@getstrata/bootstrap 1.0.0 → 1.0.2

package/dist/entries/createRoutes.js

@@ -1,801 +0,0 @@
-// @bun
-var __jsonParse = (a) => JSON.parse(a);
-
-// ../../src/bootstrap/createRoutes.ts
-import { jsonResponse as jsonResponse3 } from "@getstrata/core/http/response";
-import { isSpaEnabled as isSpaEnabled2, isViewsEnabled as isViewsEnabled4 } from "@getstrata/core/runtime/frontendMode";
-import { notFoundHtmlResponse as notFoundHtmlResponse2 } from "@getstrata/core/view";
-
-// ../../index.html
-var strata_default = __jsonParse("{\"index\":\"_.._/_.._/index.html\",\"files\":[{\"input\":\"../../index.html\",\"path\":\"./index-a3tzxvag.js\",\"loader\":\"js\",\"isEntry\":true,\"headers\":{\"etag\":\"qoOafz0bKrA\",\"content-type\":\"text/javascript;charset=utf-8\"}},{\"input\":\"../../index.html\",\"path\":\"_.._/_.._/index.html\",\"loader\":\"html\",\"isEntry\":true,\"headers\":{\"etag\":\"g_F9s_nobLw\",\"content-type\":\"text/html;charset=utf-8\"}}]}");
-
-// ../../src/config/app.ts
-var appConfig = {
-  name: process.env.APP_NAME?.trim() || "Strata",
-  env: process.env.APP_ENV ?? "local",
-  debug: (process.env.APP_DEBUG ?? "true") !== "false",
-  url: process.env.APP_URL ?? "http://localhost:3000",
-  apiPrefix: process.env.API_PREFIX ?? "/api/v1"
-};
-
-// ../../src/bootstrap/buildModuleRoutes.ts
-import { conditionalJsonResponse } from "@getstrata/core/http/conditionalResponse";
-import { applyMiddlewareToRoutes } from "@getstrata/core/http/middleware";
-
-// ../../src/bootstrap/httpKernel.ts
-import {
-  hasVerifiedEmail,
-  isEmailVerificationRequired
-} from "@getstrata/core/auth/emailVerification";
-import { createMembershipMiddleware } from "@getstrata/core/auth/membershipMiddleware";
-import { resolveAbilityChecker } from "@getstrata/core/contracts/serviceTokens";
-import { createAuthMiddleware } from "@getstrata/core/http/authMiddleware";
-import { createAuthorizeMiddleware } from "@getstrata/core/http/authorizeMiddleware";
-import { createBodySizeLimitMiddleware } from "@getstrata/core/http/bodySizeLimitMiddleware";
-import { createCorsMiddleware } from "@getstrata/core/http/corsMiddleware";
-import { createCsrfMiddleware } from "@getstrata/core/http/csrfMiddleware";
-import { createFlashMiddleware } from "@getstrata/core/http/flashMiddleware";
-import { createLoginThrottleMiddleware } from "@getstrata/core/http/loginThrottleMiddleware";
-import { createMemoryThrottleMiddleware } from "@getstrata/core/http/memoryThrottleMiddleware";
-import { createMetricsMiddleware } from "@getstrata/core/http/metricsMiddleware";
-import { requestIdMiddleware } from "@getstrata/core/http/middleware";
-import { createRequireAbilityMiddleware } from "@getstrata/core/http/requireAbilityMiddleware";
-import { createRequireAuthMiddleware } from "@getstrata/core/http/requireAuthMiddleware";
-import { createRequireGlobalAdminMiddleware } from "@getstrata/core/http/requireGlobalAdminMiddleware";
-import { createRequirePasswordConfirmMiddleware } from "@getstrata/core/http/requirePasswordConfirmMiddleware";
-import { createRequireVerifiedMiddleware } from "@getstrata/core/http/requireVerifiedMiddleware";
-import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebAuthMiddleware";
-import { withErrorHandling, withJsonErrorHandling } from "@getstrata/core/http/response";
-import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
-import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
-import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
-import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
-import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
-import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
-import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
