@ddd-ts-kit/http 0.2.0 → 0.4.0

package/README.md

@@ -50,6 +50,59 @@ export const orderRoutes = (orders: OrderQueries) =>
 - `defineRoutes` and every mount refuse a duplicate `operationId` or method and path.
 - `prefixRoutes('/api', routes)` moves routes under a prefix, for the server and the contract.
 
+## Controllers, route groups and guards
+
+A route may also be a class: one class per route, one method, `handle`. Its decorator is the
+declaration, and the compiler holds `handle` to it: a part the schemas do not produce, or
+another body than the declared response, is an error on the decorator.
+
+```ts
+import { Authenticated, Controller, RouteGroup, type HttpRequest } from '@ddd-ts-kit/http';
+
+@RouteGroup({ prefix: '/orders', tags: ['orders'], guards: [Authenticated], errors: ['FORBIDDEN'] })
+export class OrdersRoutes {}
+
+@Controller({
+  group: OrdersRoutes,
+  method: 'POST',
+  path: '/',
+  summary: 'Place an order',
+  body,
+  response: { status: 201, body: placed },
+  errors: ['OUT_OF_STOCK'],
+})
+export class PlaceOrderController {
+  constructor(private readonly commands: CommandBus) {}
+
+  async handle({ body, actor }: HttpRequest<{ body: Infer<typeof body> }>): Promise<Infer<typeof placed>> {
+    return { id: await this.commands.execute(new PlaceOrder(actor, body.customerId)) };
+  }
+}
+
+const routes = controllerRoutes([PlaceOrderController], { resolve: application.resolve });
+```
+
+| Export | What it is |
+|---|---|
+| `Controller(spec)` | the decorator of a controller: `group`, `method`, `path` (after the prefix of the group), `operationId` (the class name without `Controller` by default), `summary`, `description`, `tags`, `params`, `query`, `headers`, `body`, `response: { status, description?, body? }`, `errors`, `guards`, `deprecated` |
+| `RouteGroup({ parent, prefix, tags, guards, errors })` | names a set of routes on an empty class; a child inherits from its `parent` and adds |
+| `Guard` | the interface `{ documents?, check(request: GuardRequest) }`, and the decorator of a guard class that takes dependencies |
+| `Authenticated`, `Public`, `HasRole(...roles)` | the guards the package ships, over the `Actor` of the request: 401 to the anonymous caller, 403 without one of the roles; `Public` lets everybody in and stands alone |
+| `RequestMapper<Request, Message>`, `Serializer<Result, Body>` | the interfaces of the two optional translators (`map`, `serialize`), and the decorators that declare them |
+| `HttpRequest<{ params, query, headers, body }>` | the request as `handle`, a mapper or a guard names it, with `actor` and `context` |
+| `controllerRoutes(controllers, { resolve, security, guards })` | the `Route` of each controller, given as a class (built by `resolve`) or as an instance; `security` names the schemes of the application (`['bearer']` by default); `guards: 'skip'` is for the spec of a controller alone |
+| `controllerRoute(controller, options)` | the one route of one controller, for a spec |
+
+A controller with no group and no guard is refused when its class is defined. Guards run in
+order, after validation and before `handle`, inside the execution scope of the request, and
+what they throw is answered as a problem like any refusal. A guard is a control at the edge;
+a permission is declared on the use case (`@Requires`), where a job and an event handler meet
+it too. Controllers are declared classes of the edge (`Edge` of
+`@ddd-ts-kit/kernel/declarations`): `@ddd-ts-kit/di` binds each one under itself and lists them
+in `DeclaredEdges`. A controller has one response and answers its body: a route with several
+success statuses, response headers or a raw body stays a `defineRoute` function. The reasons
+are on the [presentation layer](../../docs/concepts/presentation-layer.md) page.
+
 ## Errors
 
