@ddd-ts-kit/http 0.2.0 → 0.4.0

package/dist/controller/guard-request.d.ts

@@ -0,0 +1,20 @@
+import type { Actor, Session } from '@ddd-ts-kit/kernel';
+import type { HttpMethod } from '../route/http-method.js';
+import type { RawHeaders } from '../route/raw-headers.js';
+import type { RequestContext } from '../route/request-context.js';
+/** What a guard reads to let a request through or refuse it: who calls, and which route. */
+export interface GuardRequest {
+    readonly method: HttpMethod;
+    /** The template of the route, the prefixes of its groups included: `/practices/:practiceId/agenda`. */
+    readonly path: string;
+    readonly operationId: string;
+    /** The path parameters, through the schema of the controller when it declares one. */
+    readonly params: Readonly<Record<string, unknown>>;
+    /** The headers as they arrived, before any schema. */
+    readonly headers: RawHeaders;
+    readonly actor: Actor;
+    /** Absent when the application resolves no session. */
+    readonly session?: Session;
+    readonly context: RequestContext;
+}
+//# sourceMappingURL=guard-request.d.ts.map

package/dist/controller/guard-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-request.d.ts","sourceRoot":"","sources":["../../src/controller/guard-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,4FAA4F;AAC5F,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,uGAAuG;IACvG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,sFAAsF;IACtF,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC"}

package/dist/controller/guard-request.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=guard-request.js.map

package/dist/controller/guard-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-request.js","sourceRoot":"","sources":["../../src/controller/guard-request.ts"],"names":[],"mappings":""}

package/dist/controller/guard.d.ts

@@ -0,0 +1,21 @@
+import { type ClassDeclarator, type DeclaredDependencies, type DependenciesFromSignature } from '@ddd-ts-kit/kernel/declarations';
+import type { GuardDocumentation } from './guard-documentation.js';
+import type { GuardRequest } from './guard-request.js';
+/**
+ * A control at the edge, run in order before the controller: is the caller authenticated, does
+ * it hold a role, does the key of the request exist. It lets the request through by returning
+ * and refuses it by throwing `UnauthorizedError` or `ForbiddenError`, answered as a problem like
+ * any refusal. It knows the caller and the route, never an aggregate: a right that depends on
+ * the element is a permission of the use case, held for every caller of the use case.
+ */
+export interface Guard {
+    readonly documents?: GuardDocumentation;
+    check(request: GuardRequest): void | Promise<void>;
+}
+/**
+ * Declares a guard that takes dependencies, so the composition root builds it from its
+ * constructor: `@Guard() export class ApiKeyGuard implements Guard`. A guard that needs nothing
+ * is a plain value (`Authenticated`, `HasRole('auditor')`) and carries no decorator.
+ */
+export declare function Guard<const D extends DeclaredDependencies = DependenciesFromSignature>(dependencies?: D): ClassDeclarator<Guard, D>;
+//# sourceMappingURL=guard.d.ts.map

package/dist/controller/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/controller/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC/B,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAExC,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,oBAAoB,GAAG,yBAAyB,EACpF,YAAY,CAAC,EAAE,CAAC,GACf,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAE3B"}

package/dist/controller/guard.js

@@ -0,0 +1,10 @@
+import { Edge, } from '@ddd-ts-kit/kernel/declarations';
+/**
+ * Declares a guard that takes dependencies, so the composition root builds it from its
+ * constructor: `@Guard() export class ApiKeyGuard implements Guard`. A guard that needs nothing
+ * is a plain value (`Authenticated`, `HasRole('auditor')`) and carries no decorator.
+ */
+export function Guard(dependencies) {
+    return Edge('guard', dependencies);
+}
+//# sourceMappingURL=guard.js.map

package/dist/controller/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/controller/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,GAIL,MAAM,iCAAiC,CAAC;AAiBzC;;;;GAIG;AACH,MAAM,UAAU,KAAK,CACnB,YAAgB;IAEhB,OAAO,IAAI,CAAW,OAAO,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC"}

