vafast 0.4.3 → 0.4.6

package/dist/utils/response.mjs

@@ -1,4 +1,4 @@
-import { a as mapResponse, c as text, i as json, n as html, o as redirect, r as init_response, s as stream, t as empty } from "../response-CSKW5hsS.mjs";
+import { a as err, c as json, d as stream, f as text, i as empty, l as mapResponse, o as html, s as init_response, u as redirect } from "../middleware-CV5o-4wk.mjs";
 
 init_response();
-export { empty, html, json, mapResponse, redirect, stream, text };
+export { empty, err, html, json, mapResponse, redirect, stream, text };

package/dist/utils/route-registry.d.mts

@@ -1,4 +1,4 @@
-import "../schema-CVuttFSw.mjs";
-import "../index-DXJd7-2Z.mjs";
-import { a as getAllRoutes, c as setGlobalRegistry, i as filterRoutes, n as RouteRegistry, o as getRoute, r as createRouteRegistry, s as getRouteRegistry, t as RouteMeta } from "../route-registry-ykzRmaHB.mjs";
+import "../schema-DOKg31ZX.mjs";
+import "../index-CTHojwxd.mjs";
+import { a as getAllRoutes, c as setGlobalRegistry, i as filterRoutes, n as RouteRegistry, o as getRoute, r as createRouteRegistry, s as getRouteRegistry, t as RouteMeta } from "../route-registry-CYD7m6QP.mjs";
 export { RouteMeta, RouteRegistry, createRouteRegistry, filterRoutes, getAllRoutes, getRoute, getRouteRegistry, setGlobalRegistry };

package/dist/utils/route-registry.mjs

@@ -1,4 +1,4 @@
-import { a as getRoute, c as setGlobalRegistry, i as getAllRoutes, n as createRouteRegistry, o as getRouteRegistry, r as filterRoutes, s as init_route_registry, t as RouteRegistry } from "../route-registry-AlkDgbcE.mjs";
+import { a as getRoute, c as setGlobalRegistry, i as getAllRoutes, n as createRouteRegistry, o as getRouteRegistry, r as filterRoutes, s as init_route_registry, t as RouteRegistry } from "../route-registry-BVvbghgH.mjs";
 
 init_route_registry();
 export { RouteRegistry, createRouteRegistry, filterRoutes, getAllRoutes, getRoute, getRouteRegistry, setGlobalRegistry };

package/dist/utils/sse.d.mts

@@ -1,3 +1,3 @@
-import "../schema-CVuttFSw.mjs";
-import { a as createSSEHandler, i as SSEMarker, n as SSEGenerator, r as SSEHandler, t as SSEEvent } from "../sse-BOd2pvUK.mjs";
+import "../schema-DOKg31ZX.mjs";
+import { a as createSSEHandler, i as SSEMarker, n as SSEGenerator, r as SSEHandler, t as SSEEvent } from "../sse-BDIptC85.mjs";
 export { SSEEvent, SSEGenerator, SSEHandler, SSEMarker, createSSEHandler };

package/dist/utils/sse.mjs

@@ -1,5 +1,5 @@
-import "../parsers-ROIZWSGI.mjs";
-import "../validators-CbCLj0Rc.mjs";
-import { t as createSSEHandler } from "../sse-US5D9mgE.mjs";
+import "../parsers-BQ63b0YE.mjs";
+import "../validators-WXQ49LcR.mjs";
+import { t as createSSEHandler } from "../sse-CCVfFW6s.mjs";
 
 export { createSSEHandler };

package/dist/utils/validators/validators.d.mts

@@ -1,2 +1,2 @@
-import { a as ValidationError, c as getValidatorCacheStats, d as validateFast, f as validateSchema, i as Type, l as precompileSchemas, n as Static, o as ValidationResult, p as validateSchemaOrThrow, r as TSchema, s as createValidator, t as SchemaConfig, u as validateAllSchemas } from "../../validators-C0eZyxPh.mjs";
+import { a as ValidationError, c as getValidatorCacheStats, d as validateFast, f as validateSchema, i as Type, l as precompileSchemas, n as Static, o as ValidationResult, p as validateSchemaOrThrow, r as TSchema, s as createValidator, t as SchemaConfig, u as validateAllSchemas } from "../../validators-CPmnj_y9.mjs";
 export { SchemaConfig, Static, TSchema, Type, ValidationError, ValidationResult, createValidator, getValidatorCacheStats, precompileSchemas, validateAllSchemas, validateFast, validateSchema, validateSchemaOrThrow };

package/dist/utils/validators/validators.mjs

@@ -1,3 +1,3 @@
-import { a as validateAllSchemas, c as validateSchemaOrThrow, i as precompileSchemas, n as createValidator, o as validateFast, r as getValidatorCacheStats, s as validateSchema, t as Type } from "../../validators-CbCLj0Rc.mjs";
+import { a as validateAllSchemas, c as validateSchemaOrThrow, i as precompileSchemas, n as createValidator, o as validateFast, r as getValidatorCacheStats, s as validateSchema, t as Type } from "../../validators-WXQ49LcR.mjs";
 
 export { Type, createValidator, getValidatorCacheStats, precompileSchemas, validateAllSchemas, validateFast, validateSchema, validateSchemaOrThrow };

package/dist/{validators-C0eZyxPh.d.mts → validators-CPmnj_y9.d.mts}

@@ -64,4 +64,4 @@ declare function getValidatorCacheStats(): {
 };
 //#endregion
 export { ValidationError as a, getValidatorCacheStats as c, validateFast as d, validateSchema as f, Type as i, precompileSchemas as l, Static$1 as n, ValidationResult as o, validateSchemaOrThrow as p, TSchema$1 as r, createValidator as s, SchemaConfig as t, validateAllSchemas as u };
-//# sourceMappingURL=validators-C0eZyxPh.d.mts.map
+//# sourceMappingURL=validators-CPmnj_y9.d.mts.map

package/dist/{validators-CbCLj0Rc.mjs → validators-WXQ49LcR.mjs}

@@ -109,4 +109,4 @@ function getValidatorCacheStats() {
 
 //#endregion
 export { validateAllSchemas as a, validateSchemaOrThrow as c, precompileSchemas as i, createValidator as n, validateFast as o, getValidatorCacheStats as r, validateSchema as s, Type as t };
-//# sourceMappingURL=validators-CbCLj0Rc.mjs.map
+//# sourceMappingURL=validators-WXQ49LcR.mjs.map

