@catbee/utils 0.0.1 → 0.0.2

package/build/esnext/utils/crypto.utils.js

@@ -1,4 +1,5 @@
-import { createHmac, createHash, randomUUID, } from "crypto";
+import { createHmac, createHash, randomUUID, randomBytes, createCipheriv, createDecipheriv, scrypt, timingSafeEqual, } from "crypto";
+import { promisify } from "util";
 /**
  * Generates an HMAC digest using the specified algorithm and secret key.
  *
@@ -8,9 +9,9 @@ import { createHmac, createHash, randomUUID, } from "crypto";
  * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding ('hex', 'base64', etc).
  * @returns {string} HMAC digest as a string.
  */
-export const hmac = (algorithm, input, secret, encoding = "hex") => {
+export function hmac(algorithm, input, secret, encoding = "hex") {
     return createHmac(algorithm, secret).update(input).digest(encoding);
-};
+}
 /**
  * Generates a hash digest using the specified algorithm.
  *
@@ -19,9 +20,9 @@ export const hmac = (algorithm, input, secret, encoding = "hex") => {
  * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding ('hex', 'base64', etc).
  * @returns {string} Hash digest as a string.
  */
-export const hash = (algorithm, input, encoding = "hex") => {
+export function hash(algorithm, input, encoding = "hex") {
     return createHash(algorithm).update(input).digest(encoding);
-};
+}
 /**
  * Generates an HMAC-SHA256 digest.
  *
@@ -29,9 +30,9 @@ export const hash = (algorithm, input, encoding = "hex") => {
  * @param {string} secret - The secret key.
  * @returns {string} SHA-256 HMAC digest as a string.
  */
-export const sha256Hmac = (input, secret) => {
+export function sha256Hmac(input, secret) {
     return hmac("sha256", input, secret);
-};
+}
 /**
  * Generates a SHA1 hash digest.
  *
@@ -39,9 +40,9 @@ export const sha256Hmac = (input, secret) => {
  * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding.
  * @returns {string} SHA-1 hash as a string.
  */
-export const sha1 = (input, encoding = "hex") => {
+export function sha1(input, encoding = "hex") {
     return hash("sha1", input, encoding);
-};
+}
 /**
  * Generates a SHA256 hash digest.
  *
@@ -49,24 +50,213 @@ export const sha1 = (input, encoding = "hex") => {
  * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding.
  * @returns {string} SHA-256 hash as a string.
  */
-export const sha256 = (input, encoding = "hex") => {
+export function sha256(input, encoding = "hex") {
     return hash("sha256", input, encoding);
-};
+}
 /**
  * Generates an MD5 hash digest.
  *
  * @param {string} input - The string to hash.
  * @returns {string} MD5 hash as a string.
  */
-export const md5 = (input) => {
+export function md5(input) {
     return hash("md5", input);
-};
+}
 /**
  * Generates a cryptographically strong random string by hashing a random UUID with SHA-256.
  *
  * @returns {string} Random string hashed with SHA-256 (hex encoding).
  */
-export const randomString = () => {
+export function randomString() {
     return sha256(randomUUID());
-};
+}
+/**
+ * Generates a secure random buffer of specified byte length.
+ *
+ * @param {number} [byteLength=32] - Number of random bytes to generate.
+ * @returns {Buffer} Buffer containing random bytes.
+ */
+export function generateRandomBytes(byteLength = 32) {
+    return randomBytes(byteLength);
+}
+/**
+ * Generates a secure random string of specified byte length with specified encoding.
+ *
+ * @param {number} [byteLength=32] - Number of random bytes to generate.
+ * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding.
+ * @returns {string} Random string in specified encoding.
+ */
+export function generateRandomBytesAsString(byteLength = 32, encoding = "hex") {
+    return randomBytes(byteLength).toString(encoding);
+}
+/**
+ * Generates a secure API key with a specified format.
+ *
+ * @param {string} [prefix=''] - Optional prefix for the key.
+ * @param {number} [byteLength=24] - Number of random bytes to generate.
+ * @returns {string} Formatted API key.
+ */
+export function generateApiKey(prefix = "", byteLength = 24) {
+    const randomString = generateRandomBytesAsString(byteLength, "base64");
+    const key = randomString
+        .replace(/[+/=]/g, "") // Remove non-URL-safe characters
+        .substring(0, 32); // Limit length
+    return prefix ? `${prefix}_${key}` : key;
+}
+/**
+ * Compares two strings, arrays, or buffers in constant time to prevent timing attacks.
+ *
+ * @param {string | Buffer | Uint8Array} a - First value to compare
+ * @param {string | Buffer | Uint8Array} b - Second value to compare
+ * @returns {boolean} True if values are equal
+ */
+export function safeCompare(a, b) {
+    if (typeof a === "string" && typeof b === "string") {
+        // Convert strings to buffers
+        const bufA = Buffer.from(a);
+        const bufB = Buffer.from(b);
+        // Compare lengths first (not constant time, but prevents timing attack on contents)
+        if (bufA.length !== bufB.length)
+            return false;
+        return timingSafeEqual(bufA, bufB);
+    }
+    else if ((a instanceof Buffer || a instanceof Uint8Array) &&
+        (b instanceof Buffer || b instanceof Uint8Array)) {
+        // Compare lengths first
+        if (a.length !== b.length)
+            return false;
+        return timingSafeEqual(a instanceof Buffer ? a : Buffer.from(a), b instanceof Buffer ? b : Buffer.from(b));
+    }
+    throw new Error("Cannot compare: inputs must be strings, Buffers, or Uint8Arrays");
+}
+// Promisified version of scrypt for key derivation
+const scryptAsync = promisify(scrypt);
+/**
+ * Encrypts data using a symmetric key with secure defaults (AES-256-GCM).
+ *
+ * @param {string | Buffer} data - Data to encrypt
+ * @param {string | Buffer} key - Encryption key or passphrase
+ * @param {EncryptionOptions} [options] - Encryption options
+ * @returns {Promise<EncryptionResult>} Encrypted data with metadata
+ */
+export async function encrypt(data, key, options = {}) {
+    const algorithm = options.algorithm || "aes-256-gcm";
+    const inputEncoding = options.inputEncoding || "utf8";
+    const outputEncoding = options.outputEncoding || "hex";
+    // Generate a random IV
+    const iv = randomBytes(16);
+    // Derive key using scrypt if key is a string (passphrase)
+    const derivedKey = typeof key === "string" ? await scryptAsync(key, iv.slice(0, 8), 32) : key;
+    // Create cipher
+    const cipher = createCipheriv(algorithm, derivedKey, iv);
+    // Encrypt the data
+    let ciphertext;
+    if (typeof data === "string") {
+        ciphertext = cipher.update(data, inputEncoding, outputEncoding);
+        ciphertext += cipher.final(outputEncoding);
+    }
+    else {
+        const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);
+        ciphertext = outputEncoding
+            ? encrypted.toString(outputEncoding)
+            : encrypted;
+    }
+    // Get authentication tag if using GCM mode
+    const authTag = algorithm.includes("gcm")
+        ? cipher.getAuthTag()
+        : undefined;
+    return {
+        ciphertext,
+        iv,
+        authTag,
+        algorithm,
+    };
+}
+/**
+ * Decrypts data that was encrypted with the encrypt function.
