@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/host/host-core.options.d.ts

@@ -0,0 +1,152 @@
+import type { DynamicModule, ForwardReference, Type } from '@nestjs/common';
+import { type ErrorMapper, type PlatformHost, type PortBinding } from '../core/index';
+import type { EventBus } from './event-bus/event-bus.interface';
+/**
+ * A module `PlatformHostCoreModule.forRoot` imports for the app.
+ *
+ * @stability experimental
+ */
+export type PlatformHostCoreImport = Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference;
+/**
+ * `PlatformHostCoreModule.forRoot` options. Every one is optional: the
+ * defaults are the reference app's behaviour.
+ *
+ * @stability experimental
+ */
+export interface PlatformHostCoreOptions {
+    /**
+     * The event bus adapter: `in-process`, `postgres` or the id of any adapter
+     * the app registered with `registerEventBusAdapter` (case-insensitive).
+     * Default: `EVENT_BUS_ADAPTER`, read when the bus is built. An id nobody
+     * registered passed HERE fails the boot (naming the id and the registered
+     * ones); an unregistered `EVENT_BUS_ADAPTER` falls back to `in-process` with
+     * one warning (and a Doctor `warn`), because a typo in the environment must
+     * not take the API down.
+     */
+    eventBusAdapter?: string;
+    /**
+     * A whole event bus, bound as `EVENT_BUS` for every consumer in the
+     * application. Wins over `eventBusAdapter` and `EVENT_BUS_ADAPTER`, which are
+     * then ignored. `PlatformHostCoreModule` is global, so this is the way to
+     * replace the bus: a provider of `EVENT_BUS` in the app's own module would
+     * never be seen by the host core's consumers.
+     *
+     * The binding is resolved in the host core's context: a `useFactory`'s
+     * `inject` tokens and a `useClass`'s dependencies come from `imports` and
+     * from global modules. Implement Nest's `OnModuleDestroy` on the instance if
+     * it holds resources.
+     *
+     * @example
+     * ```ts
+     * PlatformHostCoreModule.forRoot({ eventBus: { useClass: RedisEventBus } });
+     * ```
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    eventBus?: PortBinding<EventBus>;
+    /**
+     * The app's access decorators (`definePlatformHost(...)`), so the maintenance
+     * routes are guarded exactly as the app's own admin routes are, and the health
+     * probes carry the app's public marker. Omitted, the host's controllers use
+     * the identity slice's `@Auth()` and `@Public()`, which is what the reference
+     * app binds.
+     *
+     * @example
+     * ```ts
+     * PlatformHostCoreModule.forRoot({ host: platformHost });
+     * ```
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    host?: PlatformHost;
+    /**
+     * The permission strings the maintenance routes enforce. Defaults:
+     * `system_settings:read` for `GET /api/admin/maintenance` and
+     * `system_settings:write` for `PUT`. An app that changes one must change the
+     * Maintenance settings card's `permission` to the same string.
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    permissions?: PlatformHostCorePermissions;
+    /**
+     * Whether the database-backed gauges (queue depth, oldest pending job, last
+     * backup) register. Default: `OTEL_ENABLED === 'true'`, read when the
