@guren/server 1.2.0 → 1.3.0

package/dist/{Application-DN9Ndl37.d.ts → Application-DImeY-VW.d.ts}

@@ -1,13 +1,13 @@
 import * as hono from 'hono';
 import { Context, MiddlewareHandler, Hono, Next, ExecutionContext } from 'hono';
-import { l as OAuthManager, g as AuthContext, j as ApiToken, C as CreateSessionMiddlewareOptions } from './api-token-BSSCLlFW.js';
-import { A as AuthManager } from './AuthManager-SfhCNkAU.js';
+import { l as OAuthManager, g as AuthContext, j as ApiToken, C as CreateSessionMiddlewareOptions } from './api-token-CB12xnVg.js';
+import { A as AuthManager } from './AuthManager-BU8ZvenF.js';
 import { InlineConfig, ViteDevServer } from 'vite';
 import { E as EventManager } from './EventManager-CmIoLt7r.js';
 import { C as CacheManager } from './CacheManager-BkvHEOZX.js';
 import { M as MailManager } from './MailManager-DpMvYiP9.js';
 import { L as LogManager } from './LogManager-7mxnkaPM.js';
-import { I as I18nManager } from './I18nManager-BiSoczfV.js';
+import { I as I18nManager } from './I18nManager-CmUqj6bU.js';
 import { B as BroadcastManager } from './BroadcastManager-CGWl9rUO.js';
 import { E as Encrypter, A as AppKeyring } from './app-key-CsBfRC_Q.js';
 import { S as StorageManager } from './StorageManager-oZTHqaza.js';
@@ -200,7 +200,7 @@ declare function getValidatedData<T = Record<string, unknown>>(ctx: Context): T
  *
  * const CreateUserSchema = z.object({
  *   name: z.string().min(1),
- *   email: z.string().email(),
+ *   email: z.email(),
  * })
  *
  * app.post('/users', validateRequest(CreateUserSchema), (c) => {
@@ -1260,6 +1260,7 @@ interface ServiceBindings {
 /** Structural type for DI containers, avoiding a hard dependency on Container. */
 interface ContainerLike {
     make(key: string): unknown;
+    has?(key: string): boolean;
 }
 /**
  * Duck-type interface for Zod-like schemas.
@@ -1943,6 +1944,10 @@ declare class RouterMiddlewareGroupBuilder<M extends string = never> {
     delete<TParamsSchema extends SchemaLike<unknown>, TQuerySchema extends SchemaLike<unknown>, TBodySchema extends SchemaLike<unknown>, TOutputSchema extends SchemaLike<unknown>>(path: string, options: RouteContractOptions<TParamsSchema, TQuerySchema, TBodySchema, TOutputSchema>, handler: TypedRouteHandler<TParamsSchema, TQuerySchema, TBodySchema, TOutputSchema>): RouteBuilder<M>;
 }
 
+/**
+ * Constructor shape accepted wherever a provider class can be registered.
+ */
+type ServiceProviderConstructor = new (container: Container) => ServiceProvider;
 /**
  * Base service provider class.
  *
@@ -2010,11 +2015,11 @@ declare class ProviderManager {
     /**
      * Register a provider.
      */
-    register(providerOrClass: ServiceProvider | (new (container: Container) => ServiceProvider)): this;
+    register(providerOrClass: ServiceProvider | ServiceProviderConstructor): this;
     /**
      * Register multiple providers.
      */
-    registerMany(providers: Array<ServiceProvider | (new (container: Container) => ServiceProvider)>): this;
+    registerMany(providers: Array<ServiceProvider | ServiceProviderConstructor>): this;
     /**
      * Register all non-deferred providers.
      */
@@ -2063,10 +2068,7 @@ interface StartedViteDevServer {
 declare function startViteDevServer(options?: StartViteDevServerOptions): Promise<StartedViteDevServer>;
 
 type BootCallback = (app: Hono) => void | Promise<void>;
-/**
- * Service provider class constructor type.
- */
-type ServiceProviderConstructor = new (container: Container) => ServiceProvider;
+
 type RouteRegistration = (router: Router) => void | Promise<void>;
 type ApplicationFeatures = Record<string, unknown>;
 interface ApplicationOptions {
@@ -2181,4 +2183,4 @@ declare class Application {
 }
 declare function createApp(options?: ApplicationOptions): Application;
 
-export { type NotificationAttachment as $, Application as A, type InertiaPagePayload as B, Container as C, type DevBannerOptions as D, type ErrorResponse as E, type FailedJob as F, GUREN_ASCII_ART as G, type HostAuthorizationOptions as H, type InertiaOptions as I, type InertiaResponse as J, type InertiaSharedProps as K, type InertiaSsrContext as L, type InertiaSsrOptions as M, NotificationManager as N, type InertiaSsrRenderer as O, type Provider as P, QueueManager as Q, type InertiaSsrResult as R, ServiceProvider as S, type InferInertiaProps as T, Job as U, type JobClass as V, type JobFailureHandler as W, type JobHandler as X, type JobOptions as Y, type Notifiable as Z, Notification as _, type StartViteDevServerOptions as a, setExceptionHandler as a$, type NotificationChannel as a0, type NotificationChannelFactory as a1, type NotificationClass as a2, type NotificationMailMessage as a3, type NotificationManagerOptions as a4, ProviderManager as a5, type QueueConfig as a6, type QueueDriver as a7, type QueueDriverFactory as a8, type QueuedJob as a9, abortIf as aA, abortUnless as aB, clearJobRegistry as aC, createApp as aD, createContainer as aE, createCsrfMiddleware as aF, createExceptionHandler as aG, createHostAuthorizationMiddleware as aH, createNotificationManager as aI, createQueueManager as aJ, createSecurityHeaders as aK, csrfField as aL, formatValidationErrors as aM, getContainer as aN, getCsrfToken as aO, getExceptionHandler as aP, getInertiaSharedPropsResolver as aQ, getJob as aR, getNotificationManager as aS, getQueueDriver as aT, getRegisteredJobs as aU, getValidatedData as aV, inertia as aW, parseRequestPayload as aX, registerJob as aY, resolve as aZ, setContainer as a_, type RendererRegistration as aa, type ResolvedSharedInertiaProps as ab, type ResourceRouteOptions as ac, type RouteBuilder as ad, type RouteContractOptions as ae, type RouteDefinition as af, type RouteOpenApiMetadata as ag, type ResourceAction as ah, Router as ai, type SecurityHeadersOptions as aj, type SentNotification as ak, type ServiceBinding as al, type ServiceClass as am, type ServiceFactory as an, type ServiceProviderClass as ao, type ServiceProviderConstructor as ap, type ServiceProviderOptions as aq, type SharedInertiaPropsResolver as ar, type SlackAttachment as as, type SlackBlock as at, type SlackMessage as au, VALIDATED_DATA_KEY as av, type ValidateRequestOptions as aw, type ValidationSchema as ax, type WorkerOptions as ay, abort as az, type StartedViteDevServer as b, setInertiaSharedProps as b0, setNotificationManager as b1, setQueueDriver as b2, shareInertiaProps as b3, validate as b4, validateRequest as b5, validateRequestWith as b6, validateSafe as b7, verifyCsrfToken as b8, type ServiceBindings as c, type ApplicationListenOptions as d, type ApplicationOptions as e, type AuthPayload as f, type AuthPluginOptions as g, CSRF_FORM_FIELD as h, CSRF_HEADER_NAME as i, CSRF_TOKEN_KEY as j, type ContextualBinding as k, logDevServerBanner as l, type ContextualBindingBuilder as m, type ContextualNeedsBuilder as n, Controller as o, type ControllerInertiaProps as p, type CsrfOptions as q, type DatabaseChannelOptions as r, startViteDevServer as s, type DatabaseNotification as t, type ExceptionClass as u, ExceptionHandler as v, type ExceptionHandlerOptions as w, type ExceptionRenderer as x, type ExceptionReporter as y, type HstsOptions as z };
+export { Notification as $, Application as A, type HstsOptions as B, Container as C, type DevBannerOptions as D, type ErrorResponse as E, type FailedJob as F, GUREN_ASCII_ART as G, type HostAuthorizationOptions as H, type InertiaOptions as I, type InertiaPagePayload as J, type InertiaResponse as K, type InertiaSharedProps as L, type InertiaSsrContext as M, NotificationManager as N, type InertiaSsrOptions as O, type Provider as P, QueueManager as Q, type InertiaSsrRenderer as R, ServiceProvider as S, type InertiaSsrResult as T, type InferInertiaProps as U, Job as V, type JobClass as W, type JobFailureHandler as X, type JobHandler as Y, type JobOptions as Z, type Notifiable as _, type StartViteDevServerOptions as a, setExceptionHandler as a$, type NotificationAttachment as a0, type NotificationChannel as a1, type NotificationChannelFactory as a2, type NotificationClass as a3, type NotificationMailMessage as a4, type NotificationManagerOptions as a5, ProviderManager as a6, type QueueConfig as a7, type QueueDriver as a8, type QueueDriverFactory as a9, abortIf as aA, abortUnless as aB, clearJobRegistry as aC, createApp as aD, createContainer as aE, createCsrfMiddleware as aF, createExceptionHandler as aG, createHostAuthorizationMiddleware as aH, createNotificationManager as aI, createQueueManager as aJ, createSecurityHeaders as aK, csrfField as aL, formatValidationErrors as aM, getContainer as aN, getCsrfToken as aO, getExceptionHandler as aP, getInertiaSharedPropsResolver as aQ, getJob as aR, getNotificationManager as aS, getQueueDriver as aT, getRegisteredJobs as aU, getValidatedData as aV, inertia as aW, parseRequestPayload as aX, registerJob as aY, resolve as aZ, setContainer as a_, type QueuedJob as aa, type RendererRegistration as ab, type ResolvedSharedInertiaProps as ac, type ResourceRouteOptions as ad, type RouteBuilder as ae, type RouteContractOptions as af, type RouteDefinition as ag, type RouteOpenApiMetadata as ah, type ResourceAction as ai, Router as aj, type SecurityHeadersOptions as ak, type SentNotification as al, type ServiceBinding as am, type ServiceClass as an, type ServiceFactory as ao, type ServiceProviderClass as ap, type ServiceProviderOptions as aq, type SharedInertiaPropsResolver as ar, type SlackAttachment as as, type SlackBlock as at, type SlackMessage as au, VALIDATED_DATA_KEY as av, type ValidateRequestOptions as aw, type ValidationSchema as ax, type WorkerOptions as ay, abort as az, type StartedViteDevServer as b, setInertiaSharedProps as b0, setNotificationManager as b1, setQueueDriver as b2, shareInertiaProps as b3, validate as b4, validateRequest as b5, validateRequestWith as b6, validateSafe as b7, verifyCsrfToken as b8, type ServiceProviderConstructor as c, type ServiceBindings as d, type ApplicationListenOptions as e, type ApplicationOptions as f, type AuthPayload as g, type AuthPluginOptions as h, CSRF_FORM_FIELD as i, CSRF_HEADER_NAME as j, CSRF_TOKEN_KEY as k, logDevServerBanner as l, type ContextualBinding as m, type ContextualBindingBuilder as n, type ContextualNeedsBuilder as o, Controller as p, type ControllerInertiaProps as q, type CsrfOptions as r, startViteDevServer as s, type DatabaseChannelOptions as t, type DatabaseNotification as u, type ExceptionClass as v, ExceptionHandler as w, type ExceptionHandlerOptions as x, type ExceptionRenderer as y, type ExceptionReporter as z };

