@forinda/kickjs 5.16.0 → 5.18.0-alpha.0

package/dist/application-DnnqoDWx.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"application-DnnqoDWx.mjs","names":[],"sources":["../src/http/middleware/request-scope.ts","../src/http/application.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport type { Request, Response, NextFunction } from 'express'\nimport { requestStore, type RequestStore } from '../request-store'\n\n/**\n * Marker symbol stamped on the function returned by {@link requestScopeMiddleware}.\n *\n * `Application.setup()` uses {@link isRequestScopeMiddleware} to detect whether\n * the user-supplied middleware list already contains the request-scope wrapper,\n * and skips its automatic auto-mount when one is found. Lets adopters control\n * the exact position of the ALS frame in their pipeline (e.g., after a custom\n * tracing wrapper) without ending up with two nested frames.\n */\n// `Symbol.for(...)` returns a plain `symbol` (not `unique symbol`), but the\n// runtime detection marker doesn't need the unique nominal property — it only\n// needs the interned-slot reference equality that `Symbol.for` already provides.\nconst REQUEST_SCOPE_MIDDLEWARE_MARKER = Symbol.for('@kickjs/requestScopeMiddleware')\n\n/**\n * Wraps each request in an AsyncLocalStorage context.\n * Enables REQUEST-scoped DI and automatic requestId propagation to logs.\n *\n * Should be mounted early in the middleware pipeline (before route handlers).\n * `Application` mounts this automatically unless `contextStore: 'manual'` is set\n * or the user already includes one in their middleware list.\n */\nexport function requestScopeMiddleware() {\n  const mw = (req: Request, _res: Response, next: NextFunction) => {\n    const requestIdHeader = req.headers['x-request-id']\n    const requestId =\n      (Array.isArray(requestIdHeader) ? requestIdHeader[0] : requestIdHeader) || crypto.randomUUID()\n    const store: RequestStore = {\n      requestId,\n      instances: new Map(),\n      // Explicit generic locks the \"string keys only\" decision\n      // (architecture.md §20.12 #4) at construction time, so accidental\n      // non-string keys can't slip in via the inferred Map<any, any>.\n      values: new Map<string, unknown>(),\n    }\n    // Surface the requestId on req so the standalone requestId() middleware\n    // (when also mounted) reuses this value instead of generating a divergent\n    // second one. Without this, log lines that read from the ALS store would\n    // disagree with the X-Request-Id response header for any request that\n    // didn't carry an inbound x-request-id header.\n    ;(req as Request & { requestId?: string }).requestId = requestId\n    requestStore.run(store, () => next())\n  }\n  ;(mw as unknown as Record<symbol, unknown>)[REQUEST_SCOPE_MIDDLEWARE_MARKER] = true\n  return mw\n}\n\n/**\n * Returns `true` when `value` is the function produced by {@link requestScopeMiddleware}.\n *\n * Detection uses a `Symbol.for(...)` marker so the check survives different\n * copies of `@forinda/kickjs` loaded under different module identities (e.g.,\n * a published package alongside a workspace-linked one during local dev).\n */\nexport function isRequestScopeMiddleware(value: unknown): boolean {\n  if (typeof value !== 'function') return false\n  return (value as unknown as Record<symbol, unknown>)[REQUEST_SCOPE_MIDDLEWARE_MARKER] === true\n}\n","import http from 'node:http'\nimport express, { type Express, type RequestHandler } from 'express'\nimport {\n  Container,\n  createLogger,\n  Logger,\n  normalizePath,\n  tokenName,\n  METADATA,\n  type AppModule,\n  type AppModuleClass,\n  type AppModuleEntry,\n  type AppAdapter,\n  type AdapterContext,\n  type AdapterMiddleware,\n  type ContributorRegistrations,\n  type KickPlugin,\n  type ModuleRegistry,\n  type RouteDefinition,\n  type SourcedRegistration,\n  mountSort,\n  MutableModuleRegistry,\n} from '../core'\nimport { moduleRouteMissingControllerError } from '../core/kick-errors'\nimport { getClassMeta } from '../core/metadata'\nimport { requestId } from './middleware/request-id'\nimport { notFoundHandler, errorHandler } from './middleware/error-handler'\nimport { requestScopeMiddleware, isRequestScopeMiddleware } from './middleware/request-scope'\nimport { _setExternalContributorSources, buildRoutes } from './router-builder'\nimport { requestStore } from './request-store'\n\nconst log = createLogger('Application')\n\n/**\n * A middleware entry in the declarative pipeline.\n * Can be a bare handler or an object with path scoping.\n */\nexport type MiddlewareEntry = RequestHandler | { path: string; handler: RequestHandler }\n\nexport interface ApplicationOptions {\n  /**\n   * Feature modules to load. Accepts both class form\n   * (`SomeModule extends AppModule`, instantiated via `new`) and\n   * instance form (output of {@link defineModule}'s factory call,\n   * e.g. `TasksModule({ scope: 'admin' })`) — the loader discriminates\n   * and either `new`-s the class or uses the instance directly.\n   *\n   * Static path — for conditional / dynamic registration, use the\n   * {@link ApplicationOptions.setup} callback instead.\n   */\n  modules: AppModuleEntry[]\n\n  /**\n   * Imperative module registration callback. Receives a\n   * {@link ModuleRegistry} you call `.mount(module)` on to register\n   * modules conditionally — based on env flags, runtime config, a\n   * tenant list, etc. Runs after every plugin's `setup()` hook and\n   * after the static `modules: [...]` array is collected.\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules: [HelloModule()],\n   *   setup(registry) {\n   *     if (env.ENABLE_ADMIN) registry.mount(AdminModule())\n   *   },\n   * })\n   * ```\n   */\n  setup?(registry: ModuleRegistry): void\n  /** Adapters that hook into the lifecycle (DB, Redis, Swagger, etc.) */\n  adapters?: AppAdapter[]\n  /** Server port (falls back to PORT env var, then 3000) */\n  port?: number\n  /** Global API prefix (default: '/api') */\n  apiPrefix?: string\n  /** Default API version (default: 1) — routes become /{prefix}/v{version}/{path} */\n  defaultVersion?: number\n\n  /**\n   * Global middleware pipeline. Declared in order.\n   * Replaces the hardcoded middleware stack — you control exactly what runs.\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules,\n   *   middlewares: [\n   *     helmet(),\n   *     cors(),\n   *     compression(),\n   *     morgan('dev'),\n   *     express.json({ limit: '1mb' }),\n   *   ],\n   * })\n   * ```\n   *\n   * If omitted, a sensible default is applied:\n   *   requestId(), express.json({ limit: '100kb' })\n   */\n  middlewares?: MiddlewareEntry[]\n  /**\n   * @deprecated Use {@link ApplicationOptions.middlewares} (plural).\n   * Kept as an alias for back-compat; `middlewares` wins when both are\n   * set.\n   */\n  middleware?: MiddlewareEntry[]\n\n  /** Plugins that bundle modules, adapters, middleware, and DI bindings */\n  plugins?: KickPlugin[]\n\n  /**\n   * Global Context Contributors (#107) that apply to every route in the\n   * application. Merge into the per-route pipeline at the `'global'`\n   * precedence level — they lose to module, adapter, class, and method\n   * contributors with the same key, providing app-wide defaults that any\n   * narrower scope can override.\n   *\n   * @example\n   * ```ts\n   * const StartedAt = defineContextDecorator({\n   *   key: 'requestStartedAt',\n   *   resolve: () => Date.now(),\n   * })\n   *\n   * bootstrap({\n   *   modules,\n   *   contributors: [StartedAt.registration],\n   * })\n   * ```\n   */\n  contributors?: ContributorRegistrations\n\n  /**\n   * Backing store strategy for {@link RequestContext} `set/get` and the\n   * Context Contributor pipeline (#107).\n   *\n   * - `'auto'` (default) — Application mounts {@link requestScopeMiddleware}\n   *   automatically before any user middleware. If the user-supplied\n   *   `middleware` list already includes `requestScopeMiddleware()`,\n   *   detection skips the auto-mount so adopters can control its position.\n   * - `'manual'` — Application never mounts the wrapper. The Context\n   *   Contributor pipeline still runs on every route — the runner is\n   *   inserted by `router-builder` regardless of ALS state. What\n   *   degrades without an ALS frame is the *backing store*:\n   *   REQUEST-scoped DI throws (no `requestStore.getStore()` to read\n   *   from) and `RequestContext.set/get` throws. Use `'manual'` only when you\n   *   genuinely intend to wrap requests in your own ALS frame (rare —\n   *   multi-tenant adapters used to do this; post-Phase 3 they share\n   *   the framework's frame instead).\n   */\n  contextStore?: 'auto' | 'manual'\n\n  /**\n   * Controls whether KickJS registers process-level handlers at bootstrap.\n   *\n   * - `'auto'` (default) — register `uncaughtException` /\n   *   `unhandledRejection` loggers AND `SIGINT` / `SIGTERM` →\n   *   `app.shutdown()` → `process.exit(0)`.\n   * - `'errors-only'` — register the error loggers; skip the signal\n   *   handlers. Use this when you have your own shutdown choreographer\n   *   (OpenTelemetry SDK, Sentry, custom orchestrator) that calls\n   *   `app.shutdown()` itself and you don't want two listeners racing\n   *   to call `process.exit`.\n   * - `'manual'` — skip everything. Adopter is responsible for both\n   *   error logging and signal-driven shutdown.\n   *\n   * Background: many observability SDKs install their own SIGTERM\n   * handler to flush spans/metrics before the process exits. Two\n   * separate handlers calling `process.exit(0)` race each other and\n   * can truncate the in-flight flush. Setting this to `'errors-only'`\n   * or `'manual'` lets the SDK own the lifecycle while still letting\n   * KickJS surface uncaught exceptions / rejections via the logger.\n   *\n   * The dev mode auto-detect (`__kickjs_httpServer` set by the Vite\n   * plugin) suppresses signal registration regardless of this option,\n   * since Vite owns the lifecycle in development.\n   */\n  processHooks?: 'auto' | 'errors-only' | 'manual'\n\n  /** Express `trust proxy` setting */\n  trustProxy?: boolean | number | string | ((ip: string, hopIndex: number) => boolean)\n  /** Maximum JSON body size (only used when middleware is not provided) */\n  jsonLimit?: string | number\n  /**\n   * Print the route table on startup. Default: `false`. Set to `true`\n   * to log a per-controller summary (method counts + mount paths) once\n   * the app has mounted. Emitted at `info` level, so it is still subject\n   * to `LOG_LEVEL` filtering (visible at the default `info`; hidden at\n   * `warn`/`error`/`silent`).\n   */\n  logRouteTable?: boolean\n  /**\n   * @deprecated Use {@link ApplicationOptions.logRouteTable}. Kept as an\n   * alias for back-compat; `logRouteTable` wins when both are set.