 A handler throws a `DomainError`; its `code` is mapped to a status in one place and answered as
@@ -60,6 +113,27 @@ A handler throws a `DomainError`; its `code` is mapped to a status in one place
   "detail": "Order 7 does not exist.", "requestId": "..." }
 ```
 
+A refusal built by a factory of a `ConceptError` carries facts, and they are private: the
+document holds, under `facts`, only the ones its factory exposed by name, and no `facts` member
+when it exposed none.
+
+```ts
+static slotTaken(calendarId: string, startsAt: Date) {
+  return AppointmentError.refusal('SLOT_TAKEN', 'The slot is already held.', { calendarId, startsAt }).exposing('startsAt');
+}
+```
+
+```json
+{ "type": "urn:problem:slot-taken", "title": "Conflict", "status": 409, "code": "SLOT_TAKEN",
+  "detail": "The slot is already held.", "facts": { "startsAt": "2026-03-02T09:00:00.000Z" }, "requestId": "..." }
+```
+
+`facts` is an optional object of the `Problem` schema of the OpenAPI document. A client
+branches on `code` and reads data from `facts`, never from `detail`, which is a sentence for a
+human and may change. The message is answered as it was written: it says nothing the caller
+did not send, and nothing about another person. A refusal mapped to a 5xx answers neither its
+message nor its facts.
+
 Defaults: `VALIDATION_FAILED` 422 (with `issues`, paths prefixed by the part:
 `body.items.0.sku`), `NOT_FOUND` 404, `CONFLICT` 409, `INVARIANT_VIOLATION` 422, `UNAUTHORIZED`
 401, `FORBIDDEN` 403. A domain code that is not mapped answers 422.
@@ -77,6 +151,13 @@ answered 5xx goes to the kernel `ErrorReporter`, once, with the correlation, act
 ids of its execution context (`context.execution`, present once the request got that far); a
 4xx never does.
 
+A refusal built by a factory (`ConceptError`) answers its message as `detail` unless the message
+quotes a fact the factory did not expose: then the client reads a sentence made from the code
+(`INVALID_EMAIL` gives `Invalid email.`) and the message stays in the logs and the error
+reports. A fact is found in the message as a text, a number or an ISO instant; a fact written
+another way (a formatted date, a part of an object) is not seen, so expose what a client may
+read and keep the rest out of the sentence.
+
 ## Options shared by the adapters
 
 ```ts

package/dist/controller/controller-class.d.ts

@@ -0,0 +1,7 @@
+/**
+ * A class given as a controller. Any class is accepted by the types, so that the classes an
+ * application lists as declared controllers are handed over as they are; one that carries no
+ * `@Controller` is refused when the routes are built.
+ */
+export type ControllerClass = abstract new (...args: never) => unknown;
+//# sourceMappingURL=controller-class.d.ts.map

package/dist/controller/controller-class.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-class.d.ts","sourceRoot":"","sources":["../../src/controller/controller-class.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC"}

package/dist/controller/controller-class.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=controller-class.js.map

package/dist/controller/controller-class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-class.js","sourceRoot":"","sources":["../../src/controller/controller-class.ts"],"names":[],"mappings":""}

package/dist/controller/controller-request.d.ts

@@ -0,0 +1,11 @@
+import type { Actor } from '@ddd-ts-kit/kernel';
+import type { HandlerInput } from '../route/handler-input.js';
+import type { ControllerSpec } from './controller-spec.js';
+/**
+ * What `handle` receives for a given declaration: each part has the type its schema produces,
+ * and the actor is the one of the execution context of the request.
+ */
+export type ControllerRequest<Spec extends ControllerSpec = ControllerSpec> = HandlerInput<Spec> & {
+    readonly actor: Actor;
+};
+//# sourceMappingURL=controller-request.d.ts.map

package/dist/controller/controller-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-request.d.ts","sourceRoot":"","sources":["../../src/controller/controller-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;GAGG;AACH,MAAM,MAAM,iBAAiB,CAAC,IAAI,SAAS,cAAc,GAAG,cAAc,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG;IACjG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB,CAAC"}

package/dist/controller/controller-request.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=controller-request.js.map