package/dist/controller/guards/authenticated.d.ts

@@ -0,0 +1,4 @@
+import type { Guard } from '../guard.js';
+/** Lets through every caller the application authenticated, whoever it is; answers 401 to the anonymous one. */
+export declare const Authenticated: Guard;
+//# sourceMappingURL=authenticated.d.ts.map

package/dist/controller/guards/authenticated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated.d.ts","sourceRoot":"","sources":["../../../src/controller/guards/authenticated.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC,gHAAgH;AAChH,eAAO,MAAM,aAAa,EAAE,KAO3B,CAAC"}

package/dist/controller/guards/authenticated.js

@@ -0,0 +1,12 @@
+import { isAnonymous } from '@ddd-ts-kit/kernel';
+import { UnauthorizedError } from '../../error/unauthorized-error.js';
+/** Lets through every caller the application authenticated, whoever it is; answers 401 to the anonymous one. */
+export const Authenticated = {
+    documents: { errors: ['UNAUTHORIZED'] },
+    check({ actor }) {
+        if (isAnonymous(actor)) {
+            throw new UnauthorizedError('Authentication is required');
+        }
+    },
+};
+//# sourceMappingURL=authenticated.js.map

package/dist/controller/guards/authenticated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated.js","sourceRoot":"","sources":["../../../src/controller/guards/authenticated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAGtE,gHAAgH;AAChH,MAAM,CAAC,MAAM,aAAa,GAAU;IAClC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE;IACvC,KAAK,CAAC,EAAE,KAAK,EAAE;QACb,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/controller/guards/has-role.d.ts

@@ -0,0 +1,8 @@
+import type { Guard } from '../guard.js';
+/**
+ * Lets through a caller that holds one of the roles, as its `Actor` carries them: 401 to the
+ * anonymous caller, 403 to one that holds none. A coarse control over a set of routes; what a
+ * role may do to one element stays a permission of the use case.
+ */
+export declare function HasRole(...roles: readonly string[]): Guard;
+//# sourceMappingURL=has-role.d.ts.map

package/dist/controller/guards/has-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"has-role.d.ts","sourceRoot":"","sources":["../../../src/controller/guards/has-role.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,GAAG,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,KAAK,CAiB1D"}

package/dist/controller/guards/has-role.js

@@ -0,0 +1,26 @@
+import { isAnonymous } from '@ddd-ts-kit/kernel';
+import { DeclarationError } from '@ddd-ts-kit/kernel/declarations';
+import { ForbiddenError } from '../../error/forbidden-error.js';
+import { UnauthorizedError } from '../../error/unauthorized-error.js';
+/**
+ * Lets through a caller that holds one of the roles, as its `Actor` carries them: 401 to the
+ * anonymous caller, 403 to one that holds none. A coarse control over a set of routes; what a
+ * role may do to one element stays a permission of the use case.
+ */
+export function HasRole(...roles) {
+    if (roles.length === 0) {
+        throw new DeclarationError('HasRole() names no role: name at least one, or use Authenticated.');
+    }
+    return {
+        documents: { errors: ['UNAUTHORIZED', 'FORBIDDEN'] },
+        check({ actor }) {
+            if (isAnonymous(actor)) {
+                throw new UnauthorizedError('Authentication is required');
+            }
+            if (!roles.some((role) => actor.roles.includes(role))) {
+                throw new ForbiddenError('A role this route requires is missing');
+            }
+        },
+    };
+}
+//# sourceMappingURL=has-role.js.map

package/dist/controller/guards/has-role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"has-role.js","sourceRoot":"","sources":["../../../src/controller/guards/has-role.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAGtE;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,GAAG,KAAwB;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,gBAAgB,CAAC,mEAAmE,CAAC,CAAC;IAClG,CAAC;IAED,OAAO;QACL,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE;QACpD,KAAK,CAAC,EAAE,KAAK,EAAE;YACb,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;YAC5D,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,cAAc,CAAC,uCAAuC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/controller/guards/public.d.ts

