@cleverbrush/server 4.0.0 → 4.2.0

package/README.md

@@ -124,6 +124,36 @@ const CreateUser = endpoint
     .operationId('createUser');
 ```
 
+### Cache Tags
+
+Tag-based cache invalidation. Tags declared on endpoints flow to the
+[`cacheTags` middleware](/client/cache-tags) for automatic HTTP caching and
+invalidation on mutating requests.
+
+```ts
+const ListTodos = endpoint
+    .get('/api/todos')
+    .query(TodoListQuerySchema)
+    .cacheTag('todo-list', p => ({ page: p.query.page, limit: p.query.limit }))
+    .returns(array(TodoSchema));
+
+const UpdateTodo = endpoint
+    .patch('/api/todos/:id')
+    .body(UpdateTodoBody)
+    .clearsCacheTag('todo-list')               // clears the collection cache
+    .clearsCacheTag('todo', p => ({ id: p.params.id }))  // clears specific entity
+    .returns(TodoSchema);
+```
+
+- **`.cacheTag(name)`** — declares the endpoint's data belongs to a cache
+  group. Use on GET endpoints.
+- **`.clearsCacheTag(name)`** — declares that this mutation clears matching
+  cache entries on success. Use on POST / PUT / PATCH / DELETE.
+- **`.cacheTag(name, p => ({ ... }))`** — property-based tag; each selected
+  property becomes part of the cache key (different pages → different entries).
+- **Immutability** — both methods return a new builder; the original is
+  unchanged.
+
 ## Registering and Handling Endpoints
 
 ```ts
@@ -155,6 +185,48 @@ await server.listen(3000);
 | `ActionResult.stream(readable, contentType)` | 200 | Pipes a `Readable` |
 | `ActionResult.status(status)` | any | Bare status, no body |
 
+## File Upload
+
+Accept file uploads via `multipart/form-data` by chaining `.upload()` on an endpoint:
+
+```ts
+import { endpoint } from '@cleverbrush/server';
+import { object, string } from '@cleverbrush/schema';
+
+const UploadAvatar = endpoint
+    .post('/api/avatar')
+    .upload({ maxFileSize: 2 * 1024 * 1024, allowedMimeTypes: ['image/*'] })
+    .body(object({ description: string().optional() }))
+    .authorize(UserPrincipal);
+
+const handler: Handler<typeof UploadAvatar> = async ({ body, files }) => {
+    const avatar = files['avatar'];
+    // avatar: FilePart { filename, mimeType, buffer, size }
+    return ActionResult.created({ name: avatar.filename });
+};
+```
+
+The `files` object on the handler context contains one `FilePart` entry per uploaded file field. Non-file form fields are validated against the body schema and available via `body`.
+
+### Options
+
+| Option | Type | Default | Description |
+|--------|------|---------|-------------|
+| `maxFileSize` | `number` | 10 MB | Maximum file size per file in bytes |
+| `allowedMimeTypes` | `string[]` | all | MIME type allowlist (supports `image/*` glob) |
+| `maxFileCount` | `number` | 10 | Maximum number of files per request |
+
+### FilePart type
+
+```ts
+interface FilePart {
+    readonly filename: string;
+    readonly mimeType: string;
+    readonly buffer: Buffer;
+    readonly size: number;
+}
+```
+
 ## Middleware
 
 ```ts

package/dist/CacheTag.d.ts

@@ -0,0 +1,76 @@
+import { type ObjectSchemaBuilder, type SchemaBuilder } from '@cleverbrush/schema';
+/**
+ * An accessor that can extract a property value from a structured
+ * request root.  Wraps a {@link PropertyDescriptor}'s `getValue`
+ * closure so the middleware layer does not need to know about schemas.
+ */
+export interface CacheTagPropertyAccessor {
+    getValue(root: {
+        params: Record<string, unknown>;
+        body: unknown;
+        query: Record<string, unknown>;
+        headers: Record<string, string>;
+    }): {
+        value?: unknown;
+        success: boolean;
+    };
+}
+/**
+ * A serialisable cache-tag definition stored on endpoint metadata.
+ *
+ * `properties` maps human-readable key names (used as label segments
+ * in the final cache key) to accessors that resolve the actual value
+ * from call-time request data.
+ */
+export interface CacheTagDefinition {
+    readonly name: string;
+    readonly properties: Readonly<Record<string, CacheTagPropertyAccessor>>;
+}
+/**
+ * Builds a synthetic `object({ params, body, query, headers })` schema
+ * from the endpoint's schema definitions and returns its
+ * `PropertyDescriptorTree` so callers can write type-safe selectors like:
+ *
+ * ```ts
+ * endpoint.cacheTag('todo', p => ({
+ *     id: p.query.id,
+ *     fromBodyId: p.body.id
+ * }))
+ * ```
+ *
+ * Only non-null schemas are included in the synthetic schema.
+ */
+export declare function createCacheTagTree(schemas: {
+    paramsSchema?: SchemaBuilder<any, any, any, any, any> | null;
+    bodySchema?: SchemaBuilder<any, any, any, any, any> | null;
+    querySchema?: ObjectSchemaBuilder<any, any, any, any, any, any, any> | null;
+    headerSchema?: ObjectSchemaBuilder<any, any, any, any, any, any, any> | null;
+}): any;
+/**
+ * Serialises the result of a cache-tag selector callback into a
+ * {@link CacheTagDefinition} that can be stored on endpoint metadata
+ * and forwarded to the client middleware.