package/dist/{validators-CbCLj0Rc.mjs.map → validators-WXQ49LcR.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"validators-CbCLj0Rc.mjs","names":[],"sources":["../src/utils/validators/validators.ts"],"sourcesContent":["/**\n * Schema 验证器 - 简洁版\n *\n * 特点：\n * - WeakMap 缓存避免内存泄漏\n * - TypeCompiler JIT 编译，性能最佳\n * - 支持 FormatRegistry（需确保同一实例）\n *\n * @version 7.0.0\n */\n\nimport { Type } from \"@sinclair/typebox\";\nimport type { Static, TSchema } from \"@sinclair/typebox\";\nimport { TypeCompiler, type TypeCheck } from \"@sinclair/typebox/compiler\";\nimport { Value } from \"@sinclair/typebox/value\";\n\n// ============== 类型定义 ==============\n\n/** Schema 配置接口 */\nexport interface SchemaConfig {\n  body?: TSchema;\n  query?: TSchema;\n  params?: TSchema;\n  headers?: TSchema;\n  cookies?: TSchema;\n}\n\n/** 验证错误接口 */\nexport interface ValidationError {\n  path: string;\n  message: string;\n  code: string;\n  value?: unknown;\n}\n\n/** 验证结果 */\nexport type ValidationResult<T = unknown> =\n  | { success: true; data: T }\n  | { success: false; errors: ValidationError[] };\n\n// ============== 缓存 ==============\n\n/** 编译器缓存 - WeakMap 避免内存泄漏 */\nconst compilerCache = new WeakMap<TSchema, TypeCheck<TSchema>>();\n\n// ============== 核心函数 ==============\n\n/**\n * 获取或创建编译后的验证器\n */\nfunction getCompiledValidator<T extends TSchema>(schema: T): TypeCheck<T> {\n  let compiler = compilerCache.get(schema);\n  if (!compiler) {\n    compiler = TypeCompiler.Compile(schema);\n    compilerCache.set(schema, compiler);\n  }\n  return compiler as TypeCheck<T>;\n}\n\n/**\n * 验证单个 Schema（返回结果对象）\n */\nexport function validateSchema<T extends TSchema>(\n  schema: T,\n  data: unknown,\n): ValidationResult<Static<T>> {\n  try {\n    const compiler = getCompiledValidator(schema);\n\n    if (compiler.Check(data)) {\n      return { success: true, data: data as Static<T> };\n    }\n\n    // 收集错误\n    const errors: ValidationError[] = [];\n    for (const error of compiler.Errors(data)) {\n      errors.push({\n        path: error.path,\n        message: error.message,\n        code: \"VALIDATION_FAILED\",\n        value: error.value,\n      });\n    }\n    return { success: false, errors };\n  } catch (error) {\n    return {\n      success: false,\n      errors: [\n        {\n          path: \"\",\n          message: error instanceof Error ? error.message : \"验证异常\",\n          code: \"VALIDATION_EXCEPTION\",\n        },\n      ],\n    };\n  }\n}\n\n/**\n * 验证 Schema（抛出异常版本，用于框架内部）\n */\nexport function validateSchemaOrThrow<T extends TSchema>(\n  schema: T,\n  data: unknown,\n  context: string,\n): Static<T> {\n  const compiler = getCompiledValidator(schema);\n\n  if (!compiler.Check(data)) {\n    throw new Error(`${context}验证失败`);\n  }\n\n  return data as Static<T>;\n}\n\n/**\n * 快速验证（只返回布尔值）\n */\nexport function validateFast<T extends TSchema>(\n  schema: T,\n  data: unknown,\n): data is Static<T> {\n  const compiler = getCompiledValidator(schema);\n  return compiler.Check(data);\n}\n\n/**\n * 批量验证所有 Schema（用于请求验证）\n */\nexport function validateAllSchemas(\n  config: SchemaConfig,\n  data: {\n    body: unknown;\n    query: unknown;\n    params: unknown;\n    headers: unknown;\n    cookies: unknown;\n  },\n): typeof data {\n  if (config.body) {\n    validateSchemaOrThrow(config.body, data.body, \"请求体\");\n  }\n  if (config.query) {\n    validateSchemaOrThrow(config.query, data.query, \"Query参数\");\n  }\n  if (config.params) {\n    validateSchemaOrThrow(config.params, data.params, \"路径参数\");\n  }\n  if (config.headers) {\n    validateSchemaOrThrow(config.headers, data.headers, \"请求头\");\n  }\n  if (config.cookies) {\n    validateSchemaOrThrow(config.cookies, data.cookies, \"Cookie\");\n  }\n  return data;\n}\n\n/**\n * 预编译 Schema（启动时调用，避免首次请求开销）\n */\nexport function precompileSchemas(config: SchemaConfig): void {\n  if (config.body) getCompiledValidator(config.body);\n  if (config.query) getCompiledValidator(config.query);\n  if (config.params) getCompiledValidator(config.params);\n  if (config.headers) getCompiledValidator(config.headers);\n  if (config.cookies) getCompiledValidator(config.cookies);\n}\n\n/**\n * 创建类型特化的验证器（高频使用场景）\n */\nexport function createValidator<T extends TSchema>(\n  schema: T,\n): (data: unknown) => ValidationResult<Static<T>> {\n  return (data: unknown) => validateSchema(schema, data);\n}\n\n/**\n * 获取缓存统计（调试用）\n */\nexport function getValidatorCacheStats(): { cacheType: string; note: string } {\n  return {\n    cacheType: \"WeakMap\",\n    note: \"WeakMap 缓存会随 Schema 对象自动清理，无内存泄漏风险\",\n  };\n}\n\n// 导出 TypeBox 类型\nexport { Type, Static, TSchema };\n"],"mappings":";;;;;;;;;;;;;;;AA2CA,MAAM,gCAAgB,IAAI,SAAsC;;;;AAOhE,SAAS,qBAAwC,QAAyB;CACxE,IAAI,WAAW,cAAc,IAAI,OAAO;AACxC,KAAI,CAAC,UAAU;AACb,aAAW,aAAa,QAAQ,OAAO;AACvC,gBAAc,IAAI,QAAQ,SAAS;;AAErC,QAAO;;;;;AAMT,SAAgB,eACd,QACA,MAC6B;AAC7B,KAAI;EACF,MAAM,WAAW,qBAAqB,OAAO;AAE7C,MAAI,SAAS,MAAM,KAAK,CACtB,QAAO;GAAE,SAAS;GAAY;GAAmB;EAInD,MAAM,SAA4B,EAAE;AACpC,OAAK,MAAM,SAAS,SAAS,OAAO,KAAK,CACvC,QAAO,KAAK;GACV,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,MAAM;GACN,OAAO,MAAM;GACd,CAAC;AAEJ,SAAO;GAAE,SAAS;GAAO;GAAQ;UAC1B,OAAO;AACd,SAAO;GACL,SAAS;GACT,QAAQ,CACN;IACE,MAAM;IACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU;IAClD,MAAM;IACP,CACF;GACF;;;;;;AAOL,SAAgB,sBACd,QACA,MACA,SACW;AAGX,KAAI,CAFa,qBAAqB,OAAO,CAE/B,MAAM,KAAK,CACvB,OAAM,IAAI,MAAM,GAAG,QAAQ,MAAM;AAGnC,QAAO;;;;;AAMT,SAAgB,aACd,QACA,MACmB;AAEnB,QADiB,qBAAqB,OAAO,CAC7B,MAAM,KAAK;;;;;AAM7B,SAAgB,mBACd,QACA,MAOa;AACb,KAAI,OAAO,KACT,uBAAsB,OAAO,MAAM,KAAK,MAAM,MAAM;AAEtD,KAAI,OAAO,MACT,uBAAsB,OAAO,OAAO,KAAK,OAAO,UAAU;AAE5D,KAAI,OAAO,OACT,uBAAsB,OAAO,QAAQ,KAAK,QAAQ,OAAO;AAE3D,KAAI,OAAO,QACT,uBAAsB,OAAO,SAAS,KAAK,SAAS,MAAM;AAE5D,KAAI,OAAO,QACT,uBAAsB,OAAO,SAAS,KAAK,SAAS,SAAS;AAE/D,QAAO;;;;;AAMT,SAAgB,kBAAkB,QAA4B;AAC5D,KAAI,OAAO,KAAM,sBAAqB,OAAO,KAAK;AAClD,KAAI,OAAO,MAAO,sBAAqB,OAAO,MAAM;AACpD,KAAI,OAAO,OAAQ,sBAAqB,OAAO,OAAO;AACtD,KAAI,OAAO,QAAS,sBAAqB,OAAO,QAAQ;AACxD,KAAI,OAAO,QAAS,sBAAqB,OAAO,QAAQ;;;;;AAM1D,SAAgB,gBACd,QACgD;AAChD,SAAQ,SAAkB,eAAe,QAAQ,KAAK;;;;;AAMxD,SAAgB,yBAA8D;AAC5E,QAAO;EACL,WAAW;EACX,MAAM;EACP"}
+{"version":3,"file":"validators-WXQ49LcR.mjs","names":[],"sources":["../src/utils/validators/validators.ts"],"sourcesContent":["/**\n * Schema 验证器 - 简洁版\n *\n * 特点：\n * - WeakMap 缓存避免内存泄漏\n * - TypeCompiler JIT 编译，性能最佳\n * - 支持 FormatRegistry（需确保同一实例）\n *\n * @version 7.0.0\n */\n\nimport { Type } from \"@sinclair/typebox\";\nimport type { Static, TSchema } from \"@sinclair/typebox\";\nimport { TypeCompiler, type TypeCheck } from \"@sinclair/typebox/compiler\";\nimport { Value } from \"@sinclair/typebox/value\";\n\n// ============== 类型定义 ==============\n\n/** Schema 配置接口 */\nexport interface SchemaConfig {\n  body?: TSchema;\n  query?: TSchema;\n  params?: TSchema;\n  headers?: TSchema;\n  cookies?: TSchema;\n}\n\n/** 验证错误接口 */\nexport interface ValidationError {\n  path: string;\n  message: string;\n  code: string;\n  value?: unknown;\n}\n\n/** 验证结果 */\nexport type ValidationResult<T = unknown> =\n  | { success: true; data: T }\n  | { success: false; errors: ValidationError[] };\n\n// ============== 缓存 ==============\n\n/** 编译器缓存 - WeakMap 避免内存泄漏 */\nconst compilerCache = new WeakMap<TSchema, TypeCheck<TSchema>>();\n\n// ============== 核心函数 ==============\n\n/**\n * 获取或创建编译后的验证器\n */\nfunction getCompiledValidator<T extends TSchema>(schema: T): TypeCheck<T> {\n  let compiler = compilerCache.get(schema);\n  if (!compiler) {\n    compiler = TypeCompiler.Compile(schema);\n    compilerCache.set(schema, compiler);\n  }\n  return compiler as TypeCheck<T>;\n}\n\n/**\n * 验证单个 Schema（返回结果对象）\n */\nexport function validateSchema<T extends TSchema>(\n  schema: T,\n  data: unknown,\n): ValidationResult<Static<T>> {\n  try {\n    const compiler = getCompiledValidator(schema);\n\n    if (compiler.Check(data)) {\n      return { success: true, data: data as Static<T> };\n    }\n\n    // 收集错误\n    const errors: ValidationError[] = [];\n    for (const error of compiler.Errors(data)) {\n      errors.push({\n        path: error.path,\n        message: error.message,\n        code: \"VALIDATION_FAILED\",\n        value: error.value,\n      });\n    }\n    return { success: false, errors };\n  } catch (error) {\n    return {\n      success: false,\n      errors: [\n        {\n          path: \"\",\n          message: error instanceof Error ? error.message : \"验证异常\",\n          code: \"VALIDATION_EXCEPTION\",\n        },\n      ],\n    };\n  }\n}\n\n/**\n * 验证 Schema（抛出异常版本，用于框架内部）\n */\nexport function validateSchemaOrThrow<T extends TSchema>(\n  schema: T,\n  data: unknown,\n  context: string,\n): Static<T> {\n  const compiler = getCompiledValidator(schema);\n\n  if (!compiler.Check(data)) {\n    throw new Error(`${context}验证失败`);\n  }\n\n  return data as Static<T>;\n}\n\n/**\n * 快速验证（只返回布尔值）\n */\nexport function validateFast<T extends TSchema>(\n  schema: T,\n  data: unknown,\n): data is Static<T> {\n  const compiler = getCompiledValidator(schema);\n  return compiler.Check(data);\n}\n\n/**\n * 批量验证所有 Schema（用于请求验证）\n */\nexport function validateAllSchemas(\n  config: SchemaConfig,\n  data: {\n    body: unknown;\n    query: unknown;\n    params: unknown;\n    headers: unknown;\n    cookies: unknown;\n  },\n): typeof data {\n  if (config.body) {\n    validateSchemaOrThrow(config.body, data.body, \"请求体\");\n  }\n  if (config.query) {\n    validateSchemaOrThrow(config.query, data.query, \"Query参数\");\n  }\n  if (config.params) {\n    validateSchemaOrThrow(config.params, data.params, \"路径参数\");\n  }\n  if (config.headers) {\n    validateSchemaOrThrow(config.headers, data.headers, \"请求头\");\n  }\n  if (config.cookies) {\n    validateSchemaOrThrow(config.cookies, data.cookies, \"Cookie\");\n  }\n  return data;\n}\n\n/**\n * 预编译 Schema（启动时调用，避免首次请求开销）\n */\nexport function precompileSchemas(config: SchemaConfig): void {\n  if (config.body) getCompiledValidator(config.body);\n  if (config.query) getCompiledValidator(config.query);\n  if (config.params) getCompiledValidator(config.params);\n  if (config.headers) getCompiledValidator(config.headers);\n  if (config.cookies) getCompiledValidator(config.cookies);\n}\n\n/**\n * 创建类型特化的验证器（高频使用场景）\n */\nexport function createValidator<T extends TSchema>(\n  schema: T,\n): (data: unknown) => ValidationResult<Static<T>> {\n  return (data: unknown) => validateSchema(schema, data);\n}\n\n/**\n * 获取缓存统计（调试用）\n */\nexport function getValidatorCacheStats(): { cacheType: string; note: string } {\n  return {\n    cacheType: \"WeakMap\",\n    note: \"WeakMap 缓存会随 Schema 对象自动清理，无内存泄漏风险\",\n  };\n}\n\n// 导出 TypeBox 类型\nexport { Type, Static, TSchema };\n"],"mappings":";;;;;;;;;;;;;;;AA2CA,MAAM,gCAAgB,IAAI,SAAsC;;;;AAOhE,SAAS,qBAAwC,QAAyB;CACxE,IAAI,WAAW,cAAc,IAAI,OAAO;AACxC,KAAI,CAAC,UAAU;AACb,aAAW,aAAa,QAAQ,OAAO;AACvC,gBAAc,IAAI,QAAQ,SAAS;;AAErC,QAAO;;;;;AAMT,SAAgB,eACd,QACA,MAC6B;AAC7B,KAAI;EACF,MAAM,WAAW,qBAAqB,OAAO;AAE7C,MAAI,SAAS,MAAM,KAAK,CACtB,QAAO;GAAE,SAAS;GAAY;GAAmB;EAInD,MAAM,SAA4B,EAAE;AACpC,OAAK,MAAM,SAAS,SAAS,OAAO,KAAK,CACvC,QAAO,KAAK;GACV,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,MAAM;GACN,OAAO,MAAM;GACd,CAAC;AAEJ,SAAO;GAAE,SAAS;GAAO;GAAQ;UAC1B,OAAO;AACd,SAAO;GACL,SAAS;GACT,QAAQ,CACN;IACE,MAAM;IACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU;IAClD,MAAM;IACP,CACF;GACF;;;;;;AAOL,SAAgB,sBACd,QACA,MACA,SACW;AAGX,KAAI,CAFa,qBAAqB,OAAO,CAE/B,MAAM,KAAK,CACvB,OAAM,IAAI,MAAM,GAAG,QAAQ,MAAM;AAGnC,QAAO;;;;;AAMT,SAAgB,aACd,QACA,MACmB;AAEnB,QADiB,qBAAqB,OAAO,CAC7B,MAAM,KAAK;;;;;AAM7B,SAAgB,mBACd,QACA,MAOa;AACb,KAAI,OAAO,KACT,uBAAsB,OAAO,MAAM,KAAK,MAAM,MAAM;AAEtD,KAAI,OAAO,MACT,uBAAsB,OAAO,OAAO,KAAK,OAAO,UAAU;AAE5D,KAAI,OAAO,OACT,uBAAsB,OAAO,QAAQ,KAAK,QAAQ,OAAO;AAE3D,KAAI,OAAO,QACT,uBAAsB,OAAO,SAAS,KAAK,SAAS,MAAM;AAE5D,KAAI,OAAO,QACT,uBAAsB,OAAO,SAAS,KAAK,SAAS,SAAS;AAE/D,QAAO;;;;;AAMT,SAAgB,kBAAkB,QAA4B;AAC5D,KAAI,OAAO,KAAM,sBAAqB,OAAO,KAAK;AAClD,KAAI,OAAO,MAAO,sBAAqB,OAAO,MAAM;AACpD,KAAI,OAAO,OAAQ,sBAAqB,OAAO,OAAO;AACtD,KAAI,OAAO,QAAS,sBAAqB,OAAO,QAAQ;AACxD,KAAI,OAAO,QAAS,sBAAqB,OAAO,QAAQ;;;;;AAM1D,SAAgB,gBACd,QACgD;AAChD,SAAQ,SAAkB,eAAe,QAAQ,KAAK;;;;;AAMxD,SAAgB,yBAA8D;AAC5E,QAAO;EACL,WAAW;EACX,MAAM;EACP"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vafast",
-  "version": "0.4.3",
+  "version": "0.4.6",
   "description": "极简结构化Web框架，支持 Bun 和 Node.js。Go风格，函数优先。",
   "type": "module",
   "repository": {

