@geekmidas/constructs 10.0.0-alpha.10 → 10.0.0-alpha.100

package/dist/{HonoEndpointAdaptor-P1ahhZHu.mjs → HonoEndpointAdaptor-PtPlbeKY.mjs}

@@ -1,19 +1,17 @@
-import { Endpoint, ResponseBuilder } from "./Endpoint-DCQPMdUX.mjs";
-import { createHonoCookies, createHonoHeaders, publishConstructEvents } from "./lazyAccessors-BoJN3SMd.mjs";
-import { createAuditContext, executeWithAuditTransaction } from "./processAudits-Dmts9H_b.mjs";
+import { i as publishConstructEvents } from "./functions-BFizikJU.mjs";
+import { n as ResponseBuilder, t as Endpoint } from "./Endpoint-BG4UJ9oA.mjs";
+import { a as createHonoHeaders, i as createHonoCookies } from "./lazyAccessors-CFanua0O.mjs";
+import { i as loadRls, n as executeWithAuditTransaction, r as loadRateLimit, t as createAuditContext } from "./processAudits-BRRVVHUB.mjs";
 import { wrapError } from "@geekmidas/errors";
 import { ServiceDiscovery, runWithRequestContext } from "@geekmidas/services";
-import { withRlsContext } from "@geekmidas/db/rls";
-import qs from "qs";
 import { setCookie } from "hono/cookie";
-import { checkRateLimit, getRateLimitHeaders } from "@geekmidas/rate-limit";
 import { Hono } from "hono";
 import { logger } from "hono/logger";
 import { timing } from "hono/timing";
 import { validator } from "hono/validator";
 import path from "node:path";
 import fg from "fast-glob";
-
+import qs from "qs";
 //#region src/endpoints/helpers.ts
 /**
 * Discovers and imports all Endpoint instances from the specified route patterns.
@@ -47,8 +45,7 @@ async function getEndpointsFromRoutes(routes, cwd) {
 	const stream = fg.stream(routes, { cwd });
 	const endpoints = [];
 	for await (const f of stream) {
-		const routePath = path.resolve(cwd, f.toString());
-		const route = await import(routePath);
+		const route = await import(path.resolve(cwd, f.toString()));
 		const handlers = Object.values(route).filter((value) => {
 			return Endpoint.isEndpoint(value);
 		});
@@ -56,7 +53,6 @@ async function getEndpointsFromRoutes(routes, cwd) {
 	}
 	return endpoints;
 }
-
 //#endregion
 //#region src/endpoints/parseHonoQuery.ts
 /**
@@ -70,7 +66,6 @@ function parseHonoQuery(c) {
 	const queryString = url.slice(queryIndex + 1);
 	return qs.parse(queryString);
 }
-
 //#endregion
 //#region src/endpoints/HonoEndpointAdaptor.ts
 /**
@@ -97,12 +92,13 @@ function analyzeEndpointFeatures(endpoint) {
 	};
 }
 var HonoEndpoint = class HonoEndpoint {
+	endpoint;
 	constructor(endpoint) {
 		this.endpoint = endpoint;
 	}
 	static isDev = process.env.NODE_ENV === "development";
 	static async validate(c, data, schema) {
-		if (!schema) return void 0;
+		if (!schema) return;
 		const parsed = await Endpoint.validate(schema, data);
 		if (parsed.issues) return c.json(parsed.issues, 422);
 		return parsed.value;
@@ -157,7 +153,7 @@ var HonoEndpoint = class HonoEndpoint {
 		const handler = async (c) => {
 			const startTime = Date.now();
 			const requestId = c.req.header("X-Request-ID") ?? crypto.randomUUID();
-			const logger$1 = endpoint.logger.child({
+			const logger = endpoint.logger.child({
 				requestId,
 				endpoint: endpoint.fullPath,
 				route: endpoint.route,
@@ -167,9 +163,10 @@ var HonoEndpoint = class HonoEndpoint {
 			});
 			c.header("X-Request-ID", requestId);
 			return runWithRequestContext({
-				logger: logger$1,
+				logger,
 				requestId,
-				startTime
+				startTime,
+				operation: `${endpoint.method} ${endpoint.route}`
 			}, async () => {
 				try {
 					const header = createHonoHeaders(c);
@@ -178,61 +175,59 @@ var HonoEndpoint = class HonoEndpoint {
 					const rawDb = features.hasDatabase ? await serviceDiscovery.register([endpoint.databaseService]).then((s) => s[endpoint.databaseService?.serviceName]) : void 0;
 					const session = await endpoint.getSession({
 						services,
-						logger: logger$1,
+						logger,
 						header,
 						cookie,
 						...rawDb !== void 0 && { db: rawDb }
 					});
-					const isAuthorized = await endpoint.authorize({
+					if (!await endpoint.authorize({
 						header,
 						cookie,
 						services,
-						logger: logger$1,
+						logger,
 						session,
 						...rawDb !== void 0 && { db: rawDb },
 						body: features.hasBodyValidation ? c.req.valid("json") : void 0,
 						query: features.hasQueryValidation ? c.req.valid("query") : void 0,
 						params: features.hasParamValidation ? c.req.valid("param") : void 0
-					});
-					if (!isAuthorized) {
-						logger$1.warn("Forbidden access attempt");
+					})) {
+						logger.warn("Forbidden access attempt");
 						return c.json({ error: "Forbidden" }, 403);
 					}
 					if (features.hasRateLimit) {
-						const rateLimitInfo = await checkRateLimit(endpoint.rateLimit, {
+						const { checkRateLimit, getRateLimitHeaders } = await loadRateLimit();
+						const rateLimitHeaders = getRateLimitHeaders(await checkRateLimit(endpoint.rateLimit, {
 							header,
 							services,
-							logger: logger$1,
+							logger,
 							session,
 							path: c.req.path,
 							method: endpoint.method
-						});
-						const rateLimitHeaders = getRateLimitHeaders(rateLimitInfo, endpoint.rateLimit);
+						}), endpoint.rateLimit);
 						for (const [key, value] of Object.entries(rateLimitHeaders)) if (value) c.header(key, value);
 					}
-					const auditContext = features.hasAudits ? await createAuditContext(endpoint, serviceDiscovery, logger$1, {
+					const auditContext = features.hasAudits ? await createAuditContext(endpoint, serviceDiscovery, logger, {
 						session,
 						header,
 						cookie,
 						services
 					}) : void 0;
 					const audits = features.hasAudits ? endpoint.audits : [];
-					if (features.hasAudits && !auditContext) logger$1.warn("No auditor storage service available");
+					if (features.hasAudits && !auditContext) logger.warn("No auditor storage service available");
 					const rlsContext = features.hasRls && rawDb !== void 0 ? await endpoint.rlsConfig?.extractor({
 						services,
 						session,
 						header,
 						cookie,
-						logger: logger$1
+						logger
 					}) : void 0;
-					const result = await executeWithAuditTransaction(auditContext, async (auditor) => {
-						const sameDatabase = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === endpoint.databaseService?.serviceName;
-						const baseDb = sameDatabase ? auditor?.getTransaction?.() ?? rawDb : rawDb;
+					const { output, metadata } = await executeWithAuditTransaction(auditContext, async (auditor) => {
+						const baseDb = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === endpoint.databaseService?.serviceName ? auditor?.getTransaction?.() ?? rawDb : rawDb;
 						const executeHandler = async (db) => {
 							const responseBuilder = new ResponseBuilder();
 							const response = await endpoint.handler({
 								services,
-								logger: logger$1,
+								logger,
 								body: features.hasBodyValidation ? c.req.valid("json") : void 0,
 								query: features.hasQueryValidation ? c.req.valid("query") : void 0,
 								params: features.hasParamValidation ? c.req.valid("param") : void 0,
@@ -243,40 +238,41 @@ var HonoEndpoint = class HonoEndpoint {
 								db
 							}, responseBuilder);
 							let data = response;
-							let metadata$1 = responseBuilder.getMetadata();
+							let metadata = responseBuilder.getMetadata();
 							if (Endpoint.hasMetadata(response)) {
 								data = response.data;
-								metadata$1 = response.metadata;
+								metadata = response.metadata;
 							}
-							const output$1 = endpoint.outputSchema ? await endpoint.parseOutput(data) : void 0;
 							return {
-								output: output$1,
-								metadata: metadata$1,
+								output: endpoint.outputSchema ? await endpoint.parseOutput(data) : void 0,
+								metadata,
 								responseBuilder
 							};
 						};
-						if (features.hasRls && rlsContext && baseDb) return withRlsContext(baseDb, rlsContext, async (trx) => executeHandler(trx), { prefix: endpoint.rlsConfig?.prefix });
+						if (features.hasRls && rlsContext && baseDb) {
+							const { withRlsContext } = await loadRls();
+							return withRlsContext(baseDb, rlsContext, async (trx) => executeHandler(trx), { prefix: endpoint.rlsConfig?.prefix });
+						}
 						return executeHandler(baseDb);
-					}, async (result$1, auditor) => {
+					}, async (result, auditor) => {
 						if (!audits?.length) return;
 						for (const audit of audits) {
-							if (audit.when && !audit.when(result$1.output)) continue;
-							const payload = audit.payload(result$1.output);
-							const entityId = audit.entityId?.(result$1.output);
+							if (audit.when && !audit.when(result.output)) continue;
+							const payload = audit.payload(result.output);
+							const entityId = audit.entityId?.(result.output);
 							auditor.audit(audit.type, payload, {
 								table: audit.table,
 								entityId
 							});
 						}
 					}, { db: rawDb });
-					const { output, metadata } = result;
 					try {
 						let status = endpoint.status;
 						if (metadata.status) status = metadata.status;
 						if (metadata.headers) for (const [key, value] of Object.entries(metadata.headers)) c.header(key, value);
 						if (metadata.cookies) for (const [name, { value, options }] of metadata.cookies) setCookie(c, name, value, options);
-						if (features.hasEvents && Endpoint.isSuccessStatus(status)) await publishConstructEvents(endpoint, output, serviceDiscovery, logger$1);
-						if (HonoEndpoint.isDev) logger$1.info({
+						if (features.hasEvents && Endpoint.isSuccessStatus(status)) await publishConstructEvents(endpoint, output, serviceDiscovery, logger);
+						if (HonoEndpoint.isDev) logger.info({
 							status,
 							body: output
 						}, "Outgoing response");
@@ -284,22 +280,25 @@ var HonoEndpoint = class HonoEndpoint {
 						if (!(metadata.headers && hasContentTypeHeader(metadata.headers))) c.header("content-type", endpoint.responseType);
 						return c.body(output, status);
 					} catch (validationError) {
-						logger$1.error(validationError, "Output validation failed");
+						logger.error({ err: validationError }, "Output validation failed");
 						const error = wrapError(validationError, 422, "Response validation failed");
-						if (HonoEndpoint.isDev) logger$1.info({
+						const body = errorBody(error);
+						if (HonoEndpoint.isDev) logger.info({
 							status: error.statusCode,
-							body: error
+							body
 						}, "Outgoing response");
-						return c.json(error, error.statusCode);
+						return c.json(body, error.statusCode);
 					}
 				} catch (e) {
-					logger$1.error(e, "Error processing endpoint request");
+					logger.error({ err: e }, "Error processing endpoint request");
 					const error = wrapError(e, 500, "Internal Server Error");
-					if (HonoEndpoint.isDev) logger$1.info({
+					if (error.statusCode >= 500 && e instanceof Error) c.error = e;
+					const body = errorBody(error);
+					if (HonoEndpoint.isDev) logger.info({
 						status: error.statusCode,
-						body: error
+						body
 					}, "Outgoing response");
-					return c.json(error, error.statusCode);
+					return c.json(body, error.statusCode);
 				}
 			});
 		};
@@ -316,7 +315,27 @@ var HonoEndpoint = class HonoEndpoint {
 		});
 	}
 };
-
+/**
+* What a client is told about a failed request: what went wrong, and the stack
+* only under `gkm dev`. A server's stack is its file layout and its
+* dependencies' versions — for the person debugging it, not for whoever sent
+* the request. A server failure's details are the error it wrapped (an
+* environment variable it could not read, a query that failed), so they go to
+* the log and not the response either; a 4xx's details are the client's.