\n   */\n  logRoutesTable?: boolean\n  /**\n   * Maximum time (ms) to wait for graceful shutdown before forcing exit.\n   * Default: 30000 (30 seconds). Set to 0 to disable forced exit.\n   */\n  shutdownTimeout?: number\n\n  /**\n   * Enable cluster mode for multi-core utilization.\n   *\n   * When enabled, the primary process forks worker processes that share the\n   * same port via Node's built-in `cluster` module (OS load balancing).\n   *\n   * - `true` — use all available CPU cores\n   * - `{ workers: N }` — use exactly N workers\n   *\n   * Workers are auto-restarted on crash. SIGTERM/SIGINT on the primary is\n   * forwarded to all workers.\n   *\n   * @example\n   * ```ts\n   * bootstrap({ modules, cluster: true })\n   * bootstrap({ modules, cluster: { workers: 4 } })\n   * ```\n   */\n  cluster?: boolean | { workers?: number }\n\n  /**\n   * Custom 404 handler for unmatched routes. Receives the raw Express\n   * `(req, res, next)` args. When omitted, the built-in handler returns\n   * `{ message: 'Not Found' }` with status 404.\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules,\n   *   onNotFound: (req, res) => {\n   *     res.status(404).json({ error: 'Route not found', path: req.originalUrl })\n   *   },\n   * })\n   * ```\n   */\n  onNotFound?: (req: any, res: any, next: any) => void\n\n  /**\n   * Custom global error handler. Receives `(err, req, res, next)` — the\n   * standard Express error-handling signature. When omitted, the built-in\n   * handler formats ZodError, HttpException, and unexpected errors.\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules,\n   *   onError: (err, req, res, next) => {\n   *     logger.error(err)\n   *     res.status(err.status ?? 500).json({ error: err.message })\n   *   },\n   * })\n   * ```\n   */\n  onError?: (err: any, req: any, res: any, next: any) => void\n\n  /**\n   * Security defaults applied automatically unless opted out.\n   *\n   * When not specified, secure defaults are applied:\n   * - Helmet security headers are auto-injected\n   * - JSON body limit defaults to 1MB\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules,\n   *   security: {\n   *     helmet: false,     // disable auto-helmet\n   *   },\n   * })\n   * ```\n   */\n  security?: {\n    /** Auto-inject helmet security headers. Default: true */\n    helmet?: boolean\n  }\n}\n\n/**\n * The main application class. Wires together Express, the DI container,\n * feature modules, adapters, and the middleware pipeline.\n */\nexport class Application {\n  private app: Express\n  private container: Container\n  private httpServer: http.Server | null = null\n  private readonly adapters: AppAdapter[]\n\n  private readonly plugins: KickPlugin[]\n\n  /**\n   * Snapshot of every module-level Context Contributor registration\n   * captured during `setup()`. The registrations themselves are\n   * frozen by `defineContextDecorator`, so storing references is\n   * safe — they outlive the module instances they came from.\n   *\n   * Used by {@link getContributors} so DevTools and adopter tooling\n   * can render the module-level contributors alongside the adapter /\n   * plugin / global ones. Populated once per `setup()` call; cleared\n   * at the start of each invocation so a re-setup (test harnesses,\n   * dev-server restarts) doesn't accumulate stale entries.\n   */\n  private _moduleContributors: Array<{\n    registration: { key: string; dependsOn: readonly string[] }\n    label: string\n  }> = []\n\n  /** Number of HTTP requests currently being processed */\n  private _inFlightRequests = 0\n  /** Whether the application is draining (shutting down gracefully) */\n  private _draining = false\n  /** Whether shutdown has already been initiated (prevents double-shutdown) */\n  private _shutdownInitiated = false\n  /** Resolvers waiting for in-flight requests to reach zero */\n  private _drainResolvers: Array<() => void> = []\n\n  constructor(private readonly options: ApplicationOptions) {\n    this.app = express()\n    this.container = Container.getInstance()\n\n    // Sort plugins by `dependsOn` declarations BEFORE reading their adapters/etc.\n    // Plugins without `dependsOn` keep their declaration order — this is a\n    // pure refinement; no behaviour change for apps that don't use the field.\n    this.plugins = mountSort(options.plugins ?? [], 'plugin')\n\n    // Build adapter list from plugin adapters + user adapters, synthesize\n    // a stable name for any anonymous adapter (so duplicate-name detection\n    // and `dependsOn` resolution have something to key on), then sort by\n    // adapter `dependsOn`. Plugin-shipped adapters keep their plugin's\n    // relative order unless their own `dependsOn` says otherwise.\n    const allAdapters = [\n      ...this.plugins.flatMap((p) => p.adapters?.() ?? []),\n      ...(options.adapters ?? []),\n    ]\n    let anonAdapterCount = 0\n    const namedAdapters: Array<AppAdapter & { name: string }> = allAdapters.map((adapter) => {\n      if (!adapter.name) {\n        // `constructor.name === 'Object'` for plain object-literal adapters —\n        // useless as an identity since two anonymous literals would collide.\n        // Only borrow the constructor name when it's an actual class.\n        const ctorName = adapter.constructor?.name\n        const fallback =\n          ctorName && ctorName !== 'Object' ? ctorName : `AnonymousAdapter#${anonAdapterCount++}`\n        return Object.assign(adapter, { name: fallback })\n      }\n      return adapter as AppAdapter & { name: string }\n    })\n    this.adapters = mountSort(namedAdapters, 'adapter')\n    // Wire the request store provider so Container can resolve REQUEST-scoped deps\n    Container._requestStoreProvider = () => requestStore.getStore() ?? null\n  }\n\n  /** Whether the application is currently draining in-flight requests */\n  get isDraining(): boolean {\n    return this._draining\n  }\n\n  /** Number of HTTP requests currently being processed */\n  get inFlightRequests(): number {\n    return this._inFlightRequests\n  }\n\n  /** Get the DI container instance */\n  getContainer(): Container {\n    return this.container\n  }\n\n  /**\n   * Express request handler — delegates to the internal Express app.\n   *\n   * Used by the Vite dev-server plugin to route requests through KickJS:\n   * ```ts\n   * const mod = await ssrLoadModule('virtual:kickjs/app')\n   * mod.app.handle(req, res, next)\n   * ```\n   *\n   * Also works as a standard Node.js request handler for production:\n   * ```ts\n   * http.createServer(app.handle.bind(app))\n   * ```\n   */\n  handle(req: http.IncomingMessage, res: http.ServerResponse, next?: (err?: any) => void): void {\n    if (next) {\n      this.app(req as any, res as any, next)\n    } else {\n      this.app(req as any, res as any)\n    }\n  }\n\n  /**\n   * Full setup pipeline:\n   * 1. Adapter beforeMount hooks (early routes — docs, health)\n   * 2. Adapter middleware (phase: beforeGlobal)\n   * 3. Global middleware (user-declared or defaults)\n   * 4. Adapter middleware (phase: afterGlobal)\n   * 5. Module registration + DI bootstrap\n   * 6. Adapter middleware (phase: beforeRoutes)\n   * 7. Module route mounting\n   * 8. Adapter middleware (phase: afterRoutes)\n   * 9. Error handlers (notFound + global)\n   * 10. Adapter beforeStart hooks\n   */\n  /** Build the adapter context object (shared across all hooks) */\n  private adapterCtx(server?: any): AdapterContext {\n    const env = process.env.NODE_ENV ?? 'development'\n    return {\n      app: this.app,\n      container: this.container,\n      server,\n      env,\n      isProduction: env === 'production',\n    }\n  }\n\n  /** Call an adapter hook, awaiting async hooks and catching errors */\n  private async callHook(\n    hook: ((ctx: AdapterContext) => void | Promise<void>) | undefined,\n    ctx: AdapterContext,\n  ): Promise<void> {\n    if (!hook) return\n    try {\n      const result = hook(ctx)\n      if (result && typeof (result as Promise<void>).then === 'function') {\n        await result\n      }\n    } catch (err) {\n      log.error(err, 'Adapter hook failed')\n    }\n  }\n\n  async setup(): Promise<void> {\n    log.debug('Bootstrapping application...')\n\n    // Reset module-contributor snapshot at the very top of each\n    // setup pass — before anything that could throw — so a partial\n    // failure doesn't leave stale entries that getContributors()\n    // would surface on the next call. See _moduleContributors field\n    // declaration for the use case.\n    this._moduleContributors = []\n\n    // Collect adapter middleware by phase\n    const adapterMw = this.collectAdapterMiddleware()\n\n    // Expose the Application instance on the Express app for adapter discovery\n    ;(this.app as any).__kickApp = this\n\n    const ctx = this.adapterCtx()\n\n    // ── 1. Adapter beforeMount hooks ──────────────────────────────────\n    for (const adapter of this.adapters) {\n      await this.callHook(adapter.beforeMount?.bind(adapter), ctx)\n    }\n\n    // ── 2. Hardened defaults ──────────────────────────────────────────\n    this.app.disable('x-powered-by')\n    this.app.set('trust proxy', this.options.trustProxy ?? false)\n\n    // ── 2a. In-flight request tracking ──────────────────────────────\n    this.app.use(this.requestTrackingMiddleware())\n\n    // ── 2b. Health check endpoints (before middleware, at root) ──────\n    this.mountHealthEndpoints()\n\n    // ── 2c. Request scope (AsyncLocalStorage) ────────────────────────\n    // Auto-mounted unless the user opted out (`contextStore: 'manual'`)\n    // or already included one in their middleware list.\n    if (this.shouldAutoMountRequestScope()) {\n      this.app.use(requestScopeMiddleware())\n    }\n\n    // ── 3. Adapter middleware: beforeGlobal ───────────────────────────\n    this.mountMiddlewareList(adapterMw.beforeGlobal)\n\n    // ── 3b. Plugin registration ──────────────────────────────────────\n    for (const plugin of this.plugins) {\n      plugin.register?.(this.container)\n    }\n\n    // ── 3c. Plugin middleware ─────────────────────────────────────────\n    for (const plugin of this.plugins) {\n      try {\n        const mw = plugin.middleware?.() ?? []\n        for (const handler of mw) {\n          this.app.use(handler)\n        }\n      } catch (err) {\n        log.error(err, `Plugin middleware failed: ${(plugin as any).name ?? 'unknown'}`)\n      }\n    }\n\n    // ── 4. Global middleware ─────────────────────────────────────────\n    // Auto-inject helmet unless opted out\n    const autoHelmet = this.options.security?.helmet !