+ *
+ * Each value in `descriptors` must be a {@link PropertyDescriptor} —
+ * its `getValue` closure is wrapped in a {@link CacheTagPropertyAccessor}.
+ *
+ * @throws If any value is not a valid property descriptor.
+ */
+export declare function serializeTag(name: string, descriptors: Record<string, unknown>): CacheTagDefinition;
+/**
+ * Computes a deterministic cache key from a tag definition and live
+ * request data.
+ *
+ * - Simple tags (no properties) produce just the tag name.
+ * - Tags with properties produce `name:key1=val1,key2=val2` where
+ *   keys are sorted alphabetically for determinism.
+ *
+ * Properties whose `getValue` returns `success: false` are skipped
+ * (their value is not included in the key).
+ */
+export declare function computeCacheKey(tag: CacheTagDefinition, root: {
+    params: Record<string, unknown>;
+    body: unknown;
+    query: Record<string, unknown>;
+    headers: Record<string, string>;
+}): string;

package/dist/Endpoint.d.ts

@@ -1,13 +1,15 @@
 import type { InferType, ObjectSchemaBuilder, ParseStringSchemaBuilder, PropertyDescriptorTree, SchemaBuilder } from '@cleverbrush/schema';
+import { SYMBOL_SCHEMA_PROPERTY_DESCRIPTOR } from '@cleverbrush/schema';
 import type { ActionResult, ContentResult, FileResult, JsonResult, NoContentResult, RedirectResult, StatusCodeResult, StreamResult } from './ActionResult.js';
+import type { CacheTagDefinition } from './CacheTag.js';
 import type { RequestContext } from './RequestContext.js';
 import { type SubscriptionBuilder, type SubscriptionHandlerEntry } from './Subscription.js';
-import type { Middleware } from './types.js';
+import type { FilePart, Middleware, RejectedFile, UploadOptions } from './types.js';
 type Simplify<T> = {
     [K in keyof T]: T[K];
 } & {};
 type HasKeys<T> = keyof T extends never ? false : true;
-type ActionContextParts<TParams, TBody, TQuery, THeaders, TPrincipal> = {
+type ActionContextParts<TParams, TBody, TQuery, THeaders, TPrincipal, TUpload extends boolean> = {
     context: RequestContext;
 } & (HasKeys<TParams> extends true ? {
     params: TParams;
@@ -19,14 +21,17 @@ type ActionContextParts<TParams, TBody, TQuery, THeaders, TPrincipal> = {
     headers: THeaders;
 } : {}) & (TPrincipal extends undefined ? {} : {
     principal: TPrincipal;
-});
+}) & (TUpload extends true ? {
+    files: Record<string, FilePart>;
+    rejectedFiles?: RejectedFile[];
+} : {});
 /**
  * The fully-typed argument object passed to endpoint handlers.
  *
  * The shape is inferred from the `EndpointBuilder` chain — only the keys
  * actually configured (body, query, headers, params, principal) are present.
  */
-export type ActionContext<E> = E extends EndpointBuilder<infer TParams, infer TBody, infer TQuery, infer THeaders, any, infer TPrincipal, any, any, any> ? Simplify<ActionContextParts<TParams, TBody, TQuery, THeaders, TPrincipal>> : never;
+export type ActionContext<E> = E extends EndpointBuilder<infer TParams, infer TBody, infer TQuery, infer THeaders, any, infer TPrincipal, any, any, any, infer TUpload> ? Simplify<ActionContextParts<TParams, TBody, TQuery, THeaders, TPrincipal, TUpload>> : never;
 type InferServices<T> = {
     [K in keyof T]: T[K] extends SchemaBuilder<any, any, any, any, any> ? InferType<T[K]> : never;
 };
@@ -34,13 +39,13 @@ type InferServices<T> = {
  * Extracts the injected service schemas map from an `EndpointBuilder` type.
  * Used internally by the `Handler` type to derive the `services` argument.
  */
-export type ServiceSchemas<E> = E extends EndpointBuilder<any, any, any, any, infer TServices, any, any, any, any> ? TServices : {};
-type ResponseType<E> = E extends EndpointBuilder<any, any, any, any, any, any, any, infer TResponse, any> ? TResponse extends SchemaBuilder<any, any, any, any, any> ? InferType<TResponse> : TResponse : any;
+export type ServiceSchemas<E> = E extends EndpointBuilder<any, any, any, any, infer TServices, any, any, any, any, any> ? TServices : {};
+type ResponseType<E> = E extends EndpointBuilder<any, any, any, any, any, any, any, infer TResponse, any, any> ? TResponse extends SchemaBuilder<any, any, any, any, any> ? InferType<TResponse> : TResponse : any;
 /**
  * Extracts the `TResponses` map from an `EndpointBuilder` type.
  * `TResponses` is a `Record<number, BodyType>` inferred from `.responses()`.