+     * metrics host is built, so a process without the SDK never queries for them.
+     */
+    metricsGauges?: boolean;
+    /**
+     * Mappers that turn a FOREIGN error (Prisma, an SDK) into an `HttpException`
+     * with a status and a registered code the app chose, tried in order for any
+     * thrown value that is not already an `HttpException`. Default: none, so a
+     * foreign error is a 500 exactly as before.
+     *
+     * A mapper must build the result's `message` and `details` itself: the
+     * original error's text (SQL, hostnames) is logged server-side and never put
+     * in the response.
+     *
+     * @example
+     * ```ts
+     * PlatformHostCoreModule.forRoot({ errorMappers: [prismaUniqueViolationMapper] });
+     * ```
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    errorMappers?: readonly ErrorMapper[];
+    /** Extra modules the host core's providers need from the app (none by default). */
+    imports?: PlatformHostCoreImport[];
+}
+/**
+ * The permissions of the host's controllers.
+ *
+ * @stability experimental
+ */
+export interface PlatformHostCorePermissions {
+    /** `GET /api/admin/maintenance`. Default `system_settings:read`. */
+    maintenanceRead?: string;
+    /** `PUT /api/admin/maintenance`. Default `system_settings:write`. */
+    maintenanceWrite?: string;
+}
+/**
+ * The options after defaults.
+ *
+ * @stability experimental
+ */
+export interface ResolvedPlatformHostCoreOptions {
+    /** See {@link PlatformHostCoreOptions.eventBusAdapter}; `undefined` reads the environment. */
+    readonly eventBusAdapter: string | undefined;
+    /** See {@link PlatformHostCoreOptions.eventBus}; `undefined` builds the selected adapter. */
+    readonly eventBus: PortBinding<EventBus> | undefined;
+    /** See {@link PlatformHostCoreOptions.host}; `undefined` uses the identity slice's decorators. */
+    readonly host: PlatformHost | undefined;
+    /** See {@link PlatformHostCoreOptions.permissions}, defaults applied. */
+    readonly permissions: Readonly<Required<PlatformHostCorePermissions>>;
+    /** See {@link PlatformHostCoreOptions.metricsGauges}; `undefined` reads the environment. */
+    readonly metricsGauges: boolean | undefined;
+    /** See {@link PlatformHostCoreOptions.errorMappers}. */
+    readonly errorMappers: readonly ErrorMapper[];
+    /** See {@link PlatformHostCoreOptions.imports}. */
+    readonly imports: readonly PlatformHostCoreImport[];
+}
+/**
+ * Injection token of {@link ResolvedPlatformHostCoreOptions}.
+ *
+ * @stability experimental
+ */
+export declare const PLATFORM_HOST_CORE_OPTIONS: unique symbol;
+/**
+ * Applies defaults and validates.
+ *
+ * @param options - the raw options.
+ * @returns the resolved, frozen options.
+ * @throws Error when `eventBusAdapter` is not a string, `eventBus` is not a binding with exactly one
+ *   of `useExisting`, `useClass` or `useFactory`, `host` is not a valid platform host, a permission
+ *   is not a non-empty string, `metricsGauges` is not a boolean, or `errorMappers` is not an array of functions.
+ *
+ * @stability experimental
+ */
+export declare function resolvePlatformHostCoreOptions(options?: PlatformHostCoreOptions): ResolvedPlatformHostCoreOptions;
+//# sourceMappingURL=host-core.options.d.ts.map

