.ts
634
+ function flattenComponentRoutes(routes) {
635
+ const flattened = [];
636
+ function processRoute(route, parentPath = "", parentMiddleware = []) {
637
+ const currentPath = parentPath + route.path;
638
+ const currentMiddleware = [
639
+ ...parentMiddleware,
640
+ ...route.middleware || []
641
+ ];
642
+ if ("component" in route) {
643
+ flattened.push({
644
+ ...route,
645
+ fullPath: currentPath,
646
+ middlewareChain: currentMiddleware
647
+ });
648
+ } else if ("children" in route && route.children) {
649
+ for (const child of route.children) {
650
+ processRoute(child, currentPath, currentMiddleware);
651
+ }
652
+ }
653
+ }
654
+ for (const route of routes) {
655
+ processRoute(route);
656
+ }
657
+ return flattened;
658
+ }
659
+
660
+ // src/utils/path-matcher.ts
661
+ var PathMatcher = class {
662
+ /**
663
+ * 路径匹配
664
+ */
665
+ static matchPath(pattern, path) {
666
+ const patternParts = pattern.split("/").filter(Boolean);
667
+ const pathParts = path.split("/").filter(Boolean);
668
+ if (patternParts.length !== pathParts.length) {
669
+ return false;
670
+ }
671
+ for (let i = 0; i < patternParts.length; i++) {
672
+ if (patternParts[i] !== pathParts[i] && !patternParts[i].startsWith(":")) {
673
+ return false;
674
+ }
675
+ }
676
+ return true;
677
+ }
678
+ /**
679
+ * 提取路径参数
680
+ */
681
+ static extractParams(pattern, path) {
682
+ const params = {};
683
+ const patternParts = pattern.split("/").filter(Boolean);
684
+ const pathParts = path.split("/").filter(Boolean);
685
+ for (let i = 0; i < patternParts.length; i++) {
686
+ if (patternParts[i].startsWith(":")) {
687
+ const paramName = patternParts[i].slice(1);
688
+ params[paramName] = pathParts[i];
689
+ }
690
+ }
691
+ return params;
692
+ }
693
+ /**
694
+ * 计算路径特异性分数
695
+ * 用于路由排序:静态 > 动态(:param) > 通配符(*)
696
+ */
697
+ static calculatePathScore(path) {
698
+ const parts = path.split("/").filter(Boolean);
699
+ let score = 0;
700
+ for (const p of parts) {
701
+ if (p === "*")
702
+ score += 1;
703
+ else if (p.startsWith(":"))
704
+ score += 2;
705
+ else score += 3;
706
+ }
707
+ return score * 10 + parts.length;
708
+ }
709
+ /**
710
+ * 判断两个路径是否可能冲突
711
+ */
712
+ static pathsMayConflict(path1, path2) {
713
+ const parts1 = path1.split("/").filter(Boolean);
714
+ const parts2 = path2.split("/").filter(Boolean);
715
+ if (parts1.length !== parts2.length) return false;
716
+ for (let i = 0; i < parts1.length; i++) {
717
+ const p1 = parts1[i];
718
+ const p2 = parts2[i];
719
+ if (!p1.startsWith(":") && !p1.startsWith("*") && !p2.startsWith(":") && !p2.startsWith("*") && p1 !== p2) {
720
+ return false;
721
+ }
722
+ if (p1 === "*" && p2.startsWith(":") || p2 === "*" && p1.startsWith(":")) {
723
+ return true;
724
+ }
725
+ }
726
+ return false;
727
+ }
728
+ };
729
+
730
+ // src/utils/html-renderer.ts
731
+ var HtmlRenderer = class {
732
+ /**
733
+ * 生成基础HTML模板
734
+ */
735
+ static generateBaseHtml(content, context, clientScriptPath = "/client.js") {
736
+ return `
737
+ <!doctype html>
738
+ <html>
739
+ <head>
740
+ <meta charset="utf-8">
741
+ <title>Vafast SSR App</title>
742
+ <meta name="viewport" content="width=device-width, initial-scale=1">
743
+ </head>
744
+ <body>
745
+ <div id="app">${content}</div>
746
+ <script>
747
+ window.__ROUTE_INFO__ = {
748
+ params: ${JSON.stringify(context.params || {})},
749
+ query: ${JSON.stringify(context.query || {})},
750
+ pathname: '${context.pathname}'
751
+ };
752
+ </script>
753
+ <script type="module" src="${clientScriptPath}"></script>
754
+ </body>
755
+ </html>
756
+ `;
757
+ }
758
+ /**
759
+ * 生成Vue组件HTML
760
+ */
761
+ static generateVueHtml(content, context, clientScriptPath = "/client.js") {
762
+ return this.generateBaseHtml(content, context, clientScriptPath);
763
+ }
764
+ /**
765
+ * 生成React组件HTML
766
+ */
767
+ static generateReactHtml(content, context, clientScriptPath = "/client.js") {
768
+ return `
769
+ <!doctype html>
770
+ <html>
771
+ <head>
772
+ <meta charset="utf-8">
773
+ <title>Vafast SSR App</title>
774
+ <meta name="viewport" content="width=device-width, initial-scale=1">
775
+ </head>
776
+ <body>
777
+ <div id="root">${content}</div>
778
+ <script>
779
+ window.__ROUTE_INFO__ = {
780
+ params: ${JSON.stringify(context.params || {})},
781
+ query: ${JSON.stringify(context.query || {})},
782
+ pathname: '${context.pathname}'
783
+ };
784
+ </script>
785
+ <script type="module" src="${clientScriptPath}"></script>
786
+ </body>
787
+ </html>
788
+ `;
789
+ }
790
+ };
791
+
792
+ // src/utils/dependency-manager.ts
793
+ var DependencyManager = class {
794
+ dependencyCache = /* @__PURE__ */ new Map();
795
+ /**
796
+ * 按需获取框架依赖
797
+ */
798
+ async getFrameworkDeps(framework) {
799
+ if (this.dependencyCache.has(framework)) {
800
+ return this.dependencyCache.get(framework);
801
+ }
802
+ console.log(`\u{1F4E6} \u6309\u9700\u52A0\u8F7D ${framework} \u4F9D\u8D56...`);
803
+ try {
804
+ let deps;
805
+ switch (framework) {
806
+ case "vue":
807
+ deps = await Promise.all([
808
+ import("vue"),
809
+ import("@vue/server-renderer")
810
+ ]);
811
+ break;
812
+ case "react":
813
+ deps = await Promise.all([
814
+ import("react"),
815
+ import("react-dom/server")
816
+ ]);
817
+ break;
818
+ default:
819
+ throw new Error(`\u4E0D\u652F\u6301\u7684\u6846\u67B6: ${framework}`);
820
+ }
821
+ this.dependencyCache.set(framework, deps);
822
+ console.log(`\u2705 ${framework} \u4F9D\u8D56\u52A0\u8F7D\u5B8C\u6210`);
823
+ return deps;
824
+ } catch (error) {
825
+ console.error(`\u274C ${framework} \u4F9D\u8D56\u52A0\u8F7D\u5931\u8D25:`, error);
826
+ throw error;
827
+ }
828
+ }
829
+ /**
830
+ * 检测组件类型
831
+ */
832
+ detectComponentType(component) {
833
+ if (component.render && typeof component.render === "function") {
834
+ return "vue";
835
+ }
836
+ if (component.$$typeof) {
837
+ return "react";
838
+ }
839
+ return "vue";
840
+ }
841
+ /**
842
+ * 清除缓存
843
+ */
844
+ clearCache() {
845
+ this.dependencyCache.clear();
846
+ console.log("\u{1F9F9} \u4F9D\u8D56\u7F13\u5B58\u5DF2\u6E05\u9664");
847
+ }
848
+ /**
849
+ * 获取缓存状态
850
+ */
851
+ getCacheStatus() {
852
+ const status = {};
853
+ for (const [framework] of this.dependencyCache) {
854