-import { createTenantMiddleware } from "@getstrata/core/tenant/tenantMiddleware";
-import { createTracingMiddleware } from "@getstrata/core/tracing/tracingMiddleware";
-
-// ../../src/bootstrap/config.ts
-import {
-  CORE_ABILITY_CHECKER_TOKEN,
-  CORE_AUTH_TOKEN,
-  CORE_AUTH_USER_DIRECTORY_TOKEN,
-  CORE_CACHE_TOKEN,
-  CORE_CONFIG_TOKEN,
-  CORE_EVENT_BUS_TOKEN,
-  CORE_POLICY_GATE_TOKEN,
-  CORE_QUEUE_TOKEN,
-  CORE_TOKEN_SERVICE_TOKEN
-} from "@getstrata/core/contracts/serviceTokens";
-var APP_PORT_CONFIG_KEY = "app.port";
-var CACHE_TTL_MS_CONFIG_KEY = "cache.ttlMs";
-var CACHE_MAX_ENTRIES_CONFIG_KEY = "cache.maxEntries";
-var CACHE_DRIVER_CONFIG_KEY = "cache.driver";
-var REDIS_URL_CONFIG_KEY = "cache.redisUrl";
-var DATABASE_URL_CONFIG_KEY = "database.url";
-var AUTH_DEV_HEADERS_CONFIG_KEY = "auth.allowDevHeaders";
-var DEFAULT_APP_PORT = 3000;
-var DEFAULT_CACHE_TTL_MS = 3600000;
-var DEFAULT_CACHE_MAX_ENTRIES = 100;
-var DEFAULT_CACHE_DRIVER = "array";
-var DEFAULT_API_TOKEN = "";
-var DEFAULT_QUEUE_DRIVER = "sync";
-
-// ../../src/bootstrap/rateLimit.ts
-var LOCAL_LOGIN_RATE_LIMIT = {
-  maxAttempts: 100,
-  decaySeconds: 60
-};
-var PRODUCTION_LOGIN_RATE_LIMIT = {
-  maxAttempts: 5,
-  decaySeconds: 900
-};
-function isLocalAppEnv() {
-  return (process.env.APP_ENV ?? "local") === "local";
-}
-function parsePositiveInt(value, fallback) {
-  const parsed = Number(value);
-  if (!Number.isFinite(parsed) || parsed <= 0) {
-    return fallback;
-  }
-  return Math.trunc(parsed);
-}
-function parseWindowSeconds(secondsValue, msValue, fallback) {
-  if (secondsValue !== undefined && secondsValue.trim() !== "") {
-    return parsePositiveInt(secondsValue, fallback);
-  }
-  if (msValue !== undefined && msValue.trim() !== "") {
-    const parsedMs = Number(msValue);
-    if (Number.isFinite(parsedMs) && parsedMs > 0) {
-      return Math.max(1, Math.trunc(parsedMs / 1000));
-    }
-  }
-  return fallback;
-}
-function resolveLoginRateLimit() {
-  const defaults = isLocalAppEnv() ? LOCAL_LOGIN_RATE_LIMIT : PRODUCTION_LOGIN_RATE_LIMIT;
-  return {
-    maxAttempts: parsePositiveInt(process.env.LOGIN_RATE_LIMIT_PER_WINDOW, defaults.maxAttempts),
-    decaySeconds: parseWindowSeconds(process.env.LOGIN_RATE_LIMIT_WINDOW_SECONDS, process.env.LOGIN_RATE_LIMIT_WINDOW_MS, defaults.decaySeconds)
-  };
-}
-function resolveRegisterRateLimit() {
-  const defaults = isLocalAppEnv() ? { maxAttempts: 100, decaySeconds: 60 } : { maxAttempts: 10, decaySeconds: 60 };
-  return {
-    maxAttempts: parsePositiveInt(process.env.REGISTER_RATE_LIMIT_PER_WINDOW, defaults.maxAttempts),
-    decaySeconds: parseWindowSeconds(process.env.REGISTER_RATE_LIMIT_WINDOW_SECONDS, process.env.REGISTER_RATE_LIMIT_WINDOW_MS, defaults.decaySeconds)
-  };
-}
-
-// ../../src/bootstrap/httpKernel.ts
-class HttpKernel {
-  dependencies;
-  constructor(dependencies) {
-    this.dependencies = dependencies;
-  }
-  globalMiddleware() {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return [
-      createCorsMiddleware(),
-      createSecurityHeadersMiddleware(),
-      createBodySizeLimitMiddleware(),
-      createTracingMiddleware(),
-      createMetricsMiddleware(),
-      createRequestLoggingMiddleware(),
-      requestIdMiddleware,
-      createAuthMiddleware(auth),
-      createMembershipMiddleware(),
-      createTenantMiddleware()
-    ];
-  }
-  group(name) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    switch (name) {
-      case "authenticated":
-        return [createRequireAuthMiddleware(auth)];
-      case "web":
-        return isViewsEnabled() ? [createFlashMiddleware(), createCsrfMiddleware()] : [];
-      case "api": {