+ *
+ * @param {EncryptionResult} encryptedData - The encrypted data and metadata
+ * @param {string | Buffer} key - Decryption key or passphrase
+ * @param {DecryptionOptions} [options] - Decryption options
+ * @returns {Promise<string | Buffer>} Decrypted data
+ */
+export async function decrypt(encryptedData, key, options = {}) {
+    const algorithm = options.algorithm || encryptedData.algorithm || "aes-256-gcm";
+    const inputEncoding = options.inputEncoding || "hex";
+    const outputEncoding = options.outputEncoding || "utf8";
+    // Derive key using scrypt if key is a string (passphrase)
+    const derivedKey = typeof key === "string"
+        ? await scryptAsync(key, encryptedData.iv.slice(0, 8), 32)
+        : key;
+    // Create decipher
+    const decipher = createDecipheriv(algorithm, derivedKey, encryptedData.iv);
+    // Set auth tag if using GCM mode
+    if (encryptedData.authTag && algorithm.includes("gcm")) {
+        decipher.setAuthTag(encryptedData.authTag);
+    }
+    // Decrypt the data
+    let decrypted;
+    if (typeof encryptedData.ciphertext === "string") {
+        decrypted = decipher.update(encryptedData.ciphertext, inputEncoding, outputEncoding);
+        decrypted += decipher.final(outputEncoding);
+    }
+    else {
+        const result = Buffer.concat([
+            decipher.update(encryptedData.ciphertext),
+            decipher.final(),
+        ]);
+        decrypted = outputEncoding ? result.toString(outputEncoding) : result;
+    }
+    return decrypted;
+}
+/**
+ * Creates a signed token with an expiration time and payload.
+ *
+ * @param {object} payload - Data to include in the token
+ * @param {string} secret - Secret key for signing
+ * @param {number} [expiresInSeconds=3600] - Token expiration in seconds
+ * @returns {string} Signed token string
+ */
+export function createSignedToken(payload, secret, expiresInSeconds = 3600) {
+    // Create payload with expiration
+    const tokenPayload = Object.assign(Object.assign({}, payload), { exp: Math.floor(Date.now() / 1000) + expiresInSeconds });
+    // Convert to string
+    const payloadStr = JSON.stringify(tokenPayload);
+    // Base64 encode the payload
+    const base64Payload = Buffer.from(payloadStr).toString("base64url");
+    // Create signature
+    const signature = hmac("sha256", base64Payload, secret, "base64url");
+    // Combine payload and signature
+    return `${base64Payload}.${signature}`;
+}
+/**
+ * Verifies and decodes a signed token.
+ *
+ * @param {string} token - The token to verify
+ * @param {string} secret - Secret key for verification
+ * @returns {object | null} Decoded payload if valid, null if invalid
+ */
+export function verifySignedToken(token, secret) {
+    try {
+        // Split token into parts
+        const [payloadB64, signature] = token.split(".");
+        if (!payloadB64 || !signature)
+            return null;
+        // Verify signature
+        const expectedSignature = hmac("sha256", payloadB64, secret, "base64url");
+        if (!safeCompare(signature, expectedSignature))
+            return null;
+        // Decode payload
+        const payloadStr = Buffer.from(payloadB64, "base64url").toString("utf8");
+        const payload = JSON.parse(payloadStr);
+        // Check expiration
+        if (payload.exp && payload.exp < Math.floor(Date.now() / 1000)) {
+            return null;
+        }
+        return payload;
+    }
+    catch (_a) {
+        return null;
+    }
+}
 //# sourceMappingURL=crypto.utils.js.map

package/build/esnext/utils/crypto.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.utils.js","sourceRoot":"","sources":["../../../src/utils/crypto.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,UAAU,EAEV,UAAU,GACX,MAAM,QAAQ,CAAC;AAEhB;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,SAAiB,EACjB,KAAa,EACb,MAAc,EACd,WAAiC,KAAK,EAC9B,EAAE;IACV,OAAO,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,SAAiB,EACjB,KAAa,EACb,WAAiC,KAAK,EAC9B,EAAE;IACV,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,MAAc,EAAU,EAAE;IAClE,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,KAAa,EACb,WAAiC,KAAK,EAC9B,EAAE;IACV,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,KAAa,EACb,WAAiC,KAAK,EAC9B,EAAE;IACV,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAU,EAAE;IAC3C,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAW,EAAE;IACvC,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC","sourcesContent":["import {\n  createHmac,\n  createHash,\n  BinaryToTextEncoding,\n  randomUUID,\n} from \"crypto\";\n\n/**\n * Generates an HMAC digest using the specified algorithm and secret key.\n *\n * @param {string} algorithm - The hashing algorithm (e.g., 'sha256', 'sha1').\n * @param {string} input - The string to hash.\n * @param {string} secret - The secret key for HMAC.\n * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding ('hex', 'base64', etc).\n * @returns {string} HMAC digest as a string.\n */\nexport const hmac = (\n  algorithm: string,\n  input: string,\n  secret: string,\n  encoding: BinaryToTextEncoding = \"hex\",\n): string => {\n  return createHmac(algorithm, secret).update(input).digest(encoding);\n};\n\n/**\n * Generates a hash digest using the specified algorithm.\n *\n * @param {string} algorithm - The hashing algorithm (e.g., 'sha256', 'md5').\n * @param {string} input - The string to hash.\n * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding ('hex', 'base64', etc).\n * @returns {string} Hash digest as a string.\n */\nexport const hash = (\n  algorithm: string,\n  input: string,\n  encoding: BinaryToTextEncoding = \"hex\",\n): string => {\n  return createHash(algorithm).update(input).digest(encoding);\n};\n\n/**\n * Generates an HMAC-SHA256 digest.\n *\n * @param {string} input - The string to hash.\n * @param {string} secret - The secret key.\n * @returns {string} SHA-256 HMAC digest as a string.\n */\nexport const sha256Hmac = (input: string, secret: string): string => {\n  return hmac(\"sha256\", input, secret);\n};\n\n/**\n * Generates a SHA1 hash digest.\n *\n * @param {string} input - The string to hash.\n * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding.\n * @returns {string} SHA-1 hash as a string.\n */\nexport const sha1 = (\n  input: string,\n  encoding: BinaryToTextEncoding = \"hex\",\n): string => {\n  return hash(\"sha1\", input, encoding);\n};\n\n/**\n * Generates a SHA256 hash digest.\n *\n * @param {string} input - The string to hash.\n * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding.\n * @returns {string} SHA-256 hash as a string.\n */\nexport const sha256 = (\n  input: string,\n  encoding: BinaryToTextEncoding = \"hex\",\n): string => {\n  return hash(\"sha256\", input, encoding);\n};\n\n/**\n * Generates an MD5 hash digest.\n *\n * @param {string} input - The string to hash.\n * @returns {string} MD5 hash as a string.\n */\nexport const md5 = (input: string): string => {\n  return hash(\"md5\", input);\n};\n\n/**\n * Generates a cryptographically strong random string by hashing a random UUID with SHA-256.\n *\n * @returns {string} Random string hashed with SHA-256 (hex encoding).\n */\nexport const randomString = (): string => {\n  return sha256(randomUUID());\n};\n"]}