package/dist/auth/token.d.mts

@@ -1,44 +0,0 @@
-//#region src/auth/token.d.ts
-interface TokenPayload {
-  [key: string]: any;
-  exp?: number;
-  iat?: number;
-  sub?: string;
-  aud?: string;
-  iss?: string;
-}
-interface TokenResult {
-  payload: TokenPayload;
-  token: string;
-  expiresAt: number;
-}
-interface TokenOptions {
-  expiresIn?: number;
-  issuer?: string;
-  audience?: string;
-  subject?: string;
-}
-declare class TokenError extends Error {
-  code: "INVALID_TOKEN" | "EXPIRED_TOKEN" | "INVALID_SIGNATURE" | "MALFORMED_TOKEN" | "INVALID_PAYLOAD";
-  constructor(message: string, code: "INVALID_TOKEN" | "EXPIRED_TOKEN" | "INVALID_SIGNATURE" | "MALFORMED_TOKEN" | "INVALID_PAYLOAD");
-}
-/** 生成令牌 */
-declare function generateToken(payload: TokenPayload, secret: string, options?: TokenOptions): Promise<TokenResult>;
-/** 验证令牌 */
-declare function verifyToken(token: string, secret: string): Promise<TokenPayload | null>;
-/** 解析令牌（不验证签名） */
-declare function parseToken(token: string): TokenPayload | null;
-/** 检查令牌是否过期 */
-declare function isTokenExpired(token: string): boolean;
-/** 获取令牌剩余有效时间（秒） */
-declare function getTokenTimeRemaining(token: string): number;
-/** 刷新令牌 */
-declare function refreshToken(token: string, secret: string, options?: TokenOptions): Promise<TokenResult | null>;
-/** 创建访问令牌和刷新令牌对 */
-declare function createTokenPair(payload: TokenPayload, secret: string, options?: TokenOptions): Promise<{
-  accessToken: TokenResult;
-  refreshToken: TokenResult;
-}>;
-//#endregion
-export { TokenError, TokenOptions, TokenPayload, TokenResult, createTokenPair, generateToken, getTokenTimeRemaining, isTokenExpired, parseToken, refreshToken, verifyToken };
-//# sourceMappingURL=token.d.mts.map