+*/
+function errorBody(error) {
+	const internal = error.statusCode >= 500 && !HonoEndpoint.isDev;
+	return {
+		name: error.name,
+		message: error.message,
+		statusCode: error.statusCode,
+		statusMessage: error.statusMessage,
+		code: error.code,
+		...internal ? {} : { details: error.details },
+		...HonoEndpoint.isDev ? { stack: error.stack } : {}
+	};
+}
 //#endregion
-export { HonoEndpoint };
-//# sourceMappingURL=HonoEndpointAdaptor-P1ahhZHu.mjs.map
+export { HonoEndpoint as t };
+
+//# sourceMappingURL=HonoEndpointAdaptor-PtPlbeKY.mjs.map

package/dist/HonoEndpointAdaptor-PtPlbeKY.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"HonoEndpointAdaptor-PtPlbeKY.mjs","names":["honoLogger"],"sources":["../src/endpoints/helpers.ts","../src/endpoints/parseHonoQuery.ts","../src/endpoints/HonoEndpointAdaptor.ts"],"sourcesContent":["import path from 'node:path';\nimport type { Service } from '@geekmidas/services';\nimport fg from 'fast-glob';\nimport type { HttpMethod } from '../types';\nimport { Endpoint } from './Endpoint';\n\n// Re-export utility functions\n\n/**\n * Recursively finds the project root directory by looking for lock files.\n * Traverses up the directory tree until it finds a package manager lock file.\n *\n * @param cwd - The current working directory to start searching from\n * @returns Promise resolving to the absolute path of the project root\n *\n * @example\n * ```typescript\n * const projectRoot = await getProjectRoot(process.cwd());\n * console.log(`Project root: ${projectRoot}`);\n * // Output: Project root: /Users/user/my-project\n * ```\n */\nexport async function getProjectRoot(cwd: string): Promise<string> {\n\tif (cwd === '/') {\n\t\treturn cwd;\n\t}\n\n\tconst stream = fg.stream(\n\t\t['yarn.lock', 'pnpm-lock.yaml', 'package-lock.json', 'deno.lock'],\n\t\t{ dot: true, cwd },\n\t);\n\n\tlet isRoot = false;\n\n\tfor await (const _ of stream) {\n\t\tisRoot = true;\n\t\tbreak;\n\t}\n\n\tif (isRoot) {\n\t\treturn cwd;\n\t}\n\n\treturn getProjectRoot(path.resolve(cwd, '..'));\n}\n\n/**\n * Discovers and imports all Endpoint instances from the specified route patterns.\n * Uses fast-glob to find files matching the patterns and extracts exported Endpoints.\n *\n * @template TServices - Array of service types used by the endpoints\n * @param routes - Array of glob patterns to match route files (e.g., ['src/routes/*.ts'])\n * @param cwd - The current working directory to resolve paths from\n * @returns Promise resolving to an array of Endpoint instances found in the matched files\n *\n * @example\n * ```typescript\n * // Find all endpoints in the routes directory\n * const endpoints = await getEndpointsFromRoutes(\n *   ['src/routes/**\\/*.ts'],\n *   process.cwd()\n * );\n *\n * // Register endpoints with your server\n * for (const endpoint of endpoints) {\n *   server.register(endpoint);\n * }\n * ```\n *\n * @remarks\n * - Only exports that are valid Endpoint instances are included\n * - Files are imported dynamically, so they must be valid ES modules\n * - The function filters out non-Endpoint exports automatically\n */\nexport async function getEndpointsFromRoutes<TServices extends Service[]>(\n\troutes: string[],\n\tcwd: string,\n): Promise<Endpoint<string, HttpMethod, any, any, TServices>[]> {\n\tconst stream = fg.stream(routes, { cwd });\n\n\tconst endpoints: Endpoint<string, HttpMethod, any, any, TServices>[] = [];\n\n\tfor await (const f of stream) {\n\t\t// Resolve the absolute path for the route file\n\t\tconst routePath = path.resolve(cwd, f.toString());\n\t\t// Dynamically import the route module\n\t\tconst route = await import(routePath);\n\n\t\t// Filter exported values to find only Endpoint instances\n\t\tconst handlers = Object.values(route).filter((value) => {\n\t\t\treturn Endpoint.isEndpoint(value);\n\t\t}) as unknown as Endpoint<string, HttpMethod, any, any, TServices>[];\n\n\t\tendpoints.push(...handlers);\n\t}\n\n\treturn endpoints;\n}\n","import type { Context } from 'hono';\nimport qs from 'qs';\n\n/**\n * Parse Hono query parameters using qs bracket notation\n * Supports nested objects, arrays, and deep nesting via standard bracket syntax\n */\nexport function parseHonoQuery(c: Context): Record<string, any> {\n\tconst url = c.req.url;\n\tconst queryIndex = url.indexOf('?');\n\tif (queryIndex === -1) {\n\t\treturn {};\n\t}\n\tconst queryString = url.slice(queryIndex + 1);\n\treturn qs.parse(queryString) as Record<string, any>;\n}\n","import type { AuditableAction, AuditStorage } from '@geekmidas/audit';\nimport type { EnvironmentParser } from '@geekmidas/envkit';\nimport { type HttpError, wrapError } from '@geekmidas/errors';\nimport type { EventPublisher } from '@geekmidas/events';\nimport type { Logger } from '@geekmidas/logger';\nimport {\n\trunWithRequestContext,\n\ttype Service,\n\tServiceDiscovery,\n\ttype ServiceRecord,\n} from '@geekmidas/services';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport { type Context, Hono } from 'hono';\nimport { setCookie } from 'hono/cookie';\nimport { logger as honoLogger } from 'hono/logger';\nimport { timing } from 'hono/timing';\nimport type { ContentfulStatusCode } from 'hono/utils/http-status';\nimport { validator } from 'hono/validator';\nimport { publishConstructEvents } from '../publisher';\nimport type { HttpMethod, LowerHttpMethod } from '../types';\nimport type { MappedAudit } from './audit';\nimport {\n\tEndpoint,\n\ttype EndpointContext,\n\ttype EndpointSchemas,\n\tResponseBuilder,\n} from './Endpoint';\nimport { getEndpointsFromRoutes } from './helpers';\nimport { createHonoCookies, createHonoHeaders } from './lazyAccessors';\nimport { loadRateLimit, loadRls } from './optionalPeers';\nimport { parseHonoQuery } from './parseHonoQuery';\nimport {\n\tcreateAuditContext,\n\texecuteWithAuditTransaction,\n} from './processAudits';\n\nexport interface HonoEndpointOptions {\n\t/**\n\t * Path where OpenAPI documentation will be served.\n\t * Set to false to disable docs route.\n\t * @default '/docs'\n\t */\n\tdocsPath?: string | false;\n\t/**\n\t * OpenAPI schema options\n\t */\n\topenApiOptions?: {\n\t\ttitle?: string;\n\t\tversion?: string;\n\t\tdescription?: string;\n\t};\n}\n\n/**\n * Feature flags for an endpoint, analyzed once at route registration time.\n * This avoids per-request feature detection overhead.\n */\ninterface EndpointFeatures {\n\thasServices: boolean;\n\thasDatabase: boolean;\n\thasBodyValidation: boolean;\n\thasQueryValidation: boolean;\n\thasParamValidation: boolean;\n\thasAudits: boolean;\n\thasEvents: boolean;\n\thasRateLimit: boolean;\n\thasRls: boolean;\n}\n\n/**\n * Case-insensitive check for a `content-type` header in a metadata headers map.