  */
-export type ResponsesOf<E> = E extends EndpointBuilder<any, any, any, any, any, any, any, any, infer TResponses> ? TResponses : never;
+export type ResponsesOf<E> = E extends EndpointBuilder<any, any, any, any, any, any, any, any, infer TResponses, any> ? TResponses : never;
 type HasResponses<E> = keyof ResponsesOf<E> extends never ? false : true;
 /**
  * The union of permitted return values for a handler whose endpoint
@@ -64,7 +69,7 @@ export type AllowedResponseReturn<TResponses extends Record<number, any>> = {
  */
 type HandlerReturn<E> = HasResponses<E> extends true ? AllowedResponseReturn<ResponsesOf<E>> : ResponseType<E> | ActionResult;
 export type Handler<E> = HasKeys<ServiceSchemas<E>> extends true ? (arg: ActionContext<E>, services: Simplify<InferServices<ServiceSchemas<E>>>) => HandlerReturn<E> | Promise<HandlerReturn<E>> : (arg: ActionContext<E>) => HandlerReturn<E> | Promise<HandlerReturn<E>>;
-type AnyEndpoint = EndpointBuilder<any, any, any, any, any, any, any, any, any>;
+type AnyEndpoint = EndpointBuilder<any, any, any, any, any, any, any, any, any, any>;
 type AnySubscriptionBuilder = SubscriptionBuilder<any, any, any, any, any, any, any, any>;
 /**
  * A single handler entry in a {@link HandlerMap}.
@@ -298,6 +303,17 @@ export interface EndpointMetadata {
      * OpenAPI Operation Object.
      */
     readonly callbacks: Record<string, CallbackDefinition> | null;
+    /**
+     * When set, the endpoint accepts `multipart/form-data` uploads.
+     * The configuration controls max file size, allowed MIME types, etc.
+     * @see `EndpointBuilder.upload()`
+     */
+    readonly fileUpload: UploadOptions | null;
+    /**
+     * Cache tags declared via `.clearsCacheTag()`, providing tag-based cache
+     * key computation for the client middleware.
+     */
+    readonly cacheTags: readonly CacheTagDefinition[];
 }
 /**
  * Immutable, fluent builder for HTTP endpoint definitions.
@@ -324,7 +340,37 @@ export interface EndpointMetadata {
 type InferResponsesMap<T extends Record<number, SchemaBuilder<any, any, any, any, any> | null>> = {
     [K in keyof T]: T[K] extends SchemaBuilder<any, any, any, any, any> ? InferType<T[K]> : null;
 };
-export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {}, THeaders = {}, TServices = {}, TPrincipal = undefined, TRoles extends string = string, TResponse = any, TResponses extends Record<number, any> = {}> {
+/**
+ * A leaf node in a cache-tag property tree — mirrors the shape of the
+ * actual runtime {@link PropertyDescriptor} so the compiler accepts
+ * values selected by the consumer.
+ */
+interface CacheTagPropertyLeaf {
+    readonly [SYMBOL_SCHEMA_PROPERTY_DESCRIPTOR]: {
+        readonly getValue: (obj: Record<string, unknown>) => {
+            readonly value?: unknown;
+            readonly success: boolean;
+        };
+    };
+}
+/** Recursively builds a typed property tree from an inferred object shape. */
+type CacheTagPropertyTree<T> = CacheTagPropertyLeaf & (T extends Record<string, unknown> ? {
+    readonly [K in keyof T]-?: CacheTagPropertyTree<T[K]>;
+} : unknown);
+/**
+ * The typed tree passed to the `.clearsCacheTag(name, selector)` callback.
+ *
+ * `p.params`, `p.query`, and `p.headers` provide IDE completion for
+ * each schema's property names, while `p.body` resolves through the
+ * body schema's `InferType`.
+ */
+type CacheTagSelector<TParams, TBody, TQuery, THeaders> = {
+    readonly params: [keyof TParams] extends [never] ? Record<string, never> : TParams extends Record<string, unknown> ? CacheTagPropertyTree<TParams> : Record<string, never>;
+    readonly body: TBody extends undefined ? undefined : TBody extends SchemaBuilder<any, any, any, any, any> ? CacheTagPropertyTree<InferType<TBody>> : Record<string, never>;
+    readonly query: [keyof TQuery] extends [never] ? Record<string, never> : TQuery extends Record<string, unknown> ? CacheTagPropertyTree<TQuery> : Record<string, never>;
+    readonly headers: [keyof THeaders] extends [never] ? Record<string, never> : THeaders extends Record<string, unknown> ? CacheTagPropertyTree<THeaders> : Record<string, never>;
+};
+export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {}, THeaders = {}, TServices = {}, TPrincipal = undefined, TRoles extends string = string, TResponse = any, TResponses extends Record<number, any> = {}, TUpload extends boolean = false> {
     #private;
     constructor(method: string, basePath: string, pathTemplate: RoutePath, bodySchema: SchemaBuilder<any, any, any, any, any> | null, querySchema: ObjectSchemaBuilder<any, any, any, any, any, any, any> | null, headerSchema: ObjectSchemaBuilder<any, any, any, any, any, any, any> | null, serviceSchemas?: Record<string, SchemaBuilder<any, any, any, any, any>> | null, authRoles?: readonly string[] | null, summary?: string | null, description?: string | null, tags?: readonly string[], operationId?: string | null, deprecated?: boolean, responseSchema?: SchemaBuilder<any, any, any, any, any> | null, responsesSchemas?: Record<number, SchemaBuilder<any, any, any, any, any> | null> | null, example?: unknown | null, examples?: Record<string, {
         summary?: string;
@@ -338,15 +384,15 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
     }> | null, responseHeaderSchema?: ObjectSchemaBuilder<any, any, any, any, any, any, any> | null, externalDocs?: {
         url: string;
         description?: string;
-    } | null, links?: Record<string, LinkDefinition> | null, callbacks?: Record<string, CallbackDefinition> | null);
+    } | null, links?: Record<string, LinkDefinition> | null, callbacks?: Record<string, CallbackDefinition> | null, fileUpload?: UploadOptions | null, cacheTags?: readonly CacheTagDefinition[]);
     /** Define the request body schema. Validation failures return 422 Problem Details. */
-    body<TSchema extends SchemaBuilder<any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TSchema, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    body<TSchema extends SchemaBuilder<any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TSchema, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /** Define the query string schema (must be an object schema). Validation failures return 422. */
