@endora-commerce/platform 0.100.0

package/dist/http/health.js

@@ -0,0 +1,77 @@
+import { z } from 'zod';
+export const healthResponseSchema = z.object({
+    status: z.enum(['ok', 'degraded']),
+    checks: z.object({
+        database: z.boolean(),
+        redis: z.boolean(),
+        meilisearch: z.boolean(),
+    }),
+    version: z.string(),
+    uptimeSeconds: z.number(),
+});
+/**
+ * The three probes, over the values a composition already holds. Carried across
+ * from the dissolved module's `registerModule` unchanged.
+ */
+export function platformHealthProbes(sources) {
+    return {
+        pingDatabase: async () => {
+            await sources.orm.em.getConnection().execute('select 1');
+            return true;
+        },
+        // No Redis in this deployment is not "healthy by omission": the endpoint
+        // reports what is reachable, and an absent client is not.
+        pingRedis: async () => sources.redis !== undefined && (await sources.redis.ping()) === 'PONG',
+        pingMeilisearch: async () => {
+            const base = process.env['MEILISEARCH_URL'] ?? 'http://localhost:7700';
+            const res = await fetch(`${base}/health`, { signal: AbortSignal.timeout(2000) });
+            return res.ok;
+        },
+    };
+}
+/**
+ * The probe as a plugin, ready to go into a composition's `modules` array.
+ *
+ * There are two composition roots — `composeApp` and the test kit's
+ * `composeTestServer` — and each assembles that array itself. They both call
+ * this, for the reason the test kit already gives about
+ * `registerRequestScopeHook`: one factory with two call sites is a shared
+ * seam, two hand-written registrations are a drift waiting to happen. The
+ * module this replaced existed in production and nowhere else for exactly that
+ * reason, its route having been wired by an inline plugin in one root only.
+ */
+export function healthRoutePlugin(sources) {
+    const deps = platformHealthProbes(sources);
+    return async (app) => {
+        await registerHealthRoutes(app, deps);
+    };
+}
+export async function registerHealthRoutes(app, deps) {
+    app.get('/api/v1/_health', async (_req, reply) => {
+        const [database, redis, meilisearch] = await Promise.all([
+            runCheck(deps.pingDatabase),
+            runCheck(deps.pingRedis),
+            runCheck(deps.pingMeilisearch),
+        ]);
+        const allOk = database && redis && meilisearch;
+        const body = {
+            status: allOk ? 'ok' : 'degraded',
+            checks: { database, redis, meilisearch },
+            version: process.env['npm_package_version'] ?? '0.0.0',
+            uptimeSeconds: Math.round(process.uptime()),
+        };
+        // Return the reply (not a bare `reply.send()` in an async handler) — Fastify
+        // v5 otherwise treats the resolved `undefined` as a second payload and the
+        // onSend chain double-writes headers (ERR_HTTP_HEADERS_SENT → process crash).
+        return reply.status(allOk ? 200 : 503).send(body);
+    });
+}
+async function runCheck(fn) {
+    try {
+        return await fn();
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=health.js.map