== false\n    if (autoHelmet) {\n      try {\n        const { helmet: helmetFn } = await import('./middleware/helmet')\n        this.app.use(helmetFn())\n      } catch {\n        // helmet middleware not available — skip silently\n      }\n    }\n\n    const userMiddlewares = this.options.middlewares ?? this.options.middleware\n    if (userMiddlewares) {\n      // User-declared pipeline — full control\n      for (const entry of userMiddlewares) {\n        this.mountMiddlewareEntry(entry)\n      }\n    } else {\n      // Sensible defaults when no middleware declared\n      this.app.use(requestId())\n      this.app.use(express.json({ limit: this.options.jsonLimit ?? '1mb' }))\n    }\n\n    // ── 5. Adapter middleware: afterGlobal ────────────────────────────\n    this.mountMiddlewareList(adapterMw.afterGlobal)\n\n    // ── 6. Module registration + DI bootstrap ────────────────────────\n    // Module collection — the static `modules: [...]` array AND the\n    // imperative `setup(registry)` callback feed into the same\n    // ordered list. Plugins go first so plugin modules / setup\n    // calls run before user code (existing precedence).\n    //\n    // Order within the registry:\n    //   1. plugin static modules (`plugin.modules?()`)\n    //   2. plugin setup() calls (in plugin dependsOn-sorted order)\n    //   3. user static modules (`options.modules`)\n    //   4. user setup() callback\n    const moduleRegistry = new MutableModuleRegistry()\n    for (const plugin of this.plugins) {\n      for (const m of plugin.modules?.() ?? []) moduleRegistry.mount(m)\n      plugin.setup?.(moduleRegistry)\n    }\n    for (const m of this.options.modules) moduleRegistry.mount(m)\n    this.options.setup?.(moduleRegistry)\n    const allModuleEntries: AppModuleEntry[] = moduleRegistry.entries\n    const modules = allModuleEntries.map((entry) => {\n      // Discriminate class vs instance: classes are functions whose\n      // `prototype` carries the AppModule shape; defineModule output is\n      // a plain object with `routes`, `register`, `contributors`. Calling\n      // `new` on a plain object throws, so we branch up-front rather\n      // than try/catch.\n      const mod: AppModule = typeof entry === 'function' ? new (entry as AppModuleClass)() : entry\n      // `register()` is optional — modules whose classes are entirely\n      // decorator-managed (@Service, @Controller, @Repository) don't need it.\n      mod.register?.(this.container)\n      return mod\n    })\n    this.container.bootstrap()\n\n    // Register Logger as an injectable singleton so @Inject(Logger)\n    // works in constructors. Without this, Logger is just a plain\n    // class with static methods and no DI binding.\n    if (!this.container.has(Logger)) {\n      this.container.registerInstance(Logger, new Logger())\n    }\n\n    // ── 7. Adapter middleware: beforeRoutes ───────────────────────────\n    this.mountMiddlewareList(adapterMw.beforeRoutes)\n\n    // ── 8. Mount module routes with versioning ───────────────────────\n    const apiPrefix = this.options.apiPrefix ?? '/api'\n    const defaultVersion = this.options.defaultVersion ?? 1\n    // Opt-in, default off. `logRouteTable` is the current name;\n    // `logRoutesTable` is the deprecated alias.\n    const shouldLogRoutes = this.options.logRouteTable ?? this.options.logRoutesTable ?? false\n\n    // Collect route metadata during mounting (avoids calling mod.routes() twice)\n    const mountedRoutes: Array<{ controller: any; mountPath: string }> = []\n\n    // Context Contributors (#107) — collect adapter + plugin + global once;\n    // per-module sources are computed inside the loop so module isolation is\n    // preserved.\n    //\n    // Plugin contributors merge at the same `'adapter'` precedence as adapter\n    // contributors. Plugins are conceptually \"bundles of adapters + extras\",\n    // so a plugin that ships a typed contributor without standing up an\n    // accompanying adapter behaves identically to one that does.\n    const adapterSources: SourcedRegistration[] = []\n    for (const adapter of this.adapters) {\n      const adapterContribs = adapter.contributors?.() ?? []\n      const adapterLabel = adapter.name ?? adapter.constructor.name ?? 'adapter'\n      for (const registration of adapterContribs) {\n        adapterSources.push({ source: 'adapter', registration, label: adapterLabel })\n      }\n    }\n    for (const plugin of this.plugins) {\n      const pluginContribs = plugin.contributors?.() ?? []\n      const pluginLabel = plugin.name ?? plugin.constructor?.name ?? 'plugin'\n      for (const registration of pluginContribs) {\n        adapterSources.push({ source: 'adapter', registration, label: pluginLabel })\n      }\n    }\n    const globalSources: SourcedRegistration[] = (this.options.contributors ?? []).map(\n      (registration): SourcedRegistration => ({\n        source: 'global',\n        registration,\n        label: 'bootstrap',\n      }),\n    )\n\n    // Reset module-contributor snapshot at the start of each setup\n    // pass so re-running `setup()` (test harnesses, dev-server\n    // restarts) doesn't accumulate stale entries.\n    this._moduleContributors = []\n\n    for (const mod of modules) {\n      // Prefer the declared `name` field (set by `defineModule({ name: 'X', ... })`)\n      // over `constructor.name`. Factory-built modules are plain objects whose\n      // constructor is `Object` — falling straight to `constructor.name` would\n      // degrade every label in the DevTools Contributors table to \"Object\".\n      const declaredName = (mod as { name?: unknown }).name\n      const ctorName = mod.constructor?.name\n      const moduleLabel =\n        typeof declaredName === 'string' && declaredName.length > 0\n          ? declaredName\n          : ctorName && ctorName !== 'Object'\n            ? ctorName\n            : 'module'\n      const moduleSources: SourcedRegistration[] = (mod.contributors?.() ?? []).map(\n        (registration): SourcedRegistration => ({\n          source: 'module',\n          registration,\n          label: moduleLabel,\n        }),\n      )\n      // Retain registrations for `getContributors()` — these would\n      // otherwise be unreachable post-bootstrap (module instances\n      // are not kept on the Application).\n      for (const src of moduleSources) {\n        this._moduleContributors.push({\n          registration: src.registration as { key: string; dependsOn: readonly string[] },\n          label: moduleLabel,\n        })\n      }\n\n      // Thread per-module + adapter + global sources to buildRoutes via the\n      // module-scoped slot. Module setup is sequential, so the slot is\n      // race-free. The slot MUST stay populated across both `mod.routes()`\n      // AND any framework-driven `buildRoutes(controller)` calls below —\n      // when a module returns `{ path, controller }` (auto-derive shape),\n      // buildRoutes runs here, not inside routes(). Clearing the slot in\n      // the routes()-finally would drop module/adapter/global contributors\n      // on the floor and surface as `MissingContributorError` for any\n      // class/method-level dependsOn referencing a module-level key.\n      _setExternalContributorSources([...moduleSources, ...adapterSources, ...globalSources])\n      try {\n        const result = mod.routes()\n        if (!result) continue // Non-HTTP modules (queues, cron) may return null\n\n        const routeSets = Array.isArray(result) ? result : [result]\n\n        for (const route of routeSets) {\n          const version = route.version ?? defaultVersion\n          const mountPath = `${apiPrefix}/v${version}${normalizePath(route.path)}`\n          // Derive the router from `controller` when one wasn't passed\n          // explicitly. The common-case shape is `{ path, controller }` —\n          // the framework owns `buildRoutes(controller)` so adopters don't\n          // import + call it themselves. Adopters who hand-build a router\n          // (composing multiple controllers, mounting third-party routers)\n          // pass `router` explicitly and we use it as-is.\n          const router = route.router ?? buildRoutes(route.controller)\n          if (!router) {\n            throw moduleRouteMissingControllerError(mountPath)\n          }\n          this.app.use(mountPath, router)\n\n          // Notify adapters (e.g. SwaggerAdapter for OpenAPI spec generation)\n          if (route.controller) {\n            for (const adapter of this.adapters) {\n              try {\n                adapter.onRouteMount?.(route.controller, mountPath)\n              } catch (err) {\n                log.error(err, `adapter.onRouteMount() failed for ${mountPath}`)\n              }\n            }\n            if (shouldLogRoutes) {\n              mountedRoutes.push({ controller: route.controller, mountPath })\n            }\n          }\n        }\n      } finally {\n        _setExternalContributorSources([])\n      }\n    }\n\n    // ── 8b. Log route summary ─────────────────────────────────────────\n    if (shouldLogRoutes && mountedRoutes.length > 0) {\n      const methodOrder = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS']\n      const methodRank = (m: string) => {\n        const i = methodOrder.indexOf(m)\n        return i === -1 ? 99 : i\n      }\n\n      let totalRoutes = 0\n      log.info('Routes:')\n\n      for (const { controller, mountPath } of mountedRoutes) {\n        const defs: RouteDefinition[] = getClassMeta<RouteDefinition[]>(\n          METADATA.ROUTES,\n          controller,\n          [],\n        )\n        if (defs.length === 0) continue\n\n        const counts: Record<string, number> = {}\n        for (const def of defs) {\n          const m = def.method.toUpperCase()\n          counts[m] = (counts[m] || 0) + 1\n        }\n        totalRoutes += defs.length\n\n        const methods = Object.entries(counts)\n          .toSorted(([a], [b]) => methodRank(a) - methodRank(b))\n          .map(([m, n]) => `${n} ${m}`)\n          .join(', ')\n        const name = controller.name || 'Controller'\n        log.info(`  ${name.padEnd(30)} ${mountPath.padEnd(25)} ${defs.length} routes (${methods})`)\n      }\n\n      log.info(`  Total: ${totalRoutes} routes`)\n    }\n\n    // ── 9. Adapter middleware: afterRoutes ────────────────────────────\n    this.mountMiddlewareList(adapterMw.afterRoutes)\n\n    // ── 10. Adapter beforeStart hooks ────────────────────────────────\n    // Runs BEFORE error handlers so adapters can still mount Express\n    // routes (e.g. `McpAdapter` registers `/_mcp/messages` here). If\n    // error handlers were registered first, the notFoundHandler — a\n    // catch-all that never calls next() — would pre-empt anything an\n    // adapter adds afterwards and adapter-mounted endpoints would 404.\n    for (const adapter of this.adapters) {\n      await this.callHook(adapter.beforeStart?.bind(adapter), ctx)\n    }\n\n    // ── 11. Error handlers ───────────────────────────────────────────\n    // Last in the chain so any adapter-mounted route (step 10) gets\n    // a chance to match before the catch-all 404 fires.