-    query<TSchema extends ObjectSchemaBuilder<any, any, any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TBody, InferType<TSchema>, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    query<TSchema extends ObjectSchemaBuilder<any, any, any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TBody, InferType<TSchema>, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /** Define an expected request headers schema (must be an object schema). */
-    headers<TSchema extends ObjectSchemaBuilder<any, any, any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TBody, TQuery, InferType<TSchema>, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    headers<TSchema extends ObjectSchemaBuilder<any, any, any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TBody, TQuery, InferType<TSchema>, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /** Declare DI services to be resolved per-request and passed as the second handler argument. */
-    inject<TSchemas extends Record<string, SchemaBuilder<any, any, any, any, any>>>(schemas: TSchemas): EndpointBuilder<TParams, TBody, TQuery, THeaders, TSchemas, TPrincipal, TRoles, TResponse, TResponses>;
+    inject<TSchemas extends Record<string, SchemaBuilder<any, any, any, any, any>>>(schemas: TSchemas): EndpointBuilder<TParams, TBody, TQuery, THeaders, TSchemas, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /**
      * Mark this endpoint as requiring authorization.
      *
@@ -356,8 +402,16 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      *
      * If no roles are specified, any authenticated user is allowed.
      */
-    authorize<TSchema extends SchemaBuilder<any, any, any, any, any>>(principalSchema: TSchema, ...roles: TRoles[]): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, InferType<TSchema>, TRoles, TResponse, TResponses>;
-    authorize(...roles: TRoles[]): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, unknown, TRoles, TResponse, TResponses>;
+    authorize<TSchema extends SchemaBuilder<any, any, any, any, any>>(principalSchema: TSchema, ...roles: TRoles[]): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, InferType<TSchema>, TRoles, TResponse, TResponses, TUpload>;
+    authorize(...roles: TRoles[]): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, unknown, TRoles, TResponse, TResponses, TUpload>;
+    /**
+     * Mark this endpoint as public — no authentication required.
+     *
+     * Calling `.public()` sets `authRoles` to `null`, overriding any
+     * previously set authorization requirements (from `.authorize()` or
+     * an inherited scoped factory).
+     */
+    public(): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /**
      * Declare the response type for OpenAPI spec generation.
      *
@@ -365,8 +419,8 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      * - `returns<T>()` — generic type only, no runtime schema
      * - `returns(schema)` — provides a schema for spec generation and type inference
      */
-    returns<T>(): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, T, TResponses>;
-    returns<TSchema extends SchemaBuilder<any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TSchema, TResponses>;
+    returns<T>(): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, T, TResponses, TUpload>;
+    returns<TSchema extends SchemaBuilder<any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TSchema, TResponses, TUpload>;
     /**
      * Declare per-status-code response schemas for OpenAPI generation and
      * handler return-type enforcement.
@@ -389,17 +443,17 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      * };
      * ```
      */
-    responses<const T extends Record<number, SchemaBuilder<any, any, any, any, any> | null>>(map: T): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, InferResponsesMap<T>>;
+    responses<const T extends Record<number, SchemaBuilder<any, any, any, any, any> | null>>(map: T): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, InferResponsesMap<T>, TUpload>;
     /** Short, human-readable summary for OpenAPI operation objects. */
-    summary(text: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    summary(text: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /** Longer description for OpenAPI operation objects. Supports Markdown. */
-    description(text: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    description(text: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /** OpenAPI tags grouping this operation in generated documentation. */
-    tags(...tags: string[]): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    tags(...tags: string[]): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /** A unique, stable identifier for this operation in OpenAPI spec. */
-    operationId(id: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    operationId(id: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /** Mark this endpoint as deprecated in OpenAPI spec output. */
-    deprecated(): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    deprecated(): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /**
      * Provide a single example value for the request body.
      *
@@ -408,7 +462,7 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      *
      * @param value - An example request body value.
      */
-    example(value: TBody): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    example(value: TBody): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /**
      * Provide named examples for the request body.
      *
@@ -421,7 +475,7 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
         summary?: string;
         description?: string;
         value: TBody;
-    }>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    }>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /**
      * Declare that this endpoint produces a binary file response.
      *
@@ -431,7 +485,33 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      * @param contentType - MIME type (default: `'application/octet-stream'`).
      * @param description - Optional response description for the spec.
      */
-    producesFile(contentType?: string, description?: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    producesFile(contentType?: string, description?: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
+    /**
+     * Mark this endpoint as accepting `multipart/form-data` file uploads.
