@forinda/kickjs 5.17.0 → 5.18.0-alpha.1

package/dist/app-module-BTzb-Vd6.d.mts

@@ -1,92 +0,0 @@
-
-import { t as Container } from "./container-TWOUyR_0.mjs";
-import { s as ContributorRegistrations } from "./context-decorator-DDZ30BIW.mjs";
-
-//#region src/core/app-module.d.ts
-/**
- * Route set returned by a module's routes() method.
- * Combined with versioning: /{apiPrefix}/v{version}{path}
- *
- * **Either** `controller` or `router` is required. Pass `controller`
- * for the common case — the framework calls `buildRoutes(controller)`
- * internally to derive the Express Router. Pass `router` directly
- * only when you need to compose multiple controllers under one path
- * or hand-build the router yourself.
- */
-interface ModuleRoutes {
-  /** URL prefix (e.g. '/users') */
-  path: string;
-  /**
-   * Express Router instance. Optional — when omitted, the framework
-   * builds one from `controller` via `buildRoutes(controller)`. Pass
-   * an explicit router only when you need to compose multiple
-   * controllers or hand-roll the router shape.
-   */
-  router?: any;
-  /** Optional API version override (defaults to Application.defaultVersion) */
-  version?: number;
-  /**
-   * Controller class. Required unless `router` is provided. Used both
-   * for the auto-derived router (via `buildRoutes(controller)`) and
-   * for OpenAPI spec generation via `SwaggerAdapter`.
-   */
-  controller?: any;
-}
-/**
- * Interface that every feature module must implement.
- * Modules register their DI bindings and declare their routes.
- *
- * `register` is **optional**. Modules that only contain decorated classes
- * (`@Service`, `@Controller`, `@Repository`, `@Component`) don't need it
- * because the decorators handle DI registration automatically. Implement
- * `register(container)` only when you need to bind a token (typically a
- * repository interface symbol) to a concrete implementation via
- * `container.registerFactory()` / `container.registerInstance()`.
- */
-interface AppModule {
-  /** Optional — bind interfaces to implementations in the container */
-  register?(container: Container): void;
-  /**
-   * Return Context Contributors (#107) that apply to every route this
-   * module mounts. Module-level contributors are merged into the per-route
-   * pipeline at the `'module'` precedence level — they win over adapter
-   * and global contributors but lose to method and class decorators.
-   *
-   * Optional — modules without per-module contributors omit this hook.
-   */
-  contributors?(): ContributorRegistrations;
-  /** Return route definitions for this module, or null for non-HTTP modules */
-  routes(): ModuleRoutes | ModuleRoutes[] | null;
-}
-/**
- * Constructor type for the legacy `class FooModule implements AppModule`
- * pattern. The framework still accepts these — bootstrap discriminates
- * class vs instance at boot — but new code should prefer
- * {@link defineModule} for parity with {@link defineAdapter} and
- * {@link definePlugin}, plus typed config + `.scoped()` / `.definition`.
- *
- * @deprecated Use `defineModule({ ... })` and `AppModuleEntry` for the
- *   `bootstrap({ modules })` array. The class form continues to work
- *   through v5 and is not slated for removal in any specific release —
- *   this annotation is a soft "prefer the factory form" hint, not an
- *   imminent deprecation.
- */
-type AppModuleClass = new () => AppModule;
-/**
- * Either form accepted by `bootstrap({ modules })` and
- * `KickPlugin.modules?()`:
- *
- *   - **Class** — the legacy form. Bootstrap calls `new ModuleClass()`.
- *   - **Instance** — produced by {@link defineModule}'s factory call
- *     (e.g. `TasksModule({ scope: 'admin' })`). Bootstrap uses it
- *     directly without `new`.
- *
- * Both shapes route through the same lifecycle (`register`,
- * `contributors`, `routes`) — the only difference is who owns
- * instantiation. defineModule callers use this union so adopters can
- * mix-and-match in the same `modules` array.
- */
-type AppModuleEntry = AppModuleClass | AppModule;
-//#endregion
-export { ModuleRoutes as i, AppModuleClass as n, AppModuleEntry as r, AppModule as t };
-//# sourceMappingURL=app-module-BTzb-Vd6.d.mts.map

package/dist/app-module-BTzb-Vd6.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-module-BTzb-Vd6.d.mts","names":[],"sources":["../src/core/app-module.ts"],"mappings":";;;;;;;AAaA;;;;;;;;UAAiB,YAAA;EAiBL;EAfV,IAAA;EA6BwB;;;;;;EAtBxB,MAAA;EAmCqC;EAjCrC,OAAA;EAsBqB;;;;;EAhBrB,UAAA;AAAA;;AA2BqC;AAgBvC;;;;AAAgD;AAgBhD;;;;UA7CiB,SAAA;;EAEf,QAAA,EAAU,SAAA,EAAW,SAAA;;;;;;;;;EASrB,YAAA,KAAiB,wBAAA;;EAEjB,MAAA,IAAU,YAAA,GAAe,YAAA;AAAA;;;;;;;;;;;;;;KAgBf,cAAA,aAA2B,SAAS;;;;;;;;;;;;;;;KAgBpC,cAAA,GAAiB,cAAA,GAAiB,SAAS"}

package/dist/application-CAnpDQ8d.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"application-CAnpDQ8d.d.mts","names":[],"sources":["../src/http/application.ts"],"mappings":";;;;;;;;;;;;;;KAqCY,eAAA,GAAkB,cAAA;EAAmB,IAAA;EAAc,OAAA,EAAS,cAAc;AAAA;AAAA,UAErE,kBAAA;;;;;;;;AAFqE;AAEtF;;EAWE,OAAA,EAAS,cAAA;EAAA;;;;;;;;;;;;;;;;;EAmBT,KAAA,EAAO,QAAA,EAAU,cAAA;EAQjB;EANA,QAAA,GAAW,UAAA;EA6BG;EA3Bd,IAAA;EAiCa;EA/Bb,SAAA;EAkCU;EAhCV,cAAA;EAsDe;;;;;;;;;;;;;;;;;;;;;EA/Bf,WAAA,GAAc,eAAA;EAiLZ;;AAAM;AAQV;;EAnLE,UAAA,GAAa,eAAA;EAqNyB;EAlNtC,OAAA,GAAU,UAAA;EAmRE;;;;;;;;;;;;;;;;;;;;EA7PZ,YAAA,GAAe,wBAAA;EAoLP;;;;;;;;;;;;;;;;;;EAhKR,YAAA;EAyO4D;;;;;;;;;;;;;;;;;;;;;;;;;EA9M5D,YAAA;EAy0BiB;EAt0BjB,UAAA,iCAA2C,EAAA,UAAY,QAAA;EAy1B/C;EAv1BR,SAAA;EAq3BQ;;;;;AA+CoB;;EA55B5B,aAAA;;;;;EAKA,cAAA;;;;;EAKA,eAAA;;;;;;;;;;;;;;;;;;;EAoBA,OAAA;IAAsB,OAAA;EAAA;;;;;;;;;;;;;;;;EAiBtB,UAAA,IAAc,GAAA,OAAU,GAAA,OAAU,IAAA;;;;;;;;;;;;;;;;;EAkBlC,OAAA,IAAW,GAAA,OAAU,GAAA,OAAU,GAAA,OAAU,IAAA;;;;;;;;;;;;;;;;;;EAmBzC,QAAA;6DAEE,MAAA;EAAA;AAAA;;;;;cAQS,WAAA;EAAA,iBAkCkB,OAAA;EAAA,QAjCrB,GAAA;EAAA,QACA,SAAA;EAAA,QACA,UAAA;EAAA,iBACS,QAAA;EAAA,iBAEA,OAAA;;;;;;;;;;;;;UAcT,mBAAA;;UAMA,iBAAA;;UAEA,SAAA;;UAEA,kBAAA;;UAEA,eAAA;EAER,WAAA,CAA6B,OAAA,EAAS,kBAAA;;MAqClC,UAAA;;MAKA,gBAAA;;EAKJ,YAAA,IAAgB,SAAA;;;;;;;;;;;;;;;EAkBhB,MAAA,CAAO,GAAA,EAAK,IAAA,CAAK,eAAA,EAAiB,GAAA,EAAK,IAAA,CAAK,cAAA,EAAgB,IAAA,IAAQ,GAAA;;;;;;;;;;;;;;;UAsB5D,UAAA;;UAYM,QAAA;EAeR,KAAA,IAAS,OAAA;;EA0TT,YAAA,IAAgB,OAAA;;;;;;;;;;EAahB,KAAA,IAAS,OAAA;;EA0ET,OAAA,IAAW,OAAA;;;;;;;;;;;EAoCX,QAAA,IAAY,OAAA;EAgElB,aAAA,IAAiB,OAAA;;EAKjB,WAAA,IAAe,UAAA;;;;;;EASf,UAAA,aAAuB,UAAA;;;;;;;;;;;;;;;;;;;EAsBvB,eAAA,IAAmB,aAAA;IACjB,GAAA;IACA,MAAA;IACA,KAAA;IACA,SAAA;EAAA;EA6CF,aAAA,IAAiB,IAAA,CAAK,MAAA;;;;;;;;;;;;;;UAmBd,2BAAA;EAAA,QAWA,wBAAA;EAAA,QAmBA,mBAAA;EAAA,QAgBA,oBAAA;;UASA,yBAAA;;UAsBA,oBAAA;AAAA"}

package/dist/application-CRmMytW1.mjs

@@ -1,12 +0,0 @@
-/**
- * @forinda/kickjs v5.17.0
- *
- * Copyright (c) Felix Orinda
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- *
- * @license MIT
- */
-import{n as tokenName,r as moduleRouteMissingControllerError,t as Container}from"./container-CPz0l8-b.mjs";import{METADATA}from"./core/interfaces.mjs";import{Logger,createLogger}from"./core/logger.mjs";import{t as getClassMeta}from"./metadata-D8hSFaux.mjs";import{g as MutableModuleRegistry,s as mountSort}from"./core-C_gfh7JQ.mjs";import{normalizePath}from"./core/path.mjs";import{requestId}from"./http/middleware/request-id.mjs";import{errorHandler,notFoundHandler}from"./http/middleware/error-handler.mjs";import{i as requestStore}from"./context-C6e-S0uc.mjs";import{_setExternalContributorSources,buildRoutes}from"./http/router-builder.mjs";import http from"node:http";import express from"express";import crypto from"node:crypto";const REQUEST_SCOPE_MIDDLEWARE_MARKER=Symbol.for(`@kickjs/requestScopeMiddleware`);function requestScopeMiddleware(){let mw=(req,_res,next)=>{let requestIdHeader=req.headers[`x-request-id`],requestId=(Array.isArray(requestIdHeader)?requestIdHeader[0]:requestIdHeader)||crypto.randomUUID(),store={requestId,instances:new Map,values:new Map};req.requestId=requestId,requestStore.run(store,()=>next())};return mw[REQUEST_SCOPE_MIDDLEWARE_MARKER]=!0,mw}function isRequestScopeMiddleware(value){return typeof value==`function`?value[REQUEST_SCOPE_MIDDLEWARE_MARKER]===!0:!1}const log=createLogger(`Application`);var Application=class{options;app;container;httpServer=null;adapters;plugins;_moduleContributors=[];_inFlightRequests=0;_draining=!1;_shutdownInitiated=!1;_drainResolvers=[];constructor(options){this.options=options,this.app=express(),this.container=Container.getInstance(),this.plugins=mountSort(options.plugins??[],`plugin`);let allAdapters=[...this.plugins.flatMap(p=>p.adapters?.()??[]),...options.adapters??[]],anonAdapterCount=0,namedAdapters=allAdapters.map(adapter=>{if(!adapter.name){let ctorName=adapter.constructor?.name,fallback=ctorName&&ctorName!==`Object`?ctorName:`AnonymousAdapter#${anonAdapterCount++}`;return Object.assign(adapter,{name:fallback})}return adapter});this.adapters=mountSort(namedAdapters,`adapter`),Container._requestStoreProvider=()=>requestStore.getStore()??null}get isDraining(){return this._draining}get inFlightRequests(){return this._inFlightRequests}getContainer(){return this.container}handle(req,res,next){next?this.app(req,res,next):this.app(req,res)}adapterCtx(server){let env=process.env.NODE_ENV??`development`;return{app:this.app,container:this.container,server,env,isProduction:env===`production`}}async callHook(hook,ctx){if(hook)try{let result=hook(ctx);result&&typeof result.then==`function`&&await result}catch(err){log.error(err,`Adapter hook failed`)}}async setup(){log.debug(`Bootstrapping application...`),this._moduleContributors=[];let adapterMw=this.collectAdapterMiddleware();this.app.__kickApp=this;let ctx=this.adapterCtx();for(let adapter of this.adapters)await this.callHook(adapter.beforeMount?.bind(adapter),ctx);this.app.disable(`x-powered-by`),this.app.set(`trust proxy`,this.options.trustProxy??!1),this.app.use(this.requestTrackingMiddleware()),this.mountHealthEndpoints(),this.shouldAutoMountRequestScope()&&this.app.use(requestScopeMiddleware()),this.mountMiddlewareList(adapterMw.beforeGlobal);for(let plugin of this.plugins)plugin.register?.(this.container);for(let plugin of this.plugins)try{let mw=plugin.middleware?.()??[];for(let handler of mw)this.app.use(handler)}catch(err){log.error(err,`Plugin middleware failed: ${plugin.name??`unknown`}`)}if(this.options.security?.helmet!==!1)try{let{helmet:helmetFn}=await import(`./http/middleware/helmet.mjs`);this.app.use(helmetFn())}catch{}let userMiddlewares=this.options.middlewares??this.options.middleware;if(userMiddlewares)for(let entry of userMiddlewares)this.mountMiddlewareEntry(entry);else this.app.use(requestId()),this.app.use(express.json({limit:this.options.jsonLimit??`1mb`}));this.mountMiddlewareList(adapterMw.afterGlobal);let moduleRegistry=new MutableModuleRegistry;for(let plugin of this.plugins){for(let m of plugin.modules?.()??[])moduleRegistry.mount(m);plugin.setup?.(moduleRegistry)}for(let m of this.options.modules)moduleRegistry.mount(m);this.options.setup?.(moduleRegistry);let modules=moduleRegistry.entries.map(entry=>{let mod=typeof entry==`function`?new entry:entry;return mod.register?.(this.container),mod});this.container.bootstrap(),this.container.has(Logger)||this.container.registerInstance(Logger,new Logger),this.mountMiddlewareList(adapterMw.beforeRoutes);let apiPrefix=this.options.apiPrefix??`/api`,defaultVersion=this.options.defaultVersion??1,shouldLogRoutes=this.options.logRouteTable??this.options.logRoutesTable??!1,mountedRoutes=[],adapterSources=[];for(let adapter of this.adapters){let adapterContribs=adapter.contributors?.()??[],adapterLabel=adapter.name??adapter.constructor.name??`adapter`;for(let registration of adapterContribs)adapterSources.push({source:`adapter`,registration,label:adapterLabel})}for(let plugin of this.plugins){let pluginContribs=plugin.contributors?.()??[],pluginLabel=plugin.name??plugin.constructor?.name??`plugin`;for(let registration of pluginContribs)adapterSources.push({source:`adapter`,registration,label:pluginLabel})}let globalSources=(this.options.contributors??[]).map(registration=>({source:`global`,registration,label:`bootstrap`}));this._moduleContributors=[];for(let mod of modules){let declaredName=mod.name,ctorName=mod.constructor?.name,moduleLabel=typeof declaredName==`string`&&declaredName.length>0?declaredName:ctorName&&ctorName!==`Object`?ctorName:`module`,moduleSources=(mod.contributors?.()??[]).map(registration=>({source:`module`,registration,label:moduleLabel}));for(let src of moduleSources)this._moduleContributors.push({registration:src.registration,label:moduleLabel});_setExternalContributorSources([...moduleSources,...adapterSources,...globalSources]);try{let result=mod.routes();if(!result)continue;let routeSets=Array.isArray(result)?result:[result];for(let route of routeSets){let mountPath=`${apiPrefix}/v${route.version??defaultVersion}${normalizePath(route.path)}`,router=route.router??buildRoutes(route.controller);if(!router)throw moduleRouteMissingControllerError(mountPath);if(this.app.use(mountPath,router),route.controller){for(let adapter of this.adapters)try{adapter.onRouteMount?.(route.controller,mountPath)}catch(err){log.error(err,`adapter.onRouteMount() failed for ${mountPath}`)}shouldLogRoutes&&mountedRoutes.push({controller:route.controller,mountPath})}}}finally{_setExternalContributorSources([])}}if(shouldLogRoutes&&mountedRoutes.length>0){let methodOrder=[`GET`,`POST`,`PUT`,`PATCH`,`DELETE`,`HEAD`,`OPTIONS`],methodRank=m=>{let i=methodOrder.indexOf(m);return i===-1?99:i},totalRoutes=0;log.info(`Routes:`);for(let{controller,mountPath}of mountedRoutes){let defs=getClassMeta(METADATA.ROUTES,controller,[]);if(defs.length===0)continue;let counts={};for(let def of defs){let m=def.method.toUpperCase();counts[m]=(counts[m]||0)+1}totalRoutes+=defs.length;let methods=Object.entries(counts).toSorted(([a],[b])=>methodRank(a)-methodRank(b)).map(([m,n])=>`${n} ${m}`).join(`, `),name=controller.name||`Controller`;log.info(`  ${name.padEnd(30)} ${mountPath.padEnd(25)} ${defs.length} routes (${methods})`)}log.info(`  Total: ${totalRoutes} routes`)}this.mountMiddlewareList(adapterMw.afterRoutes);for(let adapter of this.adapters)await this.callHook(adapter.beforeStart?.bind(adapter),ctx);this.app.use(this.options.onNotFound??notFoundHandler()),this.app.use(this.options.onError??errorHandler())}async registerOnly(){await this.setup()}async start(){await this.setup();let g=globalThis;if(g.__kickjs_httpServer){this.httpServer=g.__kickjs_httpServer,log.debug(`Attached to Vite dev server`),g.__kickjs_app_shutdown=()=>this.shutdown();for(let adapter of this.adapters){let ctx=this.adapterCtx(this.httpServer);await this.callHook(adapter.afterStart?.bind(adapter),ctx)}for(let plugin of this.plugins)await plugin.onReady?.(this.container);return}let port=this.options.port??parseInt(process.env.PORT||`3000`,10);this.httpServer=http.createServer(this.app),this.httpServer.on(`error`,err=>{throw err.code===`EADDRINUSE`&&(log.error(`Port ${port} is already in use. Kill the existing process or use a different port:\n  PORT=${port+1} kick dev\n  lsof -i :${port}   # find what's using it\n  kill <PID>          # stop it`),process.exit(1)),err}),await new Promise((resolve,reject)=>{this.httpServer.listen(port,async()=>{try{log.info(`Server running on http://localhost:${port}`);for(let adapter of this.adapters){let afterCtx=this.adapterCtx(this.httpServer);await this.callHook(adapter.afterStart?.bind(adapter),afterCtx)}for(let plugin of this.plugins)await plugin.onReady?.(this.container);resolve()}catch(err){reject(err)}})})}async rebuild(){let prevApp=this.app,prevContainer=this.container;try{Container.reset(),this.container=Container.getInstance(),this.app=express(),await this.setup()}catch(err){log.error(err,`HMR rebuild failed, keeping previous app`),this.app=prevApp,this.container=prevContainer;return}this.httpServer&&(this.httpServer.removeAllListeners(`request`),this.httpServer.on(`request`,this.app),log.debug(`HMR: Express app rebuilt and swapped`))}async shutdown(){if(this._shutdownInitiated){log.debug(`Shutdown already in progress, skipping duplicate call`);return}this._shutdownInitiated=!0,this._draining=!0,log.debug(`Shutting down — draining in-flight requests...