package/dist/{AuthManager-SfhCNkAU.d.ts → AuthManager-BU8ZvenF.d.ts}

@@ -1,6 +1,6 @@
 import { Context } from 'hono';
 import { Model } from '@guren/orm';
-import { A as Authenticatable, U as UserProvider, a as AuthCredentials, b as AuthManagerContract, c as AuthManagerOptions, G as GuardFactory, P as ProviderFactory, d as GuardContext, e as Guard, f as AttachContextOptions, g as AuthContext } from './api-token-BSSCLlFW.js';
+import { A as Authenticatable, U as UserProvider, a as AuthCredentials, b as AuthManagerContract, c as AuthManagerOptions, G as GuardFactory, P as ProviderFactory, d as GuardContext, e as Guard, f as AttachContextOptions, g as AuthContext } from './api-token-CB12xnVg.js';
 
 interface PasswordHasher {
     hash(plain: string): Promise<string>;

package/dist/{ConsoleKernel-DxmUxdAz.d.ts → ConsoleKernel-COKndy_V.d.ts}

@@ -1,4 +1,4 @@
-import { C as Container } from './Application-DN9Ndl37.js';
+import { C as Container } from './Application-DImeY-VW.js';
 
 /**
  * Parsed argument definition.

package/dist/{I18nManager-BiSoczfV.d.ts → I18nManager-CmUqj6bU.d.ts}

@@ -272,4 +272,4 @@ declare function t(key: string, replacements?: ReplacementValues): string;
  */
 declare function tc(key: string, count: number, replacements?: ReplacementValues): string;
 
-export { I18nManager as I, type PluralizationRule as P, type ReplacementValues as R, type TranslationLoader as T, type I18nConfig as a, type TranslationLoaderFactory as b, type TranslationMessages as c, Translator as d, type TranslatorOptions as e, createI18n as f, getI18n as g, tc as h, setI18n as s, t };
+export { I18nManager as I, type PluralizationRule as P, type ReplacementValues as R, Translator as T, type I18nConfig as a, type TranslationLoader as b, type TranslationLoaderFactory as c, type TranslationMessages as d, type TranslatorOptions as e, createI18n as f, getI18n as g, tc as h, setI18n as s, t };

package/dist/{McpServiceProvider-JW6PDVMD.js → McpServiceProvider-RNTDHZAZ.js}

@@ -1,7 +1,7 @@
 import {
   McpServiceProvider
-} from "./chunk-WVY45EIW.js";
-import "./chunk-VT5KRDPH.js";
+} from "./chunk-J753UWAY.js";
+import "./chunk-STZUODC3.js";
 export {
   McpServiceProvider
 };

package/dist/{api-token-BSSCLlFW.d.ts → api-token-CB12xnVg.d.ts}

@@ -90,6 +90,37 @@ interface UserProvider<User = Authenticatable> {
      */
     sanitize?(user: User): User;
 }
+/**
+ * The conventional names for the credential columns that
+ * `ModelUserProvider.sanitize()` strips: the password column (`password`
+ * by default, commonly configured as `passwordHash`/`password_hash`) and
+ * the remember-token column (`remember_token` by default, commonly
+ * `rememberToken`).
+ */
+type DefaultSanitizedKeys = 'password' | 'passwordHash' | 'password_hash' | 'rememberToken' | 'remember_token';
+/**
+ * The shape of a user record after auth-layer sanitization — what
+ * `auth.user()` returns at runtime when the provider's column names
+ * follow the {@link DefaultSanitizedKeys} conventions. Removes those
+ * conventional credential keys plus any extra keys passed as `Hidden`.
+ *
+ * The runtime strips exactly the *configured* password/remember-token
+ * columns plus the model's `static hidden` — a static type cannot see
+ * that configuration. If your columns use other names, or the model
+ * hides additional fields, list them in `Hidden` explicitly. Only
+ * meaningful for concrete record types (index-signature records like
+ * `Record<string, string>` cannot have individual keys removed).
+ *
+ * @example
+ * ```ts
+ * const user = await this.auth.userOrFail<Sanitized<UserRecord>>()
+ * user.passwordHash // compile error — stripped at runtime
+ *
+ * // With additional hidden fields or custom column names:
+ * type SafeUser = Sanitized<UserRecord, 'twoFactorSecret' | 'credentialDigest'>
+ * ```
+ */
+type Sanitized<User, Hidden extends string = never> = User extends unknown ? Omit<User, Extract<keyof User, DefaultSanitizedKeys | Hidden>> : never;
 interface GuardContext {
     ctx: Context;
     session: Session | undefined;
@@ -170,6 +201,12 @@ interface OAuthStateConfig {
     expiresIn?: number;
     stateLength?: number;
     hashAlgorithm?: 'sha256' | 'sha512';
+    /**
+     * External hosts allowed as `redirectTo` targets (supports `*.example.com`
+     * wildcards). App-relative paths (`/dashboard`) are always allowed; anything
+     * else is dropped to prevent open redirects.
+     */
+    allowedRedirectHosts?: string[];
 }
 interface OAuthAuthorizeOptions {
     scope?: string[];
@@ -211,6 +248,16 @@ declare class OAuthManager {
         expiresAt: Date;
     }>;
     user(providerName: string, payload: OAuthCallbackPayload): Promise<OAuthUserProfile>;
+    /**
+     * Verify the callback and return the user profile together with the
+     * sanitized `redirectTo` stored at authorize time. `redirectTo` is safe to
+     * pass to a redirect response: app-relative paths and allowlisted hosts
+     * only.
+     */
+    handleCallback(providerName: string, payload: OAuthCallbackPayload): Promise<{
+        profile: OAuthUserProfile;
+        redirectTo?: string;
+    }>;
 }
 declare function createOAuthManager(options?: OAuthManagerOptions): OAuthManager;
 declare function createOAuthState(provider: string, store: OAuthStateStore, config?: OAuthStateConfig, redirectTo?: string, fixedState?: string): Promise<{
@@ -218,6 +265,14 @@ declare function createOAuthState(provider: string, store: OAuthStateStore, conf
     expiresAt: Date;
 }>;
 declare function verifyOAuthState(state: string, provider: string, store: OAuthStateStore, config?: OAuthStateConfig): Promise<OAuthStatePayload | null>;
+/**
+ * Reduce a `redirectTo` value to a safe target: app-relative paths always
+ * pass; absolute http(s) URLs pass only when their host is in the allowlist
+ * (supports `*.example.com` wildcards). Everything else — protocol-relative
+ * URLs, backslash tricks, `javascript:` and other schemes — returns
+ * `undefined`.
+ */
+declare function sanitizeOAuthRedirect(redirectTo: string | undefined, allowedHosts?: string[]): string | undefined;
 declare function buildOAuthAuthorizeUrl(provider: OAuthProviderConfig, state: string, options?: {
     scope?: string[];
     extraParams?: Record<string, string>;
@@ -538,4 +593,4 @@ declare function getApiTokenOrFail(ctx: Context): {
     abilities: string[];
 };
 
-export { revokeAllApiTokens as $, type Authenticatable as A, type BearerTokenMiddlewareOptions as B, type CreateSessionMiddlewareOptions as C, buildOAuthAuthorizeUrl as D, buildOAuthRedirectUrl as E, createApiToken as F, type GuardFactory as G, createBearerTokenMiddleware as H, createDiscordOAuthProviderConfig as I, createGitHubOAuthProviderConfig as J, createGoogleOAuthProviderConfig as K, createOAuthManager as L, MemoryApiTokenStore as M, createOAuthState as N, type OAuthStateStore as O, type ProviderFactory as P, createSessionMiddleware as Q, exchangeOAuthCode as R, type SessionStore as S, fetchOAuthUserProfile as T, type UserProvider as U, getApiToken as V, getApiTokenOrFail as W, getSessionFromContext as X, getUserApiTokens as Y, parseApiToken as Z, parseOAuthRedirectUrl as _, type AuthCredentials as a, revokeApiToken as a0, tokenCan as a1, tokenCanAll as a2, tokenCanAny as a3, verifyApiToken as a4, verifyOAuthState as a5, type AuthManagerContract as b, type AuthManagerOptions as c, type GuardContext as d, type Guard as e, type AttachContextOptions as f, type AuthContext as g, type SessionData as h, type ApiTokenStore as i, type ApiToken as j, type OAuthStatePayload as k, OAuthManager as l, API_TOKEN_KEY as m, type CreateApiTokenOptions as n, type CreateApiTokenResult as o, MemoryOAuthStateStore as p, MemorySessionStore as q, type OAuthAuthorizeOptions as r, type OAuthCallbackPayload as s, type OAuthManagerOptions as t, type OAuthProviderConfig as u, type OAuthProviderFactoryInput as v, type OAuthStateConfig as w, type OAuthTokenResult as x, type OAuthUserProfile as y, type Session as z };
+export { parseApiToken as $, type Authenticatable as A, type BearerTokenMiddlewareOptions as B, type CreateSessionMiddlewareOptions as C, type DefaultSanitizedKeys as D, type Session as E, buildOAuthAuthorizeUrl as F, type GuardFactory as G, buildOAuthRedirectUrl as H, createApiToken as I, createBearerTokenMiddleware as J, createDiscordOAuthProviderConfig as K, createGitHubOAuthProviderConfig as L, MemoryApiTokenStore as M, createGoogleOAuthProviderConfig as N, type OAuthStateStore as O, type ProviderFactory as P, createOAuthManager as Q, createOAuthState as R, type SessionStore as S, createSessionMiddleware as T, type UserProvider as U, exchangeOAuthCode as V, fetchOAuthUserProfile as W, getApiToken as X, getApiTokenOrFail as Y, getSessionFromContext as Z, getUserApiTokens as _, type AuthCredentials as a, parseOAuthRedirectUrl as a0, revokeAllApiTokens as a1, revokeApiToken as a2, sanitizeOAuthRedirect as a3, tokenCan as a4, tokenCanAll as a5, tokenCanAny as a6, verifyApiToken as a7, verifyOAuthState as a8, type AuthManagerContract as b, type AuthManagerOptions as c, type GuardContext as d, type Guard as e, type AttachContextOptions as f, type AuthContext as g, type SessionData as h, type ApiTokenStore as i, type ApiToken as j, type OAuthStatePayload as k, OAuthManager as l, API_TOKEN_KEY as m, type CreateApiTokenOptions as n, type CreateApiTokenResult as o, MemoryOAuthStateStore as p, MemorySessionStore as q, type OAuthAuthorizeOptions as r, type OAuthCallbackPayload as s, type OAuthManagerOptions as t, type OAuthProviderConfig as u, type OAuthProviderFactoryInput as v, type OAuthStateConfig as w, type OAuthTokenResult as x, type OAuthUserProfile as y, type Sanitized as z };