+ status[framework] = true;
855
+ }
856
+ return status;
857
+ }
858
+ };
859
+
860
+ // src/server/component-server.ts
861
+ var ComponentServer = class extends BaseServer {
862
+ routes;
863
+ dependencyManager;
864
+ constructor(routes) {
865
+ super();
866
+ this.routes = flattenComponentRoutes(routes);
867
+ this.dependencyManager = new DependencyManager();
868
+ this.detectRouteConflicts(this.routes);
869
+ this.logFlattenedRoutes(this.routes, "\u7EC4\u4EF6\u8DEF\u7531");
870
+ console.log("\u{1F680} \u4F9D\u8D56\u6309\u9700\u52A0\u8F7D\uFF0C\u670D\u52A1\u5668\u542F\u52A8\u5B8C\u6210");
871
+ }
872
+ /**
873
+ * 处理请求
874
+ */
875
+ async fetch(req) {
876
+ const url = new URL(req.url);
877
+ const pathname = url.pathname;
878
+ const method = req.method;
879
+ if (method !== "GET") {
880
+ return new Response("Method Not Allowed", { status: 405 });
881
+ }
882
+ let matchedRoute = null;
883
+ for (const route of this.routes) {
884
+ if (PathMatcher.matchPath(route.fullPath, pathname)) {
885
+ matchedRoute = route;
886
+ break;
887
+ }
888
+ }
889
+ if (!matchedRoute) {
890
+ return new Response("Not Found", { status: 404 });
891
+ }
892
+ try {
893
+ const context = {
894
+ req,
895
+ params: PathMatcher.extractParams(matchedRoute.fullPath, pathname),
896
+ query: Object.fromEntries(url.searchParams),
897
+ pathname
898
+ };
899
+ return await this.executeMiddlewareChain(
900
+ matchedRoute.middlewareChain,
901
+ context,
902
+ matchedRoute.component
903
+ );
904
+ } catch (error) {
905
+ console.error("\u7EC4\u4EF6\u6E32\u67D3\u5931\u8D25:", error);
906
+ return new Response("Internal Server Error", { status: 500 });
907
+ }
908
+ }
909
+ /**
910
+ * 执行中间件链
911
+ */
912
+ async executeMiddlewareChain(middlewareChain, context, componentImport) {
913
+ const renderComponent = async () => {
914
+ const componentModule = await componentImport();
915
+ const component = componentModule.default || componentModule;
916
+ const componentType = this.dependencyManager.detectComponentType(component);
917
+ const deps = await this.dependencyManager.getFrameworkDeps(componentType);
918
+ if (componentType === "vue") {
919
+ return await this.renderVueComponent(component, context, deps);
920
+ } else if (componentType === "react") {
921
+ return await this.renderReactComponent(component, context, deps);
922
+ } else {
923
+ throw new Error(`\u4E0D\u652F\u6301\u7684\u7EC4\u4EF6\u7C7B\u578B: ${componentType}`);
924
+ }
925
+ };
926
+ let index = 0;
927
+ const next = async () => {
928
+ if (index >= middlewareChain.length) {
929
+ return await renderComponent();
930
+ }
931
+ const middleware = middlewareChain[index++];
932
+ return await middleware(context.req, next);
933
+ };
934
+ return await next();
935
+ }
936
+ /**
937
+ * 渲染 Vue 组件
938
+ */
939
+ async renderVueComponent(component, context, deps) {
940
+ try {
941
+ const [vue, renderer] = deps;
942
+ const app = vue.createSSRApp(component);
943
+ app.provide("routeInfo", {
944
+ params: context.params || {},
945
+ query: context.query || {},
946
+ pathname: context.pathname
947
+ });
948
+ const html2 = await renderer.renderToString(app);
949
+ const fullHtml = HtmlRenderer.generateVueHtml(html2, context);
950
+ return new Response(fullHtml, {
951
+ headers: { "Content-Type": "text/html; charset=utf-8" }
952
+ });
953
+ } catch (error) {
954
+ console.error("Vue \u7EC4\u4EF6\u6E32\u67D3\u5931\u8D25:", error);
955
+ return new Response("Vue Component Render Error", { status: 500 });
956
+ }
957
+ }
958
+ /**
959
+ * 渲染 React 组件
960
+ */
961
+ async renderReactComponent(component, context, deps) {
962
+ try {
963
+ const [react, renderer] = deps;
964
+ const content = react.createElement(component, {
965
+ req: context.req,
966
+ params: context.params || {},
967
+ query: context.query || {}
968
+ });
969
+ const html2 = renderer.renderToString(content);
970
+ const fullHtml = HtmlRenderer.generateReactHtml(html2, context);
971
+ return new Response(fullHtml, {
972
+ headers: { "Content-Type": "text/html; charset=utf-8" }
973
+ });
974
+ } catch (error) {
975
+ console.error("React \u7EC4\u4EF6\u6E32\u67D3\u5931\u8D25:", error);
976
+ return new Response("React Component Render Error", { status: 500 });
977
+ }
978
+ }
979
+ /**
980
+ * 获取依赖管理器(用于外部访问)
981
+ */
982
+ getDependencyManager() {
983
+ return this.dependencyManager;
984
+ }
985
+ };
986
+
987
+ // src/server/server-factory.ts
988
+ var ServerFactory = class {
989
+ servers = /* @__PURE__ */ new Map();
990
+ /**
991
+ * 创建标准REST API服务器
992
+ */
993
+ createRestServer(routes) {
994
+ const server = new Server(routes);
995
+ this.servers.set("rest", server);
996
+ return server;
997
+ }
998
+ /**
999
+ * 创建组件服务器
1000
+ */
1001
+ createComponentServer(routes) {
1002
+ const server = new ComponentServer(routes);
1003
+ this.servers.set("component", server);
1004
+ return server;
1005
+ }
1006
+ /**
1007
+ * 获取指定类型的服务器
1008
+ */
1009
+ getServer(type) {
1010
+ return this.servers.get(type);
1011
+ }
1012
+ /**
1013
+ * 获取所有服务器
1014
+ */
1015
+ getAllServers() {
1016
+ return this.servers;
1017
+ }
1018
+ /**
1019
+ * 移除指定类型的服务器
1020
+ */
1021
+ removeServer(type) {
1022
+ return this.servers.delete(type);
1023
+ }
1024
+ /**
1025
+ * 清除所有服务器
1026
+ */
1027
+ clearServers() {
1028
+ this.servers.clear();
1029
+ }
1030
+ /**
1031
+ * 获取服务器状态信息
1032
+ */
1033
+ getServerStatus() {
1034
+ const status = {};
1035
+ for (const [name, server] of this.servers) {
1036
+ if (server instanceof Server) {
1037
+ status[name] = {
1038
+ type: "REST API",
1039
+ routes: server.routes?.length || 0
1040
+ };
1041
+ } else if (server instanceof ComponentServer) {
1042
+ status[name] = {
1043
+ type: "Component",
1044
+ routes: server.routes?.length || 0
1045
+ };
1046
+ }
1047
+ }
1048
+ return status;
1049
+ }
1050
+ };
1051
+
1052
+ // src/utils/parsers.ts
1053
+ import qs from "qs";
1054
+ import cookie from "cookie";
1055
+ async function parseBody(req) {
1056
+ const contentType = req.headers.get("content-type") || "";
1057
+ if (contentType.includes("application/json")) {
1058
+ return await req.json();
1059
+ }
1060
+ if (contentType.includes("application/x-www-form-urlencoded")) {
1061
+ const text2 = await req.text();