package/dist/auth/token.mjs

@@ -1,105 +0,0 @@
-import { n as base64urlEncode, t as base64urlDecode } from "../base64url-DLDOeXsk.mjs";
-
-//#region src/auth/token.ts
-var TokenError = class extends Error {
-	constructor(message, code) {
-		super(message);
-		this.code = code;
-		this.name = "TokenError";
-	}
-};
-const encoder = new TextEncoder();
-/** 使用 HMAC-SHA256 进行签名 */
-async function sign(data, secret) {
-	const key = await crypto.subtle.importKey("raw", encoder.encode(secret), {
-		name: "HMAC",
-		hash: "SHA-256"
-	}, false, ["sign"]);
-	const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(data));
-	return btoa(String.fromCharCode.apply(null, Array.from(new Uint8Array(signature))));
-}
-/** 生成令牌 */
-async function generateToken(payload, secret, options = {}) {
-	const { expiresIn = 3600, issuer, audience, subject } = options;
-	const now = Math.floor(Date.now() / 1e3);
-	const tokenPayload = {
-		...payload,
-		iat: now,
-		exp: now + expiresIn
-	};
-	if (issuer) tokenPayload.iss = issuer;
-	if (audience) tokenPayload.aud = audience;
-	if (subject) tokenPayload.sub = subject;
-	const data = base64urlEncode(JSON.stringify(tokenPayload));
-	return {
-		payload: tokenPayload,
-		token: `${data}.${base64urlEncode(await sign(data, secret))}`,
-		expiresAt: tokenPayload.exp * 1e3
-	};
-}
-/** 验证令牌 */
-async function verifyToken(token, secret) {
-	try {
-		const [data, sig] = token.split(".");
-		if (!data || !sig) throw new TokenError("令牌格式无效", "MALFORMED_TOKEN");
-		if (sig !== base64urlEncode(await sign(data, secret))) throw new TokenError("令牌签名无效", "INVALID_SIGNATURE");
-		const payload = JSON.parse(base64urlDecode(data));
-		if (payload.exp && Date.now() / 1e3 > payload.exp) throw new TokenError("令牌已过期", "EXPIRED_TOKEN");
-		return payload;
-	} catch (error) {
-		if (error instanceof TokenError) throw error;
-		throw new TokenError("令牌验证失败", "INVALID_TOKEN");
-	}
-}
-/** 解析令牌（不验证签名） */
-function parseToken(token) {
-	try {
-		const [data] = token.split(".");
-		if (!data) return null;
-		return JSON.parse(base64urlDecode(data));
-	} catch {
-		return null;
-	}
-}
-/** 检查令牌是否过期 */
-function isTokenExpired(token) {
-	const payload = parseToken(token);
-	if (!payload || !payload.exp) return true;
-	return Date.now() / 1e3 > payload.exp;
-}
-/** 获取令牌剩余有效时间（秒） */
-function getTokenTimeRemaining(token) {
-	const payload = parseToken(token);
-	if (!payload || !payload.exp) return 0;
-	const remaining = payload.exp - Date.now() / 1e3;
-	return Math.max(0, Math.floor(remaining));
-}
-/** 刷新令牌 */
-async function refreshToken(token, secret, options = {}) {
-	try {
-		const payload = await verifyToken(token, secret);
-		if (!payload) return null;
-		const { exp, iat, ...cleanPayload } = payload;
-		await new Promise((resolve) => setTimeout(resolve, 10));
-		return await generateToken(cleanPayload, secret, options);
-	} catch {
-		return null;
-	}
-}
-/** 创建访问令牌和刷新令牌对 */
-async function createTokenPair(payload, secret, options = {}) {
-	return {
-		accessToken: await generateToken(payload, secret, {
-			...options,
-			expiresIn: options.expiresIn || 3600
-		}),
-		refreshToken: await generateToken(payload, secret, {
-			...options,
-			expiresIn: 168 * 3600
-		})
-	};
-}
-
-//#endregion
-export { TokenError, createTokenPair, generateToken, getTokenTimeRemaining, isTokenExpired, parseToken, refreshToken, verifyToken };
-//# sourceMappingURL=token.mjs.map