+{"version":3,"file":"crypto.utils.js","sourceRoot":"","sources":["../../../src/utils/crypto.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,UAAU,EAEV,UAAU,EACV,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,MAAM,EACN,eAAe,GAEhB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAgBjC;;;;;;;;GAQG;AACH,MAAM,UAAU,IAAI,CAClB,SAAiB,EACjB,KAAa,EACb,MAAc,EACd,WAAiC,KAAK;IAEtC,OAAO,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,IAAI,CAClB,SAAiB,EACjB,KAAa,EACb,WAAiC,KAAK;IAEtC,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,MAAc;IACtD,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,IAAI,CAClB,KAAa,EACb,WAAiC,KAAK;IAEtC,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CACpB,KAAa,EACb,WAAiC,KAAK;IAEtC,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,aAAqB,EAAE;IACzD,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,aAAqB,EAAE,EACvB,WAAiC,KAAK;IAEtC,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAiB,EAAE,EACnB,aAAqB,EAAE;IAEvB,MAAM,YAAY,GAAG,2BAA2B,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,YAAY;SACrB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,iCAAiC;SACvD,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;IAEpC,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,CAA+B,EAC/B,CAA+B;IAE/B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnD,6BAA6B;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5B,oFAAoF;QACpF,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE9C,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;SAAM,IACL,CAAC,CAAC,YAAY,MAAM,IAAI,CAAC,YAAY,UAAU,CAAC;QAChD,CAAC,CAAC,YAAY,MAAM,IAAI,CAAC,YAAY,UAAU,CAAC,EAChD,CAAC;QACD,wBAAwB;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAExC,OAAO,eAAe,CACpB,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EACxC,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CACzC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;AACJ,CAAC;AAwCD,mDAAmD;AACnD,MAAM,WAAW,GAAG,SAAS,CAC3B,MAAM,CACP,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAqB,EACrB,GAAoB,EACpB,UAA6B,EAAE;IAE/B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC;IACtD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IAEvD,uBAAuB;IACvB,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAE3B,0DAA0D;IAC1D,MAAM,UAAU,GACd,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAE7E,gBAAgB;IAChB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAEzD,mBAAmB;IACnB,IAAI,UAA2B,CAAC;IAEhC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,UAAU,GAAG,MAAM,CAAC,MAAM,CACxB,IAAI,EACJ,aAAa,EACb,cAAgC,CACjC,CAAC;QACF,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,cAAgC,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACvE,UAAU,GAAG,cAAc;YACzB,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC;YACpC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,2CAA2C;IAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvC,CAAC,CAAE,MAAc,CAAC,UAAU,EAAE;QAC9B,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,UAAU;QACV,EAAE;QACF,OAAO;QACP,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,aAA+B,EAC/B,GAAoB,EACpB,UAA6B,EAAE;IAE/B,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC,SAAS,IAAI,aAAa,CAAC;IAChE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;IACrD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC;IAExD,0DAA0D;IAC1D,MAAM,UAAU,GACd,OAAO,GAAG,KAAK,QAAQ;QACrB,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1D,CAAC,CAAC,GAAG,CAAC;IAEV,kBAAkB;IAClB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;IAE3E,iCAAiC;IACjC,IAAI,aAAa,CAAC,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,QAAgB,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,mBAAmB;IACnB,IAAI,SAA0B,CAAC;IAE/B,IAAI,OAAO,aAAa,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjD,SAAS,GAAG,QAAQ,CAAC,MAAM,CACzB,aAAa,CAAC,UAAU,EACxB,aAA+B,EAC/B,cAAc,CACf,CAAC;QACF,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACzC,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA4B,EAC5B,MAAc,EACd,mBAA2B,IAAI;IAE/B,iCAAiC;IACjC,MAAM,YAAY,mCACb,OAAO,KACV,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,gBAAgB,GACtD,CAAC;IAEF,oBAAoB;IACpB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEhD,4BAA4B;IAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEpE,mBAAmB;IACnB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAErE,gCAAgC;IAChC,OAAO,GAAG,aAAa,IAAI,SAAS,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,MAAc;IAEd,IAAI,CAAC;QACH,yBAAyB;QACzB,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEjD,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE3C,mBAAmB;QACnB,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,iBAAiB,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5D,iBAAiB;QACjB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEvC,mBAAmB;QACnB,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import {\n  createHmac,\n  createHash,\n  BinaryToTextEncoding,\n  randomUUID,\n  randomBytes,\n  createCipheriv,\n  createDecipheriv,\n  scrypt,\n  timingSafeEqual,\n  CipherGCMTypes,\n} from \"crypto\";\nimport { promisify } from \"util\";\n\nexport type BufferEncoding =\n  | \"ascii\"\n  | \"utf8\"\n  | \"utf-8\"\n  | \"utf16le\"\n  | \"utf-16le\"\n  | \"ucs2\"\n  | \"ucs-2\"\n  | \"base64\"\n  | \"base64url\"\n  | \"latin1\"\n  | \"binary\"\n  | \"hex\";\n\n/**\n * Generates an HMAC digest using the specified algorithm and secret key.\n *\n * @param {string} algorithm - The hashing algorithm (e.g., 'sha256', 'sha1').\n * @param {string} input - The string to hash.\n * @param {string} secret - The secret key for HMAC.\n * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding ('hex', 'base64', etc).\n * @returns {string} HMAC digest as a string.\n */\nexport function hmac(\n  algorithm: string,\n  input: string,\n  secret: string,\n  encoding: BinaryToTextEncoding = \"hex\",\n): string {\n  return createHmac(algorithm, secret).update(input).digest(encoding);\n}\n\n/**\n * Generates a hash digest using the specified algorithm.\n *\n * @param {string} algorithm - The hashing algorithm (e.g., 'sha256', 'md5').\n * @param {string} input - The string to hash.\n * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding ('hex', 'base64', etc).\n * @returns {string} Hash digest as a string.