1062
+ return Object.fromEntries(new URLSearchParams(text2));
1063
+ }
1064
+ return await req.text();
1065
+ }
1066
+ function extractQueryString(url) {
1067
+ const qIndex = url.indexOf("?");
1068
+ if (qIndex === -1) return "";
1069
+ const hashIndex = url.indexOf("#", qIndex);
1070
+ return hashIndex === -1 ? url.substring(qIndex + 1) : url.substring(qIndex + 1, hashIndex);
1071
+ }
1072
+ function parseQuery(req) {
1073
+ const queryString = extractQueryString(req.url);
1074
+ if (!queryString) return {};
1075
+ return qs.parse(queryString);
1076
+ }
1077
+ function parseQueryFast(req) {
1078
+ const queryString = extractQueryString(req.url);
1079
+ if (!queryString) return {};
1080
+ const result = /* @__PURE__ */ Object.create(null);
1081
+ const pairs = queryString.split("&");
1082
+ for (const pair of pairs) {
1083
+ const eqIndex = pair.indexOf("=");
1084
+ if (eqIndex === -1) {
1085
+ result[decodeURIComponent(pair)] = "";
1086
+ } else {
1087
+ const key = decodeURIComponent(pair.substring(0, eqIndex));
1088
+ const value = decodeURIComponent(pair.substring(eqIndex + 1));
1089
+ result[key] = value;
1090
+ }
1091
+ }
1092
+ return result;
1093
+ }
1094
+ function parseHeaders(req) {
1095
+ const headers = /* @__PURE__ */ Object.create(null);
1096
+ req.headers.forEach((value, key) => {
1097
+ headers[key] = value;
1098
+ });
1099
+ return headers;
1100
+ }
1101
+ function getHeader(req, name) {
1102
+ return req.headers.get(name);
1103
+ }
1104
+ function parseCookies(req) {
1105
+ const cookieHeader = req.headers.get("cookie");
1106
+ if (!cookieHeader) return {};
1107
+ try {
1108
+ const parsed = cookie.parse(cookieHeader);
1109
+ const result = {};
1110
+ for (const [key, value] of Object.entries(parsed)) {
1111
+ if (value !== void 0 && value !== null) {
1112
+ result[key] = value;
1113
+ }
1114
+ }
1115
+ return result;
1116
+ } catch {
1117
+ return {};
1118
+ }
1119
+ }
1120
+ function parseCookiesFast(req) {
1121
+ const cookieHeader = req.headers.get("cookie");
1122
+ if (!cookieHeader) return {};
1123
+ const result = /* @__PURE__ */ Object.create(null);
1124
+ const pairs = cookieHeader.split(";");
1125
+ for (const pair of pairs) {
1126
+ const trimmed = pair.trim();
1127
+ const eqIndex = trimmed.indexOf("=");
1128
+ if (eqIndex > 0) {
1129
+ const key = trimmed.substring(0, eqIndex).trim();
1130
+ const value = trimmed.substring(eqIndex + 1).trim();
1131
+ result[key] = value.startsWith('"') && value.endsWith('"') ? value.slice(1, -1) : value;
1132
+ }
1133
+ }
1134
+ return result;
1135
+ }
1136
+ function getCookie(req, name) {
1137
+ const cookieHeader = req.headers.get("cookie");
1138
+ if (!cookieHeader) return null;
1139
+ const prefix = `${name}=`;
1140
+ const pairs = cookieHeader.split(";");
1141
+ for (const pair of pairs) {
1142
+ const trimmed = pair.trim();
1143
+ if (trimmed.startsWith(prefix)) {
1144
+ const value = trimmed.substring(prefix.length).trim();
1145
+ return value.startsWith('"') && value.endsWith('"') ? value.slice(1, -1) : value;
1146
+ }
1147
+ }
1148
+ return null;
1149
+ }
1150
+
1151
+ // src/utils/go-await.ts
1152
+ function goAwait(promise) {
1153
+ return promise.then((data) => [null, data]).catch((err) => [err instanceof Error ? err : new Error(String(err)), void 0]);
1154
+ }
1155
+
1156
+ // src/utils/validators/schema-validators-ultra.ts
1157
+ import { TypeCompiler } from "@sinclair/typebox/compiler";
1158
+ var SCHEMA_FLAGS = {
1159
+ BODY: 1 << 0,
1160
+ // 1
1161
+ QUERY: 1 << 1,
1162
+ // 2
1163
+ PARAMS: 1 << 2,
1164
+ // 4
1165
+ HEADERS: 1 << 3,
1166
+ // 8
1167
+ COOKIES: 1 << 4
1168
+ // 16
1169
+ };
1170
+ var ultraSchemaCache = /* @__PURE__ */ new Map();
1171
+ var schemaCacheHits = /* @__PURE__ */ new Map();
1172
+ var errorPool = [];
1173
+ var ERROR_POOL_SIZE = 200;
1174
+ var errorMessagePool = /* @__PURE__ */ new Map();
1175
+ var commonMessages = [
1176
+ "\u8BF7\u6C42\u4F53\u9A8C\u8BC1\u5931\u8D25",
1177
+ "Query\u53C2\u6570\u9A8C\u8BC1\u5931\u8D25",
1178
+ "\u8DEF\u5F84\u53C2\u6570\u9A8C\u8BC1\u5931\u8D25",
1179
+ "\u8BF7\u6C42\u5934\u9A8C\u8BC1\u5931\u8D25",
1180
+ "Cookie\u9A8C\u8BC1\u5931\u8D25",
1181
+ "\u7C7B\u578B\u9A8C\u8BC1\u5931\u8D25",
1182
+ "Schema\u7F16\u8BD1\u5931\u8D25",
1183
+ "\u672A\u77E5\u9519\u8BEF"
1184
+ ];
1185
+ commonMessages.forEach((msg) => errorMessagePool.set(msg, msg));
1186
+ for (let i = 0; i < ERROR_POOL_SIZE; i++) {
1187
+ errorPool.push(new Error());
1188
+ }
1189
+ var errorPoolIndex = 0;
1190
+ function getErrorFromPool(message) {
1191
+ const error = errorPool[errorPoolIndex];
1192
+ error.message = message;
1193
+ errorPoolIndex = (errorPoolIndex + 1) % ERROR_POOL_SIZE;
1194
+ return error;
1195
+ }
1196
+ function getPooledString(key) {
1197
+ let pooled = errorMessagePool.get(key);
1198
+ if (!pooled) {
1199
+ pooled = key;
1200
+ errorMessagePool.set(key, key);
1201
+ }
1202
+ return pooled;
1203
+ }
1204
+ function getUltraSchemaCompiler(schema) {
1205
+ let compiler = ultraSchemaCache.get(schema);
1206
+ if (compiler) {
1207
+ schemaCacheHits.set(schema, (schemaCacheHits.get(schema) || 0) + 1);
1208
+ return compiler;
1209
+ }
1210
+ try {
1211
+ compiler = TypeCompiler.Compile(schema);
1212
+ ultraSchemaCache.set(schema, compiler);
1213
+ return compiler;
1214
+ } catch (error) {
1215
+ return null;
1216
+ }
1217
+ }
1218
+ function getSchemaFlags(config) {
1219
+ let flags = 0;
1220
+ if (config.body) flags |= SCHEMA_FLAGS.BODY;
1221
+ if (config.query) flags |= SCHEMA_FLAGS.QUERY;
1222
+ if (config.params) flags |= SCHEMA_FLAGS.PARAMS;
1223
+ if (config.headers) flags |= SCHEMA_FLAGS.HEADERS;
1224
+ if (config.cookies) flags |= SCHEMA_FLAGS.COOKIES;
1225
+ return flags;
1226
+ }
1227
+ function validateSchemaUltra(schema, data, context) {
1228
+ if (!schema) return data;
1229
+ try {
1230
+ let compiler = ultraSchemaCache.get(schema);
1231
+ if (!compiler) {
1232
+ try {
1233
+ compiler = TypeCompiler.Compile(schema);
1234
+ ultraSchemaCache.set(schema, compiler);
1235
+ } catch (error) {
1236
+ const message = getPooledString(`${context}\u9A8C\u8BC1\u5931\u8D25: Schema\u7F16\u8BD1\u5931\u8D25`);
1237
+ throw getErrorFromPool(message);
1238
+ }
1239
+ }
1240