package/dist/host/host-core.options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-core.options.d.ts","sourceRoot":"","sources":["../../src/host/host-core.options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAsB,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1G,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAGhE;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,gBAAgB,CAAC;AAE/G;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC;;;;;;;;;;;;;;OAcG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAC1C;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,mFAAmF;IACnF,OAAO,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,oEAAoE;IACpE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC9C,8FAA8F;IAC9F,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IACrD,kGAAkG;IAClG,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACtE,4FAA4F;IAC5F,QAAQ,CAAC,aAAa,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5C,wDAAwD;IACxD,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACrD;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,OAAO,MAAwD,CAAC;AAEzG;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,GAAE,uBAA4B,GAAG,+BAA+B,CA+CrH"}

package/dist/host/host-core.options.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLATFORM_HOST_CORE_OPTIONS = void 0;
+exports.resolvePlatformHostCoreOptions = resolvePlatformHostCoreOptions;
+const index_1 = require("../core/index");
+const maintenance_controller_1 = require("./maintenance/maintenance.controller");
+/**
+ * Injection token of {@link ResolvedPlatformHostCoreOptions}.
+ *
+ * @stability experimental
+ */
+exports.PLATFORM_HOST_CORE_OPTIONS = Symbol.for('@marinoscar/platform/host/OPTIONS');
+/**
+ * Applies defaults and validates.
+ *
+ * @param options - the raw options.
+ * @returns the resolved, frozen options.
+ * @throws Error when `eventBusAdapter` is not a string, `eventBus` is not a binding with exactly one
+ *   of `useExisting`, `useClass` or `useFactory`, `host` is not a valid platform host, a permission
+ *   is not a non-empty string, `metricsGauges` is not a boolean, or `errorMappers` is not an array of functions.
+ *
+ * @stability experimental
+ */
+function resolvePlatformHostCoreOptions(options = {}) {
+    if (options.eventBusAdapter !== undefined && typeof options.eventBusAdapter !== 'string') {
+        throw new Error('PlatformHostCoreModule.forRoot: eventBusAdapter must be a string');
+    }
+    if (options.eventBus !== undefined) {
+        const binding = options.eventBus;
+        const kinds = binding && typeof binding === 'object'
+            ? ['useExisting', 'useClass', 'useFactory'].filter((kind) => kind in binding)
+            : [];
+        if (kinds.length !== 1) {
+            throw new Error('PlatformHostCoreModule.forRoot: eventBus needs exactly one of useExisting, useClass or useFactory');
+        }
+    }
+    if (options.host !== undefined) {
+        // Validates and freezes it now, so a bad host fails the boot rather than a route.
+        (0, index_1.definePlatformHost)(options.host);
+    }
+    for (const [key, value] of Object.entries(options.permissions ?? {})) {
+        if (key !== 'maintenanceRead' && key !== 'maintenanceWrite') {
+            throw new Error(`PlatformHostCoreModule.forRoot: permissions.${key} is not a host permission (maintenanceRead, maintenanceWrite)`);
+        }
+        if (typeof value !== 'string' || value.trim() === '') {
+            throw new Error(`PlatformHostCoreModule.forRoot: permissions.${key} must be a non-empty string`);
+        }
+    }
+    if (options.metricsGauges !== undefined && typeof options.metricsGauges !== 'boolean') {
+        throw new Error('PlatformHostCoreModule.forRoot: metricsGauges must be a boolean');
+    }
+    if (options.errorMappers !== undefined &&
+        (!Array.isArray(options.errorMappers) || options.errorMappers.some((mapper) => typeof mapper !== 'function'))) {
+        throw new Error('PlatformHostCoreModule.forRoot: errorMappers must be an array of functions');
+    }
+    return Object.freeze({
+        eventBusAdapter: options.eventBusAdapter,
+        eventBus: options.eventBus,
+        host: options.host,
+        permissions: Object.freeze({
+            maintenanceRead: options.permissions?.maintenanceRead ?? maintenance_controller_1.DEFAULT_MAINTENANCE_READ_PERMISSION,
+            maintenanceWrite: options.permissions?.maintenanceWrite ?? maintenance_controller_1.DEFAULT_MAINTENANCE_WRITE_PERMISSION,
+        }),
+        metricsGauges: options.metricsGauges,
+        errorMappers: Object.freeze([...(options.errorMappers ?? [])]),
+        imports: Object.freeze([...(options.imports ?? [])]),
+    });
+}
+//# sourceMappingURL=host-core.options.js.map

package/dist/host/host-core.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-core.options.js","sourceRoot":"","sources":["../../src/host/host-core.options.ts"],"names":[],"mappings":";;;AA8JA,wEA+CC;AA3MD,yCAA0G;AAE1G,iFAAiI;AAwIjI;;;;GAIG;AACU,QAAA,0BAA0B,GAAkB,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAEzG;;;;;;;;;;GAUG;AACH,SAAgB,8BAA8B,CAAC,UAAmC,EAAE;IAClF,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAmB,CAAC;QAC5C,MAAM,KAAK,GACT,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YACpC,CAAC,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAK,OAAkB,CAAC;YACzF,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,kFAAkF;QAClF,IAAA,0BAAkB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,GAAG,KAAK,iBAAiB,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,+DAA+D,CAAC,CAAC;QACrI,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,6BAA6B,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,IACE,OAAO,CAAC,YAAY,KAAK,SAAS;QAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,EAC7G,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,eAAe,EAAE,OAAO,CAAC,WAAW,EAAE,eAAe,IAAI,4DAAmC;YAC5F,gBAAgB,EAAE,OAAO,CAAC,WAAW,EAAE,gBAAgB,IAAI,6DAAoC;SAChG,CAAC;QACF,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;KACrD,CAAC,CAAC;AACL,CAAC"}

