@kurdel/core 0.1.0-beta.1

package/lib/http/http-tokens.js

@@ -0,0 +1,11 @@
+import { createGlobalToken } from '@kurdel/ioc';
+export const HTTP_TOKENS = {
+    ServerAdapter: createGlobalToken('@kurdel/core/hhtp:server-adapter'),
+    Router: createGlobalToken('@kurdel/core/http:router'),
+    ControllerClasses: createGlobalToken('@kurdel/core/http:controller-classes'),
+    ControllerConfigs: createGlobalToken('@kurdel/core/http:controller-configs'),
+    MiddlewareRegistry: createGlobalToken('@kurdel/core/http:middleware-registry'),
+    ControllerResolver: createGlobalToken('@kurdel/core/http:controller-resolver'),
+    ResponseRenderer: createGlobalToken('@kurdel/core/http:response-renderer'),
+};
+//# sourceMappingURL=http-tokens.js.map

package/lib/http/http-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-tokens.js","sourceRoot":"","sources":["../../src/http/http-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAYhD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,aAAa,EAAE,iBAAiB,CAAgB,kCAAkC,CAAC;IACnF,MAAM,EAAE,iBAAiB,CAAS,0BAA0B,CAAC;IAC7D,iBAAiB,EAAE,iBAAiB,CAAe,sCAAsC,CAAC;IAC1F,iBAAiB,EAAE,iBAAiB,CAAqB,sCAAsC,CAAC;IAChG,kBAAkB,EAAE,iBAAiB,CACnC,uCAAuC,CACxC;IACD,kBAAkB,EAAE,iBAAiB,CACnC,uCAAuC,CACxC;IACD,gBAAgB,EAAE,iBAAiB,CAAmB,qCAAqC,CAAC;CAC7F,CAAC"}

package/lib/http/index.d.ts

@@ -0,0 +1,9 @@
+export * from './errors/index.js';
+export * from './middleware/index.js';
+export * from './response/index.js';
+export * from './routing/index.js';
+export * from './server/index.js';
+export * from './types.js';
+export * from './http-context.js';
+export * from './http-module.js';
+export * from './http-tokens.js';

package/lib/http/index.js

@@ -0,0 +1,10 @@
+export * from './errors/index.js';
+export * from './middleware/index.js';
+export * from './response/index.js';
+export * from './routing/index.js';
+export * from './server/index.js';
+export * from './types.js';
+export * from './http-context.js';
+export * from './http-module.js';
+export * from './http-tokens.js';
+//# sourceMappingURL=index.js.map

package/lib/http/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/lib/http/middleware/index.d.ts

@@ -0,0 +1,3 @@
+export * from './middleware.js';
+export * from './middleware-registration.js';
+export * from './middleware-registry.js';

package/lib/http/middleware/index.js

@@ -0,0 +1,4 @@
+export * from './middleware.js';
+export * from './middleware-registration.js';
+export * from './middleware-registry.js';
+//# sourceMappingURL=index.js.map

package/lib/http/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/middleware/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC"}

package/lib/http/middleware/middleware-registration.d.ts

@@ -0,0 +1,25 @@
+import type { Middleware } from '../../http/index.js';
+/**
+ * Middleware execution zones in the Kurdel runtime pipeline.
+ *
+ * Now includes:
+ * - `auth`  → executes after validation, before PRE
+ * - `pre`   → before controller
+ * - `post`  → after render
+ * - `error` → on exceptions
+ * - `final` → always
+ */
+export type MiddlewareZone = 'auth' | 'pre' | 'post' | 'error' | 'final';
+/**
+ * Describes a single middleware registration entry.
+ *
+ * - `zone`: execution stage (`pre`, `post`, `error`, or `final`)
+ * - `priority`: numeric priority (lower runs first)
+ * - `action`: optional controller action this middleware applies to
+ */
+export interface MiddlewareRegistration {
+    readonly use: Middleware;
+    readonly zone: MiddlewareZone;
+    readonly priority: number;
+    readonly action?: string;
+}