+ const result = compiler.Check(data);
1241
+ if (!result) {
1242
+ const message = getPooledString(`${context}\u9A8C\u8BC1\u5931\u8D25`);
1243
+ throw getErrorFromPool(message);
1244
+ }
1245
+ return data;
1246
+ } catch (error) {
1247
+ if (error instanceof Error && error.message.includes("\u9A8C\u8BC1\u5931\u8D25")) {
1248
+ throw error;
1249
+ }
1250
+ const message = getPooledString(
1251
+ `${context}\u9A8C\u8BC1\u5931\u8D25: ${error instanceof Error ? error.message : "\u672A\u77E5\u9519\u8BEF"}`
1252
+ );
1253
+ throw getErrorFromPool(message);
1254
+ }
1255
+ }
1256
+ function validateAllSchemasUltra(config, data) {
1257
+ const flags = getSchemaFlags(config);
1258
+ if (flags & SCHEMA_FLAGS.BODY) {
1259
+ validateSchemaUltra(config.body, data.body, "\u8BF7\u6C42\u4F53");
1260
+ }
1261
+ if (flags & SCHEMA_FLAGS.QUERY) {
1262
+ validateSchemaUltra(config.query, data.query, "Query\u53C2\u6570");
1263
+ }
1264
+ if (flags & SCHEMA_FLAGS.PARAMS) {
1265
+ validateSchemaUltra(config.params, data.params, "\u8DEF\u5F84\u53C2\u6570");
1266
+ }
1267
+ if (flags & SCHEMA_FLAGS.HEADERS) {
1268
+ validateSchemaUltra(config.headers, data.headers, "\u8BF7\u6C42\u5934");
1269
+ }
1270
+ if (flags & SCHEMA_FLAGS.COOKIES) {
1271
+ validateSchemaUltra(config.cookies, data.cookies, "Cookie");
1272
+ }
1273
+ return data;
1274
+ }
1275
+ function precompileSchemasUltra(config) {
1276
+ const flags = getSchemaFlags(config);
1277
+ if (flags & SCHEMA_FLAGS.BODY && config.body) {
1278
+ getUltraSchemaCompiler(config.body);
1279
+ }
1280
+ if (flags & SCHEMA_FLAGS.QUERY && config.query) {
1281
+ getUltraSchemaCompiler(config.query);
1282
+ }
1283
+ if (flags & SCHEMA_FLAGS.PARAMS && config.params) {
1284
+ getUltraSchemaCompiler(config.params);
1285
+ }
1286
+ if (flags & SCHEMA_FLAGS.HEADERS && config.headers) {
1287
+ getUltraSchemaCompiler(config.headers);
1288
+ }
1289
+ if (flags & SCHEMA_FLAGS.COOKIES && config.cookies) {
1290
+ getUltraSchemaCompiler(config.cookies);
1291
+ }
1292
+ }
1293
+
1294
+ // src/utils/create-handler.ts
1295
+ function autoResponse(result) {
1296
+ if (result instanceof Response) {
1297
+ return result;
1298
+ }
1299
+ if (result === null || result === void 0) {
1300
+ return new Response(null, { status: 204 });
1301
+ }
1302
+ if (typeof result === "string") {
1303
+ return new Response(result, {
1304
+ headers: { "Content-Type": "text/plain; charset=utf-8" }
1305
+ });
1306
+ }
1307
+ if (typeof result === "number" || typeof result === "boolean") {
1308
+ return new Response(String(result), {
1309
+ headers: { "Content-Type": "text/plain; charset=utf-8" }
1310
+ });
1311
+ }
1312
+ if (typeof result === "object") {
1313
+ const obj = result;
1314
+ if ("data" in obj && ("status" in obj || "headers" in obj)) {
1315
+ const { data, status = 200, headers = {} } = obj;
1316
+ if (data === null || data === void 0) {
1317
+ return new Response(null, {
1318
+ status: status === 200 ? 204 : status,
1319
+ headers
1320
+ });
1321
+ }
1322
+ if (typeof data === "string" || typeof data === "number" || typeof data === "boolean") {
1323
+ return new Response(String(data), {
1324
+ status,
1325
+ headers: {
1326
+ "Content-Type": "text/plain; charset=utf-8",
1327
+ ...headers
1328
+ }
1329
+ });
1330
+ }
1331
+ return json(data, status, headers);
1332
+ }
1333
+ return json(result);
1334
+ }
1335
+ return new Response(null, { status: 204 });
1336
+ }
1337
+ function handleValidationError(error) {
1338
+ return json(
1339
+ {
1340
+ success: false,
1341
+ error: "Validation Error",
1342
+ message: error.message,
1343
+ timestamp: (/* @__PURE__ */ new Date()).toISOString()
1344
+ },
1345
+ 400
1346
+ );
1347
+ }
1348
+ function handleInternalError(error) {
1349
+ return json(
1350
+ {
1351
+ success: false,
1352
+ error: "Internal Error",
1353
+ message: error instanceof Error ? error.message : "\u672A\u77E5\u9519\u8BEF"
1354
+ },
1355
+ 500
1356
+ );
1357
+ }
1358
+ function isHandler(value) {
1359
+ return typeof value === "function";
1360
+ }
1361
+ function createHandler(schemaOrHandler, maybeHandler) {
1362
+ const hasSchema = !isHandler(schemaOrHandler);
1363
+ const schema = hasSchema ? schemaOrHandler : {};
1364
+ const handler = hasSchema ? maybeHandler : schemaOrHandler;
1365
+ if (schema.body || schema.query || schema.params || schema.headers || schema.cookies) {
1366
+ precompileSchemasUltra(schema);
1367
+ }
1368
+ return async (req) => {
1369
+ try {
1370
+ const query = parseQuery(req);
1371
+ const headers = parseHeaders(req);
1372
+ const cookies = parseCookies(req);
1373
+ const params = req.params || {};
1374
+ let body = void 0;
1375
+ if (req.method !== "GET" && req.method !== "HEAD") {
1376
+ const [, parsedBody] = await goAwait(parseBody(req));
1377
+ body = parsedBody;
1378
+ }
1379
+ const data = { body, query, params, headers, cookies };
1380
+ if (schema.body || schema.query || schema.params || schema.headers || schema.cookies) {
1381
+ validateAllSchemasUltra(schema, data);
1382
+ }
1383
+ const result = await handler({
1384
+ req,
1385
+ body,
1386
+ query,
1387
+ params,
1388
+ headers,
1389
+ cookies
1390
+ });
1391
+ return autoResponse(result);
1392
+ } catch (error) {
1393
+ if (error instanceof Error && error.message.includes("\u9A8C\u8BC1\u5931\u8D25")) {
1394
+ return handleValidationError(error);
1395
+ }
1396
+ return handleInternalError(error);
1397
+ }
1398
+ };
1399
+ }
1400
+ function createHandlerWithExtra(schemaOrHandler, maybeHandler) {
1401
+ const hasSchema = !isHandler(schemaOrHandler);
1402
+ const schema = hasSchema ? schemaOrHandler : {};
1403
+ const handler = hasSchema ? maybeHandler : schemaOrHandler;
1404
+ if (schema.body || schema.query || schema.params || schema.headers || schema.cookies) {
1405
+ precompileSchemasUltra(schema);
1406
+ }
1407
+ return async (req) => {
1408
+ try {
1409
+ const query = parseQuery(req);
1410
+ const headers = parseHeaders(req);
1411
+ const cookies = parseCookies(req);
1412
+ const params = req.params || {};
1413
+ let body = void 0;
1414
+ if (req.method !== "GET" && req.method !== "HEAD") {
1415
+ const [, parsedBody] = await goAwait(parseBody(req));
1416
+ body = parsedBody;
1417
+ }
1418
+ const data = { body, query, params, headers, cookies };