package/dist/host/http/cors-options.d.ts

@@ -0,0 +1,88 @@
+/**
+ * No CORS headers are emitted; the browser's same-origin policy applies.
+ *
+ * @stability experimental
+ */
+export interface SameOriginCorsOptions {
+    /** `false`: emit no CORS headers. */
+    origin: false;
+}
+/**
+ * Exactly these origins may call the API cross-origin, with credentials.
+ *
+ * @stability experimental
+ */
+export interface AllowlistCorsOptions {
+    /** The exact serialized origins allowed, deduplicated in first-seen order. */
+    origin: string[];
+    /** Always `true`: cookies and authorization headers are allowed for those origins. */
+    credentials: true;
+}
+/**
+ * The CORS settings an app may add to the allowlist policy (`buildCorsOptions`'s
+ * second argument). Deliberately without `origin` and `credentials`: the origin
+ * allowlist comes from `CORS_ORIGIN` alone, and a credentialed wildcard must not
+ * be one argument away.
+ *
+ * @extensionPoint option
+ * @stability experimental
+ */
+export interface ExtraCorsOptions {
+    /** `Access-Control-Allow-Methods`. */
+    methods?: string | string[];
+    /** `Access-Control-Allow-Headers`. */
+    allowedHeaders?: string | string[];
+    /** `Access-Control-Expose-Headers`, so a browser script may read these response headers. */
+    exposedHeaders?: string | string[];
+    /** `Access-Control-Max-Age`, in seconds (a non-negative integer). */
+    maxAge?: number;
+}
+/**
+ * Structurally assignable to `FastifyCorsOptions`, which
+ * `NestFastifyApplication.enableCors` takes. Declared here rather than imported
+ * because `@fastify/cors` is only a transitive dependency of this workspace.
+ *
+ * @stability experimental
+ */
+export type CorsOptions = (SameOriginCorsOptions | AllowlistCorsOptions) & ExtraCorsOptions;
+/**
+ * Raised for a CORS_ORIGIN value the API refuses to start with.
+ *
+ * @stability experimental
+ */
+export declare class InvalidCorsOriginError extends Error {
+    constructor(message: string);
+}
+/**
+ * Parses the raw CORS_ORIGIN value into the options for `app.enableCors`.
+ *
+ * Comma-separated; each entry is trimmed and empty entries are dropped, so
+ * `" https://a.example , ,https://b.example "` yields two origins. Duplicates
+ * are collapsed, keeping first-seen order.
+ *
+ * @param raw - the raw `CORS_ORIGIN` value (`process.env.CORS_ORIGIN`).
+ * @param extra - methods, headers and max age to add (see {@link ExtraCorsOptions}).
+ *   Never the origin policy: that is `raw` alone, and an `origin` or `credentials`
+ *   key here throws.
+ * @returns the options for `app.enableCors`.
+ * @throws InvalidCorsOriginError for a wildcard or a malformed origin, or an invalid `extra`.
+ *
+ * @example
+ * ```ts
+ * app.enableCors(buildCorsOptions(process.env.CORS_ORIGIN, { exposedHeaders: ['x-request-id'], maxAge: 600 }));
+ * ```
+ *
+ * @extensionPoint option
+ * @stability experimental
+ */
+export declare function buildCorsOptions(raw: string | undefined, extra?: ExtraCorsOptions): CorsOptions;
+/**
+ * True when the options leave the API same-origin only.
+ *
+ * @param options - the result of {@link buildCorsOptions}.
+ * @returns whether no CORS headers are emitted.
+ *
+ * @stability experimental
+ */
+export declare function isSameOriginOnly(options: CorsOptions): options is SameOriginCorsOptions;
+//# sourceMappingURL=cors-options.d.ts.map