package/dist/auth/index.d.ts

@@ -1,9 +1,9 @@
-import { P as PasswordHasher } from '../AuthManager-SfhCNkAU.js';
-export { A as AuthManager, B as BaseUserProvider, M as ModelUserProvider } from '../AuthManager-SfhCNkAU.js';
-import { A as Authenticatable, e as Guard, U as UserProvider, z as Session, a as AuthCredentials } from '../api-token-BSSCLlFW.js';
-export { m as API_TOKEN_KEY, j as ApiToken, i as ApiTokenStore, f as AttachContextOptions, g as AuthContext, b as AuthManagerContract, c as AuthManagerOptions, B as BearerTokenMiddlewareOptions, n as CreateApiTokenOptions, o as CreateApiTokenResult, d as GuardContext, G as GuardFactory, M as MemoryApiTokenStore, p as MemoryOAuthStateStore, r as OAuthAuthorizeOptions, s as OAuthCallbackPayload, l as OAuthManager, t as OAuthManagerOptions, u as OAuthProviderConfig, v as OAuthProviderFactoryInput, w as OAuthStateConfig, k as OAuthStatePayload, O as OAuthStateStore, x as OAuthTokenResult, y as OAuthUserProfile, P as ProviderFactory, D as buildOAuthAuthorizeUrl, E as buildOAuthRedirectUrl, F as createApiToken, H as createBearerTokenMiddleware, I as createDiscordOAuthProviderConfig, J as createGitHubOAuthProviderConfig, K as createGoogleOAuthProviderConfig, L as createOAuthManager, N as createOAuthState, R as exchangeOAuthCode, T as fetchOAuthUserProfile, V as getApiToken, W as getApiTokenOrFail, Y as getUserApiTokens, Z as parseApiToken, _ as parseOAuthRedirectUrl, $ as revokeAllApiTokens, a0 as revokeApiToken, a1 as tokenCan, a2 as tokenCanAll, a3 as tokenCanAny, a4 as verifyApiToken, a5 as verifyOAuthState } from '../api-token-BSSCLlFW.js';
+import { P as PasswordHasher } from '../AuthManager-BU8ZvenF.js';
+export { A as AuthManager, B as BaseUserProvider, M as ModelUserProvider } from '../AuthManager-BU8ZvenF.js';
+import { A as Authenticatable, e as Guard, U as UserProvider, E as Session, a as AuthCredentials } from '../api-token-CB12xnVg.js';
+export { m as API_TOKEN_KEY, j as ApiToken, i as ApiTokenStore, f as AttachContextOptions, g as AuthContext, b as AuthManagerContract, c as AuthManagerOptions, B as BearerTokenMiddlewareOptions, n as CreateApiTokenOptions, o as CreateApiTokenResult, D as DefaultSanitizedKeys, d as GuardContext, G as GuardFactory, M as MemoryApiTokenStore, p as MemoryOAuthStateStore, r as OAuthAuthorizeOptions, s as OAuthCallbackPayload, l as OAuthManager, t as OAuthManagerOptions, u as OAuthProviderConfig, v as OAuthProviderFactoryInput, w as OAuthStateConfig, k as OAuthStatePayload, O as OAuthStateStore, x as OAuthTokenResult, y as OAuthUserProfile, P as ProviderFactory, z as Sanitized, F as buildOAuthAuthorizeUrl, H as buildOAuthRedirectUrl, I as createApiToken, J as createBearerTokenMiddleware, K as createDiscordOAuthProviderConfig, L as createGitHubOAuthProviderConfig, N as createGoogleOAuthProviderConfig, Q as createOAuthManager, R as createOAuthState, V as exchangeOAuthCode, W as fetchOAuthUserProfile, X as getApiToken, Y as getApiTokenOrFail, _ as getUserApiTokens, $ as parseApiToken, a0 as parseOAuthRedirectUrl, a1 as revokeAllApiTokens, a2 as revokeApiToken, a3 as sanitizeOAuthRedirect, a4 as tokenCan, a5 as tokenCanAll, a6 as tokenCanAny, a7 as verifyApiToken, a8 as verifyOAuthState } from '../api-token-CB12xnVg.js';
 import { PlainObject, Model } from '@guren/orm';
-export { b as EmailVerificationConfig, a as EmailVerificationToken, c as EmailVerificationTokenResult, E as EmailVerificationTokenStore, M as MemoryEmailVerificationStore, d as MemoryPasswordResetStore, e as PasswordResetConfig, f as PasswordResetTokenResult, P as PasswordResetTokenStore, g as buildPasswordResetUrl, q as buildTokenUrl, h as buildVerificationUrl, i as completeEmailVerification, j as completePasswordReset, k as createEmailVerificationToken, l as createPasswordResetToken, s as generateId, t as generateToken, u as hashToken, m as isEmailVerified, p as parsePasswordResetUrl, w as parseTokenUrl, n as parseVerificationUrl, r as requireVerifiedEmail, x as secureCompare, y as secureStringCompare, v as verifyEmailToken, o as verifyPasswordResetToken } from '../email-verification-CAeArjui.js';
+export { b as EmailVerificationConfig, a as EmailVerificationToken, c as EmailVerificationTokenResult, E as EmailVerificationTokenStore, M as MemoryEmailVerificationStore, d as MemoryPasswordResetStore, e as PasswordResetConfig, f as PasswordResetTokenResult, P as PasswordResetTokenStore, g as buildPasswordResetUrl, q as buildTokenUrl, h as buildVerificationUrl, i as completeEmailVerification, j as completePasswordReset, k as createEmailVerificationToken, l as createPasswordResetToken, s as generateId, t as generateToken, u as hashToken, m as isEmailVerified, p as parsePasswordResetUrl, w as parseTokenUrl, n as parseVerificationUrl, r as requireVerifiedEmail, x as secureCompare, y as secureStringCompare, v as verifyEmailToken, o as verifyPasswordResetToken } from '../email-verification-D9u7krkn.js';
 import 'hono';
 
 interface SessionGuardOptions {

package/dist/auth/index.js

@@ -45,6 +45,7 @@ import {
   requireVerifiedEmail,
   revokeAllApiTokens,
   revokeApiToken,
+  sanitizeOAuthRedirect,
   secureCompare,
   secureStringCompare,
   tokenCan,
@@ -54,7 +55,7 @@ import {
   verifyEmailToken,
   verifyOAuthState,
   verifyPasswordResetToken
-} from "../chunk-2T6JN4VR.js";
+} from "../chunk-VY2JPS6V.js";
 import "../chunk-DAQKYKLH.js";
 import "../chunk-ONSDE37A.js";
 import "../chunk-QQKTH5KX.js";
@@ -105,6 +106,7 @@ export {
   requireVerifiedEmail,
   revokeAllApiTokens,
   revokeApiToken,
+  sanitizeOAuthRedirect,
   secureCompare,
   secureStringCompare,
   tokenCan,

package/dist/{chunk-HLXL2AYJ.js → chunk-CSP7W3WY.js}

@@ -6,7 +6,7 @@ import standard from "figlet/importable-fonts/Standard.js";
 // package.json
 var package_default = {
   name: "@guren/server",
-  version: "1.2.0",
+  version: "1.3.0",
   type: "module",
   license: "MIT",
   repository: {

package/dist/{chunk-WVY45EIW.js → chunk-J753UWAY.js}

@@ -1,6 +1,6 @@
 import {
   ServiceProvider
-} from "./chunk-VT5KRDPH.js";
+} from "./chunk-STZUODC3.js";
 
 // src/mcp/create-mcp-server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/{chunk-VT5KRDPH.js → chunk-STZUODC3.js}

@@ -45,6 +45,11 @@ var ProviderManager = class {
       );
     }
     const provider = providerOrClass instanceof ServiceProvider ? providerOrClass : new providerOrClass(this.container);
+    if (provider.isDeferred() && provider.provides().length === 0) {
+      throw new Error(
+        `Deferred provider "${provider.constructor.name}" must declare at least one service in "provides", otherwise it can never be loaded.`
+      );
+    }
     if (provider.isDeferred()) {
       for (const service of provider.provides()) {
         this.deferredProviders.set(service, provider);

package/dist/{chunk-2T6JN4VR.js → chunk-VY2JPS6V.js}

@@ -155,6 +155,25 @@ var SessionImpl = class {
     return this.originalId;
   }
 };
+var TESTING_SESSION_HEADER = "x-testing-session";
+function resolveTestingSession(ctx) {
+  if (!process.env.GUREN_TESTING) {
+    return null;
+  }
+  const rawSession = ctx.req.header(TESTING_SESSION_HEADER);
+  if (!rawSession) {
+    return null;
+  }
+  try {
+    const parsed = JSON.parse(rawSession);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return null;
+    }
+    return parsed;
+  } catch {
+    return null;
+  }
+}
 function encodeBase64Url(value) {
   return Buffer.from(value, "utf8").toString("base64url");
 }
@@ -216,7 +235,9 @@ function createSessionMiddleware(options = {}) {
     const existingId = signer.verify(getCookie(ctx, cookieName));
     const sessionId = existingId ?? globalThis.crypto.randomUUID();
     const isNew = !existingId;
-    const initialData = existingId ? await store.read(existingId) ?? {} : {};
+    const storedData = existingId ? await store.read(existingId) ?? {} : {};
+    const testingData = resolveTestingSession(ctx);
+    const initialData = testingData ? { ...storedData, ...testingData } : storedData;
     const session = new SessionImpl(sessionId, initialData, isNew);
     session.ageFlashData();
     ctx.set(SESSION_CONTEXT_KEY, session);
@@ -1270,6 +1291,29 @@ function getApiTokenOrFail(ctx) {
   return result;
 }
 