1419
+ if (schema.body || schema.query || schema.params || schema.headers || schema.cookies) {
1420
+ validateAllSchemasUltra(schema, data);
1421
+ }
1422
+ const extras = req.__locals ?? {};
1423
+ const result = await handler({
1424
+ req,
1425
+ body,
1426
+ query,
1427
+ params,
1428
+ headers,
1429
+ cookies,
1430
+ ...extras
1431
+ });
1432
+ return autoResponse(result);
1433
+ } catch (error) {
1434
+ if (error instanceof Error && error.message.includes("\u9A8C\u8BC1\u5931\u8D25")) {
1435
+ return handleValidationError(error);
1436
+ }
1437
+ return handleInternalError(error);
1438
+ }
1439
+ };
1440
+ }
1441
+ function simpleHandler(handler) {
1442
+ return async (req) => {
1443
+ try {
1444
+ const result = await handler({ req });
1445
+ return autoResponse(result);
1446
+ } catch (error) {
1447
+ return handleInternalError(error);
1448
+ }
1449
+ };
1450
+ }
1451
+
1452
+ // src/utils/base64url.ts
1453
+ function base64urlEncode(str) {
1454
+ return btoa(str).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
1455
+ }
1456
+ function base64urlDecode(str) {
1457
+ const pad = str.length % 4 === 0 ? "" : "=".repeat(4 - str.length % 4);
1458
+ const base64 = str.replace(/-/g, "+").replace(/_/g, "/") + pad;
1459
+ return atob(base64);
1460
+ }
1461
+
1462
+ // src/utils/handle.ts
1463
+ function getCookie2(req, key) {
1464
+ const cookies = parseCookies(req);
1465
+ return cookies[key] || null;
1466
+ }
1467
+ function setLocals(req, extras) {
1468
+ const target = req;
1469
+ target.__locals = { ...target.__locals ?? {}, ...extras };
1470
+ }
1471
+ function getLocals(req) {
1472
+ const target = req;
1473
+ return target.__locals ?? {};
1474
+ }
1475
+
1476
+ // src/utils/request-validator.ts
1477
+ async function parseRequest(request, params) {
1478
+ const requestData = {
1479
+ body: void 0,
1480
+ query: parseQuery(request),
1481
+ params: params || {},
1482
+ headers: parseHeaders(request),
1483
+ cookies: parseCookies(request)
1484
+ };
1485
+ if (request.method !== "GET" && request.method !== "HEAD") {
1486
+ requestData.body = await parseBody(request);
1487
+ }
1488
+ return requestData;
1489
+ }
1490
+ function validateRequest(config, requestData) {
1491
+ try {
1492
+ const validatedData = validateAllSchemasUltra(config, requestData);
1493
+ return {
1494
+ success: true,
1495
+ data: validatedData
1496
+ };
1497
+ } catch (error) {
1498
+ return {
1499
+ success: false,
1500
+ errors: [
1501
+ {
1502
+ field: "unknown",
1503
+ message: error instanceof Error ? error.message : "\u9A8C\u8BC1\u5931\u8D25"
1504
+ }
1505
+ ]
1506
+ };
1507
+ }
1508
+ }
1509
+ async function parseAndValidateRequest(request, config, params) {
1510
+ try {
1511
+ const requestData = await parseRequest(request, params);
1512
+ return validateRequest(config, requestData);
1513
+ } catch (error) {
1514
+ return {
1515
+ success: false,
1516
+ errors: [
1517
+ {
1518
+ field: "unknown",
1519
+ message: error instanceof Error ? error.message : "\u8BF7\u6C42\u89E3\u6790\u5931\u8D25"
1520
+ }
1521
+ ]
1522
+ };
1523
+ }
1524
+ }
1525
+ function createRequestValidator(config) {
1526
+ return async (request, params) => {
1527
+ return parseAndValidateRequest(request, config, params);
1528
+ };
1529
+ }
1530
+
1531
+ // src/utils/validators/validators.ts
1532
+ import { Type } from "@sinclair/typebox";
1533
+ import { TypeCompiler as TypeCompiler2 } from "@sinclair/typebox/compiler";
1534
+ var compilerCache = /* @__PURE__ */ new WeakMap();
1535
+ function getCompiledValidator(schema) {
1536
+ let compiler = compilerCache.get(schema);
1537
+ if (!compiler) {
1538
+ compiler = TypeCompiler2.Compile(schema);
1539
+ compilerCache.set(schema, compiler);
1540
+ }
1541
+ return compiler;
1542
+ }
1543
+ function precompileSchemas(schemas) {
1544
+ for (const schema of schemas) {
1545
+ getCompiledValidator(schema);
1546
+ }
1547
+ }
1548
+ function validateSchema(schema, data) {
1549
+ try {
1550
+ const compiler = getCompiledValidator(schema);
1551
+ if (compiler.Check(data)) {
1552
+ return {
1553
+ success: true,
1554
+ data
1555
+ };
1556
+ }
1557
+ const errors = [];
1558
+ const errorIterator = compiler.Errors(data);
1559
+ for (const error of errorIterator) {
1560
+ errors.push({
1561
+ path: error.path,
1562
+ message: error.message,
1563
+ code: "VALIDATION_FAILED",
1564
+ value: error.value,
1565
+ schema: error.schema
1566
+ });
1567
+ }
1568
+ return {
1569
+ success: false,
1570
+ errors
1571
+ };
1572
+ } catch (error) {
1573
+ return {
1574
+ success: false,
1575
+ errors: [
1576
+ {
1577
+ path: "",
1578
+ message: error instanceof Error ? error.message : "Unknown validation error",
1579
+ code: "VALIDATION_EXCEPTION",
1580
+ value: data
1581
+ }
1582
+ ]
1583
+ };
1584
+ }
1585
+ }
1586
+ function createValidator(schema) {
1587
+ const compiler = getCompiledValidator(schema);
1588
+ return (data) => {
1589
+ if (compiler.Check(data)) {
1590
+ return { success: true, data };
1591
+ }
1592
+ const errors = [];
1593
+ for (const error of compiler.Errors(data)) {
1594
+ errors.push({
1595
+ path: error.path,
1596
+ message: error.message,
1597
+ code: "VALIDATION_FAILED",
1598
+ value: error.value,
1599
+ schema: error.schema
1600
+ });
1601
+ }
1602
+ return { success: false, errors };
1603
+ };
1604
+ }
1605
+ function validateFast(schema, data) {
1606
+ const compiler = getCompiledValidator(schema);
1607
+ return compiler.Check(data);
1608
+ }
1609
+ function getValidatorCacheStats() {
1610
+ return {
1611
+ cacheType: "WeakMap",
1612
+ note: "WeakMap \u4E0D\u652F\u6301 size \u5C5E\u6027\uFF0C\u7F13\u5B58\u4F1A\u968F Schema \u5BF9\u8C61\u81EA\u52A8\u6E05\u7406"
1613
+ };
1614
+ }
1615
+
1616
+ // src/middleware/authMiddleware.ts
1617
+ var requireAuth = async (req, next) => {
1618
+ const token = getCookie2(req, "auth");
1619
+ if (!token || token !== "valid-token") {
1620
+ throw new VafastError("Unauthorized", {
1621
+ status: 401,
1622
+ type: "unauthorized",
1623
+ expose: true
1624
+ });
1625
+ }
1626
+ return next();
1627
+ };
1628
+
1629
+ // src/middleware/rateLimit.ts
1630
+ var store = /* @__PURE__ */ new Map();
1631
+ function rateLimit(options = {}) {
1632