\n    this.app.use(this.options.onNotFound ?? notFoundHandler())\n    this.app.use(this.options.onError ?? errorHandler())\n  }\n\n  /** Register modules and DI without starting the HTTP server (used by kick tinker) */\n  async registerOnly(): Promise<void> {\n    await this.setup()\n  }\n\n  /**\n   * Start the HTTP server.\n   *\n   * In **dev mode** (Vite plugin active): reuses `globalThis.__kickjs_httpServer`\n   * created by Vite. Adapters (WsAdapter, Socket.IO, etc.) receive the real\n   * `http.Server` through `afterStart({ server })` — zero adapter changes needed.\n   *\n   * In **production**: creates its own `http.Server` and binds to the port.\n   */\n  async start(): Promise<void> {\n    await this.setup()\n\n    const g = globalThis as any\n\n    if (g.__kickjs_httpServer) {\n      // ── DEV MODE: Vite owns the http.Server ──────────────────────\n      // Don't create a new server or listen — Vite is already listening.\n      // Just wire up adapters with the Vite-created server.\n      this.httpServer = g.__kickjs_httpServer\n      log.debug('Attached to Vite dev server')\n\n      // Dev mode suppresses our own SIGINT/SIGTERM handlers (Vite owns\n      // the process lifecycle), so a Ctrl+C would otherwise skip graceful\n      // shutdown entirely — `adapter.shutdown()`, request draining, and\n      // any shutdown logs never run. Expose `shutdown()` on globalThis so\n      // the CLI dev server (`kick dev`) can drive it before tearing down\n      // Vite. Same process, so the CLI's signal handler can reach this.\n      g.__kickjs_app_shutdown = () => this.shutdown()\n\n      for (const adapter of this.adapters) {\n        const ctx = this.adapterCtx(this.httpServer!)\n        await this.callHook(adapter.afterStart?.bind(adapter), ctx)\n      }\n\n      for (const plugin of this.plugins) {\n        await plugin.onReady?.(this.container)\n      }\n\n      return\n    }\n\n    // ── PRODUCTION: Create and own the http.Server ─────────────────\n    const port = this.options.port ?? parseInt(process.env.PORT || '3000', 10)\n    this.httpServer = http.createServer(this.app)\n\n    this.httpServer.on('error', (err: NodeJS.ErrnoException) => {\n      if (err.code === 'EADDRINUSE') {\n        log.error(\n          `Port ${port} is already in use. Kill the existing process or use a different port:\\n` +\n            `  PORT=${port + 1} kick dev\\n` +\n            `  lsof -i :${port}   # find what's using it\\n` +\n            `  kill <PID>          # stop it`,\n        )\n        process.exit(1)\n      }\n      throw err\n    })\n\n    // Wrap listen in a Promise so afterStart/onReady errors propagate\n    await new Promise<void>((resolve, reject) => {\n      this.httpServer!.listen(port, async () => {\n        try {\n          log.info(`Server running on http://localhost:${port}`)\n\n          for (const adapter of this.adapters) {\n            const afterCtx = this.adapterCtx(this.httpServer!)\n            await this.callHook(adapter.afterStart?.bind(adapter), afterCtx)\n          }\n\n          // Plugin onReady hooks\n          for (const plugin of this.plugins) {\n            await plugin.onReady?.(this.container)\n          }\n\n          resolve()\n        } catch (err) {\n          reject(err)\n        }\n      })\n    })\n  }\n\n  /** HMR rebuild: swap Express handler without restarting the server */\n  async rebuild(): Promise<void> {\n    // Build the new app fully before swapping — if setup() throws,\n    // the old app keeps running so the server stays responsive.\n    const prevApp = this.app\n    const prevContainer = this.container\n\n    try {\n      Container.reset()\n      this.container = Container.getInstance()\n      this.app = express()\n      await this.setup()\n    } catch (err) {\n      log.error(err, 'HMR rebuild failed, keeping previous app')\n      // Restore previous state so the server stays responsive\n      this.app = prevApp\n      this.container = prevContainer\n      return\n    }\n\n    if (this.httpServer) {\n      this.httpServer.removeAllListeners('request')\n      this.httpServer.on('request', this.app)\n      log.debug('HMR: Express app rebuilt and swapped')\n    }\n  }\n\n  /**\n   * Graceful shutdown with request draining.\n   *\n   * 1. Stops accepting new connections (server.close())\n   * 2. Waits for in-flight requests to complete (up to shutdownTimeout)\n   * 3. Calls adapter.shutdown() for all registered adapters\n   * 4. Force-closes after timeout\n   *\n   * Safe to call multiple times — subsequent calls return the same promise.\n   */\n  async shutdown(): Promise<void> {\n    // Prevent double-shutdown — return immediately if already initiated\n    if (this._shutdownInitiated) {\n      log.debug('Shutdown already in progress, skipping duplicate call')\n      return\n    }\n    this._shutdownInitiated = true\n    this._draining = true\n\n    log.debug('Shutting down — draining in-flight requests...')\n\n    const timeoutMs = this.options.shutdownTimeout ?? 30_000\n    let timer: ReturnType<typeof setTimeout> | undefined\n\n    // Start a force-exit timer if timeout is configured\n    const forceExitPromise =\n      timeoutMs > 0\n        ? new Promise<'timeout'>((resolve) => {\n            timer = setTimeout(() => resolve('timeout'), timeoutMs)\n            timer.unref()\n          })\n        : new Promise<never>(() => {}) // never resolves — no forced exit\n\n    try {\n      // Step 1: Stop accepting new connections.\n      // server.close() prevents new connections. Its callback fires only when\n      // ALL existing connections are fully closed, so we do NOT await it here —\n      // we track request draining separately via the tracking middleware.\n      if (this.httpServer) {\n        this.httpServer.close(() => {})\n      }\n\n      // Step 2: Wait for in-flight requests to drain (or timeout)\n      if (this._inFlightRequests > 0) {\n        log.debug(`Waiting for ${this._inFlightRequests} in-flight request(s) to complete...`)\n        const drainPromise = new Promise<'drained'>((resolve) => {\n          this._drainResolvers.push(() => resolve('drained'))\n        })\n\n        const result = await Promise.race([drainPromise, forceExitPromise])\n        if (result === 'timeout') {\n          log.warn(\n            `Shutdown timeout (${timeoutMs}ms) reached with ${this._inFlightRequests} request(s) still in-flight, forcing shutdown`,\n          )\n        } else {\n          log.debug('All in-flight requests completed')\n        }\n      }\n\n      // Step 3: Run all plugin + adapter shutdowns concurrently\n      const results = await Promise.allSettled([\n        ...this.plugins.map((plugin) => Promise.resolve(plugin.shutdown?.())),\n        ...this.adapters.map((adapter) => Promise.resolve(adapter.shutdown?.())),\n      ])\n      for (const result of results) {\n        if (result.status === 'rejected') {\n          log.error({ err: result.reason }, 'Adapter shutdown failed')\n        }\n      }\n    } finally {\n      if (timer) clearTimeout(timer)\n    }\n  }\n\n  getExpressApp(): Express {\n    return this.app\n  }\n\n  /** Get registered adapters — used by DevToolsAdapter for peer discovery */\n  getAdapters(): AppAdapter[] {\n    return this.adapters\n  }\n\n  /**\n   * Get registered plugins — used by DevToolsAdapter for topology\n   * introspection (architecture.md §23). Read-only; returns the\n   * already-sorted plugin list (post-`dependsOn` topo-sort).\n   */\n  getPlugins(): readonly KickPlugin[] {\n    return this.plugins\n  }\n\n  /**\n   * Snapshot of every Context Contributor reachable from this app —\n   * walks **four** registration sites: adapters, plugins, modules,\n   * and the bootstrap `contributors` option. The devtools Topology\n   * tab consumes this for the Contributors panel; tests + adopters\n   * can call it for diagnostics.\n   *\n   * Per-route (method/class-decorator) registrations are NOT included\n   * here — they live on the route registry rather than on any of\n   * the four collection sites this method walks. A future RPC will\n   * surface them separately.\n   *\n   * Result shape stays minimal — `{ key, source, label, dependsOn }`\n   * — so we don't leak `resolve` closures or other internal fields.\n   * `source` matches the five-level precedence union from\n   * `ContributorSource` (minus `'method'` / `'class'` which require\n   * the per-route walk noted above).\n   */\n  getContributors(): ReadonlyArray<{\n    key: string\n    source: 'module' | 'adapter' | 'plugin' | 'global'\n    label: string\n    dependsOn: readonly string[]\n  }> {\n    const out: Array<{\n      key: string\n      source: 'module' | 'adapter' | 'plugin' | 'global'\n      label: string\n      dependsOn: readonly string[]\n    }> = []\n    const ingest = (\n      list: ReadonlyArray<unknown> | null | undefined,\n      source: 'module' | 'adapter' | 'plugin' | 'global',\n      label: string,\n    ): void => {\n      if (!list) return\n      for (const reg of list) {\n        const r = reg as { key?: unknown; dependsOn?: unknown }\n        if (r.key === undefined || r.key === null) continue\n        // `key` is typically a string but createToken<T>() yields a\n        // branded token object — normalise via tokenName so both\n        // surfaces flow through.\n        const key = typeof r.key === 'string' ? r.key : tokenName(r.key)\n        out.push({\n          key,\n          source,\n          label,\n          dependsOn: Array.isArray(r.dependsOn) ? (r.dependsOn as string[]) : [],\n        })\n      }\n    }\n    for (const adapter of this.adapters) {\n      ingest(adapter.contributors?.(), 'adapter', adapter.name ?? 'adapter')\n    }\n    for (const plugin of this.plugins) {\n      ingest(plugin.contributors?.(), 'plugin', plugin.name ?? 'plugin')\n    }\n    // Module-level registrations — captured during `setup()` because\n    // module instances are not retained on the Application. Walk the\n    // snapshot rather than calling `mod.contributors()` here.\n    for (const { registration, label } of this._moduleContributors) {\n      ingest([registration], 'module', label)\n    }\n    ingest(this.options.contributors, 'global', 'bootstrap')\n    return out\n  }\n\n  getHttpServer(): http.Server | null {\n    return this.httpServer\n  }\n\n  // ── Internal helpers ────────────────────────────────────────────────\n\n  /**\n   * Decide whether {@link Application} should auto-mount the\n   * {@link requestScopeMiddleware} ALS wrapper.\n   *\n   * Returns `false` when:\n   * - `contextStore: 'manual'` was set (caller manages ALS frames), or\n   * - the user-supplied `middleware` list already includes a\n   *   `requestScopeMiddleware()` (detected via the symbol marker stamped\n   *   in `middleware/request-scope.ts`).