`);let timeoutMs=this.options.shutdownTimeout??3e4,timer,forceExitPromise=timeoutMs>0?new Promise(resolve=>{timer=setTimeout(()=>resolve(`timeout`),timeoutMs),timer.unref()}):new Promise(()=>{});try{if(this.httpServer&&this.httpServer.close(()=>{}),this._inFlightRequests>0){log.debug(`Waiting for ${this._inFlightRequests} in-flight request(s) to complete...`);let drainPromise=new Promise(resolve=>{this._drainResolvers.push(()=>resolve(`drained`))});await Promise.race([drainPromise,forceExitPromise])===`timeout`?log.warn(`Shutdown timeout (${timeoutMs}ms) reached with ${this._inFlightRequests} request(s) still in-flight, forcing shutdown`):log.debug(`All in-flight requests completed`)}let results=await Promise.allSettled([...this.plugins.map(plugin=>Promise.resolve(plugin.shutdown?.())),...this.adapters.map(adapter=>Promise.resolve(adapter.shutdown?.()))]);for(let result of results)result.status===`rejected`&&log.error({err:result.reason},`Adapter shutdown failed`)}finally{timer&&clearTimeout(timer)}}getExpressApp(){return this.app}getAdapters(){return this.adapters}getPlugins(){return this.plugins}getContributors(){let out=[],ingest=(list,source,label)=>{if(list)for(let reg of list){let r=reg;if(r.key===void 0||r.key===null)continue;let key=typeof r.key==`string`?r.key:tokenName(r.key);out.push({key,source,label,dependsOn:Array.isArray(r.dependsOn)?r.dependsOn:[]})}};for(let adapter of this.adapters)ingest(adapter.contributors?.(),`adapter`,adapter.name??`adapter`);for(let plugin of this.plugins)ingest(plugin.contributors?.(),`plugin`,plugin.name??`plugin`);for(let{registration,label}of this._moduleContributors)ingest([registration],`module`,label);return ingest(this.options.contributors,`global`,`bootstrap`),out}getHttpServer(){return this.httpServer}shouldAutoMountRequestScope(){if(this.options.contextStore===`manual`)return!1;let userEntries=this.options.middlewares??this.options.middleware??[];for(let entry of userEntries)if(isRequestScopeMiddleware(typeof entry==`function`?entry:entry.handler))return!1;return!0}collectAdapterMiddleware(){let result={beforeGlobal:[],afterGlobal:[],beforeRoutes:[],afterRoutes:[]};for(let adapter of this.adapters){let entries=adapter.middleware?.()??[];for(let entry of entries)result[entry.phase??`afterGlobal`].push(entry)}return result}mountMiddlewareList(entries){for(let entry of entries){if(entry.path===void 0){this.app.use(entry.handler);continue}let path=Array.isArray(entry.path)?[...entry.path]:entry.path;this.app.use(path,entry.handler)}}mountMiddlewareEntry(entry){typeof entry==`function`?this.app.use(entry):this.app.use(entry.path,entry.handler)}requestTrackingMiddleware(){return(_req,res,next)=>{this._inFlightRequests++;let onFinish=()=>{if(res.removeListener(`finish`,onFinish),res.removeListener(`close`,onFinish),this._inFlightRequests--,this._draining&&this._inFlightRequests===0){for(let resolve of this._drainResolvers)resolve();this._drainResolvers=[]}};res.on(`finish`,onFinish),res.on(`close`,onFinish),next()}}mountHealthEndpoints(){this.app.get(`/health/live`,(_req,res)=>{this._draining?res.status(503).json({status:`draining`,uptime:process.uptime()}):res.json({status:`ok`,uptime:process.uptime()})}),this.app.get(`/health/ready`,async(_req,res)=>{if(this._draining){res.status(503).json({status:`draining`,checks:[]});return}let adaptersWithHealth=this.adapters.filter(a=>a.onHealthCheck),results=(await Promise.allSettled(adaptersWithHealth.map(a=>a.onHealthCheck()))).map((c,i)=>c.status===`fulfilled`?c.value:{name:adaptersWithHealth[i].name??`unknown`,status:`down`}),healthy=results.every(r=>r.status===`up`);res.status(healthy?200:503).json({status:healthy?`ready`:`degraded`,checks:results})})}};export{requestScopeMiddleware as n,Application as t};
-//# sourceMappingURL=application-CRmMytW1.mjs.map

package/dist/application-CRmMytW1.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"application-CRmMytW1.mjs","names":[],"sources":["../src/http/middleware/request-scope.ts","../src/http/application.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport type { Request, Response, NextFunction } from 'express'\nimport { requestStore, type RequestStore } from '../request-store'\n\n/**\n * Marker symbol stamped on the function returned by {@link requestScopeMiddleware}.\n *\n * `Application.setup()` uses {@link isRequestScopeMiddleware} to detect whether\n * the user-supplied middleware list already contains the request-scope wrapper,\n * and skips its automatic auto-mount when one is found. Lets adopters control\n * the exact position of the ALS frame in their pipeline (e.g., after a custom\n * tracing wrapper) without ending up with two nested frames.\n */\n// `Symbol.for(...)` returns a plain `symbol` (not `unique symbol`), but the\n// runtime detection marker doesn't need the unique nominal property — it only\n// needs the interned-slot reference equality that `Symbol.for` already provides.\nconst REQUEST_SCOPE_MIDDLEWARE_MARKER = Symbol.for('@kickjs/requestScopeMiddleware')\n\n/**\n * Wraps each request in an AsyncLocalStorage context.\n * Enables REQUEST-scoped DI and automatic requestId propagation to logs.\n *\n * Should be mounted early in the middleware pipeline (before route handlers).\n * `Application` mounts this automatically unless `contextStore: 'manual'` is set\n * or the user already includes one in their middleware list.\n */\nexport function requestScopeMiddleware() {\n  const mw = (req: Request, _res: Response, next: NextFunction) => {\n    const requestIdHeader = req.headers['x-request-id']\n    const requestId =\n      (Array.isArray(requestIdHeader) ? requestIdHeader[0] : requestIdHeader) || crypto.randomUUID()\n    const store: RequestStore = {\n      requestId,\n      instances: new Map(),\n      // Explicit generic locks the \"string keys only\" decision\n      // (architecture.md §20.12 #4) at construction time, so accidental\n      // non-string keys can't slip in via the inferred Map<any, any>.\n      values: new Map<string, unknown>(),\n    }\n    // Surface the requestId on req so the standalone requestId() middleware\n    // (when also mounted) reuses this value instead of generating a divergent\n    // second one. Without this, log lines that read from the ALS store would\n    // disagree with the X-Request-Id response header for any request that\n    // didn't carry an inbound x-request-id header.\n    ;(req as Request & { requestId?: string }).requestId = requestId\n    requestStore.run(store, () => next())\n  }\n  ;(mw as unknown as Record<symbol, unknown>)[REQUEST_SCOPE_MIDDLEWARE_MARKER] = true\n  return mw\n}\n\n/**\n * Returns `true` when `value` is the function produced by {@link requestScopeMiddleware}.\n *\n * Detection uses a `Symbol.for(...)` marker so the check survives different\n * copies of `@forinda/kickjs` loaded under different module identities (e.g.,\n * a published package alongside a workspace-linked one during local dev).\n */\nexport function isRequestScopeMiddleware(value: unknown): boolean {\n  if (typeof value !== 'function') return false\n  return (value as unknown as Record<symbol, unknown>)[REQUEST_SCOPE_MIDDLEWARE_MARKER] === true\n}\n","import http from 'node:http'\nimport express, { type Express, type RequestHandler } from 'express'\nimport {\n  Container,\n  createLogger,\n  Logger,\n  normalizePath,\n  tokenName,\n  METADATA,\n  type AppModule,\n  type AppModuleClass,\n  type AppModuleEntry,\n  type AppAdapter,\n  type AdapterContext,\n  type AdapterMiddleware,\n  type ContributorRegistrations,\n  type KickPlugin,\n  type ModuleRegistry,\n  type RouteDefinition,\n  type SourcedRegistration,\n  mountSort,\n  MutableModuleRegistry,\n} from '../core'\nimport { moduleRouteMissingControllerError } from '../core/kick-errors'\nimport { getClassMeta } from '../core/metadata'\nimport { requestId } from './middleware/request-id'\nimport { notFoundHandler, errorHandler } from './middleware/error-handler'\nimport { requestScopeMiddleware, isRequestScopeMiddleware } from './middleware/request-scope'\nimport { _setExternalContributorSources, buildRoutes } from './router-builder'\nimport { requestStore } from './request-store'\n\nconst log = createLogger('Application')\n\n/**\n * A middleware entry in the declarative pipeline.\n * Can be a bare handler or an object with path scoping.\n */\nexport type MiddlewareEntry = RequestHandler | { path: string; handler: RequestHandler }\n\nexport interface ApplicationOptions {\n  /**\n   * Feature modules to load. Accepts both class form\n   * (`SomeModule extends AppModule`, instantiated via `new`) and\n   * instance form (output of {@link defineModule}'s factory call,\n   * e.g. `TasksModule({ scope: 'admin' })`) — the loader discriminates\n   * and either `new`-s the class or uses the instance directly.\n   *\n   * Static path — for conditional / dynamic registration, use the\n   * {@link ApplicationOptions.setup} callback instead.\n   */\n  modules: AppModuleEntry[]\n\n  /**\n   * Imperative module registration callback. Receives a\n   * {@link ModuleRegistry} you call `.mount(module)` on to register\n   * modules conditionally — based on env flags, runtime config, a\n   * tenant list, etc. Runs after every plugin's `setup()` hook and\n   * after the static `modules: [...]` array is collected.\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules: [HelloModule()],\n   *   setup(registry) {\n   *     if (env.ENABLE_ADMIN) registry.mount(AdminModule())\n   *   },\n   * })\n   * ```\n   */\n  setup?(registry: ModuleRegistry): void\n  /** Adapters that hook into the lifecycle (DB, Redis, Swagger, etc.) */\n  adapters?: AppAdapter[]\n  /** Server port (falls back to PORT env var, then 3000) */\n  port?: number\n  /** Global API prefix (default: '/api') */\n  apiPrefix?: string\n  /** Default API version (default: 1) — routes become /{prefix}/v{version}/{path} */\n  defaultVersion?: number\n\n  /**\n   * Global middleware pipeline. Declared in order.\n   * Replaces the hardcoded middleware stack — you control exactly what runs.\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules,\n   *   middlewares: [\n   *     helmet(),\n   *     cors(),\n   *     compression(),\n   *     morgan('dev'),\n   *     express.json({ limit: '1mb' }),\n   *   ],\n   * })\n   * ```\n   *\n   * If omitted, a sensible default is applied:\n   *   requestId(), express.json({ limit: '100kb' })\n   */\n  middlewares?: MiddlewareEntry[]\n  /**\n   * @deprecated Use {@link ApplicationOptions.middlewares} (plural).\n   * Kept as an alias for back-compat; `middlewares` wins when both are\n   * set.\n   */\n  middleware?: MiddlewareEntry[]\n\n  /** Plugins that bundle modules, adapters, middleware, and DI bindings */\n  plugins?: KickPlugin[]\n\n  /**\n   * Global Context Contributors (#107) that apply to every route in the\n   * application. Merge into the per-route pipeline at the `'global'`\n   * precedence level — they lose to module, adapter, class, and method\n   * contributors with the same key, providing app-wide defaults that any\n   * narrower scope can override.\n   *\n   * @example\n   * ```ts\n   * const StartedAt = defineContextDecorator({\n   *   key: 'requestStartedAt',\n   *   resolve: () => Date.now(),\n   * })\n   *\n   * bootstrap({\n   *   modules,\n   *   contributors: [StartedAt.registration],\n   * })\n   * ```\n   */\n  contributors?: ContributorRegistrations\n\n  /**\n   * Backing store strategy for {@link RequestContext} `set/get` and the\n   * Context Contributor pipeline (#107).\n   *\n   * - `'auto'` (default) — Application mounts {@link requestScopeMiddleware}\n   *   automatically before any user middleware. If the user-supplied\n   *   `middleware` list already includes `requestScopeMiddleware()`,\n   *   detection skips the auto-mount so adopters can control its position.\n   * - `'manual'` — Application never mounts the wrapper. The Context\n   *   Contributor pipeline still runs on every route — the runner is\n   *   inserted by `router-builder` regardless of ALS state. What\n   *   degrades without an ALS frame is the *backing store*:\n   *   REQUEST-scoped DI throws (no `requestStore.getStore()` to read\n   *   from) and `RequestContext.set/get` throws. Use `'manual'` only when you\n   *   genuinely intend to wrap requests in your own ALS frame (rare —\n   *   multi-tenant adapters used to do this; post-Phase 3 they share\n   *   the framework's frame instead).\n   */\n  contextStore?: 'auto' | 'manual'\n\n  /**\n   * Controls whether KickJS registers process-level handlers at bootstrap.\n   *\n   * - `'auto'` (default) — register `uncaughtException` /\n   *   `unhandledRejection` loggers AND `SIGINT` / `SIGTERM` →\n   *   `app.shutdown()` → `process.exit(0)`.\n   * - `'errors-only'` — register the error loggers; skip the signal\n   *   handlers. Use this when you have your own shutdown choreographer\n   *   (OpenTelemetry SDK, Sentry, custom orchestrator) that calls\n   *   `app.shutdown()` itself and you don't want two listeners racing\n   *   to call `process.exit`.\n   * - `'manual'` — skip everything. Adopter is responsible for both\n   *   error logging and signal-driven shutdown.\n   *\n   * Background: many observability SDKs install their own SIGTERM\n   * handler to flush spans/metrics before the process exits. Two\n   * separate handlers calling `process.exit(0)` race each other and\n   * can truncate the in-flight flush. Setting this to `'errors-only'`\n   * or `'manual'` lets the SDK own the lifecycle while still letting\n   * KickJS surface uncaught exceptions / rejections via the logger.\n   *\n   * The dev mode auto-detect (`__kickjs_httpServer` set by the Vite\n   * plugin) suppresses signal registration regardless of this option,\n   * since Vite owns the lifecycle in development.\n   */\n  processHooks?: 'auto' | 'errors-only' | 'manual'\n\n  /** Express `trust proxy` setting */\n  trustProxy?: boolean | number | string | ((ip: string, hopIndex: number) => boolean)\n  /** Maximum JSON body size (only used when middleware is not provided) */\n  jsonLimit?: string | number\n  /**\n   * Print the route table on startup. Default: `false`. Set to `true`\n   * to log a per-controller summary (method counts + mount paths) once\n   * the app has mounted. Emitted at `info` level, so it is still subject\n   * to `LOG_LEVEL` filtering (visible at the default `info`; hidden at\n   * `warn`/`error`/`silent`).\n   */\n  logRouteTable?: boolean\n  /**\n   * @deprecated Use {@link ApplicationOptions.logRouteTable}. Kept as an\n   * alias for back-compat; `logRouteTable` wins when both are set.\n   */\n  logRoutesTable?: boolean\n  /**\n   * Maximum time (ms) to wait for graceful shutdown before forcing exit.\n   * Default: 30000 (30 seconds). Set to 0 to disable forced exit.\n   */\n  shutdownTimeout?: number\n\n  /**\n   * Enable cluster mode for multi-core utilization.\n   *\n   * When enabled, the primary process forks worker processes that share the\n   * same port via Node's built-in `cluster` module (OS load balancing).\n   *\n   * - `true` — use all available CPU cores\n   * - `{ workers: N }` — use exactly N workers\n   *\n   * Workers are auto-restarted on crash. SIGTERM/SIGINT on the primary is\n   * forwarded to all workers.\n   *\n   * @example\n   * ```ts\n   * bootstrap({ modules, cluster: true })\n   * bootstrap({ modules, cluster: { workers: 4 } })\n   * ```\n   */\n  cluster?: boolean | { workers?: number }\n\n  /**\n   * Custom 404 handler for unmatched routes. Receives the raw Express\n   * `(req, res, next)` args. When omitted, the built-in handler returns\n   * `{ message: 'Not Found' }` with status 404.