package/dist/controller/controller-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-request.js","sourceRoot":"","sources":["../../src/controller/controller-request.ts"],"names":[],"mappings":""}

package/dist/controller/controller-response.d.ts

@@ -0,0 +1,10 @@
+import type { Schema } from '@ddd-ts-kit/validation';
+/** The one answer of a controller when its use case succeeds. */
+export interface ControllerResponse {
+    readonly status: number;
+    /** Left out, `The answer.` with a body and `Done.` without. */
+    readonly description?: string;
+    /** Left out, the controller answers no body and `handle` returns nothing. */
+    readonly body?: Schema<unknown>;
+}
+//# sourceMappingURL=controller-response.d.ts.map

package/dist/controller/controller-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-response.d.ts","sourceRoot":"","sources":["../../src/controller/controller-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;CACjC"}

package/dist/controller/controller-response.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=controller-response.js.map

package/dist/controller/controller-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-response.js","sourceRoot":"","sources":["../../src/controller/controller-response.ts"],"names":[],"mappings":""}

package/dist/controller/controller-result.d.ts

@@ -0,0 +1,7 @@
+import type { Schema } from '@ddd-ts-kit/validation';
+import type { ControllerSpec } from './controller-spec.js';
+/** What `handle` returns for a given declaration: the body its response schema describes, or nothing. */
+export type ControllerResult<Spec extends ControllerSpec = ControllerSpec> = Spec['response'] extends {
+    readonly body: Schema<infer Body>;
+} ? Body : undefined;
+//# sourceMappingURL=controller-result.d.ts.map

package/dist/controller/controller-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-result.d.ts","sourceRoot":"","sources":["../../src/controller/controller-result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,yGAAyG;AACzG,MAAM,MAAM,gBAAgB,CAAC,IAAI,SAAS,cAAc,GAAG,cAAc,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS;IACpG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;CACnC,GACG,IAAI,GACJ,SAAS,CAAC"}

package/dist/controller/controller-result.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=controller-result.js.map

package/dist/controller/controller-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-result.js","sourceRoot":"","sources":["../../src/controller/controller-result.ts"],"names":[],"mappings":""}

package/dist/controller/controller-route.d.ts

@@ -0,0 +1,7 @@
+import type { Route } from '../route/route.js';
+import type { ControllerClass } from './controller-class.js';
+import type { ErasedController } from './erased-controller.js';
+import type { ControllerRoutesOptions } from './controller-routes-options.js';
+/** The route of one controller: what a spec hands to `executeRoute`. */
+export declare function controllerRoute(controller: ControllerClass | ErasedController, options?: ControllerRoutesOptions): Route;
+//# sourceMappingURL=controller-route.d.ts.map

package/dist/controller/controller-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-route.d.ts","sourceRoot":"","sources":["../../src/controller/controller-route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAG9E,wEAAwE;AACxE,wBAAgB,eAAe,CAC7B,UAAU,EAAE,eAAe,GAAG,gBAAgB,EAC9C,OAAO,GAAE,uBAA4B,GACpC,KAAK,CAQP"}

package/dist/controller/controller-route.js

@@ -0,0 +1,10 @@
+import { controllerRoutes } from './controller-routes.js';
+/** The route of one controller: what a spec hands to `executeRoute`. */
+export function controllerRoute(controller, options = {}) {
+    const [route] = controllerRoutes([controller], options);
+    if (route === undefined) {
+        throw new Error('A controller declares one route, and none was built.');
+    }
+    return route;
+}
+//# sourceMappingURL=controller-route.js.map

package/dist/controller/controller-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-route.js","sourceRoot":"","sources":["../../src/controller/controller-route.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAC7B,UAA8C,EAC9C,OAAO,GAA4B,EAAE;IAErC,MAAM,CAAC,KAAK,CAAC,GAAG,gBAAgB,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IAExD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/controller/controller-routes-options.d.ts