+// src/support/redirect-target.ts
+function normalizeRedirectTarget(value) {
+  return value.replace(/\\/g, "/");
+}
+function isAppRelativePath(value) {
+  return value.startsWith("/") && !value.startsWith("//");
+}
+function hostMatchesAllowlist(target, allowedHosts) {
+  const hostname = target.hostname.toLowerCase();
+  const host = target.host.toLowerCase();
+  for (const allowed of allowedHosts) {
+    if (allowed.startsWith("*.")) {
+      const suffix = allowed.slice(1).toLowerCase();
+      if (hostname.endsWith(suffix) && hostname.length > suffix.length) {
+        return true;
+      }
+    } else if (host === allowed.toLowerCase()) {
+      return true;
+    }
+  }
+  return false;
+}
+
 // src/auth/oauth/index.ts
 var DEFAULT_STATE_EXPIRES_IN = 10 * 60 * 1e3;
 var DEFAULT_STATE_LENGTH = 24;
@@ -1324,7 +1368,8 @@ var OAuthManager = class {
     this.stateConfig = {
       expiresIn: options.stateConfig?.expiresIn ?? DEFAULT_STATE_EXPIRES_IN,
       stateLength: options.stateConfig?.stateLength ?? DEFAULT_STATE_LENGTH,
-      hashAlgorithm: options.stateConfig?.hashAlgorithm ?? DEFAULT_STATE_HASH_ALGORITHM
+      hashAlgorithm: options.stateConfig?.hashAlgorithm ?? DEFAULT_STATE_HASH_ALGORITHM,
+      allowedRedirectHosts: options.stateConfig?.allowedRedirectHosts ?? []
     };
   }
   registerProvider(name, config) {
@@ -1354,13 +1399,24 @@ var OAuthManager = class {
     return { url, state, expiresAt };
   }
   async user(providerName, payload) {
+    const { profile } = await this.handleCallback(providerName, payload);
+    return profile;
+  }
+  /**
+   * Verify the callback and return the user profile together with the
+   * sanitized `redirectTo` stored at authorize time. `redirectTo` is safe to
+   * pass to a redirect response: app-relative paths and allowlisted hosts
+   * only.
+   */
+  async handleCallback(providerName, payload) {
     const provider = this.getProvider(providerName);
     const verified = await verifyOAuthState(payload.state, providerName, this.stateStore, this.stateConfig);
     if (!verified) {
       throw new AuthenticationException("Invalid or expired OAuth state.");
     }
     const token = await exchangeOAuthCode(provider, payload.code);
-    return fetchOAuthUserProfile(provider, token);
+    const profile = await fetchOAuthUserProfile(provider, token);
+    return { profile, redirectTo: verified.redirectTo };
   }
 };
 function createOAuthManager(options = {}) {
@@ -1371,7 +1427,11 @@ async function createOAuthState(provider, store, config = {}, redirectTo, fixedS
   const hashAlgorithm = config.hashAlgorithm ?? DEFAULT_STATE_HASH_ALGORITHM;
   const expiresAt = new Date(Date.now() + (config.expiresIn ?? DEFAULT_STATE_EXPIRES_IN));
   const stateHash = hashToken(state, hashAlgorithm);
-  await store.store(stateHash, { provider, redirectTo, expiresAt });
+  await store.store(stateHash, {
+    provider,
+    redirectTo: sanitizeOAuthRedirect(redirectTo, config.allowedRedirectHosts),
+    expiresAt
+  });
   return { state, expiresAt };
 }
 async function verifyOAuthState(state, provider, store, config = {}) {
@@ -1381,7 +1441,26 @@ async function verifyOAuthState(state, provider, store, config = {}) {
   if (!payload) return null;
   await store.delete(stateHash);
   if (payload.provider !== provider) return null;
-  return payload;
+  return { ...payload, redirectTo: sanitizeOAuthRedirect(payload.redirectTo, config.allowedRedirectHosts) };
+}
+function sanitizeOAuthRedirect(redirectTo, allowedHosts = []) {
+  const value = redirectTo?.trim();
+  if (!value) {
+    return void 0;
+  }
+  const normalized = normalizeRedirectTarget(value);
+  if (isAppRelativePath(normalized)) {
+    return normalized;
+  }
+  try {
+    const target = new URL(normalized);
+    if (target.protocol !== "http:" && target.protocol !== "https:") {
+      return void 0;
+    }
+    return hostMatchesAllowlist(target, allowedHosts) ? normalized : void 0;
+  } catch {
+    return void 0;
+  }
 }
 function buildOAuthAuthorizeUrl(provider, state, options = {}) {
   const url = new URL(provider.authorizeUrl);
@@ -1517,6 +1596,9 @@ export {
   parseTokenUrl,
   SessionGuard,
   AuthManager,
+  normalizeRedirectTarget,
+  isAppRelativePath,
+  hostMatchesAllowlist,
   MemoryApiTokenStore,
   createApiToken,
   parseApiToken,
@@ -1536,6 +1618,7 @@ export {
   createOAuthManager,
   createOAuthState,
   verifyOAuthState,
+  sanitizeOAuthRedirect,
   buildOAuthAuthorizeUrl,
   exchangeOAuthCode,
   fetchOAuthUserProfile,

package/dist/{email-verification-CAeArjui.d.ts → email-verification-D9u7krkn.d.ts}

@@ -1,4 +1,4 @@
-import { A as Authenticatable, U as UserProvider } from './api-token-BSSCLlFW.js';
+import { A as Authenticatable, U as UserProvider } from './api-token-CB12xnVg.js';
 
 /**
  * Hash a token using SHA-256 or SHA-512.

package/dist/i18n/index.d.ts

@@ -1,5 +1,5 @@
-import { P as PluralizationRule, T as TranslationLoader, c as TranslationMessages } from '../I18nManager-BiSoczfV.js';
-export { a as I18nConfig, I as I18nManager, R as ReplacementValues, b as TranslationLoaderFactory, d as Translator, e as TranslatorOptions, f as createI18n, g as getI18n, s as setI18n, t, h as tc } from '../I18nManager-BiSoczfV.js';
+import { P as PluralizationRule, b as TranslationLoader, d as TranslationMessages } from '../I18nManager-CmUqj6bU.js';
+export { a as I18nConfig, I as I18nManager, R as ReplacementValues, c as TranslationLoaderFactory, T as Translator, e as TranslatorOptions, f as createI18n, g as getI18n, s as setI18n, t, h as tc } from '../I18nManager-CmUqj6bU.js';
 
 /**
  * Default pluralization rules for common languages.