package/dist/http/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/http/health.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgDxB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;QAClB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;KACzB,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1B,CAAC,CAAC;AAYH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA2B;IAC9D,OAAO;QACL,YAAY,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,yEAAyE;QACzE,0DAA0D;QAC1D,SAAS,EAAE,KAAK,IAAI,EAAE,CACpB,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM;QACxE,eAAe,EAAE,KAAK,IAAI,EAAE;YAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,uBAAuB,CAAC;YACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjF,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA2B;IAE3B,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAoB,EAAE,IAAgB;IAC/E,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC;SAC/B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,IAAI,KAAK,IAAI,WAAW,CAAC;QAC/C,MAAM,IAAI,GAAmB;YAC3B,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;YACjC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;YACxC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,OAAO;YACtD,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;SAC5C,CAAC;QACF,6EAA6E;QAC7E,2EAA2E;QAC3E,8EAA8E;QAC9E,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,EAA0B;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/http/index.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The HTTP layer's published surface. Peer of `kernel/`, `events/`, `tenancy/`,
+ * `commands/`; becomes the `./http` subpath of `@endora-commerce/platform`
+ * (feature 080, D-160.1/D-160.7), and that subpath is the boundary a future
+ * `@endora-commerce/http` would take (D-160.6).
+ *
+ * **This barrel is a package boundary in waiting, so it carries this
+ * directory's symbols and nothing else.** Re-exporting a kernel or tenancy
+ * symbol here to save a consumer one import line spends the split option for a
+ * convenience.
+ *
+ * What is deliberately absent, and why — `contracts/host-package.md` §1.3/§1.4
+ * classifies each of these as host-internal reach that no packaged module may
+ * have:
+ *
+ *  - `registerErrorEnvelope` / `ErrorEnvelopeOptions` (`error-envelope.ts`) — a
+ *    composition root calls the registrar once and no module calls it at all.
+ *    The file is deliberately **not** split: `ErrorEnvelopeOptions` is the
+ *    injection seam D-52/D-53 cite for a platform file that needs something a
+ *    module owns, and separating it from its handler would break that pattern.
+ *  - `ModulePlugin` (`server.ts`) — a composed module ships `backend.ts` and
+ *    uses `ctx.routes` (D-103). A module still carrying a `plugin.ts` converts
+ *    before it can be packaged.
+ *  - `testAdminUserId` / `TestActorCarrier` (`test-actor-carrier.ts`) — the file
+ *    exists to narrow this repository's test-harness Fastify augmentation. An
+ *    installed package has no relationship to that harness.
+ *  - `ApiInterceptorRegistry` (`interceptors/`) — `ctx.interceptors` is the
+ *    composed seam.
+ *
+ * **One import here is not an export**, and it is load-bearing rather than
+ * stylistic. `./request-actor.js` declares `request.actor` and
+ * `request.adminActor` on `FastifyRequest` and exports no symbol at all; an
+ * ambient augmentation reaches a program only if the file declaring it is *in*
+ * that program, so the barrel imports it for its side effect and every consumer
+ * of this subpath gets the declaration without naming a file
+ * (`specs/110-instance-repository/` T118b).
+ *
+ * Deleting it does not break a build *here* — the platform compiles as one
+ * program and `include` puts that file in it whatever anybody imports — it
+ * breaks `request.actor` in every consumer at once. Measured: with the line
+ * commented out and every package rebuilt, `pnpm --filter backend run
+ * typecheck` reports **29** `TS2339: Property 'actor' does not exist` against
+ * **0** with it.
+ */
+import './request-actor.js';
+export { HttpError } from './error-envelope.js';
+export { productAudienceOf, markPersonalisedPricing } from './product-audience.js';
+export { StorefrontRevalidator } from './storefront-revalidator.js';
+export { encodeCursor, decodeCursor } from './cursor.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,oBAAoB,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/http/index.js