-        if (!this.dependencies.container.has(CORE_CONFIG_TOKEN)) {
-          return [];
-        }
-        const config = this.dependencies.container.resolve(CORE_CONFIG_TOKEN);
-        const redisUrl = config.get(REDIS_URL_CONFIG_KEY)?.trim() ?? "";
-        if (!redisUrl) {
-          const maxAttempts = Number(process.env.RATE_LIMIT_PER_MINUTE ?? "120");
-          return [
-            createMemoryThrottleMiddleware({
-              maxAttempts: Number.isFinite(maxAttempts) ? maxAttempts : 120,
-              decaySeconds: 60
-            })
-          ];
-        }
-        const maxAttempts = Number(process.env.RATE_LIMIT_PER_MINUTE ?? "120");
-        return [
-          createThrottleMiddleware({
-            redisUrl,
-            maxAttempts: Number.isFinite(maxAttempts) ? maxAttempts : 120,
-            decaySeconds: 60
-          })
-        ];
-      }
-      default:
-        throw new Error(`Unknown middleware group "${name}".`);
-    }
-  }
-  wrap(groups, handler) {
-    const names = Array.isArray(groups) ? groups : [groups];
-    const middleware = names.flatMap((name) => this.group(name));
-    if (middleware.length === 0) {
-      return handler;
-    }
-    return withMiddleware(...middleware)(handler);
-  }
-  wrapApi(handler) {
-    return withJsonErrorHandling(this.wrap(["api", "authenticated"], handler));
-  }
-  wrapWeb(handler) {
-    return withErrorHandling(this.wrap("web", handler));
-  }
-  wrapWebGuest(handler, home = "/") {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return this.wrapWeb(async (request) => {
-      const user = await auth.resolve(request);
-      if (user) {
-        if (isEmailVerificationRequired() && !hasVerifiedEmail(user)) {
-          return Response.redirect("/email/verify", 302);
-        }
-        const location = typeof home === "function" ? await home(user) : home;
-        return Response.redirect(location, 302);
-      }
-      return handler(request);
-    });
-  }
-  wrapWebPublicRead(handler) {
-    if (isPublicReadsEnabled()) {
-      return this.wrapWeb(handler);
-    }
-    return this.wrapWebAuthenticated(handler);
-  }
-  wrapWebAuthenticated(handler) {
-    return this.wrapWebAuth(handler, { verified: true });
-  }
-  wrapWebAuthenticatedAllowUnverified(handler) {
-    return this.wrapWebAuth(handler, { verified: false });
-  }
-  wrapWebVerified(handler) {
-    return this.wrapWebAuth(handler, { verified: true });
-  }
-  wrapWebPasswordConfirm(handler) {
-    return this.wrapWebAuth(withMiddleware(createRequirePasswordConfirmMiddleware())(handler), {
-      verified: true
-    });
-  }
-  wrapWebAbility(ability, handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const abilityChecker = resolveAbilityChecker(this.dependencies.container);
-    const requireAbility = createRequireAbilityMiddleware(abilityChecker);
-    const middleware = [
-      createRequireWebAuthMiddleware(auth),
-      ...this.verifiedMiddleware(),
-      requireAbility(ability)
-    ];
-    return this.wrapWeb(withMiddleware(...middleware)(handler));
-  }
-  wrapWebGlobalAdmin(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const middleware = [
-      createRequireWebAuthMiddleware(auth),
-      ...this.verifiedMiddleware(),
-      createRequireGlobalAdminMiddleware()
-    ];
-    return this.wrapWeb(withMiddleware(...middleware)(handler));
-  }
-  wrapAuthenticated(handler) {
-    return this.wrap("authenticated", handler);
-  }
-  wrapVerified(handler) {
-    const middleware = [...this.group("authenticated"), ...this.verifiedMiddleware()];
-    return withMiddleware(...middleware)(handler);
-  }
-  wrapPublicRead(handler) {
-    if (isPublicReadsEnabled()) {
-      return handler;
-    }