package/dist/index.d.ts

@@ -1,14 +1,14 @@
-import { E as ErrorResponse, S as ServiceProvider, C as Container, c as ServiceBindings, Q as QueueManager, N as NotificationManager } from './Application-DN9Ndl37.js';
-export { A as Application, d as ApplicationListenOptions, e as ApplicationOptions, f as AuthPayload, g as AuthPluginOptions, h as CSRF_FORM_FIELD, i as CSRF_HEADER_NAME, j as CSRF_TOKEN_KEY, P as ContainerProvider, k as ContextualBinding, m as ContextualBindingBuilder, n as ContextualNeedsBuilder, o as Controller, p as ControllerInertiaProps, q as CsrfOptions, r as DatabaseChannelOptions, t as DatabaseNotification, u as ExceptionClass, v as ExceptionHandler, w as ExceptionHandlerOptions, x as ExceptionRenderer, y as ExceptionReporter, F as FailedJob, H as HostAuthorizationOptions, z as HstsOptions, I as InertiaOptions, B as InertiaPagePayload, J as InertiaResponse, K as InertiaSharedProps, L as InertiaSsrContext, M as InertiaSsrOptions, O as InertiaSsrRenderer, R as InertiaSsrResult, T as InferInertiaProps, U as Job, V as JobClass, W as JobFailureHandler, X as JobHandler, Y as JobOptions, Z as Notifiable, _ as Notification, $ as NotificationAttachment, a0 as NotificationChannel, a1 as NotificationChannelFactory, a2 as NotificationClass, a3 as NotificationMailMessage, a4 as NotificationManagerOptions, a5 as ProviderManager, a6 as QueueConfig, a7 as QueueDriver, a8 as QueueDriverFactory, a9 as QueuedJob, aa as RendererRegistration, ab as ResolvedSharedInertiaProps, ac as ResourceRouteOptions, ad as RouteBuilder, ae as RouteContractOptions, af as RouteDefinition, ag as RouteOpenApiMetadata, ah as RouteResourceAction, ai as Router, aj as SecurityHeadersOptions, ak as SentNotification, al as ServiceBinding, am as ServiceClass, an as ServiceFactory, ao as ServiceProviderClass, ap as ServiceProviderConstructor, aq as ServiceProviderOptions, ar as SharedInertiaPropsResolver, as as SlackAttachment, at as SlackBlock, au as SlackMessage, av as VALIDATED_DATA_KEY, aw as ValidateRequestOptions, ax as ValidationSchema, ay as WorkerOptions, az as abort, aA as abortIf, aB as abortUnless, aC as clearJobRegistry, aD as createApp, aE as createContainer, aF as createCsrfMiddleware, aG as createExceptionHandler, aH as createHostAuthorizationMiddleware, aI as createNotificationManager, aJ as createQueueManager, aK as createSecurityHeaders, aL as csrfField, aM as formatValidationErrors, aN as getContainer, aO as getCsrfToken, aP as getExceptionHandler, aQ as getInertiaSharedPropsResolver, aR as getJob, aS as getNotificationManager, aT as getQueueDriver, aU as getRegisteredJobs, aV as getValidatedData, aW as inertia, aX as parseRequestPayload, aY as registerJob, aZ as resolve, a_ as setContainer, a$ as setExceptionHandler, b0 as setInertiaSharedProps, b1 as setNotificationManager, b2 as setQueueDriver, b3 as shareInertiaProps, b4 as validate, b5 as validateRequest, b6 as validateRequestWith, b7 as validateSafe, b8 as verifyCsrfToken } from './Application-DN9Ndl37.js';
+import { E as ErrorResponse, C as Container, c as ServiceProviderConstructor, S as ServiceProvider, d as ServiceBindings, Q as QueueManager, N as NotificationManager } from './Application-DImeY-VW.js';
+export { A as Application, e as ApplicationListenOptions, f as ApplicationOptions, g as AuthPayload, h as AuthPluginOptions, i as CSRF_FORM_FIELD, j as CSRF_HEADER_NAME, k as CSRF_TOKEN_KEY, P as ContainerProvider, m as ContextualBinding, n as ContextualBindingBuilder, o as ContextualNeedsBuilder, p as Controller, q as ControllerInertiaProps, r as CsrfOptions, t as DatabaseChannelOptions, u as DatabaseNotification, v as ExceptionClass, w as ExceptionHandler, x as ExceptionHandlerOptions, y as ExceptionRenderer, z as ExceptionReporter, F as FailedJob, H as HostAuthorizationOptions, B as HstsOptions, I as InertiaOptions, J as InertiaPagePayload, K as InertiaResponse, L as InertiaSharedProps, M as InertiaSsrContext, O as InertiaSsrOptions, R as InertiaSsrRenderer, T as InertiaSsrResult, U as InferInertiaProps, V as Job, W as JobClass, X as JobFailureHandler, Y as JobHandler, Z as JobOptions, _ as Notifiable, $ as Notification, a0 as NotificationAttachment, a1 as NotificationChannel, a2 as NotificationChannelFactory, a3 as NotificationClass, a4 as NotificationMailMessage, a5 as NotificationManagerOptions, a6 as ProviderManager, a7 as QueueConfig, a8 as QueueDriver, a9 as QueueDriverFactory, aa as QueuedJob, ab as RendererRegistration, ac as ResolvedSharedInertiaProps, ad as ResourceRouteOptions, ae as RouteBuilder, af as RouteContractOptions, ag as RouteDefinition, ah as RouteOpenApiMetadata, ai as RouteResourceAction, aj as Router, ak as SecurityHeadersOptions, al as SentNotification, am as ServiceBinding, an as ServiceClass, ao as ServiceFactory, ap as ServiceProviderClass, aq as ServiceProviderOptions, ar as SharedInertiaPropsResolver, as as SlackAttachment, at as SlackBlock, au as SlackMessage, av as VALIDATED_DATA_KEY, aw as ValidateRequestOptions, ax as ValidationSchema, ay as WorkerOptions, az as abort, aA as abortIf, aB as abortUnless, aC as clearJobRegistry, aD as createApp, aE as createContainer, aF as createCsrfMiddleware, aG as createExceptionHandler, aH as createHostAuthorizationMiddleware, aI as createNotificationManager, aJ as createQueueManager, aK as createSecurityHeaders, aL as csrfField, aM as formatValidationErrors, aN as getContainer, aO as getCsrfToken, aP as getExceptionHandler, aQ as getInertiaSharedPropsResolver, aR as getJob, aS as getNotificationManager, aT as getQueueDriver, aU as getRegisteredJobs, aV as getValidatedData, aW as inertia, aX as parseRequestPayload, aY as registerJob, aZ as resolve, a_ as setContainer, a$ as setExceptionHandler, b0 as setInertiaSharedProps, b1 as setNotificationManager, b2 as setQueueDriver, b3 as shareInertiaProps, b4 as validate, b5 as validateRequest, b6 as validateRequestWith, b7 as validateSafe, b8 as verifyCsrfToken } from './Application-DImeY-VW.js';
 import * as hono from 'hono';
 import { Context, MiddlewareHandler } from 'hono';
 export { Context } from 'hono';
-import { P as PasswordHasher } from './AuthManager-SfhCNkAU.js';
-export { A as AuthManager, B as BaseUserProvider, M as ModelUserProvider } from './AuthManager-SfhCNkAU.js';
+import { P as PasswordHasher } from './AuthManager-BU8ZvenF.js';
+export { A as AuthManager, B as BaseUserProvider, M as ModelUserProvider } from './AuthManager-BU8ZvenF.js';
 export { AuthenticatableModel, NodeHasher, ScryptHasher, SessionGuard } from './auth/index.js';
-export { b as EmailVerificationConfig, a as EmailVerificationToken, c as EmailVerificationTokenResult, E as EmailVerificationTokenStore, M as MemoryEmailVerificationStore, d as MemoryPasswordResetStore, e as PasswordResetConfig, f as PasswordResetTokenResult, P as PasswordResetTokenStore, g as buildPasswordResetUrl, h as buildVerificationUrl, i as completeEmailVerification, j as completePasswordReset, k as createEmailVerificationToken, l as createPasswordResetToken, m as isEmailVerified, p as parsePasswordResetUrl, n as parseVerificationUrl, r as requireVerifiedEmail, v as verifyEmailToken, o as verifyPasswordResetToken } from './email-verification-CAeArjui.js';
-import { g as AuthContext } from './api-token-BSSCLlFW.js';
-export { m as API_TOKEN_KEY, j as ApiToken, i as ApiTokenStore, a as AuthCredentials, c as AuthManagerOptions, A as Authenticatable, B as BearerTokenMiddlewareOptions, n as CreateApiTokenOptions, o as CreateApiTokenResult, e as Guard, d as GuardContext, G as GuardFactory, M as MemoryApiTokenStore, p as MemoryOAuthStateStore, q as MemorySessionStore, r as OAuthAuthorizeOptions, s as OAuthCallbackPayload, l as OAuthManager, t as OAuthManagerOptions, u as OAuthProviderConfig, v as OAuthProviderFactoryInput, w as OAuthStateConfig, k as OAuthStatePayload, O as OAuthStateStore, x as OAuthTokenResult, y as OAuthUserProfile, P as ProviderFactory, z as Session, h as SessionData, S as SessionStore, U as UserProvider, D as buildOAuthAuthorizeUrl, E as buildOAuthRedirectUrl, F as createApiToken, H as createBearerTokenMiddleware, I as createDiscordOAuthProviderConfig, J as createGitHubOAuthProviderConfig, K as createGoogleOAuthProviderConfig, L as createOAuthManager, N as createOAuthState, Q as createSessionMiddleware, R as exchangeOAuthCode, T as fetchOAuthUserProfile, V as getApiToken, W as getApiTokenOrFail, X as getSessionFromContext, Y as getUserApiTokens, Z as parseApiToken, _ as parseOAuthRedirectUrl, $ as revokeAllApiTokens, a0 as revokeApiToken, a1 as tokenCan, a2 as tokenCanAll, a3 as tokenCanAny, a4 as verifyApiToken, a5 as verifyOAuthState } from './api-token-BSSCLlFW.js';
+export { b as EmailVerificationConfig, a as EmailVerificationToken, c as EmailVerificationTokenResult, E as EmailVerificationTokenStore, M as MemoryEmailVerificationStore, d as MemoryPasswordResetStore, e as PasswordResetConfig, f as PasswordResetTokenResult, P as PasswordResetTokenStore, g as buildPasswordResetUrl, h as buildVerificationUrl, i as completeEmailVerification, j as completePasswordReset, k as createEmailVerificationToken, l as createPasswordResetToken, m as isEmailVerified, p as parsePasswordResetUrl, n as parseVerificationUrl, r as requireVerifiedEmail, v as verifyEmailToken, o as verifyPasswordResetToken } from './email-verification-D9u7krkn.js';
+import { g as AuthContext } from './api-token-CB12xnVg.js';
+export { m as API_TOKEN_KEY, j as ApiToken, i as ApiTokenStore, a as AuthCredentials, c as AuthManagerOptions, A as Authenticatable, B as BearerTokenMiddlewareOptions, n as CreateApiTokenOptions, o as CreateApiTokenResult, D as DefaultSanitizedKeys, e as Guard, d as GuardContext, G as GuardFactory, M as MemoryApiTokenStore, p as MemoryOAuthStateStore, q as MemorySessionStore, r as OAuthAuthorizeOptions, s as OAuthCallbackPayload, l as OAuthManager, t as OAuthManagerOptions, u as OAuthProviderConfig, v as OAuthProviderFactoryInput, w as OAuthStateConfig, k as OAuthStatePayload, O as OAuthStateStore, x as OAuthTokenResult, y as OAuthUserProfile, P as ProviderFactory, z as Sanitized, E as Session, h as SessionData, S as SessionStore, U as UserProvider, F as buildOAuthAuthorizeUrl, H as buildOAuthRedirectUrl, I as createApiToken, J as createBearerTokenMiddleware, K as createDiscordOAuthProviderConfig, L as createGitHubOAuthProviderConfig, N as createGoogleOAuthProviderConfig, Q as createOAuthManager, R as createOAuthState, T as createSessionMiddleware, V as exchangeOAuthCode, W as fetchOAuthUserProfile, X as getApiToken, Y as getApiTokenOrFail, Z as getSessionFromContext, _ as getUserApiTokens, $ as parseApiToken, a0 as parseOAuthRedirectUrl, a1 as revokeAllApiTokens, a2 as revokeApiToken, a3 as sanitizeOAuthRedirect, a4 as tokenCan, a5 as tokenCanAll, a6 as tokenCanAny, a7 as verifyApiToken, a8 as verifyOAuthState } from './api-token-CB12xnVg.js';
 export { M as Middleware, d as defineMiddleware, j as jsonResponse } from './index-9_Jzj5jo.js';
 import { E as EventManager } from './EventManager-CmIoLt7r.js';
 export { a as Event, b as EventClass, c as EventListener, d as EventSubscription, L as ListenerOptions, R as RegisteredListener, e as createEventManager } from './EventManager-CmIoLt7r.js';
@@ -29,8 +29,8 @@ export { getNextOccurrence, getNextOccurrences, isDue, isDueInTimezone, matchesC
 import { L as LogManager } from './LogManager-7mxnkaPM.js';
 export { C as ConsoleChannelConfig, D as DailyFileChannelConfig, F as FileChannelConfig, a as LOG_LEVEL_PRIORITY, b as LogChannel, c as LogChannelConfig, d as LogChannelFactory, e as LogConfig, f as LogContext, g as LogEntry, h as LogFormatter, i as LogLevel, j as Logger, k as LoggerOptions, S as StackChannelConfig, l as createLogManager, m as filterSensitiveData, n as getLogManager, s as setLogManager } from './LogManager-7mxnkaPM.js';
 export { ConsoleChannel, DailyFileChannel, FileChannel } from './logging/index.js';
-import { I as I18nManager } from './I18nManager-BiSoczfV.js';
-export { a as I18nConfig, P as PluralizationRule, R as ReplacementValues, T as TranslationLoader, b as TranslationLoaderFactory, c as TranslationMessages, d as Translator, e as TranslatorOptions, f as createI18n, g as getI18n, s as setI18n, t, h as tc } from './I18nManager-BiSoczfV.js';
+import { I as I18nManager, T as Translator } from './I18nManager-CmUqj6bU.js';
+export { a as I18nConfig, P as PluralizationRule, R as ReplacementValues, b as TranslationLoader, c as TranslationLoaderFactory, d as TranslationMessages, e as TranslatorOptions, f as createI18n, g as getI18n, s as setI18n, t, h as tc } from './I18nManager-CmUqj6bU.js';
 export { JsonLoader, MemoryLoader, getPluralizationRule, pluralizationRules, selectPluralForm } from './i18n/index.js';
 export { C as CheckResult, a as HealthCheck, b as HealthCheckOptions, H as HealthManager, c as HealthMiddlewareOptions, d as HealthReport, e as HealthStatus, f as createHealthManager } from './HealthManager-DUyMIzsZ.js';
 export { CacheCheck, CacheCheckOptions, CacheStoreInterface, CustomCheck, CustomCheckCallback, DatabaseCheck, DatabaseCheckOptions, DatabaseConnection, MemoryCheck, MemoryCheckOptions, RedisCheck, RedisCheckOptions, RedisClient, StorageCheck, StorageCheckOptions, StorageDriverInterface, customCheck } from './health/index.js';
@@ -38,8 +38,8 @@ export { DatabaseChannel, MailChannel, MailChannelOptions, MemoryChannel, SlackC
 import { B as BroadcastManager } from './BroadcastManager-CGWl9rUO.js';
 export { A as AuthMiddlewareOptions, a as BroadcastDriver, b as BroadcastDriverFactory, c as BroadcastEvent, d as BroadcastManagerOptions, e as BroadcastableEvent, C as Channel, f as ChannelAuthorizer, g as ChannelRegistration, P as PresenceBroadcastDriver, h as PresenceChannel, i as PresenceChannelAuthorizer, j as PresenceMember, k as PrivateChannel, S as SSEClient, l as SSEMiddlewareOptions, W as WebSocketClient, m as createBroadcastManager, n as getBroadcastManager, s as setBroadcastManager } from './BroadcastManager-CGWl9rUO.js';
 export { RedisClient as BroadcastRedisClient, RedisDriverOptions as BroadcastRedisDriverOptions, MemoryDriver as MemoryBroadcastDriver, RedisDriver as RedisBroadcastDriver, createTypedBroadcaster } from './broadcasting/index.js';
-import { I as InputInterface, P as ParsedSignature, O as OptionDefinition, a as CommandInstance, b as OutputInterface } from './ConsoleKernel-DxmUxdAz.js';
-export { A as ArgumentDefinition, c as CommandClass, C as ConsoleKernel, d as ConsoleKernelOptions, e as ProgressInterface, f as PromptInterface, S as ScheduledCommand, g as createConsoleKernel } from './ConsoleKernel-DxmUxdAz.js';
+import { I as InputInterface, P as ParsedSignature, O as OptionDefinition, a as CommandInstance, b as OutputInterface } from './ConsoleKernel-COKndy_V.js';
+export { A as ArgumentDefinition, c as CommandClass, C as ConsoleKernel, d as ConsoleKernelOptions, e as ProgressInterface, f as PromptInterface, S as ScheduledCommand, g as createConsoleKernel } from './ConsoleKernel-COKndy_V.js';
 import * as readline from 'readline';
 export { R as AuthResponse, A as AuthUser, a as AuthorizationResponse, b as AuthorizeOptions, G as Gate, c as GateCallback, d as GateDefinition, e as GateOptions, P as PolicyClass, f as PolicyInterface, g as PolicyMethod, h as PolicyRegistration, i as ResourceAction, j as ResponseBuilder, k as authorizeAbility, l as can, m as cannot, n as createGate, o as defineGate, p as getGate, s as setGate } from './Gate-CynjZCtS.js';
 export { AuthorizedContext, Policy, authorizeAllMiddleware, authorizeMiddleware, authorizeResourceMiddleware, definePolicy, withAuthorization } from './authorization/index.js';
@@ -259,6 +259,55 @@ declare function requestIdMiddleware(): hono.MiddlewareHandler<{
  */
 declare function requestLoggingMiddleware(): hono.MiddlewareHandler<any, string, {}, Response>;
 