@@ -0,0 +1,7 @@
+import type { Guard } from '../guard.js';
+/**
+ * Lets everybody through, the anonymous caller included. Said, never implied: a controller
+ * with no group and no guard is refused, and this guard stands alone, never next to another.
+ */
+export declare const Public: Guard;
+//# sourceMappingURL=public.d.ts.map

package/dist/controller/guards/public.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../../src/controller/guards/public.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC;;;GAGG;AACH,eAAO,MAAM,MAAM,EAAE,KAKpB,CAAC"}

package/dist/controller/guards/public.js

@@ -0,0 +1,11 @@
+/**
+ * Lets everybody through, the anonymous caller included. Said, never implied: a controller
+ * with no group and no guard is refused, and this guard stands alone, never next to another.
+ */
+export const Public = {
+    documents: { public: true },
+    check() {
+        return undefined;
+    },
+};
+//# sourceMappingURL=public.js.map

package/dist/controller/guards/public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.js","sourceRoot":"","sources":["../../../src/controller/guards/public.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAU;IAC3B,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;IAC3B,KAAK;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAC"}

package/dist/controller/http-controller.d.ts

@@ -0,0 +1,14 @@
+import type { Schema } from '@ddd-ts-kit/validation';
+import type { ControllerRequest } from './controller-request.js';
+import type { ControllerSpec } from './controller-spec.js';
+/**
+ * The shape `@Controller(spec)` requires of the class it decorates. `handle` is a function
+ * property on purpose: its parameter is then compared strictly, so a controller that reads a
+ * part its declaration does not produce, or returns another body, does not compile.
+ */
+export interface HttpController<Spec extends ControllerSpec = ControllerSpec> {
+    readonly handle: Spec['response'] extends {
+        readonly body: Schema<infer Body>;
+    } ? (request: ControllerRequest<Spec>) => Body | Promise<Body> : (request: ControllerRequest<Spec>) => void | Promise<void>;
+}
+//# sourceMappingURL=http-controller.d.ts.map

package/dist/controller/http-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-controller.d.ts","sourceRoot":"","sources":["../../src/controller/http-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,WAAW,cAAc,CAAC,IAAI,SAAS,cAAc,GAAG,cAAc;IAC1E,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;KAAE,GAC3E,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAC1D,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChE"}

package/dist/controller/http-controller.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=http-controller.js.map

package/dist/controller/http-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-controller.js","sourceRoot":"","sources":["../../src/controller/http-controller.ts"],"names":[],"mappings":""}

package/dist/controller/http-request.d.ts

@@ -0,0 +1,27 @@
+import type { Actor } from '@ddd-ts-kit/kernel';
+import type { RawHeaders } from '../route/raw-headers.js';
+import type { RequestContext } from '../route/request-context.js';
+interface Parts {
+    readonly params?: unknown;
+    readonly query?: unknown;
+    readonly headers?: unknown;
+    readonly body?: unknown;
+}
+type Part<Given, Name extends keyof Parts, Default> = Given extends {
+    readonly [K in Name]: infer T;
+} ? T : Default;
+/**
+ * The request as a controller, a mapper or a guard of the project names it: the parts it reads,
+ * typed by hand, `HttpRequest<{ params: CancelAppointmentParams; body: CancelAppointmentBody }>`.
+ * The decorator of the controller checks that its schemas produce those types.
+ */
+export interface HttpRequest<Given extends Parts = Parts> {
+    readonly params: Part<Given, 'params', Record<string, string>>;
+    readonly query: Part<Given, 'query', Record<string, unknown>>;
+    readonly headers: Part<Given, 'headers', RawHeaders>;
+    readonly body: Part<Given, 'body', unknown>;
+    readonly actor: Actor;
+    readonly context: RequestContext;
+}
+export {};
+//# sourceMappingURL=http-request.d.ts.map

package/dist/controller/http-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-request.d.ts","sourceRoot":"","sources":["../../src/controller/http-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,UAAU,KAAK;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,KAAK,IAAI,CAAC,KAAK,EAAE,IAAI,SAAS,MAAM,KAAK,EAAE,OAAO,IAAI,KAAK,SAAS;IAAE,QAAQ,EAAE,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC;CAAE,GAAG,CAAC,GAAG,OAAO,CAAC;AAEpH;;;;GAIG;AACH,MAAM,WAAW,WAAW,CAAC,KAAK,SAAS,KAAK,GAAG,KAAK;IACtD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC"}