@@ -0,0 +1,19 @@
+export interface ControllerRoutesOptions {
+    /**
+     * Builds what was given as a class, a controller or a guard: `resolve` of the application,
+     * which injects each constructor parameter. Left out, only instances can be given.
+     */
+    readonly resolve?: <T>(target: abstract new (...args: never) => T) => T;
+    /**
+     * The security schemes of the application, as its contract names them: every route that is
+     * not public documents them, unless one of its guards names its own. Default: `['bearer']`.
+     */
+    readonly security?: readonly string[];
+    /**
+     * `'skip'` leaves the guards out, for the spec of a controller alone: what it validates, what
+     * it hands its use case, what it answers. The guards have specs of their own, and an
+     * application never sets this.
+     */
+    readonly guards?: 'skip';
+}
+//# sourceMappingURL=controller-routes-options.d.ts.map

package/dist/controller/controller-routes-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-routes-options.d.ts","sourceRoot":"","sources":["../../src/controller/controller-routes-options.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B"}

package/dist/controller/controller-routes-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=controller-routes-options.js.map

package/dist/controller/controller-routes-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-routes-options.js","sourceRoot":"","sources":["../../src/controller/controller-routes-options.ts"],"names":[],"mappings":""}

package/dist/controller/controller-routes.d.ts

@@ -0,0 +1,11 @@
+import type { Route } from '../route/route.js';
+import type { ControllerClass } from './controller-class.js';
+import type { ErasedController } from './erased-controller.js';
+import type { ControllerRoutesOptions } from './controller-routes-options.js';
+/**
+ * The routes of controllers, for any adapter and for the contract generator: each controller
+ * becomes one `Route`, so validation, error mapping, tracing and problem documents are those
+ * of every route. Controllers are given as classes with `resolve`, or as instances.
+ */
+export declare function controllerRoutes(controllers: readonly (ControllerClass | ErasedController)[], options?: ControllerRoutesOptions): readonly Route[];
+//# sourceMappingURL=controller-routes.d.ts.map

package/dist/controller/controller-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-routes.d.ts","sourceRoot":"","sources":["../../src/controller/controller-routes.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAO9E;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,SAAS,CAAC,eAAe,GAAG,gBAAgB,CAAC,EAAE,EAC5D,OAAO,GAAE,uBAA4B,GACpC,SAAS,KAAK,EAAE,CAMlB"}

package/dist/controller/controller-routes.js

@@ -0,0 +1,72 @@
+import { assertUniqueRoutes } from '../route/assert-unique-routes.js';
+import { resolvedController } from './resolved-controller.js';
+const DEFAULT_SECURITY = ['bearer'];
+/**
+ * The routes of controllers, for any adapter and for the contract generator: each controller
+ * becomes one `Route`, so validation, error mapping, tracing and problem documents are those
+ * of every route. Controllers are given as classes with `resolve`, or as instances.
+ */
+export function controllerRoutes(controllers, options = {}) {
+    const routes = controllers.map((entry) => routeOf(resolvedController(entry, options.resolve), options));
+    assertUniqueRoutes(routes);
+    return routes;
+}
+function routeOf(resolved, options) {
+    const { controller, spec, declared } = resolved;
+    const guards = options.guards === 'skip' ? [] : resolved.guards;
+    const { status, body, description } = spec.response;
+    const identity = { method: spec.method, path: declared.path, operationId: declared.operationId };
+    return {
+        ...identity,
+        summary: spec.summary,
+        ...(spec.description === undefined ? {} : { description: spec.description }),
+        ...(declared.tags.length === 0 ? {} : { tags: declared.tags }),
+        ...requestOf(spec),
+        responses: { [status]: { description: description ?? defaultDescription(body), ...bodyOf(body) } },
+        errors: [...new Set([...declared.errors, ...resolved.guards.flatMap((guard) => guard.documents?.errors ?? [])])],
+        security: securityOf(resolved.guards, options.security ?? DEFAULT_SECURITY),
+        ...(spec.deprecated === true ? { deprecated: true } : {}),
+        async handle(input) {
+            for (const guard of guards) {
+                await guard.check(guardRequest(identity, input));
+            }
+            const answer = await controller.handle({ ...input, actor: input.context.execution.actor });
+            return body === undefined ? { status } : { status, body: answer };
+        },
+    };
+}
+function requestOf(parts) {
+    const declared = Object.entries({
+        params: parts.params,
+        query: parts.query,
+        headers: parts.headers,
+        body: parts.body,
+    }).filter(([, schema]) => schema !== undefined);
+    return declared.length === 0 ? {} : { request: Object.fromEntries(declared) };
+}
+function bodyOf(body) {
+    return body === undefined ? {} : { body };
+}
+function defaultDescription(body) {
+    return body === undefined ? 'Done.' : 'The answer.';
+}
+function securityOf(guards, schemes) {
+    if (guards.some((guard) => guard.documents?.public === true)) {
+        return false;
+    }
+    const named = guards.flatMap((guard) => guard.documents?.security ?? []);
+    return [...new Set(named.length === 0 ? schemes : named)];
+}
+function guardRequest(identity, input) {
+    const { context } = input;
+    const { actor, session } = context.execution;
+    return {
+        ...identity,
+        params: typeof input.params === 'object' && input.params !== null ? { ...input.params } : {},
+        headers: context.rawHeaders ?? {},
+        actor,
+        ...(session === undefined ? {} : { session }),
+        context,
+    };
+}
+//# sourceMappingURL=controller-routes.js.map