+     *
+     * When set, the server parses the request body with a streaming multipart
+     * parser instead of the default JSON deserializer. File fields are made
+     * available to the handler via `arg.files` (a `Record<string, FilePart>`),
+     * while non-file form fields are validated against the body schema and
+     * available via `arg.body`.
+     *
+     * @param options - Upload configuration (max file size, allowed MIME types, etc.).
+     *
+     * @example
+     * ```ts
+     * const UploadAvatar = endpoint
+     *     .post('/api/avatar')
+     *     .upload({ maxFileSize: 2 * 1024 * 1024, allowedMimeTypes: ['image/*'] })
+     *     .authorize(PrincipalSchema)
+     *     .responses({ 200: AvatarSchema });
+     *
+     * const handler: Handler<typeof UploadAvatar> = async ({ files }) => {
+     *     const avatar = files['avatar'];
+     *     // avatar: { filename, mimeType, buffer, size }
+     * };
+     * ```
+     */
+    upload(options?: UploadOptions): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, true>;
     /**
      * The full path for this endpoint, combining `basePath` and `pathTemplate`.
      *
@@ -465,7 +545,7 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      */
     produces(contentTypes: Record<string, {
         schema?: SchemaBuilder<any, any, any, any, any>;
-    }>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    }>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /**
      * Declare response headers emitted by this endpoint.
      *
@@ -484,7 +564,7 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      *   }))
      * ```
      */
-    responseHeaders<TSchema extends ObjectSchemaBuilder<any, any, any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    responseHeaders<TSchema extends ObjectSchemaBuilder<any, any, any, any, any, any, any>>(schema: TSchema): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /**
      * Link external documentation to this operation.
      *
@@ -493,7 +573,7 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      * @param url - The URL to the external documentation.
      * @param description - Optional short description of the external docs.
      */
-    externalDocs(url: string, description?: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    externalDocs(url: string, description?: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /**
      * Declare response links for OpenAPI spec generation.
      *
@@ -514,7 +594,7 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      *   })
      * ```
      */
-    links(defs: Record<string, LinkDefinition<TResponse>>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    links(defs: Record<string, LinkDefinition<TResponse>>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
     /**
      * Declare callbacks for OpenAPI spec generation.
      *
@@ -537,7 +617,51 @@ export declare class EndpointBuilder<TParams = {}, TBody = undefined, TQuery = {
      *   })
      * ```
      */
-    callbacks(defs: Record<string, CallbackDefinition<TBody>>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    callbacks(defs: Record<string, CallbackDefinition<TBody>>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses, TUpload>;
+    /**
+     * Declare a cache group for this endpoint.
+     *
+     * Use on GET / query endpoints to group responses into a named cache.
+     * The client-side {@code cacheTags} middleware caches responses keyed
+     * by this tag and flushes matching entries when a mutation calls
+     * {@link clearsCacheTag}.
+     *
+     * @overload Simple tag (no properties — single cache entry).
+     * @overload Tag with property descriptors for fine-grained keys.
+     *
+     * @example
+     * ```ts
+     * // GET — responses cached under "todo" group, keyed by id
+     * endpoint.get('/api/todos/:id')
+     *     .cacheTag('todo', p => ({
+     *         id: p.params.id
+     *     }))
+     * ```
+     */
+    cacheTag(name: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    cacheTag(name: string, selector: (tree: CacheTagSelector<TParams, TBody, TQuery, THeaders>) => Record<string, unknown>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    /**
+     * Declare which cache groups are cleared when this mutation succeeds.
+     *
+     * Use on POST / PUT / PATCH / DELETE endpoints. When the mutation
+     * completes, the {@code cacheTags} client middleware invalidates all
+     * cache entries matching the declared tag names (prefix match).
+     *
+     * @overload Simple tag (clears all entries prefixed with the name).
+     * @overload Tag with property descriptors for targeted invalidation.
+     *
+     * @example
+     * ```ts
+     * // PATCH — clears "todo-list" and "todo:id=42" on success
+     * endpoint.patch('/api/todos/:id')
+     *     .clearsCacheTag('todo-list')
+     *     .clearsCacheTag('todo', p => ({
+     *         id: p.params.id
+     *     }))
+     * ```
+     */
+    clearsCacheTag(name: string): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
+    clearsCacheTag(name: string, selector: (tree: CacheTagSelector<TParams, TBody, TQuery, THeaders>) => Record<string, unknown>): EndpointBuilder<TParams, TBody, TQuery, THeaders, TServices, TPrincipal, TRoles, TResponse, TResponses>;
 }
 /**
  * Optional OpenAPI metadata fields accepted by `createEndpoint` / `createEndpoints`.