package/lib/http/middleware/middleware-registration.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=middleware-registration.js.map

package/lib/http/middleware/middleware-registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware-registration.js","sourceRoot":"","sources":["../../../src/http/middleware/middleware-registration.ts"],"names":[],"mappings":""}

package/lib/http/middleware/middleware-registry.d.ts

@@ -0,0 +1,15 @@
+import type { Newable } from '@kurdel/common';
+import type { Controller, Middleware, MiddlewareRegistration, MiddlewareZone } from '../../http/index.js';
+export interface MiddlewareRegistry {
+    use(mw: Middleware, opts?: {
+        zone?: MiddlewareZone;
+        priority?: number;
+    }): void;
+    useFor(controller: Newable<Controller>, mw: Middleware, opts?: {
+        zone?: MiddlewareZone;
+        priority?: number;
+        action?: string;
+    }): void;
+    for(controller: Newable<Controller>, zone?: MiddlewareZone, action?: string): MiddlewareRegistration[];
+    all(zone?: MiddlewareZone): MiddlewareRegistration[];
+}

package/lib/http/middleware/middleware-registry.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=middleware-registry.js.map

package/lib/http/middleware/middleware-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware-registry.js","sourceRoot":"","sources":["../../../src/http/middleware/middleware-registry.ts"],"names":[],"mappings":""}

package/lib/http/middleware/middleware.d.ts

@@ -0,0 +1,2 @@
+import type { HttpContext, ActionResult } from '../../http/index.js';
+export type Middleware<TBody = unknown, TReadable = unknown> = (ctx: HttpContext<TBody>, next: () => Promise<ActionResult<any> | void>) => Promise<ActionResult<TReadable> | void>;

package/lib/http/middleware/middleware.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=middleware.js.map

package/lib/http/middleware/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/http/middleware/middleware.ts"],"names":[],"mappings":""}

package/lib/http/response/action-result.d.ts

@@ -0,0 +1,69 @@
+import type { JsonValue } from '../../http/index.js';
+/**
+ * Base shape for all HTTP responses returned by controller actions.
+ *
+ * All ActionResult variants share a status code and may include optional headers or cookies.
+ */
+export interface BaseResult {
+    /** HTTP status code (e.g., 200, 404, 500) */
+    status: number;
+    /** Optional response headers */
+    headers?: Record<string, string>;
+    /** Optional cookies to set in response */
+    cookies?: Record<string, string>;
+    /** Optional error payload (for diagnostics/logging) */
+    error?: unknown;
+}
+/**
+ * Streaming response — e.g. file download, SSE, proxied stream.
+ */
+export interface StreamResult<TReadable = unknown> extends BaseResult {
+    kind: 'stream';
+    /** Platform-neutral stream descriptor */
+    body: TReadable;
+    /** Optional MIME type */
+    contentType?: string;
+    /** Optional content length (bytes) */
+    contentLength?: number;
+}
+/**
+ * JSON response result.
+ */
+export interface JsonResult extends BaseResult {
+    kind: 'json';
+    body: JsonValue;
+    contentType?: string;
+}
+/**
+ * Plain text or pre-rendered HTML response.
+ */
+export interface TextResult extends BaseResult {
+    kind: 'text';
+    body: string;
+    contentType?: string;
+}
+/**
+ * Result representing a rendered HTML template.
+ */
+export interface HtmlResult extends BaseResult {
+    kind: 'html';
+    body: string;
+    contentType?: string;
+}
+/**
+ * Redirect response (302, 301, 307, etc.)
+ */
+export interface RedirectResult extends BaseResult {
+    kind: 'redirect';
+    location: string;
+}
+/**
+ * Empty response (204 No Content, etc.)
+ */
+export interface EmptyResult extends BaseResult {
+    kind: 'empty';
+}
+/**
+ * Union of all possible controller return types.
+ */
+export type ActionResult<TReadable = unknown> = JsonResult | TextResult | HtmlResult | RedirectResult | EmptyResult | StreamResult<TReadable>;