package/dist/host/http/cors-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors-options.d.ts","sourceRoot":"","sources":["../../../src/host/http/cors-options.ts"],"names":[],"mappings":"AAsCA;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,MAAM,EAAE,KAAK,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,sFAAsF;IACtF,WAAW,EAAE,IAAI,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,4FAA4F;IAC5F,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,qBAAqB,GAAG,oBAAoB,CAAC,GAAG,gBAAgB,CAAC;AAE5F;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,WAAW,CAG/F;AAiDD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,WAAW,GACnB,OAAO,IAAI,qBAAqB,CAElC"}

package/dist/host/http/cors-options.js

@@ -0,0 +1,158 @@
+"use strict";
+// =============================================================================
+// CORS policy from CORS_ORIGIN  (issue #517)
+// =============================================================================
+//
+// The application is SAME-ORIGIN by design: nginx serves the web app at `/` and
+// the API at `/api`, and the Vite dev server proxies `/api` the same way. The
+// `appctl` CLI and worker nodes are not browsers, so CORS never applies to them.
+// No first-party caller therefore needs a single CORS header.
+//
+// The previous `origin: process.env.CORS_ORIGIN || true` with
+// `credentials: true` REFLECTED ANY ORIGIN with credentials allowed, because
+// CORS_ORIGIN was set nowhere: every website on the internet was a trusted
+// cross-origin caller of this API. This module replaces it with a closed
+// default and an explicit allowlist.
+//
+//   unset / empty / only commas  -> `{ origin: false }`: no CORS headers at
+//                                   all, so browsers enforce same-origin.
+//   `https://a.example,https://b.example`
+//                                -> `{ origin: [...], credentials: true }`:
+//                                   exactly those origins, nothing reflected.
+//
+// Misconfiguration THROWS, and is meant to be called during bootstrap so the
+// process exits before binding the port (the same posture as the
+// TEST_AUTH_ENABLED guard and the SECRETS_ENCRYPTION_KEY check in main.ts):
+//
+//   - `*` anywhere in the list. A credentialed wildcard is never valid - browsers
+//     refuse it - and "allow everyone with cookies" is the bug this replaces.
+//   - An entry that is not exactly a serialized origin (`scheme://host[:port]`,
+//     http or https, lowercase host, no default port, no path, no trailing
+//     slash). The browser's `Origin` header is compared byte for byte, so
+//     `https://app.example.com/` or `https://App.example.com` would silently
+//     never match; failing loudly at startup beats a CORS error in a browser
+//     console nobody connects to this variable.
+//
+// Pure: no process.env, no logging. main.ts passes the raw value in and logs
+// the resulting mode.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidCorsOriginError = void 0;
+exports.buildCorsOptions = buildCorsOptions;
+exports.isSameOriginOnly = isSameOriginOnly;
+/**
+ * Raised for a CORS_ORIGIN value the API refuses to start with.
+ *
+ * @stability experimental
+ */
+class InvalidCorsOriginError extends Error {
+    constructor(message) {
+        super(`Invalid CORS_ORIGIN: ${message}`);
+        this.name = 'InvalidCorsOriginError';
+    }
+}
+exports.InvalidCorsOriginError = InvalidCorsOriginError;
+/**
+ * Parses the raw CORS_ORIGIN value into the options for `app.enableCors`.
+ *
+ * Comma-separated; each entry is trimmed and empty entries are dropped, so
+ * `" https://a.example , ,https://b.example "` yields two origins. Duplicates
+ * are collapsed, keeping first-seen order.
+ *
+ * @param raw - the raw `CORS_ORIGIN` value (`process.env.CORS_ORIGIN`).
+ * @param extra - methods, headers and max age to add (see {@link ExtraCorsOptions}).
+ *   Never the origin policy: that is `raw` alone, and an `origin` or `credentials`