package/dist/controller/http-request.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=http-request.js.map

package/dist/controller/http-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-request.js","sourceRoot":"","sources":["../../src/controller/http-request.ts"],"names":[],"mappings":""}

package/dist/controller/presentation-registry.d.ts

@@ -0,0 +1,10 @@
+import type { ControllerClass } from './controller-class.js';
+import type { ControllerSpec } from './controller-spec.js';
+import type { RouteGroupClass } from './route-group-class.js';
+import type { RouteGroupOptions } from './route-group-options.js';
+export interface PresentationRegistry {
+    readonly controllers: WeakMap<ControllerClass, ControllerSpec>;
+    readonly groups: WeakMap<RouteGroupClass, RouteGroupOptions>;
+}
+export declare function presentationRegistry(): PresentationRegistry;
+//# sourceMappingURL=presentation-registry.d.ts.map

package/dist/controller/presentation-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation-registry.d.ts","sourceRoot":"","sources":["../../src/controller/presentation-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAC/D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;CAC9D;AAQD,wBAAgB,oBAAoB,IAAI,oBAAoB,CAY3D"}

package/dist/controller/presentation-registry.js

@@ -0,0 +1,21 @@
+/*
+ * One registry per process, whatever the number of copies of this package it loaded, as the
+ * registry of declarations of the kernel: the global symbol registry is what they all share.
+ */
+const REGISTRY = Symbol.for('@ddd-ts-kit/http/presentation/v1');
+export function presentationRegistry() {
+    const existing = Reflect.get(globalThis, REGISTRY);
+    if (isRegistry(existing)) {
+        return existing;
+    }
+    const created = { controllers: new WeakMap(), groups: new WeakMap() };
+    Reflect.set(globalThis, REGISTRY, created);
+    return created;
+}
+function isRegistry(value) {
+    if (typeof value !== 'object' || value === null || !('controllers' in value) || !('groups' in value)) {
+        return false;
+    }
+    return value.controllers instanceof WeakMap && value.groups instanceof WeakMap;
+}
+//# sourceMappingURL=presentation-registry.js.map

package/dist/controller/presentation-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation-registry.js","sourceRoot":"","sources":["../../src/controller/presentation-registry.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAEhE,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAY,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE5D,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAyB,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,EAAE,CAAC;IAE5F,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC;QACrG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,WAAW,YAAY,OAAO,IAAI,KAAK,CAAC,MAAM,YAAY,OAAO,CAAC;AACjF,CAAC"}

package/dist/controller/request-mapper.d.ts

@@ -0,0 +1,12 @@
+import { type ClassDeclarator, type DeclaredDependencies, type DependenciesFromSignature } from '@ddd-ts-kit/kernel/declarations';
+/**
+ * The one place that turns what arrived (the validated request and the actor of its execution
+ * context) into the command or the query of a use case. Nothing of HTTP is in its signature
+ * but the type of the request: another transport maps its own request to the same message.
+ */
+export interface RequestMapper<Request, Message> {
+    map(request: Request): Message;
+}
+/** Declares a request mapper, so the composition root builds it and hands it to its controller. */
+export declare function RequestMapper<const D extends DeclaredDependencies = DependenciesFromSignature>(dependencies?: D): ClassDeclarator<RequestMapper<never, unknown>, D>;
+//# sourceMappingURL=request-mapper.d.ts.map

package/dist/controller/request-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-mapper.d.ts","sourceRoot":"","sources":["../../src/controller/request-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC/B,MAAM,iCAAiC,CAAC;AAEzC;;;;GAIG;AACH,MAAM,WAAW,aAAa,CAAC,OAAO,EAAE,OAAO;IAC7C,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;CAChC;AAED,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,KAAK,CAAC,CAAC,SAAS,oBAAoB,GAAG,yBAAyB,EAC5F,YAAY,CAAC,EAAE,CAAC,GACf,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAEnD"}