\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules,\n   *   onNotFound: (req, res) => {\n   *     res.status(404).json({ error: 'Route not found', path: req.originalUrl })\n   *   },\n   * })\n   * ```\n   */\n  onNotFound?: (req: any, res: any, next: any) => void\n\n  /**\n   * Custom global error handler. Receives `(err, req, res, next)` — the\n   * standard Express error-handling signature. When omitted, the built-in\n   * handler formats ZodError, HttpException, and unexpected errors.\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules,\n   *   onError: (err, req, res, next) => {\n   *     logger.error(err)\n   *     res.status(err.status ?? 500).json({ error: err.message })\n   *   },\n   * })\n   * ```\n   */\n  onError?: (err: any, req: any, res: any, next: any) => void\n\n  /**\n   * Security defaults applied automatically unless opted out.\n   *\n   * When not specified, secure defaults are applied:\n   * - Helmet security headers are auto-injected\n   * - JSON body limit defaults to 1MB\n   *\n   * @example\n   * ```ts\n   * bootstrap({\n   *   modules,\n   *   security: {\n   *     helmet: false,     // disable auto-helmet\n   *   },\n   * })\n   * ```\n   */\n  security?: {\n    /** Auto-inject helmet security headers. Default: true */\n    helmet?: boolean\n  }\n}\n\n/**\n * The main application class. Wires together Express, the DI container,\n * feature modules, adapters, and the middleware pipeline.\n */\nexport class Application {\n  private app: Express\n  private container: Container\n  private httpServer: http.Server | null = null\n  private readonly adapters: AppAdapter[]\n\n  private readonly plugins: KickPlugin[]\n\n  /**\n   * Snapshot of every module-level Context Contributor registration\n   * captured during `setup()`. The registrations themselves are\n   * frozen by `defineContextDecorator`, so storing references is\n   * safe — they outlive the module instances they came from.\n   *\n   * Used by {@link getContributors} so DevTools and adopter tooling\n   * can render the module-level contributors alongside the adapter /\n   * plugin / global ones. Populated once per `setup()` call; cleared\n   * at the start of each invocation so a re-setup (test harnesses,\n   * dev-server restarts) doesn't accumulate stale entries.\n   */\n  private _moduleContributors: Array<{\n    registration: { key: string; dependsOn: readonly string[] }\n    label: string\n  }> = []\n\n  /** Number of HTTP requests currently being processed */\n  private _inFlightRequests = 0\n  /** Whether the application is draining (shutting down gracefully) */\n  private _draining = false\n  /** Whether shutdown has already been initiated (prevents double-shutdown) */\n  private _shutdownInitiated = false\n  /** Resolvers waiting for in-flight requests to reach zero */\n  private _drainResolvers: Array<() => void> = []\n\n  constructor(private readonly options: ApplicationOptions) {\n    this.app = express()\n    this.container = Container.getInstance()\n\n    // Sort plugins by `dependsOn` declarations BEFORE reading their adapters/etc.\n    // Plugins without `dependsOn` keep their declaration order — this is a\n    // pure refinement; no behaviour change for apps that don't use the field.\n    this.plugins = mountSort(options.plugins ?? [], 'plugin')\n\n    // Build adapter list from plugin adapters + user adapters, synthesize\n    // a stable name for any anonymous adapter (so duplicate-name detection\n    // and `dependsOn` resolution have something to key on), then sort by\n    // adapter `dependsOn`. Plugin-shipped adapters keep their plugin's\n    // relative order unless their own `dependsOn` says otherwise.\n    const allAdapters = [\n      ...this.plugins.flatMap((p) => p.adapters?.() ?? []),\n      ...(options.adapters ?? []),\n    ]\n    let anonAdapterCount = 0\n    const namedAdapters: Array<AppAdapter & { name: string }> = allAdapters.map((adapter) => {\n      if (!adapter.name) {\n        // `constructor.name === 'Object'` for plain object-literal adapters —\n        // useless as an identity since two anonymous literals would collide.\n        // Only borrow the constructor name when it's an actual class.\n        const ctorName = adapter.constructor?.name\n        const fallback =\n          ctorName && ctorName !== 'Object' ? ctorName : `AnonymousAdapter#${anonAdapterCount++}`\n        return Object.assign(adapter, { name: fallback })\n      }\n      return adapter as AppAdapter & { name: string }\n    })\n    this.adapters = mountSort(namedAdapters, 'adapter')\n    // Wire the request store provider so Container can resolve REQUEST-scoped deps\n    Container._requestStoreProvider = () => requestStore.getStore() ?? null\n  }\n\n  /** Whether the application is currently draining in-flight requests */\n  get isDraining(): boolean {\n    return this._draining\n  }\n\n  /** Number of HTTP requests currently being processed */\n  get inFlightRequests(): number {\n    return this._inFlightRequests\n  }\n\n  /** Get the DI container instance */\n  getContainer(): Container {\n    return this.container\n  }\n\n  /**\n   * Express request handler — delegates to the internal Express app.\n   *\n   * Used by the Vite dev-server plugin to route requests through KickJS:\n   * ```ts\n   * const mod = await ssrLoadModule('virtual:kickjs/app')\n   * mod.app.handle(req, res, next)\n   * ```\n   *\n   * Also works as a standard Node.js request handler for production:\n   * ```ts\n   * http.createServer(app.handle.bind(app))\n   * ```\n   */\n  handle(req: http.IncomingMessage, res: http.ServerResponse, next?: (err?: any) => void): void {\n    if (next) {\n      this.app(req as any, res as any, next)\n    } else {\n      this.app(req as any, res as any)\n    }\n  }\n\n  /**\n   * Full setup pipeline:\n   * 1. Adapter beforeMount hooks (early routes — docs, health)\n   * 2. Adapter middleware (phase: beforeGlobal)\n   * 3. Global middleware (user-declared or defaults)\n   * 4. Adapter middleware (phase: afterGlobal)\n   * 5. Module registration + DI bootstrap\n   * 6. Adapter middleware (phase: beforeRoutes)\n   * 7. Module route mounting\n   * 8. Adapter middleware (phase: afterRoutes)\n   * 9. Error handlers (notFound + global)\n   * 10. Adapter beforeStart hooks\n   */\n  /** Build the adapter context object (shared across all hooks) */\n  private adapterCtx(server?: any): AdapterContext {\n    const env = process.env.NODE_ENV ?? 'development'\n    return {\n      app: this.app,\n      container: this.container,\n      server,\n      env,\n      isProduction: env === 'production',\n    }\n  }\n\n  /** Call an adapter hook, awaiting async hooks and catching errors */\n  private async callHook(\n    hook: ((ctx: AdapterContext) => void | Promise<void>) | undefined,\n    ctx: AdapterContext,\n  ): Promise<void> {\n    if (!hook) return\n    try {\n      const result = hook(ctx)\n      if (result && typeof (result as Promise<void>).then === 'function') {\n        await result\n      }\n    } catch (err) {\n      log.error(err, 'Adapter hook failed')\n    }\n  }\n\n  async setup(): Promise<void> {\n    log.debug('Bootstrapping application...')\n\n    // Reset module-contributor snapshot at the very top of each\n    // setup pass — before anything that could throw — so a partial\n    // failure doesn't leave stale entries that getContributors()\n    // would surface on the next call. See _moduleContributors field\n    // declaration for the use case.\n    this._moduleContributors = []\n\n    // Collect adapter middleware by phase\n    const adapterMw = this.collectAdapterMiddleware()\n\n    // Expose the Application instance on the Express app for adapter discovery\n    ;(this.app as any).__kickApp = this\n\n    const ctx = this.adapterCtx()\n\n    // ── 1. Adapter beforeMount hooks ──────────────────────────────────\n    for (const adapter of this.adapters) {\n      await this.callHook(adapter.beforeMount?.bind(adapter), ctx)\n    }\n\n    // ── 2. Hardened defaults ──────────────────────────────────────────\n    this.app.disable('x-powered-by')\n    this.app.set('trust proxy', this.options.trustProxy ?? false)\n\n    // ── 2a. In-flight request tracking ──────────────────────────────\n    this.app.use(this.requestTrackingMiddleware())\n\n    // ── 2b. Health check endpoints (before middleware, at root) ──────\n    this.mountHealthEndpoints()\n\n    // ── 2c. Request scope (AsyncLocalStorage) ────────────────────────\n    // Auto-mounted unless the user opted out (`contextStore: 'manual'`)\n    // or already included one in their middleware list.\n    if (this.shouldAutoMountRequestScope()) {\n      this.app.use(requestScopeMiddleware())\n    }\n\n    // ── 3. Adapter middleware: beforeGlobal ───────────────────────────\n    this.mountMiddlewareList(adapterMw.beforeGlobal)\n\n    // ── 3b. Plugin registration ──────────────────────────────────────\n    for (const plugin of this.plugins) {\n      plugin.register?.(this.container)\n    }\n\n    // ── 3c. Plugin middleware ─────────────────────────────────────────\n    for (const plugin of this.plugins) {\n      try {\n        const mw = plugin.middleware?.() ?? []\n        for (const handler of mw) {\n          this.app.use(handler)\n        }\n      } catch (err) {\n        log.error(err, `Plugin middleware failed: ${(plugin as any).name ?? 'unknown'}`)\n      }\n    }\n\n    // ── 4. Global middleware ─────────────────────────────────────────\n    // Auto-inject helmet unless opted out\n    const autoHelmet = this.options.security?.helmet !== false\n    if (autoHelmet) {\n      try {\n        const { helmet: helmetFn } = await import('./middleware/helmet')\n        this.app.use(helmetFn())\n      } catch {\n        // helmet middleware not available — skip silently\n      }\n    }\n\n    const userMiddlewares = this.options.middlewares ?? this.options.middleware\n    if (userMiddlewares) {\n      // User-declared pipeline — full control\n      for (const entry of userMiddlewares) {\n        this.mountMiddlewareEntry(entry)\n      }\n    } else {\n      // Sensible defaults when no middleware declared\n      this.app.use(requestId())\n      this.app.use(express.json({ limit: this.options.jsonLimit ?? '1mb' }))\n    }\n\n    // ── 5. Adapter middleware: afterGlobal ────────────────────────────\n    this.mountMiddlewareList(adapterMw.afterGlobal)\n\n    // ── 6. Module registration + DI bootstrap ────────────────────────\n    // Module collection — the static `modules: [...]` array AND the\n    // imperative `setup(registry)` callback feed into the same\n    // ordered list. Plugins go first so plugin modules / setup\n    // calls run before user code (existing precedence).\n    //\n    // Order within the registry:\n    //   1. plugin static modules (`plugin.modules?()`)\n    //   2. plugin setup() calls (in plugin dependsOn-sorted order)\n    //   3. user static modules (`options.modules`)\n    //   4. user setup() callback\n    const moduleRegistry = new MutableModuleRegistry()\n    for (const plugin of this.plugins) {\n      for (const m of plugin.modules?.() ?? []) moduleRegistry.mount(m)\n      plugin.setup?.(moduleRegistry)\n    }\n    for (const m of this.options.modules) moduleRegistry.mount(m)\n    this.options.setup?.(moduleRegistry)\n    const allModuleEntries: AppModuleEntry[] = moduleRegistry.entries\n    const modules = allModuleEntries.map((entry) => {\n      // Discriminate class vs instance: classes are functions whose\n      // `prototype` carries the AppModule shape; defineModule output is\n      // a plain object with `routes`, `register`, `contributors`. Calling\n      // `new` on a plain object throws, so we branch up-front rather\n      // than try/catch.\n      const mod: AppModule = typeof entry === 'function' ? new (entry as AppModuleClass)() : entry\n      // `register()` is optional — modules whose classes are entirely\n      // decorator-managed (@Service, @Controller, @Repository) don't need it.\n      mod.register?.(this.container)\n      return mod\n    })\n    this.container.bootstrap()\n\n    // Register Logger as an injectable singleton so @Inject(Logger)\n    // works in constructors. Without this, Logger is just a plain\n    // class with static methods and no DI binding.\n    if (!this.container.has(Logger)) {\n      this.container.registerInstance(Logger, new Logger())\n    }\n\n    // ── 7. Adapter middleware: beforeRoutes ───────────────────────────\n    this.mountMiddlewareList(adapterMw.beforeRoutes)\n\n    // ── 8. Mount module routes with versioning ───────────────────────\n    const apiPrefix = this.options.apiPrefix ?? '/api'\n    const defaultVersion = this.options.defaultVersion ?? 1\n    // Opt-in, default off. `logRouteTable` is the current name;\n    // `logRoutesTable` is the deprecated alias.\n    const shouldLogRoutes = this.options.logRouteTable ?? this.options.logRoutesTable ?? false\n\n    // Collect route metadata during mounting (avoids calling mod.routes() twice)\n    const mountedRoutes: Array<{ controller: any; mountPath: string }> = []\n\n    // Context Contributors (#107) — collect adapter + plugin + global once;\n    // per-module sources are computed inside the loop so module isolation is\n    // preserved.\n    //\n    // Plugin contributors merge at the same `'adapter'` precedence as adapter\n    // contributors. Plugins are conceptually \"bundles of adapters + extras\",\n    // so a plugin that ships a typed contributor without standing up an\n    // accompanying adapter behaves identically to one that does.\n    const adapterSources: SourcedRegistration[] = []\n    for (const adapter of this.adapters) {\n      const adapterContribs = adapter.contributors?.() ?? []\n      const adapterLabel = adapter.name ?? adapter.constructor.name ?? 'adapter'\n      for (const registration of adapterContribs) {\n        adapterSources.push({ source: 'adapter', registration, label: adapterLabel })\n      }\n    }\n    for (const plugin of this.plugins) {\n      const pluginContribs = plugin.contributors?.() ?? []\n      const pluginLabel = plugin.name ?? plugin.constructor?.name ?? 'plugin'\n      for (const registration of pluginContribs) {\n        adapterSources.push({ source: 'adapter', registration, label: pluginLabel })\n      }\n    }\n    const globalSources: SourcedRegistration[] = (this.options.contributors ?? []).map(\n      (registration): SourcedRegistration => ({\n        source: 'global',\n        registration,\n        label: 'bootstrap',\n      }),\n    )\n\n    // Reset module-contributor snapshot at the start of each setup\n    // pass so re-running `setup()` (test harnesses, dev-server\n    // restarts) doesn't accumulate stale entries.\n    this._moduleContributors = []\n\n    for (const mod of modules) {\n      // Prefer the declared `name` field (set by `defineModule({ name: 'X', ... })`)\n      // over `constructor.name`. Factory-built modules are plain objects whose\n      // constructor is `Object` — falling straight to `constructor.name` would\n      // degrade every label in the DevTools Contributors table to \"Object\".\n      const declaredName = (mod as { name?: unknown }).name\n      const ctorName = mod.constructor?.name\n      const moduleLabel =\n        typeof declaredName === 'string' && declaredName.length > 0\n          ? declaredName\n          : ctorName && ctorName !== 'Object'\n            ? ctorName\n            : 'module'\n      const moduleSources: SourcedRegistration[] = (mod.contributors?.() ?? []).map(\n        (registration): SourcedRegistration => ({\n          source: 'module',\n          registration,\n          label: moduleLabel,\n        }),\n      )\n      // Retain registrations for `getContributors()` — these would\n      // otherwise be unreachable post-bootstrap (module instances\n      // are not kept on the Application).