\n */\nfunction hasContentTypeHeader(headers: Record<string, string>): boolean {\n\tfor (const key of Object.keys(headers)) {\n\t\tif (key.toLowerCase() === 'content-type') return true;\n\t}\n\treturn false;\n}\n\n/**\n * Analyze endpoint features at registration time (not per-request)\n */\nfunction analyzeEndpointFeatures(\n\tendpoint: Endpoint<\n\t\tany,\n\t\tany,\n\t\tany,\n\t\tany,\n\t\tany,\n\t\tany,\n\t\tany,\n\t\tany,\n\t\tany,\n\t\tany,\n\t\tany,\n\t\tany\n\t>,\n): EndpointFeatures {\n\treturn {\n\t\thasServices: endpoint.services.length > 0,\n\t\thasDatabase: !!endpoint.databaseService,\n\t\thasBodyValidation: !!endpoint.input?.body,\n\t\thasQueryValidation: !!endpoint.input?.query,\n\t\thasParamValidation: !!endpoint.input?.params,\n\t\t// Audit context needed if declarative audits OR auditor storage service configured (for manual audits)\n\t\thasAudits:\n\t\t\t(endpoint.audits?.length ?? 0) > 0 || !!endpoint.auditorStorageService,\n\t\thasEvents: (endpoint.events?.length ?? 0) > 0,\n\t\thasRateLimit: !!endpoint.rateLimit,\n\t\thasRls: !!endpoint.rlsConfig && !endpoint.rlsBypass,\n\t};\n}\n\nexport class HonoEndpoint<\n\tTRoute extends string,\n\tTMethod extends HttpMethod,\n\tTInput extends EndpointSchemas = {},\n\tTOutSchema extends StandardSchemaV1 | undefined = undefined,\n\tTServices extends Service[] = [],\n\tTLogger extends Logger = Logger,\n\tTSession = unknown,\n\tTAuditStorage extends AuditStorage | undefined = undefined,\n\tTAuditStorageServiceName extends string = string,\n\tTAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n\t\tstring,\n\t\tunknown\n\t>,\n\tTDatabase = undefined,\n\tTDatabaseServiceName extends string = string,\n> {\n\tconstructor(\n\t\tprivate readonly endpoint: Endpoint<\n\t\t\tTRoute,\n\t\t\tTMethod,\n\t\t\tTInput,\n\t\t\tTOutSchema,\n\t\t\tTServices,\n\t\t\tTLogger,\n\t\t\tTSession,\n\t\t\tTAuditStorage,\n\t\t\tTAuditStorageServiceName,\n\t\t\tTAuditAction,\n\t\t\tTDatabase,\n\t\t\tTDatabaseServiceName\n\t\t>,\n\t) {}\n\n\tstatic isDev = process.env.NODE_ENV === 'development';\n\n\tstatic async validate<T extends StandardSchemaV1>(\n\t\tc: Context<any, string, {}>,\n\t\tdata: unknown,\n\t\tschema?: T,\n\t) {\n\t\tif (!schema) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst parsed = await Endpoint.validate(schema, data);\n\n\t\tif (parsed.issues) {\n\t\t\treturn c.json(parsed.issues, 422);\n\t\t}\n\n\t\treturn parsed.value;\n\t}\n\taddRoute(\n\t\tserviceDiscovery: ServiceDiscovery<ServiceRecord<TServices>>,\n\t\tapp: Hono,\n\t): void {\n\t\tHonoEndpoint.addRoute(this.endpoint, serviceDiscovery, app);\n\t}\n\n\t/**\n\t * @deprecated Global event middleware is no longer used.\n\t * Events are now published per-route only for endpoints that have events configured.\n\t * This method is kept for backward compatibility but does nothing.\n\t */\n\tstatic applyEventMiddleware(\n\t\t_app: Hono,\n\t\t_serviceDiscovery: ServiceDiscovery<any>,\n\t) {\n\t\t// No-op: Event publishing is now handled per-route in addRoute\n\t\t// This avoids running middleware on every request including 404s\n\t}\n\n\tstatic async fromRoutes<TLogger extends Logger, TServices extends Service[]>(\n\t\troutes: string[],\n\t\tenvParser: EnvironmentParser<{}>,\n\t\tapp = new Hono(),\n\t\t_logger: TLogger,\n\t\tcwd = process.cwd(),\n\t\toptions?: HonoEndpointOptions,\n\t): Promise<Hono> {\n\t\tconst endpoints = await getEndpointsFromRoutes<TServices>(routes, cwd);\n\t\tconst serviceDiscovery =\n\t\t\tServiceDiscovery.getInstance<ServiceRecord<TServices>>(envParser);\n\n\t\tHonoEndpoint.addRoutes(endpoints, serviceDiscovery, app, options);\n\n\t\treturn app;\n\t}\n\n\tstatic addRoutes<\n\t\tTServices extends Service[] = [],\n\t\tTLogger extends Logger = Logger,\n\t>(\n\t\tendpoints: Endpoint<string, HttpMethod, any, any, TServices, TLogger>[],\n\t\tserviceDiscovery: ServiceDiscovery<ServiceRecord<TServices>>,\n\t\tapp: Hono,\n\t\toptions?: HonoEndpointOptions,\n\t): void {\n\t\t// Add timing middleware (always enabled)\n\t\tapp.use('*', timing());\n\n\t\t// Add logger middleware in development mode\n\n\t\tif (HonoEndpoint.isDev) {\n\t\t\tapp.use('*', honoLogger());\n\t\t}\n\n\t\t// Add docs route if not disabled\n\t\tconst docsPath =\n\t\t\toptions?.docsPath !== false ? options?.docsPath || '/docs' : null;\n\t\tif (docsPath) {\n\t\t\tHonoEndpoint.addDocsRoute(\n\t\t\t\tendpoints,\n\t\t\t\tapp,\n\t\t\t\tdocsPath,\n\t\t\t\toptions?.openApiOptions,\n\t\t\t);\n\t\t}\n\n\t\t// Sort endpoints to ensure static routes come before dynamic ones\n\t\tconst sortedEndpoints = endpoints.sort((a, b) => {\n\t\t\tconst aSegments = a.route.split('/');\n\t\t\tconst bSegments = b.route.split('/');\n\n\t\t\t// Compare each segment\n\t\t\tfor (let i = 0; i < Math.max(aSegments.length, bSegments.length); i++) {\n\t\t\t\tconst aSegment = aSegments[i] || '';\n\t\t\t\tconst bSegment = bSegments[i] || '';\n\n\t\t\t\t// If one is dynamic and the other is not, static comes first\n\t\t\t\tconst aIsDynamic = aSegment.startsWith(':');\n\t\t\t\tconst bIsDynamic = bSegment.startsWith(':');\n\n\t\t\t\tif (!aIsDynamic && bIsDynamic) return -1;\n\t\t\t\tif (aIsDynamic && !bIsDynamic) return 1;\n\n\t\t\t\t// If both are the same type, compare alphabetically\n\t\t\t\tif (aSegment !== bSegment) {\n\t\t\t\t\treturn aSegment.localeCompare(bSegment);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn 0;\n\t\t});\n\n\t\t// Note: Global event middleware removed for performance\n\t\t// Events are now published per-route only for endpoints with events configured\n\t\tfor (const endpoint of sortedEndpoints) {\n\t\t\tHonoEndpoint.addRoute(endpoint, serviceDiscovery, app);\n\t\t}\n\t}\n\n\t// biome-ignore lint/suspicious/useAdjacentOverloadSignatures: not an overload — the instance `addRoute` above registers this adaptor's own endpoint, this one registers any endpoint on a given app. They share a name because they do the same thing to different subjects.