package/lib/http/response/action-result.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=action-result.js.map

package/lib/http/response/action-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-result.js","sourceRoot":"","sources":["../../../src/http/response/action-result.ts"],"names":[],"mappings":""}

package/lib/http/response/http-results.d.ts

@@ -0,0 +1,17 @@
+import type { ActionResult, HtmlResult, JsonValue } from '../../http/index.js';
+import { HttpError } from '../../http/index.js';
+export declare const Ok: (body?: JsonValue) => ActionResult;
+export declare const Created: (body?: JsonValue) => ActionResult;
+export declare const NoContent: () => ActionResult;
+export declare const Text: (body: string, status?: number) => ActionResult;
+export declare const Json: (data: JsonValue, status?: number) => ActionResult;
+export declare const Html: (body: string, status?: number) => HtmlResult;
+export declare const Redirect: (location: string, status?: number) => ActionResult;
+export declare const BadRequest: (msg: string, details?: unknown) => HttpError;
+export declare const Unauthorized: (msg?: string, details?: JsonValue) => HttpError;
+export declare const Forbidden: (msg?: string, details?: JsonValue) => HttpError;
+export declare const NotFound: (msg?: string, details?: JsonValue) => HttpError;
+export declare const Conflict: (msg?: string, details?: JsonValue) => HttpError;
+export declare const InternalServerError: (msg?: string, details?: JsonValue) => HttpError;
+export declare const NotImplemented: (msg?: string, details?: JsonValue) => HttpError;
+export declare const ServiceUnavailable: (msg?: string, details?: JsonValue) => HttpError;

package/lib/http/response/http-results.js

@@ -0,0 +1,46 @@
+import { HttpError } from '../../http/index.js';
+// success
+export const Ok = (body = { message: 'OK' }) => ({
+    kind: 'json',
+    status: 200,
+    body,
+});
+export const Created = (body = { message: 'OK' }) => ({
+    kind: 'json',
+    status: 201,
+    body,
+});
+export const NoContent = () => ({
+    kind: 'empty',
+    status: 204,
+});
+export const Text = (body, status = 200) => ({
+    kind: 'text',
+    status,
+    body,
+});
+export const Json = (data, status = 200) => ({
+    kind: 'json',
+    status,
+    body: JSON.stringify(data),
+});
+export const Html = (body, status = 200) => ({
+    kind: 'html',
+    status,
+    body,
+});
+export const Redirect = (location, status = 302) => ({
+    kind: 'redirect',
+    status,
+    location,
+});
+// errors
+export const BadRequest = (msg, details) => new HttpError(400, msg, details);
+export const Unauthorized = (msg = 'Unauthorized', details) => new HttpError(401, msg, details);
+export const Forbidden = (msg = 'Forbidden', details) => new HttpError(403, msg, details);
+export const NotFound = (msg = 'Not Found', details) => new HttpError(404, msg, details);
+export const Conflict = (msg = 'Conflict', details) => new HttpError(409, msg, details);
+export const InternalServerError = (msg = 'Internal Server Error', details) => new HttpError(500, msg, details);
+export const NotImplemented = (msg = 'Not Implemented', details) => new HttpError(501, msg, details);
+export const ServiceUnavailable = (msg = 'Service Unavailable', details) => new HttpError(503, msg, details);
+//# sourceMappingURL=http-results.js.map