+ const windowMs = options.windowMs ?? 6e4;
1633
+ const max = options.max ?? 30;
1634
+ const keyFn = options.keyFn ?? getIP;
1635
+ return async (req, next) => {
1636
+ const key = keyFn(req);
1637
+ const now = Date.now();
1638
+ const entry = store.get(key);
1639
+ if (entry && entry.expires > now) {
1640
+ if (entry.count >= max) {
1641
+ throw new VafastError("Too many requests", {
1642
+ status: 429,
1643
+ type: "rate_limit",
1644
+ expose: true
1645
+ });
1646
+ }
1647
+ entry.count += 1;
1648
+ } else {
1649
+ store.set(key, { count: 1, expires: now + windowMs });
1650
+ }
1651
+ return next();
1652
+ };
1653
+ }
1654
+ function getIP(req) {
1655
+ return req.headers.get("cf-connecting-ip") || // Cloudflare
1656
+ req.headers.get("x-forwarded-for")?.split(",")[0]?.trim() || // Vercel
1657
+ "unknown";
1658
+ }
1659
+
1660
+ // src/middleware/cors.ts
1661
+ function createCORS(options = {}) {
1662
+ const {
1663
+ origin = [],
1664
+ methods = ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
1665
+ headers = [],
1666
+ credentials = false,
1667
+ maxAge
1668
+ } = options;
1669
+ return async (req, next) => {
1670
+ const reqOrigin = req.headers.get("Origin") || "";
1671
+ const isAllowedOrigin = origin === "*" || origin.includes(reqOrigin);
1672
+ if (req.method === "OPTIONS") {
1673
+ const resHeaders = new Headers();
1674
+ if (isAllowedOrigin) {
1675
+ resHeaders.set(
1676
+ "Access-Control-Allow-Origin",
1677
+ origin === "*" ? "*" : reqOrigin
1678
+ );
1679
+ resHeaders.set("Access-Control-Allow-Methods", methods.join(","));
1680
+ resHeaders.set("Access-Control-Allow-Headers", headers.join(","));
1681
+ if (credentials)
1682
+ resHeaders.set("Access-Control-Allow-Credentials", "true");
1683
+ if (maxAge) resHeaders.set("Access-Control-Max-Age", maxAge.toString());
1684
+ }
1685
+ return new Response(null, { status: 204, headers: resHeaders });
1686
+ }
1687
+ const res = await next();
1688
+ if (isAllowedOrigin) {
1689
+ res.headers.set(
1690
+ "Access-Control-Allow-Origin",
1691
+ origin === "*" ? "*" : reqOrigin
1692
+ );
1693
+ if (credentials)
1694
+ res.headers.set("Access-Control-Allow-Credentials", "true");
1695
+ }
1696
+ return res;
1697
+ };
1698
+ }
1699
+
1700
+ // src/auth/token.ts
1701
+ var TokenError = class extends Error {
1702
+ constructor(message, code) {
1703
+ super(message);
1704
+ this.code = code;
1705
+ this.name = "TokenError";
1706
+ }
1707
+ };
1708
+ var encoder = new TextEncoder();
1709
+ async function sign(data, secret) {
1710
+ const key = await crypto.subtle.importKey(
1711
+ "raw",
1712
+ encoder.encode(secret),
1713
+ { name: "HMAC", hash: "SHA-256" },
1714
+ false,
1715
+ ["sign"]
1716
+ );
1717
+ const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(data));
1718
+ return btoa(
1719
+ String.fromCharCode.apply(null, Array.from(new Uint8Array(signature)))
1720
+ );
1721
+ }
1722
+ async function generateToken(payload, secret, options = {}) {
1723
+ const { expiresIn = 3600, issuer, audience, subject } = options;
1724
+ const now = Math.floor(Date.now() / 1e3);
1725
+ const tokenPayload = {
1726
+ ...payload,
1727
+ iat: now,
1728
+ exp: now + expiresIn
1729
+ };
1730
+ if (issuer) tokenPayload.iss = issuer;
1731
+ if (audience) tokenPayload.aud = audience;
1732
+ if (subject) tokenPayload.sub = subject;
1733
+ const data = base64urlEncode(JSON.stringify(tokenPayload));
1734
+ const sig = await sign(data, secret);
1735
+ const token = `${data}.${base64urlEncode(sig)}`;
1736
+ return {
1737
+ payload: tokenPayload,
1738
+ token,
1739
+ expiresAt: tokenPayload.exp * 1e3
1740
+ // 转换为毫秒
1741
+ };
1742
+ }
1743
+ async function verifyToken(token, secret) {
1744
+ try {
1745
+ const [data, sig] = token.split(".");
1746
+ if (!data || !sig) {
1747
+ throw new TokenError("\u4EE4\u724C\u683C\u5F0F\u65E0\u6548", "MALFORMED_TOKEN");
1748
+ }
1749
+ const expectedSig = await sign(data, secret);
1750
+ const expected = base64urlEncode(expectedSig);
1751
+ if (sig !== expected) {
1752
+ throw new TokenError("\u4EE4\u724C\u7B7E\u540D\u65E0\u6548", "INVALID_SIGNATURE");
1753
+ }
1754
+ const payload = JSON.parse(base64urlDecode(data));
1755
+ if (payload.exp && Date.now() / 1e3 > payload.exp) {
1756
+ throw new TokenError("\u4EE4\u724C\u5DF2\u8FC7\u671F", "EXPIRED_TOKEN");
1757
+ }
1758
+ return payload;
1759
+ } catch (error) {
1760
+ if (error instanceof TokenError) {
1761
+ throw error;
1762
+ }
1763
+ throw new TokenError("\u4EE4\u724C\u9A8C\u8BC1\u5931\u8D25", "INVALID_TOKEN");
1764
+ }
1765
+ }
1766
+ function parseToken(token) {
1767
+ try {
1768
+ const [data] = token.split(".");
1769
+ if (!data) return null;
1770
+ return JSON.parse(base64urlDecode(data));
1771
+ } catch {
1772
+ return null;
1773
+ }
1774
+ }
1775
+ function isTokenExpired(token) {
1776
+ const payload = parseToken(token);
1777
+ if (!payload || !payload.exp) return true;
1778
+ return Date.now() / 1e3 > payload.exp;
1779
+ }
1780
+ function getTokenTimeRemaining(token) {
1781
+ const payload = parseToken(token);
1782
+ if (!payload || !payload.exp) return 0;
1783
+ const remaining = payload.exp - Date.now() / 1e3;
1784
+ return Math.max(0, Math.floor(remaining));
1785
+ }
1786
+ async function refreshToken(token, secret, options = {}) {
1787
+ try {
1788
+ const payload = await verifyToken(token, secret);
1789
+ if (!payload) return null;
1790
+ const { exp, iat, ...cleanPayload } = payload;
1791
+ await new Promise((resolve) => setTimeout(resolve, 10));
1792
+ return await generateToken(cleanPayload, secret, options);
1793
+ } catch {
1794
+ return null;
1795
+ }
1796
+ }
1797
+ async function createTokenPair(payload, secret, options = {}) {
1798
+ const accessToken = await generateToken(payload, secret, {
1799
+ ...options,
1800
+ expiresIn: options.expiresIn || 3600
1801
+ // 1小时
1802
+ });
1803
+ const refreshToken2 = await generateToken(payload, secret, {
1804
+ ...options,
1805
+ expiresIn: 7 * 24 * 3600
1806
+ // 7天
1807
+ });
1808
+ return { accessToken, refreshToken: refreshToken2 };
1809
+ }
1810
+
1811
+ // src/middleware/auth.ts
1812
+ function createAuth(options) {
1813
+ const {
1814
+ secret,
1815
+ cookieName = "auth",
1816
+ headerName = "authorization",
1817
+ required = true,