\n      for (const src of moduleSources) {\n        this._moduleContributors.push({\n          registration: src.registration as { key: string; dependsOn: readonly string[] },\n          label: moduleLabel,\n        })\n      }\n\n      // Thread per-module + adapter + global sources to buildRoutes via the\n      // module-scoped slot. Module setup is sequential, so the slot is\n      // race-free. The slot MUST stay populated across both `mod.routes()`\n      // AND any framework-driven `buildRoutes(controller)` calls below —\n      // when a module returns `{ path, controller }` (auto-derive shape),\n      // buildRoutes runs here, not inside routes(). Clearing the slot in\n      // the routes()-finally would drop module/adapter/global contributors\n      // on the floor and surface as `MissingContributorError` for any\n      // class/method-level dependsOn referencing a module-level key.\n      _setExternalContributorSources([...moduleSources, ...adapterSources, ...globalSources])\n      try {\n        const result = mod.routes()\n        if (!result) continue // Non-HTTP modules (queues, cron) may return null\n\n        const routeSets = Array.isArray(result) ? result : [result]\n\n        for (const route of routeSets) {\n          const version = route.version ?? defaultVersion\n          const mountPath = `${apiPrefix}/v${version}${normalizePath(route.path)}`\n          // Derive the router from `controller` when one wasn't passed\n          // explicitly. The common-case shape is `{ path, controller }` —\n          // the framework owns `buildRoutes(controller)` so adopters don't\n          // import + call it themselves. Adopters who hand-build a router\n          // (composing multiple controllers, mounting third-party routers)\n          // pass `router` explicitly and we use it as-is.\n          const router = route.router ?? buildRoutes(route.controller)\n          if (!router) {\n            throw moduleRouteMissingControllerError(mountPath)\n          }\n          this.app.use(mountPath, router)\n\n          // Notify adapters (e.g. SwaggerAdapter for OpenAPI spec generation)\n          if (route.controller) {\n            for (const adapter of this.adapters) {\n              try {\n                adapter.onRouteMount?.(route.controller, mountPath)\n              } catch (err) {\n                log.error(err, `adapter.onRouteMount() failed for ${mountPath}`)\n              }\n            }\n            if (shouldLogRoutes) {\n              mountedRoutes.push({ controller: route.controller, mountPath })\n            }\n          }\n        }\n      } finally {\n        _setExternalContributorSources([])\n      }\n    }\n\n    // ── 8b. Log route summary ─────────────────────────────────────────\n    if (shouldLogRoutes && mountedRoutes.length > 0) {\n      const methodOrder = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS']\n      const methodRank = (m: string) => {\n        const i = methodOrder.indexOf(m)\n        return i === -1 ? 99 : i\n      }\n\n      let totalRoutes = 0\n      log.info('Routes:')\n\n      for (const { controller, mountPath } of mountedRoutes) {\n        const defs: RouteDefinition[] = getClassMeta<RouteDefinition[]>(\n          METADATA.ROUTES,\n          controller,\n          [],\n        )\n        if (defs.length === 0) continue\n\n        const counts: Record<string, number> = {}\n        for (const def of defs) {\n          const m = def.method.toUpperCase()\n          counts[m] = (counts[m] || 0) + 1\n        }\n        totalRoutes += defs.length\n\n        const methods = Object.entries(counts)\n          .toSorted(([a], [b]) => methodRank(a) - methodRank(b))\n          .map(([m, n]) => `${n} ${m}`)\n          .join(', ')\n        const name = controller.name || 'Controller'\n        log.info(`  ${name.padEnd(30)} ${mountPath.padEnd(25)} ${defs.length} routes (${methods})`)\n      }\n\n      log.info(`  Total: ${totalRoutes} routes`)\n    }\n\n    // ── 9. Adapter middleware: afterRoutes ────────────────────────────\n    this.mountMiddlewareList(adapterMw.afterRoutes)\n\n    // ── 10. Adapter beforeStart hooks ────────────────────────────────\n    // Runs BEFORE error handlers so adapters can still mount Express\n    // routes (e.g. `McpAdapter` registers `/_mcp/messages` here). If\n    // error handlers were registered first, the notFoundHandler — a\n    // catch-all that never calls next() — would pre-empt anything an\n    // adapter adds afterwards and adapter-mounted endpoints would 404.\n    for (const adapter of this.adapters) {\n      await this.callHook(adapter.beforeStart?.bind(adapter), ctx)\n    }\n\n    // ── 11. Error handlers ───────────────────────────────────────────\n    // Last in the chain so any adapter-mounted route (step 10) gets\n    // a chance to match before the catch-all 404 fires.\n    this.app.use(this.options.onNotFound ?? notFoundHandler())\n    this.app.use(this.options.onError ?? errorHandler())\n  }\n\n  /** Register modules and DI without starting the HTTP server (used by kick tinker) */\n  async registerOnly(): Promise<void> {\n    await this.setup()\n  }\n\n  /**\n   * Start the HTTP server.\n   *\n   * In **dev mode** (Vite plugin active): reuses `globalThis.__kickjs_httpServer`\n   * created by Vite. Adapters (WsAdapter, Socket.IO, etc.) receive the real\n   * `http.Server` through `afterStart({ server })` — zero adapter changes needed.\n   *\n   * In **production**: creates its own `http.Server` and binds to the port.\n   */\n  async start(): Promise<void> {\n    await this.setup()\n\n    const g = globalThis as any\n\n    if (g.__kickjs_httpServer) {\n      // ── DEV MODE: Vite owns the http.Server ──────────────────────\n      // Don't create a new server or listen — Vite is already listening.\n      // Just wire up adapters with the Vite-created server.\n      this.httpServer = g.__kickjs_httpServer\n      log.debug('Attached to Vite dev server')\n\n      // Dev mode suppresses our own SIGINT/SIGTERM handlers (Vite owns\n      // the process lifecycle), so a Ctrl+C would otherwise skip graceful\n      // shutdown entirely — `adapter.shutdown()`, request draining, and\n      // any shutdown logs never run. Expose `shutdown()` on globalThis so\n      // the CLI dev server (`kick dev`) can drive it before tearing down\n      // Vite. Same process, so the CLI's signal handler can reach this.\n      g.__kickjs_app_shutdown = () => this.shutdown()\n\n      for (const adapter of this.adapters) {\n        const ctx = this.adapterCtx(this.httpServer!)\n        await this.callHook(adapter.afterStart?.bind(adapter), ctx)\n      }\n\n      for (const plugin of this.plugins) {\n        await plugin.onReady?.(this.container)\n      }\n\n      return\n    }\n\n    // ── PRODUCTION: Create and own the http.Server ─────────────────\n    const port = this.options.port ?? parseInt(process.env.PORT || '3000', 10)\n    this.httpServer = http.createServer(this.app)\n\n    this.httpServer.on('error', (err: NodeJS.ErrnoException) => {\n      if (err.code === 'EADDRINUSE') {\n        log.error(\n          `Port ${port} is already in use. Kill the existing process or use a different port:\\n` +\n            `  PORT=${port + 1} kick dev\\n` +\n            `  lsof -i :${port}   # find what's using it\\n` +\n            `  kill <PID>          # stop it`,\n        )\n        process.exit(1)\n      }\n      throw err\n    })\n\n    // Wrap listen in a Promise so afterStart/onReady errors propagate\n    await new Promise<void>((resolve, reject) => {\n      this.httpServer!.listen(port, async () => {\n        try {\n          log.info(`Server running on http://localhost:${port}`)\n\n          for (const adapter of this.adapters) {\n            const afterCtx = this.adapterCtx(this.httpServer!)\n            await this.callHook(adapter.afterStart?.bind(adapter), afterCtx)\n          }\n\n          // Plugin onReady hooks\n          for (const plugin of this.plugins) {\n            await plugin.onReady?.(this.container)\n          }\n\n          resolve()\n        } catch (err) {\n          reject(err)\n        }\n      })\n    })\n  }\n\n  /** HMR rebuild: swap Express handler without restarting the server */\n  async rebuild(): Promise<void> {\n    // Build the new app fully before swapping — if setup() throws,\n    // the old app keeps running so the server stays responsive.\n    const prevApp = this.app\n    const prevContainer = this.container\n\n    try {\n      Container.reset()\n      this.container = Container.getInstance()\n      this.app = express()\n      await this.setup()\n    } catch (err) {\n      log.error(err, 'HMR rebuild failed, keeping previous app')\n      // Restore previous state so the server stays responsive\n      this.app = prevApp\n      this.container = prevContainer\n      return\n    }\n\n    if (this.httpServer) {\n      this.httpServer.removeAllListeners('request')\n      this.httpServer.on('request', this.app)\n      log.debug('HMR: Express app rebuilt and swapped')\n    }\n  }\n\n  /**\n   * Graceful shutdown with request draining.\n   *\n   * 1. Stops accepting new connections (server.close())\n   * 2. Waits for in-flight requests to complete (up to shutdownTimeout)\n   * 3. Calls adapter.shutdown() for all registered adapters\n   * 4. Force-closes after timeout\n   *\n   * Safe to call multiple times — subsequent calls return the same promise.\n   */\n  async shutdown(): Promise<void> {\n    // Prevent double-shutdown — return immediately if already initiated\n    if (this._shutdownInitiated) {\n      log.debug('Shutdown already in progress, skipping duplicate call')\n      return\n    }\n    this._shutdownInitiated = true\n    this._draining = true\n\n    log.debug('Shutting down — draining in-flight requests...')\n\n    const timeoutMs = this.options.shutdownTimeout ?? 30_000\n    let timer: ReturnType<typeof setTimeout> | undefined\n\n    // Start a force-exit timer if timeout is configured\n    const forceExitPromise =\n      timeoutMs > 0\n        ? new Promise<'timeout'>((resolve) => {\n            timer = setTimeout(() => resolve('timeout'), timeoutMs)\n            timer.unref()\n          })\n        : new Promise<never>(() => {}) // never resolves — no forced exit\n\n    try {\n      // Step 1: Stop accepting new connections.\n      // server.close() prevents new connections. Its callback fires only when\n      // ALL existing connections are fully closed, so we do NOT await it here —\n      // we track request draining separately via the tracking middleware.\n      if (this.httpServer) {\n        this.httpServer.close(() => {})\n      }\n\n      // Step 2: Wait for in-flight requests to drain (or timeout)\n      if (this._inFlightRequests > 0) {\n        log.debug(`Waiting for ${this._inFlightRequests} in-flight request(s) to complete...`)\n        const drainPromise = new Promise<'drained'>((resolve) => {\n          this._drainResolvers.push(() => resolve('drained'))\n        })\n\n        const result = await Promise.race([drainPromise, forceExitPromise])\n        if (result === 'timeout') {\n          log.warn(\n            `Shutdown timeout (${timeoutMs}ms) reached with ${this._inFlightRequests} request(s) still in-flight, forcing shutdown`,\n          )\n        } else {\n          log.debug('All in-flight requests completed')\n        }\n      }\n\n      // Step 3: Run all plugin + adapter shutdowns concurrently\n      const results = await Promise.allSettled([\n        ...this.plugins.map((plugin) => Promise.resolve(plugin.shutdown?.())),\n        ...this.adapters.map((adapter) => Promise.resolve(adapter.shutdown?.())),\n      ])\n      for (const result of results) {\n        if (result.status === 'rejected') {\n          log.error({ err: result.reason }, 'Adapter shutdown failed')\n        }\n      }\n    } finally {\n      if (timer) clearTimeout(timer)\n    }\n  }\n\n  getExpressApp(): Express {\n    return this.app\n  }\n\n  /** Get registered adapters — used by DevToolsAdapter for peer discovery */\n  getAdapters(): AppAdapter[] {\n    return this.adapters\n  }\n\n  /**\n   * Get registered plugins — used by DevToolsAdapter for topology\n   * introspection (architecture.md §23). Read-only; returns the\n   * already-sorted plugin list (post-`dependsOn` topo-sort).\n   */\n  getPlugins(): readonly KickPlugin[] {\n    return this.plugins\n  }\n\n  /**\n   * Snapshot of every Context Contributor reachable from this app —\n   * walks **four** registration sites: adapters, plugins, modules,\n   * and the bootstrap `contributors` option. The devtools Topology\n   * tab consumes this for the Contributors panel; tests + adopters\n   * can call it for diagnostics.\n   *\n   * Per-route (method/class-decorator) registrations are NOT included\n   * here — they live on the route registry rather than on any of\n   * the four collection sites this method walks. A future RPC will\n   * surface them separately.\n   *\n   * Result shape stays minimal — `{ key, source, label, dependsOn }`\n   * — so we don't leak `resolve` closures or other internal fields.\n   * `source` matches the five-level precedence union from\n   * `ContributorSource` (minus `'method'` / `'class'` which require\n   * the per-route walk noted above).\n   */\n  getContributors(): ReadonlyArray<{\n    key: string\n    source: 'module' | 'adapter' | 'plugin' | 'global'\n    label: string\n    dependsOn: readonly string[]\n  }> {\n    const out: Array<{\n      key: string\n      source: 'module' | 'adapter' | 'plugin' | 'global'\n      label: string\n      dependsOn: readonly string[]\n    }> = []\n    const ingest = (\n      list: ReadonlyArray<unknown> | null | undefined,\n      source: 'module' | 'adapter' | 'plugin' | 'global',\n      label: string,\n    ): void => {\n      if (!list) return\n      for (const reg of list) {\n        const r = reg as { key?: unknown; dependsOn?: unknown }\n        if (r.key === undefined || r.key === null) continue\n        // `key` is typically a string but createToken<T>() yields a\n        // branded token object — normalise via tokenName so both\n        // surfaces flow through.\n        const key = typeof r.key === 'string' ? r.key : tokenName(r.key)\n        out.push({\n          key,\n          source,\n          label,\n          dependsOn: Array.isArray(r.dependsOn) ? (r.dependsOn as string[]) : [],\n        })\n      }\n    }\n    for (const adapter of this.adapters) {\n      ingest(adapter.contributors?.(), 'adapter', adapter.name ?? 'adapter')\n    }\n    for (const plugin of this.plugins) {\n      ingest(plugin.contributors?.(), 'plugin', plugin.name ?? 'plugin')\n    }\n    // Module-level registrations — captured during `setup()` because\n    // module instances are not retained on the Application. Walk the\n    // snapshot rather than calling `mod.contributors()` here.\n    for (const { registration, label } of this._moduleContributors) {\n      ingest([registration], 'module', label)\n    }\n    ingest(this.options.contributors, 'global', 'bootstrap')\n    return out\n  }\n\n  getHttpServer(): http.Server | null {\n    return this.httpServer\n  }\n\n  // ── Internal helpers ────────────────────────────────────────────────\n\n  /**\n   * Decide whether {@link Application} should auto-mount the\n   * {@link requestScopeMiddleware} ALS wrapper.\n   *\n   * Returns `false` when:\n   * - `contextStore: 'manual'` was set (caller manages ALS frames), or\n   * - the user-supplied `middleware` list already includes a\n   *   `requestScopeMiddleware()` (detected via the symbol marker stamped\n   *   in `middleware/request-scope.ts`).