package/dist/controller/request-mapper.js

@@ -0,0 +1,6 @@
+import { Edge, } from '@ddd-ts-kit/kernel/declarations';
+/** Declares a request mapper, so the composition root builds it and hands it to its controller. */
+export function RequestMapper(dependencies) {
+    return Edge('mapper', dependencies);
+}
+//# sourceMappingURL=request-mapper.js.map

package/dist/controller/request-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-mapper.js","sourceRoot":"","sources":["../../src/controller/request-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,GAIL,MAAM,iCAAiC,CAAC;AAWzC,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAC3B,YAAgB;IAEhB,OAAO,IAAI,CAAmC,QAAQ,EAAE,YAAY,CAAC,CAAC;AACxE,CAAC"}

package/dist/controller/resolved-controller.d.ts

@@ -0,0 +1,18 @@
+import type { ControllerClass } from './controller-class.js';
+import type { ErasedController } from './erased-controller.js';
+import type { ControllerRoutesOptions } from './controller-routes-options.js';
+import type { ControllerSpec } from './controller-spec.js';
+import { type DeclaredRoute } from './declared-route.js';
+import type { Guard } from './guard.js';
+/** A controller ready to answer: its instance, its declaration and the guards before it, built. */
+export interface ResolvedController {
+    readonly controller: ErasedController;
+    readonly spec: ControllerSpec;
+    readonly declared: DeclaredRoute;
+    readonly guards: readonly Guard[];
+}
+type Resolve = NonNullable<ControllerRoutesOptions['resolve']>;
+/** Reads the declaration of a controller given as its class or as an instance, and builds what must be built. */
+export declare function resolvedController(entry: ControllerClass | ErasedController, resolve: Resolve | undefined): ResolvedController;
+export {};
+//# sourceMappingURL=resolved-controller.d.ts.map

package/dist/controller/resolved-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolved-controller.d.ts","sourceRoot":"","sources":["../../src/controller/resolved-controller.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAGxC,mGAAmG;AACnG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,CAAC;CACnC;AAED,KAAK,OAAO,GAAG,WAAW,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;AAE/D,iHAAiH;AACjH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,GAAG,gBAAgB,EACzC,OAAO,EAAE,OAAO,GAAG,SAAS,GAC3B,kBAAkB,CAgBpB"}

package/dist/controller/resolved-controller.js

@@ -0,0 +1,47 @@
+import { DeclarationError } from '@ddd-ts-kit/kernel/declarations';
+import { declaredRoute } from './declared-route.js';
+import { presentationRegistry } from './presentation-registry.js';
+/** Reads the declaration of a controller given as its class or as an instance, and builds what must be built. */
+export function resolvedController(entry, resolve) {
+    const target = isClass(entry) ? entry : classOf(entry);
+    const spec = presentationRegistry().controllers.get(target);
+    if (spec === undefined) {
+        throw new DeclarationError(`${target.name} is mounted as a controller and carries no @Controller.`);
+    }
+    const declared = declaredRoute(target.name, spec);
+    return {
+        controller: isClass(entry) ? controllerOf(built(entry, resolve), target.name) : entry,
+        spec,
+        declared,
+        guards: declared.guards.map((guard) => guardOf(guard, resolve)),
+    };
+}
+function classOf(instance) {
+    const constructor = instance.constructor;
+    if (!isClass(constructor)) {
+        throw new DeclarationError('A controller is mounted that is the instance of no class.');
+    }
+    return constructor;
+}
+function isClass(value) {
+    return typeof value === 'function';
+}
+function controllerOf(instance, className) {
+    if (typeof instance === 'object' && instance !== null && 'handle' in instance && isHandler(instance)) {
+        return instance;
+    }
+    throw new DeclarationError(`What was built for ${className} has no handle method: it is no controller.`);
+}
+function isHandler(instance) {
+    return typeof instance.handle === 'function';
+}
+function guardOf(reference, resolve) {
+    return typeof reference === 'function' ? built(reference, resolve) : reference;
+}
+function built(target, resolve) {
+    if (resolve === undefined) {
+        throw new DeclarationError(`${target.name} is given as a class and nothing builds it: pass \`resolve\` of the application to controllerRoutes, or give an instance.`);
+    }
+    return resolve(target);
+}
+//# sourceMappingURL=resolved-controller.js.map