-    return this.wrapAuthenticated(handler);
-  }
-  wrapGlobalAdmin(handler) {
-    const middleware = [...this.group("authenticated"), createRequireGlobalAdminMiddleware()];
-    return withMiddleware(...middleware)(handler);
-  }
-  wrapAbility(ability, handler) {
-    const abilityChecker = resolveAbilityChecker(this.dependencies.container);
-    const requireAbility = createRequireAbilityMiddleware(abilityChecker);
-    const middleware = [...this.group("authenticated"), requireAbility(ability)];
-    return withMiddleware(...middleware)(handler);
-  }
-  wrapPolicy(resource, action, handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const gate = this.dependencies.container.resolve(CORE_POLICY_GATE_TOKEN);
-    return withMiddleware(createAuthorizeMiddleware(gate, auth, resource, action))(handler);
-  }
-  wrapLogin(handler) {
-    return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
-  }
-  wrapSigned(handler) {
-    return withMiddleware(createValidateSignatureMiddleware())(handler);
-  }
-  wrapRegister(handler) {
-    return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
-  }
-  wrapWebAuth(handler, options) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const middleware = [
-      createRequireWebAuthMiddleware(auth),
-      ...options.verified ? this.verifiedMiddleware() : []
-    ];
-    return this.wrapWeb(withMiddleware(...middleware)(handler));
-  }
-  verifiedMiddleware() {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return [createRequireVerifiedMiddleware(auth)];
-  }
-  wrapThrottle(scope, rateLimit, handler) {
-    const middleware = [];
-    const memoryKeyPrefix = scope === "login" ? "login-throttle:" : "register-throttle:";
-    if (this.dependencies.container.has(CORE_CONFIG_TOKEN)) {
-      const config = this.dependencies.container.resolve(CORE_CONFIG_TOKEN);
-      const redisUrl = config.get(REDIS_URL_CONFIG_KEY)?.trim() ?? "";
-      if (redisUrl) {
-        const throttle = scope === "login" ? createLoginThrottleMiddleware({
-          redisUrl,
-          maxAttempts: rateLimit.maxAttempts,
-          decaySeconds: rateLimit.decaySeconds
-        }) : createThrottleMiddleware({
-          redisUrl,
-          maxAttempts: rateLimit.maxAttempts,
-          decaySeconds: rateLimit.decaySeconds,
-          keyPrefix: memoryKeyPrefix
-        });
-        middleware.push(throttle);
-      } else {
-        middleware.push(createMemoryThrottleMiddleware({
-          maxAttempts: rateLimit.maxAttempts,
-          decaySeconds: rateLimit.decaySeconds,
-          keyPrefix: memoryKeyPrefix
-        }));
-      }
-    } else {
-      middleware.push(createMemoryThrottleMiddleware({
-        maxAttempts: rateLimit.maxAttempts,
-        decaySeconds: rateLimit.decaySeconds,
-        keyPrefix: memoryKeyPrefix
-      }));
-    }
-    if (middleware.length === 0) {
-      return handler;
-    }
-    return withMiddleware(...middleware)(handler);
-  }
-}
-function createHttpKernel(dependencies) {
-  return new HttpKernel(dependencies);
-}
-
-// ../../src/bootstrap/discoverModules.ts
-import { readdirSync } from "fs";
-import { join } from "path";
-import { pathToFileURL } from "url";
-var DISCOVER_MODULES_STATE_KEY = Symbol.for("@getstrata/discoverModulesState");
-function readDiscoverModulesState() {
-  const existing = globalThis[DISCOVER_MODULES_STATE_KEY];
-  if (existing) {
-    return existing;
-  }
-  const state = { appModules: [] };
-  globalThis[DISCOVER_MODULES_STATE_KEY] = state;
-  return state;
-}
-function configureModulesDirectory(modulesDir) {
-  const state = readDiscoverModulesState();
-  if (state.configuredModulesDir !== modulesDir) {
-    state.appModules.length = 0;
-    state.modulesReady = undefined;