\n   *\n   * Otherwise `true` — preserves the historical default of \"always wrap\n   * requests in an ALS frame\" so existing apps see no behavior change.\n   */\n  private shouldAutoMountRequestScope(): boolean {\n    if (this.options.contextStore === 'manual') return false\n\n    const userEntries = this.options.middlewares ?? this.options.middleware ?? []\n    for (const entry of userEntries) {\n      const handler = typeof entry === 'function' ? entry : entry.handler\n      if (isRequestScopeMiddleware(handler)) return false\n    }\n    return true\n  }\n\n  private collectAdapterMiddleware() {\n    const result = {\n      beforeGlobal: [] as AdapterMiddleware[],\n      afterGlobal: [] as AdapterMiddleware[],\n      beforeRoutes: [] as AdapterMiddleware[],\n      afterRoutes: [] as AdapterMiddleware[],\n    }\n\n    for (const adapter of this.adapters) {\n      const entries = adapter.middleware?.() ?? []\n      for (const entry of entries) {\n        const phase = entry.phase ?? 'afterGlobal'\n        result[phase].push(entry)\n      }\n    }\n\n    return result\n  }\n\n  private mountMiddlewareList(entries: AdapterMiddleware[]): void {\n    for (const entry of entries) {\n      if (entry.path === undefined) {\n        this.app.use(entry.handler)\n        continue\n      }\n      // Copy ReadonlyArray paths to a mutable array — Express's\n      // `PathParams` doesn't accept readonly arrays, even though the\n      // function never mutates them. Pass-through for non-array shapes.\n      const path: string | RegExp | (string | RegExp)[] = Array.isArray(entry.path)\n        ? [...entry.path]\n        : (entry.path as string | RegExp)\n      this.app.use(path, entry.handler)\n    }\n  }\n\n  private mountMiddlewareEntry(entry: MiddlewareEntry): void {\n    if (typeof entry === 'function') {\n      this.app.use(entry)\n    } else {\n      this.app.use(entry.path, entry.handler)\n    }\n  }\n\n  /** Middleware that tracks in-flight requests for graceful draining */\n  private requestTrackingMiddleware(): RequestHandler {\n    return (_req, res, next) => {\n      this._inFlightRequests++\n      const onFinish = () => {\n        res.removeListener('finish', onFinish)\n        res.removeListener('close', onFinish)\n        this._inFlightRequests--\n        // If draining and no more in-flight requests, resolve all waiters\n        if (this._draining && this._inFlightRequests === 0) {\n          for (const resolve of this._drainResolvers) {\n            resolve()\n          }\n          this._drainResolvers = []\n        }\n      }\n      res.on('finish', onFinish)\n      res.on('close', onFinish)\n      next()\n    }\n  }\n\n  /** Mount /health/live and /health/ready endpoints at the root (no API prefix) */\n  private mountHealthEndpoints(): void {\n    this.app.get('/health/live', (_req, res) => {\n      if (this._draining) {\n        res.status(503).json({ status: 'draining', uptime: process.uptime() })\n      } else {\n        res.json({ status: 'ok', uptime: process.uptime() })\n      }\n    })\n\n    this.app.get('/health/ready', async (_req, res) => {\n      if (this._draining) {\n        res.status(503).json({ status: 'draining', checks: [] })\n        return\n      }\n      const adaptersWithHealth = this.adapters.filter((a) => a.onHealthCheck)\n      const checks = await Promise.allSettled(adaptersWithHealth.map((a) => a.onHealthCheck!()))\n      const results = checks.map((c, i) => {\n        if (c.status === 'fulfilled') return c.value\n        return { name: adaptersWithHealth[i].name ?? 'unknown', status: 'down' as const }\n      })\n      const healthy = results.every((r) => r.status === 'up')\n      res.status(healthy ? 200 : 503).json({\n        status: healthy ? 'ready' : 'degraded',\n        checks: results,\n      })\n    })\n  }\n}\n"],"mappings":";;;;;;;;;;8tBAgBA,MAAM,gCAAkC,OAAO,IAAI,gCAAgC,EAUnF,SAAgB,wBAAyB,CACvC,IAAM,IAAM,IAAc,KAAgB,OAAuB,CAC/D,IAAM,gBAAkB,IAAI,QAAQ,gBAC9B,WACH,MAAM,QAAQ,eAAe,EAAI,gBAAgB,GAAK,kBAAoB,OAAO,WAAW,EACzF,MAAsB,CAC1B,UACA,UAAW,IAAI,IAIf,OAAQ,IAAI,GACd,EAMC,IAA0C,UAAY,UACvD,aAAa,IAAI,UAAa,KAAK,CAAC,CACtC,EAEA,MADC,IAA2C,iCAAmC,GACxE,EACT,CASA,SAAgB,yBAAyB,MAAyB,CAEhE,OADI,OAAO,OAAU,WACb,MAA6C,mCAAqC,GADlD,EAE1C,CC9BA,MAAM,IAAM,aAAa,aAAa,EA8PtC,IAAa,YAAb,KAAyB,CAkCM,QAjC7B,IACA,UACA,WAAyC,KACzC,SAEA,QAcA,oBAGK,CAAC,EAGN,kBAA4B,EAE5B,UAAoB,GAEpB,mBAA6B,GAE7B,gBAA6C,CAAC,EAE9C,YAAY,QAA8C,CAA7B,KAAA,QAAA,QAC3B,KAAK,IAAM,QAAQ,EACnB,KAAK,UAAY,UAAU,YAAY,EAKvC,KAAK,QAAU,UAAU,QAAQ,SAAW,CAAC,EAAG,QAAQ,EAOxD,IAAM,YAAc,CAClB,GAAG,KAAK,QAAQ,QAAS,GAAM,EAAE,WAAW,GAAK,CAAC,CAAC,EACnD,GAAI,QAAQ,UAAY,CAAC,CAC3B,EACI,iBAAmB,EACjB,cAAsD,YAAY,IAAK,SAAY,CACvF,GAAI,CAAC,QAAQ,KAAM,CAIjB,IAAM,SAAW,QAAQ,aAAa,KAChC,SACJ,UAAY,WAAa,SAAW,SAAW,oBAAoB,qBACrE,OAAO,OAAO,OAAO,QAAS,CAAE,KAAM,QAAS,CAAC,CAClD,CACA,OAAO,OACT,CAAC,EACD,KAAK,SAAW,UAAU,cAAe,SAAS,EAElD,UAAU,0BAA8B,aAAa,SAAS,GAAK,IACrE,CAGA,IAAI,YAAsB,CACxB,OAAO,KAAK,SACd,CAGA,IAAI,kBAA2B,CAC7B,OAAO,KAAK,iBACd,CAGA,cAA0B,CACxB,OAAO,KAAK,SACd,CAgBA,OAAO,IAA2B,IAA0B,KAAkC,CACxF,KACF,KAAK,IAAI,IAAY,IAAY,IAAI,EAErC,KAAK,IAAI,IAAY,GAAU,CAEnC,CAgBA,WAAmB,OAA8B,CAC/C,IAAM,IAAM,QAAQ,IAAI,UAAY,cACpC,MAAO,CACL,IAAK,KAAK,IACV,UAAW,KAAK,UAChB,OACA,IACA,aAAc,MAAQ,YACxB,CACF,CAGA,MAAc,SACZ,KACA,IACe,CACV,QACL,GAAI,CACF,IAAM,OAAS,KAAK,GAAG,EACnB,QAAU,OAAQ,OAAyB,MAAS,YACtD,MAAM,MAEV,OAAS,IAAK,CACZ,IAAI,MAAM,IAAK,qBAAqB,CACtC,CACF,CAEA,MAAM,OAAuB,CAC3B,IAAI,MAAM,8BAA8B,EAOxC,KAAK,oBAAsB,CAAC,EAG5B,IAAM,UAAY,KAAK,yBAAyB,EAG/C,KAAM,IAAY,UAAY,KAE/B,IAAM,IAAM,KAAK,WAAW,EAG5B,IAAK,IAAM,WAAW,KAAK,SACzB,MAAM,KAAK,SAAS,QAAQ,aAAa,KAAK,OAAO,EAAG,GAAG,EAI7D,KAAK,IAAI,QAAQ,cAAc,EAC/B,KAAK,IAAI,IAAI,cAAe,KAAK,QAAQ,YAAc,EAAK,EAG5D,KAAK,IAAI,IAAI,KAAK,0BAA0B,CAAC,EAG7C,KAAK,qBAAqB,EAKtB,KAAK,4BAA4B,GACnC,KAAK,IAAI,IAAI,uBAAuB,CAAC,EAIvC,KAAK,oBAAoB,UAAU,YAAY,EAG/C,IAAK,IAAM,UAAU,KAAK,QACxB,OAAO,WAAW,KAAK,SAAS,EAIlC,IAAK,IAAM,UAAU,KAAK,QACxB,GAAI,CACF,IAAM,GAAK,OAAO,aAAa,GAAK,CAAC,EACrC,IAAK,IAAM,WAAW,GACpB,KAAK,IAAI,IAAI,OAAO,CAExB,OAAS,IAAK,CACZ,IAAI,MAAM,IAAK,6BAA8B,OAAe,MAAQ,WAAW,CACjF,CAMF,GADmB,KAAK,QAAQ,UAAU,SAAW,GAEnD,GAAI,CACF,GAAM,CAAE,OAAQ,UAAa,MAAM,OAAO,gCAC1C,KAAK,IAAI,IAAI,SAAS,CAAC,CACzB,MAAQ,CAER,CAGF,IAAM,gBAAkB,KAAK,QAAQ,aAAe,KAAK,QAAQ,WACjE,GAAI,gBAEF,IAAK,IAAM,SAAS,gBAClB,KAAK,qBAAqB,KAAK,OAIjC,KAAK,IAAI,IAAI,UAAU,CAAC,EACxB,KAAK,IAAI,IAAI,QAAQ,KAAK,CAAE,MAAO,KAAK,QAAQ,WAAa,KAAM,CAAC,CAAC,EAIvE,KAAK,oBAAoB,UAAU,WAAW,EAa9C,IAAM,eAAiB,IAAI,sBAC3B,IAAK,IAAM,UAAU,KAAK,QAAS,CACjC,IAAK,IAAM,KAAK,OAAO,UAAU,GAAK,CAAC,EAAG,eAAe,MAAM,CAAC,EAChE,OAAO,QAAQ,cAAc,CAC/B,CACA,IAAK,IAAM,KAAK,KAAK,QAAQ,QAAS,eAAe,MAAM,CAAC,EAC5D,KAAK,QAAQ,QAAQ,cAAc,EAEnC,IAAM,QADqC,eAAe,QACzB,IAAK,OAAU,CAM9C,IAAM,IAAiB,OAAO,OAAU,WAAa,IAAK,MAA6B,MAIvF,OADA,IAAI,WAAW,KAAK,SAAS,EACtB,GACT,CAAC,EACD,KAAK,UAAU,UAAU,EAKpB,KAAK,UAAU,IAAI,MAAM,GAC5B,KAAK,UAAU,iBAAiB,OAAQ,IAAI,MAAQ,EAItD,KAAK,oBAAoB,UAAU,YAAY,EAG/C,IAAM,UAAY,KAAK,QAAQ,WAAa,OACtC,eAAiB,KAAK,QAAQ,gBAAkB,EAGhD,gBAAkB,KAAK,QAAQ,eAAiB,KAAK,QAAQ,gBAAkB,GAG/E,cAA+D,CAAC,EAUhE,eAAwC,CAAC,EAC/C,IAAK,IAAM,WAAW,KAAK,SAAU,CACnC,IAAM,gBAAkB,QAAQ,eAAe,GAAK,CAAC,EAC/C,aAAe,QAAQ,MAAQ,QAAQ,YAAY,MAAQ,UACjE,IAAK,IAAM,gBAAgB,gBACzB,eAAe,KAAK,CAAE,OAAQ,UAAW,aAAc,MAAO,YAAa,CAAC,CAEhF,CACA,IAAK,IAAM,UAAU,KAAK,QAAS,CACjC,IAAM,eAAiB,OAAO,eAAe,GAAK,CAAC,EAC7C,YAAc,OAAO,MAAQ,OAAO,aAAa,MAAQ,SAC/D,IAAK,IAAM,gBAAgB,eACzB,eAAe,KAAK,CAAE,OAAQ,UAAW,aAAc,MAAO,WAAY,CAAC,CAE/E,CACA,IAAM,eAAwC,KAAK,QAAQ,cAAgB,CAAC,EAAA,CAAG,IAC5E,eAAuC,CACtC,OAAQ,SACR,aACA,MAAO,WACT,EACF,EAKA,KAAK,oBAAsB,CAAC,EAE5B,IAAK,IAAM,OAAO,QAAS,CAKzB,IAAM,aAAgB,IAA2B,KAC3C,SAAW,IAAI,aAAa,KAC5B,YACJ,OAAO,cAAiB,UAAY,aAAa,OAAS,EACtD,aACA,UAAY,WAAa,SACvB,SACA,SACF,eAAwC,IAAI,eAAe,GAAK,CAAC,EAAA,CAAG,IACvE,eAAuC,CACtC,OAAQ,SACR,aACA,MAAO,WACT,EACF,EAIA,IAAK,IAAM,OAAO,cAChB,KAAK,oBAAoB,KAAK,CAC5B,aAAc,IAAI,aAClB,MAAO,WACT,CAAC,EAYH,+BAA+B,CAAC,GAAG,cAAe,GAAG,eAAgB,GAAG,aAAa,CAAC,EACtF,GAAI,CACF,IAAM,OAAS,IAAI,OAAO,EAC1B,GAAI,CAAC,OAAQ,SAEb,IAAM,UAAY,MAAM,QAAQ,MAAM,EAAI,OAAS,CAAC,MAAM,EAE1D,IAAK,IAAM,SAAS,UAAW,CAE7B,IAAM,UAAY,GAAG,UAAU,IADf,MAAM,SAAW,iBACY,cAAc,MAAM,IAAI,IAO/D,OAAS,MAAM,QAAU,YAAY,MAAM,UAAU,EAC3D,GAAI,CAAC,OACH,MAAM,kCAAkC,SAAS,EAKnD,GAHA,KAAK,IAAI,IAAI,UAAW,MAAM,EAG1B,MAAM,WAAY,CACpB,IAAK,IAAM,WAAW,KAAK,SACzB,GAAI,CACF,QAAQ,eAAe,MAAM,WAAY,SAAS,CACpD,OAAS,IAAK,CACZ,IAAI,MAAM,IAAK,qCAAqC,WAAW,CACjE,CAEE,iBACF,cAAc,KAAK,CAAE,WAAY,MAAM,WAAY,SAAU,CAAC,CAElE,CACF,CACF,QAAU,CACR,+BAA+B,CAAC,CAAC,CACnC,CACF,CAGA,GAAI,iBAAmB,cAAc,OAAS,EAAG,CAC/C,IAAM,YAAc,CAAC,MAAO,OAAQ,MAAO,QAAS,SAAU,OAAQ,SAAS,EACzE,WAAc,GAAc,CAChC,IAAM,EAAI,YAAY,QAAQ,CAAC,EAC/B,OAAO,IAAM,GAAK,GAAK,CACzB,EAEI,YAAc,EAClB,IAAI,KAAK,SAAS,EAElB,IAAK,GAAM,CAAE,WAAY,aAAe,cAAe,CACrD,IAAM,KAA0B,aAC9B,SAAS,OACT,WACA,CAAC,CACH,EACA,GAAI,KAAK,SAAW,EAAG,SAEvB,IAAM,OAAiC,CAAC,EACxC,IAAK,IAAM,OAAO,KAAM,CACtB,IAAM,EAAI,IAAI,OAAO,YAAY,EACjC,OAAO,IAAM,OAAO,IAAM,GAAK,CACjC,CACA,aAAe,KAAK,OAEpB,IAAM,QAAU,OAAO,QAAQ,MAAM,CAAC,CACnC,UAAU,CAAC,GAAI,CAAC,KAAO,WAAW,CAAC,EAAI,WAAW,CAAC,CAAC,CAAC,CACrD,KAAK,CAAC,EAAG,KAAO,GAAG,EAAE,GAAG,GAAG,CAAC,CAC5B,KAAK,IAAI,EACN,KAAO,WAAW,MAAQ,aAChC,IAAI,KAAK,KAAK,KAAK,OAAO,EAAE,EAAE,GAAG,UAAU,OAAO,EAAE,EAAE,GAAG,KAAK,OAAO,WAAW,QAAQ,EAAE,CAC5F,CAEA,IAAI,KAAK,YAAY,YAAY,QAAQ,CAC3C,CAGA,KAAK,oBAAoB,UAAU,WAAW,EAQ9C,IAAK,IAAM,WAAW,KAAK,SACzB,MAAM,KAAK,SAAS,QAAQ,aAAa,KAAK,OAAO,EAAG,GAAG,EAM7D,KAAK,IAAI,IAAI,KAAK,QAAQ,YAAc,gBAAgB,CAAC,EACzD,KAAK,IAAI,IAAI,KAAK,QAAQ,SAAW,aAAa,CAAC,CACrD,CAGA,MAAM,cAA8B,CAClC,MAAM,KAAK,MAAM,CACnB,CAWA,MAAM,OAAuB,CAC3B,MAAM,KAAK,MAAM,EAEjB,IAAM,EAAI,WAEV,GAAI,EAAE,oBAAqB,CAIzB,KAAK,WAAa,EAAE,oBACpB,IAAI,MAAM,6BAA6B,EAQvC,EAAE,0BAA8B,KAAK,SAAS,EAE9C,IAAK,IAAM,WAAW,KAAK,SAAU,CACnC,IAAM,IAAM,KAAK,WAAW,KAAK,UAAW,EAC5C,MAAM,KAAK,SAAS,QAAQ,YAAY,KAAK,OAAO,EAAG,GAAG,CAC5D,CAEA,IAAK,IAAM,UAAU,KAAK,QACxB,MAAM,OAAO,UAAU,KAAK,SAAS,EAGvC,MACF,CAGA,IAAM,KAAO,KAAK,QAAQ,MAAQ,SAAS,QAAQ,IAAI,MAAQ,OAAQ,EAAE,EACzE,KAAK,WAAa,KAAK,aAAa,KAAK,GAAG,EAE5C,KAAK,WAAW,GAAG,QAAU,KAA+B,CAU1D,MATI,IAAI,OAAS,eACf,IAAI,MACF,QAAQ,KAAK,iFACD,KAAO,EAAE,wBACL,KAAK,2DAEvB,EACA,QAAQ,KAAK,CAAC,GAEV,GACR,CAAC,EAGD,MAAM,IAAI,SAAe,QAAS,SAAW,CAC3C,KAAK,WAAY,OAAO,KAAM,SAAY,CACxC,GAAI,CACF,IAAI,KAAK,sCAAsC,MAAM,EAErD,IAAK,IAAM,WAAW,KAAK,SAAU,CACnC,IAAM,SAAW,KAAK,WAAW,KAAK,UAAW,EACjD,MAAM,KAAK,SAAS,QAAQ,YAAY,KAAK,OAAO,EAAG,QAAQ,CACjE,CAGA,IAAK,IAAM,UAAU,KAAK,QACxB,MAAM,OAAO,UAAU,KAAK,SAAS,EAGvC,QAAQ,CACV,OAAS,IAAK,CACZ,OAAO,GAAG,CACZ,CACF,CAAC,CACH,CAAC,CACH,CAGA,MAAM,SAAyB,CAG7B,IAAM,QAAU,KAAK,IACf,cAAgB,KAAK,UAE3B,GAAI,CACF,UAAU,MAAM,EAChB,KAAK,UAAY,UAAU,YAAY,EACvC,KAAK,IAAM,QAAQ,EACnB,MAAM,KAAK,MAAM,CACnB,OAAS,IAAK,CACZ,IAAI,MAAM,IAAK,0CAA0C,EAEzD,KAAK,IAAM,QACX,KAAK,UAAY,cACjB,MACF,CAEI,KAAK,aACP,KAAK,WAAW,mBAAmB,SAAS,EAC5C,KAAK,WAAW,GAAG,UAAW,KAAK,GAAG,EACtC,IAAI,MAAM,sCAAsC,EAEpD,CAYA,MAAM,UAA0B,CAE9B,GAAI,KAAK,mBAAoB,CAC3B,IAAI,MAAM,uDAAuD,EACjE,MACF,CACA,KAAK,mBAAqB,GAC1B,KAAK,UAAY,GAEjB,IAAI,MAAM,gDAAgD,EAE1D,IAAM,UAAY,KAAK,QAAQ,iBAAmB,IAC9C,MAGE,iBACJ,UAAY,EACR,IAAI,QAAoB,SAAY,CAClC,MAAQ,eAAiB,QAAQ,SAAS,EAAG,SAAS,EACtD,MAAM,MAAM,CACd,CAAC,EACD,IAAI,YAAqB,CAAC,CAAC,EAEjC,GAAI,CAUF,GALI,KAAK,YACP,KAAK,WAAW,UAAY,CAAC,CAAC,EAI5B,KAAK,kBAAoB,EAAG,CAC9B,IAAI,MAAM,eAAe,KAAK,kBAAkB,qCAAqC,EACrF,IAAM,aAAe,IAAI,QAAoB,SAAY,CACvD,KAAK,gBAAgB,SAAW,QAAQ,SAAS,CAAC,CACpD,CAAC,EAGG,MADiB,QAAQ,KAAK,CAAC,aAAc,gBAAgB,CAAC,IACnD,UACb,IAAI,KACF,qBAAqB,UAAU,mBAAmB,KAAK,kBAAkB,8CAC3E,EAEA,IAAI,MAAM,kCAAkC,CAEhD,CAGA,IAAM,QAAU,MAAM,QAAQ,WAAW,CACvC,GAAG,KAAK,QAAQ,IAAK,QAAW,QAAQ,QAAQ,OAAO,WAAW,CAAC,CAAC,EACpE,GAAG,KAAK,SAAS,IAAK,SAAY,QAAQ,QAAQ,QAAQ,WAAW,CAAC,CAAC,CACzE,CAAC,EACD,IAAK,IAAM,UAAU,QACf,OAAO,SAAW,YACpB,IAAI,MAAM,CAAE,IAAK,OAAO,MAAO,EAAG,yBAAyB,CAGjE,QAAU,CACJ,OAAO,aAAa,KAAK,CAC/B,CACF,CAEA,eAAyB,CACvB,OAAO,KAAK,GACd,CAGA,aAA4B,CAC1B,OAAO,KAAK,QACd,CAOA,YAAoC,CAClC,OAAO,KAAK,OACd,CAoBA,iBAKG,CACD,IAAM,IAKD,CAAC,EACA,QACJ,KACA,OACA,QACS,CACJ,QACL,IAAK,IAAM,OAAO,KAAM,CACtB,IAAM,EAAI,IACV,GAAI,EAAE,MAAQ,IAAA,IAAa,EAAE,MAAQ,KAAM,SAI3C,IAAM,IAAM,OAAO,EAAE,KAAQ,SAAW,EAAE,IAAM,UAAU,EAAE,GAAG,EAC/D,IAAI,KAAK,CACP,IACA,OACA,MACA,UAAW,MAAM,QAAQ,EAAE,SAAS,EAAK,EAAE,UAAyB,CAAC,CACvE,CAAC,CACH,CACF,EACA,IAAK,IAAM,WAAW,KAAK,SACzB,OAAO,QAAQ,eAAe,EAAG,UAAW,QAAQ,MAAQ,SAAS,EAEvE,IAAK,IAAM,UAAU,KAAK,QACxB,OAAO,OAAO,eAAe,EAAG,SAAU,OAAO,MAAQ,QAAQ,EAKnE,IAAK,GAAM,CAAE,aAAc,SAAW,KAAK,oBACzC,OAAO,CAAC,YAAY,EAAG,SAAU,KAAK,EAGxC,OADA,OAAO,KAAK,QAAQ,aAAc,SAAU,WAAW,EAChD,GACT,CAEA,eAAoC,CAClC,OAAO,KAAK,UACd,CAiBA,6BAA+C,CAC7C,GAAI,KAAK,QAAQ,eAAiB,SAAU,MAAO,GAEnD,IAAM,YAAc,KAAK,QAAQ,aAAe,KAAK,QAAQ,YAAc,CAAC,EAC5E,IAAK,IAAM,SAAS,YAElB,GAAI,yBADY,OAAO,OAAU,WAAa,MAAQ,MAAM,OACxB,EAAG,MAAO,GAEhD,MAAO,EACT,CAEA,0BAAmC,CACjC,IAAM,OAAS,CACb,aAAc,CAAC,EACf,YAAa,CAAC,EACd,aAAc,CAAC,EACf,YAAa,CAAC,CAChB,EAEA,IAAK,IAAM,WAAW,KAAK,SAAU,CACnC,IAAM,QAAU,QAAQ,aAAa,GAAK,CAAC,EAC3C,IAAK,IAAM,SAAS,QAElB,OADc,MAAM,OAAS,cAChB,CAAC,KAAK,KAAK,CAE5B,CAEA,OAAO,MACT,CAEA,oBAA4B,QAAoC,CAC9D,IAAK,IAAM,SAAS,QAAS,CAC3B,GAAI,MAAM,OAAS,IAAA,GAAW,CAC5B,KAAK,IAAI,IAAI,MAAM,OAAO,EAC1B,QACF,CAIA,IAAM,KAA8C,MAAM,QAAQ,MAAM,IAAI,EACxE,CAAC,GAAG,MAAM,IAAI,EACb,MAAM,KACX,KAAK,IAAI,IAAI,KAAM,MAAM,OAAO,CAClC,CACF,CAEA,qBAA6B,MAA8B,CACrD,OAAO,OAAU,WACnB,KAAK,IAAI,IAAI,KAAK,EAElB,KAAK,IAAI,IAAI,MAAM,KAAM,MAAM,OAAO,CAE1C,CAGA,2BAAoD,CAClD,OAAQ,KAAM,IAAK,OAAS,CAC1B,KAAK,oBACL,IAAM,aAAiB,CAKrB,GAJA,IAAI,eAAe,SAAU,QAAQ,EACrC,IAAI,eAAe,QAAS,QAAQ,EACpC,KAAK,oBAED,KAAK,WAAa,KAAK,oBAAsB,EAAG,CAClD,IAAK,IAAM,WAAW,KAAK,gBACzB,QAAQ,EAEV,KAAK,gBAAkB,CAAC,CAC1B,CACF,EACA,IAAI,GAAG,SAAU,QAAQ,EACzB,IAAI,GAAG,QAAS,QAAQ,EACxB,KAAK,CACP,CACF,CAGA,sBAAqC,CACnC,KAAK,IAAI,IAAI,gBAAiB,KAAM,MAAQ,CACtC,KAAK,UACP,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,CAAE,OAAQ,WAAY,OAAQ,QAAQ,OAAO,CAAE,CAAC,EAErE,IAAI,KAAK,CAAE,OAAQ,KAAM,OAAQ,QAAQ,OAAO,CAAE,CAAC,CAEvD,CAAC,EAED,KAAK,IAAI,IAAI,gBAAiB,MAAO,KAAM,MAAQ,CACjD,GAAI,KAAK,UAAW,CAClB,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,CAAE,OAAQ,WAAY,OAAQ,CAAC,CAAE,CAAC,EACvD,MACF,CACA,IAAM,mBAAqB,KAAK,SAAS,OAAQ,GAAM,EAAE,aAAa,EAEhE,SAAU,MADK,QAAQ,WAAW,mBAAmB,IAAK,GAAM,EAAE,cAAe,CAAC,CAAC,EAAA,CAClE,KAAK,EAAG,IACzB,EAAE,SAAW,YAAoB,EAAE,MAChC,CAAE,KAAM,mBAAmB,EAAE,CAAC,MAAQ,UAAW,OAAQ,MAAgB,CACjF,EACK,QAAU,QAAQ,MAAO,GAAM,EAAE,SAAW,IAAI,EACtD,IAAI,OAAO,QAAU,IAAM,GAAG,CAAC,CAAC,KAAK,CACnC,OAAQ,QAAU,QAAU,WAC5B,OAAQ,OACV,CAAC,CACH,CAAC,CACH,CACF"}

package/dist/context-Dnt2Di7p.d.mts

@@ -1,434 +0,0 @@
-
-import { i as MetaValue, r as ExecutionContext } from "./execution-context-B4cfhivz.mjs";
-import { i as ProblemDetails } from "./errors-CRCTjEUK.mjs";
-import { g as QueryFieldConfig, y as TypedParsedQuery } from "./index-kEmG8nWU.mjs";
-import { NextFunction, Request, Response } from "express";
-
-//#region src/http/context.d.ts
-/**
- * Input shape for the typed problem-detail convenience methods on
- * {@link ProblemSender} (`ctx.problem.notFound`, `.badRequest`, etc.) —
- * RFC 9457 details minus the `status`, which each method pre-fills.
- */
-type ProblemInput = Omit<ProblemDetails, 'status'>;
-/**
- * Callable response helper for RFC 9457 — Problem Details responses.
- * Returned by `ctx.problem`. Invoke directly for a fully-specified
- * payload, or use the named convenience methods to pre-fill `status` +
- * `title` for the common codes.
- *
- * Each call sets `Content-Type: application/problem+json` and serializes
- * the canonical shape (defaulting `type` to `about:blank` and `title` to
- * the IANA reason phrase per RFC 9457 §3.1.1 / §3.1.4).
- *
- * @example
- * ```ts
- * ctx.problem({
- *   type: 'https://api.example.com/problems/out-of-credit',
- *   status: 403,
- *   detail: 'Your balance is 30, but that costs 50.',
- *   balance: 30,                // extension per §3.2
- * })
- *
- * ctx.problem.notFound({ detail: 'User abc not found' })
- * ctx.problem.validation(zodResult.error.issues)
- * ```
- */
-interface ProblemSender {
-  (input: ProblemDetails): Response;
-  /** 400 Bad Request — RFC 9457. */
-  badRequest(input?: ProblemInput): Response;
-  /** 401 Unauthorized — RFC 9457. */
-  unauthorized(input?: ProblemInput): Response;
-  /** 403 Forbidden — RFC 9457. */
-  forbidden(input?: ProblemInput): Response;
-  /** 404 Not Found — RFC 9457. */
-  notFound(input?: ProblemInput): Response;
-  /** 409 Conflict — RFC 9457. */
-  conflict(input?: ProblemInput): Response;
-  /** 422 Unprocessable Entity — RFC 9457. */
-  unprocessable(input?: ProblemInput): Response;
-  /** 429 Too Many Requests — RFC 9457. */
-  tooManyRequests(input?: ProblemInput): Response;
-  /** 500 Internal Server Error — RFC 9457. */
-  internal(input?: ProblemInput): Response;
-  /**
-   * 422 with Zod issues serialized into the `errors` extension per
-   * RFC 9457 §3.2's array convention. Pass `error.issues` from a Zod
-   * `safeParse` failure or `error.issues` from a thrown ZodError.
-   */
-  validation(issues: any[], input?: ProblemInput): Response;
-}
-/**
- * Recursively marks every property of `T` as `readonly`. Preserves
- * `Function`, `Date`, and `RegExp` unchanged, and converts `Map` / `Set`
- * to `ReadonlyMap` / `ReadonlySet` so their mutating methods (`set`,
- * `delete`, `add`, `clear`) are removed from the public surface.
- * Tuples keep their positional element types — only their per-element
- * mutability is locked.
- *
- * Exposed as a utility for adopters who want to opt into compile-time
- * sealing of their own shapes. **No longer applied to
- * `RequestContext.{body,params,query,headers,file,files}`** — that
- * broke TS narrowing / discriminated-union drilldowns on typed request
- * payloads. Runtime read-only enforcement now lives in
- * {@link makeReadOnlyProxy} (dev-only Proxy that warns on writes,
- * no-op in production).
- *
- * Type-only. No runtime cost. `DeepReadonly<any>` is `any` (TS
- * distributes conditional types over `any`).
- */
-type DeepReadonly<T> = T extends ((...args: never[]) => unknown) ? T : T extends Date | RegExp ? T : T extends Map<infer K, infer V> ? ReadonlyMap<DeepReadonly<K>, DeepReadonly<V>> : T extends Set<infer V> ? ReadonlySet<DeepReadonly<V>> : T extends readonly (infer U)[] ? number extends T['length'] ? ReadonlyArray<DeepReadonly<U>> : { readonly [K in keyof T]: DeepReadonly<T[K]> } : T extends object ? { readonly [K in keyof T]: DeepReadonly<T[K]> } : T;
-/**
- * The shape of a single route entry in `KickRoutes`. Generated by
- * `kick typegen` and consumed via the `Ctx<T>` helper. Each field is
- * `unknown` by default and is filled in as the typegen learns more
- * about the route (URL params from the path, body/query from validation
- * schemas, etc.).
- */
-interface RouteShape {
-  params?: unknown;
-  body?: unknown;
-  query?: unknown;
-  response?: unknown;
-}
-/**
- * Unified request/response abstraction passed to every controller method.
- * Shields handlers from raw Express objects and provides convenience methods.
- *
- * Implements {@link ExecutionContext} so the transport-agnostic Context
- * Contributor pipeline (#107) can run against this concrete HTTP context
- * the same way it will run against future WS / queue / cron contexts.
- */
-declare class RequestContext<TBody = any, TParams = any, TQuery = any> implements ExecutionContext {
-  readonly req: Request;
-  readonly res: Response;
-  readonly next: NextFunction;
-  constructor(req: Request, res: Response, next: NextFunction);
-  /**
-   * Read-side accessor for the per-request metadata map.
-   *
-   * Returns the AsyncLocalStorage map (`requestStore.getStore().values`)
-   * shared with the Context Contributor pipeline when an ALS frame is
-   * active. Returns `null` outside any frame — read-side callers
-   * (`ctx.get`, `ctx.user`, `ctx.tenantId`, `ctx.roles`) treat that as
-   * "no metadata" and fall through to their `req.*` defaults. Reads
-   * never throw because outside an ALS frame nobody could have written
-   * via `ctx.set` anyway, so an empty answer is the truthful one.
-   */
-  private metadataReadOnly;
-  /**
-   * Write-side accessor for the per-request metadata map.
-   *
-   * Returns the same map as {@link metadataReadOnly} when an ALS frame
-   * is active. Throws otherwise — writing to a fallback map outside
-   * the ALS frame would silently lose data because other call sites
-   * (downstream contributors, request-logger, etc.) read from the
-   * canonical store and would never see it. Mount
-   * `requestScopeMiddleware()` (Application does this for you in
-   * `'auto'` mode) or wrap your test setup in
-   * `requestStore.run({...}, () => …)` to fix.
-   */
-  private metadataForWrite;
-  /**
-   * Parsed request body. Wrapped in a dev-only Proxy that warns when
-   * adopters try to mutate Zod-validated payloads in place — compute
-   * new values and stash them via `ctx.set('key', value)` or a Context
-   * Contributor instead. Reach for `ctx.req.body` if you genuinely
-   * need the raw, mutable Express handle (rare).
-   *
-   * In production the Proxy is bypassed and `this.req.body` is
-   * returned as-is — no runtime cost on the hot path.
-   */
-  get body(): TBody;
-  /** Path parameters parsed from the route — read-only, see {@link body}. */
-  get params(): TParams;
-  /** Parsed query string — read-only, see {@link body}. */
-  get query(): TQuery;
-  /** Inbound HTTP headers — read-only, see {@link body}. */
-  get headers(): Request['headers'];
-  get requestId(): string | undefined;
-  /**
-   * `AbortSignal` that fires when the underlying HTTP request is
-   * closed — either because the client disconnected before the
-   * response was sent, or because Node's socket-close event ran
-   * after a normal response. Multiple `RequestContext` wrappers for
-   * the same request (router-builder constructs one per
-   * middleware/contributor pipeline / main handler) share a single
-   * `AbortController` cached on the underlying `req` object, so the
-   * signal is stable across the request lifecycle.