+/** Context key for the resolved request locale (read by Inertia for `<html lang>`). */
+declare const LOCALE_CONTEXT_KEY = "locale";
+type LocaleSource = 'query' | 'cookie' | 'header';
+/** Context variables set by {@link detectLocaleMiddleware}, for typing Hono apps. */
+type DetectLocaleVariables = {
+    locale: string;
+    t?: Translator['t'];
+    tc?: Translator['tc'];
+};
+interface DetectLocaleOptions {
+    /** Locales the app supports. Detection only ever resolves to one of these. */
+    supported: readonly string[];
+    /** Locale used when no source matches (defaults to the first supported locale). */
+    fallback?: string;
+    /** Detection order (defaults to `['query', 'cookie', 'header']`). */
+    sources?: readonly LocaleSource[];
+    /** Query parameter to read (defaults to `locale`). */
+    queryParam?: string;
+    /** Cookie to read (defaults to `locale`). */
+    cookieName?: string;
+    /**
+     * i18n manager used to bind request-scoped `t`/`tc` translator helpers.
+     * Defaults to the global manager when one was registered via `setI18n()`;
+     * pass a manager explicitly (e.g. `app.container.make('i18n')`), or `false`
+     * to skip the translator binding entirely.
+     */
+    i18n?: I18nManager | false;
+}
+/**
+ * Middleware that resolves the request locale from the query string, a cookie,
+ * or the `Accept-Language` header — in that order by default — restricted to
+ * the `supported` allowlist.
+ *
+ * The result is stored as the `locale` context variable, which Inertia
+ * responses pick up for the root `<html lang>` attribute. When an i18n manager
+ * is available (see the `i18n` option), request-scoped `t`/`tc` translator
+ * helpers are attached as well.
+ *
+ * @example
+ * ```ts
+ * import { detectLocaleMiddleware } from '@guren/core'
+ *
+ * app.use('*', detectLocaleMiddleware({ supported: ['en', 'ja'] }))
+ * ```
+ */
+declare function detectLocaleMiddleware(options: DetectLocaleOptions): hono.MiddlewareHandler<{
+    Variables: DetectLocaleVariables;
+}, string, {}, Response>;
+
 /**
  * Base HTTP exception class.
  *
@@ -557,6 +606,67 @@ declare class MethodNotAllowedException extends HttpException {
 
 declare function renderErrorPage(statusCode: number, message?: string): string;
 
+/**
+ * Declarative definition of a plugin's lifecycle hooks.
+ *
+ * `register` and `boot` mirror the ServiceProvider hooks and receive the
+ * container plus the configuration captured by the plugin factory.
+ */
+interface PluginDefinition<TConfig = void> {
+    /**
+     * Diagnostic name for the plugin (e.g. 'analytics').
+     * Used to derive the generated provider class name.
+     */
+    name: string;
+    /**
+     * Register services into the container.
+     * Called before any provider has booted.
+     */
+    register(container: Container, config: TConfig): void | Promise<void>;
+    /**
+     * Bootstrap after all providers have registered.
+     */
+    boot?(container: Container, config: TConfig): void | Promise<void>;
+    /**
+     * Defer instantiation until one of the `provides` services is resolved.
+     * Maps to `ServiceProvider.deferred`.
+     */
+    deferred?: boolean;
+    /**
+     * Services bound by this plugin (required when `deferred` is true).
+     * Maps to `ServiceProvider.provides`.
+     */
+    provides?: string[];
+}
+/**
+ * A factory returned by `definePlugin()`. Each call produces an independent
+ * ServiceProvider subclass with the given configuration captured in a closure.
+ */
+type PluginFactory<TConfig = void> = (config: TConfig) => ServiceProviderConstructor;
+/**
+ * Define a configurable Guren plugin without ServiceProvider boilerplate.
+ *
+ * Unlike storing configuration on a static class property, each factory call
+ * returns a fresh provider class, so the same plugin can be registered twice
+ * with different configurations.
+ *
+ * @example
+ * ```typescript
+ * export const analyticsPlugin = definePlugin<AnalyticsConfig>({
+ *   name: 'analytics',
+ *   register(container, config) {
+ *     container.singleton('analytics', () => new AnalyticsClient(config))
+ *   },
+ * })
+ *
+ * // In the application:
+ * createApp({
+ *   providers: [analyticsPlugin({ apiKey: process.env.ANALYTICS_API_KEY! })],
+ * })
+ * ```
+ */
+declare function definePlugin<TConfig = void>(definition: PluginDefinition<TConfig>): PluginFactory<TConfig>;
+
 type ViewRenderer = (template: string, props: Record<string, unknown>) => Response | Promise<Response>;
 /**
  * Registry for view renderers. Engines are typically registered via service
@@ -2474,4 +2584,4 @@ declare class DefaultHasher implements PasswordHasher {
     verify(hashed: string, plain: string): Promise<boolean>;
 }
 
-export { AUTH_CONTEXT_KEY, AuthContext, AuthContext as AuthRuntimeContext, AuthServiceProvider, AuthenticationException, AuthorizationException, AuthorizationServiceProvider, AutoDiscovery, BaseFactory, type BaseResource, BaseSeeder, BroadcastManager, BroadcastServiceProvider, BufferedOutput, CSP_NONCE_KEY, CacheManager, CacheServiceProvider, Command, CommandInstance, Container, type CorsOptions, type CspDirectives, type CspOptions, type CursorPaginatedResponse, type CursorPaginationMeta, CursorPaginator, type CursorPaginatorOptions, DefaultHasher, type DiscoveryOptions, type DiscoveryResult, EncryptionServiceProvider, ErrorResponse, ErrorServiceProvider, EventManager, EventServiceProvider, BaseFactory as Factory, type FactoryClass, type Factory as FactoryInterface, FieldValidator, type FileLike, type FileValidationOptions, type ForceHttpsOptions, FormRequest, DefaultHasher as Hash, HealthServiceProvider, HttpException, I18nManager, I18nServiceProvider, type ImageValidationOptions, InertiaServiceProvider, type InferResourceData, Input, InputInterface, JsonResource, LogManager, LogServiceProvider, MailManager, MailServiceProvider, MethodNotAllowedException, NotFoundHttpException, NotificationManager, NotificationServiceProvider, OAuthServiceProvider, OptionDefinition, Output, OutputInterface, type PaginatedPageProps, type PaginatedResponse, type PaginatedResultLike, type PaginationLinks, type PaginationMeta, type PaginationPageLink, Paginator, type PaginatorOptions, ParsedSignature, QueueManager, QueueServiceProvider, type RedirectSafetyOptions, type RequireAuthOptions, Resource, type ResourceClass, ResourceCollection, type ResourceData, type RuleDefinition, Scheduler, SchedulingServiceProvider, BaseSeeder as Seeder, type SeederClass, type Seeder as SeederInterface, SeederRunner, type SeederRunnerOptions, ServiceBindings, ServiceProvider, StorageManager, StorageServiceProvider, type ValidationErrors, ValidationException, type ValidationResult, type ValidationRule, Validator, type ValidatorOptions, ViewEngine, after, afterOrEqual, alpha, alphaDash, alphaNum, array as arrayRule, attachAuthContext, before, beforeOrEqual, between, boolean as booleanRule, collect, confirmed, createCorsMiddleware, createCspMiddleware, createFacade, createFacades, createForceHttpsMiddleware, createRedirectSafetyMiddleware, createSeederRunner, createValidator, cursorPaginate, custom, dateFormat, date as dateRule, debugErrorMiddleware, decodeCursor, defineFactory, different, email as emailRule, encodeCursor, endsWith, exists, file as fileRule, getCspNonce, image as imageRule, inValues, integer, ip, ipv4, ipv6, isSafeRedirectUrl, json as jsonRule, max, maxFileSize, mimes, min, minFileSize, notIn, nullable, numeric, object as objectRule, paginate, parseSignature, quickValidate, quickValidateOrThrow, regex, renderDebugPage, renderErrorPage, requestIdMiddleware, requestLoggingMiddleware, requireAuthenticated, requireGuest, required, requiredIf, requiredUnless, requiredWith, requiredWithout, resetCalledSeeders, same, size, startsWith, string as stringRule, unique, url as urlRule, uuid as uuidRule };
+export { AUTH_CONTEXT_KEY, AuthContext, AuthContext as AuthRuntimeContext, AuthServiceProvider, AuthenticationException, AuthorizationException, AuthorizationServiceProvider, AutoDiscovery, BaseFactory, type BaseResource, BaseSeeder, BroadcastManager, BroadcastServiceProvider, BufferedOutput, CSP_NONCE_KEY, CacheManager, CacheServiceProvider, Command, CommandInstance, Container, type CorsOptions, type CspDirectives, type CspOptions, type CursorPaginatedResponse, type CursorPaginationMeta, CursorPaginator, type CursorPaginatorOptions, DefaultHasher, type DetectLocaleOptions, type DetectLocaleVariables, type DiscoveryOptions, type DiscoveryResult, EncryptionServiceProvider, ErrorResponse, ErrorServiceProvider, EventManager, EventServiceProvider, BaseFactory as Factory, type FactoryClass, type Factory as FactoryInterface, FieldValidator, type FileLike, type FileValidationOptions, type ForceHttpsOptions, FormRequest, DefaultHasher as Hash, HealthServiceProvider, HttpException, I18nManager, I18nServiceProvider, type ImageValidationOptions, InertiaServiceProvider, type InferResourceData, Input, InputInterface, JsonResource, LOCALE_CONTEXT_KEY, type LocaleSource, LogManager, LogServiceProvider, MailManager, MailServiceProvider, MethodNotAllowedException, NotFoundHttpException, NotificationManager, NotificationServiceProvider, OAuthServiceProvider, OptionDefinition, Output, OutputInterface, type PaginatedPageProps, type PaginatedResponse, type PaginatedResultLike, type PaginationLinks, type PaginationMeta, type PaginationPageLink, Paginator, type PaginatorOptions, ParsedSignature, type PluginDefinition, type PluginFactory, QueueManager, QueueServiceProvider, type RedirectSafetyOptions, type RequireAuthOptions, Resource, type ResourceClass, ResourceCollection, type ResourceData, type RuleDefinition, Scheduler, SchedulingServiceProvider, BaseSeeder as Seeder, type SeederClass, type Seeder as SeederInterface, SeederRunner, type SeederRunnerOptions, ServiceBindings, ServiceProvider, ServiceProviderConstructor, StorageManager, StorageServiceProvider, Translator, type ValidationErrors, ValidationException, type ValidationResult, type ValidationRule, Validator, type ValidatorOptions, ViewEngine, after, afterOrEqual, alpha, alphaDash, alphaNum, array as arrayRule, attachAuthContext, before, beforeOrEqual, between, boolean as booleanRule, collect, confirmed, createCorsMiddleware, createCspMiddleware, createFacade, createFacades, createForceHttpsMiddleware, createRedirectSafetyMiddleware, createSeederRunner, createValidator, cursorPaginate, custom, dateFormat, date as dateRule, debugErrorMiddleware, decodeCursor, defineFactory, definePlugin, detectLocaleMiddleware, different, email as emailRule, encodeCursor, endsWith, exists, file as fileRule, getCspNonce, image as imageRule, inValues, integer, ip, ipv4, ipv6, isSafeRedirectUrl, json as jsonRule, max, maxFileSize, mimes, min, minFileSize, notIn, nullable, numeric, object as objectRule, paginate, parseSignature, quickValidate, quickValidateOrThrow, regex, renderDebugPage, renderErrorPage, requestIdMiddleware, requestLoggingMiddleware, requireAuthenticated, requireGuest, required, requiredIf, requiredUnless, requiredWith, requiredWithout, resetCalledSeeders, same, size, startsWith, string as stringRule, unique, url as urlRule, uuid as uuidRule };