\n   *\n   * Otherwise `true` — preserves the historical default of \"always wrap\n   * requests in an ALS frame\" so existing apps see no behavior change.\n   */\n  private shouldAutoMountRequestScope(): boolean {\n    if (this.options.contextStore === 'manual') return false\n\n    const userEntries = this.options.middlewares ?? this.options.middleware ?? []\n    for (const entry of userEntries) {\n      const handler = typeof entry === 'function' ? entry : entry.handler\n      if (isRequestScopeMiddleware(handler)) return false\n    }\n    return true\n  }\n\n  private collectAdapterMiddleware() {\n    const result = {\n      beforeGlobal: [] as AdapterMiddleware[],\n      afterGlobal: [] as AdapterMiddleware[],\n      beforeRoutes: [] as AdapterMiddleware[],\n      afterRoutes: [] as AdapterMiddleware[],\n    }\n\n    for (const adapter of this.adapters) {\n      const entries = adapter.middleware?.() ?? []\n      for (const entry of entries) {\n        const phase = entry.phase ?? 'afterGlobal'\n        result[phase].push(entry)\n      }\n    }\n\n    return result\n  }\n\n  private mountMiddlewareList(entries: AdapterMiddleware[]): void {\n    for (const entry of entries) {\n      if (entry.path === undefined) {\n        this.app.use(entry.handler)\n        continue\n      }\n      // Copy ReadonlyArray paths to a mutable array — Express's\n      // `PathParams` doesn't accept readonly arrays, even though the\n      // function never mutates them. Pass-through for non-array shapes.\n      const path: string | RegExp | (string | RegExp)[] = Array.isArray(entry.path)\n        ? [...entry.path]\n        : (entry.path as string | RegExp)\n      this.app.use(path, entry.handler)\n    }\n  }\n\n  private mountMiddlewareEntry(entry: MiddlewareEntry): void {\n    if (typeof entry === 'function') {\n      this.app.use(entry)\n    } else {\n      this.app.use(entry.path, entry.handler)\n    }\n  }\n\n  /** Middleware that tracks in-flight requests for graceful draining */\n  private requestTrackingMiddleware(): RequestHandler {\n    return (_req, res, next) => {\n      this._inFlightRequests++\n      const onFinish = () => {\n        res.removeListener('finish', onFinish)\n        res.removeListener('close', onFinish)\n        this._inFlightRequests--\n        // If draining and no more in-flight requests, resolve all waiters\n        if (this._draining && this._inFlightRequests === 0) {\n          for (const resolve of this._drainResolvers) {\n            resolve()\n          }\n          this._drainResolvers = []\n        }\n      }\n      res.on('finish', onFinish)\n      res.on('close', onFinish)\n      next()\n    }\n  }\n\n  /** Mount /health/live and /health/ready endpoints at the root (no API prefix) */\n  private mountHealthEndpoints(): void {\n    this.app.get('/health/live', (_req, res) => {\n      if (this._draining) {\n        res.status(503).json({ status: 'draining', uptime: process.uptime() })\n      } else {\n        res.json({ status: 'ok', uptime: process.uptime() })\n      }\n    })\n\n    this.app.get('/health/ready', async (_req, res) => {\n      if (this._draining) {\n        res.status(503).json({ status: 'draining', checks: [] })\n        return\n      }\n      const adaptersWithHealth = this.adapters.filter((a) => a.onHealthCheck)\n      const checks = await Promise.allSettled(adaptersWithHealth.map((a) => a.onHealthCheck!()))\n      const results = checks.map((c, i) => {\n        if (c.status === 'fulfilled') return c.value\n        return { name: adaptersWithHealth[i].name ?? 'unknown', status: 'down' as const }\n      })\n      const healthy = results.every((r) => r.status === 'up')\n      res.status(healthy ? 200 : 503).json({\n        status: healthy ? 'ready' : 'degraded',\n        checks: results,\n      })\n    })\n  }\n}\n"],"mappings":";;;;;;;;;;8tBAgBA,MAAM,gCAAkC,OAAO,IAAI,gCAAgC,EAUnF,SAAgB,wBAAyB,CACvC,IAAM,IAAM,IAAc,KAAgB,OAAuB,CAC/D,IAAM,gBAAkB,IAAI,QAAQ,gBAC9B,WACH,MAAM,QAAQ,eAAe,EAAI,gBAAgB,GAAK,kBAAoB,OAAO,WAAW,EACzF,MAAsB,CAC1B,UACA,UAAW,IAAI,IAIf,OAAQ,IAAI,GACd,EAMC,IAA0C,UAAY,UACvD,aAAa,IAAI,UAAa,KAAK,CAAC,CACtC,EAEA,MADC,IAA2C,iCAAmC,GACxE,EACT,CASA,SAAgB,yBAAyB,MAAyB,CAEhE,OADI,OAAO,OAAU,WACb,MAA6C,mCAAqC,GADlD,EAE1C,CC9BA,MAAM,IAAM,aAAa,aAAa,EA8PtC,IAAa,YAAb,KAAyB,CAkCM,QAjC7B,IACA,UACA,WAAyC,KACzC,SAEA,QAcA,oBAGK,CAAC,EAGN,kBAA4B,EAE5B,UAAoB,GAEpB,mBAA6B,GAE7B,gBAA6C,CAAC,EAE9C,YAAY,QAA8C,CAA7B,KAAA,QAAA,QAC3B,KAAK,IAAM,QAAQ,EACnB,KAAK,UAAY,UAAU,YAAY,EAKvC,KAAK,QAAU,UAAU,QAAQ,SAAW,CAAC,EAAG,QAAQ,EAOxD,IAAM,YAAc,CAClB,GAAG,KAAK,QAAQ,QAAS,GAAM,EAAE,WAAW,GAAK,CAAC,CAAC,EACnD,GAAI,QAAQ,UAAY,CAAC,CAC3B,EACI,iBAAmB,EACjB,cAAsD,YAAY,IAAK,SAAY,CACvF,GAAI,CAAC,QAAQ,KAAM,CAIjB,IAAM,SAAW,QAAQ,aAAa,KAChC,SACJ,UAAY,WAAa,SAAW,SAAW,oBAAoB,qBACrE,OAAO,OAAO,OAAO,QAAS,CAAE,KAAM,QAAS,CAAC,CAClD,CACA,OAAO,OACT,CAAC,EACD,KAAK,SAAW,UAAU,cAAe,SAAS,EAElD,UAAU,0BAA8B,aAAa,SAAS,GAAK,IACrE,CAGA,IAAI,YAAsB,CACxB,OAAO,KAAK,SACd,CAGA,IAAI,kBAA2B,CAC7B,OAAO,KAAK,iBACd,CAGA,cAA0B,CACxB,OAAO,KAAK,SACd,CAgBA,OAAO,IAA2B,IAA0B,KAAkC,CACxF,KACF,KAAK,IAAI,IAAY,IAAY,IAAI,EAErC,KAAK,IAAI,IAAY,GAAU,CAEnC,CAgBA,WAAmB,OAA8B,CAC/C,IAAM,IAAM,QAAQ,IAAI,UAAY,cACpC,MAAO,CACL,IAAK,KAAK,IACV,UAAW,KAAK,UAChB,OACA,IACA,aAAc,MAAQ,YACxB,CACF,CAGA,MAAc,SACZ,KACA,IACe,CACV,QACL,GAAI,CACF,IAAM,OAAS,KAAK,GAAG,EACnB,QAAU,OAAQ,OAAyB,MAAS,YACtD,MAAM,MAEV,OAAS,IAAK,CACZ,IAAI,MAAM,IAAK,qBAAqB,CACtC,CACF,CAEA,MAAM,OAAuB,CAC3B,IAAI,MAAM,8BAA8B,EAOxC,KAAK,oBAAsB,CAAC,EAG5B,IAAM,UAAY,KAAK,yBAAyB,EAG/C,KAAM,IAAY,UAAY,KAE/B,IAAM,IAAM,KAAK,WAAW,EAG5B,IAAK,IAAM,WAAW,KAAK,SACzB,MAAM,KAAK,SAAS,QAAQ,aAAa,KAAK,OAAO,EAAG,GAAG,EAI7D,KAAK,IAAI,QAAQ,cAAc,EAC/B,KAAK,IAAI,IAAI,cAAe,KAAK,QAAQ,YAAc,EAAK,EAG5D,KAAK,IAAI,IAAI,KAAK,0BAA0B,CAAC,EAG7C,KAAK,qBAAqB,EAKtB,KAAK,4BAA4B,GACnC,KAAK,IAAI,IAAI,uBAAuB,CAAC,EAIvC,KAAK,oBAAoB,UAAU,YAAY,EAG/C,IAAK,IAAM,UAAU,KAAK,QACxB,OAAO,WAAW,KAAK,SAAS,EAIlC,IAAK,IAAM,UAAU,KAAK,QACxB,GAAI,CACF,IAAM,GAAK,OAAO,aAAa,GAAK,CAAC,EACrC,IAAK,IAAM,WAAW,GACpB,KAAK,IAAI,IAAI,OAAO,CAExB,OAAS,IAAK,CACZ,IAAI,MAAM,IAAK,6BAA8B,OAAe,MAAQ,WAAW,CACjF,CAMF,GADmB,KAAK,QAAQ,UAAU,SAAW,GAEnD,GAAI,CACF,GAAM,CAAE,OAAQ,UAAa,MAAM,OAAO,gCAC1C,KAAK,IAAI,IAAI,SAAS,CAAC,CACzB,MAAQ,CAER,CAGF,IAAM,gBAAkB,KAAK,QAAQ,aAAe,KAAK,QAAQ,WACjE,GAAI,gBAEF,IAAK,IAAM,SAAS,gBAClB,KAAK,qBAAqB,KAAK,OAIjC,KAAK,IAAI,IAAI,UAAU,CAAC,EACxB,KAAK,IAAI,IAAI,QAAQ,KAAK,CAAE,MAAO,KAAK,QAAQ,WAAa,KAAM,CAAC,CAAC,EAIvE,KAAK,oBAAoB,UAAU,WAAW,EAa9C,IAAM,eAAiB,IAAI,sBAC3B,IAAK,IAAM,UAAU,KAAK,QAAS,CACjC,IAAK,IAAM,KAAK,OAAO,UAAU,GAAK,CAAC,EAAG,eAAe,MAAM,CAAC,EAChE,OAAO,QAAQ,cAAc,CAC/B,CACA,IAAK,IAAM,KAAK,KAAK,QAAQ,QAAS,eAAe,MAAM,CAAC,EAC5D,KAAK,QAAQ,QAAQ,cAAc,EAEnC,IAAM,QADqC,eAAe,QACzB,IAAK,OAAU,CAM9C,IAAM,IAAiB,OAAO,OAAU,WAAa,IAAK,MAA6B,MAIvF,OADA,IAAI,WAAW,KAAK,SAAS,EACtB,GACT,CAAC,EACD,KAAK,UAAU,UAAU,EAKpB,KAAK,UAAU,IAAI,MAAM,GAC5B,KAAK,UAAU,iBAAiB,OAAQ,IAAI,MAAQ,EAItD,KAAK,oBAAoB,UAAU,YAAY,EAG/C,IAAM,UAAY,KAAK,QAAQ,WAAa,OACtC,eAAiB,KAAK,QAAQ,gBAAkB,EAGhD,gBAAkB,KAAK,QAAQ,eAAiB,KAAK,QAAQ,gBAAkB,GAG/E,cAA+D,CAAC,EAUhE,eAAwC,CAAC,EAC/C,IAAK,IAAM,WAAW,KAAK,SAAU,CACnC,IAAM,gBAAkB,QAAQ,eAAe,GAAK,CAAC,EAC/C,aAAe,QAAQ,MAAQ,QAAQ,YAAY,MAAQ,UACjE,IAAK,IAAM,gBAAgB,gBACzB,eAAe,KAAK,CAAE,OAAQ,UAAW,aAAc,MAAO,YAAa,CAAC,CAEhF,CACA,IAAK,IAAM,UAAU,KAAK,QAAS,CACjC,IAAM,eAAiB,OAAO,eAAe,GAAK,CAAC,EAC7C,YAAc,OAAO,MAAQ,OAAO,aAAa,MAAQ,SAC/D,IAAK,IAAM,gBAAgB,eACzB,eAAe,KAAK,CAAE,OAAQ,UAAW,aAAc,MAAO,WAAY,CAAC,CAE/E,CACA,IAAM,eAAwC,KAAK,QAAQ,cAAgB,CAAC,EAAA,CAAG,IAC5E,eAAuC,CACtC,OAAQ,SACR,aACA,MAAO,WACT,EACF,EAKA,KAAK,oBAAsB,CAAC,EAE5B,IAAK,IAAM,OAAO,QAAS,CAKzB,IAAM,aAAgB,IAA2B,KAC3C,SAAW,IAAI,aAAa,KAC5B,YACJ,OAAO,cAAiB,UAAY,aAAa,OAAS,EACtD,aACA,UAAY,WAAa,SACvB,SACA,SACF,eAAwC,IAAI,eAAe,GAAK,CAAC,EAAA,CAAG,IACvE,eAAuC,CACtC,OAAQ,SACR,aACA,MAAO,WACT,EACF,EAIA,IAAK,IAAM,OAAO,cAChB,KAAK,oBAAoB,KAAK,CAC5B,aAAc,IAAI,aAClB,MAAO,WACT,CAAC,EAYH,+BAA+B,CAAC,GAAG,cAAe,GAAG,eAAgB,GAAG,aAAa,CAAC,EACtF,GAAI,CACF,IAAM,OAAS,IAAI,OAAO,EAC1B,GAAI,CAAC,OAAQ,SAEb,IAAM,UAAY,MAAM,QAAQ,MAAM,EAAI,OAAS,CAAC,MAAM,EAE1D,IAAK,IAAM,SAAS,UAAW,CAE7B,IAAM,UAAY,GAAG,UAAU,IADf,MAAM,SAAW,iBACY,cAAc,MAAM,IAAI,IAO/D,OAAS,MAAM,QAAU,YAAY,MAAM,UAAU,EAC3D,GAAI,CAAC,OACH,MAAM,kCAAkC,SAAS,EAKnD,GAHA,KAAK,IAAI,IAAI,UAAW,MAAM,EAG1B,MAAM,WAAY,CACpB,IAAK,IAAM,WAAW,KAAK,SACzB,GAAI,CACF,QAAQ,eAAe,MAAM,WAAY,SAAS,CACpD,OAAS,IAAK,CACZ,IAAI,MAAM,IAAK,qCAAqC,WAAW,CACjE,CAEE,iBACF,cAAc,KAAK,CAAE,WAAY,MAAM,WAAY,SAAU,CAAC,CAElE,CACF,CACF,QAAU,CACR,+BAA+B,CAAC,CAAC,CACnC,CACF,CAGA,GAAI,iBAAmB,cAAc,OAAS,EAAG,CAC/C,IAAM,YAAc,CAAC,MAAO,OAAQ,MAAO,QAAS,SAAU,OAAQ,SAAS,EACzE,WAAc,GAAc,CAChC,IAAM,EAAI,YAAY,QAAQ,CAAC,EAC/B,OAAO,IAAM,GAAK,GAAK,CACzB,EAEI,YAAc,EAClB,IAAI,KAAK,SAAS,EAElB,IAAK,GAAM,CAAE,WAAY,aAAe,cAAe,CACrD,IAAM,KAA0B,aAC9B,SAAS,OACT,WACA,CAAC,CACH,EACA,GAAI,KAAK,SAAW,EAAG,SAEvB,IAAM,OAAiC,CAAC,EACxC,IAAK,IAAM,OAAO,KAAM,CACtB,IAAM,EAAI,IAAI,OAAO,YAAY,EACjC,OAAO,IAAM,OAAO,IAAM,GAAK,CACjC,CACA,aAAe,KAAK,OAEpB,IAAM,QAAU,OAAO,QAAQ,MAAM,CAAC,CACnC,UAAU,CAAC,GAAI,CAAC,KAAO,WAAW,CAAC,EAAI,WAAW,CAAC,CAAC,CAAC,CACrD,KAAK,CAAC,EAAG,KAAO,GAAG,EAAE,GAAG,GAAG,CAAC,CAC5B,KAAK,IAAI,EACN,KAAO,WAAW,MAAQ,aAChC,IAAI,KAAK,KAAK,KAAK,OAAO,EAAE,EAAE,GAAG,UAAU,OAAO,EAAE,EAAE,GAAG,KAAK,OAAO,WAAW,QAAQ,EAAE,CAC5F,CAEA,IAAI,KAAK,YAAY,YAAY,QAAQ,CAC3C,CAGA,KAAK,oBAAoB,UAAU,WAAW,EAQ9C,IAAK,IAAM,WAAW,KAAK,SACzB,MAAM,KAAK,SAAS,QAAQ,aAAa,KAAK,OAAO,EAAG,GAAG,EAM7D,KAAK,IAAI,IAAI,KAAK,QAAQ,YAAc,gBAAgB,CAAC,EACzD,KAAK,IAAI,IAAI,KAAK,QAAQ,SAAW,aAAa,CAAC,CACrD,CAGA,MAAM,cAA8B,CAClC,MAAM,KAAK,MAAM,CACnB,CAWA,MAAM,OAAuB,CAC3B,MAAM,KAAK,MAAM,EAEjB,IAAM,EAAI,WAEV,GAAI,EAAE,oBAAqB,CAIzB,KAAK,WAAa,EAAE,oBACpB,IAAI,MAAM,6BAA6B,EAQvC,EAAE,0BAA8B,KAAK,SAAS,EAE9C,IAAK,IAAM,WAAW,KAAK,SAAU,CACnC,IAAM,IAAM,KAAK,WAAW,KAAK,UAAW,EAC5C,MAAM,KAAK,SAAS,QAAQ,YAAY,KAAK,OAAO,EAAG,GAAG,CAC5D,CAEA,IAAK,IAAM,UAAU,KAAK,QACxB,MAAM,OAAO,UAAU,KAAK,SAAS,EAGvC,MACF,CAGA,IAAM,KAAO,KAAK,QAAQ,MAAQ,SAAS,QAAQ,IAAI,MAAQ,OAAQ,EAAE,EACzE,KAAK,WAAa,KAAK,aAAa,KAAK,GAAG,EAE5C,KAAK,WAAW,GAAG,QAAU,KAA+B,CAU1D,MATI,IAAI,OAAS,eACf,IAAI,MACF,QAAQ,KAAK,iFACD,KAAO,EAAE,wBACL,KAAK,2DAEvB,EACA,QAAQ,KAAK,CAAC,GAEV,GACR,CAAC,EAGD,MAAM,IAAI,SAAe,QAAS,SAAW,CAC3C,KAAK,WAAY,OAAO,KAAM,SAAY,CACxC,GAAI,CACF,IAAI,KAAK,sCAAsC,MAAM,EAErD,IAAK,IAAM,WAAW,KAAK,SAAU,CACnC,IAAM,SAAW,KAAK,WAAW,KAAK,UAAW,EACjD,MAAM,KAAK,SAAS,QAAQ,YAAY,KAAK,OAAO,EAAG,QAAQ,CACjE,CAGA,IAAK,IAAM,UAAU,KAAK,QACxB,MAAM,OAAO,UAAU,KAAK,SAAS,EAGvC,QAAQ,CACV,OAAS,IAAK,CACZ,OAAO,GAAG,CACZ,CACF,CAAC,CACH,CAAC,CACH,CAGA,MAAM,SAAyB,CAG7B,IAAM,QAAU,KAAK,IACf,cAAgB,KAAK,UAE3B,GAAI,CACF,UAAU,MAAM,EAChB,KAAK,UAAY,UAAU,YAAY,EACvC,KAAK,IAAM,QAAQ,EACnB,MAAM,KAAK,MAAM,CACnB,OAAS,IAAK,CACZ,IAAI,MAAM,IAAK,0CAA0C,EAEzD,KAAK,IAAM,QACX,KAAK,UAAY,cACjB,MACF,CAEI,KAAK,aACP,KAAK,WAAW,mBAAmB,SAAS,EAC5C,KAAK,WAAW,GAAG,UAAW,KAAK,GAAG,EACtC,IAAI,MAAM,sCAAsC,EAEpD,CAYA,MAAM,UAA0B,CAE9B,GAAI,KAAK,mBAAoB,CAC3B,IAAI,MAAM,uDAAuD,EACjE,MACF,CACA,KAAK,mBAAqB,GAC1B,KAAK,UAAY,GAEjB,IAAI,MAAM,gDAAgD,EAE1D,IAAM,UAAY,KAAK,QAAQ,iBAAmB,IAC9C,MAGE,iBACJ,UAAY,EACR,IAAI,QAAoB,SAAY,CAClC,MAAQ,eAAiB,QAAQ,SAAS,EAAG,SAAS,EACtD,MAAM,MAAM,CACd,CAAC,EACD,IAAI,YAAqB,CAAC,CAAC,EAEjC,GAAI,CAUF,GALI,KAAK,YACP,KAAK,WAAW,UAAY,CAAC,CAAC,EAI5B,KAAK,kBAAoB,EAAG,CAC9B,IAAI,MAAM,eAAe,KAAK,kBAAkB,qCAAqC,EACrF,IAAM,aAAe,IAAI,QAAoB,SAAY,CACvD,KAAK,gBAAgB,SAAW,QAAQ,SAAS,CAAC,CACpD,CAAC,EAGG,MADiB,QAAQ,KAAK,CAAC,aAAc,gBAAgB,CAAC,IACnD,UACb,IAAI,KACF,qBAAqB,UAAU,mBAAmB,KAAK,kBAAkB,8CAC3E,EAEA,IAAI,MAAM,kCAAkC,CAEhD,CAGA,IAAM,QAAU,MAAM,QAAQ,WAAW,CACvC,GAAG,KAAK,QAAQ,IAAK,QAAW,QAAQ,QAAQ,OAAO,WAAW,CAAC,CAAC,EACpE,GAAG,KAAK,SAAS,IAAK,SAAY,QAAQ,QAAQ,QAAQ,WAAW,CAAC,CAAC,CACzE,CAAC,EACD,IAAK,IAAM,UAAU,QACf,OAAO,SAAW,YACpB,IAAI,MAAM,CAAE,IAAK,OAAO,MAAO,EAAG,yBAAyB,CAGjE,QAAU,CACJ,OAAO,aAAa,KAAK,CAC/B,CACF,CAEA,eAAyB,CACvB,OAAO,KAAK,GACd,CAGA,aAA4B,CAC1B,OAAO,KAAK,QACd,CAOA,YAAoC,CAClC,OAAO,KAAK,OACd,CAoBA,iBAKG,CACD,IAAM,IAKD,CAAC,EACA,QACJ,KACA,OACA,QACS,CACJ,QACL,IAAK,IAAM,OAAO,KAAM,CACtB,IAAM,EAAI,IACV,GAAI,EAAE,MAAQ,IAAA,IAAa,EAAE,MAAQ,KAAM,SAI3C,IAAM,IAAM,OAAO,EAAE,KAAQ,SAAW,EAAE,IAAM,UAAU,EAAE,GAAG,EAC/D,IAAI,KAAK,CACP,IACA,OACA,MACA,UAAW,MAAM,QAAQ,EAAE,SAAS,EAAK,EAAE,UAAyB,CAAC,CACvE,CAAC,CACH,CACF,EACA,IAAK,IAAM,WAAW,KAAK,SACzB,OAAO,QAAQ,eAAe,EAAG,UAAW,QAAQ,MAAQ,SAAS,EAEvE,IAAK,IAAM,UAAU,KAAK,QACxB,OAAO,OAAO,eAAe,EAAG,SAAU,OAAO,MAAQ,QAAQ,EAKnE,IAAK,GAAM,CAAE,aAAc,SAAW,KAAK,oBACzC,OAAO,CAAC,YAAY,EAAG,SAAU,KAAK,EAGxC,OADA,OAAO,KAAK,QAAQ,aAAc,SAAU,WAAW,EAChD,GACT,CAEA,eAAoC,CAClC,OAAO,KAAK,UACd,CAiBA,6BAA+C,CAC7C,GAAI,KAAK,QAAQ,eAAiB,SAAU,MAAO,GAEnD,IAAM,YAAc,KAAK,QAAQ,aAAe,KAAK,QAAQ,YAAc,CAAC,EAC5E,IAAK,IAAM,SAAS,YAElB,GAAI,yBADY,OAAO,OAAU,WAAa,MAAQ,MAAM,OACxB,EAAG,MAAO,GAEhD,MAAO,EACT,CAEA,0BAAmC,CACjC,IAAM,OAAS,CACb,aAAc,CAAC,EACf,YAAa,CAAC,EACd,aAAc,CAAC,EACf,YAAa,CAAC,CAChB,EAEA,IAAK,IAAM,WAAW,KAAK,SAAU,CACnC,IAAM,QAAU,QAAQ,aAAa,GAAK,CAAC,EAC3C,IAAK,IAAM,SAAS,QAElB,OADc,MAAM,OAAS,cAChB,CAAC,KAAK,KAAK,CAE5B,CAEA,OAAO,MACT,CAEA,oBAA4B,QAAoC,CAC9D,IAAK,IAAM,SAAS,QAAS,CAC3B,GAAI,MAAM,OAAS,IAAA,GAAW,CAC5B,KAAK,IAAI,IAAI,MAAM,OAAO,EAC1B,QACF,CAIA,IAAM,KAA8C,MAAM,QAAQ,MAAM,IAAI,EACxE,CAAC,GAAG,MAAM,IAAI,EACb,MAAM,KACX,KAAK,IAAI,IAAI,KAAM,MAAM,OAAO,CAClC,CACF,CAEA,qBAA6B,MAA8B,CACrD,OAAO,OAAU,WACnB,KAAK,IAAI,IAAI,KAAK,EAElB,KAAK,IAAI,IAAI,MAAM,KAAM,MAAM,OAAO,CAE1C,CAGA,2BAAoD,CAClD,OAAQ,KAAM,IAAK,OAAS,CAC1B,KAAK,oBACL,IAAM,aAAiB,CAKrB,GAJA,IAAI,eAAe,SAAU,QAAQ,EACrC,IAAI,eAAe,QAAS,QAAQ,EACpC,KAAK,oBAED,KAAK,WAAa,KAAK,oBAAsB,EAAG,CAClD,IAAK,IAAM,WAAW,KAAK,gBACzB,QAAQ,EAEV,KAAK,gBAAkB,CAAC,CAC1B,CACF,EACA,IAAI,GAAG,SAAU,QAAQ,EACzB,IAAI,GAAG,QAAS,QAAQ,EACxB,KAAK,CACP,CACF,CAGA,sBAAqC,CACnC,KAAK,IAAI,IAAI,gBAAiB,KAAM,MAAQ,CACtC,KAAK,UACP,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,CAAE,OAAQ,WAAY,OAAQ,QAAQ,OAAO,CAAE,CAAC,EAErE,IAAI,KAAK,CAAE,OAAQ,KAAM,OAAQ,QAAQ,OAAO,CAAE,CAAC,CAEvD,CAAC,EAED,KAAK,IAAI,IAAI,gBAAiB,MAAO,KAAM,MAAQ,CACjD,GAAI,KAAK,UAAW,CAClB,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,CAAE,OAAQ,WAAY,OAAQ,CAAC,CAAE,CAAC,EACvD,MACF,CACA,IAAM,mBAAqB,KAAK,SAAS,OAAQ,GAAM,EAAE,aAAa,EAEhE,SAAU,MADK,QAAQ,WAAW,mBAAmB,IAAK,GAAM,EAAE,cAAe,CAAC,CAAC,EAAA,CAClE,KAAK,EAAG,IACzB,EAAE,SAAW,YAAoB,EAAE,MAChC,CAAE,KAAM,mBAAmB,EAAE,CAAC,MAAQ,UAAW,OAAQ,MAAgB,CACjF,EACK,QAAU,QAAQ,MAAO,GAAM,EAAE,SAAW,IAAI,EACtD,IAAI,OAAO,QAAU,IAAM,GAAG,CAAC,CAAC,KAAK,CACnC,OAAQ,QAAU,QAAU,WAC5B,OAAQ,OACV,CAAC,CACH,CAAC,CACH,CACF"}

package/dist/context-C6e-S0uc.mjs

@@ -1,12 +0,0 @@
-/**
- * @forinda/kickjs v5.17.0
- *
- * Copyright (c) Felix Orinda
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- *
- * @license MIT
- */