package/dist/auth/token.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.mjs","names":[],"sources":["../../src/auth/token.ts"],"sourcesContent":["// src/auth/token.ts\nimport { base64urlEncode, base64urlDecode } from \"../utils/base64url\";\n\n// 类型定义\nexport interface TokenPayload {\n  [key: string]: any;\n  exp?: number; // 过期时间戳\n  iat?: number; // 签发时间戳\n  sub?: string; // 主题（通常是用户ID）\n  aud?: string; // 受众\n  iss?: string; // 签发者\n}\n\nexport interface TokenResult {\n  payload: TokenPayload;\n  token: string;\n  expiresAt: number;\n}\n\nexport interface TokenOptions {\n  expiresIn?: number; // 过期时间（秒）\n  issuer?: string; // 签发者\n  audience?: string; // 受众\n  subject?: string; // 主题\n}\n\nexport class TokenError extends Error {\n  constructor(\n    message: string,\n    public code:\n      | \"INVALID_TOKEN\"\n      | \"EXPIRED_TOKEN\"\n      | \"INVALID_SIGNATURE\"\n      | \"MALFORMED_TOKEN\"\n      | \"INVALID_PAYLOAD\",\n  ) {\n    super(message);\n    this.name = \"TokenError\";\n  }\n}\n\nconst encoder = new TextEncoder();\n\n/** 使用 HMAC-SHA256 进行签名 */\nasync function sign(data: string, secret: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n\n  const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n  return btoa(\n    String.fromCharCode.apply(null, Array.from(new Uint8Array(signature))),\n  );\n}\n\n/** 生成令牌 */\nexport async function generateToken(\n  payload: TokenPayload,\n  secret: string,\n  options: TokenOptions = {},\n): Promise<TokenResult> {\n  const { expiresIn = 3600, issuer, audience, subject } = options;\n\n  // 创建令牌载荷，强制使用当前时间\n  const now = Math.floor(Date.now() / 1000);\n  const tokenPayload: TokenPayload = {\n    ...payload,\n    iat: now,\n    exp: now + expiresIn,\n  };\n\n  // 添加可选字段\n  if (issuer) tokenPayload.iss = issuer;\n  if (audience) tokenPayload.aud = audience;\n  if (subject) tokenPayload.sub = subject;\n\n  const data = base64urlEncode(JSON.stringify(tokenPayload));\n  const sig = await sign(data, secret);\n  const token = `${data}.${base64urlEncode(sig)}`;\n\n  return {\n    payload: tokenPayload,\n    token,\n    expiresAt: tokenPayload.exp! * 1000, // 转换为毫秒\n  };\n}\n\n/** 验证令牌 */\nexport async function verifyToken(\n  token: string,\n  secret: string,\n): Promise<TokenPayload | null> {\n  try {\n    const [data, sig] = token.split(\".\");\n    if (!data || !sig) {\n      throw new TokenError(\"令牌格式无效\", \"MALFORMED_TOKEN\");\n    }\n\n    const expectedSig = await sign(data, secret);\n    const expected = base64urlEncode(expectedSig);\n\n    if (sig !== expected) {\n      throw new TokenError(\"令牌签名无效\", \"INVALID_SIGNATURE\");\n    }\n\n    const payload = JSON.parse(base64urlDecode(data)) as TokenPayload;\n\n    // 检查过期时间\n    if (payload.exp && Date.now() / 1000 > payload.exp) {\n      throw new TokenError(\"令牌已过期\", \"EXPIRED_TOKEN\");\n    }\n\n    return payload;\n  } catch (error) {\n    if (error instanceof TokenError) {\n      throw error;\n    }\n    throw new TokenError(\"令牌验证失败\", \"INVALID_TOKEN\");\n  }\n}\n\n/** 解析令牌（不验证签名） */\nexport function parseToken(token: string): TokenPayload | null {\n  try {\n    const [data] = token.split(\".\");\n    if (!data) return null;\n\n    return JSON.parse(base64urlDecode(data));\n  } catch {\n    return null;\n  }\n}\n\n/** 检查令牌是否过期 */\nexport function isTokenExpired(token: string): boolean {\n  const payload = parseToken(token);\n  if (!payload || !payload.exp) return true;\n\n  return Date.now() / 1000 > payload.exp;\n}\n\n/** 获取令牌剩余有效时间（秒） */\nexport function getTokenTimeRemaining(token: string): number {\n  const payload = parseToken(token);\n  if (!payload || !payload.exp) return 0;\n\n  const remaining = payload.exp - Date.now() / 1000;\n  return Math.max(0, Math.floor(remaining));\n}\n\n/** 刷新令牌 */\nexport async function refreshToken(\n  token: string,\n  secret: string,\n  options: TokenOptions = {},\n): Promise<TokenResult | null> {\n  try {\n    const payload = await verifyToken(token, secret);\n    if (!payload) return null;\n\n    // 移除时间相关字段，重新生成\n    const { exp, iat, ...cleanPayload } = payload;\n\n    // 添加延迟确保时间戳不同\n    await new Promise((resolve) => setTimeout(resolve, 10));\n\n    return await generateToken(cleanPayload, secret, options);\n  } catch {\n    return null;\n  }\n}\n\n/** 创建访问令牌和刷新令牌对 */\nexport async function createTokenPair(\n  payload: TokenPayload,\n  secret: string,\n  options: TokenOptions = {},\n): Promise<{\n  accessToken: TokenResult;\n  refreshToken: TokenResult;\n}> {\n  const accessToken = await generateToken(payload, secret, {\n    ...options,\n    expiresIn: options.expiresIn || 3600, // 1小时\n  });\n\n  const refreshToken = await generateToken(payload, secret, {\n    ...options,\n    expiresIn: 7 * 24 * 3600, // 7天\n  });\n\n  return { accessToken, refreshToken };\n}\n"],"mappings":";;;AA0BA,IAAa,aAAb,cAAgC,MAAM;CACpC,YACE,SACA,AAAO,MAMP;AACA,QAAM,QAAQ;EAPP;AAQP,OAAK,OAAO;;;AAIhB,MAAM,UAAU,IAAI,aAAa;;AAGjC,eAAe,KAAK,MAAc,QAAiC;CACjE,MAAM,MAAM,MAAM,OAAO,OAAO,UAC9B,OACA,QAAQ,OAAO,OAAO,EACtB;EAAE,MAAM;EAAQ,MAAM;EAAW,EACjC,OACA,CAAC,OAAO,CACT;CAED,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,QAAQ,OAAO,KAAK,CAAC;AAC7E,QAAO,KACL,OAAO,aAAa,MAAM,MAAM,MAAM,KAAK,IAAI,WAAW,UAAU,CAAC,CAAC,CACvE;;;AAIH,eAAsB,cACpB,SACA,QACA,UAAwB,EAAE,EACJ;CACtB,MAAM,EAAE,YAAY,MAAM,QAAQ,UAAU,YAAY;CAGxD,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;CACzC,MAAM,eAA6B;EACjC,GAAG;EACH,KAAK;EACL,KAAK,MAAM;EACZ;AAGD,KAAI,OAAQ,cAAa,MAAM;AAC/B,KAAI,SAAU,cAAa,MAAM;AACjC,KAAI,QAAS,cAAa,MAAM;CAEhC,MAAM,OAAO,gBAAgB,KAAK,UAAU,aAAa,CAAC;AAI1D,QAAO;EACL,SAAS;EACT,OAJY,GAAG,KAAK,GAAG,gBADb,MAAM,KAAK,MAAM,OAAO,CACS;EAK3C,WAAW,aAAa,MAAO;EAChC;;;AAIH,eAAsB,YACpB,OACA,QAC8B;AAC9B,KAAI;EACF,MAAM,CAAC,MAAM,OAAO,MAAM,MAAM,IAAI;AACpC,MAAI,CAAC,QAAQ,CAAC,IACZ,OAAM,IAAI,WAAW,UAAU,kBAAkB;AAMnD,MAAI,QAFa,gBADG,MAAM,KAAK,MAAM,OAAO,CACC,CAG3C,OAAM,IAAI,WAAW,UAAU,oBAAoB;EAGrD,MAAM,UAAU,KAAK,MAAM,gBAAgB,KAAK,CAAC;AAGjD,MAAI,QAAQ,OAAO,KAAK,KAAK,GAAG,MAAO,QAAQ,IAC7C,OAAM,IAAI,WAAW,SAAS,gBAAgB;AAGhD,SAAO;UACA,OAAO;AACd,MAAI,iBAAiB,WACnB,OAAM;AAER,QAAM,IAAI,WAAW,UAAU,gBAAgB;;;;AAKnD,SAAgB,WAAW,OAAoC;AAC7D,KAAI;EACF,MAAM,CAAC,QAAQ,MAAM,MAAM,IAAI;AAC/B,MAAI,CAAC,KAAM,QAAO;AAElB,SAAO,KAAK,MAAM,gBAAgB,KAAK,CAAC;SAClC;AACN,SAAO;;;;AAKX,SAAgB,eAAe,OAAwB;CACrD,MAAM,UAAU,WAAW,MAAM;AACjC,KAAI,CAAC,WAAW,CAAC,QAAQ,IAAK,QAAO;AAErC,QAAO,KAAK,KAAK,GAAG,MAAO,QAAQ;;;AAIrC,SAAgB,sBAAsB,OAAuB;CAC3D,MAAM,UAAU,WAAW,MAAM;AACjC,KAAI,CAAC,WAAW,CAAC,QAAQ,IAAK,QAAO;CAErC,MAAM,YAAY,QAAQ,MAAM,KAAK,KAAK,GAAG;AAC7C,QAAO,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,CAAC;;;AAI3C,eAAsB,aACpB,OACA,QACA,UAAwB,EAAE,EACG;AAC7B,KAAI;EACF,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO;AAChD,MAAI,CAAC,QAAS,QAAO;EAGrB,MAAM,EAAE,KAAK,KAAK,GAAG,iBAAiB;AAGtC,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC;AAEvD,SAAO,MAAM,cAAc,cAAc,QAAQ,QAAQ;SACnD;AACN,SAAO;;;;AAKX,eAAsB,gBACpB,SACA,QACA,UAAwB,EAAE,EAIzB;AAWD,QAAO;EAAE,aAVW,MAAM,cAAc,SAAS,QAAQ;GACvD,GAAG;GACH,WAAW,QAAQ,aAAa;GACjC,CAAC;EAOoB,cALD,MAAM,cAAc,SAAS,QAAQ;GACxD,GAAG;GACH,WAAW,MAAS;GACrB,CAAC;EAEkC"}

package/dist/middleware/auth.d.mts

@@ -1,20 +0,0 @@
-import { o as Middleware } from "../types-Cb7_2VSt.mjs";
-import "../schema-CVuttFSw.mjs";
-import "../index-DXJd7-2Z.mjs";
-
-//#region src/middleware/auth.d.ts
-interface AuthOptions {
-  secret: string;
-  cookieName?: string;
-  headerName?: string;
-  required?: boolean;
-  roles?: string[];
-  permissions?: string[];
-}
-declare function createAuth(options: AuthOptions): Middleware;
-declare function createOptionalAuth(options: Omit<AuthOptions, "required">): Middleware;
-declare function createRoleAuth(roles: string[], options: Omit<AuthOptions, "roles">): Middleware;
-declare function createPermissionAuth(permissions: string[], options: Omit<AuthOptions, "permissions">): Middleware;
-//#endregion
-export { createAuth, createOptionalAuth, createPermissionAuth, createRoleAuth };
-//# sourceMappingURL=auth.d.mts.map