package/dist/index.js

@@ -2,7 +2,7 @@ import {
   logDevServerBanner,
   parseImportMap,
   startViteDevServer
-} from "./chunk-HLXL2AYJ.js";
+} from "./chunk-CSP7W3WY.js";
 import {
   PendingSchedule,
   Schedule,
@@ -65,7 +65,7 @@ import {
 import {
   ProviderManager,
   ServiceProvider
-} from "./chunk-VT5KRDPH.js";
+} from "./chunk-STZUODC3.js";
 import {
   DatabaseChannel,
   MailChannel,
@@ -143,7 +143,10 @@ import {
   getApiTokenOrFail,
   getSessionFromContext,
   getUserApiTokens,
+  hostMatchesAllowlist,
+  isAppRelativePath,
   isEmailVerified,
+  normalizeRedirectTarget,
   parseApiToken,
   parseOAuthRedirectUrl,
   parsePasswordResetUrl,
@@ -151,6 +154,7 @@ import {
   requireVerifiedEmail,
   revokeAllApiTokens,
   revokeApiToken,
+  sanitizeOAuthRedirect,
   tokenCan,
   tokenCanAll,
   tokenCanAny,
@@ -158,7 +162,7 @@ import {
   verifyEmailToken,
   verifyOAuthState,
   verifyPasswordResetToken
-} from "./chunk-2T6JN4VR.js";
+} from "./chunk-VY2JPS6V.js";
 import {
   Gate,
   Policy,
@@ -832,6 +836,25 @@ function joinPaths(prefixStack, path) {
   return "/" + combined.replace(/\/+/gu, "/");
 }
 
+// src/container/definePlugin.ts
+function definePlugin(definition) {
+  const className = `${definition.name}PluginProvider`;
+  return (config) => {
+    class ConfiguredPluginProvider extends ServiceProvider {
+      static deferred = definition.deferred ?? false;
+      static provides = definition.provides ?? [];
+      register() {
+        return definition.register(this.container, config);
+      }
+      boot() {
+        return definition.boot?.(this.container, config);
+      }
+    }
+    Object.defineProperty(ConfiguredPluginProvider, "name", { value: className });
+    return ConfiguredPluginProvider;
+  };
+}
+
 // src/http/middleware/csrf.ts
 var CSRF_TOKEN_KEY = "_csrf_token";
 var CSRF_HEADER_NAME = "X-CSRF-TOKEN";
@@ -1443,8 +1466,8 @@ function createRedirectSafetyMiddleware(options = {}) {
   };
 }
 function isSafeRedirectUrl(url2, requestUrl, allowedHosts = []) {
-  const normalized = url2.replace(/\\/g, "/");
-  if (normalized.startsWith("/") && !normalized.startsWith("//")) {
+  const normalized = normalizeRedirectTarget(url2);
+  if (isAppRelativePath(normalized)) {
     return true;
   }
   try {
@@ -1453,20 +1476,10 @@ function isSafeRedirectUrl(url2, requestUrl, allowedHosts = []) {
     if (target.host === current.host && target.protocol === current.protocol) {
       return true;
     }
-    for (const allowed of allowedHosts) {
-      if (allowed.startsWith("*.")) {
-        const suffix = allowed.slice(1).toLowerCase();
-        if (target.hostname.toLowerCase().endsWith(suffix) && target.hostname.length > suffix.length) {
-          return true;
-        }
-      } else if (target.host.toLowerCase() === allowed.toLowerCase()) {
-        return true;
-      }
-    }
+    return hostMatchesAllowlist(target, allowedHosts);
   } catch {
     return false;
   }
-  return false;
 }
 
 // src/http/middleware/force-https.ts
@@ -1538,6 +1551,98 @@ function requestLoggingMiddleware() {
   });
 }
 
+// src/http/middleware/detect-locale.ts
+import { createMiddleware as createMiddleware3 } from "hono/factory";
+import { getCookie } from "hono/cookie";
+import { parseAccept } from "hono/utils/accept";
+var LOCALE_CONTEXT_KEY = "locale";
+var DEFAULT_SOURCES = ["query", "cookie", "header"];
+function detectLocaleMiddleware(options) {
+  const supported = options.supported.map((locale) => locale.trim()).filter(Boolean);
+  if (supported.length === 0) {
+    throw new Error("detectLocaleMiddleware requires at least one supported locale.");
+  }
+  const fallback = options.fallback ?? supported[0];
+  const sources = options.sources ?? DEFAULT_SOURCES;
+  const queryParam = options.queryParam ?? "locale";
+  const cookieName = options.cookieName ?? "locale";
+  const byLowerCase = new Map(supported.map((locale) => [locale.toLowerCase(), locale]));
+  const match = (candidate) => {
+    const value = candidate?.trim().toLowerCase();
+    if (!value) {
+      return void 0;
+    }
+    return byLowerCase.get(value) ?? byLowerCase.get(value.split("-")[0]);
+  };
+  const matchHeader = (header) => {
+    if (!header) {
+      return void 0;
+    }
+    for (const accept of parseAccept(header)) {
+      if (accept.type === "*" || accept.q <= 0) {
+        continue;
+      }
+      const matched = match(accept.type);
+      if (matched) {
+        return matched;
+      }
+    }
+    return void 0;
+  };
+  const translators = /* @__PURE__ */ new Map();
+  const resolveTranslator = async (locale) => {
+    if (options.i18n === false) {
+      return void 0;
+    }
+    const cached = translators.get(locale);
+    if (cached) {
+      return cached;
+    }
+    const i18n = options.i18n ?? tryGlobalI18n();
+    if (!i18n) {
+      return void 0;
+    }
+    await i18n.loadLocale(locale).catch(() => {
+    });
+    const translator = i18n.forLocale(locale);
+    const binding = {
+      t: translator.t.bind(translator),
+      tc: translator.tc.bind(translator)
+    };
+    translators.set(locale, binding);
+    return binding;
+  };
+  return createMiddleware3(async (c, next) => {
+    const readers = {
+      query: () => match(c.req.query(queryParam)),
+      cookie: () => match(getCookie(c, cookieName)),
+      header: () => matchHeader(c.req.header("Accept-Language"))
+    };
+    let resolved = fallback;
+    for (const source of sources) {
+      const matched = readers[source]();
+      if (matched) {
+        resolved = matched;
+        break;
+      }
+    }
+    c.set(LOCALE_CONTEXT_KEY, resolved);
+    const binding = await resolveTranslator(resolved);
+    if (binding) {
+      c.set("t", binding.t);
+      c.set("tc", binding.tc);
+    }
+    await next();
+  });
+}
+function tryGlobalI18n() {
+  try {
+    return getI18n();
+  } catch {
+    return void 0;
+  }
+}
+
 // src/http/middleware/index.ts
 function defineMiddleware(handler) {
   return handler;
@@ -2293,7 +2398,7 @@ var Application = class {
       return;
     }
     try {
-      const { McpServiceProvider } = await import("./McpServiceProvider-JW6PDVMD.js");
+      const { McpServiceProvider } = await import("./McpServiceProvider-RNTDHZAZ.js");
       const provider = new McpServiceProvider(this.container);
       provider.register();
       await provider.boot();
@@ -2617,23 +2722,27 @@ var Controller = class {
   /**
    * Default `<html lang>` for Inertia responses when `options.lang` is not
    * provided: the request-scoped `locale` context variable (set by locale
-   * middleware) wins over the app-wide i18n locale.
+   * middleware) wins over the app-wide i18n locale (the router-injected
+   * container binding, then the `setI18n()` global).
    */
   #defaultInertiaLang() {
     const vars = this.ctx.var;
-    const requestLocale = vars?.locale;
+    const requestLocale = vars?.[LOCALE_CONTEXT_KEY];
     if (typeof requestLocale === "string" && requestLocale.length > 0) {
       return requestLocale;
     }
-    const container = vars?.container;
-    if (container?.has?.("i18n")) {
-      const i18n = container.make?.("i18n");
-      const locale = i18n?.getLocale?.();
-      if (typeof locale === "string" && locale.length > 0) {
-        return locale;
+    let i18n;
+    if (this._container?.has?.("i18n")) {
+      i18n = this._container.make("i18n");
+    } else {
+      try {
+        i18n = getI18n();
+      } catch {
+        i18n = void 0;
       }
     }
-    return void 0;
+    const locale = i18n?.getLocale?.();
+    return typeof locale === "string" && locale.length > 0 ? locale : void 0;
   }
   json(data, init = {}) {
     return new Response(JSON.stringify(data), {
@@ -6347,6 +6456,7 @@ export {
   JobProcessed,
   JsonLoader,
   JsonResource,
+  LOCALE_CONTEXT_KEY,
   LOG_LEVEL_PRIORITY,
   Listener,
   LocalDriver as LocalStorageDriver,
@@ -6515,9 +6625,11 @@ export {
   defineFactory,
   defineGate,
   defineMiddleware,
+  definePlugin,
   definePolicy,
   deriveAppKey,
   deriveAppKeyring,
+  detectLocaleMiddleware,
   different,
   email as emailRule,
   encodeCursor,
@@ -6631,6 +6743,7 @@ export {
   revokeApiToken,
   same,
   sample,
+  sanitizeOAuthRedirect,
   secureCompare,
   selectPluralForm,
   setBroadcastManager,