+ *   key here throws.
+ * @returns the options for `app.enableCors`.
+ * @throws InvalidCorsOriginError for a wildcard or a malformed origin, or an invalid `extra`.
+ *
+ * @example
+ * ```ts
+ * app.enableCors(buildCorsOptions(process.env.CORS_ORIGIN, { exposedHeaders: ['x-request-id'], maxAge: 600 }));
+ * ```
+ *
+ * @extensionPoint option
+ * @stability experimental
+ */
+function buildCorsOptions(raw, extra) {
+    const policy = buildOriginPolicy(raw);
+    return extra === undefined ? policy : { ...policy, ...validateExtra(extra) };
+}
+function validateExtra(extra) {
+    const out = {};
+    for (const key of Object.keys(extra)) {
+        if (key === 'origin' || key === 'credentials') {
+            throw new InvalidCorsOriginError(`"${key}" cannot be passed as an extra CORS option: the origin policy comes from CORS_ORIGIN alone.`);
+        }
+        if (key !== 'methods' && key !== 'allowedHeaders' && key !== 'exposedHeaders' && key !== 'maxAge') {
+            throw new InvalidCorsOriginError(`"${key}" is not a supported extra CORS option (methods, allowedHeaders, exposedHeaders, maxAge).`);
+        }
+    }
+    for (const key of ['methods', 'allowedHeaders', 'exposedHeaders']) {
+        const value = extra[key];
+        if (value === undefined)
+            continue;
+        const list = Array.isArray(value) ? value : [value];
+        if (list.length === 0 || list.some((entry) => typeof entry !== 'string' || entry.trim() === '' || /[\r\n]/.test(entry))) {
+            throw new InvalidCorsOriginError(`${key} must be a non-empty string or an array of non-empty strings without line breaks.`);
+        }
+        out[key] = Array.isArray(value) ? [...value] : value;
+    }
+    if (extra.maxAge !== undefined) {
+        if (!Number.isInteger(extra.maxAge) || extra.maxAge < 0) {
+            throw new InvalidCorsOriginError('maxAge must be a non-negative integer (seconds).');
+        }
+        out.maxAge = extra.maxAge;
+    }
+    return out;
+}
+function buildOriginPolicy(raw) {
+    const entries = (raw ?? '')
+        .split(',')
+        .map((entry) => entry.trim())
+        .filter((entry) => entry !== '');
+    if (entries.length === 0) {
+        return { origin: false };
+    }
+    for (const entry of entries) {
+        assertSerializedOrigin(entry);
+    }
+    return { origin: [...new Set(entries)], credentials: true };
+}
+/**
+ * True when the options leave the API same-origin only.
+ *
+ * @param options - the result of {@link buildCorsOptions}.
+ * @returns whether no CORS headers are emitted.
+ *
+ * @stability experimental
+ */
+function isSameOriginOnly(options) {
+    return options.origin === false;
+}
+function assertSerializedOrigin(entry) {
+    if (entry.includes('*')) {
+        throw new InvalidCorsOriginError(`"${entry}" is a wildcard. The API sends credentials (the refresh-token ` +
+            'cookie), and a credentialed wildcard is never valid. List each ' +
+            'trusted origin explicitly, comma-separated, or leave CORS_ORIGIN ' +
+            'unset for same-origin only.');
+    }
+    let url;
+    try {
+        url = new URL(entry);
+    }
+    catch {
+        throw new InvalidCorsOriginError(`"${entry}" is not a URL. Expected an origin such as ` +
+            'https://app.example.com (scheme and host, optional port, no path).');
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new InvalidCorsOriginError(`"${entry}" must use http or https. Expected an origin such as ` +
+            'https://app.example.com.');
+    }
+    if (url.origin !== entry) {
+        throw new InvalidCorsOriginError(`"${entry}" is not an exact origin; browsers would send ` +
+            `"${url.origin}", which would never match. Use the scheme and host ` +
+            'only (lowercase, optional non-default port, no path, no trailing slash).');
+    }
+}
+//# sourceMappingURL=cors-options.js.map