\n */\nexport function hash(\n  algorithm: string,\n  input: string,\n  encoding: BinaryToTextEncoding = \"hex\",\n): string {\n  return createHash(algorithm).update(input).digest(encoding);\n}\n\n/**\n * Generates an HMAC-SHA256 digest.\n *\n * @param {string} input - The string to hash.\n * @param {string} secret - The secret key.\n * @returns {string} SHA-256 HMAC digest as a string.\n */\nexport function sha256Hmac(input: string, secret: string): string {\n  return hmac(\"sha256\", input, secret);\n}\n\n/**\n * Generates a SHA1 hash digest.\n *\n * @param {string} input - The string to hash.\n * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding.\n * @returns {string} SHA-1 hash as a string.\n */\nexport function sha1(\n  input: string,\n  encoding: BinaryToTextEncoding = \"hex\",\n): string {\n  return hash(\"sha1\", input, encoding);\n}\n\n/**\n * Generates a SHA256 hash digest.\n *\n * @param {string} input - The string to hash.\n * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding.\n * @returns {string} SHA-256 hash as a string.\n */\nexport function sha256(\n  input: string,\n  encoding: BinaryToTextEncoding = \"hex\",\n): string {\n  return hash(\"sha256\", input, encoding);\n}\n\n/**\n * Generates an MD5 hash digest.\n *\n * @param {string} input - The string to hash.\n * @returns {string} MD5 hash as a string.\n */\nexport function md5(input: string): string {\n  return hash(\"md5\", input);\n}\n\n/**\n * Generates a cryptographically strong random string by hashing a random UUID with SHA-256.\n *\n * @returns {string} Random string hashed with SHA-256 (hex encoding).\n */\nexport function randomString(): string {\n  return sha256(randomUUID());\n}\n\n/**\n * Generates a secure random buffer of specified byte length.\n *\n * @param {number} [byteLength=32] - Number of random bytes to generate.\n * @returns {Buffer} Buffer containing random bytes.\n */\nexport function generateRandomBytes(byteLength: number = 32): Buffer {\n  return randomBytes(byteLength);\n}\n\n/**\n * Generates a secure random string of specified byte length with specified encoding.\n *\n * @param {number} [byteLength=32] - Number of random bytes to generate.\n * @param {BinaryToTextEncoding} [encoding='hex'] - Output encoding.\n * @returns {string} Random string in specified encoding.\n */\nexport function generateRandomBytesAsString(\n  byteLength: number = 32,\n  encoding: BinaryToTextEncoding = \"hex\",\n): string {\n  return randomBytes(byteLength).toString(encoding);\n}\n\n/**\n * Generates a secure API key with a specified format.\n *\n * @param {string} [prefix=''] - Optional prefix for the key.\n * @param {number} [byteLength=24] - Number of random bytes to generate.\n * @returns {string} Formatted API key.\n */\nexport function generateApiKey(\n  prefix: string = \"\",\n  byteLength: number = 24,\n): string {\n  const randomString = generateRandomBytesAsString(byteLength, \"base64\");\n  const key = randomString\n    .replace(/[+/=]/g, \"\") // Remove non-URL-safe characters\n    .substring(0, 32); // Limit length\n\n  return prefix ? `${prefix}_${key}` : key;\n}\n\n/**\n * Compares two strings, arrays, or buffers in constant time to prevent timing attacks.\n *\n * @param {string | Buffer | Uint8Array} a - First value to compare\n * @param {string | Buffer | Uint8Array} b - Second value to compare\n * @returns {boolean} True if values are equal\n */\nexport function safeCompare(\n  a: string | Buffer | Uint8Array,\n  b: string | Buffer | Uint8Array,\n): boolean {\n  if (typeof a === \"string\" && typeof b === \"string\") {\n    // Convert strings to buffers\n    const bufA = Buffer.from(a);\n    const bufB = Buffer.from(b);\n\n    // Compare lengths first (not constant time, but prevents timing attack on contents)\n    if (bufA.length !== bufB.length) return false;\n\n    return timingSafeEqual(bufA, bufB);\n  } else if (\n    (a instanceof Buffer || a instanceof Uint8Array) &&\n    (b instanceof Buffer || b instanceof Uint8Array)\n  ) {\n    // Compare lengths first\n    if (a.length !== b.length) return false;\n\n    return timingSafeEqual(\n      a instanceof Buffer ? a : Buffer.from(a),\n      b instanceof Buffer ? b : Buffer.from(b),\n    );\n  }\n\n  throw new Error(\n    \"Cannot compare: inputs must be strings, Buffers, or Uint8Arrays\",\n  );\n}\n\n/**\n * Interface for encryption options\n */\nexport interface EncryptionOptions {\n  /** Algorithm to use (default: aes-256-gcm) */\n  algorithm?: CipherGCMTypes;\n  /** Input encoding for plaintext if string (default: utf8) */\n  inputEncoding?: BufferEncoding;\n  /** Output encoding for ciphertext (default: hex) */\n  outputEncoding?: BinaryToTextEncoding;\n}\n\n/**\n * Interface for decryption options\n */\nexport interface DecryptionOptions {\n  /** Algorithm to use (default: aes-256-gcm) */\n  algorithm?: CipherGCMTypes;\n  /** Input encoding for ciphertext if string (default: hex) */\n  inputEncoding?: BinaryToTextEncoding;\n  /** Output encoding for plaintext (default: utf8) */\n  outputEncoding?: BufferEncoding;\n}\n\n/**\n * Result of encryption operation including all data needed for decryption\n */\nexport interface EncryptionResult {\n  /** Encrypted data (string or Buffer based on options) */\n  ciphertext: string | Buffer;\n  /** Initialization vector */\n  iv: Buffer;\n  /** Authentication tag (for GCM mode) */\n  authTag?: Buffer;\n  /** Algorithm used */\n  algorithm: string;\n}\n\n// Promisified version of scrypt for key derivation\nconst scryptAsync = promisify<string | Buffer, string | Buffer, number, Buffer>(\n  scrypt,\n);\n\n/**\n * Encrypts data using a symmetric key with secure defaults (AES-256-GCM).\n *\n * @param {string | Buffer} data - Data to encrypt\n * @param {string | Buffer} key - Encryption key or passphrase\n * @param {EncryptionOptions} [options] - Encryption options\n * @returns {Promise<EncryptionResult>} Encrypted data with metadata\n */\nexport async function encrypt(\n  data: string | Buffer,\n  key: string | Buffer,\n  options: EncryptionOptions = {},\n): Promise<EncryptionResult> {\n  const algorithm = options.algorithm || \"aes-256-gcm\";\n  const inputEncoding = options.inputEncoding || \"utf8\";\n  const outputEncoding = options.outputEncoding || \"hex\";\n\n  // Generate a random IV\n  const iv = randomBytes(16);\n\n  // Derive key using scrypt if key is a string (passphrase)\n  const derivedKey =\n    typeof key === \"string\" ? await scryptAsync(key, iv.slice(0, 8), 32) : key;\n\n  // Create cipher\n  const cipher = createCipheriv(algorithm, derivedKey, iv);\n\n  // Encrypt the data\n  let ciphertext: string | Buffer;\n\n  if (typeof data === \"string\") {\n    ciphertext = cipher.update(\n      data,\n      inputEncoding,\n      outputEncoding as BufferEncoding,\n    );\n    ciphertext += cipher.final(outputEncoding as BufferEncoding);\n  } else {\n    const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);\n    ciphertext = outputEncoding\n      ? encrypted.toString(outputEncoding)\n      : encrypted;\n  }\n\n  // Get authentication tag if using GCM mode\n  const authTag = algorithm.includes(\"gcm\")\n    ? (cipher as any).getAuthTag()\n    : undefined;\n\n  return {\n    ciphertext,\n    iv,\n    authTag,\n    algorithm,\n  };\n}\n\n/**\n * Decrypts data that was encrypted with the encrypt function.