package/dist/controller/controller-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-routes.js","sourceRoot":"","sources":["../../src/controller/controller-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAUtE,OAAO,EAAE,kBAAkB,EAA2B,MAAM,0BAA0B,CAAC;AAEvF,MAAM,gBAAgB,GAAG,CAAC,QAAQ,CAAC,CAAC;AAEpC;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAA4D,EAC5D,OAAO,GAA4B,EAAE;IAErC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAExG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,QAA4B,EAAE,OAAgC;IAC7E,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IAChE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;IACpD,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;IAEjG,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5E,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9D,GAAG,SAAS,CAAC,IAAI,CAAC;QAClB,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;QAClG,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChH,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;QAC3E,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,KAAK,CAAC,MAAM,CAAC,KAAiB;YAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,MAAM,GAAY,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAEpG,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAqB;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAEhD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,MAAM,CAAC,IAAiC;IAC/C,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAiC;IAC3D,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;AACtD,CAAC;AAED,SAAS,UAAU,CAAC,MAAwB,EAAE,OAA0B;IACtE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAEzE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CACnB,QAA+D,EAC/D,KAAiB;IAEjB,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAE7C,OAAO;QACL,GAAG,QAAQ;QACX,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;QAC5F,OAAO,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;QACjC,KAAK;QACL,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/controller/controller-spec.d.ts

@@ -0,0 +1,30 @@
+import type { Schema } from '@ddd-ts-kit/validation';
+import type { HttpMethod } from '../route/http-method.js';
+import type { ControllerResponse } from './controller-response.js';
+import type { GuardReference } from './guard-reference.js';
+import type { RouteGroupClass } from './route-group-class.js';
+/** Everything a route says, in the decorator of its controller and nowhere else. */
+export interface ControllerSpec {
+    /** The group the route belongs to: it gives a prefix, tags, guards and error codes. */
+    readonly group?: RouteGroupClass;
+    readonly method: HttpMethod;
+    /** Literal segments and `:name` parameters, after the prefix of the group; `/` for the prefix itself. */
+    readonly path: string;
+    /** Left out, the name of the class without `Controller`, in camelCase. */
+    readonly operationId?: string;
+    readonly summary: string;
+    readonly description?: string;
+    /** Added to the tags of the group. */
+    readonly tags?: readonly string[];
+    readonly params?: Schema<unknown>;
+    readonly query?: Schema<unknown>;
+    readonly headers?: Schema<unknown>;
+    readonly body?: Schema<unknown>;
+    readonly response: ControllerResponse;
+    /** Domain error codes the route may answer, added to those of its group and of its guards. */
+    readonly errors?: readonly string[];
+    /** Run after the guards of the group. With no group, at least one is required: `[Public]` says the route is open. */
+    readonly guards?: readonly GuardReference[];
+    readonly deprecated?: boolean;
+}
+//# sourceMappingURL=controller-spec.d.ts.map