1818
+ roles = [],
1819
+ permissions = []
1820
+ } = options;
1821
+ return async (req, next) => {
1822
+ const token = getCookie2(req, cookieName) || req.headers.get(headerName)?.replace("Bearer ", "") || "";
1823
+ if (!token && required) {
1824
+ throw new VafastError("\u7F3A\u5C11\u8BA4\u8BC1\u4EE4\u724C", {
1825
+ status: 401,
1826
+ type: "unauthorized",
1827
+ expose: true
1828
+ });
1829
+ }
1830
+ if (!token && !required) {
1831
+ return next();
1832
+ }
1833
+ try {
1834
+ const user = await verifyToken(token, secret);
1835
+ if (!user) {
1836
+ throw new VafastError("\u4EE4\u724C\u9A8C\u8BC1\u5931\u8D25", {
1837
+ status: 401,
1838
+ type: "unauthorized",
1839
+ expose: true
1840
+ });
1841
+ }
1842
+ if (roles.length > 0 && user.role && !roles.includes(user.role)) {
1843
+ throw new VafastError("\u6743\u9650\u4E0D\u8DB3", {
1844
+ status: 403,
1845
+ type: "forbidden",
1846
+ expose: true
1847
+ });
1848
+ }
1849
+ if (permissions.length > 0 && user.permissions) {
1850
+ const userPermissions = Array.isArray(user.permissions) ? user.permissions : [user.permissions];
1851
+ const hasPermission = permissions.some(
1852
+ (permission) => userPermissions.includes(permission)
1853
+ );
1854
+ if (!hasPermission) {
1855
+ throw new VafastError("\u6743\u9650\u4E0D\u8DB3", {
1856
+ status: 403,
1857
+ type: "forbidden",
1858
+ expose: true
1859
+ });
1860
+ }
1861
+ }
1862
+ req.user = user;
1863
+ req.token = token;
1864
+ return next();
1865
+ } catch (error) {
1866
+ if (error instanceof TokenError) {
1867
+ let status = 401;
1868
+ let message = "\u8BA4\u8BC1\u5931\u8D25";
1869
+ switch (error.code) {
1870
+ case "EXPIRED_TOKEN":
1871
+ status = 401;
1872
+ message = "\u4EE4\u724C\u5DF2\u8FC7\u671F";
1873
+ break;
1874
+ case "INVALID_SIGNATURE":
1875
+ status = 401;
1876
+ message = "\u4EE4\u724C\u7B7E\u540D\u65E0\u6548";
1877
+ break;
1878
+ case "MALFORMED_TOKEN":
1879
+ status = 400;
1880
+ message = "\u4EE4\u724C\u683C\u5F0F\u9519\u8BEF";
1881
+ break;
1882
+ default:
1883
+ status = 401;
1884
+ message = "\u4EE4\u724C\u9A8C\u8BC1\u5931\u8D25";
1885
+ }
1886
+ throw new VafastError(message, {
1887
+ status,
1888
+ type: "unauthorized",
1889
+ expose: true
1890
+ });
1891
+ }
1892
+ if (error instanceof VafastError) {
1893
+ throw error;
1894
+ }
1895
+ throw new VafastError("\u8BA4\u8BC1\u8FC7\u7A0B\u4E2D\u53D1\u751F\u9519\u8BEF", {
1896
+ status: 500,
1897
+ type: "internal_error",
1898
+ expose: false
1899
+ });
1900
+ }
1901
+ };
1902
+ }
1903
+ function createOptionalAuth(options) {
1904
+ return createAuth({ ...options, required: false });
1905
+ }
1906
+ function createRoleAuth(roles, options) {
1907
+ return createAuth({ ...options, roles });
1908
+ }
1909
+ function createPermissionAuth(permissions, options) {
1910
+ return createAuth({ ...options, permissions });
1911
+ }
1912
+
1913
+ // src/defineRoute.ts
1914
+ function defineRoutes(routes) {
1915
+ return routes;
1916
+ }
1917
+
1918
+ // src/types/route.ts
1919
+ function createTypedRoute(config) {
1920
+ return config;
1921
+ }
1922
+ function isTypedRoute(route) {
1923
+ return route && typeof route === "object" && "method" in route && "path" in route && "handler" in route;
1924
+ }
1925
+
1926
+ // src/node-server/serve.ts
1927
+ import {
1928
+ createServer
1929
+ } from "http";
1930
+
1931
+ // src/node-server/request.ts
1932
+ import { Readable } from "stream";
1933
+ var requestCache = /* @__PURE__ */ Symbol("requestCache");
1934
+ var incomingKey = /* @__PURE__ */ Symbol("incoming");
1935
+ var urlKey = /* @__PURE__ */ Symbol("url");
1936
+ var headersKey = /* @__PURE__ */ Symbol("headers");
1937
+ function parseHeaders2(rawHeaders) {
1938
+ const headers = new Headers();
1939
+ for (let i = 0; i < rawHeaders.length; i += 2) {
1940
+ const key = rawHeaders[i];
1941
+ const value = rawHeaders[i + 1];
1942
+ if (key.charCodeAt(0) !== 58) {
1943
+ headers.append(key, value);
1944
+ }
1945
+ }
1946
+ return headers;
1947
+ }
1948
+ function toWebStream(nodeStream) {
1949
+ return nodeStream;
1950
+ }
1951
+ function createRealRequest(proxy) {
1952
+ const incoming = proxy[incomingKey];
1953
+ const method = incoming.method || "GET";
1954
+ const init = {
1955
+ method,
1956
+ headers: proxy[headersKey] || parseHeaders2(incoming.rawHeaders)
1957
+ };
1958
+ if (method !== "GET" && method !== "HEAD") {
1959
+ const nodeWebStream = Readable.toWeb(
1960
+ incoming
1961
+ );
1962
+ init.body = toWebStream(nodeWebStream);
1963
+ init.duplex = "half";
1964
+ }
1965
+ return new Request(proxy[urlKey], init);
1966
+ }
1967
+ var requestPrototype = {};
1968
+ Object.defineProperty(requestPrototype, "method", {
1969
+ get() {
1970
+ const self = this;
1971
+ return self[incomingKey].method || "GET";
1972
+ },
1973
+ enumerable: true
1974
+ });
1975
+ Object.defineProperty(requestPrototype, "url", {
1976
+ get() {
1977
+ const self = this;
1978
+ return self[urlKey];
1979
+ },
1980
+ enumerable: true
1981
+ });
1982
+ Object.defineProperty(requestPrototype, "headers", {
1983
+ get() {
1984
+ const self = this;
1985
+ if (!self[headersKey]) {
1986
+ self[headersKey] = parseHeaders2(self[incomingKey].rawHeaders);
1987
+ }
1988
+ return self[headersKey];
1989
+ },
1990
+ enumerable: true
1991
+ });
1992
+ Object.defineProperty(requestPrototype, "_getRequest", {
1993
+ value: function() {
1994
+ const self = this;
1995
+ if (!self[requestCache]) {
1996
+ self[requestCache] = createRealRequest(self);
1997
+ }
1998
+ return self[requestCache];
1999
+ },
2000
+ enumerable: false
2001
+ });
2002
+ var proxyGetters = [
2003
+ "body",
2004
+ "bodyUsed",
2005
+ "signal",
2006
+ "cache",
2007
+ "credentials",
2008
+ "destination",
2009
+ "integrity",
2010
+ "mode",
2011
+ "redirect",
2012
+ "referrer",
2013
+ "referrerPolicy",
2014
+ "keepalive"
2015
+ ];
2016
+ proxyGetters.forEach((key) => {
2017
+ Object.defineProperty(requestPrototype, key, {
2018
+ get() {
2019
+ const self = this;
2020
+ return self._getRequest()[key];
2021
+ },
2022
+ enumerable: true
2023
+ });
2024
+ });
2025
+ var proxyMethods = [
2026
+ "arrayBuffer",
2027
+ "blob",
2028
+ "clone",
2029
+ "formData",
2030
+ "json",
2031
+ "text"
2032
+ ];
2033
+ proxyMethods.forEach((key) => {