@@ -557,6 +681,14 @@ type ScopedEndpointFactoryMethods<TPrincipal, TRoles extends string = string> =
     delete<TParams = {}>(pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, TPrincipal, TRoles, any, {}>;
     head<TParams = {}>(pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, TPrincipal, TRoles, any, {}>;
     options<TParams = {}>(pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, TPrincipal, TRoles, any, {}>;
+    post<TParams = {}>(pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams extends undefined ? {} : TParams, undefined, {}, {}, {}, TPrincipal, TRoles, any, {}>;
+    put<TParams = {}>(pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams extends undefined ? {} : TParams, undefined, {}, {}, {}, TPrincipal, TRoles, any, {}>;
+    patch<TParams = {}>(pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams extends undefined ? {} : TParams, undefined, {}, {}, {}, TPrincipal, TRoles, any, {}>;
+    delete<TParams = {}>(pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams extends undefined ? {} : TParams, undefined, {}, {}, {}, TPrincipal, TRoles, any, {}>;
+    head<TParams = {}>(pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams extends undefined ? {} : TParams, undefined, {}, {}, {}, TPrincipal, TRoles, any, {}>;
+    options<TParams = {}>(pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams extends undefined ? {} : TParams, undefined, {}, {}, {}, TPrincipal, TRoles, any, {}>;
+    /** Returns factory methods where all endpoints are public (no auth). */
+    public(): ScopedEndpointFactoryMethods<TPrincipal, TRoles>;
 };
 export type ScopedEndpointFactory<TRoles extends string = string> = ScopedEndpointFactoryMethods<undefined, TRoles> & {
     /**
@@ -568,15 +700,17 @@ export type ScopedEndpointFactory<TRoles extends string = string> = ScopedEndpoi
      */
     authorize<TSchema extends SchemaBuilder<any, any, any, any, any>>(principalSchema: TSchema, ...roles: TRoles[]): ScopedEndpointFactoryMethods<InferType<TSchema>, TRoles>;
     authorize(...roles: TRoles[]): ScopedEndpointFactoryMethods<unknown, TRoles>;
+    /** Returns factory methods where all endpoints are public (no auth). */
+    public(): ScopedEndpointFactoryMethods<TRoles>;
 };
 type EndpointFactory<TRoles extends string = string> = {
-    get<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, undefined, TRoles, any, {}>;
-    post<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, undefined, TRoles, any, {}>;
-    put<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, undefined, TRoles, any, {}>;
-    patch<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, undefined, TRoles, any, {}>;
-    delete<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, undefined, TRoles, any, {}>;
-    head<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, undefined, TRoles, any, {}>;
-    options<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, undefined, TRoles, any, {}>;
+    get<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, any, TRoles, any, {}>;
+    post<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, any, TRoles, any, {}>;
+    put<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, any, TRoles, any, {}>;
+    patch<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, any, TRoles, any, {}>;
+    delete<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, any, TRoles, any, {}>;
+    head<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, any, TRoles, any, {}>;
+    options<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): EndpointBuilder<TParams, undefined, {}, {}, {}, any, TRoles, any, {}>;
     resource(basePath: string): ScopedEndpointFactory<TRoles>;
     subscription<TParams = {}>(basePath: string, pathTemplate?: ParseStringSchemaBuilder<TParams, any, any, any, any>): SubscriptionBuilder<TParams, {}, {}, {}, undefined, TRoles>;
 };

package/dist/Server.d.ts

@@ -46,6 +46,7 @@ export interface AuthorizationConfig {
  */
 export declare class ServerBuilder {
     #private;
+    constructor(options?: ServerOptions);
     /**
      * Configure the DI service collection.
      *

package/dist/Subscription.d.ts

@@ -169,6 +169,13 @@ export declare class SubscriptionBuilder<TParams = {}, TQuery = {}, THeaders = {
      */
     authorize<TSchema extends SchemaBuilder<any, any, any, any, any>>(principalSchema: TSchema, ...roles: TRoles[]): SubscriptionBuilder<TParams, TQuery, THeaders, TServices, InferType<TSchema>, TRoles, TIncoming, TOutgoing>;
     authorize(...roles: TRoles[]): SubscriptionBuilder<TParams, TQuery, THeaders, TServices, unknown, TRoles, TIncoming, TOutgoing>;
+    /**
+     * Mark this subscription as public — no authentication required.
+     *
+     * Calling `.public()` sets `authRoles` to `null`, overriding any
+     * previously set authorization requirements.