\n\tstatic addRoute<\n\t\tTRoute extends string,\n\t\tTMethod extends HttpMethod,\n\t\tTInput extends EndpointSchemas = {},\n\t\tTOutSchema extends StandardSchemaV1 | undefined = undefined,\n\t\tTServices extends Service[] = [],\n\t\tTLogger extends Logger = Logger,\n\t\tTSession = unknown,\n\t\tTAuditStorage extends AuditStorage | undefined = undefined,\n\t\tTAuditStorageServiceName extends string = string,\n\t\tTAuditAction extends AuditableAction<string, unknown> = AuditableAction<\n\t\t\tstring,\n\t\t\tunknown\n\t\t>,\n\t\tTDatabase = undefined,\n\t\tTDatabaseServiceName extends string = string,\n\t>(\n\t\tendpoint: Endpoint<\n\t\t\tTRoute,\n\t\t\tTMethod,\n\t\t\tTInput,\n\t\t\tTOutSchema,\n\t\t\tTServices,\n\t\t\tTLogger,\n\t\t\tTSession,\n\t\t\tTAuditStorage,\n\t\t\tTAuditStorageServiceName,\n\t\t\tTAuditAction,\n\t\t\tTDatabase,\n\t\t\tTDatabaseServiceName\n\t\t>,\n\t\tserviceDiscovery: ServiceDiscovery<ServiceRecord<TServices>>,\n\t\tapp: Hono,\n\t): void {\n\t\tconst { route } = endpoint;\n\t\tconst method = endpoint.method.toLowerCase() as LowerHttpMethod<TMethod>;\n\n\t\t// Analyze endpoint features once at registration time (not per-request)\n\t\tconst features = analyzeEndpointFeatures(endpoint);\n\n\t\t// Build validators array - only add validators for schemas that exist\n\t\tconst validators: any[] = [];\n\n\t\tif (features.hasBodyValidation) {\n\t\t\tvalidators.push(\n\t\t\t\tvalidator('json', (value, c) =>\n\t\t\t\t\tHonoEndpoint.validate(c, value, endpoint.input?.body),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\n\t\tif (features.hasQueryValidation) {\n\t\t\tvalidators.push(\n\t\t\t\tvalidator('query', (_, c) => {\n\t\t\t\t\tconst parsedQuery = parseHonoQuery(c);\n\t\t\t\t\treturn HonoEndpoint.validate(c, parsedQuery, endpoint.input?.query);\n\t\t\t\t}),\n\t\t\t);\n\t\t}\n\n\t\tif (features.hasParamValidation) {\n\t\t\tvalidators.push(\n\t\t\t\tvalidator('param', (params, c) =>\n\t\t\t\t\tHonoEndpoint.validate(c, params, endpoint.input?.params),\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\n\t\t// Main handler\n\t\tconst handler = async (c: Context) => {\n\t\t\t// Request context setup\n\t\t\tconst startTime = Date.now();\n\t\t\tconst requestId = c.req.header('X-Request-ID') ?? crypto.randomUUID();\n\n\t\t\tconst logger = endpoint.logger.child({\n\t\t\t\trequestId,\n\t\t\t\tendpoint: endpoint.fullPath,\n\t\t\t\troute: endpoint.route,\n\t\t\t\thost: c.req.header('host'),\n\t\t\t\tmethod: endpoint.method,\n\t\t\t\tpath: c.req.path,\n\t\t\t}) as TLogger;\n\n\t\t\t// Set response header\n\t\t\tc.header('X-Request-ID', requestId);\n\n\t\t\t// Wrap entire handler in request context for services to access\n\t\t\treturn runWithRequestContext(\n\t\t\t\t{\n\t\t\t\t\tlogger,\n\t\t\t\t\trequestId,\n\t\t\t\t\tstartTime,\n\t\t\t\t\toperation: `${endpoint.method} ${endpoint.route}`,\n\t\t\t\t},\n\t\t\t\tasync () => {\n\t\t\t\t\ttry {\n\t\t\t\t\t\t// Lazy accessors - no upfront parsing, use native Hono methods\n\t\t\t\t\t\tconst header = createHonoHeaders(c);\n\t\t\t\t\t\tconst cookie = createHonoCookies(c);\n\n\t\t\t\t\t\t// Only register services if endpoint has any\n\t\t\t\t\t\tconst services = features.hasServices\n\t\t\t\t\t\t\t? await serviceDiscovery.register(endpoint.services)\n\t\t\t\t\t\t\t: ({} as ServiceRecord<TServices>);\n\n\t\t\t\t\t\t// Resolve database service only if configured\n\t\t\t\t\t\tconst rawDb = features.hasDatabase\n\t\t\t\t\t\t\t? await serviceDiscovery\n\t\t\t\t\t\t\t\t\t.register([endpoint.databaseService!])\n\t\t\t\t\t\t\t\t\t.then(\n\t\t\t\t\t\t\t\t\t\t(s) =>\n\t\t\t\t\t\t\t\t\t\t\ts[\n\t\t\t\t\t\t\t\t\t\t\t\tendpoint.databaseService?.serviceName as keyof typeof s\n\t\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t: undefined;\n\n\t\t\t\t\t\t// Extract session (defaults to empty object)\n\t\t\t\t\t\tconst session = await endpoint.getSession({\n\t\t\t\t\t\t\tservices,\n\t\t\t\t\t\t\tlogger,\n\t\t\t\t\t\t\theader,\n\t\t\t\t\t\t\tcookie,\n\t\t\t\t\t\t\t...(rawDb !== undefined && { db: rawDb }),\n\t\t\t\t\t\t} as any);\n\n\t\t\t\t\t\t// Check authorization (defaults to true)\n\t\t\t\t\t\tconst isAuthorized = await endpoint.authorize({\n\t\t\t\t\t\t\theader,\n\t\t\t\t\t\t\tcookie,\n\t\t\t\t\t\t\tservices,\n\t\t\t\t\t\t\tlogger,\n\t\t\t\t\t\t\tsession,\n\t\t\t\t\t\t\t...(rawDb !== undefined && { db: rawDb }),\n\t\t\t\t\t\t\tbody: features.hasBodyValidation\n\t\t\t\t\t\t\t\t? (c.req.valid as any)('json')\n\t\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\t\t\tquery: features.hasQueryValidation\n\t\t\t\t\t\t\t\t? (c.req.valid as any)('query')\n\t\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\t\t\tparams: features.hasParamValidation\n\t\t\t\t\t\t\t\t? (c.req.valid as any)('param')\n\t\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\t\t} as any);\n\n\t\t\t\t\t\tif (!isAuthorized) {\n\t\t\t\t\t\t\tlogger.warn('Forbidden access attempt');\n\t\t\t\t\t\t\treturn c.json({ error: 'Forbidden' }, 403);\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\t// Check rate limit only if configured\n\t\t\t\t\t\tif (features.hasRateLimit) {\n\t\t\t\t\t\t\tconst { checkRateLimit, getRateLimitHeaders } =\n\t\t\t\t\t\t\t\tawait loadRateLimit();\n\t\t\t\t\t\t\tconst rateLimitInfo = await checkRateLimit(endpoint.rateLimit!, {\n\t\t\t\t\t\t\t\theader,\n\t\t\t\t\t\t\t\tservices,\n\t\t\t\t\t\t\t\tlogger,\n\t\t\t\t\t\t\t\tsession,\n\t\t\t\t\t\t\t\tpath: c.req.path,\n\t\t\t\t\t\t\t\tmethod: endpoint.method,\n\t\t\t\t\t\t\t});\n\n\t\t\t\t\t\t\tconst rateLimitHeaders = getRateLimitHeaders(\n\t\t\t\t\t\t\t\trateLimitInfo,\n\t\t\t\t\t\t\t\tendpoint.rateLimit!,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tfor (const [key, value] of Object.entries(rateLimitHeaders)) {\n\t\t\t\t\t\t\t\tif (value) {\n\t\t\t\t\t\t\t\t\tc.header(key, value);\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\t// Create audit context only if audits are configured\n\t\t\t\t\t\tconst auditContext = features.hasAudits\n\t\t\t\t\t\t\t? await createAuditContext(\n\t\t\t\t\t\t\t\t\tendpoint as any,\n\t\t\t\t\t\t\t\t\tserviceDiscovery,\n\t\t\t\t\t\t\t\t\tlogger,\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\tsession,\n\t\t\t\t\t\t\t\t\t\theader,\n\t\t\t\t\t\t\t\t\t\tcookie,\n\t\t\t\t\t\t\t\t\t\tservices: services as Record<string, unknown>,\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t: undefined;\n\n\t\t\t\t\t\tconst audits = features.hasAudits\n\t\t\t\t\t\t\t? (endpoint.audits as MappedAudit<TAuditAction, TOutSchema>[])\n\t\t\t\t\t\t\t: [];\n\n\t\t\t\t\t\t// Warn if declarative audits are configured but no audit storage\n\t\t\t\t\t\tif (features.hasAudits && !auditContext) {\n\t\t\t\t\t\t\tlogger.warn('No auditor storage service available');\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\t// Extract RLS context only if configured and not bypassed\n\t\t\t\t\t\tconst rlsContext =\n\t\t\t\t\t\t\tfeatures.hasRls && rawDb !