package/lib/http/response/http-results.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-results.js","sourceRoot":"","sources":["../../../src/http/response/http-results.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,UAAU;AACV,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,OAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAgB,EAAE,CAAC,CAAC;IACxE,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,GAAG;IACX,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAgB,EAAE,CAAC,CAAC;IAC7E,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,GAAG;IACX,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAiB,EAAE,CAAC,CAAC;IAC5C,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,GAAG;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,MAAM,GAAG,GAAG,EAAgB,EAAE,CAAC,CAAC;IACjE,IAAI,EAAE,MAAM;IACZ,MAAM;IACN,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAe,EAAE,MAAM,GAAG,GAAG,EAAgB,EAAE,CAAC,CAAC;IACpE,IAAI,EAAE,MAAM;IACZ,MAAM;IACN,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,MAAM,GAAG,GAAG,EAAc,EAAE,CAAC,CAAC;IAC/D,IAAI,EAAE,MAAM;IACZ,MAAM;IACN,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,MAAM,GAAG,GAAG,EAAgB,EAAE,CAAC,CAAC;IACzE,IAAI,EAAE,UAAU;IAChB,MAAM;IACN,QAAQ;CACT,CAAC,CAAC;AAEH,SAAS;AACT,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,OAAiB,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAE/F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,GAAG,cAAc,EAAE,OAAmB,EAAE,EAAE,CACxE,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAG,GAAG,WAAW,EAAE,OAAmB,EAAE,EAAE,CAClE,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,WAAW,EAAE,OAAmB,EAAE,EAAE,CACjE,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,UAAU,EAAE,OAAmB,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAEpG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,GAAG,uBAAuB,EAAE,OAAmB,EAAE,EAAE,CACxF,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,GAAG,iBAAiB,EAAE,OAAmB,EAAE,EAAE,CAC7E,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,GAAG,qBAAqB,EAAE,OAAmB,EAAE,EAAE,CACrF,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC"}

package/lib/http/response/index.d.ts

@@ -0,0 +1,3 @@
+export * from './action-result.js';
+export * from './http-results.js';
+export * from './response-renderer.js';

package/lib/http/response/index.js

@@ -0,0 +1,4 @@
+export * from './action-result.js';
+export * from './http-results.js';
+export * from './response-renderer.js';
+//# sourceMappingURL=index.js.map

package/lib/http/response/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/response/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC"}

package/lib/http/response/response-renderer.d.ts

@@ -0,0 +1,6 @@
+import type { HttpResponse } from '@kurdel/common';
+import type { ActionResult } from '../../http/index.js';
+export interface ResponseRenderer {
+    render(res: HttpResponse, result: ActionResult | void): void;
+    handleError(res: HttpResponse, err: unknown): void;
+}

package/lib/http/response/response-renderer.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=response-renderer.js.map

package/lib/http/response/response-renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-renderer.js","sourceRoot":"","sources":["../../../src/http/response/response-renderer.ts"],"names":[],"mappings":""}

package/lib/http/routing/controller-config.d.ts

@@ -0,0 +1,24 @@
+import type { Newable } from '@kurdel/common';
+import type { Identifier } from '@kurdel/ioc';
+import type { MiddlewareRegistration, RouteAuth } from '@kurdel/core/http';
+import type { Controller, Middleware } from '../../http/index.js';
+/**
+ * Declares how a controller should be registered and instantiated.
+ */
+export interface ControllerConfig {
+    /** Controller class */
+    use: Newable<Controller<any>>;
+    /** Dependencies to be injected from IoC */
+    deps?: Record<string, Identifier>;
+    /**
+     * Middlewares applied to this controller or its specific actions.
+     *
+     * Each entry can be either:
+     * - A raw `Middleware` (shorthand for `{ middleware, zone: 'pre', priority: 0 }`)
+     * - A structured `MiddlewareRegistration` with zone, priority, and action.
+     */
+    middlewares?: Array<Middleware | MiddlewareRegistration>;
+    /** Optional route prefix applied to all controller routes */
+    prefix?: string;
+    auth?: RouteAuth;
+}

package/lib/http/routing/controller-config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=controller-config.js.map

package/lib/http/routing/controller-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-config.js","sourceRoot":"","sources":["../../../src/http/routing/controller-config.ts"],"names":[],"mappings":""}