package/dist/middleware/auth.mjs

@@ -1,98 +0,0 @@
-import { r as init_middleware, t as VafastError } from "../middleware-3ShRJyd1.mjs";
-import "../parsers-ROIZWSGI.mjs";
-import { t as getCookie } from "../handle-BhpqNgGf.mjs";
-import { TokenError, verifyToken } from "../auth/token.mjs";
-
-//#region src/middleware/auth.ts
-init_middleware();
-function createAuth(options) {
-	const { secret, cookieName = "auth", headerName = "authorization", required = true, roles = [], permissions = [] } = options;
-	return async (req, next) => {
-		const token = getCookie(req, cookieName) || req.headers.get(headerName)?.replace("Bearer ", "") || "";
-		if (!token && required) throw new VafastError("缺少认证令牌", {
-			status: 401,
-			type: "unauthorized",
-			expose: true
-		});
-		if (!token && !required) return next();
-		try {
-			const user = await verifyToken(token, secret);
-			if (!user) throw new VafastError("令牌验证失败", {
-				status: 401,
-				type: "unauthorized",
-				expose: true
-			});
-			if (roles.length > 0 && user.role && !roles.includes(user.role)) throw new VafastError("权限不足", {
-				status: 403,
-				type: "forbidden",
-				expose: true
-			});
-			if (permissions.length > 0 && user.permissions) {
-				const userPermissions = Array.isArray(user.permissions) ? user.permissions : [user.permissions];
-				if (!permissions.some((permission) => userPermissions.includes(permission))) throw new VafastError("权限不足", {
-					status: 403,
-					type: "forbidden",
-					expose: true
-				});
-			}
-			req.user = user;
-			req.token = token;
-			return next();
-		} catch (error) {
-			if (error instanceof TokenError) {
-				let status = 401;
-				let message = "认证失败";
-				switch (error.code) {
-					case "EXPIRED_TOKEN":
-						status = 401;
-						message = "令牌已过期";
-						break;
-					case "INVALID_SIGNATURE":
-						status = 401;
-						message = "令牌签名无效";
-						break;
-					case "MALFORMED_TOKEN":
-						status = 400;
-						message = "令牌格式错误";
-						break;
-					default:
-						status = 401;
-						message = "令牌验证失败";
-				}
-				throw new VafastError(message, {
-					status,
-					type: "unauthorized",
-					expose: true
-				});
-			}
-			if (error instanceof VafastError) throw error;
-			throw new VafastError("认证过程中发生错误", {
-				status: 500,
-				type: "internal_error",
-				expose: false
-			});
-		}
-	};
-}
-function createOptionalAuth(options) {
-	return createAuth({
-		...options,
-		required: false
-	});
-}
-function createRoleAuth(roles, options) {
-	return createAuth({
-		...options,
-		roles
-	});
-}
-function createPermissionAuth(permissions, options) {
-	return createAuth({
-		...options,
-		permissions
-	});
-}
-
-//#endregion
-export { createAuth, createOptionalAuth, createPermissionAuth, createRoleAuth };
-//# sourceMappingURL=auth.mjs.map

package/dist/middleware/auth.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.mjs","names":[],"sources":["../../src/middleware/auth.ts"],"sourcesContent":["// src/middleware/auth.ts\n\nimport type { Middleware } from \"../types\";\nimport { VafastError } from \"../middleware\";\nimport { getCookie } from \"../utils/handle\";\nimport { verifyToken, TokenError, type TokenPayload } from \"../auth/token\";\n\ninterface AuthOptions {\n  secret: string;\n  cookieName?: string;\n  headerName?: string;\n  required?: boolean; // 是否必需认证\n  roles?: string[]; // 允许的角色\n  permissions?: string[]; // 允许的权限\n}\n\nexport function createAuth(options: AuthOptions): Middleware {\n  const {\n    secret,\n    cookieName = \"auth\",\n    headerName = \"authorization\",\n    required = true,\n    roles = [],\n    permissions = [],\n  } = options;\n\n  return async (req, next) => {\n    const token =\n      getCookie(req, cookieName) ||\n      req.headers.get(headerName)?.replace(\"Bearer \", \"\") ||\n      \"\";\n\n    if (!token && required) {\n      throw new VafastError(\"缺少认证令牌\", {\n        status: 401,\n        type: \"unauthorized\",\n        expose: true,\n      });\n    }\n\n    if (!token && !required) {\n      return next();\n    }\n\n    try {\n      const user = (await verifyToken(token, secret)) as TokenPayload;\n\n      if (!user) {\n        throw new VafastError(\"令牌验证失败\", {\n          status: 401,\n          type: \"unauthorized\",\n          expose: true,\n        });\n      }\n\n      // 检查角色权限\n      if (roles.length > 0 && user.role && !roles.includes(user.role)) {\n        throw new VafastError(\"权限不足\", {\n          status: 403,\n          type: \"forbidden\",\n          expose: true,\n        });\n      }\n\n      // 检查具体权限\n      if (permissions.length > 0 && user.permissions) {\n        const userPermissions = Array.isArray(user.permissions)\n          ? user.permissions\n          : [user.permissions];\n\n        const hasPermission = permissions.some((permission) =>\n          userPermissions.includes(permission),\n        );\n\n        if (!hasPermission) {\n          throw new VafastError(\"权限不足\", {\n            status: 403,\n            type: \"forbidden\",\n            expose: true,\n          });\n        }\n      }\n\n      // 🪄 在这里扩展 Request 对象\n      (req as any).user = user;\n      (req as any).token = token;\n\n      return next();\n    } catch (error) {\n      if (error instanceof TokenError) {\n        let status = 401;\n        let message = \"认证失败\";\n\n        switch (error.code) {\n          case \"EXPIRED_TOKEN\":\n            status = 401;\n            message = \"令牌已过期\";\n            break;\n          case \"INVALID_SIGNATURE\":\n            status = 401;\n            message = \"令牌签名无效\";\n            break;\n          case \"MALFORMED_TOKEN\":\n            status = 400;\n            message = \"令牌格式错误\";\n            break;\n          default:\n            status = 401;\n            message = \"令牌验证失败\";\n        }\n\n        throw new VafastError(message, {\n          status,\n          type: \"unauthorized\",\n          expose: true,\n        });\n      }\n\n      if (error instanceof VafastError) {\n        throw error;\n      }\n\n      throw new VafastError(\"认证过程中发生错误\", {\n        status: 500,\n        type: \"internal_error\",\n        expose: false,\n      });\n    }\n  };\n}\n\n// 可选认证中间件\nexport function createOptionalAuth(\n  options: Omit<AuthOptions, \"required\">,\n): Middleware {\n  return createAuth({ ...options, required: false });\n}\n\n// 角色验证中间件\nexport function createRoleAuth(\n  roles: string[],\n  options: Omit<AuthOptions, \"roles\">,\n): Middleware {\n  return createAuth({ ...options, roles });\n}\n\n// 权限验证中间件\nexport function createPermissionAuth(\n  permissions: string[],\n  options: Omit<AuthOptions, \"permissions\">,\n): Middleware {\n  return createAuth({ ...options, permissions });\n}\n"],"mappings":";;;;;;iBAG4C;AAa5C,SAAgB,WAAW,SAAkC;CAC3D,MAAM,EACJ,QACA,aAAa,QACb,aAAa,iBACb,WAAW,MACX,QAAQ,EAAE,EACV,cAAc,EAAE,KACd;AAEJ,QAAO,OAAO,KAAK,SAAS;EAC1B,MAAM,QACJ,UAAU,KAAK,WAAW,IAC1B,IAAI,QAAQ,IAAI,WAAW,EAAE,QAAQ,WAAW,GAAG,IACnD;AAEF,MAAI,CAAC,SAAS,SACZ,OAAM,IAAI,YAAY,UAAU;GAC9B,QAAQ;GACR,MAAM;GACN,QAAQ;GACT,CAAC;AAGJ,MAAI,CAAC,SAAS,CAAC,SACb,QAAO,MAAM;AAGf,MAAI;GACF,MAAM,OAAQ,MAAM,YAAY,OAAO,OAAO;AAE9C,OAAI,CAAC,KACH,OAAM,IAAI,YAAY,UAAU;IAC9B,QAAQ;IACR,MAAM;IACN,QAAQ;IACT,CAAC;AAIJ,OAAI,MAAM,SAAS,KAAK,KAAK,QAAQ,CAAC,MAAM,SAAS,KAAK,KAAK,CAC7D,OAAM,IAAI,YAAY,QAAQ;IAC5B,QAAQ;IACR,MAAM;IACN,QAAQ;IACT,CAAC;AAIJ,OAAI,YAAY,SAAS,KAAK,KAAK,aAAa;IAC9C,MAAM,kBAAkB,MAAM,QAAQ,KAAK,YAAY,GACnD,KAAK,cACL,CAAC,KAAK,YAAY;AAMtB,QAAI,CAJkB,YAAY,MAAM,eACtC,gBAAgB,SAAS,WAAW,CACrC,CAGC,OAAM,IAAI,YAAY,QAAQ;KAC5B,QAAQ;KACR,MAAM;KACN,QAAQ;KACT,CAAC;;AAKN,GAAC,IAAY,OAAO;AACpB,GAAC,IAAY,QAAQ;AAErB,UAAO,MAAM;WACN,OAAO;AACd,OAAI,iBAAiB,YAAY;IAC/B,IAAI,SAAS;IACb,IAAI,UAAU;AAEd,YAAQ,MAAM,MAAd;KACE,KAAK;AACH,eAAS;AACT,gBAAU;AACV;KACF,KAAK;AACH,eAAS;AACT,gBAAU;AACV;KACF,KAAK;AACH,eAAS;AACT,gBAAU;AACV;KACF;AACE,eAAS;AACT,gBAAU;;AAGd,UAAM,IAAI,YAAY,SAAS;KAC7B;KACA,MAAM;KACN,QAAQ;KACT,CAAC;;AAGJ,OAAI,iBAAiB,YACnB,OAAM;AAGR,SAAM,IAAI,YAAY,aAAa;IACjC,QAAQ;IACR,MAAM;IACN,QAAQ;IACT,CAAC;;;;AAMR,SAAgB,mBACd,SACY;AACZ,QAAO,WAAW;EAAE,GAAG;EAAS,UAAU;EAAO,CAAC;;AAIpD,SAAgB,eACd,OACA,SACY;AACZ,QAAO,WAAW;EAAE,GAAG;EAAS;EAAO,CAAC;;AAI1C,SAAgB,qBACd,aACA,SACY;AACZ,QAAO,WAAW;EAAE,GAAG;EAAS;EAAa,CAAC"}