== undefined\n\t\t\t\t\t\t\t\t? await endpoint.rlsConfig?.extractor({\n\t\t\t\t\t\t\t\t\t\tservices,\n\t\t\t\t\t\t\t\t\t\tsession: session as TSession,\n\t\t\t\t\t\t\t\t\t\theader,\n\t\t\t\t\t\t\t\t\t\tcookie,\n\t\t\t\t\t\t\t\t\t\tlogger,\n\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t: undefined;\n\n\t\t\t\t\t\t// Execute handler with automatic audit transaction support\n\t\t\t\t\t\tconst result = await executeWithAuditTransaction(\n\t\t\t\t\t\t\tauditContext,\n\t\t\t\t\t\t\tasync (auditor) => {\n\t\t\t\t\t\t\t\tconst sameDatabase =\n\t\t\t\t\t\t\t\t\tauditContext?.storage?.databaseServiceName &&\n\t\t\t\t\t\t\t\t\tauditContext.storage.databaseServiceName ===\n\t\t\t\t\t\t\t\t\t\tendpoint.databaseService?.serviceName;\n\t\t\t\t\t\t\t\tconst baseDb = sameDatabase\n\t\t\t\t\t\t\t\t\t? (auditor?.getTransaction?.() ?? rawDb)\n\t\t\t\t\t\t\t\t\t: rawDb;\n\n\t\t\t\t\t\t\t\tconst executeHandler = async (db: TDatabase | undefined) => {\n\t\t\t\t\t\t\t\t\tconst responseBuilder = new ResponseBuilder();\n\t\t\t\t\t\t\t\t\tconst response = await endpoint.handler(\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\tservices,\n\t\t\t\t\t\t\t\t\t\t\tlogger,\n\t\t\t\t\t\t\t\t\t\t\tbody: features.hasBodyValidation\n\t\t\t\t\t\t\t\t\t\t\t\t? (c.req.valid as any)('json')\n\t\t\t\t\t\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\t\t\t\t\t\t\tquery: features.hasQueryValidation\n\t\t\t\t\t\t\t\t\t\t\t\t? (c.req.valid as any)('query')\n\t\t\t\t\t\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\t\t\t\t\t\t\tparams: features.hasParamValidation\n\t\t\t\t\t\t\t\t\t\t\t\t? (c.req.valid as any)('param')\n\t\t\t\t\t\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\t\t\t\t\t\t\tsession,\n\t\t\t\t\t\t\t\t\t\t\theader,\n\t\t\t\t\t\t\t\t\t\t\tcookie,\n\t\t\t\t\t\t\t\t\t\t\tauditor,\n\t\t\t\t\t\t\t\t\t\t\tdb,\n\t\t\t\t\t\t\t\t\t\t} as unknown as EndpointContext<\n\t\t\t\t\t\t\t\t\t\t\tTInput,\n\t\t\t\t\t\t\t\t\t\t\tTServices,\n\t\t\t\t\t\t\t\t\t\t\tTLogger,\n\t\t\t\t\t\t\t\t\t\t\tTSession,\n\t\t\t\t\t\t\t\t\t\t\tTAuditAction,\n\t\t\t\t\t\t\t\t\t\t\tTDatabase,\n\t\t\t\t\t\t\t\t\t\t\tTAuditStorage\n\t\t\t\t\t\t\t\t\t\t>,\n\t\t\t\t\t\t\t\t\t\tresponseBuilder,\n\t\t\t\t\t\t\t\t\t);\n\n\t\t\t\t\t\t\t\t\tlet data = response;\n\t\t\t\t\t\t\t\t\tlet metadata = responseBuilder.getMetadata();\n\n\t\t\t\t\t\t\t\t\tif (Endpoint.hasMetadata(response)) {\n\t\t\t\t\t\t\t\t\t\tdata = response.data;\n\t\t\t\t\t\t\t\t\t\tmetadata = response.metadata;\n\t\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\t\tconst output = endpoint.outputSchema\n\t\t\t\t\t\t\t\t\t\t? await endpoint.parseOutput(data)\n\t\t\t\t\t\t\t\t\t\t: undefined;\n\n\t\t\t\t\t\t\t\t\treturn { output, metadata, responseBuilder };\n\t\t\t\t\t\t\t\t};\n\n\t\t\t\t\t\t\t\tif (features.hasRls && rlsContext && baseDb) {\n\t\t\t\t\t\t\t\t\tconst { withRlsContext } = await loadRls();\n\t\t\t\t\t\t\t\t\treturn withRlsContext(\n\t\t\t\t\t\t\t\t\t\tbaseDb as any,\n\t\t\t\t\t\t\t\t\t\trlsContext,\n\t\t\t\t\t\t\t\t\t\tasync (trx) => executeHandler(trx as TDatabase),\n\t\t\t\t\t\t\t\t\t\t{ prefix: endpoint.rlsConfig?.prefix },\n\t\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\treturn executeHandler(baseDb as TDatabase | undefined);\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tasync (result, auditor) => {\n\t\t\t\t\t\t\t\tif (!audits?.length) return;\n\n\t\t\t\t\t\t\t\tfor (const audit of audits) {\n\t\t\t\t\t\t\t\t\tif (audit.when && !audit.when(result.output as any)) {\n\t\t\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\tconst payload = audit.payload(result.output as any);\n\t\t\t\t\t\t\t\t\tconst entityId = audit.entityId?.(result.output as any);\n\t\t\t\t\t\t\t\t\tauditor.audit(audit.type as any, payload as any, {\n\t\t\t\t\t\t\t\t\t\ttable: audit.table,\n\t\t\t\t\t\t\t\t\t\tentityId,\n\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{ db: rawDb },\n\t\t\t\t\t\t);\n\n\t\t\t\t\t\tconst { output, metadata } = result;\n\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tlet status = endpoint.status as ContentfulStatusCode;\n\n\t\t\t\t\t\t\tif (metadata.status) {\n\t\t\t\t\t\t\t\tstatus = metadata.status as ContentfulStatusCode;\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\tif (metadata.headers) {\n\t\t\t\t\t\t\t\tfor (const [key, value] of Object.entries(metadata.headers)) {\n\t\t\t\t\t\t\t\t\tc.header(key, value);\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\tif (metadata.cookies) {\n\t\t\t\t\t\t\t\tfor (const [name, { value, options }] of metadata.cookies) {\n\t\t\t\t\t\t\t\t\tsetCookie(c, name, value, options);\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t// Only publish events if configured (no global middleware overhead)\n\t\t\t\t\t\t\tif (features.hasEvents && Endpoint.isSuccessStatus(status)) {\n\t\t\t\t\t\t\t\tawait publishConstructEvents<any>(\n\t\t\t\t\t\t\t\t\tendpoint as any,\n\t\t\t\t\t\t\t\t\toutput,\n\t\t\t\t\t\t\t\t\tserviceDiscovery,\n\t\t\t\t\t\t\t\t\tlogger,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\tif (HonoEndpoint.isDev) {\n\t\t\t\t\t\t\t\tlogger.info({ status, body: output }, 'Outgoing response');\n\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t// Respect the endpoint's declared responseType. For JSON (default)\n\t\t\t\t\t\t\t// we use c.json() which sets Content-Type and serializes. For any\n\t\t\t\t\t\t\t// other type, emit the body as-is and set the header explicitly —\n\t\t\t\t\t\t\t// metadata.headers (from r.header()) applied above still wins.\n\t\t\t\t\t\t\tif (endpoint.responseType === 'application/json') {\n\t\t\t\t\t\t\t\t// Hono 4.13 types `c.json`'s status well enough that the\n\t\t\t\t\t\t\t\t// suppression here is now itself an error.\n\t\t\t\t\t\t\t\treturn c.json(output, status);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t!(metadata.headers && hasContentTypeHeader(metadata.headers))\n\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\tc.header('content-type', endpoint.responseType);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\treturn c.body(output as any, status);\n\t\t\t\t\t\t} catch (validationError: any) {\n\t\t\t\t\t\t\tlogger.error(\n\t\t\t\t\t\t\t\t{ err: validationError },\n\t\t\t\t\t\t\t\t'Output validation failed',\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tconst error = wrapError(\n\t\t\t\t\t\t\t\tvalidationError,\n\t\t\t\t\t\t\t\t422,\n\t\t\t\t\t\t\t\t'Response validation failed',\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tconst body = errorBody(error);\n\t\t\t\t\t\t\tif (HonoEndpoint.isDev) {\n\t\t\t\t\t\t\t\tlogger.info(\n\t\t\t\t\t\t\t\t\t{ status: error.statusCode, body },\n\t\t\t\t\t\t\t\t\t'Outgoing response',\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\treturn c.json(body, error.statusCode as ContentfulStatusCode);\n\t\t\t\t\t\t}\n\t\t\t\t\t} catch (e: any) {\n\t\t\t\t\t\t// Under `err`, which every pino serializes as an Error — passed bare,\n\t\t\t\t\t\t// one pino does not recognise (a ZodError) is spread into the line\n\t\t\t\t\t\t// with no stack.