-  }
-  state.configuredModulesDir = modulesDir;
-}
-function resolveModulesDirectory(options) {
-  const state = readDiscoverModulesState();
-  if (options?.modulesDir) {
-    return options.modulesDir;
-  }
-  if (state.configuredModulesDir) {
-    return state.configuredModulesDir;
-  }
-  throw new Error("configureModulesDirectory() must be called before discovering modules. The app preload (or starter) should call it.");
-}
-async function loadDiscoveredModules(options) {
-  const modulesDirectory = resolveModulesDirectory(options);
-  let moduleNames;
-  try {
-    moduleNames = readdirSync(modulesDirectory, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
-  } catch (error) {
-    if (error.code === "ENOENT") {
-      return [];
-    }
-    throw error;
-  }
-  const modules = await Promise.all(moduleNames.map(async (moduleName) => {
-    const moduleUrl = pathToFileURL(join(modulesDirectory, moduleName, "index.ts")).href;
-    const loaded = await import(moduleUrl);
-    return loaded.default;
-  }));
-  return modules.filter((module) => module?.name !== undefined).sort((left, right) => (left.order ?? 100) - (right.order ?? 100));
-}
-async function ensureModulesLoaded(options) {
-  const state = readDiscoverModulesState();
-  if (state.appModules.length > 0) {
-    return state.appModules;
-  }
-  state.modulesReady ??= loadDiscoveredModules(options).then((modules) => {
-    state.appModules.splice(0, state.appModules.length, ...modules);
-    return state.appModules;
-  });
-  return state.modulesReady;
-}
-function discoverModules() {
-  return readDiscoverModulesState().appModules;
-}
-function resetDiscoverModulesForTests() {
-  const state = readDiscoverModulesState();
-  state.configuredModulesDir = undefined;
-  state.appModules.length = 0;
-  state.modulesReady = undefined;
-}
-// ../../src/bootstrap/prefixRouteMap.ts
-function prefixRouteMap(prefix, routes) {
-  const normalizedPrefix = prefix.replace(/\/$/, "");
-  const prefixed = {};
-  for (const [path, handler] of Object.entries(routes)) {
-    const normalizedPath = path.startsWith("/") ? path : `/${path}`;
-    prefixed[`${normalizedPrefix}${normalizedPath}`] = handler;
-  }
-  return prefixed;
-}
-
-// ../../src/bootstrap/routeRegistry.ts
-class RouteRegistry {
-  routes = [];
-  register(route) {
-    this.routes.push(route);
-  }
-  clear() {
-    this.routes.length = 0;
-  }
-  list() {
-    return [...this.routes].sort((left, right) => left.path.localeCompare(right.path));
-  }
-}
-var ROUTE_REGISTRY_KEY = Symbol.for("@getstrata/routeRegistry");
-function readSharedRouteRegistry() {
-  const globalRegistry = globalThis[ROUTE_REGISTRY_KEY];
-  if (globalRegistry) {
-    return globalRegistry;
-  }
-  const registry = new RouteRegistry;
-  globalThis[ROUTE_REGISTRY_KEY] = registry;
-  return registry;
-}
-var routeRegistry = readSharedRouteRegistry();
-
-// ../../src/bootstrap/buildModuleRoutes.ts
-function registerOpenApiRoute(method, path, middleware) {
-  routeRegistry.register({ method, path, middleware });
-}
-function registerOpenApiRouteMap(routes, middleware) {
-  const registered = {};
-  for (const [path, handler] of Object.entries(routes)) {
-    if (handler && typeof handler === "object" && !Array.isArray(handler)) {
-      const methodMap = handler;
-      registered[path] = methodMap;
-      for (const method of Object.keys(methodMap)) {
-        registerOpenApiRoute(method.toUpperCase(), path, middleware);
-      }
-      continue;
-    }
-    registered[path] = handler;
-    registerOpenApiRoute("GET", path, middleware);
-  }
-  return registered;
-}
-function createCachedJson(dependencies) {
-  return async (cacheKey, loader, tags = [], request) => {