package/dist/lambda/index.d.ts

@@ -1,18 +1,18 @@
 import * as hono_aws_lambda from 'hono/aws-lambda';
 export { APIGatewayProxyResult, LambdaEvent } from 'hono/aws-lambda';
-import { A as Application } from '../Application-DN9Ndl37.js';
+import { A as Application } from '../Application-DImeY-VW.js';
 import { S as Scheduler } from '../Scheduler-BstvSca7.js';
-import { C as ConsoleKernel } from '../ConsoleKernel-DxmUxdAz.js';
+import { C as ConsoleKernel } from '../ConsoleKernel-COKndy_V.js';
 import 'hono';
-import '../api-token-BSSCLlFW.js';
-import '../AuthManager-SfhCNkAU.js';
+import '../api-token-CB12xnVg.js';
+import '../AuthManager-BU8ZvenF.js';
 import '@guren/orm';
 import 'vite';
 import '../EventManager-CmIoLt7r.js';
 import '../CacheManager-BkvHEOZX.js';
 import '../MailManager-DpMvYiP9.js';
 import '../LogManager-7mxnkaPM.js';
-import '../I18nManager-BiSoczfV.js';
+import '../I18nManager-CmUqj6bU.js';
 import '../BroadcastManager-CGWl9rUO.js';
 import '../index-9_Jzj5jo.js';
 import '../app-key-CsBfRC_Q.js';

package/dist/mcp/index.d.ts

@@ -1,15 +1,15 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { S as ServiceProvider } from '../Application-DN9Ndl37.js';
+import { S as ServiceProvider } from '../Application-DImeY-VW.js';
 import 'hono';
-import '../api-token-BSSCLlFW.js';
-import '../AuthManager-SfhCNkAU.js';
+import '../api-token-CB12xnVg.js';
+import '../AuthManager-BU8ZvenF.js';
 import '@guren/orm';
 import 'vite';
 import '../EventManager-CmIoLt7r.js';
 import '../CacheManager-BkvHEOZX.js';
 import '../MailManager-DpMvYiP9.js';
 import '../LogManager-7mxnkaPM.js';
-import '../I18nManager-BiSoczfV.js';
+import '../I18nManager-CmUqj6bU.js';
 import '../BroadcastManager-CGWl9rUO.js';
 import '../index-9_Jzj5jo.js';
 import '../app-key-CsBfRC_Q.js';

package/dist/mcp/index.js

@@ -1,8 +1,8 @@
 import {
   McpServiceProvider,
   createMcpServer
-} from "../chunk-WVY45EIW.js";
-import "../chunk-VT5KRDPH.js";
+} from "../chunk-J753UWAY.js";
+import "../chunk-STZUODC3.js";
 export {
   McpServiceProvider,
   createMcpServer

package/dist/notifications/index.d.ts

@@ -1,15 +1,15 @@
-import { a0 as NotificationChannel, Z as Notifiable, _ as Notification, t as DatabaseNotification, r as DatabaseChannelOptions, au as SlackMessage, ak as SentNotification } from '../Application-DN9Ndl37.js';
-export { $ as NotificationAttachment, a1 as NotificationChannelFactory, a2 as NotificationClass, a3 as NotificationMailMessage, N as NotificationManager, a4 as NotificationManagerOptions, as as SlackAttachment, at as SlackBlock, aI as createNotificationManager, aS as getNotificationManager, b1 as setNotificationManager } from '../Application-DN9Ndl37.js';
+import { a1 as NotificationChannel, _ as Notifiable, $ as Notification, u as DatabaseNotification, t as DatabaseChannelOptions, au as SlackMessage, al as SentNotification } from '../Application-DImeY-VW.js';
+export { a0 as NotificationAttachment, a2 as NotificationChannelFactory, a3 as NotificationClass, a4 as NotificationMailMessage, N as NotificationManager, a5 as NotificationManagerOptions, as as SlackAttachment, at as SlackBlock, aI as createNotificationManager, aS as getNotificationManager, b1 as setNotificationManager } from '../Application-DImeY-VW.js';
 import { M as MailManager } from '../MailManager-DpMvYiP9.js';
 import 'hono';
-import '../api-token-BSSCLlFW.js';
-import '../AuthManager-SfhCNkAU.js';
+import '../api-token-CB12xnVg.js';
+import '../AuthManager-BU8ZvenF.js';
 import '@guren/orm';
 import 'vite';
 import '../EventManager-CmIoLt7r.js';
 import '../CacheManager-BkvHEOZX.js';
 import '../LogManager-7mxnkaPM.js';
-import '../I18nManager-BiSoczfV.js';
+import '../I18nManager-CmUqj6bU.js';
 import '../BroadcastManager-CGWl9rUO.js';
 import '../index-9_Jzj5jo.js';
 import '../app-key-CsBfRC_Q.js';

package/dist/queue/index.d.ts

@@ -1,16 +1,16 @@
-import { a7 as QueueDriver, a9 as QueuedJob, F as FailedJob, ay as WorkerOptions } from '../Application-DN9Ndl37.js';
-export { U as Job, V as JobClass, W as JobFailureHandler, X as JobHandler, Y as JobOptions, a6 as QueueConfig, a8 as QueueDriverFactory, Q as QueueManager, aC as clearJobRegistry, aJ as createQueueManager, aR as getJob, aT as getQueueDriver, aU as getRegisteredJobs, aY as registerJob, b2 as setQueueDriver } from '../Application-DN9Ndl37.js';
+import { a8 as QueueDriver, aa as QueuedJob, F as FailedJob, ay as WorkerOptions } from '../Application-DImeY-VW.js';
+export { V as Job, W as JobClass, X as JobFailureHandler, Y as JobHandler, Z as JobOptions, a7 as QueueConfig, a9 as QueueDriverFactory, Q as QueueManager, aC as clearJobRegistry, aJ as createQueueManager, aR as getJob, aT as getQueueDriver, aU as getRegisteredJobs, aY as registerJob, b2 as setQueueDriver } from '../Application-DImeY-VW.js';
 import { Redis } from 'ioredis';
 import 'hono';
-import '../api-token-BSSCLlFW.js';
-import '../AuthManager-SfhCNkAU.js';
+import '../api-token-CB12xnVg.js';
+import '../AuthManager-BU8ZvenF.js';
 import '@guren/orm';
 import 'vite';
 import '../EventManager-CmIoLt7r.js';
 import '../CacheManager-BkvHEOZX.js';
 import '../MailManager-DpMvYiP9.js';
 import '../LogManager-7mxnkaPM.js';
-import '../I18nManager-BiSoczfV.js';
+import '../I18nManager-CmUqj6bU.js';
 import '../BroadcastManager-CGWl9rUO.js';
 import '../index-9_Jzj5jo.js';
 import '../app-key-CsBfRC_Q.js';

package/dist/redis/index.d.ts

@@ -2,8 +2,8 @@ import { R as RateLimitStore, a as RateLimitEntry } from '../client-CKXJLsTe.js'
 export { b as RedisClientOptions, c as createRedisClient } from '../client-CKXJLsTe.js';
 import { Redis } from 'ioredis';
 export { default as Redis, RedisOptions } from 'ioredis';
-import { S as SessionStore, h as SessionData, i as ApiTokenStore, j as ApiToken, O as OAuthStateStore, k as OAuthStatePayload } from '../api-token-BSSCLlFW.js';
-import { P as PasswordResetTokenStore, E as EmailVerificationTokenStore, a as EmailVerificationToken } from '../email-verification-CAeArjui.js';
+import { S as SessionStore, h as SessionData, i as ApiTokenStore, j as ApiToken, O as OAuthStateStore, k as OAuthStatePayload } from '../api-token-CB12xnVg.js';
+import { P as PasswordResetTokenStore, E as EmailVerificationTokenStore, a as EmailVerificationToken } from '../email-verification-D9u7krkn.js';
 import 'hono';
 
 /**

package/dist/runtime/index.d.ts

@@ -1,15 +1,15 @@
-import { A as Application } from '../Application-DN9Ndl37.js';
-export { D as DevBannerOptions, G as GUREN_ASCII_ART, a as StartViteDevServerOptions, b as StartedViteDevServer, l as logDevServerBanner, s as startViteDevServer } from '../Application-DN9Ndl37.js';
+import { A as Application } from '../Application-DImeY-VW.js';
+export { D as DevBannerOptions, G as GUREN_ASCII_ART, a as StartViteDevServerOptions, b as StartedViteDevServer, l as logDevServerBanner, s as startViteDevServer } from '../Application-DImeY-VW.js';
 import 'hono';
-import '../api-token-BSSCLlFW.js';
-import '../AuthManager-SfhCNkAU.js';
+import '../api-token-CB12xnVg.js';
+import '../AuthManager-BU8ZvenF.js';
 import '@guren/orm';
 import 'vite';
 import '../EventManager-CmIoLt7r.js';
 import '../CacheManager-BkvHEOZX.js';
 import '../MailManager-DpMvYiP9.js';
 import '../LogManager-7mxnkaPM.js';
-import '../I18nManager-BiSoczfV.js';
+import '../I18nManager-CmUqj6bU.js';
 import '../BroadcastManager-CGWl9rUO.js';
 import '../index-9_Jzj5jo.js';
 import '../app-key-CsBfRC_Q.js';

package/dist/runtime/index.js

@@ -3,7 +3,7 @@ import {
   logDevServerBanner,
   parseImportMap,
   startViteDevServer
-} from "../chunk-HLXL2AYJ.js";
+} from "../chunk-CSP7W3WY.js";
 import {
   hash
 } from "../chunk-QQKTH5KX.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guren/server",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "type": "module",
   "license": "MIT",
   "repository": {