\n *\n * @param {EncryptionResult} encryptedData - The encrypted data and metadata\n * @param {string | Buffer} key - Decryption key or passphrase\n * @param {DecryptionOptions} [options] - Decryption options\n * @returns {Promise<string | Buffer>} Decrypted data\n */\nexport async function decrypt(\n  encryptedData: EncryptionResult,\n  key: string | Buffer,\n  options: DecryptionOptions = {},\n): Promise<string | Buffer> {\n  const algorithm =\n    options.algorithm || encryptedData.algorithm || \"aes-256-gcm\";\n  const inputEncoding = options.inputEncoding || \"hex\";\n  const outputEncoding = options.outputEncoding || \"utf8\";\n\n  // Derive key using scrypt if key is a string (passphrase)\n  const derivedKey =\n    typeof key === \"string\"\n      ? await scryptAsync(key, encryptedData.iv.slice(0, 8), 32)\n      : key;\n\n  // Create decipher\n  const decipher = createDecipheriv(algorithm, derivedKey, encryptedData.iv);\n\n  // Set auth tag if using GCM mode\n  if (encryptedData.authTag && algorithm.includes(\"gcm\")) {\n    (decipher as any).setAuthTag(encryptedData.authTag);\n  }\n\n  // Decrypt the data\n  let decrypted: string | Buffer;\n\n  if (typeof encryptedData.ciphertext === \"string\") {\n    decrypted = decipher.update(\n      encryptedData.ciphertext,\n      inputEncoding as BufferEncoding,\n      outputEncoding,\n    );\n    decrypted += decipher.final(outputEncoding);\n  } else {\n    const result = Buffer.concat([\n      decipher.update(encryptedData.ciphertext),\n      decipher.final(),\n    ]);\n    decrypted = outputEncoding ? result.toString(outputEncoding) : result;\n  }\n\n  return decrypted;\n}\n\n/**\n * Creates a signed token with an expiration time and payload.\n *\n * @param {object} payload - Data to include in the token\n * @param {string} secret - Secret key for signing\n * @param {number} [expiresInSeconds=3600] - Token expiration in seconds\n * @returns {string} Signed token string\n */\nexport function createSignedToken(\n  payload: Record<string, any>,\n  secret: string,\n  expiresInSeconds: number = 3600,\n): string {\n  // Create payload with expiration\n  const tokenPayload = {\n    ...payload,\n    exp: Math.floor(Date.now() / 1000) + expiresInSeconds,\n  };\n\n  // Convert to string\n  const payloadStr = JSON.stringify(tokenPayload);\n\n  // Base64 encode the payload\n  const base64Payload = Buffer.from(payloadStr).toString(\"base64url\");\n\n  // Create signature\n  const signature = hmac(\"sha256\", base64Payload, secret, \"base64url\");\n\n  // Combine payload and signature\n  return `${base64Payload}.${signature}`;\n}\n\n/**\n * Verifies and decodes a signed token.\n *\n * @param {string} token - The token to verify\n * @param {string} secret - Secret key for verification\n * @returns {object | null} Decoded payload if valid, null if invalid\n */\nexport function verifySignedToken(\n  token: string,\n  secret: string,\n): Record<string, any> | null {\n  try {\n    // Split token into parts\n    const [payloadB64, signature] = token.split(\".\");\n\n    if (!payloadB64 || !signature) return null;\n\n    // Verify signature\n    const expectedSignature = hmac(\"sha256\", payloadB64, secret, \"base64url\");\n    if (!safeCompare(signature, expectedSignature)) return null;\n\n    // Decode payload\n    const payloadStr = Buffer.from(payloadB64, \"base64url\").toString(\"utf8\");\n    const payload = JSON.parse(payloadStr);\n\n    // Check expiration\n    if (payload.exp && payload.exp < Math.floor(Date.now() / 1000)) {\n      return null;\n    }\n\n    return payload;\n  } catch {\n    return null;\n  }\n}\n"]}

package/build/esnext/utils/decorators.utils.d.ts

@@ -0,0 +1,40 @@
+import "reflect-metadata";
+export interface Request {
+    query: any;
+    params: any;
+    body?: any;
+    [key: string]: any;
+}
+export interface Response {
+    json: (body: any) => void;
+    headersSent: boolean;
+    [key: string]: any;
+}
+export type NextFunction = (err?: any) => void;
+export type RequestHandler = (req: Request, res: Response, next: NextFunction) => any;
+export interface Router {
+    [method: string]: (path: string, ...handlers: RequestHandler[]) => void;
+}
+export type HttpMethod = "get" | "post" | "put" | "patch" | "delete" | "options" | "head" | "trace" | "connect";
+export declare const Get: (path: string) => MethodDecorator;
+export declare const Post: (path: string) => MethodDecorator;
+export declare const Put: (path: string) => MethodDecorator;
+export declare const Patch: (path: string) => MethodDecorator;
+export declare const Delete: (path: string) => MethodDecorator;
+export declare const Options: (path: string) => MethodDecorator;
+export declare const Head: (path: string) => MethodDecorator;
+export declare const Trace: (path: string) => MethodDecorator;
+export declare const Connect: (path: string) => MethodDecorator;
+export declare function Controller(basePath: string): ClassDecorator;
+export declare function Use(...middlewares: RequestHandler[]): MethodDecorator;
+export declare const Query: (paramKey?: string) => ParameterDecorator;
+export declare const Param: (paramKey?: string) => ParameterDecorator;
+export declare const Body: (paramKey?: string) => ParameterDecorator;
+export declare const Req: (paramKey?: string) => ParameterDecorator;
+export declare const Res: (paramKey?: string) => ParameterDecorator;
+export declare function HttpCode(status: number): MethodDecorator;
+export declare function Header(name: string, value: string): MethodDecorator;
+export declare function Before(fn: Function): MethodDecorator;
+export declare function After(fn: Function): MethodDecorator;
+export declare function registerControllers(router: Router, controllers: any[]): void;
+//# sourceMappingURL=decorators.utils.d.ts.map

package/build/esnext/utils/decorators.utils.js

@@ -0,0 +1,155 @@
+/* eslint-disable @typescript-eslint/no-unused-vars */
+import "reflect-metadata";
+// --- End sample Express interfaces ---
+const ROUTES_KEY = Symbol("routes");
+const MIDDLEWARE_KEY = Symbol("middlewares");
+const PARAMS_KEY = Symbol("params");
+// ---- Route Decorators ----
+function createRouteDecorator(method) {
+    return (path) => {