package/dist/controller/resolved-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolved-controller.js","sourceRoot":"","sources":["../../src/controller/resolved-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAKnE,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AAGxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAYlE,iHAAiH;AACjH,MAAM,UAAU,kBAAkB,CAChC,KAAyC,EACzC,OAA4B;IAE5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE5D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,yDAAyD,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAElD,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;QACrF,IAAI;QACJ,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,QAA0B;IACzC,MAAM,WAAW,GAAY,QAAQ,CAAC,WAAW,CAAC;IAElD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,gBAAgB,CAAC,2DAA2D,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,QAAiB,EAAE,SAAiB;IACxD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,IAAI,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrG,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,SAAS,6CAA6C,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,SAAS,CAAC,QAA6B;IAC9C,OAAO,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,SAAyB,EAAE,OAA4B;IACtE,OAAO,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,SAAS,KAAK,CAAI,MAA0C,EAAE,OAA4B;IACxF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,gBAAgB,CACxB,GAAG,MAAM,CAAC,IAAI,2HAA2H,CAC1I,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC"}

package/dist/controller/route-group-class.d.ts

@@ -0,0 +1,3 @@
+/** A class decorated with `@RouteGroup`: it is never built, it names a set of routes. */
+export type RouteGroupClass = abstract new (...args: never) => unknown;
+//# sourceMappingURL=route-group-class.d.ts.map

package/dist/controller/route-group-class.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-group-class.d.ts","sourceRoot":"","sources":["../../src/controller/route-group-class.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC"}

package/dist/controller/route-group-class.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=route-group-class.js.map

package/dist/controller/route-group-class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-group-class.js","sourceRoot":"","sources":["../../src/controller/route-group-class.ts"],"names":[],"mappings":""}

package/dist/controller/route-group-options.d.ts

@@ -0,0 +1,14 @@
+import type { GuardReference } from './guard-reference.js';
+import type { RouteGroupClass } from './route-group-class.js';
+export interface RouteGroupOptions {
+    /** The group this one refines: its prefix comes first, its tags, guards and error codes are inherited. */
+    readonly parent?: RouteGroupClass;
+    /** Put before the path of every controller of the group: `/appointments`. Left out, nothing is. */
+    readonly prefix?: string;
+    readonly tags?: readonly string[];
+    /** Run in order before every controller of the group, after the guards of the parent. */
+    readonly guards?: readonly GuardReference[];
+    /** Error codes every route of the group may answer, such as `FORBIDDEN` behind protected use cases. */
+    readonly errors?: readonly string[];
+}
+//# sourceMappingURL=route-group-options.d.ts.map

package/dist/controller/route-group-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-group-options.d.ts","sourceRoot":"","sources":["../../src/controller/route-group-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,0GAA0G;IAC1G,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;IAClC,mGAAmG;IACnG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,yFAAyF;IACzF,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,uGAAuG;IACvG,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC"}

package/dist/controller/route-group-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=route-group-options.js.map

package/dist/controller/route-group-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-group-options.js","sourceRoot":"","sources":["../../src/controller/route-group-options.ts"],"names":[],"mappings":""}

package/dist/controller/route-group.d.ts

@@ -0,0 +1,10 @@
+import type { RouteGroupClass } from './route-group-class.js';
+import type { RouteGroupOptions } from './route-group-options.js';
+/**
+ * Names a set of routes that share a prefix, tags and guards:
+ * `@RouteGroup({ prefix: '/appointments', tags: ['scheduling'], guards: [Authenticated] })` on
+ * an empty class. A controller names the class as its `group`; a group may refine another
+ * through `parent`. The class is never built: it is the name of the set.
+ */
+export declare function RouteGroup(options?: RouteGroupOptions): (target: RouteGroupClass, context?: unknown) => void;
+//# sourceMappingURL=route-group.d.ts.map