-    const data = tags.length > 0 ? await dependencies.cache.tags(...tags).remember(cacheKey, loader) : await dependencies.cache.remember(cacheKey, loader);
-    return conditionalJsonResponse(request, data);
-  };
-}
-function buildModuleRoutes(dependencies, options = {}) {
-  const { apiPrefix = "", modules = discoverModules(), clearRegistry = true } = options;
-  if (clearRegistry) {
-    routeRegistry.clear();
-  }
-  const kernel = createHttpKernel(dependencies);
-  const middleware = [...kernel.globalMiddleware(), ...kernel.group("api")];
-  const cachedJson = createCachedJson(dependencies);
-  const moduleRoutes = {};
-  for (const module of modules) {
-    if (!module.routes) {
-      continue;
-    }
-    Object.assign(moduleRoutes, module.routes({ dependencies, cachedJson, kernel }));
-  }
-  const prefixedModuleRoutes = prefixRouteMap(apiPrefix, moduleRoutes);
-  return applyMiddlewareToRoutes(registerOpenApiRouteMap(prefixedModuleRoutes, ["global", "api"]), middleware);
-}
-
-// ../../src/bootstrap/createSpaRoutes.ts
-import { join as join2 } from "path";
-import { jsonResponse } from "@getstrata/core/http/response";
-import { isSpaEnabled, isViewsEnabled as isViewsEnabled2, readSpaPrefix } from "@getstrata/core/runtime/frontendMode";
-var SPA_DIST_DIRECTORY = join2(process.cwd(), "frontend/dist");
-function relativeSpaPath(pathname, prefix) {
-  if (pathname === prefix || pathname === `${prefix}/`) {
-    return "";
-  }
-  if (pathname.startsWith(`${prefix}/`)) {
-    return pathname.slice(prefix.length + 1);
-  }
-  return "";
-}
-function createSpaDocumentHandler(prefix, distDirectory) {
-  const indexFilePath = join2(distDirectory, "index.html");
-  return async (request) => {
-    const pathname = new URL(request.url).pathname;
-    if (pathname.startsWith("/api/")) {
-      return new Response("Not found", { status: 404 });
-    }
-    const relativePath = relativeSpaPath(pathname, prefix);
-    const assetFile = Bun.file(join2(distDirectory, relativePath));
-    if (relativePath.length > 0 && await assetFile.exists()) {
-      return new Response(assetFile);
-    }
-    const indexFile = Bun.file(indexFilePath);
-    if (await indexFile.exists()) {
-      return new Response(indexFile, {
-        headers: { "Content-Type": "text/html; charset=utf-8" }
-      });
-    }
-    return jsonResponse({
-      error: "SPA build not found. Run `bun run frontend:build` in your app."
-    }, { status: 503 });
-  };
-}
-function createSpaRoutes(_dependencies, options = {}) {
-  const prefix = options.prefix ?? readSpaPrefix();
-  const distDirectory = options.distDirectory ?? SPA_DIST_DIRECTORY;
-  const wrap = options.wrap ?? ((handler) => handler);
-  const handler = wrap(createSpaDocumentHandler(prefix, distDirectory));
-  const routes = {
-    [prefix]: handler,
-    [`${prefix}/`]: handler,
-    [`${prefix}/*`]: handler
-  };
-  if (!isViewsEnabled2()) {
-    routes["/"] = async () => Response.redirect(`${prefix}/`, 302);
-  }
-  return routes;
-}
-function mergeSpaRoutes(dependencies, routes, options) {
-  if (!isSpaEnabled()) {
-    return routes;
-  }
-  return {
-    ...createSpaRoutes(dependencies, options),
-    ...routes
-  };
-}
-
-// ../../src/bootstrap/createWebRoutes.ts
-import { join as join3 } from "path";
-import { isViewsEnabled as isViewsEnabled3 } from "@getstrata/core/runtime/frontendMode";
-import { notFoundHtmlResponse } from "@getstrata/core/view";
-
-// ../../src/bootstrap/buildWebModuleRoutes.ts
-import { applyMiddlewareToRoutes as applyMiddlewareToRoutes2 } from "@getstrata/core/http/middleware";
-function buildWebModuleRoutes(dependencies, options = {}) {
-  const { modules = discoverModules(), clearRegistry = true, seedRoutes = {} } = options;