2034
+ Object.defineProperty(requestPrototype, key, {
2035
+ value: function() {
2036
+ const self = this;
2037
+ const req = self._getRequest();
2038
+ return req[key].call(req);
2039
+ },
2040
+ enumerable: true
2041
+ });
2042
+ });
2043
+ Object.setPrototypeOf(requestPrototype, Request.prototype);
2044
+ function createProxyRequest(incoming, defaultHost) {
2045
+ const req = Object.create(requestPrototype);
2046
+ req[incomingKey] = incoming;
2047
+ const host = incoming.headers.host || defaultHost;
2048
+ const protocol = incoming.socket.encrypted ? "https" : "http";
2049
+ req[urlKey] = `${protocol}://${host}${incoming.url || "/"}`;
2050
+ return req;
2051
+ }
2052
+
2053
+ // src/node-server/response.ts
2054
+ function buildOutgoingHeaders(headers) {
2055
+ const result = {};
2056
+ const cookies = [];
2057
+ headers.forEach((value, key) => {
2058
+ if (key === "set-cookie") {
2059
+ cookies.push(value);
2060
+ } else {
2061
+ result[key] = value;
2062
+ }
2063
+ });
2064
+ if (cookies.length > 0) {
2065
+ result["set-cookie"] = cookies;
2066
+ }
2067
+ return result;
2068
+ }
2069
+ async function writeBodyStream(body, outgoing) {
2070
+ const reader = body.getReader();
2071
+ try {
2072
+ while (true) {
2073
+ const { done, value } = await reader.read();
2074
+ if (done) {
2075
+ break;
2076
+ }
2077
+ const canContinue = outgoing.write(value);
2078
+ if (!canContinue) {
2079
+ await new Promise((resolve) => {
2080
+ outgoing.once("drain", resolve);
2081
+ });
2082
+ }
2083
+ }
2084
+ } finally {
2085
+ reader.releaseLock();
2086
+ }
2087
+ }
2088
+ async function writeResponse(response, outgoing) {
2089
+ outgoing.statusCode = response.status;
2090
+ const headers = buildOutgoingHeaders(response.headers);
2091
+ for (const [key, value] of Object.entries(headers)) {
2092
+ outgoing.setHeader(key, value);
2093
+ }
2094
+ const body = response.body;
2095
+ if (!body) {
2096
+ outgoing.end();
2097
+ return;
2098
+ }
2099
+ try {
2100
+ await writeBodyStream(body, outgoing);
2101
+ outgoing.end();
2102
+ } catch (error) {
2103
+ if (!outgoing.destroyed) {
2104
+ outgoing.destroy(
2105
+ error instanceof Error ? error : new Error(String(error))
2106
+ );
2107
+ }
2108
+ }
2109
+ }
2110
+
2111
+ // src/node-server/serve.ts
2112
+ function createRequestHandler(fetch, defaultHost, onError) {
2113
+ return async (incoming, outgoing) => {
2114
+ try {
2115
+ const request = createProxyRequest(incoming, defaultHost);
2116
+ const response = await fetch(request);
2117
+ await writeResponse(response, outgoing);
2118
+ } catch (error) {
2119
+ const err = error instanceof Error ? error : new Error(String(error));
2120
+ if (onError) {
2121
+ try {
2122
+ const errorResponse = await onError(err);
2123
+ await writeResponse(errorResponse, outgoing);
2124
+ return;
2125
+ } catch {
2126
+ }
2127
+ }
2128
+ if (!outgoing.headersSent) {
2129
+ outgoing.statusCode = 500;
2130
+ outgoing.setHeader("Content-Type", "text/plain");
2131
+ outgoing.end("Internal Server Error");
2132
+ }
2133
+ }
2134
+ };
2135
+ }
2136
+ function serve(options, callback) {
2137
+ const { fetch, port = 3e3, hostname = "0.0.0.0", onError } = options;
2138
+ const defaultHost = `${hostname === "0.0.0.0" ? "localhost" : hostname}:${port}`;
2139
+ const handler = createRequestHandler(fetch, defaultHost, onError);
2140
+ const server = createServer(handler);
2141
+ server.listen(port, hostname, callback);
2142
+ return {
2143
+ server,
2144
+ port,
2145
+ hostname,
2146
+ stop: () => new Promise((resolve, reject) => {
2147
+ server.close((err) => {
2148
+ if (err) reject(err);
2149
+ else resolve();
2150
+ });
2151
+ })
2152
+ };
2153
+ }
2154
+
2155
+ // src/index.ts
2156
+ import { Type as Type2 } from "@sinclair/typebox";
2157
+ export {
2158
+ BaseServer,
2159
+ ComponentServer,
2160
+ DependencyManager,
2161
+ HtmlRenderer,
2162
+ Server,
2163
+ ServerFactory,
2164
+ TokenError,
2165
+ Type2 as Type,
2166
+ VafastError,
2167
+ base64urlDecode,
2168
+ base64urlEncode,
2169
+ composeMiddleware,
2170
+ createAuth,
2171
+ createCORS,
2172
+ createHandler,
2173
+ createHandlerWithExtra,
2174
+ createOptionalAuth,
2175
+ createPermissionAuth,
2176
+ createRequestValidator,
2177
+ createRoleAuth,
2178
+ createTokenPair,
2179
+ createTypedRoute,
2180
+ createValidator,
2181
+ defineRoutes,
2182
+ empty,
2183
+ flattenNestedRoutes,
2184
+ generateToken,
2185
+ getCookie,
2186
+ getHeader,
2187
+ getLocals,
2188
+ getTokenTimeRemaining,
2189
+ getValidatorCacheStats,
2190
+ goAwait,
2191
+ html,
2192
+ isTokenExpired,
2193
+ isTypedRoute,
2194
+ json,
2195
+ normalizePath,
2196
+ parseAndValidateRequest,
2197
+ parseBody,
2198
+ parseCookies,
2199
+ parseCookiesFast,
2200
+ parseHeaders,
2201
+ parseQuery,
2202
+ parseQueryFast,
2203
+ parseRequest,
2204
+ parseToken,
2205
+ precompileSchemas,
2206
+ rateLimit,
2207
+ redirect,
2208
+ refreshToken,
2209
+ requireAuth,
2210
+ serve,
2211
+ setLocals,
2212
+ simpleHandler,
2213
+ stream,
2214
+ text,
2215
+ validateFast,
2216
+ validateRequest,
2217
+ validateSchema,
2218
+ verifyToken
2219
+ };
2220
+ /**
2221
+ * Go 风格的错误处理工具
2222
+ * 将 Promise 转换为 [Error | null, T | undefined] 格式
2223
+ *
2224
+ * @author Framework Team
2225
+ * @version 1.0.0
2226
+ * @license MIT
2227
+ */
2228
+ /**
2229
+ * 超优化版Schema验证器 v5.0.0
2230
+ *
2231
+ * 使用经过验证的优化技术,确保极致性能
2232
+ * - 内联函数调用
2233
+ * - 预编译缓存优化
2234
+ * - 内存池优化
2235
+ * - 位运算优化
2236
+ * - 类型特化优化
2237
+ * - 循环展开优化
2238
+ * - 位掩码优化
2239
+ * - 字符串池优化
2240
+ * - 内联缓存优化
2241
+ * - 内存对齐优化
2242
+ *
2243
+ * @author Framework Team
2244
+ * @version 5.0.0
2245
+ * @license MIT
2246
+ */
2247
+ /**
2248
+ * 类型安全的路由处理器工厂
2249
+ *
2250
+ * 非柯里化设计,API 更简洁
2251
+ *
2252
+ * @author Framework Team
2253
+ * @version 3.0.0
2254
+ * @license MIT
2255
+ */
2256
+ /**
2257
+ * 请求解析和验证器
2258
+ *
2259
+ * 解析handler的req参数,使用Ultra验证器进行验证,
2260
+ * 并类型安全地返回解析出来的值
2261
+ *
2262
+ * @author Framework Team
2263
+ * @version 1.0.0
2264
+ * @license MIT
2265
+ */
2266
+ /**
2267
+ * Schema 类型定义
2268
+ *
2269
+ * 使用 TSchema 约束替代 any,提供完整的类型安全
2270
+ *
2271
+ * @author Framework Team
2272
+ * @version 1.0.0
2273
+ * @license MIT
2274
+ */
2275
+ //# sourceMappingURL=index.js.map