package/lib/http/routing/controller-resolver.d.ts

@@ -0,0 +1,5 @@
+import type { Container } from '@kurdel/ioc';
+import type { Controller } from '../../http/index.js';
+export interface ControllerResolver {
+    resolve<T extends Controller = Controller>(token: unknown, scope?: Container): T;
+}

package/lib/http/routing/controller-resolver.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=controller-resolver.js.map

package/lib/http/routing/controller-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-resolver.js","sourceRoot":"","sources":["../../../src/http/routing/controller-resolver.ts"],"names":[],"mappings":""}

package/lib/http/routing/controller.d.ts

@@ -0,0 +1,22 @@
+import type { ActionResult, HtmlResult, HttpContext, Middleware, RouteConfig } from '../../http/index.js';
+export declare abstract class Controller<TDeps extends Record<string, any> = {}> {
+    protected readonly deps: TDeps;
+    constructor(deps: TDeps);
+    abstract readonly routes: RouteConfig;
+    private middlewares;
+    use(mw: Middleware): void;
+    /** Exposed for runtime to resolve an action. */
+    getAction(actionName: string): import("../../http/index.js").RouteHandler<any, any>;
+    /** Optional explicit action resolver (runtime uses `routes` by default). */
+    protected resolveAction(actionName: string): import("../../http/index.js").RouteHandler<any, any>;
+    /**
+     * Render HTML via TemplateEngine injected into controller dependencies.
+     * Throws if no TemplateEngine is available.
+     */
+    protected render(template: string, data?: Record<string, unknown>, status?: number): Promise<HtmlResult>;
+    /**
+     * Optionally overridden in tests or custom adapters,
+     * but normally invoked through RuntimeControllerExecutor.
+     */
+    handle(actionName: string, ctx: HttpContext): Promise<ActionResult | void>;
+}

package/lib/http/routing/controller.js

@@ -0,0 +1,47 @@
+// eslint-disable-next-line @typescript-eslint/no-empty-object-type
+export class Controller {
+    constructor(deps) {
+        this.deps = deps;
+        this.middlewares = [];
+    }
+    use(mw) {
+        this.middlewares.push(mw);
+    }
+    /** Exposed for runtime to resolve an action. */
+    getAction(actionName) {
+        return this.routes[actionName];
+    }
+    /** Optional explicit action resolver (runtime uses `routes` by default). */
+    resolveAction(actionName) {
+        return this.routes[actionName];
+    }
+    /**
+     * Render HTML via TemplateEngine injected into controller dependencies.
+     * Throws if no TemplateEngine is available.
+     */
+    async render(template, data, status = 200) {
+        const view = this.deps.view;
+        if (!view) {
+            throw new Error(`TemplateEngine is not registered in controller dependencies (controller: ${this.constructor.name})`);
+        }
+        const html = await view.render(template, data ?? {});
+        return {
+            status,
+            kind: 'html',
+            body: html,
+            contentType: 'text/html; charset=utf-8',
+        };
+    }
+    /**
+     * Optionally overridden in tests or custom adapters,
+     * but normally invoked through RuntimeControllerExecutor.
+     */
+    async handle(actionName, ctx) {
+        const fn = this.resolveAction(actionName);
+        if (typeof fn !== 'function') {
+            throw new Error(`Action '${actionName}' not found in ${this.constructor.name}`);
+        }
+        return await fn.call(this, ctx);
+    }
+}
+//# sourceMappingURL=controller.js.map

package/lib/http/routing/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../src/http/routing/controller.ts"],"names":[],"mappings":"AASA,mEAAmE;AACnE,MAAM,OAAgB,UAAU;IAC9B,YAA+B,IAAW;QAAX,SAAI,GAAJ,IAAI,CAAO;QAKlC,gBAAW,GAAiB,EAAE,CAAC;IALM,CAAC;IAO9C,GAAG,CAAC,EAAc;QAChB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,gDAAgD;IAChD,SAAS,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAED,4EAA4E;IAClE,aAAa,CAAC,UAAkB;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,MAAM,CACpB,QAAgB,EAChB,IAA8B,EAC9B,MAAM,GAAG,GAAG;QAEZ,MAAM,IAAI,GAAI,IAAI,CAAC,IAAY,CAAC,IAAkC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,4EAA4E,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,CACrG,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO;YACL,MAAM;YACN,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,0BAA0B;SACxC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,GAAgB;QAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,kBAAkB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF"}