@@ -0,0 +1,50 @@
+/**
+ * The HTTP layer's published surface. Peer of `kernel/`, `events/`, `tenancy/`,
+ * `commands/`; becomes the `./http` subpath of `@endora-commerce/platform`
+ * (feature 080, D-160.1/D-160.7), and that subpath is the boundary a future
+ * `@endora-commerce/http` would take (D-160.6).
+ *
+ * **This barrel is a package boundary in waiting, so it carries this
+ * directory's symbols and nothing else.** Re-exporting a kernel or tenancy
+ * symbol here to save a consumer one import line spends the split option for a
+ * convenience.
+ *
+ * What is deliberately absent, and why — `contracts/host-package.md` §1.3/§1.4
+ * classifies each of these as host-internal reach that no packaged module may
+ * have:
+ *
+ *  - `registerErrorEnvelope` / `ErrorEnvelopeOptions` (`error-envelope.ts`) — a
+ *    composition root calls the registrar once and no module calls it at all.
+ *    The file is deliberately **not** split: `ErrorEnvelopeOptions` is the
+ *    injection seam D-52/D-53 cite for a platform file that needs something a
+ *    module owns, and separating it from its handler would break that pattern.
+ *  - `ModulePlugin` (`server.ts`) — a composed module ships `backend.ts` and
+ *    uses `ctx.routes` (D-103). A module still carrying a `plugin.ts` converts
+ *    before it can be packaged.
+ *  - `testAdminUserId` / `TestActorCarrier` (`test-actor-carrier.ts`) — the file
+ *    exists to narrow this repository's test-harness Fastify augmentation. An
+ *    installed package has no relationship to that harness.
+ *  - `ApiInterceptorRegistry` (`interceptors/`) — `ctx.interceptors` is the
+ *    composed seam.
+ *
+ * **One import here is not an export**, and it is load-bearing rather than
+ * stylistic. `./request-actor.js` declares `request.actor` and
+ * `request.adminActor` on `FastifyRequest` and exports no symbol at all; an
+ * ambient augmentation reaches a program only if the file declaring it is *in*
+ * that program, so the barrel imports it for its side effect and every consumer
+ * of this subpath gets the declaration without naming a file
+ * (`specs/110-instance-repository/` T118b).
+ *
+ * Deleting it does not break a build *here* — the platform compiles as one
+ * program and `include` puts that file in it whatever anybody imports — it
+ * breaks `request.actor` in every consumer at once. Measured: with the line
+ * commented out and every package rebuilt, `pnpm --filter backend run
+ * typecheck` reports **29** `TS2339: Property 'actor' does not exist` against
+ * **0** with it.
+ */
+import './request-actor.js';
+export { HttpError } from './error-envelope.js';
+export { productAudienceOf, markPersonalisedPricing } from './product-audience.js';
+export { StorefrontRevalidator } from './storefront-revalidator.js';
+export { encodeCursor, decodeCursor } from './cursor.js';
+//# sourceMappingURL=index.js.map

package/dist/http/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,oBAAoB,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/http/interceptors/dispatch.d.ts

@@ -0,0 +1,14 @@
+import type { FastifyReply, FastifyRequest, RouteOptions } from 'fastify';
+import type { ApiInterceptorRegistry } from './registry.js';
+/**
+ * `onRoute` listener that appends the pre-phase dispatcher to every route.
+ * Endpoints with no registered pre-interceptors pay one Map lookup.
+ */
+export declare function makePreDispatchOnRoute(registry: ApiInterceptorRegistry): (route: RouteOptions) => void;
+/**
+ * Global `preSerialization` hook running post-interceptors over successful
+ * object payloads. Error responses (>= 400) — including envelopes produced by
+ * the error handler — pass through untouched.
+ */
+export declare function makePostDispatchPreSerialization(registry: ApiInterceptorRegistry): (request: FastifyRequest, reply: FastifyReply, payload: unknown) => Promise<unknown>;
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/http/interceptors/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/http/interceptors/dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,cAAc,EACd,YAAY,EAEb,MAAM,SAAS,CAAC;AAEjB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AA8C5D;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,sBAAsB,GAC/B,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAwC/B;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,sBAAsB,IAE7E,SAAS,cAAc,EACvB,OAAO,YAAY,EACnB,SAAS,OAAO,KACf,OAAO,CAAC,OAAO,CAAC,CAwBpB"}