package/dist/middleware/authMiddleware.d.mts

@@ -1,9 +0,0 @@
-import { o as Middleware } from "../types-Cb7_2VSt.mjs";
-import "../schema-CVuttFSw.mjs";
-import "../index-DXJd7-2Z.mjs";
-
-//#region src/middleware/authMiddleware.d.ts
-declare const requireAuth: Middleware;
-//#endregion
-export { requireAuth };
-//# sourceMappingURL=authMiddleware.d.mts.map

package/dist/middleware/authMiddleware.mjs

@@ -1,19 +0,0 @@
-import { r as init_middleware, t as VafastError } from "../middleware-3ShRJyd1.mjs";
-import "../parsers-ROIZWSGI.mjs";
-import { t as getCookie } from "../handle-BhpqNgGf.mjs";
-
-//#region src/middleware/authMiddleware.ts
-init_middleware();
-const requireAuth = async (req, next) => {
-	const token = getCookie(req, "auth");
-	if (!token || token !== "valid-token") throw new VafastError("Unauthorized", {
-		status: 401,
-		type: "unauthorized",
-		expose: true
-	});
-	return next();
-};
-
-//#endregion
-export { requireAuth };
-//# sourceMappingURL=authMiddleware.mjs.map

package/dist/middleware/authMiddleware.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"authMiddleware.mjs","names":[],"sources":["../../src/middleware/authMiddleware.ts"],"sourcesContent":["// src/middleware/authMiddleware.ts\nimport type { Middleware } from \"../types\";\nimport { VafastError } from \"../middleware\";\nimport { getCookie } from \"../utils/handle\";\n\nexport const requireAuth: Middleware = async (req, next) => {\n  const token = getCookie(req, \"auth\");\n\n  if (!token || token !== \"valid-token\") {\n    throw new VafastError(\"Unauthorized\", {\n      status: 401,\n      type: \"unauthorized\",\n      expose: true,\n    });\n  }\n\n  return next();\n};\n"],"mappings":";;;;;iBAE4C;AAG5C,MAAa,cAA0B,OAAO,KAAK,SAAS;CAC1D,MAAM,QAAQ,UAAU,KAAK,OAAO;AAEpC,KAAI,CAAC,SAAS,UAAU,cACtB,OAAM,IAAI,YAAY,gBAAgB;EACpC,QAAQ;EACR,MAAM;EACN,QAAQ;EACT,CAAC;AAGJ,QAAO,MAAM"}

package/dist/middleware/cors.d.mts

@@ -1,16 +0,0 @@
-import { o as Middleware } from "../types-Cb7_2VSt.mjs";
-import "../schema-CVuttFSw.mjs";
-import "../index-DXJd7-2Z.mjs";
-
-//#region src/middleware/cors.d.ts
-interface CORSOptions {
-  origin?: string[] | "*";
-  methods?: string[];
-  headers?: string[];
-  credentials?: boolean;
-  maxAge?: number;
-}
-declare function createCORS(options?: CORSOptions): Middleware;
-//#endregion
-export { CORSOptions, createCORS };
-//# sourceMappingURL=cors.d.mts.map

package/dist/middleware/cors.mjs

@@ -1,38 +0,0 @@
-//#region src/middleware/cors.ts
-function createCORS(options = {}) {
-	const { origin = [], methods = [
-		"GET",
-		"POST",
-		"PUT",
-		"DELETE",
-		"OPTIONS"
-	], headers = [], credentials = false, maxAge } = options;
-	return async (req, next) => {
-		const reqOrigin = req.headers.get("Origin") || "";
-		const isAllowedOrigin = origin === "*" || origin.includes(reqOrigin);
-		if (req.method === "OPTIONS") {
-			const resHeaders = new Headers();
-			if (isAllowedOrigin) {
-				resHeaders.set("Access-Control-Allow-Origin", origin === "*" ? "*" : reqOrigin);
-				resHeaders.set("Access-Control-Allow-Methods", methods.join(","));
-				resHeaders.set("Access-Control-Allow-Headers", headers.join(","));
-				if (credentials) resHeaders.set("Access-Control-Allow-Credentials", "true");
-				if (maxAge) resHeaders.set("Access-Control-Max-Age", maxAge.toString());
-			}
-			return new Response(null, {
-				status: 204,
-				headers: resHeaders
-			});
-		}
-		const res = await next();
-		if (isAllowedOrigin) {
-			res.headers.set("Access-Control-Allow-Origin", origin === "*" ? "*" : reqOrigin);
-			if (credentials) res.headers.set("Access-Control-Allow-Credentials", "true");
-		}
-		return res;
-	};
-}
-
-//#endregion
-export { createCORS };
-//# sourceMappingURL=cors.mjs.map

package/dist/middleware/cors.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.mjs","names":[],"sources":["../../src/middleware/cors.ts"],"sourcesContent":["import type { Middleware } from \"../types\";\n\nexport interface CORSOptions {\n  origin?: string[] | \"*\";\n  methods?: string[];\n  headers?: string[];\n  credentials?: boolean;\n  maxAge?: number;\n}\n\nexport function createCORS(options: CORSOptions = {}): Middleware {\n  const {\n    origin = [],\n    methods = [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"OPTIONS\"],\n    headers = [],\n    credentials = false,\n    maxAge,\n  } = options;\n\n  return async (req, next) => {\n    const reqOrigin = req.headers.get(\"Origin\") || \"\";\n\n    // 判断：是否为允许的 Origin？\n    const isAllowedOrigin = origin === \"*\" || origin.includes(reqOrigin);\n\n    // 预检 (OPTIONS) 请求处理\n    if (req.method === \"OPTIONS\") {\n      const resHeaders = new Headers();\n\n      if (isAllowedOrigin) {\n        resHeaders.set(\n          \"Access-Control-Allow-Origin\",\n          origin === \"*\" ? \"*\" : reqOrigin,\n        );\n        resHeaders.set(\"Access-Control-Allow-Methods\", methods.join(\",\"));\n        resHeaders.set(\"Access-Control-Allow-Headers\", headers.join(\",\"));\n        if (credentials)\n          resHeaders.set(\"Access-Control-Allow-Credentials\", \"true\");\n        if (maxAge) resHeaders.set(\"Access-Control-Max-Age\", maxAge.toString());\n      }\n\n      return new Response(null, { status: 204, headers: resHeaders });\n    }\n\n    // 正常请求：在 next 后添加头部\n    const res = await next();\n\n    if (isAllowedOrigin) {\n      res.headers.set(\n        \"Access-Control-Allow-Origin\",\n        origin === \"*\" ? \"*\" : reqOrigin,\n      );\n      if (credentials)\n        res.headers.set(\"Access-Control-Allow-Credentials\", \"true\");\n    }\n\n    return res;\n  };\n}\n"],"mappings":";AAUA,SAAgB,WAAW,UAAuB,EAAE,EAAc;CAChE,MAAM,EACJ,SAAS,EAAE,EACX,UAAU;EAAC;EAAO;EAAQ;EAAO;EAAU;EAAU,EACrD,UAAU,EAAE,EACZ,cAAc,OACd,WACE;AAEJ,QAAO,OAAO,KAAK,SAAS;EAC1B,MAAM,YAAY,IAAI,QAAQ,IAAI,SAAS,IAAI;EAG/C,MAAM,kBAAkB,WAAW,OAAO,OAAO,SAAS,UAAU;AAGpE,MAAI,IAAI,WAAW,WAAW;GAC5B,MAAM,aAAa,IAAI,SAAS;AAEhC,OAAI,iBAAiB;AACnB,eAAW,IACT,+BACA,WAAW,MAAM,MAAM,UACxB;AACD,eAAW,IAAI,gCAAgC,QAAQ,KAAK,IAAI,CAAC;AACjE,eAAW,IAAI,gCAAgC,QAAQ,KAAK,IAAI,CAAC;AACjE,QAAI,YACF,YAAW,IAAI,oCAAoC,OAAO;AAC5D,QAAI,OAAQ,YAAW,IAAI,0BAA0B,OAAO,UAAU,CAAC;;AAGzE,UAAO,IAAI,SAAS,MAAM;IAAE,QAAQ;IAAK,SAAS;IAAY,CAAC;;EAIjE,MAAM,MAAM,MAAM,MAAM;AAExB,MAAI,iBAAiB;AACnB,OAAI,QAAQ,IACV,+BACA,WAAW,MAAM,MAAM,UACxB;AACD,OAAI,YACF,KAAI,QAAQ,IAAI,oCAAoC,OAAO;;AAG/D,SAAO"}