package/dist/controller/route-group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-group.d.ts","sourceRoot":"","sources":["../../src/controller/route-group.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIlE;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,IAAI,CAsBhH"}

package/dist/controller/route-group.js

@@ -0,0 +1,25 @@
+import { DeclarationError } from '@ddd-ts-kit/kernel/declarations';
+import { presentationRegistry } from './presentation-registry.js';
+const PREFIX_PATTERN = /^(\/(:[A-Za-z_][A-Za-z0-9_]*|[A-Za-z0-9._~-]+))*$/;
+/**
+ * Names a set of routes that share a prefix, tags and guards:
+ * `@RouteGroup({ prefix: '/appointments', tags: ['scheduling'], guards: [Authenticated] })` on
+ * an empty class. A controller names the class as its `group`; a group may refine another
+ * through `parent`. The class is never built: it is the name of the set.
+ */
+export function RouteGroup(options = {}) {
+    return (target) => {
+        const { groups } = presentationRegistry();
+        if (groups.has(target)) {
+            throw new DeclarationError(`${target.name} is declared as a route group twice.`);
+        }
+        if (!PREFIX_PATTERN.test(options.prefix ?? '')) {
+            throw new DeclarationError(`Route group ${target.name}: the prefix "${options.prefix}" must be made of literal segments and ":name" parameters, with no trailing slash.`);
+        }
+        if (options.parent !== undefined && !groups.has(options.parent)) {
+            throw new DeclarationError(`Route group ${target.name}: its parent ${options.parent.name} carries no @RouteGroup.`);
+        }
+        groups.set(target, Object.freeze({ ...options }));
+    };
+}
+//# sourceMappingURL=route-group.js.map

package/dist/controller/route-group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-group.js","sourceRoot":"","sources":["../../src/controller/route-group.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAIlE,MAAM,cAAc,GAAG,mDAAmD,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,OAAO,GAAsB,EAAE;IACxD,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QAE1C,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,sCAAsC,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,gBAAgB,CACxB,eAAe,MAAM,CAAC,IAAI,iBAAiB,OAAO,CAAC,MAAM,oFAAoF,CAC9I,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,gBAAgB,CACxB,eAAe,MAAM,CAAC,IAAI,gBAAgB,OAAO,CAAC,MAAM,CAAC,IAAI,0BAA0B,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC;AACJ,CAAC"}

package/dist/controller/serializer.d.ts

@@ -0,0 +1,11 @@
+import { type ClassDeclarator, type DeclaredDependencies, type DependenciesFromSignature } from '@ddd-ts-kit/kernel/declarations';
+/**
+ * The one place that turns the result of a use case into the body a client reads: dates to
+ * text, internal fields left out. Another format serializes the same result its own way.
+ */
+export interface Serializer<Result, Body> {
+    serialize(result: Result): Body;
+}
+/** Declares a serializer, so the composition root builds it and hands it to its controller. */
+export declare function Serializer<const D extends DeclaredDependencies = DependenciesFromSignature>(dependencies?: D): ClassDeclarator<Serializer<never, unknown>, D>;
+//# sourceMappingURL=serializer.d.ts.map

package/dist/controller/serializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../../src/controller/serializer.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC/B,MAAM,iCAAiC,CAAC;AAEzC;;;GAGG;AACH,MAAM,WAAW,UAAU,CAAC,MAAM,EAAE,IAAI;IACtC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,+FAA+F;AAC/F,wBAAgB,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,oBAAoB,GAAG,yBAAyB,EACzF,YAAY,CAAC,EAAE,CAAC,GACf,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAEhD"}

package/dist/controller/serializer.js

@@ -0,0 +1,6 @@
+import { Edge, } from '@ddd-ts-kit/kernel/declarations';
+/** Declares a serializer, so the composition root builds it and hands it to its controller. */
+export function Serializer(dependencies) {
+    return Edge('serializer', dependencies);
+}
+//# sourceMappingURL=serializer.js.map