+     */
+    public(): SubscriptionBuilder<TParams, TQuery, THeaders, TServices, TPrincipal, TRoles, TIncoming, TOutgoing>;
     /** Short, human-readable summary for documentation. */
     summary(text: string): SubscriptionBuilder<TParams, TQuery, THeaders, TServices, TPrincipal, TRoles, TIncoming, TOutgoing>;
     /** Longer description for documentation. Supports Markdown. */

package/dist/chunk-BNRQFILU.js

@@ -0,0 +1,2 @@
+import{object as P,SYMBOL_HAS_PROPERTIES as B,SYMBOL_SCHEMA_PROPERTY_DESCRIPTOR as R}from"@cleverbrush/schema";function b(n){let e={};if(n.paramsSchema){let a=n.paramsSchema;typeof a.introspect=="function"&&a.introspect().objectSchema?e.params=a.introspect().objectSchema:a[B]===!0&&(e.params=a)}if(n.bodySchema){let a=n.bodySchema;(a[B]===!0||typeof a.introspect=="function")&&(e.body=a)}n.querySchema&&(e.query=n.querySchema),n.headerSchema&&(e.headers=n.headerSchema);let t=P(e);return P.getPropertiesFor(t)}function F(n){return n==null||typeof n!="object"?!1:typeof n[R]=="object"&&n[R]!==null}function x(n,e){let t={};for(let[a,s]of Object.entries(e)){if(!F(s))throw new Error(`Cache tag "${n}": property "${a}" is not a valid PropertyDescriptor. Make sure you select a leaf property from the tree (e.g. p.query.id, not p.query).`);let r=s[R];t[a]={getValue:i=>r.getValue(i)}}return{name:n,properties:t}}function J(n,e){let t=Object.entries(n.properties);if(t.length===0)return n.name;let a=[];for(let[s,r]of t.sort(([i],[y])=>i.localeCompare(y))){let i=r.getValue(e);i.success&&i.value!==void 0&&a.push(`${s}=${String(i.value)}`)}return a.length===0?n.name:`${n.name}:${a.join(",")}`}var f=Symbol.for("cleverbrush.tracked");function q(n,e){return{[f]:!0,id:n,data:e}}function X(n){return n!==null&&typeof n=="object"&&f in n&&n[f]===!0}var u=class n{#s;#a;#n;#i;#r;#o;#l;#t;#d;#h;#c;#u;#T;#y;constructor(e,t="/",a=null,s=null,r=null,i=null,y=null,d=null,l=null,h=null,c=[],m=null,S=!1,g=null){this.#s=e,this.#a=t,this.#n=a,this.#i=s,this.#r=r,this.#o=i,this.#l=y,this.#t=d,this.#d=l,this.#h=h,this.#c=c,this.#u=m,this.#T=S,this.#y=g}#e(e){return new n(e.basePath??this.#s,e.pathTemplate??this.#a,e.incomingSchema!==void 0?e.incomingSchema:this.#n,e.outgoingSchema!==void 0?e.outgoingSchema:this.#i,e.querySchema!==void 0?e.querySchema:this.#r,e.headerSchema!==void 0?e.headerSchema:this.#o,e.serviceSchemas!==void 0?e.serviceSchemas:this.#l,e.authRoles!==void 0?e.authRoles:this.#t,e.summary!==void 0?e.summary:this.#d,e.description!==void 0?e.description:this.#h,e.tags??this.#c,e.operationId!==void 0?e.operationId:this.#u,e.deprecated??this.#T,e.externalDocs!==void 0?e.externalDocs:this.#y)}incoming(e){return this.#e({incomingSchema:e})}outgoing(e){return this.#e({outgoingSchema:e})}query(e){return this.#e({querySchema:e})}headers(e){return this.#e({headerSchema:e})}inject(e){return this.#e({serviceSchemas:e})}authorize(...e){let t;e.length>0&&typeof e[0]=="object"&&e[0]!==null&&"introspect"in e[0]?t=e.slice(1):t=e;let a=this.#t?[...this.#t,...t]:t;return this.#e({authRoles:a})}public(){return this.#e({authRoles:null})}summary(e){return this.#e({summary:e})}description(e){return this.#e({description:e})}tags(...e){return this.#e({tags:e})}operationId(e){return this.#e({operationId:e})}deprecated(){return this.#e({deprecated:!0})}externalDocs(e,t){return this.#e({externalDocs:{url:e,description:t}})}introspect(){return{protocol:"subscription",basePath:this.#s,pathTemplate:this.#a,incomingSchema:this.#n,outgoingSchema:this.#i,querySchema:this.#r,headerSchema:this.#o,serviceSchemas:this.#l,authRoles:this.#t,summary:this.#d,description:this.#h,tags:this.#c,operationId:this.#u,deprecated:this.#T,externalDocs:this.#y}}};function E(n,e){return new u(n,e??"/")}function k(n){return n instanceof u}function ne(n,e){let t=[],a=[];for(let s of Object.keys(n)){let r=n[s],i=e[s];for(let y of Object.keys(r)){let d=r[y],l=i[y],h=typeof l=="function"?l:l.handler,c=typeof l=="function"?void 0:l.middlewares;k(d)?a.push({endpoint:d,handler:h,middlewares:c}):t.push({endpoint:d,handler:h,middlewares:c})}}return{_entries:t,_subscriptions:a}}var p=class n{#s;#a;#n;#i;#r;#o;#l;#t;#d;#h;#c;#u;#T;#y;#e;#m;#S;#g;#R;#f;#P;#B;#b;#x;#p;constructor(e,t,a,s,r,i,y=null,d=null,l=null,h=null,c=[],m=null,S=!1,g=null,w=null,j=null,C=null,v=null,A=null,I=null,Q=null,D=null,K=null,M=null,U=[]){this.#s=e,this.#a=t,this.#n=a,this.#i=s,this.#r=r,this.#o=i,this.#l=y,this.#t=d,this.#d=l,this.#h=h,this.#c=c,this.#u=m,this.#T=S,this.#y=g,this.#e=w,this.#m=j,this.#S=C,this.#g=v,this.#R=A,this.#f=I,this.#P=Q,this.#B=D,this.#b=K,this.#x=M,this.#p=U}body(e){return new n(this.#s,this.#a,this.#n,e,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}query(e){return new n(this.#s,this.#a,this.#n,this.#i,e,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}headers(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,e,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}inject(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,e,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}authorize(...e){let t;e.length>0&&typeof e[0]=="object"&&e[0]!==null&&"introspect"in e[0]?t=e.slice(1):t=e;let a=this.#t?[...this.#t,...t]:t;return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,a,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}public(){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,null,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}returns(e){let t=e!