-  if (clearRegistry) {
-    routeRegistry.clear();
-  }
-  const kernel = createHttpKernel(dependencies);
-  const middleware = kernel.globalMiddleware();
-  const moduleRoutes = { ...seedRoutes };
-  for (const module of modules) {
-    if (!module.webRoutes) {
-      continue;
-    }
-    Object.assign(moduleRoutes, module.webRoutes({
-      dependencies,
-      cachedJson: async () => new Response(""),
-      kernel
-    }));
-  }
-  return applyMiddlewareToRoutes2(registerOpenApiRouteMap(moduleRoutes, ["global", "web"]), middleware);
-}
-
-// ../../src/bootstrap/createWebRoutes.ts
-function registerRoute(method, path, middleware) {
-  routeRegistry.register({ method, path, middleware });
-}
-function createWebRoutes(dependencies, options = {}) {
-  const wrappedRoutes = buildWebModuleRoutes(dependencies, {
-    clearRegistry: false,
-    modules: options.modules
-  });
-  registerRoute("GET", "/", ["global", "web"]);
-  wrappedRoutes["/assets/*"] = async (request) => {
-    registerRoute("GET", "/assets/*", ["global", "web"]);
-    const pathname = new URL(request.url).pathname;
-    const relativePath = pathname.replace(/^\//, "");
-    const file = Bun.file(join3(process.cwd(), "public", relativePath));
-    if (!await file.exists()) {
-      return notFoundHtmlResponse();
-    }
-    return new Response(file);
-  };
-  registerRoute("GET", "/assets/*", ["global", "web"]);
-  return wrappedRoutes;
-}
-function mergeWebRoutes(dependencies, routes, options = {}) {
-  if (!isViewsEnabled3()) {
-    return routes;
-  }
-  return {
-    ...createWebRoutes(dependencies, options),
-    ...routes
-  };
-}
-
-// ../../src/bootstrap/dogfoodApp.ts
-function isHiroappDogfood() {
-  return true;
-}
-
-// ../../src/bootstrap/health.ts
-import { getBoundDatabaseConnection } from "@getstrata/core/database/boundConnection";
-import { getDefaultDatabasePool } from "@getstrata/core/database/defaultConnection";
-import { jsonResponse as jsonResponse2 } from "@getstrata/core/http/response";
-var {RedisClient } = globalThis.Bun;
-function resolveRedisUrl(dependencies) {
-  if (!dependencies.container.has(CORE_CONFIG_TOKEN)) {
-    return process.env.REDIS_URL?.trim() || undefined;
-  }
-  const config = dependencies.container.resolve(CORE_CONFIG_TOKEN);
-  const redisUrl = config.get(REDIS_URL_CONFIG_KEY)?.trim();
-  return redisUrl || undefined;
-}
-function resolveHealthDatabase() {
-  const bound = getBoundDatabaseConnection();
-  if (bound) {
-    return bound;
-  }
-  try {
-    return getDefaultDatabasePool();
-  } catch {
-    return null;
-  }
-}
-async function pingDatabaseClient(connection) {
-  try {
-    await connection.unsafe("SELECT 1");
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function checkDatabase() {
-  const connection = resolveHealthDatabase();
-  if (!connection) {
-    return false;
-  }
-  return await pingDatabaseClient(connection);
-}
-async function pingDatabase() {
-  return await checkDatabase();
-}
-async function checkRedis(redisUrl) {
-  try {
-    const client = new RedisClient(redisUrl);
-    const response = await client.ping();
-    return response === "PONG";
-  } catch {
-    return false;
-  }
-}
-async function resolveExtraFields(extra) {
-  if (!extra) {
-    return {};
-  }
-  return typeof extra === "function" ? await extra() : extra;
-}
-async function collectDependencyChecks(dependencies) {
-  const checks = {
-    database: await checkDatabase() ? "ok" : "error"
-  };
-  const redisUrl = resolveRedisUrl(dependencies);
-  if (redisUrl) {
-    checks.redis = await checkRedis(redisUrl) ? "ok" : "error";
-  } else {
-    checks.redis = "skipped";
-  }