package/dist/controller/controller-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-spec.d.ts","sourceRoot":"","sources":["../../src/controller/controller-spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,uFAAuF;IACvF,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,yGAAyG;IACzG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,sCAAsC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,qHAAqH;IACrH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B"}

package/dist/controller/controller-spec.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=controller-spec.js.map

package/dist/controller/controller-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-spec.js","sourceRoot":"","sources":["../../src/controller/controller-spec.ts"],"names":[],"mappings":""}

package/dist/controller/controller.d.ts

@@ -0,0 +1,20 @@
+import { type ClassDeclarator } from '@ddd-ts-kit/kernel/declarations';
+import type { ControllerSpec } from './controller-spec.js';
+import type { HttpController } from './http-controller.js';
+/**
+ * Declares one route on the class that answers it:
+ *
+ *     @Controller({ group: AppointmentRoutes, method: 'POST', path: '/', summary: 'Book appointment',
+ *       body, response: { status: 201, body: accepted }, errors: ['SLOT_TAKEN'] })
+ *     export class BookAppointmentController {
+ *       constructor(private readonly commands: CommandBus) {}
+ *       async handle({ body, actor }: HttpRequest<{ body: BookAppointmentBody }>): Promise<BookAppointmentAccepted> { ... }
+ *     }
+ *
+ * The declaration is the single statement of the route: the server validates with its schemas
+ * and the contract is generated from it. The compiler holds `handle` to it: a part the
+ * schemas do not produce, or another body than the declared response, is refused on the
+ * decorator. The constructor states the dependencies, as for every declared class.
+ */
+export declare function Controller<const Spec extends ControllerSpec>(spec: Spec): ClassDeclarator<HttpController<Spec>, undefined>;
+//# sourceMappingURL=controller.d.ts.map

package/dist/controller/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/controller/controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CAAC,KAAK,CAAC,IAAI,SAAS,cAAc,EAC1D,IAAI,EAAE,IAAI,GACT,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAclD"}

package/dist/controller/controller.js

@@ -0,0 +1,30 @@
+import { DeclarationError, Edge } from '@ddd-ts-kit/kernel/declarations';
+import { declaredRoute } from './declared-route.js';
+import { presentationRegistry } from './presentation-registry.js';
+/**
+ * Declares one route on the class that answers it:
+ *
+ *     @Controller({ group: AppointmentRoutes, method: 'POST', path: '/', summary: 'Book appointment',
+ *       body, response: { status: 201, body: accepted }, errors: ['SLOT_TAKEN'] })
+ *     export class BookAppointmentController {
+ *       constructor(private readonly commands: CommandBus) {}
+ *       async handle({ body, actor }: HttpRequest<{ body: BookAppointmentBody }>): Promise<BookAppointmentAccepted> { ... }
+ *     }
+ *
+ * The declaration is the single statement of the route: the server validates with its schemas
+ * and the contract is generated from it. The compiler holds `handle` to it: a part the
+ * schemas do not produce, or another body than the declared response, is refused on the
+ * decorator. The constructor states the dependencies, as for every declared class.
+ */
+export function Controller(spec) {
+    const declare = Edge('controller');
+    return (target, context) => {
+        if (!target.name.endsWith('Controller')) {
+            throw new DeclarationError(`${target.name} carries @Controller: name the class after its use case, ending in Controller.`);
+        }
+        declaredRoute(target.name, spec);
+        declare(target, context);
+        presentationRegistry().controllers.set(target, spec);
+    };
+}
+//# sourceMappingURL=controller.js.map