-   *
-   * Thread it through anything that takes an `AbortSignal` so the
-   * work cancels as soon as the client gives up — e.g. a kickjs-db
-   * relational query:
-   *
-   * ```ts
-   * @Get('/:id/full')
-   * async show(ctx: RequestContext) {
-   *   const row = await this.repo.findFullById(ctx.params.id, ctx.signal)
-   *   if (!row) return ctx.notFound()
-   *   ctx.json(row)
-   * }
-   * ```
-   *
-   * The repo passes `signal` to `db.query.<table>.findUnique({ signal })`;
-   * if the client disconnects mid-flight, the in-flight query rejects
-   * with `RelationalQueryCancelledError` instead of consuming the
-   * connection until completion.
-   *
-   * Implementation note — both `req.on('close')` and `res.on('close')`
-   * are wired so the signal aborts regardless of whether the close
-   * event lands on the request stream or the response stream first.
-   * Subsequent fires are no-ops (`AbortController.abort()` is
-   * idempotent).
-   */
-  get signal(): AbortSignal;
-  /** Session data (requires session middleware) */
-  get session(): any;
-  /**
-   * The authenticated user set by AuthAdapter.
-   * Reads from the per-request metadata store first (`ctx.set('user', ...)`),
-   * then falls back to `req.user` (set directly by AuthAdapter middleware).
-   *
-   * Extend the `AuthUser` interface via module augmentation in `@forinda/kickjs-auth`
-   * to get full typing.
-   *
-   * @example
-   * ```ts
-   * @Get('/me')
-   * @Authenticated()
-   * getProfile(ctx: RequestContext) {
-   *   const user = ctx.user
-   *   if (!user) return ctx.notFound()
-   *   return ctx.json({ user })
-   * }
-   * ```
-   */
-  get user(): MetaValue<'user', Record<string, any>> | undefined;
-  /**
-   * Tenant identifier for multi-tenant apps. Reads `user.tenantId` —
-   * populated either by `AuthAdapter.testMode({ tenantId })`, a tenant
-   * resolver middleware, or manually on the strategy's `mapPayload`.
-   *
-   * Augment `AuthUser` (or `ContextMeta['user']`) to widen the return
-   * type if your user shape guarantees a non-`string | undefined` id.
-   */
-  get tenantId(): string | undefined;
-  /**
-   * Effective role list for the current user. Prefers `user.tenantRoles`
-   * (populated by `AuthAdapterOptions.roleResolver` under a tenant) and
-   * falls back to `user.roles`. Returns an empty array when the user is
-   * absent or the shape has neither field.
-   */
-  get roles(): string[];
-  /**
-   * Parse the request query string into structured filters, sort, pagination, and search.
-   * Pass the result to an ORM query builder adapter (Drizzle, Prisma, Sequelize, etc.).
-   *
-   * Generic over the field config: when passed an inline literal (or
-   * `as const`), `filters[].field` and `sort[].field` are narrowed to
-   * the exact whitelisted field names. Pass nothing or a non-literal
-   * config and you get the loose `string` fallback.
-   *
-   * @param fieldConfig - Optional whitelist for filterable, sortable, and searchable fields
-   *
-   * @example
-   * ```ts
-   * @Get('/')
-   * async list(ctx: RequestContext) {
-   *   const parsed = ctx.qs({
-   *     filterable: ['status', 'priority'],
-   *     sortable: ['createdAt', 'title'],
-   *   } as const)
-   *   parsed.filters[0].field // typed as 'status' | 'priority'
-   *   parsed.sort[0].field    // typed as 'createdAt' | 'title'
-   * }
-   * ```
-   */
-  qs<TConfig extends QueryFieldConfig | undefined = undefined>(fieldConfig?: TConfig): TypedParsedQuery<TConfig>;
-  /**
-   * Single uploaded file (requires `@FileUpload({ mode: 'single' })`).
-   * Wrapped in a dev-only Proxy that warns on mutation — see {@link body}.
-   * File metadata is set by the upload middleware and shouldn't be
-   * mutated downstream.
-   */
-  get file(): Express.Multer.File | undefined;
-  /**
-   * Array of uploaded files (requires `@FileUpload({ mode: 'array' })`).
-   * The array (and each entry in dev) is wrapped in a read-only Proxy
-   * that warns on `push`/`pop` and per-file mutation. Use
-   * `ctx.req.files` if you genuinely need the mutable Express handle.
-   */
-  get files(): Express.Multer.File[] | undefined;
-  /**
-   * Read a value from the per-request metadata store.
-   *
-   * When `ContextMeta` has been augmented with a matching key, the return
-   * type is inferred automatically. For ad-hoc keys, pass a generic:
-   * `ctx.get<MyType>('custom')`.
-   */
-  get<K extends string>(key: K): MetaValue<K> | undefined;
-  /**
-   * Write a value to the per-request metadata store. Throws when no
-   * AsyncLocalStorage frame is active — see {@link metadataForWrite}
-   * for why a silent fallback is the wrong default.
-   */
-  set<K extends string>(key: K, value: MetaValue<K>): void;
-  json(data: any, status?: number): Response<any, Record<string, any>>;
-  created(data: any): Response<any, Record<string, any>>;
-  noContent(): Response<any, Record<string, any>>;
-  /**
-   * @deprecated Prefer {@link ProblemSender.notFound | ctx.problem.notFound()},
-   * which emits an RFC 9457 — Problem Details response. This helper stays
-   * for backward compatibility and will not be removed.
-   */
-  notFound(message?: string): Response<any, Record<string, any>>;
-  /**
-   * @deprecated Prefer {@link ProblemSender.badRequest | ctx.problem.badRequest()},
-   * which emits an RFC 9457 — Problem Details response. This helper stays
-   * for backward compatibility and will not be removed.
-   */
-  badRequest(message: string): Response<any, Record<string, any>>;
-  /**
-   * RFC 9457 — Problem Details for HTTP APIs response helper.
-   * https://datatracker.ietf.org/doc/html/rfc9457
-   *
-   * `ctx.problem(...)` sends a canonical problem-detail response with
-   * `Content-Type: application/problem+json`. The convenience methods
-   * (`ctx.problem.notFound`, `.badRequest`, etc.) pre-fill `status` +
-   * `title` for the common codes.
-   *
-   * `type` defaults to `about:blank` (§3.1.1); `title` defaults to the
-   * IANA reason phrase for `status` (§3.1.4). Extension members per §3.2
-   * pass through unchanged.
-   *
-   * @example
-   * ```ts
-   * ctx.problem({
-   *   type: 'https://api.example.com/problems/out-of-credit',
-   *   status: 403,
-   *   detail: 'Your balance is 30, but that costs 50.',
-   *   instance: `/account/${ctx.user.id}/messages/${ctx.params.id}`,
-   *   balance: 30,
-   * })
-   *
-   * ctx.problem.notFound({ detail: 'User abc not found' })
-   * ctx.problem.validation(zodResult.error.issues)
-   * ```
-   *
-   * @see {@link ProblemException} for the exception-throwing equivalent
-   * (use it from services where `ctx` isn't in scope).
-   */
-  get problem(): ProblemSender;
-  private sendProblem;
-  html(content: string, status?: number): Response<any, Record<string, any>>;
-  download(buffer: Buffer, filename: string, contentType?: string): Response<any, Record<string, any>>;
-  /**
-   * Render a template using the registered view engine (EJS, Pug, Handlebars, etc.).
-   * Requires a ViewAdapter to be configured in bootstrap().
-   *
-   * @param template - Template name (without extension, relative to viewsDir)
-   * @param data - Data to pass to the template
-   *
-   * @example
-   * ```ts
-   * ctx.render('dashboard', { user, title: 'Dashboard' })
-   * ctx.render('emails/welcome', { name: 'Alice' })
-   * ```
-   */
-  render(template: string, data?: Record<string, any>): void;
-  /**
-   * Parse query params and return a standardized paginated response.
-   * Calls `ctx.qs()` internally, then wraps your data with pagination meta.
-   *
-   * @param fetcher - Async function that receives ParsedQuery and returns `{ data, total }`
-   * @param fieldConfig - Optional whitelist for filterable, sortable, searchable fields
-   *
-   * @example
-   * ```ts
-   * @Get('/')
-   * async list(ctx: RequestContext) {
-   *   return ctx.paginate(
-   *     async (parsed) => {
-   *       const data = await db.select().from(users)
-   *         .where(query.where).limit(parsed.pagination.limit)
-   *         .offset(parsed.pagination.offset).all()
-   *       const total = await db.select({ count: count() }).from(users).get()
-   *       return { data, total: total?.count ?? 0 }
-   *     },
-   *     { filterable: ['name', 'role'], sortable: ['createdAt'] },
-   *   )
-   * }
-   * ```
-   */
-  paginate<T, TConfig extends QueryFieldConfig | undefined = undefined>(fetcher: (parsed: TypedParsedQuery<TConfig>) => Promise<{
-    data: T[];
-    total: number;
-  }>, fieldConfig?: TConfig): Promise<Response<any, Record<string, any>>>;
-  /**
-   * Start an SSE (Server-Sent Events) stream.
-   * Sets the correct headers and returns helpers to send events.
-   *
-   * @example
-   * ```ts
-   * @Get('/events')
-   * async stream(ctx: RequestContext) {
-   *   const sse = ctx.sse()
-   *
-   *   const interval = setInterval(() => {
-   *     sse.send({ time: new Date().toISOString() }, 'tick')
-   *   }, 1000)
-   *
-   *   sse.onClose(() => clearInterval(interval))
-   * }
-   * ```
-   */
-  sse(): {
-    /** Send an SSE event with optional event name and id */send: (data: any, event?: string, id?: string) => void; /** Send a comment (keeps connection alive) */
-    comment: (text: string) => void; /** Register a callback when the client disconnects */
-    onClose: (fn: () => void) => void; /** End the SSE stream */
-    close: () => void;
-  };
-}
-/**
- * Short alias for `RequestContext` parameterised by a route shape.
- *
- * Use with `kick typegen`'s generated `KickRoutes` namespace for
- * fully-typed `ctx.params`, `ctx.body`, and `ctx.query`. Metadata
- * typing (`ctx.get()`, `ctx.set()`, `ctx.user`) comes from
- * `ContextMeta` augmentation and works on all `RequestContext` instances.
- *
- * @example
- * ```ts
- * @Get('/:id')
- * getUser(ctx: Ctx<KickRoutes.UserController['getUser']>) {
- *   ctx.params.id      // typed from RouteShape
- *   ctx.body           // typed from RouteShape
- *   ctx.user           // typed from ContextMeta
- *   ctx.get('tenant')  // typed from ContextMeta
- * }
- * ```
- */
-type Ctx<TRoute extends RouteShape = RouteShape> = RequestContext<TRoute extends {
-  body: infer B;
-} ? B : any, TRoute extends {
-  params: infer P;
-} ? P : any, TRoute extends {
-  query: infer Q;
-} ? Q : any>;
-/**
- * Global ambient registry of typed routes, populated by `kick typegen`.
- *
- * Each interface inside `KickRoutes` corresponds to a controller class;
- * each property is one route method on that controller. The values
- * conform to `RouteShape`.
- *
- * Empty by default — declarations come from `.kickjs/types/routes.d.ts`
- * generated alongside the rest of the typegen output.