package/dist/http/interceptors/dispatch.js

@@ -0,0 +1,113 @@
+import { HttpError } from '../error-envelope.js';
+/**
+ * Runtime dispatch for API interceptors (feature 060).
+ *
+ * Pre phase: an `onRoute` hook appends a dispatch function to the END of each
+ * route's `preHandler` chain, so pre-interceptors run after the route's own
+ * auth/authz guards and after Zod validation, immediately before the handler.
+ * (An app-level `preHandler` hook would run BEFORE route-level guards — that
+ * ordering would let interceptors run on unauthorized requests.)
+ *
+ * Post phase: a global `preSerialization` hook reshapes successful (<400)
+ * object payloads. Streaming/Buffer/string payloads bypass Fastify
+ * serialization entirely, so post-interceptors never touch them.
+ */
+function requestIdentity(request) {
+    return `${request.method.toUpperCase()} ${request.routeOptions.url ?? request.url}`;
+}
+function requestInfo(request, identity, reg) {
+    return {
+        method: request.method.toUpperCase(),
+        url: request.url,
+        identity,
+        headers: request.headers,
+        log: request.log.child({
+            interceptorModule: reg.module,
+            interceptorId: reg.id,
+            phase: reg.phase,
+            interceptorTarget: identity,
+        }),
+        raw: request,
+    };
+}
+/**
+ * `onRoute` listener that appends the pre-phase dispatcher to every route.
+ * Endpoints with no registered pre-interceptors pay one Map lookup.
+ */
+export function makePreDispatchOnRoute(registry) {
+    const dispatchPre = async function dispatchApiInterceptorsPre(request, _reply) {
+        const identity = requestIdentity(request);
+        const entries = registry.preFor(identity);
+        if (entries.length === 0)
+            return;
+        for (const reg of entries) {
+            if (!registry.isModuleEnabled(reg.module))
+                continue;
+            const info = requestInfo(request, identity, reg);
+            try {
+                const outcome = await reg.handler({
+                    request: info,
+                    body: request.body,
+                    query: request.query,
+                    params: request.params,
+                });
+                if (outcome && typeof outcome === 'object' && 'body' in outcome) {
+                    request.body = outcome.body;
+                }
+                info.log.debug('api interceptor (pre) applied');
+            }
+            catch (err) {
+                if (err instanceof HttpError) {
+                    // A veto is a normal business outcome, not a failure (FR-003/FR-009).
+                    info.log.info({ code: err.code, statusCode: err.statusCode }, 'api interceptor vetoed request');
+                    throw err;
+                }
+                info.log.error({ err }, 'api interceptor (pre) failed');
+                throw err;
+            }
+        }
+    };
+    return (route) => {
+        const existing = route.preHandler;
+        const chain = existing === undefined ? [] : Array.isArray(existing) ? [...existing] : [existing];
+        chain.push(dispatchPre);
+        route.preHandler = chain;
+    };
+}
+/**
+ * Global `preSerialization` hook running post-interceptors over successful
+ * object payloads. Error responses (>= 400) — including envelopes produced by
+ * the error handler — pass through untouched.
+ */
+export function makePostDispatchPreSerialization(registry) {
+    return async function dispatchApiInterceptorsPost(request, reply, payload) {
+        if (reply.statusCode >= 400)
+            return payload;
+        const identity = requestIdentity(request);
+        const entries = registry.postFor(identity);
+        if (entries.length === 0)
+            return payload;
+        let current = payload;
+        for (const reg of entries) {
+            if (!registry.isModuleEnabled(reg.module))
+                continue;
+            const info = requestInfo(request, identity, reg);
+            try {
+                const outcome = await reg.handler({
+                    request: info,
+                    statusCode: reply.statusCode,
+                    payload: current,
+                });
+                if (outcome !== undefined)
+                    current = outcome;
+                info.log.debug('api interceptor (post) applied');
+            }
+            catch (err) {
+                info.log.error({ err }, 'api interceptor (post) failed');
+                throw err;
+            }
+        }
+        return current;
+    };
+}
+//# sourceMappingURL=dispatch.js.map

package/dist/http/interceptors/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/http/interceptors/dispatch.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AASjD;;;;;;;;;;;;GAYG;AAEH,SAAS,eAAe,CAAC,OAAuB;IAC9C,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,WAAW,CAClB,OAAuB,EACvB,QAAgB,EAChB,GAAyB;IAEzB,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;QACpC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YACrB,iBAAiB,EAAE,GAAG,CAAC,MAAM;YAC7B,aAAa,EAAE,GAAG,CAAC,EAAE;YACrB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,iBAAiB,EAAE,QAAQ;SAC5B,CAAC;QACF,GAAG,EAAE,OAAO;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgC;IAEhC,MAAM,WAAW,GAA0B,KAAK,UAAU,0BAA0B,CAClF,OAAuB,EACvB,MAAoB;QAEpB,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAO,GAAG,CAAC,OAAiC,CAAC;oBAC3D,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBACH,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;oBAChE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;gBAC9B,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;oBAC7B,sEAAsE;oBACtE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,gCAAgC,CAAC,CAAC;oBAChG,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;gBACxD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,KAAmB,EAAQ,EAAE;QACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC;QAClC,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAAC,QAAgC;IAC/E,OAAO,KAAK,UAAU,2BAA2B,CAC/C,OAAuB,EACvB,KAAmB,EACnB,OAAgB;QAEhB,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG;YAAE,OAAO,OAAO,CAAC;QAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACzC,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAO,GAAG,CAAC,OAAkC,CAAC;oBAC5D,OAAO,EAAE,IAAI;oBACb,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;gBACH,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,GAAG,OAAO,CAAC;gBAC7C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;gBACzD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC"}