-import{normalizeProblem}from"./core/errors.mjs";import{a as parseQuery}from"./query-NhwucLHS.mjs";import{AsyncLocalStorage}from"node:async_hooks";const requestStore=new AsyncLocalStorage;function getRequestStore(){let store=requestStore.getStore();if(!store)throw Error(`No active request context. REQUEST-scoped services can only be resolved during an HTTP request.`);return store}function getRequestValue(key){return requestStore.getStore()?.values.get(key)}const signalControllerKey=Symbol.for(`kickjs.requestContext.signalController`),readOnlyProxyCacheKey=Symbol.for(`kickjs.requestContext.readOnlyProxyCache`);function isPlainObjectOrArray(v){if(typeof v!=`object`||!v)return!1;if(Array.isArray(v))return!0;let proto=Object.getPrototypeOf(v);return proto===Object.prototype||proto===null}function makeReadOnlyProxy(target,req,label){if(process.env.NODE_ENV===`production`||!isPlainObjectOrArray(target))return target;let reqObj=req,cache=reqObj[readOnlyProxyCacheKey];cache||(cache=new WeakMap,reqObj[readOnlyProxyCacheKey]=cache);let targetObj=target,cached=cache.get(targetObj);if(cached)return cached;let warnWrite=(verb,prop)=>{console.warn(`[kickjs] Attempted to ${verb} \`ctx.${label}.${String(prop)}\` — request data is read-only. Stash computed values via \`ctx.set('key', value)\` or a Context Contributor, or reach \`ctx.req.${label}\` if you genuinely need the raw mutable handle.`)},proxy=new Proxy(targetObj,{get(t,prop,receiver){let value=Reflect.get(t,prop,receiver);return isPlainObjectOrArray(value)?makeReadOnlyProxy(value,req,`${label}.${String(prop)}`):value},set(_t,prop){return warnWrite(`assign`,prop),!0},deleteProperty(_t,prop){return warnWrite(`delete`,prop),!0},defineProperty(_t,prop){return warnWrite(`Object.defineProperty on`,prop),!0}});return cache.set(targetObj,proxy),proxy}var RequestContext=class{req;res;next;constructor(req,res,next){this.req=req,this.res=res,this.next=next}_qsMemo;metadataReadOnly(){return requestStore.getStore()?.values??null}metadataForWrite(){let store=requestStore.getStore();if(store)return store.values;throw Error(`RequestContext.set called outside an AsyncLocalStorage frame. Mount requestScopeMiddleware() before constructing RequestContext, or wrap test setup in requestStore.run({ requestId, instances: new Map(), values: new Map() }, () => ...).`)}get body(){return makeReadOnlyProxy(this.req.body,this.req,`body`)}get params(){return makeReadOnlyProxy(this.req.params,this.req,`params`)}get query(){return makeReadOnlyProxy(this.req.query,this.req,`query`)}get headers(){return makeReadOnlyProxy(this.req.headers,this.req,`headers`)}get requestId(){return this.req.requestId??this.req.headers[`x-request-id`]}get signal(){let req=this.req,cached=req[signalControllerKey];if(cached)return cached.signal;let ctrl=new AbortController;req[signalControllerKey]=ctrl;let abort=()=>ctrl.abort(`request closed`);return this.req.once(`close`,abort),this.res.once(`close`,abort),ctrl.signal}get session(){return this.req.session}get user(){return this.metadataReadOnly()?.get(`user`)??this.req.user}get tenantId(){return this.user?.tenantId}get roles(){let u=this.user;return u?.tenantRoles??u?.roles??[]}qs(fieldConfig,options){let memo=this._qsMemo;if(memo&&memo.config===fieldConfig&&memo.options===options)return memo.result;let effective={...options,onReject:options?.onReject??(rejection=>{let id=this.requestId?`[${this.requestId}] `:``;console.warn(`${id}query ${rejection.kind} '${rejection.field}' rejected (${rejection.reason})`)})},result=parseQuery(this.req.query,fieldConfig,effective);return this._qsMemo={config:fieldConfig,options,result},result}get file(){let f=this.req.file;return f?makeReadOnlyProxy(f,this.req,`file`):void 0}get files(){let f=this.req.files;if(Array.isArray(f))return makeReadOnlyProxy(f,this.req,`files`)}get(key){return this.metadataReadOnly()?.get(key)}set(key,value){this.metadataForWrite().set(key,value)}json(data,status=200){return this.res.status(status).json(data)}created(data){return this.res.status(201).json(data)}noContent(){return this.res.status(204).end()}notFound(message=`Not Found`){return this.res.status(404).json({message})}badRequest(message){return this.res.status(400).json({message})}get problem(){let send=input=>this.sendProblem(input);return send.badRequest=(input={})=>this.sendProblem({status:400,...input}),send.unauthorized=(input={})=>this.sendProblem({status:401,...input}),send.forbidden=(input={})=>this.sendProblem({status:403,...input}),send.notFound=(input={})=>this.sendProblem({status:404,...input}),send.conflict=(input={})=>this.sendProblem({status:409,...input}),send.unprocessable=(input={})=>this.sendProblem({status:422,...input}),send.tooManyRequests=(input={})=>this.sendProblem({status:429,...input}),send.internal=(input={})=>this.sendProblem({status:500,...input}),send.validation=(issues,input={})=>{let errors=(issues||[]).map(issue=>({field:issue.path?.join?.(`.`)??``,message:issue.message??``,code:issue.code}));return this.sendProblem({status:422,detail:issues?.[0]?.message,...input,errors})},send}sendProblem(input){let body=normalizeProblem(input);return this.res.setHeader(`Content-Type`,`application/problem+json`),this.res.status(body.status).json(body)}html(content,status=200){return this.res.status(status).type(`html`).send(content)}download(buffer,filename,contentType=`application/octet-stream`){return this.res.setHeader(`Content-Disposition`,`attachment; filename="${filename}"`),this.res.setHeader(`Content-Type`,contentType),this.res.send(buffer)}render(template,data={}){return this.res.render(template,data)}async paginate(fetcher,fieldConfig){let parsed=this.qs(fieldConfig),{data,total}=await fetcher(parsed),{page,limit}=parsed.pagination,totalPages=Math.ceil(total/limit)||1,response={data,meta:{page,limit,total,totalPages,hasNext:page<totalPages,hasPrev:page>1}};return this.json(response)}sse(){this.res.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`,"X-Accel-Buffering":`no`}),this.res.flushHeaders();let closeCallbacks=[];return this.req.on(`close`,()=>{for(let cb of closeCallbacks)cb()}),{send:(data,event,id)=>{id&&this.res.write(`id: ${id}\n`),event&&this.res.write(`event: ${event}\n`),this.res.write(`data: ${JSON.stringify(data)}\n\n`)},comment:text=>{this.res.write(`: ${text}\n\n`)},onClose:fn=>{closeCallbacks.push(fn)},close:()=>{this.res.end()}}}};export{requestStore as i,getRequestStore as n,getRequestValue as r,RequestContext as t};
-//# sourceMappingURL=context-C6e-S0uc.mjs.map

package/dist/context-C6e-S0uc.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"context-C6e-S0uc.mjs","names":[],"sources":["../src/http/request-store.ts","../src/http/context.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks'\nimport type { MetaValue } from '../core/execution-context'\n\n/** Per-request storage for REQUEST-scoped DI and request context propagation */\nexport interface RequestStore {\n  /** Unique request identifier */\n  requestId: string\n  /**\n   * Per-request singleton cache for REQUEST-scoped services. Keys are\n   * heterogeneous (class constructors, `InjectionToken` objects, raw\n   * strings), so the map type stays `Map<any, any>`.\n   */\n  instances: Map<any, any>\n  /**\n   * Per-request key/value bag. Canonical backing store for\n   * `RequestContext.set/get` and the Context Contributor pipeline (#107)\n   * since Phase 3. Anything written here is visible to every concrete\n   * execution context constructed for the same request, regardless of\n   * which middleware/contributor wrote it.\n   *\n   * Keys are constrained to `string` per the locked decision in\n   * `architecture.md` §20.12 (#4); the value type is `unknown` because\n   * the concrete shape at each key is determined by the consumer's\n   * `ContextMeta` augmentation, not by the store itself.\n   *\n   * Prefer the {@link getRequestValue} helper over reaching into this\n   * map directly — it threads the augmented `ContextMeta` shape through\n   * `MetaValue<K>` so consumers get typed reads without an `as` cast.\n   * Writes should flow through `ctx.set(key, value)` or a Context\n   * Contributor's return value — see the `setRequestValue` note below\n   * for why this package intentionally does NOT ship a service-level\n   * write helper.\n   */\n  values: Map<string, unknown>\n}\n\n/** AsyncLocalStorage instance shared across the framework */\nexport const requestStore = new AsyncLocalStorage<RequestStore>()\n\n/**\n * Get the current request store. Throws if called outside a request context.\n * Used by the Container to resolve REQUEST-scoped dependencies.\n */\nexport function getRequestStore(): RequestStore {\n  const store = requestStore.getStore()\n  if (!store) {\n    throw new Error(\n      'No active request context. REQUEST-scoped services can only be resolved during an HTTP request.',\n    )\n  }\n  return store\n}\n\n/**\n * Read a per-request `ContextMeta`-keyed value from outside a controller\n * (services, repositories, anywhere with no `ctx` reference). Returns\n * the augmented type for the key — `MetaValue<K>` — so consumers get the\n * same static safety as `ctx.get(key)` without holding the context.\n *\n * Returns `undefined` outside an active request frame (background jobs,\n * startup code, tests without `requestScopeMiddleware()`) — the helper\n * is intentionally null-tolerant so calling it from a service that\n * runs in both request and non-request paths doesn't throw.\n *\n * @example\n * ```ts\n * declare module '@forinda/kickjs' {\n *   interface ContextMeta { tenant: { id: string; name: string } }\n * }\n *\n * @Service()\n * class AuditService {\n *   log(action: string) {\n *     const tenant = getRequestValue('tenant')  // typed: { id; name } | undefined\n *     db.audit.insert({ action, tenantId: tenant?.id })\n *   }\n * }\n * ```\n */\nexport function getRequestValue<K extends string>(key: K): MetaValue<K> | undefined {\n  return requestStore.getStore()?.values.get(key) as MetaValue<K> | undefined\n}\n\n// Intentionally NO `setRequestValue` export.\n//\n// Writes are deliberately context-scoped — only the controlled write\n// surfaces should mutate the per-request Map:\n//\n//   1. A Context Contributor's `resolve()` / `onError()` return value\n//      (the runner does `ctx.set(reg.key, value)` on the contributor's\n//      behalf). This is the canonical way to populate a key.\n//   2. A controller / middleware / contributor that holds a\n//      `RequestContext` instance can call `ctx.set(key, value)`\n//      directly. The write is auditable inline at the call site.\n//\n// Letting arbitrary services reach in and mutate the store from\n// anywhere produces \"spooky action at a distance\" — keys appear in\n// the request bag without an obvious source, and tracing which\n// service polluted what becomes a grep exercise. Services that need\n// to publish per-request state should return the value to the caller\n// (controller or contributor) and let *that* layer write it via\n// `ctx.set`. If a future need genuinely requires a service-level\n// write surface, expose a narrow function (`recordTrace`,\n// `markStartTime`) on a service that captures the side effect, not a\n// generic `setRequestValue`.\n","/// <reference types=\"multer\" />\nimport type { Request, Response, NextFunction } from 'express'\nimport { type ExecutionContext, type MetaValue } from '../core/execution-context'\nimport { normalizeProblem, type ProblemDetails, type ValidationError } from '../core/errors'\nimport { requestStore } from './request-store'\nimport {\n  parseQuery,\n  type ParseQueryOptions,\n  type QueryFieldConfig,\n  type PaginatedResponse,\n  type TypedParsedQuery,\n} from './query'\n\n/**\n * Input shape for the typed problem-detail convenience methods on\n * {@link ProblemSender} (`ctx.problem.notFound`, `.badRequest`, etc.) —\n * RFC 9457 details minus the `status`, which each method pre-fills.\n */\ntype ProblemInput = Omit<ProblemDetails, 'status'>\n\n/**\n * Callable response helper for RFC 9457 — Problem Details responses.\n * Returned by `ctx.problem`. Invoke directly for a fully-specified\n * payload, or use the named convenience methods to pre-fill `status` +\n * `title` for the common codes.\n *\n * Each call sets `Content-Type: application/problem+json` and serializes\n * the canonical shape (defaulting `type` to `about:blank` and `title` to\n * the IANA reason phrase per RFC 9457 §3.1.1 / §3.1.4).\n *\n * @example\n * ```ts\n * ctx.problem({\n *   type: 'https://api.example.com/problems/out-of-credit',\n *   status: 403,\n *   detail: 'Your balance is 30, but that costs 50.',\n *   balance: 30,                // extension per §3.2\n * })\n *\n * ctx.problem.notFound({ detail: 'User abc not found' })\n * ctx.problem.validation(zodResult.error.issues)\n * ```\n */\ninterface ProblemSender {\n  (input: ProblemDetails): Response\n  /** 400 Bad Request — RFC 9457. */\n  badRequest(input?: ProblemInput): Response\n  /** 401 Unauthorized — RFC 9457. */\n  unauthorized(input?: ProblemInput): Response\n  /** 403 Forbidden — RFC 9457. */\n  forbidden(input?: ProblemInput): Response\n  /** 404 Not Found — RFC 9457. */\n  notFound(input?: ProblemInput): Response\n  /** 409 Conflict — RFC 9457. */\n  conflict(input?: ProblemInput): Response\n  /** 422 Unprocessable Entity — RFC 9457. */\n  unprocessable(input?: ProblemInput): Response\n  /** 429 Too Many Requests — RFC 9457. */\n  tooManyRequests(input?: ProblemInput): Response\n  /** 500 Internal Server Error — RFC 9457. */\n  internal(input?: ProblemInput): Response\n  /**\n   * 422 with Zod issues serialized into the `errors` extension per\n   * RFC 9457 §3.2's array convention. Pass `error.issues` from a Zod\n   * `safeParse` failure or `error.issues` from a thrown ZodError.\n   */\n  validation(issues: any[], input?: ProblemInput): Response\n}\n\n/**\n * Recursively marks every property of `T` as `readonly`. Preserves\n * `Function`, `Date`, and `RegExp` unchanged, and converts `Map` / `Set`\n * to `ReadonlyMap` / `ReadonlySet` so their mutating methods (`set`,\n * `delete`, `add`, `clear`) are removed from the public surface.\n * Tuples keep their positional element types — only their per-element\n * mutability is locked.\n *\n * Exposed as a utility for adopters who want to opt into compile-time\n * sealing of their own shapes. **No longer applied to\n * `RequestContext.{body,params,query,headers,file,files}`** — that\n * broke TS narrowing / discriminated-union drilldowns on typed request\n * payloads. Runtime read-only enforcement now lives in\n * {@link makeReadOnlyProxy} (dev-only Proxy that warns on writes,\n * no-op in production).\n *\n * Type-only. No runtime cost. `DeepReadonly<any>` is `any` (TS\n * distributes conditional types over `any`).\n */\nexport type DeepReadonly<T> = T extends (...args: never[]) => unknown\n  ? T\n  : T extends Date | RegExp\n    ? T\n    : T extends Map<infer K, infer V>\n      ? ReadonlyMap<DeepReadonly<K>, DeepReadonly<V>>\n      : T extends Set<infer V>\n        ? ReadonlySet<DeepReadonly<V>>\n        : T extends readonly (infer U)[]\n          ? // Distinguish a regular array from a tuple. A regular `T[]` widens\n            // its `length` to `number`; a tuple's `length` is a literal\n            // (e.g. `2`). The literal branch maps over `keyof T` so each\n            // positional slot keeps its own type — `DeepReadonly<[1, 2]>` →\n            // `readonly [1, 2]`, not `readonly (1 | 2)[]`.\n            number extends T['length']\n            ? ReadonlyArray<DeepReadonly<U>>\n            : { readonly [K in keyof T]: DeepReadonly<T[K]> }\n          : T extends object\n            ? { readonly [K in keyof T]: DeepReadonly<T[K]> }\n            : T\n\n/**\n * Re-export the augmentable {@link ContextMeta} registry from core/.\n * Declared in `core/execution-context.ts` so non-HTTP transports\n * (WS/queue/cron, V2) share one declaration site. Apps still augment\n * via the canonical `declare module '@forinda/kickjs'` form.\n */\nexport type { ContextMeta } from '../core/execution-context'\n\n/**\n * Symbol key under which the per-request `AbortController` backing\n * `RequestContext.signal` is cached on the Express `req` object.\n * Shared across every `RequestContext` instance built for the same\n * request (router-builder constructs separate wrappers for\n * middleware, the contributor pipeline, and the main handler — they\n * all need the same signal).\n */\nconst signalControllerKey = Symbol.for('kickjs.requestContext.signalController')\n\n/**\n * Symbol key under which per-target read-only Proxy wrappers are\n * cached on the Express `req` object. Used by {@link makeReadOnlyProxy}\n * so repeat access of `ctx.body` / `ctx.params` / etc. returns the same\n * Proxy instance (cheap, and stable under `===` for adopters comparing\n * values across middleware).\n */\nconst readOnlyProxyCacheKey = Symbol.for('kickjs.requestContext.readOnlyProxyCache')\n\n/**\n * `true` iff `v` is a plain object (`{}` / `Object.create(null)`) or an\n * array — the two shapes JSON.parse / Express body-parser produce and\n * the only ones the read-only Proxy recurses into. Class instances,\n * `Date`, `RegExp`, `Map`, `Set`, `Buffer`, streams, and functions\n * pass through unwrapped so their method dispatch and `instanceof`\n * checks keep working.\n */\nfunction isPlainObjectOrArray(v: unknown): v is object {\n  if (v === null || typeof v !