package/dist/controller/serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializer.js","sourceRoot":"","sources":["../../src/controller/serializer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,GAIL,MAAM,iCAAiC,CAAC;AAUzC,+FAA+F;AAC/F,MAAM,UAAU,UAAU,CACxB,YAAgB;IAEhB,OAAO,IAAI,CAAgC,YAAY,EAAE,YAAY,CAAC,CAAC;AACzE,CAAC"}

package/dist/error/problem.d.ts

@@ -1,3 +1,4 @@
+import type { RefusalFacts } from '@ddd-ts-kit/kernel';
 import type { ValidationIssue } from '@ddd-ts-kit/validation';
 export interface Problem {
     readonly type: string;
@@ -6,6 +7,8 @@ export interface Problem {
     readonly code: string;
     readonly detail?: string;
     readonly issues?: readonly ValidationIssue[];
+    /** The facts the refusal exposes, by name. Absent when its factory exposed none: facts are private by default. */
+    readonly facts?: RefusalFacts;
     readonly requestId: string;
 }
 //# sourceMappingURL=problem.d.ts.map

package/dist/error/problem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"problem.d.ts","sourceRoot":"","sources":["../../src/error/problem.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}
+{"version":3,"file":"problem.d.ts","sourceRoot":"","sources":["../../src/error/problem.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,kHAAkH;IAClH,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/error/to-problem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"to-problem.d.ts","sourceRoot":"","sources":["../../src/error/to-problem.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAqBzF"}
+{"version":3,"file":"to-problem.d.ts","sourceRoot":"","sources":["../../src/error/to-problem.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAsBzF"}

package/dist/error/to-problem.js

@@ -1,4 +1,4 @@
-import { DomainError } from '@ddd-ts-kit/kernel';
+import { ConceptError, DomainError } from '@ddd-ts-kit/kernel';
 import { ValidationError } from '@ddd-ts-kit/validation';
 import { INTERNAL_ERROR_CODE } from './internal-error-code.js';
 import { statusTitle } from './status-title.js';
@@ -16,11 +16,52 @@ export function toProblem(error, mapper, requestId) {
         title: statusTitle(status),
         status,
         code: error.code,
-        detail: error.message,
+        detail: publicDetail(error),
         ...(error instanceof ValidationError ? { issues: error.issues } : {}),
+        ...exposedFacts(error),
         requestId,
     };
 }
+/**
+ * The sentence a client reads. The message of a refusal built by a factory may quote the facts
+ * it was given (an address, an identifier): it is answered unless it quotes one that the
+ * factory did not expose. Then the client reads a sentence made from the code alone, and the
+ * message stays where the error is logged and reported.
+ */
+function publicDetail(error) {
+    if (!(error instanceof ConceptError)) {
+        return error.message;
+    }
+    const exposed = error.exposedFacts;
+    const hidden = Object.entries(error.facts).filter(([name]) => !(name in exposed));
+    return hidden.some(([, value]) => quotes(error.message, value)) ? sentenceOf(error.code) : error.message;
+}
+/** Whether the text holds the value as a factory would write it: a text, a number, an instant, or one of what a list or a record holds. */
+function quotes(text, value) {
+    if (typeof value === 'string') {
+        return value !== '' && text.includes(value);
+    }
+    if (typeof value === 'number' || typeof value === 'bigint') {
+        return text.includes(String(value));
+    }
+    if (value instanceof Date) {
+        return text.includes(value.toISOString()) || text.includes(String(value));
+    }
+    return typeof value === 'object' && value !== null && Object.values(value).some((part) => quotes(text, part));
+}
+/** `INVALID_EMAIL` read as `Invalid email.` */
+function sentenceOf(code) {
+    const words = code.toLowerCase().replaceAll('_', ' ');
+    return `${words.charAt(0).toUpperCase()}${words.slice(1)}.`;
+}
+/** Only what the factory of the refusal exposed by name: a fact never leaves the process by default. */
+function exposedFacts(error) {
+    if (!(error instanceof ConceptError)) {
+        return {};
+    }
+    const facts = error.exposedFacts;
+    return Object.keys(facts).length === 0 ? {} : { facts };
+}
 // The message of an unexpected error quotes data and internals: it never leaves the process.
 function internalProblem(requestId) {
     return {