package/dist/http/interceptors/index.d.ts

@@ -0,0 +1,6 @@
+export { ApiInterceptorRegistry, type ApiInterceptorRegistryOptions } from './registry.js';
+export { RouteTable, type RouteTableEntry } from './route-table.js';
+export { makePreDispatchOnRoute, makePostDispatchPreSerialization } from './dispatch.js';
+export { validateRegistrations } from './validation.js';
+export type { InterceptorListItem, InterceptorPhase, InterceptorRegistration, InterceptorRequestInfo, PostInterceptorContext, PostInterceptorHandler, PreInterceptorContext, PreInterceptorHandler, ResolvedRegistration, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/interceptors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/http/interceptors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,KAAK,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC"}

package/dist/http/interceptors/index.js

@@ -0,0 +1,5 @@
+export { ApiInterceptorRegistry } from './registry.js';
+export { RouteTable } from './route-table.js';
+export { makePreDispatchOnRoute, makePostDispatchPreSerialization } from './dispatch.js';
+export { validateRegistrations } from './validation.js';
+//# sourceMappingURL=index.js.map

package/dist/http/interceptors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/interceptors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAsC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAwB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/http/interceptors/registry.d.ts

@@ -0,0 +1,44 @@
+import type { InterceptorListItem, InterceptorRegistration, ResolvedRegistration } from './types.js';
+export interface ApiInterceptorRegistryOptions {
+    /**
+     * Lifecycle gate consulted per execution. Composition wires this to the
+     * `_lifecycle` enabled-set cache; the registry itself never imports the
+     * lifecycle module (Principle I). Defaults to always-enabled (unit tests,
+     * bare harnesses).
+     */
+    isModuleEnabled?: (moduleId: string) => boolean;
+}
+/**
+ * Central registration point for API interceptors (feature 060).
+ *
+ * One instance per composed application. Modules receive the handle through
+ * their plugin factory options (core) or `OverlayModuleContext` (overlay) and
+ * call `register()` during composition. `buildServer` seals the registry in
+ * an `onReady` hook after boot validation — the dispatch index is immutable
+ * once traffic can flow.
+ */
+export declare class ApiInterceptorRegistry {
+    #private;
+    readonly isModuleEnabled: (moduleId: string) => boolean;
+    constructor(options?: ApiInterceptorRegistryOptions);
+    register(registration: InterceptorRegistration): void;
+    /** All raw registrations — consumed by boot validation. */
+    registrations(): readonly ResolvedRegistration[];
+    /**
+     * Freeze the registry and build the per-identity dispatch index.
+     * Called once from `buildServer`'s onReady hook after boot validation.
+     * Idempotent so repeated `app.ready()` calls are harmless.
+     */
+    seal(): void;
+    /** Pre-phase entries for an identity, in execution order. Empty before seal. */
+    preFor(identity: string): readonly ResolvedRegistration[];
+    /** Post-phase entries for an identity, in execution order. Empty before seal. */
+    postFor(identity: string): readonly ResolvedRegistration[];
+    /**
+     * The execution plan: one row per (target, registration), sorted by target,
+     * then phase (pre before post), then execution order. Serves the read-only
+     * admin diagnostics endpoint and tests.
+     */
+    list(): InterceptorListItem[];
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/http/interceptors/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/http/interceptors/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAIpB,MAAM,WAAW,6BAA6B;IAC5C;;;;;OAKG;IACH,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;CACjD;AAOD;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;;IACjC,QAAQ,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;gBAO5C,OAAO,GAAE,6BAAkC;IAIvD,QAAQ,CAAC,YAAY,EAAE,uBAAuB,GAAG,IAAI;IAkCrD,2DAA2D;IAC3D,aAAa,IAAI,SAAS,oBAAoB,EAAE;IAIhD;;;;OAIG;IACH,IAAI,IAAI,IAAI;IAmBZ,gFAAgF;IAChF,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE;IAIzD,iFAAiF;IACjF,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE;IAI1D;;;;OAIG;IACH,IAAI,IAAI,mBAAmB,EAAE;CAc9B"}