package/dist/controller/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/controller/controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAwB,MAAM,iCAAiC,CAAC;AAE/F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU,CACxB,IAAU;IAEV,MAAM,OAAO,GAAG,IAAI,CAAuB,YAAY,CAAC,CAAC;IAEzD,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,gBAAgB,CACxB,GAAG,MAAM,CAAC,IAAI,gFAAgF,CAC/F,CAAC;QACJ,CAAC;QAED,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzB,oBAAoB,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC;AACJ,CAAC"}

package/dist/controller/declared-route.d.ts

@@ -0,0 +1,13 @@
+import type { ControllerSpec } from './controller-spec.js';
+import type { GuardReference } from './guard-reference.js';
+/** What a controller says once the groups above it are folded in. */
+export interface DeclaredRoute {
+    readonly path: string;
+    readonly operationId: string;
+    readonly tags: readonly string[];
+    readonly guards: readonly GuardReference[];
+    readonly errors: readonly string[];
+}
+/** Folds the groups of a controller into its declaration, and refuses one that cannot stand. */
+export declare function declaredRoute(className: string, spec: ControllerSpec): DeclaredRoute;
+//# sourceMappingURL=declared-route.d.ts.map

package/dist/controller/declared-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"declared-route.d.ts","sourceRoot":"","sources":["../../src/controller/declared-route.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK3D,qEAAqE;AACrE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAWD,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,aAAa,CAepF"}

package/dist/controller/declared-route.js

@@ -0,0 +1,54 @@
+import { DeclarationError } from '@ddd-ts-kit/kernel/declarations';
+import { ROUTE_PATH_PATTERN } from '../route/route-path-pattern.js';
+import { Public } from './guards/public.js';
+import { presentationRegistry } from './presentation-registry.js';
+const NOTHING = { prefix: '', tags: [], guards: [], errors: [] };
+/** Folds the groups of a controller into its declaration, and refuses one that cannot stand. */
+export function declaredRoute(className, spec) {
+    const inherited = spec.group === undefined ? NOTHING : inheritedFrom(className, spec.group);
+    const guards = [...inherited.guards, ...(spec.guards ?? [])];
+    const path = `${inherited.prefix}${spec.path === '/' && inherited.prefix !== '' ? '' : spec.path}`;
+    assertPath(className, spec.path, path);
+    assertAccess(className, guards);
+    return {
+        path,
+        operationId: spec.operationId ?? operationIdOf(className),
+        tags: distinct([...inherited.tags, ...(spec.tags ?? [])]),
+        guards,
+        errors: distinct([...inherited.errors, ...(spec.errors ?? [])]),
+    };
+}
+function inheritedFrom(className, group) {
+    const options = presentationRegistry().groups.get(group);
+    if (options === undefined) {
+        throw new DeclarationError(`Controller ${className}: its group ${group.name} carries no @RouteGroup.`);
+    }
+    const above = options.parent === undefined ? NOTHING : inheritedFrom(className, options.parent);
+    return {
+        prefix: `${above.prefix}${options.prefix ?? ''}`,
+        tags: [...above.tags, ...(options.tags ?? [])],
+        guards: [...above.guards, ...(options.guards ?? [])],
+        errors: [...above.errors, ...(options.errors ?? [])],
+    };
+}
+function assertPath(className, written, path) {
+    if (!ROUTE_PATH_PATTERN.test(written) || !ROUTE_PATH_PATTERN.test(path)) {
+        throw new DeclarationError(`Controller ${className}: the path "${written}" must be made of literal segments and ":name" parameters.`);
+    }
+}
+function assertAccess(className, guards) {
+    if (guards.length === 0) {
+        throw new DeclarationError(`Controller ${className} names no group with guards and no guard of its own: nothing says who may call it. Name its group, or declare \`guards: [Public]\` when anybody may.`);
+    }
+    if (guards.length > 1 && guards.includes(Public)) {
+        throw new DeclarationError(`Controller ${className} is behind Public and another guard: a route is open or it is guarded. Move it to a group of its kind.`);
+    }
+}
+function operationIdOf(className) {
+    const name = className.replace(/Controller$/, '');
+    return `${name.charAt(0).toLowerCase()}${name.slice(1)}`;
+}
+function distinct(values) {
+    return [...new Set(values)];
+}
+//# sourceMappingURL=declared-route.js.map