package/dist/host/http/cors-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors-options.js","sourceRoot":"","sources":["../../../src/host/http/cors-options.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,6CAA6C;AAC7C,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,8DAA8D;AAC9D,EAAE;AACF,8DAA8D;AAC9D,6EAA6E;AAC7E,2EAA2E;AAC3E,yEAAyE;AACzE,qCAAqC;AACrC,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,0CAA0C;AAC1C,4EAA4E;AAC5E,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,iEAAiE;AACjE,4EAA4E;AAC5E,EAAE;AACF,kFAAkF;AAClF,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,6EAA6E;AAC7E,gDAAgD;AAChD,EAAE;AACF,6EAA6E;AAC7E,sBAAsB;AACtB,gFAAgF;;;AAuFhF,4CAGC;AAyDD,4CAIC;AAlGD;;;;GAIG;AACH,MAAa,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AALD,wDAKC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,gBAAgB,CAAC,GAAuB,EAAE,KAAwB;IAChF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,aAAa,CAAC,KAAuB;IAC5C,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC9C,MAAM,IAAI,sBAAsB,CAC9B,IAAI,GAAG,6FAA6F,CACrG,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAClG,MAAM,IAAI,sBAAsB,CAAC,IAAI,GAAG,2FAA2F,CAAC,CAAC;QACvI,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,CAAU,EAAE,CAAC;QAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACxH,MAAM,IAAI,sBAAsB,CAAC,GAAG,GAAG,mFAAmF,CAAC,CAAC;QAC9H,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,sBAAsB,CAAC,kDAAkD,CAAC,CAAC;QACvF,CAAC;QACD,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAuB;IAChD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;SACxB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAEnC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAC9B,OAAoB;IAEpB,OAAO,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;AAClC,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,sBAAsB,CAC9B,IAAI,KAAK,gEAAgE;YACvE,iEAAiE;YACjE,mEAAmE;YACnE,6BAA6B,CAChC,CAAC;IACJ,CAAC;IAED,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAC9B,IAAI,KAAK,6CAA6C;YACpD,oEAAoE,CACvE,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,sBAAsB,CAC9B,IAAI,KAAK,uDAAuD;YAC9D,0BAA0B,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,sBAAsB,CAC9B,IAAI,KAAK,gDAAgD;YACvD,IAAI,GAAG,CAAC,MAAM,sDAAsD;YACpE,0EAA0E,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/host/http/logging.interceptor.d.ts

@@ -0,0 +1,21 @@
+import { NestInterceptor, ExecutionContext, CallHandler } from '@nestjs/common';
+import { Observable } from 'rxjs';
+/**
+ * Logs one `METHOD url - Nms` line per request (logger context `HTTP`); an SSE
+ * stream is logged once, when it opens. Registered globally by
+ * `PlatformHostCoreModule.forRoot()` (packaged by #867).
+ *
+ * @stability experimental
+ */
+export declare class LoggingInterceptor implements NestInterceptor {
+    private readonly logger;
+    /**
+     * Times the handler and logs the line.
+     *
+     * @param context - the Nest execution context.
+     * @param next - the handler.
+     * @returns the handler's stream, unchanged.
+     */
+    intercept(context: ExecutionContext, next: CallHandler): Observable<unknown>;
+}
+//# sourceMappingURL=logging.interceptor.d.ts.map

package/dist/host/http/logging.interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.interceptor.d.ts","sourceRoot":"","sources":["../../../src/host/http/logging.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,gBAAgB,EAChB,WAAW,EAEZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAIlC;;;;;;GAMG;AACH,qBACa,kBAAmB,YAAW,eAAe;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAE7C;;;;;;OAMG;IACH,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC;CA0B7E"}