package/dist/http/interceptors/registry.js

@@ -0,0 +1,123 @@
+const TARGET_RE = /^(GET|POST|PUT|PATCH|DELETE|OPTIONS) \/\S+$/;
+/**
+ * Central registration point for API interceptors (feature 060).
+ *
+ * One instance per composed application. Modules receive the handle through
+ * their plugin factory options (core) or `OverlayModuleContext` (overlay) and
+ * call `register()` during composition. `buildServer` seals the registry in
+ * an `onReady` hook after boot validation — the dispatch index is immutable
+ * once traffic can flow.
+ */
+export class ApiInterceptorRegistry {
+    isModuleEnabled;
+    #registrations = [];
+    #keys = new Set();
+    #sealed = false;
+    #index = new Map();
+    constructor(options = {}) {
+        this.isModuleEnabled = options.isModuleEnabled ?? (() => true);
+    }
+    register(registration) {
+        if (this.#sealed) {
+            throw new Error(`[api-interceptor] registry is sealed — module '${registration.module}' tried to register ` +
+                `interceptor '${registration.id}' after app.ready(). Register during composition.`);
+        }
+        const key = `${registration.module}\0${registration.id}`;
+        if (this.#keys.has(key)) {
+            throw new Error(`[api-interceptor] duplicate registration: module '${registration.module}' interceptor ` +
+                `'${registration.id}' is already registered.`);
+        }
+        const rawTargets = Array.isArray(registration.target)
+            ? registration.target
+            : [registration.target];
+        if (rawTargets.length === 0) {
+            throw new Error(`[api-interceptor] module '${registration.module}' interceptor '${registration.id}' declares no target.`);
+        }
+        const targets = rawTargets.map((t) => normalizeTarget(registration, t));
+        this.#keys.add(key);
+        this.#registrations.push({
+            module: registration.module,
+            id: registration.id,
+            phase: registration.phase,
+            order: registration.order ?? 0,
+            targets,
+            handler: registration.handler,
+        });
+    }
+    /** All raw registrations — consumed by boot validation. */
+    registrations() {
+        return this.#registrations;
+    }
+    /**
+     * Freeze the registry and build the per-identity dispatch index.
+     * Called once from `buildServer`'s onReady hook after boot validation.
+     * Idempotent so repeated `app.ready()` calls are harmless.
+     */
+    seal() {
+        if (this.#sealed)
+            return;
+        this.#sealed = true;
+        for (const reg of this.#registrations) {
+            for (const target of reg.targets) {
+                let entry = this.#index.get(target);
+                if (!entry) {
+                    entry = { pre: [], post: [] };
+                    this.#index.set(target, entry);
+                }
+                entry[reg.phase].push(reg);
+            }
+        }
+        for (const entry of this.#index.values()) {
+            entry.pre.sort(executionOrder);
+            entry.post.sort(executionOrder);
+        }
+    }
+    /** Pre-phase entries for an identity, in execution order. Empty before seal. */
+    preFor(identity) {
+        return this.#index.get(identity)?.pre ?? EMPTY;
+    }
+    /** Post-phase entries for an identity, in execution order. Empty before seal. */
+    postFor(identity) {
+        return this.#index.get(identity)?.post ?? EMPTY;
+    }
+    /**
+     * The execution plan: one row per (target, registration), sorted by target,
+     * then phase (pre before post), then execution order. Serves the read-only
+     * admin diagnostics endpoint and tests.
+     */
+    list() {
+        const items = [];
+        const targets = [...this.#index.keys()].sort();
+        for (const target of targets) {
+            const entry = this.#index.get(target);
+            if (!entry)
+                continue;
+            for (const phase of ['pre', 'post']) {
+                for (const reg of entry[phase]) {
+                    items.push({ target, phase, order: reg.order, module: reg.module, id: reg.id });
+                }
+            }
+        }
+        return items;
+    }
+}
+const EMPTY = Object.freeze([]);
+function executionOrder(a, b) {
+    if (a.order !== b.order)
+        return a.order - b.order;
+    if (a.module !== b.module)
+        return a.module < b.module ? -1 : 1;
+    if (a.id !== b.id)
+        return a.id < b.id ? -1 : 1;
+    return 0;
+}
+function normalizeTarget(registration, raw) {
+    const spaceIdx = raw.indexOf(' ');
+    const candidate = spaceIdx > 0 ? `${raw.slice(0, spaceIdx).toUpperCase()}${raw.slice(spaceIdx)}` : raw;
+    if (!TARGET_RE.test(candidate)) {
+        throw new Error(`[api-interceptor] module '${registration.module}' interceptor '${registration.id}' has a ` +
+            `malformed target '${raw}' — expected '<METHOD> /path/pattern', e.g. 'POST /api/v1/orders'.`);
+    }
+    return candidate;
+}
+//# sourceMappingURL=registry.js.map