- */
-declare global {
-  namespace KickRoutes {}
-} //# sourceMappingURL=context.d.ts.map
-//#endregion
-export { RouteShape as i, DeepReadonly as n, RequestContext as r, Ctx as t };
-//# sourceMappingURL=context-Dnt2Di7p.d.mts.map

package/dist/context-Dnt2Di7p.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"context-Dnt2Di7p.d.mts","names":[],"sources":["../src/http/context.ts"],"mappings":";;;;;;;;;AAUgB;;;KAOX,YAAA,GAAe,IAAI,CAAC,cAAA;AAAc;AAAA;;;;;;;;;;;;;;;;;;;;;;AAAA,UAyB7B,aAAA;EAAA,CACP,KAAA,EAAO,cAAA,GAAiB,QAAA;EAsBgC;EApBzD,UAAA,CAAW,KAAA,GAAQ,YAAA,GAAe,QAAA;EAFjC;EAID,YAAA,CAAa,KAAA,GAAQ,YAAA,GAAe,QAAA;EAFpC;EAIA,SAAA,CAAU,KAAA,GAAQ,YAAA,GAAe,QAAA;EAJtB;EAMX,QAAA,CAAS,KAAA,GAAQ,YAAA,GAAe,QAAA;EAJhC;EAMA,QAAA,CAAS,KAAA,GAAQ,YAAA,GAAe,QAAA;EANnB;EAQb,aAAA,CAAc,KAAA,GAAQ,YAAA,GAAe,QAAA;EANrC;EAQA,eAAA,CAAgB,KAAA,GAAQ,YAAA,GAAe,QAAA;EAR7B;EAUV,QAAA,CAAS,KAAA,GAAQ,YAAA,GAAe,QAAA;EARhC;;;;;EAcA,UAAA,CAAW,MAAA,SAAe,KAAA,GAAQ,YAAA,GAAe,QAAA;AAAA;;;;;;;;;;;;;;;;;;;;KAsBvC,YAAA,MAAkB,CAAA,cAAc,IAAA,yBACxC,CAAA,GACA,CAAA,SAAU,IAAA,GAAO,MAAA,GACf,CAAA,GACA,CAAA,SAAU,GAAA,qBACR,WAAA,CAAY,YAAA,CAAa,CAAA,GAAI,YAAA,CAAa,CAAA,KAC1C,CAAA,SAAU,GAAA,YACR,WAAA,CAAY,YAAA,CAAa,CAAA,KACzB,CAAA,+CAMiB,CAAA,aACb,aAAA,CAAc,YAAA,CAAa,CAAA,4BACJ,CAAA,GAAI,YAAA,CAAa,CAAA,CAAE,CAAA,OAC5C,CAAA,yCACyB,CAAA,GAAI,YAAA,CAAa,CAAA,CAAE,CAAA,OAC1C,CAAA;;;;;;;;UAsIG,UAAA;EACf,MAAA;EACA,IAAA;EACA,KAAA;EACA,QAAA;AAAA;;;;;;;;;cAWW,cAAA,sDAAoE,gBAAA;EAAA,SAE7D,GAAA,EAAK,OAAA;EAAA,SACL,GAAA,EAAK,QAAA;EAAA,SACL,IAAA,EAAM,YAAA;EAHxB,WAAA,CACkB,GAAA,EAAK,OAAA,EACL,GAAA,EAAK,QAAA,EACL,IAAA,EAAM,YAAA;EAzJX;;;;;;;;;;;EAAA,QAuKL,gBAAA;EAtLyB;;;;;;;;;;;;EAAA,QAsMzB,gBAAA;EAlM0B;;;;;;;;;;EAAA,IAwN9B,IAAA,IAAQ,KAAA;EA9MY;EAAA,IAmNpB,MAAA,IAAU,OAAA;EAnNyB;EAAA,IAwNnC,KAAA,IAAS,MAAA;EAxNyC;EAAA,IA6NlD,OAAA,IAAW,OAAA;EAAA,IAIX,SAAA;EAhOS;AAsIf;;;;;;;;;AAIU;AAWV;;;;;;;;;;;;;;;;;;;;;;;EArJe,IAsQT,MAAA,IAAU,WAAA;EA0IiB;EAAA,IA5H3B,OAAA;EAqI2C;;;;;;;;;;;;;;;;;;;EAAA,IA9G3C,IAAA,IAAQ,SAAA,SAAkB,MAAA;EA8QO;;;;;;;;EAAA,IAlQjC,QAAA;EAlK2F;;;;;;EAAA,IA6K3F,KAAA;EA3KmB;;;;;;;;;;;;;;;;;;;;;;;;EA0MvB,EAAA,iBAAmB,gBAAA,0BACjB,WAAA,GAAc,OAAA,GACb,gBAAA,CAAiB,OAAA;EA/EhB;;;;;;EAAA,IA2FA,IAAA,IAAQ,OAAA,CAAQ,MAAA,CAAO,IAAA;EAdxB;;;;;;EAAA,IAyBC,KAAA,IAAS,OAAA,CAAQ,MAAA,CAAO,IAAA;EAXhB;;;;;;;EAiCZ,GAAA,mBAAsB,GAAA,EAAK,CAAA,GAAI,SAAA,CAAU,CAAA;EAArC;;;;;EASJ,GAAA,mBAAsB,GAAA,EAAK,CAAA,EAAG,KAAA,EAAO,SAAA,CAAU,CAAA;EAM/C,IAAA,CAAK,IAAA,OAAW,MAAA,YAAY,QAAA,MAAA,MAAA;EAI5B,OAAA,CAAQ,IAAA,QAAS,QAAA,MAAA,MAAA;EAIjB,SAAA,IAAS,QAAA,MAAA,MAAA;EAd4B;;;;;EAuBrC,QAAA,CAAS,OAAA,YAAqB,QAAA,MAAA,MAAA;EAjBF;;;;;EA0B5B,UAAA,CAAW,OAAA,WAAe,QAAA,MAAA,MAAA;EAlB1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAA,IAsDI,OAAA,IAAW,aAAA;EAAA,QAkCP,WAAA;EAMR,IAAA,CAAK,OAAA,UAAiB,MAAA,YAAY,QAAA,MAAA,MAAA;EAIlC,QAAA,CAAS,MAAA,EAAQ,MAAA,EAAQ,QAAA,UAAkB,WAAA,YAAwC,QAAA,MAAA,MAAA;EAgD/D;;;;;;;;;;;;;EA7BpB,MAAA,CAAO,QAAA,UAAkB,IAAA,GAAM,MAAA;EAyF3B;;;;;;;;;;AAcK;AA0BX;;;;;;;;;;;;;EArGQ,QAAA,oBAA4B,gBAAA,0BAChC,OAAA,GAAU,MAAA,EAAQ,gBAAA,CAAiB,OAAA,MAAa,OAAA;IAAU,IAAA,EAAM,CAAA;IAAK,KAAA;EAAA,IACrE,WAAA,GAAc,OAAA,GAAO,OAAA,CAAA,QAAA,MAAA,MAAA;EAoGM;;;;;;;;;;;AAEQ;AACtC;;;;;AAcqB;EA3EpB,GAAA;4DAiBI,IAAA,GAAI,IAAA,OAAY,KAAA,WAAgB,EAAA;IAMhC,OAAA,GAAO,IAAA;IAIP,OAAA,GAAO,EAAA;IAIP,KAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;;KA0BM,GAAA,gBAAmB,UAAA,GAAa,UAAA,IAAc,cAAA,CACxD,MAAA;EAAiB,IAAA;AAAA,IAAkB,CAAA,QACnC,MAAA;EAAiB,MAAA;AAAA,IAAoB,CAAA,QACrC,MAAA;EAAiB,KAAA;AAAA,IAAmB,CAAA;;;;;;;;;;;QAa9B,MAAA;EAAA,UAEI,UAAU;AAAA"}

package/dist/context-MD7Mc_o_.mjs

@@ -1,12 +0,0 @@
-/**
- * @forinda/kickjs v5.16.0
- *
- * Copyright (c) Felix Orinda
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- *
- * @license MIT
- */
-import{normalizeProblem}from"./core/errors.mjs";import{i as parseQuery}from"./query-D-FiLfmd.mjs";import{AsyncLocalStorage}from"node:async_hooks";const requestStore=new AsyncLocalStorage;function getRequestStore(){let store=requestStore.getStore();if(!store)throw Error(`No active request context. REQUEST-scoped services can only be resolved during an HTTP request.`);return store}function getRequestValue(key){return requestStore.getStore()?.values.get(key)}const signalControllerKey=Symbol.for(`kickjs.requestContext.signalController`),readOnlyProxyCacheKey=Symbol.for(`kickjs.requestContext.readOnlyProxyCache`);function isPlainObjectOrArray(v){if(typeof v!=`object`||!v)return!1;if(Array.isArray(v))return!0;let proto=Object.getPrototypeOf(v);return proto===Object.prototype||proto===null}function makeReadOnlyProxy(target,req,label){if(process.env.NODE_ENV===`production`||!isPlainObjectOrArray(target))return target;let reqObj=req,cache=reqObj[readOnlyProxyCacheKey];cache||(cache=new WeakMap,reqObj[readOnlyProxyCacheKey]=cache);let targetObj=target,cached=cache.get(targetObj);if(cached)return cached;let warnWrite=(verb,prop)=>{console.warn(`[kickjs] Attempted to ${verb} \`ctx.${label}.${String(prop)}\` — request data is read-only. Stash computed values via \`ctx.set('key', value)\` or a Context Contributor, or reach \`ctx.req.${label}\` if you genuinely need the raw mutable handle.`)},proxy=new Proxy(targetObj,{get(t,prop,receiver){let value=Reflect.get(t,prop,receiver);return isPlainObjectOrArray(value)?makeReadOnlyProxy(value,req,`${label}.${String(prop)}`):value},set(_t,prop){return warnWrite(`assign`,prop),!0},deleteProperty(_t,prop){return warnWrite(`delete`,prop),!0},defineProperty(_t,prop){return warnWrite(`Object.defineProperty on`,prop),!0}});return cache.set(targetObj,proxy),proxy}var RequestContext=class{req;res;next;constructor(req,res,next){this.req=req,this.res=res,this.next=next}metadataReadOnly(){return requestStore.getStore()?.values??null}metadataForWrite(){let store=requestStore.getStore();if(store)return store.values;throw Error(`RequestContext.set called outside an AsyncLocalStorage frame. Mount requestScopeMiddleware() before constructing RequestContext, or wrap test setup in requestStore.run({ requestId, instances: new Map(), values: new Map() }, () => ...).`)}get body(){return makeReadOnlyProxy(this.req.body,this.req,`body`)}get params(){return makeReadOnlyProxy(this.req.params,this.req,`params`)}get query(){return makeReadOnlyProxy(this.req.query,this.req,`query`)}get headers(){return makeReadOnlyProxy(this.req.headers,this.req,`headers`)}get requestId(){return this.req.requestId??this.req.headers[`x-request-id`]}get signal(){let req=this.req,cached=req[signalControllerKey];if(cached)return cached.signal;let ctrl=new AbortController;req[signalControllerKey]=ctrl;let abort=()=>ctrl.abort(`request closed`);return this.req.once(`close`,abort),this.res.once(`close`,abort),ctrl.signal}get session(){return this.req.session}get user(){return this.metadataReadOnly()?.get(`user`)??this.req.user}get tenantId(){return this.user?.tenantId}get roles(){let u=this.user;return u?.tenantRoles??u?.roles??[]}qs(fieldConfig){return parseQuery(this.req.query,fieldConfig)}get file(){let f=this.req.file;return f?makeReadOnlyProxy(f,this.req,`file`):void 0}get files(){let f=this.req.files;if(Array.isArray(f))return makeReadOnlyProxy(f,this.req,`files`)}get(key){return this.metadataReadOnly()?.get(key)}set(key,value){this.metadataForWrite().set(key,value)}json(data,status=200){return this.res.status(status).json(data)}created(data){return this.res.status(201).json(data)}noContent(){return this.res.status(204).end()}notFound(message=`Not Found`){return this.res.status(404).json({message})}badRequest(message){return this.res.status(400).json({message})}get problem(){let send=input=>this.sendProblem(input);return send.badRequest=(input={})=>this.sendProblem({status:400,...input}),send.unauthorized=(input={})=>this.sendProblem({status:401,...input}),send.forbidden=(input={})=>this.sendProblem({status:403,...input}),send.notFound=(input={})=>this.sendProblem({status:404,...input}),send.conflict=(input={})=>this.sendProblem({status:409,...input}),send.unprocessable=(input={})=>this.sendProblem({status:422,...input}),send.tooManyRequests=(input={})=>this.sendProblem({status:429,...input}),send.internal=(input={})=>this.sendProblem({status:500,...input}),send.validation=(issues,input={})=>{let errors=(issues||[]).map(issue=>({field:issue.path?.join?.(`.`)??``,message:issue.message??``,code:issue.code}));return this.sendProblem({status:422,detail:issues?.[0]?.message,...input,errors})},send}sendProblem(input){let body=normalizeProblem(input);return this.res.setHeader(`Content-Type`,`application/problem+json`),this.res.status(body.status).json(body)}html(content,status=200){return this.res.status(status).type(`html`).send(content)}download(buffer,filename,contentType=`application/octet-stream`){return this.res.setHeader(`Content-Disposition`,`attachment; filename="${filename}"`),this.res.setHeader(`Content-Type`,contentType),this.res.send(buffer)}render(template,data={}){return this.res.render(template,data)}async paginate(fetcher,fieldConfig){let parsed=this.qs(fieldConfig),{data,total}=await fetcher(parsed),{page,limit}=parsed.pagination,totalPages=Math.ceil(total/limit)||1,response={data,meta:{page,limit,total,totalPages,hasNext:page<totalPages,hasPrev:page>1}};return this.json(response)}sse(){this.res.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`,"X-Accel-Buffering":`no`}),this.res.flushHeaders();let closeCallbacks=[];return this.req.on(`close`,()=>{for(let cb of closeCallbacks)cb()}),{send:(data,event,id)=>{id&&this.res.write(`id: ${id}\n`),event&&this.res.write(`event: ${event}\n`),this.res.write(`data: ${JSON.stringify(data)}\n\n`)},comment:text=>{this.res.write(`: ${text}\n\n`)},onClose:fn=>{closeCallbacks.push(fn)},close:()=>{this.res.end()}}}};export{requestStore as i,getRequestStore as n,getRequestValue as r,RequestContext as t};
-//# sourceMappingURL=context-MD7Mc_o_.mjs.map