package/lib/http/routing/index.d.ts

@@ -0,0 +1,7 @@
+export * from './controller-config.js';
+export * from './controller.js';
+export * from './controller-resolver.js';
+export * from './route.js';
+export * from './route-match.js';
+export * from './route-schema.js';
+export * from './router.js';

package/lib/http/routing/index.js

@@ -0,0 +1,8 @@
+export * from './controller-config.js';
+export * from './controller.js';
+export * from './controller-resolver.js';
+export * from './route.js';
+export * from './route-match.js';
+export * from './route-schema.js';
+export * from './router.js';
+//# sourceMappingURL=index.js.map

package/lib/http/routing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/http/routing/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC"}

package/lib/http/routing/route-match.d.ts

@@ -0,0 +1,27 @@
+import type { Controller, Method, RouteAuth, RouteSchema } from '../../http/index.js';
+/**
+ * ## RouteMatch
+ *
+ * The normalized result of router resolution.
+ * Returned by `Router.resolve()` and consumed by the orchestrator
+ * to drive validation, authentication, middleware selection,
+ * and controller execution.
+ *
+ * Fields:
+ *   - controller → DI-resolved controller instance for this request
+ *   - method     → HTTP method used for routing
+ *   - action     → name of the controller method to invoke
+ *   - path       → normalized route path (prefix + declared path)
+ *   - params     → extracted path parameters
+ *   - auth       → optional per-route authentication/authorization rules
+ *   - schema     → optional validation schema for params/query/body
+ */
+export interface RouteMatch {
+    controller: Controller<any>;
+    method: Method;
+    action: string;
+    path: string;
+    params: Record<string, string>;
+    auth?: RouteAuth;
+    schema?: RouteSchema;
+}

package/lib/http/routing/route-match.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=route-match.js.map

package/lib/http/routing/route-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-match.js","sourceRoot":"","sources":["../../../src/http/routing/route-match.ts"],"names":[],"mappings":""}

package/lib/http/routing/route-schema.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Describes expected input for a given route.
+ * Framework-agnostic: any validator (Zod, Valibot, Yup) can implement it.
+ */
+export interface RouteSchema<TBody = unknown, TParams = Record<string, string>, TQuery = Record<string, string>> {
+    readonly body?: SchemaValidator<TBody>;
+    readonly params?: SchemaValidator<TParams>;
+    readonly query?: SchemaValidator<TQuery>;
+}
+/**
+ * Minimal contract any schema validator must satisfy.
+ */
+export interface SchemaValidator<T> {
+    /** Validates value and returns it typed, or throws ValidationError */
+    validate(value: unknown): T | Promise<T>;
+}

package/lib/http/routing/route-schema.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=route-schema.js.map

package/lib/http/routing/route-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-schema.js","sourceRoot":"","sources":["../../../src/http/routing/route-schema.ts"],"names":[],"mappings":""}