package/dist/http/interceptors/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/http/interceptors/registry.ts"],"names":[],"mappings":"AAMA,MAAM,SAAS,GAAG,6CAA6C,CAAC;AAiBhE;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAsB;IACxB,eAAe,CAAgC;IAExD,cAAc,GAA2B,EAAE,CAAC;IAC5C,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1B,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvC,YAAY,UAAyC,EAAE;QACrD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IAED,QAAQ,CAAC,YAAqC;QAC5C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,kDAAkD,YAAY,CAAC,MAAM,sBAAsB;gBACzF,gBAAgB,YAAY,CAAC,EAAE,mDAAmD,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,MAAM,KAAK,YAAY,CAAC,EAAE,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,qDAAqD,YAAY,CAAC,MAAM,gBAAgB;gBACtF,IAAI,YAAY,CAAC,EAAE,0BAA0B,CAChD,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;YACnD,CAAC,CAAC,YAAY,CAAC,MAAM;YACrB,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,6BAA6B,YAAY,CAAC,MAAM,kBAAkB,YAAY,CAAC,EAAE,uBAAuB,CACzG,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YACvB,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,KAAK,EAAE,YAAY,CAAC,KAAK,IAAI,CAAC;YAC9B,OAAO;YACP,OAAO,EAAE,YAAY,CAAC,OAAO;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,aAAa;QACX,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtC,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,KAAK,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;oBAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACjC,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,KAAK,CAAC;IACjD,CAAC;IAED,iFAAiF;IACjF,OAAO,CAAC,QAAgB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,KAAK,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,MAAM,KAAK,GAA0B,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,CAAU,EAAE,CAAC;gBAC7C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,KAAK,GAAoC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjE,SAAS,cAAc,CAAC,CAAuB,EAAE,CAAuB;IACtE,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CACtB,YAA4D,EAC5D,GAAW;IAEX,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,SAAS,GACb,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACvF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,6BAA6B,YAAY,CAAC,MAAM,kBAAkB,YAAY,CAAC,EAAE,UAAU;YACzF,qBAAqB,GAAG,oEAAoE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/http/interceptors/route-table.d.ts