\n\t\t\t\t\t\tlogger.error({ err: e }, 'Error processing endpoint request');\n\t\t\t\t\t\tconst error = wrapError(e, 500, 'Internal Server Error');\n\t\t\t\t\t\t// Answered here rather than rethrown, so Hono never sets it:\n\t\t\t\t\t\t// a server failure is left on the context the way Hono\n\t\t\t\t\t\t// leaves an uncaught one, for middleware — a request span\n\t\t\t\t\t\t// records it as the exception. A 4xx is the client's.\n\t\t\t\t\t\tif (error.statusCode >= 500 && e instanceof Error) c.error = e;\n\t\t\t\t\t\tconst body = errorBody(error);\n\t\t\t\t\t\tif (HonoEndpoint.isDev) {\n\t\t\t\t\t\t\tlogger.info(\n\t\t\t\t\t\t\t\t{ status: error.statusCode, body },\n\t\t\t\t\t\t\t\t'Outgoing response',\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn c.json(body, error.statusCode as ContentfulStatusCode);\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t);\n\t\t};\n\n\t\t// Register route with conditional validators.\n\t\t//\n\t\t// `route` is a generic `TRoute`, and Hono 4.13 overloads `app.get` on\n\t\t// whether the first argument is a path or a handler. A generic that is\n\t\t// only *constrained* to string does not pick the path overload, so it\n\t\t// gets matched against the handler one and reported there. Saying it is a\n\t\t// string chooses the overload that was always intended.\n\t\t//\n\t\t// The spread is why a cast is needed rather than a better type: with\n\t\t// `...validators` of unknown length, the arity is not decidable, so the\n\t\t// first overload is chosen whatever the path argument says. Naming the\n\t\t// shape we are calling states the intent the overloads cannot infer.\n\t\t(\n\t\t\tapp[method] as unknown as (\n\t\t\t\tpath: string,\n\t\t\t\t...handlers: unknown[]\n\t\t\t) => unknown\n\t\t)(route, ...validators, handler);\n\t}\n\n\tstatic addDocsRoute<\n\t\tTServices extends Service[] = [],\n\t\tTLogger extends Logger = Logger,\n\t>(\n\t\tendpoints: Endpoint<string, HttpMethod, any, any, TServices, TLogger>[],\n\t\tapp: Hono,\n\t\tdocsPath: string,\n\t\topenApiOptions?: HonoEndpointOptions['openApiOptions'],\n\t): void {\n\t\tapp.get(docsPath, async (c) => {\n\t\t\ttry {\n\t\t\t\tconst openApiSchema = await Endpoint.buildOpenApiSchema(\n\t\t\t\t\tendpoints,\n\t\t\t\t\topenApiOptions,\n\t\t\t\t);\n\n\t\t\t\treturn c.json(openApiSchema);\n\t\t\t} catch {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{ error: 'Failed to generate OpenAPI documentation' },\n\t\t\t\t\t500,\n\t\t\t\t);\n\t\t\t}\n\t\t});\n\t}\n}\n\n/**\n * What a client is told about a failed request: what went wrong, and the stack\n * only under `gkm dev`. A server's stack is its file layout and its\n * dependencies' versions — for the person debugging it, not for whoever sent\n * the request. A server failure's details are the error it wrapped (an\n * environment variable it could not read, a query that failed), so they go to\n * the log and not the response either; a 4xx's details are the client's.\n */\nfunction errorBody(error: HttpError) {\n\tconst internal = error.statusCode >= 500 && !HonoEndpoint.isDev;\n\treturn {\n\t\tname: error.name,\n\t\tmessage: error.message,\n\t\tstatusCode: error.statusCode,\n\t\tstatusMessage: error.statusMessage,\n\t\tcode: error.code,\n\t\t...(internal ? {} : { details: error.details }),\n\t\t...(HonoEndpoint.isDev ? { stack: error.stack } : {}),\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0EA,eAAsB,uBACrB,QACA,KAC+D;CAC/D,MAAM,SAAS,GAAG,OAAO,QAAQ,EAAE,IAAI,CAAC;CAExC,MAAM,YAAiE,CAAC;CAExE,WAAW,MAAM,KAAK,QAAQ;EAI7B,MAAM,QAAQ,MAAM,OAFF,KAAK,QAAQ,KAAK,EAAE,SAAS,CAEZ;EAGnC,MAAM,WAAW,OAAO,OAAO,KAAK,CAAC,CAAC,QAAQ,UAAU;GACvD,OAAO,SAAS,WAAW,KAAK;EACjC,CAAC;EAED,UAAU,KAAK,GAAG,QAAQ;CAC3B;CAEA,OAAO;AACR;;;;;;;AC1FA,SAAgB,eAAe,GAAiC;CAC/D,MAAM,MAAM,EAAE,IAAI;CAClB,MAAM,aAAa,IAAI,QAAQ,GAAG;CAClC,IAAI,eAAe,IAClB,OAAO,CAAC;CAET,MAAM,cAAc,IAAI,MAAM,aAAa,CAAC;CAC5C,OAAO,GAAG,MAAM,WAAW;AAC5B;;;;;;ACyDA,SAAS,qBAAqB,SAA0C;CACvE,KAAK,MAAM,OAAO,OAAO,KAAK,OAAO,GACpC,IAAI,IAAI,YAAY,MAAM,gBAAgB,OAAO;CAElD,OAAO;AACR;;;;AAKA,SAAS,wBACR,UAcmB;CACnB,OAAO;EACN,aAAa,SAAS,SAAS,SAAS;EACxC,aAAa,CAAC,CAAC,SAAS;EACxB,mBAAmB,CAAC,CAAC,SAAS,OAAO;EACrC,oBAAoB,CAAC,CAAC,SAAS,OAAO;EACtC,oBAAoB,CAAC,CAAC,SAAS,OAAO;EAEtC,YACE,SAAS,QAAQ,UAAU,KAAK,KAAK,CAAC,CAAC,SAAS;EAClD,YAAY,SAAS,QAAQ,UAAU,KAAK;EAC5C,cAAc,CAAC,CAAC,SAAS;EACzB,QAAQ,CAAC,CAAC,SAAS,aAAa,CAAC,SAAS;CAC3C;AACD;AAEA,IAAa,eAAb,MAAa,aAgBX;CAEiB;CADlB,YACC,UAcC;EAdgB,KAAA,WAAA;CAcf;CAEH,OAAO,QAAQ,QAAQ,IAAI,aAAa;CAExC,aAAa,SACZ,GACA,MACA,QACC;EACD,IAAI,CAAC,QACJ;EAGD,MAAM,SAAS,MAAM,SAAS,SAAS,QAAQ,IAAI;EAEnD,IAAI,OAAO,QACV,OAAO,EAAE,KAAK,OAAO,QAAQ,GAAG;EAGjC,OAAO,OAAO;CACf;CACA,SACC,kBACA,KACO;EACP,aAAa,SAAS,KAAK,UAAU,kBAAkB,GAAG;CAC3D;;;;;;CAOA,OAAO,qBACN,MACA,mBACC,CAGF;CAEA,aAAa,WACZ,QACA,WACA,MAAM,IAAI,KAAK,GACf,SACA,MAAM,QAAQ,IAAI,GAClB,SACgB;EAChB,MAAM,YAAY,MAAM,uBAAkC,QAAQ,GAAG;EACrE,MAAM,mBACL,iBAAiB,YAAsC,SAAS;EAEjE,aAAa,UAAU,WAAW,kBAAkB,KAAK,OAAO;EAEhE,OAAO;CACR;CAEA,OAAO,UAIN,WACA,kBACA,KACA,SACO;EAEP,IAAI,IAAI,KAAK,OAAO,CAAC;EAIrB,IAAI,aAAa,OAChB,IAAI,IAAI,KAAKA,OAAW,CAAC;EAI1B,MAAM,WACL,SAAS,aAAa,QAAQ,SAAS,YAAY,UAAU;EAC9D,IAAI,UACH,aAAa,aACZ,WACA,KACA,UACA,SAAS,cACV;EAID,MAAM,kBAAkB,UAAU,MAAM,GAAG,MAAM;GAChD,MAAM,YAAY,EAAE,MAAM,MAAM,GAAG;GACnC,MAAM,YAAY,EAAE,MAAM,MAAM,GAAG;GAGnC,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,IAAI,UAAU,QAAQ,UAAU,MAAM,GAAG,KAAK;IACtE,MAAM,WAAW,UAAU,MAAM;IACjC,MAAM,WAAW,UAAU,MAAM;IAGjC,MAAM,aAAa,SAAS,WAAW,GAAG;IAC1C,MAAM,aAAa,SAAS,WAAW,GAAG;IAE1C,IAAI,CAAC,cAAc,YAAY,OAAO;IACtC,IAAI,cAAc,CAAC,YAAY,OAAO;IAGtC,IAAI,aAAa,UAChB,OAAO,SAAS,cAAc,QAAQ;GAExC;GAEA,OAAO;EACR,CAAC;EAID,KAAK,MAAM,YAAY,iBACtB,aAAa,SAAS,UAAU,kBAAkB,GAAG;CAEvD;CAGA,OAAO,SAiBN,UAcA,kBACA,KACO;EACP,MAAM,EAAE,UAAU;EAClB,MAAM,SAAS,SAAS,OAAO,YAAY;EAG3C,MAAM,WAAW,wBAAwB,QAAQ;EAGjD,MAAM,aAAoB,CAAC;EAE3B,IAAI,SAAS,mBACZ,WAAW,KACV,UAAU,SAAS,OAAO,MACzB,aAAa,SAAS,GAAG,OAAO,SAAS,OAAO,IAAI,CACrD,CACD;EAGD,IAAI,SAAS,oBACZ,WAAW,KACV,UAAU,UAAU,GAAG,MAAM;GAC5B,MAAM,cAAc,eAAe,CAAC;GACpC,OAAO,aAAa,SAAS,GAAG,aAAa,SAAS,OAAO,KAAK;EACnE,CAAC,CACF;EAGD,IAAI,SAAS,oBACZ,WAAW,KACV,UAAU,UAAU,QAAQ,MAC3B,aAAa,SAAS,GAAG,QAAQ,SAAS,OAAO,MAAM,CACxD,CACD;EAID,MAAM,UAAU,OAAO,MAAe;GAErC,MAAM,YAAY,KAAK,IAAI;GAC3B,MAAM,YAAY,EAAE,IAAI,OAAO,cAAc,KAAK,OAAO,WAAW;GAEpE,MAAM,SAAS,SAAS,OAAO,MAAM;IACpC;IACA,UAAU,SAAS;IACnB,OAAO,SAAS