== 'object') return false\n  if (Array.isArray(v)) return true\n  const proto = Object.getPrototypeOf(v)\n  return proto === Object.prototype || proto === null\n}\n\n/**\n * In dev, wrap `target` in a `Proxy` whose `set` / `deleteProperty` /\n * `defineProperty` traps log a warning and otherwise leave the\n * underlying object untouched. A `get` trap recursively wraps nested\n * plain objects and arrays on access, so deep mutations\n * (`ctx.body.user.name = 'x'`, `ctx.files[0].fieldname = 'y'`,\n * `ctx.body.tags.push(...)`) all surface a warning — matching the\n * prior `DeepReadonly<T>` contract at runtime instead of at the type\n * level. In production (`process.env.NODE_ENV === 'production'`) the\n * proxy is bypassed entirely and `target` is returned as-is so the\n * hot path stays zero-cost.\n *\n * Why a Proxy instead of `DeepReadonly<T>` at the type level: the\n * recursive conditional type interfered with TS narrowing (notably\n * discriminated unions on `ctx.body`) and slowed type-checking on\n * deeply-nested Zod-inferred shapes. Compile-time sealing is gone;\n * runtime warning catches the same class of bug during dev and tests.\n *\n * Trap returns `true` so strict-mode call sites (which is all of them\n * — ES modules are strict) don't *throw* on assignment — they just\n * get a warning + the underlying value stays untouched. Adopters\n * discover the violation when the subsequent read returns the\n * original value, not the one they \"set\".\n *\n * Targets are cached per-`req` under {@link readOnlyProxyCacheKey} so\n * (1) repeat getter access returns the same proxy (`ctx.body ===\n * ctx.body`, `ctx.body.user === ctx.body.user`); and (2) cyclic refs\n * (`body.self = body`) terminate via the cache hit on the second\n * visit. Primitives, `null`, and non-plain values pass through.\n */\nfunction makeReadOnlyProxy<T>(target: T, req: object, label: string): T {\n  if (process.env.NODE_ENV === 'production') return target\n  if (!isPlainObjectOrArray(target)) return target\n\n  type Cache = WeakMap<object, unknown>\n  const reqObj = req as Record<symbol, Cache | undefined>\n  let cache = reqObj[readOnlyProxyCacheKey]\n  if (!cache) {\n    cache = new WeakMap()\n    reqObj[readOnlyProxyCacheKey] = cache\n  }\n  const targetObj = target as unknown as object\n  const cached = cache.get(targetObj)\n  if (cached) return cached as T\n\n  const warnWrite = (verb: string, prop: PropertyKey) => {\n    console.warn(\n      `[kickjs] Attempted to ${verb} \\`ctx.${label}.${String(prop)}\\` — ` +\n        `request data is read-only. ` +\n        `Stash computed values via \\`ctx.set('key', value)\\` or a Context Contributor, ` +\n        `or reach \\`ctx.req.${label}\\` if you genuinely need the raw mutable handle.`,\n    )\n  }\n\n  const proxy = new Proxy(targetObj, {\n    get(t, prop, receiver) {\n      const value = Reflect.get(t, prop, receiver)\n      // Recurse only into plain objects / arrays. Functions (incl.\n      // array methods like `.push`) pass through with `receiver` as\n      // their `this`, so internal `this[i] = x` writes still hit the\n      // `set` trap and warn.\n      if (isPlainObjectOrArray(value)) {\n        return makeReadOnlyProxy(value, req, `${label}.${String(prop)}`)\n      }\n      return value\n    },\n    set(_t, prop) {\n      warnWrite('assign', prop)\n      return true\n    },\n    deleteProperty(_t, prop) {\n      warnWrite('delete', prop)\n      return true\n    },\n    defineProperty(_t, prop) {\n      warnWrite('Object.defineProperty on', prop)\n      return true\n    },\n  })\n  cache.set(targetObj, proxy)\n  return proxy as T\n}\n\n/**\n * The shape of a single route entry in `KickRoutes`. Generated by\n * `kick typegen` and consumed via the `Ctx<T>` helper. Each field is\n * `unknown` by default and is filled in as the typegen learns more\n * about the route (URL params from the path, body/query from validation\n * schemas, etc.).\n */\nexport interface RouteShape {\n  params?: unknown\n  body?: unknown\n  query?: unknown\n  response?: unknown\n}\n\n/**\n * Unified request/response abstraction passed to every controller method.\n * Shields handlers from raw Express objects and provides convenience methods.\n *\n * Implements {@link ExecutionContext} so the transport-agnostic Context\n * Contributor pipeline (#107) can run against this concrete HTTP context\n * the same way it will run against future WS / queue / cron contexts.\n */\nexport class RequestContext<TBody = any, TParams = any, TQuery = any> implements ExecutionContext {\n  constructor(\n    public readonly req: Request,\n    public readonly res: Response,\n    public readonly next: NextFunction,\n  ) {}\n\n  /**\n   * Memo of the most recent {@link qs} call this request. The query\n   * object is immutable for a request's lifetime, so a repeat call with\n   * the same `(fieldConfig, options)` references returns the cached\n   * parse instead of re-walking the filter/sort strings.\n   */\n  private _qsMemo?: { config: unknown; options: unknown; result: unknown }\n\n  /**\n   * Read-side accessor for the per-request metadata map.\n   *\n   * Returns the AsyncLocalStorage map (`requestStore.getStore().values`)\n   * shared with the Context Contributor pipeline when an ALS frame is\n   * active. Returns `null` outside any frame — read-side callers\n   * (`ctx.get`, `ctx.user`, `ctx.tenantId`, `ctx.roles`) treat that as\n   * \"no metadata\" and fall through to their `req.*` defaults. Reads\n   * never throw because outside an ALS frame nobody could have written\n   * via `ctx.set` anyway, so an empty answer is the truthful one.\n   */\n  private metadataReadOnly(): Map<string, any> | null {\n    return (requestStore.getStore()?.values as Map<string, any> | undefined) ?? null\n  }\n\n  /**\n   * Write-side accessor for the per-request metadata map.\n   *\n   * Returns the same map as {@link metadataReadOnly} when an ALS frame\n   * is active. Throws otherwise — writing to a fallback map outside\n   * the ALS frame would silently lose data because other call sites\n   * (downstream contributors, request-logger, etc.) read from the\n   * canonical store and would never see it. Mount\n   * `requestScopeMiddleware()` (Application does this for you in\n   * `'auto'` mode) or wrap your test setup in\n   * `requestStore.run({...}, () => …)` to fix.\n   */\n  private metadataForWrite(): Map<string, any> {\n    const store = requestStore.getStore()\n    if (store) return store.values as Map<string, any>\n    throw new Error(\n      'RequestContext.set called outside an AsyncLocalStorage frame. ' +\n        'Mount requestScopeMiddleware() before constructing RequestContext, ' +\n        'or wrap test setup in requestStore.run({ requestId, instances: new Map(), values: new Map() }, () => ...).',\n    )\n  }\n\n  // ── Request Data ────────────────────────────────────────────────────\n\n  /**\n   * Parsed request body. Wrapped in a dev-only Proxy that warns when\n   * adopters try to mutate Zod-validated payloads in place — compute\n   * new values and stash them via `ctx.set('key', value)` or a Context\n   * Contributor instead. Reach for `ctx.req.body` if you genuinely\n   * need the raw, mutable Express handle (rare).\n   *\n   * In production the Proxy is bypassed and `this.req.body` is\n   * returned as-is — no runtime cost on the hot path.\n   */\n  get body(): TBody {\n    return makeReadOnlyProxy<TBody>(this.req.body, this.req, 'body')\n  }\n\n  /** Path parameters parsed from the route — read-only, see {@link body}. */\n  get params(): TParams {\n    return makeReadOnlyProxy<TParams>(this.req.params as TParams, this.req, 'params')\n  }\n\n  /** Parsed query string — read-only, see {@link body}. */\n  get query(): TQuery {\n    return makeReadOnlyProxy<TQuery>(this.req.query as TQuery, this.req, 'query')\n  }\n\n  /** Inbound HTTP headers — read-only, see {@link body}. */\n  get headers(): Request['headers'] {\n    return makeReadOnlyProxy<Request['headers']>(this.req.headers, this.req, 'headers')\n  }\n\n  get requestId(): string | undefined {\n    return (this.req as any).requestId ?? (this.req.headers['x-request-id'] as string | undefined)\n  }\n\n  /**\n   * `AbortSignal` that fires when the underlying HTTP request is\n   * closed — either because the client disconnected before the\n   * response was sent, or because Node's socket-close event ran\n   * after a normal response. Multiple `RequestContext` wrappers for\n   * the same request (router-builder constructs one per\n   * middleware/contributor pipeline / main handler) share a single\n   * `AbortController` cached on the underlying `req` object, so the\n   * signal is stable across the request lifecycle.\n   *\n   * Thread it through anything that takes an `AbortSignal` so the\n   * work cancels as soon as the client gives up — e.g. a kickjs-db\n   * relational query:\n   *\n   * ```ts\n   * @Get('/:id/full')\n   * async show(ctx: RequestContext) {\n   *   const row = await this.repo.findFullById(ctx.params.id, ctx.signal)\n   *   if (!row) return ctx.notFound()\n   *   ctx.json(row)\n   * }\n   * ```\n   *\n   * The repo passes `signal` to `db.query.<table>.findUnique({ signal })`;\n   * if the client disconnects mid-flight, the in-flight query rejects\n   * with `RelationalQueryCancelledError` instead of consuming the\n   * connection until completion.\n   *\n   * Implementation note — both `req.on('close')` and `res.on('close')`\n   * are wired so the signal aborts regardless of whether the close\n   * event lands on the request stream or the response stream first.\n   * Subsequent fires are no-ops (`AbortController.abort()` is\n   * idempotent).\n   */\n  get signal(): AbortSignal {\n    const req = this.req as Request & { [signalControllerKey]?: AbortController }\n    const cached = req[signalControllerKey]\n    if (cached) return cached.signal\n\n    const ctrl = new AbortController()\n    req[signalControllerKey] = ctrl\n    const abort = () => ctrl.abort('request closed')\n    this.req.once('close', abort)\n    this.res.once('close', abort)\n    return ctrl.signal\n  }\n\n  /** Session data (requires session middleware) */\n  get session(): any {\n    return (this.req as any).session\n  }\n\n  /**\n   * The authenticated user set by AuthAdapter.\n   * Reads from the per-request metadata store first (`ctx.set('user', ...)`),\n   * then falls back to `req.user` (set directly by AuthAdapter middleware).\n   *\n   * Extend the `AuthUser` interface via module augmentation in `@forinda/kickjs-auth`\n   * to get full typing.\n   *\n   * @example\n   * ```ts\n   * @Get('/me')\n   * @Authenticated()\n   * getProfile(ctx: RequestContext) {\n   *   const user = ctx.user\n   *   if (!user) return ctx.notFound()\n   *   return ctx.json({ user })\n   * }\n   * ```\n   */\n  get user(): MetaValue<'user', Record<string, any>> | undefined {\n    return this.metadataReadOnly()?.get('user') ?? (this.req as any).user\n  }\n\n  /**\n   * Tenant identifier for multi-tenant apps. Reads `user.tenantId` —\n   * populated either by `AuthAdapter.testMode({ tenantId })`, a tenant\n   * resolver middleware, or manually on the strategy's `mapPayload`.\n   *\n   * Augment `AuthUser` (or `ContextMeta['user']`) to widen the return\n   * type if your user shape guarantees a non-`string | undefined` id.\n   */\n  get tenantId(): string | undefined {\n    const u = this.user as Record<string, any> | undefined\n    return u?.tenantId\n  }\n\n  /**\n   * Effective role list for the current user. Prefers `user.tenantRoles`\n   * (populated by `AuthAdapterOptions.roleResolver` under a tenant) and\n   * falls back to `user.roles`. Returns an empty array when the user is\n   * absent or the shape has neither field.\n   */\n  get roles(): string[] {\n    const u = this.user as Record<string, any> | undefined\n    return u?.tenantRoles ?? u?.roles ?? []\n  }\n\n  // ── Query String Parsing ───────────────────────────────────────────\n\n  /**\n   * Parse the request query string into structured filters, sort, pagination, and search.\n   * Pass the result to an ORM query builder adapter (Drizzle, Prisma, Sequelize, etc.).\n   *\n   * Generic over the field config: when passed an inline literal (or\n   * `as const`), `filters[].field` and `sort[].field` are narrowed to\n   * the exact whitelisted field names. Pass nothing or a non-literal\n   * config and you get the loose `string` fallback.\n   *\n   * @param fieldConfig - Optional whitelist for filterable, sortable, and searchable fields\n   * @param options - Limits (`maxLimit`, `defaultLimit`, `maxSearchLength`) and an\n   *   `onReject` hook. By default a rejected/over-broad field is logged via\n   *   `console.warn` with the request id; pass an explicit `onReject` to override\n   *   (e.g. throw to return a 400), or `onReject: () => {}` to silence.\n   *\n   * @example\n   * ```ts\n   * @Get('/')\n   * async list(ctx: RequestContext) {\n   *   const parsed = ctx.qs({\n   *     filterable: ['status', 'priority'],\n   *     sortable: ['createdAt', 'title'],\n   *   } as const)\n   *   parsed.filters[0].field // typed as 'status' | 'priority'\n   *   parsed.sort[0].field    // typed as 'createdAt' | 'title'\n   * }\n   * ```\n   */\n  qs<TConfig extends QueryFieldConfig | undefined = undefined>(\n    fieldConfig?: TConfig,\n    options?: ParseQueryOptions,\n  ): TypedParsedQuery<TConfig> {\n    // Cheap per-request memo — repeat calls with the same args (the\n    // common controller pattern) skip re-parsing. `req.query` is fixed\n    // for the request's lifetime, so caching is always sound.\n    const memo = this._qsMemo\n    if (memo && memo.config === fieldConfig && memo.options === options) {\n      return memo.result as TypedParsedQuery<TConfig>\n    }\n    const effective: ParseQueryOptions = {\n      ...options,\n      onReject:\n        options?.onReject ??\n        ((rejection) => {\n          const id = this.requestId ? `[${this.requestId}] ` : ''\n          console.warn(\n            `${id}query ${rejection.kind} '${rejection.field}' rejected (${rejection.reason})`,\n          )\n        }),\n    }\n    const result = parseQuery<TConfig>(\n      this.req.query as Record<string, any>,\n      fieldConfig,\n      effective,\n    )\n    this._qsMemo = { config: fieldConfig, options, result }\n    return result\n  }\n\n  // ── File Uploads ────────────────────────────────────────────────────\n\n  /**\n   * Single uploaded file (requires `@FileUpload({ mode: 'single' })`).\n   * Wrapped in a dev-only Proxy that warns on mutation — see {@link body}.\n   * File metadata is set by the upload middleware and shouldn't be\n   * mutated downstream.\n   */\n  get file(): Express.Multer.File | undefined {\n    const f = this.req.file\n    return f ? makeReadOnlyProxy<Express.Multer.File>(f, this.req, 'file') : undefined\n  }\n\n  /**\n   * Array of uploaded files (requires `@FileUpload({ mode: 'array' })`).\n   * The array (and each entry in dev) is wrapped in a read-only Proxy\n   * that warns on `push`/`pop` and per-file mutation. Use\n   * `ctx.req.files` if you genuinely need the mutable Express handle.\n   */\n  get files(): Express.Multer.File[] | undefined {\n    // multer's `Request['files']` is a union — array (mode: 'array' /\n    // 'any') or `{ [fieldname]: File[] }` (mode: 'fields'). The\n    // `@FileUpload({ mode: 'array' })` decorator only sets the array\n    // shape, but `Request['files']` is the broad union. Narrow back to\n    // `File[]` here for the common-case getter; adopters using\n    // `mode: 'fields'` can read `ctx.req.files` directly for the\n    // dictionary shape.\n    const f = this.req.files\n    if (!Array.isArray(f)) return undefined\n    return makeReadOnlyProxy<Express.Multer.File[]>(f, this.req, 'files')\n  }\n\n  // ── Metadata Store ──────────────────────────────────────────────────\n\n  /**\n   * Read a value from the per-request metadata store.