=null&&typeof e=="object"&&"introspect"in e?e:null;return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,t??this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}responses(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}summary(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,e,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}description(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,e,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}tags(...e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,e,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}operationId(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,e,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}deprecated(){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,!0,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}example(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,e,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}examples(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,e,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}producesFile(e,t){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,{contentType:e,description:t},this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}upload(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,{maxFileSize:e?.maxFileSize??10*1024*1024,allowedMimeTypes:e?.allowedMimeTypes,maxFileCount:e?.maxFileCount??10},this.#p)}get path(){let e=this.#a,t=this.#n,a;if(typeof t=="string")a=t;else{let{literals:s,segments:r}=t.introspect().templateDefinition,i="";for(let y=0;y<r.length;y++)i+=s[y]+`:${r[y].path}`;i+=s[r.length]??"",a=i}return a==="/"?e||"/":e+a}introspect(){return{method:this.#s,basePath:this.#a,pathTemplate:this.#n,bodySchema:this.#i,querySchema:this.#r,headerSchema:this.#o,serviceSchemas:this.#l,authRoles:this.#t,summary:this.#d,description:this.#h,tags:this.#c,operationId:this.#u,deprecated:this.#T,responseSchema:this.#y,responsesSchemas:this.#e,example:this.#m,examples:this.#S,producesFile:this.#g,produces:this.#R,responseHeaderSchema:this.#f,externalDocs:this.#P,links:this.#B,callbacks:this.#b,fileUpload:this.#x,cacheTags:this.#p}}produces(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,e,this.#f,this.#P,this.#B,this.#b,this.#x,this.#p)}responseHeaders(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,e,this.#P,this.#B,this.#b,this.#x,this.#p)}externalDocs(e,t){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,{url:e,description:t},this.#B,this.#b,this.#x,this.#p)}links(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,e,this.#b,this.#x,this.#p)}callbacks(e){return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,e,this.#x,this.#p)}cacheTag(e,t){return this.clearsCacheTag(e,t)}clearsCacheTag(e,t){if(!t)return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,[...this.#p,{name:e,properties:{}}]);let a=G(this.#n),s=b({paramsSchema:a,bodySchema:this.#i,querySchema:this.#r,headerSchema:this.#o}),r=t(s);if(typeof r!="object"||r===null)throw new Error(`Cache tag "${e}": selector must return an object with property descriptors (e.g. { id: p.query.id }).`);let i=x(e,r);return new n(this.#s,this.#a,this.#n,this.#i,this.#r,this.#o,this.#l,this.#t,this.#d,this.#h,this.#c,this.#u,this.#T,this.#y,this.#e,this.#m,this.#S,this.#g,this.#R,this.#f,this.#P,this.#B,this.#b,this.#x,[...this.#p,i])}};function o(n,e,t,a,s){return new p(n,e,t??"/",null,null,null,null,a??null,s?.summary??null,s?.description??null,s?.tags??[],s?.operationId??null,s?.deprecated??!1,null,null,null,null,null,null,null)}function T(n,e){return{get:t=>o("GET",n,t,e),post:t=>o("POST",n,t,e),put:t=>o("PUT",n,t,e),patch:t=>o("PATCH",n,t,e),delete:t=>o("DELETE",n,t,e),head:t=>o("HEAD",n,t,e),options:t=>o("OPTIONS",n,t,e),public:()=>T(n,null)}}function z(n){return{...T(n,null),authorize(...e){let t;return e.length>0&&typeof e[0]=="object"&&e[0]!==null&&"introspect"in e[0]?t=e.slice(1):t=e,T(n,t)},public(){return T(n,null)}}}function G(n){if(n&&typeof n!="string"&&typeof n.introspect=="function"){let e=n.introspect();if(e.objectSchema)return e.objectSchema}return null}function L(n){return H}var H={get:(n,e)=>o("GET",n,e),post:(n,e)=>o("POST",n,e),put:(n,e)=>o("PUT",n,e),patch:(n,e)=>o("PATCH",n,e),delete:(n,e)=>o("DELETE",n,e),head:(n,e)=>o("HEAD",n,e),options:(n,e)=>o("OPTIONS",n,e),resource:z,subscription:(n,e)=>E(n,e)};import{object as Y,parseString as $}from"@cleverbrush/schema";function O(n){let e=Y(n);return((t,...a)=>$(e,s=>s(t,...a)))}function V(n,...e){return n!=null&&Array.isArray(n.raw)?O({})(n):O(n??{})}function ie(n){for(let e of Object.values(n))Object.freeze(e);return Object.freeze(n)}function re(n,e){let t={};for(let a of Object.keys(n))t[a]={...n[a]};for(let a of Object.keys(e))Object.hasOwn(t,a)?t[a]={...t[a],...e[a]}:t[a]={...e[a]};for(let a of Object.values(t))Object.freeze(a);return Object.freeze(t)}function oe(n,...e){let t={};for(let a of e)t[a]=n[a],Object.freeze(t[a]);return Object.freeze(t)}function ye(n,...e){let t=new Set(e),a={};for(let s of Object.keys(n))t.has(s)||(a[s]=n[s],Object.freeze(a[s]));return Object.freeze(a)}export{b as a,x as b,J as c,q as d,X as e,u as f,ne as g,p as h,L as i,H as j,V as k,ie as l,re as m,oe as n,ye as o};
+//# sourceMappingURL=chunk-BNRQFILU.js.map