;IAChB,MAAM,EAAE,IAAI,OAAO,MAAM;IACzB,QAAQ,SAAS;IACjB,MAAM,EAAE,IAAI;GACb,CAAC;GAGD,EAAE,OAAO,gBAAgB,SAAS;GAGlC,OAAO,sBACN;IACC;IACA;IACA;IACA,WAAW,GAAG,SAAS,OAAO,GAAG,SAAS;GAC3C,GACA,YAAY;IACX,IAAI;KAEH,MAAM,SAAS,kBAAkB,CAAC;KAClC,MAAM,SAAS,kBAAkB,CAAC;KAGlC,MAAM,WAAW,SAAS,cACvB,MAAM,iBAAiB,SAAS,SAAS,QAAQ,IAChD,CAAC;KAGL,MAAM,QAAQ,SAAS,cACpB,MAAM,iBACL,SAAS,CAAC,SAAS,eAAgB,CAAC,CAAC,CACrC,MACC,MACA,EACC,SAAS,iBAAiB,YAE7B,IACA,KAAA;KAGH,MAAM,UAAU,MAAM,SAAS,WAAW;MACzC;MACA;MACA;MACA;MACA,GAAI,UAAU,KAAA,KAAa,EAAE,IAAI,MAAM;KACxC,CAAQ;KAqBR,IAAI,CAAC,MAlBsB,SAAS,UAAU;MAC7C;MACA;MACA;MACA;MACA;MACA,GAAI,UAAU,KAAA,KAAa,EAAE,IAAI,MAAM;MACvC,MAAM,SAAS,oBACX,EAAE,IAAI,MAAc,MAAM,IAC3B,KAAA;MACH,OAAO,SAAS,qBACZ,EAAE,IAAI,MAAc,OAAO,IAC5B,KAAA;MACH,QAAQ,SAAS,qBACb,EAAE,IAAI,MAAc,OAAO,IAC5B,KAAA;KACJ,CAAQ,GAEW;MAClB,OAAO,KAAK,0BAA0B;MACtC,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;KAC1C;KAGA,IAAI,SAAS,cAAc;MAC1B,MAAM,EAAE,gBAAgB,wBACvB,MAAM,cAAc;MAUrB,MAAM,mBAAmB,oBACxB,MAV2B,eAAe,SAAS,WAAY;OAC/D;OACA;OACA;OACA;OACA,MAAM,EAAE,IAAI;OACZ,QAAQ,SAAS;MAClB,CAAC,GAIA,SAAS,SACV;MACA,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,gBAAgB,GACzD,IAAI,OACH,EAAE,OAAO,KAAK,KAAK;KAGtB;KAGA,MAAM,eAAe,SAAS,YAC3B,MAAM,mBACN,UACA,kBACA,QACA;MACC;MACA;MACA;MACU;KACX,CACD,IACC,KAAA;KAEH,MAAM,SAAS,SAAS,YACpB,SAAS,SACV,CAAC;KAGJ,IAAI,SAAS,aAAa,CAAC,cAC1B,OAAO,KAAK,sCAAsC;KAInD,MAAM,aACL,SAAS,UAAU,UAAU,KAAA,IAC1B,MAAM,SAAS,WAAW,UAAU;MACpC;MACS;MACT;MACA;MACA;KACD,CAAC,IACA,KAAA;KA2FJ,MAAM,EAAE,QAAQ,aAAa,MAxFR,4BACpB,cACA,OAAO,YAAY;MAKlB,MAAM,SAHL,cAAc,SAAS,uBACvB,aAAa,QAAQ,wBACpB,SAAS,iBAAiB,cAExB,SAAS,iBAAiB,KAAK,QAChC;MAEH,MAAM,iBAAiB,OAAO,OAA8B;OAC3D,MAAM,kBAAkB,IAAI,gBAAgB;OAC5C,MAAM,WAAW,MAAM,SAAS,QAC/B;QACC;QACA;QACA,MAAM,SAAS,oBACX,EAAE,IAAI,MAAc,MAAM,IAC3B,KAAA;QACH,OAAO,SAAS,qBACZ,EAAE,IAAI,MAAc,OAAO,IAC5B,KAAA;QACH,QAAQ,SAAS,qBACb,EAAE,IAAI,MAAc,OAAO,IAC5B,KAAA;QACH;QACA;QACA;QACA;QACA;OACD,GASA,eACD;OAEA,IAAI,OAAO;OACX,IAAI,WAAW,gBAAgB,YAAY;OAE3C,IAAI,SAAS,YAAY,QAAQ,GAAG;QACnC,OAAO,SAAS;QAChB,WAAW,SAAS;OACrB;OAMA,OAAO;QAAE,QAJM,SAAS,eACrB,MAAM,SAAS,YAAY,IAAI,IAC/B,KAAA;QAEc;QAAU;OAAgB;MAC5C;MAEA,IAAI,SAAS,UAAU,cAAc,QAAQ;OAC5C,MAAM,EAAE,mBAAmB,MAAM,QAAQ;OACzC,OAAO,eACN,QACA,YACA,OAAO,QAAQ,eAAe,GAAgB,GAC9C,EAAE,QAAQ,SAAS,WAAW,OAAO,CACtC;MACD;MAEA,OAAO,eAAe,MAA+B;KACtD,GACA,OAAO,QAAQ,YAAY;MAC1B,IAAI,CAAC,QAAQ,QAAQ;MAErB,KAAK,MAAM,SAAS,QAAQ;OAC3B,IAAI,MAAM,QAAQ,CAAC,MAAM,KAAK,OAAO,MAAa,GACjD;OAED,MAAM,UAAU,MAAM,QAAQ,OAAO,MAAa;OAClD,MAAM,WAAW,MAAM,WAAW,OAAO,MAAa;OACtD,QAAQ,MAAM,MAAM,MAAa,SAAgB;QAChD,OAAO,MAAM;QACb;OACD,CAAC;MACF;KACD,GACA,EAAE,IAAI,MAAM,CACb;KAIA,IAAI;MACH,IAAI,SAAS,SAAS;MAEtB,IAAI,SAAS,QACZ,SAAS,SAAS;MAGnB,IAAI,SAAS,SACZ,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,OAAO,GACzD,EAAE,OAAO,KAAK,KAAK;MAIrB,IAAI,SAAS,SACZ,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,cAAc,SAAS,SACjD,UAAU,GAAG,MAAM,OAAO,OAAO;MAKnC,IAAI,SAAS,aAAa,SAAS,gBAAgB,MAAM,GACxD,MAAM,uBACL,UACA,QACA,kBACA,MACD;MAGD,IAAI,aAAa,OAChB,OAAO,KAAK;OAAE;OAAQ,MAAM;MAAO,GAAG,mBAAmB;MAO1D,IAAI,SAAS,iBAAiB,oBAG7B,OAAO,EAAE,KAAK,QAAQ,MAAM;MAE7B,IACC,EAAE,SAAS,WAAW,qBAAqB,SAAS,OAAO,IAE3D,EAAE,OAAO,gBAAgB,SAAS,YAAY;MAE/C,OAAO,EAAE,KAAK,QAAe,MAAM;KACpC,SAAS,iBAAsB;MAC9B,OAAO,MACN,EAAE,KAAK,gBAAgB,GACvB,0BACD;MACA,MAAM,QAAQ,UACb,iBACA,KACA,4BACD;MACA,MAAM,OAAO,UAAU,KAAK;MAC5B,IAAI,aAAa,OAChB,OAAO,KACN;OAAE,QAAQ,MAAM;OAAY;MAAK,GACjC,mBACD;MAED,OAAO,EAAE,KAAK,MAAM,MAAM,UAAkC;KAC7D;IACD,SAAS,GAAQ;KAIhB,OAAO,MAAM,EAAE,KAAK,EAAE,GAAG,mCAAmC;KAC5D,MAAM,QAAQ,UAAU,GAAG,KAAK,uBAAuB;KAKvD,IAAI,MAAM,cAAc,OAAO,aAAa,OAAO,EAAE,QAAQ;KAC7D,MAAM,OAAO,UAAU,KAAK;KAC5B,IAAI,aAAa,OAChB,OAAO,KACN;MAAE,QAAQ,MAAM;MAAY;KAAK,GACjC,mBACD;KAED,OAAO,EAAE,KAAK,MAAM,MAAM,UAAkC;IAC7D;GACD,CACD;EACD;EAcA,IACK,OAAO,CAIV,OAAO,GAAG,YAAY,OAAO;CAChC;CAEA,OAAO,aAIN,WACA,KACA,UACA,gBACO;EACP,IAAI,IAAI,UAAU,OAAO,MAAM;GAC9B,IAAI;IACH,MAAM,gBAAgB,MAAM,SAAS,mBACpC,WACA,cACD;IAEA,OAAO,EAAE,KAAK,aAAa;GAC5B,QAAQ;IACP,OAAO,EAAE,KACR,EAAE,OAAO,2CAA2C,GACpD,GACD;GACD;EACD,CAAC;CACF;AACD;;;;;;;;;AAUA,SAAS,UAAU,OAAkB;CACpC,MAAM,WAAW,MAAM,cAAc,OAAO,CAAC,aAAa;CAC1D,OAAO;EACN,MAAM,MAAM;EACZ,SAAS,MAAM;EACf,YAAY,MAAM;EAClB,eAAe,MAAM;EACrB,MAAM,MAAM;EACZ,GAAI,WAAW,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;EAC7C,GAAI,aAAa,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;CACpD;AACD"}

package/dist/{HonoEndpointAdaptor-DtL9j19R.cjs → HonoEndpointAdaptor-zVzVLJEO.cjs}

@@ -1,20 +1,21 @@
-const require_chunk = require('./chunk-DWy1uDak.cjs');
-const require_Endpoint = require('./Endpoint-DcWXE-SZ.cjs');
-const require_lazyAccessors = require('./lazyAccessors-e3j2oE2m.cjs');
-const require_processAudits = require('./processAudits-CGqttuXm.cjs');
-const __geekmidas_errors = require_chunk.__toESM(require("@geekmidas/errors"));
-const __geekmidas_services = require_chunk.__toESM(require("@geekmidas/services"));
-const __geekmidas_db_rls = require_chunk.__toESM(require("@geekmidas/db/rls"));
-const qs = require_chunk.__toESM(require("qs"));
-const hono_cookie = require_chunk.__toESM(require("hono/cookie"));
-const __geekmidas_rate_limit = require_chunk.__toESM(require("@geekmidas/rate-limit"));
-const hono = require_chunk.__toESM(require("hono"));
-const hono_logger = require_chunk.__toESM(require("hono/logger"));
-const hono_timing = require_chunk.__toESM(require("hono/timing"));
-const hono_validator = require_chunk.__toESM(require("hono/validator"));
-const node_path = require_chunk.__toESM(require("node:path"));
-const fast_glob = require_chunk.__toESM(require("fast-glob"));
-
+const require_rolldown_runtime = require("./rolldown-runtime-y5ARvAq5.cjs");
+const require_functions = require("./functions-CfzJG9hK.cjs");
+const require_Endpoint = require("./Endpoint-BoUg8ocM.cjs");
+const require_lazyAccessors = require("./lazyAccessors-hJKGv8Ay.cjs");
+const require_processAudits = require("./processAudits-DasOZjPl.cjs");
+let _geekmidas_errors = require("@geekmidas/errors");
+let _geekmidas_services = require("@geekmidas/services");
+let hono_cookie = require("hono/cookie");
+let hono = require("hono");
+let hono_logger = require("hono/logger");
+let hono_timing = require("hono/timing");
+let hono_validator = require("hono/validator");
+let node_path = require("node:path");
+node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let fast_glob = require("fast-glob");
+fast_glob = require_rolldown_runtime.__toESM(fast_glob, 1);
+let qs = require("qs");
+qs = require_rolldown_runtime.__toESM(qs, 1);
 //#region src/endpoints/helpers.ts
 /**
 * Discovers and imports all Endpoint instances from the specified route patterns.