package/dist/controller/declared-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declared-route.js","sourceRoot":"","sources":["../../src/controller/declared-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAGpE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAmBlE,MAAM,OAAO,GAAc,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAE5E,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,IAAoB;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,GAAG,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAEnG,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEhC,OAAO;QACL,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,aAAa,CAAC,SAAS,CAAC;QACzD,IAAI,EAAE,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM;QACN,MAAM,EAAE,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,KAAsB;IAC9D,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEzD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,gBAAgB,CAAC,cAAc,SAAS,eAAe,KAAK,CAAC,IAAI,0BAA0B,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhG,OAAO;QACL,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE;QAChD,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,OAAe,EAAE,IAAY;IAClE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gBAAgB,CACxB,cAAc,SAAS,eAAe,OAAO,4DAA4D,CAC1G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,MAAiC;IACxE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,gBAAgB,CACxB,cAAc,SAAS,sJAAsJ,CAC9K,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,gBAAgB,CACxB,cAAc,SAAS,wGAAwG,CAChI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAElD,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,MAAyB;IACzC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/controller/erased-controller.d.ts

@@ -0,0 +1,9 @@
+import type { Actor } from '@ddd-ts-kit/kernel';
+import type { RouteInput } from '../route/route-input.js';
+/** A controller once its schema types are erased, as the pipeline calls it. */
+export interface ErasedController {
+    handle(request: RouteInput & {
+        readonly actor: Actor;
+    }): unknown;
+}
+//# sourceMappingURL=erased-controller.d.ts.map

package/dist/controller/erased-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"erased-controller.d.ts","sourceRoot":"","sources":["../../src/controller/erased-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,+EAA+E;AAC/E,MAAM,WAAW,gBAAgB;IAE/B,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC;CAClE"}

package/dist/controller/erased-controller.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=erased-controller.js.map

package/dist/controller/erased-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erased-controller.js","sourceRoot":"","sources":["../../src/controller/erased-controller.ts"],"names":[],"mappings":""}

package/dist/controller/guard-documentation.d.ts

@@ -0,0 +1,10 @@
+/** What a guard says in the contract of every route behind it, so no route repeats it. */
+export interface GuardDocumentation {
+    /** `true` on the guard that lets everybody in: the route is documented with no security requirement. */
+    readonly public?: boolean;
+    /** The security schemes the guard authenticates with, when they are not the ones of the application. */
+    readonly security?: readonly string[];
+    /** The error codes the guard may answer: they join the declared codes of the route. */
+    readonly errors?: readonly string[];
+}
+//# sourceMappingURL=guard-documentation.d.ts.map

package/dist/controller/guard-documentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-documentation.d.ts","sourceRoot":"","sources":["../../src/controller/guard-documentation.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,MAAM,WAAW,kBAAkB;IACjC,wGAAwG;IACxG,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,wGAAwG;IACxG,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,uFAAuF;IACvF,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC"}

package/dist/controller/guard-documentation.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=guard-documentation.js.map

package/dist/controller/guard-documentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-documentation.js","sourceRoot":"","sources":["../../src/controller/guard-documentation.ts"],"names":[],"mappings":""}

package/dist/controller/guard-reference.d.ts

@@ -0,0 +1,4 @@
+import type { Guard } from './guard.js';
+/** A guard as a group or a controller names it: the value itself, or the declared class the composition root builds. */
+export type GuardReference = Guard | (abstract new (...args: never) => Guard);
+//# sourceMappingURL=guard-reference.d.ts.map

package/dist/controller/guard-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-reference.d.ts","sourceRoot":"","sources":["../../src/controller/guard-reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,wHAAwH;AACxH,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,CAAC,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC"}

package/dist/controller/guard-reference.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=guard-reference.js.map

package/dist/controller/guard-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-reference.js","sourceRoot":"","sources":["../../src/controller/guard-reference.ts"],"names":[],"mappings":""}