package/lib/http/routing/route.d.ts

@@ -0,0 +1,112 @@
+import type { Method, HttpContext, ActionResult, RouteSchema } from '../../http/index.js';
+export declare const ROUTE_META: unique symbol;
+/**
+ * ## RouteAuth
+ *
+ * Declarative authentication/authorization rules attached to a route
+ * or inherited from its controller.
+ *
+ * A route becomes protected **only if at least one auth field is present**
+ * (unless explicitly marked as `public: true`).
+ *
+ * ### Semantics
+ * - `public: true`
+ *     Marks a route as publicly accessible, bypassing authentication entirely.
+ *     This **overrides controller-level security**.
+ *
+ * - `strategy`
+ *     Name of an authentication strategy registered in `AuthStrategyRegistry`
+ *     (e.g. `"api-key"`, `"jwt"`, `"session"`).
+ *     If set, the corresponding strategy is invoked before controller execution.
+ *
+ * - `roles`
+ *     List of roles required for access.
+ *     Authorization succeeds if the authenticated user has **at least one**
+ *     matching role.
+ *
+ * ### Controller-level vs Route-level
+ * Controller `auth` rules act as defaults and are *merged* with route rules.
+ * Route-level fields override controller-level ones:
+ *
+ * - `public` overrides everything (`public: true` makes route open even inside
+ *   protected controller)
+ * - `strategy` overrides controller strategy
+ * - `roles` override controller roles
+ *
+ * @example:
+ * ```ts
+ * // Public route (even inside protected controller)
+ * { public: true }
+ *
+ * // Simple protected route
+ * { strategy: 'api-key' }
+ *
+ * // Role-restricted route
+ * { strategy: 'api-key', roles: ['admin', 'root'] }
+ *
+ * // Controller-level default + route override:
+ * controller.auth = { strategy: 'jwt', roles: ['user'] }
+ * route.auth      = { roles: ['manager'] } // => result: { strategy: 'jwt', roles: ['manager'] }
+ * ```
+ */
+export type RouteAuth = {
+    /** Allows bypassing all authentication. Route is always accessible. */
+    public?: boolean;
+    /** Name of the strategy registered in AuthStrategyRegistry. */
+    strategy?: string;
+    /** Allowed user roles; user must have at least one. */
+    roles?: string[];
+    /** Named authorization policies; every policy must grant access. */
+    policies?: string[];
+};
+/**
+ * ## RouteMeta
+ *
+ * Static metadata describing a single route produced by `route(meta)(handler)`.
+ * This metadata is read by `RuntimeRouter` at application bootstrap and
+ * becomes part of the compiled routing table.
+ *
+ * Fields:
+ * - `method` — HTTP method (GET/POST/PUT/DELETE/...)
+ * - `path` — route path template (`/users/:id`)
+ * - `auth` — optional authentication & authorization constraints
+ * - `schema` — optional validation schema (params/query/body)
+ *
+ * Notes:
+ * - This metadata is **pure** and never mutated at runtime.
+ * - Routers do not execute any logic here — they simply store and return it.
+ * - Orchestrator uses `schema` for validation and `auth` for authentication.
+ */
+export type RouteMeta<P extends string = string> = {
+    method: Method;
+    path: P;
+    auth?: RouteAuth;
+    schema?: RouteSchema;
+};
+type Split<S extends string> = S extends '' ? [] : S extends `/${infer R}` ? Split<R> : S extends `${infer A}/${infer B}` ? [A, ...Split<B>] : [
+    S
+];
+type ParamName<Seg extends string> = Seg extends `:${infer Name}` ? Name : Seg extends `:${infer Name}<${string}>` ? Name : never;
+export type RouteParams<Path extends string> = {
+    [K in ParamName<Split<Path>[number]>]: string;
+} & {};
+/**
+ * A concrete action handler executed by runtime.
+ *
+ * TBody   = validated body type
+ * TParams = validated params type
+ */
+export type RouteHandler<TBody = unknown, TParams extends Record<string, string> = Record<string, string>> = (ctx: HttpContext<TBody, TParams>) => Promise<ActionResult | void>;
+/**
+ * RouteConfig maps action names to handlers.
+ */
+export type RouteConfig = {
+    [key: string]: RouteHandler<any, any>;
+};
+/**
+ * Decorates the given handler with metadata (method, path, schema).
+ *
+ * Typing also narrows ctx.params based on meta.path automatically.
+ */
+export declare function route<const M extends RouteMeta>(meta: M): <TBody = unknown, P extends RouteParams<M["path"]> = RouteParams<M["path"]>>(fn: RouteHandler<TBody, P>) => typeof fn;
+export {};