@@ -0,0 +1,33 @@
+import type { RouteOptions } from 'fastify';
+declare module 'fastify' {
+    interface FastifyContextConfig {
+        /**
+         * Marks a route whose payload is a binary/file stream (PDF, CSV, image,
+         * XML download). Post-phase interceptors targeting such routes are
+         * rejected at boot validation (feature 060).
+         */
+        streamingResponse?: boolean;
+    }
+}
+/** What boot validation and dispatch need to know about one mounted route. */
+export interface RouteTableEntry {
+    readonly identity: string;
+    readonly streamingResponse: boolean;
+}
+/**
+ * Collects every mounted route's endpoint identity via a Fastify `onRoute`
+ * hook (feature 060). `onRoute` hooks are inherited by encapsulated child
+ * contexts, so routes mounted inside `defineModuleRoutes` wrappers are
+ * covered uniformly. The identity key — `"<METHOD> <pattern>"` — matches
+ * both the OpenAPI auto-registration dedupe key and what
+ * `request.routeOptions` yields at dispatch time.
+ */
+export declare class RouteTable {
+    #private;
+    /** Bound listener — pass directly to `app.addHook('onRoute', ...)`. */
+    readonly onRouteListener: (route: RouteOptions) => void;
+    has(identity: string): boolean;
+    get(identity: string): RouteTableEntry | undefined;
+    entries(): readonly RouteTableEntry[];
+}
+//# sourceMappingURL=route-table.d.ts.map

package/dist/http/interceptors/route-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-table.d.ts","sourceRoot":"","sources":["../../../src/http/interceptors/route-table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,oBAAoB;QAC5B;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B;CACF;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;CACrC;AAKD;;;;;;;GAOG;AACH,qBAAa,UAAU;;IAGrB,uEAAuE;IACvE,QAAQ,CAAC,eAAe,GAAI,OAAO,YAAY,KAAG,IAAI,CAapD;IAEF,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI9B,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIlD,OAAO,IAAI,SAAS,eAAe,EAAE;CAGtC"}

package/dist/http/interceptors/route-table.js

@@ -0,0 +1,39 @@
+/** Routes whose payload is not interceptable and that never appear in the table. */
+const EXCLUDED_URLS = new Set(['/api/v1/_openapi.json', '/api/v1/_docs']);
+/**
+ * Collects every mounted route's endpoint identity via a Fastify `onRoute`
+ * hook (feature 060). `onRoute` hooks are inherited by encapsulated child
+ * contexts, so routes mounted inside `defineModuleRoutes` wrappers are
+ * covered uniformly. The identity key — `"<METHOD> <pattern>"` — matches
+ * both the OpenAPI auto-registration dedupe key and what
+ * `request.routeOptions` yields at dispatch time.
+ */
+export class RouteTable {
+    #map = new Map();
+    /** Bound listener — pass directly to `app.addHook('onRoute', ...)`. */
+    onRouteListener = (route) => {
+        if (EXCLUDED_URLS.has(route.url))
+            return;
+        const methods = Array.isArray(route.method) ? route.method : [route.method];
+        const streamingResponse = route.config?.streamingResponse === true;
+        for (const m of methods) {
+            const method = String(m).toUpperCase();
+            // Fastify auto-registers a HEAD mirror for every GET; it is not an
+            // interceptable endpoint identity of its own.
+            if (method === 'HEAD')
+                continue;
+            const identity = `${method} ${route.url}`;
+            this.#map.set(identity, { identity, streamingResponse });
+        }
+    };
+    has(identity) {
+        return this.#map.has(identity);
+    }
+    get(identity) {
+        return this.#map.get(identity);
+    }
+    entries() {
+        return [...this.#map.values()];
+    }
+}
+//# sourceMappingURL=route-table.js.map

package/dist/http/interceptors/route-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-table.js","sourceRoot":"","sources":["../../../src/http/interceptors/route-table.ts"],"names":[],"mappings":"AAmBA,oFAAoF;AACpF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,OAAO,UAAU;IACrB,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE1C,uEAAuE;IAC9D,eAAe,GAAG,CAAC,KAAmB,EAAQ,EAAE;QACvD,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5E,MAAM,iBAAiB,GACpB,KAAK,CAAC,MAAsD,EAAE,iBAAiB,KAAK,IAAI,CAAC;QAC5F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACvC,mEAAmE;YACnE,8CAA8C;YAC9C,IAAI,MAAM,KAAK,MAAM;gBAAE,SAAS;YAChC,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC;IAEF,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;CACF"}