package/dist/host/http/logging.interceptor.js

@@ -0,0 +1,56 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoggingInterceptor = void 0;
+const common_1 = require("@nestjs/common");
+const constants_1 = require("@nestjs/common/constants");
+const operators_1 = require("rxjs/operators");
+/**
+ * Logs one `METHOD url - Nms` line per request (logger context `HTTP`); an SSE
+ * stream is logged once, when it opens. Registered globally by
+ * `PlatformHostCoreModule.forRoot()` (packaged by #867).
+ *
+ * @stability experimental
+ */
+let LoggingInterceptor = class LoggingInterceptor {
+    logger = new common_1.Logger('HTTP');
+    /**
+     * Times the handler and logs the line.
+     *
+     * @param context - the Nest execution context.
+     * @param next - the handler.
+     * @returns the handler's stream, unchanged.
+     */
+    intercept(context, next) {
+        const request = context.switchToHttp().getRequest();
+        const { method, url } = request;
+        const now = Date.now();
+        // SSE streams are logged ONCE, at open (issue #127, epic #109).
+        //
+        // The `tap` below fires on every emission, and an SSE handler emits for the
+        // lifetime of the connection — so a stream would log a line per
+        // notification AND per 25-second heartbeat, each reporting an
+        // ever-increasing "response time" measured from when the connection was
+        // established. That is not a slow request; it is a long-lived one, and
+        // reporting it as latency would make every dashboard built on these lines
+        // wrong about the p99 of an API that is behaving perfectly.
+        if (Reflect.getMetadata(constants_1.SSE_METADATA, context.getHandler())) {
+            this.logger.log(`${method} ${url} - SSE stream opened`);
+            return next.handle();
+        }
+        return next.handle().pipe((0, operators_1.tap)(() => {
+            const responseTime = Date.now() - now;
+            this.logger.log(`${method} ${url} - ${responseTime}ms`);
+        }));
+    }
+};
+exports.LoggingInterceptor = LoggingInterceptor;
+exports.LoggingInterceptor = LoggingInterceptor = __decorate([
+    (0, common_1.Injectable)()
+], LoggingInterceptor);
+//# sourceMappingURL=logging.interceptor.js.map

package/dist/host/http/logging.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.interceptor.js","sourceRoot":"","sources":["../../../src/host/http/logging.interceptor.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAMwB;AACxB,wDAAwD;AAExD,8CAAqC;AAGrC;;;;;;GAMG;AAEI,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACZ,MAAM,GAAG,IAAI,eAAM,CAAC,MAAM,CAAC,CAAC;IAE7C;;;;;;OAMG;IACH,SAAS,CAAC,OAAyB,EAAE,IAAiB;QACpD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAkB,CAAC;QACpE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,gEAAgE;QAChE,EAAE;QACF,4EAA4E;QAC5E,gEAAgE;QAChE,8DAA8D;QAC9D,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,4DAA4D;QAC5D,IAAI,OAAO,CAAC,WAAW,CAAC,wBAAY,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,GAAG,sBAAsB,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,eAAG,EAAC,GAAG,EAAE;YACP,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,GAAG,MAAM,YAAY,IAAI,CAAC,CAAC;QAC1D,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AApCY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;GACA,kBAAkB,CAoC9B"}

package/dist/host/http/request-id.middleware.d.ts

@@ -0,0 +1,33 @@
+import { NestMiddleware } from '@nestjs/common';
+import type { FastifyRequest } from 'fastify';
+import type { ServerResponse } from 'node:http';
+declare module 'fastify' {
+    interface FastifyRequest {
+        requestId: string;
+        traceId?: string;
+        spanId?: string;
+    }
+}
+/**
+ * Assigns each request an id (the incoming `x-request-id`, or a random UUID),
+ * attaches it and the active trace and span ids to the raw request, and echoes
+ * `x-request-id` and `x-trace-id` on the response. Applied to every route by
+ * `PlatformHostCoreModule.forRoot()` (packaged by #867).
+ *
+ * @stability experimental
+ */
+export declare class RequestIdMiddleware implements NestMiddleware {
+    /**
+     * NestJS middleware with Fastify receives raw Node.js objects.
+     *
+     * @param req - the raw request.
+     * @param res - the raw response.
+     * @param next - continues the chain.
+     */
+    use(req: FastifyRequest['raw'] & {
+        requestId?: string;
+        traceId?: string;
+        spanId?: string;
+    }, res: ServerResponse, next: () => void): void;
+}
+//# sourceMappingURL=request-id.middleware.d.ts.map

package/dist/host/http/request-id.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-id.middleware.d.ts","sourceRoot":"","sources":["../../../src/host/http/request-id.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIhD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;CACF;AAED;;;;;;;GAOG;AACH,qBACa,mBAAoB,YAAW,cAAc;IACxD;;;;;;OAMG;IACH,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,IAAI;CAwBlI"}