pub(all) suberror ConfigError {
  InvalidBaseUrl(String)
  InvalidRoot(String)
  InvalidPort(String)
  InvalidTryFiles(String)
  ConflictingBaseUrl(String)
  ConflictingRouting(String)
  InvalidProxy(String)
  InvalidAuth(String)
  InvalidHeader(String)
  InvalidTimeout(String)
  InvalidTls(String)
  InvalidLimits(String)
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) suberror PathError {
  MalformedUri(String)
  OutsideBaseUrl(String)
  TraversalForbidden(String)
  NotFound(String)
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) struct ByteRange {
  start : Int64
  end : Int64
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) enum CachePolicy {
  MaxAge(Int)
  NoCache
  Exact(String)
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) struct Config {
  limits : RuntimeLimits
  root : String
  port : Int
  address : String
  base_url : String
  default_ext : String?
  spa : Bool
  try_files : String?
  gzip : Bool
  brotli : Bool
  force_content_encoding : Bool
  auto_index : Bool
  show_dir : Bool
  show_dotfiles : Bool
  dir_overrides_404 : Bool
  cache_seconds : Int
  cache_control : String?
  weak_etags : Bool
  weak_compare : Bool
  cors : Bool
  cors_headers : String?
  coop : Bool
  coop_header : String?
  pna : Bool
  basic_auth : (String, String)?
  host_whitelist : Array[String]
  custom_headers : Map[String, String]
  robots : Bool
  proxy : String?
  proxy_all : String?
  proxy_options : Map[String, String]
  websocket : Bool
  proxy_config : String?
  cert_file : String?
  key_file : String?
  key_passphrase : String?
  ca_file : String?
  secure : Bool
  handle_error : Bool
  idle_timeout_ms : Int
  mime_types : Map[String, String]
  log_ip : Bool
  silent : Bool
} derive(
@moonbitlang/core/debug.Debug
Debug)

pub(all) struct EntityTag {
  tag : String
  is_weak : Bool
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) enum FallbackMode {
  None
  Spa
  TryFiles(String)
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) enum Method {
  Get
  Head
  Other(String)
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) struct MimeRegistry {
  table : Map[String, String]
}

pub(all) struct ProxyRule {
  pattern : String
  target : String
  path_rewrite : Array[(String, String)]
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) enum RangeResult {
  Satisfiable(ByteRange)
  NotSatisfiable
  NotApplicable
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) struct Request {
  meth : Method
  target : String
  headers : Map[String, String]
}

pub(all) enum ResponseBody {
  Empty
  Bytes(Bytes)
  FileRegion(String, Int64, Int64)
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) struct RuntimeLimits {
  file_workers : Int
  queued_operations : Int
  connections : Int
  body_block_bytes : Int
  body_buffer_bytes : Int
  directory_metadata_bytes : Int
} derive(Eq, 
@moonbitlang/core/debug.Debug
Debug)

pub(all) enum SecurityDecision {
  Proceed
  Unauthorized(Map[String, String], Bytes)
  Forbidden(Map[String, String], Bytes)
  Preflight(Map[String, String])
} derive(
@moonbitlang/core/debug.Debug
Debug)

fn apply_default_ext(path : String, default_ext : String) -> String

fn apply_security_headers(headers : Map[String, String], config : Config, meth : Method) -> Unit

fn base64_decode_string(input : StringView) -> String?

fn check_host_allowed(host_header : String?, allowed_hosts : Array[String]) -> Bool

fn crypto_equals(expected : String, actual : String) -> Bool

fn decode_percent(value : StringView) -> String raise PathError

fn etag_matches(client_raw : String, server_tag : EntityTag, weak_compare : Bool) -> Bool

fn evaluate_security_policies(config : Config, req : Request) -> SecurityDecision

fn extract_extension(path_or_filename : String) -> String

fn extract_hostname(host_value : String) -> String

fn find_header_case_insensitive(headers : Map[String, String], name : String) -> String?

fn format_cache_control(policy : CachePolicy) -> String

fn format_content_range(start : Int64, end : Int64, total : Int64) -> String

fn format_content_range_unsatisfiable(total : Int64) -> String

fn format_dir_redirect(raw_path : String, raw_query : String?) -> String

fn format_http_date(epoch_sec : Int64) -> String

fn has_file_extension(path : String) -> Bool

fn if_none_match_matches(header_val : String, server_tag : EntityTag, weak_compare : Bool) -> Bool

fn is_text_mime(mime : String) -> Bool

fn match_and_strip_base_url(base_url : String, decoded_path : String) -> String?

fn match_glob_path(pattern : String, path : String) -> Bool

fn match_proxy_rule(rule : ProxyRule, path : String) -> (String, String)?

fn normalize_base_url(value : String) -> String raise ConfigError

fn normalize_charset(raw : String) -> String

fn normalize_extension(raw : String) -> String

fn parse_auth_credential(str : String) -> (String, String)?

fn parse_basic_auth_header(header : String) -> (String, String)?

fn parse_http_date(date_str : String) -> Int64?

fn parse_range(value : String, size : Int64) -> ByteRange?

fn parse_range_spec(header_val : String, total : Int64) -> RangeResult

fn parse_types(content : String) -> Map[String, String]

fn resolve_base_url(base_url : String?, base_dir : String?) -> String raise ConfigError

fn resolve_content_type(path : String, registry : MimeRegistry, default_type : String, sample_bytes? : Bytes) -> String

fn resolve_path(root : String, base_url : String, req_target : String) -> Result[String, PathError]

fn should_return_304(if_none_match : String?, if_modified_since : String?, server_mtime_sec : Int64, server_etag : EntityTag, weak_compare : Bool) -> Bool

fn sniff_html_charset(bytes : Bytes) -> String?

fn validate_config(config : Config) -> Unit raise ConfigError

fn validate_proxy_url(url : String) -> Unit raise ConfigError

fn validate_relative_path(path : String) -> Bool

fn validate_root(root : String) -> String raise ConfigError

fn validate_tls(config : Config) -> Unit raise ConfigError

fn validate_try_files_path(path : String) -> String raise ConfigError

fn validate_uri_encoding(target : String) -> Bool

fn verify_basic_auth(header : String?, expected : (String, String)) -> Bool