\n   *\n   * When `ContextMeta` has been augmented with a matching key, the return\n   * type is inferred automatically. For ad-hoc keys, pass a generic:\n   * `ctx.get<MyType>('custom')`.\n   */\n  get<K extends string>(key: K): MetaValue<K> | undefined {\n    return this.metadataReadOnly()?.get(key) as MetaValue<K> | undefined\n  }\n\n  /**\n   * Write a value to the per-request metadata store. Throws when no\n   * AsyncLocalStorage frame is active — see {@link metadataForWrite}\n   * for why a silent fallback is the wrong default.\n   */\n  set<K extends string>(key: K, value: MetaValue<K>): void {\n    this.metadataForWrite().set(key, value)\n  }\n\n  // ── Response Helpers ────────────────────────────────────────────────\n\n  json(data: any, status = 200) {\n    return this.res.status(status).json(data)\n  }\n\n  created(data: any) {\n    return this.res.status(201).json(data)\n  }\n\n  noContent() {\n    return this.res.status(204).end()\n  }\n\n  /**\n   * @deprecated Prefer {@link ProblemSender.notFound | ctx.problem.notFound()},\n   * which emits an RFC 9457 — Problem Details response. This helper stays\n   * for backward compatibility and will not be removed.\n   */\n  notFound(message = 'Not Found') {\n    return this.res.status(404).json({ message })\n  }\n\n  /**\n   * @deprecated Prefer {@link ProblemSender.badRequest | ctx.problem.badRequest()},\n   * which emits an RFC 9457 — Problem Details response. This helper stays\n   * for backward compatibility and will not be removed.\n   */\n  badRequest(message: string) {\n    return this.res.status(400).json({ message })\n  }\n\n  // ── RFC 9457 Problem Details ───────────────────────────────────────\n\n  /**\n   * RFC 9457 — Problem Details for HTTP APIs response helper.\n   * https://datatracker.ietf.org/doc/html/rfc9457\n   *\n   * `ctx.problem(...)` sends a canonical problem-detail response with\n   * `Content-Type: application/problem+json`. The convenience methods\n   * (`ctx.problem.notFound`, `.badRequest`, etc.) pre-fill `status` +\n   * `title` for the common codes.\n   *\n   * `type` defaults to `about:blank` (§3.1.1); `title` defaults to the\n   * IANA reason phrase for `status` (§3.1.4). Extension members per §3.2\n   * pass through unchanged.\n   *\n   * @example\n   * ```ts\n   * ctx.problem({\n   *   type: 'https://api.example.com/problems/out-of-credit',\n   *   status: 403,\n   *   detail: 'Your balance is 30, but that costs 50.',\n   *   instance: `/account/${ctx.user.id}/messages/${ctx.params.id}`,\n   *   balance: 30,\n   * })\n   *\n   * ctx.problem.notFound({ detail: 'User abc not found' })\n   * ctx.problem.validation(zodResult.error.issues)\n   * ```\n   *\n   * @see {@link ProblemException} for the exception-throwing equivalent\n   * (use it from services where `ctx` isn't in scope).\n   */\n  get problem(): ProblemSender {\n    const send = (input: ProblemDetails): Response => this.sendProblem(input)\n    send.badRequest = (input: ProblemInput = {}): Response =>\n      this.sendProblem({ status: 400, ...input })\n    send.unauthorized = (input: ProblemInput = {}): Response =>\n      this.sendProblem({ status: 401, ...input })\n    send.forbidden = (input: ProblemInput = {}): Response =>\n      this.sendProblem({ status: 403, ...input })\n    send.notFound = (input: ProblemInput = {}): Response =>\n      this.sendProblem({ status: 404, ...input })\n    send.conflict = (input: ProblemInput = {}): Response =>\n      this.sendProblem({ status: 409, ...input })\n    send.unprocessable = (input: ProblemInput = {}): Response =>\n      this.sendProblem({ status: 422, ...input })\n    send.tooManyRequests = (input: ProblemInput = {}): Response =>\n      this.sendProblem({ status: 429, ...input })\n    send.internal = (input: ProblemInput = {}): Response =>\n      this.sendProblem({ status: 500, ...input })\n    send.validation = (issues: any[], input: ProblemInput = {}): Response => {\n      const errors: ValidationError[] = (issues || []).map((issue: any) => ({\n        field: issue.path?.join?.('.') ?? '',\n        message: issue.message ?? '',\n        code: issue.code,\n      }))\n      return this.sendProblem({\n        status: 422,\n        detail: issues?.[0]?.message,\n        ...input,\n        errors,\n      })\n    }\n    return send as ProblemSender\n  }\n\n  private sendProblem(input: ProblemDetails): Response {\n    const body = normalizeProblem(input)\n    this.res.setHeader('Content-Type', 'application/problem+json')\n    return this.res.status(body.status).json(body)\n  }\n\n  html(content: string, status = 200) {\n    return this.res.status(status).type('html').send(content)\n  }\n\n  download(buffer: Buffer, filename: string, contentType = 'application/octet-stream') {\n    this.res.setHeader('Content-Disposition', `attachment; filename=\"${filename}\"`)\n    this.res.setHeader('Content-Type', contentType)\n    return this.res.send(buffer)\n  }\n\n  /**\n   * Render a template using the registered view engine (EJS, Pug, Handlebars, etc.).\n   * Requires a ViewAdapter to be configured in bootstrap().\n   *\n   * @param template - Template name (without extension, relative to viewsDir)\n   * @param data - Data to pass to the template\n   *\n   * @example\n   * ```ts\n   * ctx.render('dashboard', { user, title: 'Dashboard' })\n   * ctx.render('emails/welcome', { name: 'Alice' })\n   * ```\n   */\n  render(template: string, data: Record<string, any> = {}) {\n    return this.res.render(template, data)\n  }\n\n  /**\n   * Parse query params and return a standardized paginated response.\n   * Calls `ctx.qs()` internally, then wraps your data with pagination meta.\n   *\n   * @param fetcher - Async function that receives ParsedQuery and returns `{ data, total }`\n   * @param fieldConfig - Optional whitelist for filterable, sortable, searchable fields\n   *\n   * @example\n   * ```ts\n   * @Get('/')\n   * async list(ctx: RequestContext) {\n   *   return ctx.paginate(\n   *     async (parsed) => {\n   *       const data = await db.select().from(users)\n   *         .where(query.where).limit(parsed.pagination.limit)\n   *         .offset(parsed.pagination.offset).all()\n   *       const total = await db.select({ count: count() }).from(users).get()\n   *       return { data, total: total?.count ?? 0 }\n   *     },\n   *     { filterable: ['name', 'role'], sortable: ['createdAt'] },\n   *   )\n   * }\n   * ```\n   */\n  async paginate<T, TConfig extends QueryFieldConfig | undefined = undefined>(\n    fetcher: (parsed: TypedParsedQuery<TConfig>) => Promise<{ data: T[]; total: number }>,\n    fieldConfig?: TConfig,\n  ) {\n    const parsed = this.qs<TConfig>(fieldConfig)\n    const { data, total } = await fetcher(parsed)\n    const { page, limit } = parsed.pagination\n    const totalPages = Math.ceil(total / limit) || 1\n\n    const response: PaginatedResponse<T> = {\n      data,\n      meta: {\n        page,\n        limit,\n        total,\n        totalPages,\n        hasNext: page < totalPages,\n        hasPrev: page > 1,\n      },\n    }\n\n    return this.json(response)\n  }\n\n  // ── Server-Sent Events ──────────────────────────────────────────────\n\n  /**\n   * Start an SSE (Server-Sent Events) stream.\n   * Sets the correct headers and returns helpers to send events.\n   *\n   * @example\n   * ```ts\n   * @Get('/events')\n   * async stream(ctx: RequestContext) {\n   *   const sse = ctx.sse()\n   *\n   *   const interval = setInterval(() => {\n   *     sse.send({ time: new Date().toISOString() }, 'tick')\n   *   }, 1000)\n   *\n   *   sse.onClose(() => clearInterval(interval))\n   * }\n   * ```\n   */\n  sse() {\n    this.res.writeHead(200, {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache',\n      Connection: 'keep-alive',\n      'X-Accel-Buffering': 'no',\n    })\n    this.res.flushHeaders()\n\n    const closeCallbacks: Array<() => void> = []\n\n    this.req.on('close', () => {\n      for (const cb of closeCallbacks) cb()\n    })\n\n    return {\n      /** Send an SSE event with optional event name and id */\n      send: (data: any, event?: string, id?: string) => {\n        if (id) this.res.write(`id: ${id}\\n`)\n        if (event) this.res.write(`event: ${event}\\n`)\n        this.res.write(`data: ${JSON.stringify(data)}\\n\\n`)\n      },\n      /** Send a comment (keeps connection alive) */\n      comment: (text: string) => {\n        this.res.write(`: ${text}\\n\\n`)\n      },\n      /** Register a callback when the client disconnects */\n      onClose: (fn: () => void) => {\n        closeCallbacks.push(fn)\n      },\n      /** End the SSE stream */\n      close: () => {\n        this.res.end()\n      },\n    }\n  }\n}\n\n/**\n * Short alias for `RequestContext` parameterised by a route shape.\n *\n * Use with `kick typegen`'s generated `KickRoutes` namespace for\n * fully-typed `ctx.params`, `ctx.body`, and `ctx.query`. Metadata\n * typing (`ctx.get()`, `ctx.set()`, `ctx.user`) comes from\n * `ContextMeta` augmentation and works on all `RequestContext` instances.\n *\n * @example\n * ```ts\n * @Get('/:id')\n * getUser(ctx: Ctx<KickRoutes.UserController['getUser']>) {\n *   ctx.params.id      // typed from RouteShape\n *   ctx.body           // typed from RouteShape\n *   ctx.user           // typed from ContextMeta\n *   ctx.get('tenant')  // typed from ContextMeta\n * }\n * ```\n */\nexport type Ctx<TRoute extends RouteShape = RouteShape> = RequestContext<\n  TRoute extends { body: infer B } ? B : any,\n  TRoute extends { params: infer P } ? P : any,\n  TRoute extends { query: infer Q } ? Q : any\n>\n\n/**\n * Global ambient registry of typed routes, populated by `kick typegen`.\n *\n * Each interface inside `KickRoutes` corresponds to a controller class;\n * each property is one route method on that controller. The values\n * conform to `RouteShape`.\n *\n * Empty by default — declarations come from `.kickjs/types/routes.d.ts`\n * generated alongside the rest of the typegen output.\n */\ndeclare global {\n  // eslint-disable-next-line @typescript-eslint/no-namespace\n  namespace KickRoutes {}\n}\n"],"mappings":";;;;;;;;;;kJAqCA,MAAa,aAAe,IAAI,kBAMhC,SAAgB,iBAAgC,CAC9C,IAAM,MAAQ,aAAa,SAAS,EACpC,GAAI,CAAC,MACH,MAAU,MACR,iGACF,EAEF,OAAO,KACT,CA4BA,SAAgB,gBAAkC,IAAkC,CAClF,OAAO,aAAa,SAAS,CAAC,EAAE,OAAO,IAAI,GAAG,CAChD,CC4CA,MAAM,oBAAsB,OAAO,IAAI,wCAAwC,EASzE,sBAAwB,OAAO,IAAI,0CAA0C,EAUnF,SAAS,qBAAqB,EAAyB,CACrD,GAAkB,OAAO,GAAM,WAA3B,EAAqC,MAAO,GAChD,GAAI,MAAM,QAAQ,CAAC,EAAG,MAAO,GAC7B,IAAM,MAAQ,OAAO,eAAe,CAAC,EACrC,OAAO,QAAU,OAAO,WAAa,QAAU,IACjD,CAgCA,SAAS,kBAAqB,OAAW,IAAa,MAAkB,CAEtE,GADI,QAAQ,IAAI,WAAa,cACzB,CAAC,qBAAqB,MAAM,EAAG,OAAO,OAG1C,IAAM,OAAS,IACX,MAAQ,OAAO,uBACd,QACH,MAAQ,IAAI,QACZ,OAAO,uBAAyB,OAElC,IAAM,UAAY,OACZ,OAAS,MAAM,IAAI,SAAS,EAClC,GAAI,OAAQ,OAAO,OAEnB,IAAM,WAAa,KAAc,OAAsB,CACrD,QAAQ,KACN,yBAAyB,KAAK,SAAS,MAAM,GAAG,OAAO,IAAI,EAAE,mIAGrC,MAAM,iDAChC,CACF,EAEM,MAAQ,IAAI,MAAM,UAAW,CACjC,IAAI,EAAG,KAAM,SAAU,CACrB,IAAM,MAAQ,QAAQ,IAAI,EAAG,KAAM,QAAQ,EAQ3C,OAHI,qBAAqB,KAAK,EACrB,kBAAkB,MAAO,IAAK,GAAG,MAAM,GAAG,OAAO,IAAI,GAAG,EAE1D,KACT,EACA,IAAI,GAAI,KAAM,CAEZ,OADA,UAAU,SAAU,IAAI,EACjB,EACT,EACA,eAAe,GAAI,KAAM,CAEvB,OADA,UAAU,SAAU,IAAI,EACjB,EACT,EACA,eAAe,GAAI,KAAM,CAEvB,OADA,UAAU,2BAA4B,IAAI,EACnC,EACT,CACF,CAAC,EAED,OADA,MAAM,IAAI,UAAW,KAAK,EACnB,KACT,CAwBA,IAAa,eAAb,KAAkG,CAE9E,IACA,IACA,KAHlB,YACE,IACA,IACA,KACA,CAHgB,KAAA,IAAA,IACA,KAAA,IAAA,IACA,KAAA,KAAA,IACf,CAQH,QAaA,kBAAoD,CAClD,OAAQ,aAAa,SAAS,CAAC,EAAE,QAA2C,IAC9E,CAcA,kBAA6C,CAC3C,IAAM,MAAQ,aAAa,SAAS,EACpC,GAAI,MAAO,OAAO,MAAM,OACxB,MAAU,MACR,6OAGF,CACF,CAcA,IAAI,MAAc,CAChB,OAAO,kBAAyB,KAAK,IAAI,KAAM,KAAK,IAAK,MAAM,CACjE,CAGA,IAAI,QAAkB,CACpB,OAAO,kBAA2B,KAAK,IAAI,OAAmB,KAAK,IAAK,QAAQ,CAClF,CAGA,IAAI,OAAgB,CAClB,OAAO,kBAA0B,KAAK,IAAI,MAAiB,KAAK,IAAK,OAAO,CAC9E,CAGA,IAAI,SAA8B,CAChC,OAAO,kBAAsC,KAAK,IAAI,QAAS,KAAK,IAAK,SAAS,CACpF,CAEA,IAAI,WAAgC,CAClC,OAAQ,KAAK,IAAY,WAAc,KAAK,IAAI,QAAQ,eAC1D,CAoCA,IAAI,QAAsB,CACxB,IAAM,IAAM,KAAK,IACX,OAAS,IAAI,qBACnB,GAAI,OAAQ,OAAO,OAAO,OAE1B,IAAM,KAAO,IAAI,gBACjB,IAAI,qBAAuB,KAC3B,IAAM,UAAc,KAAK,MAAM,gBAAgB,EAG/C,OAFA,KAAK,IAAI,KAAK,QAAS,KAAK,EAC5B,KAAK,IAAI,KAAK,QAAS,KAAK,EACrB,KAAK,MACd,CAGA,IAAI,SAAe,CACjB,OAAQ,KAAK,IAAY,OAC3B,CAqBA,IAAI,MAA2D,CAC7D,OAAO,KAAK,iBAAiB,CAAC,EAAE,IAAI,MAAM,GAAM,KAAK,IAAY,IACnE,CAUA,IAAI,UAA+B,CAEjC,OADU,KAAK,MACL,QACZ,CAQA,IAAI,OAAkB,CACpB,IAAM,EAAI,KAAK,KACf,OAAO,GAAG,aAAe,GAAG,OAAS,CAAC,CACxC,CAgCA,GACE,YACA,QAC2B,CAI3B,IAAM,KAAO,KAAK,QAClB,GAAI,MAAQ,KAAK,SAAW,aAAe,KAAK,UAAY,QAC1D,OAAO,KAAK,OAEd,IAAM,UAA+B,CACnC,GAAG,QACH,SACE,SAAS,WACP,WAAc,CACd,IAAM,GAAK,KAAK,UAAY,IAAI,KAAK,UAAU,IAAM,GACrD,QAAQ,KACN,GAAG,GAAG,QAAQ,UAAU,KAAK,IAAI,UAAU,MAAM,cAAc,UAAU,OAAO,EAClF,CACF,EACJ,EACM,OAAS,WACb,KAAK,IAAI,MACT,YACA,SACF,EAEA,MADA,MAAK,QAAU,CAAE,OAAQ,YAAa,QAAS,MAAO,EAC/C,MACT,CAUA,IAAI,MAAwC,CAC1C,IAAM,EAAI,KAAK,IAAI,KACnB,OAAO,EAAI,kBAAuC,EAAG,KAAK,IAAK,MAAM,EAAI,IAAA,EAC3E,CAQA,IAAI,OAA2C,CAQ7C,IAAM,EAAI,KAAK,IAAI,MACd,SAAM,QAAQ,CAAC,EACpB,OAAO,kBAAyC,EAAG,KAAK,IAAK,OAAO,CACtE,CAWA,IAAsB,IAAkC,CACtD,OAAO,KAAK,iBAAiB,CAAC,EAAE,IAAI,GAAG,CACzC,CAOA,IAAsB,IAAQ,MAA2B,CACvD,KAAK,iBAAiB,CAAC,CAAC,IAAI,IAAK,KAAK,CACxC,CAIA,KAAK,KAAW,OAAS,IAAK,CAC5B,OAAO,KAAK,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,IAAI,CAC1C,CAEA,QAAQ,KAAW,CACjB,OAAO,KAAK,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,CACvC,CAEA,WAAY,CACV,OAAO,KAAK,IAAI,OAAO,GAAG,CAAC,CAAC,IAAI,CAClC,CAOA,SAAS,QAAU,YAAa,CAC9B,OAAO,KAAK,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,CAAE,OAAQ,CAAC,CAC9C,CAOA,WAAW,QAAiB,CAC1B,OAAO,KAAK,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,CAAE,OAAQ,CAAC,CAC9C,CAkCA,IAAI,SAAyB,CAC3B,IAAM,KAAQ,OAAoC,KAAK,YAAY,KAAK,EA8BxE,MA7BA,MAAK,YAAc,MAAsB,CAAC,IACxC,KAAK,YAAY,CAAE,OAAQ,IAAK,GAAG,KAAM,CAAC,EAC5C,KAAK,cAAgB,MAAsB,CAAC,IAC1C,KAAK,YAAY,CAAE,OAAQ,IAAK,GAAG,KAAM,CAAC,EAC5C,KAAK,WAAa,MAAsB,CAAC,IACvC,KAAK,YAAY,CAAE,OAAQ,IAAK,GAAG,KAAM,CAAC,EAC5C,KAAK,UAAY,MAAsB,CAAC,IACtC,KAAK,YAAY,CAAE,OAAQ,IAAK,GAAG,KAAM,CAAC,EAC5C,KAAK,UAAY,MAAsB,CAAC,IACtC,KAAK,YAAY,CAAE,OAAQ,IAAK,GAAG,KAAM,CAAC,EAC5C,KAAK,eAAiB,MAAsB,CAAC,IAC3C,KAAK,YAAY,CAAE,OAAQ,IAAK,GAAG,KAAM,CAAC,EAC5C,KAAK,iBAAmB,MAAsB,CAAC,IAC7C,KAAK,YAAY,CAAE,OAAQ,IAAK,GAAG,KAAM,CAAC,EAC5C,KAAK,UAAY,MAAsB,CAAC,IACtC,KAAK,YAAY,CAAE,OAAQ,IAAK,GAAG,KAAM,CAAC,EAC5C,KAAK,YAAc,OAAe,MAAsB,CAAC,IAAgB,CACvE,IAAM,QAA6B,QAAU,CAAC,EAAA,CAAG,IAAK,QAAgB,CACpE,MAAO,MAAM,MAAM,OAAO,GAAG,GAAK,GAClC,QAAS,MAAM,SAAW,GAC1B,KAAM,MAAM,IACd,EAAE,EACF,OAAO,KAAK,YAAY,CACtB,OAAQ,IACR,OAAQ,SAAS,EAAE,EAAE,QACrB,GAAG,MACH,MACF,CAAC,CACH,EACO,IACT,CAEA,YAAoB,MAAiC,CACnD,IAAM,KAAO,iBAAiB,KAAK,EAEnC,OADA,KAAK,IAAI,UAAU,eAAgB,0BAA0B,EACtD,KAAK,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,KAAK,IAAI,CAC/C,CAEA,KAAK,QAAiB,OAAS,IAAK,CAClC,OAAO,KAAK,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,OAAO,CAC1D,CAEA,SAAS,OAAgB,SAAkB,YAAc,2BAA4B,CAGnF,OAFA,KAAK,IAAI,UAAU,sBAAuB,yBAAyB,SAAS,EAAE,EAC9E,KAAK,IAAI,UAAU,eAAgB,WAAW,EACvC,KAAK,IAAI,KAAK,MAAM,CAC7B,CAeA,OAAO,SAAkB,KAA4B,CAAC,EAAG,CACvD,OAAO,KAAK,IAAI,OAAO,SAAU,IAAI,CACvC,CA0BA,MAAM,SACJ,QACA,YACA,CACA,IAAM,OAAS,KAAK,GAAY,WAAW,EACrC,CAAE,KAAM,OAAU,MAAM,QAAQ,MAAM,EACtC,CAAE,KAAM,OAAU,OAAO,WACzB,WAAa,KAAK,KAAK,MAAQ,KAAK,GAAK,EAEzC,SAAiC,CACrC,KACA,KAAM,CACJ,KACA,MACA,MACA,WACA,QAAS,KAAO,WAChB,QAAS,KAAO,CAClB,CACF,EAEA,OAAO,KAAK,KAAK,QAAQ,CAC3B,CAsBA,KAAM,CACJ,KAAK,IAAI,UAAU,IAAK,CACtB,eAAgB,oBAChB,gBAAiB,WACjB,WAAY,aACZ,oBAAqB,IACvB,CAAC,EACD,KAAK,IAAI,aAAa,EAEtB,IAAM,eAAoC,CAAC,EAM3C,OAJA,KAAK,IAAI,GAAG,YAAe,CACzB,IAAK,IAAM,MAAM,eAAgB,GAAG,CACtC,CAAC,EAEM,CAEL,MAAO,KAAW,MAAgB,KAAgB,CAC5C,IAAI,KAAK,IAAI,MAAM,OAAO,GAAG,GAAG,EAChC,OAAO,KAAK,IAAI,MAAM,UAAU,MAAM,GAAG,EAC7C,KAAK,IAAI,MAAM,SAAS,KAAK,UAAU,IAAI,EAAE,KAAK,CACpD,EAEA,QAAU,MAAiB,CACzB,KAAK,IAAI,MAAM,KAAK,KAAK,KAAK,CAChC,EAEA,QAAU,IAAmB,CAC3B,eAAe,KAAK,EAAE,CACxB,EAEA,UAAa,CACX,KAAK,IAAI,IAAI,CACf,CACF,CACF,CACF"}