package/dist/middleware/rateLimit.d.mts

@@ -1,14 +0,0 @@
-import { o as Middleware } from "../types-Cb7_2VSt.mjs";
-import "../schema-CVuttFSw.mjs";
-import "../index-DXJd7-2Z.mjs";
-
-//#region src/middleware/rateLimit.d.ts
-interface RateLimitOptions {
-  windowMs?: number;
-  max?: number;
-  keyFn?: (req: Request) => string;
-}
-declare function rateLimit(options?: RateLimitOptions): Middleware;
-//#endregion
-export { rateLimit };
-//# sourceMappingURL=rateLimit.d.mts.map

package/dist/middleware/rateLimit.mjs

@@ -1,34 +0,0 @@
-import { r as init_middleware, t as VafastError } from "../middleware-3ShRJyd1.mjs";
-
-//#region src/middleware/rateLimit.ts
-init_middleware();
-const store = /* @__PURE__ */ new Map();
-function rateLimit(options = {}) {
-	const windowMs = options.windowMs ?? 6e4;
-	const max = options.max ?? 30;
-	const keyFn = options.keyFn ?? getIP;
-	return async (req, next) => {
-		const key = keyFn(req);
-		const now = Date.now();
-		const entry = store.get(key);
-		if (entry && entry.expires > now) {
-			if (entry.count >= max) throw new VafastError("Too many requests", {
-				status: 429,
-				type: "rate_limit",
-				expose: true
-			});
-			entry.count += 1;
-		} else store.set(key, {
-			count: 1,
-			expires: now + windowMs
-		});
-		return next();
-	};
-}
-function getIP(req) {
-	return req.headers.get("cf-connecting-ip") || req.headers.get("x-forwarded-for")?.split(",")[0]?.trim() || "unknown";
-}
-
-//#endregion
-export { rateLimit };
-//# sourceMappingURL=rateLimit.mjs.map

package/dist/middleware/rateLimit.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"rateLimit.mjs","names":[],"sources":["../../src/middleware/rateLimit.ts"],"sourcesContent":["// src/middleware/rateLimit.ts\n\nimport type { Middleware } from \"../types\";\nimport { VafastError } from \"../middleware\";\n\ninterface RateLimitOptions {\n  windowMs?: number; // 限制窗口（毫秒）\n  max?: number; // 最大请求数\n  keyFn?: (req: Request) => string;\n}\n\ntype Entry = {\n  count: number;\n  expires: number;\n};\n\nconst store = new Map<string, Entry>();\n\nexport function rateLimit(options: RateLimitOptions = {}): Middleware {\n  const windowMs = options.windowMs ?? 60_000; // 默认: 1分钟\n  const max = options.max ?? 30;\n  const keyFn = options.keyFn ?? getIP;\n\n  return async (req, next) => {\n    const key = keyFn(req);\n    const now = Date.now();\n\n    const entry = store.get(key);\n    if (entry && entry.expires > now) {\n      if (entry.count >= max) {\n        throw new VafastError(\"Too many requests\", {\n          status: 429,\n          type: \"rate_limit\",\n          expose: true,\n        });\n      }\n      entry.count += 1;\n    } else {\n      store.set(key, { count: 1, expires: now + windowMs });\n    }\n\n    return next();\n  };\n}\n\n// Edge 安全的 IP 获取\nfunction getIP(req: Request): string {\n  return (\n    req.headers.get(\"cf-connecting-ip\") || // Cloudflare\n    req.headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() || // Vercel\n    \"unknown\"\n  );\n}\n"],"mappings":";;;iBAG4C;AAa5C,MAAM,wBAAQ,IAAI,KAAoB;AAEtC,SAAgB,UAAU,UAA4B,EAAE,EAAc;CACpE,MAAM,WAAW,QAAQ,YAAY;CACrC,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAO,OAAO,KAAK,SAAS;EAC1B,MAAM,MAAM,MAAM,IAAI;EACtB,MAAM,MAAM,KAAK,KAAK;EAEtB,MAAM,QAAQ,MAAM,IAAI,IAAI;AAC5B,MAAI,SAAS,MAAM,UAAU,KAAK;AAChC,OAAI,MAAM,SAAS,IACjB,OAAM,IAAI,YAAY,qBAAqB;IACzC,QAAQ;IACR,MAAM;IACN,QAAQ;IACT,CAAC;AAEJ,SAAM,SAAS;QAEf,OAAM,IAAI,KAAK;GAAE,OAAO;GAAG,SAAS,MAAM;GAAU,CAAC;AAGvD,SAAO,MAAM;;;AAKjB,SAAS,MAAM,KAAsB;AACnC,QACE,IAAI,QAAQ,IAAI,mBAAmB,IACnC,IAAI,QAAQ,IAAI,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,IACzD"}

package/dist/middleware-3ShRJyd1.mjs

@@ -1,59 +0,0 @@
-import { t as __esmMin } from "./chunk-67U6L5Jh.mjs";
-import { a as mapResponse, i as json, r as init_response } from "./response-CSKW5hsS.mjs";
-
-//#region src/middleware.ts
-/**
-* 组合类型: 自动注入错误处理器进行中间件组合
-*/
-function composeMiddleware(middleware, finalHandler) {
-	const all = [errorHandler, ...middleware];
-	return function composedHandler(req) {
-		let i = -1;
-		const dispatch = (index) => {
-			if (index <= i) return Promise.reject(/* @__PURE__ */ new Error("next() called multiple times"));
-			i = index;
-			if (index < all.length) {
-				const mw = all[index];
-				return Promise.resolve(mw(req, () => dispatch(index + 1)));
-			}
-			return Promise.resolve(finalHandler(req)).then(mapResponse);
-		};
-		return dispatch(0);
-	};
-}
-var VafastError, errorHandler;
-var init_middleware = __esmMin((() => {
-	init_response();
-	VafastError = class extends Error {
-		status;
-		type;
-		expose;
-		constructor(message, options = {}) {
-			super(message);
-			this.name = "VafastError";
-			this.status = options.status ?? 500;
-			this.type = options.type ?? "internal_error";
-			this.expose = options.expose ?? false;
-			if (options.cause) this.cause = options.cause;
-		}
-	};
-	errorHandler = async (req, next) => {
-		try {
-			return await next();
-		} catch (err) {
-			console.error("未处理的错误:", err);
-			if (err instanceof VafastError) return json({
-				error: err.type,
-				message: err.expose ? err.message : "发生了一个错误"
-			}, err.status);
-			return json({
-				error: "internal_error",
-				message: "出现了一些问题"
-			}, 500);
-		}
-	};
-}));
-
-//#endregion
-export { composeMiddleware as n, init_middleware as r, VafastError as t };
-//# sourceMappingURL=middleware-3ShRJyd1.mjs.map