+        return (target, propertyKey, descriptor) => {
+            const routes = Reflect.getMetadata(ROUTES_KEY, target.constructor) || [];
+            routes.push({
+                path,
+                method,
+                handlerName: propertyKey,
+            });
+            Reflect.defineMetadata(ROUTES_KEY, routes, target.constructor);
+        };
+    };
+}
+export const Get = createRouteDecorator("get");
+export const Post = createRouteDecorator("post");
+export const Put = createRouteDecorator("put");
+export const Patch = createRouteDecorator("patch");
+export const Delete = createRouteDecorator("delete");
+export const Options = createRouteDecorator("options");
+export const Head = createRouteDecorator("head");
+export const Trace = createRouteDecorator("trace");
+export const Connect = createRouteDecorator("connect");
+// ---- Controller Decorator ----
+export function Controller(basePath) {
+    return (target) => {
+        Reflect.defineMetadata("basePath", basePath, target);
+    };
+}
+// ---- Middleware Decorator ----
+export function Use(...middlewares) {
+    return (target, propertyKey, descriptor) => {
+        const existing = Reflect.getMetadata(MIDDLEWARE_KEY, target, propertyKey) || [];
+        Reflect.defineMetadata(MIDDLEWARE_KEY, [...existing, ...middlewares], target, propertyKey);
+    };
+}
+// ---- Parameter Decorators ----
+function createParamDecorator(type, key) {
+    return (paramKey) => {
+        return (target, propertyKey, parameterIndex) => {
+            const params = Reflect.getMetadata(PARAMS_KEY, target, propertyKey) || [];
+            // Ensure parameters are ordered by index
+            params.push({ index: parameterIndex, type, key: paramKey || key });
+            params.sort((a, b) => a.index - b.index);
+            Reflect.defineMetadata(PARAMS_KEY, params, target, propertyKey);
+        };
+    };
+}
+export const Query = createParamDecorator("query");
+export const Param = createParamDecorator("param");
+export const Body = createParamDecorator("body");
+export const Req = createParamDecorator("req");
+export const Res = createParamDecorator("res");
+// Custom HTTP status code decorator
+const HTTP_CODE_KEY = Symbol("httpCode");
+export function HttpCode(status) {
+    return (target, propertyKey, descriptor) => {
+        Reflect.defineMetadata(HTTP_CODE_KEY, status, target, propertyKey);
+    };
+}
+// Custom header decorator
+const HEADER_KEY = Symbol("headers");
+export function Header(name, value) {
+    return (target, propertyKey, descriptor) => {
+        const headers = Reflect.getMetadata(HEADER_KEY, target, propertyKey) || {};
+        headers[name] = value;
+        Reflect.defineMetadata(HEADER_KEY, headers, target, propertyKey);
+    };
+}
+// Before/After hooks (not Express middleware, but can be used for logging, etc.)
+const BEFORE_KEY = Symbol("before");
+const AFTER_KEY = Symbol("after");
+export function Before(fn) {
+    return (target, propertyKey, descriptor) => {
+        const hooks = Reflect.getMetadata(BEFORE_KEY, target, propertyKey) || [];
+        hooks.push(fn);
+        Reflect.defineMetadata(BEFORE_KEY, hooks, target, propertyKey);
+    };
+}
+export function After(fn) {
+    return (target, propertyKey, descriptor) => {
+        const hooks = Reflect.getMetadata(AFTER_KEY, target, propertyKey) || [];
+        hooks.push(fn);
+        Reflect.defineMetadata(AFTER_KEY, hooks, target, propertyKey);
+    };
+}
+// ---- Register Controllers ----
+export function registerControllers(router, controllers) {
+    controllers.forEach((ControllerClass) => {
+        const instance = new ControllerClass();
+        const basePath = Reflect.getMetadata("basePath", ControllerClass) || "";
+        const routes = Reflect.getMetadata(ROUTES_KEY, ControllerClass) || [];
+        routes.forEach(({ path, method, handlerName }) => {
+            const middlewares = Reflect.getMetadata(MIDDLEWARE_KEY, instance, handlerName) || [];
+            const params = Reflect.getMetadata(PARAMS_KEY, instance, handlerName) || [];
+            const httpCode = Reflect.getMetadata(HTTP_CODE_KEY, instance, handlerName);
+            const headers = Reflect.getMetadata(HEADER_KEY, instance, handlerName) || {};
+            const beforeHooks = Reflect.getMetadata(BEFORE_KEY, instance, handlerName) || [];
+            const afterHooks = Reflect.getMetadata(AFTER_KEY, instance, handlerName) || [];
+            const handler = async (req, res, next) => {
+                var _a, _b;
+                try {
+                    for (const fn of beforeHooks)
+                        await fn(req, res);
+                    const args = [];
+                    if (params.length) {
+                        params.forEach(({ index, type, key }) => {
+                            var _a;
+                            switch (type) {
+                                case "query":
+                                    args[index] = key ? req.query[key] : req.query;
+                                    break;
+                                case "param":
+                                    args[index] = key ? req.params[key] : req.params;
+                                    break;
+                                case "body":
+                                    args[index] = key ? (_a = req.body) === null || _a === void 0 ? void 0 : _a[key] : req.body;
+                                    break;
+                                case "req":
+                                    args[index] = req;
+                                    break;
+                                case "res":
+                                    args[index] = res;
+                                    break;
+                            }
+                        });
+                    }
+                    const result = instance[handlerName](...args);
+                    // Support both sync and async handlers
+                    const awaited = result instanceof Promise ? await result : result;
+                    if (!res.headersSent && typeof awaited !== "undefined") {
+                        if (httpCode)
+                            (_a = res.status) === null || _a === void 0 ? void 0 : _a.call(res, httpCode);
+                        for (const [k, v] of Object.entries(headers))
+                            (_b = res.set) === null || _b === void 0 ? void 0 : _b.call(res, k, v);
+                        res.json(awaited);
+                    }
+                    for (const fn of afterHooks)
+                        await fn(req, res, awaited);
+                }
+                catch (err) {
+                    next(err);
+                }
+            };
+            router[method](basePath + path, ...middlewares, handler);