@@ -48,8 +49,7 @@ async function getEndpointsFromRoutes(routes, cwd) {
 	const stream = fast_glob.default.stream(routes, { cwd });
 	const endpoints = [];
 	for await (const f of stream) {
-		const routePath = node_path.default.resolve(cwd, f.toString());
-		const route = await import(routePath);
+		const route = await import(node_path.default.resolve(cwd, f.toString()));
 		const handlers = Object.values(route).filter((value) => {
 			return require_Endpoint.Endpoint.isEndpoint(value);
 		});
@@ -57,7 +57,6 @@ async function getEndpointsFromRoutes(routes, cwd) {
 	}
 	return endpoints;
 }
-
 //#endregion
 //#region src/endpoints/parseHonoQuery.ts
 /**
@@ -71,7 +70,6 @@ function parseHonoQuery(c) {
 	const queryString = url.slice(queryIndex + 1);
 	return qs.default.parse(queryString);
 }
-
 //#endregion
 //#region src/endpoints/HonoEndpointAdaptor.ts
 /**
@@ -98,12 +96,13 @@ function analyzeEndpointFeatures(endpoint) {
 	};
 }
 var HonoEndpoint = class HonoEndpoint {
+	endpoint;
 	constructor(endpoint) {
 		this.endpoint = endpoint;
 	}
 	static isDev = process.env.NODE_ENV === "development";
 	static async validate(c, data, schema) {
-		if (!schema) return void 0;
+		if (!schema) return;
 		const parsed = await require_Endpoint.Endpoint.validate(schema, data);
 		if (parsed.issues) return c.json(parsed.issues, 422);
 		return parsed.value;
@@ -119,7 +118,7 @@ var HonoEndpoint = class HonoEndpoint {
 	static applyEventMiddleware(_app, _serviceDiscovery) {}
 	static async fromRoutes(routes, envParser, app = new hono.Hono(), _logger, cwd = process.cwd(), options) {
 		const endpoints = await getEndpointsFromRoutes(routes, cwd);
-		const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(envParser);
+		const serviceDiscovery = _geekmidas_services.ServiceDiscovery.getInstance(envParser);
 		HonoEndpoint.addRoutes(endpoints, serviceDiscovery, app, options);
 		return app;
 	}
@@ -167,10 +166,11 @@ var HonoEndpoint = class HonoEndpoint {
 				path: c.req.path
 			});
 			c.header("X-Request-ID", requestId);
-			return (0, __geekmidas_services.runWithRequestContext)({
+			return (0, _geekmidas_services.runWithRequestContext)({
 				logger,
 				requestId,
-				startTime
+				startTime,
+				operation: `${endpoint.method} ${endpoint.route}`
 			}, async () => {
 				try {
 					const header = require_lazyAccessors.createHonoHeaders(c);
@@ -184,7 +184,7 @@ var HonoEndpoint = class HonoEndpoint {
 						cookie,
 						...rawDb !== void 0 && { db: rawDb }
 					});
-					const isAuthorized = await endpoint.authorize({
+					if (!await endpoint.authorize({
 						header,
 						cookie,
 						services,
@@ -194,21 +194,20 @@ var HonoEndpoint = class HonoEndpoint {
 						body: features.hasBodyValidation ? c.req.valid("json") : void 0,
 						query: features.hasQueryValidation ? c.req.valid("query") : void 0,
 						params: features.hasParamValidation ? c.req.valid("param") : void 0
-					});
-					if (!isAuthorized) {
+					})) {
 						logger.warn("Forbidden access attempt");
 						return c.json({ error: "Forbidden" }, 403);
 					}
 					if (features.hasRateLimit) {
-						const rateLimitInfo = await (0, __geekmidas_rate_limit.checkRateLimit)(endpoint.rateLimit, {
+						const { checkRateLimit, getRateLimitHeaders } = await require_processAudits.loadRateLimit();
+						const rateLimitHeaders = getRateLimitHeaders(await checkRateLimit(endpoint.rateLimit, {
 							header,
 							services,
 							logger,
 							session,
 							path: c.req.path,
 							method: endpoint.method
-						});
-						const rateLimitHeaders = (0, __geekmidas_rate_limit.getRateLimitHeaders)(rateLimitInfo, endpoint.rateLimit);
+						}), endpoint.rateLimit);
 						for (const [key, value] of Object.entries(rateLimitHeaders)) if (value) c.header(key, value);
 					}
 					const auditContext = features.hasAudits ? await require_processAudits.createAuditContext(endpoint, serviceDiscovery, logger, {
@@ -226,9 +225,8 @@ var HonoEndpoint = class HonoEndpoint {
 						cookie,
 						logger
 					}) : void 0;
-					const result = await require_processAudits.executeWithAuditTransaction(auditContext, async (auditor) => {
-						const sameDatabase = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === endpoint.databaseService?.serviceName;
-						const baseDb = sameDatabase ? auditor?.getTransaction?.() ?? rawDb : rawDb;
+					const { output, metadata } = await require_processAudits.executeWithAuditTransaction(auditContext, async (auditor) => {
+						const baseDb = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === endpoint.databaseService?.serviceName ? auditor?.getTransaction?.() ?? rawDb : rawDb;
 						const executeHandler = async (db) => {
 							const responseBuilder = new require_Endpoint.ResponseBuilder();
 							const response = await endpoint.handler({
@@ -244,39 +242,40 @@ var HonoEndpoint = class HonoEndpoint {
 								db
 							}, responseBuilder);
 							let data = response;
-							let metadata$1 = responseBuilder.getMetadata();
+							let metadata = responseBuilder.getMetadata();
 							if (require_Endpoint.Endpoint.hasMetadata(response)) {
 								data = response.data;
-								metadata$1 = response.metadata;
+								metadata = response.metadata;
 							}
-							const output$1 = endpoint.outputSchema ? await endpoint.parseOutput(data) : void 0;
 							return {
-								output: output$1,
-								metadata: metadata$1,
+								output: endpoint.outputSchema ? await endpoint.parseOutput(data) : void 0,
+								metadata,
 								responseBuilder
 							};
 						};
-						if (features.hasRls && rlsContext && baseDb) return (0, __geekmidas_db_rls.withRlsContext)(baseDb, rlsContext, async (trx) => executeHandler(trx), { prefix: endpoint.rlsConfig?.prefix });
+						if (features.hasRls && rlsContext && baseDb) {
+							const { withRlsContext } = await require_processAudits.loadRls();
+							return withRlsContext(baseDb, rlsContext, async (trx) => executeHandler(trx), { prefix: endpoint.rlsConfig?.prefix });
+						}
 						return executeHandler(baseDb);
-					}, async (result$1, auditor) => {
+					}, async (result, auditor) => {
 						if (!audits?.length) return;
 						for (const audit of audits) {
-							if (audit.when && !audit.when(result$1.output)) continue;
-							const payload = audit.payload(result$1.output);
-							const entityId = audit.entityId?.(result$1.output);
+							if (audit.when && !audit.when(result.output)) continue;
+							const payload = audit.payload(result.output);
+							const entityId = audit.entityId?.(result.output);
 							auditor.audit(audit.type, payload, {
 								table: audit.table,
 								entityId
 							});
 						}
 					}, { db: rawDb });
-					const { output, metadata } = result;
 					try {
 						let status = endpoint.status;
 						if (metadata.status) status = metadata.status;
 						if (metadata.headers) for (const [key, value] of Object.entries(metadata.headers)) c.header(key, value);
 						if (metadata.cookies) for (const [name, { value, options }] of metadata.cookies) (0, hono_cookie.setCookie)(c, name, value, options);
-						if (features.hasEvents && require_Endpoint.Endpoint.isSuccessStatus(status)) await require_lazyAccessors.publishConstructEvents(endpoint, output, serviceDiscovery, logger);
+						if (features.hasEvents && require_Endpoint.Endpoint.isSuccessStatus(status)) await require_functions.publishConstructEvents(endpoint, output, serviceDiscovery, logger);
 						if (HonoEndpoint.isDev) logger.info({
 							status,
 							body: output
@@ -285,22 +284,25 @@ var HonoEndpoint = class HonoEndpoint {
 						if (!(metadata.headers && hasContentTypeHeader(metadata.headers))) c.header("content-type", endpoint.responseType);
 						return c.body(output, status);
 					} catch (validationError) {
-						logger.error(validationError, "Output validation failed");
-						const error = (0, __geekmidas_errors.wrapError)(validationError, 422, "Response validation failed");
+						logger.error({ err: validationError }, "Output validation failed");
+						const error = (0, _geekmidas_errors.wrapError)(validationError, 422, "Response validation failed");
+						const body = errorBody(error);
 						if (HonoEndpoint.isDev) logger.info({
 							status: error.statusCode,
-							body: error
+							body
 						}, "Outgoing response");
-						return c.json(error, error.statusCode);
+						return c.json(body, error.statusCode);
 					}
 				} catch (e) {
-					logger.error(e, "Error processing endpoint request");
-					const error = (0, __geekmidas_errors.wrapError)(e, 500, "Internal Server Error");
+					logger.error({ err: e }, "Error processing endpoint request");
+					const error = (0, _geekmidas_errors.wrapError)(e, 500, "Internal Server Error");
+					if (error.statusCode >= 500 && e instanceof Error) c.error = e;
+					const body = errorBody(error);
 					if (HonoEndpoint.isDev) logger.info({
 						status: error.statusCode,
-						body: error
+						body
 					}, "Outgoing response");
-					return c.json(error, error.statusCode);
+					return c.json(body, error.statusCode);
 				}
 			});
 		};
@@ -317,12 +319,32 @@ var HonoEndpoint = class HonoEndpoint {
 		});
 	}
 };
-
+/**
+* What a client is told about a failed request: what went wrong, and the stack
+* only under `gkm dev`. A server's stack is its file layout and its
+* dependencies' versions — for the person debugging it, not for whoever sent
+* the request. A server failure's details are the error it wrapped (an
+* environment variable it could not read, a query that failed), so they go to
+* the log and not the response either; a 4xx's details are the client's.
+*/
+function errorBody(error) {
+	const internal = error.statusCode >= 500 && !HonoEndpoint.isDev;
+	return {
+		name: error.name,
+		message: error.message,
+		statusCode: error.statusCode,
+		statusMessage: error.statusMessage,
+		code: error.code,
+		...internal ? {} : { details: error.details },
+		...HonoEndpoint.isDev ? { stack: error.stack } : {}
+	};
+}
 //#endregion
-Object.defineProperty(exports, 'HonoEndpoint', {
-  enumerable: true,
-  get: function () {
-    return HonoEndpoint;
-  }
+Object.defineProperty(exports, "HonoEndpoint", {
+	enumerable: true,
+	get: function() {
+		return HonoEndpoint;
+	}
 });
-//# sourceMappingURL=HonoEndpointAdaptor-DtL9j19R.cjs.map
+
+//# sourceMappingURL=HonoEndpointAdaptor-zVzVLJEO.cjs.map