-  const ready = checks.database === "ok" && (checks.redis === "ok" || checks.redis === "skipped");
-  return { checks, ready };
-}
-function createHealthRoutes(dependencies, options = {}) {
-  return {
-    "/health": async () => {
-      const extra = await resolveExtraFields(options.extra);
-      if (!options.pingOnHealth) {
-        return jsonResponse2({ status: "ok", ...extra });
-      }
-      const { checks, ready } = await collectDependencyChecks(dependencies);
-      return jsonResponse2({
-        status: ready ? "ok" : "error",
-        checks,
-        ...extra
-      }, { status: ready ? 200 : 503 });
-    },
-    "/ready": async () => {
-      const extra = await resolveExtraFields(options.extra);
-      const { checks, ready } = await collectDependencyChecks(dependencies);
-      return jsonResponse2({
-        status: ready ? "ready" : "not_ready",
-        checks,
-        ...extra
-      }, { status: ready ? 200 : 503 });
-    }
-  };
-}
-
-// ../../src/bootstrap/metricsRoutes.ts
-import { timingSafeEqual } from "crypto";
-import { prometheusRegistry } from "@getstrata/core/metrics/prometheus";
-function tokensMatch(left, right) {
-  const leftBuffer = Buffer.from(left);
-  const rightBuffer = Buffer.from(right);
-  if (leftBuffer.length !== rightBuffer.length) {
-    return false;
-  }
-  return timingSafeEqual(leftBuffer, rightBuffer);
-}
-function authorizeMetrics(request) {
-  const expected = process.env.METRICS_TOKEN?.trim();
-  const authorization = request.headers.get("authorization") ?? "";
-  const presented = authorization.startsWith("Bearer ") ? authorization.slice("Bearer ".length) : "";
-  if (expected) {
-    return presented.length > 0 && tokensMatch(presented, expected);
-  }
-  if ((process.env.APP_ENV ?? "local") === "production") {
-    return false;
-  }
-  return true;
-}
-function createMetricsRoutes() {
-  return {
-    "/metrics": async (request) => {
-      if (!authorizeMetrics(request)) {
-        return new Response("Not Found", { status: 404 });
-      }
-      return new Response(prometheusRegistry.renderMetrics(), {
-        status: 200,
-        headers: {
-          "content-type": "text/plain; version=0.0.4; charset=utf-8"
-        }
-      });
-    }
-  };
-}
-
-// ../../src/bootstrap/createRoutes.ts
-function registerRoute2(method, path, middleware) {
-  routeRegistry.register({ method, path, middleware });
-}
-function createRoutes(dependencies) {
-  const apiPrefix = isHiroappDogfood() ? "" : appConfig.apiPrefix;
-  const wrappedModuleRoutes = buildModuleRoutes(dependencies, {
-    apiPrefix,
-    clearRegistry: true,
-    modules: []
-  });
-  const healthRoutes = createHealthRoutes(dependencies);
-  const metricsRoutes = createMetricsRoutes();
-  registerRoute2("GET", "/health", []);
-  registerRoute2("GET", "/ready", []);
-  registerRoute2("GET", "/metrics", []);
-  const notFoundApiPath = `${apiPrefix || "/api"}/*`;
-  const baseRoutes = {
-    ...healthRoutes,
-    ...metricsRoutes,
-    ...isViewsEnabled4() || isSpaEnabled2() ? {} : { "/": strata_default },
-    ...wrappedModuleRoutes,
-    [notFoundApiPath]: async () => {
-      registerRoute2("GET", notFoundApiPath, ["global", "api"]);
-      return jsonResponse3({ error: "Not Found" }, { status: 404 });
-    },
-    "/*": async () => {
-      registerRoute2("GET", "/*", []);
-      if (isViewsEnabled4()) {
-        return notFoundHtmlResponse2();
-      }
-      if (isSpaEnabled2()) {
-        return jsonResponse3({ error: "Not Found" }, { status: 404 });
-      }
-      return jsonResponse3({ error: "Not Found" }, { status: 404 });
-    }
-  };
-  return mergeSpaRoutes(dependencies, mergeWebRoutes(dependencies, baseRoutes));
-}
-export {
-  createRoutes
-};