+        });
+    });
+}
+//# sourceMappingURL=decorators.utils.js.map

package/build/esnext/utils/decorators.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decorators.utils.js","sourceRoot":"","sources":["../../../src/utils/decorators.utils.ts"],"names":[],"mappings":"AAAA,sDAAsD;AAEtD,OAAO,kBAAkB,CAAC;AAuB1B,wCAAwC;AAExC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;AACpC,MAAM,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;AAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;AAyBpC,6BAA6B;AAC7B,SAAS,oBAAoB,CAAC,MAAkB;IAC9C,OAAO,CAAC,IAAY,EAAmB,EAAE;QACvC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE;YACzC,MAAM,MAAM,GACV,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,MAAM;gBACN,WAAW,EAAE,WAAqB;aACnC,CAAC,CAAC;YACH,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACjE,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;AAEvD,iCAAiC;AACjC,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC,CAAC;AACJ,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,GAAG,CAAC,GAAG,WAA6B;IAClD,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE;QACzC,MAAM,QAAQ,GACZ,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,WAAqB,CAAC,IAAI,EAAE,CAAC;QAC3E,OAAO,CAAC,cAAc,CACpB,cAAc,EACd,CAAC,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,EAC7B,MAAM,EACN,WAAqB,CACtB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,iCAAiC;AACjC,SAAS,oBAAoB,CAAC,IAA6B,EAAE,GAAY;IACvE,OAAO,CAAC,QAAiB,EAAsB,EAAE;QAC/C,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE;YAC7C,MAAM,MAAM,GACV,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,WAAqB,CAAC,IAAI,EAAE,CAAC;YACvE,yCAAyC;YACzC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAqB,CAAC,CAAC;QAC5E,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAE/C,oCAAoC;AACpC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;AACzC,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE;QACzC,OAAO,CAAC,cAAc,CACpB,aAAa,EACb,MAAM,EACN,MAAM,EACN,WAAqB,CACtB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;AACrC,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,KAAa;IAChD,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE;QACzC,MAAM,OAAO,GACX,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,WAAqB,CAAC,IAAI,EAAE,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACtB,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,WAAqB,CAAC,CAAC;IAC7E,CAAC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;AACpC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;AAClC,MAAM,UAAU,MAAM,CAAC,EAAY;IACjC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE;QACzC,MAAM,KAAK,GACT,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,WAAqB,CAAC,IAAI,EAAE,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,WAAqB,CAAC,CAAC;IAC3E,CAAC,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,KAAK,CAAC,EAAY;IAChC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE;QACzC,MAAM,KAAK,GACT,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,WAAqB,CAAC,IAAI,EAAE,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,WAAqB,CAAC,CAAC;IAC1E,CAAC,CAAC;AACJ,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,WAAkB;IACpE,WAAW,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,QAAQ,GACZ,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,MAAM,GACV,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC;QAEzD,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;YAC/C,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;YACnE,MAAM,MAAM,GACV,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;YAE/D,MAAM,QAAQ,GAAuB,OAAO,CAAC,WAAW,CACtD,aAAa,EACb,QAAQ,EACR,WAAW,CACZ,CAAC;YACF,MAAM,OAAO,GACX,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;YAC/D,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;YAC/D,MAAM,UAAU,GACd,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;YAE9D,MAAM,OAAO,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;;gBACvD,IAAI,CAAC;oBACH,KAAK,MAAM,EAAE,IAAI,WAAW;wBAAE,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACjD,MAAM,IAAI,GAAU,EAAE,CAAC;oBACvB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;wBAClB,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;;4BACtC,QAAQ,IAAI,EAAE,CAAC;gCACb,KAAK,OAAO;oCACV,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;oCAC/C,MAAM;gCACR,KAAK,OAAO;oCACV,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;oCACjD,MAAM;gCACR,KAAK,MAAM;oCACT,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,MAAA,GAAG,CAAC,IAAI,0CAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;oCAC/C,MAAM;gCACR,KAAK,KAAK;oCACR,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;oCAClB,MAAM;gCACR,KAAK,KAAK;oCACR,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;oCAClB,MAAM;4BACV,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,MAAM,GAAI,QAAgB,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACvD,uCAAuC;oBACvC,MAAM,OAAO,GAAG,MAAM,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;oBAClE,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;wBACvD,IAAI,QAAQ;4BAAE,MAAA,GAAG,CAAC,MAAM,oDAAG,QAAQ,CAAC,CAAC;wBACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;4BAAE,MAAA,GAAG,CAAC,GAAG,oDAAG,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC9D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACpB,CAAC;oBACD,KAAK,MAAM,EAAE,IAAI,UAAU;wBAAE,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC3D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YAED,MAAc,CAAC,MAAM,CAAC,CAAC,QAAQ,GAAG,IAAI,EAAE,GAAG,WAAW,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/* eslint-disable @typescript-eslint/no-unused-vars */\n\nimport \"reflect-metadata\";\n\n// --- Sample Express interfaces for type safety ---\nexport interface Request {\n  query: any;\n  params: any;\n  body?: any;\n  [key: string]: any;\n}\nexport interface Response {\n  json: (body: any) => void;\n  headersSent: boolean;\n  [key: string]: any;\n}\nexport type NextFunction = (err?: any) => void;\nexport type RequestHandler = (\n  req: Request,\n  res: Response,\n  next: NextFunction,\n) => any;\nexport interface Router {\n  [method: string]: (path: string, ...handlers: RequestHandler[]) => void;\n}\n// --- End sample Express interfaces ---\n\nconst ROUTES_KEY = Symbol(\"routes\");\nconst MIDDLEWARE_KEY = Symbol(\"middlewares\");\nconst PARAMS_KEY = Symbol(\"params\");\n\nexport type HttpMethod =\n  | \"get\"\n  | \"post\"\n  | \"put\"\n  | \"patch\"\n  | \"delete\"\n  | \"options\"\n  | \"head\"\n  | \"trace\"\n  | \"connect\";\n\ninterface RouteDefinition {\n  path: string;\n  method: HttpMethod;\n  handlerName: string;\n}\n\ninterface ParamDefinition {\n  index: number;\n  type: \"query\" | \"param\" | \"body\" | \"req\" | \"res\";\n  key?: string;\n}\n\n// ---- Route Decorators ----\nfunction createRouteDecorator(method: HttpMethod) {\n  return (path: string): MethodDecorator => {\n    return (target, propertyKey, descriptor) => {\n      const routes: RouteDefinition[] =\n        Reflect.getMetadata(ROUTES_KEY, target.constructor) || [];\n      routes.push({\n        path,\n        method,\n        handlerName: propertyKey as string,\n      });\n      Reflect.defineMetadata(ROUTES_KEY, routes, target.constructor);\n    };\n  };\n}\n\nexport const Get = createRouteDecorator(\"get\");\nexport const Post = createRouteDecorator(\"post\");\nexport const Put = createRouteDecorator(\"put\");\nexport const Patch = createRouteDecorator(\"patch\");\nexport const Delete = createRouteDecorator(\"delete\");\nexport const Options = createRouteDecorator(\"options\");\nexport const Head = createRouteDecorator(\"head\");\nexport const Trace = createRouteDecorator(\"trace\");\nexport const Connect = createRouteDecorator(\"connect\");\n\n// ---- Controller Decorator ----\nexport function Controller(basePath: string): ClassDecorator {\n  return (target) => {\n    Reflect.defineMetadata(\"basePath\", basePath, target);\n  };\n}\n\n// ---- Middleware Decorator ----\nexport function Use(...middlewares: RequestHandler[]): MethodDecorator {\n  return (target, propertyKey, descriptor) => {\n    const existing: RequestHandler[] =\n      Reflect.getMetadata(MIDDLEWARE_KEY, target, propertyKey as string) || [];\n    Reflect.defineMetadata(\n      MIDDLEWARE_KEY,\n      [...existing, ...middlewares],\n      target,\n      propertyKey as string,\n    );\n  };\n}\n\n// ---- Parameter Decorators ----\nfunction createParamDecorator(type: ParamDefinition[\"type\"], key?: string) {\n  return (paramKey?: string): ParameterDecorator => {\n    return (target, propertyKey, parameterIndex) => {\n      const params: ParamDefinition[] =\n        Reflect.getMetadata(PARAMS_KEY, target, propertyKey as string) || [];\n      // Ensure parameters are ordered by index\n      params.push({ index: parameterIndex, type, key: paramKey || key });\n      params.sort((a, b) => a.index - b.index);\n      Reflect.defineMetadata(PARAMS_KEY, params, target, propertyKey as string);\n    };\n  };\n}\n\nexport const Query = createParamDecorator(\"query\");\nexport const Param = createParamDecorator(\"param\");\nexport const Body = createParamDecorator(\"body\");\nexport const Req = createParamDecorator(\"req\");\nexport const Res = createParamDecorator(\"res\");\n\n// Custom HTTP status code decorator\nconst HTTP_CODE_KEY = Symbol(\"httpCode\");\nexport function HttpCode(status: number): MethodDecorator {\n  return (target, propertyKey, descriptor) => {\n    Reflect.defineMetadata(\n      HTTP_CODE_KEY,\n      status,\n      target,\n      propertyKey as string,\n    );\n  };\n}\n\n// Custom header decorator\nconst HEADER_KEY = Symbol(\"headers\");\nexport function Header(name: string, value: string): MethodDecorator {\n  return (target, propertyKey, descriptor) => {\n    const headers: Record<string, string> =\n      Reflect.getMetadata(HEADER_KEY, target, propertyKey as string) || {};\n    headers[name] = value;\n    Reflect.defineMetadata(HEADER_KEY, headers, target, propertyKey as string);\n  };\n}\n\n// Before/After hooks (not Express middleware, but can be used for logging, etc.)\nconst BEFORE_KEY = Symbol(\"before\");\nconst AFTER_KEY = Symbol(\"after\");\nexport function Before(fn: Function): MethodDecorator {\n  return (target, propertyKey, descriptor) => {\n    const hooks: Function[] =\n      Reflect.getMetadata(BEFORE_KEY, target, propertyKey as string) || [];\n    hooks.push(fn);\n    Reflect.defineMetadata(BEFORE_KEY, hooks, target, propertyKey as string);\n  };\n}\nexport function After(fn: Function): MethodDecorator {\n  return (target, propertyKey, descriptor) => {\n    const hooks: Function[] =\n      Reflect.getMetadata(AFTER_KEY, target, propertyKey as string) || [];\n    hooks.push(fn);\n    Reflect.defineMetadata(AFTER_KEY, hooks, target, propertyKey as string);\n  };\n}\n\n// ---- Register Controllers ----\nexport function registerControllers(router: Router, controllers: any[]) {\n  controllers.forEach((ControllerClass) => {\n    const instance = new ControllerClass();\n    const basePath: string =\n      Reflect.getMetadata(\"basePath\", ControllerClass) || \"\";\n    const routes: RouteDefinition[] =\n      Reflect.getMetadata(ROUTES_KEY, ControllerClass) || [];\n\n    routes.forEach(({ path, method, handlerName }) => {\n      const middlewares: RequestHandler[] =\n        Reflect.getMetadata(MIDDLEWARE_KEY, instance, handlerName) || [];\n      const params: ParamDefinition[] =\n        Reflect.getMetadata(PARAMS_KEY, instance, handlerName) || [];\n\n      const httpCode: number | undefined = Reflect.getMetadata(\n        HTTP_CODE_KEY,\n        instance,\n        handlerName,\n      );\n      const headers: Record<string, string> =\n        Reflect.getMetadata(HEADER_KEY, instance, handlerName) || {};\n      const beforeHooks: Function[] =\n        Reflect.getMetadata(BEFORE_KEY, instance, handlerName) || [];\n      const afterHooks: Function[] =\n        Reflect.getMetadata(AFTER_KEY, instance, handlerName) || [];\n\n      const handler: RequestHandler = async (req, res, next) => {\n        try {\n          for (const fn of beforeHooks) await fn(req, res);\n          const args: any[] = [];\n          if (params.length) {\n            params.forEach(({ index, type, key }) => {\n              switch (type) {\n                case \"query\":\n                  args[index] = key ? req.query[key] : req.query;\n                  break;\n                case \"param\":\n                  args[index] = key ? req.params[key] : req.params;\n                  break;\n                case \"body\":\n                  args[index] = key ? req.body?.[key] : req.body;\n                  break;\n                case \"req\":\n                  args[index] = req;\n                  break;\n                case \"res\":\n                  args[index] = res;\n                  break;\n              }\n            });\n          }\n          const result = (instance as any)[handlerName](...args);\n          // Support both sync and async handlers\n          const awaited = result instanceof Promise ? await result : result;\n          if (!res.headersSent && typeof awaited !== \"undefined\") {\n            if (httpCode) res.status?.(httpCode);\n            for (const [k, v] of Object.entries(headers)) res.set?.(k, v);\n            res.json(awaited);\n          }\n          for (const fn of afterHooks) await fn(req, res, awaited);\n        } catch (err) {\n          next(err);\n        }\n      };\n\n      (router as any)[method](basePath + path, ...middlewares, handler);\n    });\n  });\n}\n"]}